{
  "bomFormat": "CycloneDX",
  "specVersion": "1.4",
  "serialNumber": "urn:uuid:03b36d28-36c8-42a7-86fd-c7c5e35fe523",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "vendor": "OWASP Foundation",
        "name": "CycloneDX Maven plugin",
        "version": "2.9.3",
        "hashes": [
          {
            "alg": "MD5",
            "content": "e7c87ab327b65b23c681fc9dc8bb620b"
          },
          {
            "alg": "SHA-1",
            "content": "fa3f0f04f4d5077b5e085d4d09aa2e68aeba5260"
          },
          {
            "alg": "SHA-256",
            "content": "c452d5eebe28bc86bef2e7c72d129f04f60877bef843eac8120f01fb655be293"
          },
          {
            "alg": "SHA-512",
            "content": "ec0344ed2ffe62d565aaf936a37140d04c7fffa8669a666be0366cd44eec3195232d79841cdec47030b79068216ac7e1a8c805255758e3d418dae32a4b9b9beb"
          },
          {
            "alg": "SHA-384",
            "content": "3df26b2a00d87fe090851975ebcc30217f98634e7c47d07128e148f325ebfe3bc0790b2f52ad4591734b7b0de738f003"
          },
          {
            "alg": "SHA3-384",
            "content": "470c1b4962379b5b6494c75bd1475da3519bbe2543999c95f26b4021164d3d05419b0c3f704443162fe5433a204250e9"
          },
          {
            "alg": "SHA3-256",
            "content": "900e9c4edb18940ed3c4a4ba6946957fa613ef0d4b0c380551638f229206373c"
          },
          {
            "alg": "SHA3-512",
            "content": "5e36433e18ae24f7460902da27818874df5d1d73df1a97e49e7369335f7cc61ca595466a2d37789fba7eaa7f7f251b29216c3d7a78910b2ec38e2ed68ea84876"
          }
        ]
      }
    ],
    "component": {
      "type": "application",
      "bom-ref": "pkg:maven/org.dependencytrack/apiserver@5.1.2?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "apiserver",
      "version": "5.1.2",
      "description": "The Dependency-Track API Server",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/apiserver@5.1.2?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/apiserver/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/apiserver",
          "type": "vcs"
        }
      ]
    }
  },
  "components": [
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/api@5.1.2?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "api",
      "version": "5.1.2",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "6a685320a882a3b0fa963544610b5adf"
        },
        {
          "alg": "SHA-1",
          "content": "71141eead2b7b3956e48571044e309b474294ced"
        },
        {
          "alg": "SHA-256",
          "content": "8d68f69238d5d59c9fda8f3436b5ab3b311e9daa51a5b5066b76c846ac0c2769"
        },
        {
          "alg": "SHA-512",
          "content": "74e1be20e8c495874347843aa87c93554e5453a3df7e68810ba10d19f94ac46536f7b75b215810d2bef8700d4939c9e792d44629cc17f40a27d51ac958b096d3"
        },
        {
          "alg": "SHA-384",
          "content": "14251bbf1f4f212dbd2ae35476de078e11256c374da12085cd06f1363654c21bb77535b5ffe44d00d1845fe26a0eaa23"
        },
        {
          "alg": "SHA3-384",
          "content": "22950c4ffd1f812d962b7bf4f26ceeb75c2b2c7463f3288871ad64d7295e08fb416b05b72dc22d68b02b0f364e4e111c"
        },
        {
          "alg": "SHA3-256",
          "content": "4b710c3636e1e4d04c70406a76b3abe3a5dcc776acc28c1563f3bed349e28783"
        },
        {
          "alg": "SHA3-512",
          "content": "d86876569199f81504302fcf079eb34ceb9235975ad565eb20181a8af9f848945020152957ec3beb478ffb34f850d9dd0ba9a15b8f270dcdf687840ec957760c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/api@5.1.2?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/api/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/cache-api@5.1.2?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "cache-api",
