{
  "bomFormat": "CycloneDX",
  "specVersion": "1.4",
  "serialNumber": "urn:uuid:39e4f339-0285-459d-817c-4d960d4df536",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "vendor": "OWASP Foundation",
        "name": "CycloneDX Maven plugin",
        "version": "2.9.1",
        "hashes": [
          {
            "alg": "MD5",
            "content": "9c7a565cf28cce58557d0c621c5ea4b1"
          },
          {
            "alg": "SHA-1",
            "content": "be882d5a22050bfa9d19090b1420c188617d0e1c"
          },
          {
            "alg": "SHA-256",
            "content": "698e0f37184a5b28c245c4065fd036dfce253b52f82fbb7113d81d36326cc249"
          },
          {
            "alg": "SHA-512",
            "content": "c0f0b11026858166f872a2eb54719492e5cecaa0bc9cd6b30b3ecb4a174eed220f4a1b5829d18d6734128e778d3cb3db7ffed177c92866133129cb29081814a0"
          },
          {
            "alg": "SHA-384",
            "content": "d80964707dfe5caca8c70521d5066f57589304c0a657e6fbc7c0614ea0fc7b3b3dbe7778361eee0f54ba111e9cb0ffcb"
          },
          {
            "alg": "SHA3-384",
            "content": "80bc3a275d9514bc457461ff52a72add8c7ecbbc01d8912efce57139016c544ee776981851be0a58fa977ab4221f703f"
          },
          {
            "alg": "SHA3-256",
            "content": "142317d6f245390f4fd2d0c100b16281b8dfc5c0c2cff86943bdcc97039cb699"
          },
          {
            "alg": "SHA3-512",
            "content": "af0fb9137c90b65d1a07f72e4d51ae509956cdb8800f35c961b037cdda1fe4a14ce3b496cef71ba85f1621affcfe29cd42704ae4191ff0b090a9602087c8997b"
          }
        ]
      }
    ],
    "component": {
      "type": "application",
      "bom-ref": "pkg:maven/org.dependencytrack/apiserver@5.0.0-rc.2?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "apiserver",
      "version": "5.0.0-rc.2",
      "description": "The Dependency-Track API Server",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/apiserver@5.0.0-rc.2?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/apiserver/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/apiserver",
          "type": "vcs"
        }
      ]
    }
  },
  "components": [
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/api@5.0.0-rc.2?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "api",
      "version": "5.0.0-rc.2",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "e17f0d3ef8eed54e77a23099e282470e"
        },
        {
          "alg": "SHA-1",
          "content": "d6018026c7630033ac2cefb3534daae4c222cef7"
        },
        {
          "alg": "SHA-256",
          "content": "19225e66ca1997dc195c15be88da98261944cbaafba13432d474579af06d194c"
        },
        {
          "alg": "SHA-512",
          "content": "20805425bda3b851291af81c4bf65b7c504a7424d62b31d4e5066ea2e5d29c6619c0a0530e95cb39893bbbac07d83b506238c7edf91cbeda5c44ea505cfee237"
        },
        {
          "alg": "SHA-384",
          "content": "6acd9aedc9db4d1088dc655ec4e46b2f9b132402bc3a854efa95eeec8a177e1fb85e9a018cf9162284928687d8503421"
        },
        {
          "alg": "SHA3-384",
          "content": "0cd686542d31a4e7fe955ef94ec1d708b2584caefeab559438690a174ad7ded0c594621db70728d13f96e2fc6eed966b"
        },
        {
          "alg": "SHA3-256",
          "content": "e85e9e62d079a657c449701a0c5108350bbb1512c530d728fe81ebd9c4da5881"
        },
        {
          "alg": "SHA3-512",
          "content": "f65ce330501d28c14cb516029048ac3cf4a09e81dd632c7474da631655d746e3b77fe14d05f57736ca32f8e5613da6b347e7861078fe0113b4bfd99c1ef9ac5c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/api@5.0.0-rc.2?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/api/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/cache-api@5.0.0-rc.2?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "cache-api",
      "version": "5.0.0-rc.2",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "de6e408a482c3fc8aa294429b2790b09"
        },
        {
          "alg": "SHA-1",
          "content": "0da4b2d8fcf0bb61d9cfa4649760694f0e16d792"
        },
        {
          "alg": "SHA-256",
          "content": "17fa315993e91e2e5c017b2ea4c0a076973e3972ebf38c14dd9223596be0b454"
        },
        {
          "alg": "SHA-512",
          "content": "727fd176801acb69f847cb287d96d0f95ec92e6763603c5a9c7146501c5b8b51620e84516ecc73b9108e03ad7cf76a49f701f17cbe9a62c9e5547961875119d8"
        },
        {
          "alg": "SHA-384",
          "content": "14426d4e470742cf36cfe78e7e0fb5e4495c8c69f84514faf0a4bb4827c68e9cbd27e035b486b5a3a169db35c2f9399b"
        },
        {
          "alg": "SHA3-384",
          "content": "53e4d38c0a938990fda9802aef3966fef8b6317affb28502795ddbd45aa1c784702570da71066dd60e073c55bbf23f05"
        },
        {
          "alg": "SHA3-256",
          "content": "b3afbd7334848307c68e8be5895c22818c05dd600e5e03fe900bc73eb1cfcbfc"
        },
        {
          "alg": "SHA3-512",
          "content": "229274b4a4d75a33ba89750ae4c179c9d25923254635489ccb797b8059a13b165baf6b8b07e79af0c8fb114383a53cdf99cb1f2463d5e43014b4d8964dc8d50a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/cache-api@5.0.0-rc.2?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/cache-parent/cache-api/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/cache-parent/cache-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
      "group": "org.jspecify",
      "name": "jspecify",
      "version": "1.0.0",
      "description": "An artifact of well-named and well-specified annotations to power static analysis checks",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "9133aba420d0ca3b001dbb6ae9992cf6"
        },
        {
          "alg": "SHA-1",
          "content": "7425a601c1c7ec76645a78d22b8c6a627edee507"
        },
        {
          "alg": "SHA-256",
          "content": "1fad6e6be7557781e4d33729d49ae1cdc8fdda6fe477bb0cc68ce351eafdfbab"
        },
        {
          "alg": "SHA-512",
          "content": "efded31ef5b342f09422935076e599789076431e93a746685c0607e7de5592719ba6aacde0be670b3f064d1e85630d58d5bce6b34aed2a288fdb34f745efb7bc"
        },
        {
          "alg": "SHA-384",
          "content": "814f860e5a44ead6c457676841eef471a8b87be31b84c60a8a4477a18a9cbcb6e3c2ae700969d5c5e52309d961e0537a"
        },
        {
          "alg": "SHA3-384",
          "content": "c8844e5b71e5ecfbb7366097ce34af2f5863d86d5ccc3f9ec384d8ade4b60ccc8124c7fc88664f1afd2b0962fc8775bf"
        },
        {
          "alg": "SHA3-256",
          "content": "4b4f08ad7606a3ac62997779484919a302267b26d26ee19125f8a7eea60e8a71"
        },
        {
          "alg": "SHA3-512",
          "content": "65c6845ebae981cb81b61107707ced39f5b377dae970b47606ef482aaf10e3729def0da40d9377c43abbfb483a5ceae039b0d51c129c50a6d36ad351a5d6b01e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
      "externalReferences": [
        {
          "url": "http://jspecify.org/",
          "type": "website"
        },
        {
          "url": "https://github.com/jspecify/jspecify/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.eclipse.microprofile.config/microprofile-config-api@3.1.1?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.eclipse.microprofile.config",
      "name": "microprofile-config-api",
      "version": "3.1.1",
      "description": "MicroProfile Config :: API",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "22af9d6a9821440e2f3c5d8831816cea"
        },
        {
          "alg": "SHA-1",
          "content": "448885d7505256a6b21c578f5867c6a6f5706c32"
        },
        {
          "alg": "SHA-256",
          "content": "0d4eaa7e17730e153b1e0613104a989af7d7a0d4ba4d19c84c71862bff993773"
        },
        {
          "alg": "SHA-512",
          "content": "a3c70968b9723cfc13bcfa602fd7e56afdb2da684f865c546488cb79b050c9c3fdbe18138de561b6fcb308e3b8762cd8fe2bc53f3b22c29b0ee7faa8715bd0b6"
        },
        {
          "alg": "SHA-384",
          "content": "082cf193b5f1d2a9a477348bb94e43cf9c54f900791820240ae5496aacce205039866e95b7650eee38755f69dd823979"
        },
        {
          "alg": "SHA3-384",
          "content": "555999b1fc72bcf324b818e0ab1c83b982541de4dfbd313552069ced8367111de1c8665615d3a701a5d0478fa5442de2"
        },
        {
          "alg": "SHA3-256",
          "content": "2a1cbb68a81065b657699fc4ff7caedc30d3b55a3c0901057bb9084f24eff2db"
        },
        {
          "alg": "SHA3-512",
          "content": "c5f590d1c46457e8288a45b18494f5d7601a8de88755811b630b0ed5088c5ff06b1ea87318a2c1184218ec8c4391dc5288b825f1a949c1b1003c739c390694a9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.eclipse.microprofile.config/microprofile-config-api@3.1.1?type=jar",
      "externalReferences": [
        {
          "url": "https://microprofile.io/project/eclipse/microprofile-config/microprofile-config-api",
          "type": "website"
        },
        {
          "url": "https://central.sonatype.org/publish/publish-maven/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse/microprofile-config/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/eclipse/microprofile-config/microprofile-config-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/cache-provider-database@5.0.0-rc.2?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "cache-provider-database",
      "version": "5.0.0-rc.2",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "5f1f60af7514eaa511a9cedcdd696e13"
        },
        {
          "alg": "SHA-1",
          "content": "c1da96f74184881e36725701eef71c2bea31eb95"
        },
        {
          "alg": "SHA-256",
          "content": "d64f5b2fd51d7ea0a87b7276b237b3148d3f0ec0edea1f05fdbcd1eb9756e6f2"
        },
        {
          "alg": "SHA-512",
          "content": "8670b213c2f61f8153aa1c19859867c8b8417c8918b0dee65200b61aa8dadc9d287b1b3b4e3a16b8402ab8edfa667cb7d0c3caa1038b49c154cffdec4625e4d8"
        },
        {
          "alg": "SHA-384",
          "content": "b3727054be7b1bf6aa3426a5ae8fd563c2e8a62ba238491692556bb579d3060da44bbdcc74b9b8231f2d4c45cc9fbf18"
        },
        {
          "alg": "SHA3-384",
          "content": "32f1d3d526c68255132fd824801d028bee143ef90ee7f017490ebd6bfc29f189abf927dac85cf2275e1fd4d601122145"
        },
        {
          "alg": "SHA3-256",
          "content": "2c31e71860de3fd0ff1fe6d409fb54c4903c486b25987b670991ec4fff7fa6d6"
        },
        {
          "alg": "SHA3-512",
          "content": "be6411db3df0ecc4a2e588d6f67fc146988ad588fd54d6a3056d190ae8b707eed45d72bbbbddd1a0a9f34c21afe53cd952288cda781591f55b06b18ee27f4bf6"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/cache-provider-database@5.0.0-rc.2?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/cache-parent/cache-provider-database/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/cache-parent/cache-provider-database",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/common-datasource@5.0.0-rc.2?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "common-datasource",
      "version": "5.0.0-rc.2",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "877034bdf18b49a61ccbea7c6a80976a"
        },
        {
          "alg": "SHA-1",
          "content": "db013ac1072c16f650e59308c0296186d2344f75"
        },
        {
          "alg": "SHA-256",
          "content": "d3c0f03cba98f9d47fc77d6272827421a4f55a783ba132553ea783159f1e8f7f"
        },
        {
          "alg": "SHA-512",
          "content": "50ce58d583b16090c257124b4ba09ad938cb6832fe387e619df6b888a64194c3df2d0a068f3aa9951e65213c0d4c43fd7b32c685d10e76f8897a6473099962b6"
        },
        {
          "alg": "SHA-384",
          "content": "0b2027895eab1ba4d8986f3b03f4702244407998dd5fa57135543c28ed874bc68ea565657e5761f84b5730a6ef543331"
        },
        {
          "alg": "SHA3-384",
          "content": "3e30115afc111d8dbb6ed916b750627ec3b13e9203638a9365c25ff035bd2b5a480032ec1c9edee322ee5f9be66d93eb"
        },
        {
          "alg": "SHA3-256",
          "content": "c1f97effe4652136c66c97ac078871a8c356716e2dd9eae46fee46c7260774c8"
        },
        {
          "alg": "SHA3-512",
          "content": "8e07b6da989e04be0a7bcf5cfb9778e6903d1e449a754066e608728522c85b1abd1688bad8bf8381867ce236d3a58b3e7a039faa1c831062285993f85cf841ad"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/common-datasource@5.0.0-rc.2?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/common-parent/common-datasource/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/common-parent/common-datasource",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/common-health@5.0.0-rc.2?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "common-health",
      "version": "5.0.0-rc.2",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "048d0f4b9ac3047cb502adc999af6e75"
        },
        {
          "alg": "SHA-1",
          "content": "254aaca6091b47c30517f1608a4d967c59f559ef"
        },
        {
          "alg": "SHA-256",
          "content": "b635538152c56b96f98f7096069944e928f93509b5713c919bec3f3a9a1da6f1"
        },
        {
          "alg": "SHA-512",
          "content": "f7daf08a3e98628f239d3a66749d1b40a979d5af8a3fad87a36351e17de9e5bbe04113ec72f86a5fb6c0ef6c81389e9b05d2763d432207a5123ade5b25fc1538"
        },
        {
          "alg": "SHA-384",
          "content": "5056d8e377a5189d6f212b018e4667cffcabb9ee097299673f66e706486fab9e21a4cf8e126c67c203130db60c30bfb2"
        },
        {
          "alg": "SHA3-384",
          "content": "1df1ad3f1f1869df8b9945b93e2bb8bd833bd74faf3a68f10a55ab46fa4db1875b2edb782d905854b282536c3c0e81db"
        },
        {
          "alg": "SHA3-256",
          "content": "ecb6d1e0191d10dd3ad5d1c4f0c6427c8c810c43ff1c3cd5d47221a163346c9f"
        },
        {
          "alg": "SHA3-512",
          "content": "18e3fb9ad69da4d62c6e05d46d8d69c5753ac9f5d2a47388989127c4b6e0e1f92ec87d93f4ec26ba6015b767518f3d0c4aaf20d4822a5c0894ffe09803bd0439"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/common-health@5.0.0-rc.2?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/common-parent/common-health/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/common-parent/common-health",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.smallrye.config/smallrye-config-core@3.17.2?type=jar",
      "group": "io.smallrye.config",
      "name": "smallrye-config-core",
      "version": "3.17.2",
      "description": "SmallRye Parent POM",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "8dfe0e9e97017ff650e6a56bc77e8185"
        },
        {
          "alg": "SHA-1",
          "content": "5d229922e431122704af3248720b5efc37d37747"
        },
        {
          "alg": "SHA-256",
          "content": "092050099d3144bcc64b33165b3c2b7d25a519808d3c7618a6e1c1debcc0d832"
        },
        {
          "alg": "SHA-512",
          "content": "df4854aedb784e48e079dc3946a8553e0d3a6a6d5114eaf6e515907c1bc5ccbf0d3f8e64016791eb1cf60c7f6a18b01a07778e19eb5088a7cb1a72ce43793b53"
        },
        {
          "alg": "SHA-384",
          "content": "624bed2bba02a7fcd8f41d0e9ff634962ea4039f97753e0445a27f5adadbd3140a7340552258c76cbfb32fe4910b72c9"
        },
        {
          "alg": "SHA3-384",
          "content": "6d51de7f529195daabb370ba8cb7f56e0ec0a8e055c54c8256ae5bcfe1eac6e2a7b28a21fd537ce38a2815109c04b1ae"
        },
        {
          "alg": "SHA3-256",
          "content": "06806e0b49eba5371d38466309d246d1b3bce2121248c1f4222fbcac26f73635"
        },
        {
          "alg": "SHA3-512",
          "content": "38ee6abd59daa1c3427858b6858f434b2eae6301eb101071b3916b5ef7536e7a7510deed31ecbd123aa42f5110d2971a61f95970e248cedf7343434b1a1b0b18"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.smallrye.config/smallrye-config-core@3.17.2?type=jar",
      "externalReferences": [
        {
          "url": "https://smallrye.io",
          "type": "website"
        },
        {
          "url": "https://s01.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/smallrye/smallrye-config/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/smallrye/smallrye-config/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.smallrye.common/smallrye-common-annotation@2.17.1?type=jar",
      "group": "io.smallrye.common",
      "name": "smallrye-common-annotation",
      "version": "2.17.1",
      "description": "Common utilities for SmallRye",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "875eb9fb98e95dd0c0c233ae6ee700a8"
        },
        {
          "alg": "SHA-1",
          "content": "7942e2e5e819833c515c89841fa0f75436fa8f56"
        },
        {
          "alg": "SHA-256",
          "content": "72ef4e4072ad87250823207ec197a5d3111b3fa276fa19d12bf5583debba1bdb"
        },
        {
          "alg": "SHA-512",
          "content": "50e4e5f3acf1bc7286460f7f741a32c6154a4e8405d88c5e866c3e7cac27db83321773262b900d04096a1d10c81498d12bc653050b6598a63d6b3aa97fa4cbc7"
        },
        {
          "alg": "SHA-384",
          "content": "94bc939b1080216d3d53e2710ab60085fd62bcdb482e865dadb80cd602040a56d5ced931a912aac3afda736d0fa3dddf"
        },
        {
          "alg": "SHA3-384",
          "content": "4d9c8aff0b4d8a1e27b5535c82117b3c40ba1b7e846685dd811cd04898da3800681cd491f4bbb6aea8cdd2a2ff7da319"
        },
        {
          "alg": "SHA3-256",
          "content": "6d533f30919c005c4755bcef101604ac766ce92a9b278322a9b6aee108e616d0"
        },
        {
          "alg": "SHA3-512",
          "content": "5b619c5ae43a8444b1fe2d81ee3be42c9f49826ad647d7c881ff7810d663d46d2b9dca12507451356496974d91f1f4986a860b5f4b00614c7b9a9974c8434973"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.smallrye.common/smallrye-common-annotation@2.17.1?type=jar",
      "externalReferences": [
        {
          "url": "http://smallrye.io",
          "type": "website"
        },
        {
          "url": "https://s01.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/smallrye/smallrye-common/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/smallrye/smallrye-common/smallrye-common-annotation/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.smallrye.common/smallrye-common-expression@2.17.1?type=jar",
      "group": "io.smallrye.common",
      "name": "smallrye-common-expression",
      "version": "2.17.1",
      "description": "Common utilities for SmallRye",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "d621994be30bd133132e15ccf7b000a5"
        },
        {
          "alg": "SHA-1",
          "content": "61dd85a3dfae09f1d84f7b8d2cd51d0d3187cd5f"
        },
        {
          "alg": "SHA-256",
          "content": "0f6949d555b2dae374f8e03be9b09a55baaa825c5445f7210cdc837f4546f4e2"
        },
        {
          "alg": "SHA-512",
          "content": "8181f6a146e2d8df72e7f3f81bf701e3fe701a7d78d0807d1a7e97d1951e8984bc93a546ef075627824145bb928e8e3a07dd42d4335f548b22383449e2101b87"
        },
        {
          "alg": "SHA-384",
          "content": "72cb4b0b0026ee41656b9780214a0da0a584e11c1cb009018fd09b36670a612e2983381d93fb549b86c98ce0cc5b1a7e"
        },
        {
          "alg": "SHA3-384",
          "content": "449ce0b2a82d690fdc6929ce28b904083c0ffe8bababa61d62a549d1c467de4eecaa6a5763a560ac4fad4f582b49c84c"
        },
        {
          "alg": "SHA3-256",
          "content": "2f16c2272f9269f180ee45b838407afa5b7b43365dd025518e9fb35f83822673"
        },
        {
          "alg": "SHA3-512",
          "content": "9eb0b8451608e00858eb5f0071fd0c8a1e90db8606527ba30d757b3091202f37702b6153622795ca6e6c2183684103da5cff56ad136f52d54e32b4a2694e0d77"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.smallrye.common/smallrye-common-expression@2.17.1?type=jar",
      "externalReferences": [
        {
          "url": "http://smallrye.io",
          "type": "website"
        },
        {
          "url": "https://s01.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/smallrye/smallrye-common/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/smallrye/smallrye-common/smallrye-common-expression/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.smallrye.common/smallrye-common-function@2.17.1?type=jar",
      "group": "io.smallrye.common",
      "name": "smallrye-common-function",
      "version": "2.17.1",
      "description": "Common utilities for SmallRye",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "7b185d69509de5bb659c55935a16e322"
        },
        {
          "alg": "SHA-1",
          "content": "f2f3667b71610bcd31b4731200ecee674b6cd23b"
        },
        {
          "alg": "SHA-256",
          "content": "7f5a0c6011250474514585857e24ef01678627733b6e4f1e1eb10207b87cf1ba"
        },
        {
          "alg": "SHA-512",
          "content": "1ea389fc4658ba21784dee8fc7384ed2598a424f5a35e8bb6d4b26c6d463aaaf86d4f30697fc5aab39be1aadf7653999b9e003b9b8a16c8437f2b44b44ff04f8"
        },
        {
          "alg": "SHA-384",
          "content": "ee6839112e25e280160886e22809f469997cd2767efa7b01296de1e65e832c8055da1f0c3165df213bddffa2e5ce9e85"
        },
        {
          "alg": "SHA3-384",
          "content": "d9d667ffed68b0b261a7f1ebfc3a587bce570361df2c743ad480c8cc2dd0e424cedd2e910c0c8c910d13808a90026219"
        },
        {
          "alg": "SHA3-256",
          "content": "d7b18af3a566d3c466e88d7e1a97a55a3b7fa9ce671d5021def4abbf0db59fcb"
        },
        {
          "alg": "SHA3-512",
          "content": "ae5c16757650cf7f69c4c30b30ef56bc5d8bc6c4c88dc83e04f8821a18c07153affd13f13cdae9cccb5dcdd71e8085f49991fe6007892e03b45cf96c94dcf5e7"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.smallrye.common/smallrye-common-function@2.17.1?type=jar",
      "externalReferences": [
        {
          "url": "http://smallrye.io",
          "type": "website"
        },
        {
          "url": "https://s01.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/smallrye/smallrye-common/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/smallrye/smallrye-common/smallrye-common-function/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.smallrye.common/smallrye-common-constraint@2.17.1?type=jar",
      "group": "io.smallrye.common",
      "name": "smallrye-common-constraint",
      "version": "2.17.1",
      "description": "Common utilities for SmallRye",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "fc8967e4b3b79bd8eb7d578cfa9c6995"
        },
        {
          "alg": "SHA-1",
          "content": "c4dee9305ffae0adfea1b10fc4264b7423d57153"
        },
        {
          "alg": "SHA-256",
          "content": "b718529ced5882249ffeefa693710fa54178d1c7e7bcd938b4c0e75812fa2461"
        },
        {
          "alg": "SHA-512",
          "content": "f8b6c2d9f3aa963a4f294f9205b69eb70353157533bbf1a0a776c0d9b90678ea0c18e65eb6aa239ee1678e07317b35a174dbecf26bfcd8dda3ec2c364ae1fabf"
        },
        {
          "alg": "SHA-384",
          "content": "b24caca22febb9130e857a34105c1935592ed1f0053e04a6be942d330a01c953451b862d169ab0a7d3090b3ae69fea01"
        },
        {
          "alg": "SHA3-384",
          "content": "5ccc1b5329f1e32376fd87ad09e5d93f7ac69dac2e8775f194b2602efee8e523892360f3f8def3cbd9e857e718057be5"
        },
        {
          "alg": "SHA3-256",
          "content": "293a456739ea0a3d85f1948316e895b5f76c67cc0e94c0a654f585fd62fc0369"
        },
        {
          "alg": "SHA3-512",
          "content": "a63388b9fb34beb3f922a087546d7104dfe68d7231ebd030a90ad30fd28a45218eaed6624cd0b0d547e6ee4c15aa3520807e996ebef70761ee3f6605ec8e30eb"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.smallrye.common/smallrye-common-constraint@2.17.1?type=jar",
      "externalReferences": [
        {
          "url": "http://smallrye.io",
          "type": "website"
        },
        {
          "url": "https://s01.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/smallrye/smallrye-common/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/smallrye/smallrye-common/smallrye-common-constraint/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.smallrye.common/smallrye-common-classloader@2.17.1?type=jar",
      "group": "io.smallrye.common",
      "name": "smallrye-common-classloader",
      "version": "2.17.1",
      "description": "Common utilities for SmallRye",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "2c65ea2786ac0905fbcc2a08e2a4936a"
        },
        {
          "alg": "SHA-1",
          "content": "2a01bb2271a304666fe32e5cfb66288b1248cc30"
        },
        {
          "alg": "SHA-256",
          "content": "76e5fb5cb65ac0711c03575b0f6a0b42f9717b19fdc5df1f0feb159adf8cf04c"
        },
        {
          "alg": "SHA-512",
          "content": "c1e47b7f34c33e06ecef7addbf46ef1a32be41c88020d5242b36c576fe83b8bd535cfd2c4d75b69b3d466a328867d84f732d2f52223189f47baf59905ccb03b8"
        },
        {
          "alg": "SHA-384",
          "content": "0a7074d8e9cd4f157c4f14284ece794aa9784d9e4468519bbf8632f76c05d85e784660fefbe4010f6de8ff8782ec489c"
        },
        {
          "alg": "SHA3-384",
          "content": "cb525639a17bf4c57d77de0f6e3a1e51a6a09d32ca56e59f3e759c9040c2a13533f2d8560b4e7ef428c0e7ee4bbbffdb"
        },
        {
          "alg": "SHA3-256",
          "content": "571e5e2fbfb43df62292c1ef3ff36eb94c69c2a267167f04dca668917e6434ad"
        },
        {
          "alg": "SHA3-512",
          "content": "c5d58d1de617e20dc424b3e3f7c5b67889dc433b16568463871ab9a8c9013c93086f1683cf94acbfb90f5421dfa0050b4180703d3b882f993c441f3659c6edcc"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.smallrye.common/smallrye-common-classloader@2.17.1?type=jar",
      "externalReferences": [
        {
          "url": "http://smallrye.io",
          "type": "website"
        },
        {
          "url": "https://s01.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/smallrye/smallrye-common/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/smallrye/smallrye-common/smallrye-common-classloader/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.ow2.asm/asm@9.9.1?type=jar",
      "publisher": "OW2",
      "group": "org.ow2.asm",
      "name": "asm",
      "version": "9.9.1",
      "description": "ASM, a very small and fast Java bytecode manipulation framework",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "1888ad1f49038441bb2d12aa6dffe396"
        },
        {
          "alg": "SHA-1",
          "content": "2ceea6ab43bcae1979b2a6d85fc0ca429877e5ab"
        },
        {
          "alg": "SHA-256",
          "content": "6f3828a215c920059a5efa2fb55c233d6c54ec5cadca99ce1b1bdd10077c7ddd"
        },
        {
          "alg": "SHA-512",
          "content": "bb43eaca8777c7b2b4bce9fc19f9be5742a736a23415e271643c3e14d3d82f565f6de0e29ebac570ce66b3921ece1ebd4de06abeb633ae28c17891de56973807"
        },
        {
          "alg": "SHA-384",
          "content": "9448b1eeafccfe061a7533a633b3cf7445312f916d372a3b6bbae8747267b6d6a9387fd100aec22bc22160007a819fa9"
        },
        {
          "alg": "SHA3-384",
          "content": "b684b8c0bc4d7cb21245b2d9e20e103460686e80b16d2b4ea5452c82948ba74fc2bcb093f4ab1d6b010448da5dc12457"
        },
        {
          "alg": "SHA3-256",
          "content": "f59abda303b133b832ad3d81076241d924dce6304dce5a1a60f8d816797dbbc2"
        },
        {
          "alg": "SHA3-512",
          "content": "d42ab2d7dfb1e11b896a1aad31d945639b5aa85ac9b5c2e33fc2e9174c4333eaa018217b58147930fb8017c7f569a6390c242c0e500f5b70600a2100bd08035b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/org.ow2.asm/asm@9.9.1?type=jar",
      "externalReferences": [
        {
          "url": "http://asm.ow2.io/",
          "type": "website"
        },
        {
          "url": "https://repository.ow2.org/nexus/service/local/staging/deploy/maven2",
          "type": "distribution"
        },
        {
          "url": "https://gitlab.ow2.org/asm/asm/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://mail.ow2.org/wws/arc/asm/",
          "type": "mailing-list"
        },
        {
          "url": "https://gitlab.ow2.org/asm/asm/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.smallrye.config/smallrye-config-common@3.17.2?type=jar",
      "group": "io.smallrye.config",
      "name": "smallrye-config-common",
      "version": "3.17.2",
      "description": "SmallRye Parent POM",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "1e8c87c322bd69861c264a92ac5df535"
        },
        {
          "alg": "SHA-1",
          "content": "70173822b50f8434eb55721be902893bab07569d"
        },
        {
          "alg": "SHA-256",
          "content": "ebbb7b03044580440f63788cb743664749e7169b8eb382b3cfc44a4fb328bb85"
        },
        {
          "alg": "SHA-512",
          "content": "de913a6754e38e35d2f8fddabdd9837f93077fb69d9b8ab27e959d9dc415c6524c14e0cb7e1b99474cd918d3a5db3a84198fb59c3260f60921859454ac8c4d76"
        },
        {
          "alg": "SHA-384",
          "content": "22463a45f96aafab96471b9362029b5c7709de330f3e7b3cdbb7b6e8666f0c24c7412ebb6a693869af30eca069b1a767"
        },
        {
          "alg": "SHA3-384",
          "content": "a9d70c6c8e5aebc235f27189a759a42a5bfba487a62cb8e730f03f65c2401b38b551770869388085fed59b5a31db3911"
        },
        {
          "alg": "SHA3-256",
          "content": "056677973870ce3071d07aacedb98fb7462e9b7b93cd43ec061802754ea3c158"
        },
        {
          "alg": "SHA3-512",
          "content": "a5ca32c28b436d51acfa4931abdd4272661c54484bbc49e8595517b328fefbcc227c9ce0d3969f2af4cd8d95d202d8d68a495f202ae3cab8b4c95294667858b3"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.smallrye.config/smallrye-config-common@3.17.2?type=jar",
      "externalReferences": [
        {
          "url": "https://smallrye.io",
          "type": "website"
        },
        {
          "url": "https://s01.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/smallrye/smallrye-config/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/smallrye/smallrye-config/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.micrometer/micrometer-core@1.16.5?type=jar",
      "group": "io.micrometer",
      "name": "micrometer-core",
      "version": "1.16.5",
      "description": "Core module of Micrometer containing instrumentation API and implementation",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "44ff087270426e6bca299885ea999367"
        },
        {
          "alg": "SHA-1",
          "content": "eed1add84bba09a75ac35733cb0ed6bf5a1d3cb7"
        },
        {
          "alg": "SHA-256",
          "content": "2908222d2eed9411d0d2a7a3725026cd6d8a8f7a3feab7009746009810248164"
        },
        {
          "alg": "SHA-512",
          "content": "a90744eb6d192be5d40999f52ad92cfc59709059d3f2399c88fec584eb9f1dc101c0590f970dd5242b5e818c7e304b9f8d9ec1090a934c5457cdf85409ae5975"
        },
        {
          "alg": "SHA-384",
          "content": "c2ad8beb07285a5694b11a350e362ad68b483b1a7935beaf5b9a0046e346b0045985461925c32e6db467a6b393321b5e"
        },
        {
          "alg": "SHA3-384",
          "content": "c8675bbfaf5ccde4854664eac4db5dd352c6ee8bea166344d071abc264d0f1600da8a57d0722604a72c482e07524bd52"
        },
        {
          "alg": "SHA3-256",
          "content": "f6600f78f4a789cc7b6beae805cc3e4024b7a322bd60f23741f1ecf82a6aca2c"
        },
        {
          "alg": "SHA3-512",
          "content": "fe6201e41677d9e1d4a08b2d8311e1bc8b33fd8f3ea10dfbf38297c3d30807b15da546a2e8fc878dc43cd91b328dae14bb3d52b3630f475bb26204538740b833"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.micrometer/micrometer-core@1.16.5?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/micrometer-metrics/micrometer",
          "type": "website"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.micrometer/micrometer-commons@1.16.5?type=jar",
      "group": "io.micrometer",
      "name": "micrometer-commons",
      "version": "1.16.5",
      "description": "Module containing common code",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "19fa8edce75d29d550c4ea726506d7e2"
        },
        {
          "alg": "SHA-1",
          "content": "f8c25a4e35d5049d41d8446b111b9891ae407881"
        },
        {
          "alg": "SHA-256",
          "content": "b0cc8c620453ef71e22d6c4ec5c496cc112f964b4e826b9f87182fc97512c8f9"
        },
        {
          "alg": "SHA-512",
          "content": "b0947e1514ef837efccfeb8ed9303d79a93e2959e297046ffa4dd395f5a8788ebf62e2d62bc3c7b2e9da843d80affcc2879e9421d2eeb72591930a5ff4ebc678"
        },
        {
          "alg": "SHA-384",
          "content": "9084f46234725f49bfaa6a7d1ebc964775726551bbf15a0e6a1afccdae213b5d265de8128dec1691795cfa3eccecec38"
        },
        {
          "alg": "SHA3-384",
          "content": "bea73a6c9ec78115e897ccacd52d271e12cba12db5efda8ea40152c603a66a27a136290f4e0d5917ebfc5b9a69754aaf"
        },
        {
          "alg": "SHA3-256",
          "content": "cdccf0e198f5b2e2fd8aae1b967eb42bfe2a3c51c3db717354a07b0974b8fb0c"
        },
        {
          "alg": "SHA3-512",
          "content": "695c2b337a85ba7d48adb21b22cd3b55ca31c6f7224f24495e7be94dfb91fb739c005f2fcc767839f5ab2c86ae5e2ebd909acaf6a996577d797e38f4f1e791a2"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.micrometer/micrometer-commons@1.16.5?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/micrometer-metrics/micrometer",
          "type": "website"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.hdrhistogram/HdrHistogram@2.2.2?type=jar",
      "group": "org.hdrhistogram",
      "name": "HdrHistogram",
      "version": "2.2.2",
      "description": "HdrHistogram supports the recording and analyzing sampled data value counts across a configurable integer value range with configurable value precision within the range. Value precision is expressed as the number of significant digits in the value recording, and provides control over value quantization behavior across the value range and the subsequent value resolution at any given level.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "41f807bf0c681d6f692c408a6e217eaf"
        },
        {
          "alg": "SHA-1",
          "content": "7959933ebcc0f05b2eaa5af0a0c8689fa257b15c"
        },
        {
          "alg": "SHA-256",
          "content": "22d1d4316c4ec13a68b559e98c8256d69071593731da96136640f864fa14fad8"
        },
        {
          "alg": "SHA-512",
          "content": "fb28f1bc3a3d4430474ea87a0833d56dc3d1303c98918122d93c630ebdb0d1323bbf8feb9ffdc7dddd1908105858e6959bdfdd3889ca5803cecde93a974ab6b7"
        },
        {
          "alg": "SHA-384",
          "content": "fa19cf4674dee37cb5114689cccafeadbb7989e17768b814cb431806a0f69c7b37093b6e100430bd571a45d87a319758"
        },
        {
          "alg": "SHA3-384",
          "content": "fc0a9e2e5284bc2f911c5e2fdf9eec6cfa1973b6cfb1362822580d6c8768c73ebd1c8056b6e4e5302940f6b5ec4c74b7"
        },
        {
          "alg": "SHA3-256",
          "content": "79af553410abf4d3bbfa64374dfdf8777ce49d28b4c67a615e6d4a78e97d0498"
        },
        {
          "alg": "SHA3-512",
          "content": "5b2b1795ed1ea55b5a3566bb1f4170a4367b7893256809fdb428df9405857c8454196badf3681abaf536260ed6f293c096a3f3c9d72f0f04830e8fe71d49410a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "CC0-1.0"
          }
        },
        {
          "license": {
            "id": "BSD-2-Clause",
            "url": "https://opensource.org/licenses/BSD-2-Clause"
          }
        }
      ],
      "purl": "pkg:maven/org.hdrhistogram/HdrHistogram@2.2.2?type=jar",
      "externalReferences": [
        {
          "url": "http://hdrhistogram.github.io/HdrHistogram/",
          "type": "website"
        },
        {
          "url": "https://github.com/HdrHistogram/HdrHistogram/issues",
          "type": "issue-tracker"
        },
        {
          "url": "scm:git:git://github.com/HdrHistogram/HdrHistogram.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.latencyutils/LatencyUtils@2.0.3?type=jar",
      "group": "org.latencyutils",
      "name": "LatencyUtils",
      "version": "2.0.3",
      "description": "LatencyUtils is a package that provides latency recording and reporting utilities.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "2ad12e1ef7614cecfb0483fa9ac6da73"
        },
        {
          "alg": "SHA-1",
          "content": "769c0b82cb2421c8256300e907298a9410a2a3d3"
        },
        {
          "alg": "SHA-256",
          "content": "a32a9ffa06b2f4e01c5360f8f9df7bc5d9454a5d373cd8f361347fa5a57165ec"
        },
        {
          "alg": "SHA-512",
          "content": "bb81a42498c65389366205f4e07cee336920e2f05cc0daae213f2784b1d0ce9a908b038daec20478f23eb00b2bf704f96c5b00f63c99615193ab2a3cc4a9f890"
        },
        {
          "alg": "SHA-384",
          "content": "16ca4640dc9d848e6c6d15441897e1b5a9f27f34207b0bb456dd54d8f267b73b348092e548e78634144de44ba3515205"
        },
        {
          "alg": "SHA3-384",
          "content": "406c2b5c6f64b0c090568e479b5e6136a04a4e77f8eea65d32b4e2b01deebcdf6a0a851240cdb740c25b5a5e61e6c179"
        },
        {
          "alg": "SHA3-256",
          "content": "50ae828358301033542fd7c412e86ee318d5451f89a182e2a679aaf18099d26d"
        },
        {
          "alg": "SHA3-512",
          "content": "456c337b9fb385579aae707409ed6a04d08e5fc87b1a46733dca617c22c625bf253dc4747e0cdbf5e7d8b48102d2938cb482b6b688a79aab645a7459c592258f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "CC0-1.0"
          }
        }
      ],
      "purl": "pkg:maven/org.latencyutils/LatencyUtils@2.0.3?type=jar",
      "externalReferences": [
        {
          "url": "http://latencyutils.github.io/LatencyUtils/",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/LatencyUtils/LatencyUtils/issues",
          "type": "issue-tracker"
        },
        {
          "url": "scm:git:git://github.com/LatencyUtils/LatencyUtils.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar",
      "publisher": "QOS.ch",
      "group": "org.slf4j",
      "name": "slf4j-api",
      "version": "2.0.18",
      "description": "The slf4j API",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "fe2837bd49bfb76657419002fed20ca9"
        },
        {
          "alg": "SHA-1",
          "content": "78a9e7a37cd6360e0b818e86341b24123d28d4df"
        },
        {
          "alg": "SHA-256",
          "content": "44508fd1576500688c790b190acdd16fec4f8c79a3e0b900afd70503cf055f55"
        },
        {
          "alg": "SHA-512",
          "content": "539288fa0c96cea750d11293dbed4c562630587aa7cd88bbf76ad04390d1c40636506da48faa6453090c7e9baa6b690b9fbded55a7e2b4a91547eeea011f971a"
        },
        {
          "alg": "SHA-384",
          "content": "917885c7812289f5178f68e3c421153d55abd7fe5cc9a071ffdc5de48b7afc79c352c667a20a3ad0f3b4660952932513"
        },
        {
          "alg": "SHA3-384",
          "content": "d6898eb5dd2e5caa2185c6cd2804735802b3848a3041b82ef7faa7904b3eaf5ac382d43a70a71e22b77a929e10ae2aaf"
        },
        {
          "alg": "SHA3-256",
          "content": "6bbc9103bec05ef3280dd895d8c6267ccf8b940df03c9f5145cfaa77f6e9a41a"
        },
        {
          "alg": "SHA3-512",
          "content": "e2913e96e4b1c94e7cb5c46828d1afe68c5a7248293d5c16aaa9ab462ee8e0ff97dd3d1155d2a64f66ccd9bc1ac0c83476cc886b675004b2f84aaaf50e2b2af2"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/license/mit/"
          }
        }
      ],
      "purl": "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar",
      "externalReferences": [
        {
          "url": "http://www.slf4j.org",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/qos-ch/slf4j/slf4j-parent/slf4j-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/common-init@5.0.0-rc.2?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "common-init",
      "version": "5.0.0-rc.2",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "e718b7078734a308abc956b7f81204ef"
        },
        {
          "alg": "SHA-1",
          "content": "6d2216e5e9422773a882c09e4dbb301490a57026"
        },
        {
          "alg": "SHA-256",
          "content": "1250669703027d0647aac3f02a63e20417c12fbf2ab358d838b4c7a18a1d3cc5"
        },
        {
          "alg": "SHA-512",
          "content": "4a95a34adb4f04473283bed17102a69d08240ec59e65298db1de8e5a97c9176b59fdc1b920d1283e31dcd34a0558800a1c4854e2b65ed49fd7a969818b21053e"
        },
        {
          "alg": "SHA-384",
          "content": "44dd5e6fae096fed80892128010c0dfe55f2f442215211ccf8c17e4a7453058d4133c95409b63c6d682894030fc2bef7"
        },
        {
          "alg": "SHA3-384",
          "content": "6e9228258aac10847530f7e3feb83f1967976fb88b3d9c612f25b9c825e397a876c71db9afeeb83c7692fb2969cc335f"
        },
        {
          "alg": "SHA3-256",
          "content": "3dbfcdb11f4419af3f4278e5be784aab8e2766b0b8ccf8d7280ac4530cb4744b"
        },
        {
          "alg": "SHA3-512",
          "content": "8921e87bd234d6f9d8b32813b504ae08c6aea53b0da8cc6b0a3570c940044a25da831141cff9420bec11e891e49e4eaf2174b0687d367287881dada694d6915c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/common-init@5.0.0-rc.2?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/common-parent/common-init/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/common-parent/common-init",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.eclipse.microprofile.health/microprofile-health-api@4.0.1?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.eclipse.microprofile.health",
      "name": "microprofile-health-api",
      "version": "4.0.1",
      "description": "MicroProfile Health :: API",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "1d023ee3b9b8545318fdeebe98d66d74"
        },
        {
          "alg": "SHA-1",
          "content": "395ea08f4f636696fb23b84a18ba81430cfebe7c"
        },
        {
          "alg": "SHA-256",
          "content": "b89ca4b6c4f7a044250d31c0673f6bc221e40fd669fc5871dbad5e5a0769ca47"
        },
        {
          "alg": "SHA-512",
          "content": "87ea9c7443bf0dbe0a3d38f3f7fd5287e24440f6285fcafdaade6312380fcce802bfe083646669207d11d36b660f05a6ef6e27ab03f3093905821d44024e5764"
        },
        {
          "alg": "SHA-384",
          "content": "4ddaceabea79f53c70fd17c6140453a19d4a9dfc1c3e8910449ce32ddef4b9023dbccbd6dbfbad49b50316389df25c8c"
        },
        {
          "alg": "SHA3-384",
          "content": "893eef36f7b7edf98be7835597d06c81055887f7a59ea70550274032a5b7ebb1822600a185d626db36d38160d0632e6f"
        },
        {
          "alg": "SHA3-256",
          "content": "94ea43765310e56d62888eafd32d4595c1e8d91a4183ad3455f51f1b52a6d2eb"
        },
        {
          "alg": "SHA3-512",
          "content": "79ba68099a777dbd5e596d9697358bc122c53cd52cb5ba5ce3a2be1086abb1f45c2f7289540f1693c1950efe6189ff8f57a91f1d53915be3fa5abbb22597d15a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.eclipse.microprofile.health/microprofile-health-api@4.0.1?type=jar",
      "externalReferences": [
        {
          "url": "https://microprofile.io/project/eclipse/microprofile-health/microprofile-health-api",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse/microprofile-health/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/eclipse/microprofile-health/microprofile-health-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/common-pagination@5.0.0-rc.2?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "common-pagination",
      "version": "5.0.0-rc.2",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "3860d34156e3955c1a903ab7ddaaabdd"
        },
        {
          "alg": "SHA-1",
          "content": "07e1071064162f3301f9b9439e2a25af8f1477ed"
        },
        {
          "alg": "SHA-256",
          "content": "4c762ed8b5d3d786a1dba34ad8b7506a5a18b32dd698cc8a13ada172d6d84b0b"
        },
        {
          "alg": "SHA-512",
          "content": "2c21997bfd2372567cdd4e40eb69ee21fae416b1dfb74254a47091add092ee2f69174fabd055f1c04e5d6cd20c93b58a4bf9c384cc39c26367185ae88e2e5fb9"
        },
        {
          "alg": "SHA-384",
          "content": "e85c5341bf470b785dbc78d16e8c2c5d42bf2a3eaacc18141a19ef2602860e2ecf74652115f3bac4210b5847a6b8b001"
        },
        {
          "alg": "SHA3-384",
          "content": "9d5db92704e33816e6511e639eb121f671e5b52dc921583d01ae726937297774f4024c148c2c29e9a56c0176b50b6f6c"
        },
        {
          "alg": "SHA3-256",
          "content": "616b6ca016991e72e993da09a11f9740a402542fe02722cbde2cb960c9e405a5"
        },
        {
          "alg": "SHA3-512",
          "content": "40e317f5d1a66dd24279df3ffe528c1de3698ad6fae5a65c2b0cdb61a79a4b27e7f7e4f50b39340958bbcf1d7052ce521bd72e9f3e9aed4e532cb6f529e9106f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/common-pagination@5.0.0-rc.2?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/common-parent/common-pagination/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/common-parent/common-pagination",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-cbor@2.21.3?type=jar",
      "publisher": "FasterXML",
      "group": "com.fasterxml.jackson.dataformat",
      "name": "jackson-dataformat-cbor",
      "version": "2.21.3",
      "description": "Support for reading and writing Concise Binary Object Representation ([CBOR](https://www.rfc-editor.org/info/rfc7049) encoded data using Jackson abstractions (streaming API, data binding, tree model)",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "6bc762f2f1fca2bdf2a2c5fc7403a3cd"
        },
        {
          "alg": "SHA-1",
          "content": "418e133c66e74a1a8b4b1b50eb2560918064c040"
        },
        {
          "alg": "SHA-256",
          "content": "b2bd3a5cabc399d1b4ceaab39b5563f247b66ab5ec534f7fa5bd6dd5493a6e10"
        },
        {
          "alg": "SHA-512",
          "content": "d4220aa1077c45d8ddd11599ff393dc8fed8c7d18d6ab6e3e76fa813c2d6ecdf47c57101cefac8eab1af32a042dde4ddd063e3aac31617611d7ff3dc1934081d"
        },
        {
          "alg": "SHA-384",
          "content": "9029b218ff6899ebe7f737ec9946b24e9fd00044c47065ad8c6c71625cc87008ae667eb816be2845151eeba123454cdd"
        },
        {
          "alg": "SHA3-384",
          "content": "a3fcb307306d223ee8baa4a944be0fdc4a91a9e3e5cce93876666064c0cc926bc021dfdf4bfff39fb966c14d75722357"
        },
        {
          "alg": "SHA3-256",
          "content": "f5d4f678d62874e532fae35b4ed02efb94004a2793817b8115fd7f1c115ef644"
        },
        {
          "alg": "SHA3-512",
          "content": "08d8f65796cd2121d49b56dd5611ac7d98762b54ed51425ed4028888b0f66834909b18c72c1519664a6aef5be5971439d1fd1eeda8ffe4db86eb174f5c27ee99"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-cbor@2.21.3?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/FasterXML/jackson-dataformats-binary",
          "type": "website"
        },
        {
          "url": "https://central.sonatype.com/api/v1/publisher",
          "type": "distribution"
        },
        {
          "url": "https://github.com/FasterXML/jackson-dataformats-binary/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/FasterXML/jackson-dataformats-binary/jackson-dataformat-cbor",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/datanucleus-plugin@5.0.0-rc.2?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "datanucleus-plugin",
      "version": "5.0.0-rc.2",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "ad80b0f5af1dc66b755ceaafd8394c31"
        },
        {
          "alg": "SHA-1",
          "content": "cac7ebdbb3b6ae6daba96b3566443382415cee43"
        },
        {
          "alg": "SHA-256",
          "content": "954ffe3f464826f0ad9e3e8ce964e4b7bff64fd58dd64d2d751b2f58654b2021"
        },
        {
          "alg": "SHA-512",
          "content": "0f8822df811b37626b0294de3a981fdff424ea1552bf9539b2cc778eb4994dab20977a802e8f37de50cc8b8a6f9d1cdc49c0c3df9c69bf27b4887ed412171844"
        },
        {
          "alg": "SHA-384",
          "content": "0b59db19fd181523f5cb6497c9bf3a62452b96c8a8fcf7b1ce7e050b0761afac8793207b45f2ac7aa63f0874ff42ef9e"
        },
        {
          "alg": "SHA3-384",
          "content": "729e32d6478c29c01ca99d74c2d4624800dca50a247e94fe6125a783fe40000148eb98b74eb4afadcfce2e54335ca84f"
        },
        {
          "alg": "SHA3-256",
          "content": "d4d52932dbed7e92595ed001ae3b7a3aa827409abe969af804553ab3fc29240e"
        },
        {
          "alg": "SHA3-512",
          "content": "c24ce90249eb7347c639d5861f0af54bf30b9b10f630805f764838f3eac71f4704710ee28478ca4aa9e4627336c410d2c65979abb1c919b39df63321bef2bc21"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/datanucleus-plugin@5.0.0-rc.2?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/support/datanucleus-plugin-parent/datanucleus-plugin/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/support/datanucleus-plugin-parent/datanucleus-plugin",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml.uuid/java-uuid-generator@5.2.0?type=jar",
      "publisher": "FasterXML.com",
      "group": "com.fasterxml.uuid",
      "name": "java-uuid-generator",
      "version": "5.2.0",
      "description": "Java UUID Generator (JUG) is a Java library for generating Universally Unique IDentifiers, UUIDs (see http://en.wikipedia.org/wiki/UUID). It can be used either as a component in a bigger application, or as a standalone command line tool. JUG generates UUIDs according to the IETF UUID draft specification. JUG supports 3 original official UUID generation methods as well as later additions (v6, v7)",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "285019a0ccc0e0a79cdfd2d667f73e26"
        },
        {
          "alg": "SHA-1",
          "content": "3ca5091c87cd327880f09447e62b86b8b93db256"
        },
        {
          "alg": "SHA-256",
          "content": "5724d6a0f27db90d45af884f4520bce581f29eebe21840d07cae22b670bb8ebb"
        },
        {
          "alg": "SHA-512",
          "content": "d1fdaa7adde071beae68363003cadb0ccaa5914cc8fb313f59a18c2b8ed5661551bee9a1f243863f1af506c45d2539bf37fab08ac4dc608bb5bf6a7acaa23362"
        },
        {
          "alg": "SHA-384",
          "content": "c8204e36cd512ef971631145329d8dfecdde1a64aea4a439b93297c24202b7eb1fab410fb5f953f356cc63e34c5cca0e"
        },
        {
          "alg": "SHA3-384",
          "content": "eff84b0cc59804a9c6ab03dc252c1164aa6f07475aa60130ba06b3a0a729a33682bbf06a127ab3993bc2ed7f88ee302a"
        },
        {
          "alg": "SHA3-256",
          "content": "5b299156e5e9eab6fa17995e44b3a20d9e9d904e5e3962b3da02dd9c0dff184a"
        },
        {
          "alg": "SHA3-512",
          "content": "d8448a2458b3d85d0cf16b14bc0f3f00bead80795b97934440f94f72f7cf015ec83136d26a8fc10c6c30e16aa76865fe5b0916a2e7f5b1c00e3031976f8ee826"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.fasterxml.uuid/java-uuid-generator@5.2.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/cowtowncoder/java-uuid-generator",
          "type": "website"
        },
        {
          "url": "https://central.sonatype.com/api/v1/publisher",
          "type": "distribution"
        },
        {
          "url": "http://github.com/cowtowncoder/java-uuid-generator/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/cowtowncoder/java-uuid-generator",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/migration@5.0.0-rc.2?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "migration",
      "version": "5.0.0-rc.2",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "094bc4db234a53afde8d82c78fadefc4"
        },
        {
          "alg": "SHA-1",
          "content": "0b746344a4f5c3597d42886786ec0309a7f0bba2"
        },
        {
          "alg": "SHA-256",
          "content": "1e1cca6e90ab6416deb8cd66baf8777c6549d272f310ab9211d1a9799dbd07bd"
        },
        {
          "alg": "SHA-512",
          "content": "bfaf6d0851231df9a7224c5d12107cbffdae04f4b4672d6c9e0b34c73860e00e4cf42b86bdf35ebeb2004f1dccf0ff5db413e8227b5af86e9ed9572d47f0b892"
        },
        {
          "alg": "SHA-384",
          "content": "d2f9ad11aae0a2a4b37aacb53f43ceffb740a0579a44c8bcc6a294fb77a1737e6af3ae10d43066c3f0ea4b60551f1164"
        },
        {
          "alg": "SHA3-384",
          "content": "34da0451c75ebb5da4ef3e449c96cc9f47286af548d5bfa411ad3de8f06a4a7398d16bed9fef1266c5a2c1a9183c83b4"
        },
        {
          "alg": "SHA3-256",
          "content": "8dc8398a2b56819c256c990cd1f536e1f4a41528347b5cf3b0a9ecd1ba432041"
        },
        {
          "alg": "SHA3-512",
          "content": "9ab0987c5213a5aba2cc4d4b3c0a4a2116392bc90d2821049926cae656d6919a9c2cc5deef14d0bcbf8fd58e34de0a61f1bdb9da1a95080d08a3365d3d7cd5ad"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/migration@5.0.0-rc.2?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/migration/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/migration",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.flywaydb/flyway-core@12.6.1?type=jar",
      "group": "org.flywaydb",
      "name": "flyway-core",
      "version": "12.6.1",
      "description": "Flyway: Database Migrations Made Easy.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "f99fc5fa3f6a8b53ab3d784e53b82aae"
        },
        {
          "alg": "SHA-1",
          "content": "d42fec034f4e56da4083dc1d5df55b0f470ad8c3"
        },
        {
          "alg": "SHA-256",
          "content": "9a5b4be2e6193d4d42e954cae023c09c3f48cd933acb2d56c46945df08ff8a7e"
        },
        {
          "alg": "SHA-512",
          "content": "de515533fb08953b983f3b3eb66c033fe00e82d1c70195d62c9b5b2bcc0fd7475b5db593692b74230bf220fa01737d33a477b6268f4d3be6d9f1e5939fa4b048"
        },
        {
          "alg": "SHA-384",
          "content": "8b4d0f35d39c58b16775a89ccfc988c3c73301b69ae942aa3bd20ade4910e6e3391a7846ec2840409fe8397e0824428e"
        },
        {
          "alg": "SHA3-384",
          "content": "dd2145e701c0a4581e95b5c85cfcf9f4d76b9eeb74048d8772e6fdc0fe89c5234f1f4760bb4a1fcc93b71904c0768597"
        },
        {
          "alg": "SHA3-256",
          "content": "57cda60d2f430f959c8566726679e9b7f506df9d5015c0001d37c9fa3380e79c"
        },
        {
          "alg": "SHA3-512",
          "content": "9bb6604e822a8810566521b2a6d776102120a0e91b6b1e124b64d37164a7bc8d5b4fc619f2d9180d58383ef68dfb6baee3b0802942bbf961d302ea816702fa34"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.flywaydb/flyway-core@12.6.1?type=jar",
      "externalReferences": [
        {
          "url": "https://flywaydb.org/flyway-core",
          "type": "website"
        },
        {
          "url": "https://github.com/flyway/flyway/flyway-core",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/tools.jackson.core/jackson-databind@3.1.1?type=jar",
      "publisher": "FasterXML",
      "group": "tools.jackson.core",
      "name": "jackson-databind",
      "version": "3.1.1",
      "description": "General data-binding functionality for Jackson: works on core streaming API",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "a2010f8f82d85fb80443485388efcf7b"
        },
        {
          "alg": "SHA-1",
          "content": "7c5ffe83238ded07ecd18d4d686febbd327929b2"
        },
        {
          "alg": "SHA-256",
          "content": "a80302c80cb02803e33d7b3301a0d619146d3191d285e6bbd39fa17d3aa5f24a"
        },
        {
          "alg": "SHA-512",
          "content": "636b575d41ee93a51b02d6750f672eb1d652fa0758499c3abef99f631738f60468b0e4b6b8662d103c84f1a99f8d93f3a757b3410ef70bc65b955ee3fe4dfa5e"
        },
        {
          "alg": "SHA-384",
          "content": "a51e0ad60d12619664a593135d62340901098458d932e02a6b9fd68a1df7cf346ac3c83715000fcb80312128ba0c9c80"
        },
        {
          "alg": "SHA3-384",
          "content": "3b533a15eb850094c536d3ddcddfb411ba5bab1af1f049fdbc2b67e1d00b15b9d78766874b7193b62ed2a6e388488db8"
        },
        {
          "alg": "SHA3-256",
          "content": "50aa91e758a72519a4639a4f396c118b7830731208905e39b7b681c4c2356a0a"
        },
        {
          "alg": "SHA3-512",
          "content": "b5cf6b169256abd7d1003ab5493066187d92f3eb32df7f1b6a3ec97696d1ab5598bf8a478355d331737b4b67a328ea0f34bc512b2e57c43097e9047dd9c8152a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/tools.jackson.core/jackson-databind@3.1.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/FasterXML/jackson",
          "type": "website"
        },
        {
          "url": "https://central.sonatype.com/api/v1/publisher",
          "type": "distribution"
        },
        {
          "url": "https://github.com/FasterXML/jackson-databind/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/FasterXML/jackson-databind",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/tools.jackson.core/jackson-core@3.1.1?type=jar",
      "publisher": "FasterXML",
      "group": "tools.jackson.core",
      "name": "jackson-core",
      "version": "3.1.1",
      "description": "Core Jackson processing abstractions (aka Streaming API), implementation for JSON",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "9c844d1e60292bc51762f661d3ce3874"
        },
        {
          "alg": "SHA-1",
          "content": "8eb0e0a912e65328bddb0b25ff499cd0d2391007"
        },
        {
          "alg": "SHA-256",
          "content": "4cd270bee1a1aa34be18da78268f3879355b6ea09154beff496831785b6194c9"
        },
        {
          "alg": "SHA-512",
          "content": "2dbf82f140428312b8ac9e8b3b2e74843f6923d7cef563161dbfe4ea93fd52cdc4943347e0ab7f6e3ec419e933fe3ea724a5a45ac3ba7fe696f85f104779cb20"
        },
        {
          "alg": "SHA-384",
          "content": "82ddd83fc7f797540c2a02bee8726c9af3f11139c4454745f91ad9f668e25b8e7f05ce1d6d297e9c42ad77d60480a3ef"
        },
        {
          "alg": "SHA3-384",
          "content": "fec024ad8c23f7d05fa57f1b98365a7a117dfa8adeeb0eea791eac1798036ec0ec47acbcec833601e93c3a67172c96eb"
        },
        {
          "alg": "SHA3-256",
          "content": "66c3c0c38e6f6d5408fd707a6f3b83e905be34f7096f0b20e6aa6c67409ad131"
        },
        {
          "alg": "SHA3-512",
          "content": "a4aa1bb4695d451ff08d9c253c5eab187571302c2bbaefd79f26a531ff9a3f363ac2808eb020c69850ca7f862e43bc975f8345eda76e0bbf46c4b17378451927"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/tools.jackson.core/jackson-core@3.1.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/FasterXML/jackson-core",
          "type": "website"
        },
        {
          "url": "https://central.sonatype.com/api/v1/publisher",
          "type": "distribution"
        },
        {
          "url": "https://github.com/FasterXML/jackson-core/issues",
          "type": "issue-tracker"
        },
        {
          "url": "http://github.com/FasterXML/jackson-core",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.flywaydb/flyway-database-postgresql@12.6.1?type=jar",
      "group": "org.flywaydb",
      "name": "flyway-database-postgresql",
      "version": "12.6.1",
      "description": "Flyway: Database Migrations Made Easy.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "b44fc20a5aaefa1ef5108b8515325a56"
        },
        {
          "alg": "SHA-1",
          "content": "714930c5467b6426afa6647459e6c88eec0e412b"
        },
        {
          "alg": "SHA-256",
          "content": "7679df22b77c47474d10db97531b3f9f2eab73ef3b1858f55d0e33c7883ffab0"
        },
        {
          "alg": "SHA-512",
          "content": "c7ff42afdf3aca08b8745ff0fa8e5a23398ad20c93d93735984dcd9b7918912e71863b6eaaadd45170ea81d8744a5777998f45f23f07b4644b51129e14fd9fb4"
        },
        {
          "alg": "SHA-384",
          "content": "137d0455095796e19109d2adc22731333c6b5cdf93883e23326b41df2aa8a66f5024cc3a674691b798d3b56d0651e6fb"
        },
        {
          "alg": "SHA3-384",
          "content": "beb5b02562d6ef2131b1908a828db32dd449323591c94390bafb631b7ba1d1f23d66aaaacdd108f5a43d26f90c057c66"
        },
        {
          "alg": "SHA3-256",
          "content": "4db6c03c786fef8649b185f0bebf21983332381f8accccb58db389e632cf3d74"
        },
        {
          "alg": "SHA3-512",
          "content": "193a5ce4dab905c24224e11b3e915f4d184de844799b1ac423ec8c67e829b72cb027d00e722a1957c6c6cfe5c24b34fd08c8b230521e24a332190e572324af0f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.flywaydb/flyway-database-postgresql@12.6.1?type=jar",
      "externalReferences": [
        {
          "url": "https://flywaydb.org/flyway-database-postgresql",
          "type": "website"
        },
        {
          "url": "https://github.com/flyway/flyway/flyway-database-postgresql",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/notification-api@5.0.0-rc.2?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "notification-api",
      "version": "5.0.0-rc.2",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "a948beeffbc9164c139aa306e2941648"
        },
        {
          "alg": "SHA-1",
          "content": "50c6924bfaee44a8f6189a3d601b9707d9b96bcf"
        },
        {
          "alg": "SHA-256",
          "content": "df98a424c2104b7168f1d2eb135429375e60cfa5d6b544ddad3e5043a7772aeb"
        },
        {
          "alg": "SHA-512",
          "content": "ac3e07bbf9ee4adde40a45f6888fca666ef6be7395ce7bc52554eec964446f5190c8fbe1436da02bbcea360768593d53353e9171abd25ae03956054b9c73a70e"
        },
        {
          "alg": "SHA-384",
          "content": "63b6ec398e3b65855ba03278b683e7b0e2c6f72ca7ec96fb372ee6314a8d78839d0caa55acc47b8d0eedb9810a72d091"
        },
        {
          "alg": "SHA3-384",
          "content": "da5785ff16252f3f2f03e088a5ea2139bec676ebbb82521a4d28e68852d4a6a42345b466f507a8a661a91f94d8ba5ff8"
        },
        {
          "alg": "SHA3-256",
          "content": "836e9233baa6a1daf3b9740dbd4d49fb9caedba16220c15d2c14a5b81334bb89"
        },
        {
          "alg": "SHA3-512",
          "content": "0a3a8e9a2c099ab915dd4406b047b8952c04ff73dbebe84199be47eccbe23cb8dd6c7dd96abe2fd275a6e8ab552d9e58a1e68bdae5f761aadde0f3c6e1a9fc3e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/notification-api@5.0.0-rc.2?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/notification-parent/notification-api/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/notification-parent/notification-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.protobuf/protobuf-java@4.35.0?type=jar",
      "group": "com.google.protobuf",
      "name": "protobuf-java",
      "version": "4.35.0",
      "description": "Core Protocol Buffers library. Protocol Buffers are a way of encoding structured data in an efficient yet extensible format.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "5b7ce5ca505f2a5ae52c9a6b3e264180"
        },
        {
          "alg": "SHA-1",
          "content": "6d5d7c2261b26586e772f7fd2d27716272ef7bdd"
        },
        {
          "alg": "SHA-256",
          "content": "400621a8f0aac52fab7ec88f492edd356f5a4355caa8f92028f217a8b5e4ac3b"
        },
        {
          "alg": "SHA-512",
          "content": "2978603d93de23dcff85476fa4d93c46334acc5ede32aa9a400b837f75c8efa310f5be3a171ca33862d2b53ec1434d15c2ddd4b701784281ed68e595aec9c12e"
        },
        {
          "alg": "SHA-384",
          "content": "4f6be343719d3c86388016a50930c23fad3bd3bb5bc4499b658b0c09aafa725dc6bd0c460f3f86f90f77ae5c943fd9ee"
        },
        {
          "alg": "SHA3-384",
          "content": "3d6cc701c4f361f6d0375948a817c943cb0a2bd1c1479eacd1d4efe2c67e23d940200baa173ba7ab5266101072ca8895"
        },
        {
          "alg": "SHA3-256",
          "content": "9342f6538a8ab0d8f6c17697131b955c47ea28f05cb032b2bf33746f973b9ce5"
        },
        {
          "alg": "SHA3-512",
          "content": "d0490580ccdbd5b2af1752462063b89bb52df38d489369f5c5bc440888dcbb5ebfb7322407d24602cc3fd3f39bea59dff74c0b6300df864b4a9fdd826b23f7e5"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/com.google.protobuf/protobuf-java@4.35.0?type=jar",
      "externalReferences": [
        {
          "url": "https://developers.google.com/protocol-buffers/protobuf-java/",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/protocolbuffers/protobuf/protobuf-java",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/notification-publishing@5.0.0-rc.2?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "notification-publishing",
      "version": "5.0.0-rc.2",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "922000bb58d12a17f577977f5439f143"
        },
        {
          "alg": "SHA-1",
          "content": "5f434f73cd7eb63e0c3733a4c557b320bf4c78ed"
        },
        {
          "alg": "SHA-256",
          "content": "8aab34da33e422d2dbde015610882e4a24ab1cdec83365a40087be40a9ee0183"
        },
        {
          "alg": "SHA-512",
          "content": "11be8916a5a60d5e89e5798900c38afd8f17fff03579006aa7681c7e87f7f40e04a3c949cb98be4248eddd0eafbf26073a8784f259da2533f0fe1bb7ac8a9c08"
        },
        {
          "alg": "SHA-384",
          "content": "97548e0b6601246df6a727a1e1333a3c874a28a64f8c0a19b828ce93238d2897b28f876e1f21a8fa8829fd79347c537d"
        },
        {
          "alg": "SHA3-384",
          "content": "88c7320c55f2bb2d5dae4b96f8453e566eb9d064b2312041df0d5307890e57a58c54608748e53c7526eb01c4b1eba1be"
        },
        {
          "alg": "SHA3-256",
          "content": "3fc2f30783309192ce4c16174225acb0fe34cd7d9a678349254d908cb630bbc6"
        },
        {
          "alg": "SHA3-512",
          "content": "b05eea7d3442401b54e63da1f532016383037a8eec4310e189c463f07779a27521c46a8dc303374b94c3d9ced77ea4d00c1709c86a94f5b797b1dfc15976b074"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/notification-publishing@5.0.0-rc.2?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/notification-parent/notification-publishing/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/notification-parent/notification-publishing",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.eclipse.angus/angus-mail@2.0.5?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.eclipse.angus",
      "name": "angus-mail",
      "version": "2.0.5",
      "description": "Angus Mail Provider",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "e965a2653568c0138457b4c6fc9e5d77"
        },
        {
          "alg": "SHA-1",
          "content": "427f6d52ec0782f7efaca0c0732042e347a6cb4f"
        },
        {
          "alg": "SHA-256",
          "content": "b4d8c30d35f455def6c7a05fe595a1e62ea2b80cac3efec1e9ccf4118b23168a"
        },
        {
          "alg": "SHA-512",
          "content": "500985e3045a7640049aa1ebb008d675983f537150605f192d2746ca2aa8c7a1b5231f782f950dfd968cc8ca26c32c6e93008cc7de309c5da4b17af0139baff7"
        },
        {
          "alg": "SHA-384",
          "content": "35c797fdc52800ccfbd36d7574c0919fbba1f820eafb1d236271eefb07266360c1b87c07c089f97c07d12a634e54037c"
        },
        {
          "alg": "SHA3-384",
          "content": "9a10dd9cf09af51c29d178d2dd87c6a796121753c91ca13b8c51843b8ed737803090fa93f41ec8689469550941e12473"
        },
        {
          "alg": "SHA3-256",
          "content": "7ac45dd92d65996c4de11701bf1a1130e393a3e33b4bc02af69bf627e54b122e"
        },
        {
          "alg": "SHA3-512",
          "content": "b45eb356f855b9777cfdf6be94c6797c33e86fe28e8e2e7fe7311e661f07d162e8c4e46a2f3dd67b7c0f8261ab5610c85f4f62cc874e64ee2a76eca3501e2e2d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        },
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/org.eclipse.angus/angus-mail@2.0.5?type=jar",
      "externalReferences": [
        {
          "url": "http://eclipse-ee4j.github.io/angus-mail/angus-mail",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/angus-mail/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/angus-mail/angus-mail",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/jakarta.mail/jakarta.mail-api@2.1.3?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "jakarta.mail",
      "name": "jakarta.mail-api",
      "version": "2.1.3",
      "description": "Jakarta Mail API 2.1 Specification API",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "288a687deb06b87602ce14cd03dddff4"
        },
        {
          "alg": "SHA-1",
          "content": "a327aa5f514ba86e80d54584417d7376ed2bde0e"
        },
        {
          "alg": "SHA-256",
          "content": "8051b58d75f982f9a5b963b3765426e824b2a64865ef0af17205e455b98db05c"
        },
        {
          "alg": "SHA-512",
          "content": "841a9784cfcfa1723d1c634b094280fabe6ecfdf640513a76a6a39b1ad29d59c1207c086cd66ec8e7f161ffaacd9e1dad12828ac4c57583e9d8593f12ae6460d"
        },
        {
          "alg": "SHA-384",
          "content": "dd18dbcf72559ea405946a6d73dc60e672b3bc222e32944b2bf51e81cd41348ad7873b5b2a9d86f0440b44bcd6e45176"
        },
        {
          "alg": "SHA3-384",
          "content": "c02d8861b3c9fee8f18bfcb41947d2a83eeaed4ea9d1bb8784525c7fedd2ccab6b704663ff5a452c78537d1b79fd960a"
        },
        {
          "alg": "SHA3-256",
          "content": "c10cb31acf35574a203d85427d81e36162edc44b9f6cd9b422c19144b8e7ae4b"
        },
        {
          "alg": "SHA3-512",
          "content": "4034e1d5280fde464902035e7491e997ffec62a327844deec6f7e64b7b2d8d1d9fe505f10691caf7223ec06e6d27ac263ae1341582a5c48adad1c7635c13f0d5"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        },
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/jakarta.mail/jakarta.mail-api@2.1.3?type=jar",
      "externalReferences": [
        {
          "url": "https://projects.eclipse.org/projects/ee4j/jakarta.mail-api",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/jakartaee/mail-api/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/jakartaee/mail-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.eclipse.angus/angus-activation@2.0.3?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.eclipse.angus",
      "name": "angus-activation",
      "version": "2.0.3",
      "description": "Angus Activation Registries Implementation",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "ad20392145690b36b4f950fe31a31a2a"
        },
        {
          "alg": "SHA-1",
          "content": "7f80607ea5014fef0b1779e6c33d63a88a45a563"
        },
        {
          "alg": "SHA-256",
          "content": "a6bd35c538cf90fff941ad6258c40c08fca0b5c9c3f536c657114f27ce0527a7"
        },
        {
          "alg": "SHA-512",
          "content": "efb987b781f665589b2a524d86826ffcf37eaf105b2f823be124fded85bd118098c0749b5d268373d00b1d3b8bf0f89f86670444f9990b91948704a7052376e1"
        },
        {
          "alg": "SHA-384",
          "content": "4086b356cdf168e28a09dfa2ee9cd54926491438d556e4608508ae6a895929adf63f3a259779c83624a9bb1f886efb6d"
        },
        {
          "alg": "SHA3-384",
          "content": "7b79721ec0b28964fad4bf56ffc3be67d81b62e45a4ac703917094e281c125834b9bebcc0623176d4904c5b50c94450e"
        },
        {
          "alg": "SHA3-256",
          "content": "aecadbd33e92abf894ae28c8cc609f5f85e8af736621c44fb71b84ca34e91247"
        },
        {
          "alg": "SHA3-512",
          "content": "ebdc07c3b3cf0817f6d9ee54bb23461657f213648b70f6c7f634a1028cdf1522d5b5a7e2168130f72afa112f36cb08858d1c94bb67b40a0f051f567b4d696d1e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/org.eclipse.angus/angus-activation@2.0.3?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/eclipse-ee4j/angus-activation/angus-activation",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/angus-activation/issues/",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/angus-activation/angus-activation",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.github.ben-manes.caffeine/caffeine@3.2.4?type=jar",
      "group": "com.github.ben-manes.caffeine",
      "name": "caffeine",
      "version": "3.2.4",
      "description": "A high performance caching library",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "04d655feb58be297a86fa2814a1f1ef8"
        },
        {
          "alg": "SHA-1",
          "content": "c63b303adf59c733d2a96125ad6670e938a2c15d"
        },
        {
          "alg": "SHA-256",
          "content": "9d9d2cfd681fd9272ded3d27c9930db12f89f732345975aa113ebc223bbf1224"
        },
        {
          "alg": "SHA-512",
          "content": "6923d1b826e3723a9d58b092626045bdbac48dd91e758b3b78164de31105035343145d14c20a00b62658b7d1dff2a5cfb7475b200cc630dcd967c4732c2628ee"
        },
        {
          "alg": "SHA-384",
          "content": "dd9a4951638126227d1a27ed4689391783f42f55a6e863d5022dd9f864e0cf174bc9e6267b3f7f3d6ca4a03399d38c28"
        },
        {
          "alg": "SHA3-384",
          "content": "f84911ac6299bccc137471d1ea3ca870ca0d0604e47e475ef19ee1850bcd5d98e1a13b6ae493096a4349dcaef94abcf7"
        },
        {
          "alg": "SHA3-256",
          "content": "745b6815303fc9a89f385e7d17120b1d3d5987b5af03870d72d077c2d060f038"
        },
        {
          "alg": "SHA3-512",
          "content": "cb5ea47d93b8bd42d4df7d1727c0870479acadd423c284843bd95fdc1f4becf328943adad501a253d91d369bb3b6ec9858ebca4d272008e655afe89a037a0c96"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.github.ben-manes.caffeine/caffeine@3.2.4?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/ben-manes/caffeine",
          "type": "website"
        },
        {
          "url": "https://github.com/ben-manes/caffeine",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.21.3?type=jar",
      "publisher": "FasterXML",
      "group": "com.fasterxml.jackson.core",
      "name": "jackson-databind",
      "version": "2.21.3",
      "description": "General data-binding functionality for Jackson: works on core streaming API",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "0ae595293418fd4dd9c4527d4abc5610"
        },
        {
          "alg": "SHA-1",
          "content": "aa7ccec161c275f3e6332666ab758916f3120714"
        },
        {
          "alg": "SHA-256",
          "content": "f397563d8e67630c10cab8c2334ca0e55af832fa3ebde160a379c2c96d43bf25"
        },
        {
          "alg": "SHA-512",
          "content": "bf9df0232bd26b6f00b2227fad26cee40ef31e8e12e521ee1afe89dcea61ddb2b27cbc0d1f0679d1746cc35cc361e531c84324db68d43eaa60f15933bbbcf0ab"
        },
        {
          "alg": "SHA-384",
          "content": "47cf817512cd1482eeaa54ae68e62d3b13eafa11546d99ee933de28a9514f4a41e967fa378b40b17746bc98a26f7b387"
        },
        {
          "alg": "SHA3-384",
          "content": "d0a2f03bf3223f5ad6d84541f1027f56045689ec54dc8c594db9dc11d50c041d8487b1abcaf107b05da886f2b988c628"
        },
        {
          "alg": "SHA3-256",
          "content": "f506e6ef4e26c5720065231dc654a0a99beb2e195e98e32fb5ad02ab4386e20b"
        },
        {
          "alg": "SHA3-512",
          "content": "a73c9798fa53f62bec6ca46cf8ad264d78b0a41ab9089ad8b8f4bfb8034d8eea8081bbcf3e2a9a3ac5ea018c13710098c6b1af033c088cec2385ccd62c1b84c0"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.21.3?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/FasterXML/jackson",
          "type": "website"
        },
        {
          "url": "https://central.sonatype.com/api/v1/publisher",
          "type": "distribution"
        },
        {
          "url": "https://github.com/FasterXML/jackson-databind/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/FasterXML/jackson-databind",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.kafka/kafka-clients@4.3.0?type=jar",
      "group": "org.apache.kafka",
      "name": "kafka-clients",
      "version": "4.3.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "d7b92e43f60fbe48e6f6b1980c07c790"
        },
        {
          "alg": "SHA-1",
          "content": "2bedc61c3e75cf3342b869a5b4b470458fa94b07"
        },
        {
          "alg": "SHA-256",
          "content": "97a5b492d4ad658fd2dfba969fa0e403c2e38c971fb1e083da4e391471925fc1"
        },
        {
          "alg": "SHA-512",
          "content": "7406d34fad25de6edd70ddfb4977d45bd775f8a520aa4c7d543511886e403cbaaa15c038bc217c2bb0c21c8c28998cbb5cf2b907cbf756c36d921edaffcc5a4f"
        },
        {
          "alg": "SHA-384",
          "content": "19d0ee4900708490532158b4142ffee3fda2ecfc45ab1938fc562cad6d9f1c1b9bb988bd7ba8fa129900cf90cd0338ef"
        },
        {
          "alg": "SHA3-384",
          "content": "5bcf7651e3c09456483558186686aaced342f4d25752700899b86a8e07edbcfeeeea97f032a73262de9b6a27e8149abd"
        },
        {
          "alg": "SHA3-256",
          "content": "5212967bb26f9f41e9963646b0a3174ab51965e91e52fc0a2086280ca82e6170"
        },
        {
          "alg": "SHA3-512",
          "content": "5328c0d61afdba1f2b222aac622aea30c4911826a2ae2fafce45a04ace61c24f1dee3c8e7de395f843165154c8cee6a3dcf4cddf35a14f5aaeba6c8539353b45"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.kafka/kafka-clients@4.3.0?type=jar",
      "externalReferences": [
        {
          "url": "https://kafka.apache.org",
          "type": "website"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/at.yawk.lz4/lz4-java@1.10.2?type=jar",
      "group": "at.yawk.lz4",
      "name": "lz4-java",
      "version": "1.10.2",
      "description": "Java bindings and pure Java implementations of LZ4 and XXHash",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "f9fe6db582e61989316715dca1c79f6d"
        },
        {
          "alg": "SHA-1",
          "content": "1df182cf1b030e347c81ca8768c24dab414a04d8"
        },
        {
          "alg": "SHA-256",
          "content": "252dabd586d22149a31661a8afc1a50747714eb1a298bd4a6e780c8c91a13866"
        },
        {
          "alg": "SHA-512",
          "content": "2634adf408910c3a1cff41f5bbde0f0643d6aa89b9c10c84ee5982628ceaf092015acaa0ed90eb56cdb0cc1c72b6667bc51b4312c8674662d5150a821c512f88"
        },
        {
          "alg": "SHA-384",
          "content": "0583dafa52d9c28aa84204fb3996528fd3fac71ed7c452b904bcc8f3f8fc07ca36da13fea1bd7a5eec34f9e6480925f5"
        },
        {
          "alg": "SHA3-384",
          "content": "70753f41fb3eba873d96c9a2dc79bc92bf1bfd9e71c1153841338b01c986f95f47c264e651e16a359b2abc0d61339dc6"
        },
        {
          "alg": "SHA3-256",
          "content": "bd18f6b4f05872ec9baf1fae2fa743a102d076f9ae1856c0b38ad03aeaa02e2e"
        },
        {
          "alg": "SHA3-512",
          "content": "82edfdade65175934695df09016a2b6af81d89250afb905a31453e991ac92e5952b274410344f2aca7c3458c77b1d5e38a8f37ddbf77e11caf03d04bc1591832"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/at.yawk.lz4/lz4-java@1.10.2?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/yawkat/lz4-java",
          "type": "website"
        },
        {
          "url": "https://github.com/yawkat/lz4-java",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/notification-templating@5.0.0-rc.2?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "notification-templating",
      "version": "5.0.0-rc.2",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "2fd65261db199d31fd56655496086e60"
        },
        {
          "alg": "SHA-1",
          "content": "df7aee141ad806c42478a683543d9a000239d1e5"
        },
        {
          "alg": "SHA-256",
          "content": "178f1a5ac893cd46da85a056fb1e8cd99c0f8f16821e210d78db9f132dcbef88"
        },
        {
          "alg": "SHA-512",
          "content": "db192eb3ecd054c04d2aa6b7ae8927a344aaf6ddc9380fb668dc4f0da4dc06fd00337c647f927e0b4b4812954aefc543cea3545c3787eea97a989aeb44053307"
        },
        {
          "alg": "SHA-384",
          "content": "b48a7f2622dc52aa297230c40f3e4d35f9d6514f9a80d504f3eada440bae5532608d50f25a1ecee4a653faa034337017"
        },
        {
          "alg": "SHA3-384",
          "content": "32192ff091446386150e45b0d26ff345e166f00b989663c94b33d102a211445a030899768f411125b45dbfb2fa707c89"
        },
        {
          "alg": "SHA3-256",
          "content": "17fcb7f7921c97d2cfc7c800f039ce81021c1510d3b391b6e2cb859aff541445"
        },
        {
          "alg": "SHA3-512",
          "content": "0fb3407742b4b5ff030659976c6598042ec31032a34e439d3a11ed56bdf6ec1d380437d6944b6e86c3e7c3e3a14d1fa2089860857b7235b7ef4c5ab378ac3452"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/notification-templating@5.0.0-rc.2?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/notification-parent/notification-templating/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/notification-parent/notification-templating",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/plugin-api@5.0.0-rc.2?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "plugin-api",
      "version": "5.0.0-rc.2",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "ebc6043d0d42d17ac0a46d65bfec2e13"
        },
        {
          "alg": "SHA-1",
          "content": "be27148021ea803b31b3430d0e04c62fc7395c6a"
        },
        {
          "alg": "SHA-256",
          "content": "1bb74b12d290d0d1735f3fca8ba6f1a71a477faef7af8568ce05a89a23c0ef87"
        },
        {
          "alg": "SHA-512",
          "content": "c5ace01ed3fe9aa57b731c1847c508718610da1de7113ba728372ca3bff57fba66ffaefbc5aedcff923c85dcecc0595bd50e675080fd1a4196f77f440a86e28b"
        },
        {
          "alg": "SHA-384",
          "content": "3afc1e7aebea5a90a5463aafbb9ed20bea1252e07d05270c3d0f117be3b43fc41379db87e203e1f6eacb7fd8878560dc"
        },
        {
          "alg": "SHA3-384",
          "content": "6a597f5b3e3b4906751e2a3584f941298a28353eaad752752aa1b0c2092445d6b8b7f9deeff87e35fbfc73b83bb5ea97"
        },
        {
          "alg": "SHA3-256",
          "content": "b38acadfcd4cef7b886ce50eda749363807f5358d11f062a36eb49c115ad1338"
        },
        {
          "alg": "SHA3-512",
          "content": "c6191c418e19705ad7849d9550a515a0f1a205389fb398c83753907dada35da121f032a8dca09ff998a0cee76634f2604f0672e92deb629f71dde350c4a52359"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/plugin-api@5.0.0-rc.2?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/plugin-parent/plugin-api/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/plugin-parent/plugin-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/plugin-config@5.0.0-rc.2?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "plugin-config",
      "version": "5.0.0-rc.2",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "38b9f3a367a69e318b9e3d9bbf192c2a"
        },
        {
          "alg": "SHA-1",
          "content": "cad12e62a6baaa0e5c81517ae17a4c08271f0556"
        },
        {
          "alg": "SHA-256",
          "content": "6ccb4eebc0a09d643a64603d25d36b27e2d05884f86b9a1d13a0348d5bf3f6be"
        },
        {
          "alg": "SHA-512",
          "content": "652e13e6eef084f9eb934e2c80993ae574623436231ee3c700e92c74ff9d6f47aa10b171ce4368d5c24fa5fbbdc46eacf4de2d089012a1d3ca107feaa6d01842"
        },
        {
          "alg": "SHA-384",
          "content": "14dabb31174ccf166dd4300d0382a0c20d6ec96facb70ec025380bc6800392dd00240573e3fab80484c38734b55d702a"
        },
        {
          "alg": "SHA3-384",
          "content": "a3cdd09c95f0b79d6c78731e1029782ecded85658c773471f0f32a1ca4e505bdb26871a5c3234ab7b98b789e6f727cae"
        },
        {
          "alg": "SHA3-256",
          "content": "26129998141b7d987fe75aec3a3fc85a515e87510ab3386c7705dbaa778abafa"
        },
        {
          "alg": "SHA3-512",
          "content": "a6e880531984309d6ed583de8d7041fd4cc3d3996187f000e6ff44cf7522313faa8c1fbb4a4ac8134f08fdae4ae44a969296482a58087467ce4256a791d96ef3"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/plugin-config@5.0.0-rc.2?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/plugin-parent/plugin-config/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/plugin-parent/plugin-config",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.networknt/json-schema-validator@1.5.9?type=jar",
      "group": "com.networknt",
      "name": "json-schema-validator",
      "version": "1.5.9",
      "description": "A json schema validator that supports draft v4, v6, v7, v2019-09 and v2020-12",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "84622292ac5001bac8f16dc5002a8b94"
        },
        {
          "alg": "SHA-1",
          "content": "6a2f9fe324b9dc8d8e0c3d7b435f7ae99595a556"
        },
        {
          "alg": "SHA-256",
          "content": "e0b8baeb78fd1ba027454ee3974d8a02f54447eaa510d3052820a7d2160d9ae4"
        },
        {
          "alg": "SHA-512",
          "content": "5ba210c135717a6ed043e0889d96f6381b3668f9e2a011bd0def8138ad327813f792259858ae5ed192cb8ec0645308113769aa8ebee903db1ccd82e98cb3009d"
        },
        {
          "alg": "SHA-384",
          "content": "21a4f4fb586959241ce92ad788cb4326d62232aafcddf6953ef7769efa5c6936487ffea51693ff44206f4d66c83ee753"
        },
        {
          "alg": "SHA3-384",
          "content": "36bb0b96a34254780e991440e879c1f44a0a62362e115a5c761df0ec1c8f2a9f64a7421ea3cb50a589ae501619fd3942"
        },
        {
          "alg": "SHA3-256",
          "content": "c97a2638d46c235056bacfe90d8e0b88a823a5622e88b608a31f481f3adb9ccf"
        },
        {
          "alg": "SHA3-512",
          "content": "08b256bb3ac49102d87c0e635d025699154bfa7785916d591173af6ec14dfde885e34500a7bd13159a00a7fe78dc859aefa9dc930d0719a64ea08209ccffb20a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.networknt/json-schema-validator@1.5.9?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/networknt/json-schema-validator",
          "type": "website"
        },
        {
          "url": "https://central.sonatype.com/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/networknt/json-schema-validator/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/networknt/json-schema-validator.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.ethlo.time/itu@1.14.0?type=jar",
      "group": "com.ethlo.time",
      "name": "itu",
      "version": "1.14.0",
      "description": "Extremely fast date-time parser and formatter - RFC 3339 (ISO 8601 profile) and W3C format",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "e537d0a2bc8066726f7e4654c253cf84"
        },
        {
          "alg": "SHA-1",
          "content": "c0f9f9d4f4404787e992ab3af5ae95f2fad79e47"
        },
        {
          "alg": "SHA-256",
          "content": "5cf40ab0cc77828ab2b875b1f3ecd71c8295d7721933476abc2e08fddcea164a"
        },
        {
          "alg": "SHA-512",
          "content": "aa69a6af3a7123eb41425bbaf6834e16dc3323172709e2338b8a21b970fd21333d996515f42da4aa0225251e30542ad7d9c8332bdf7d62ed96b42fadc8a1520d"
        },
        {
          "alg": "SHA-384",
          "content": "8d201334c39b68d13d66fc9df2440fa848b055a9b901e1c630ff66a47e70c8816484d106ae18c642d4257034f33e55f2"
        },
        {
          "alg": "SHA3-384",
          "content": "033715e1422cb3f22c1073bc7b058fd16d1436c6314f49f13480d81c86b656cb77a4d852cbba35542bc8f2ce49244ba6"
        },
        {
          "alg": "SHA3-256",
          "content": "f18d275dd2a0038a82432e06bb9f396151310136e3a316a869ef54d7fae834c5"
        },
        {
          "alg": "SHA3-512",
          "content": "8a51b3c6144eb2e363f8804da316d9e3dc246be07af4c0bb55e9540c2a0deb5eb9beb825120d3d203e3a561fd8a605ad64f3af5d233725e1b9c7e06232deaea9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.ethlo.time/itu@1.14.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/ethlo/itu",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/ethlo/itu",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/plugin-runtime@5.0.0-rc.2?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "plugin-runtime",
      "version": "5.0.0-rc.2",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "cbfa2e8e2753147071295ed2860dd5d6"
        },
        {
          "alg": "SHA-1",
          "content": "9d5f390c987e7de16426fdae2271f2c2abd7b51b"
        },
        {
          "alg": "SHA-256",
          "content": "ba3cc453ae68eecabd65b4271033cf1d945788857200b5562829cf081a8c7edf"
        },
        {
          "alg": "SHA-512",
          "content": "9ab77e96bfb79361744eda38b53f8ffdffbc784f982499371209c92e08e81f26c866f095b8389b05571ebdca03f3950926ea766af818b6aeff1c7de0277a1a9a"
        },
        {
          "alg": "SHA-384",
          "content": "bf2af6010af4ab000df399c8108d234aad6cef1276ebaf874368be3b42b2a252be850ecf794790c218321ffbedfdbf7a"
        },
        {
          "alg": "SHA3-384",
          "content": "ac888dfcb68f1d2813b929623d04f330ff62eb0387d5425889671932ab31bdec3816eca03537b865cb70d5a00696f2dd"
        },
        {
          "alg": "SHA3-256",
          "content": "0730e9ae799b4050c05ec8b20fca7f137dde86c3635270cf6369ff03ae4adece"
        },
        {
          "alg": "SHA3-512",
          "content": "e641b4b81842b4e8954f15b77aa934def45910ce7f6b4fe2beeaae926254334525d3d020e1edf2bef268612e76913c04e1653e89e8c3c371edd9ae12f1947a20"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/plugin-runtime@5.0.0-rc.2?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/plugin-parent/plugin-runtime/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/plugin-parent/plugin-runtime",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/common-config@5.0.0-rc.2?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "common-config",
      "version": "5.0.0-rc.2",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "da457881480ef2e3e5969c3a6c869bba"
        },
        {
          "alg": "SHA-1",
          "content": "fa8711da21da7aab3cbec4088e7cb5e8d32d46ff"
        },
        {
          "alg": "SHA-256",
          "content": "ebb20cf459442010b1d09a87d7adfe52fc0f18c37aa26ed31b87059e00dde0b0"
        },
        {
          "alg": "SHA-512",
          "content": "9d372104ed2d1ea34357fb54769727fdbf130a670bed04372ee13685dbc51f8219ad3eba1d6a6dfe4359bc852f720be56eaec2ac9e01398b5393172297f1666f"
        },
        {
          "alg": "SHA-384",
          "content": "784ee6ee8c7f6c65f40581b6b2048ce62591b083e2c82f68212c6cef9428887fc2c2ac758f05e0c1eca060fbd49a6774"
        },
        {
          "alg": "SHA3-384",
          "content": "fe6d476ff7b6b7ba88751521f2f5c403cfb74bf2195817aa868fda3d30f0d0cef74a45d9ff5285d813d7f87e059167ee"
        },
        {
          "alg": "SHA3-256",
          "content": "c705beca9836b80d09e179a9b59b55242be662c3a572df2dcfd090a2b433877c"
        },
        {
          "alg": "SHA3-512",
          "content": "abd7af72024301a670ef61481b8a39cb8179c673a877909c11eb37f100eec4559b980fab44afec1452ef54dd07ac0ba433771f54807a9be12c45a5e1f5492740"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/common-config@5.0.0-rc.2?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/common-parent/common-config/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/common-parent/common-config",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/smallrye-config-secret-handler-file@5.0.0-rc.2?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "smallrye-config-secret-handler-file",
      "version": "5.0.0-rc.2",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "d87b64b9990c293cc7fa0804c2208d13"
        },
        {
          "alg": "SHA-1",
          "content": "bcd09c4f1b2a271cdf82f4c0495267a324ba8a79"
        },
        {
          "alg": "SHA-256",
          "content": "561ca289e51b4b85728f07c58318699ab24489a6c214577db1be0a1e9ed27db3"
        },
        {
          "alg": "SHA-512",
          "content": "b295628497132315eca5705b4e252e5a8877011741bc7a77ef236a843374cd59b85eba8a6f8e6140264c3a21c0a14319e1652e7a5419d0bbfa1af8c4b2a47df7"
        },
        {
          "alg": "SHA-384",
          "content": "09b92740d3fd7f4c05516df9e9bfe4e28121e1c21ae03363371e7215a8515183908740ded2c2dad6bacad3a29527ba13"
        },
        {
          "alg": "SHA3-384",
          "content": "a41570f448f79c8cc863fd5e6c654069511285601dc0f92fe9eb1ad88c7dca3b6352df16d38f30e2a8e055646a1f1297"
        },
        {
          "alg": "SHA3-256",
          "content": "6d7abbc968aba1726875fb6f827142cbd6cbbf6d8c92dda79a2a8ddecaeedaaa"
        },
        {
          "alg": "SHA3-512",
          "content": "c2dedacfbd57e80fe6c7dc8373932f0e153ec48b92867df580ccc32fcbb7a858ec19edd1ae0a3b91c6f246138a6c1d52c7606e2d935574eb6384eaa6ca04a9b7"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/smallrye-config-secret-handler-file@5.0.0-rc.2?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/support/smallrye-config-secret-handler-file/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/support/smallrye-config-secret-handler-file",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/proto@5.0.0-rc.2?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "proto",
      "version": "5.0.0-rc.2",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "66d7861720862e738d2e9c6dbde1f95b"
        },
        {
          "alg": "SHA-1",
          "content": "39940b4c9a241257e3a5b994ad8a3c4a7ab6eea2"
        },
        {
          "alg": "SHA-256",
          "content": "89f6d000be1726f0c0bdc322892405383dfc8dd37d671e2acd6f3915861927ea"
        },
        {
          "alg": "SHA-512",
          "content": "759a5a028493588641ac4c41734365f1bd62a6b7a3b8dd0e6e57f50e7528e207fdad5ae2b499561044c57a305ebcfb2dddba534b10fa90faeaa9f10eb3abead1"
        },
        {
          "alg": "SHA-384",
          "content": "a75093110311273eb2b51047c5d7719d8e11a005d650dd05485ad803c47c79a0803eb3b44887a9ac5af3eb5ecc662dc2"
        },
        {
          "alg": "SHA3-384",
          "content": "759ef0f5d03006dab1ea532554b3ed5fa08e250e5746df3078d5e097a398bbbae3b7919db171fdf95a6dd3e1d071322c"
        },
        {
          "alg": "SHA3-256",
          "content": "d5d44199886a9f5c1c115aa01a4071316cb637e407ba819d51305e9f8d39e6e9"
        },
        {
          "alg": "SHA3-512",
          "content": "f0c2f305955e7012e394c5e8f8fbeb4791bdfe2453104654928bb2aea8ae42e33d820c1c114839d8aca445e82eb4a08bbe0693e7ecbc08f15308c2e3dad6ff1d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/proto@5.0.0-rc.2?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/proto/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/proto",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/cyclonedx-proto@5.0.0-rc.2?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "cyclonedx-proto",
      "version": "5.0.0-rc.2",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "7ec4033d4cf870f76135e1f4a47c68e5"
        },
        {
          "alg": "SHA-1",
          "content": "a25e3607a98130a45a0ca42b220dcba7a8e13e45"
        },
        {
          "alg": "SHA-256",
          "content": "938340192013651ca1d214a952887a70f683b83c7f21eb3fdf283e338d272242"
        },
        {
          "alg": "SHA-512",
          "content": "f280f9bb761ee0e232d2dde548d3f43d10591bb9cdf7f5498cf7bee0b6c2186656e85394697168a9277819276ed8f841b5c8c1f331e31047a27d19fa5eb28325"
        },
        {
          "alg": "SHA-384",
          "content": "d7387b1291740166ed1b3bc7c7875e4a1e6eb0d2eca97b0a017a9111e97be14764dfd6b87adfc496aedbd11834b29ebf"
        },
        {
          "alg": "SHA3-384",
          "content": "d49dd699f79d544a8070c5259de688bd5f9595477dbf75d8b257ccaa3a569fc24cc38b80e46944fee7c09d87bda26011"
        },
        {
          "alg": "SHA3-256",
          "content": "f6305bc6e7a62aacd73da7098e9f4eab5cbffd170b921ac01470032734fc2f5a"
        },
        {
          "alg": "SHA3-512",
          "content": "fd14bff260740704d64ea6bc7d302970febae7a617be7407aeb8b1e11985fe7d30d4b0b052181add2959ae4cac07243d1eb9afb4872b25a916bf807e8a434acd"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/cyclonedx-proto@5.0.0-rc.2?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/support/cyclonedx-proto/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/support/cyclonedx-proto",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/secret-management@5.0.0-rc.2?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "secret-management",
      "version": "5.0.0-rc.2",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "b532ab1703fecf3494a740df6ab5bc4e"
        },
        {
          "alg": "SHA-1",
          "content": "b93883281110d5289e4231f22fd46af5222ece17"
        },
        {
          "alg": "SHA-256",
          "content": "dfb45dd178165d283c4b363e4859bc505e16c16ddd3b93baf7f9f5aa9d184656"
        },
        {
          "alg": "SHA-512",
          "content": "6ae226731afdb97c39676f37cf6301ba8c391ed99e9ca2434085f4e4dc6b5db64cc7f8d5c25b69ed64a132843d3c949db78112c369da77a78dbe3992dfcfa8f2"
        },
        {
          "alg": "SHA-384",
          "content": "99ee4521cb17e5e97520404e8d488692ccec5b524b6cee3c67e8047e8e7ea13511c7fe518e1de2302f276f48bc608a97"
        },
        {
          "alg": "SHA3-384",
          "content": "f33ea0e0fe623cde7b926e905fa0d4baa314866f8fca9b18e00c43767e98cf0571d110d39b6e8c5bcb0d9d8bd27996e5"
        },
        {
          "alg": "SHA3-256",
          "content": "b1d609672e4bbfc5dfa397f71deaa2a504956e0030045a7ecc5e08927ecc8dd3"
        },
        {
          "alg": "SHA3-512",
          "content": "f726376ffd0ff71464a3d97ef1d85485bc92d58e247a01f26105fcb530e65c5d4eefcf16fbecdffe8355f797db98ee70460277d062311c67e5feffdb86dc9c72"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/secret-management@5.0.0-rc.2?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/secret-management/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/secret-management",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.crypto.tink/tink@1.21.0?type=jar",
      "group": "com.google.crypto.tink",
      "name": "tink",
      "version": "1.21.0",
      "description": "Tink is a small cryptographic library that provides a safe, simple, agile and fast way to accomplish some common cryptographic tasks.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "f710f7b1331937bfdda94cc0a1e8653d"
        },
        {
          "alg": "SHA-1",
          "content": "cfb40763a9dc2e0cd887bbb3b1a0002dfa1216d5"
        },
        {
          "alg": "SHA-256",
          "content": "065086dbbd61c95529f782966c3462838cc8a801ba78420223aa319175a444ff"
        },
        {
          "alg": "SHA-512",
          "content": "d2683a4fd5af1f0bbf5ef97d16e10c7bcb7a58aaa75dcc0ebc25e8cce68296b728deb6ae2ca0d0569b088cd1b98efb9d5ede4475761fc53c40b77939ff9da6d1"
        },
        {
          "alg": "SHA-384",
          "content": "7192392f6593290a578b78ca2b4cbc31b2ec456aa8e80bae52817abdc434ea19079473c220d57867ad30d39cf0f61ac9"
        },
        {
          "alg": "SHA3-384",
          "content": "6376978f10ec2a1ccf7cd2434fca6823e2145561bc53329ff3fb7f596f69b59f13c98d3fea225d165902d920283b3dd7"
        },
        {
          "alg": "SHA3-256",
          "content": "9e4f60fb275e64c2f8e883cc088dd9f976d59d435cf936c22b27ae2cf1e4c7bc"
        },
        {
          "alg": "SHA3-512",
          "content": "35f13efd45722d54899a5dc3cd58500128a9140f6a9d253fa8af41fe138296642d3923299a58594cb07907dde214d3538719ab0d8c0785aa76d7d29e95ccfa4b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.crypto.tink/tink@1.21.0?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/tink-crypto/tink-java",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/tink-crypto/tink-java/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://groups.google.com/group/tink-users",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/tink-crypto/tink-java.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/vuln-analysis-api@5.0.0-rc.2?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "vuln-analysis-api",
      "version": "5.0.0-rc.2",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "1efdd5862befa481edc9e043e491e8c4"
        },
        {
          "alg": "SHA-1",
          "content": "bb31411abc713e9150fdbe01748728c20735cf52"
        },
        {
          "alg": "SHA-256",
          "content": "ae613a8a7e114fac2f989f6ac8b54b0929ee543f453a266879f98f2ed22177d4"
        },
        {
          "alg": "SHA-512",
          "content": "ba42c9e39467d07bdc9760fdaf42d21770bcdc586ace772475d46ef79d802b7af34c16b2a44a2e8073171a56da6034742541cb29a312b48857a421dcefa288cc"
        },
        {
          "alg": "SHA-384",
          "content": "6a52e8586b98c7fcfacf05cbabe53d08308ae6ec7ace8ff61e6ced607c594b9c3b695b74df0e3163ec489fb2c1ccb286"
        },
        {
          "alg": "SHA3-384",
          "content": "4bbe1aafbf7dd7662b88b58c80f6b472e06c9dad1d93e5d88bf53746197a5b35fe55092f0d3152ca677e09013ba07035"
        },
        {
          "alg": "SHA3-256",
          "content": "d28d88010853fd2fdfc24b7293eeb70723f650dea124a518f15f43c0c5760468"
        },
        {
          "alg": "SHA3-512",
          "content": "791e2744dc2945f09194a512c04fd2ea569f75c152beb3e414a04e8918f2d67896cbe89f640a79e91d0ba1df827aa6571b98dbdbf0ca7088547455554bc0685b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/vuln-analysis-api@5.0.0-rc.2?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/vuln-analysis-parent/vuln-analysis-api/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/vuln-analysis-parent/vuln-analysis-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/vuln-analyzer-internal@5.0.0-rc.2?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "vuln-analyzer-internal",
      "version": "5.0.0-rc.2",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "dc7ad20952758f24abbf93525bd53a87"
        },
        {
          "alg": "SHA-1",
          "content": "230d6cbf0c402e64b40cfd76d764dbda5b1e0f18"
        },
        {
          "alg": "SHA-256",
          "content": "1a7f9d0c4fe6d437997e13b142e022f25d29f7850af7b7abaedfbb74ff0ef06e"
        },
        {
          "alg": "SHA-512",
          "content": "83b66c5953064af9d5748824d987ba77f2212ab5b93d9238d2c485874963116acb73c434c68f56fff18162bc1100118a7592c0f9f94366e89641f034799d0e98"
        },
        {
          "alg": "SHA-384",
          "content": "6af4e6d051f2d79472a4b2b14e473e3b21ae41256333de7ab858c4dea97580150dec434cbfe692de53a9e9fb63887a95"
        },
        {
          "alg": "SHA3-384",
          "content": "ee15555f415ac870e226165631354722ac3634f21770975a89716155542f865ea7549cab2005c6d5b3e97edd336e2fc9"
        },
        {
          "alg": "SHA3-256",
          "content": "e6471f00d885bd03973e5ce8e2b3506aa94638702089a8f6294870df6fd3d350"
        },
        {
          "alg": "SHA3-512",
          "content": "6eef523984fc49692414c691ceb63d4e39069caa012e7a23387f13e5080a5919eab383eac56cbd3f303ece5889201644d77bc4e0356f9c9429e3f278b1e95030"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/vuln-analyzer-internal@5.0.0-rc.2?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/vuln-analysis-parent/vuln-analyzer-internal/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/vuln-analysis-parent/vuln-analyzer-internal",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/os-distro-metadata@5.0.0-rc.2?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "os-distro-metadata",
      "version": "5.0.0-rc.2",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "7db1dcc1d2e53a9d3eed1b10a0374de5"
        },
        {
          "alg": "SHA-1",
          "content": "48302b7236b45839b4e99e8bec3f56d8387f919d"
        },
        {
          "alg": "SHA-256",
          "content": "0bcba635921716493bb5d424589e464e95bc7b88816ea27352cfdc7e2fdc674c"
        },
        {
          "alg": "SHA-512",
          "content": "d123e3670d908cc0ff8d45c03447e396a0c30c3353d4129f8c8878bb3bb247d9f25f5c0fe3c85b00a3303452aa33dcab4611990dd4ff999d526f27fcf7f58af9"
        },
        {
          "alg": "SHA-384",
          "content": "4b0d46d0c5c648dae0a3599aa914f1da1b9fbf410e4c00404e0f30bd29b72ed9756e355cca35a2e48370f54b746efa71"
        },
        {
          "alg": "SHA3-384",
          "content": "8add979c58aac2e4b052947903aa3133a0bdd43b65b20d58cb1803f889f18fa36b3c8fc8bef5a55e2cdf7ba46ebd7ed7"
        },
        {
          "alg": "SHA3-256",
          "content": "7cff95bcb1096254381654cb9e8a7820574a04c1cf816f57f126b82bb91f38b3"
        },
        {
          "alg": "SHA3-512",
          "content": "7346d848d40a83f5b428f56df7450533e0abc3ac600c5270c92f1ef866fe532d668b701eb4aafe209481974b42f7b041b2169eda6110b1621f8ac00e9e2c7806"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/os-distro-metadata@5.0.0-rc.2?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/support/os-distro-metadata/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/support/os-distro-metadata",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/package-metadata-api@5.0.0-rc.2?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "package-metadata-api",
      "version": "5.0.0-rc.2",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "e31bb37d952ec1869760c3ba7f35e30c"
        },
        {
          "alg": "SHA-1",
          "content": "05aa84651c91954eae73600eab058c64fcb478b2"
        },
        {
          "alg": "SHA-256",
          "content": "acb023772a4fcd5ba1a4c8304225ee699887a932c590728c9a0893403d0704da"
        },
        {
          "alg": "SHA-512",
          "content": "ea252f4f94b23fefcde8230f6dc4f292d82cd3ef91f0f116a40b8d407fe0bc660c3bc11914cc0bc0c74e015ebfd98483ffdd85cd4cf44c65ab54d4d2f0cabffa"
        },
        {
          "alg": "SHA-384",
          "content": "7654e613b43bf0a043f296fa06a9e679c1e9e75546fb2df62c1be088bf5664324f2736712fbe4d3f969e292e524f30d9"
        },
        {
          "alg": "SHA3-384",
          "content": "037e3f5c8dbdbc8beeab9734a911801b6e7b3ae4d3e919987dde324d9d39e97f292d0ccdfab5028ed1fc6e4d676c19c5"
        },
        {
          "alg": "SHA3-256",
          "content": "36bc2dcb079ebf2b09cf2b5987c47eb41dfea894f4d8029d3ac0f4ed6b8df01c"
        },
        {
          "alg": "SHA3-512",
          "content": "76a1e8f632d430bba627c9bb61cd1b44364677aa7ba8621e73372cac84db7f9b1d2c350c121328aba768c91e89465cee4d99770b418a2ad89ac4dbd05a2f823b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/package-metadata-api@5.0.0-rc.2?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/package-metadata-parent/package-metadata-api/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/package-metadata-parent/package-metadata-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/package-metadata-resolution@5.0.0-rc.2?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "package-metadata-resolution",
      "version": "5.0.0-rc.2",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "32e04b1475666554455f2f20e3328bfb"
        },
        {
          "alg": "SHA-1",
          "content": "e19cb55057fa37934d9b6973613f41fb55beeb6a"
        },
        {
          "alg": "SHA-256",
          "content": "422e300a829925410ee9e9437321c5d4c2d876583545aca35dee84fdb1ef0d5f"
        },
        {
          "alg": "SHA-512",
          "content": "663d448eb108916476661f029f890708b7609c698769bdacc3c304b7a89f3e208a72fc177c65dbc817b715bc25e68e2f8b7c54862f76dc96b8777e853c1c0547"
        },
        {
          "alg": "SHA-384",
          "content": "e797d084bd34701e06fe0ff1613b9eff8474f789ddae7d5fee5ad8105020bb31ee9486dae71b86198255288b3e1791ae"
        },
        {
          "alg": "SHA3-384",
          "content": "ce32a5337380c3d61816c9f3e9a906f152d5a4be3651dc47a4a0518d00ecca88422b56175985380aaac2fc27eb2f1d90"
        },
        {
          "alg": "SHA3-256",
          "content": "20d716f201d55b97d7faff38e64fe3a239aad37cddb80f98288fdccdfdd33ad9"
        },
        {
          "alg": "SHA3-512",
          "content": "0f0a1269a3e1bbdaebf89e79fae2154d5d614941d22f4d45ae21c7247988099dd212e05d16e4115a5d57036ef17107066bc9d508b089410656f7a517b8d804c0"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/package-metadata-resolution@5.0.0-rc.2?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/package-metadata-parent/package-metadata-resolution/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/package-metadata-parent/package-metadata-resolution",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.brotli/dec@0.1.2?type=jar",
      "group": "org.brotli",
      "name": "dec",
      "version": "0.1.2",
      "description": "Brotli is a generic-purpose lossless compression algorithm.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "4b1cd14cf29733941cc536b27e6aedfa"
        },
        {
          "alg": "SHA-1",
          "content": "0c26a897ae0d524809eef1c786cc6183b4ddcc3b"
        },
        {
          "alg": "SHA-256",
          "content": "615c0c3efef990d77831104475fba6a1f7971388691d4bad1471ad84101f6d52"
        },
        {
          "alg": "SHA-512",
          "content": "d4cd2b33f7c358012ff01db6a13ebfe1e8051a580698bffcd942c47451012cf53ce49a400b1c8bf7502b01e631d79d7c6417202a145622572d79fd145ccde61a"
        },
        {
          "alg": "SHA-384",
          "content": "d6b8ad9d0ee6baf8c3a29c1dc2911eaf207352e2c7de893a0185e987e7eae87827890c1d4dbf31c46f25846fbcdc08bb"
        },
        {
          "alg": "SHA3-384",
          "content": "d16c32130bf6b168ff4c8a3dedf1b17787f8d6f0eab9de21e51ed3ab1e7d85925dd02315972f6ca3a4493357aad545cb"
        },
        {
          "alg": "SHA3-256",
          "content": "962dc76a5c487de8d34308860ab65927bf91f50ccb12f37bffb036a7a05145a4"
        },
        {
          "alg": "SHA3-512",
          "content": "a82a3f79b57d30613606ca51dc432b097fa75aab5c87fb45eabec6d80ddeff1b329100b325bb07005aebaec166952c4599a863d4bfd5a684bad21103a2046311"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/license/mit/"
          }
        }
      ],
      "purl": "pkg:maven/org.brotli/dec@0.1.2?type=jar",
      "externalReferences": [
        {
          "url": "http://brotli.org/dec",
          "type": "website"
        },
        {
          "url": "https://github.com/google/brotli/dec",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/vuln-analyzer-oss-index@5.0.0-rc.2?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "vuln-analyzer-oss-index",
      "version": "5.0.0-rc.2",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "e93d3ab4f90ab8be1541925720724168"
        },
        {
          "alg": "SHA-1",
          "content": "49af53095fa057074443e9daaa86fddc68d8103a"
        },
        {
          "alg": "SHA-256",
          "content": "22cdefdbf1d6738df2d7496d9617a633bc1cb159bad68e05f411a2ed70cf0576"
        },
        {
          "alg": "SHA-512",
          "content": "34d12e35241774943cffe2d8b1491806ad0db7d51dea2d115a70f0ff431d2273ca8a2037afcb3b780c6de05f3e8a83d55e46fc3ece4e36d79c6f0ceb894a15f7"
        },
        {
          "alg": "SHA-384",
          "content": "3100f65e9a1c91f81406d33511240f15620852c45c21562cbd9e6c945b972b680e4eb014ae60a52c3b810f530d193f09"
        },
        {
          "alg": "SHA3-384",
          "content": "9538852e4d18fe9da47fab74a666e6ba1fb1d95a9ceff7a866605f01059ed61e3a1c8de69b7548f0bedb2b6235e72843"
        },
        {
          "alg": "SHA3-256",
          "content": "fe82e836a6df97b87cc9e29440fd2f01ffc58862c9e12d265baaafe4354f9b58"
        },
        {
          "alg": "SHA3-512",
          "content": "6242d7ff857eb369abc003b74f5674ed259caf25adc17133ce69dcb4c73db611e3f62058647ee4c0dfa9dd3feafa10ee436ea49bb6dd10209752b42369e3080a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/vuln-analyzer-oss-index@5.0.0-rc.2?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/vuln-analysis-parent/vuln-analyzer-oss-index/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/vuln-analysis-parent/vuln-analyzer-oss-index",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/vuln-analyzer-snyk@5.0.0-rc.2?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "vuln-analyzer-snyk",
      "version": "5.0.0-rc.2",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "d983e6c5e3b5c96eb7f6c9a4001beeff"
        },
        {
          "alg": "SHA-1",
          "content": "21e22d9eea5dfd7425edb0125322aab1bb44be08"
        },
        {
          "alg": "SHA-256",
          "content": "c74d0df2371e5569390252bde3a740b6c2ebed32e9425d720c5e7de3e5784337"
        },
        {
          "alg": "SHA-512",
          "content": "760e64fb6cd475f54ee774ee504166f9c90f851b8040c47b9cd0d44ccdaf40863e871d066081f553cf64200682fc9ccfa3243f5d053b5ff09e424ee9d7aaccd2"
        },
        {
          "alg": "SHA-384",
          "content": "8e9634acd9dff7989baf71cd293211dc13d605aa77ad5d4ba2328d4c1dee1a391bf6905a4485684cb8c25bc8a3fe9385"
        },
        {
          "alg": "SHA3-384",
          "content": "b9f97e61d003a0399bbf378759195ded05207b3688f7134676891823bfde1a739f8cfd45c2d300b2f876b35a13d31e63"
        },
        {
          "alg": "SHA3-256",
          "content": "ffcd82bf33e5834b74287dda3e9bd910ba3d014023407194b1371d0f5cc22be7"
        },
        {
          "alg": "SHA3-512",
          "content": "8cf164b5cba73284c373caedff5dd21b66ad1ce01b30f95014214701703a15285f25ee0cd2e2d93d65760996b8575d555e5ee3fe7fd4a92ef1611a23b4938775"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/vuln-analyzer-snyk@5.0.0-rc.2?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/vuln-analysis-parent/vuln-analyzer-snyk/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/vuln-analysis-parent/vuln-analyzer-snyk",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/vuln-analyzer-trivy@5.0.0-rc.2?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "vuln-analyzer-trivy",
      "version": "5.0.0-rc.2",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "95bade7513f21cc0adbbc838befb703b"
        },
        {
          "alg": "SHA-1",
          "content": "b8cc9eb5a42eb680a7f9eac8b408b61189a68348"
        },
        {
          "alg": "SHA-256",
          "content": "b8dcabd98b2f120b98b12e40d8fee655281ec055e860d3627edfc98336b159f5"
        },
        {
          "alg": "SHA-512",
          "content": "0d2ac9cd65e9edaa7384254967dd0be163fba15bf10f53b05d88ed96e802a0edd94384176e70cb57aed912a71a7516425ace10a970db10a33883718422ac2591"
        },
        {
          "alg": "SHA-384",
          "content": "567c2f63e28db53fa231dc2dd94b222f1d1119c8e4685fd65b2036f16a2391a42c2f858d9c2d7ab844d4afb3e824a212"
        },
        {
          "alg": "SHA3-384",
          "content": "19b60b1c59c3d1e79bfd6814f2a572aa788f6d47f27a87b5cd3648d40a4696c1ffd5eac143bb3789ff8b8f5072330a96"
        },
        {
          "alg": "SHA3-256",
          "content": "6a3eb1eea91e864e820d8763c210e0b7f1c263a5132a2b4fc0e0923ac93e919b"
        },
        {
          "alg": "SHA3-512",
          "content": "b1f723991d35a31793e4cf7bd87c0212061a74a77a9a72ce5c5aa310e13c9f844230c16dd15f77435fd45f28f820fcb50ad8242cee308e8c354bc657eec0d10d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/vuln-analyzer-trivy@5.0.0-rc.2?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/vuln-analysis-parent/vuln-analyzer-trivy/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/vuln-analysis-parent/vuln-analyzer-trivy",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/vuln-analyzer-vuln-db@5.0.0-rc.2?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "vuln-analyzer-vuln-db",
      "version": "5.0.0-rc.2",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "c95aeb2f056add28b5d5266d4483751a"
        },
        {
          "alg": "SHA-1",
          "content": "c16eeb30a89590dc71395f5c01f92ec2cad6bd65"
        },
        {
          "alg": "SHA-256",
          "content": "1819f00051f6f27ebd6538239967eb867219e42d1485d77df2b16473c68b9165"
        },
        {
          "alg": "SHA-512",
          "content": "c986414c1a3cb22512e014784763672fc91d6fdb7675622a87633e474fa0f26f1662a8e046bef6dfbd463cb40d17754e5c741cf8e1d6d7e27c25f6686a5adf3c"
        },
        {
          "alg": "SHA-384",
          "content": "88df036a1e1859ae070864828d8b68ea74c1316c1800b150172f408249c956382bb860441cc848d6aa57a54e9875d314"
        },
        {
          "alg": "SHA3-384",
          "content": "be750120be79e3f21b8a63ad8c38e4fb0beef1205f2034e36c45466757ebe996c85706de13440a3f568e6428678d3f7f"
        },
        {
          "alg": "SHA3-256",
          "content": "aceb3154076ffd1be6dd1ebaf69ae0f5c9de4447a47a61f0e46e96c9bf2ba0e3"
        },
        {
          "alg": "SHA3-512",
          "content": "d8abf8f9c3a0695f95fc284930d5b68e71176768147ce7ba78d43ccee9d5b73ca7c8de6efc00201d65e449acfde3723087fa3e4c81399b91a4310db4707df308"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/vuln-analyzer-vuln-db@5.0.0-rc.2?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/vuln-analysis-parent/vuln-analyzer-vuln-db/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/vuln-analysis-parent/vuln-analyzer-vuln-db",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/dex-engine@5.0.0-rc.2?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "dex-engine",
      "version": "5.0.0-rc.2",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "1fef83548d5b77823a6bdeb57c393b0a"
        },
        {
          "alg": "SHA-1",
          "content": "dc65e29141db825540f8a80360010071aa9fedc0"
        },
        {
          "alg": "SHA-256",
          "content": "a3ec896595b4662069d7e32dacb15fc31ef32470ac4789582412a59d381a94c0"
        },
        {
          "alg": "SHA-512",
          "content": "b158404d71c29f4eb3f029bf3cccf8b32f60a0507bcdf7d416eadcc9d3c9d0db2100f2e0d09b3ed64d8b14aaed3175e91d558287b341444826fd79cf073b8fd0"
        },
        {
          "alg": "SHA-384",
          "content": "25956c0fc664a706c5a104e50d178a624adee8bd978587ff25cac116148b4bc06c5b9ca641ceae521dca1a3544f81c34"
        },
        {
          "alg": "SHA3-384",
          "content": "27b49fe949dab832b7d145688128fdad3067d986a797316e1de108ffbfb02296a6ccbf9d610f7388e30d23301f9bdb60"
        },
        {
          "alg": "SHA3-256",
          "content": "0c9f6c23a3f007a50163b7e5d10e0188d1899c51a177d6297728924aa5e613af"
        },
        {
          "alg": "SHA3-512",
          "content": "ed0186c9747a45ca40a816f72c77781348e82401a1703ff40d53cf731c9367e62a8afd04753cb9961ba627fb70f454658a52a2e7fc9ebcda9325d52f3682a626"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/dex-engine@5.0.0-rc.2?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/dex-parent/dex-engine/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/dex-parent/dex-engine",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/dex-api@5.0.0-rc.2?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "dex-api",
      "version": "5.0.0-rc.2",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "ce7f9261a322332817723802e62fb47d"
        },
        {
          "alg": "SHA-1",
          "content": "bc91f0ac46b9814344acf85560fdb9bf67a712f6"
        },
        {
          "alg": "SHA-256",
          "content": "1356fa7976d769c982c28e18675b81b5a293e9c70022f2b5d64f440d334d412d"
        },
        {
          "alg": "SHA-512",
          "content": "f2430ff2da92c18ac5b632be0dda0250e738648ddc3d4c5b5afe272133a5b12c167ea14c6dfb1240235badb4ba5f060a2723a2688925d9b8ddaa637d8f7ba72f"
        },
        {
          "alg": "SHA-384",
          "content": "b34fc0275c0255f924f3aeb46e6792d51c2337b5b8804dc5bc60e736d436e295bcb9b076965d6341e606a9940b379608"
        },
        {
          "alg": "SHA3-384",
          "content": "55b157992b3ebce57b02efba1400ffa579fbae73804555dbfa96e2548138c21c0c9acbe3d631d5849e5fa087f0f611d3"
        },
        {
          "alg": "SHA3-256",
          "content": "e70e8cbbed2038e41feac41228fe6da0bd35430e88ef167d6aef0ada3858cee5"
        },
        {
          "alg": "SHA3-512",
          "content": "d46e67119d6a58b90e35a320ada842c8ea89f9897890fe060edad236dbe3864b5ffa3a2a78f0970ecccb10c254a9c16525b527f290897a651cb8f29702c244e7"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/dex-api@5.0.0-rc.2?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/dex-parent/dex-api/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/dex-parent/dex-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/dex-engine-api@5.0.0-rc.2?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "dex-engine-api",
      "version": "5.0.0-rc.2",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "b44cd346c40a8695ac4397902e5a834e"
        },
        {
          "alg": "SHA-1",
          "content": "bb289cd8da387c61b99d7f508862d43600bc2d87"
        },
        {
          "alg": "SHA-256",
          "content": "3771d1487bd607076ca8990cecca446ccf891dbf936ce64a7ba8fd0e822ca97d"
        },
        {
          "alg": "SHA-512",
          "content": "37733f51769ae27b162a1db3f21d6ae567821ad4f15c5ebcc349a5ca277cfe33a5eed696745f3f09a5b16562b57064dcf78a082605a3d4e4e56564bca3169d01"
        },
        {
          "alg": "SHA-384",
          "content": "a732e4e4f8947dc7db7a499cc2453832ae6b5f4f11c4cfd31e44b5dbc95cafbbd858935a8ddd5ad4be800c1e2a694d28"
        },
        {
          "alg": "SHA3-384",
          "content": "9e13e26d6d2ceed1808c14b72f426e972514ae434c566b908c58778478196d3f0228a1cee5a434e9662b9b64bc21a308"
        },
        {
          "alg": "SHA3-256",
          "content": "603337ae5ae8e82a32bd8753db7cf784178265750664248f4317306e0e7e5278"
        },
        {
          "alg": "SHA3-512",
          "content": "0af82b93cfe4c6f3e373982f40e2fb4fae29bc72d07b1aca5d2eb6971d0970d894568d7d3c3cbdeeca514087c3c8c335e929b76c2a56c8eb84a1e942cfcf6301"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/dex-engine-api@5.0.0-rc.2?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/dex-parent/dex-engine-api/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/dex-parent/dex-engine-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/dex-engine-migration@5.0.0-rc.2?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "dex-engine-migration",
      "version": "5.0.0-rc.2",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "6412f2a35cac9236af108c3e7a3af7ce"
        },
        {
          "alg": "SHA-1",
          "content": "40112b3c1a6c707196e91d8a40c6989f4acc2144"
        },
        {
          "alg": "SHA-256",
          "content": "49ff4497b672ccecbfe9171e01364329bb005aaf28950af6100d251d431168d4"
        },
        {
          "alg": "SHA-512",
          "content": "2549531026b80d1ec96f01f3e5fdd4f8b66c4d6df6f84ed97781a4f77c31befdab257b2357f69ee403706c05316baaf6ae21368869a1e20f787324c65b6c315f"
        },
        {
          "alg": "SHA-384",
          "content": "8283aa4199b55c9390769d33261a99b51179c8e0161b2588f8351125404c14ebe164486d8e07d9d8362f431dc296e73d"
        },
        {
          "alg": "SHA3-384",
          "content": "fb1c97df6d598d8dd6c7a1648a21e10dd424284dbc72eddecde9f186009d8fad281c2a3d15923c03fea5409241fc04ff"
        },
        {
          "alg": "SHA3-256",
          "content": "3b08799865497ffbae31dc5a7bb70e6cb9ac2a8021940e0dca73fae9247a4870"
        },
        {
          "alg": "SHA3-512",
          "content": "6651fd5186a02be55c06836f6eb93cbecd92d217c1b9dca0871ee0ddb01c313e62d550a1a1a5a3cd2f22ca4e2303634f993ca5e56a2d006399a0dc084150b88a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/dex-engine-migration@5.0.0-rc.2?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/dex-parent/dex-engine-migration/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/dex-parent/dex-engine-migration",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.github.resilience4j/resilience4j-circuitbreaker@2.4.0?type=jar",
      "group": "io.github.resilience4j",
      "name": "resilience4j-circuitbreaker",
      "version": "2.4.0",
      "description": "Resilience4j is a lightweight, easy-to-use fault tolerance library designed for Java8 and functional programming",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "5e142f710747b6d4746413aca6757222"
        },
        {
          "alg": "SHA-1",
          "content": "10b06bc2b679f5682f5528b0058ba1a166734db5"
        },
        {
          "alg": "SHA-256",
          "content": "31ab1d15570357271b8c28d82b2f412c5f36a81ac253145aa32177c4f087efdc"
        },
        {
          "alg": "SHA-512",
          "content": "b5d23f8ddabb8d22585e93db1d5ed0b11cb2807c1279b45c74988eaf621e87324cd9a74deaad8b17c6b5a7219f2a17b32550be478c0621cb9fea762f3f5d867c"
        },
        {
          "alg": "SHA-384",
          "content": "826513581ccb029b95c9fb4b579035131a3166e6d99381b7084875fe2997545dfc41956f9449f3f4963d233b71f9d647"
        },
        {
          "alg": "SHA3-384",
          "content": "6f25185fccf89be43a7aef0349ce69a272ef09bc179d8394932bf473cd17650d143cdc6a24a3aaeb77bb806be018b630"
        },
        {
          "alg": "SHA3-256",
          "content": "6de361abc2ecbde73d99917ee11cc808c12f72f4a4c0da8682835675da985f4b"
        },
        {
          "alg": "SHA3-512",
          "content": "3baa1529e89d34844eab621f170ff4ea78771f15bdda9a5ff50ae1095b3d1c579b4ca45bc169c654f8934118325bd82ea6cdb3977d06d76218b2c128591b9a44"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.github.resilience4j/resilience4j-circuitbreaker@2.4.0?type=jar",
      "externalReferences": [
        {
          "url": "https://resilience4j.readme.io",
          "type": "website"
        },
        {
          "url": "https://github.com/resilience4j/resilience4j.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.github.resilience4j/resilience4j-core@2.4.0?type=jar",
      "group": "io.github.resilience4j",
      "name": "resilience4j-core",
      "version": "2.4.0",
      "description": "Resilience4j is a lightweight, easy-to-use fault tolerance library designed for Java8 and functional programming",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "876d87ec308d8636105e17577dc32ec0"
        },
        {
          "alg": "SHA-1",
          "content": "917315545f2ae0221ef3d6c27337b9ba6cba2702"
        },
        {
          "alg": "SHA-256",
          "content": "a15d25c4709a4c12432cd0a4f620e37a00a82dbe112f5d1a7a68b31325ffc978"
        },
        {
          "alg": "SHA-512",
          "content": "0b297e68f9e4542a724d507697c5476568dc8459156e70dc2e4b3fa812be7a6d070c603a58ba9eb1e2331df78479da71a44ada6a4d303f6f0ab224cb24bb2f07"
        },
        {
          "alg": "SHA-384",
          "content": "73498053467091de64ba6cdb62948e268afba62386a03fabcee6aafcfde6ed152bcec726c1f7d78d5b9ee7a1c34008fe"
        },
        {
          "alg": "SHA3-384",
          "content": "d1adb2a7e58982ff23beafd2aebfd2b3769d37caa965a1542d8d1c6d3cc1499117d874fa2e95c8e4b1c98033ecc37656"
        },
        {
          "alg": "SHA3-256",
          "content": "db568c467b698f1e695e75982105fbce261f91ba528539cc3ff10c67e81562b5"
        },
        {
          "alg": "SHA3-512",
          "content": "635fd7c97582d1deaf7b3fc74ff38d796656fd110e881d3cf793aafd30d73e649a25e58f7575bf8ce54e85291061871c21bbf31c19db937902b31a5de27f0054"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.github.resilience4j/resilience4j-core@2.4.0?type=jar",
      "externalReferences": [
        {
          "url": "https://resilience4j.readme.io",
          "type": "website"
        },
        {
          "url": "https://github.com/resilience4j/resilience4j.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/file-storage-api@5.0.0-rc.2?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "file-storage-api",
      "version": "5.0.0-rc.2",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "a76ee0c51a49f07987a8fba606ec2168"
        },
        {
          "alg": "SHA-1",
          "content": "c180f751604651120e59d8a41efbd6467072a6e4"
        },
        {
          "alg": "SHA-256",
          "content": "61311705c11268c589785d63247881a347fd3d28439f612057943da215effc2a"
        },
        {
          "alg": "SHA-512",
          "content": "89a05f0039898bc06f4382ee14ffbf8e414723b943af2bb43bdd124ea90cca88d86b1b534143d1267cb281b4e9ead86090b41d7f0f0e91002a55aa872f119c7b"
        },
        {
          "alg": "SHA-384",
          "content": "3075cff50fc0902315fff6f40c5d4861d02fe8b35071ad696adead969e4180fd11dfdebe97dd882a3b10355ec726df30"
        },
        {
          "alg": "SHA3-384",
          "content": "894938ddae9371d6225f47a3bb586214a10ed94a000d9b825b597e0e335fb9308f04683de0cf9ea280fe1d040fc7c45b"
        },
        {
          "alg": "SHA3-256",
          "content": "763cba31412d3647009102063dccda505ec051b5648ab9638db3e47344ec7db3"
        },
        {
          "alg": "SHA3-512",
          "content": "d6e40d835f349b53e4f530883df7361596cc1e94c1e3ee7fa572a559af0ca963c77def194feb541a0483eb05b1aa670293c0c9d1f0d452d15f9a16c3a07fd673"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/file-storage-api@5.0.0-rc.2?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/file-storage-parent/file-storage-api/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/file-storage-parent/file-storage-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/file-storage-provider-local@5.0.0-rc.2?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "file-storage-provider-local",
      "version": "5.0.0-rc.2",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "7bfd731f8607cebbc155b3b64d65ba36"
        },
        {
          "alg": "SHA-1",
          "content": "74b86ff0bf999b057e354ed13b7d866241dcfa37"
        },
        {
          "alg": "SHA-256",
          "content": "17d1f00df1a50f071936d4b215c5ae125e4f3b4c8f243bb5102074076e8c6bbc"
        },
        {
          "alg": "SHA-512",
          "content": "a1c08d511b84e0b5503710114ea8c67aa9a53a6f67b4a64c832d0f7eb709517ea0af43964aa448987ea65f6ab7e7db5f19e34b126d5506c240960fd53376a4a4"
        },
        {
          "alg": "SHA-384",
          "content": "99a0f41dbdd5b2a34fcdaa88b9340ee7ab29f1bc3eae234dea8c680c82401cd309eadcbb1a069c12ccdba8d0fb14f04e"
        },
        {
          "alg": "SHA3-384",
          "content": "e3a550d8468d96961d9823b9ab1269ec54ee132d3f51bdf9c8d04747a84634984366f40a8b88f72f585df0b5d08e7f6d"
        },
        {
          "alg": "SHA3-256",
          "content": "7e1f62851da9111498d48f22f3df3fa12a1ef2fdde1bd83f260a51d158acbbfb"
        },
        {
          "alg": "SHA3-512",
          "content": "e4b512371a8d8cd4925d65e4c9bd9fcc6435a3a0e7decddaed627547d2c26c3fd2cdf1af2fff2cafa704d68400c59c4c640631cee24310290601990a26772451"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/file-storage-provider-local@5.0.0-rc.2?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/file-storage-parent/file-storage-provider-local/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/file-storage-parent/file-storage-provider-local",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.github.luben/zstd-jni@1.5.7-9?type=jar",
      "publisher": "com.github.luben",
      "group": "com.github.luben",
      "name": "zstd-jni",
      "version": "1.5.7-9",
      "description": "JNI bindings for Zstd native library that provides fast and high compression lossless algorithm for Java and all JVM languages.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "f01a37a4790153bcd57238a0a2a1cbc8"
        },
        {
          "alg": "SHA-1",
          "content": "49dbc40087f8b8150e0cad3e5396dca060727aa1"
        },
        {
          "alg": "SHA-256",
          "content": "087d02f39a46ab79b18f883ac7c3a3d6c2df1fd3bf7eaafeade699e0743d0dbe"
        },
        {
          "alg": "SHA-512",
          "content": "7a5df5273a6552cd9869995e85464dfd5992a5751747b76a062858789a95bbdb0731d0d175c365d0d65b18ceeb20a68763ce2a1d489699153a13c4d587f5623b"
        },
        {
          "alg": "SHA-384",
          "content": "9d684bb2b74de2c15dbfbf8cb837e1c3fdac7635590179f08e748b70db699886301a8d7da05ee04930451c913b0ba77d"
        },
        {
          "alg": "SHA3-384",
          "content": "bdb54a162d0dedd29da7ae3498e44ad29d75521e763ff83ae1dd9cc435809009593b74be9308b188bdb1d7ca16797342"
        },
        {
          "alg": "SHA3-256",
          "content": "0ac2ef503dc0ad9563a3dd7e24f1a3b1591d032b53a6d4758b8acb1b0b0d5180"
        },
        {
          "alg": "SHA3-512",
          "content": "2746ac595ea064e4a70f32bd1728cf7ce7fcc53e752d82b85731cfe5ffa66f32e729aa2e94a9afc5c85e3078f99dbe35dd7ba8372ad7577c52050d9021a6d95e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause"
          }
        }
      ],
      "purl": "pkg:maven/com.github.luben/zstd-jni@1.5.7-9?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/luben/zstd-jni",
          "type": "website"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/file-storage-provider-memory@5.0.0-rc.2?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "file-storage-provider-memory",
      "version": "5.0.0-rc.2",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "bc808961d26336f8acffc137ee77c8e9"
        },
        {
          "alg": "SHA-1",
          "content": "5359fee20c28eda037d5de8c7358c0d805fb8406"
        },
        {
          "alg": "SHA-256",
          "content": "17ce4c714568b53092ab67cd9946cb6afad5850aa50e3f48c270dcce4e03aa73"
        },
        {
          "alg": "SHA-512",
          "content": "59cb7f1a0977c3d55c00551e5cdfd7146c3804c1c03dcefa8bd06465779b7c36565b62b00bfa508a2cb89a244664ad589cca612d9f7db53f5ba8fb711d7927b6"
        },
        {
          "alg": "SHA-384",
          "content": "2551df94013f7cc3e014edae14a18b70041767c76039e5b35d393f47a28fc7766c3c90db13fab90954f606ccef1053ef"
        },
        {
          "alg": "SHA3-384",
          "content": "f5d10fe4d73803a893d1a2c3c95846dc0c7c94e660c715fc07c59e5d594eb6ace0c60983a29581d3245ec8b61ec6d4f5"
        },
        {
          "alg": "SHA3-256",
          "content": "0b5409da3cf10e287f3445d4588bab6c7f673cea20099f2f93d460e90bd028a4"
        },
        {
          "alg": "SHA3-512",
          "content": "e3f73a8b0730b69de298b23601c067f9832f33284d841eb39bd4f3445c1648a05e83458a831ea0ff235bd06155c076154875f459b3eaedce8932645790cba465"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/file-storage-provider-memory@5.0.0-rc.2?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/file-storage-parent/file-storage-provider-memory/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/file-storage-parent/file-storage-provider-memory",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/file-storage-provider-s3@5.0.0-rc.2?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "file-storage-provider-s3",
      "version": "5.0.0-rc.2",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "c9911899ea25d5d944a3fd45c32de843"
        },
        {
          "alg": "SHA-1",
          "content": "e1f9449a152a30d6db0364fbbb8a3f31b9dab3a1"
        },
        {
          "alg": "SHA-256",
          "content": "1fcc408b312df4d49df04904aae99fd7c44896f7b120ba7b2f060799bf611aae"
        },
        {
          "alg": "SHA-512",
          "content": "d992d3ca82d20c0c8f0e1de1f031f75b8b48a6fc30fe41462eeeed356fd2bab6403d6d5cb076948e2591e7b53d9dc5e1f89f20f8667291fefd6e74186d789872"
        },
        {
          "alg": "SHA-384",
          "content": "027c16e53c110e6cccb3a0c94c574f9ce334782e2577c1311d91ff1d09050277c89876cf3db5243f429f6cb9c10892dc"
        },
        {
          "alg": "SHA3-384",
          "content": "76bebaef4ec8266d753de453d40ae56f7f3d09ad5e4a228e4213b7a6648f85eb9ddc6bec2996a379c68d5805e0721247"
        },
        {
          "alg": "SHA3-256",
          "content": "5e50dcf47c8af955808a65e0daefd8d2c67971d3162d88daea2bde9d36f70eac"
        },
        {
          "alg": "SHA3-512",
          "content": "dc9817234601c5cfc3fdf8fabc252071997e62c14643fcb785cc9026d5837f402b289f9a04c54d20c4b8e454beed0ac4aa9d9fe8201e415e4f20c5dad305e38d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/file-storage-provider-s3@5.0.0-rc.2?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/file-storage-parent/file-storage-provider-s3/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/file-storage-parent/file-storage-provider-s3",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/vuln-data-source-api@5.0.0-rc.2?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "vuln-data-source-api",
      "version": "5.0.0-rc.2",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "a0f7722865073a9bac0299a2db682512"
        },
        {
          "alg": "SHA-1",
          "content": "180973fcd262bd24b7bb52719e58af692476bca2"
        },
        {
          "alg": "SHA-256",
          "content": "ccafdc2a3126656d51a0bbc602c38c7f9ba779b2bcd985ce1196571b90217674"
        },
        {
          "alg": "SHA-512",
          "content": "a9b990fc47e89b92a800fc2daf168c85516b6bb015655d4033fe5c7bca7b2e3d73f251b522cd2f82a2b88e7e2f3b50a8868aadd950d165f785e5929a8b9ec278"
        },
        {
          "alg": "SHA-384",
          "content": "b6159e8f4a45e590c14fd196c0a77f8444ca472921cbf0a284194501223c90fdc012713a24a06c69fba33d6abc82807d"
        },
        {
          "alg": "SHA3-384",
          "content": "99160da5dcc8a921707e85937d826afebb3405aef6c1a76db4358848ea56b387267b4964f9a380a2eea9c8af62599d43"
        },
        {
          "alg": "SHA3-256",
          "content": "a9c77d3e3b41322657074dab23e2e85d2e20dfa95d68fb1193e01641c7c78533"
        },
        {
          "alg": "SHA3-512",
          "content": "10e336f28bfa8be439e6ef60134d72c7d84462a247df9d73b1760d6fd5f88315b40527b72e473cd609cac1448e255ecb0331b3893fca1cffe66de1bac0a6258a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/vuln-data-source-api@5.0.0-rc.2?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/vuln-data-source-parent/vuln-data-source-api/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/vuln-data-source-parent/vuln-data-source-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/vuln-data-source-github@5.0.0-rc.2?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "vuln-data-source-github",
      "version": "5.0.0-rc.2",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "7bea79671bb9b2ab74af77e80a922360"
        },
        {
          "alg": "SHA-1",
          "content": "7a211af52314b4accfb73ea147dbb4fc5efd30e9"
        },
        {
          "alg": "SHA-256",
          "content": "8345cb2b8a6f314d1ae31c555f77922dc3c0c5b605ad9866ff0a09ff3399b985"
        },
        {
          "alg": "SHA-512",
          "content": "2bf67cfe63a9cd28a8b3b42cf644177f8ea2355736912feb5b7e05825698af4c25f5c7d49f4957f96eeaa96aa8f3064117f8b017f6c093fc58accd20429631c0"
        },
        {
          "alg": "SHA-384",
          "content": "6ecd7811cbdad186dde2c1c52116b9b2c1dea24363b0b3cb754e75199d04f86f13d790c36266b1747802577220fb2414"
        },
        {
          "alg": "SHA3-384",
          "content": "d264d72475fc6c38f44411e2f3f89983b8ef9aeb20aef6f318aa7a9024d7287f28d576c2e1b4cb8ae4287f73a82bd249"
        },
        {
          "alg": "SHA3-256",
          "content": "5e234f0a680004252d405461649a44374d38d2b28b09df907e38c2f2d473c318"
        },
        {
          "alg": "SHA3-512",
          "content": "96a037cc9ec09a46aafcb08b9098daf44f35c00b88a7540470834612bf89b05f22928dccbd6bea43f53377d80ce7c33db11a299e0cdfa0c9bd5086996f2dd6d0"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/vuln-data-source-github@5.0.0-rc.2?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/vuln-data-source-parent/vuln-data-source-github/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/vuln-data-source-parent/vuln-data-source-github",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.commons/commons-lang3@3.20.0?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.commons",
      "name": "commons-lang3",
      "version": "3.20.0",
      "description": "Apache Commons Lang, a package of Java utility classes for the classes that are in java.lang\u0027s hierarchy, or are considered to be so standard as to justify existence in java.lang. The code is tested using the latest revision of the JDK for supported LTS releases: 8, 11, 17, 21 and 25 currently. See https://github.com/apache/commons-lang/blob/master/.github/workflows/maven.yml Please ensure your build environment is up-to-date and kindly report any build issues.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "4b29562ded527aa074e1d44f8646dac5"
        },
        {
          "alg": "SHA-1",
          "content": "65897b3e5731220962e659e001904af3c3cbeba9"
        },
        {
          "alg": "SHA-256",
          "content": "69e5c9fa35da7a51a5fd2099dfe56a2d8d32cf233e2f6d770e796146440263f4"
        },
        {
          "alg": "SHA-512",
          "content": "1c72db334ea44f932c35e602b78907865f5bab43e30c871c9be67c8184eaa778f32d7bc3ab525d5921cd28619d3f9babfd483f17de54f007ee07db2e074b0307"
        },
        {
          "alg": "SHA-384",
          "content": "77dd27c4d5e9372c002bd6878d2cfaaec3cf46dd57d65de63d7f2e09351344531cfa81a537b56628ac6db18adee7e484"
        },
        {
          "alg": "SHA3-384",
          "content": "3456de40eef224b3ad195d2f218dd28eacb0da07607aee7ead94bd8d54bd8311d51c28d4066db4bf8b69a2df48c415f5"
        },
        {
          "alg": "SHA3-256",
          "content": "36e3f71352fa14bc580db45a05b09b063392c6d39acf9e24ffa6a67bbc07a336"
        },
        {
          "alg": "SHA3-512",
          "content": "6ecbc05bb5cd3f7537078b0cf51b0a5f7189dfa60c22e5ec0d6b9e2fd3f7fa7566770b5da87e0c9929f48769933c3e3a473fd5cc7231672fca36ab1fee1f8670"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.commons/commons-lang3@3.20.0?type=jar",
      "externalReferences": [
        {
          "url": "https://commons.apache.org/proper/commons-lang/",
          "type": "website"
        },
        {
          "url": "https://github.com/apache/commons-lang/actions",
          "type": "build-system"
        },
        {
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2",
          "type": "distribution"
        },
        {
          "url": "https://issues.apache.org/jira/browse/LANG",
          "type": "issue-tracker"
        },
        {
          "url": "https://mail-archives.apache.org/mod_mbox/commons-user/",
          "type": "mailing-list"
        },
        {
          "url": "https://gitbox.apache.org/repos/asf/commons-lang.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.httpcomponents.client5/httpclient5@5.6.1?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.httpcomponents.client5",
      "name": "httpclient5",
      "version": "5.6.1",
      "description": "Apache HttpComponents Client",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "ab01ab53ec62de3b50ed071dcaba3bfd"
        },
        {
          "alg": "SHA-1",
          "content": "b418ba210ace28adf920f1decf64d673953d07cf"
        },
        {
          "alg": "SHA-256",
          "content": "1e3d8444c3c27772e4b9d42a790f06b3345a8ece4fd16d00981f2f2460e1e772"
        },
        {
          "alg": "SHA-512",
          "content": "2835c56a960c5c926cdd69183d55f9bf84fe3a076247ada8b5849374ac85fafbe39551441eac66f3d7f45652531a9b5beee33dbbd59ae216039d2970d49df772"
        },
        {
          "alg": "SHA-384",
          "content": "4e055f538e0e8748c30e58a6496786a0bda8696a132b9d3c15e11205e3814152b9d3a3ec638e27ba8d30eea80a418fd6"
        },
        {
          "alg": "SHA3-384",
          "content": "5b8306f67927298d10c658777e7e9ee70e52e6120982148f823bf6e63145edafa717b5738a45d516e87be0f19cb87282"
        },
        {
          "alg": "SHA3-256",
          "content": "9e05e2adb777099009635ed79c944bb7aa4a96f466b714c3441c5eaafcfd963e"
        },
        {
          "alg": "SHA3-512",
          "content": "50d4343a5e9d892ae23480079d8de24b45751ac4555b503e2cee2e791d7028c4a7f183b545c216fb66598f79e7f054ac37a87c4af978b7fe337bccf566ee0895"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.httpcomponents.client5/httpclient5@5.6.1?type=jar",
      "externalReferences": [
        {
          "url": "https://hc.apache.org/httpcomponents-client-5.5.x/5.6.1/httpclient5/",
          "type": "website"
        },
        {
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2",
          "type": "distribution"
        },
        {
          "url": "https://issues.apache.org/jira/browse/HTTPCLIENT",
          "type": "issue-tracker"
        },
        {
          "url": "https://lists.apache.org/list.html?httpclient-users@hc.apache.org",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/apache/httpcomponents-client/tree/5.6.1/httpclient5",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.4?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.httpcomponents.core5",
      "name": "httpcore5",
      "version": "5.4",
      "description": "Apache HttpComponents HTTP/1.1 core components",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "584964cc15b7390de975e97e8eb2e6e1"
        },
        {
          "alg": "SHA-1",
          "content": "e40011ec0dae056466399f8e414ede4772001621"
        },
        {
          "alg": "SHA-256",
          "content": "cec2981fa7f520efb63f0787c24f10af2679e31f9f75c448c4dde40a3ae8100d"
        },
        {
          "alg": "SHA-512",
          "content": "5d0dc9ea175373a6bbf76e48246bb3f4d3c43a4ca1cc4db0a10970736a30d3fd72996cce5fe07d675eabb0cad4da1e2fd6b3100d31e7d9d4507c617fc1bbe425"
        },
        {
          "alg": "SHA-384",
          "content": "7a9cf59bf40074c84dc395cd6dc91c2b2da630a2932eff8d42567bd870f0fc94f9605ea6c0725a83a7faf03f8d967305"
        },
        {
          "alg": "SHA3-384",
          "content": "2acb353316cbf3d0649e7c2f0765591f3ab9bab2f3a4aa1029f86a15338e7806a9ec41b101fa06b7fb29111d807eb33d"
        },
        {
          "alg": "SHA3-256",
          "content": "47dea1de78d259c1fb903bac72dd61acce885fbe2ab8e6b6d4f6e2439710699e"
        },
        {
          "alg": "SHA3-512",
          "content": "37c162c8a37107846e5950b2b15168d3b5677a4338dbc37b2f178f6fb5d5ad21c5cd81a6178054efe007d8fd088c42e8b2398df3e8d636d973a5035a01306808"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.4?type=jar",
      "externalReferences": [
        {
          "url": "https://hc.apache.org/httpcomponents-core-5.4.x/5.4/httpcore5/",
          "type": "website"
        },
        {
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2",
          "type": "distribution"
        },
        {
          "url": "https://issues.apache.org/jira/browse/HTTPCORE",
          "type": "issue-tracker"
        },
        {
          "url": "https://lists.apache.org/list.html?httpclient-users@hc.apache.org",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/apache/httpcomponents-core/tree/5.4/httpcore5",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.httpcomponents.core5/httpcore5-h2@5.4?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.httpcomponents.core5",
      "name": "httpcore5-h2",
      "version": "5.4",
      "description": "Apache HttpComponents HTTP/2 Core Components",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "a027e88d219ee744ddcdb32ed1e69633"
        },
        {
          "alg": "SHA-1",
          "content": "83cdd62ef3140664f46be59c2c2727141d1c5a32"
        },
        {
          "alg": "SHA-256",
          "content": "2e0f4ace15db2d1609c2b06eca6012e7582afe4a99ad8d15073f62dd8edb3460"
        },
        {
          "alg": "SHA-512",
          "content": "d9fed54460b52b68fc91502b1e7a0723cd97740455574b101929d6c77818f81340077fed7748a2b76a6d95e2dda711717caecf72f0f4d6331736fbad88ae66af"
        },
        {
          "alg": "SHA-384",
          "content": "e97a8a3cf311231461998c8b89ab037b08d6331283f12ee85bb82165f6977f21d9d56e1224bec7bc1cac73c92ef7a457"
        },
        {
          "alg": "SHA3-384",
          "content": "35bd22b763e02311f7419615c46e11ee029b3437127a573942e2441938ef0856c30853e8490e5ad3844d4c3920fd7752"
        },
        {
          "alg": "SHA3-256",
          "content": "bed09b6e99b25b6780b0ab0d2faa960ca7799e6b33a02ebac47adff6f70c441d"
        },
        {
          "alg": "SHA3-512",
          "content": "e812bcd3945a5559b676ead01c01a4f710ffc3c03fe4ee1e3332af960e58c1f4f87387242b9cd7c445a059a799c505f8ae5d397dacea722b020b6ed12064407c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.httpcomponents.core5/httpcore5-h2@5.4?type=jar",
      "externalReferences": [
        {
          "url": "https://hc.apache.org/httpcomponents-core-5.4.x/5.4/httpcore5-h2/",
          "type": "website"
        },
        {
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2",
          "type": "distribution"
        },
        {
          "url": "https://issues.apache.org/jira/browse/HTTPCORE",
          "type": "issue-tracker"
        },
        {
          "url": "https://lists.apache.org/list.html?httpclient-users@hc.apache.org",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/apache/httpcomponents-core/tree/5.4/httpcore5-h2",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.21?type=jar",
      "publisher": "FasterXML",
      "group": "com.fasterxml.jackson.core",
      "name": "jackson-annotations",
      "version": "2.21",
      "description": "Core annotations used for value types, used by Jackson data binding package.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "e0d0c3e7300954f73e43c67d933aaea4"
        },
        {
          "alg": "SHA-1",
          "content": "b1bc1868bf02dc0bd6c7836257a036a331005309"
        },
        {
          "alg": "SHA-256",
          "content": "53ca085f4a150f703f49e1aabd935bd03b43e1ea3d55d135438292af22cef56b"
        },
        {
          "alg": "SHA-512",
          "content": "d832a99867acc2d5afb2596da760c50e6a6b54c1bbc8e6c4186f267a16e1d55c7a916ef8b034ad6b277c41e3342b91dcdc2e3dcea8bdccfe89e7c147894591be"
        },
        {
          "alg": "SHA-384",
          "content": "30b15d68f8da6f6c26aa9f6c95d09152b6c1a8092cd976cf600d63d1751509a73865f937e0ad97d8d55bf20f6a749b44"
        },
        {
          "alg": "SHA3-384",
          "content": "5205b51f6ed689cf31b58b98a61ca9e17a439c15d669dcb408ec4d430e77ac9ac57d39d5ca1f9973e8d184f6dd57ec4f"
        },
        {
          "alg": "SHA3-256",
          "content": "d6782d188a72b2bb96e4b595343e783012b3f98c30f7b9950244c21739334509"
        },
        {
          "alg": "SHA3-512",
          "content": "b648f1e9ffe818227d53fbde409e61858ac22d3f78705eaf08065587ed512c9b33b0f5e2222356bfb33fb2973bb5a3184e31d2a7099f8fc8d2fd23eb4612a4bf"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.21?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/FasterXML/jackson",
          "type": "website"
        },
        {
          "url": "https://central.sonatype.com/api/v1/publisher",
          "type": "distribution"
        },
        {
          "url": "https://github.com/FasterXML/jackson-annotations/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/FasterXML/jackson-annotations",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.github.jeremylong/open-vulnerability-clients@9.0.5?type=jar",
      "group": "io.github.jeremylong",
      "name": "open-vulnerability-clients",
      "version": "9.0.5",
      "description": "Clients for vulnerability sources",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "ffb30f5216c160cf97b59ac846e885f1"
        },
        {
          "alg": "SHA-1",
          "content": "f88ff671b4f4c0d7bf69169ae119887e933cacc3"
        },
        {
          "alg": "SHA-256",
          "content": "4c74763f5f251702d8e842529ce929bbba0c961348d37a28477e327a589f4f52"
        },
        {
          "alg": "SHA-512",
          "content": "b4857ac81fc948f722fd96f60619786149f86091a980277a40085fc5a9d7fb0e24e01189771b95ae5ea5cf17c2fa7e3b1bad3fb9b5b0a71e69796ffd78d347d6"
        },
        {
          "alg": "SHA-384",
          "content": "a4cfcbf7285c7abec9e8d2422544ad616e267f4aaffa478f8e38657897ab01f3c91b14c1b204ac623f1f1c597675af96"
        },
        {
          "alg": "SHA3-384",
          "content": "cc521bb2f13e0b64806d5605fd74b82dc7c9e90868480c5964040910661d44d3ac261eb09a82efa767b29065c5f850a6"
        },
        {
          "alg": "SHA3-256",
          "content": "2439eb9af7871a4faac10ebdb1dc87ef8258a7ea5b877532744425622277ea72"
        },
        {
          "alg": "SHA3-512",
          "content": "8483ed16d094534223784fda547ec076fbf7b8ca636bb0d5db2d1bbffc5b08b7455ad9caa3cbe23b7e42115855ac23e5d368d1716207d4bd54693f5eff1bfb3b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.github.jeremylong/open-vulnerability-clients@9.0.5?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/jeremylong/open-vulnerability-clients/",
          "type": "website"
        },
        {
          "url": "https://github.com/jeremylong/open-vulnerability-clients",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.httpcomponents.client5/httpclient5-cache@5.6?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.httpcomponents.client5",
      "name": "httpclient5-cache",
      "version": "5.6",
      "description": "Apache HttpComponents HttpClient Cache",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "8cec7f04887daf5db87b49a75037297f"
        },
        {
          "alg": "SHA-1",
          "content": "161f12ce409b84c92bd092a8e7509f57f0a5f31f"
        },
        {
          "alg": "SHA-256",
          "content": "1cceca0cad38592e30126b0655b050a737e92e48be70c3959cdc95347d0cb06a"
        },
        {
          "alg": "SHA-512",
          "content": "d411f5a9cbc53b3d50d7ac48410a34006d4b050793704ce1c5b415b212f81ab1018d2eec148b1a323723436f4cdcdb524c5f2872d8ba0cb52533f903a4d1c6e4"
        },
        {
          "alg": "SHA-384",
          "content": "549438ced92f3dcb0251284ccccda096ef41ac810bcbd5be9105b8730e8bb04ce453ea142470f2c8c31bf4f66a1e6013"
        },
        {
          "alg": "SHA3-384",
          "content": "66f328ef55cb03b58061a4e08be71d6b23745e786b31913b2d4fd66110819d7b5e01768cf3f09595e40186f08ce534df"
        },
        {
          "alg": "SHA3-256",
          "content": "0c389088e726c03bc80b25b0de1da4e409c82f7a4fe595f6b351b6923a99e16b"
        },
        {
          "alg": "SHA3-512",
          "content": "fdfeeebc941420b249284e2938bc786cf01446a33de542847f88176ec6e63c7f7f3b01a2841c364e1189254e608b260948fed01e7d9c57c9adf3a6e50ab12d8e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.httpcomponents.client5/httpclient5-cache@5.6?type=jar",
      "externalReferences": [
        {
          "url": "https://hc.apache.org/httpcomponents-client-5.5.x/5.6/httpclient5-cache/",
          "type": "website"
        },
        {
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2",
          "type": "distribution"
        },
        {
          "url": "https://issues.apache.org/jira/browse/HTTPCLIENT",
          "type": "issue-tracker"
        },
        {
          "url": "https://lists.apache.org/list.html?httpclient-users@hc.apache.org",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/apache/httpcomponents-client/tree/5.6/httpclient5-cache",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.samskivert/jmustache@1.16?type=jar",
      "group": "com.samskivert",
      "name": "jmustache",
      "version": "1.16",