      "version": "5.1.2",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "f3a7f26c47d0e1052fa8b0e6ef6e19de"
        },
        {
          "alg": "SHA-1",
          "content": "cb406617a176ca702a6d1f98601ae2403e1bfb2c"
        },
        {
          "alg": "SHA-256",
          "content": "5d137c325cf36175489beb5856fcd153700e7349e050cfe1541ce0f3ee3a719b"
        },
        {
          "alg": "SHA-512",
          "content": "9b81c05b0710eea979f701164a55187f4a4aa80daabcb4bccba6dd6afce893b49bd4a46d00f371f038cc4ad71b5ff8143925db380ac712edb78ef4c43ee4b3b8"
        },
        {
          "alg": "SHA-384",
          "content": "19afb2f3eb48ef0fddd4b30bd8dc09afab5eb7043c5998142993fd92fdaf9c2d9470eec226871bde6e22d59b5ee9b20f"
        },
        {
          "alg": "SHA3-384",
          "content": "0a88de483d1b227c81befa245ea9978bf74a525ed72ef95882724c86c0c694fc20815879946bacae2c3ceaf8ec55b28f"
        },
        {
          "alg": "SHA3-256",
          "content": "62b61189962ee601ed3ac44f5df6fc5350b22e77930a5e90363619c43544f8c5"
        },
        {
          "alg": "SHA3-512",
          "content": "6148999440806594f891c63b99216864defbcda65f844f765cbbe4126359e78d64e3c017c4b16053fa571892b24b7c3508250f295483db80c26b3a299c37cad7"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/cache-api@5.1.2?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/cache-parent/cache-api/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/cache-parent/cache-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.jspecify/jspecify@1.0.1?type=jar",
      "group": "org.jspecify",
      "name": "jspecify",
      "version": "1.0.1",
      "description": "An artifact of well-named and well-specified annotations to power static analysis checks",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "d4fe1ea4d953b66fcb1d6043c22bffcf"
        },
        {
          "alg": "SHA-1",
          "content": "3d60fd98eb8ade73004f4195c37b6317e02cf3d7"
        },
        {
          "alg": "SHA-256",
          "content": "070d75f261fe4c5b8202508366715f7f2d4660f88c8ef7e6d3575e48c9683b66"
        },
        {
          "alg": "SHA-512",
          "content": "8f5ca6f5c25ee353bfbe3e5e5cd9847b3b3ed1e954a14a52c9aa016c673e02bfbc2e0f9308ad576c2a58720f8bf2139ad9883c7a881050fe96a2f87e2e623711"
        },
        {
          "alg": "SHA-384",
          "content": "f7c6aea402675ed6d9286e6107d4bf6c2d1f757f9fce4c74807cbd43d426569324cf4c7faed28dc777e90ddb3a63db68"
        },
        {
          "alg": "SHA3-384",
          "content": "d462ead4749cc7b404b1699aedf472664e9bb38db769f2ec78a6457d2d080602f673af8b3114724dd92ee2262f464c41"
        },
        {
          "alg": "SHA3-256",
          "content": "f9392a7b674c37a7617d7e5ab4a6197c235c0a036244eaf550291d6756c0f1c9"
        },
        {
          "alg": "SHA3-512",
          "content": "3154b4940937103d74b77eede7abc7034168dc986284ef00ab4e4d5b537ed6370c6856787ae50711e62906b3011243c9a656b659ddd025c1e6b828c44b980855"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.jspecify/jspecify@1.0.1?type=jar",
      "externalReferences": [
        {
          "url": "https://jspecify.dev/",
          "type": "website"
        },
        {
          "url": "https://github.com/jspecify/jspecify/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.eclipse.microprofile.config/microprofile-config-api@3.1.2?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.eclipse.microprofile.config",
      "name": "microprofile-config-api",
      "version": "3.1.2",
      "description": "MicroProfile Config :: API",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "a1d32fd3cc58739d489bc07c2e40e34f"