      "description": "A Java implementation of the Mustache templating language.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "7eff40c29c2fdf3faac3db921f07dc80"
        },
        {
          "alg": "SHA-1",
          "content": "979c7145a406b83bf28da32531f88a34c2d2919c"
        },
        {
          "alg": "SHA-256",
          "content": "3d4b984abd66908f05b38c9c892325cd4785d01ff33922569ff9b90c9ebfc475"
        },
        {
          "alg": "SHA-512",
          "content": "f245f8b979cf63fb4ad762e586a27468fa91b751aecf94f9f1dce32f551dec30c4b2dd881ea8b9b6a7eea3e9dfb34ceb96204d358bbb62120233416a4df382e1"
        },
        {
          "alg": "SHA-384",
          "content": "f53c07c96c4a4e8f9b424b17bbb152cc540dea8174db43b9bf5a12357d5207e5b8c0de506d83703fb46cfab13051c142"
        },
        {
          "alg": "SHA3-384",
          "content": "ac74164c34a0b40bf8e2d2c9f737bbae1b5c9c2c3a342487ca8271888379be51c5a0e3f45d1db57538eaed470bd7722f"
        },
        {
          "alg": "SHA3-256",
          "content": "2fdfe84999fe4930c399d5f78b678907881eea246fa30fd97f42f31ec90a2a8d"
        },
        {
          "alg": "SHA3-512",
          "content": "e213ee1cc34d3fde03785ac05a5df09c4b462fb1b1d0f02dff41e7b53522005df2e38b303bc193cff9203ab7f8a50764e1dea967035a454cf1988c056a615d57"
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "The (New) BSD License",
            "url": "http://www.opensource.org/licenses/bsd-license.php"
          }
        }
      ],
      "purl": "pkg:maven/com.samskivert/jmustache@1.16?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/samskivert/jmustache",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "http://github.com/samskivert/jmustache/issues",
          "type": "issue-tracker"
        },
        {
          "url": "http://github.com/samskivert/jmustache",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/vuln-data-source-nvd@5.0.0-rc.2?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "vuln-data-source-nvd",
      "version": "5.0.0-rc.2",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "0f4b31f39fdf86cf73fcc63fe127a115"
        },
        {
          "alg": "SHA-1",
          "content": "4decacc266026a2d9466858d9a366b6ce7c56e3a"
        },
        {
          "alg": "SHA-256",
          "content": "cf8c6dcc5504ce202e7dd561b23124e7ce09d5fae0946f9718404aba9ac7e4d0"
        },
        {
          "alg": "SHA-512",
          "content": "ed11d446dddac9133c67066da282a1f3197777d978ef01c3200235b43685f35285b3142dfd7609eafc1d7a9e9cbcdad12560b265ecbc1abd1847f3553d5ca28a"
        },
        {
          "alg": "SHA-384",
          "content": "dc53a4f0480a68fff1198b6e539b6345a397efc9ecfcccdc950e167de051fd625ef9f51932209cfbfa3fa13080b63de6"
        },
        {
          "alg": "SHA3-384",
          "content": "143773aa4067bda856be96fb0c92c2e276976dd89228f03169183a63e8ba8c22271dd23e09c86c2615bfa62919567527"
        },
        {
          "alg": "SHA3-256",
          "content": "8bb22c0772865341fcbc037e064d8ed707a65a1cda626a37ef70c688761ab0e6"
        },
        {
          "alg": "SHA3-512",
          "content": "fc8801b7ec765895a211ba4285095a89e2fa3e6e16ec10aeae68a4548f8efa384de80e3a4b78f54dc4786f8f22653c9813c8b950996709a002c4568e81c4838e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/vuln-data-source-nvd@5.0.0-rc.2?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/vuln-data-source-parent/vuln-data-source-nvd/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/vuln-data-source-parent/vuln-data-source-nvd",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/vuln-data-source-osv@5.0.0-rc.2?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "vuln-data-source-osv",
      "version": "5.0.0-rc.2",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "b70e6889b364669d5ab16229e94a4aa5"
        },
        {
          "alg": "SHA-1",
          "content": "8d07090f07901065f255cd5b2d5e8bee8e322062"
        },
        {
          "alg": "SHA-256",
          "content": "78bb662e28ecc7d47cc4ab518cbfe2f3a7a7e6692d88b9f596a0478692b8cc2c"
        },
        {
          "alg": "SHA-512",
          "content": "5e159ae878e6f8e0922b28928bb2d8bb578cf8dd96c43781925d87ba510f75b5fd6bb00c51cc7b9a8c7a4d451a9cd1e2434878ddb3576a65d296cdda6406051b"
        },
        {
          "alg": "SHA-384",
          "content": "3cdf1c503cacd4214079c586cb53690d15676c89f24a74b222b244b2f18078166eeb784633eda076474d836e493f097a"
        },
        {
          "alg": "SHA3-384",
          "content": "9ec18745cc6ab62f71ce569fcfd92ec27ba7c9324e09b5e1ca4f7fec86106986a33bea61507a7677fe0c3b41b6077ccd"
        },
        {
          "alg": "SHA3-256",
          "content": "041085c300165e90d2e53a04f925f4ac915922f1b0b46b0ce14137309235e3e5"
        },
        {
          "alg": "SHA3-512",
          "content": "66973668fa8e2c4b609cd20ecc8693036c7d8d28e091cb3bfabfc497dde6c0347bdd6a214ff49b641f78951b9fc451614035e0079588cb518aeaed2978abeebb"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/vuln-data-source-osv@5.0.0-rc.2?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/vuln-data-source-parent/vuln-data-source-osv/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/vuln-data-source-parent/vuln-data-source-osv",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/alpine-common@5.0.0-rc.2?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "alpine-common",
      "version": "5.0.0-rc.2",
      "description": "An opinionated scaffolding library that jumpstarts Java projects with an API-first design, secure defaults, and minimal dependencies.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "dde9ad20ee38becb2e97c7909d788608"
        },
        {
          "alg": "SHA-1",
          "content": "aadf5cae9026bee65775d0922914d1dedd60e767"
        },
        {
          "alg": "SHA-256",
          "content": "c58a5e40d67288fe503fc77e7211bec09cb464e7894066a10b423dfea9826558"
        },
        {
          "alg": "SHA-512",
          "content": "b44a1db0f269e3dbd6f1af919efb63be05468b763109ea076e26b48e1a2c303f6bbc152cb48867b957e5b0d60c01e056b65e83d77947e843219c96a675f1d9e2"
        },
        {
          "alg": "SHA-384",
          "content": "a4ebfb54e865481ab81ed47e00b70e67b30bc878014ccccae86de5025bbbb239a903714ea26d7dee0908bd96dd95588b"
        },
        {
          "alg": "SHA3-384",
          "content": "9a66c46d40a9fe26b4381b568f9ad9fcebd48685c2f421316bc0c7e47ceaf63ee490fb2c229f8b5e04ce9a7cf14bfa56"
        },
        {
          "alg": "SHA3-256",
          "content": "7f028d5ee042bfc26f522155a1c3bf4c6c766cd907e07fb47390eb176d41f17c"
        },
        {
          "alg": "SHA3-512",
          "content": "7f10d2e84c40eb9609bf7b7206b06491aa970fe26c268c07d2b3c1645b23c43a116803f804d268e38b319fe0924596d2cb2187130159b5f15d9a32c84e44abf3"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/alpine-common@5.0.0-rc.2?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/stevespringett/Alpine/alpine-common",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/alpine-parent/alpine-common",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/alpine-model@5.0.0-rc.2?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "alpine-model",
      "version": "5.0.0-rc.2",
      "description": "An opinionated scaffolding library that jumpstarts Java projects with an API-first design, secure defaults, and minimal dependencies.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "59d79610d1179f1716c0b66ad62e8e76"
        },
        {
          "alg": "SHA-1",
          "content": "a237b18c957702a852c47d396cd35964bad729d4"
        },
        {
          "alg": "SHA-256",
          "content": "d7809f042879b78711eb320ebca5f3b74041ce63c03bf377870e3ce90d05ad39"
        },
        {
          "alg": "SHA-512",
          "content": "3cf4c935430273b643be2dc3d68caace720741cf7af98373daa530544ace26b984ca9cfc5b79e3edf39bed0c0340fd1eed97e96bc6d14d29f0c7fd5ee32137c2"
        },
        {
          "alg": "SHA-384",
          "content": "328ae21a482351d54b41bb19edc5c7a43769cc6114d63ddb178dca5b94a04a8025fba00ed5e5cdf664c795d0bae135ac"
        },
        {
          "alg": "SHA3-384",
          "content": "dd8279465947cefeb8d25a992225208ee077940202300f5af5d9bd91089509eb736a9352ace2e4c75b4987b71880497b"
        },
        {
          "alg": "SHA3-256",
          "content": "95f647087ff738bf11589326977cbe42e12ec2e5867fb677dc7c16eb66e28147"
        },
        {
          "alg": "SHA3-512",
          "content": "92d1f3905515b1370ee3029baf003256070bf564ff8ff46af4fa95eeac3fe2f325b3f08061bea536763231adc58ee449056195fa7234aec231ded6f4ded89d6d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/alpine-model@5.0.0-rc.2?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/stevespringett/Alpine/alpine-model",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/alpine-parent/alpine-model",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.datanucleus/datanucleus-api-jdo@6.0.5?type=jar",
      "group": "org.datanucleus",
      "name": "datanucleus-api-jdo",
      "version": "6.0.5",
      "description": "Plugin providing DataNucleus implementation of the JDO API.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "9b7448a21838cae99a8b9f3875d93a08"
        },
        {
          "alg": "SHA-1",
          "content": "30f49348795e1d2e9a8e1613e9dbc6c3f851f1ca"
        },
        {
          "alg": "SHA-256",
          "content": "423ea8da36763d6c17d55434477b7ab2339d3cef5acf67dd30198ef1dd0ed477"
        },
        {
          "alg": "SHA-512",
          "content": "5262a518ccc344692af86a30d51e4d1d9ee2b3167dc16657b37e8cfb2affc3fd73db4df9df5463e4a25097d9eff27c9f305407239e19381cd32c0c7f9f01aaab"
        },
        {
          "alg": "SHA-384",
          "content": "96e3ee21e3958259fcbc3bcd8af53d0814415f027a73bb1a1025c9112406564e65eaff74c874f02d994e6239562a7202"
        },
        {
          "alg": "SHA3-384",
          "content": "8c88668e57a4ccf381e6fb3a9859e8fe15376bd9a0fd4d9b9d771c9f7712459e97edc219dcdf008971f0d06363592d09"
        },
        {
          "alg": "SHA3-256",
          "content": "54562d403842a670b5f4cfa2a272bbb05789bd39f278b52732f1df540c7e33b3"
        },
        {
          "alg": "SHA3-512",
          "content": "55accaf6c0e8a6082d09619351596707df28223929dd313bbfe25abd1f8693c2eb195c0dada149f11dd0aecdfca724edfd67de84152e0a2aa8c39383fbc8b8d2"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.datanucleus/datanucleus-api-jdo@6.0.5?type=jar",
      "externalReferences": [
        {
          "url": "http://www.datanucleus.org/#/datanucleus-api-jdo",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/datanucleus/datanucleus-api-jdo",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.datanucleus/datanucleus-core@6.0.11?type=jar",
      "group": "org.datanucleus",
      "name": "datanucleus-core",
      "version": "6.0.11",
      "description": "DataNucleus Core provides the primary components of a heterogenous Java persistence solution. It supports persistence API\u0027s being layered on top of the core functionality.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "2493fed928c1eade5a38f4016f1ba7c0"
        },
        {
          "alg": "SHA-1",
          "content": "87fae77204b7032165d6cfb468cb5dafacf39200"
        },
        {
          "alg": "SHA-256",
          "content": "2e2a23d21100e82a8bd0822eebe8bb9f39a8e3ea1ba5e2bb068c24cb0515bd08"
        },
        {
          "alg": "SHA-512",
          "content": "969e5e8b3330e1bd675af05d106f0081dbef25bfea99689a6a051eac96e81907dc8d42e574b464b33fe467c5024a282416f114946ed4374510b4abe7897027d3"
        },
        {
          "alg": "SHA-384",
          "content": "286413cbd9c681561bf5c7d83839893879a9476a0a2a9b60e60d6e161a665e92bef6db57cd9e18b4d13a6ed2a75bbe73"
        },
        {
          "alg": "SHA3-384",
          "content": "afcc830fdadc3c4b7130921ad521f4e0a7fe23b57614ac61f4c2a1d9eae47b56e6a0df82d1ebef82c1cbe1d2244c547d"
        },
        {
          "alg": "SHA3-256",
          "content": "02b169414ef4c5a9d7c79e6e98e86e21071054f035ce4a1ca8fde85aa5f726ef"
        },
        {
          "alg": "SHA3-512",
          "content": "1de064ff2de6452618e7a9f3bc83e91228105722697597e4dc0b836349d21c3d71ff6ee4613433f7da795efba9b56be7bfa3c6854a02587271cd7d4a6001bdb5"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.datanucleus/datanucleus-core@6.0.11?type=jar",
      "externalReferences": [
        {
          "url": "http://www.datanucleus.org/#/datanucleus-core",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/datanucleus/datanucleus-core",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.datanucleus/javax.jdo@3.2.1?type=jar",
      "group": "org.datanucleus",
      "name": "javax.jdo",
      "version": "3.2.1",
      "description": "The Java Data Objects API (JDO) : a standard interface-based Java model abstraction of persistence, developed by the JCP.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "79f1e95e6d7f1eb191edce207ac6ecd8"
        },
        {
          "alg": "SHA-1",
          "content": "e8d1af5779f95d3c85b641184b605725762a36c3"
        },
        {
          "alg": "SHA-256",
          "content": "61646f544baf75fc7a305410443c5f5f7d219fa7a2cabe3b782950a350ca5d3f"
        },
        {
          "alg": "SHA-512",
          "content": "29580963b5478646b0f3b47ae3387d0bdb5bd86da37afceef6841c32b9db3a4407186fc257855c5c47efbbf1f1bfbff0b45b6ad45101b6dfbed7946a9251fe43"
        },
        {
          "alg": "SHA-384",
          "content": "1845d95a87e9fb954ff3e0c80a0dae62eca817abb3f727d65edc9296a0992e60a7fa57db0a72858afaf9e2d872f6435f"
        },
        {
          "alg": "SHA3-384",
          "content": "e4f04e5be64a1a58ef475cf5b155e6169307dd9636cd4fe6661dd394fe28a0a9ee9dee426291bff62d66885ae35ab2c8"
        },
        {
          "alg": "SHA3-256",
          "content": "3703404351c56d4a658de2012266838fea9741cceb09e7304b4c323e33d88ca3"
        },
        {
          "alg": "SHA3-512",
          "content": "da4b8c30667d67651469ed1a750004a3afbaad1ce8c6697ac29889fd2e78dadbcde07d414161e42bc972017afe83e690329d4ede5e94a67553377ee7c2a7929a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.datanucleus/javax.jdo@3.2.1?type=jar",
      "externalReferences": [
        {
          "url": "http://www.datanucleus.org/#/javax.jdo",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/datanucleus/javax.jdo",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/javax.transaction/javax.transaction-api@1.3?type=jar",
      "publisher": "GlassFish Community",
      "group": "javax.transaction",
      "name": "javax.transaction-api",
      "version": "1.3",
      "description": "Project GlassFish Java Transaction API",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "6e9cb1684621821248b6823143ae26c0"
        },
        {
          "alg": "SHA-1",
          "content": "e006adf5cf3cca2181d16bd640ecb80148ec0fce"
        },
        {
          "alg": "SHA-256",
          "content": "603df5e4fc1eeae8f5e5d363a8be6c1fa47d0df1df8739a05cbcb9fafd6df2da"
        },
        {
          "alg": "SHA-512",
          "content": "3497cf77352aa1317c70ad1d28e8e7da51337d844c8227a35707209c750ba6f5d644a4ffdbdb10e5fbde204003aa43ff80e9e2ff3164584a7a34d8292266b2bc"
        },
        {
          "alg": "SHA-384",
          "content": "7044d8d5829a777d85e1a987c3e346eb535dd321366bdf32a9e8ed4f52facd0610ac2f3f58b4a1b001893f01fddc5eae"
        },
        {
          "alg": "SHA3-384",
          "content": "d0c1807001e02ce47320be657be055b4777b8b5673c22a78b0574955f7a6105dacc42b46b86ab967dc382cf332da59d8"
        },
        {
          "alg": "SHA3-256",
          "content": "c7c48884317a2d0e1596f201763acbca4ef76462af9172fd5e68aca3465303e1"
        },
        {
          "alg": "SHA3-512",
          "content": "bf053d4fe995cb5c1d6c01320fc73530017ee364de6ae21eb98fa0372b2aa6eff2fa4ac2d9cd5f692c930ee573c2f6226441918123fcfc48b5b4a126d350928c"
        }
      ],
      "licenses": [
        {
          "expression": "(CDDL-1.0 OR GPL-2.0-with-classpath-exception)"
        }
      ],
      "purl": "pkg:maven/javax.transaction/javax.transaction-api@1.3?type=jar",
      "externalReferences": [
        {
          "url": "http://jta-spec.java.net",
          "type": "website"
        },
        {
          "url": "https://maven.java.net/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/javaee/javax.transaction/issues",
          "type": "issue-tracker"
        },
        {
          "url": "javaee-spec@javaee.groups.io",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/javaee/javax.transaction",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.jersey.ext/jersey-bean-validation@4.0.2?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.glassfish.jersey.ext",
      "name": "jersey-bean-validation",
      "version": "4.0.2",
      "description": "Jersey extension module providing support for Bean Validation (JSR-349) API.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "254cf1628fdd8561cab876a729c98564"
        },
        {
          "alg": "SHA-1",
          "content": "db93aaf2cd038fbb77f0184b1df866782592e2df"
        },
        {
          "alg": "SHA-256",
          "content": "e92fa0ab1e4882e9c749b09ec7f5019ec3f165bdcef3888f0a1988c1da7347ae"
        },
        {
          "alg": "SHA-512",
          "content": "d127fdeba362dcb5677ee4d68bfd7e53b2636087de4769cff73c43553a5b39a6588b83d971147fa6c73af18fc2946c0c7349af221523a162c30094c7dcb5ecc9"
        },
        {
          "alg": "SHA-384",
          "content": "bb1940e39ab4580e898c652b4cc3b74560ac7eecaf97e4e06f0023ff0193d288f4407625ee713ede5604163b97515441"
        },
        {
          "alg": "SHA3-384",
          "content": "ac63c81e85bd6cd0dd05b6185b99c79552a57ac696d49b4f4abeb97b86c01572c07483e6acc9a81ef244c3fb086b39d3"
        },
        {
          "alg": "SHA3-256",
          "content": "10b67f4c5c7790e224b48885ca67c27802468a8505bc7ab039041322b27637c4"
        },
        {
          "alg": "SHA3-512",
          "content": "e2628bac3fbd61793d403f4cf5e93ca5a1c8e1c2a9210c4a1b02ed8bc314f7c06ef4bf340b0bd0b62a15f2999552016f3aa5b68cd00e2cbd6f14afbfc1545e08"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        },
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        },
        {
          "license": {
            "id": "BSD-2-Clause"
          }
        },
        {
          "license": {
            "name": "Apache License, 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        },
        {
          "license": {
            "name": "Public Domain",
            "url": "https://creativecommons.org/publicdomain/zero/1.0/"
          }
        },
        {
          "license": {
            "name": "Modified BSD",
            "url": "https://asm.ow2.io/license.html"
          }
        },
        {
          "license": {
            "name": "jQuery license",
            "url": "jquery.org/license"
          }
        },
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/license/mit/"
          }
        },
        {
          "license": {
            "name": "W3C license",
            "url": "https://www.w3.org/Consortium/Legal/copyright-documents-19990405"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.jersey.ext/jersey-bean-validation@4.0.2?type=jar",
      "externalReferences": [
        {
          "url": "https://projects.eclipse.org/projects/ee4j.jersey/project/jersey-bean-validation",
          "type": "website"
        },
        {
          "url": "https://ci.eclipse.org/jersey",
          "type": "build-system"
        },
        {
          "url": "http://localhost",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/project/jersey-bean-validation",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/jakarta.inject/jakarta.inject-api@2.0.1?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "jakarta.inject",
      "name": "jakarta.inject-api",
      "version": "2.0.1",
      "description": "Jakarta Dependency Injection",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "72003bf6efcc8455d414bbd7da86c11c"
        },
        {
          "alg": "SHA-1",
          "content": "4c28afe1991a941d7702fe1362c365f0a8641d1e"
        },
        {
          "alg": "SHA-256",
          "content": "f7dc98062fccf14126abb751b64fab12c312566e8cbdc8483598bffcea93af7c"
        },
        {
          "alg": "SHA-512",
          "content": "f186b2ada470abba1cc3b4f8c4373d940fb7c71a051b2c26f7c204ad4dfb69235fbf3f9c33da36d744cb90f52d921c51d76c0ff263bacb35eafb66cab83dc47d"
        },
        {
          "alg": "SHA-384",
          "content": "405bd297a73901f013d48a0da028d04d400f3e61f4997c0e7297eb08120670a0e242e0002db8f130c33ab16cb02feb2d"
        },
        {
          "alg": "SHA3-384",
          "content": "4db7e54434d0a208c876868f5595b808f2728c0455feaa752ab7b569a2186fc37cb891c9aa0076de3d08f6da6ff06eba"
        },
        {
          "alg": "SHA3-256",
          "content": "3a5aba9f1ff1a130b76af886123eb375fa578498490df3dc60bb7ce7d59e9404"
        },
        {
          "alg": "SHA3-512",
          "content": "00bba8efc2d6e7f0a509b321868d75f1aaf0681a750d089d913bde8424ab7bb88aadf49de6e291e352523e4f8c117b1b48033ff31d4d665dcc43c4c6ea000ba9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/jakarta.inject/jakarta.inject-api@2.0.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/eclipse-ee4j/injection-api",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/ee4j/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/injection-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/jakarta.validation/jakarta.validation-api@3.1.1?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "jakarta.validation",
      "name": "jakarta.validation-api",
      "version": "3.1.1",
      "description": "Jakarta Validation API",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "93ce96e77734f4280157edeffcae44e8"
        },
        {
          "alg": "SHA-1",
          "content": "ec8622148afc5564235d17af80ea80288d0e7f92"
        },
        {
          "alg": "SHA-256",
          "content": "63ce00156388c365f3ac1be71fcfaf114682fc0c452020b5df6e7ec236e142ab"
        },
        {
          "alg": "SHA-512",
          "content": "02483f9d631538a71f436982ed3842c5d054781ec58350ba33fd0e0db92db531caa17abd2e7aa25a062ba4cd5e85b63a27b615041df236ffb979a73fdd121e18"
        },
        {
          "alg": "SHA-384",
          "content": "8e4a235fb69ebf7327fe8947b0be32c76ae8ebb748d0b3195efb87cd1d57ea92402403a59e2c4312a11a3a2300bbb4d6"
        },
        {
          "alg": "SHA3-384",
          "content": "7f52280ddd46c87e00c6b10f708aa77d571e68942651ada952b4b9e58805a0216394a31a4666c88908af0a6408c9b64d"
        },
        {
          "alg": "SHA3-256",
          "content": "21e404a7897b223e9324f7b709c3038f4ca01599896a0e166cee4eb714b9e600"
        },
        {
          "alg": "SHA3-512",
          "content": "6bc15a9beecdbdb881c1ed5d7682156417db766898a14e205a496b8d7e0e552a4e4c2303727b1c4dbc2391d62257b1b9a9504827dc6b8ceff149225d94bf10a9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/jakarta.validation/jakarta.validation-api@3.1.1?type=jar",
      "externalReferences": [
        {
          "url": "https://beanvalidation.org",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://hibernate.atlassian.net/projects/BVAL/",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/jakartaee/validation",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.hibernate.validator/hibernate-validator@8.0.2.Final?type=jar",
      "group": "org.hibernate.validator",
      "name": "hibernate-validator",
      "version": "8.0.2.Final",
      "description": "Hibernate\u0027s Jakarta Bean Validation reference implementation.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "1adda123292ba2627d03a696d8c7e76a"
        },
        {
          "alg": "SHA-1",
          "content": "220e64815dd87535525331de20570017f899eb13"
        },
        {
          "alg": "SHA-256",
          "content": "2f2224a5a19bdcfa73540e9ff5c971b6c425ad80415876f305259fe873a15b2f"
        },
        {
          "alg": "SHA-512",
          "content": "3b4c68e41a245050addba3d5a856fad838e6a27fb0b8c13d34200274e13e0b3aa04c3f3d3cd883ceed880f0683093022625ed4db9522fc557782b8ad9668902d"
        },
        {
          "alg": "SHA-384",
          "content": "4addce04dd4599547dd81a02bb38426087edc11fc929ddc04790536264aa4bd4a62337b0f91604fe47b2b898039828f7"
        },
        {
          "alg": "SHA3-384",
          "content": "bcd829d013c6bb110a5d9dee2b4249678e41d670c9a7beb8b0c7ac52b7fae90be75997ef54a17900e8ef42e7afc171de"
        },
        {
          "alg": "SHA3-256",
          "content": "a1ff9dd13a537d46735504b4b3074277102c31f1b13eef40ba65537c25e1a9e6"
        },
        {
          "alg": "SHA3-512",
          "content": "db82be4ff0ca253beac177cf9fe474e3d448081a439e85e949f8f1d3a857b41c249c1bbebad1219b45a4ed580284b444c0aade591e907457e2d43fdc3f56cb60"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.hibernate.validator/hibernate-validator@8.0.2.Final?type=jar",
      "externalReferences": [
        {
          "url": "http://hibernate.org/validator/hibernate-validator",
          "type": "website"
        },
        {
          "url": "http://ci.hibernate.org/view/Validator/",
          "type": "build-system"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://hibernate.atlassian.net/projects/HV/summary",
          "type": "issue-tracker"
        },
        {
          "url": "http://github.com/hibernate/hibernate-validator/hibernate-validator",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml/classmate@1.5.1?type=jar",
      "publisher": "fasterxml.com",
      "group": "com.fasterxml",
      "name": "classmate",
      "version": "1.5.1",
      "description": "Library for introspecting types with full generic information including resolving of field and method types.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "e91fcd30ba329fd1b0b6dc5321fd067c"
        },
        {
          "alg": "SHA-1",
          "content": "3fe0bed568c62df5e89f4f174c101eab25345b6c"
        },
        {
          "alg": "SHA-256",
          "content": "aab4de3006808c09d25dd4ff4a3611cfb63c95463cfd99e73d2e1680d229a33b"
        },
        {
          "alg": "SHA-512",
          "content": "7fc4764eb65227f5ba614698a5cf2f9430133f42ec6e2ae53b4c724ee53f258541a0109fe0659e0b9e45729b46c95c00227e696b8d1addcd772c85f877658c9a"
        },
        {
          "alg": "SHA-384",
          "content": "28b4780b2353ebc08dbc02c9a343527a9062a0455bfb4ab135cb639c03e5dfd9c2250a835c44d5f17d275667c2009694"
        },
        {
          "alg": "SHA3-384",
          "content": "b194ace8f1f49f410286bd859866678b95a1b2c6f73e41f48291eb7438dffea57aaa9b177459038b6997771ce4d1cee1"
        },
        {
          "alg": "SHA3-256",
          "content": "50234c94efed4c816eb77bd2f70b869c9f89ddf8ee73dc25e354f4d0b81b3e1f"
        },
        {
          "alg": "SHA3-512",
          "content": "9886421726066b313a62283a6811b76d904ea1c1e9b7b2d850cb47afa189b03cdef053c8f7f6b79e77f2269c45f8cc2ed75c3389e96594b50987fef311d5a25f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.fasterxml/classmate@1.5.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/FasterXML/java-classmate",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/FasterXML/classmate/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/FasterXML/java-classmate",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.jboss.logging/jboss-logging@3.6.1.Final?type=jar",
      "publisher": "JBoss by Red Hat",
      "group": "org.jboss.logging",
      "name": "jboss-logging",
      "version": "3.6.1.Final",
      "description": "The JBoss Logging Framework",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "acab989faf62db02c092448e95614fab"
        },
        {
          "alg": "SHA-1",
          "content": "886afbb445b4016a37c8960a7aef6ebd769ce7e5"
        },
        {
          "alg": "SHA-256",
          "content": "5e08a4b092dc85b337f0910a740571d8720cfa565fabd880a8caf94a657ca416"
        },
        {
          "alg": "SHA-512",
          "content": "3dee7fadc04407538248def38fd0ae885c2aa454e2a38ecaaf7ef74abc1505f4efcd3e1a4e024c9f28d37fabb663c19cc3f29b7641b3094d5a504e93730c4a22"
        },
        {
          "alg": "SHA-384",
          "content": "26b1ba129bd9cd1777ba90da087d343698b1f7fa48b855ce0a1030afc1c7ae81433f75e7b8293eb42fc063ce35386280"
        },
        {
          "alg": "SHA3-384",
          "content": "7fbed126ae79578a4136d769f31d9d879e14cd0f0b78ec91515be7cfce5fea7f1c1ca10bf752d19edd5511d3d4ef5254"
        },
        {
          "alg": "SHA3-256",
          "content": "0de02a61df5dc9fbb8e9a344a8744356f3e867b4567ca2baa0bbf16a8763de01"
        },
        {
          "alg": "SHA3-512",
          "content": "2c7b522c04afab22900222f287da17c1526b3b3fd6a9376298613112918afb050af3d8ead2239be3e7dc3337ae74a636bf1963a1bc56426996b0f7283681bb3c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.jboss.logging/jboss-logging@3.6.1.Final?type=jar",
      "externalReferences": [
        {
          "url": "http://www.jboss.org",
          "type": "website"
        },
        {
          "url": "https://issues.redhat.com/",
          "type": "issue-tracker"
        },
        {
          "url": "http://lists.jboss.org/pipermail/jboss-user/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/jboss-logging/jboss-logging/tree/main/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/jakarta.el/jakarta.el-api@6.0.1?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "jakarta.el",
      "name": "jakarta.el-api",
      "version": "6.0.1",
      "description": "Jakarta Expression Language defines an expression language for Java applications",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "a98f097e059552a75748fcdd067e5c16"
        },
        {
          "alg": "SHA-1",
          "content": "c7c4a2eb1e40e0ff45ab5e2e52bd77d8c7a75176"
        },
        {
          "alg": "SHA-256",
          "content": "7e84b5bed49de32b79cc5e85d90b6f5adb1a953ac67283adbb41c1e297f9c605"
        },
        {
          "alg": "SHA-512",
          "content": "fbab7bdf18e9bfb316b519a8c3b3d1f2e769e3f318b72e46cf33621f2942b84eede9b97970ff46fe29b54f8d61cb0df9e584d371f10e56bf0050d7727eb0ee23"
        },
        {
          "alg": "SHA-384",
          "content": "8c9c0712f90e359567fb2f080a18d38227ebd3096730980aeec86ee290b79f79cb4cf9888f72944ac240c01330828344"
        },
        {
          "alg": "SHA3-384",
          "content": "3c82d728737f09f400956a25664b008a307a359f33084ae9304ecf850b2b8448b27a7f017a6630299b7bd7ea4dddc239"
        },
        {
          "alg": "SHA3-256",
          "content": "2e870db1b8d460705534cba4ccd57b2d8247db1ff9bba831e2b2aef28261b4ea"
        },
        {
          "alg": "SHA3-512",
          "content": "d7eba15a92c49d1061ed4ac4c6a298dcd5b17896d8de214d5ad560624c2e2c855e9846626821754c47b898dea656ab516138d0ef607d5faf7c1dbed8c660ee6f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "name": "GNU General Public License, version 2 with the GNU Classpath Exception",
            "url": "https://www.gnu.org/software/classpath/license.html"
          }
        }
      ],
      "purl": "pkg:maven/jakarta.el/jakarta.el-api@6.0.1?type=jar",
      "externalReferences": [
        {
          "url": "https://projects.eclipse.org/projects/ee4j.el",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/el-ri/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/el-dev",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/el-ri",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.expressly/expressly@5.0.0?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.glassfish.expressly",
      "name": "expressly",
      "version": "5.0.0",
      "description": "Jakarta Expression Language Implementation",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "d4448c69fe69ebca37b2c76e62e385c3"
        },
        {
          "alg": "SHA-1",
          "content": "78637fec7db6414c3ad32f3aa9e5d6610a299e5b"
        },
        {
          "alg": "SHA-256",
          "content": "b0c872737bb8381921b304d0952854666d1ba320b9b3c5bf4d70a09a86b61524"
        },
        {
          "alg": "SHA-512",
          "content": "8abd592d1fd70ef7fac5d0c1debe59dddea59dd82262bae016b44c506ceb68bb0619f464a07e553cc6885d527e1b8b8571e8975ca040c7864baba2349f30b725"
        },
        {
          "alg": "SHA-384",
          "content": "dc233d0838d2912d2473b8b6f5988145f4116dc2b139ea0378e78f260ed4c7609c954875c21fa579c4901f3202b3ca61"
        },
        {
          "alg": "SHA3-384",
          "content": "d946ffea99369b9933d07076f88a605a8b724edbc1d771ec92db145e6a68e447ac261efd9a4cdb74dce38827f75bd7d4"
        },
        {
          "alg": "SHA3-256",
          "content": "a46f1d62e482167ead93bc3f1261852cbd968e8fc7b68b399685d0bf6eb095d7"
        },
        {
          "alg": "SHA3-512",
          "content": "5e23912f838fe9487d5c0ab44d806e05f1754df1d18f1f7231a32975a73d7747edab4166903b5cbdc6ef002efc4a768b10baa4d7dabcb1c29bca61e9ab923347"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "name": "GNU General Public License, version 2 with the GNU Classpath Exception",
            "url": "https://www.gnu.org/software/classpath/license.html"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.expressly/expressly@5.0.0?type=jar",
      "externalReferences": [
        {
          "url": "https://projects.eclipse.org/projects/ee4j.expressly",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/expressly-ri/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/expressly-dev",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/expressly-ri",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/alpine-infra@5.0.0-rc.2?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "alpine-infra",
      "version": "5.0.0-rc.2",
      "description": "An opinionated scaffolding library that jumpstarts Java projects with an API-first design, secure defaults, and minimal dependencies.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "bf12d8056a85a7b9ceb7c6c0d53826a4"
        },
        {
          "alg": "SHA-1",
          "content": "c76e13250ac177fb9522e07d35fde4aa313231bf"
        },
        {
          "alg": "SHA-256",
          "content": "2d4fbe99da9a0ecae6ef78cab8459642929d839a1d7d6795afa8bccb19b59151"
        },
        {
          "alg": "SHA-512",
          "content": "67a8555bc60f301a9362da9e19bf1ea8670a8d3e84b74345b6ca0d52a4759aaa70450be5962ff3ffe640acc65b56fa879d9fc6791919f56ece4e89b2d1cb787b"
        },
        {
          "alg": "SHA-384",
          "content": "410c2caa2f1f288b6a316d395814d7815b1b05cbe512db663410693e4e763dc70cc80cdd31b8365a301937fc4a25e8e7"
        },
        {
          "alg": "SHA3-384",
          "content": "3375d08d583d3ded4dcf488e083d84c8741795f52f72ecd49f5d18df6cae3f753a9afc02ce6ca1a7b8d1db29f090c7b0"
        },
        {
          "alg": "SHA3-256",
          "content": "16a34e8a31f19e9426b534fc729e7bc26b4c018e5b1325015905e39c6a105a6c"
        },
        {
          "alg": "SHA3-512",
          "content": "d8c69d0dcc40ed5920121e7580cc362dba60b733d76ee4177b7709293c7d5a17e5ab5a8e02161f58f97eff0314cd0a4699e4cb1ff0be8164b88f598606480192"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/alpine-infra@5.0.0-rc.2?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/stevespringett/Alpine/alpine-infra",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/alpine-parent/alpine-infra",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.datanucleus/datanucleus-rdbms@6.0.11?type=jar",
      "group": "org.datanucleus",
      "name": "datanucleus-rdbms",
      "version": "6.0.11",
      "description": "Plugin for DataNucleus providing persistence to RDBMS datastores.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "33a96bd9a1e242d31cc0929562e3af04"
        },
        {
          "alg": "SHA-1",
          "content": "52d9d3d77483021736ee88ee7f53d2447cb1049e"
        },
        {
          "alg": "SHA-256",
          "content": "a9271d3c793bdd73ab6444346d6036982929529cdcb874dbd8fad1e90de04338"
        },
        {
          "alg": "SHA-512",
          "content": "fe93c578f598f5282e637b542e7dd44061b59ea6e9f00fc6df595c9f26ff567daccf7ec7359e3a120e5a4090b8b7f4ff36e991210507123d6e3477f0aae24984"
        },
        {
          "alg": "SHA-384",
          "content": "f80c7aa7375f1317172236773e4ba02a67c45b788566977278d8125fe4226ffd60604c4fe5ad2b82aa97122f15ed8e7d"
        },
        {
          "alg": "SHA3-384",
          "content": "0583f548e429a4412a87e6423ec0d334aca631470b3e7a355d192e39a68c64e68d59fbff11552eefc7b7cb2153fcc2a3"
        },
        {
          "alg": "SHA3-256",
          "content": "8cb46d03fdee2bc0f022e5d724c1b7affcd378e5bd4c72c0779e80f35fe40b47"
        },
        {
          "alg": "SHA3-512",
          "content": "e630592197b25c46cf137b4146e884b18b6b4793ed4a4a32f6169ab51f64775a5eabdbccd3bb3e2dc87526330bc4cf0b0b8a661e457a32ca565d10f3b2759af8"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.datanucleus/datanucleus-rdbms@6.0.11?type=jar",
      "externalReferences": [
        {
          "url": "http://www.datanucleus.org/#/datanucleus-rdbms",
          "type": "website"
        },
        {
          "url": "https://github.com/datanucleus/datanucleus-rdbms",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/alpine-server@5.0.0-rc.2?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "alpine-server",
      "version": "5.0.0-rc.2",
      "description": "An opinionated scaffolding library that jumpstarts Java projects with an API-first design, secure defaults, and minimal dependencies.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "b97afc750e6c73bb8f320d59956c3bca"
        },
        {
          "alg": "SHA-1",
          "content": "c41715e32d708ae8814af3f5869ebc762359b0b0"
        },
        {
          "alg": "SHA-256",
          "content": "f03cb8d0e735c7a7782821e42b27fa11951ff30e7e1bf20fbb16b69ac93a6df3"
        },
        {
          "alg": "SHA-512",
          "content": "1704087a090f395063aed5fcce201b860d9ff2d3a10ea81a478cca74ec2f5371d3fc66181f79f107115e248ccd513a31ec2077ed026368f7fc510a3bfbf3bd08"
        },
        {
          "alg": "SHA-384",
          "content": "298e79bc67cfa3b0c3df646b645db87a6baa70454cac90cdf1cd1a660058252756738c2a7d63b21209894919600f659d"
        },
        {
          "alg": "SHA3-384",
          "content": "2839f7556c1f7969e455c07ff39ad162976553e843944088c90621032a346afc8538b0f1d20ed6c38daf3791d8d668bc"
        },
        {
          "alg": "SHA3-256",
          "content": "5a410b6da924bf1ce32b00b76a1870a1469d5f4e1713a219577386c90415fbe5"
        },
        {
          "alg": "SHA3-512",
          "content": "a8d21f51971971d855af92e7df2263e06fc9f2422fc946a2b4455f691f1941268f09fbd7d0f57770657b8e99a63327b66c7495c2d48d6da53ed7197150438c1c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/alpine-server@5.0.0-rc.2?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/stevespringett/Alpine/alpine-server",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/alpine-parent/alpine-server",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.jersey.containers/jersey-container-servlet@4.0.2?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.glassfish.jersey.containers",
      "name": "jersey-container-servlet",
      "version": "4.0.2",
      "description": "Jersey core Servlet 3.x implementation",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "25818f2d34a03809a4e2a1a4949aa3c5"
        },
        {
          "alg": "SHA-1",
          "content": "e49f6b43e8f35fc42d78aadebf9ce675be83eb2a"
        },
        {
          "alg": "SHA-256",
          "content": "9317b4c9cc8f86906fe6f64b2ae613d7b586d7fb396cd13eaf615a2d5bb142ae"
        },
        {
          "alg": "SHA-512",
          "content": "f881cd95bd25fae560bf52771a3e869cfe732c5ac99aae1645a014da92a2f5db7b6e2353dfdfa595e3f39aa85a1516a0b45b71b33d226d5af8fb1aaca3a9492b"
        },
        {
          "alg": "SHA-384",
          "content": "a71eea737f5a1a65ba648fe4e315f5f7a5731649199fa4c925146592639642ee48b15939f30277c8b27022294394dc1a"
        },
        {
          "alg": "SHA3-384",
          "content": "b4ca6ab8e6eb625bbafe472a8c5be3aa3b93e296345243e4ef5f8a29b37a517954b41829a7d9a214bdc0c02976d3a48a"
        },
        {
          "alg": "SHA3-256",
          "content": "49b2b2914f513aa873f17692bb67b324c9109ce9b8ea95db11e2c92101c4e4fa"
        },
        {
          "alg": "SHA3-512",
          "content": "887968d759326a48839b736ed1f44cc444f6c6e2895219c4886323eb417ae8ef824e4d87b9739906e84fd101073be0eddb2b0e1e2b9a66f19cb7ef37b86bd193"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        },
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        },
        {
          "license": {
            "id": "BSD-2-Clause"
          }
        },
        {
          "license": {
            "name": "Apache License, 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        },
        {
          "license": {
            "name": "Public Domain",
            "url": "https://creativecommons.org/publicdomain/zero/1.0/"
          }
        },
        {
          "license": {
            "name": "Modified BSD",
            "url": "https://asm.ow2.io/license.html"
          }
        },
        {
          "license": {
            "name": "jQuery license",
            "url": "jquery.org/license"
          }
        },
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/license/mit/"
          }
        },
        {
          "license": {
            "name": "W3C license",
            "url": "https://www.w3.org/Consortium/Legal/copyright-documents-19990405"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.jersey.containers/jersey-container-servlet@4.0.2?type=jar",
      "externalReferences": [
        {
          "url": "https://projects.eclipse.org/projects/ee4j.jersey/project/jersey-container-servlet",
          "type": "website"
        },
        {
          "url": "https://ci.eclipse.org/jersey",
          "type": "build-system"
        },
        {
          "url": "http://localhost",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/project/jersey-container-servlet",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.jersey.media/jersey-media-json-jackson@4.0.2?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.glassfish.jersey.media",
      "name": "jersey-media-json-jackson",
      "version": "4.0.2",
      "description": "Jersey JSON Jackson (2.x) entity providers support module.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "35bc0ebd87e351b294c4c2d80a49637d"
        },
        {
          "alg": "SHA-1",
          "content": "49a43c8e343340e8a91671d14a4e71bf6bcca832"
        },
        {
          "alg": "SHA-256",
          "content": "efa2fdad26e994adde4f827c11e44ab5fd3cf3c3e0aa4f99e8eefd1b83449fa7"
        },
        {
          "alg": "SHA-512",
          "content": "c57f5a439c0fec721d8776afe4947d004bb77a3beae809bf71cfe621f6a3aad3342450529a0e0d0696dce691bf3ab35c167829aa60829db903f5b5b73998b5ba"
        },
        {
          "alg": "SHA-384",
          "content": "f324740990411a83622cd12bdefb3e89cfb02c4ea703f4b6a693033b906f0c51b36ff28bb6ff38e5de1553b8e56b8e09"
        },
        {
          "alg": "SHA3-384",
          "content": "67024bf3a7e0eb78074482c54a6bb8edde46152a8421b0018948592358b548c653049d1cfea3c46d2f2e6a43696d260c"
        },
        {
          "alg": "SHA3-256",
          "content": "929d16ec5a727e2fb44e970048f7b9afb15af7e3cfe8ae6927faf9214ce1bc9e"
        },
        {
          "alg": "SHA3-512",
          "content": "9e21c8523d65bb618302f96ab10914fe217e60d18ec6ef3ebea51fdccd8c0fe8c5e6b159a59d257134448c152dde8496e4b23e054d55254465f0797fa5e1a703"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "name": "The GNU General Public License (GPL), Version 2, With Classpath Exception",
            "url": "https://www.gnu.org/software/classpath/license.html"
          }
        },
        {
          "license": {
            "name": "Apache License, 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.jersey.media/jersey-media-json-jackson@4.0.2?type=jar",
      "externalReferences": [
        {
          "url": "https://projects.eclipse.org/projects/ee4j.jersey/project/jersey-media-json-jackson",
          "type": "website"
        },
        {
          "url": "https://ci.eclipse.org/jersey",
          "type": "build-system"
        },
        {
          "url": "http://localhost",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/project/jersey-media-json-jackson",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.jersey.ext/jersey-entity-filtering@4.0.2?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.glassfish.jersey.ext",
      "name": "jersey-entity-filtering",
      "version": "4.0.2",
      "description": "Jersey extension module providing support for Entity Data Filtering.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "6a9d18c10c375eaf87da84354bdbea31"
        },
        {
          "alg": "SHA-1",
          "content": "ebe669571bf00ea4030cfd17c3593ad1d334662d"
        },
        {
          "alg": "SHA-256",
          "content": "633afbf5f3c1ae53aeffbec1f486a878446f19ec8df42b2f795cb06620d1db90"
        },
        {
          "alg": "SHA-512",
          "content": "db48c6417f847d2f51b41d15315c6e73ed3a50e8b3f3b767f05c3f50827bc64359a9132a76283913ea753e840bfb96b0aa602e92b8b8818cb80d47fed11eb4f9"
        },
        {
          "alg": "SHA-384",
          "content": "c290248a96e5ccbc7bda48f0ac8312f829c801921aa1614066595b0f7395af94d67732bb4684834db85c1fa59db96d76"
        },
        {
          "alg": "SHA3-384",
          "content": "53d6d7c09162840e7bed9f1fb7a4bbf761c641b9701d8d562b3233e866cb424887120e7933dbcaea37d9951b67579773"
        },
        {
          "alg": "SHA3-256",
          "content": "189e43a565898a7fa96814e1c2430033a3e85f053958dc5c9c803e26385f899c"
        },
        {
          "alg": "SHA3-512",
          "content": "8789df3ed80682cc9bcdc0706c967a6749490a7b00f2a017fb9c5f1a500a14f2ddd2ff3596a95c0e44d86b156eb1be4b75a4b8bdb44aa4087323b6908716fd09"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        },
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        },
        {
          "license": {
            "id": "BSD-2-Clause"
          }
        },
        {
          "license": {
            "name": "Apache License, 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        },
        {
          "license": {
            "name": "Public Domain",
            "url": "https://creativecommons.org/publicdomain/zero/1.0/"
          }
        },
        {
          "license": {
            "name": "Modified BSD",
            "url": "https://asm.ow2.io/license.html"
          }
        },
        {
          "license": {
            "name": "jQuery license",
            "url": "jquery.org/license"
          }
        },
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/license/mit/"
          }
        },
        {
          "license": {
            "name": "W3C license",
            "url": "https://www.w3.org/Consortium/Legal/copyright-documents-19990405"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.jersey.ext/jersey-entity-filtering@4.0.2?type=jar",
      "externalReferences": [
        {
          "url": "https://projects.eclipse.org/projects/ee4j.jersey/project/jersey-entity-filtering",
          "type": "website"
        },
        {
          "url": "https://ci.eclipse.org/jersey",
          "type": "build-system"
        },
        {
          "url": "http://localhost",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/project/jersey-entity-filtering",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml.jackson.module/jackson-module-jakarta-xmlbind-annotations@2.21.3?type=jar",
      "publisher": "FasterXML",
      "group": "com.fasterxml.jackson.module",
      "name": "jackson-module-jakarta-xmlbind-annotations",
      "version": "2.21.3",
      "description": "Support for using Jakarta XML Bind (aka JAXB 3.0) annotations as an alternative to \u0022native\u0022 Jackson annotations, for configuring data-binding.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "9651f3099857d4cdbd9fd2e3af0dc2b3"
        },
        {
          "alg": "SHA-1",
          "content": "5464ed68549201b60eeeacbe4fdfe7ff2f3b3a7d"
        },
        {
          "alg": "SHA-256",
          "content": "3bb8a3bf2a6637f036d4881971f1417de3e31d300f0154d5865bcdd34411d983"
        },
        {
          "alg": "SHA-512",
          "content": "4075d97567801fb3f218c3438f2ab8a66909d2be14e9cbe50e5db3c586957a708427522c09fd84afadeaf260bec1350dc534424824108d59f6c71272ccc7f363"
        },
        {
          "alg": "SHA-384",
          "content": "2b3de6918a402917d363368fdbac8adadc842744e7fb953355f58d3294fac255afbe4759bb5de9b260f0ffbc7dab8a07"
        },
        {
          "alg": "SHA3-384",
          "content": "76abb8f3320dc76f9beb931e38bcf28df9c4e722fa18930fef836f2c9fccac71fabdd1957a60ecbc1e0584c541bb0433"
        },
        {
          "alg": "SHA3-256",
          "content": "d907fa96ee0da35bd1fd84db0f6171098e88619371312e2ee2cb832e9e2fe41f"
        },
        {
          "alg": "SHA3-512",
          "content": "75955ddddc6d47be64703b11cd99bcf3450dcfc2473f6d040166183768c204e5cae287660c60db666135ccc10dbf1aa33c96d6873d1e68b672d6b0d358286e0c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.module/jackson-module-jakarta-xmlbind-annotations@2.21.3?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/FasterXML/jackson-modules-base",
          "type": "website"
        },
        {
          "url": "https://central.sonatype.com/api/v1/publisher",
          "type": "distribution"
        },
        {
          "url": "https://github.com/FasterXML/jackson-modules-base/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/FasterXML/jackson-modules-base/jackson-module-jakarta-xmlbind-annotations",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@4.0.2?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "jakarta.xml.bind",
      "name": "jakarta.xml.bind-api",
      "version": "4.0.2",
      "description": "Jakarta XML Binding API",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "0c8f9991081def819435c3ff36e4d93f"
        },
        {
          "alg": "SHA-1",
          "content": "6cd5a999b834b63238005b7144136379dc36cad2"
        },
        {
          "alg": "SHA-256",
          "content": "0d6bcfe47763e85047acf7c398336dc84ff85ebcad0a7cb6f3b9d3e981245406"
        },
        {
          "alg": "SHA-512",
          "content": "2e57ce867ae3592959243ab9d7d064b09d9587933c98f89f5d5eeb8fe70556a53fea6db91520a2e086555684e8917f4001741bd8ffb07d26c59fe95c13d71fa0"
        },
        {
          "alg": "SHA-384",
          "content": "7ac5da337fccfa426b48691febed0d874a8e9a6a230bb7a53169f902e5b499778106f7b710afbe133dbd7bfacca693a0"
        },
        {
          "alg": "SHA3-384",
          "content": "fc952425a51459a5d18dc7b6315625c55889e1b92e700450c84205506e5107ca4c7c8bc449190220bf471db3dcbf9c8a"
        },
        {
          "alg": "SHA3-256",
          "content": "a78dd7c5883b16cf899495930e653650005c71b4d9b509e56cac4665778d715e"
        },
        {
          "alg": "SHA3-512",
          "content": "bdf9db79b8ade9421c3f5fc497ebe13a552be5852d99cedfa38bb6c760c8bf190f88204ab6e02442db5fb24378afc6112297c5a582d4e721de71285405a6429d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@4.0.2?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/jakartaee/jaxb-api/jakarta.xml.bind-api",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/jakartaee/jaxb-api/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/jaxb-dev",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/jakartaee/jaxb-api.git/jakarta.xml.bind-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.jersey.media/jersey-media-multipart@4.0.2?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.glassfish.jersey.media",
      "name": "jersey-media-multipart",
      "version": "4.0.2",
      "description": "Jersey Multipart entity providers support module.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "aae6111826bc8092f33c8e80de9c120d"
        },
        {
          "alg": "SHA-1",
          "content": "f5400fc442af3cdcc46f0204f2b6072402aaca9d"
        },
        {
          "alg": "SHA-256",
          "content": "b9bbd74fa5337753c1f96e2ef1e9ab5c7ab1ad3b8fe1c4f719a311e8f3821aed"
        },
        {
          "alg": "SHA-512",
          "content": "75a380ec7fee2a1a04327cc765ea6a52e1b70da3a91dc921cbc221085b1541e68e40d5c743a6227c86d2d74a65cfe68b05ec1fbce42ac739f6a5e4498c8dcdd6"
        },
        {
          "alg": "SHA-384",
          "content": "f09f5dcd92f1960593f1909c13813774658f735e8a875502c9061c51cc6a78d5195d1973ea346809d837d25e3dff2ee4"
        },
        {
          "alg": "SHA3-384",
          "content": "07030c4ab91f627b75f8d93460e45e4966db068a6a06fc2108a2cde14360685717d4669d0311885687d787085e79c97a"
        },
        {
          "alg": "SHA3-256",
          "content": "d4110cad7c9d2fb29775aa789b662dfda3b70755706d90815eaaf0ee0c3f5d4d"
        },
        {
          "alg": "SHA3-512",
          "content": "ecd7b48b0e3069d4441f9a9f357552ba7f15a952fab0d71e52bfac349c04492c80687f849b88d2b22b85ee1dc902d56a9b7cf1c20d9c0440bfea5113798d290c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        },
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        },
        {
          "license": {
            "id": "BSD-2-Clause"
          }
        },
        {
          "license": {
            "name": "Apache License, 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        },
        {
          "license": {
            "name": "Public Domain",
            "url": "https://creativecommons.org/publicdomain/zero/1.0/"
          }
        },
        {
          "license": {
            "name": "Modified BSD",
            "url": "https://asm.ow2.io/license.html"
          }
        },
        {
          "license": {
            "name": "jQuery license",
            "url": "jquery.org/license"
          }
        },
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/license/mit/"
          }
        },
        {
          "license": {
            "name": "W3C license",
            "url": "https://www.w3.org/Consortium/Legal/copyright-documents-19990405"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.jersey.media/jersey-media-multipart@4.0.2?type=jar",
      "externalReferences": [
        {
          "url": "https://projects.eclipse.org/projects/ee4j.jersey/project/jersey-media-multipart",
          "type": "website"
        },
        {
          "url": "https://ci.eclipse.org/jersey",
          "type": "build-system"
        },
        {
          "url": "http://localhost",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/project/jersey-media-multipart",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.jvnet.mimepull/mimepull@1.9.15?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.jvnet.mimepull",
      "name": "mimepull",
      "version": "1.9.15",
      "description": "Provides a streaming API to access attachments parts in a MIME message.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "fdc35a1eae84c5a60c95d617551d4a06"
        },
        {
          "alg": "SHA-1",
          "content": "60f9a7991ad9ec1a280db8deea216a91c10aae74"
        },
        {
          "alg": "SHA-256",
          "content": "b9f586bf8844b14a33e75fe7a4b94896dc80d80b732d128777e287af14c836fa"
        },
        {
          "alg": "SHA-512",
          "content": "d80e7f2550272edefe8eebace17c8b836d72602bfff67007c6463d4c7b02a36b97467f23d358601d97882160533ed110da938082994434e2312fb0c4e0f2a19e"
        },
        {
          "alg": "SHA-384",
          "content": "dea380fc137e9784a6c6d114c0a12d4a415baa21e2ce188b952ee1bfa59baaa53e133a0c5fcde9ff1abdbf4dbe93a58b"
        },
        {
          "alg": "SHA3-384",
          "content": "c4d8fc6eff8b9325c07f037484d49e1a52ad580237ba247eec92617e15be03501862b7f64b334919077e124bb94975c5"
        },
        {
          "alg": "SHA3-256",
          "content": "648e6b07265e79912cf8191efdaf316a7f2d317e79d7e4e9b7e323556da74fac"
        },
        {
          "alg": "SHA3-512",
          "content": "14672a4a8dd2a5fe1d437a1204de922eb668ff76c72dae0acc4438fa54eb25a2f6232c75038a391428544b3e77a0a6290d84a99b9c60ea7ce743561ca9b4e1ba"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/org.jvnet.mimepull/mimepull@1.9.15?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/eclipse-ee4j/metro-mimepull",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/metro-mimepull/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://www.eclipse.org/lists/metro-dev",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/metro-mimepull",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.jersey.inject/jersey-hk2@4.0.2?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.glassfish.jersey.inject",
      "name": "jersey-hk2",
      "version": "4.0.2",
      "description": "HK2 InjectionManager implementation",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "295f464e22b0303c2c5dc23888194042"
        },
        {
          "alg": "SHA-1",
          "content": "8283989a7a36b51f31c5f35b354881d106bee6b3"
        },
        {
          "alg": "SHA-256",
          "content": "5df758fc55d0d7cdb431b4c9ab50fbf613965ce0a7898d1a923d957e3a93df2c"
        },
        {
          "alg": "SHA-512",
          "content": "846c8d018bb0059eda93b8b1f464f7bf14d284b36d871df0233b6655486344168373a31b8a778891d2de0d8e4141446e04b0845b21bce793ce728c0d93bda512"
        },
        {
          "alg": "SHA-384",
          "content": "1b3d5da027e60c1cd2d0c97069350cef3e42b45b4814976ce8185dcf57b1dac907375835f8a34f25f59fdcd0c394e4fb"
        },
        {
          "alg": "SHA3-384",
          "content": "fd5e03a684c044960e176577371ce74cadabc5673d558f96a7d1dff56b59bef6809a897913c99660bcdcc8c27fe43be4"
        },
        {
          "alg": "SHA3-256",
          "content": "b9c053c2b3cd0fe0c1bd0c8b78ac4a7a1b97ce5c80f7722483b70d40c1cfb476"
        },
        {
          "alg": "SHA3-512",
          "content": "087e8d0583f2db5c0b877188d8bd85e15af42e0e6bdb10e5363639a8e721cf128874fdeaead7ad5d2b5c6b2e2741708d4bddd3638c7f27275b11c3a96095c2ef"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        },
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        },
        {
          "license": {
            "id": "BSD-2-Clause"
          }
        },
        {
          "license": {
            "name": "Apache License, 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        },
        {
          "license": {
            "name": "Public Domain",
            "url": "https://creativecommons.org/publicdomain/zero/1.0/"
          }
        },
        {
          "license": {
            "name": "Modified BSD",
            "url": "https://asm.ow2.io/license.html"
          }
        },
        {
          "license": {
            "name": "jQuery license",
            "url": "jquery.org/license"
          }
        },
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/license/mit/"
          }
        },
        {
          "license": {
            "name": "W3C license",
            "url": "https://www.w3.org/Consortium/Legal/copyright-documents-19990405"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.jersey.inject/jersey-hk2@4.0.2?type=jar",
      "externalReferences": [
        {
          "url": "https://projects.eclipse.org/projects/ee4j.jersey/project/jersey-hk2",
          "type": "website"
        },
        {
          "url": "https://ci.eclipse.org/jersey",
          "type": "build-system"
        },
        {
          "url": "http://localhost",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/project/jersey-hk2",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.hk2/hk2-locator@4.0.0-M3?type=jar",
      "publisher": "Oracle Corporation",
      "group": "org.glassfish.hk2",
      "name": "hk2-locator",
      "version": "4.0.0-M3",
      "description": "ServiceLocator Default Implementation",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "b4208d604d4c23e3acae9f6300aafd4c"
        },
        {
          "alg": "SHA-1",
          "content": "64a198be0ce5a86c6e6e439188fc4e7187416588"
        },
        {
          "alg": "SHA-256",
          "content": "290027395d95bfcbb5f40c992376a6f21c75bf63c9c8d4df3cfc034ba1a85ded"
        },
        {
          "alg": "SHA-512",
          "content": "cb3280c9af78f7fa19cf537448bb28be7e1981733fbf2bc1e86823288539def8c856cb915c921c9cd6ef490b39bb93aba998eb35ed967aa3c0a11d7a65b05cad"
        },
        {
          "alg": "SHA-384",
          "content": "a0a74b0787b7240632ac04fb635bfb8cdb8ce7529ebeca5a03f3157ee5ccdd902ce83300995eff2e44ff5d58e0ed330b"
        },
        {
          "alg": "SHA3-384",
          "content": "f260e2b328e7be64987ac4b2f72b7f627eac5dbfb318ae40ae5c7cd08a5cb4a8e2b60cd2e5863bfb54782200563a7f6c"
        },
        {
          "alg": "SHA3-256",
          "content": "a3bd95277a4f2f33a9e8b0fec11ef6b7e7e57efe6454bb35a8b9a9474c7d8818"
        },
        {
          "alg": "SHA3-512",
          "content": "1a4eb5c85a9346ee214f5f9afc1a9fa5bc9b0d8bcf4261370a6dc6efd595b3a3ff50ad89eb85a4c6693ebf86590d362d58fbffdc5c399c7746524caef25ad24b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.hk2/hk2-locator@4.0.0-M3?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/eclipse-ee4j/glassfish-hk2/hk2-locator",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/glassfish-hk2/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/glassfish-hk2-dev/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/glassfish-hk2/hk2-locator",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.hk2.external/aopalliance-repackaged@4.0.0-M3?type=jar",
      "publisher": "Oracle Corporation",
      "group": "org.glassfish.hk2.external",
      "name": "aopalliance-repackaged",
      "version": "4.0.0-M3",
      "description": "Dependency Injection Kernel",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "265ded5507ff1db7cd2184d4846fc85b"
        },
        {
          "alg": "SHA-1",
          "content": "71779579326f1648524a86fdee77bdf1d2d45336"
        },
        {
          "alg": "SHA-256",
          "content": "65c0abb946d2ab3a1237c610f24bf15f04696151e9cafbe1afa6cee52fbed5ed"
        },
        {
          "alg": "SHA-512",
          "content": "e45784cc801cef6726c4c74ba6158f34de84b6ee7b3c4823be16b9a53aee22f0b251c8c0144953c8c09d4e8169c2134a1530baece93169efbb33c0c118af7de5"
        },
        {
          "alg": "SHA-384",
          "content": "de80c2803aafdedaddb185277ca9946c5ea24e8f3f10f172abedf8cf9fd2de61d4ac022ae466cbe9fc54ffff3a43acd8"
        },
        {
          "alg": "SHA3-384",
          "content": "af3ce290b4aecad2cf4f5b163a484013732d2891b640b927169e9dfdaec19254404b5ce9a0162842a1d915024fa5752a"
        },
        {
          "alg": "SHA3-256",
          "content": "9043468d2fa46fd4b156845bcfa8a5ed350dcab0929a970aa2d4f885c62f69c6"
        },
        {
          "alg": "SHA3-512",
          "content": "88722b8a289ecbe9753c9801ffadc909089879b4c3d71edd4ec298eb5d6fddb5a6bd0d56fa01ae6fad5f9826460d0809a6d0f4aabc009a1d2d4377f03fb507ed"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.hk2.external/aopalliance-repackaged@4.0.0-M3?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/eclipse-ee4j/glassfish-hk2/external/aopalliance-repackaged",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/glassfish-hk2/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/glassfish-hk2-dev/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/glassfish-hk2/external/aopalliance-repackaged",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.hk2/hk2-api@4.0.0-M3?type=jar",
      "publisher": "Oracle Corporation",
      "group": "org.glassfish.hk2",
      "name": "hk2-api",
      "version": "4.0.0-M3",
      "description": "HK2 API module",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "4a7799f8b0c76121478fdbfd3fa481cb"
        },
        {
          "alg": "SHA-1",
          "content": "4b9520d9c4ecdc8b688a50968c19b54b55fc1274"
        },
        {
          "alg": "SHA-256",
          "content": "66f859916e6a7de3622973acf7f672a895c9bac81622080dfbb95ac9b021b1f8"
        },
        {
          "alg": "SHA-512",
          "content": "f202d82a2493430495b7c0d2006f21b3435f5367b6e24f7ef41736c2fb0d551a8ab4a269808dec7f8c8df8b3bb62fc05f148740ca5b4f642becac6216971ba12"
        },
        {
          "alg": "SHA-384",
          "content": "be02adf52ba9a8cfc1fa5792b4b2ede0a577e8f55d7589740c563ddd3c6fcbabf9ed9d9a310f5f8ac4aac91b09cecc58"
        },
        {
          "alg": "SHA3-384",
          "content": "0c5d90d77991c80953945914bbc2cf22420765396edf899863f16dc50527cb251c04c8e3ee6b68a44e657ce76a97c7e3"
        },
        {
          "alg": "SHA3-256",
          "content": "25692ba0b74506800453bed8bc69f98b6b8ebe75cf78984cb5af1047a0e3f028"
        },
        {
          "alg": "SHA3-512",
          "content": "e4d89788416d7f29a91758f03715fc3bc5c85023bc0e0f2093852d72c0437308bb53e71c5710f6e8f0841a1eaece0af1351ea0bce5ca075f9b2c19af8508b9d6"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.hk2/hk2-api@4.0.0-M3?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/eclipse-ee4j/glassfish-hk2/hk2-api",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/glassfish-hk2/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/glassfish-hk2-dev/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/glassfish-hk2/hk2-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.hk2/hk2-utils@4.0.0-M3?type=jar",
      "publisher": "Oracle Corporation",
      "group": "org.glassfish.hk2",
      "name": "hk2-utils",
      "version": "4.0.0-M3",
      "description": "HK2 Implementation Utilities",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "8bc6984bd681f30286f4d95ee8795b61"
        },
        {
          "alg": "SHA-1",
          "content": "d0017a4fffdb8184582d579c15e4d90765e4d11b"
        },
        {
          "alg": "SHA-256",
          "content": "ba7087827fe89af3d824fc26556c985ce9afa0cc30faa24e8b65145ca0fefcf1"
        },
        {
          "alg": "SHA-512",
          "content": "b39a525b64d012ae99e09809ecd906bab9fc98baf027005b86f964b2baf2ca455e4fca655bca1b147ddc8225b0f6abda32859beed920d59f813bf4c3a5de7a43"
        },
        {
          "alg": "SHA-384",
          "content": "08d57c36622c3cfd6471b0552653aea5194d491e7cef0a8946ebc7c26195e640c6fe54c5db4829e71f5a213294fc5a6c"
        },
        {
          "alg": "SHA3-384",
          "content": "b5d5b9bb24d31585a42052571cb6cad2b10035a3439ec6f66689dff03034cab04d81a3b0187c3917158f1e6332ae75e5"
        },
        {
          "alg": "SHA3-256",
          "content": "0d635ee61147b0fcf9ec3208926e86e14752e390f45ec26828d427a12b0cf15e"
        },
        {
          "alg": "SHA3-512",
          "content": "5280173e2349d1490362b2b320cbbd17e56f751d995ac20e2867de2c7955118c3d12f852c784e0e8dce21854c534a0c1721245e8b4ab1d96a97788a3dc006372"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.hk2/hk2-utils@4.0.0-M3?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/eclipse-ee4j/glassfish-hk2/hk2-utils",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/glassfish-hk2/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/glassfish-hk2-dev/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/glassfish-hk2/hk2-utils",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.javassist/javassist@3.30.2-GA?type=jar",
      "publisher": "Shigeru Chiba, www.javassist.org",
      "group": "org.javassist",
      "name": "javassist",
      "version": "3.30.2-GA",
      "description": "Javassist (JAVA programming ASSISTant) makes Java bytecode manipulation simple. It is a class library for editing bytecodes in Java.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "f5b827b8ddec0629cc7a6d7dafc45999"
        },
        {
          "alg": "SHA-1",
          "content": "284580b5e42dfa1b8267058566435d9e93fae7f7"
        },
        {
          "alg": "SHA-256",
          "content": "eba37290994b5e4868f3af98ff113f6244a6b099385d9ad46881307d3cb01aaf"
        },
        {
          "alg": "SHA-512",
          "content": "046c5b87732ef28540c56f88891238e49ac15fcc23e1f13e0b12de816831ba3de54e68a727b6163877a7b19b13f1362c0e6affa2664af1fdac5748632ed7a09e"
        },
        {
          "alg": "SHA-384",
          "content": "d1dfb87ac4d7797ea07098b7814190eed3aa16e86dd792916ff7f86c30ad456dd153f9ae4e77f13cee03e23dd3cfb24b"
        },
        {
          "alg": "SHA3-384",
          "content": "f70abfcb1b0d9e7903171bf52fe34b33ceffa9c53b697fabac9f2d3e02b8621446f7b2471d44e2cb70862e559b4d36b2"
        },
        {
          "alg": "SHA3-256",
          "content": "cf3f1d9150d71a6f23a749c24d355accb133991a9272110c5fa0ccff73220367"
        },
        {
          "alg": "SHA3-512",
          "content": "e294c989c20271f42a4bf0c63cbb691cb2fa284088c8a846983aa0e4948b4325131b8829b210214f539d30eb4e20b14c06f4b164208488719512739d78dfd454"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MPL-1.1"
          }
        },
        {
          "license": {
            "id": "LGPL-2.1-only"
          }
        },
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.javassist/javassist@3.30.2-GA?type=jar",
      "externalReferences": [
        {
          "url": "https://www.javassist.org/",
          "type": "website"
        },
        {
          "url": "https://repository.jboss.org/nexus/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://jira.jboss.org/jira/browse/JASSIST/",
          "type": "issue-tracker"
        },
        {
          "url": "scm:git:git@github.com:jboss-javassist/javassist.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/jakarta.annotation/jakarta.annotation-api@3.0.0?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "jakarta.annotation",
      "name": "jakarta.annotation-api",
      "version": "3.0.0",
      "description": "Jakarta Annotations API",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "7faffaab962918da4cf5ddfd76609dd2"
        },
        {
          "alg": "SHA-1",
          "content": "54f928fadec906a99d558536756d171917b9d936"
        },
        {
          "alg": "SHA-256",
          "content": "b01f55552284cfb149411e64eabca75e942d26d2e1786b32914250e4330afaa2"
        },
        {
          "alg": "SHA-512",
          "content": "2bd5a16684c4e8144897ba6dc467628d1b8a85326235240e4c20101b6df3681d23aeebc30ca99e395ec848f33cb5244085031b2a0fbce746c8ede7148a5e7c1d"
        },
        {
          "alg": "SHA-384",
          "content": "1a12cb78019d310eb08314f863c2a0e48aa2845bde844f8204e653ec50713bf135cc58cce882e14ef631327952b5ad99"
        },
        {
          "alg": "SHA3-384",
          "content": "a0dd7dd32e8dc5ed679589f6066f16593b52334b9947a71381aeab44b3cbe295ec24dfef4fbfa5514ba24ea60fe042a9"
        },
        {
          "alg": "SHA3-256",
          "content": "6ae915a05b483f75c51f3a109cf368842d186b2996758b8a106377a7a9485c12"
        },
        {
          "alg": "SHA3-512",
          "content": "52f611aa0a98812e525be2b9d5a5712aef660598cff64282dbd9afc237560f442ab745fc95c919216f9cb4197c224ba6c7317282962c638fee956925bfa031c0"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl": "pkg:maven/jakarta.annotation/jakarta.annotation-api@3.0.0?type=jar",
      "externalReferences": [
        {
          "url": "https://projects.eclipse.org/projects/ee4j.ca",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/jakartaee/common-annotations-api/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/ca-dev",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/jakartaee/common-annotations-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/jakarta.json/jakarta.json-api@2.1.3?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "jakarta.json",
      "name": "jakarta.json-api",
      "version": "2.1.3",
      "description": "Jakarta JSON Processing defines a Java(R) based framework for parsing, generating, transforming, and querying JSON documents.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "596997520702889d4afef9cffbd4b71a"
        },
        {
          "alg": "SHA-1",
          "content": "4febd83e1d9d1561d078af460ecd19532383735c"
        },
        {
          "alg": "SHA-256",
          "content": "bc934142805ea1d794f1440563965a3861a2a9fb7414ecd3fe44f26500734414"
        },
        {
          "alg": "SHA-512",
          "content": "5a6566f0ceaa8b0ca40ae643942c0d46acd118a3b4d85af5f3a977e738465e8c8d4bc977f0c3e4b51f4471e408c28f66dbc0b19adf61237f6f6f7fa1d0dacc31"
        },
        {
          "alg": "SHA-384",
          "content": "1a17b8a416692ba0e485d7290782b2b5c4de8cb65c2043f221381deee668953655c221dc3efa29d3c65c8b2c1fab173f"
        },
        {
          "alg": "SHA3-384",
          "content": "4c009f9fec6b1e14b2c675ee7addb49ebd047d71d7aaf31601ccea3ffe4af1d82838a3452b0e5d7c2814e27861cd3ffd"
        },
        {
          "alg": "SHA3-256",
          "content": "5b839f4645dbac0d1bc76a91e168a52574c2bb6de0b7e92cd14aafd0ad6a28b0"
        },
        {
          "alg": "SHA3-512",
          "content": "fedcd8618f44ab0b771bef7d2fcb61d49021eb2e592d8d3058d3f57e7fe0ed1a9239cac859fe534dd0629aaf577fb8f77841412dbb3ae58b8d8cd0754da2ec48"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0",
            "url": "https://www.eclipse.org/legal/epl-2.0"
          }
        },
        {
          "license": {
            "name": "GNU General Public License, version 2 with the GNU Classpath Exception",
            "url": "https://projects.eclipse.org/license/secondary-gpl-2.0-cp"
          }
        }
      ],
      "purl": "pkg:maven/jakarta.json/jakarta.json-api@2.1.3?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/eclipse-ee4j/jsonp",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/ee4j/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jsonp",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.eclipse.parsson/jakarta.json@1.1.7?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.eclipse.parsson",
      "name": "jakarta.json",
      "version": "1.1.7",
      "description": "Default provider for Jakarta JSON Processing",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "68b696da0b95318047ff3a2403bfd86d"
        },
        {
          "alg": "SHA-1",
          "content": "91a668f91f296fe82c6a25cb0175b733e9e05fe7"
        },
        {
          "alg": "SHA-256",
          "content": "5905f52283a7491e06ba58556103d45c3199a42602abcd36d510ceda65490ff0"
        },
        {
          "alg": "SHA-512",
          "content": "32d57ea7b52edd91967e13f2812ddea03785d3b2b75f1a35e7567ece81b95b015ce9372fe044d8cdfe5a2cfe27df5a124cb653f5750332a7a9f583c9c429e076"
        },
        {
          "alg": "SHA-384",
          "content": "9b41d27f58cd2f3f787a7ff744f366b5cfe2f23892983bee8305a45c75c846da935155e67132b16e510261c6573611ec"
        },
        {
          "alg": "SHA3-384",
          "content": "2fa091c2f4c818e1296eb3652b212a866c86a804e003cfa81f7c2a328e38b4cfeea3601899321ea3a23671bc8dd5c032"
        },
        {
          "alg": "SHA3-256",
          "content": "6c61679b2f56bf5921c12244452f1dd2a555f73888258f66b8af026f71bfcd87"
        },
        {
          "alg": "SHA3-512",
          "content": "a39ffc271743b687342ef32a2b5be3f5cbfe97b6a09b9832ce5262008af6f77e7fd2f249f141a6ffc295f9e02a444f090dc5187db8b8744d0c32ece338e261c7"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0",
            "url": "https://www.eclipse.org/legal/epl-2.0"
          }
        },
        {
          "license": {
            "name": "GNU General Public License, version 2 with the GNU Classpath Exception",
            "url": "https://projects.eclipse.org/license/secondary-gpl-2.0-cp"
          }
        }
      ],
      "purl": "pkg:maven/org.eclipse.parsson/jakarta.json@1.1.7?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/eclipse-ee4j/parsson/parsson-bundles/jakarta.json",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/ee4j/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/parsson/parsson-bundles/jakarta.json",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.zaxxer/HikariCP@7.0.2?type=jar",
      "publisher": "Zaxxer.com",
      "group": "com.zaxxer",
      "name": "HikariCP",
      "version": "7.0.2",
      "description": "Ultimate JDBC Connection Pool",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "c36937c742c20cbdc7bcb47019e33151"
        },
        {
          "alg": "SHA-1",
          "content": "c2b43c946b86a14a96342379e22b004c56c6166d"
        },
        {
          "alg": "SHA-256",
          "content": "f1e612fa27345be3107a85431e8a8aeb205c15364ab2f2d411e40a9d7bb08095"
        },
        {
          "alg": "SHA-512",
          "content": "fab69440ecf96687ac9cd69d19503a824f7bec74d97329ee6f8568981200799a1503df5517b9e0322a8d139fc71d6af193314890716ff8f0fd52163dad6f0c6c"
        },
        {
          "alg": "SHA-384",
          "content": "b14c735ebeeb00e113c159cbc22b579ebe9676949a0c50f478bdc54daad8370d13954fc8df7b751ce6b3ab978fbfc43c"
        },
        {
          "alg": "SHA3-384",
          "content": "ecbcb443c087f455cc0e15f65736f9559a79e6375c4686830ede2e653d9dc79c36bb99b537f242f0f8a8acf3d5f22d56"
        },
        {
          "alg": "SHA3-256",
          "content": "3ff38f8630222d165d6ac18696a780e19d8e70019210a59a1dbff293de0b2db2"
        },
        {
          "alg": "SHA3-512",
          "content": "7ca91f467a107c528c8da8ea75a3503d8aa88fc4ac521e2d5d0359c28c4f8997bf472bc0445089a77f1a0efa0513fd9304de9bfd6ed4b14288b87461046b2e1b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.zaxxer/HikariCP@7.0.2?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/brettwooldridge/HikariCP",
          "type": "website"
        },
        {
          "url": "https://github.com/brettwooldridge/HikariCP/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/brettwooldridge/HikariCP",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.mindrot/jbcrypt@0.4?type=jar",
      "group": "org.mindrot",
      "name": "jbcrypt",
      "version": "0.4",
      "description": "OpenBSD-style Blowfish password hashing for Java",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "d2b39d874e0d512f85386a72b0083682"
        },
        {
          "alg": "SHA-1",
          "content": "af7e61017f73abb18ac4e036954f9f28c6366c07"
        },
        {
          "alg": "SHA-256",
          "content": "e183f6f59404fc1e12073cfea4ace7ea103c900463cd21fb609a7c617ecdf624"
        },
        {
          "alg": "SHA-512",
          "content": "95ffe1f6593f83da047ff289a52b5ef73adcaca4a9a990a47744fbd50a52fce39958c17ed393e95d64093b2acbcaba39ba0b5b983a2e0ad98ce5c6e9282a67cd"
        },
        {
          "alg": "SHA-384",
          "content": "66a24af2134e6fcee1f4232c2c4bab43ab97d0c8ffbbc009f9bb0e5ef2a7d8795a6da3c6b47c583675b98036958aa729"
        },
        {
          "alg": "SHA3-384",
          "content": "33cf5e13897f25c525017888e7fcd2faf9a0f25135be03a65dd154feb11455e33c1df31963470b2ecaaba5267f6ad652"
        },
        {
          "alg": "SHA3-256",
          "content": "a347c842385e1d76780f9afe2200a7b9815bcd873b2a9fdd2652d0b0a5e0d324"
        },
        {
          "alg": "SHA3-512",
          "content": "5a71c6f1fde98865302e8c9ee6c99ace9efa220c0193bcdd56423015d1c73e54bd65f19a9a3ba3199b242589eb9ccc96b1d6c0d413387f8e8fbed7c691fc8790"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://www.isc.org/licenses/"
          }
        }
      ],
      "purl": "pkg:maven/org.mindrot/jbcrypt@0.4?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/djmdjm/jBCrypt",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/djmdjm/jBCrypt.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.nimbusds/oauth2-oidc-sdk@11.37.2?type=jar",
      "publisher": "Connect2id Ltd.",
      "group": "com.nimbusds",
      "name": "oauth2-oidc-sdk",
      "version": "11.37.2",
      "description": "OAuth 2.0 SDK with OpenID Connection extensions for developing client and server applications.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "a0896c7feee39572a49bac9b5790974b"
        },
        {
          "alg": "SHA-1",
          "content": "09034768074fa4810a93fa0e9df7293c65b83f83"
        },
        {
          "alg": "SHA-256",
          "content": "b66e74746dcf516d77f20344e6fbcbcffe1b483b5cf1ad41ea81cec83cb27b3c"
        },
        {
          "alg": "SHA-512",
          "content": "a0f30dac78cce23cd1a8d9c0f6af2707722b0b36fb6ea8ac9afbd1051e121182a7fd82f6107ea25c6b4b4d8c5aca56f40dd0ddc62cd9f029bd1a068e561277ac"
        },
        {
          "alg": "SHA-384",
          "content": "08e4727e78ed1fbb6055620f5032e8ef4b8f15f8d0a4d49420476745840b935cb42cf1dc3e0b4455888ec0c7a28f67eb"
        },
        {
          "alg": "SHA3-384",
          "content": "4edb0ef58b3ab707591cca1707a43ed1b455cd6b73f48bc30dd48fcfc801aa582332fdd1eccac53af5ac4d28834acc08"
        },
        {
          "alg": "SHA3-256",
          "content": "254d946f4d8fc7fb08a7049452aff0bc12c6407ac6be4b4a8ff466312448a6a1"
        },
        {
          "alg": "SHA3-512",
          "content": "0c91de6b9a56707a1b7046462cb01db30a57b951a021000658e445fd9f30644e4a9d648c402ac7b29499aea31fc36e6f4b45297ef527550a8e7a7757c418a25c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.nimbusds/oauth2-oidc-sdk@11.37.2?type=jar",
      "externalReferences": [
        {
          "url": "https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.github.stephenc.jcip/jcip-annotations@1.0-1?type=jar",
      "group": "com.github.stephenc.jcip",
      "name": "jcip-annotations",
      "version": "1.0-1",
      "description": "A clean room implementation of the JCIP Annotations based entirely on the specification provided by the javadocs.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "d62dbfa8789378457ada685e2f614846"
        },
        {
          "alg": "SHA-1",
          "content": "ef31541dd28ae2cefdd17c7ebf352d93e9058c63"
        },
        {
          "alg": "SHA-256",
          "content": "4fccff8382aafc589962c4edb262f6aa595e34f1e11e61057d1c6a96e8fc7323"
        },
        {
          "alg": "SHA-512",
          "content": "02fcd16a30d0e68b3e9e4899731181c6abb7117baa15c096ca940e01dde08bb86101cbeae552c497f8a90d923b5fa2f2b6f3850baf8dc94dbd399887924a9069"
        },
        {
          "alg": "SHA-384",
          "content": "88b0ecfde391a3d8468349c70e1539569768dfac3233dfe0b4660904df04e6c6bf26ed9c0784b9b22c122c3448e2a6b6"
        },
        {
          "alg": "SHA3-384",
          "content": "487b53f48b55b98a61ae60abedc43543887944867aa6bcb78d5ed46e2d0d7c19510c5fcadc362d939313feafdcfc55e1"
        },
        {
          "alg": "SHA3-256",
          "content": "3e79c8f58865d2d58a5311a8bb45772007f07e7f3ed2780784d1e4382dc934d0"
        },
        {
          "alg": "SHA3-512",
          "content": "ff32665e1b6d8176ccc7e8c836ca7343c2603dab053e42d79b4258d51a14ff63933c67d24034169ac91e11ebda21cc2c84a2a540072e656d2a8e6fcea7808421"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.github.stephenc.jcip/jcip-annotations@1.0-1?type=jar",
      "externalReferences": [
        {
          "url": "http://stephenc.github.com/jcip-annotations",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "http://github.com/stephenc/jcip-annotations/issues",
          "type": "issue-tracker"
        },
        {
          "url": "http://github.com/stephenc/jcip-annotations/tree/master/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.nimbusds/content-type@2.3?type=jar",
      "publisher": "Connect2id Ltd.",
      "group": "com.nimbusds",
      "name": "content-type",
      "version": "2.3",
      "description": "Java library for Content (Media) Type representation",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "f0fc0d6be73e838863e2197c03a27c3f"
        },
        {
          "alg": "SHA-1",
          "content": "e3aa0be212d7a42839a8f3f506f5b990bcce0222"
        },
        {
          "alg": "SHA-256",
          "content": "60349793e006fba96b532cb0c21e10e969fe0db8d87f91c3b9eaf82ba2998895"
        },
        {
          "alg": "SHA-512",
          "content": "58f7fe3b4303cecd6eac73c3345af71536479ce4bc38c88153bdcf6176a7cf5a0875420ea4a6024b4e734b78de08a8e544014b435cb63416c759b957ad3818e4"
        },
        {
          "alg": "SHA-384",
          "content": "9dbe31f543aaf807093fe1dd18a0ed33346252e2f6fce598e1b193b9d73fcebf79608fce6a620ede8ea7adf45f1a7422"
        },
        {
          "alg": "SHA3-384",
          "content": "67b8b5d051230739ee85678006758450cd6510c5fb9a6b3134d43f644c2d70bc6dc3cff6133b132b5b158a1f346880a9"
        },
        {
          "alg": "SHA3-256",
          "content": "b8046b3dd12321400b4643ff0c47ea5c1e77d6252177bdd8be6f0e0b234c80bf"
        },
        {
          "alg": "SHA3-512",
          "content": "734a6a5a383aac8dcfaca09c8e37637f74334ce2d5c050b519277ad7c20f065fad44b5a6417cdc32d6cd43f80c0e1e0c37d9daa9279651facb6c38cb88376396"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.nimbusds/content-type@2.3?type=jar",
      "externalReferences": [
        {
          "url": "https://bitbucket.org/connect2id/nimbus-content-type",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://bitbucket.org/connect2id/nimbus-content-type",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/net.minidev/json-smart@2.6.0?type=jar",
      "publisher": "Chemouni Uriel",
      "group": "net.minidev",
      "name": "json-smart",
      "version": "2.6.0",
      "description": "JSON (JavaScript Object Notation) is a lightweight data-interchange format. It is easy for humans to read and write. It is easy for machines to parse and generate. It is based on a subset of the JavaScript Programming Language, Standard ECMA-262 3rd Edition - December 1999. JSON is a text format that is completely language independent but uses conventions that are familiar to programmers of the C-family of languages, including C, C\u002B\u002B, C#, Java, JavaScript, Perl, Python, and many others. These properties make JSON an ideal data-interchange language.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "fde8981f31c3b972355a5adf26a9ec65"
        },
        {
          "alg": "SHA-1",
          "content": "5f858a43a325a8673da6869ab2bc787a1bcb2244"
        },
        {
          "alg": "SHA-256",
          "content": "1ae4b561458afb540be8ec5c6dbb4f2e715a319a7ae64854998aaf924770d61b"
        },
        {
          "alg": "SHA-512",
          "content": "fc8269826394dbca52fa9366f28226e5e37bc64c1268d7a49e2dea7fb2c62da2be8c8bcf362da5561a3cf413816019d8c4f95199a585eb8b13e8a8b634259a00"
        },
        {
          "alg": "SHA-384",
          "content": "13db694eb1f73778d628452b6840bff4c044101f2dcf7c3782f4bb48798fbae8b752cb8f7536b5173e896de4c225c3a6"
        },
        {
          "alg": "SHA3-384",
          "content": "86c0dc99d98a7c70015b6158f76253cd16a4b2bfb754ea6526991860e2536880b95130044cbe953865b284eebadad781"
        },
        {
          "alg": "SHA3-256",
          "content": "edee009cc2977ff4c2aae9098d14e7e651168dca1735726772d6bda5b66e2e98"
        },
        {
          "alg": "SHA3-512",
          "content": "23f8d5a59cd7111680f65d9fc2ed80b9876ab3094a2048526b376ae16ad855680b1c90264c23c52468efe0646a30db8a22f6b279ec67e047f3951b55a6d0d104"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/net.minidev/json-smart@2.6.0?type=jar",
      "externalReferences": [
        {
          "url": "https://urielch.github.io/",
          "type": "website"
        },
        {
          "url": "https://github.com/netplex/json-smart-v2",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/net.minidev/accessors-smart@2.6.0?type=jar",
      "publisher": "Chemouni Uriel",
      "group": "net.minidev",
      "name": "accessors-smart",
      "version": "2.6.0",
      "description": "Java reflect give poor performance on getter setter an constructor calls, accessors-smart use ASM to speed up those calls.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "0ad72639eea293193f68898da9b0b902"
        },
        {
          "alg": "SHA-1",
          "content": "2d96f1d9b6ab7f13261aa81b15703574185747a0"
        },
        {
          "alg": "SHA-256",
          "content": "222c9f547bb20a99fc486403a398352d1306fb671b38abd7ecab6401df170e61"
        },
        {
          "alg": "SHA-512",
          "content": "220eb28c94fdd15e7ac9b7e80d238a9871fc78db3127db9ca6207251e0e5563c62cfd5ab7625d69eb9e2563fc726e71a25562a4081f089f564dc206e0569665f"
        },
        {
          "alg": "SHA-384",
          "content": "c861d37b7a3a5d3d42a699239e3437cf094a8359b2371bacce5f7a17da02f9a0eb65ca2456d0168c4870be36bddc135f"
        },
        {
          "alg": "SHA3-384",
          "content": "4fa8ea0794e22ccc34ecc9b73cb9cad062cd82561227b15f1261541180d584ba745611ff31e98653e4f5d481846de361"
        },
        {
          "alg": "SHA3-256",
          "content": "1b170bf2e79abd9a77bb330c51b73d695c17e5db41817efab22294f4ee65a2c1"
        },
        {
          "alg": "SHA3-512",
          "content": "224c001707e5b478f6503b88ab8c07b94f82bfb02bc81094a3ffdcf05d29f1377a8e518b223f9282d0147f386f13faf319692002d59f4c6f452b282aa6b000c0"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/net.minidev/accessors-smart@2.6.0?type=jar",
      "externalReferences": [
        {
          "url": "https://urielch.github.io/",
          "type": "website"
        },
        {
          "url": "https://github.com/netplex/json-smart-v2",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.nimbusds/lang-tag@1.7?type=jar",
      "publisher": "Connect2id Ltd.",
      "group": "com.nimbusds",
      "name": "lang-tag",
      "version": "1.7",
      "description": "Java implementation of \u0022Tags for Identifying Languages\u0022 (RFC 5646)",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "31b8a4f76fdbf21f1d667f9d6618e0b2"
        },
        {
          "alg": "SHA-1",
          "content": "97c73ecd70bc7e8eefb26c5eea84f251a63f1031"
        },
        {
          "alg": "SHA-256",
          "content": "e8c1c594e2425bdbea2d860de55c69b69fc5d59454452449a0f0913c2a5b8a31"
        },
        {
          "alg": "SHA-512",
          "content": "494267766c974ce16a99cb221953edc91fde8db0c920230758ecea0ea9d3006e95d86ad46f7a9d61b810d85b0fa6da9a3ce2b507cdbe4be320c499eaea93666b"
        },
        {
          "alg": "SHA-384",
          "content": "fdc2cde39a1b07a2542cbc07222afd6292ae19cb1f9ae008476f7ec1b8ebe1e3e84aca08e47e1ef81887a23ac5267d00"
        },
        {
          "alg": "SHA3-384",
          "content": "b0e673087533f60173a11a55b0fde554c0830e7b3b6609e1ea6546de19fc9a97fbfe6eee73580d09b2de66989d0603c7"
        },
        {
          "alg": "SHA3-256",
          "content": "ea208d4eb55212ce9835a9be60396861b0fc33f4161efee3736c3e7159acb9f7"
        },
        {
          "alg": "SHA3-512",
          "content": "450f819981d73711c30d838261ff55a7f1988c8b965c786708dc27fbd10a2018cfde82b8fee5d7d1022eacf085dfdabe22d9de92462eba80e2c15a116c3c73ed"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.nimbusds/lang-tag@1.7?type=jar",
      "externalReferences": [
        {
          "url": "https://bitbucket.org/connect2id/nimbus-language-tags",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://bitbucket.org/connect2id/nimbus-language-tags.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.nimbusds/nimbus-jose-jwt@10.9?type=jar",
      "publisher": "Connect2id Ltd.",
      "group": "com.nimbusds",
      "name": "nimbus-jose-jwt",
      "version": "10.9",
      "description": "Java library for Javascript Object Signing and Encryption (JOSE) and JSON Web Tokens (JWT)",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "5982206678d76d60ec3744d907de7f31"
        },
        {
          "alg": "SHA-1",
          "content": "59fa8df26e59665566d9795036e005d149d1fcf3"
        },
        {
          "alg": "SHA-256",
          "content": "64d613d91140bad0dab8f0c41960f919ec8705a9ced9418146598b4b3ae71349"
        },
        {
          "alg": "SHA-512",
          "content": "da670966aeb3c1413a425f6856756c40bcab38a8e65927d115543d9c8b1c9a5ff9897510d29727582728259236421a5e8c60d796f1b71c6453581277e9310aa7"
        },
        {
          "alg": "SHA-384",
          "content": "a6afedef07c724327a21571fd1da8137857494be216763086d79dec4d16932cc5bc9066f9f673aa35d38bd5a79f7694d"
        },
        {
          "alg": "SHA3-384",
          "content": "545e24068e9b805a82915a6009d1316ed5f291ac9fad79f7f425ef58d0777cf732cfd0e609271ea781cecce591a94276"
        },
        {
          "alg": "SHA3-256",
          "content": "d954694ccd716ed8c4ea24933a76fb31e30861e37ca198dfb4d007996b9801f6"
        },
        {
          "alg": "SHA3-512",
          "content": "37ef2eb4ebbdfc6cb400e376c36de141fc5dc9a6d83c259866d336c2ed97c1ffd0dbf005b293ebf53ce70a9aca7ea4329de26df9be3ed30eefd79b9c74f8e854"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.nimbusds/nimbus-jose-jwt@10.9?type=jar",
      "externalReferences": [
        {
          "url": "https://bitbucket.org/connect2id/nimbus-jose-jwt",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://bitbucket.org/connect2id/nimbus-jose-jwt",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml.jackson.jakarta.rs/jackson-jakarta-rs-base@2.21.3?type=jar",
      "publisher": "FasterXML",
      "group": "com.fasterxml.jackson.jakarta.rs",
      "name": "jackson-jakarta-rs-base",
      "version": "2.21.3",
      "description": "Pile of code that is shared by all Jackson-based Jakarta-RS providers.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "c446e2d1cd311b0635ea9bc0dc9d6cc2"
        },
        {
          "alg": "SHA-1",
          "content": "ee9631cf82c7fc636f7d8acce6fd256ddc459092"
        },
        {
          "alg": "SHA-256",
          "content": "ea1e80963511a61ecfdb48bab893795cdcdcd4dd90cb05d7c8d6c55189032a3a"
        },
        {
          "alg": "SHA-512",
          "content": "89a48b66224af43fba046abac3c801d77417f476f97b2029e0a05d633a5a0ac416d35bc861ab5a777c4660832639a733e53447abfd886dc7f49b2ba4d4c12fc8"
        },
        {
          "alg": "SHA-384",
          "content": "9159e8db627775902f370d4c04c65a2da9bebfac4f927a825218c8e02dd95238d6198b86e3b92c16afc51e16b9978e10"
        },
        {
          "alg": "SHA3-384",
          "content": "fac1f88fb6ef4104d69a4f035df9841585a8ec5c164c6c8ddbe6dd5288f09478624a4367699e4736c1e03011adc7558e"
        },
        {
          "alg": "SHA3-256",
          "content": "88da7cb68646a01c2547d8d3957316ec5bfdf6b9c0e54ebc724ffde173cdfc9c"
        },
        {
          "alg": "SHA3-512",
          "content": "0b8ac6f7839d9f6af0fd387ed41c972ff0a7b105525bac2e2c386f65659710404fcefaa9c54b0c6a01d1a97319837c48195749cfaa186c1d2c5ef9e7c8fac3dd"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.jakarta.rs/jackson-jakarta-rs-base@2.21.3?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/FasterXML/jackson-jakarta-rs-providers/jackson-jakarta-rs-base",
          "type": "website"
        },
        {
          "url": "https://central.sonatype.com/api/v1/publisher",
          "type": "distribution"
        },
        {
          "url": "https://github.com/FasterXML/jackson-jakarta-rs-base/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/FasterXML/jackson-jakarta-rs-providers/jackson-jakarta-rs-base",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml.jackson.jakarta.rs/jackson-jakarta-rs-json-provider@2.21.3?type=jar",
      "publisher": "FasterXML",
      "group": "com.fasterxml.jackson.jakarta.rs",
      "name": "jackson-jakarta-rs-json-provider",
      "version": "2.21.3",
      "description": "Functionality to handle JSON input/output for Jakarta-RS implementations (like Jersey and RESTeasy) using standard Jackson data binding.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "daea0ba7d06a82ac0e65acb0b5d16ae7"
        },
        {
          "alg": "SHA-1",
          "content": "662c4ad495411a79f6b18dfc5e9e172350fd168b"
        },
        {
          "alg": "SHA-256",
          "content": "8275308b37a6c4f9b0f4b0b599255a1eaf9b3e3c4a5248e1c9a311b7e4d254bf"
        },
        {
          "alg": "SHA-512",
          "content": "7016e4eb734fc6e827788345b332a96c0427c2086d183b0249c30da2b793465514603c114bad8d943e358211d677067d839cbf74718358cc7cad03754f18416a"
        },
        {
          "alg": "SHA-384",
          "content": "ba6d33c1e6383490ea4039cbbccd510c8b0c6aa65cef3702878bab4d92c7681158a72157d23e8be5d2cc626b62950f8d"
        },
        {
          "alg": "SHA3-384",
          "content": "44e13412c1c755d886db09605f55df7e3defafaf32df9d1f15732fbec92997aea32ab854c910440998ebf39ba76b69bc"
        },
        {
          "alg": "SHA3-256",
          "content": "7793a25a88e1cbf3735689dc044ef93933c523256cf3965b16312ab8e1a0a383"
        },
        {
          "alg": "SHA3-512",
          "content": "da340c3b64c21ac2462e37186678e19c57106a072125fcafb7cce8bc71294990e71e4805784d501bbe1bbad48ef3b0318a56f6a4ffe59b74fb61fee733dfa8cf"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.jakarta.rs/jackson-jakarta-rs-json-provider@2.21.3?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/FasterXML/jackson-jakarta-rs-providers/jackson-jakarta-rs-json-provider",
          "type": "website"
        },
        {
          "url": "https://central.sonatype.com/api/v1/publisher",
          "type": "distribution"
        },
        {
          "url": "https://github.com/FasterXML/jackson-jakarta-rs-json-provider/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/FasterXML/jackson-jakarta-rs-providers/jackson-jakarta-rs-json-provider",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8@2.21.3?type=jar",
      "publisher": "FasterXML",
      "group": "com.fasterxml.jackson.datatype",
      "name": "jackson-datatype-jdk8",
      "version": "2.21.3",
      "description": "Add-on module for Jackson (https://github.com/FasterXML/jackson) to support JDK 8 data types.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "6442b75807cc5c1fc96fa4f7bb2dde25"
        },
        {
          "alg": "SHA-1",
          "content": "d43500553adcacf036f24eeb8c91f2a222b7176c"
        },
        {
          "alg": "SHA-256",
          "content": "33d1960d9b50cf79dc7d891cf239415fac8a7bcb2d40b786a089f5bb92b51252"
        },
        {
          "alg": "SHA-512",
          "content": "a9dee111eef296ae8b920fda1b7ee2a152508c3015dc98ded1901230a4814774941f386dc57d8fb6c8d45d9598d443d3e99bae095c72466140f913c7c0e37a79"
        },
        {
          "alg": "SHA-384",
          "content": "0bc18619785f21f7b6ad96a825a2960d0aab55303c44ba43d7707d1f85f5b166bd1424e81ac5438721286b0be35d654e"
        },
        {
          "alg": "SHA3-384",
          "content": "cb4b8bd80cad71179fa0410b5108f97f0ce2e60f25c6db8598da9fed2728abfe035ddd1b0728a02929e22aeebfce8aae"
        },
        {
          "alg": "SHA3-256",
          "content": "abcfb90b26dcc7099a883cd35d1d46b695513f7ee17dfbd35599c3bcbf538728"
        },
        {
          "alg": "SHA3-512",
          "content": "e2a5831b732ba21501b58b02d2bbacf4d01dde54d0cb7755007da700139c647bb09a6e10040da232c4fc448176b0cd5b58913d2b358582332b7324d2f847cc66"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8@2.21.3?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/FasterXML/jackson-modules-java8/jackson-datatype-jdk8",
          "type": "website"
        },
        {
          "url": "https://central.sonatype.com/api/v1/publisher",
          "type": "distribution"
        },
        {
          "url": "https://github.com/FasterXML/jackson-modules-java8/issues",
          "type": "issue-tracker"
        },
        {
          "url": "http://github.com/FasterXML/jackson-modules-java8/jackson-datatype-jdk8",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/ch.qos.logback/logback-classic@1.5.32?type=jar",
      "publisher": "QOS.ch",
      "group": "ch.qos.logback",
      "name": "logback-classic",
      "version": "1.5.32",
      "description": "logback-classic module",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "cc1b628dcb1f44089d0decf8a4cf9009"
        },
        {
          "alg": "SHA-1",
          "content": "2b1042c50f508f2eb402bd4d22ccbdf94cc37d2e"
        },
        {
          "alg": "SHA-256",
          "content": "2d4cf592db78be2de4d6140434c2fec170dcb16a09e8c8b7b207dbf5e31b848a"
        },
        {
          "alg": "SHA-512",
          "content": "6f28dbc23ce773773fdd73801aaa9491c3300fa0888efdbc48909a60f191df4536328d2aeb6f0e91f05275bfd55b2b220ed2c30ce5ed4f31012f42eb11d79d7c"
        },
        {
          "alg": "SHA-384",
          "content": "aa437c8f4b8a66d0e072a1c41cd7f747631554b565246b7e250e392984195d2b284307070728b0aef32d9e85736a3508"
        },
        {
          "alg": "SHA3-384",
          "content": "72f659c00d07f50367b08b21cc16679ddd3c8945d3fdab1ccbeeda930cc71d873837e56dcdc4cbf0b3d546a75889c58e"
        },
        {
          "alg": "SHA3-256",
          "content": "84cbb3d39ed018e0aeded02e37f4e6d4646aa7555134c7f071e7f2f6457cb35e"
        },
        {
          "alg": "SHA3-512",
          "content": "414f83d924ed37fbd89b1ac08f3357dbfa9ed7051871c427918f7c5c868826e60ff4a27a954554463137d15f8aef7a6d7e142b8b6aedfa4131ce2124dde1bdc7"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "name": "GNU Lesser General Public License",
            "url": "https://www.gnu.org/licenses/old-licenses/lgpl-2.1.html"
          }
        }
      ],
      "purl": "pkg:maven/ch.qos.logback/logback-classic@1.5.32?type=jar",
      "externalReferences": [
        {
          "url": "http://logback.qos.ch/logback-classic",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/qos-ch/logback/logback-classic",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/ch.qos.logback/logback-core@1.5.32?type=jar",
      "publisher": "QOS.ch",
      "group": "ch.qos.logback",
      "name": "logback-core",
      "version": "1.5.32",
      "description": "logback-core module",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "053d4a28d6ba4c9b6247c6fd859ca64f"
        },
        {
          "alg": "SHA-1",
          "content": "fdfb3ff9a842303d4a95207294a6c6bc64e2605d"
        },
        {
          "alg": "SHA-256",
          "content": "6a904d5778d0e361a9692f9cbe68b1b0620ae0f3eda2ec2ed09102755bf036c4"
        },
        {
          "alg": "SHA-512",
          "content": "7e118f88ff9f6bdd2854a4218c4d8e2a1a031eb0cbff7eb2b181fc162d5004b6d89e7b4586616fffd922b4b7a432395892b9caa04916b114a87b518a1abd5157"
        },
        {
          "alg": "SHA-384",
          "content": "b6ae51522d03a94d9dd33fdae4dbd81d9567c2e9191d7dafe20bc711148aaf77c0eaaae64bf3c9cf9a33aebf0755644d"
        },
        {
          "alg": "SHA3-384",
          "content": "2c899f38f50f14529a3710c703a430bfaeefdded4acc6d48caa8ee680d2e6f7f1ffae3911f059007fbba4c7ce57748a4"
        },
        {
          "alg": "SHA3-256",
          "content": "8369c927a69ba6d40db79c3156b17f4a24c31f3ff24c2f67f325e903310fc935"
        },
        {
          "alg": "SHA3-512",
          "content": "9d952bde380b128f5446eb2d040b73f44f019f50f05d31e08e1aac645c6014067b0787aa3362188a7babf74a976d5e58cd6cfeb3dfc7bdc3259ac50d0e3fcd96"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "name": "GNU Lesser General Public License",
            "url": "https://www.gnu.org/licenses/old-licenses/lgpl-2.1.html"
          }
        }
      ],
      "purl": "pkg:maven/ch.qos.logback/logback-core@1.5.32?type=jar",
      "externalReferences": [
        {
          "url": "http://logback.qos.ch/logback-core",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/qos-ch/logback/logback-core",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.owasp/security-logging-common@1.1.7?type=jar",
      "group": "org.owasp",
      "name": "security-logging-common",
      "version": "1.1.7",
      "description": "The OWASP Security Logging project provides developers and ops personnel with APIs for logging security-related events.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "9f11b84aefd2f2dcf48f8443a6213619"
        },
        {
          "alg": "SHA-1",
          "content": "4717c0c2225a2aad898b2fbdf717ec6e034d48f8"
        },
        {
          "alg": "SHA-256",
          "content": "ef9c6e4fefcf8ffcee7590239a8e8c56b192fc71c183fd8a943cf177e01b07eb"
        },
        {
          "alg": "SHA-512",
          "content": "d30fa0cce5b75758289a255946f165418786d96c5de3dbb12084d6da6bb75e556e43e002050ea114e3adb0ca15dc16e28b6218f5b2fcf993eadcb37076fb522a"
        },
        {
          "alg": "SHA-384",
          "content": "f10fbb5250849634a79477a536eb7f4a07aa66d5d1234e18caf5dbd2ab9473a4e26baa4fe381af9240eb6f9471cbb937"
        },
        {
          "alg": "SHA3-384",
          "content": "fee72e5c1e41740264f6d0f1fcfd72731c92df25af3d529509a006ce8330430390ab1139b8798c8cd6b78bcc0656d4e4"
        },
        {
          "alg": "SHA3-256",
          "content": "2c7bf9e688071240437f106b05955c298c9ee42f6c119cd918460af5a3a82a48"
        },
        {
          "alg": "SHA3-512",
          "content": "0ff1a2d6da110ca1a1713b052bab481bf052033e9cef7362a69a30e485d4a8ae8ba78ecd02278f4f81558d9cd2f12402108f82668754eade77fde3670433740c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.owasp/security-logging-common@1.1.7?type=jar",
      "externalReferences": [
        {
          "url": "https://www.owasp.org/index.php/OWASP_Security_Logging_Project",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/javabeanz/owasp-security-logging",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.owasp/security-logging-logback@1.1.7?type=jar",
      "group": "org.owasp",
      "name": "security-logging-logback",
      "version": "1.1.7",
      "description": "The OWASP Security Logging project provides developers and ops personnel with APIs for logging security-related events.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "c1148e1a96d53351f39b407185a59e06"
        },
        {
          "alg": "SHA-1",
          "content": "e609fe8531b96fcd559c9e146342aa3a56d16231"
        },
        {
          "alg": "SHA-256",
          "content": "100f5e85cbf9cf395983d85355cc17ed1d19d77176d93c58a14f339e62382168"
        },
        {
          "alg": "SHA-512",
          "content": "9bdb7df787ae5264e509082aa3b6f865ec543801587270eb582c3cb430a15f019c24a25e5a1d4df462a2dec0e6e82ce636807b055d5e72b73d67d90805e9e5d1"
        },
        {
          "alg": "SHA-384",
          "content": "8502c6a84746dfd8b9960d599cd476dd3b2c0017b2e8eba169411f7adbfea4236323ada03cb7e005812456976e673a7b"
        },
        {
          "alg": "SHA3-384",
          "content": "283c28b7760973dc0195fcd2127294c4c77a2a8c95bcc597401f00ffbd8c5367788ae9c9b6874deac178526fe93c1265"
        },
        {
          "alg": "SHA3-256",
          "content": "5a2f21e6fe6fe4bc45c439d7dbb5a16d07cc56ecf15b10a60125ee777bac1122"
        },
        {
          "alg": "SHA3-512",
          "content": "f2fa575c8838d7dcb5d11678cff9afaeb65d3bb227f501cf86541e4131c7a3cb72921d8ff8d28f91f7a6d5d3ac08d579f1fba73e8a7627c7a46371ed0a62fad9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.owasp/security-logging-logback@1.1.7?type=jar",
      "externalReferences": [
        {
          "url": "https://www.owasp.org/index.php/OWASP_Security_Logging_Project",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/javabeanz/owasp-security-logging",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/net.logstash.logback/logstash-logback-encoder@8.1?type=jar",
      "group": "net.logstash.logback",
      "name": "logstash-logback-encoder",
      "version": "8.1",
      "description": "Provides logback encoders, layouts, and appenders to log in JSON and other formats supported by Jackson",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "08a18cd6a4737221773acc1d2a5c9e3a"
        },
        {
          "alg": "SHA-1",
          "content": "aca81cdb03c48f4e0213d3e351ab1befafa9991e"
        },
        {
          "alg": "SHA-256",
          "content": "2716cb6a3e83ec2f296395b8752063f502d10a90de1a88f711f06ae5b6ecefb7"
        },
        {
          "alg": "SHA-512",
          "content": "71c73ef76d1f1562a54ba2f0fe8335f5e5a4938dc7896bcb58abd8a2b466e8c46640361d63ea475a5d37b12334335fd3e2827eda54fd17b0384027d955cdec7b"
        },
        {
          "alg": "SHA-384",
          "content": "5c332ad34b65c15869217e79c5e505502df624b0e76f47a7a9eba4d323a1ca4ea34dabb1ef75de489b329e2f94deba1d"
        },
        {
          "alg": "SHA3-384",
          "content": "cd44829a3e71f245a300f9b5a6d9b1e7838835b5f16dcb3d5c01c3cdcf23f76693abe517014bb5318d528e74a0ea150e"
        },
        {
          "alg": "SHA3-256",
          "content": "a5fd0008198d89b57aff757173ea60f1aa0e3cc2ea4ff043b2a73c5bf200244e"
        },
        {
          "alg": "SHA3-512",
          "content": "e3769fe9dbdc066f346b3f38cd3738d6d19bc5a0551164bb7593bf3dfa2deeb338d24ae664fda0b7f20510127fddb9875b4621b8f63cf76c851369711ea4e79a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        },
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/license/mit/"
          }
        }
      ],
      "purl": "pkg:maven/net.logstash.logback/logstash-logback-encoder@8.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/logfellow/logstash-logback-encoder",
          "type": "website"
        },
        {
          "url": "https://github.com/logfellow/logstash-logback-encoder",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/dev.cel/cel@0.13.0?type=jar",
      "group": "dev.cel",
      "name": "cel",
      "version": "0.13.0",
      "description": "Common Expression Language for Java. This include both the compilation and runtime packages.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "d7f4525de0d57682acbdbff10e69a3ed"
        },
        {
          "alg": "SHA-1",
          "content": "2b1601f32fb965341aa4e9e16e63d3da1f629662"
        },
        {
          "alg": "SHA-256",
          "content": "a3bc22d78affe749f81b17cce2131a3807275436157ba4d6fe3f10d8f541ea94"
        },
        {
          "alg": "SHA-512",
          "content": "217de55c94d25a5b9bcee6abd69a700931f3327669df1bac67f0cb74c44e78a3dc1201938288d087cce20e8071051008dcc0c38686bf3b291a3fa42a572efb1a"
        },
        {
          "alg": "SHA-384",
          "content": "3925228f66b5791753613d141b7bf2f2c9c017132277e13be03f2880d60b97dd02e573881d2f101d06e4f2d44f2831b0"
        },
        {
          "alg": "SHA3-384",
          "content": "9fbd591e1cf58725b3303ca147c93517b49e6573663af49195d8a3076272c7927e32aef2394137786bf0fceb2902199f"
        },
        {
          "alg": "SHA3-256",
          "content": "714de99406248c0ec88a8d58a708bca87eb0562175c2f5bd06459fd9dec60813"
        },
        {
          "alg": "SHA3-512",
          "content": "fb7353d14a30c4e5ddc6ef29aba8fd4bb45e1636b3b0693394714723d23884fde0806daf9cad31206e4eafbd90c182f7dbdea7e8f33a09f11450de0181828f9a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/dev.cel/cel@0.13.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/google/cel-java",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/google/cel-java/tree/main",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.auto.value/auto-value-annotations@1.11.0?type=jar",
      "publisher": "Google LLC",
      "group": "com.google.auto.value",
      "name": "auto-value-annotations",
      "version": "1.11.0",
      "description": "Immutable value-type code generation for Java 8\u002B.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "8fc3c2d0bbdef8927f08a5c7c829a768"
        },
        {
          "alg": "SHA-1",
          "content": "f0d047931d07cfbc6fa4079854f181ff62891d6f"
        },
        {
          "alg": "SHA-256",
          "content": "5a055ce4255333b3346e1a8703da5bf8ff049532286fdcd31712d624abe111dd"
        },
        {
          "alg": "SHA-512",
          "content": "339742a85491c0fe529e97668cd86d9c3a7a80061d226e1a51eae45fb9c466e10ee2a4d4fc3b502b96aa473ac4e03850aef8a3b744d3972a934b279ceb80816e"
        },
        {
          "alg": "SHA-384",
          "content": "626c76525b939a087be13919b760b447ef6b8668004634650e9c98105c7b31412c205e022a8ba15ea7bc1c7061a6367c"
        },
        {
          "alg": "SHA3-384",
          "content": "f5c85d8934f52d108217ce20c0641c7692023c657049e40b4916185cd3f9d4386f4404dbc13a0694c9bb13fdf9b687e5"
        },
        {
          "alg": "SHA3-256",
          "content": "549eac3adc58ec5271c45ff9390bbfc0b30c3af27a8d74392ca0a46c19062ed7"
        },
        {
          "alg": "SHA3-512",
          "content": "9f65f28e7b022ea782b45939fd1170d6d0a175f639ca8cf66363f87390b642046da5d5bb0c8adc679b6b9533c9d8cd4b4dfefb7f09d6fb5028219c96fb37d508"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.auto.value/auto-value-annotations@1.11.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/google/auto/tree/main/value",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "http://github.com/google/auto/issues",
          "type": "issue-tracker"
        },
        {
          "url": "http://github.com/google/auto",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.guava/guava@33.5.0-jre?type=jar",
      "group": "com.google.guava",
      "name": "guava",
      "version": "33.5.0-jre",
      "description": "Guava is a suite of core and expanded libraries that include utility classes, Google\u0027s collections, I/O classes, and much more.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "d9fbf39a41a5bab891348f07668e18c5"
        },
        {
          "alg": "SHA-1",
          "content": "8699de25f2f979108d6c1b804a7ba38cda1116bc"
        },
        {
          "alg": "SHA-256",
          "content": "1e301f0c52ac248b0b14fdc3d12283c77252d4d6f48521d572e7d8c4c2cc4ac7"
        },
        {
          "alg": "SHA-512",
          "content": "994a4dbcbd8e528ad3b4a7acf49b631a40dcebb03d9a8f5e1d3b74351f805f77774e9a19f7233e42036cb415b7838710f207ac1e18335e4a219b7f99ea22a44f"
        },
        {
          "alg": "SHA-384",
          "content": "9dabff6e543ead881b20d38a533e9151aaa83999239cf0ace3e712cf678e7976c3a50d79e3f3c57afc05a3b9ff14ad90"
        },
        {
          "alg": "SHA3-384",
          "content": "9f65d4d942113facb2eb25229c1530b79dd3b8994574034b8d4a1c2b39ed8ee5bb4d415ec690d3d87cee0d8cb2283564"
        },
        {
          "alg": "SHA3-256",
          "content": "fedafab2279bdf6eff66314fc61b056e92312695678e66dc1e25fe1d18af5a36"
        },
        {
          "alg": "SHA3-512",
          "content": "e64f3c49f9030358554bb0b8abdff729394988f1e3247b05a86302014eeff4a2855acf46d9bf1c683cbecc33a24173a20a103d3c82c94f8cabd6676a01b40fb6"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.guava/guava@33.5.0-jre?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/google/guava",
          "type": "website"
        },
        {
          "url": "https://github.com/google/guava/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/google/guava/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/google/guava/guava",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.guava/failureaccess@1.0.3?type=jar",
      "group": "com.google.guava",
      "name": "failureaccess",
      "version": "1.0.3",
      "description": "Contains com.google.common.util.concurrent.internal.InternalFutureFailureAccess and InternalFutures. Most users will never need to use this artifact. Its classes are conceptually a part of Guava, but they\u0027re in this separate artifact so that Android libraries can use them without pulling in all of Guava (just as they can use ListenableFuture by depending on the listenablefuture artifact).",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "29a782e90f6b37218b18bb880d2a8f4a"
        },
        {
          "alg": "SHA-1",
          "content": "aeaffd00d57023a2c947393ed251f0354f0985fc"
        },
        {
          "alg": "SHA-256",
          "content": "cbfc3906b19b8f55dd7cfd6dfe0aa4532e834250d7f080bd8d211a3e246b59cb"
        },
        {
          "alg": "SHA-512",
          "content": "72be228e7805da5623e42bf024ded7d9147023c66b22f4dbd04ac6898201af46ee82e1f92ea51eb0595f1b49151c4b8ecb862653d4906c17609c42544ee97abf"
        },
        {
          "alg": "SHA-384",
          "content": "9dd1a2a08efda311604992d3e7cee64873bc8c64de3b423b1b3a3dcc1f7f0810bb03901fbfe39a5f835accb0646f4ad8"
        },
        {
          "alg": "SHA3-384",
          "content": "ffd67766c165ee77e96824e06de2c19864a6e61f785b2085eb825f308f173d71f2555559d90d910f33f3367378ace0e3"
        },
        {
          "alg": "SHA3-256",
          "content": "08a77b528a72ca412b36e4004692705ebfd75cfb4897c88632d367d08a34b09f"
        },
        {
          "alg": "SHA3-512",
          "content": "7cba6c266babbe8272f029eea6e2cbddadee96eb1a16916a6eb2441a55837867ce717385d4388735fd83f2f6555931077c0ebda011a1ee9a37ac38c8c0c43a65"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.guava/failureaccess@1.0.3?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/google/guava/failureaccess",
          "type": "website"
        },
        {
          "url": "https://github.com/google/guava/actions",
          "type": "build-system"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/google/guava/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/google/guava/failureaccess",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar",
      "group": "com.google.guava",
      "name": "listenablefuture",
      "version": "9999.0-empty-to-avoid-conflict-with-guava",
      "description": "An empty artifact that Guava depends on to signal that it is providing ListenableFuture -- but is also available in a second \u0022version\u0022 that contains com.google.common.util.concurrent.ListenableFuture class, without any other Guava classes. The idea is: - If users want only ListenableFuture, they depend on listenablefuture-1.0. - If users want all of Guava, they depend on guava, which, as of Guava 27.0, depends on listenablefuture-9999.0-empty-to-avoid-conflict-with-guava. The 9999.0-... version number is enough for some build systems (notably, Gradle) to select that empty artifact over the \u0022real\u0022 listenablefuture-1.0 -- avoiding a conflict with the copy of ListenableFuture in guava itself. If users are using an older version of Guava or a build system other than Gradle, they may see class conflicts. If so, they can solve them by manually excluding the listenablefuture artifact or manually forcing their build systems to use 9999.0-....",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "d094c22570d65e132c19cea5d352e381"
        },
        {
          "alg": "SHA-1",
          "content": "b421526c5f297295adef1c886e5246c39d4ac629"
        },
        {
          "alg": "SHA-256",
          "content": "b372a037d4230aa57fbeffdef30fd6123f9c0c2db85d0aced00c91b974f33f99"
        },
        {
          "alg": "SHA-512",
          "content": "c5987a979174cbacae2e78b319f080420cc71bcdbcf7893745731eeb93c23ed13bff8d4599441f373f3a246023d33df03e882de3015ee932a74a774afdd0782f"
        },
        {
          "alg": "SHA-384",
          "content": "caff9b74079f95832ca7f6029346b34b606051cc8c5a4389fac263511d277ada0c55f28b0d43011055b268c6eb7184d5"
        },
        {
          "alg": "SHA3-384",
          "content": "e939f08df0545847ea0d3e4b04a114b08499ad069ba8ec9461d1779f87a56e0c37273630a0f4c14e78c348d3ac7eb97f"
        },
        {
          "alg": "SHA3-256",
          "content": "1f0a8b1177773b3a8ace839df5eed63cbf56b24a38714898a6e4ed065c42559f"
        },
        {
          "alg": "SHA3-512",
          "content": "6b495ecc2a18b17365cb08d124a0da47f04bcdde81927b5245edf3edd8e498c3c3fb92ce6a4127f660bac851bb1d3e4510e5c20d03be47ce99dc296d360db285"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/google/guava/listenablefuture",
          "type": "website"
        },
        {
          "url": "https://travis-ci.org/google/guava",
          "type": "build-system"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/google/guava/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/google/guava/listenablefuture",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.j2objc/j2objc-annotations@3.1?type=jar",
      "group": "com.google.j2objc",
      "name": "j2objc-annotations",
      "version": "3.1",
      "description": "A set of annotations that provide additional information to the J2ObjC translator to modify the result of translation.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "abe8bd3abff622b9a8b15c3a737aa741"
        },
        {
          "alg": "SHA-1",
          "content": "a892ca9507839bbdb900d64310ac98256cab992f"
        },
        {
          "alg": "SHA-256",
          "content": "84d3a150518485f8140ea99b8a985656749629f6433c92b80c75b36aba3b099b"
        },
        {
          "alg": "SHA-512",
          "content": "34ee5aad57b0b507e89c897306f73043f80fa0eb02b453e54d9052feb0808a0d2ed835d888946211921d2bf733780b19ff636479ce19b9f48814ba6008733ce1"
        },
        {
          "alg": "SHA-384",
          "content": "7b760a346a586d6a3fa4477807e2f02f091e61898fc9a6ff449e43c55b6465fbbc17720663183c84c41d4d8814085e51"
        },
        {
          "alg": "SHA3-384",
          "content": "a2166c1c08f947c0e60aa7c9167602942e7bac37ba45863d34c0132a1f352e7807a382588d350b93bdbbbbe315a3573f"
        },
        {
          "alg": "SHA3-256",
          "content": "3d4d3b8bfd2ad13351a53610aa4bf1c5a69d2bde4272c281003120ed9bcddb8c"
        },
        {
          "alg": "SHA3-512",
          "content": "0a574b379a3f8022f0b88252c87d0e6b6cfa434fdb981efd1b24387025a962d7ac4e90161e8bd048df142bf52f4fc41e4a0c1d45e4eeb872c5954aad552988e9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.j2objc/j2objc-annotations@3.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/google/j2objc/",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "http://github.com/google/j2objc",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.re2j/re2j@1.8?type=jar",
      "group": "com.google.re2j",
      "name": "re2j",
      "version": "1.8",
      "description": "Linear time regular expressions for Java",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "4240e655caa938c61ddbec8b92bfb061"
        },
        {
          "alg": "SHA-1",
          "content": "12c25e923e9e4fb1575a7640a2698745c6f19a94"
        },
        {
          "alg": "SHA-256",
          "content": "7b52c72156dd7f98b3237a5b35c1d34fba381b21048c89208913ad80a45dfbd7"
        },
        {
          "alg": "SHA-512",
          "content": "f556b098dc29ed8fbfa7ecd343b457c49c4deda80dc495ed164297a415328c20d7c89b17cb240f6d2f92607828db52e4f13b66b11277e33e6ebc34a97832da86"
        },
        {
          "alg": "SHA-384",
          "content": "beef5588c374be01cb9cb1c7854e2741827444ce6908c73e4494fb6c7b14fda4a8424f257c1cf900957dd7928e7247d4"
        },
        {
          "alg": "SHA3-384",
          "content": "580230a2224e63cbbe5dd3742935e8ff51333b9e38510203b7ab22070b903dbbc8d720a820db3a01b65cb06983632f7d"
        },
        {
          "alg": "SHA3-256",
          "content": "1346abb0ccffe538d735667ba664b4ee2eaec5c30f2052115d34b16fb0fb350b"
        },
        {
          "alg": "SHA3-512",
          "content": "68b26bddbacc2d72fde5db285549bdefc62206adbf285b58cd5b49f7a20ce1e2545a031c021b5d4402ff068170f4ce1fb90b618b5ed1e1f3b7a1b694f5ddf5ec"
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "Go License",
            "url": "https://golang.org/LICENSE"
          }
        }
      ],
      "purl": "pkg:maven/com.google.re2j/re2j@1.8?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/google/re2j",
          "type": "website"
        },
        {
          "url": "https://github.com/google/re2j.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/dev.cel/common@0.13.0?type=jar",
      "group": "dev.cel",
      "name": "common",
      "version": "0.13.0",
      "description": "Common dependencies for Common Expression Language for Java.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "20679958cc49c52807dcdc1a71912d98"
        },
        {
          "alg": "SHA-1",
          "content": "517a7c500a365048a4c6221f08475a5aaa634440"
        },
        {
          "alg": "SHA-256",
          "content": "d4ccdb74ce41ddf06c53d13750eafda6a0ce500c36df15280b3d0e4cd9bf7a21"
        },
        {
          "alg": "SHA-512",
          "content": "154c076921a918440747751540e1498a1493ae087eabf0757c5900ff3f7fa7cb12045f49758afcd1e2f152eb37dabc25d75dd648ac2be8e7031079c142f9e647"
        },
        {
          "alg": "SHA-384",
          "content": "c6c28b4e592e9a815fbf0badfc278cabec5c8016d8f07dc18f7c9fbf1f020a8e0465847983a044923e902feaaf7f3d25"
        },
        {
          "alg": "SHA3-384",
          "content": "b81c2bb921d7e96d632013ca1767ea24ac10b135c1e01e2e9c77601551ddb9fdd46a546e13305c9271da11e62fedc6ec"
        },
        {
          "alg": "SHA3-256",
          "content": "5d38eadeeb69b7464b4f0f87e3e5546cb772fbd702e268e069cc47a850fb7849"
        },
        {
          "alg": "SHA3-512",
          "content": "2fae5c3d2cccf79a5af480bebcd7f26781bb8b4339e6995cd89b01814e9ecef6faaa534d38d249a91f113c0ef5886f55e4e75a083a5556e21bf503ff4ec2ef58"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/dev.cel/common@0.13.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/google/cel-java",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/google/cel-java/tree/main",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/dev.cel/compiler@0.13.0?type=jar",
      "group": "dev.cel",
      "name": "compiler",
      "version": "0.13.0",
      "description": "Common Expression Language Compiler for Java",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "b074b4f9cd6fef204377b7722af53994"
        },
        {
          "alg": "SHA-1",
          "content": "3534df53b6add29f9415a0496adb4f4ea0ed709c"
        },
        {
          "alg": "SHA-256",
          "content": "49e97f882e4f9bd44457dad4f797bb4dac2bc8b6c61c722d21447d637113eb19"
        },
        {
          "alg": "SHA-512",
          "content": "ea7eacb6c11f9156638e84fccf4902d4d158fb24091fca237607a577609a4cfb20dd532ef346fdb03f36fe5c308467672c266c35f6d65a6b01604d063c86151f"
        },
        {
          "alg": "SHA-384",
          "content": "b4f6081f54e35bf3a0d18111acf2493a58cf32172d4094d12d628ef69a2176aaaab85afd23a275bfdd36c2e412af17ee"
        },
        {
          "alg": "SHA3-384",
          "content": "0c59e12781d30e30a8194be89f066f64542b64017325eebb5f511d5e67339e2a87d59a537b998be53b37fe27168562e1"
        },
        {
          "alg": "SHA3-256",
          "content": "90467e2ebc54e15d28334c1844fc4efbfae33accaf4b7f4e5311155645f2d861"
        },
        {
          "alg": "SHA3-512",
          "content": "a2f6f87c5bb1ebefd2d54077b917301d429dcfccee34a7558ba4c5f40f60c952a48686e394dcd2d2638bdb48bf6d8666c0fe965910a9108985078eb9294fd62c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/dev.cel/compiler@0.13.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/google/cel-java",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/google/cel-java/tree/main",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/dev.cel/protobuf@0.13.0?type=jar",
      "group": "dev.cel",
      "name": "protobuf",
      "version": "0.13.0",
      "description": "Common Expression Language Adapter for converting canonical cel.expr protobuf definitions",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "ec7a1682a109ef7874fed038ec9d7aa4"
        },
        {
          "alg": "SHA-1",
          "content": "02b2080dba5dcf5016d1eecbe76723f80ca64ffc"
        },
        {
          "alg": "SHA-256",
          "content": "d343b22e4d1507c636fca5d61c8272f2394a3fd0c1e1729568a8f575a9002143"
        },
        {
          "alg": "SHA-512",
          "content": "9e5d876a7abfe0d7d1fbbc03cd2b3a79fc87469b75de37c4b23b792f505e196c6c5afbec05353d6cc5be7548ce54b91ecb809ce5d99df7ba7e9162507c1f772b"
        },
        {
          "alg": "SHA-384",
          "content": "5d698cda243836a4764ec87e4813fc2788e34b4fd2efd23ea9bcd128998578333a43602620f57ea67a3e1f026cef1664"
        },
        {
          "alg": "SHA3-384",
          "content": "30f7375ab08fa2fe5bbc8b823fe2e1fc0b6adc7f93edcd71649a56aba3052b3a6edd5f34d7dcdbdd14234f4c4b27f47a"
        },
        {
          "alg": "SHA3-256",
          "content": "898a10881463dafebac86e9537a4c81efb6b5465bafcb9fe7c1f4289f5ebee58"
        },
        {
          "alg": "SHA3-512",
          "content": "fcf5bc79d2e1e5d6ca908365fb5ac539237928a04e62bf6537f494302c86e2bb0f968c488efe8f178049f2bf2e9dd88c09e5aa7b65edb778ca61fb2bce8bb6e2"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/dev.cel/protobuf@0.13.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/google/cel-java",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/google/cel-java/tree/main",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/dev.cel/runtime@0.13.0?type=jar",
      "group": "dev.cel",
      "name": "runtime",
      "version": "0.13.0",
      "description": "Common Expression Language Runtime for Java",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "952b764ed7d8ed2f49381b6961fedb19"
        },
        {
          "alg": "SHA-1",
          "content": "4dca217f6a1866797c5d21f85a4f3cd384d8e496"
        },
        {
          "alg": "SHA-256",
          "content": "3deaba45e430e26370953c6982d0c4f6421a1fac575f9be06f5687e0f982d005"
        },
        {
          "alg": "SHA-512",
          "content": "1244798e7c68a1cad0d7a5e40a65a7bdf06a2641f5209b2cf2ec05adae8ebfb8f91a0d041878ebe877e315d37109e0a9cea060e53acebc86e526b1562ba875fc"
        },
        {
          "alg": "SHA-384",
          "content": "71122433575864a269a8fabfe48045b09bcd9c0cd5868be8a251a0f356cf027bcddecac2976d441fcfc94cfda78f7f1a"
        },
        {
          "alg": "SHA3-384",
          "content": "4d01fa90e3007d194a068a3380356bfb73da78642f00b79454b29410f8dd4faef83a8614f4b9742eea65d2ea6940d278"
        },
        {
          "alg": "SHA3-256",
          "content": "092c169fcf1240da26e5366ea45c1807b416493d3f2483242602b6413adf8c07"
        },
        {
          "alg": "SHA3-512",
          "content": "a9aa8d5c8f8ef31dbd991edc0e820146f78e1a9a240bb9a9d727e34bb49753c25af142b3b77a50f628a1aada2b342e55dc0d40bbf6c9fbe825dfdfaf5f4fdba1"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/dev.cel/runtime@0.13.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/google/cel-java",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/google/cel-java/tree/main",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/dev.cel/v1alpha1@0.13.0?type=jar",
      "group": "dev.cel",
      "name": "v1alpha1",
      "version": "0.13.0",
      "description": "Common Expression Language Utility for supporting v1alpha1 protobuf definitions",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "8e09c5e79de99fafa3893d9bc1f12d13"
        },
        {
          "alg": "SHA-1",
          "content": "4e7c13ddf4e23c44b67e1c8041044be927be47a5"
        },
        {
          "alg": "SHA-256",
          "content": "429a705bc974d06c63fc14f4d7be7d23e5e7825d6fe76ab657bad2a2d9791c77"
        },
        {
          "alg": "SHA-512",
          "content": "efaa8638137267a26e11668936a53b58716f71437cf1a1d057d6432a53e5c273c4c17fc656d2b47aa0e4c6ba56ef9896aa8d54b156688c6b25ec4fe3dafda8ad"
        },
        {
          "alg": "SHA-384",
          "content": "b4e1fc34a8ac52f90779970b6b1d40877978396c29de475aeb16853ffcc65526949bf9a3c5593284a82335ad60b25e75"
        },
        {
          "alg": "SHA3-384",
          "content": "b86559a1571b69592384cdde36a0ee23a1599270002d6488d3401e05e4f569b616c44a59bfa69b55d39e28aca8aaf406"
        },
        {
          "alg": "SHA3-256",
          "content": "6891df0f460647f9d1f20e2cf708602d76027b5d089cc777d437adc77b1bfda6"
        },
        {
          "alg": "SHA3-512",
          "content": "5e148f912d1a9e89b0bdd836b0ada4f5145792d39632c19589fe172e9251a09d3f1115a8a20fdea837087b6eb6dc77c5ae6c7378cf75c6ae5d927ca43b5a1b85"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/dev.cel/v1alpha1@0.13.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/google/cel-java",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/google/cel-java/tree/main",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.antlr/antlr4-runtime@4.13.2?type=jar",
      "publisher": "ANTLR",
      "group": "org.antlr",
      "name": "antlr4-runtime",
      "version": "4.13.2",
      "description": "The ANTLR 4 Runtime",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "eecf1908f0cfff10f8bb82878b5ca401"
        },
        {
          "alg": "SHA-1",
          "content": "fc3db6d844df652a3d5db31c87fa12757f13691d"
        },
        {
          "alg": "SHA-256",
          "content": "dd3e8a13a2d669bf84fb8d834de35ce4875f27157698d206241ec8488aadcaf7"
        },
        {
          "alg": "SHA-512",
          "content": "1c3e47b6b5dc40ca13927a7ae2ed187f470b8f406cea325e73c7a18af8e07b9ada0484312dd611f225f030b5585924932c702fd9326c143a626e271682b2b95e"
        },
        {
          "alg": "SHA-384",
          "content": "f49c2395e16fe71fa35622bcca225c0910609ef09626207ce4522c73c760fd232489489ea88d54c88fc21b05a03031e0"
        },
        {
          "alg": "SHA3-384",
          "content": "322345326586e3f8954e80efa80b510228a7eb06f6d7283177f04809c15aad1722c700897c8c8f405955946b63808bc0"
        },
        {
          "alg": "SHA3-256",
          "content": "2d39db66ce6dc530c7796f75d646f4d8316586e2acd0756524c25b238eb71618"
        },
        {
          "alg": "SHA3-512",
          "content": "a4cdaec49dff4a6963a0db56712a837db7300de7145335b915ffc2234b0d53d6f9fd4b1d6e82c4350e22fee9390ca643cfbf7f51ff47a11bc44561b6686be32b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/org.antlr/antlr4-runtime@4.13.2?type=jar",
      "externalReferences": [
        {
          "url": "https://www.antlr.org/antlr4-runtime/",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/antlr/antlr4/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://groups.google.com/forum/?fromgroups#!forum/antlr-discussion",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/antlr/antlr4/tree/master/antlr4-runtime",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.threeten/threeten-extra@1.8.0?type=jar",
      "publisher": "ThreeTen.org",
      "group": "org.threeten",
      "name": "threeten-extra",
      "version": "1.8.0",
      "description": "Additional functionality that enhances JSR-310 dates and times in Java SE 8 and later",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "4af91264b2e3d26f4c41f055f7ce02f8"
        },
        {
          "alg": "SHA-1",
          "content": "d3b1ac7e361b642132e529f562622aac7dfea752"
        },
        {
          "alg": "SHA-256",
          "content": "51e4d21edc4e9447f7760c050e0baee75d7d973f387ba605a17abdc4d24fd6d8"
        },
        {
          "alg": "SHA-512",
          "content": "b60d18135450dbca9660097f6f726676940c1925343e0ce9547e57e68beb321ecd5df73710332113e1ea3aba71fb5ceb0483cc8f41806a3c6ef075d3c690aae6"
        },
        {
          "alg": "SHA-384",
          "content": "b6e8c6861fe876ac0fc34f97b4966c8816d94ab566cfe8458709b48825cf600fcec4d845de35a3d518d4c28e160b665b"
        },
        {
          "alg": "SHA3-384",
          "content": "1eaf035067146399ff4698dfe6f418e2f812d203b7b8b9b2bb7afaa34b4d380bbc06d8836456e732111ea2c35820d09a"
        },
        {
          "alg": "SHA3-256",
          "content": "981ad37d8273108f1bd1de37f7bca594b8ef49ab33dfbbc2e84c647aba733ead"
        },
        {
          "alg": "SHA3-512",
          "content": "7b528b1f6d625f647f63fc7117c006dce4c08c5f447151c34b1acfa9bd8062c2c31f2e579a38024dad6f86d9f3e7f0cc4a3ea0e9c011926b49413515045a291d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/org.threeten/threeten-extra@1.8.0?type=jar",
      "externalReferences": [
        {
          "url": "https://www.threeten.org/threeten-extra",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/content/repositories/threeten-releases",
          "type": "distribution"
        },
        {
          "url": "https://github.com/ThreeTen/threeten-extra/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/ThreeTen/threeten-extra",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.yaml/snakeyaml@2.5?type=jar",
      "group": "org.yaml",
      "name": "snakeyaml",
      "version": "2.5",
      "description": "YAML 1.1 parser and emitter for Java",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "8d3b7581db5c7620db55183f33a4f2ad"
        },
        {
          "alg": "SHA-1",
          "content": "2d53ddec134280cb384c1e35d094e5f71c1f2316"
        },
        {
          "alg": "SHA-256",
          "content": "e6682acf1ace77508ef13649cbf4f8d09d2cf5457bdb61d25ffb6ac0233d78dd"
        },
        {
          "alg": "SHA-512",
          "content": "a69bea3ae0ed31b12d9fa23bf1cd3fb71bae88e231d9657f0291e3000ae17a1df50709e072134f9155158f488eba67a3f8daf879462499f07b07d9239e78933e"
        },
        {
          "alg": "SHA-384",
          "content": "2fa12e4330d6da0a693a13588c8cdeff562c1bd1dc32e043d402ca1fc72d87a30dcc7bb31f9b582df3fe018eb6c6a3bb"
        },
        {
          "alg": "SHA3-384",
          "content": "8c5037c75bb2f464829ba38126a4773c88951705effc2b14289f3bbdef05bb598f10e4d9603dcd1b58efd7cb68d996a2"
        },
        {
          "alg": "SHA3-256",
          "content": "3aa9329b0eab5185331e526a011c74b45b4c4a506214e6c3ec2d2038c51cc261"
        },
        {
          "alg": "SHA3-512",
          "content": "f80ff702aee20a5150a11818985d659fffb1d5238e331aca2048524649e0270e5bca0186ce7caf04ecf85fd95c95c6b9d8ed1f362ed399fef624eb94b70dc6de"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.yaml/snakeyaml@2.5?type=jar",
      "externalReferences": [
        {
          "url": "https://bitbucket.org/snakeyaml/snakeyaml",
          "type": "website"
        },
        {
          "url": "https://bitbucket.org/snakeyaml/snakeyaml/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://bitbucket.org/snakeyaml/snakeyaml/src",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/dev.cel/extensions@0.4.1?type=jar",
      "group": "dev.cel",
      "name": "extensions",
      "version": "0.4.1",
      "description": "Common Expression Language Extensions for Java",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "a70eab4afa038505e57783b72666eb1c"
        },
        {
          "alg": "SHA-1",
          "content": "433df034d55c456425a3c96165d650bc583fe2e0"
        },
        {
          "alg": "SHA-256",
          "content": "291835f64786e5b973ae289b77ddc5bfacf4c85d5f67861cab65e0c59bb6742c"
        },
        {
          "alg": "SHA-512",
          "content": "1fd37f3929287fd365e58713d1512244f12079874b4498e033c3df542d89b5881a379554aa55d5270c9abf42509d7fdf4a3c9dda4b6bd8756eccc96f1360c666"
        },
        {
          "alg": "SHA-384",
          "content": "f8a4ca7ce0726ebc7cef49f394090da5de40c4b330f97a6389606faf64885d12247dff049bff4e4b18ebb6b052b85ea6"
        },
        {
          "alg": "SHA3-384",
          "content": "9431fa635ec7721498c93401cad4d5a70e4b872396a60e407a0041eb2dd32ce5d94de269843cf71bd6257b860f28dbcc"
        },
        {
          "alg": "SHA3-256",
          "content": "579c399929539362444428bf48b7935de926d454bad990de27dee3844df40565"
        },
        {
          "alg": "SHA3-512",
          "content": "10bfaf33daa8618a7771845a167f294dcf7c2caa90081b21c11da08a6b2cb4f443e9ea06e675cb93a7a635eb31db05a2e31dcde9f92c8ff013c191e6cec0e879"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/dev.cel/extensions@0.4.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/google/cel-java",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/google/cel-java/tree/main",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.metaeffekt.core/ae-security@0.155.0?type=jar",
      "publisher": "metaeffekt GmbH",
      "group": "org.metaeffekt.core",
      "name": "ae-security",
      "version": "0.155.0",
      "description": "Core project with fundamental runtime and build support.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "328c77e73d6f0040415be18664128836"
        },
        {
          "alg": "SHA-1",
          "content": "d8948c395c789bd02c8773a27d63b6fa08a1a6ee"
        },
        {
          "alg": "SHA-256",
          "content": "6358204991f188d5a8015c2dc37003dd87655a3e85d98f04a8717a85a7fceed6"
        },
        {
          "alg": "SHA-512",
          "content": "aca9ca701bbe3d5173cecb2118ddc72477fbfca4920231f6b1865fc1119fe7f10250643f4d08a0a49d0c3eb0606bd454b6bbd6b3f776296add8cda9669fc2297"
        },
        {
          "alg": "SHA-384",
          "content": "1957815bb74c4dcad55f125ad6b576024a278152733719965868da646d4c1c6905fdfcdcf72c53a43843755e22f4381b"
        },
        {
          "alg": "SHA3-384",
          "content": "86f8cc5f2c850a6e0458affd63484e9bb37342a55cc221be207667e15a953f7118492acc6afa7bb3b907fd19d8344420"
        },
        {
          "alg": "SHA3-256",
          "content": "3f4e8798deb1f589447dee9adf7638d90cf476186136d0fece1d6dbb4b24a9d9"
        },
        {
          "alg": "SHA3-512",
          "content": "01f9e56a320185ee1d5ce11fd6d8c8f59084d601f4795167d5d7f80848ddce729cd326d8055fbb9edc6078fc0854a5a18bad76dde64a93e34fe581d48e889452"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.metaeffekt.core/ae-security@0.155.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/org-metaeffekt/metaeffekt-core/ae-core-poms/ae-core-plugin-management-pom/ae-libraries/ae-security",
          "type": "website"
        },
        {
          "url": "https://github.com/org-metaeffekt/metaeffekt-core.git/ae-core-poms/ae-core-plugin-management-pom/ae-libraries/ae-security",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.slf4j/jcl-over-slf4j@2.0.18?type=jar",
      "publisher": "QOS.ch",
      "group": "org.slf4j",
      "name": "jcl-over-slf4j",
      "version": "2.0.18",
      "description": "JCL 1.2 implemented over SLF4J",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "889b3b36f33843d83ba84f7355c2150d"
        },
        {
          "alg": "SHA-1",
          "content": "fb36c10c70e27bb427bb3cec86ac30bb83f667c7"
        },
        {
          "alg": "SHA-256",
          "content": "ec5c36d57d2dbe100f84878f944575cb7871da32c7a115b8d7e0721277045d67"
        },
        {
          "alg": "SHA-512",
          "content": "6a2d26ab6873b25bab037f5620ce5a4a1c35cf79e89a09ff900d873877231bf117e35e9dfd05912c36be0b4a89a739c84ba20231fd0f74c1fcf14126c8846248"
        },
        {
          "alg": "SHA-384",
          "content": "6c8413069e3d41c85ff74f94e0ea01553b2edaf8b589b390c6b3d935d4a6e256720ded91d98a5aeadb67920bc8c10f35"
        },
        {
          "alg": "SHA3-384",
          "content": "6fc21de57edba60d2f58e7907e051f70efc9d20729190d2dd0453a6bde313d764a96e1e392fe50042e09c2a1221067fb"
        },
        {
          "alg": "SHA3-256",
          "content": "4c3fbe65804bd4e70d9698c553819bd9866eec21b8ba4a4d01b89f4e8895ff24"
        },
        {
          "alg": "SHA3-512",
          "content": "d4fa671a7f0365d0dbe49b42fd5f354a6af2d22dbbcc7c1f5afbdba084845ea0aeabc112b89379988c7dcf57ab36350a39e436ddc45895ddf29f48082485c5b3"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.slf4j/jcl-over-slf4j@2.0.18?type=jar",
      "externalReferences": [
        {
          "url": "http://www.slf4j.org",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/qos-ch/slf4j/slf4j-parent/jcl-over-slf4j",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/commons-io/commons-io@2.22.0?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "commons-io",
      "name": "commons-io",
      "version": "2.22.0",
      "description": "The Apache Commons IO library contains utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "f91d54bd47c42456b4a5ae62eed85565"
        },
        {
          "alg": "SHA-1",
          "content": "5b1e18bc0ad651ed878029d83f88d9c8189fd51e"
        },
        {
          "alg": "SHA-256",
          "content": "2b9a7b1f726fb86216dbd2c8321eabe0221dbd5b1be81c18e1cb53811b104758"
        },
        {
          "alg": "SHA-512",
          "content": "fca0b4ae70e531bee74413e0b865981aa8b60a9390f789b63997203dae67be65362e95a0c35b9d4b072fbb0810114783415dd22b92fb42e5594b10992f632bc5"
        },
        {
          "alg": "SHA-384",
          "content": "e1fbf3729c4d2d77b036d90234d9e2ed3fe0c2f5379d333a695c1cb0037f63d288c8b62de05022da0f612da65835fee0"
        },
        {
          "alg": "SHA3-384",
          "content": "02acc6e7f614d8684e7104a52123573152a2e1b651bc6a5be12d4b58861c757d6c56f51105bb97c92309d126059232ea"
        },
        {
          "alg": "SHA3-256",
          "content": "134157813629f4d9b97044602e1fa2f61c14c3be1f641490b3e06ac941ff3315"
        },
        {
          "alg": "SHA3-512",
          "content": "47832f3b7abe375f3b0ed169996d9776b2a0007b073ab3f06438dce67be9bda45e8aac84737cc639ada4424b13c7614d8c9fcb23779868f7421414777cc0946a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/commons-io/commons-io@2.22.0?type=jar",
      "externalReferences": [
        {
          "url": "https://commons.apache.org/proper/commons-io/",
          "type": "website"
        },
        {
          "url": "https://github.com/apache/commons-io/actions",
          "type": "build-system"
        },
        {
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2",
          "type": "distribution"
        },
        {
          "url": "https://issues.apache.org/jira/browse/IO",
          "type": "issue-tracker"
        },
        {
          "url": "https://mail-archives.apache.org/mod_mbox/commons-user/",
          "type": "mailing-list"
        },
        {
          "url": "https://gitbox.apache.org/repos/asf?p=commons-io.git/commons-io",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.json/json@20231013?type=jar",
      "group": "org.json",
      "name": "json",
      "version": "20231013",
      "description": "JSON is a light-weight, language independent, data interchange format. See http://www.JSON.org/ The files in this package implement JSON encoders/decoders in Java. It also includes the capability to convert between JSON and XML, HTTP headers, Cookies, and CDL. This is a reference implementation. There are a large number of JSON packages in Java. Perhaps someday the Java community will standardize on one. Until then, choose carefully.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "1a0702c57783ce9e948252c34644f328"
        },
        {
          "alg": "SHA-1",
          "content": "e22e0c040fe16f04ffdb85d851d77b07fc05ea52"
        },
        {
          "alg": "SHA-256",
          "content": "0f18192df289114e17aa1a0d0a7f8372cc9f5c7e4f7e39adcf8906fe714fa7d3"
        },
        {
          "alg": "SHA-512",
          "content": "a5cdd1ed984448d6538746429f2d1a0ec8f64f93af0e84870ce898a9f07a81d11bf27d2ee081471975772efc8a0d3d5e05541197a532066e9edb09ad032d31a3"
        },
        {
          "alg": "SHA-384",
          "content": "5d2629c7fa21af332369d9feb30dca6bbc76378615252fd5fc8a9bd55deba17951a45ae3384672f317b12a5d25a285bc"
        },
        {
          "alg": "SHA3-384",
          "content": "b96f3dc5d35e439d33e31522538d5d91cb8d88f12d19071a66ab31722c46fbb9c945f3894942203f4dd945df93bc3d91"
        },
        {
          "alg": "SHA3-256",
          "content": "69c7a6f7873b85a74ec9547b081d217a7407deac8d0912ac4906c0eb2c2f87f5"
        },
        {
          "alg": "SHA3-512",
          "content": "fd2bcc534d0bcd4b1cf3337e1f5f8073d5693f3e65d789203312a166f91874d7c31ea1715de9eaea3e0437639591ae4157ceef4b76354e6681f34bc034a06d7a"
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "Public Domain",
            "url": "https://github.com/stleary/JSON-java/blob/master/LICENSE"
          }
        }
      ],
      "purl": "pkg:maven/org.json/json@20231013?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/douglascrockford/JSON-java",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/douglascrockford/JSON-java.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.github.kagkarlsson/db-scheduler@16.10.0?type=jar",
      "publisher": "Gustav Karlsson",
      "group": "com.github.kagkarlsson",
      "name": "db-scheduler",
      "version": "16.10.0",
      "description": "Simple persistent scheduler for scheduled tasks, recurring or ad-hoc.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "4b38b4fd935896c054591e660073782e"
        },
        {
          "alg": "SHA-1",
          "content": "2839bd6eca0782704c70019a266e2abcdc4a818b"
        },
        {
          "alg": "SHA-256",
          "content": "8052989ab6f55f39dc334e7e9d48d3ebcdfd3924bdc27daf37d7b4609087568d"
        },
        {
          "alg": "SHA-512",
          "content": "e888d9560b9e03694e8d7bc317a0a925fb9135fee28998611e88f99dee8388602e6d1d517a6de509ea82e45d2a667ec29d1a20f42de4aad4ba97b5738ebcc04d"
        },
        {
          "alg": "SHA-384",
          "content": "e4e8eea67a8dc6d2fb6499b969514cf5271cccf467f5faa8c43184a8a1c60ada23b8f72b8b30166e003e26d462d0112c"
        },
        {
          "alg": "SHA3-384",
          "content": "edd089d4c9f55ed6b36c1024c481452e2290f163b15162e9f9c2e95581bb10985fec9ec46c8db38005e20cb371b16ca0"
        },
        {
          "alg": "SHA3-256",
          "content": "13719df6f69fe219ca18259dd150eb69c66960df9f6d74b92d8a96b2c7f3df1d"
        },
        {
          "alg": "SHA3-512",
          "content": "19360c03120e9e7367e4c5a4f50935fb7018c24407c69a2787c0b453879cbd4efdd580029da92b853d182f3938a443f1d365ed959fe221d35be3dc3e9d64d59c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.github.kagkarlsson/db-scheduler@16.10.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/kagkarlsson/db-scheduler",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/kagkarlsson/db-scheduler/db-scheduler/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/jdbi-support@5.0.0-rc.2?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "jdbi-support",
      "version": "5.0.0-rc.2",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "2293b572160ffa6337e95c13e6e33734"
        },
        {
          "alg": "SHA-1",
          "content": "773bff22390b63d5a9c70657429c31aa19441a00"
        },
        {
          "alg": "SHA-256",
          "content": "bb2720e525fe73121027aa7ada48322f93cf571af27e077ffae68805cce448bd"
        },
        {
          "alg": "SHA-512",
          "content": "00b4b96bb08e0880284fd522dc04ae5a6a869c48a86b8c98f27954c699b32a6c2626ef006294b809a63d212e3e72220005692090bde129bf25cad457920a17e5"
        },
        {
          "alg": "SHA-384",
          "content": "0ebc6d3eddd71acc96b0aaf3a0de49f56e33e358428b576fbb8b0c0ef28ad4494cbf91f8d68e547232e5a1d03b781e33"
        },
        {
          "alg": "SHA3-384",
          "content": "ee2596ff97da468b75cd8a0bacf0a4a92b03883d48c0ea1f97bac3c33968ec335c70d0c3d26b8e9a06ca502b45f83290"
        },
        {
          "alg": "SHA3-256",
          "content": "28de23b5587c9b4cc8b2ed8478d2c5ce8796cd36fd1d08df5031628864003a59"
        },
        {
          "alg": "SHA3-512",
          "content": "672c20bd88599f1d14643e32d01535e5b79a4e00ecd3089e216e91b3918e21b90e2492a0ade4bc39bd4437330504af74988d36b518c3d5dee8fd3632372db729"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/jdbi-support@5.0.0-rc.2?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/support/jdbi-support/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/support/jdbi-support",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.jdbi/jdbi3-core@3.53.0?type=jar",
      "group": "org.jdbi",
      "name": "jdbi3-core",
      "version": "3.53.0",
      "description": "The Jdbi core API. Jdbi 3 is designed to provide convenient tabular data access in Java(tm) and other JVM based languages. It uses the Java collections framework for query results, provides a convenient means of externalizing SQL statements, and named parameter support for any database that supports JDBC.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "8ac1babb7fc3bba8de01e4c9d6ee685a"
        },
        {
          "alg": "SHA-1",
          "content": "7e741ad5776099dd8d6e4acbae65ff9d7e6d7e66"
        },
        {
          "alg": "SHA-256",
          "content": "df512225aaccd0c15a9ace972e9f98c514daac66efeb00843dbcad299c98c186"
        },
        {
          "alg": "SHA-512",
          "content": "18dc20c0d1ad1c6d6969eb53a3618d49d2ebbbdbac4ba450133707186363694de8abbc5c891b52bd153ccc67943fb918202f0db13f04c9014268ce154e0ba3ef"
        },
        {
          "alg": "SHA-384",
          "content": "5ce4e784ccc1f1e8bf6a8771bad339890a50b6a1ee3d271d75f4f990e12192f4e6062f975442c64f29d759375d1c4f56"
        },
        {
          "alg": "SHA3-384",
          "content": "874187451f7430753341ec0c41dd8b2ad69c04aa1660fdd89bbd912eaf7cbdb5b4e6d84542a0a356754c48aa2447bfdf"
        },
        {
          "alg": "SHA3-256",
          "content": "b2581cddb37a86d11ad87f43ac62ba64869b38981aeb195c24cc2ccb242758df"
        },
        {
          "alg": "SHA3-512",
          "content": "8dabd1b8f36c17457564970444f1679a47a16038f8de67a58a344b2c4edd6cf4a620c9038723aef62780edbcbd9b9456161922367fe7580f8552e2b18d1e2800"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.jdbi/jdbi3-core@3.53.0?type=jar",
      "externalReferences": [
        {
          "url": "https://jdbi.org/",
          "type": "website"
        },
        {
          "url": "https://github.com/jdbi/jdbi/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.leangen.geantyref/geantyref@2.0.1?type=jar",
      "group": "io.leangen.geantyref",
      "name": "geantyref",
      "version": "2.0.1",
      "description": "Generic type reflection library with support for AnnotatedType",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "08dce47c87ec3228628a42cb3eb8c181"
        },
        {
          "alg": "SHA-1",