        },
        {
          "alg": "SHA-1",
          "content": "cc35545320c631a745c381cc0e952775d8e99fbd"
        },
        {
          "alg": "SHA-256",
          "content": "d37062050df6de7d0aba8a982192177fe613dc374b9fe7e7dbc09a2674de58a3"
        },
        {
          "alg": "SHA-512",
          "content": "e6ade5b50aefcd344203977668d0e229f253ea3b4b538226fd7f79fcc7b211e083c9f5ed833280e4154a63279e89794fd6090ec1d4910deea50a058a255e7ebf"
        },
        {
          "alg": "SHA-384",
          "content": "230aafc4c8e5a94960eaf553466d10e6ebd0df755b04b37c6352c6f134ad75b1a45de77a065de1b639b8edc191cade72"
        },
        {
          "alg": "SHA3-384",
          "content": "7918d187ffccac5d986209f4a639e0a88a720e4affb33864c8f968172803dd5430d64aafd0ee1c8745adc114d562c804"
        },
        {
          "alg": "SHA3-256",
          "content": "9e69216d089aff95c222cb253b07f8c4d654eb3fff17725a8e03f59d1c28d0e1"
        },
        {
          "alg": "SHA3-512",
          "content": "0a3e7833f0089dfb41ab3915b7642f0500d7ea886011173d29649c497814323d5c06716b7a7d32435ce76971c25cd9cf6720b4c2caa5d97403e5f5333ac141dc"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.eclipse.microprofile.config/microprofile-config-api@3.1.2?type=jar",
      "externalReferences": [
        {
          "url": "https://microprofile.io/project/eclipse/microprofile-config/microprofile-config-api",
          "type": "website"
        },
        {
          "url": "https://repo.eclipse.org/content/repositories/microprofile-maven2-releases/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse/microprofile-config/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/eclipse/microprofile-config/microprofile-config-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/cache-provider-database@5.1.2?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "cache-provider-database",
      "version": "5.1.2",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "fe6241a12c8c7ea8bf33b53ea0582673"
        },
        {
          "alg": "SHA-1",
          "content": "5647348d57033f4167433244d2e63a50afaf04df"
        },
        {
          "alg": "SHA-256",
          "content": "e2cbc3d76d5b4a9202aeccb5a1041862b628ce4757259441c19c3369caad536f"
        },
        {
          "alg": "SHA-512",
          "content": "f9ce5fc75db85d5948b1f902eff4dd9da3dd417b996f212af672211986b4d4bab0e8759b2afa63f6471328bd68c9ffebb0e7c7955c519c3af9440101966c70cb"
        },
        {
          "alg": "SHA-384",
          "content": "851ba99fe39afb4b55485e7beea02edf04ab26254f0df0379f67ea3f59bfb985bf2f862676b9a9b61f356170997f6fa2"
        },
        {
          "alg": "SHA3-384",
          "content": "e3bedc002c88e1276f12cb833e9623cd947876dec3698db574201e9a37c8c03f794d5bde5fdc5cf1f1f79a8c939a1e58"
        },
        {
          "alg": "SHA3-256",
          "content": "091488dc98287e7a522f4378142098e37b5ee195ce8e32ed6c9e0db91b2c079a"
        },
        {
          "alg": "SHA3-512",
          "content": "b9b644df0ede42e78c1efdf7d5af8db4fbac4e5cdf35366fcaf5fd3c49c0fdae779b85ad2f789d76cd367f4389e14984570fbc0a20e4136f53da2be364dc3c3f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/cache-provider-database@5.1.2?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/cache-parent/cache-provider-database/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/cache-parent/cache-provider-database",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/common-datasource@5.1.2?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "common-datasource",
      "version": "5.1.2",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "d02811ceda0f04cef70d9a4b09ec73e8"
        },
        {
          "alg": "SHA-1",