          "content": "81253383ac75126142f97781d22d19de2532bf76"
        },
        {
          "alg": "SHA-256",
          "content": "386b535c079be7d65ddbe0ad9c00955155b7862225aa92b4c6553ab2b1ea95f9"
        },
        {
          "alg": "SHA-512",
          "content": "c6655ef00ede5d9bb17d4e7556200acaeb5babd67295e9f72e26e8ea48fd50978cc147156e35feada204163163292ad3a0daf0d6b1366c9e933f13a1b4a9eb2f"
        },
        {
          "alg": "SHA-384",
          "content": "3b97009b3b70156fcd3f39a8365e562d481fed54d779e6f60a82bdb0736ee7701edd0c69f58409154dc1823895e7da05"
        },
        {
          "alg": "SHA3-384",
          "content": "36cfd6a2d9d4f0df12e9c688b1981f494f4b77f6f05dc57af69f03ab2d7f9d5628f9b90ad324dbadc2ffc210a74d25aa"
        },
        {
          "alg": "SHA3-256",
          "content": "414a37fe9755beb446609dbc43f2eb702a0789ef5d046baff144596774e189ac"
        },
        {
          "alg": "SHA3-512",
          "content": "6a2ecd82a48dc5272720726298d21a8548c46df8b52f9dea1c97c38e77372fb620ca5c5fbed1b9ea7234f7328c47ba9642366d63f0d3f0340c33faf1f5f7de76"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.leangen.geantyref/geantyref@2.0.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/leangen/geantyref",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/leangen/geantyref/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/leangen/geantyref",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.jdbi/jdbi3-jackson2@3.53.0?type=jar",
      "group": "org.jdbi",
      "name": "jdbi3-jackson2",
      "version": "3.53.0",
      "description": "Use Jackson 2.x for JSON column serialization/deserialization.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "c1ef0ceea863f2edd1ad8bf8e4d98a96"
        },
        {
          "alg": "SHA-1",
          "content": "943b0e66bc23fc183bd3cbb8b414214e1a2d0a37"
        },
        {
          "alg": "SHA-256",
          "content": "832a3a28beb109f04905d2bb65410cf6e4ca5770afb1757f2f8f2925f6e9ca5c"
        },
        {
          "alg": "SHA-512",
          "content": "4a4b38e37823b0e400356a40002dab960aee26ebb2bbe2884ca620c44640eabd3540bf95914bc7700122988ace5a6f01ee3a5d97be54633e25a7f0d3d33eb437"
        },
        {
          "alg": "SHA-384",
          "content": "7efdcd7f42ee0d1d6cbe3e0f290fd4a7a37c745b6e5c66f99782651d155b2d6f36e5355ad782d1da12d572bf32db76c5"
        },
        {
          "alg": "SHA3-384",
          "content": "abafb0139141924de3e66c04ba34a3c532ee039c798427da3297f20bfb8393f80eeb7f24ae03fbf5fc78de2b903f4d00"
        },
        {
          "alg": "SHA3-256",
          "content": "cb59d59ce8799f6835d9579a9d8fdcb5e744809d214f7fc09557216bc3a33eba"
        },
        {
          "alg": "SHA3-512",
          "content": "487685261f6c5215625afc7e0d0cc8670c3efd955f06e28f71a4fc0f8d78625a3d51fb7dac61fb93a03dcc3a9236c1f991e507163ba8af8eb8e8d37baa220ea0"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.jdbi/jdbi3-jackson2@3.53.0?type=jar",
      "externalReferences": [
        {
          "url": "https://jdbi.org/",
          "type": "website"
        },
        {
          "url": "https://github.com/jdbi/jdbi/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.jdbi/jdbi3-json@3.53.0?type=jar",
      "group": "org.jdbi",
      "name": "jdbi3-json",
      "version": "3.53.0",
      "description": "Support for JSON column types. In addition to this module, a serialization module (jackson2, gson2, moshi) is required.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "fc4f71df06a55fd90819feb1e009b4ed"
        },
        {
          "alg": "SHA-1",
          "content": "2ab09661d0f934df39138358ad9cb2fa8a7026f6"
        },
        {
          "alg": "SHA-256",
          "content": "fb703e53cba842cb8e1b972de6e032b6a4c27b6f4696899c7b2186a2cdee5237"
        },
        {
          "alg": "SHA-512",
          "content": "4338faf434467ebb0e17aa95b852e2b148cd4f92ea0775a91078ad67cc7afd30a7cfc9e3dd69fecdcc23388c562f1ad4ee14869dcb3ffd2ed0241aaeec17eac5"
        },
        {
          "alg": "SHA-384",
          "content": "a4c58911e3a1288995ed3d11a6a41db228f2ef77fadd1cc1c0eb9453c6fa41adaa7a2060eb181d6ce0368a34fa7fbb03"
        },
        {
          "alg": "SHA3-384",
          "content": "b11d9fd3e84ee757d4f55d96cfe82132a93f10edd3868197d9cf057bea103ccf82e60e572ba9821a592d0d1b152f9e73"
        },
        {
          "alg": "SHA3-256",
          "content": "401f591c326465726938d84e2ee728436405b4334418c590af84811f772b0591"
        },
        {
          "alg": "SHA3-512",
          "content": "d60be8ff248eb66c7133308b02e524f94735c5b96cbfae3a348ab734b9403d6f8d3821e02f90421911c44781ba795df17c56c2921d63629df9138348be06adbf"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.jdbi/jdbi3-json@3.53.0?type=jar",
      "externalReferences": [
        {
          "url": "https://jdbi.org/",
          "type": "website"
        },
        {
          "url": "https://github.com/jdbi/jdbi/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.21.3?type=jar",
      "publisher": "FasterXML",
      "group": "com.fasterxml.jackson.core",
      "name": "jackson-core",
      "version": "2.21.3",
      "description": "Core Jackson processing abstractions (aka Streaming API), implementation for JSON",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "513c4f2160300c336a02bb13592d0d98"
        },
        {
          "alg": "SHA-1",
          "content": "3358e9345dd0f2537c47bee152c0377df6c81ad5"
        },
        {
          "alg": "SHA-256",
          "content": "baf8b739e9d9b93bcdb33f25046bfdb8dbd74c97de2a8698539fbe0c7eeac0bb"
        },
        {
          "alg": "SHA-512",
          "content": "3b1140a023f12df08e891aa1d623d01c79d1932d310cc90907603103abf1d5b1b288eba45c45a3fd292f44642d042c541ec50a17be4c6c8ec6a2e6cc6a1644d6"
        },
        {
          "alg": "SHA-384",
          "content": "7a6d40916c50e4c8f3471cf21ef9d123c38757387e98c5c209fac558b976e8628f343f1629a7903ebc428a724581e639"
        },
        {
          "alg": "SHA3-384",
          "content": "d090d6e06798b7ad7db8aa5a481d36ef8bccb38c1b026af34936d5182963e4a30db88e15ccbf3a24a45cdfd613d03d10"
        },
        {
          "alg": "SHA3-256",
          "content": "04754d7de00152f4923b4053603280bc5d88117a6e4e4257809f705b4014a321"
        },
        {
          "alg": "SHA3-512",
          "content": "56e4801e9037f7ec12ae63ac581a71cac68e2eada3723f0a834af65ff18c852350fe13486ea4458c314861455c58d79f0329eab32f9e35778ee330f879a43c22"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.21.3?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/FasterXML/jackson-core",
          "type": "website"
        },
        {
          "url": "https://central.sonatype.com/api/v1/publisher",
          "type": "distribution"
        },
        {
          "url": "https://github.com/FasterXML/jackson-core/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/FasterXML/jackson-core",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.jdbi/jdbi3-sqlobject@3.53.0?type=jar",
      "group": "org.jdbi",
      "name": "jdbi3-sqlobject",
      "version": "3.53.0",
      "description": "SqlObject is a declarative, annotation-driven API for database access. It complements the core API. Jdbi 3 is designed to provide convenient tabular data access in Java(tm) and other JVM based languages. It uses the Java collections framework for query results, provides a convenient means of externalizing SQL statements, and named parameter support for any database that supports JDBC.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "f2a385634641574a970a4576cff2f8f4"
        },
        {
          "alg": "SHA-1",
          "content": "2f03470cca31e2493287a999d8d05e6a0faebe6d"
        },
        {
          "alg": "SHA-256",
          "content": "b4acea22cd809b3797b4274fd88bc816157b375fc002c75310d44636dff439ec"
        },
        {
          "alg": "SHA-512",
          "content": "df3ea8759216145ef7d2bbf30fba976b3de327210b603fbcee6aca228d286959f3186065f856e6997050d8f72f5a18a9f7239bee555376b1b2029b75b94aaab3"
        },
        {
          "alg": "SHA-384",
          "content": "a6942dd295d97ab1b87cd9dde32a68ad73f92c23c931278751bca2ba4ae8807cc4c25e0a3e964587c69fb00325a4690b"
        },
        {
          "alg": "SHA3-384",
          "content": "253e70135d432deda7b0d9f27d79a936d3f3129aab2b733f945d2af4262aa69c420fda0291d26aa2e0502925d4b92267"
        },
        {
          "alg": "SHA3-256",
          "content": "ba096715e629c7c3b38f1e762b3feeb6257bb23a01de4c4bbaf54fbc1503f9f8"
        },
        {
          "alg": "SHA3-512",
          "content": "a1100f0f3277e18245d3189a7583768984398df42a05bcf71ca79c1099e852932d19a690481ed6e05ff6e41e7767849769f7be97ceab62db1f3381620f48b034"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.jdbi/jdbi3-sqlobject@3.53.0?type=jar",
      "externalReferences": [
        {
          "url": "https://jdbi.org/",
          "type": "website"
        },
        {
          "url": "https://github.com/jdbi/jdbi/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.jdbi/jdbi3-postgres@3.53.0?type=jar",
      "group": "org.jdbi",
      "name": "jdbi3-postgres",
      "version": "3.53.0",
      "description": "Support for additional PostgreSQL features and data types.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "a8d4950c846c951defdd4ab803940f9c"
        },
        {
          "alg": "SHA-1",
          "content": "64dc8ae4b30b0d3482848a0969727cb62ecc08b0"
        },
        {
          "alg": "SHA-256",
          "content": "4b0bdf1b2d179af5152080e9dc5f6f35407ec1622b1364fa81c58078ffa75d24"
        },
        {
          "alg": "SHA-512",
          "content": "19561efcc24661e0d49935b007cb994a6e3acd554a8f79ded17302d219f9adea7852d3263ca3bf0cc445a45800a0a1053f0cfa903108316706892497e577edcb"
        },
        {
          "alg": "SHA-384",
          "content": "bc2446c10e04a24fea6c889656f9566f08ce227281498e3bc02941881595490a86f97b5a1a98c060d5c4eea3ff71944c"
        },
        {
          "alg": "SHA3-384",
          "content": "52e588ad39be6a8c2845309ac546915f0c268eb41364359b50741d5c78e14dceecfab5303f4f20f4d94931ca2d520518"
        },
        {
          "alg": "SHA3-256",
          "content": "ff00895ffdbb0a789014e7efc098fa18d9b0fac566fe920dd55d59571e127d60"
        },
        {
          "alg": "SHA3-512",
          "content": "b7789d279d224c1e878b5188eeb120554a0cecd517210d13ea655ad7d7d4607d79b8ca3f6aaf63c2b259bc66dafae54ddbb3995f4acad76c657a6887ccee1ccd"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.jdbi/jdbi3-postgres@3.53.0?type=jar",
      "externalReferences": [
        {
          "url": "https://jdbi.org/",
          "type": "website"
        },
        {
          "url": "https://github.com/jdbi/jdbi/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.jdbi/jdbi3-freemarker@3.53.0?type=jar",
      "group": "org.jdbi",
      "name": "jdbi3-freemarker",
      "version": "3.53.0",
      "description": "Use Apache Freemarker for query templating.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "cdc2b3782e6c4213a303bfcbf3bdd7e9"
        },
        {
          "alg": "SHA-1",
          "content": "2f0f83b1b984c4167f20fca099fb83501b9f6acf"
        },
        {
          "alg": "SHA-256",
          "content": "6521f7b389cc8edee05f33de7d13771dddb641bf8b2958bf18141199f129e948"
        },
        {
          "alg": "SHA-512",
          "content": "6c7f36af0ab516156423656f39f2a90e5f4351b5ba2f035cd4517f721156ecc36208e6c43fd8a0310413efd56a90a5f52e3f5dafe2d1ad1af1c11bdf2a972e15"
        },
        {
          "alg": "SHA-384",
          "content": "e93385a993b21cd5baf50734536274660741caf5950a81507b125508ba6ecdd73c04a5f9bb9703291a5221c24a44259c"
        },
        {
          "alg": "SHA3-384",
          "content": "667a7dc420d333ad65ec1287c74ff67d9fc778a0216f590f6e0307fcb228baeacc8324ca3d11c3061d93e8feb3dee803"
        },
        {
          "alg": "SHA3-256",
          "content": "1031a9edca6b079ab02e973dbd4d2aa387497e72d8626a056c98ebbffec32ea7"
        },
        {
          "alg": "SHA3-512",
          "content": "d9f97f40c5bd525e2ae16c0046a25f465e30fd791d1fe394f59c0313c58fca5f4c498c0ef4798cb53fc6cc9ec9940d6cccb8a1960eb47d1e94e64a76a9f01d1a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.jdbi/jdbi3-freemarker@3.53.0?type=jar",
      "externalReferences": [
        {
          "url": "https://jdbi.org/",
          "type": "website"
        },
        {
          "url": "https://github.com/jdbi/jdbi/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.freemarker/freemarker@2.3.34?type=jar",
      "publisher": "Apache Software Foundation",
      "group": "org.freemarker",
      "name": "freemarker",
      "version": "2.3.34",
      "description": "FreeMarker is a \u0022template engine\u0022; a generic tool to generate text output based on templates.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "1704fd3c579385ca5fd0ebcdf50df73c"
        },
        {
          "alg": "SHA-1",
          "content": "c2fa47a1c3b6dcdfca90e952e51211967a4baa54"
        },
        {
          "alg": "SHA-256",
          "content": "9a9fb91cd64199232eb1ca9766148a5d30ef8944be5fac051018f96c70c8f6a3"
        },
        {
          "alg": "SHA-512",
          "content": "58bc6e157452f6b3a70a7d1bcfb89013e7204e716e267386014f6834fb66a56333fe4b538ef25b651913ab585bfa5c8fa010159d96ab952de42a82edb9552fca"
        },
        {
          "alg": "SHA-384",
          "content": "3def74003978738e770a121746f2fd5b3f179f117050fac529ba9a6eee104ac7d20f74a1e815f97a5bf451b3f36f0ed1"
        },
        {
          "alg": "SHA3-384",
          "content": "5636e107cd5406439d57e41ebcfa3cb068e32639941f1b7d780efb5acdb50ee99f7966b9174c52e9cfb27de22666fec6"
        },
        {
          "alg": "SHA3-256",
          "content": "22113afa6de5d146e0be2840ffd3103323b87849f020b06f24d9a70f3dfd3571"
        },
        {
          "alg": "SHA3-512",
          "content": "69c49e3ffb693fbeb98515f578c5a1bf1a6f81baf04efb21d8b2cdcbe93d59eff28f3e6d82a785c9c5b27222fc6f1bfa16a33bc08c92ea792a26a5d1b6068df9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.freemarker/freemarker@2.3.34?type=jar",
      "externalReferences": [
        {
          "url": "https://freemarker.apache.org/",
          "type": "website"
        },
        {
          "url": "https://issues.apache.org/jira/browse/FREEMARKER/",
          "type": "issue-tracker"
        },
        {
          "url": "http://mail-archives.apache.org/mod_mbox/freemarker-dev/",
          "type": "mailing-list"
        },
        {
          "url": "https://git-wip-us.apache.org/repos/asf?p=freemarker.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.jersey.ext/jersey-micrometer@4.0.2?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.glassfish.jersey.ext",
      "name": "jersey-micrometer",
      "version": "4.0.2",
      "description": "Jersey extension modules providing utilities, filters as well as integrations with external frameworks (Guice, Spring, Freemarker, etc.) and languages (Scala, Groovy, etc.). NOTE: Jersey security extensions have their own dedicated security umbrella project.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "3f236652b18c85dd1d3d42be134e5304"
        },
        {
          "alg": "SHA-1",
          "content": "f32a752d69e3ac4c4b02181bb24a8eb596437fbc"
        },
        {
          "alg": "SHA-256",
          "content": "703dd4ec1ca66d0cfe0e8a4ae5fb804b496f5160c68b881ff4730e8d63370a78"
        },
        {
          "alg": "SHA-512",
          "content": "9898a4196b1f282023471a6dabc1fb0a10e6cd614c6ff721cb0ac59eee3950e4badf532db999fca3da25df2d3880cec470112aa327bd446cea58596b79069786"
        },
        {
          "alg": "SHA-384",
          "content": "8016c540b330bffd9bfdcfe67ffa70634924af42be3caa10a03d7a652da7b2553397ad3f0db07089f3387236eaed152e"
        },
        {
          "alg": "SHA3-384",
          "content": "7a17537bf467022f7578410aefcbf826e5272cbe889956f18927806ad1bf5ea329c1541d802258bdc385480f2b6d3433"
        },
        {
          "alg": "SHA3-256",
          "content": "5816cc53154fac6d0726fc11d948884007d8bf2abbe7fdb7606ad128b887fa19"
        },
        {
          "alg": "SHA3-512",
          "content": "56c27796e3961ec83ae7154bc9c3a16970530b7607728394b8eba41c256b248726d90264e0597b67c0affa868c1562e71a14f0e448bf54958e2edebdf6839037"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        },
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        },
        {
          "license": {
            "id": "BSD-2-Clause"
          }
        },
        {
          "license": {
            "name": "Apache License, 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        },
        {
          "license": {
            "name": "Public Domain",
            "url": "https://creativecommons.org/publicdomain/zero/1.0/"
          }
        },
        {
          "license": {
            "name": "Modified BSD",
            "url": "https://asm.ow2.io/license.html"
          }
        },
        {
          "license": {
            "name": "jQuery license",
            "url": "jquery.org/license"
          }
        },
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/license/mit/"
          }
        },
        {
          "license": {
            "name": "W3C license",
            "url": "https://www.w3.org/Consortium/Legal/copyright-documents-19990405"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.jersey.ext/jersey-micrometer@4.0.2?type=jar",
      "externalReferences": [
        {
          "url": "https://projects.eclipse.org/projects/ee4j.jersey/project/jersey-micrometer",
          "type": "website"
        },
        {
          "url": "https://ci.eclipse.org/jersey",
          "type": "build-system"
        },
        {
          "url": "http://localhost",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/project/jersey-micrometer",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.jersey.core/jersey-common@4.0.2?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.glassfish.jersey.core",
      "name": "jersey-common",
      "version": "4.0.2",
      "description": "Jersey core common packages",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "727c798720203d12c8e41bbefcd3e66d"
        },
        {
          "alg": "SHA-1",
          "content": "0f45e98ad8798ee80a3904d32fffdab62c1cbbd6"
        },
        {
          "alg": "SHA-256",
          "content": "83466815c46d8f813509411986a22d1d3a2abe572b15b03078f98bc020154538"
        },
        {
          "alg": "SHA-512",
          "content": "8deadb5f070eea6d25523d8e634394f13183124aa673e5b08751371c558c49bb428452d07c74cfb477f7da53e3827818bb0ff3715fa97a19b515976a9d9fd65a"
        },
        {
          "alg": "SHA-384",
          "content": "fe3592ead798bfbe2d28093e589f2f73d73314e134f49e186ebf338c6f4ca030def8b982fc0b5fc6f9dc0c4d090d6cf7"
        },
        {
          "alg": "SHA3-384",
          "content": "17afad77ae4b187499349ffdaa877b80cf51da0e573407ab3ff550ff8f4e44f60de4861cce0a8c7ffc9f02edd688e5b9"
        },
        {
          "alg": "SHA3-256",
          "content": "5920f7c36054a487d8a66a8541fd69cf60fb01d96f6c9da1f05a52f6fbd56d50"
        },
        {
          "alg": "SHA3-512",
          "content": "fd0dc5c6ba36eae0cfaac1f2cc02676c87cf899bff7f21d3f367499a7695dab26aaa122a9a442156cd86b86dfd8a158bbaa832bfd1be89b2b902bddde043e7cb"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "name": "The GNU General Public License (GPL), Version 2, With Classpath Exception",
            "url": "https://www.gnu.org/software/classpath/license.html"
          }
        },
        {
          "license": {
            "name": "Apache License, 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        },
        {
          "license": {
            "name": "Public Domain",
            "url": "https://creativecommons.org/publicdomain/zero/1.0/"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.jersey.core/jersey-common@4.0.2?type=jar",
      "externalReferences": [
        {
          "url": "https://projects.eclipse.org/projects/ee4j.jersey/jersey-common",
          "type": "website"
        },
        {
          "url": "https://ci.eclipse.org/jersey",
          "type": "build-system"
        },
        {
          "url": "http://localhost",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/jersey-common",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.hk2/osgi-resource-locator@3.0.0?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.glassfish.hk2",
      "name": "osgi-resource-locator",
      "version": "3.0.0",
      "description": "Eclipse Enterprise for Java (EE4J) is an open source initiative to create standard APIs, implementations of those APIs, and technology compatibility kits for Java runtimes that enable development, deployment, and management of server-side and cloud-native applications.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "de9e96f2606a6f86def8659e9762c163"
        },
        {
          "alg": "SHA-1",
          "content": "5483c94aa9a7e16319abaec0a6c74c999678feac"
        },
        {
          "alg": "SHA-256",
          "content": "a1866ccfddaa29f18da5d39df662894ab2dd9902994a5000e7644f6cc1e37e55"
        },
        {
          "alg": "SHA-512",
          "content": "ff7e7fc1656bd6f938f69186aa6be1379aacdd4ba9724735c7613d76edf4496d5ff74589bbb83d42c98a22620c6eaa17319d77f878f206744be3e8677f3cba09"
        },
        {
          "alg": "SHA-384",
          "content": "65739334c0f2f3f877a4a14b4d8009711f05d37d9ab4ad3e89560c0a7635011e3dc24ab3ee31ad3f19396bc320d9962b"
        },
        {
          "alg": "SHA3-384",
          "content": "dc6237482f129cb62e8bc16233174d36d76c114b2a51de64505374105a7099454143d18e4e2700e34f6aa497740dcbc4"
        },
        {
          "alg": "SHA3-256",
          "content": "b02549e92eb21dc206488d6d7cade6f94867c537646c9ab3009fd4c119a73c2c"
        },
        {
          "alg": "SHA3-512",
          "content": "d0ed41c9b5d0fe75a12d8dbfa65df17e6d2380c25e52436929d9eaa8154f474e66447e518dbee445c4c94660882a20f509b6f69aff8081805802b7a34d518f1c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.hk2/osgi-resource-locator@3.0.0?type=jar",
      "externalReferences": [
        {
          "url": "https://projects.eclipse.org/projects/ee4j/hk2-extra-parent/osgi-resource-locator",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/ee4j/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/glassfish-hk2-extra/osgi-resource-locator",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.jersey.core/jersey-server@4.0.2?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.glassfish.jersey.core",
      "name": "jersey-server",
      "version": "4.0.2",
      "description": "Jersey core server implementation",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "d938a53dc417de9bc60f3158068dd1c4"
        },
        {
          "alg": "SHA-1",
          "content": "5b684689d7d36001b883eca81b00e4597f31f414"
        },
        {
          "alg": "SHA-256",
          "content": "c92030c36d6b72cea53464f954e23260ed1ad3559cbb653264497d83882a9aba"
        },
        {
          "alg": "SHA-512",
          "content": "df351826bf9b32dc4f76293029f9202b9141d939532e839afe1bfa504137644ef5156874eefa299db2f7e17fa204e2f7a390b87a3f3ad62282db622078546cd4"
        },
        {
          "alg": "SHA-384",
          "content": "4e00f26790de2a10b90285f7bc3ff0b094c8fb3c1870ef556920f698dcdb61809d2929448c044a686520256e007645d6"
        },
        {
          "alg": "SHA3-384",
          "content": "152cdbab19536c2c3f3d3189e58143253e4cbf35146314097da457cefacf0b96dc6aba4eb3c37195baa87fb8550f1744"
        },
        {
          "alg": "SHA3-256",
          "content": "71d88e8db96d993601980beeaf55d28e5bbbac8ba3438bd6e409ee8fed7e51dd"
        },
        {
          "alg": "SHA3-512",
          "content": "555f64a84060dd85c5ed5df97221e2a5d38d465f58a1cd60f33ad602163d858f6d08b44cf2a3e40b466db2b839e5c1a902b6ad1997edc04ea993fa15cf10c2c5"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "name": "The GNU General Public License (GPL), Version 2, With Classpath Exception",
            "url": "https://www.gnu.org/software/classpath/license.html"
          }
        },
        {
          "license": {
            "name": "Apache License, 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        },
        {
          "license": {
            "name": "Modified BSD",
            "url": "https://asm.ow2.io/license.html"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.jersey.core/jersey-server@4.0.2?type=jar",
      "externalReferences": [
        {
          "url": "https://projects.eclipse.org/projects/ee4j.jersey/jersey-server",
          "type": "website"
        },
        {
          "url": "https://ci.eclipse.org/jersey",
          "type": "build-system"
        },
        {
          "url": "http://localhost",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/jersey-server",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.jersey.core/jersey-client@4.0.2?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.glassfish.jersey.core",
      "name": "jersey-client",
      "version": "4.0.2",
      "description": "Jersey core client implementation",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "9c61cbd9c4fc6749f0dc2338ea0eb870"
        },
        {
          "alg": "SHA-1",
          "content": "15a14c04c458dc9eafc12af7d33ed43fd78dab04"
        },
        {
          "alg": "SHA-256",
          "content": "91fd986ee7c7fa468b2f601d7a2cdf9bfad6ce4fa0fbf5d4f7e6d0c07c12a023"
        },
        {
          "alg": "SHA-512",
          "content": "3121c7fa53d914bb2af504ca183b245bc3184fb080f1d1b2cc0721c733be3e6c4b8cda1c4860ce0646ccd921ea83f6d145af529fa595fe6aacb4bc14644b7250"
        },
        {
          "alg": "SHA-384",
          "content": "754112b2b37246559223abb5d8cf6828ef82507b732c2abe2bdbf28c343cd1815266ddfedb7e8a16797547cda70cd053"
        },
        {
          "alg": "SHA3-384",
          "content": "334b0e0352e584761bedab51a1220f6d1ba8d4cd4221a9cc6fd1ce90d528e5f00c1fe716bdf06b9babb8f757f0740ea0"
        },
        {
          "alg": "SHA3-256",
          "content": "4ea8a1ec58dfa91a85277f085b64b3d5c979984bb50ebe60900b335f21f5ebf5"
        },
        {
          "alg": "SHA3-512",
          "content": "808a3272d41658fcfe831cc2b482968d3962544ffcf8d00d45096f80bfb37b4415b6cb72e1f608f42f04a397ba843f677a8970fcb18267aede08b1c8ad20c928"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        },
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        },
        {
          "license": {
            "id": "BSD-2-Clause"
          }
        },
        {
          "license": {
            "name": "Apache License, 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        },
        {
          "license": {
            "name": "Public Domain",
            "url": "https://creativecommons.org/publicdomain/zero/1.0/"
          }
        },
        {
          "license": {
            "name": "Modified BSD",
            "url": "https://asm.ow2.io/license.html"
          }
        },
        {
          "license": {
            "name": "jQuery license",
            "url": "jquery.org/license"
          }
        },
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/license/mit/"
          }
        },
        {
          "license": {
            "name": "W3C license",
            "url": "https://www.w3.org/Consortium/Legal/copyright-documents-19990405"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.jersey.core/jersey-client@4.0.2?type=jar",
      "externalReferences": [
        {
          "url": "https://projects.eclipse.org/projects/ee4j.jersey/jersey-client",
          "type": "website"
        },
        {
          "url": "https://ci.eclipse.org/jersey",
          "type": "build-system"
        },
        {
          "url": "http://localhost",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/jersey-client",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@4.0.0?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "jakarta.ws.rs",
      "name": "jakarta.ws.rs-api",
      "version": "4.0.0",
      "description": "Jakarta RESTful Web Services",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "9b7cc90c000f193157d60d95caf45972"
        },
        {
          "alg": "SHA-1",
          "content": "c27a67f84ca491efcb3fa68f4df926e8a110069e"
        },
        {
          "alg": "SHA-256",
          "content": "6368b126cbcf34e694bb9ba5b9fe3e5040b7acea7ce622e636d698bb085fd2a6"
        },
        {
          "alg": "SHA-512",
          "content": "e423f90e5f20d133986c60c3fc2f63cfc74531d51b57bf38942cf8e603d8c6817005708117b0bb07e242eae3ba6e1cf23c6ded8fb2776274a9382505ea726ac1"
        },
        {
          "alg": "SHA-384",
          "content": "494b2962ad17d9477d58125cd99d4c0e52e58e10b7ad81e66196649da6651a3187d1ccf64e642083d0a6e54c70f07401"
        },
        {
          "alg": "SHA3-384",
          "content": "1803d40582c05b6956cfeb2cfc7b39c03f2211d4d8511b2b9df2fc4c5830f5a1f8e05d86731f4b168caa3a78bae28d69"
        },
        {
          "alg": "SHA3-256",
          "content": "5e91619ebc4cc811f1639acf926dc4935ac38808d5d834b6d6f26784d7299e9b"
        },
        {
          "alg": "SHA3-512",
          "content": "48c8ed0acd56c83a0d9413bdaa950c92345ac0f36491745e8675b96909c35311fcb05bd80839d0d1247eb5b373754ce5d922d99d06cd1ef9f6063a491e51d671"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0",
            "url": "https://www.eclipse.org/legal/epl-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception",
            "url": "https://www.gnu.org/software/classpath/license.html"
          }
        }
      ],
      "purl": "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@4.0.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/jakartaee/rest/jakarta.ws.rs-api",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/jakartaee/rest/issues",
          "type": "issue-tracker"
        },
        {
          "url": "jaxrs-dev@eclipse.org",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/jakartaee/rest/jakarta.ws.rs-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/us.springett/owasp-risk-rating-calculator@1.0.1?type=jar",
      "group": "us.springett",
      "name": "owasp-risk-rating-calculator",
      "version": "1.0.1",
      "description": "A Java library for calculating OWASP Risk Rating scores",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "f387d7ce91df7f1b56224b972b916ebe"
        },
        {
          "alg": "SHA-1",
          "content": "f4ae15b14d7a4c3686f6a8a8a93e30560472b1f8"
        },
        {
          "alg": "SHA-256",
          "content": "9b66d91d1ff61f99e320466ff451555696f139147260528591ff1718c5605d1c"
        },
        {
          "alg": "SHA-512",
          "content": "449331aaabc401a7c7ac42c6bba06d17a2c2dc8def07961b93de7bde8fb9f54aa2541cbab7e541b6fa1552977d46e5367a78277cffbafc60873bb7042facff65"
        },
        {
          "alg": "SHA-384",
          "content": "e83afc9976cfcb5419768fdba983815bf755101fef34df693b6033094e12a29d23127148edef4ba6db3573e0b2bb3871"
        },
        {
          "alg": "SHA3-384",
          "content": "07bed3d3cc524090d01da7711e684d7c645e9225e38225ca92da6f58f3ae86c9d9f2e1a45ad923f9345abecb609c0be1"
        },
        {
          "alg": "SHA3-256",
          "content": "153dbb661c502fd174cdbb735a0a89f69555365e165dd6a91d7c765226b9947a"
        },
        {
          "alg": "SHA3-512",
          "content": "6c6bb8298f8f3337395693f4963d08d21d7f76e6ef8802773e37efc64b1b25a6f8ec77169f730591f429cfa5ac5f6a1b2ef0948af67fa49f19cf7ba8a0223f25"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/us.springett/owasp-risk-rating-calculator@1.0.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/stevespringett/owasp-risk-rating-calculator",
          "type": "website"
        },
        {
          "url": "https://travis-ci.org/stevespringett/owasp-risk-rating-calculator",
          "type": "build-system"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/stevespringett/owasp-risk-rating-calculator/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/stevespringett/owasp-risk-rating-calculator.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/us.springett/cpe-parser@3.0.1?type=jar",
      "group": "us.springett",
      "name": "cpe-parser",
      "version": "3.0.1",
      "description": "A utility for validating and parsing Common Platform Enumeration (CPE) v2.2 and v2.3 as originally defined by MITRE and maintained by NIST.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "753b3f9a2223c44111f7098ff8a65e3f"
        },
        {
          "alg": "SHA-1",
          "content": "377c4cdca1c3c800dd1ff77d6b5cece16dbf1852"
        },
        {
          "alg": "SHA-256",
          "content": "f98a50dce0a381e08f0f0ac067801c7f4c51dc7f8f1fe7a3c9960c684a809705"
        },
        {
          "alg": "SHA-512",
          "content": "241e1a559ac01966f74e820d0af3fb4f79ec41b76590f26198929790a35579f5663d3d8f97b98e841665f57eb5bc6c51370969f0db34c99c3293c6d98093d9c2"
        },
        {
          "alg": "SHA-384",
          "content": "92929bc29a157cbe13d424875e5a66eacd52b2e20a412306ae48a43076123dca75f1cf0d6d075e140cec34e4bf7a5e25"
        },
        {
          "alg": "SHA3-384",
          "content": "bf36fd4e57aa02054d12018926b7fdb8f89b1fa669b1b4c7ff8327c3203c86843c53825facedd34b86c6d95455ce1907"
        },
        {
          "alg": "SHA3-256",
          "content": "064ece86c096355ca9a06fb4942fb3abac3555e8213653fce7ed1f7767b5531d"
        },
        {
          "alg": "SHA3-512",
          "content": "2f005c9caa28acb5a4f9d521a4b847316f949f9f377bbad4cf25ba485127104717bab5e2382238c4f7349d598eb4de073f08dea0838990d32b6d1f2741b33fc5"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/us.springett/cpe-parser@3.0.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/stevespringett/CPE-Parser",
          "type": "website"
        },
        {
          "url": "https://github.com/stevespringett/CPE-Parser/actions/workflows/maven.yml",
          "type": "build-system"
        },
        {
          "url": "https://github.com/stevespringett/CPE-Parser/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/stevespringett/CPE-Parser.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.cyclonedx/cyclonedx-core-java@12.1.0?type=jar",
      "publisher": "OWASP Foundation",
      "group": "org.cyclonedx",
      "name": "cyclonedx-core-java",
      "version": "12.1.0",
      "description": "The CycloneDX core module provides a model representation of the BOM along with utilities to assist in creating, parsing, and validating BOMs.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "dabcf66c24dc633f2d7b88a69beeb16d"
        },
        {
          "alg": "SHA-1",
          "content": "449f227a8e1603880fff41789a8c1d3a090b42ec"
        },
        {
          "alg": "SHA-256",
          "content": "9f7c0dba25f5c02eccf3d79dea9566f1794e3e357655286c4831480952ab4788"
        },
        {
          "alg": "SHA-512",
          "content": "9691c6928c7681ec3b733b02febd2b95c1727d8fb8d25fe5dc116d0bbba33bfff688bcaf38b709d605516924bcc3156b404d699c94ca119682e362f8fcda4926"
        },
        {
          "alg": "SHA-384",
          "content": "57f1d23616aae2409e17165c172f290349a51a088189e37751460b97dc08e20028bd52121d9b4a97a98cf3d5b8245079"
        },
        {
          "alg": "SHA3-384",
          "content": "e7f119b0488c8f78e2afb47c253e6c39c5f1cc80beaa0c6c44924654362a0d475b885a4605253c0b8a3ca4ec1587d60e"
        },
        {
          "alg": "SHA3-256",
          "content": "f34c7330ac0e58fadd1c82c0f0cdc21984840b63f07fea340a7b8f2acdae3701"
        },
        {
          "alg": "SHA3-512",
          "content": "3fa4373bd6178acba5a6da96c137108ca1ece1fb916c2a804da935c5febd38cc02684284126884b925759a2d8aeff3c4611caca3a24e201630ef9b76567f4ce8"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.cyclonedx/cyclonedx-core-java@12.1.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/CycloneDX/cyclonedx-core-java",
          "type": "website"
        },
        {
          "url": "https://github.com/CycloneDX/cyclonedx-core-java/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/CycloneDX/cyclonedx-core-java/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/commons-codec/commons-codec@1.21.0?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "commons-codec",
      "name": "commons-codec",
      "version": "1.21.0",
      "description": "The Apache Commons Codec component contains encoders and decoders for formats such as Base16, Base32, Base64, digest, and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a collection of phonetic encoding utilities.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "c49977029838babaf8a71485aa9aaef8"
        },
        {
          "alg": "SHA-1",
          "content": "d95f998db5f89900fe895daf6cd2cddcb2f1d64b"
        },
        {
          "alg": "SHA-256",
          "content": "4da851cb6abfb98bfe9eb77c5e5fc47f5414fa28b94e21b7fd9a646705dc167f"
        },
        {
          "alg": "SHA-512",
          "content": "3ceb4aa588d0b918e46b1ddda9ff41b5a765985bf66542d2728458fc3f83b9dedfd972ff5d919cf6f456fbaa9f8c4e5f0c0913848ec3a471c316374e683b1f2a"
        },
        {
          "alg": "SHA-384",
          "content": "05786582b0a85264688ad5b49ad6da09db1cdfe6301cf31ddea48f97f45b13ff25d9e3def1702890457fd5bbbd00f793"
        },
        {
          "alg": "SHA3-384",
          "content": "805bda170837bbedbecc5c63a5defc6a348777952906d8e6f33544866e86aa25c9d28f3b351e981d0fa49bb16e07884c"
        },
        {
          "alg": "SHA3-256",
          "content": "cbc2eafcba305c08e852133d0881d209799c4dc83d587869eed5f281d6bed4f3"
        },
        {
          "alg": "SHA3-512",
          "content": "244e6a342d4b5a6e7d077426427979f26320be305f1cb33d933672c926ea3a96fe4f284c9f592970f604928209fe0e149613b64990202d595bce01a669de418b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/commons-codec/commons-codec@1.21.0?type=jar",
      "externalReferences": [
        {
          "url": "https://commons.apache.org/proper/commons-codec/",
          "type": "website"
        },
        {
          "url": "https://github.com/apache/commons-codec/actions",
          "type": "build-system"
        },
        {
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2",
          "type": "distribution"
        },
        {
          "url": "https://issues.apache.org/jira/browse/CODEC",
          "type": "issue-tracker"
        },
        {
          "url": "https://mail-archives.apache.org/mod_mbox/commons-user/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/apache/commons-codec",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.commons/commons-collections4@4.5.0?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.commons",
      "name": "commons-collections4",
      "version": "4.5.0",
      "description": "The Apache Commons Collections package contains types that extend and augment the Java Collections Framework.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "d564105594035b363b193d8ce3c18b98"
        },
        {
          "alg": "SHA-1",
          "content": "e5cf89f0c6e132fc970bd9a465fdcb8dbe94f75a"
        },
        {
          "alg": "SHA-256",
          "content": "00f93263c267be201b8ae521b44a7137271b16688435340bf629db1bac0a5845"
        },
        {
          "alg": "SHA-512",
          "content": "ee43c513ac9dcbd7dd23b5cbb4ea5f65a2e10cdfbb403d080b87e778b3b45062315522297c41eca514a9a946228ad7650f0a572d5b78effb8260dd8084131988"
        },
        {
          "alg": "SHA-384",
          "content": "73db8eb3e79569b3fa62aefdce413e6ea250b9853953cb75b9d5ce0f2f35b59b6e86ef708326a608ff20d95bdade8522"
        },
        {
          "alg": "SHA3-384",
          "content": "7a9c035fa846cdcebd4331eb86ed31a67595518299a8bee54597c1eb663aee63214553a561a510b929035266c2a4800b"
        },
        {
          "alg": "SHA3-256",
          "content": "614c41bfd8f9c6c1c1e5667c5be45587c3021b780937ad62f54d17051f425086"
        },
        {
          "alg": "SHA3-512",
          "content": "3cfd12ec2d03ed29b682123cedae422a4c6dc459034a7e0ab5f00ccd422cb9a2ec423a08b953119c426569b888157a6d80aa0e0c63debea50c5c54c481e2eff5"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.commons/commons-collections4@4.5.0?type=jar",
      "externalReferences": [
        {
          "url": "https://commons.apache.org/proper/commons-collections/",
          "type": "website"
        },
        {
          "url": "https://github.com/apache/commons-parent/actions",
          "type": "build-system"
        },
        {
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2",
          "type": "distribution"
        },
        {
          "url": "https://issues.apache.org/jira/browse/COLLECTIONS",
          "type": "issue-tracker"
        },
        {
          "url": "https://mail-archives.apache.org/mod_mbox/commons-user/",
          "type": "mailing-list"
        },
        {
          "url": "https://gitbox.apache.org/repos/asf?p=commons-collections.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.21.3?type=jar",
      "publisher": "FasterXML",
      "group": "com.fasterxml.jackson.dataformat",
      "name": "jackson-dataformat-xml",
      "version": "2.21.3",
      "description": "Data format extension for Jackson to offer alternative support for serializing POJOs as XML and deserializing XML as POJOs.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "10109a3b4a1798ab10551ee081d1a86c"
        },
        {
          "alg": "SHA-1",
          "content": "e3bdcc80b645f1c8780b3b3583787f6019540fee"
        },
        {
          "alg": "SHA-256",
          "content": "a434f465462c7c5f471e965f4a7d1eaddee957cbf674f8f2c578ab2295f8939d"
        },
        {
          "alg": "SHA-512",
          "content": "4401ef078cb23d300dc7d9b467f17165b7c12a9b968f626e1d54892863e5ed0fb989dfdb167959971c898bfebd8af356df7594199673a610cfba8410bd420348"
        },
        {
          "alg": "SHA-384",
          "content": "837909513f29b0f90c47b9dae8b833a8b18bc74e4833cc4b27e0d846cb1b4b471357be99b61264970c4d4519c97b9ea9"
        },
        {
          "alg": "SHA3-384",
          "content": "4edc2c593630006b54682fed4846c0edaf26422190e1b867f05928612490b27ba73e301b1470b8309f339569bdea3786"
        },
        {
          "alg": "SHA3-256",
          "content": "ea9aa8cf8a8e88ecba5b14ba58dd2c5929abb0855e4a6ea67513fb078dd23097"
        },
        {
          "alg": "SHA3-512",
          "content": "a901de954bb0c7ddb14af9d045785c050e1c0884121ec1421b5e0a473e031671a2523c92164588b64fabac2b7b22092f5c09f60c1a1178abd74cdac440cef541"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.21.3?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/FasterXML/jackson-dataformat-xml",
          "type": "website"
        },
        {
          "url": "https://central.sonatype.com/api/v1/publisher",
          "type": "distribution"
        },
        {
          "url": "https://github.com/FasterXML/jackson-dataformat-xml/issues",
          "type": "issue-tracker"
        },
        {
          "url": "http://github.com/FasterXML/jackson-dataformat-xml",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/jakarta.activation/jakarta.activation-api@2.1.3?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "jakarta.activation",
      "name": "jakarta.activation-api",
      "version": "2.1.3",
      "description": "Jakarta Activation API 2.1 Specification",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "76e7b680375ea9f40f3ddbd702efcd25"
        },
        {
          "alg": "SHA-1",
          "content": "fa165bd70cda600368eee31555222776a46b881f"
        },
        {
          "alg": "SHA-256",
          "content": "01b176d718a169263e78290691fc479977186bcc6b333487325084d6586f4627"
        },
        {
          "alg": "SHA-512",
          "content": "aaabd4d6085a07035eaaae7b5a81aef429fea76e7fe1c8d29971e6595f0adad6bcf1088cff8a1c8936d739b0e3fce4b845323032f046b7edab2eaebd0e10a2ad"
        },
        {
          "alg": "SHA-384",
          "content": "4c4e73f59bf09342ca7691fd4855b41d3466da80618a5b7df059a2d89cf6d9779a4af751a6c4a9c48e5025c3ff75f42e"
        },
        {
          "alg": "SHA3-384",
          "content": "20be816700c87778e9453d41b6d8cb9dc992a092a308a9b7f2dfbf72e2393940a7d666c46625f130a2b57bc414df85ca"
        },
        {
          "alg": "SHA3-256",
          "content": "8a574b0a249842ea1b397d4cdef9b6d00b34ce8a849ea34184cdf45ac5aafe67"
        },
        {
          "alg": "SHA3-512",
          "content": "69cfb7dddda70ac1fca272ace0a3d5551b85dd60a6dbaf987ee777fbf573b420d13f06b8990ae70e8fe063f92b78c8a447cf9309ba516a5e993ba2d49cca8d23"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/jakarta.activation/jakarta.activation-api@2.1.3?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/jakartaee/jaf-api",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/jakartaee/jaf-api/issues/",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/jakartaee/jaf-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/jakarta.servlet/jakarta.servlet-api@6.1.0?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "jakarta.servlet",
      "name": "jakarta.servlet-api",
      "version": "6.1.0",
      "description": "Eclipse Enterprise for Java (EE4J) is an open source initiative to create standard APIs, implementations of those APIs, and technology compatibility kits for Java runtimes that enable development, deployment, and management of server-side and cloud-native applications.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "314c930b3e40ac1abc3529c7c9942f09"
        },
        {
          "alg": "SHA-1",
          "content": "1169a246913fe3823782af7943e7a103634867c5"
        },
        {
          "alg": "SHA-256",
          "content": "8a31f465f3593bf2351531a5c952014eb839da96a605b5825b93dd54714c48c4"
        },
        {
          "alg": "SHA-512",
          "content": "8651fc14b79e284fe29dff5b2cadbf6748615ececde798c42687472f4f6fd1f80ee05ec53794021c62a11abed0c0170bb08b28d3f9cd7f562eb320bc9870ddec"
        },
        {
          "alg": "SHA-384",
          "content": "48b2a26351619286ffe41d25e5e61cbc0eb8a5a648a205d0f8db48178278cb16850469fe8dbc219aee0ee37f4081c248"
        },
        {
          "alg": "SHA3-384",
          "content": "2047f0b88a12619fb3f07a98048fc405e9cec4ddee6af2a2efc06c1172d2bebefc6c23bdb4df0a1054060f91d5cc5617"
        },
        {
          "alg": "SHA3-256",
          "content": "4b506d06772f32251cadc40251623ebd4f3144531249ce4821787b1a9c4a55b3"
        },
        {
          "alg": "SHA3-512",
          "content": "07632a67f7ca7b460cfc3042ecf97f9097e7d7638209434def89a3bd55da5a31e287f32def27ce776d5775ec0629979abb08fe2836d88d638802194af0320fe0"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl": "pkg:maven/jakarta.servlet/jakarta.servlet-api@6.1.0?type=jar",
      "externalReferences": [
        {
          "url": "https://projects.eclipse.org/projects/ee4j.servlet",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/servlet-api/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/servlet-dev",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/servlet-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.eclipse.jetty/jetty-server@12.1.9?type=jar",
      "publisher": "Webtide",
      "group": "org.eclipse.jetty",
      "name": "jetty-server",
      "version": "12.1.9",
      "description": "Jetty Server Artifact",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "16bbb6d08db98909901b235e132a51f6"
        },
        {
          "alg": "SHA-1",
          "content": "d9b173609c17b7ff258b03f9dd79192c4684d12a"
        },
        {
          "alg": "SHA-256",
          "content": "5dfc3736056cd941a783b21e50c983c235c1b0a593d4b0d2954966173a3f6a3e"
        },
        {
          "alg": "SHA-512",
          "content": "5b9a29a4cc343f7db9f003a5560c786ef117b02369b8a55f0e672cc1cc6432c17669b3c97ff005b70552180a73c1abe36745794e26dc3e31d8d4896a5dde0e85"
        },
        {
          "alg": "SHA-384",
          "content": "d17b94811c3b33a21479cb6b5138eb916e503460b1ba84778295f4eea11c6cdee975ee0711a3ac2d5c4dc224ca4e7795"
        },
        {
          "alg": "SHA3-384",
          "content": "e63ecb4afb3b12696a88f09270f9bd5f1bf24e05eec7977118232659e54f6ed87f3be11bad705b670cb5619b6bad0466"
        },
        {
          "alg": "SHA3-256",
          "content": "4475067f71ce1fd538aea75882eedfaae6d835909b6e9236e31c8b4010e1b556"
        },
        {
          "alg": "SHA3-512",
          "content": "5f231e278d289a31995d9c883e180fb4ff00f24a54d22c1033ea20f963d0e23bda608bdef037196f243280fa005402b93671605f115f2ed3b6c49f5d254734cd"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0",
            "url": "https://www.eclipse.org/legal/epl-2.0"
          }
        },
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.eclipse.jetty/jetty-server@12.1.9?type=jar",
      "externalReferences": [
        {
          "url": "https://jetty.org/jetty-core/jetty-server",
          "type": "website"
        },
        {
          "url": "https://repo.maven.apache.org/maven2",
          "type": "distribution"
        },
        {
          "url": "https://github.com/jetty/jetty.project/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://www.eclipse.org/lists/jetty-dev/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/jetty/jetty.project/jetty-core/jetty-server",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.eclipse.jetty/jetty-http@12.1.9?type=jar",
      "publisher": "Webtide",
      "group": "org.eclipse.jetty",
      "name": "jetty-http",
      "version": "12.1.9",
      "description": "Jetty HTTP Artifact",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "957922ad8031fa851fb697f866f30e8f"
        },
        {
          "alg": "SHA-1",
          "content": "d4c8ce16b394a2cbea4834781d734e314bf26cfb"
        },
        {
          "alg": "SHA-256",
          "content": "857eaf5e7823f9ee91099db5bedd179b7d3e93653ac288e27321544231014df0"
        },
        {
          "alg": "SHA-512",
          "content": "76fd6ba75fa2a2be9bcde0578303dff917cae8850957728f593b97110b7df665670f52aba8ed14719f334c3c2372de92a4db9b4491ffcf9026265be2fba3242f"
        },
        {
          "alg": "SHA-384",
          "content": "a37cc182c39ea15bb2d0be37368f746fe6327b3b422e9b1d9ef8351d4bc4b13b750170ec4d1ea0ab88c1705ae58aa4bc"
        },
        {
          "alg": "SHA3-384",
          "content": "435b0ec402af3907c216115c26282a211ca0f919f168759537eed04ed92d47d722d0d92d6c4fe647ba4747243352c181"
        },
        {
          "alg": "SHA3-256",
          "content": "cc2e25388af780b5ad283cdf995ba623830dbd058f63cd4a66d7e14f25592ec0"
        },
        {
          "alg": "SHA3-512",
          "content": "886f0bfddbd019759b588b08a8242128a4fbc064284b4b8d5682f1a2cca223e556e4feda76061cb3fe035679bd6808f6cb5b4b9f2d698cb62587f285ab4d3e5e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0",
            "url": "https://www.eclipse.org/legal/epl-2.0"
          }
        },
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.eclipse.jetty/jetty-http@12.1.9?type=jar",
      "externalReferences": [
        {
          "url": "https://jetty.org/jetty-core/jetty-http",
          "type": "website"
        },
        {
          "url": "https://repo.maven.apache.org/maven2",
          "type": "distribution"
        },
        {
          "url": "https://github.com/jetty/jetty.project/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://www.eclipse.org/lists/jetty-dev/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/jetty/jetty.project/jetty-core/jetty-http",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.eclipse.jetty/jetty-util@12.1.9?type=jar",
      "publisher": "Webtide",
      "group": "org.eclipse.jetty",
      "name": "jetty-util",
      "version": "12.1.9",
      "description": "Jetty Utilities Artifact",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "5a450ba05c7252a83c57e727f273c501"
        },
        {
          "alg": "SHA-1",
          "content": "d8a512027f8ccf8aa2299d4fdd5cd7ca1edc6fa1"
        },
        {
          "alg": "SHA-256",
          "content": "bb228358d4ae45c004d949edc397de1eb8aabc7adc5f9b9cbc833336e70a23bd"
        },
        {
          "alg": "SHA-512",
          "content": "bb2878f56eafbdb024644bd4cad7813f86f2be75c559c8cfe285ca698b78deb08498fe4f5e73c2d18fa485c961479a9ce5aedc251274421ab92019beb1a3ae13"
        },
        {
          "alg": "SHA-384",
          "content": "195e01855ef7b179dfce12c8cc2a2d43e4eff4fbbc37ff92247e5c723c0f0c6fe6db5601497a5a5b8936e945e4468b14"
        },
        {
          "alg": "SHA3-384",
          "content": "802e40fc483e2deef0f387bba58b06276c6f201285b20fe66d8ab8bf1ae947f44feba324a630d5df79233da03dd9c55e"
        },
        {
          "alg": "SHA3-256",
          "content": "c597615133d62662e3daaba93c09eb785cf09759898ed407d73145d4061a6f5a"
        },
        {
          "alg": "SHA3-512",
          "content": "77c0b5a9baf83a9293012e9d13968e2a8f1de974052a6b5cbe14033f5945731dde3101290899411be5a2e3f26d0146d99f80cc6ec7a49bc093bd94544c7d0aa1"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0",
            "url": "https://www.eclipse.org/legal/epl-2.0"
          }
        },
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.eclipse.jetty/jetty-util@12.1.9?type=jar",
      "externalReferences": [
        {
          "url": "https://jetty.org/jetty-core/jetty-util",
          "type": "website"
        },
        {
          "url": "https://repo.maven.apache.org/maven2",
          "type": "distribution"
        },
        {
          "url": "https://github.com/jetty/jetty.project/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://www.eclipse.org/lists/jetty-dev/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/jetty/jetty.project/jetty-core/jetty-util",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.eclipse.jetty/jetty-io@12.1.9?type=jar",
      "publisher": "Webtide",
      "group": "org.eclipse.jetty",
      "name": "jetty-io",
      "version": "12.1.9",
      "description": "Jetty I/O Artifact",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "e2b075927f922ce8bb84ae7742a5bcab"
        },
        {
          "alg": "SHA-1",
          "content": "eded2b009448a5e44e16addd2fbb66701fe6456b"
        },
        {
          "alg": "SHA-256",
          "content": "904c1680e74705794c15f9df2a9ccfb155152bdd3067521fd6522df009bfa9d9"
        },
        {
          "alg": "SHA-512",
          "content": "8cda5c20b675f9fcbd0ca3032183f954d44e2d353325afed631f56a41e85b1c872bab05f549f7efd1eb95f334468ce599e40ea1a2d8f0836538031646f625497"
        },
        {
          "alg": "SHA-384",
          "content": "9fffd7cd604f06e58529b817df0bf017ab57771ccdc3776e2e3c72cf2004fbc09a9bf9b760993db7e135b6add16eb1f6"
        },
        {
          "alg": "SHA3-384",
          "content": "4177dcffaa33f121832ae6afe93b688f64b082f00d752f2adc8e313d8bd874bb2a0187697c09ef288d0de75ad6cd89d5"
        },
        {
          "alg": "SHA3-256",
          "content": "29bc9d192834b1db69a0dc804a610f70ced31740f36f81b79857c4c3d2f4751d"
        },
        {
          "alg": "SHA3-512",
          "content": "b3b4396e11594b070c697b1fddd2b1d7d84da1e43d4552c7ac1ed50849a663eba2de02e88a17c76eecce73b869a0e1a29c3d41d309bbe3d9449818444791ed95"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0",
            "url": "https://www.eclipse.org/legal/epl-2.0"
          }
        },
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.eclipse.jetty/jetty-io@12.1.9?type=jar",
      "externalReferences": [
        {
          "url": "https://jetty.org/jetty-core/jetty-io",
          "type": "website"
        },
        {
          "url": "https://repo.maven.apache.org/maven2",
          "type": "distribution"
        },
        {
          "url": "https://github.com/jetty/jetty.project/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://www.eclipse.org/lists/jetty-dev/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/jetty/jetty.project/jetty-core/jetty-io",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.eclipse.jetty.compression/jetty-compression-gzip@12.1.9?type=jar",
      "publisher": "Webtide",
      "group": "org.eclipse.jetty.compression",
      "name": "jetty-compression-gzip",
      "version": "12.1.9",
      "description": "Jetty Compression Gzip Artifact",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "3c95592a52488248b09dabc25c39b769"
        },
        {
          "alg": "SHA-1",
          "content": "7433139b49e24d51cf5e75102d78b3d39c43dd97"
        },
        {
          "alg": "SHA-256",
          "content": "ce9754ca916c696d26d750ae6702a8d22ec1a03b8053e5c5502d409142da87f3"
        },
        {
          "alg": "SHA-512",
          "content": "ea51180bb322c22558a26bd4bb33e7e8f50f8c09d46398c71000af741d2d9290b947a9b404b686badabc7943fff883ddb9ba6c272ee175a8c5100ab133b7dc53"
        },
        {
          "alg": "SHA-384",
          "content": "12ca06f4f5eebb88980aaa3a8f33058a77e19b7bfe13652803e5e809716a1bef233bdbdad49e22bc217af7605609b588"
        },
        {
          "alg": "SHA3-384",
          "content": "b2db1b0f4d12fabfee8d7314bfd8dd664c9c1d9816dc9cbdd04c445f55167d390da023a6d600e523a98525f87d3c64dc"
        },
        {
          "alg": "SHA3-256",
          "content": "3dbdcef6b42c4786b02ff173e944f4ebf4fa47e8314db3dca5d330240e795318"
        },
        {
          "alg": "SHA3-512",
          "content": "cd31fdd0bcf278f5ccfe6632ced4b9b839d32b1cf44fe7adf59cb2b96efcca7d17092e063e437a61935279831b66a987be5c37fb6bbfab4948adf1499fc7d400"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0",
            "url": "https://www.eclipse.org/legal/epl-2.0"
          }
        },
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.eclipse.jetty.compression/jetty-compression-gzip@12.1.9?type=jar",
      "externalReferences": [
        {
          "url": "https://jetty.org/jetty-core/jetty-compression/jetty-compression-gzip",
          "type": "website"
        },
        {
          "url": "https://repo.maven.apache.org/maven2",
          "type": "distribution"
        },
        {
          "url": "https://github.com/jetty/jetty.project/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://www.eclipse.org/lists/jetty-dev/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/jetty/jetty.project/jetty-core/jetty-compression/jetty-compression-gzip",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.eclipse.jetty.compression/jetty-compression-common@12.1.9?type=jar",
      "publisher": "Webtide",
      "group": "org.eclipse.jetty.compression",
      "name": "jetty-compression-common",
      "version": "12.1.9",
      "description": "Jetty Compression Common Artifact",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "eef60a9aa64796c32dd9ee284f43cb18"
        },
        {
          "alg": "SHA-1",
          "content": "b5d45ac4d8396a78ec879d44bec19c4efaddf60d"
        },
        {
          "alg": "SHA-256",
          "content": "0c54ab8f546235088ef8cd6552f7ed876b1d204f75d6de3ae614142338b4c934"
        },
        {
          "alg": "SHA-512",
          "content": "f5f38534072a8d08ac0e3ee68837a4d11116603554c7a31f21e6073a5b5209738443bfb4a3e8cb3e4c6397fb715322c1a4c930ff67e2581af159d9083a258a43"
        },
        {
          "alg": "SHA-384",
          "content": "7e20e040e6cabf3cdb5c9d09053ec4eb8f6afeff41a68eca54ca669e791cda8903494b5df1ab3d36dab6a12ff747ac87"
        },
        {
          "alg": "SHA3-384",
          "content": "2638ff53825049aa9978c724731a4d978888add0eeaa56a4a6e31b3ac9e4ded5194b4a714ba1e5144ca8b25d3ed44287"
        },
        {
          "alg": "SHA3-256",
          "content": "118272ca2f13ceed35330e9a3967f691e6d27f705b8a5d27d1f39ad4f109607d"
        },
        {
          "alg": "SHA3-512",
          "content": "eb938fc8a8b118df1ee237a96a171fee480b4d2df6fcfc3054d02194134492c380bf2d4afc19e097643613c1586cc1e4ffcf3ed5abd3521134635fc5cb79b0b7"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0",
            "url": "https://www.eclipse.org/legal/epl-2.0"
          }
        },
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.eclipse.jetty.compression/jetty-compression-common@12.1.9?type=jar",
      "externalReferences": [
        {
          "url": "https://jetty.org/jetty-core/jetty-compression/jetty-compression-common",
          "type": "website"
        },
        {
          "url": "https://repo.maven.apache.org/maven2",
          "type": "distribution"
        },
        {
          "url": "https://github.com/jetty/jetty.project/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://www.eclipse.org/lists/jetty-dev/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/jetty/jetty.project/jetty-core/jetty-compression/jetty-compression-common",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.eclipse.jetty.compression/jetty-compression-server@12.1.9?type=jar",
      "publisher": "Webtide",
      "group": "org.eclipse.jetty.compression",
      "name": "jetty-compression-server",
      "version": "12.1.9",
      "description": "Jetty Compression Server Artifact",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "0d0dc8548e7df7b9927bbda34b261924"
        },
        {
          "alg": "SHA-1",
          "content": "5a4de89661cc1cbd803d01bf8737ecf41cfe48f1"
        },
        {
          "alg": "SHA-256",
          "content": "0aa0fb2032b156334a13d83631fb18936154368b2a426ad2359f226bcfda7fe6"
        },
        {
          "alg": "SHA-512",
          "content": "4deda5f459f31c4840afc5f388c38a380716889a1975312c245a586f55050265b3c5c5509954b8cc95de50a9e9e34a70115f4c2513b10cb990e44a42d9956398"
        },
        {
          "alg": "SHA-384",
          "content": "77bf21423405d031b1cb0fdcf5abfe8f79630436af7eb0ac415ff3ffe25a5e8a0068099f6e8fe1ec03cda2fe49c62a11"
        },
        {
          "alg": "SHA3-384",
          "content": "3377daf3f0abeb709b80f51bdbb46876d8ea43cedfd029d425b62cd972094df75b647ee3e4b3c2f7ca10ecba5b718a9b"
        },
        {
          "alg": "SHA3-256",
          "content": "ef408cf4a802f33600054fb1758bad91fc6088247a3a7ce730a98cbbccef3753"
        },
        {
          "alg": "SHA3-512",
          "content": "8fa6824c24b03d8a0dd0f94669266868bf3ba24ce211241333c7206f84df8bd6b943bd376cc58b6322297b8fe2fa13882882416a70531e1039b9cc8ae48cda8d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0",
            "url": "https://www.eclipse.org/legal/epl-2.0"
          }
        },
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.eclipse.jetty.compression/jetty-compression-server@12.1.9?type=jar",
      "externalReferences": [
        {
          "url": "https://jetty.org/jetty-core/jetty-compression/jetty-compression-server",
          "type": "website"
        },
        {
          "url": "https://repo.maven.apache.org/maven2",
          "type": "distribution"
        },
        {
          "url": "https://github.com/jetty/jetty.project/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://www.eclipse.org/lists/jetty-dev/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/jetty/jetty.project/jetty-core/jetty-compression/jetty-compression-server",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.eclipse.jetty.ee11/jetty-ee11-servlet@12.1.9?type=jar",
      "publisher": "Webtide",
      "group": "org.eclipse.jetty.ee11",
      "name": "jetty-ee11-servlet",
      "version": "12.1.9",
      "description": "Jetty Servlet Container",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "534eecb2b7fb229c24e83a5f1b51161c"
        },
        {
          "alg": "SHA-1",
          "content": "6b6a8fec7a0681f98a0925f8d4e69265fdc977d6"
        },
        {
          "alg": "SHA-256",
          "content": "adc8811e16e3c255f291c8ef20075a4c70b1a56a1fa723eb65733f662f23e5b6"
        },
        {
          "alg": "SHA-512",
          "content": "f9bcee843a9461fdd3652786fdff64469120cf7dddb8e79bd873ca683c1b774c57f294864b7a298508237d93b52d69899b161b1eeb2afd40782e3941fb9866e4"
        },
        {
          "alg": "SHA-384",
          "content": "3f3b7219914e3f4d455df92aaac15cc13b3fbb4e56ca7288aea7dee1cafabcbb9fd164be8fc6450656c83cfe5d93f2e5"
        },
        {
          "alg": "SHA3-384",
          "content": "d8e3f79b02045519143d59b45c9d327668839ea5c87fa93dc1828a529a2d27a58868a2f29057ce9b7ff5f0d9c0a28358"
        },
        {
          "alg": "SHA3-256",
          "content": "28f746847c536aaf2c006db49d10008de52390ad6e3a54879775a9c31558230c"
        },
        {
          "alg": "SHA3-512",
          "content": "fa24b6d12f41a8a2cb84f6a59c1e24c30b8781c1f291015e87bf5d87544524fd197d1700684d3a8ebeb7b638de9e9666ae7e5f28956e83cfba31a8b6f005577e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0",
            "url": "https://www.eclipse.org/legal/epl-2.0"
          }
        },
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.eclipse.jetty.ee11/jetty-ee11-servlet@12.1.9?type=jar",
      "externalReferences": [
        {
          "url": "https://jetty.org/jetty-ee11/jetty-ee11-servlet",
          "type": "website"
        },
        {
          "url": "https://repo.maven.apache.org/maven2",
          "type": "distribution"
        },
        {
          "url": "https://github.com/jetty/jetty.project/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://www.eclipse.org/lists/jetty-dev/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/jetty/jetty.project/jetty-ee11/jetty-ee11-servlet",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.eclipse.jetty/jetty-security@12.1.9?type=jar",
      "publisher": "Webtide",
      "group": "org.eclipse.jetty",
      "name": "jetty-security",
      "version": "12.1.9",
      "description": "Jetty Server Security Artifact",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "9b5837463c49ba4d850af991b31c479b"
        },
        {
          "alg": "SHA-1",
          "content": "da8049b28929f428a3945049be0d6956f2ab5363"
        },
        {
          "alg": "SHA-256",
          "content": "00dcd3f9258d7eb41fc1c1cbcbaa33a1a47710783e30ad512816f0c051423142"
        },
        {
          "alg": "SHA-512",
          "content": "ebefa6bdec3a936f2ff2f2cc484911277caafd0f53b7e6b62ecc25b2542c113a90c3210297f2b3dd22b8afe27432c55556742862206d76cd8d8a973166b1da76"
        },
        {
          "alg": "SHA-384",
          "content": "065f1c0bc6298cdcbfab0b5a937c7d334369cf770028a049ae64589dbd342a09cb692ec0ff5483729ef1313167c668c6"
        },
        {
          "alg": "SHA3-384",
          "content": "80c297fa55f57bc9bf0ededa6d001e9e32684bada76a4030f601b586b35b77f09f16a63722cd3e58e19f150bf64ab61a"
        },
        {
          "alg": "SHA3-256",
          "content": "09703d966a29694ff55122674f02f22563d12a8d1936d8798ad9196c90aa36ef"
        },
        {
          "alg": "SHA3-512",
          "content": "90c12fef39041932ab9c2fc28d4a893da0c607501be7a49f583a2597cdca815babf4b2b6d910da94e3a428399d4b16afb5fadd776418267690a026dc1cd56508"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0",
            "url": "https://www.eclipse.org/legal/epl-2.0"
          }
        },
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.eclipse.jetty/jetty-security@12.1.9?type=jar",
      "externalReferences": [
        {
          "url": "https://jetty.org/jetty-core/jetty-security",
          "type": "website"
        },
        {
          "url": "https://repo.maven.apache.org/maven2",
          "type": "distribution"
        },
        {
          "url": "https://github.com/jetty/jetty.project/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://www.eclipse.org/lists/jetty-dev/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/jetty/jetty.project/jetty-core/jetty-security",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.eclipse.jetty/jetty-session@12.1.9?type=jar",
      "publisher": "Webtide",
      "group": "org.eclipse.jetty",
      "name": "jetty-session",
      "version": "12.1.9",
      "description": "Jetty Session Artifact",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "2c40adc4e4ec0aa38818c65a5410cbb0"
        },
        {
          "alg": "SHA-1",
          "content": "e21cde48bb64be19453015ab7d3c79c205b0edd4"
        },
        {
          "alg": "SHA-256",
          "content": "121a9c2c9ba7274d751fe3e0d5408612c95b46df2ed20910cfecced5ae7b1659"
        },
        {
          "alg": "SHA-512",
          "content": "4c3667d17d0a46ea7e04c3058a01941bda22de784d22ac6b466796040552723113b83a7ba0f7476fa11b9080d82b126aae7316382a8ab8b0fe6b9326dd142e24"
        },
        {
          "alg": "SHA-384",
          "content": "fd1424983969111a58198797ffe34fd33c4b555f5e199c2e659544ac256d45a16ab95704685cab53f7f1179758211fe8"
        },
        {
          "alg": "SHA3-384",
          "content": "5547d1fb57e55c3a9718ab8a63e815bf81ed9e6202d44502b558c5af6f7a049497d08b35ec9ad76faf60c6c085f886cb"
        },
        {
          "alg": "SHA3-256",
          "content": "224414f40005c94cbba2bea2158b8b4aabf28ca15a6c2d73fbbbe97d5cd0f2b0"
        },
        {
          "alg": "SHA3-512",
          "content": "343cbccd69e94bb5ffffa2c09a1c9108027ca2a3e2621b5a0fadf166c4d5768b7ad887dceaf57c3a35d2a7b6562d49597198fce9f2848607250de13b34dcbd03"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0",
            "url": "https://www.eclipse.org/legal/epl-2.0"
          }
        },
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.eclipse.jetty/jetty-session@12.1.9?type=jar",
      "externalReferences": [
        {
          "url": "https://jetty.org/jetty-core/jetty-session",
          "type": "website"
        },
        {
          "url": "https://repo.maven.apache.org/maven2",
          "type": "distribution"
        },
        {
          "url": "https://github.com/jetty/jetty.project/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://www.eclipse.org/lists/jetty-dev/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/jetty/jetty.project/jetty-core/jetty-session",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.slf4j/jul-to-slf4j@2.0.18?type=jar",
      "publisher": "QOS.ch",
      "group": "org.slf4j",
      "name": "jul-to-slf4j",
      "version": "2.0.18",
      "description": "JUL to SLF4J bridge",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "f339bf7648049b2105e180cab6c45c9d"
        },
        {
          "alg": "SHA-1",
          "content": "79739c98001d5c9d078d087d5a348ec9e474ec8f"
        },
        {
          "alg": "SHA-256",
          "content": "cbb7d1aaaa9e871eb1a06594abd911bf97027152976edf1edc315be75239204e"
        },
        {
          "alg": "SHA-512",
          "content": "fd6019636513f7b121d0321f0897667713e7d9a0d21f6d15c3b55d2bc804687c1d264ad3d79aa227e9712169e4d6b4d05d5d8746399e900c933ce330f1850569"
        },
        {
          "alg": "SHA-384",
          "content": "0d6d600cab9a960b2b5de8e8591fbba648c155f19c5d10d11eb4eee0572edd9670ed5a63197412bfeb9d58ce4a72259f"
        },
        {
          "alg": "SHA3-384",
          "content": "cedd50402de6b6f146b3f2b71a253a24a17b17eb7f632d555f287da572d8ee157dfd154169f3b3c9a2b2b917a2001f23"
        },
        {
          "alg": "SHA3-256",
          "content": "0c8f1bf469bbfda88c4a601408e40116eb8a27e89bb77f82f7feeee409d4b12e"
        },
        {
          "alg": "SHA3-512",
          "content": "0b25b9049a933eeadca90876ba1d499bf53779063846367870b5ef69c916b041354c33d256bdba9d4f87143d1e07dad9ec66fe502a9bba0858c23e9fca416066"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/license/mit/"
          }
        }
      ],
      "purl": "pkg:maven/org.slf4j/jul-to-slf4j@2.0.18?type=jar",
      "externalReferences": [
        {
          "url": "http://www.slf4j.org",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/qos-ch/slf4j/slf4j-parent/jul-to-slf4j",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.swagger.core.v3/swagger-annotations-jakarta@2.2.50?type=jar",
      "group": "io.swagger.core.v3",
      "name": "swagger-annotations-jakarta",
      "version": "2.2.50",
      "description": "swagger-annotations-jakarta",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "89b8ef9d76a45e676106750cff90a89f"
        },
        {
          "alg": "SHA-1",
          "content": "70163c80b74224c887a63367b34a69c877515346"
        },
        {
          "alg": "SHA-256",
          "content": "e31028d4271c8753b316523c04e426988a0a5c9baa6220d7f1ac62a00d95f481"
        },
        {
          "alg": "SHA-512",
          "content": "c522842a69476abc55452c74e0a01ede97f81c7751cee061525a31602e62863ee7c9f5b4d34f52086d730b46888ab968792f7224bcbcad3717e81ecc9f2cc790"
        },
        {
          "alg": "SHA-384",
          "content": "bc201ce700503d888a790c29e9eb94c00ab1c7e23a3101347ad1a6aad3131dafbca22c813e2cb9cd5b291fa6f5784802"
        },
        {
          "alg": "SHA3-384",
          "content": "0867f423f5a4cacdabe3e69a90c146dfd4e406bfddeaefd79669637f77ce6e3e17ef3d24a770ddfa9cff515fc5694641"
        },
        {
          "alg": "SHA3-256",
          "content": "23d0a590f752c23befd61effdfe28b9da41d1c9de5308a04c3979f956307fa78"
        },
        {
          "alg": "SHA3-512",
          "content": "442595ad57af14375b11ea70a991915c2e49da8d423ebd555cff107462e7b786537f70b43b5906a7336670fbbc0ebb5baf869adf6dc623f9eb155698ab0dafb2"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.swagger.core.v3/swagger-annotations-jakarta@2.2.50?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/swagger-api/swagger-core/modules/swagger-annotations-jakarta",
          "type": "website"
        },
        {
          "url": "https://github.com/swagger-api/swagger-core/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://groups.google.com/forum/#!forum/swagger-swaggersocket",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/swagger-api/swagger-core/modules/swagger-annotations-jakarta",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.httpcomponents/httpclient@4.5.14?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.httpcomponents",
      "name": "httpclient",
      "version": "4.5.14",
      "description": "Apache HttpComponents Client",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "2cb357c4b763f47e58af6cad47df6ba3"
        },
        {
          "alg": "SHA-1",
          "content": "1194890e6f56ec29177673f2f12d0b8e627dec98"
        },
        {
          "alg": "SHA-256",
          "content": "c8bc7e1c51a6d4ce72f40d2ebbabf1c4b68bfe76e732104b04381b493478e9d6"
        },
        {
          "alg": "SHA-512",
          "content": "a084ef30fb0a2a25397d8fab439fe68f67e294bf53153e2e1355b8df92886d40fe6abe35dc84f014245f7158e92641bcbd98019b4fbbd9e5a0db495b160b4ced"
        },
        {
          "alg": "SHA-384",
          "content": "c8ccaa1fa8ba7c421413e3c30375bd9c31284e837c476fd831e18043ad4187e92166f49554123108891241bed674b95d"
        },
        {
          "alg": "SHA3-384",
          "content": "9a17dfcf12b2af3a9b006ec369f9bc78ba322348bf1a01146e0d4f3fec2bed6cbe8b2193fac5b4d5a0c3036c06477510"
        },
        {
          "alg": "SHA3-256",
          "content": "48f0a61b691e22dec9d6db8e0b58be4ca17a42a2846c82f0875de21f72bb0faa"
        },
        {
          "alg": "SHA3-512",
          "content": "4ad2c9adc761b7e813330f0dcad3f9978702896c7d0cbf81f60a472d550e320b1527be425ba597c8c9352d587e32e1d46ceb4c73e99c70a6190df4c699a7c2a9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.httpcomponents/httpclient@4.5.14?type=jar",
      "externalReferences": [
        {
          "url": "http://hc.apache.org/httpcomponents-client-ga",
          "type": "website"
        },
        {
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2",
          "type": "distribution"
        },
        {
          "url": "http://issues.apache.org/jira/browse/HTTPCLIENT",
          "type": "issue-tracker"
        },
        {
          "url": "http://mail-archives.apache.org/mod_mbox/hc-httpclient-users/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/apache/httpcomponents-client/tree/4.5.14/httpclient",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/commons-logging/commons-logging@1.2?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "commons-logging",
      "name": "commons-logging",
      "version": "1.2",
      "description": "Apache Commons Logging is a thin adapter allowing configurable bridging to other, well known logging systems.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "040b4b4d8eac886f6b4a2a3bd2f31b00"
        },
        {
          "alg": "SHA-1",
          "content": "4bfc12adfe4842bf07b657f0369c4cb522955686"
        },
        {
          "alg": "SHA-256",
          "content": "daddea1ea0be0f56978ab3006b8ac92834afeefbd9b7e4e6316fca57df0fa636"
        },
        {
          "alg": "SHA-512",
          "content": "ed00dbfabd9ae00efa26dd400983601d076fe36408b7d6520084b447e5d1fa527ce65bd6afdcb58506c3a808323d28e88f26cb99c6f5db9ff64f6525ecdfa557"
        },
        {
          "alg": "SHA-384",
          "content": "ac20720d7156131478205f1b454395abf84cfc8da2f163301af32f63bd3c4764bd26cb54ed53800f33193ae591f3ce9c"
        },
        {
          "alg": "SHA3-384",
          "content": "628eb4407e95dca84da1a06b08a6d9b832a49de8472b1b217e8607f08efeeed18b996232d64dd07f03e78e0e3bb4b078"
        },
        {
          "alg": "SHA3-256",
          "content": "9aab62deccf156ee6e324c925dfc30ecb53e8465802863a551901a461424e807"
        },
        {
          "alg": "SHA3-512",
          "content": "3fd76857f6d20c03799537cc961c1c4ddf1c375c6c192fb982363e3b9397ba138b77f24ef38b4202f44e37586789c0320e4de18fdadd2772304fd14a9b26d552"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/commons-logging/commons-logging@1.2?type=jar",
      "externalReferences": [
        {
          "url": "http://commons.apache.org/proper/commons-logging/",
          "type": "website"
        },
        {
          "url": "https://continuum-ci.apache.org/",
          "type": "build-system"
        },
        {
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2",
          "type": "distribution"
        },
        {
          "url": "http://issues.apache.org/jira/browse/LOGGING",
          "type": "issue-tracker"
        },
        {
          "url": "http://mail-archives.apache.org/mod_mbox/commons-user/",
          "type": "mailing-list"
        },
        {
          "url": "http://svn.apache.org/repos/asf/commons/proper/logging/trunk",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.21.3?type=jar",
      "publisher": "FasterXML",
      "group": "com.fasterxml.jackson.datatype",
      "name": "jackson-datatype-jsr310",
      "version": "2.21.3",
      "description": "Add-on module to support JSR-310 (Java 8 Date \u0026 Time API) data types.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "307bd11fde09b891e4c9d99b82e9dc3a"
        },
        {
          "alg": "SHA-1",
          "content": "a0958ebdaba836d31e5462ebc37b6349a0725ff9"
        },
        {
          "alg": "SHA-256",
          "content": "c6f721d6ea16f5557567a476069f7c08c598ff8f02766f229b45fe1e87139a20"
        },
        {
          "alg": "SHA-512",
          "content": "b8f37ae5fed1516dcc0ea2e8b7ab8d1a46b9348cc5edbb047c253c7efec16be283ad45734104634d932c3d1377e9cfad6d2933573825699f2bddc03d605197b8"
        },
        {
          "alg": "SHA-384",
          "content": "1a4a5d4813b3112131c0bdeb79fc92b5c617107206f352a2129e3b072853353ad4514cbc6751ad0374d0cc1607e09543"
        },
        {
          "alg": "SHA3-384",
          "content": "820b992bcaedc879bf519eafb06d081875efe0bb6d77022dadc3a6447f8f42bb02093549a7ae979bf5c20529e743ef4b"
        },
        {
          "alg": "SHA3-256",
          "content": "5a7dac689d0a57a807dcdc0c9652e748ee2424de8fcd599186c4ac2da70c1fb1"
        },
        {
          "alg": "SHA3-512",
          "content": "7afc3468f40ad0ca1416d76ac2b61c81cc68ca24699b24d42aa94eaa5d009b0d5c8517f435c19a857c983b01561e6a3663709ea067236c9bdbc228a4782336a7"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.21.3?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/FasterXML/jackson-modules-java8/jackson-datatype-jsr310",
          "type": "website"
        },
        {
          "url": "https://central.sonatype.com/api/v1/publisher",
          "type": "distribution"
        },
        {
          "url": "https://github.com/FasterXML/jackson-modules-java8/issues",
          "type": "issue-tracker"
        },
        {
          "url": "http://github.com/FasterXML/jackson-modules-java8/jackson-datatype-jsr310",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.github.package-url/packageurl-java@1.5.0?type=jar",
      "group": "com.github.package-url",
      "name": "packageurl-java",
      "version": "1.5.0",
      "description": "The official Java implementation of the PackageURL specification. PackageURL (purl) is a minimal specification for describing a package via a \u0022mostly universal\u0022 URL.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "90856d8bb5b17e08fdf03b6a2f93b81c"
        },
        {
          "alg": "SHA-1",
          "content": "e6bf530f52feab911f4032604ca0b8216f7ff337"
        },
        {
          "alg": "SHA-256",
          "content": "e45551727707acc0c56ac62d56964332ea0f138d6cc3656d988b9369150f5247"
        },
        {
          "alg": "SHA-512",
          "content": "8064df400154caa110b8845bd17e6cea2683307e575ce88e40d7c0c8965ea0af6c150a376d8b9ba7354676c41b52c94535f30c6e830447613299ccf5fc7aa959"
        },
        {
          "alg": "SHA-384",
          "content": "0597100022f72e020c9d929bf57ecef91af7574610fb03b4019feba4b25f491a076f03577be2009e66d9001c4c0f8ab0"
        },
        {
          "alg": "SHA3-384",
          "content": "bbdd55a31a4755ef589bcb176283fe03e3c9089d315eab577fef3a9c2d02e632c6ac3fdebbc90a2f0f8ed7974b9f397c"
        },
        {
          "alg": "SHA3-256",
          "content": "c9881b69bde35ea6ff4006877b9fbf91462f911b5b142aa699a45a00867d413a"
        },
        {
          "alg": "SHA3-512",
          "content": "2b9caf58deef687a9bf01abd61a7af4abdb61247a8a966683a18157ee948f1ea424602598dc8f665bf24f7e1e516866298ef0507e9d697cb20dcf60eff2095ca"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/license/mit/"
          }
        }
      ],
      "purl": "pkg:maven/com.github.package-url/packageurl-java@1.5.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/package-url/packageurl-java",
          "type": "website"
        },
        {
          "url": "https://travis-ci.com/package-url/packageurl-java",
          "type": "build-system"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/package-url/packageurl-java/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/package-url/packageurl-java.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.asahaf.javacron/javacron@1.4.0?type=jar",
      "group": "com.asahaf.javacron",
      "name": "javacron",
      "version": "1.4.0",
      "description": "A java library for parsing crontab expressions and calculating the next run time",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "5129700c6b2af8e972d52829faae173c"
        },
        {
          "alg": "SHA-1",
          "content": "2291bf1f0996c6ba0dbe6783aa8a473f09cec3d9"
        },
        {
          "alg": "SHA-256",
          "content": "c1866f1c6dc28cec113c3388101d4d0a3816cb3a9025c07d2e71f668a2845538"
        },
        {
          "alg": "SHA-512",
          "content": "b64c450770445f349f2e76f696ed5599ea87c32d5006818122e59b412792a4d71b19a7c13ecbee3b5dbf86dfb0b7350cb1e32615bd5d910e2839e165dcd9b5ca"
        },
        {
          "alg": "SHA-384",
          "content": "0f66c5ddf22ebc720cd2b765c45c639843a00a882e2d19c89e562c564878a5d40a374d491cdff275187156c2dd464724"
        },
        {
          "alg": "SHA3-384",
          "content": "a854ed19a5cf790abd511f309a1674d1050c94567fce257da250de541a63215f78aa7629d6fe53ec1291c59011f3922e"
        },
        {
          "alg": "SHA3-256",
          "content": "a9b1643fdf1d81eab85d8cdc51d02f77dd36860c04f2d0ff717ebddb9cee5b3e"
        },
        {
          "alg": "SHA3-512",
          "content": "8f860b34f901cb5b3feb74037cbe852f5723256c8f5c44c25bb34cda5148fc511a240b9c0f34cd934d3843d55960a3600dd95ba7b0ae0fde5af569ce232ae645"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/license/mit/"
          }
        }
      ],
      "purl": "pkg:maven/com.asahaf.javacron/javacron@1.4.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/asahaf/javacron",
          "type": "website"
        },
        {
          "url": "https://github.com/asahaf/javacron",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.micrometer/micrometer-java11@1.16.5?type=jar",
      "group": "io.micrometer",
      "name": "micrometer-java11",
      "version": "1.16.5",
      "description": "Micrometer core classes that require Java 11",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "02b3ed5b4b18575ca44d7b6657912d23"
        },
        {
          "alg": "SHA-1",
          "content": "87bd7ec1f4c60cffad9f908ffe7348c4574604bd"
        },
        {
          "alg": "SHA-256",
          "content": "b79008266b2151244fdf5b175b736da80e16d400a770ce78e7fdbf8cd0878b16"
        },
        {
          "alg": "SHA-512",
          "content": "cb1a325d4c1f2f11f7ce78a1151cf0f41658f93e89387e8eb772b3466f7284ef07ebaada1d51570650ec48743485fef92bff63d0289fc4655e3d4aa3592afa09"
        },
        {
          "alg": "SHA-384",
          "content": "e27368ffa9d13f08641ee38454dfc2c60f761311dd5f3aa62473376bf6ea0ac8ff6e77a98b9b79bf72ef8535a64a3ff4"
        },
        {
          "alg": "SHA3-384",
          "content": "182df91fc62d7700b888ee0c0f71c2471869911416e1ad183c9ddffa8795650a10b99222129a19f5352496a095ac02c2"
        },
        {
          "alg": "SHA3-256",
          "content": "f5ab8b3f2d1b7ac744d69fd5d1bc0710cc0843b18505a98679a3c6959950525a"
        },
        {
          "alg": "SHA3-512",
          "content": "3fce1f681f207471226156378a65978a24ccebc5298dc423d7f20c4906b27a28777691076704a419c206db1ca0241d2eeaa89ff58d6b6ed2f3b9e8afab5e6e4c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.micrometer/micrometer-java11@1.16.5?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/micrometer-metrics/micrometer",
          "type": "website"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.micrometer/micrometer-registry-prometheus@1.16.5?type=jar",
      "group": "io.micrometer",
      "name": "micrometer-registry-prometheus",
      "version": "1.16.5",
      "description": "MeterRegistry implementation for Prometheus using io.prometheus:prometheus-metrics-core. If you have compatibility issues with this module, you can go back to io.micrometer:micrometer-registry-prometheus-simpleclient that uses io.prometheus:simpleclient_common.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "c8891265c7cf404435627fd58c3c6e26"
        },
        {
          "alg": "SHA-1",
          "content": "cde72d1c305727e20397170a8c46c2fa88c12e9e"
        },
        {
          "alg": "SHA-256",
          "content": "c8ee6627baa1458a625eee3aaf000555cb4af37935d0b8c36b1ec0cc3dd31bab"
        },
        {
          "alg": "SHA-512",
          "content": "53cda336f70ce7f0877a8fa7eb95b58809d608a714fee8c806507c9171fa052071ffdc95a8f2a67b764cb503ba19bfb8164c814ae342140267593e30c9d937f4"
        },
        {
          "alg": "SHA-384",
          "content": "3fdc8c84600728dda0ad4ecf9fdbac6427164ddd3bbd4b3234b54d6986a5f12d9cd98452436d9cacdfb41a215214b89a"
        },
        {
          "alg": "SHA3-384",
          "content": "b995fc6b3f8b88bc20156297dae965a93d2536df42a9bc7747ee10b5b74d7fb5cd71ace4764b66892bdda9874210c296"
        },
        {
          "alg": "SHA3-256",
          "content": "9790d44e7fdbe8a1aea2192782f94c52a06ee45628fc481db1054ead462ba9ac"
        },
        {
          "alg": "SHA3-512",
          "content": "9c0ca499324cbc6a45e6032c18129190c3c80e56eb5222a782ce4ce80a479d8d80698289af685eadd3d5954ae4f27bfb4b530e5590ac932f6090b1739785a094"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.micrometer/micrometer-registry-prometheus@1.16.5?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/micrometer-metrics/micrometer",
          "type": "website"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.prometheus/prometheus-metrics-core@1.6.1?type=jar",
      "group": "io.prometheus",
      "name": "prometheus-metrics-core",
      "version": "1.6.1",
      "description": "Core Prometheus metric types",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "8d61d62a57454c761c5893b5961417d3"
        },
        {
          "alg": "SHA-1",
          "content": "0ab30b3530abb5fc3761a4f1cca820bbb47345ca"
        },
        {
          "alg": "SHA-256",
          "content": "ce22ed0d82a79451876b8d5c600b3b14100d95846ef7d647a3189543fa648f59"
        },
        {
          "alg": "SHA-512",
          "content": "47ce685ead110e1bd5d539a295d015e0a3f1b5a7cdf8637e8ebb743a76afae5b10f086170058eccb7f5b8497b74789e8f97e6717265ee6175475597451c9d1f0"
        },
        {
          "alg": "SHA-384",
          "content": "256309e1f7a4ff37025370c9fb8f5598b7bc19b37551d0a6592b338ca878693f0db5f5b5c8f4afa187949c72884f985c"
        },
        {
          "alg": "SHA3-384",
          "content": "42fefc99d1a4cd55a7aeed4c166c6662e384cb24691984c96377770c34731b98bc4695ca8dc3d02ca6f2f4d30feeca5c"
        },
        {
          "alg": "SHA3-256",
          "content": "bc4fde8b36ab54591ef2769232690c3355e11481265d047d260913c96c2f71d1"
        },
        {
          "alg": "SHA3-512",
          "content": "0f5fd87d98559e2d1c95e0baf2229fb1f542bb6ddd23752e8014e39e5c246216ee691115a90f38f7e2b3c0a1d2f35b2e53d09f8412a6a56f2519ec1a69b61de2"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.prometheus/prometheus-metrics-core@1.6.1?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/prometheus/client_java/client_java/prometheus-metrics-core",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.prometheus/prometheus-metrics-tracer-common@1.6.1?type=jar",
      "group": "io.prometheus",
      "name": "prometheus-metrics-tracer-common",
      "version": "1.6.1",
      "description": "Common Module for Prometheus integrations with distributed tracing libraries.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "f2c137b72d71a46b50d5504176a4970f"
        },
        {
          "alg": "SHA-1",
          "content": "39c53d67fb9e35cd6f9ee4de75c2b1cdb8821e1f"
        },
        {
          "alg": "SHA-256",
          "content": "1b8688e02aa00bf49824f424c8ce379c4597e635ad6cfdef81a9d670a45d04ed"
        },
        {
          "alg": "SHA-512",
          "content": "8d04ab38d19ad0bf01bf14eb5bb351349d8d887f86d6223d22afa313ba73d93d3b1543c1ff06ed38e6704f5c6d01cdc101d75b2a95f921c5cb314960e5c5e879"
        },
        {
          "alg": "SHA-384",
          "content": "f417f3395ceee0aa0b585f263d648a01f9cba0186aae339b2e72234dd6da527abf10c39c3751205fbdb5277d0e615d28"
        },
        {
          "alg": "SHA3-384",
          "content": "23c55d880e129bcd56c8c23bbee5d0684aee96e7c1da6282810e33e76c825ad8a31197cea0bba3426bef84480cc2200d"
        },
        {
          "alg": "SHA3-256",
          "content": "a7b8e32d087616ebb26dc8c3a5905ee391e80b61b6b4536c8d811b7710cff93b"
        },
        {
          "alg": "SHA3-512",
          "content": "2e104dc3e8e636e67b5a45e32df25fc4ec492d53289070d6c3a9146135cc9b19f303f8f15286c9ab5fbebc945455e7ede1e27a363c3e7f4823f730c57be18410"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.prometheus/prometheus-metrics-tracer-common@1.6.1?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/prometheus/client_java/client_java/prometheus-metrics-tracer/prometheus-metrics-tracer-common",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.prometheus/prometheus-metrics-exposition-formats@1.6.1?type=jar",
      "group": "io.prometheus",
      "name": "prometheus-metrics-exposition-formats",
      "version": "1.6.1",
      "description": "Prometheus exposition formats.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "3b55ec3e09c0e92af9b0023af112a312"
        },
        {
          "alg": "SHA-1",
          "content": "0d6886b9d45b126b37215bbaffa2598c187f95b2"
        },
        {
          "alg": "SHA-256",
          "content": "75a2581eb831e22b3df9da5345ab266e0632dab9ed050ef44de6968d135edede"
        },
        {
          "alg": "SHA-512",
          "content": "5bc3249cbb103a5c01474e9645fffd65ae0d70bd6035ea7c0ee5592785e43727498e8be91cfa0c41c25ed08213a965df8d799d010dd4bfcd92b7d91f2aadaf2b"
        },
        {
          "alg": "SHA-384",
          "content": "82f8eeda223e9e5db150104afa3b62c28764539179573e281a62973f4d1dc27c0b95e916947d862b6d2ad056a9a67ca5"
        },
        {
          "alg": "SHA3-384",
          "content": "ef649a4ee47c5102630543da63c4deaf857c5264c375a0e912c78987e81f7cc9465b8fe1b939371dd58250ec3273ffe5"
        },
        {
          "alg": "SHA3-256",
          "content": "6e243905555fffbc348a571a23f1a6c89bc7650aa7efd5c05b52bbc6213004da"
        },
        {
          "alg": "SHA3-512",
          "content": "efb967fc95c9a48eb3ecf157f21521b1ed7fbd543d2f393da112bdf60cc5220365cf1e40b45c8c4bb7c8754cc5b53c83e91531d4ed7ff5309f5e831a4e028ffd"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.prometheus/prometheus-metrics-exposition-formats@1.6.1?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/prometheus/client_java/client_java/prometheus-metrics-exposition-formats",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.prometheus/prometheus-metrics-exposition-textformats@1.6.1?type=jar",
      "group": "io.prometheus",
      "name": "prometheus-metrics-exposition-textformats",
      "version": "1.6.1",
      "description": "Prometheus exposition text formats.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "4234f154932b99f3fd6d357a22472562"
        },
        {
          "alg": "SHA-1",
          "content": "606b727a9cb02a162a8418d96b788430c3037e44"
        },
        {
          "alg": "SHA-256",
          "content": "22b23c4a74a72e2b317ac378adfa917137934b898d6c3ba9d32697abe5484477"
        },
        {
          "alg": "SHA-512",
          "content": "c4d2d47902fcc35603011a27f830455ce65901acfb67788cd004ec51d9ced4fa9e2c0f87ae73099f17e8ff16e3d2f6add84557ab91dce339eaadab5d0089b102"
        },
        {
          "alg": "SHA-384",
          "content": "294755712eb71eb4488271c8bc7c77905353a84b7aa19eaf6b1f5e3be6c8fd2c526e5d9bf90bdfb4096d8c88b788f70f"
        },
        {
          "alg": "SHA3-384",
          "content": "f133c18a895874a55ce756467653aacf46aca789b7f40e5cf7c3ac1b94341b56cfb60f732465136e5c313086431830e4"
        },
        {
          "alg": "SHA3-256",
          "content": "040dd54a293e0d9ffbb04a340103e292d18c50662411cc2c5309a92eb6f3e5a0"
        },
        {
          "alg": "SHA3-512",
          "content": "532b6307622f37873e1991d75038d11d64a8fe529fa310fa36a775b650ee6cd647bab5d313740e6c0c64861feeba483379653dfd003c8b896aa9c1870ba48226"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.prometheus/prometheus-metrics-exposition-textformats@1.6.1?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/prometheus/client_java/client_java/prometheus-metrics-exposition-textformats",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.prometheus/prometheus-metrics-model@1.6.1?type=jar",
      "group": "io.prometheus",
      "name": "prometheus-metrics-model",
      "version": "1.6.1",
      "description": "Data model for read-only immutable Prometheus metrics snapshots.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "69c49c7e39a124a570da372ec92edff1"
        },
        {
          "alg": "SHA-1",
          "content": "72825c7aa87dc98b140d6d5dd45b5f22bbb00878"
        },
        {
          "alg": "SHA-256",
          "content": "b2814fc72a1851f57cf4a6babdb47dcfd0095682d6d8a683606027344121b3b5"
        },
        {
          "alg": "SHA-512",
          "content": "25e18fdf12998927b69918f202538849c1328842d90f2cdcaf8e5d51f447b90f1b02688c31764ee9f170031112ac1dbe7325bce7c6ac34beb3a64223355dd7cc"
        },
        {
          "alg": "SHA-384",
          "content": "94dfce1f0d66aa888da225a2e770a5820191ccb6792eae1c198bfda09bc41f63c8a72366877081f848b3d07009408b5a"
        },
        {
          "alg": "SHA3-384",
          "content": "44730fc21bddd202fb6de2d6690afdce9e2904f03e372ed37c288e02880ed07faf2f7f527c15574f12a45707984f5839"
        },
        {
          "alg": "SHA3-256",
          "content": "4b6ce67ace6417a6d5ce11912c603f1c328efcf1ee6bd72e9545e4ddd58d47bf"
        },
        {
          "alg": "SHA3-512",
          "content": "c2734e6231fa6a477e5ee5e2c81ddf5b440fd5d43fcde10efdf9bc7c18be4a65fc6538d68d2c791397a955d9aa72fdb09c561ec870dcc5eacb58ade34aadb401"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.prometheus/prometheus-metrics-model@1.6.1?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/prometheus/client_java/client_java/prometheus-metrics-model",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.prometheus/prometheus-metrics-config@1.6.1?type=jar",
      "group": "io.prometheus",
      "name": "prometheus-metrics-config",
      "version": "1.6.1",
      "description": "Configuration for Prometheus metrics and exposition formats.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "ba8208dd5ed196e4821f1e218a170739"
        },
        {
          "alg": "SHA-1",
          "content": "ab47af126e8e2f933d790dfa62beb5825e7576a6"
        },
        {
          "alg": "SHA-256",
          "content": "1c24880b2bbc1a408b5038d85056407fde330d8c0d863cf3631e3743fca4904d"
        },
        {
          "alg": "SHA-512",
          "content": "13fd3229c4503097df2a4c39e67f3ae23da553d3466829de8470d3525136738e43fc681392da9b14fa4e322d0121d1a48bf2138de0a831aabd0af69a01be1990"
        },
        {
          "alg": "SHA-384",
          "content": "ed603c7db40463410824fa963ab7dba6e10d5bf289644b62b2fd6ade2ce2117c0784568af705399f169a360af96be17c"
        },
        {
          "alg": "SHA3-384",
          "content": "ce1a9ed3fa67961dd0f12d15d87beb59f16ed0f4fa15b09a10f621691b7fcc0d00f97351ef3061295c72ac1b9fa30dc6"
        },
        {
          "alg": "SHA3-256",
          "content": "31afefe3aec3826c10ae7b935bf6b416521c5093378d51c4213eb06576d432a1"
        },
        {
          "alg": "SHA3-512",
          "content": "19c95e7afc3645f29f680fda09e7466e42724a1f36ed0cefd78ccbaf085e45c9f73d986ca299960022cc36c9784d1ce706a08831054d7d8259329b89ce9185fa"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.prometheus/prometheus-metrics-config@1.6.1?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/prometheus/client_java/client_java/prometheus-metrics-config",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.github.mweirauch/micrometer-jvm-extras@0.3.0?type=jar",
      "group": "io.github.mweirauch",
      "name": "micrometer-jvm-extras",
      "version": "0.3.0",
      "description": "A set of additional JVM process metrics for micrometer.io.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "c63df9d0f3a3f2297052741dfd275e94"
        },
        {
          "alg": "SHA-1",
          "content": "86fce8e8a3bffaa50f87e5d67427419b7b5c72d3"
        },
        {
          "alg": "SHA-256",
          "content": "9e9699ddddf1d1be033eb99ac2b7b4a2f2213b7ce2ad946b13e943990e8bf223"
        },
        {
          "alg": "SHA-512",
          "content": "d71d7ea0868c7d55ab0c0f668d5461ff4b27e36ebe60c12036a652690ca12d701f941fa44f075c8ad3bf0e10a7706c90fa42db378b99df6a2594f050fbe8f054"
        },
        {
          "alg": "SHA-384",
          "content": "36353c016cb1be7637eb202b60bfa2a2eb2044506e8f5855eedae96c1e1f610dcdf1ca0539b81e99d39844b6c4b2b2d5"
        },
        {
          "alg": "SHA3-384",
          "content": "2067d2f63917f8cfde473c081ccf8b5d0ff7428ad0904d2649b65822e6d3de1e96c29b4956f445c34319de522af8a87a"
        },
        {
          "alg": "SHA3-256",
          "content": "c7131c9c0dcc8fc90e60e5ea5b9ca94844c391fb9afc83ac9cce2f0296caf3b9"
        },
        {
          "alg": "SHA3-512",
          "content": "bc5e6b0ee1c4ab411114585b8bd26fc19a9c14861811bdea97b83c02bc4ae17498cbbd9d7198e9b3c23040d566a41f1500a0980d63847fe85b5cf0bdd357f1b5"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.github.mweirauch/micrometer-jvm-extras@0.3.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/mweirauch/micrometer-jvm-extras",
          "type": "website"
        },
        {
          "url": "https://github.com/mweirauch/micrometer-jvm-extras",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.pebbletemplates/pebble@4.1.1?type=jar",
      "group": "io.pebbletemplates",
      "name": "pebble",
      "version": "4.1.1",
      "description": "Templating engine for Java.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "155784323535e68cf19ed52a491c5301"
        },
        {
          "alg": "SHA-1",
          "content": "3ef33f88360ab0c54e201933e59a490547e2834c"
        },
        {
          "alg": "SHA-256",
          "content": "3b1ceff69a50cefa135c71e88f69f305a370c2460e15e97cd7572ddb37824b47"
        },
        {
          "alg": "SHA-512",
          "content": "793534b0fafd57783380817e15d454a08c5e5a23c79d3c78b171ea1fe197fe0032c77b8238455fc35cf70089442fe00307d156756b43c0dbc9a9e91f76f562bb"
        },
        {
          "alg": "SHA-384",
          "content": "96d08cface1df37f816ca732124fd268c7411fe012b24878b8473e1e8ae32e323591fb7b30c4cdebb125d134952282d9"
        },
        {
          "alg": "SHA3-384",
          "content": "234931563517965d90ab790f1ad3ca974e77e24903d8464493798713f11f948ab61005517594bcf1a646ea7971c8684a"
        },
        {
          "alg": "SHA3-256",
          "content": "d8cdcab93c52712909bd58b616ed0b9f721a2b70b36fa1dba1f9dc453d86efba"
        },
        {
          "alg": "SHA3-512",
          "content": "6bf62672dab917ce94206d5f3e7111828900d4241ffd898251b536095e87c0128a02b6f114eeea7458620fb8c206658ff6de10dd87ca6094700504a8c82c6be1"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/io.pebbletemplates/pebble@4.1.1?type=jar",
      "externalReferences": [
        {
          "url": "http://pebbletemplates.io",
          "type": "website"
        },
        {
          "url": "https://github.com/PebbleTemplates/pebble.git/pebble",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.unbescape/unbescape@1.1.6.RELEASE?type=jar",
      "publisher": "The UNBESCAPE team",
      "group": "org.unbescape",
      "name": "unbescape",
      "version": "1.1.6.RELEASE",
      "description": "Advanced yet easy-to-use escape/unescape library for Java",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "d95ed94e1624e307a1958ee105ccbf39"
        },
        {
          "alg": "SHA-1",
          "content": "7b90360afb2b860e09e8347112800d12c12b2a13"
        },
        {
          "alg": "SHA-256",
          "content": "597cf87d5b1a4f385b9d1cec974b7b483abb3ee85fc5b3f8b62af8e4bec95c2c"
        },
        {
          "alg": "SHA-512",
          "content": "6918e9579b06721942fdcd91e401f5b996fb4eac13056dbafdf594661f355a34874eb5266784bc2c4f82df9fdd9e219d71a96f52945a354f01665f85f8166bb3"
        },
        {
          "alg": "SHA-384",
          "content": "1b808b67c784b69afea64364ba4c0d433c7f042c512f5c18f07d5388fe7ac4741913f696424bd8fbde147383cfb3d8f9"
        },
        {
          "alg": "SHA3-384",
          "content": "6525bd20a12ff43a0089c0d59369574ae6c01e2b4b1aacf466847d4433ae403db08404a9b59be397c3034f972bcd6b06"
        },
        {
          "alg": "SHA3-256",
          "content": "a190c9bedccff959d08db12fe7080437fb4e98f05516b39d6540be718e151cc6"
        },
        {
          "alg": "SHA3-512",
          "content": "5d7b5edc0c2a0d47c9625936c14b4122330b96cdf54260fe2a6468289c2f4cbc4ee19770c1144acfa702f2f058a81544b4aea9258fe0e15166a1a331736d7b77"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.unbescape/unbescape@1.1.6.RELEASE?type=jar",
      "externalReferences": [
        {
          "url": "http://www.unbescape.org",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2",
          "type": "distribution"
        },
        {
          "url": "scm:git:git@github.com:unbescape/unbescape.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.protobuf/protobuf-java-util@4.35.0?type=jar",
      "group": "com.google.protobuf",
      "name": "protobuf-java-util",
      "version": "4.35.0",
      "description": "Utilities for Protocol Buffers",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "7d3bb7d81eef1a8dfdb12227c169f42f"
        },
        {
          "alg": "SHA-1",
          "content": "d83c7e6716d9d3a1893f4c978c84e5220cb1d751"
        },
        {
          "alg": "SHA-256",
          "content": "1153aadc409482ac094727e8ed4f641aebc87a68e6d6f96cd602acd837c1846d"
        },
        {
          "alg": "SHA-512",
          "content": "194b38f13fa630f920166e81168689a023507df14c51bf5358b00c7e5b10cd326c14a9e63824661e6e278ecb17ecd82f33f687c6b8df7af826bce8cb76208481"
        },
        {
          "alg": "SHA-384",
          "content": "f2b00abc27ab02494f6907ebd9ea823ca0d17fe590c866daa0e2bf1667a03f0d4fce3db8ce76119bdb7d54cb28b2cdef"
        },
        {
          "alg": "SHA3-384",
          "content": "a512eaf126043af761be01da5018f06ee9e203342d650007194030ef945d1845b9af0d3c58c40007034a691b0d786770"
        },
        {
          "alg": "SHA3-256",
          "content": "c723d8963a38b8bed67cc9d9e53025bb2a6173124b5ee0ef85d11c195c0847c3"
        },
        {
          "alg": "SHA3-512",
          "content": "0970ec27d27456546cacc91eae1a3f9ef49169ad608c5153d9efb9934d249f9240e22d31ad4dc8a072b7e7aba34fe8b4c54294feb03b85e31a7aa96603b8b39a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/com.google.protobuf/protobuf-java-util@4.35.0?type=jar",
      "externalReferences": [
        {
          "url": "https://developers.google.com/protocol-buffers/protobuf-java-util/",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/protocolbuffers/protobuf/protobuf-java-util",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
      "group": "com.google.code.findbugs",
      "name": "jsr305",
      "version": "3.0.2",
      "description": "JSR305 Annotations for Findbugs",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "dd83accb899363c32b07d7a1b2e4ce40"
        },
        {
          "alg": "SHA-1",
          "content": "25ea2e8b0c338a877313bd4672d3fe056ea78f0d"
        },
        {
          "alg": "SHA-256",
          "content": "766ad2a0783f2687962c8ad74ceecc38a28b9f72a2d085ee438b7813e928d0c7"
        },
        {
          "alg": "SHA-512",
          "content": "bb09db62919a50fa5b55906013be6ca4fc7acb2e87455fac5eaf9ede2e41ce8bbafc0e5a385a561264ea4cd71bbbd3ef5a45e02d63277a201d06a0ae1636f804"
        },
        {
          "alg": "SHA-384",
          "content": "ca0b169d3eb2d0922dc031133a021f861a043bb3e405a88728215fd6ff00fa52fdc7347842dcc2031472e3726164bdc4"
        },
        {
          "alg": "SHA3-384",
          "content": "9903fd7505218999f8262efedb3d935d64bcef84aae781064ab5e1b24755466b269517cada562fa140cd1d417ede57a1"
        },
        {
          "alg": "SHA3-256",
          "content": "223fda9a89a461afaae73b177a2dc20ed4a90f2f8757f5c65f3241b0510f00ff"
        },
        {
          "alg": "SHA3-512",
          "content": "3996b5af57a5d5c6a0cd62b11773360fb051dd86a2ba968476806a2a5d32049b82d69a24a3c694e8fe4d735be6a28e41000cc500cc2a9fb577e058045855d2d6"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
      "externalReferences": [
        {
          "url": "http://findbugs.sourceforge.net/",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://code.google.com/p/jsr-305/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.code.gson/gson@2.8.9?type=jar",
      "group": "com.google.code.gson",
      "name": "gson",
      "version": "2.8.9",
      "description": "Gson JSON library",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "e67627f67e03301092dc7de0a2d7cef8"
        },
        {
          "alg": "SHA-1",
          "content": "8a432c1d6825781e21a02db2e2c33c5fde2833b9"
        },
        {
          "alg": "SHA-256",
          "content": "d3999291855de495c94c743761b8ab5176cfeabe281a5ab0d8e8d45326fd703e"
        },
        {
          "alg": "SHA-512",
          "content": "46501e4dd34c9a6f33ff63aeeec45b049579365c5273490e5dfd5ea4effaeced907d0fc728204c619aa136e867ad826204582ff9ba3080d06693c1c675c8473f"
        },
        {
          "alg": "SHA-384",
          "content": "2f2897912784595e52d3f8e57741aed7dd866f16a69562d57e0604d85e2fef08b2a32e58afd00d264f66cc6ec775dc79"
        },
        {
          "alg": "SHA3-384",
          "content": "3ce084f79191afdbdb0a9aa83073b128f620cf585b65c2e81ba98080fd91e9f327db3f0952903094b7dd387bc802b5ba"
        },
        {
          "alg": "SHA3-256",
          "content": "e82ae9fa3a783ee683880d219ab529bb3d0b45ea721d002ee948fad99a67b4f0"
        },
        {
          "alg": "SHA3-512",
          "content": "25cfe43039c6d41344434f89e9a8ad6f93a341512baf93e894a14a9dfd3af1cb0f0afaed4ade6db3c719f910fd9dfbeb7bec8bcfd7f49ac572ab217bce9e595e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.code.gson/gson@2.8.9?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/google/gson/gson",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/google/gson/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/google/gson/gson/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0?type=jar",
      "publisher": "Google LLC",
      "group": "com.google.errorprone",
      "name": "error_prone_annotations",
      "version": "2.18.0",
      "description": "Error Prone is a static analysis tool for Java that catches common programming mistakes at compile-time.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "64145d0e7fee5a69ed7b84cf402de998"
        },
        {
          "alg": "SHA-1",
          "content": "89b684257096f548fa39a7df9fdaa409d4d4df91"
        },
        {
          "alg": "SHA-256",
          "content": "9e6814cb71816988a4fd1b07a993a8f21bb7058d522c162b1de849e19bea54ae"
        },
        {
          "alg": "SHA-512",
          "content": "3cea86be94bb8ae40d21ad4bf7d7f6b2233e89593b7b741ad84c78840cd3837bb5136f52e62fe9ae0953d7b190c46ad3edc102dfa97b4c7ea472a80206bf5db7"
        },
        {
          "alg": "SHA-384",
          "content": "7622eb33f83f03ab32b710b36c2fe836e24c5318f65fb8c0631a99507ca3ae65c2df8e33b63a5ce853b9cab6d9cb32e5"
        },
        {
          "alg": "SHA3-384",
          "content": "1ea52a5ce2a9ee1a960dc2a1bbe4b009d4d6a4448498e4cd76401605fa877662911e8c93b2b8bfda57bedc56c83f10a0"
        },
        {
          "alg": "SHA3-256",
          "content": "ed53f4295da75753267f241315352c4a39e60796f04e1c0c12d29c3a38be48ed"
        },
        {
          "alg": "SHA3-512",
          "content": "8266b313bd4e1170daf60642e838841370d99bc24b2a1f91825ca22037a6a30ff15cc76069f8e8770f1dc12772c277ee1320de67e815041697d93d6d7ba884fb"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0?type=jar",
      "externalReferences": [
        {
          "url": "https://errorprone.info/error_prone_annotations",
          "type": "website"
        },
        {
          "url": "https://github.com/google/error-prone/error_prone_annotations",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml.woodstox/woodstox-core@7.2.0?type=jar",
      "publisher": "FasterXML",
      "group": "com.fasterxml.woodstox",
      "name": "woodstox-core",
      "version": "7.2.0",
      "description": "Woodstox is a high-performance XML processor that implements Stax (JSR-173), SAX2 and Stax2 APIs",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "d32a36b91bfa2ba1f69e9671ce2fba6a"
        },
        {
          "alg": "SHA-1",
          "content": "ec9c97f566f812e249a7aba6c76815369ac00864"
        },
        {
          "alg": "SHA-256",
          "content": "689f5be95f9bb369d6c0e8db99a99f930b0c48d6a69b46151782b5816c7ea820"
        },
        {
          "alg": "SHA-512",
          "content": "f3baa0b19322e22ef0b5bb6739c1497167938901450e141b2e8769f0acf7ec2e5498349db007f6958de7eee00b2a9b36b0a1c09fa7877f074cb8b5ad2485559d"
        },
        {
          "alg": "SHA-384",
          "content": "d3f9eee2aa2ff88fa3efd0d52d4a0fa8cf79707d36f5a9dacc2852df80584300a32e5d54b77af3a7bf29e35b84413e18"
        },
        {
          "alg": "SHA3-384",
          "content": "f4862abab750ed951776c465833ecf3fc8747dd2bf4f6a3108b5d4ff1e6261a24cd4708e889154848d7bad55099c6c42"
        },
        {
          "alg": "SHA3-256",
          "content": "5f57a8d1f1a9cd8920c94436f53bcbca6164a221e793e5ef5db2b8861f9b113b"
        },
        {
          "alg": "SHA3-512",
          "content": "960c8d80a53fdbb0423432d018723f805fcdd674a49d2aef7a58f181bcc53d7a7adf2668ab51300e8789d9ffd4e98267cbceb34fcf03195a779b2faacbe461a8"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.fasterxml.woodstox/woodstox-core@7.2.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/FasterXML/woodstox",
          "type": "website"
        },
        {
          "url": "https://central.sonatype.com/api/v1/publisher",
          "type": "distribution"
        },
        {
          "url": "https://github.com/FasterXML/woodstox/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/FasterXML/woodstox",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.codehaus.woodstox/stax2-api@4.3.0?type=jar",
      "publisher": "fasterxml.com",
      "group": "org.codehaus.woodstox",
      "name": "stax2-api",
      "version": "4.3.0",
      "description": "Stax2 API is an extension to basic Stax 1.0 API that adds significant new functionality, such as full-featured bi-direction validation interface and high-performance Typed Access API.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "6eec6c1cb7f63d8a8098cc5569a47e99"
        },
        {
          "alg": "SHA-1",
          "content": "59251773c44122e8d1366f68884e29dd784e141b"
        },
        {
          "alg": "SHA-256",
          "content": "7c805f36129ea9fa42b696093b7ae1eb20bb6ccec65c8280d6f33db5609ca5e1"
        },
        {
          "alg": "SHA-512",
          "content": "4d1bf5cb3a803423c5420050c245227b944acb4ced29e8095e470bc3a742d6a057c484fa1d531b58933ed8f81d52d5bbfc8406acc4241f6e4ec4c5116fe30d53"
        },
        {
          "alg": "SHA-384",
          "content": "664bf1044e8c9e80083d02d2ccdba3c3953a515594b6a262baef76d1cf3790da9d71eb853806c27c94721e65983d72a3"
        },
        {
          "alg": "SHA3-384",
          "content": "298f2dcfffb3fe28229452770a969b2138008a23c508599a13303f48f21d3458c61ad19df53a20d6447c0f8ef56e4216"
        },
        {
          "alg": "SHA3-256",
          "content": "5a3bc0bf1b00df535d572ae16c62817788bea0f7d02a8c430fadd4cf4df95f5e"
        },
        {
          "alg": "SHA3-512",
          "content": "5d4e4618b22accb1fee19d6d2702dcd0538df7f9e3b7aa8590e7554811770bb317d4bab1eecebc4b31df49a349c68e746256b3e9cca5fbea6f102df411c0e678"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause"
          }
        }
      ],
      "purl": "pkg:maven/org.codehaus.woodstox/stax2-api@4.3.0?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/FasterXML/stax2-api",
          "type": "website"
        },
        {
          "url": "https://central.sonatype.com/api/v1/publisher",
          "type": "distribution"
        },
        {
          "url": "https://github.com/FasterXML/stax2-api/issues",
          "type": "issue-tracker"
        },
        {
          "url": "http://github.com/FasterXML/stax2-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.github.nscuro/versatile-core@0.18.1?type=jar",
      "group": "io.github.nscuro",
      "name": "versatile-core",
      "version": "0.18.1",
      "description": "Java implementation of vers, a mostly universal version range specifier",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "e2cdcd003ab74b59b8d250f35ff3fb4e"
        },
        {
          "alg": "SHA-1",
          "content": "09c11e3fca0d0f9337e7d8e68eca33419406060c"
        },
        {
          "alg": "SHA-256",
          "content": "6e93ca4909d54d5419230158c611e15385904f3e226a0bf020f6dc3a2f37d971"
        },
        {
          "alg": "SHA-512",
          "content": "6dd202189145b01e8b321660aa1beffea06714abbc2ca7ce3905c08308ed8e7d47b4ddf2e525537ebc079bcde9ae24d6d1c6ad31852077aca42b4021d41fe01d"
        },
        {
          "alg": "SHA-384",
          "content": "a9031942066add5f0eef6b611243a823eef4edfd2424b5b1fa01454cc29b141dc7d8a5dc99b6c953c8e468693a9fc573"
        },
        {
          "alg": "SHA3-384",
          "content": "188291ce7486a2dbeb7e5983cdc5c573472ae49a34bd421d36f32be01426d6a57f0df186dbe20bab73d9d16513a273e0"
        },
        {
          "alg": "SHA3-256",
          "content": "27fe93d551ef5a5290f79da3c719d90ba2d5ea5c589ef84f17e0f79e0f88f3d4"
        },
        {
          "alg": "SHA3-512",
          "content": "21303ea8cabd0588c65f791fc3c6fc641798ec80dd55ea9752be1c58658a3727d5e27e45cd2c4d857c3235fd2e533cdabbe1ea6fcb54bf44d67e87ede7f0da90"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.github.nscuro/versatile-core@0.18.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/nscuro/versatile/versatile-core",
          "type": "website"
        },
        {
          "url": "https://github.com/nscuro/versatile/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/versatile-core",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.github.nscuro/versatile-spi@0.18.1?type=jar",
      "group": "io.github.nscuro",
      "name": "versatile-spi",
      "version": "0.18.1",
      "description": "Java implementation of vers, a mostly universal version range specifier",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "9a3988b3891580e26324e260763df731"
        },
        {
          "alg": "SHA-1",
          "content": "0c926f34de821236dd8eac113777500601946f31"
        },
        {
          "alg": "SHA-256",
          "content": "f0e39a53095b6713d28f13e077c073353642fe7f99b373e258b1a7d65936f4e8"
        },
        {
          "alg": "SHA-512",
          "content": "6274ef8d75180ef75d7c91c30c807f3bb8d7499df36913d27c7fff68c62eb63bf1620f5e4cef7623aaf0a07ffd5cb10f54abdbab0074d5e1e486141ef77a6001"
        },
        {
          "alg": "SHA-384",
          "content": "bb3b477b1a6c9b8891cc335d611c430abf6c6ad0dd149e95eb92ca45197e32a32045afd0391462f352b6a62380445dcc"
        },
        {
          "alg": "SHA3-384",
          "content": "08d7c2220fe7e4b48c08760046bf87b5240dd2154963106be49cca3f5cd81d91aee96293ad55e2b65408729426012e1c"
        },
        {
          "alg": "SHA3-256",
          "content": "3f8f4a2c2deff195c79c94eaadece0b96e3f27985476f88dedc2ac73e5c0d041"
        },
        {
          "alg": "SHA3-512",
          "content": "c6c2707bda3e18adf018d68c354305b3a574bbfefad7ef1183de606175d597a5c38fbd99d756377f9802f92c73945a6faf2587f5989ed685dd079920e415e9f5"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.github.nscuro/versatile-spi@0.18.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/nscuro/versatile/versatile-spi",
          "type": "website"
        },
        {
          "url": "https://github.com/nscuro/versatile/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/versatile-spi",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.maven/maven-artifact@3.9.15?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.maven",
      "name": "maven-artifact",
      "version": "3.9.15",
      "description": "Maven is a software build management and comprehension tool. Based on the concept of a project object model: builds, dependency management, documentation creation, site publication, and distribution publication are all controlled from the declarative file. Maven can be extended by plugins to utilise a number of other development tools for reporting or the build process.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "705ca9659f4968ff4f19c710c510b0a4"
        },
        {
          "alg": "SHA-1",
          "content": "1bdd4eee8f1853fdfdefbdefdaac1bb708138c93"
        },
        {
          "alg": "SHA-256",
          "content": "f154c31f15ac97c37b9cdf9f8d63cde5053c470d2daf54df7dfd3bb3c9e501c6"
        },
        {
          "alg": "SHA-512",
          "content": "0aab778be865fe8483d9741cf927661e0b1cd8c289d0a31e8257939bf0a0fd25920c27b2d26edc1957eec7eeeba1862808d7143fd43d20e1c7b9eee23bb5a47f"
        },
        {
          "alg": "SHA-384",
          "content": "f7a07acd1019bbdd2e4210a3eac369e71533a71d32c992a7e51efac7cfe88cf1c77260501990225ebb90262273563fd4"
        },
        {
          "alg": "SHA3-384",
          "content": "0c6400837bccb9cf8cbf1ac6f4b98b14d6e742a6bb3082ee6e0c363af6e1c7e7bf3264d96bdc435c9eb4158c266ec7fb"
        },
        {
          "alg": "SHA3-256",
          "content": "f5655d4dc693d2b4129d947665c83f5d0b6678b68c8df5db965ed6364a0ee67f"
        },
        {
          "alg": "SHA3-512",
          "content": "50a4210271b9858ca2dac6f3654f998bf67687c9569ce1ba561d9bd0e1900c615e1c137afed2e8d43bed7b6a91a93f9e3c4be7f5efa99d0141dcda6f35f7708b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.maven/maven-artifact@3.9.15?type=jar",
      "externalReferences": [
        {
          "url": "https://maven.apache.org/ref/3.9.15/maven-artifact/",
          "type": "website"
        },
        {
          "url": "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/",
          "type": "build-system"
        },
        {
          "url": "https://maven.apache.org/download.html",
          "type": "distribution"
        },
        {
          "url": "https://github.com/apache/maven/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://lists.apache.org/list.html?users@maven.apache.org",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/apache/maven/tree/maven-3.9.15/maven-artifact",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.codehaus.plexus/plexus-utils@3.6.1?type=jar",
      "publisher": "Codehaus Plexus",
      "group": "org.codehaus.plexus",
      "name": "plexus-utils",
      "version": "3.6.1",
      "description": "A collection of various utility classes to ease working with strings, files, command lines, XML and more.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "bf77c7ef462342bd42ce245be9648540"
        },
        {
          "alg": "SHA-1",
          "content": "9dce1b9c69b197f453223e45a2cb9fa0cd48b424"
        },
        {
          "alg": "SHA-256",
          "content": "05a63effd67e2d6b9d610cc82e2bd7473289d34802e57a529b28110f28af5679"
        },
        {
          "alg": "SHA-512",
          "content": "cdf52ae14e19fbc040a8ce9eb56f25fb6f3c1c2703b8cb7815329f06f675a284934e4fb19acedb49a24abc8ba28493fd5aedf15f0ac8033d123c71620de0ac98"
        },
        {
          "alg": "SHA-384",
          "content": "a02b453e4590c5028dcd94a72b818eb63ff7831cda8337daef63f774c1972b920b9eaae979867be34d9d4843e8296d42"
        },
        {
          "alg": "SHA3-384",
          "content": "28541c0fccf50c5eafa4b420c1453a77a8db9466b4da35f94ca745100f5b8b5a3f9ac2b3ab7f1008edb5ce33204a3ae2"
        },
        {
          "alg": "SHA3-256",
          "content": "f7353bfe893ab5932fe443ef26d2a9d9541f1f62105f35f923bd9b6b94808683"
        },
        {
          "alg": "SHA3-512",
          "content": "a7d95eaf9c02a688bcfaa1702c555eac1975190abda0ca626f3e41cec2492125e712c561a3cc67ed0d76a1b174ff03a8cd05afc0d377af1ff4c74a846546675f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.codehaus.plexus/plexus-utils@3.6.1?type=jar",
      "externalReferences": [
        {
          "url": "https://codehaus-plexus.github.io/plexus-utils/",
          "type": "website"
        },
        {
          "url": "https://repo.maven.apache.org/maven2",
          "type": "distribution"
        },
        {
          "url": "https://github.com/codehaus-plexus/plexus-utils/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://groups.google.com/forum/#!forum/mojohaus-dev",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/codehaus-plexus/plexus-utils/tree/plexus-utils-3.6.1/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.vdurmont/semver4j@3.1.0?type=jar",
      "group": "com.vdurmont",
      "name": "semver4j",
      "version": "3.1.0",
      "description": "Semantic versioning for Java apps.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "b39112afda0af7dba1f160f7284d402f"
        },
        {
          "alg": "SHA-1",
          "content": "0de1248f09dfe8df3b021c84e0642ee222cceb13"
        },
        {
          "alg": "SHA-256",
          "content": "0f33724dd012099f0737e3d9203e28f4a804435526998d4f5841993058651cb8"
        },
        {
          "alg": "SHA-512",
          "content": "4b7cc68857eb7633d0ef8a6bd8101243d0300537e51fac1380ebb944a8708f0f75ec3fa10186845b7e3a2d7988ae0bf22369909a52b6d95b5faaa9bc96dbbe64"
        },
        {
          "alg": "SHA-384",
          "content": "5e193b3ae6a6f34fb38abca0a2f9124daa0401238bb18015f8dfe4431da87525afa82921dd57754a1095d30451dfc363"
        },
        {
          "alg": "SHA3-384",
          "content": "62d09d2c1151a5108b55f04c8cf520c1b1b9e96ff045973e7aa729ff79522cf6772af7808c7435e6679620bdd0b722bc"
        },
        {
          "alg": "SHA3-256",
          "content": "fa98f695faa97464ce8b90f8c93b0179843ab2cc8a9e09d09586523e1cf4f401"
        },
        {
          "alg": "SHA3-512",
          "content": "6b24821607cb2040dd649c569e01cb87af0b5b92488111655ef15eb675a1e9f33029616c154253b4a865c42906b699a44dacf36411f42d062f57ccc60a0b5d42"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:maven/com.vdurmont/semver4j@3.1.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/vdurmont/semver4j",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.postgresql/postgresql@42.7.11?type=jar",
      "publisher": "PostgreSQL Global Development Group",
      "group": "org.postgresql",
      "name": "postgresql",
      "version": "42.7.11",
      "description": "PostgreSQL JDBC Driver Postgresql",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "b969f87f07d6434bd77cdc5e440da49a"
        },
        {
          "alg": "SHA-1",
          "content": "4c21cdd1b3938f400703716d37c4e8ca4d332808"
        },
        {
          "alg": "SHA-256",
          "content": "1981b31d3993c58702783c1cddf10a34e48c1f413d70ff1cb6def0a143484647"
        },
        {
          "alg": "SHA-512",
          "content": "7022c5eb9ca40612748af2d51fedaf773beeef60d46742c807ea0eb4a72107ea98bd1bb7fde484afa199f862b8be9dc827cc203a36c61df832fe6797413bf944"
        },
        {
          "alg": "SHA-384",
          "content": "71efac9613404865e11e81f96086aec5f851ebdf96b68b915bff57ccc8359b9a2114123e09ba897280518e64f6cfb0ad"
        },
        {
          "alg": "SHA3-384",
          "content": "65aa9b43829ac1998496b941fb12f2b8d1220ce025a426fcb93d68b83637a72fbd3d899195209d0f0b061f085d9b32da"
        },
        {
          "alg": "SHA3-256",
          "content": "1b7b5d4ac5792d6a8223d567790a2d6c999d3166813e41d3774c5e3f8619c988"
        },
        {
          "alg": "SHA3-512",
          "content": "2a4f18f20598ed0b8c0a7cc9f4b9b28be4856d03e4f6ae399b1aec07b3362e4632e6e8132dc2ca6e010faf92362e291d0acb2542c84a45c9c1dc746dd872b4e6"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause",
            "url": "https://opensource.org/licenses/BSD-2-Clause"
          }
        }
      ],
      "purl": "pkg:maven/org.postgresql/postgresql@42.7.11?type=jar",
      "externalReferences": [
        {
          "url": "https://jdbc.postgresql.org",
          "type": "website"
        },
        {
          "url": "https://github.com/pgjdbc/pgjdbc/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://www.postgresql.org/list/pgsql-jdbc/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/pgjdbc/pgjdbc",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.cloud.sql/postgres-socket-factory@1.28.3?type=jar",
      "publisher": "Google LLC",
      "group": "com.google.cloud.sql",
      "name": "postgres-socket-factory",
      "version": "1.28.3",
      "description": "Socket factory for the Postgres JDBC driver that allows a user with the appropriate permissions to connect to a Cloud SQL database without having to deal with IP allowlisting or SSL certificates manually.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "fa00f6ea71f76a7b327f7e4a9b86d6d9"
        },
        {
          "alg": "SHA-1",
          "content": "31287a3a6b06f7b1ff9da2de19cdfdab2025aaf9"
        },
        {
          "alg": "SHA-256",
          "content": "0a9008bf529d5810ac944d6e8b40b0db4e39a0054f3e8e052075965a8405e45f"
        },
        {
          "alg": "SHA-512",
          "content": "c1d2050d8df2918d45c3814670e8f5b21407b9a432259ddb19beea93d7ea9c393ccc8c04a4df241e9790d527b100396a205b950630ebdbd6fcf2f70f29f5652f"
        },
        {
          "alg": "SHA-384",
          "content": "431891990f4d6ca84093a6bb43753260d5fe4fe0d18501a9245b001e85598b87aa6403edd9e0590305e61cec92816dcf"
        },
        {
          "alg": "SHA3-384",
          "content": "c7fcbfa6df29d75d3cc2a63a37e267c04c6c830e3cb6b5912c88d0032415e30db4b67b24a26c27486e0669e3c137142b"
        },
        {
          "alg": "SHA3-256",
          "content": "aa385d441b9b4472ff99b07e3e6c88353e11528337008a06496b5c5746b91706"
        },
        {
          "alg": "SHA3-512",
          "content": "81a04c064e6bbe11c21569bb04b203ffbc469d72ec0ac5d79fbee0fdc65315b01ae0045986653852f60c2118e9b521c4c727ae6cda925161a0fe724265885f7c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.cloud.sql/postgres-socket-factory@1.28.3?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/GoogleCloudPlatform/cloud-sql-mysql-socket-factory/postgres-socket-factory",
          "type": "website"
        },
        {
          "url": "https://google.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/googleapis/java-shared-config/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/GoogleCloudPlatform/cloud-sql-mysql-socket-factory.git/postgres-socket-factory",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.cloud.sql/jdbc-socket-factory-core@1.28.3?type=jar",
      "publisher": "Google LLC",
      "group": "com.google.cloud.sql",
      "name": "jdbc-socket-factory-core",
      "version": "1.28.3",
      "description": "Core library for establishing secure connections. End users should depend on the driver-specific socket factory artifacts.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "48bc954954b52342dee364635de30b84"
        },
        {
          "alg": "SHA-1",
          "content": "4fc190438fb6cfaccbb3e9575dcc89fb8c1c5915"
        },
        {
          "alg": "SHA-256",
          "content": "080a85fda0fde4ebebdf8ce3d221b753b169cd00da01ad83637d90e61353ab7f"
        },
        {
          "alg": "SHA-512",
          "content": "04a9f299c33648b35b77be463d00d3f6d27b61e9f8f020e782cdc55cff188ea4f620b66c1af5ec20b1764020f6d17ad0a15c19a759c9472baedff6faf22542a0"
        },
        {
          "alg": "SHA-384",
          "content": "023856fee9bac7aeac9f09adaab6740e2f02ab133ccc3df9f1d4a8c90a74548aedd51ff236a6374f6176c182ed028c4f"
        },
        {
          "alg": "SHA3-384",
          "content": "58a9cf6e80e5afd8017533989b9b18eeab641e5173d0762aad3fcd5b26c5ef99840835bcdd4f600cdda5a7013c746d65"
        },
        {
          "alg": "SHA3-256",
          "content": "549aa9c80ee944518cfaa5550b7b48215e9a1f7ffc34f17b7cfec5a4cf211409"
        },
        {
          "alg": "SHA3-512",
          "content": "e765459a1c86800dc457f1c87d5784bc8b206ca59ea959c93f161b5ceb95aa7cec0c6d877d610d16d9baf6fde4fcf103206364688cd07d51a0d0d200231e63e3"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.cloud.sql/jdbc-socket-factory-core@1.28.3?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/GoogleCloudPlatform/cloud-sql-mysql-socket-factory/jdbc-socket-factory-core",
          "type": "website"
        },
        {
          "url": "https://google.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/googleapis/java-shared-config/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/GoogleCloudPlatform/cloud-sql-mysql-socket-factory.git/jdbc-socket-factory-core",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.github.jnr/jnr-enxio@0.32.20?type=jar",
      "group": "com.github.jnr",
      "name": "jnr-enxio",
      "version": "0.32.20",
      "description": "Native I/O access for java",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "cb5113570f8674c401a3025784239528"
        },
        {
          "alg": "SHA-1",
          "content": "b2cec8e40691976e1e2686d92edefa7e060a7798"
        },
        {
          "alg": "SHA-256",
          "content": "8f3062892a5edf03922eaee282ba9ac69d6e3142ad036810a50b15919a85d8b8"
        },
        {
          "alg": "SHA-512",
          "content": "a15f42e4ce45ea4ac903e8e355e672bf0de1d539b510b2ac0ed952a7cd7b0f35c54495c4a8925ed2a4a44f754f105686361dd6d5d9887230d4eb886af90b8a2d"
        },
        {
          "alg": "SHA-384",
          "content": "7983451dcd76d6bcfd2a0307ff963aa87882ab20a308f0affa85a53ff9186fc0442bd279fc3027aaa621465e32e8ea61"
        },
        {
          "alg": "SHA3-384",
          "content": "62b00e6937e6d2497514d0d755ff49b36468c7a2a49451772a98c656ad4330665b03f351b5c81c21acea4cefa89c431e"
        },
        {
          "alg": "SHA3-256",
          "content": "7ac41d4747670bd1e9d670adafeafc0e7a24d409320a827d7d77c3bbdf64789e"
        },
        {
          "alg": "SHA3-512",
          "content": "2750b642fe87f11210e891f5905149349546d9a65adf4436ff58aba89cdddcbd5d1e8fc60e47cba584f19bdc42a531d4f5f73da370b776e035627307d90dd1d0"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.github.jnr/jnr-enxio@0.32.20?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/jnr/jnr-enxio",
          "type": "website"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.github.jnr/jnr-constants@0.10.4?type=jar",
      "group": "com.github.jnr",
      "name": "jnr-constants",
      "version": "0.10.4",
      "description": "A set of platform constants (e.g. errno values)",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "a5a4036fd334522540041b062b304abc"
        },
        {
          "alg": "SHA-1",
          "content": "09f6f23763bf40ea7b56391791f574174914430a"
        },
        {
          "alg": "SHA-256",
          "content": "9a5b8cf9798d9d0331b8d8966c5235a22c4307676e35803a24659e6d76096f78"
        },
        {
          "alg": "SHA-512",
          "content": "608b2c53914aeb3fb36e2fb81a948e5dbec835a9d220d50a4bb9693d4a534414d1bc4c5e5582b196793317fb64fe7617d78d5ec974e6413732940e141201fdba"
        },
        {
          "alg": "SHA-384",
          "content": "dfe87e3b585304854d0dd23d2d5b3a4f00ca47fc52e8e28c6c75f976cc12bbe627cdfcca5fccaf6cb3b2591cf70dee89"
        },
        {
          "alg": "SHA3-384",
          "content": "8d1bf7084c5f34d13fab9b9b77dd095f43f105a7722a0d95fcc4e050e41f608f426914c3ff63573da053a9188e7f30bc"
        },
        {
          "alg": "SHA3-256",
          "content": "842f986856d42bf3703b2b9b8a5db9c8cbd166fafb94d81739dc3ff9469b8ae0"
        },
        {
          "alg": "SHA3-512",
          "content": "b87d2ffb045ed6bcf0d1976933e8ec258132f43b705388c905805e27e6f3b547d212c4eed37dec53541eebf17669365fa88519e8436f22545e56f8fc4215eda6"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.github.jnr/jnr-constants@0.10.4?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/jnr/jnr-constants",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.github.jnr/jnr-ffi@2.2.19?type=jar",
      "group": "com.github.jnr",
      "name": "jnr-ffi",
      "version": "2.2.19",
      "description": "A library for invoking native functions from java",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "3f14d83a07419b92cf5a4474c2a9e080"
        },
        {
          "alg": "SHA-1",
          "content": "2b0e946924b7f63b5375840398bfaec50265626d"
        },
        {
          "alg": "SHA-256",
          "content": "0896484223ef8dede16ff08c97f000b4f29a40db18151ad8b9bd8c0b89b7c847"
        },
        {
          "alg": "SHA-512",
          "content": "650443269242324bfe8ba0adb33bd743448a3dfea3a1029e0c892c6405d6379ab7d3fd97a78156a2b1e097dd21c6219559e92d6bb3596247915ad0d7c4cb8448"
        },
        {
          "alg": "SHA-384",
          "content": "f9c827f2477bc2c5358c13893f315acd535e6d21fd2865587f35e1ad22c5ac5eac57bffd8fa710635054c90af0a8a0f5"
        },
        {
          "alg": "SHA3-384",
          "content": "6dbb707f0a8d67e40adceaaf44d2a7288c74623b655f064fe69129bc275ec105cb28d998125f8a0a90c8e19c27557493"
        },
        {
          "alg": "SHA3-256",
          "content": "36946349d7af6c6d2ef4e3847d293fa07a2efbbe68568675550cca0a0d6a07ab"
        },
        {
          "alg": "SHA3-512",
          "content": "a404d027b7da956cfe9ef300cf3339d523073df1dbf818cc6265d73b7c08438eeb150a2d34232d0662314bbe1a3ca35509a314dd41e6add844cb58042bae3e9e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.github.jnr/jnr-ffi@2.2.19?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/jnr/jnr-ffi",
          "type": "website"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.github.jnr/jffi@1.3.15?type=jar",
      "group": "com.github.jnr",
      "name": "jffi",
      "version": "1.3.15",
      "description": "Java Foreign Function Interface",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "661a5bc9ace0463ca2125c357cb2def7"
        },
        {
          "alg": "SHA-1",
          "content": "4d5016e7a6042b8b01ec4e55803ef79f684b217e"
        },
        {
          "alg": "SHA-256",
          "content": "ed247e2325586ae036532a46f130811d0af73a0b494c8303fc30ead7d653ca86"
        },
        {
          "alg": "SHA-512",
          "content": "e49b61931371213cf1b30daa1c9ed47c6ab12cce81d248fccbb0fbbedcdf73f626b322cea647510bee1bcd5e0d4cfdc06c78147d424f2a2ef7fe3d6d86183139"
        },
        {
          "alg": "SHA-384",
          "content": "9a91c8e76c5c3d00bd6694f29031534928800e5ed233eef748e540c074067c82c26c01f5a68b73d29c8438a09860799e"
        },
        {
          "alg": "SHA3-384",
          "content": "8d8359c05c08cabff8ce0e6c2b5e555d5172974134500be984531c54df20c58f54d4c67920f52c1aa7ed7fa0d1f463c4"
        },
        {
          "alg": "SHA3-256",
          "content": "966ad023c42aa93fb0716b2f2d0c11665327bb79543264afb4d98a5987cc26c8"
        },
        {
          "alg": "SHA3-512",
          "content": "7f0c6a3e4a00c248731f26d81eed30d88ffe37cf0a4827cf87944736c13f05903903bb7260c70fae46ce80e07e243a92f2378485049b4ba4c02534a84283dbb7"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        },
        {
          "license": {
            "name": "GNU Lesser General Public License version 3",
            "url": "https://www.gnu.org/licenses/lgpl-3.0.txt"
          }
        }
      ],
      "purl": "pkg:maven/com.github.jnr/jffi@1.3.15?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/jnr/jffi",
          "type": "website"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.github.jnr/jffi@1.3.15?classifier=native\u0026type=jar",
      "group": "com.github.jnr",
      "name": "jffi",
      "version": "1.3.15",
      "description": "Java Foreign Function Interface",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "5e070ba8b9ee448e4effbddc53bca984"
        },
        {
          "alg": "SHA-1",
          "content": "561b84cb4e96bb8d21b35a3a5bae725ad88d4b1b"
        },
        {
          "alg": "SHA-256",
          "content": "dd54a800877593cfd033d6bdae1b67ebb9b5ca38f9e9b4ae7ea080375371e41a"
        },
        {
          "alg": "SHA-512",
          "content": "f230e39d8c239858821df194ddb0c9c159e39475ee8c6ebeb81dc72f162729c4e3a2d4ff277905dd82a494cbfdadc3ff7cf3f69be1e898b0f1fa4bb848fd1f43"
        },
        {
          "alg": "SHA-384",
          "content": "ab5d732df66611a3697a2a9c3d6359d21ccaeb2616e5216ec4a1ba905a921425d59ba9b5a5268f2bc404e877b6455220"
        },
        {
          "alg": "SHA3-384",
          "content": "028a768f557931875833c4d125ec35a1f9db4ddc82fad41905494ef00d60b13fe3d9bf2a431948dfe296e455bff820cf"
        },
        {
          "alg": "SHA3-256",
          "content": "4b77d991ef1a3ac77397bc0c129ec321d894d00c5480d7cce5d3865e047cffcf"
        },
        {
          "alg": "SHA3-512",
          "content": "6673f10f0e8592f2bf90e1ced2df086a51adafdab57e50c13abd1f6bf504ae6b58cf3c13e78d26922352fac2e2758b465a9e4590a7ef1ed6e921f86d9750e3d3"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        },
        {
          "license": {
            "name": "GNU Lesser General Public License version 3",
            "url": "https://www.gnu.org/licenses/lgpl-3.0.txt"
          }
        }
      ],
      "purl": "pkg:maven/com.github.jnr/jffi@1.3.15?classifier=native\u0026type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/jnr/jffi",
          "type": "website"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.ow2.asm/asm-commons@9.7.1?type=jar",
      "publisher": "OW2",
      "group": "org.ow2.asm",
      "name": "asm-commons",
      "version": "9.7.1",
      "description": "Usefull class adapters based on ASM, a very small and fast Java bytecode manipulation framework",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "8344aea3c8b7d707e9d35a62710e77c9"
        },
        {
          "alg": "SHA-1",
          "content": "406c6a2225cfe1819f102a161e54cc16a5c24f75"
        },
        {
          "alg": "SHA-256",
          "content": "9a579b54d292ad9be171d4313fd4739c635592c2b5ac3a459bbd1049cddec6a0"
        },
        {
          "alg": "SHA-512",
          "content": "81daf5765e387e6aeec5d45c4b9e4e1b471fb4f350931e5a214845c7c657a2142768f6902765e49c0ce2c595962e5d008883cba2e4a40c4bdce8f2e92518d2db"
        },
        {
          "alg": "SHA-384",
          "content": "473ba9b72bd47d2000d127dababdd649fd7738d658cd5b818266cd978e8d3bb2589e431a52bfaa7fb8a03d2345a529f2"
        },
        {
          "alg": "SHA3-384",
          "content": "1a792b9567115e97b81242325de41d3757e8b11dc5c38b4f6b8c9aa34ef8a33b5ef9a7401c725574ee4c36ebb5c0f46a"
        },
        {
          "alg": "SHA3-256",
          "content": "2974918408bf8791d133c96cee74e86f4fa9659faa1faaf886eed3c586b7c717"
        },
        {
          "alg": "SHA3-512",
          "content": "21c2635f5cdee961ea6aedee78589603b0ff1d56ee295d4548e882abe4485a5818a82848a99851592de5a8d09e4c74e406fc0bea9f23e250e58e0e31986845af"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/org.ow2.asm/asm-commons@9.7.1?type=jar",
      "externalReferences": [
        {
          "url": "http://asm.ow2.io/",
          "type": "website"
        },
        {
          "url": "https://repository.ow2.org/nexus/service/local/staging/deploy/maven2",
          "type": "distribution"
        },
        {
          "url": "https://gitlab.ow2.org/asm/asm/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://mail.ow2.org/wws/arc/asm/",
          "type": "mailing-list"
        },
        {
          "url": "https://gitlab.ow2.org/asm/asm/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.ow2.asm/asm-analysis@9.7.1?type=jar",
      "publisher": "OW2",
      "group": "org.ow2.asm",
      "name": "asm-analysis",
      "version": "9.7.1",
      "description": "Static code analysis API of ASM, a very small and fast Java bytecode manipulation framework",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "4cd9e7178dfb85371bba3077e40cd514"
        },
        {
          "alg": "SHA-1",
          "content": "f97a3b319f0ed6a8cd944dc79060d3912a28985f"
        },
        {
          "alg": "SHA-256",
          "content": "85b29371884ba31bb76edf22323c2c24e172c3267a67152eba3d1ccc2e041ef2"
        },
        {
          "alg": "SHA-512",
          "content": "a8bd265c81d9bb4371cafd3f5d18f96ad79aec65031457d518c54599144d199d9feddf13b8dc822b2598b8b504a88edbd81d1f2c52991a70a6b343d8f5bb6fe5"
        },
        {
          "alg": "SHA-384",
          "content": "31620bb948127b811684769f966990170ced469f4b15f30bf22a7a0d28c7da644027cf7c9ffd10f80fcc4cdf377909d8"
        },
        {
          "alg": "SHA3-384",
          "content": "fe5920760dfcbe5dda26d7839ba9ad621a8d2b139994e0d2107873512651cfffdb73e85e635dbad0f9db7cfee55420d3"
        },
        {
          "alg": "SHA3-256",
          "content": "3fe7b153bea627308dbfb2ce682a3c10646a06eee5d34a13acd76e60a7cda240"
        },
        {
          "alg": "SHA3-512",
          "content": "1acd097141b321e440561a9ef759b5b5ab125b42ae02e5806fd026978727740124a483f608db230563fde701161e51f8548a662e29ba12d97ba3d24949b4c821"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/org.ow2.asm/asm-analysis@9.7.1?type=jar",
      "externalReferences": [
        {
          "url": "http://asm.ow2.io/",
          "type": "website"
        },
        {
          "url": "https://repository.ow2.org/nexus/service/local/staging/deploy/maven2",
          "type": "distribution"
        },
        {
          "url": "https://gitlab.ow2.org/asm/asm/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://mail.ow2.org/wws/arc/asm/",
          "type": "mailing-list"
        },
        {
          "url": "https://gitlab.ow2.org/asm/asm/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.ow2.asm/asm-tree@9.7.1?type=jar",
      "publisher": "OW2",
      "group": "org.ow2.asm",
      "name": "asm-tree",
      "version": "9.7.1",
      "description": "Tree API of ASM, a very small and fast Java bytecode manipulation framework",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "e85029f613b6469989cc7cf53fe06b74"
        },
        {
          "alg": "SHA-1",
          "content": "3a53139787663b139de76b627fca0084ab60d32c"
        },
        {
          "alg": "SHA-256",
          "content": "9929881f59eb6b840e86d54570c77b59ce721d104e6dfd7a40978991c2d3b41f"
        },
        {
          "alg": "SHA-512",
          "content": "e55008c392fdd35e95d3404766b12dd4b46e13d5c362fcd0ab42a65751a82737eaf0ebc857691d1916190d34407adfde4437615d69c278785416fd911e00978d"
        },
        {
          "alg": "SHA-384",
          "content": "4363d7d075700cbe6161bf86a0ff1b0e732fe96963010f1fc66f7701e8139673cc4fba81ae2937d25e0a5032368b0d5a"
        },
        {
          "alg": "SHA3-384",
          "content": "d22a3eeb20ee739bfbf3535655e7d25e3b3910f13ac86d9e4c29b4e0b19efd53ab65c1d843bbc0e289a8744d27e09453"
        },
        {
          "alg": "SHA3-256",
          "content": "9d57ddbdd10cda7f9bc45bc0bcb54143f7ea1b802540cf3029ab7e31dfc59df7"
        },
        {
          "alg": "SHA3-512",
          "content": "1352a6d8caca6649bc7e1c8e209a1e3864ac8eac8d6af2f11e2701eab5304a4cff41355828ed0c69adc8fc3b8d639d607bec574834e8e3185a3e3f81199e756a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/org.ow2.asm/asm-tree@9.7.1?type=jar",
      "externalReferences": [
        {
          "url": "http://asm.ow2.io/",
          "type": "website"
        },
        {
          "url": "https://repository.ow2.org/nexus/service/local/staging/deploy/maven2",
          "type": "distribution"
        },
        {
          "url": "https://gitlab.ow2.org/asm/asm/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://mail.ow2.org/wws/arc/asm/",
          "type": "mailing-list"
        },
        {
          "url": "https://gitlab.ow2.org/asm/asm/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.ow2.asm/asm-util@9.7.1?type=jar",
      "publisher": "OW2",
      "group": "org.ow2.asm",
      "name": "asm-util",
      "version": "9.7.1",
      "description": "Utilities for ASM, a very small and fast Java bytecode manipulation framework",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "36d373a9cd6cad9b35db9f984c6b4bbb"
        },
        {
          "alg": "SHA-1",
          "content": "9e23359b598ec6b74b23e53110dd5c577adf2243"
        },
        {
          "alg": "SHA-256",
          "content": "f885be71b5c90556f5f1ad1c4f9276b29b96057c497d46666fe4ddbec3cb43c6"
        },
        {
          "alg": "SHA-512",
          "content": "522d793d15a2c5ea6504a50222cf0750f1eab7b881cf289675042539b1aba8b3868197b1bebe729de728dd10020eb028ae16252dcd5d84fdcbf7f925832bc269"
        },
        {
          "alg": "SHA-384",
          "content": "c073e7d64d5891d024860f638c3ee901aca60637b820ad05f9be7d33b4f4ad99fc448173dd9cb0b1cd0032485e813b24"
        },
        {
          "alg": "SHA3-384",
          "content": "2300d5572d929e6f20a7569dceb05bd9930b6ca18bcf11f648e37f28d00e78883f632ff60f4c4f9997aaa3d560a9450b"
        },
        {
          "alg": "SHA3-256",
          "content": "f5b3d45b832550fc3d1a675fdc4531a32eb8688db37b7102f0d544635f967ed2"
        },
        {
          "alg": "SHA3-512",
          "content": "ae097429b38febbc39a91d9697b6f709a49aad2fbc032ae2222e8f11c2907ef1a526afc4ee38d4dee46c09a7196f4f676f5704461dd3a0fe1e606bc9e3ef970a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/org.ow2.asm/asm-util@9.7.1?type=jar",
      "externalReferences": [
        {
          "url": "http://asm.ow2.io/",
          "type": "website"
        },
        {
          "url": "https://repository.ow2.org/nexus/service/local/staging/deploy/maven2",
          "type": "distribution"
        },
        {
          "url": "https://gitlab.ow2.org/asm/asm/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://mail.ow2.org/wws/arc/asm/",
          "type": "mailing-list"
        },
        {
          "url": "https://gitlab.ow2.org/asm/asm/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.github.jnr/jnr-a64asm@1.0.0?type=jar",
      "group": "com.github.jnr",
      "name": "jnr-a64asm",
      "version": "1.0.0",
      "description": "A pure-java A64 assembler",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "6cb469cbbcf9eca78d50f7da595a8337"
        },
        {
          "alg": "SHA-1",
          "content": "0a1cb8dbe71b5a6a0288043c3ba3ca64545be165"
        },
        {
          "alg": "SHA-256",
          "content": "53ae5ea7fa5c284e8279aa348e7b9de4548b0cae10bfd058fa217c791875e4cf"
        },
        {
          "alg": "SHA-512",
          "content": "922bdf2883c6a9cd6491289020d404ab151fd9ffa78d2ec884a2ac3af739d397016f1f4596c3e6c58744ea600fdbc2d330c8f520a1a9ab0eef6af6b667b35b89"
        },
        {
          "alg": "SHA-384",
          "content": "933298b61960f09eccb672a0622a93a721d06cf85cdb29500ff6efdf874bad7b08aede29b6cf3b51141c16b38b250be2"
        },
        {
          "alg": "SHA3-384",
          "content": "2a7231c649f4805d34eb19c7e6b6dbb5ecdb663e29ef69a4523e2f7d2ae70740ca3aa03eba3476960d0fe344ea45df2d"
        },
        {
          "alg": "SHA3-256",
          "content": "fc270fd94a4e2b4fb1a9e4dd42ff4600c94e226ef3431aee998a915b62eb19ae"
        },
        {
          "alg": "SHA3-512",
          "content": "8ee64fec1b5e93ff9c2b596c0345ef120479217bea95d669c6e17f338a45945545b546813af2f58920a6bb2d607bd004870d10c8660a516261288d9f555fc850"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.github.jnr/jnr-a64asm@1.0.0?type=jar",
      "externalReferences": [
        {
          "url": "http://nexus.sonatype.org/oss-repository-hosting.html/jnr-a64asm",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.github.jnr/jnr-x86asm@1.0.2?type=jar",
      "group": "com.github.jnr",
      "name": "jnr-x86asm",
      "version": "1.0.2",
      "description": "A pure-java X86 and X86_64 assembler",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "00670735acb2a9d1421b506dc7d338bc"
        },
        {
          "alg": "SHA-1",
          "content": "006936bbd6c5b235665d87bd450f5e13b52d4b48"
        },
        {
          "alg": "SHA-256",
          "content": "39f3675b910e6e9b93825f8284bec9f4ad3044cd20a6f7c8ff9e2f8695ebf21e"
        },
        {
          "alg": "SHA-512",
          "content": "e928926b01ce545144c1bbf160edee9b923773e32f9a399a71c2ab5e8325d9cbcfb41f41c8f008b80d1beab8da1c4b74845996479c07ed73bc131959911d4762"
        },
        {
          "alg": "SHA-384",
          "content": "91839815885716f1202a824b195a475d4d7561690192b42cf05b8c6432556a3e7e2dab13b6e970986a97711fb7060844"
        },
        {
          "alg": "SHA3-384",
          "content": "ed27f9b39907e92805c2d6ae6a045e00e24f51544501df3b98b593177df4fe55fee2347c668df66c2ea6fae64c66ee0c"
        },
        {
          "alg": "SHA3-256",
          "content": "f2e4e4807f6674a5b428cebdbdd01e8cadbeee71b785a046bec2bec1de63a41b"
        },
        {
          "alg": "SHA3-512",
          "content": "0dfffcf0daac9513b347ab8bf22887360feea890428e12857d7d3400400ba498fdc61307d9fd9c6a5e1baa9a96279afc07bba08c6229ed4ede71569d710fd0f6"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/license/mit/"
          }
        }
      ],
      "purl": "pkg:maven/com.github.jnr/jnr-x86asm@1.0.2?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/jnr/jnr-x86asm",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.github.jnr/jnr-unixsocket@0.38.25?type=jar",
      "group": "com.github.jnr",
      "name": "jnr-unixsocket",
      "version": "0.38.25",
      "description": "UNIX socket channels for java",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "6128f5bfe53ea584f3f90ddc00572273"
        },
        {
          "alg": "SHA-1",
          "content": "e8e0a87d80789510109337d6b66df7d8f90dfbee"
        },
        {
          "alg": "SHA-256",
          "content": "9961504058668059d7fbfcc050252afd99901604c4c954bfe7c1325be06a34c0"
        },
        {
          "alg": "SHA-512",
          "content": "6be26fa405fdf161b4a999899c7f1d926628059d0af310531b6d093e27233dba8b310b3dd0a5828a722b0a89f637820d71c1f257aba528e314f63062e63558d5"
        },
        {
          "alg": "SHA-384",
          "content": "b36b8d31ca8157b374b93ef17365c137283aa8871c2168c7dca1019dfc120f0074f610171abeb7ce3b4d5a2f6a3370ad"
        },
        {
          "alg": "SHA3-384",
          "content": "561ac4ec50fa1a2a2c8732c7e1c42c370bff3efdb200f29c67c354f060d250162c5118b4f03985700dd22889b7ef4b01"
        },
        {
          "alg": "SHA3-256",