          "content": "05a550e43df71e84112f271d36fde651cdc82b51"
        },
        {
          "alg": "SHA-256",
          "content": "1aeddb85af1bd06affc56417e893da7fb67e7167b74a57abc49cfd1bc2a92b99"
        },
        {
          "alg": "SHA-512",
          "content": "4c3835b733405d765fcb57111f9892bb745f9e23ad548686ab51f5fca69d7323b7b5a612976970d344d73992135efe342bd803ad5a783ef6a9ed740947118ebe"
        },
        {
          "alg": "SHA-384",
          "content": "158ba4b2460b5acc3718b46682db84d23808b4713e3370cffa9799141c58c01388f4af070d39b768a929d0ba7b5dcec1"
        },
        {
          "alg": "SHA3-384",
          "content": "b2a7f63fccc0d24479f4428d1ceec240dde81034a783d84a46f1036c4ce4bcd7f7144a3d0a7b75cd283fa2e4d26bd476"
        },
        {
          "alg": "SHA3-256",
          "content": "34e0bc7462ee7609c94c06e24f5026affb003f6d32c1c26aed921ad6cafa7039"
        },
        {
          "alg": "SHA3-512",
          "content": "6b98efa610a9d39c8f7161737a8abcdd96e8797e54f1ad3769ba2dc29d8a238438b0eb7b4ee0caaad1b0940f15f17ef0e85af2ef5ba50de155cadba6b6cbd429"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/common-datasource@5.1.2?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/common-parent/common-datasource/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/common-parent/common-datasource",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/common-health@5.1.2?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "common-health",
      "version": "5.1.2",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "b2515e478bbc45705c5bdccc3b47da39"
        },
        {
          "alg": "SHA-1",
          "content": "0b120df9125b46e95051a14803803c8d8e29b7ee"
        },
        {
          "alg": "SHA-256",
          "content": "eac116fe58480b7eff15e04cba7c3f58012980f0f473ff14b94cefe24fabfd58"
        },
        {
          "alg": "SHA-512",
          "content": "b16722dcd4d1baae8fca2f7c09b0c54b9c3735ec4cb9dd0f15916809994f6e68dd5b593ac4829d1a5cdda73f942f3622e8dfb3b69decd68410e0c0839036526d"
        },
        {
          "alg": "SHA-384",
          "content": "88b39cc2ca3451ae18d5c6a5f145429e34b1dccb9c4c6a0e0405f3ab0e986ff1aedfe3140d8feb7e5789959c8df02d58"
        },
        {
          "alg": "SHA3-384",
          "content": "2e5b959032b0e69c48e5c124ae684a0f2d1ce2a8476e95508139087e1ce8750a899a83bd87329a3df9e888ab0bb7cf3d"
        },
        {
          "alg": "SHA3-256",
          "content": "2b2b2d5de6911fe1c9cd6c0d4ace97e204d499bf14f5bbd14a1ad13c9865903e"
        },
        {
          "alg": "SHA3-512",
          "content": "633790d7333b15deeb6d15b562576dc9b91f1b97f2b268e88ae8c9601d0c37f5380483af967241b6ba61817b108b99eab9bacafb84b17af5b9a12a3a966d0ee6"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/common-health@5.1.2?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/common-parent/common-health/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/common-parent/common-health",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.smallrye.config/smallrye-config-core@3.18.3?type=jar",
      "group": "io.smallrye.config",
      "name": "smallrye-config-core",
      "version": "3.18.3",
      "description": "SmallRye Parent POM",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "a5c924e630769e39cfec49473b24e839"
        },
        {
          "alg": "SHA-1",
          "content": "f213a7f484e1b363739950828d09aaba2de9696f"
        },
        {
          "alg": "SHA-256",
          "content": "bbc3302aeba08bc0e8934466a794526080cc51d699d32b497af8c2be85aed5de"
        },
        {
          "alg": "SHA-512",
          "content": "81425546fec67495a175a1129febab5bcbe0425dce38d6efd495e25fac4894b9c8090660e57e98b55d07fe9331145ceef6edd436458d40f8f8efb9ff26a5a7c3"