          "content": "383bd00ba498176a5a2281f6be887858bf5a6a718dc9aad37e6429aae0c5840b"
        },
        {
          "alg": "SHA3-512",
          "content": "8ec7eaf87ee1857e57d92b17146bdeeea464e3265c4ffb99a270a1d5ea855adad201ea8ec6c8971d1638116df7ed179fe68bd9f4bb0fce4ddcdc4b130ff17a9f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.github.jnr/jnr-unixsocket@0.38.25?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/jnr/jnr-unixsocket",
          "type": "website"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.github.jnr/jnr-posix@3.1.22?type=jar",
      "group": "com.github.jnr",
      "name": "jnr-posix",
      "version": "3.1.22",
      "description": "Common cross-project/cross-platform POSIX APIs",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "2afdc7365d26adf44fc0bb96feeadc24"
        },
        {
          "alg": "SHA-1",
          "content": "f11ed8edba66935b0ddb76c2caa0e57d2653ddeb"
        },
        {
          "alg": "SHA-256",
          "content": "392645f602af36cd38ff0542838125e7ce39e577d09d911991f7834e7d56d8ff"
        },
        {
          "alg": "SHA-512",
          "content": "af8e8d5b385dfcaba27afafa0c0d2f4b88b80b638f47f2ed37e52550061be7925d47fbe22c95bda185127810afe50d06c379653db8120c865c7feb75ffe3309c"
        },
        {
          "alg": "SHA-384",
          "content": "ced641298c07ffd7b55bbcc45f9d4012935c65aa3185017604983a4fb1d1ad664f8cf16271271fdc838205270e56839e"
        },
        {
          "alg": "SHA3-384",
          "content": "398f2f09a6dee392b6e28a648f27e91eba786fbc7e98e29c9ab3c1fb15f03a0e63c4e5aad5f4c2ab37be4098ab7bef02"
        },
        {
          "alg": "SHA3-256",
          "content": "741556840e7bdadbbf9cd747b882ab98b4d1aa875eb3a7ecb8cbb213dd3b5f60"
        },
        {
          "alg": "SHA3-512",
          "content": "fc14db60dd4cbe7fa0bf007abc77294f12b5a0041ee678713aaeb7a78c20f6fc0099b23cad5661802be694ee2eed0c54ae7d49f2741eda51350c672d6a9734b6"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "name": "GNU General Public License Version 2",
            "url": "http://www.gnu.org/copyleft/gpl.html"
          }
        },
        {
          "license": {
            "name": "GNU Lesser General Public License Version 2.1",
            "url": "http://www.gnu.org/licenses/lgpl.html"
          }
        }
      ],
      "purl": "pkg:maven/com.github.jnr/jnr-posix@3.1.22?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/jnr/jnr-posix",
          "type": "website"
        },
        {
          "url": "http://github.com/jnr/jnr-posix/issues",
          "type": "issue-tracker"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.http-client/google-http-client@2.1.0?type=jar",
      "publisher": "Google",
      "group": "com.google.http-client",
      "name": "google-http-client",
      "version": "2.1.0",
      "description": "Google HTTP Client Library for Java. Functionality that works on all supported Java platforms, including Java 7 (or higher) desktop (SE) and web (EE), Android, and Google App Engine.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "7217e647aa20c034bc81e2a3341b2434"
        },
        {
          "alg": "SHA-1",
          "content": "f4c08fa160a5199af19f81080fbaa921ae2193c7"
        },
        {
          "alg": "SHA-256",
          "content": "20aa0948f6ceb5cfa9b2b3adddd9b7e990ab40230e084081642cbb81235d3eef"
        },
        {
          "alg": "SHA-512",
          "content": "0eb1d146ccd4abaff14178e1d3628d4df4e946caa9fd0f0b78ccf308b8fa56b653ff32de9b77227abe3def63587140917067110868f0bdf67ba11447560547ba"
        },
        {
          "alg": "SHA-384",
          "content": "27668ee79c00120f325c82c7da35a2592487a862f99e30c64bf5221952ba9887a13838852666bb3b82de5535d600f9f1"
        },
        {
          "alg": "SHA3-384",
          "content": "7d28728d58a73cb89683b0389c8ed383a4f5b578076051ba6de441a6f64c1b619692bf1d51072b9b7e9c5e71b8959b96"
        },
        {
          "alg": "SHA3-256",
          "content": "3248473756643cb20f99dae47170411c2f38a529c4483c68a08feb3a34baef4d"
        },
        {
          "alg": "SHA3-512",
          "content": "1d6c79cfb2b92bc781c4c5d3fbec390f596293d862b687c309a3f7581f698ff778b0c040773cc6cb2e87c9723e01501bbb5a9081327736c5eca721939110a661"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.http-client/google-http-client@2.1.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/googleapis/google-http-java-client/google-http-client",
          "type": "website"
        },
        {
          "url": "https://google.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/googleapis/google-http-java-client/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/googleapis/google-http-java-client/google-http-client",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.httpcomponents",
      "name": "httpcore",
      "version": "4.4.16",
      "description": "Apache HttpComponents Core (blocking I/O)",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "28d2cd9bf8789fd2ec774fb88436ebd1"
        },
        {
          "alg": "SHA-1",
          "content": "51cf043c87253c9f58b539c9f7e44c8894223850"
        },
        {
          "alg": "SHA-256",
          "content": "6c9b3dd142a09dc468e23ad39aad6f75a0f2b85125104469f026e52a474e464f"
        },
        {
          "alg": "SHA-512",
          "content": "168026436a6bcf5e96c0c59606638abbdc30de4b405ae55afde70fdf2895e267a3d48bba6bdadc5a89f38e31da3d9a9dc91e1cab7ea76f5e04322cf1ec63b838"
        },
        {
          "alg": "SHA-384",
          "content": "ba9ceaee1a37ca3201d6a1315ecb0327b495489efd0baa155c219c475df8d3eb69fe77ab0026563db406497626da6562"
        },
        {
          "alg": "SHA3-384",
          "content": "b9dc44dcc7cc86d5036f26d54c4003a2d72808ae7b07a0808bb53505c6d4281b5ad213eb1f3d0fef1113dec57cb0dfe1"
        },
        {
          "alg": "SHA3-256",
          "content": "fd8ab51846476c6c18822151c9ec07b39a9633010b5d20ea937fc6910407bc64"
        },
        {
          "alg": "SHA3-512",
          "content": "b42fa528242981a9d70e4f68ab75a24292df5112c44c21b6f18cb9201ce747885ba1d4dc69bc3d14d0da46a6c2638f937c11bc45749abeb55dc89ddada90cdda"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar",
      "externalReferences": [
        {
          "url": "http://hc.apache.org/httpcomponents-core-ga",
          "type": "website"
        },
        {
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2",
          "type": "distribution"
        },
        {
          "url": "http://issues.apache.org/jira/browse/HTTPCORE",
          "type": "issue-tracker"
        },
        {
          "url": "http://mail-archives.apache.org/mod_mbox/hc-httpclient-users/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/apache/httpcomponents-core/tree/4.4.16/httpcore",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.grpc/grpc-context@1.70.0?type=jar",
      "group": "io.grpc",
      "name": "grpc-context",
      "version": "1.70.0",
      "description": "gRPC: Context",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "b7e575dcff9de5208d81a29566a3d76a"
        },
        {
          "alg": "SHA-1",
          "content": "375570c198b9ff46f2202731d11271bb5cb396fa"
        },
        {
          "alg": "SHA-256",
          "content": "eb2824831c0ac03e741efda86b141aa863a481ebc4aaf5a5c1f13a481dbb40ff"
        },
        {
          "alg": "SHA-512",
          "content": "430cd53a07173fcfe8ac65d0b6f682a30eb7a50df9c33850a39dd2d48a159e63afec1e430471aeeb00c9c88e2354d4d5c456e451309ef5640c91a73def197fb7"
        },
        {
          "alg": "SHA-384",
          "content": "abf8b56a9d9848ec73c2567f1fca13bbb77e5c106b216a8112347b057caa2d9793804d6f1e1f235c9433fb7edd1c27a2"
        },
        {
          "alg": "SHA3-384",
          "content": "5c4c6b820f489296a340822b6891773e5d801d7e266f5ecde111b85c53be9e965094e80b98a396858c6fe2672688caf0"
        },
        {
          "alg": "SHA3-256",
          "content": "fa505119427ecd73239a401444f43654b5e7d2ed7c78a6bd7407b1d9f5cc3a58"
        },
        {
          "alg": "SHA3-512",
          "content": "56d7389a20562d264b1b759a7f0ff7057b3f832eee5a57eba65d4f2ba878fe7d1569b44ea22e42c9ae0abf5a79506a8dccffe5f51ce56563812d53442395e115"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.grpc/grpc-context@1.70.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/grpc/grpc-java",
          "type": "website"
        },
        {
          "url": "https://github.com/grpc/grpc-java",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.grpc/grpc-api@1.70.0?type=jar",
      "group": "io.grpc",
      "name": "grpc-api",
      "version": "1.70.0",
      "description": "gRPC: API",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "f4b23b6be4f2936c097e780cf6e8ef50"
        },
        {
          "alg": "SHA-1",
          "content": "c0d185f8435e2dbc9b0f430d1e89600858ee24ee"
        },
        {
          "alg": "SHA-256",
          "content": "45faf2ac1bf2791e8fdabce53684a86b62c99b84cba26fb13a5ba3f4abf80d6c"
        },
        {
          "alg": "SHA-512",
          "content": "011e0ce3870ade374954e5818f3a03ab22bd19fbbf171d2873bdf1ecdbdefae183a512043f9155aa120dce3e1c902680372b18c3dcf1bb64ae508ecfa7631677"
        },
        {
          "alg": "SHA-384",
          "content": "fd1b5f17eeeb4992c80f468e99d54d614ef0de8981d40d5a6e0e6801ce6d74844fb3e0769ba43b4e7507ae330e0c6312"
        },
        {
          "alg": "SHA3-384",
          "content": "6a74a79bef71b22bd1eb217c26ffa4a91fc571819f24af2b2fc6e2372b9289779c60ec98464c429c6bd91d50a8ff65b9"
        },
        {
          "alg": "SHA3-256",
          "content": "0a726d7583e90d3076f1d805850366c6bd2dc2bbe4d836d209247c50c062eedf"
        },
        {
          "alg": "SHA3-512",
          "content": "c47e25067c30a0a01dc0e92e0b5bf3c6c8fe0ed4738b85af6e261ccf62cecb66e7b537ba1493434dfd479633e6a3d72bb51b15868e96bdce3da5696d8b294878"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.grpc/grpc-api@1.70.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/grpc/grpc-java",
          "type": "website"
        },
        {
          "url": "https://github.com/grpc/grpc-java",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.opencensus/opencensus-api@0.31.1?type=jar",
      "group": "io.opencensus",
      "name": "opencensus-api",
      "version": "0.31.1",
      "description": "null",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "a5e7092bb89baaaee424f5a7b20d1bad"
        },
        {
          "alg": "SHA-1",
          "content": "66a60c7201c2b8b20ce495f0295b32bb0ccbbc57"
        },
        {
          "alg": "SHA-256",
          "content": "f1474d47f4b6b001558ad27b952e35eda5cc7146788877fc52938c6eba24b382"
        },
        {
          "alg": "SHA-512",
          "content": "aac98ed2de298609bac9cb5a69ac16df0ca9c9fc82f429720ddcfdd769fdae96b707ed81c8d8c37380de846b302aacaac80156ef75567061aed3f77cc3c3b725"
        },
        {
          "alg": "SHA-384",
          "content": "d8dfdbc7d584809f00b5a4239cbaf575e8924a176e92a44230e8ac1e9dc85e458b63fad69b0b445d8d2e8c1a70e7633a"
        },
        {
          "alg": "SHA3-384",
          "content": "5cb3db9b30adb23c2b33ce0ded61a69e5347a4531d0563fc9185aba11aab7a639bf40286fc8d0f52a73c50add15775c7"
        },
        {
          "alg": "SHA3-256",
          "content": "733221e8a1dc4476c53fee92837757bfd468afe25f57bbce79d25c60f2e240f6"
        },
        {
          "alg": "SHA3-512",
          "content": "cdb61cef7324e1173f297867ec9274c6439779cdd674a442d26724de047258a64f3f76ad4e496f7afde785b5dbdf5d03f0b0f1d4424868cf14ebc1fd3b63dc76"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.opencensus/opencensus-api@0.31.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/census-instrumentation/opencensus-java",
          "type": "website"
        },
        {
          "url": "https://github.com/census-instrumentation/opencensus-java",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.opencensus/opencensus-contrib-http-util@0.31.1?type=jar",
      "group": "io.opencensus",
      "name": "opencensus-contrib-http-util",
      "version": "0.31.1",
      "description": "null",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "9ecc9c428eb87dc734ae8d07b820ce26"
        },
        {
          "alg": "SHA-1",
          "content": "3c13fc5715231fadb16a9b74a44d9d59c460cfa8"
        },
        {
          "alg": "SHA-256",
          "content": "3ea995b55a4068be22989b70cc29a4d788c2d328d1d50613a7a9afd13fdd2d0a"
        },
        {
          "alg": "SHA-512",
          "content": "3192532e4989a26d9a69f4246ef994b35058d155e199b500196d14427d1b46b1515f872a36500cb84768524870297388c90272ffa61dc8448f6f7571c4f86b27"
        },
        {
          "alg": "SHA-384",
          "content": "46f9dcc71f71f33be99a00fdd9a2ba602eb547b56b6e8177660d3a44d3dd974609bf16d2a1b58359a0f39797cb3ee683"
        },
        {
          "alg": "SHA3-384",
          "content": "21d66f5efa2511de4e4b4f3ea18d37aeb954ea1b4315f1e11cd84a11a95e9bb9841addee4d1230c3813f06144a675a1c"
        },
        {
          "alg": "SHA3-256",
          "content": "8352c7dcd73fced7e49425d70f6955579f5c24fafd4529e5f5e54ef5a88a3c83"
        },
        {
          "alg": "SHA3-512",
          "content": "f8ec86e5728b9acbdaa684cbf385ab3834006e44363de43f9af4b50dca71d4e0d77d0d8b2e7bb97435581dda6572691b1d263835e4e97256999df550b9efc13b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.opencensus/opencensus-contrib-http-util@0.31.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/census-instrumentation/opencensus-java",
          "type": "website"
        },
        {
          "url": "https://github.com/census-instrumentation/opencensus-java",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.http-client/google-http-client-gson@2.1.0?type=jar",
      "publisher": "Google",
      "group": "com.google.http-client",
      "name": "google-http-client-gson",
      "version": "2.1.0",
      "description": "Google HTTP Client Library for Java",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "1416246dac1dae9f117f63c38ec6ce9c"
        },
        {
          "alg": "SHA-1",
          "content": "e65ea98fe4e8d3a512559698a0d8664908fd36f3"
        },
        {
          "alg": "SHA-256",
          "content": "3cf72c7b88375a34bf721c664f42edc8e096e2370e4126c9b8933c3c92e591f3"
        },
        {
          "alg": "SHA-512",
          "content": "16056abdea4d5accabf3e50aa572c485ea25dfca2dfe19e5258e87eef78121a5270eda3cd8c690bac9823dc8a89872de0e81fc9da62113707ec7df7f5ae88e5d"
        },
        {
          "alg": "SHA-384",
          "content": "1dc17d9a9faae3c38fdafba685600e00da33386150c5df126f450a360d26017940fcc5af2d8cb561b817195020bf1008"
        },
        {
          "alg": "SHA3-384",
          "content": "4f50fff2b447dc08918878ddc59a448383097c777fed59a0f12de85b07660faad6f5f1db0be72706806d73d162e2377d"
        },
        {
          "alg": "SHA3-256",
          "content": "23f4dbdc62afd307e7bb3354ba97a7ba614259441453fc2acdcf51f60e67d801"
        },
        {
          "alg": "SHA3-512",
          "content": "0b79e4f60953d3a8fb06c53016473c365fb019cf7c7a2a873a0ef94b2ff51c32f0b6b26044fcebc719bff7522fbeef28514d8fda568dc6d9a0a8b88362d97f3e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.http-client/google-http-client-gson@2.1.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/googleapis/google-http-java-client/google-http-client-gson",
          "type": "website"
        },
        {
          "url": "https://google.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/googleapis/google-http-java-client/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/googleapis/google-http-java-client/google-http-client-gson",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.api-client/google-api-client@2.9.0?type=jar",
      "publisher": "Google",
      "group": "com.google.api-client",
      "name": "google-api-client",
      "version": "2.9.0",
      "description": "The Google APIs Client Library for Java is a Java client library for accessing any HTTP-based API on the web",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "ea5f238f3ad4f44eb2261e66a2dcfc9d"
        },
        {
          "alg": "SHA-1",
          "content": "d5729efe51f8d0d03314749079921ddf69507082"
        },
        {
          "alg": "SHA-256",
          "content": "461377a5c904e8e4e0091cd1b4752bc9ef58b7223d608886d9642436d4b21273"
        },
        {
          "alg": "SHA-512",
          "content": "f2071c5d1da4220d3ea1127802cb569ba5558cedc820f092d1db44a52a60bf444eb523a1593335a12f7dab5f9f1942b1d3f989850d6e35419b52ee28c9743b6e"
        },
        {
          "alg": "SHA-384",
          "content": "6b9cfcf0a7dd6fd93b5bb8d77457a7994144f971a4cd6c82e024b34879c0cc03d6a8e873e6f886be16604161204153f5"
        },
        {
          "alg": "SHA3-384",
          "content": "832023844ea373aa06b8a59ed71a77b5189c86ee8d6b2a8bff66bf9a19868475f39a8739210af63cca01c241d02a029c"
        },
        {
          "alg": "SHA3-256",
          "content": "1125d8a859a8dff49278597119cf238a26513c2c784ae5b83791d44aa0e77bda"
        },
        {
          "alg": "SHA3-512",
          "content": "5058fe8f99b63f9fe25e76d04be905f0c39910afc3e1dabaa3a75837455e2ba324d78270dffef52b15bbd2653e2ccaaf684479df512118092e0b56a5c8db0692"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.api-client/google-api-client@2.9.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/googleapis/google-api-java-client/google-api-client",
          "type": "website"
        },
        {
          "url": "https://github.com/googleapis/google-api-java-client/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/googleapis/google-api-java-client/google-api-client",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.http-client/google-http-client-apache-v2@2.0.0?type=jar",
      "publisher": "Google",
      "group": "com.google.http-client",
      "name": "google-http-client-apache-v2",
      "version": "2.0.0",
      "description": "Google HTTP Client Library for Java",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "2eea96e72c1d01d74e0f93c9b677519b"
        },
        {
          "alg": "SHA-1",
          "content": "9d7ec2f47541ac747bce141c0d04b07c01a9f820"
        },
        {
          "alg": "SHA-256",
          "content": "9dfeedb952d2f0351dabc3327c42d87431acba63ad15eee272282af56ec033ab"
        },
        {
          "alg": "SHA-512",
          "content": "a6c7f96546105edbeff39373eace61893f0c53a6efca1de071ee481ca0a2b8845c2c5fc7c0f8a24f9dd7a0a1e69e177ac00f28aefbf54aca29a681470a523a17"
        },
        {
          "alg": "SHA-384",
          "content": "c5e0867f05fa5961d761c57a0f2a799bb20b3544a35ff5192ed17e220c07e43fc5eba7a9758130c0976d48f854790bd0"
        },
        {
          "alg": "SHA3-384",
          "content": "08a2b32fa6656f17a65983de440a7789c904616371458f200a8bbf7e8b9dbabd5c8720e9d83a490247289d6759e89cb3"
        },
        {
          "alg": "SHA3-256",
          "content": "edd458343dec03285dcedf4a29f094678b9295085dba2b9c7ab13faa06e80c3c"
        },
        {
          "alg": "SHA3-512",
          "content": "cda69daafb9b6743c32b3a4e9c1267454c98d35102fb1534d4dd0d7b4f6ee28f89c2d8121ec00155d35324e73b9e22ad32e437072d49075187b7d79f2e95fdb4"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.http-client/google-http-client-apache-v2@2.0.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/googleapis/google-http-java-client/google-http-client-apache-v2",
          "type": "website"
        },
        {
          "url": "https://google.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/googleapis/google-http-java-client/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/googleapis/google-http-java-client/google-http-client-apache-v2",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.apis/google-api-services-sqladmin@v1beta4-rev20260317-2.0.0?type=jar",
      "publisher": "Google",
      "group": "com.google.apis",
      "name": "google-api-services-sqladmin",
      "version": "v1beta4-rev20260317-2.0.0",
      "description": "Sonatype helps open source projects to set up Maven repositories on https://oss.sonatype.org/",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "11fcdc6922c3b79d6d7ebf53bf83ab0d"
        },
        {
          "alg": "SHA-1",
          "content": "745c8df5db2227bef7142c57461d0a8010b881b1"
        },
        {
          "alg": "SHA-256",
          "content": "59707a1559d7c6388907354e506e099993a8e775dd3bd9caaa9c1c8ea014d4b4"
        },
        {
          "alg": "SHA-512",
          "content": "7e7dea7d0e3ba996553b5e108a3e84d0c9a3aecfb1610a7b75a69efda616e6ec69028bcb0935025575021ab1c9eec8f2d53ce6b34dac5642389017032409f089"
        },
        {
          "alg": "SHA-384",
          "content": "310b74dcd5098435134218c3d02377625a975842f84b915b55cb09fd926fb0b8a04dfdab576613618128c3ee0bf1e6ea"
        },
        {
          "alg": "SHA3-384",
          "content": "a9b074155bf7f57af4cf00ed0afab5102ea0d0944e03305beb4f91d03e2ec7ce1b0b4ea509f41c733fa48526a9cfe37c"
        },
        {
          "alg": "SHA3-256",
          "content": "91f36d5925208a69e01d7aa52ec08bf39d674a66de6cb469acf8e12f420eef41"
        },
        {
          "alg": "SHA3-512",
          "content": "adebfb54ad7b84ea6f7c34d657623f5b07ec338d05083be85e830088b11e05f391c873618ff8334af0eecfecf4389c6cf0343429e9349853e1e1c2b653092233"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.apis/google-api-services-sqladmin@v1beta4-rev20260317-2.0.0?type=jar",
      "externalReferences": [
        {
          "url": "http://nexus.sonatype.org/oss-repository-hosting.html/google-api-services-sqladmin",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "http://svn.sonatype.org/spice/tags/oss-parent-7/google-api-services-sqladmin",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.auth/google-auth-library-credentials@1.46.0?type=jar",
      "publisher": "Google",
      "group": "com.google.auth",
      "name": "google-auth-library-credentials",
      "version": "1.46.0",
      "description": "Client libraries providing authentication and authorization to enable calling Google APIs.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "5b7cf063a2df1d9939ed26c7ec02da77"
        },
        {
          "alg": "SHA-1",
          "content": "b4a034dd289c23fd37fa337f40e2617fc902669b"
        },
        {
          "alg": "SHA-256",
          "content": "6364caa01ce016378dadf81f2501866d065a5840763821644e1405baaa8d929e"
        },
        {
          "alg": "SHA-512",
          "content": "94c0d13dc036e2125249fdffba8bb20bb741092e79474beea5bae3a74896eec35b21703c27e1b2ec60804233e5c8e9650ea41fc447bbb5f6074cb17788a90951"
        },
        {
          "alg": "SHA-384",
          "content": "5ca28130a0010eca684cfea77566a502542359156cf150792e67405363d948b4cfa9ad7051d07eb1edf875dfdfcf3d2d"
        },
        {
          "alg": "SHA3-384",
          "content": "ff73bd51533eb5737ebdd42d89f309b0f36514acc1b9f96c69aa8e579ab5e408cd1fd4b8d5b0f6dde9b47e1b12f6fc80"
        },
        {
          "alg": "SHA3-256",
          "content": "583e5f46a6c1fece80a379517015bb716f6ea28804fac14d502061df482917c7"
        },
        {
          "alg": "SHA3-512",
          "content": "67789ebbbfa9a794dd73d32b41437e924d16d35719a29ff74d353985ffe7e78cd591d927040310c888db6215dbae84420567ffaafdaa1e8c2b99cf5926e13951"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/com.google.auth/google-auth-library-credentials@1.46.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/googleapis/google-cloud-java/google-auth-library-credentials",
          "type": "website"
        },
        {
          "url": "https://google.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/googleapis/java-shared-config/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/googleapis/google-cloud-java/google-auth-library-credentials",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.auth/google-auth-library-oauth2-http@1.46.0?type=jar",
      "publisher": "Google",
      "group": "com.google.auth",
      "name": "google-auth-library-oauth2-http",
      "version": "1.46.0",
      "description": "Client libraries providing authentication and authorization to enable calling Google APIs.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "bd0db7e3ba6e7858aa0d16cd559d2067"
        },
        {
          "alg": "SHA-1",
          "content": "afaa62d0ad2c6ba82c0dae4f2b791b0d43e2db51"
        },
        {
          "alg": "SHA-256",
          "content": "f9d24c965bc08d27ada083fdccb62b956cd19f852fc2b3520af863bbdfc8999c"
        },
        {
          "alg": "SHA-512",
          "content": "b451e3cba2d1659e5ab55a224e3e7717db58609c589da266ed848217f3726334699e9eac92d5ca19ef17dd47e36c87a3cfc69f6d3575dcac2f7033ee5c099342"
        },
        {
          "alg": "SHA-384",
          "content": "b55799fa2b0242abf6b654891d8c9513b2ac79c7faec37ff311b14e531233b979f503363f2da237a6496b196399effe6"
        },
        {
          "alg": "SHA3-384",
          "content": "bc6e30ad8f36f4cdcb2bfbbec1fe49b40240b424e5257afbe7c67a162d62ff3aec21ce12cead46158063a6ca0d838e74"
        },
        {
          "alg": "SHA3-256",
          "content": "f82995ecd00027ccccc1ee5e0578200e0e0913fd186d93d1b10a8690e25576b8"
        },
        {
          "alg": "SHA3-512",
          "content": "7c85a1a24119fa3817992e621231a9ffd8910038211394dd978484cc43f98847a09a92d484791ade3a4551c0ee8c06fa8c2bbce23f0aafc0548c2cc78313238e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/com.google.auth/google-auth-library-oauth2-http@1.46.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/googleapis/google-cloud-java/google-auth-library-oauth2-http",
          "type": "website"
        },
        {
          "url": "https://google.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/googleapis/java-shared-config/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/googleapis/google-cloud-java/google-auth-library-oauth2-http",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.api/api-common@2.53.0?type=jar",
      "publisher": "Google LLC",
      "group": "com.google.api",
      "name": "api-common",
      "version": "2.53.0",
      "description": "Common utilities for Google APIs in Java",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "9ee05b70e837dea0aa8cf25967c017f9"
        },
        {
          "alg": "SHA-1",
          "content": "96e6ff53548b176c5d046049dc8fb1c64546a96a"
        },
        {
          "alg": "SHA-256",
          "content": "f7073fb389c2aa329981ee65241db7947e8744c988e6c4d975f18bf2748b935a"
        },
        {
          "alg": "SHA-512",
          "content": "8651f8bf699c8e088b72b9e800c61871d0732f73e227aa9451b78a0049f5ba1a125e9026eb34a7b4400f976e463b2ba816e9f33d0023ceafe9eeaccb3addbee1"
        },
        {
          "alg": "SHA-384",
          "content": "afed7f9faae0ec5fcf50162a4a16f13cff7dfdca7b959e866b84cc714de708674cb26481164d34c91576c96e5b7abb95"
        },
        {
          "alg": "SHA3-384",
          "content": "8672cb69fac3cfb97168f85a173fd1fbbeb991e845a16f3396518c67f097f8b0835c47a64043c4e17f836c2563a07dba"
        },
        {
          "alg": "SHA3-256",
          "content": "f59d897bb46c3059d491000646b59ced385c642437641f12ed1cd0cb6bbfa4a4"
        },
        {
          "alg": "SHA3-512",
          "content": "1a5f6b534a5c65f52ca5472c9d1c9a1527d8b285abb0c1c0e5b5216459bc0cb2b8d87d991384e265b490ff375d920fe530a15b979d1c112ec4bb24abf69135fa"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/com.google.api/api-common@2.53.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/googleapis/sdk-platform-java",
          "type": "website"
        },
        {
          "url": "https://google.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/googleapis/sdk-platform-java/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/googleapis/sdk-platform-java",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/javax.annotation/javax.annotation-api@1.3.2?type=jar",
      "publisher": "GlassFish Community",
      "group": "javax.annotation",
      "name": "javax.annotation-api",
      "version": "1.3.2",
      "description": "Common Annotations for the JavaTM Platform API",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "2ab1973eefffaa2aeec47d50b9e40b9d"
        },
        {
          "alg": "SHA-1",
          "content": "934c04d3cfef185a8008e7bf34331b79730a9d43"
        },
        {
          "alg": "SHA-256",
          "content": "e04ba5195bcd555dc95650f7cc614d151e4bcd52d29a10b8aa2197f3ab89ab9b"
        },
        {
          "alg": "SHA-512",
          "content": "679cf44c3b9d635b43ed122a555d570292c3f0937c33871c40438a1a53e2058c80578694ec9466eac9e280e19bfb7a95b261594cc4c1161c85dc97df6235e553"
        },
        {
          "alg": "SHA-384",
          "content": "fc0058495e54efb6e05a34e3ff422e7c8347bcc77d6d9b87e9253424968dee6ef6a215c318d7e54f8705276be81f0682"
        },
        {
          "alg": "SHA3-384",
          "content": "ed6464b715de6ced0d9981a3f28140824946a4b7a02ffaff6116c833bb36e8f77a6282ce63c0d82cfe841d4fd6916891"
        },
        {
          "alg": "SHA3-256",
          "content": "ecfc9bef24ae28cf94c6775ecf6e2086d90a25d8d5476a4f6bb24001601b6cd0"
        },
        {
          "alg": "SHA3-512",
          "content": "f2b333527faedf504f60aa70a3d491972fa76f7e61e6351027f74613f41001157656824fe312b6e1df6dc4979704fe2a745b618d5368a97fe0bf8749739de9e2"
        }
      ],
      "licenses": [
        {
          "expression": "(CDDL-1.0 OR GPL-2.0-with-classpath-exception)"
        }
      ],
      "purl": "pkg:maven/javax.annotation/javax.annotation-api@1.3.2?type=jar",
      "externalReferences": [
        {
          "url": "http://jcp.org/en/jsr/detail?id=250",
          "type": "website"
        },
        {
          "url": "https://maven.java.net/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/javaee/javax.annotation/issues",
          "type": "issue-tracker"
        },
        {
          "url": "javaee-spec@javaee.groups.io",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/javaee/javax.annotation",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.oauth-client/google-oauth-client@1.39.0?type=jar",
      "publisher": "Google",
      "group": "com.google.oauth-client",
      "name": "google-oauth-client",
      "version": "1.39.0",
      "description": "Google OAuth Client Library for Java. Functionality that works on all supported Java platforms, including Java 7 (or higher) desktop (SE) and web (EE), Android, and Google App Engine.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "cf4992aee304401b66f6d03e654ab981"
        },
        {
          "alg": "SHA-1",
          "content": "99f02f3c46c68c01dfc95878456b009a13229c88"
        },
        {
          "alg": "SHA-256",
          "content": "27fc61ee2d526e33d31350b5ea383091c0879345e261f9b2e6fcc97a20c86f88"
        },
        {
          "alg": "SHA-512",
          "content": "f8973ab9ddda79746cc4e5d6c156e571604304627db7ebc2a570f56679cdeeddad86ce8e36a8acb7593a215c9a55cd8b8f86d85d9bec67b71c15b27eb1af45fd"
        },
        {
          "alg": "SHA-384",
          "content": "a3ef0821a2964960487e39747c2a69ec2030ac04e0fd1bae025c5c71036ffa6dc8a1c99effb7c5a63fe9ce81b742e9d0"
        },
        {
          "alg": "SHA3-384",
          "content": "c3c37f7e6c0f7d107c8e52546c8ec9e4f726308dfb065e9cdd8265904ca1a06d401b29fa6b84d3df67c420b8604b6330"
        },
        {
          "alg": "SHA3-256",
          "content": "44c05e415db8bdfef87fb2207b5d4d02c115aa661b334cf26ef9b97be29d019e"
        },
        {
          "alg": "SHA3-512",
          "content": "abd5c4d3fe3a17103f09c70f6adaf130b59690d8639fd771ed03588451bd061c3d38782dd178ff1999806942a950b584d016b77a4bab0fa28e66b64052e08d60"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.oauth-client/google-oauth-client@1.39.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/googleapis/google-oauth-java-client/google-oauth-client",
          "type": "website"
        },
        {
          "url": "https://google.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/googleapis/google-oauth-java-client/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/googleapis/google-oauth-java-client/google-oauth-client",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/dnsjava/dnsjava@3.6.4?type=jar",
      "publisher": "dnsjava.org",
      "group": "dnsjava",
      "name": "dnsjava",
      "version": "3.6.4",
      "description": "dnsjava is an implementation of DNS in Java. It supports all defined record types (including the DNSSEC types), and unknown types. It can be used for queries, zone transfers, and dynamic updates. It includes a cache which can be used by clients, and a minimal implementation of a server. It supports TSIG authenticated messages, partial DNSSEC verification, and EDNS0.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "fedfa4856a051e3616b78ed7c146b1e3"
        },
        {
          "alg": "SHA-1",
          "content": "27b921d4fe745d2dcaf7185ac261b06d4a39e35b"
        },
        {
          "alg": "SHA-256",
          "content": "39d50d2b5bdee1161978bf85a1b01e95fee490e92bbe98d76d3ceb9642183570"
        },
        {
          "alg": "SHA-512",
          "content": "6a60c2dec294ba289f00afb5d919e90abea72f79067e4934bee164392f2200b292c3f004f6171ce87a7e869295c6b1a6a7e4a9880bdb1728d7661f18863f9ec8"
        },
        {
          "alg": "SHA-384",
          "content": "5bcc35e7c584ebb877fc4deb5897246f00ba4f32251555052a923ac1b555dc128e13d0a6165001b130ac7e83f678930c"
        },
        {
          "alg": "SHA3-384",
          "content": "dd26275406e2ee9a5d5fb02b252316b4ee8aebdd5567880097437c01445d489e4f01d4b0fbedf0f0f053256554175ba3"
        },
        {
          "alg": "SHA3-256",
          "content": "dec33c58965d9366771ad71c817a545838939ebe3fd3384fff95b5e6409d16d5"
        },
        {
          "alg": "SHA3-512",
          "content": "493ff36f6992cce2a78e8dc992592af45358f3acc10a1cafde2c6a1e1ab9cb824a338e949cf1a5be6524c401d625d3b253b6ee4494b87c1f7fcac01e9bbf74cb"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/dnsjava/dnsjava@3.6.4?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/dnsjava/dnsjava",
          "type": "website"
        },
        {
          "url": "https://github.com/dnsjava/dnsjava",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.api/gax@2.79.0?type=jar",
      "publisher": "Google LLC",
      "group": "com.google.api",
      "name": "gax",
      "version": "2.79.0",
      "description": "Google Api eXtensions for Java (Core)",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "82a44857a04c4794db48fe077efd0c57"
        },
        {
          "alg": "SHA-1",
          "content": "ae533be5c421a718e73fa5a7f04909f8036ac729"
        },
        {
          "alg": "SHA-256",
          "content": "05cc74a70456dcf20ae4484c444212d0f47d59b67fe2b3c6df9a79fad657d7fc"
        },
        {
          "alg": "SHA-512",
          "content": "b179a029b92b905e26a74b8f8012de44acc7828f61a2dcb4483e090561d102071c4c2e7d1f4c7b62d5efd81d0f5b8f0b54ba49d608807b02481268e71bba1f6a"
        },
        {
          "alg": "SHA-384",
          "content": "4d84ed6b16922d78d77bf480f4953909eb28e88caeef47a2ada2ae6f33d66dc2c90e622cd447476b172e2f9237b89bf4"
        },
        {
          "alg": "SHA3-384",
          "content": "24ee3ae26b78796b26fd2c049ed7ac966d21c5ea3beb90c2d4f3be92356ca2f2057dbb00f8ac0663a408ca58a7c40ad8"
        },
        {
          "alg": "SHA3-256",
          "content": "3db46f95dc14e6161d976fe34eb0d8028cf356937353a5e7d4120858deb88a1b"
        },
        {
          "alg": "SHA3-512",
          "content": "e9b5091f2f685f2a6516b34811348908425a9796d359ed3a07c8da14f65d8a3cd0c917126ff86750ddcdfa5633a7bb951ab2ebc1cb6440ccd4a33a102ea685f4"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/com.google.api/gax@2.79.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/googleapis/sdk-platform-java",
          "type": "website"
        },
        {
          "url": "https://google.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/googleapis/sdk-platform-java/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/googleapis/sdk-platform-java",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.github.resilience4j/resilience4j-retry@2.4.0?type=jar",
      "group": "io.github.resilience4j",
      "name": "resilience4j-retry",
      "version": "2.4.0",
      "description": "Resilience4j is a lightweight, easy-to-use fault tolerance library designed for Java8 and functional programming",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "0cdac2f0d96184c09dfe3e4f1705e963"
        },
        {
          "alg": "SHA-1",
          "content": "7072ed9351dc3a38a7c5a4a1ca21d3355e1f6453"
        },
        {
          "alg": "SHA-256",
          "content": "13cd52c89b69b9dbd68188877f16bdbeb3ae524d351a2d947f31ae07684c420a"
        },
        {
          "alg": "SHA-512",
          "content": "1e60cc69111eee4fe1d18d9c36e1baad62cc6ea06aa065cdce461fbd3cdc8c625f4ef818750def5b31469a80af2f8f52d4441aa946205b3203cafceed55655c0"
        },
        {
          "alg": "SHA-384",
          "content": "a1373917623fd647255c0c29533604d69d4f8395b8b7c50c95830447871d52d983df4a16a58990f9f7d6c242fdbb2903"
        },
        {
          "alg": "SHA3-384",
          "content": "b405c2ddefb6b78aa8d936c5c581e62cfdefc719c892da1625d82a624a6ac5afc60aa78251ccccbf056e8b6b4a4ce766"
        },
        {
          "alg": "SHA3-256",
          "content": "320682e81e53f54397c029244f5b1ee1b0cd589f88e57b00643e300c924f4623"
        },
        {
          "alg": "SHA3-512",
          "content": "9bc37b4a7fc968fc2c2f6f17b1083208b95a82aa5f826974a110cd9b057040071f02b850b32099f7657b20e36198da8eec5dd46e203a574338428d2f84d0845e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.github.resilience4j/resilience4j-retry@2.4.0?type=jar",
      "externalReferences": [
        {
          "url": "https://resilience4j.readme.io",
          "type": "website"
        },
        {
          "url": "https://github.com/resilience4j/resilience4j.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.github.resilience4j/resilience4j-micrometer@2.4.0?type=jar",
      "group": "io.github.resilience4j",
      "name": "resilience4j-micrometer",
      "version": "2.4.0",
      "description": "Resilience4j is a lightweight, easy-to-use fault tolerance library designed for Java8 and functional programming",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "b89d1f870641d912bbb350339b63bd94"
        },
        {
          "alg": "SHA-1",
          "content": "4d81d22237b84c5c075f805a0c7d4640bbd7ca33"
        },
        {
          "alg": "SHA-256",
          "content": "728613147bbbc0c329f69f5423b760778322e2f9af345cb0bd69b3fc89b17e88"
        },
        {
          "alg": "SHA-512",
          "content": "ec0f842b57a23b8536f9672c0c3eeb6831c9e9951be5862141ee029c6ff51994e9c3a046343ae985286acb3ab35766a770507fbaf35735aafc269fb28cf4fad4"
        },
        {
          "alg": "SHA-384",
          "content": "2187703d3e99f7f8b86f5d3280b3a247721752c38ef0dab42962729bf3ef6d88aff5eb34c6349e4b3f9e524d77ff1433"
        },
        {
          "alg": "SHA3-384",
          "content": "38f298fca66df6f9421b7cc92cfa13a537c49f57aa3651dd680684ca452fd764bc2e51e0d00b5774eb45b6126ebcf0da"
        },
        {
          "alg": "SHA3-256",
          "content": "2a57abc1c0ab88009c34b48f4135ce4e23974fc37deb33b99e4310cb8f0ff0a4"
        },
        {
          "alg": "SHA3-512",
          "content": "8b0f573a05168383121e9590c73c3263b43e9fc8f84b6813034baf07841d23661a965aa0abd348bc1c5b0166c9d3e50b896c8462b9d9381d60a7d1c08a10c9fe"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.github.resilience4j/resilience4j-micrometer@2.4.0?type=jar",
      "externalReferences": [
        {
          "url": "https://resilience4j.readme.io",
          "type": "website"
        },
        {
          "url": "https://github.com/resilience4j/resilience4j.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.micrometer/micrometer-observation@1.16.5?type=jar",
      "group": "io.micrometer",
      "name": "micrometer-observation",
      "version": "1.16.5",
      "description": "Module containing Observation related code",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "d4b4161bdbf3e4f0770f67fe11050f37"
        },
        {
          "alg": "SHA-1",
          "content": "9dff48a7a9dd84d9083e30a36855bb21a7d6836e"
        },
        {
          "alg": "SHA-256",
          "content": "4406f33535185ff896375e9a81a4b8694e28bf20c1089b24de0325d87f63dfe7"
        },
        {
          "alg": "SHA-512",
          "content": "7d9bb9f951a2434674f6e15bb14f538738679b4f74bf2459ee0b948a66d3744352ce32330f2c50898665314dc59aace193761654f7253f333b663179bb60df47"
        },
        {
          "alg": "SHA-384",
          "content": "dcfaf90f35dc2e53eb4b6abe63e5241245b365b0d9feba844f260b939dff556996486bd3e9b8b096d2c2628aca33800b"
        },
        {
          "alg": "SHA3-384",
          "content": "5a71f6b17a53b80448ec6e707664dc10894534456a307f8802397ca54200667010b20104de9704f9d79ea9ed89a65646"
        },
        {
          "alg": "SHA3-256",
          "content": "f32412cbdd25965394c0a46a0768c2ccbb6e3160c7d4db1c241571a1eba9700c"
        },
        {
          "alg": "SHA3-512",
          "content": "1c8318abbee580bb9cc2d4f9380db2567842ef2ecddef0b867b10c820cb443311c8e3fb69c0355f2da8d0546894d582a49207240b9028646d23ea4aef77dc93e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.micrometer/micrometer-observation@1.16.5?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/micrometer-metrics/micrometer",
          "type": "website"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.github.resilience4j/resilience4j-bulkhead@2.4.0?type=jar",
      "group": "io.github.resilience4j",
      "name": "resilience4j-bulkhead",
      "version": "2.4.0",
      "description": "Resilience4j is a lightweight, easy-to-use fault tolerance library designed for Java8 and functional programming",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "dfd76f43ef9c2d7912a99c128af344bb"
        },
        {
          "alg": "SHA-1",
          "content": "eb8ba5861207fcaec13468eab5a4dbe1d9e9e66f"
        },
        {
          "alg": "SHA-256",
          "content": "d718b601cedd94946c7572caafac1d93f5c9695bad61e0e4b6518e3f5f7c6ccc"
        },
        {
          "alg": "SHA-512",
          "content": "00b42a5110c37bcef4df56a807882f1d6919ceb9fc53e0daca2564258d7dafd299925f2f5ef9ac65c076c2757a934f48e88028f7bf839a956d44350ecfd4d28e"
        },
        {
          "alg": "SHA-384",
          "content": "03455782043e549dcb307f728281cfc8ecb4a8d6dd96d944db0d8cdb9bf80bed43cef1370b65f32e71dc52505a0803f1"
        },
        {
          "alg": "SHA3-384",
          "content": "af46a0541107931e8f5f7995d0f40f35914c66b8944f56417aff9605d29f888f571a1afcca1ea81f384eb747cd350e40"
        },
        {
          "alg": "SHA3-256",
          "content": "b00fd36b17bfb3db6b0ee095f9980af4829df095fdf326f78b0a26163a4d3916"
        },
        {
          "alg": "SHA3-512",
          "content": "de367c0a1d1bfe4c38333f8668567416adee1eba420e80c4524842180da9e2dc09579d4b2063edbab2da1e468f1fd093e42adfe174b0afa372cd33f421f9146c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.github.resilience4j/resilience4j-bulkhead@2.4.0?type=jar",
      "externalReferences": [
        {
          "url": "https://resilience4j.readme.io",
          "type": "website"
        },
        {
          "url": "https://github.com/resilience4j/resilience4j.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.github.resilience4j/resilience4j-ratelimiter@2.4.0?type=jar",
      "group": "io.github.resilience4j",
      "name": "resilience4j-ratelimiter",
      "version": "2.4.0",
      "description": "Resilience4j is a lightweight, easy-to-use fault tolerance library designed for Java8 and functional programming",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "6a450ca57c1c0172ffc32c2355d4885d"
        },
        {
          "alg": "SHA-1",
          "content": "4017079c1f73b0cc73fcc53a25306f3f8743e64c"
        },
        {
          "alg": "SHA-256",
          "content": "09a3c33cced3e1135cefda8667914b32b7304429c509b07fca771bd92d0c1780"
        },
        {
          "alg": "SHA-512",
          "content": "d50e1bcb0700963bfe2b4802301cdf2156a553f29caae07aa8192a44e0a2abac703fa190b1527a9aeae1412ae9215d701b494220ee3f3edfdeb9d3b3652f71ae"
        },
        {
          "alg": "SHA-384",
          "content": "6ee2786d1c40380381393adb6beef91b978bc9ba66647b16316ab448e3c97e2eb486521ebfdb965c5db6aae7c72e0fb6"
        },
        {
          "alg": "SHA3-384",
          "content": "189831d7d92301ca5f1211909d8787cb4a2fa6d9f267e3af9b0d9900dfe718ec75130d26110c21b34c59674e1f2720e4"
        },
        {
          "alg": "SHA3-256",
          "content": "8ac8f08bc4c21b1dcff1e8561364e5c7149523cdd658cecc426eb9fcfc4114d0"
        },
        {
          "alg": "SHA3-512",
          "content": "c078763d56a7190c102719fac6c012bd4c4d6e4e1b61c8201a8ed9909b4c7736c9d681163a0c46d99251ac1d2186d158ffd6539666bccf8b5ac759825dc2f755"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.github.resilience4j/resilience4j-ratelimiter@2.4.0?type=jar",
      "externalReferences": [
        {
          "url": "https://resilience4j.readme.io",
          "type": "website"
        },
        {
          "url": "https://github.com/resilience4j/resilience4j.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.github.resilience4j/resilience4j-timelimiter@2.4.0?type=jar",
      "group": "io.github.resilience4j",
      "name": "resilience4j-timelimiter",
      "version": "2.4.0",
      "description": "Resilience4j is a lightweight, easy-to-use fault tolerance library designed for Java8 and functional programming",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "2d421c59f3f87eaee243997f529cf5b4"
        },
        {
          "alg": "SHA-1",
          "content": "28351433fa75cccb0e0c8154676a427b5b4a3340"
        },
        {
          "alg": "SHA-256",
          "content": "946237017a5f52a878cfad8227c3eb6b957482be30d25a409cb8004e13237d38"
        },
        {
          "alg": "SHA-512",
          "content": "74e100e06388785058cd506459a0190bef879953dfd2ae2e3f16dcc83e76c5ecff62880d8ac7b96fcdf4087e863f4f3423b44290010a15a5b64c60808d2544f1"
        },
        {
          "alg": "SHA-384",
          "content": "586453333996b3d2b8150277eb41dbb7e2146b8e2a877e7cf8932cdddfe8a0e7c690335ba6e53e7051b0265a5016ecfa"
        },
        {
          "alg": "SHA3-384",
          "content": "b99c965e83e8f57bded1e66856b1278525947bea15c905dda5e13333ab9b82ebc5d0c27f14e6a8961ee32a0861995772"
        },
        {
          "alg": "SHA3-256",
          "content": "8709bedf51af90c9ee3c31b64fb893a199ef5defe54670507825b15551312737"
        },
        {
          "alg": "SHA3-512",
          "content": "865aa0e62b990fda80679824ae9ba32b631fe6cd72ea437201e0ce43bbae1b3a5c23fcdfe7454736822a7e6a38ba68456494f694775fc7b06a1077847357e988"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.github.resilience4j/resilience4j-timelimiter@2.4.0?type=jar",
      "externalReferences": [
        {
          "url": "https://resilience4j.readme.io",
          "type": "website"
        },
        {
          "url": "https://github.com/resilience4j/resilience4j.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.slf4j/log4j-over-slf4j@2.0.18?type=jar",
      "publisher": "QOS.ch",
      "group": "org.slf4j",
      "name": "log4j-over-slf4j",
      "version": "2.0.18",
      "description": "Log4j implemented over SLF4J",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "98ec26919bc690052e2912dad2ee2abd"
        },
        {
          "alg": "SHA-1",
          "content": "9346cfcbbe1cd58c8f80ca04de4c709fba22052c"
        },
        {
          "alg": "SHA-256",
          "content": "d030643b4b3371ac79ce9a5bf2e4f82b65ee5621e2c0c6bbfb254d74c9a90df6"
        },
        {
          "alg": "SHA-512",
          "content": "1af189c18a92a946d3d0e657dc028afaa80bbc03d26fcda5b76c237edf30d2ab3b98f949706ed4751f369ad8334d2ecf8e199ca0f5173d35096bf764859e8021"
        },
        {
          "alg": "SHA-384",
          "content": "744a93867dd330e545ed505f383d87cc6ec3b928a7f99f69932a06a3e35d38d3ed094ad46970c8efe3ad19c8f8a1a1d5"
        },
        {
          "alg": "SHA3-384",
          "content": "d5a54ea78edabc28151f4b27b7c918030fa2964182684229547314acae1e8af5d70299bfd2fd9302e31a80a34ef5806d"
        },
        {
          "alg": "SHA3-256",
          "content": "e2ade27d9fa1565c7d9612eeebc127587bf9d257a159a23c0a42d7e3a568dd0b"
        },
        {
          "alg": "SHA3-512",
          "content": "8b25d1c720684f872afdd3318b452b0887ddc0f5d31a9290cba8414aef58a91ed8315db600a46d7502117e71fed0d6783cda2f783985051b6b8df68ade90e54d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.slf4j/log4j-over-slf4j@2.0.18?type=jar",
      "externalReferences": [
        {
          "url": "http://www.slf4j.org",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/qos-ch/slf4j/slf4j-parent/log4j-over-slf4j",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.21.3?type=jar",
      "publisher": "FasterXML",
      "group": "com.fasterxml.jackson.dataformat",
      "name": "jackson-dataformat-yaml",
      "version": "2.21.3",
      "description": "Support for reading and writing YAML-encoded data via Jackson abstractions.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "cf0f62bbc7708e1e956ee88da2e9971b"
        },
        {
          "alg": "SHA-1",
          "content": "400fe3e019f87353512e1fec1c4cd61653456676"
        },
        {
          "alg": "SHA-256",
          "content": "f0aa297d46f9364af8b3617f8f16ee3d687bc11a8b20ea6266590a21e021c3a4"
        },
        {
          "alg": "SHA-512",
          "content": "7cabeadc6d1026f147c50c58747f8467705bfaba1b3f882d859dfe8d81ada2e1803613a8c15abf5d11db4b4877c1892f697d0e5ec957fa2857c8c8df4e418dc6"
        },
        {
          "alg": "SHA-384",
          "content": "5648576874e31ac219ddfe503a5774b9c318bd0f6a7d70e7f0fb0800f13813fa9a957e46258c7606530b4bbe91f8f6f3"
        },
        {
          "alg": "SHA3-384",
          "content": "11e3c1f4bd5c4c7bf4f85c558e17c94d7bf5384df997c884d697b5af1337244527d57f9911170441c72f66597b336b70"
        },
        {
          "alg": "SHA3-256",
          "content": "1f1195bfcaead393e794bfd258ab20fad46eefd3a57f9c0b7a9a2e6a43c7a6e9"
        },
        {
          "alg": "SHA3-512",
          "content": "ee039d7c901598aa0a0202a808ceae2f9563da49be1e01f68c868457aaa6316da940970494786f16cd7a02c718b0ef8c1ece510ca880b8af8362b8dad60f4470"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.21.3?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/FasterXML/jackson-dataformats-text",
          "type": "website"
        },
        {
          "url": "https://central.sonatype.com/api/v1/publisher",
          "type": "distribution"
        },
        {
          "url": "https://github.com/FasterXML/jackson-dataformats-text/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/FasterXML/jackson-dataformats-text/jackson-dataformat-yaml",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.minio/minio@9.0.1?type=jar",
      "group": "io.minio",
      "name": "minio",
      "version": "9.0.1",
      "description": "MinIO Java SDK for Amazon S3 Compatible Cloud Storage",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "5423471f693ca3edc051529f732e95a1"
        },
        {
          "alg": "SHA-1",
          "content": "88e05a509f3913ac48b702982ff67282ac9e6fcd"
        },
        {
          "alg": "SHA-256",
          "content": "704017a4914006fb796bc4698663aad23d529fefa6cc57bdb0a469ab7d1a0849"
        },
        {
          "alg": "SHA-512",
          "content": "b525aafad137e7168b168d5bbbd59a59b30cbc681c8429d6f9c8223637669c07badbb1c555926619124a7e8062363757ceb3b6d9ef56c3e42ce81746ec061dd4"
        },
        {
          "alg": "SHA-384",
          "content": "c8a5620dc6b5a5ac6756095aee3f64dd300748c53936f8964fe68bc720422ac83301916531564f743c3fb52a1c4790f2"
        },
        {
          "alg": "SHA3-384",
          "content": "fbcb89a2282d4f0bb10b896b241c11d28c363242f3621aa58e4dd95a4c571372ce616da3f90a4c525072a8af42a757f9"
        },
        {
          "alg": "SHA3-256",
          "content": "961cb5e5e263919fe3fddd02fe751efbe3b577ba9e107d530fafc8f40337d4d6"
        },
        {
          "alg": "SHA3-512",
          "content": "004f3830f836ff05784c2dd6321f6e3304ae1cee97102649ad09970a6454cc9e9c431d610cc2f97c92b97aa0369b4e4fd4ca3f6de87799c8c08c09662fedfe5a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.minio/minio@9.0.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/minio/minio-java",
          "type": "website"
        },
        {
          "url": "http://github.com/minio/minio-java",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.carrotsearch.thirdparty/simple-xml-safe@2.7.1?type=jar",
      "publisher": "Carrot Search s.c.",
      "group": "com.carrotsearch.thirdparty",
      "name": "simple-xml-safe",
      "version": "2.7.1",
      "description": "A fork of Niall Gallagher\u0027s simple-xml library with web-safe defaults",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "150936ed745f2c207db42931d7d5839b"
        },
        {
          "alg": "SHA-1",
          "content": "045fda5ac6087bc82a209d8cdb73f8d0dbdcfc7b"
        },
        {
          "alg": "SHA-256",
          "content": "4506e4bb57d41481936f0ac684468ca4b2cc9e002ca8466ee19e23228d455957"
        },
        {
          "alg": "SHA-512",
          "content": "d13c25a9c4b7ce07e6b096e37591b37e415332d3e1adcb65c753238f1c3d968a98293223a720101b0af0d76c4bd9f8a0d487de9b0122172187b59e923877592a"
        },
        {
          "alg": "SHA-384",
          "content": "a96086b4fe29a470978638f14d5508daa1f1f2a629de4cc424964e8c05a7d0d6960650b5536aee098fda03c6b5a8acae"
        },
        {
          "alg": "SHA3-384",
          "content": "3975d435b3f32c32dfdebc88625c7226d5052275269f4b0533f0d2cca05fd7d91c9a7ca58eb9559a6f4855166d3fd4bc"
        },
        {
          "alg": "SHA3-256",
          "content": "ed6f680d21c9fc1cd9606dc0dfcbbbed7baa71d41c51654b32159fef896d8806"
        },
        {
          "alg": "SHA3-512",
          "content": "d35d823731ce1d4bd9dbfca093f59ab91346b2b7f901c43c5aabe36fdc6ad5e1af130129da75dc9d731c3d9597e53afe888efefd752891b4f09f3eb2a8a6a5f5"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.carrotsearch.thirdparty/simple-xml-safe@2.7.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/dweiss/simplexml",
          "type": "website"
        },
        {
          "url": "https://github.com/dweiss/simplexml",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.squareup.okhttp3/okhttp@5.3.2?type=jar",
      "group": "com.squareup.okhttp3",
      "name": "okhttp",
      "version": "5.3.2",
      "description": "Square\u2019s meticulous HTTP client for Java and Kotlin.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "7cefaebda364337f3770168187124f31"
        },
        {
          "alg": "SHA-1",
          "content": "6891a4fd19bcab6f69fe091c2bc6077edec5258e"
        },
        {
          "alg": "SHA-256",
          "content": "e720a383fdc3eb1df4aac77a085e61b7730837364151de867093fdbcafcb44aa"
        },
        {
          "alg": "SHA-512",
          "content": "165c65503bded11490b09c46935864aa71ee8b9fc4ea1c01e1cb91b209a64af97e92d5d8fd9b4bc78209a8949a79f37ff49edd992171d25ba6f7e0d968cee87c"
        },
        {
          "alg": "SHA-384",
          "content": "c17bcf23262c3979a72e2c1746757b0f67ddad0b060c95d655a3d912136654b2468c96bd1921b316f4f05f43ce86c872"
        },
        {
          "alg": "SHA3-384",
          "content": "2bde1832a1b0bb7bb1a0eac22a2af8c4c25059dc98584667247c6efd3e8de3c4350b5ba9d378d689b285d05604601d81"
        },
        {
          "alg": "SHA3-256",
          "content": "07a360a76512ec19d3220d3ed9b594638ff63f8be6fb0bca1eee93057cd23861"
        },
        {
          "alg": "SHA3-512",
          "content": "fbb062b8370d6b9547edc1c3bf9a0a3bedf65b33e644cdc05e8c8101482757c8371f98616c13391cad7dfab3a01dac8a174ffcd99ebcc515a384aa8f022de8c3"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.squareup.okhttp3/okhttp@5.3.2?type=jar",
      "externalReferences": [
        {
          "url": "https://square.github.io/okhttp/",
          "type": "website"
        },
        {
          "url": "https://github.com/square/okhttp",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.squareup.okio/okio@3.16.4?type=jar",
      "group": "com.squareup.okio",
      "name": "okio",
      "version": "3.16.4",
      "description": "A modern I/O library for Android, Java, and Kotlin Multiplatform.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "ca878d553dd4cdae891d16df87cdae7d"
        },
        {
          "alg": "SHA-1",
          "content": "dbd63ccb67502e388975c9b5e4fb029638aecc78"
        },
        {
          "alg": "SHA-256",
          "content": "c9964f394c4cd32b79bf338afbfa2f2297221eee08311787061cea55f87dd60e"
        },
        {
          "alg": "SHA-512",
          "content": "d848277d1da157f22b4ba2dd42bea11c7569aab1107181b886e97943dbb6058851e78d6582eb13bdfc05350b1f82c8d4b681a42435eee0f631d126dd8f3b39ee"
        },
        {
          "alg": "SHA-384",
          "content": "edad8c48669ffbb1b079bc8f7f4ee5d3671dc4563df0598cc0e27b5d50ced49a90f2f510ea963051a2ffbfc95eb91159"
        },
        {
          "alg": "SHA3-384",
          "content": "68a3fe67b2e285fbb352e262dfea29c03151dbfa934c1ac900cd7ab2ad8a1a9c0e7cac4aa718a7677fe7ee391ac65027"
        },
        {
          "alg": "SHA3-256",
          "content": "8544496fbf4ead4fc95b999eb2bf5f7af01dab0809a806c080a226ddee50011b"
        },
        {
          "alg": "SHA3-512",
          "content": "2a39fe798a87a2b89f73b2c3b9143003dbc93434bce334d0cb55f422bb048e4cd39a05c9ab2c53411cab9138b84cb72510dd08f516e9c46438a8644cc7c974f6"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.squareup.okio/okio@3.16.4?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/square/okio/",
          "type": "website"
        },
        {
          "url": "https://github.com/square/okio/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.commons/commons-compress@1.28.0?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.commons",
      "name": "commons-compress",
      "version": "1.28.0",
      "description": "Apache Commons Compress defines an API for working with compression and archive formats. These include bzip2, gzip, pack200, LZMA, XZ, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4, Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "f33efe616d561f8281ef7bf9f2576ad0"
        },
        {
          "alg": "SHA-1",
          "content": "e482f2c7a88dac3c497e96aa420b6a769f59c8d7"
        },
        {
          "alg": "SHA-256",
          "content": "e1522945218456f3649a39bc4afd70ce4bd466221519dba7d378f2141a4642ca"
        },
        {
          "alg": "SHA-512",
          "content": "f1f140f4f40ab3cf3265919db9dbb95a631a29aa784e305f291de4e68876bb711d9217d62d7937cddddd393982decdf71a608b4b3ab7f4e6375cf28af2893d7f"
        },
        {
          "alg": "SHA-384",
          "content": "afe6a8fc8e7486c4ecce95276bb1467763d7ff7d941c7bcff8661bbbd4bff442fd0899ff7a11bc540cda86818ee4a8f0"
        },
        {
          "alg": "SHA3-384",
          "content": "6afb636ad0805e522913cfd91c8293c485b7f4eff5e45dd3a17a716c3f4b8ab8969e9c00927559a5fb762cba1fdb3d3f"
        },
        {
          "alg": "SHA3-256",
          "content": "4420e0b462b5dcc45077e95e012a82a5ae17659e5abe8a685fa086dab6995298"
        },
        {
          "alg": "SHA3-512",
          "content": "23e37d13c8ee6c7369e407c29d1f9ee1bb44eca9f09a6f9742f6b4cf3d38dd7a0509fe0142536cd8087b68a76e71d819105af2c23f2aeed08acc58eb93cf7e61"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.commons/commons-compress@1.28.0?type=jar",
      "externalReferences": [
        {
          "url": "https://commons.apache.org/proper/commons-compress/",
          "type": "website"
        },
        {
          "url": "https://github.com/apache/commons-compress/actions",
          "type": "build-system"
        },
        {
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2",
          "type": "distribution"
        },
        {
          "url": "https://issues.apache.org/jira/browse/COMPRESS",
          "type": "issue-tracker"
        },
        {
          "url": "https://mail-archives.apache.org/mod_mbox/commons-user/",
          "type": "mailing-list"
        },
        {
          "url": "https://gitbox.apache.org/repos/asf?p=commons-compress.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.xerial.snappy/snappy-java@1.1.10.8?type=jar",
      "publisher": "xerial.org",
      "group": "org.xerial.snappy",
      "name": "snappy-java",
      "version": "1.1.10.8",
      "description": "snappy-java: A fast compression/decompression library",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "a25bd213d1ca2f3c605c5f03050db070"
        },
        {
          "alg": "SHA-1",
          "content": "ccbaa2b5ea6a023a27c44daf2d6cdec0e138592d"
        },
        {
          "alg": "SHA-256",
          "content": "50485d06037fea3d6e40c968386feeca6338cc9872e25549593ff3eb352cefcc"
        },
        {
          "alg": "SHA-512",
          "content": "c7133f726f366b9f06df98d94b4dd7c91c7702c543e1a318055a886af5e625d8231b0a6728250596181bc20a6c4147855eeb02ed55c447fe13ff2156e29985a9"
        },
        {
          "alg": "SHA-384",
          "content": "aeb78b3f4c56ce769f5fda9cfabe00be77d21b93637f70601c28b16eef41405e1291001c3a6e45001b356543e33b664b"
        },
        {
          "alg": "SHA3-384",
          "content": "6137f6354b574d8decb579ad9147dd9463e3a9f62d1e929266bee1adc020f57382973d0a1abf9daeb2007bb32671fed8"
        },
        {
          "alg": "SHA3-256",
          "content": "f44a4a8cffe82ce6c99b401e9d822e71cdfc63c1b279b278282eda07243b2a94"
        },
        {
          "alg": "SHA3-512",
          "content": "655731ef3b20a2cec213138c170f7dc7182c2a09536d74c1d8a13224bb204dd706a35749bf99b51c4b945b75784a0a26c60931a158d27e1378ccd1c8ac7a0783"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.xerial.snappy/snappy-java@1.1.10.8?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/xerial/snappy-java",
          "type": "website"
        },
        {
          "url": "https://github.com/xerial/snappy-java",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.squareup.okhttp3/okhttp-jvm@5.3.2?type=jar",
      "group": "com.squareup.okhttp3",
      "name": "okhttp-jvm",
      "version": "5.3.2",
      "description": "Square\u2019s meticulous HTTP client for Java and Kotlin.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "827a887aa959c1f1d6b12f3345df2484"
        },
        {
          "alg": "SHA-1",
          "content": "f31e8de27feebe1e56d6c9d354a0986b65be0e1d"
        },
        {
          "alg": "SHA-256",
          "content": "c771f48075b763f6c322055e21129a94b7de4c1faf3f8f58ace320b0c9517a30"
        },
        {
          "alg": "SHA-512",
          "content": "302cba8ec649ecb20512b4878b9f347645cdeada2001e7469363b21ca251bbb05c00e48e426449a88780f0ec25c672f214112b101d8dfd059b5275999ab48768"
        },
        {
          "alg": "SHA-384",
          "content": "a2bc92e52d8e1b2b9be40b0955828313f32a4276717bf7e1cace0aefa3bf5fad17997e409aeca7f68f335c9d975f1073"
        },
        {
          "alg": "SHA3-384",
          "content": "e585ea8e1ffbd6599654b5f7e9b1210ff972799f5019420652a0215b7dde6660b3a15e56b39d4702b42e307b3040b5d1"
        },
        {
          "alg": "SHA3-256",
          "content": "4737bb453c46672bef36c86ea7292a46f9552caaccfd7e6799bb9b3c508c4467"
        },
        {
          "alg": "SHA3-512",
          "content": "08ed5b2a6449ca0b8cced909bc2ded5cf20314b5bf8f8b094ed8641c5dd90e6b738fc66c917dd0eafbcf1e51497ba05ca154cc3d6fb4832a0ebc350a35c26abe"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.squareup.okhttp3/okhttp-jvm@5.3.2?type=jar",
      "externalReferences": [
        {
          "url": "https://square.github.io/okhttp/",
          "type": "website"
        },
        {
          "url": "https://github.com/square/okhttp",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.squareup.okio/okio-jvm@3.16.4?type=jar",
      "group": "com.squareup.okio",
      "name": "okio-jvm",
      "version": "3.16.4",
      "description": "A modern I/O library for Android, Java, and Kotlin Multiplatform.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "34d866f45bb2a65bf601cde52b72d096"
        },
        {
          "alg": "SHA-1",
          "content": "ceb794cf0bbf8d0d20f49aa91ce20db7fd77675d"
        },
        {
          "alg": "SHA-256",
          "content": "2196b993cd34dbbd919e7e01f57a4781b58bee80f86106163e287c20343a96a7"
        },
        {
          "alg": "SHA-512",
          "content": "1a7158538ae341b8a61fe7292506e12ca6063c5a51a1c122d0e934164395c7da585dc31b26ed88a993c47aeca89f6a854042c67a4bc7d771d35a0ece6c4dbde0"
        },
        {
          "alg": "SHA-384",
          "content": "37949576947630aba9caf7b24ffb00677f4b21b29a98543a0a66043340d20bb42128419d2bebc4b2f2b93569f35f9ada"
        },
        {
          "alg": "SHA3-384",
          "content": "32830517d7f960b4c86229f5347e40033658999029162aad0f273636640ed8b7130689de57277aaff169ac9f227885be"
        },
        {
          "alg": "SHA3-256",
          "content": "3f65833b5d5128064f885b68da6a3955667cf4c31a098da08431561949fe398b"
        },
        {
          "alg": "SHA3-512",
          "content": "ee404499bb148b817e575c22049cb5487531605413bf38edf8fd2cecf0d15f899de42e37d7dafa5dc8bc5493e24b7a976c2bc14c42d6d7056af410bd72513ad3"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.squareup.okio/okio-jvm@3.16.4?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/square/okio/",
          "type": "website"
        },
        {
          "url": "https://github.com/square/okio/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.jetbrains.kotlin/kotlin-stdlib@2.3.21?type=jar",
      "group": "org.jetbrains.kotlin",
      "name": "kotlin-stdlib",
      "version": "2.3.21",
      "description": "Kotlin Standard Library",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "67d962e3bcffbbb88f84b4d49e47fc56"
        },
        {
          "alg": "SHA-1",
          "content": "a2ee2c4e220fee522f0451b723bab2a43f3481a7"
        },
        {
          "alg": "SHA-256",
          "content": "6f64eac736db9434dd6925b4a518b9d1d17177652320c37916cf9ba3ce7d7d7a"
        },
        {
          "alg": "SHA-512",
          "content": "5564b17f006a9fdf93c93439b357e1fb82742c72d23b7aaa2e50d6db730d0b40426257e4e40eca7c70f9d514367b0057e51b84e1d0e49817002bc463939fee59"
        },
        {
          "alg": "SHA-384",
          "content": "f035eb7c781464e1355ee0b82e73eb7eabce67c37f469b35573c3047e46198904498110a05b4e207c78fb7766cf3524a"
        },
        {
          "alg": "SHA3-384",
          "content": "3fbc298ec3e9f816a889f69fa9fb95599866993059d16fdd108241ae70d70f0960fa2901081d0ebbb9a091c9964559c9"
        },
        {
          "alg": "SHA3-256",
          "content": "ac878d6d6b3394c66b0f5082d965649c243633d4fd8ba6a0926da346e3e23f0b"
        },
        {
          "alg": "SHA3-512",
          "content": "95fa621de32a1cf23c9aad2a872afada708a8feb8c554cc37c2730fe43c64a324ffb9262f62782bbb9558f7c1c22abec2ce26379f9b798b328f13f46fdc9eff1"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.jetbrains.kotlin/kotlin-stdlib@2.3.21?type=jar",
      "externalReferences": [
        {
          "url": "https://kotlinlang.org/",
          "type": "website"
        },
        {
          "url": "https://github.com/JetBrains/kotlin",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.jetbrains/annotations@13.0?type=jar",
      "group": "org.jetbrains",
      "name": "annotations",
      "version": "13.0",
      "description": "A set of annotations used for code inspection support and code documentation.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "f4fb462172517b46b6cd90003508515a"
        },
        {
          "alg": "SHA-1",
          "content": "919f0dfe192fb4e063e7dacadee7f8bb9a2672a9"
        },
        {
          "alg": "SHA-256",
          "content": "ace2a10dc8e2d5fd34925ecac03e4988b2c0f851650c94b8cef49ba1bd111478"
        },
        {
          "alg": "SHA-512",
          "content": "5622d0ffe410e7272e2bb9fae1006caedeb86d0c62d2d9f3929a3b3cdcdef1963218fcf0cede82e95ef9f4da3ed4a173fa055ee6e4038886376181e0423e02ff"
        },
        {
          "alg": "SHA-384",
          "content": "6bcde3a6e471d416522e6288474bc4f9115e2e8abf8ce5d300829bee4aa98dff73be7d8c6f0607f3d6d423c7f5abbf90"
        },
        {
          "alg": "SHA3-384",
          "content": "f4d5a5d5a76b24c4751c8c52f2879b097d2430c3571c59b4630e8c871c9bdb08e24e803a14c24fc8d3378417f29b7244"
        },
        {
          "alg": "SHA3-256",
          "content": "b4a80ea81c4bc7e364e07981465f547e8ed83031806eaf3b97dfb38f894f5b6f"
        },
        {
          "alg": "SHA3-512",
          "content": "15b23bce818b4399b334dd632eb85de5a1b70c47fb9260561e70b1f726211c83bddbc957f3b4c32a1d8c687f9bc6c38d0a638c731cb5daf5b619aa725d6050c2"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.jetbrains/annotations@13.0?type=jar",
      "externalReferences": [
        {
          "url": "http://www.jetbrains.org",
          "type": "website"
        },
        {
          "url": "http://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/JetBrains/intellij-community",
          "type": "vcs"
        }
      ]
    }
  ],
  "services": [
    {
      "bom-ref": "service:gov.nist.nvd",
      "provider": {
        "name": "National Institute of Standards and Technology (NIST)",
        "url": [
          "https://nist.gov"
        ],
        "contact": [
          {
            "email": "nvd@nist.gov"
          }
        ]
      },
      "group": "gov.nist.nvd",
      "name": "National Vulnerability Database (NVD)",
      "description": "Used as a vulnerability data source. CVE feeds are mirrored to Dependency-Track.",
      "endpoints": [
        "https://nvd.nist.gov/feeds"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "Public domain"
          }
        }
      ]
    },
    {
      "bom-ref": "service:org.sonatype.ossindex",
      "provider": {
        "name": "Sonatype",
        "url": [
          "https://sonatype.com"
        ],
        "contact": [
          {
            "email": "ossindex@sonatype.org"
          }
        ]
      },
      "group": "org.sonatype.ossindex",
      "name": "OSS Index",
      "description": "Optional vulnerability analyzer. Queried by component package URL to retrieve known vulnerabilities.",
      "endpoints": [
        "https://ossindex.sonatype.org/api/v3/component-report",
        "https://ossindex.sonatype.org/api/v3/version"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:com.cyberriskanalytics.vulndb",
      "provider": {
        "name": "Risk Based Security",
        "url": [
          "https://riskbasedsecurity.com/"
        ],
        "contact": [
          {
            "email": "support@riskbasedsecurity.com"
          },
          {
            "email": "sales@riskbasedsecurity.com",
            "phone": "1-855-RBS-RISK"
          }
        ]
      },
      "group": "com.cyberriskanalytics.vulndb",
      "name": "VulnDB",
      "description": "Optional commercial vulnerability analyzer. Queried for component vulnerabilities. Requires a paid subscription.",
      "endpoints": [
        "https://vulndb.cyberriskanalytics.com/api/v1/account_status",
        "https://vulndb.cyberriskanalytics.com/api/v1/vendors/",
        "https://vulndb.cyberriskanalytics.com/api/v1/products/",
        "https://vulndb.cyberriskanalytics.com/api/v1/versions/by_product_id",
        "https://vulndb.cyberriskanalytics.com/api/v1/vulnerabilities/",
        "https://vulndb.cyberriskanalytics.com/api/v1/vulnerabilities/find_by_cpe"
      ],
      "authenticated": true,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:com.github.api",
      "provider": {
        "name": "GitHub",
        "url": [
          "https://github.com/"
        ]
      },
      "group": "com.github.api",
      "name": "GitHub Advisories",
      "description": "Used as a vulnerability data source. GitHub Security Advisories are mirrored to Dependency-Track via GraphQL. Also queried for repository metadata of packages hosted on GitHub.",
      "endpoints": [
        "https://api.github.com/graphql",
        "https://api.github.com/repos/"
      ],
      "authenticated": true,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:io.crates",
      "provider": {
        "name": "Crates.io",
        "url": [
          "https://crates.io"
        ]
      },
      "group": "io.crates",
      "name": "Crates.io",
      "description": "Queried for package metadata and latest version information of Rust crates.",
      "endpoints": [
        "https://crates.io/api/v1/crates"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:org.packagist.repo",
      "provider": {
        "name": "Packagist",
        "url": [
          "https://packagist.org"
        ]
      },
      "group": "org.packagist.repo",
      "name": "Packagist",
      "description": "Queried for latest version information of PHP Composer packages.",
      "endpoints": [
        "https://repo.packagist.org/p/"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:org.rubygems",
      "provider": {
        "name": "RubyGems",
        "url": [
          "https://rubygems.org"
        ]
      },
      "group": "org.rubygems",
      "name": "RubyGems",
      "description": "Queried for package metadata and latest version information of Ruby gems.",
      "endpoints": [
        "https://rubygems.org/api/v1/versions"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:org.golang.proxy",
      "provider": {
        "name": "Google",
        "url": [
          "https://go.dev/"
        ]
      },
      "group": "org.golang.proxy",
      "name": "Go Module Mirror, Index, and Checksum Database",
      "description": "Queried for package metadata and latest version information of Go modules.",
      "endpoints": [
        "https://proxy.golang.org/"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:pm.hex",
      "provider": {
        "name": "Six Colors AB.",
        "url": [
          "https://hex.pm"
        ],
        "contact": [
          {
            "name": "Eric Meadows-J\u00F6nsson",
            "phone": "\u002B46 070-893 94 01"
          }
        ]
      },
      "group": "pm.hex",
      "name": "hex",
      "description": "Queried for package metadata and latest version information of Erlang and Elixir packages.",
      "endpoints": [
        "https://hex.pm/api/packages"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:org.maven.repo1",
      "provider": {
        "name": "Sonatype",
        "url": [
          "https://sonatype.com"
        ]
      },
      "group": "org.maven.repo1",
      "name": "Maven Central",
      "description": "Queried for package metadata and latest version information of Java artifacts.",
      "endpoints": [
        "https://repo1.maven.org/maven2"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:com.atlassian.maven",
      "provider": {
        "name": "Atlassian",
        "url": [
          "https://atlassian.com"
        ]
      },
      "group": "com.atlassian.maven",
      "name": "Atlassian Public",
      "description": "Queried for latest version information of Atlassian-published Maven artifacts.",
      "endpoints": [
        "https://packages.atlassian.com/content/repositories/atlassian-public/"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:org.jboss.repository",
      "provider": {
        "name": "RedHat",
        "url": [
          "https://redhat.com"
        ]
      },
      "group": "org.jboss.repository",
      "name": "JBoss Releases",
      "description": "Queried for latest version information of JBoss-published Maven artifacts.",
      "endpoints": [
        "https://repository.jboss.org/nexus/content/repositories/releases/"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:org.clojars.repo",
      "provider": {
        "name": "Clojars",
        "url": [
          "https://clojars.org/"
        ]
      },
      "group": "org.clojars.repo",
      "name": "Clojars",
      "description": "Queried for latest version information of Clojure libraries.",
      "endpoints": [
        "https://repo.clojars.org/"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:com.google.maven",
      "provider": {
        "name": "Google",
        "url": [
          "https://google.com"
        ]
      },
      "group": "com.google.maven",
      "name": "Google\u0027s Maven Repository",