        },
        {
          "alg": "SHA-384",
          "content": "2b38fa8026d7f46d17f883fd3bd7f5e1406d457aa2e54b831d026dd0f66b85047e5c0196e74f5a3bad8375dfaaed16c5"
        },
        {
          "alg": "SHA3-384",
          "content": "a741d5e3a5be95469bc25031d9b3ec9f477aa37d6e725cd947f7e2fbf1a7a94671fbdea55cf373d6c2891783fe0e1d21"
        },
        {
          "alg": "SHA3-256",
          "content": "8a154191975d275aff30e762981f72c3274c3b28cae16906ac346f5f374ab3a6"
        },
        {
          "alg": "SHA3-512",
          "content": "6745ebbd0bbe85bc4540a3af907da69442e079d57cec57d77ba5f3040f702a4f16b208c5c0c4f2160b8bb8e91267081509b3a49fdcc984e917cdfbbc07a18793"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.smallrye.config/smallrye-config-core@3.18.3?type=jar",
      "externalReferences": [
        {
          "url": "https://smallrye.io",
          "type": "website"
        },
        {
          "url": "https://s01.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/smallrye/smallrye-config/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/smallrye/smallrye-config/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.smallrye.common/smallrye-common-annotation@2.20.0?type=jar",
      "group": "io.smallrye.common",
      "name": "smallrye-common-annotation",
      "version": "2.20.0",
      "description": "Common utilities for SmallRye",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "92a0ef236cb177acc1eb0bef1ac2a8a7"
        },
        {
          "alg": "SHA-1",
          "content": "beb38764f953002f0d9f3041f37dc58ddece66cd"
        },
        {
          "alg": "SHA-256",
          "content": "2a7d36f84c48b45a12843a06394519ae2679e1857fa21b55f76697865d2cad5a"
        },
        {
          "alg": "SHA-512",
          "content": "be100cf492d17daf22e8581671fedb6d9c80d4e18f4438a2981c7081a92111639718f354e76a5089a50d64eef8daea9d09dc990c4aebe1d1147a93721fc1cd52"
        },
        {
          "alg": "SHA-384",
          "content": "56ad639494c5f8913c2e5af35f3927f4d2480de00c87b72f5e7331ffa1cf6b68a15a881e4ccfbc3306359487f5fd1c28"
        },
        {
          "alg": "SHA3-384",
          "content": "897b771c0b11fa88d919dc4a10d8f9d2062968b66f4284dc63ea37fbef5733abaeed9af4d04a6a30824827eadb1cdb02"
        },
        {
          "alg": "SHA3-256",
          "content": "59dbb5d1e1bca8fe653143e8f65135d4a32e3bfc5a886e7d5e316af46720eec5"
        },
        {
          "alg": "SHA3-512",
          "content": "06c509513faf157fd71620bbd2782ee959fdeff3df93d4220b385566d9a960068b08dbef59f2186d04c89e050e138f4c10dc0a5d551cafa21f036064479029f5"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.smallrye.common/smallrye-common-annotation@2.20.0?type=jar",
      "externalReferences": [
        {
          "url": "http://smallrye.io",
          "type": "website"
        },
        {
          "url": "https://s01.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/smallrye/smallrye-common/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/smallrye/smallrye-common/smallrye-common-annotation/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.smallrye.common/smallrye-common-expression@2.20.0?type=jar",
      "group": "io.smallrye.common",
      "name": "smallrye-common-expression",
      "version": "2.20.0",
      "description": "Common utilities for SmallRye",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "8abfc6d0d5b30772f05a0e9612f61656"
        },
        {
          "alg": "SHA-1",
          "content": "829c755a667fdbc6555d158cd4429fc8e2bb58ea"
        },
        {
          "alg": "SHA-256",
          "content": "04d62cdc531bdaa2d0eb2d8901e85c7dd69f2c68c5cb8e641407436334ae423a"
        },
        {
          "alg": "SHA-512",
          "content": "9db0722ed99bc8376bece4254b41b0c2f7e68afd86c8786e773184361f3329dafe2e6a52860f72c8bf97f5fe43e301e9b2abe9189b030e5f09ce29484bcf05c8"
        },
        {
          "alg": "SHA-384",
          "content": "fb677186e911baaad926be2441721e77c266041caa9af0747a2e8e79820fad3034bff5dd7c7377a74dccc2d2b98251ac"
        },
        {
          "alg": "SHA3-384",
          "content": "41d928dd29133cf23f812090f08d7f8700b37bb6b54b1baed4cf3e3a91f6c65fd8a59467d3622fe521efaaf439faca95"
        },
        {
          "alg": "SHA3-256",
          "content": "cc6190c2b4b6b8744faf142ab4afd5651db1fd0e84b8efb1694794a21ba46abb"
        },
        {
          "alg": "SHA3-512",
          "content": "45db06544a6db061d60ce7aa6efe33ee892e17732df87215b8eb956e00d53f974d721794a5837fd44da52052a6950c7fb66a203c4e61552641c714c9221c586d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.smallrye.common/smallrye-common-expression@2.20.0?type=jar",
      "externalReferences": [
        {
          "url": "http://smallrye.io",
          "type": "website"
        },
        {
          "url": "https://s01.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/smallrye/smallrye-common/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/smallrye/smallrye-common/smallrye-common-expression/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.smallrye.common/smallrye-common-function@2.20.0?type=jar",
      "group": "io.smallrye.common",
      "name": "smallrye-common-function",
      "version": "2.20.0",
      "description": "Common utilities for SmallRye",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "7d4f3de7d2c8e81c7ad294dfc41ff074"
        },
        {
          "alg": "SHA-1",
          "content": "a96f334f23fc60908ddb51fa67df26dc440d9205"
        },
        {
          "alg": "SHA-256",
          "content": "55d4eaf7d9c914787e40db5ed7d19ff34fe52fe45e217b428c32103aaa142442"
        },
        {
          "alg": "SHA-512",
          "content": "7810fcd7eda85ec531c177a757ebee0d8dbe3f088ff7d95bcea1bd0a6fde305ad21a7279fc1f717e482c22d8848bc273a8317f28e170b189c20d7cef6f4538ab"
        },
        {
          "alg": "SHA-384",
          "content": "9cdbf4b7e1e3d83ef7238fac64a750810f9da11419d124145bf90739a6e75d658bac0d2713189aa341c6cb10c1bc2ca1"
        },
        {
          "alg": "SHA3-384",
          "content": "491ba31b660deb0b96854584815a5fad7616557e14f3803d848abf7ce8d29ee7cc3a993a5e28b23fe2e93d156190e25f"
        },
        {
          "alg": "SHA3-256",
          "content": "22d2842800450718f19fb34200da32c3ae80c3d2b829b225b30599c8f14453c6"
        },
        {
          "alg": "SHA3-512",
          "content": "3143f899c132a2c0c4ef1e64dc869730e7b09bcbb2f53d6a1906ba79bde0850858817aa77e5e5f278c5fb81749b46bd569b65bcb60753c8eba4704633bcb4780"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.smallrye.common/smallrye-common-function@2.20.0?type=jar",
      "externalReferences": [
        {
          "url": "http://smallrye.io",
          "type": "website"
        },
        {
          "url": "https://s01.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/smallrye/smallrye-common/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/smallrye/smallrye-common/smallrye-common-function/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.smallrye.common/smallrye-common-constraint@2.20.0?type=jar",
      "group": "io.smallrye.common",
      "name": "smallrye-common-constraint",
      "version": "2.20.0",
      "description": "Common utilities for SmallRye",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "85cbd7cf5c4f739eed6ea0575fceea8a"
        },
        {