      "description": "Queried for latest version information of Google and Android Maven artifacts.",
      "endpoints": [
        "https://maven.google.com/"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:org.npmjs.registry",
      "provider": {
        "name": "npm",
        "url": [
          "https://www.npmjs.com/"
        ]
      },
      "group": "org.npmjs.registry",
      "name": "NPM Registry",
      "description": "Queried for package metadata and latest version information of npm packages.",
      "endpoints": [
        "https://registry.npmjs.org/-/package/"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:org.nuget.api",
      "provider": {
        "name": "Microsoft",
        "url": [
          "https://www.microsoft.com/"
        ],
        "contact": [
          {
            "email": "support@nuget.org"
          }
        ]
      },
      "group": "org.nuget.api",
      "name": "NuGet Registry",
      "description": "Queried for package metadata and latest version information of NuGet packages.",
      "endpoints": [
        "https://api.nuget.org/v3-flatcontainer/",
        "https://api.nuget.org/v3/registration3/"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:dev.osv",
      "provider": {
        "name": "Google",
        "url": [
          "https://google.com"
        ]
      },
      "group": "dev.osv",
      "name": "OSV",
      "description": "Used as a vulnerability data source. Per-ecosystem OSV feeds are mirrored to Dependency-Track.",
      "endpoints": [
        "https://osv-vulnerabilities.storage.googleapis.com"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:org.pypi",
      "provider": {
        "name": "Python Software Foundation",
        "url": [
          "https://www.python.org/psf/"
        ],
        "contact": [
          {
            "email": "psf@python.org"
          }
        ]
      },
      "group": "org.pypi",
      "name": "PyPI",
      "description": "Queried for package metadata and latest version information of Python packages.",
      "endpoints": [
        "https://pypi.org/pypi/"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:org.dependencytrack.metrics",
      "provider": {
        "name": "OWASP",
        "url": [
          "https://owasp.org"
        ]
      },
      "group": "org.dependencytrack.metrics",
      "name": "Dependency-Track Telemetry",
      "description": "Receives anonymous usage telemetry submitted by this Dependency-Track instance. Optional.",
      "endpoints": [
        "https://metrics.dependencytrack.org"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "outbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:io.snyk",
      "provider": {
        "name": "Snyk",
        "url": [
          "https://snyk.io"
        ]
      },
      "group": "io.snyk",
      "name": "Snyk",
      "description": "Optional commercial vulnerability analyzer. Queried for component vulnerabilities. Requires a paid subscription.",
      "endpoints": [
        "https://api.snyk.io"
      ],
      "authenticated": true,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:com.empiricalsecurity.epss",
      "provider": {
        "name": "Empirical Security",
        "url": [
          "https://www.first.org/epss/"
        ]
      },
      "group": "com.empiricalsecurity.epss",
      "name": "EPSS",
      "description": "Used as a source of EPSS exploit prediction scores for CVEs. Feeds are mirrored to Dependency-Track.",
      "endpoints": [
        "https://epss.empiricalsecurity.com/epss_scores-current.csv.gz"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:org.metacpan",
      "provider": {
        "name": "The Perl Foundation",
        "url": [
          "https://metacpan.org"
        ]
      },
      "group": "org.metacpan",
      "name": "MetaCPAN",
      "description": "Queried for latest version information of Perl modules on CPAN.",
      "endpoints": [
        "https://fastapi.metacpan.org/v1/"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:org.haskell.hackage",
      "provider": {
        "name": "Haskell.org",
        "url": [
          "https://www.haskell.org"
        ]
      },
      "group": "org.haskell.hackage",
      "name": "Hackage",
      "description": "Queried for latest version information of Haskell packages.",
      "endpoints": [
        "https://hackage.haskell.org/"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:org.nixos.channels",
      "provider": {
        "name": "NixOS Foundation",
        "url": [
          "https://nixos.org"
        ]
      },
      "group": "org.nixos.channels",
      "name": "Nixpkgs",
      "description": "Queried for latest version information of Nixpkgs packages.",
      "endpoints": [
        "https://channels.nixos.org/nixpkgs-unstable/packages.json.br"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.dependencytrack/apiserver@5.0.0-rc.2?type=jar",
      "dependsOn": [
        "pkg:maven/org.dependencytrack/api@5.0.0-rc.2?type=jar",
        "pkg:maven/org.dependencytrack/cache-api@5.0.0-rc.2?type=jar",
        "pkg:maven/org.dependencytrack/cache-provider-database@5.0.0-rc.2?type=jar",
        "pkg:maven/org.dependencytrack/common-init@5.0.0-rc.2?type=jar",
        "pkg:maven/org.dependencytrack/common-pagination@5.0.0-rc.2?type=jar",
        "pkg:maven/org.dependencytrack/datanucleus-plugin@5.0.0-rc.2?type=jar",
        "pkg:maven/org.dependencytrack/migration@5.0.0-rc.2?type=jar",
        "pkg:maven/org.dependencytrack/notification-api@5.0.0-rc.2?type=jar",
        "pkg:maven/org.dependencytrack/notification-publishing@5.0.0-rc.2?type=jar",
        "pkg:maven/org.dependencytrack/notification-templating@5.0.0-rc.2?type=jar",
        "pkg:maven/org.dependencytrack/plugin-api@5.0.0-rc.2?type=jar",
        "pkg:maven/org.dependencytrack/plugin-config@5.0.0-rc.2?type=jar",
        "pkg:maven/org.dependencytrack/plugin-runtime@5.0.0-rc.2?type=jar",
        "pkg:maven/org.dependencytrack/proto@5.0.0-rc.2?type=jar",
        "pkg:maven/org.dependencytrack/secret-management@5.0.0-rc.2?type=jar",
        "pkg:maven/org.dependencytrack/vuln-analysis-api@5.0.0-rc.2?type=jar",
        "pkg:maven/org.dependencytrack/vuln-analyzer-internal@5.0.0-rc.2?type=jar",
        "pkg:maven/org.dependencytrack/package-metadata-api@5.0.0-rc.2?type=jar",
        "pkg:maven/org.dependencytrack/package-metadata-resolution@5.0.0-rc.2?type=jar",
        "pkg:maven/org.dependencytrack/vuln-analyzer-oss-index@5.0.0-rc.2?type=jar",
        "pkg:maven/org.dependencytrack/vuln-analyzer-snyk@5.0.0-rc.2?type=jar",
        "pkg:maven/org.dependencytrack/vuln-analyzer-trivy@5.0.0-rc.2?type=jar",
        "pkg:maven/org.dependencytrack/vuln-analyzer-vuln-db@5.0.0-rc.2?type=jar",
        "pkg:maven/org.dependencytrack/dex-engine@5.0.0-rc.2?type=jar",
        "pkg:maven/org.dependencytrack/file-storage-api@5.0.0-rc.2?type=jar",
        "pkg:maven/org.dependencytrack/file-storage-provider-local@5.0.0-rc.2?type=jar",
        "pkg:maven/org.dependencytrack/file-storage-provider-memory@5.0.0-rc.2?type=jar",
        "pkg:maven/org.dependencytrack/file-storage-provider-s3@5.0.0-rc.2?type=jar",
        "pkg:maven/org.dependencytrack/vuln-data-source-api@5.0.0-rc.2?type=jar",
        "pkg:maven/org.dependencytrack/vuln-data-source-github@5.0.0-rc.2?type=jar",
        "pkg:maven/org.dependencytrack/vuln-data-source-nvd@5.0.0-rc.2?type=jar",
        "pkg:maven/org.dependencytrack/vuln-data-source-osv@5.0.0-rc.2?type=jar",
        "pkg:maven/org.dependencytrack/alpine-common@5.0.0-rc.2?type=jar",
        "pkg:maven/org.dependencytrack/alpine-model@5.0.0-rc.2?type=jar",
        "pkg:maven/org.dependencytrack/alpine-infra@5.0.0-rc.2?type=jar",
        "pkg:maven/org.dependencytrack/alpine-server@5.0.0-rc.2?type=jar",
        "pkg:maven/dev.cel/cel@0.13.0?type=jar",
        "pkg:maven/dev.cel/extensions@0.4.1?type=jar",
        "pkg:maven/org.metaeffekt.core/ae-security@0.155.0?type=jar",
        "pkg:maven/com.github.kagkarlsson/db-scheduler@16.10.0?type=jar",
        "pkg:maven/org.dependencytrack/jdbi-support@5.0.0-rc.2?type=jar",
        "pkg:maven/org.jdbi/jdbi3-core@3.53.0?type=jar",
        "pkg:maven/org.jdbi/jdbi3-jackson2@3.53.0?type=jar",
        "pkg:maven/org.jdbi/jdbi3-sqlobject@3.53.0?type=jar",
        "pkg:maven/org.jdbi/jdbi3-postgres@3.53.0?type=jar",
        "pkg:maven/org.jdbi/jdbi3-freemarker@3.53.0?type=jar",
        "pkg:maven/org.glassfish.jersey.ext/jersey-micrometer@4.0.2?type=jar",
        "pkg:maven/us.springett/owasp-risk-rating-calculator@1.0.1?type=jar",
        "pkg:maven/us.springett/cpe-parser@3.0.1?type=jar",
        "pkg:maven/org.cyclonedx/cyclonedx-core-java@12.1.0?type=jar",
        "pkg:maven/jakarta.activation/jakarta.activation-api@2.1.3?type=jar",
        "pkg:maven/jakarta.servlet/jakarta.servlet-api@6.1.0?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-server@12.1.9?type=jar",
        "pkg:maven/org.eclipse.jetty.compression/jetty-compression-gzip@12.1.9?type=jar",
        "pkg:maven/org.eclipse.jetty.compression/jetty-compression-server@12.1.9?type=jar",
        "pkg:maven/org.eclipse.jetty.ee11/jetty-ee11-servlet@12.1.9?type=jar",
        "pkg:maven/org.slf4j/jul-to-slf4j@2.0.18?type=jar",
        "pkg:maven/io.swagger.core.v3/swagger-annotations-jakarta@2.2.50?type=jar",
        "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.21.3?type=jar",
        "pkg:maven/com.github.package-url/packageurl-java@1.5.0?type=jar",
        "pkg:maven/com.asahaf.javacron/javacron@1.4.0?type=jar",
        "pkg:maven/io.micrometer/micrometer-java11@1.16.5?type=jar",
        "pkg:maven/io.micrometer/micrometer-registry-prometheus@1.16.5?type=jar",
        "pkg:maven/io.prometheus/prometheus-metrics-exposition-textformats@1.6.1?type=jar",
        "pkg:maven/io.github.mweirauch/micrometer-jvm-extras@0.3.0?type=jar",
        "pkg:maven/io.pebbletemplates/pebble@4.1.1?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java-util@4.35.0?type=jar",
        "pkg:maven/com.fasterxml.woodstox/woodstox-core@7.2.0?type=jar",
        "pkg:maven/io.github.nscuro/versatile-core@0.18.1?type=jar",
        "pkg:maven/org.postgresql/postgresql@42.7.11?type=jar",
        "pkg:maven/com.google.cloud.sql/postgres-socket-factory@1.28.3?type=jar",
        "pkg:maven/io.github.resilience4j/resilience4j-retry@2.4.0?type=jar",
        "pkg:maven/io.github.resilience4j/resilience4j-micrometer@2.4.0?type=jar",
        "pkg:maven/org.slf4j/log4j-over-slf4j@2.0.18?type=jar",
        "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.21.3?type=jar",
        "pkg:maven/io.minio/minio@9.0.1?type=jar",
        "pkg:maven/com.squareup.okhttp3/okhttp-jvm@5.3.2?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/api@5.0.0-rc.2?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.dependencytrack/cache-api@5.0.0-rc.2?type=jar",
      "dependsOn": [
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
        "pkg:maven/org.eclipse.microprofile.config/microprofile-config-api@3.1.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.eclipse.microprofile.config/microprofile-config-api@3.1.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.dependencytrack/cache-provider-database@5.0.0-rc.2?type=jar",
      "dependsOn": [
        "pkg:maven/org.dependencytrack/common-datasource@5.0.0-rc.2?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
        "pkg:maven/io.micrometer/micrometer-core@1.16.5?type=jar",
        "pkg:maven/org.eclipse.microprofile.config/microprofile-config-api@3.1.1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/common-datasource@5.0.0-rc.2?type=jar",
      "dependsOn": [
        "pkg:maven/org.dependencytrack/common-health@5.0.0-rc.2?type=jar",
        "pkg:maven/com.zaxxer/HikariCP@7.0.2?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
        "pkg:maven/io.micrometer/micrometer-core@1.16.5?type=jar",
        "pkg:maven/org.postgresql/postgresql@42.7.11?type=jar",
        "pkg:maven/io.smallrye.config/smallrye-config-core@3.17.2?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/common-health@5.0.0-rc.2?type=jar",
      "dependsOn": [
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
        "pkg:maven/org.eclipse.microprofile.health/microprofile-health-api@4.0.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.eclipse.microprofile.health/microprofile-health-api@4.0.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.zaxxer/HikariCP@7.0.2?type=jar",
      "dependsOn": [
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/io.micrometer/micrometer-core@1.16.5?type=jar",
      "dependsOn": [
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
        "pkg:maven/io.micrometer/micrometer-commons@1.16.5?type=jar",
        "pkg:maven/io.micrometer/micrometer-observation@1.16.5?type=jar",
        "pkg:maven/org.hdrhistogram/HdrHistogram@2.2.2?type=jar",
        "pkg:maven/org.latencyutils/LatencyUtils@2.0.3?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.micrometer/micrometer-commons@1.16.5?type=jar",
      "dependsOn": [
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.micrometer/micrometer-observation@1.16.5?type=jar",
      "dependsOn": [
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
        "pkg:maven/io.micrometer/micrometer-commons@1.16.5?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.hdrhistogram/HdrHistogram@2.2.2?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.latencyutils/LatencyUtils@2.0.3?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.postgresql/postgresql@42.7.11?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/io.smallrye.config/smallrye-config-core@3.17.2?type=jar",
      "dependsOn": [
        "pkg:maven/org.eclipse.microprofile.config/microprofile-config-api@3.1.1?type=jar",
        "pkg:maven/jakarta.annotation/jakarta.annotation-api@3.0.0?type=jar",
        "pkg:maven/io.smallrye.common/smallrye-common-annotation@2.17.1?type=jar",
        "pkg:maven/io.smallrye.common/smallrye-common-expression@2.17.1?type=jar",
        "pkg:maven/io.smallrye.common/smallrye-common-constraint@2.17.1?type=jar",
        "pkg:maven/io.smallrye.common/smallrye-common-classloader@2.17.1?type=jar",
        "pkg:maven/org.jboss.logging/jboss-logging@3.6.1.Final?type=jar",
        "pkg:maven/org.ow2.asm/asm@9.9.1?type=jar",
        "pkg:maven/io.smallrye.config/smallrye-config-common@3.17.2?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/jakarta.annotation/jakarta.annotation-api@3.0.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/io.smallrye.common/smallrye-common-annotation@2.17.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/io.smallrye.common/smallrye-common-expression@2.17.1?type=jar",
      "dependsOn": [
        "pkg:maven/io.smallrye.common/smallrye-common-function@2.17.1?type=jar",
        "pkg:maven/org.jboss.logging/jboss-logging@3.6.1.Final?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.smallrye.common/smallrye-common-function@2.17.1?type=jar",
      "dependsOn": [
        "pkg:maven/io.smallrye.common/smallrye-common-constraint@2.17.1?type=jar",
        "pkg:maven/org.jboss.logging/jboss-logging@3.6.1.Final?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.smallrye.common/smallrye-common-constraint@2.17.1?type=jar",
      "dependsOn": [
        "pkg:maven/org.jboss.logging/jboss-logging@3.6.1.Final?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.jboss.logging/jboss-logging@3.6.1.Final?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/io.smallrye.common/smallrye-common-classloader@2.17.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.ow2.asm/asm@9.9.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/io.smallrye.config/smallrye-config-common@3.17.2?type=jar",
      "dependsOn": [
        "pkg:maven/org.eclipse.microprofile.config/microprofile-config-api@3.1.1?type=jar",
        "pkg:maven/io.smallrye.common/smallrye-common-classloader@2.17.1?type=jar",
        "pkg:maven/org.jboss.logging/jboss-logging@3.6.1.Final?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/common-init@5.0.0-rc.2?type=jar",
      "dependsOn": [
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
        "pkg:maven/org.eclipse.microprofile.config/microprofile-config-api@3.1.1?type=jar",
        "pkg:maven/org.eclipse.microprofile.health/microprofile-health-api@4.0.1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/common-pagination@5.0.0-rc.2?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-cbor@2.21.3?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-cbor@2.21.3?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.21.3?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.21.3?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.21.3?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.21.3?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.21?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.21.3?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.21?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.dependencytrack/datanucleus-plugin@5.0.0-rc.2?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml.uuid/java-uuid-generator@5.2.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.fasterxml.uuid/java-uuid-generator@5.2.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/migration@5.0.0-rc.2?type=jar",
      "dependsOn": [
        "pkg:maven/org.flywaydb/flyway-core@12.6.1?type=jar",
        "pkg:maven/org.flywaydb/flyway-database-postgresql@12.6.1?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.flywaydb/flyway-core@12.6.1?type=jar",
      "dependsOn": [
        "pkg:maven/tools.jackson.core/jackson-databind@3.1.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/tools.jackson.core/jackson-databind@3.1.1?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.21?type=jar",
        "pkg:maven/tools.jackson.core/jackson-core@3.1.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/tools.jackson.core/jackson-core@3.1.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.flywaydb/flyway-database-postgresql@12.6.1?type=jar",
      "dependsOn": [
        "pkg:maven/org.flywaydb/flyway-core@12.6.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/notification-api@5.0.0-rc.2?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml.uuid/java-uuid-generator@5.2.0?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java@4.35.0?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java-util@4.35.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.google.protobuf/protobuf-java@4.35.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.google.protobuf/protobuf-java-util@4.35.0?type=jar",
      "dependsOn": [
        "pkg:maven/com.google.protobuf/protobuf-java@4.35.0?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
        "pkg:maven/com.google.code.gson/gson@2.8.9?type=jar",
        "pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.google.code.gson/gson@2.8.9?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.dependencytrack/notification-publishing@5.0.0-rc.2?type=jar",
      "dependsOn": [
        "pkg:maven/org.eclipse.angus/angus-mail@2.0.5?type=jar",
        "pkg:maven/com.github.ben-manes.caffeine/caffeine@3.2.4?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.21.3?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
        "pkg:maven/org.apache.kafka/kafka-clients@4.3.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.eclipse.angus/angus-mail@2.0.5?type=jar",
      "dependsOn": [
        "pkg:maven/jakarta.activation/jakarta.activation-api@2.1.3?type=jar",
        "pkg:maven/jakarta.mail/jakarta.mail-api@2.1.3?type=jar",
        "pkg:maven/org.eclipse.angus/angus-activation@2.0.3?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/jakarta.activation/jakarta.activation-api@2.1.3?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/jakarta.mail/jakarta.mail-api@2.1.3?type=jar",
      "dependsOn": [
        "pkg:maven/jakarta.activation/jakarta.activation-api@2.1.3?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.eclipse.angus/angus-activation@2.0.3?type=jar",
      "dependsOn": [
        "pkg:maven/jakarta.activation/jakarta.activation-api@2.1.3?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.github.ben-manes.caffeine/caffeine@3.2.4?type=jar",
      "dependsOn": [
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
        "pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.apache.kafka/kafka-clients@4.3.0?type=jar",
      "dependsOn": [
        "pkg:maven/com.github.luben/zstd-jni@1.5.7-9?type=jar",
        "pkg:maven/at.yawk.lz4/lz4-java@1.10.2?type=jar",
        "pkg:maven/org.xerial.snappy/snappy-java@1.1.10.8?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.github.luben/zstd-jni@1.5.7-9?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/at.yawk.lz4/lz4-java@1.10.2?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.xerial.snappy/snappy-java@1.1.10.8?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.dependencytrack/notification-templating@5.0.0-rc.2?type=jar",
      "dependsOn": [
        "pkg:maven/com.github.ben-manes.caffeine/caffeine@3.2.4?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
        "pkg:maven/io.pebbletemplates/pebble@4.1.1?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java-util@4.35.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.pebbletemplates/pebble@4.1.1?type=jar",
      "dependsOn": [
        "pkg:maven/org.unbescape/unbescape@1.1.6.RELEASE?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.unbescape/unbescape@1.1.6.RELEASE?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.dependencytrack/plugin-api@5.0.0-rc.2?type=jar",
      "dependsOn": [
        "pkg:maven/org.dependencytrack/cache-api@5.0.0-rc.2?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/plugin-config@5.0.0-rc.2?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.21.3?type=jar",
        "pkg:maven/com.networknt/json-schema-validator@1.5.9?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.networknt/json-schema-validator@1.5.9?type=jar",
      "dependsOn": [
        "pkg:maven/com.ethlo.time/itu@1.14.0?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.21.3?type=jar",
        "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.21.3?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.ethlo.time/itu@1.14.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.21.3?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.21.3?type=jar",
        "pkg:maven/org.yaml/snakeyaml@2.5?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.21.3?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.yaml/snakeyaml@2.5?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.dependencytrack/plugin-runtime@5.0.0-rc.2?type=jar",
      "dependsOn": [
        "pkg:maven/org.dependencytrack/cache-api@5.0.0-rc.2?type=jar",
        "pkg:maven/org.dependencytrack/common-config@5.0.0-rc.2?type=jar",
        "pkg:maven/org.dependencytrack/plugin-config@5.0.0-rc.2?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.21.3?type=jar",
        "pkg:maven/org.jdbi/jdbi3-core@3.53.0?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
        "pkg:maven/org.eclipse.microprofile.config/microprofile-config-api@3.1.1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/common-config@5.0.0-rc.2?type=jar",
      "dependsOn": [
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar",
        "pkg:maven/io.smallrye.config/smallrye-config-core@3.17.2?type=jar",
        "pkg:maven/org.dependencytrack/smallrye-config-secret-handler-file@5.0.0-rc.2?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/smallrye-config-secret-handler-file@5.0.0-rc.2?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.jdbi/jdbi3-core@3.53.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar",
        "pkg:maven/io.leangen.geantyref/geantyref@2.0.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.leangen.geantyref/geantyref@2.0.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.dependencytrack/proto@5.0.0-rc.2?type=jar",
      "dependsOn": [
        "pkg:maven/org.dependencytrack/cyclonedx-proto@5.0.0-rc.2?type=jar",
        "pkg:maven/org.dependencytrack/file-storage-api@5.0.0-rc.2?type=jar",
        "pkg:maven/org.dependencytrack/notification-api@5.0.0-rc.2?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java@4.35.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/cyclonedx-proto@5.0.0-rc.2?type=jar",
      "dependsOn": [
        "pkg:maven/com.google.protobuf/protobuf-java@4.35.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/file-storage-api@5.0.0-rc.2?type=jar",
      "dependsOn": [
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java@4.35.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/secret-management@5.0.0-rc.2?type=jar",
      "dependsOn": [
        "pkg:maven/org.dependencytrack/common-datasource@5.0.0-rc.2?type=jar",
        "pkg:maven/org.dependencytrack/common-pagination@5.0.0-rc.2?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
        "pkg:maven/org.postgresql/postgresql@42.7.11?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar",
        "pkg:maven/com.google.crypto.tink/tink@1.21.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.google.crypto.tink/tink@1.21.0?type=jar",
      "dependsOn": [
        "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
        "pkg:maven/com.google.code.gson/gson@2.8.9?type=jar",
        "pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java@4.35.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/vuln-analysis-api@5.0.0-rc.2?type=jar",
      "dependsOn": [
        "pkg:maven/org.dependencytrack/cyclonedx-proto@5.0.0-rc.2?type=jar",
        "pkg:maven/org.dependencytrack/plugin-api@5.0.0-rc.2?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/vuln-analyzer-internal@5.0.0-rc.2?type=jar",
      "dependsOn": [
        "pkg:maven/org.dependencytrack/jdbi-support@5.0.0-rc.2?type=jar",
        "pkg:maven/org.dependencytrack/os-distro-metadata@5.0.0-rc.2?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.21.3?type=jar",
        "pkg:maven/org.jdbi/jdbi3-core@3.53.0?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar",
        "pkg:maven/io.github.nscuro/versatile-core@0.18.1?type=jar",
        "pkg:maven/us.springett/cpe-parser@3.0.1?type=jar",
        "pkg:maven/com.github.package-url/packageurl-java@1.5.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/jdbi-support@5.0.0-rc.2?type=jar",
      "dependsOn": [
        "pkg:maven/com.github.package-url/packageurl-java@1.5.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.github.package-url/packageurl-java@1.5.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.dependencytrack/os-distro-metadata@5.0.0-rc.2?type=jar",
      "dependsOn": [
        "pkg:maven/com.github.package-url/packageurl-java@1.5.0?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.github.nscuro/versatile-core@0.18.1?type=jar",
      "dependsOn": [
        "pkg:maven/io.github.nscuro/versatile-spi@0.18.1?type=jar",
        "pkg:maven/org.apache.maven/maven-artifact@3.9.15?type=jar",
        "pkg:maven/com.github.package-url/packageurl-java@1.5.0?type=jar",
        "pkg:maven/com.vdurmont/semver4j@3.1.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.github.nscuro/versatile-spi@0.18.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.apache.maven/maven-artifact@3.9.15?type=jar",
      "dependsOn": [
        "pkg:maven/org.codehaus.plexus/plexus-utils@3.6.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.codehaus.plexus/plexus-utils@3.6.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.vdurmont/semver4j@3.1.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/us.springett/cpe-parser@3.0.1?type=jar",
      "dependsOn": [
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/package-metadata-api@5.0.0-rc.2?type=jar",
      "dependsOn": [
        "pkg:maven/org.dependencytrack/plugin-api@5.0.0-rc.2?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
        "pkg:maven/com.github.package-url/packageurl-java@1.5.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/package-metadata-resolution@5.0.0-rc.2?type=jar",
      "dependsOn": [
        "pkg:maven/org.brotli/dec@0.1.2?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.21.3?type=jar",
        "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.21.3?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java@4.35.0?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
        "pkg:maven/com.github.package-url/packageurl-java@1.5.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar",
        "pkg:maven/io.github.nscuro/versatile-core@0.18.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.brotli/dec@0.1.2?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.21.3?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.21?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.21.3?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.21.3?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/vuln-analyzer-oss-index@5.0.0-rc.2?type=jar",
      "dependsOn": [
        "pkg:maven/org.metaeffekt.core/ae-security@0.155.0?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.21.3?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
        "pkg:maven/com.github.package-url/packageurl-java@1.5.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.metaeffekt.core/ae-security@0.155.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.apache.commons/commons-lang3@3.20.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar",
        "pkg:maven/org.slf4j/jcl-over-slf4j@2.0.18?type=jar",
        "pkg:maven/commons-io/commons-io@2.22.0?type=jar",
        "pkg:maven/org.json/json@20231013?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.apache.commons/commons-lang3@3.20.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.slf4j/jcl-over-slf4j@2.0.18?type=jar",
      "dependsOn": [
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/commons-io/commons-io@2.22.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.json/json@20231013?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.dependencytrack/vuln-analyzer-snyk@5.0.0-rc.2?type=jar",
      "dependsOn": [
        "pkg:maven/org.metaeffekt.core/ae-security@0.155.0?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.21.3?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
        "pkg:maven/com.github.package-url/packageurl-java@1.5.0?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java-util@4.35.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/vuln-analyzer-trivy@5.0.0-rc.2?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.21.3?type=jar",
        "pkg:maven/com.github.package-url/packageurl-java@1.5.0?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java@4.35.0?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java-util@4.35.0?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/vuln-analyzer-vuln-db@5.0.0-rc.2?type=jar",
      "dependsOn": [
        "pkg:maven/org.metaeffekt.core/ae-security@0.155.0?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.21.3?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/dex-engine@5.0.0-rc.2?type=jar",
      "dependsOn": [
        "pkg:maven/org.dependencytrack/dex-api@5.0.0-rc.2?type=jar",
        "pkg:maven/org.dependencytrack/dex-engine-api@5.0.0-rc.2?type=jar",
        "pkg:maven/org.dependencytrack/dex-engine-migration@5.0.0-rc.2?type=jar",
        "pkg:maven/com.github.ben-manes.caffeine/caffeine@3.2.4?type=jar",
        "pkg:maven/com.fasterxml.uuid/java-uuid-generator@5.2.0?type=jar",
        "pkg:maven/org.jdbi/jdbi3-core@3.53.0?type=jar",
        "pkg:maven/org.jdbi/jdbi3-freemarker@3.53.0?type=jar",
        "pkg:maven/org.jdbi/jdbi3-jackson2@3.53.0?type=jar",
        "pkg:maven/org.jdbi/jdbi3-postgres@3.53.0?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
        "pkg:maven/io.micrometer/micrometer-core@1.16.5?type=jar",
        "pkg:maven/org.postgresql/postgresql@42.7.11?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java@4.35.0?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java-util@4.35.0?type=jar",
        "pkg:maven/io.github.resilience4j/resilience4j-circuitbreaker@2.4.0?type=jar",
        "pkg:maven/io.github.resilience4j/resilience4j-core@2.4.0?type=jar",
        "pkg:maven/io.github.resilience4j/resilience4j-micrometer@2.4.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/dex-api@5.0.0-rc.2?type=jar",
      "dependsOn": [
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java@4.35.0?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java-util@4.35.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/dex-engine-api@5.0.0-rc.2?type=jar",
      "dependsOn": [
        "pkg:maven/org.dependencytrack/common-pagination@5.0.0-rc.2?type=jar",
        "pkg:maven/org.dependencytrack/dex-api@5.0.0-rc.2?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
        "pkg:maven/io.micrometer/micrometer-core@1.16.5?type=jar",
        "pkg:maven/org.eclipse.microprofile.health/microprofile-health-api@4.0.1?type=jar",
        "pkg:maven/io.github.resilience4j/resilience4j-core@2.4.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.github.resilience4j/resilience4j-core@2.4.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/dex-engine-migration@5.0.0-rc.2?type=jar",
      "dependsOn": [
        "pkg:maven/org.flywaydb/flyway-core@12.6.1?type=jar",
        "pkg:maven/org.flywaydb/flyway-database-postgresql@12.6.1?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.jdbi/jdbi3-freemarker@3.53.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.jdbi/jdbi3-core@3.53.0?type=jar",
        "pkg:maven/org.freemarker/freemarker@2.3.34?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.freemarker/freemarker@2.3.34?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.jdbi/jdbi3-jackson2@3.53.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.jdbi/jdbi3-core@3.53.0?type=jar",
        "pkg:maven/org.jdbi/jdbi3-json@3.53.0?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.21.3?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.21.3?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.21?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.jdbi/jdbi3-json@3.53.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.jdbi/jdbi3-core@3.53.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.jdbi/jdbi3-postgres@3.53.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.jdbi/jdbi3-core@3.53.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.github.resilience4j/resilience4j-circuitbreaker@2.4.0?type=jar",
      "dependsOn": [
        "pkg:maven/io.github.resilience4j/resilience4j-core@2.4.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.github.resilience4j/resilience4j-micrometer@2.4.0?type=jar",
      "dependsOn": [
        "pkg:maven/io.micrometer/micrometer-core@1.16.5?type=jar",
        "pkg:maven/io.micrometer/micrometer-observation@1.16.5?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar",
        "pkg:maven/io.github.resilience4j/resilience4j-bulkhead@2.4.0?type=jar",
        "pkg:maven/io.github.resilience4j/resilience4j-circuitbreaker@2.4.0?type=jar",
        "pkg:maven/io.github.resilience4j/resilience4j-retry@2.4.0?type=jar",
        "pkg:maven/io.github.resilience4j/resilience4j-ratelimiter@2.4.0?type=jar",
        "pkg:maven/io.github.resilience4j/resilience4j-timelimiter@2.4.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.github.resilience4j/resilience4j-bulkhead@2.4.0?type=jar",
      "dependsOn": [
        "pkg:maven/io.github.resilience4j/resilience4j-core@2.4.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.github.resilience4j/resilience4j-retry@2.4.0?type=jar",
      "dependsOn": [
        "pkg:maven/io.github.resilience4j/resilience4j-core@2.4.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.github.resilience4j/resilience4j-ratelimiter@2.4.0?type=jar",
      "dependsOn": [
        "pkg:maven/io.github.resilience4j/resilience4j-core@2.4.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.github.resilience4j/resilience4j-timelimiter@2.4.0?type=jar",
      "dependsOn": [
        "pkg:maven/io.github.resilience4j/resilience4j-core@2.4.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/file-storage-provider-local@5.0.0-rc.2?type=jar",
      "dependsOn": [
        "pkg:maven/com.github.luben/zstd-jni@1.5.7-9?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/file-storage-provider-memory@5.0.0-rc.2?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.dependencytrack/file-storage-provider-s3@5.0.0-rc.2?type=jar",
      "dependsOn": [
        "pkg:maven/io.minio/minio@9.0.1?type=jar",
        "pkg:maven/com.squareup.okhttp3/okhttp-jvm@5.3.2?type=jar",
        "pkg:maven/com.github.luben/zstd-jni@1.5.7-9?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.minio/minio@9.0.1?type=jar",
      "dependsOn": [
        "pkg:maven/com.carrotsearch.thirdparty/simple-xml-safe@2.7.1?type=jar",
        "pkg:maven/com.google.guava/guava@33.5.0-jre?type=jar",
        "pkg:maven/com.squareup.okhttp3/okhttp@5.3.2?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.21?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.21.3?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.21.3?type=jar",
        "pkg:maven/org.apache.commons/commons-compress@1.28.0?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.21.0?type=jar",
        "pkg:maven/org.xerial.snappy/snappy-java@1.1.10.8?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.carrotsearch.thirdparty/simple-xml-safe@2.7.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.google.guava/guava@33.5.0-jre?type=jar",
      "dependsOn": [
        "pkg:maven/com.google.guava/failureaccess@1.0.3?type=jar",
        "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
        "pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0?type=jar",
        "pkg:maven/com.google.j2objc/j2objc-annotations@3.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.google.guava/failureaccess@1.0.3?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.google.j2objc/j2objc-annotations@3.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.squareup.okhttp3/okhttp@5.3.2?type=jar",
      "dependsOn": [
        "pkg:maven/org.jetbrains.kotlin/kotlin-stdlib@2.3.21?type=jar",
        "pkg:maven/com.squareup.okio/okio@3.16.4?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.jetbrains.kotlin/kotlin-stdlib@2.3.21?type=jar",
      "dependsOn": [
        "pkg:maven/org.jetbrains/annotations@13.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.jetbrains/annotations@13.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.squareup.okio/okio@3.16.4?type=jar",
      "dependsOn": [
        "pkg:maven/com.squareup.okio/okio-jvm@3.16.4?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.squareup.okio/okio-jvm@3.16.4?type=jar",
      "dependsOn": [
        "pkg:maven/org.jetbrains.kotlin/kotlin-stdlib@2.3.21?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.apache.commons/commons-compress@1.28.0?type=jar",
      "dependsOn": [
        "pkg:maven/commons-codec/commons-codec@1.21.0?type=jar",
        "pkg:maven/commons-io/commons-io@2.22.0?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.20.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/commons-codec/commons-codec@1.21.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.squareup.okhttp3/okhttp-jvm@5.3.2?type=jar",
      "dependsOn": [
        "pkg:maven/com.squareup.okio/okio-jvm@3.16.4?type=jar",
        "pkg:maven/org.jetbrains.kotlin/kotlin-stdlib@2.3.21?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/vuln-data-source-api@5.0.0-rc.2?type=jar",
      "dependsOn": [
        "pkg:maven/org.dependencytrack/plugin-api@5.0.0-rc.2?type=jar",
        "pkg:maven/org.dependencytrack/cyclonedx-proto@5.0.0-rc.2?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/vuln-data-source-github@5.0.0-rc.2?type=jar",
      "dependsOn": [
        "pkg:maven/org.apache.commons/commons-lang3@3.20.0?type=jar",
        "pkg:maven/org.metaeffekt.core/ae-security@0.155.0?type=jar",
        "pkg:maven/org.apache.httpcomponents.client5/httpclient5@5.6.1?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.21?type=jar",
        "pkg:maven/io.github.jeremylong/open-vulnerability-clients@9.0.5?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java-util@4.35.0?type=jar",
        "pkg:maven/io.github.nscuro/versatile-core@0.18.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.apache.httpcomponents.client5/httpclient5@5.6.1?type=jar",
      "dependsOn": [
        "pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.4?type=jar",
        "pkg:maven/org.apache.httpcomponents.core5/httpcore5-h2@5.4?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.4?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.apache.httpcomponents.core5/httpcore5-h2@5.4?type=jar",
      "dependsOn": [
        "pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.4?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.github.jeremylong/open-vulnerability-clients@9.0.5?type=jar",
      "dependsOn": [
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
        "pkg:maven/org.apache.httpcomponents.client5/httpclient5@5.6.1?type=jar",
        "pkg:maven/org.apache.httpcomponents.client5/httpclient5-cache@5.6?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.21.3?type=jar",
        "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.21.3?type=jar",
        "pkg:maven/com.samskivert/jmustache@1.16?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.apache.httpcomponents.client5/httpclient5-cache@5.6?type=jar",
      "dependsOn": [
        "pkg:maven/org.apache.httpcomponents.client5/httpclient5@5.6.1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.samskivert/jmustache@1.16?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.dependencytrack/vuln-data-source-nvd@5.0.0-rc.2?type=jar",
      "dependsOn": [
        "pkg:maven/us.springett/cpe-parser@3.0.1?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.21.3?type=jar",
        "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.21.3?type=jar",
        "pkg:maven/io.github.jeremylong/open-vulnerability-clients@9.0.5?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java-util@4.35.0?type=jar",
        "pkg:maven/io.github.nscuro/versatile-core@0.18.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/vuln-data-source-osv@5.0.0-rc.2?type=jar",
      "dependsOn": [
        "pkg:maven/org.dependencytrack/os-distro-metadata@5.0.0-rc.2?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.20.0?type=jar",
        "pkg:maven/org.metaeffekt.core/ae-security@0.155.0?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.21.3?type=jar",
        "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.21.3?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java-util@4.35.0?type=jar",
        "pkg:maven/io.github.nscuro/versatile-core@0.18.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/alpine-common@5.0.0-rc.2?type=jar",
      "dependsOn": [
        "pkg:maven/org.dependencytrack/common-config@5.0.0-rc.2?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.21?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/alpine-model@5.0.0-rc.2?type=jar",
      "dependsOn": [
        "pkg:maven/org.dependencytrack/alpine-common@5.0.0-rc.2?type=jar",
        "pkg:maven/org.datanucleus/datanucleus-api-jdo@6.0.5?type=jar",
        "pkg:maven/org.datanucleus/datanucleus-core@6.0.11?type=jar",
        "pkg:maven/org.datanucleus/javax.jdo@3.2.1?type=jar",
        "pkg:maven/org.glassfish.jersey.ext/jersey-bean-validation@4.0.2?type=jar",
        "pkg:maven/io.swagger.core.v3/swagger-annotations-jakarta@2.2.50?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.datanucleus/datanucleus-api-jdo@6.0.5?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.datanucleus/datanucleus-core@6.0.11?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.datanucleus/javax.jdo@3.2.1?type=jar",
      "dependsOn": [
        "pkg:maven/javax.transaction/javax.transaction-api@1.3?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/javax.transaction/javax.transaction-api@1.3?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.glassfish.jersey.ext/jersey-bean-validation@4.0.2?type=jar",
      "dependsOn": [
        "pkg:maven/jakarta.inject/jakarta.inject-api@2.0.1?type=jar",
        "pkg:maven/org.glassfish.jersey.core/jersey-common@4.0.2?type=jar",
        "pkg:maven/org.glassfish.jersey.core/jersey-server@4.0.2?type=jar",
        "pkg:maven/jakarta.validation/jakarta.validation-api@3.1.1?type=jar",
        "pkg:maven/org.hibernate.validator/hibernate-validator@8.0.2.Final?type=jar",
        "pkg:maven/org.jboss.logging/jboss-logging@3.6.1.Final?type=jar",
        "pkg:maven/jakarta.el/jakarta.el-api@6.0.1?type=jar",
        "pkg:maven/org.glassfish.expressly/expressly@5.0.0?type=jar",
        "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@4.0.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/jakarta.inject/jakarta.inject-api@2.0.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.glassfish.jersey.core/jersey-common@4.0.2?type=jar",
      "dependsOn": [
        "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@4.0.0?type=jar",
        "pkg:maven/jakarta.annotation/jakarta.annotation-api@3.0.0?type=jar",
        "pkg:maven/jakarta.inject/jakarta.inject-api@2.0.1?type=jar",
        "pkg:maven/org.glassfish.hk2/osgi-resource-locator@3.0.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@4.0.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.glassfish.hk2/osgi-resource-locator@3.0.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.glassfish.jersey.core/jersey-server@4.0.2?type=jar",
      "dependsOn": [
        "pkg:maven/org.glassfish.jersey.core/jersey-common@4.0.2?type=jar",
        "pkg:maven/org.glassfish.jersey.core/jersey-client@4.0.2?type=jar",
        "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@4.0.0?type=jar",
        "pkg:maven/jakarta.annotation/jakarta.annotation-api@3.0.0?type=jar",
        "pkg:maven/jakarta.inject/jakarta.inject-api@2.0.1?type=jar",
        "pkg:maven/jakarta.validation/jakarta.validation-api@3.1.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.glassfish.jersey.core/jersey-client@4.0.2?type=jar",
      "dependsOn": [
        "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@4.0.0?type=jar",
        "pkg:maven/org.glassfish.jersey.core/jersey-common@4.0.2?type=jar",
        "pkg:maven/jakarta.inject/jakarta.inject-api@2.0.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/jakarta.validation/jakarta.validation-api@3.1.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.hibernate.validator/hibernate-validator@8.0.2.Final?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml/classmate@1.5.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.fasterxml/classmate@1.5.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/jakarta.el/jakarta.el-api@6.0.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.glassfish.expressly/expressly@5.0.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/io.swagger.core.v3/swagger-annotations-jakarta@2.2.50?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.dependencytrack/alpine-infra@5.0.0-rc.2?type=jar",
      "dependsOn": [
        "pkg:maven/org.dependencytrack/alpine-common@5.0.0-rc.2?type=jar",
        "pkg:maven/org.dependencytrack/alpine-model@5.0.0-rc.2?type=jar",
        "pkg:maven/io.micrometer/micrometer-core@1.16.5?type=jar",
        "pkg:maven/org.datanucleus/javax.jdo@3.2.1?type=jar",
        "pkg:maven/org.datanucleus/datanucleus-api-jdo@6.0.5?type=jar",
        "pkg:maven/org.datanucleus/datanucleus-core@6.0.11?type=jar",
        "pkg:maven/org.datanucleus/datanucleus-rdbms@6.0.11?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.datanucleus/datanucleus-rdbms@6.0.11?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.dependencytrack/alpine-server@5.0.0-rc.2?type=jar",
      "dependsOn": [
        "pkg:maven/org.dependencytrack/common-datasource@5.0.0-rc.2?type=jar",
        "pkg:maven/org.dependencytrack/alpine-common@5.0.0-rc.2?type=jar",
        "pkg:maven/org.dependencytrack/alpine-infra@5.0.0-rc.2?type=jar",
        "pkg:maven/org.dependencytrack/alpine-model@5.0.0-rc.2?type=jar",
        "pkg:maven/org.glassfish.jersey.containers/jersey-container-servlet@4.0.2?type=jar",
        "pkg:maven/org.glassfish.jersey.media/jersey-media-json-jackson@4.0.2?type=jar",
        "pkg:maven/org.glassfish.jersey.media/jersey-media-multipart@4.0.2?type=jar",
        "pkg:maven/org.glassfish.jersey.ext/jersey-bean-validation@4.0.2?type=jar",
        "pkg:maven/org.glassfish.jersey.inject/jersey-hk2@4.0.2?type=jar",
        "pkg:maven/jakarta.json/jakarta.json-api@2.1.3?type=jar",
        "pkg:maven/org.eclipse.parsson/jakarta.json@1.1.7?type=jar",
        "pkg:maven/io.swagger.core.v3/swagger-annotations-jakarta@2.2.50?type=jar",
        "pkg:maven/org.datanucleus/javax.jdo@3.2.1?type=jar",
        "pkg:maven/org.datanucleus/datanucleus-api-jdo@6.0.5?type=jar",
        "pkg:maven/org.datanucleus/datanucleus-core@6.0.11?type=jar",
        "pkg:maven/org.datanucleus/datanucleus-rdbms@6.0.11?type=jar",
        "pkg:maven/com.zaxxer/HikariCP@7.0.2?type=jar",
        "pkg:maven/org.mindrot/jbcrypt@0.4?type=jar",
        "pkg:maven/com.nimbusds/oauth2-oidc-sdk@11.37.2?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.21.3?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.21?type=jar",
        "pkg:maven/com.fasterxml.jackson.jakarta.rs/jackson-jakarta-rs-base@2.21.3?type=jar",
        "pkg:maven/com.fasterxml.jackson.jakarta.rs/jackson-jakarta-rs-json-provider@2.21.3?type=jar",
        "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8@2.21.3?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar",
        "pkg:maven/ch.qos.logback/logback-classic@1.5.32?type=jar",
        "pkg:maven/ch.qos.logback/logback-core@1.5.32?type=jar",
        "pkg:maven/org.owasp/security-logging-common@1.1.7?type=jar",
        "pkg:maven/org.owasp/security-logging-logback@1.1.7?type=jar",
        "pkg:maven/net.logstash.logback/logstash-logback-encoder@8.1?type=jar",
        "pkg:maven/org.eclipse.microprofile.health/microprofile-health-api@4.0.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.glassfish.jersey.containers/jersey-container-servlet@4.0.2?type=jar",
      "dependsOn": [
        "pkg:maven/jakarta.inject/jakarta.inject-api@2.0.1?type=jar",
        "pkg:maven/org.glassfish.jersey.core/jersey-common@4.0.2?type=jar",
        "pkg:maven/org.glassfish.jersey.core/jersey-server@4.0.2?type=jar",
        "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@4.0.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.glassfish.jersey.media/jersey-media-json-jackson@4.0.2?type=jar",
      "dependsOn": [
        "pkg:maven/org.glassfish.jersey.core/jersey-common@4.0.2?type=jar",
        "pkg:maven/org.glassfish.jersey.ext/jersey-entity-filtering@4.0.2?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.21?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.21.3?type=jar",
        "pkg:maven/com.fasterxml.jackson.module/jackson-module-jakarta-xmlbind-annotations@2.21.3?type=jar",
        "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@4.0.2?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.glassfish.jersey.ext/jersey-entity-filtering@4.0.2?type=jar",
      "dependsOn": [
        "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@4.0.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.fasterxml.jackson.module/jackson-module-jakarta-xmlbind-annotations@2.21.3?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.21?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.21.3?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.21.3?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@4.0.2?type=jar",
      "dependsOn": [
        "pkg:maven/jakarta.activation/jakarta.activation-api@2.1.3?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.glassfish.jersey.media/jersey-media-multipart@4.0.2?type=jar",
      "dependsOn": [
        "pkg:maven/org.glassfish.jersey.core/jersey-common@4.0.2?type=jar",
        "pkg:maven/org.jvnet.mimepull/mimepull@1.9.15?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.jvnet.mimepull/mimepull@1.9.15?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.glassfish.jersey.inject/jersey-hk2@4.0.2?type=jar",
      "dependsOn": [
        "pkg:maven/org.glassfish.jersey.core/jersey-common@4.0.2?type=jar",
        "pkg:maven/org.glassfish.hk2/hk2-locator@4.0.0-M3?type=jar",
        "pkg:maven/org.javassist/javassist@3.30.2-GA?type=jar",
        "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@4.0.2?type=jar",
        "pkg:maven/jakarta.annotation/jakarta.annotation-api@3.0.0?type=jar",
        "pkg:maven/jakarta.activation/jakarta.activation-api@2.1.3?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.glassfish.hk2/hk2-locator@4.0.0-M3?type=jar",
      "dependsOn": [
        "pkg:maven/org.glassfish.hk2.external/aopalliance-repackaged@4.0.0-M3?type=jar",
        "pkg:maven/org.glassfish.hk2/hk2-api@4.0.0-M3?type=jar",
        "pkg:maven/org.glassfish.hk2/hk2-utils@4.0.0-M3?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.glassfish.hk2.external/aopalliance-repackaged@4.0.0-M3?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.glassfish.hk2/hk2-api@4.0.0-M3?type=jar",
      "dependsOn": [
        "pkg:maven/org.glassfish.hk2/hk2-utils@4.0.0-M3?type=jar",
        "pkg:maven/org.glassfish.hk2.external/aopalliance-repackaged@4.0.0-M3?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.glassfish.hk2/hk2-utils@4.0.0-M3?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.javassist/javassist@3.30.2-GA?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/jakarta.json/jakarta.json-api@2.1.3?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.eclipse.parsson/jakarta.json@1.1.7?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.mindrot/jbcrypt@0.4?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.nimbusds/oauth2-oidc-sdk@11.37.2?type=jar",
      "dependsOn": [
        "pkg:maven/com.github.stephenc.jcip/jcip-annotations@1.0-1?type=jar",
        "pkg:maven/com.nimbusds/content-type@2.3?type=jar",
        "pkg:maven/net.minidev/json-smart@2.6.0?type=jar",
        "pkg:maven/com.nimbusds/lang-tag@1.7?type=jar",
        "pkg:maven/com.nimbusds/nimbus-jose-jwt@10.9?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.github.stephenc.jcip/jcip-annotations@1.0-1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.nimbusds/content-type@2.3?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/net.minidev/json-smart@2.6.0?type=jar",
      "dependsOn": [
        "pkg:maven/net.minidev/accessors-smart@2.6.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/net.minidev/accessors-smart@2.6.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.ow2.asm/asm@9.9.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.nimbusds/lang-tag@1.7?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.nimbusds/nimbus-jose-jwt@10.9?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.fasterxml.jackson.jakarta.rs/jackson-jakarta-rs-base@2.21.3?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.21.3?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.21.3?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.fasterxml.jackson.jakarta.rs/jackson-jakarta-rs-json-provider@2.21.3?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml.jackson.jakarta.rs/jackson-jakarta-rs-base@2.21.3?type=jar",
        "pkg:maven/com.fasterxml.jackson.module/jackson-module-jakarta-xmlbind-annotations@2.21.3?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8@2.21.3?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.21.3?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.21.3?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/ch.qos.logback/logback-classic@1.5.32?type=jar",
      "dependsOn": [
        "pkg:maven/ch.qos.logback/logback-core@1.5.32?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/ch.qos.logback/logback-core@1.5.32?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.owasp/security-logging-common@1.1.7?type=jar",
      "dependsOn": [
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.owasp/security-logging-logback@1.1.7?type=jar",
      "dependsOn": [
        "pkg:maven/org.owasp/security-logging-common@1.1.7?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar",
        "pkg:maven/ch.qos.logback/logback-classic@1.5.32?type=jar",
        "pkg:maven/ch.qos.logback/logback-core@1.5.32?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.21.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/net.logstash.logback/logstash-logback-encoder@8.1?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.21.3?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/dev.cel/cel@0.13.0?type=jar",
      "dependsOn": [
        "pkg:maven/com.google.auto.value/auto-value-annotations@1.11.0?type=jar",
        "pkg:maven/com.google.guava/guava@33.5.0-jre?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java@4.35.0?type=jar",
        "pkg:maven/com.google.re2j/re2j@1.8?type=jar",
        "pkg:maven/dev.cel/common@0.13.0?type=jar",
        "pkg:maven/dev.cel/compiler@0.13.0?type=jar",
        "pkg:maven/dev.cel/protobuf@0.13.0?type=jar",
        "pkg:maven/dev.cel/runtime@0.13.0?type=jar",
        "pkg:maven/dev.cel/v1alpha1@0.13.0?type=jar",
        "pkg:maven/org.antlr/antlr4-runtime@4.13.2?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
        "pkg:maven/org.threeten/threeten-extra@1.8.0?type=jar",
        "pkg:maven/org.yaml/snakeyaml@2.5?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.google.auto.value/auto-value-annotations@1.11.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.google.re2j/re2j@1.8?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/dev.cel/common@0.13.0?type=jar",
      "dependsOn": [
        "pkg:maven/com.google.auto.value/auto-value-annotations@1.11.0?type=jar",
        "pkg:maven/com.google.guava/guava@33.5.0-jre?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java@4.35.0?type=jar",
        "pkg:maven/com.google.re2j/re2j@1.8?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/dev.cel/compiler@0.13.0?type=jar",
      "dependsOn": [
        "pkg:maven/com.google.auto.value/auto-value-annotations@1.11.0?type=jar",
        "pkg:maven/com.google.guava/guava@33.5.0-jre?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java@4.35.0?type=jar",
        "pkg:maven/com.google.re2j/re2j@1.8?type=jar",
        "pkg:maven/dev.cel/common@0.13.0?type=jar",
        "pkg:maven/dev.cel/protobuf@0.13.0?type=jar",
        "pkg:maven/org.antlr/antlr4-runtime@4.13.2?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/dev.cel/protobuf@0.13.0?type=jar",
      "dependsOn": [
        "pkg:maven/com.google.auto.value/auto-value-annotations@1.11.0?type=jar",
        "pkg:maven/com.google.guava/guava@33.5.0-jre?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java@4.35.0?type=jar",
        "pkg:maven/dev.cel/common@0.13.0?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.antlr/antlr4-runtime@4.13.2?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/dev.cel/runtime@0.13.0?type=jar",
      "dependsOn": [
        "pkg:maven/com.google.auto.value/auto-value-annotations@1.11.0?type=jar",
        "pkg:maven/com.google.guava/guava@33.5.0-jre?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java@4.35.0?type=jar",
        "pkg:maven/com.google.re2j/re2j@1.8?type=jar",
        "pkg:maven/dev.cel/common@0.13.0?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
        "pkg:maven/org.threeten/threeten-extra@1.8.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.threeten/threeten-extra@1.8.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/dev.cel/v1alpha1@0.13.0?type=jar",
      "dependsOn": [
        "pkg:maven/com.google.auto.value/auto-value-annotations@1.11.0?type=jar",
        "pkg:maven/com.google.guava/guava@33.5.0-jre?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java@4.35.0?type=jar",
        "pkg:maven/dev.cel/common@0.13.0?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/dev.cel/extensions@0.4.1?type=jar",
      "dependsOn": [
        "pkg:maven/com.google.guava/guava@33.5.0-jre?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java@4.35.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.github.kagkarlsson/db-scheduler@16.10.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.jdbi/jdbi3-sqlobject@3.53.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.jdbi/jdbi3-core@3.53.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.glassfish.jersey.ext/jersey-micrometer@4.0.2?type=jar",
      "dependsOn": [
        "pkg:maven/io.micrometer/micrometer-core@1.16.5?type=jar",
        "pkg:maven/org.glassfish.jersey.core/jersey-common@4.0.2?type=jar",
        "pkg:maven/org.glassfish.jersey.core/jersey-server@4.0.2?type=jar",
        "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@4.0.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/us.springett/owasp-risk-rating-calculator@1.0.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.cyclonedx/cyclonedx-core-java@12.1.0?type=jar",
      "dependsOn": [
        "pkg:maven/commons-codec/commons-codec@1.21.0?type=jar",
        "pkg:maven/commons-io/commons-io@2.22.0?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.20.0?type=jar",
        "pkg:maven/org.apache.commons/commons-collections4@4.5.0?type=jar",
        "pkg:maven/com.github.package-url/packageurl-java@1.5.0?type=jar",
        "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.21.3?type=jar",
        "pkg:maven/com.networknt/json-schema-validator@1.5.9?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.apache.commons/commons-collections4@4.5.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.21.3?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.21.3?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.21?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.21.3?type=jar",
        "pkg:maven/org.codehaus.woodstox/stax2-api@4.3.0?type=jar",
        "pkg:maven/com.fasterxml.woodstox/woodstox-core@7.2.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.codehaus.woodstox/stax2-api@4.3.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.fasterxml.woodstox/woodstox-core@7.2.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.codehaus.woodstox/stax2-api@4.3.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/jakarta.servlet/jakarta.servlet-api@6.1.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.eclipse.jetty/jetty-server@12.1.9?type=jar",
      "dependsOn": [
        "pkg:maven/org.eclipse.jetty/jetty-http@12.1.9?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-io@12.1.9?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.eclipse.jetty/jetty-http@12.1.9?type=jar",
      "dependsOn": [
        "pkg:maven/org.eclipse.jetty/jetty-io@12.1.9?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-util@12.1.9?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.eclipse.jetty/jetty-io@12.1.9?type=jar",
      "dependsOn": [
        "pkg:maven/org.eclipse.jetty/jetty-util@12.1.9?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.eclipse.jetty/jetty-util@12.1.9?type=jar",
      "dependsOn": [
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.eclipse.jetty.compression/jetty-compression-gzip@12.1.9?type=jar",
      "dependsOn": [
        "pkg:maven/org.eclipse.jetty.compression/jetty-compression-common@12.1.9?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.eclipse.jetty.compression/jetty-compression-common@12.1.9?type=jar",
      "dependsOn": [
        "pkg:maven/org.eclipse.jetty/jetty-http@12.1.9?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-io@12.1.9?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-util@12.1.9?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.eclipse.jetty.compression/jetty-compression-server@12.1.9?type=jar",
      "dependsOn": [
        "pkg:maven/org.eclipse.jetty/jetty-server@12.1.9?type=jar",
        "pkg:maven/org.eclipse.jetty.compression/jetty-compression-common@12.1.9?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.eclipse.jetty.ee11/jetty-ee11-servlet@12.1.9?type=jar",
      "dependsOn": [
        "pkg:maven/jakarta.servlet/jakarta.servlet-api@6.1.0?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-security@12.1.9?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-server@12.1.9?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-session@12.1.9?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.eclipse.jetty/jetty-security@12.1.9?type=jar",
      "dependsOn": [
        "pkg:maven/org.eclipse.jetty/jetty-server@12.1.9?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.eclipse.jetty/jetty-session@12.1.9?type=jar",
      "dependsOn": [
        "pkg:maven/org.eclipse.jetty/jetty-server@12.1.9?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.slf4j/jul-to-slf4j@2.0.18?type=jar",
      "dependsOn": [
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.asahaf.javacron/javacron@1.4.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/io.micrometer/micrometer-java11@1.16.5?type=jar",
      "dependsOn": [
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
        "pkg:maven/io.micrometer/micrometer-core@1.16.5?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.micrometer/micrometer-registry-prometheus@1.16.5?type=jar",
      "dependsOn": [
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
        "pkg:maven/io.micrometer/micrometer-core@1.16.5?type=jar",
        "pkg:maven/io.prometheus/prometheus-metrics-core@1.6.1?type=jar",
        "pkg:maven/io.prometheus/prometheus-metrics-tracer-common@1.6.1?type=jar",
        "pkg:maven/io.prometheus/prometheus-metrics-exposition-formats@1.6.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.prometheus/prometheus-metrics-core@1.6.1?type=jar",
      "dependsOn": [
        "pkg:maven/io.prometheus/prometheus-metrics-model@1.6.1?type=jar",
        "pkg:maven/io.prometheus/prometheus-metrics-config@1.6.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.prometheus/prometheus-metrics-model@1.6.1?type=jar",
      "dependsOn": [
        "pkg:maven/io.prometheus/prometheus-metrics-config@1.6.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.prometheus/prometheus-metrics-config@1.6.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/io.prometheus/prometheus-metrics-tracer-common@1.6.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/io.prometheus/prometheus-metrics-exposition-formats@1.6.1?type=jar",
      "dependsOn": [
        "pkg:maven/io.prometheus/prometheus-metrics-exposition-textformats@1.6.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.prometheus/prometheus-metrics-exposition-textformats@1.6.1?type=jar",
      "dependsOn": [
        "pkg:maven/io.prometheus/prometheus-metrics-model@1.6.1?type=jar",
        "pkg:maven/io.prometheus/prometheus-metrics-config@1.6.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.github.mweirauch/micrometer-jvm-extras@0.3.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.google.cloud.sql/postgres-socket-factory@1.28.3?type=jar",
      "dependsOn": [
        "pkg:maven/com.google.cloud.sql/jdbc-socket-factory-core@1.28.3?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.google.cloud.sql/jdbc-socket-factory-core@1.28.3?type=jar",
      "dependsOn": [
        "pkg:maven/com.github.jnr/jnr-enxio@0.32.20?type=jar",
        "pkg:maven/com.github.jnr/jnr-unixsocket@0.38.25?type=jar",
        "pkg:maven/com.google.http-client/google-http-client@2.1.0?type=jar",
        "pkg:maven/com.google.guava/guava@33.5.0-jre?type=jar",
        "pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0?type=jar",
        "pkg:maven/com.google.http-client/google-http-client-gson@2.1.0?type=jar",
        "pkg:maven/com.google.api-client/google-api-client@2.9.0?type=jar",
        "pkg:maven/com.google.apis/google-api-services-sqladmin@v1beta4-rev20260317-2.0.0?type=jar",
        "pkg:maven/com.google.auth/google-auth-library-credentials@1.46.0?type=jar",
        "pkg:maven/com.google.auth/google-auth-library-oauth2-http@1.46.0?type=jar",
        "pkg:maven/com.google.oauth-client/google-oauth-client@1.39.0?type=jar",
        "pkg:maven/dnsjava/dnsjava@3.6.4?type=jar",
        "pkg:maven/com.google.api/gax@2.79.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java@4.35.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.github.jnr/jnr-enxio@0.32.20?type=jar",
      "dependsOn": [
        "pkg:maven/com.github.jnr/jnr-constants@0.10.4?type=jar",
        "pkg:maven/com.github.jnr/jnr-ffi@2.2.19?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.github.jnr/jnr-constants@0.10.4?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.github.jnr/jnr-ffi@2.2.19?type=jar",
      "dependsOn": [
        "pkg:maven/com.github.jnr/jffi@1.3.15?type=jar",
        "pkg:maven/com.github.jnr/jffi@1.3.15?classifier=native\u0026type=jar",
        "pkg:maven/org.ow2.asm/asm@9.9.1?type=jar",
        "pkg:maven/org.ow2.asm/asm-commons@9.7.1?type=jar",
        "pkg:maven/org.ow2.asm/asm-analysis@9.7.1?type=jar",
        "pkg:maven/org.ow2.asm/asm-tree@9.7.1?type=jar",
        "pkg:maven/org.ow2.asm/asm-util@9.7.1?type=jar",
        "pkg:maven/com.github.jnr/jnr-a64asm@1.0.0?type=jar",
        "pkg:maven/com.github.jnr/jnr-x86asm@1.0.2?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.github.jnr/jffi@1.3.15?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.github.jnr/jffi@1.3.15?classifier=native\u0026type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.ow2.asm/asm-commons@9.7.1?type=jar",
      "dependsOn": [
        "pkg:maven/org.ow2.asm/asm@9.9.1?type=jar",
        "pkg:maven/org.ow2.asm/asm-tree@9.7.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.ow2.asm/asm-tree@9.7.1?type=jar",
      "dependsOn": [
        "pkg:maven/org.ow2.asm/asm@9.9.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.ow2.asm/asm-analysis@9.7.1?type=jar",
      "dependsOn": [
        "pkg:maven/org.ow2.asm/asm-tree@9.7.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.ow2.asm/asm-util@9.7.1?type=jar",
      "dependsOn": [
        "pkg:maven/org.ow2.asm/asm@9.9.1?type=jar",
        "pkg:maven/org.ow2.asm/asm-tree@9.7.1?type=jar",
        "pkg:maven/org.ow2.asm/asm-analysis@9.7.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.github.jnr/jnr-a64asm@1.0.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.github.jnr/jnr-x86asm@1.0.2?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.github.jnr/jnr-unixsocket@0.38.25?type=jar",
      "dependsOn": [
        "pkg:maven/com.github.jnr/jnr-ffi@2.2.19?type=jar",
        "pkg:maven/com.github.jnr/jnr-constants@0.10.4?type=jar",
        "pkg:maven/com.github.jnr/jnr-enxio@0.32.20?type=jar",
        "pkg:maven/com.github.jnr/jnr-posix@3.1.22?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.github.jnr/jnr-posix@3.1.22?type=jar",
      "dependsOn": [
        "pkg:maven/com.github.jnr/jnr-ffi@2.2.19?type=jar",
        "pkg:maven/com.github.jnr/jnr-constants@0.10.4?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.google.http-client/google-http-client@2.1.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.apache.httpcomponents/httpclient@4.5.14?type=jar",
        "pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
        "pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0?type=jar",
        "pkg:maven/com.google.guava/guava@33.5.0-jre?type=jar",
        "pkg:maven/com.google.j2objc/j2objc-annotations@3.1?type=jar",
        "pkg:maven/io.grpc/grpc-context@1.70.0?type=jar",
        "pkg:maven/io.opencensus/opencensus-api@0.31.1?type=jar",
        "pkg:maven/io.opencensus/opencensus-contrib-http-util@0.31.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.apache.httpcomponents/httpclient@4.5.14?type=jar",
      "dependsOn": [
        "pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar",
        "pkg:maven/commons-logging/commons-logging@1.2?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.21.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/commons-logging/commons-logging@1.2?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/io.grpc/grpc-context@1.70.0?type=jar",
      "dependsOn": [
        "pkg:maven/io.grpc/grpc-api@1.70.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.grpc/grpc-api@1.70.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/io.opencensus/opencensus-api@0.31.1?type=jar",
      "dependsOn": [
        "pkg:maven/io.grpc/grpc-context@1.70.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.opencensus/opencensus-contrib-http-util@0.31.1?type=jar",
      "dependsOn": [
        "pkg:maven/io.opencensus/opencensus-api@0.31.1?type=jar",
        "pkg:maven/com.google.guava/guava@33.5.0-jre?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.google.http-client/google-http-client-gson@2.1.0?type=jar",
      "dependsOn": [
        "pkg:maven/com.google.http-client/google-http-client@2.1.0?type=jar",
        "pkg:maven/com.google.code.gson/gson@2.8.9?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.google.api-client/google-api-client@2.9.0?type=jar",
      "dependsOn": [
        "pkg:maven/commons-codec/commons-codec@1.21.0?type=jar",
        "pkg:maven/com.google.auth/google-auth-library-credentials@1.46.0?type=jar",
        "pkg:maven/com.google.auth/google-auth-library-oauth2-http@1.46.0?type=jar",
        "pkg:maven/com.google.http-client/google-http-client-gson@2.1.0?type=jar",
        "pkg:maven/com.google.guava/guava@33.5.0-jre?type=jar",
        "pkg:maven/com.google.http-client/google-http-client-apache-v2@2.0.0?type=jar",
        "pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar",
        "pkg:maven/org.apache.httpcomponents/httpclient@4.5.14?type=jar",
        "pkg:maven/com.google.http-client/google-http-client@2.1.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.google.auth/google-auth-library-credentials@1.46.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.google.auth/google-auth-library-oauth2-http@1.46.0?type=jar",
      "dependsOn": [
        "pkg:maven/com.google.guava/guava@33.5.0-jre?type=jar",
        "pkg:maven/com.google.auto.value/auto-value-annotations@1.11.0?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
        "pkg:maven/com.google.auth/google-auth-library-credentials@1.46.0?type=jar",
        "pkg:maven/com.google.http-client/google-http-client@2.1.0?type=jar",
        "pkg:maven/com.google.http-client/google-http-client-gson@2.1.0?type=jar",
        "pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0?type=jar",
        "pkg:maven/com.google.api/api-common@2.53.0?type=jar",
        "pkg:maven/com.google.code.gson/gson@2.8.9?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.google.api/api-common@2.53.0?type=jar",
      "dependsOn": [
        "pkg:maven/com.google.guava/guava@33.5.0-jre?type=jar",
        "pkg:maven/com.google.auto.value/auto-value-annotations@1.11.0?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
        "pkg:maven/javax.annotation/javax.annotation-api@1.3.2?type=jar",
        "pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0?type=jar",
        "pkg:maven/com.google.j2objc/j2objc-annotations@3.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/javax.annotation/javax.annotation-api@1.3.2?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.google.http-client/google-http-client-apache-v2@2.0.0?type=jar",
      "dependsOn": [
        "pkg:maven/com.google.http-client/google-http-client@2.1.0?type=jar",
        "pkg:maven/org.apache.httpcomponents/httpclient@4.5.14?type=jar",
        "pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.google.apis/google-api-services-sqladmin@v1beta4-rev20260317-2.0.0?type=jar",
      "dependsOn": [
        "pkg:maven/com.google.api-client/google-api-client@2.9.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.google.oauth-client/google-oauth-client@1.39.0?type=jar",
      "dependsOn": [
        "pkg:maven/com.google.http-client/google-http-client@2.1.0?type=jar",
        "pkg:maven/com.google.http-client/google-http-client-gson@2.1.0?type=jar",
        "pkg:maven/com.google.guava/guava@33.5.0-jre?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/dnsjava/dnsjava@3.6.4?type=jar",
      "dependsOn": [
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.google.api/gax@2.79.0?type=jar",
      "dependsOn": [
        "pkg:maven/com.google.protobuf/protobuf-java-util@4.35.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.slf4j/log4j-over-slf4j@2.0.18?type=jar",
      "dependsOn": [
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    }
  ]
}