          "alg": "SHA-1",
          "content": "3f0c52e6cddf003b35e3787226f8533814dd3649"
        },
        {
          "alg": "SHA-256",
          "content": "4469ff38d29e5c93b0af1f0e17d794c0ea91382aabaf796fc0e251f3a0bab3a3"
        },
        {
          "alg": "SHA-512",
          "content": "2c924b1f5aff32605bbc32b76577e2069f898155ce2daaa03cb495d68dfa8af36d63811c3455e8c4c5a107eb1408ed8d31b671591eb4095de265b244673fe569"
        },
        {
          "alg": "SHA-384",
          "content": "cb494565ce316accc8c4e5d7bcd60982bfc9461a6e7787d5a7b5186511e2d4203858e353430868ce169aeeec937fd609"
        },
        {
          "alg": "SHA3-384",
          "content": "cbbeef6f5f7324fced627696100c2458c3e5de88b391bb0397cf57339aa77b5d04eed346c38d10b2b6f1b62b82714aec"
        },
        {
          "alg": "SHA3-256",
          "content": "1b7559a92dc2d8d6a41ab9e6f9fcda7cae84a615227ef70de3db1d33caff556c"
        },
        {
          "alg": "SHA3-512",
          "content": "89eec59bb01da521c027ed72e0486b74b81ca7339711a192ca15f0cec771256e8721abf641020c9e6ae53584a27f7a0c756da0e359aebaf7f2572729feb59a2c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.smallrye.common/smallrye-common-constraint@2.20.0?type=jar",
      "externalReferences": [
        {
          "url": "http://smallrye.io",
          "type": "website"
        },
        {
          "url": "https://s01.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/smallrye/smallrye-common/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/smallrye/smallrye-common/smallrye-common-constraint/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.smallrye.common/smallrye-common-classloader@2.20.0?type=jar",
      "group": "io.smallrye.common",
      "name": "smallrye-common-classloader",
      "version": "2.20.0",
      "description": "Common utilities for SmallRye",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "2965f28b69bad5c32fd1eecba5284e56"
        },
        {
          "alg": "SHA-1",
          "content": "c60e93e4a10a4ebbf0e7c877b7cae8be4b81dc81"
        },
        {
          "alg": "SHA-256",
          "content": "fcf314eb2e4997610c8c03617f4e1811179ab9a58bc0745a9a8d2c5294d844ed"
        },
        {
          "alg": "SHA-512",
          "content": "5c8126c84e75356dbaa6fa826fefc790d4e327b3c37887b4b2663c4fac4e162356209da85a43159ec71ae41ef1bd510a0a313017df57480248d135ece5da1250"
        },
        {
          "alg": "SHA-384",
          "content": "ba3f050c32b5cc723f379b8978f0f76ae96647ea1c84188c136aa320fedb071ba0fc41d08c239c57fc7fdfa420d3d915"
        },
        {
          "alg": "SHA3-384",
          "content": "94e21a3d12891acf656dfbe123ed39ff61c35067d76a19ddda917ffc4ed80b2a599efc8c1a668f98a6c93ef7ed9ba899"
        },
        {
          "alg": "SHA3-256",
          "content": "c8784770575762ff3928238dcb1851746de75938b3baaf87082a328060826bfb"
        },
        {
          "alg": "SHA3-512",
          "content": "970528fc1d14f9f52d112600f96fa68ef3b932559cfa08aa50247d03c73461c06866b0f5857cf597695af804e5d7c36865bffd2193a5d09ad226507932b12c0f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.smallrye.common/smallrye-common-classloader@2.20.0?type=jar",
      "externalReferences": [
        {
          "url": "http://smallrye.io",
          "type": "website"
        },
        {
          "url": "https://s01.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/smallrye/smallrye-common/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/smallrye/smallrye-common/smallrye-common-classloader/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.ow2.asm/asm@9.10.1?type=jar",
      "publisher": "OW2",
      "group": "org.ow2.asm",
      "name": "asm",
      "version": "9.10.1",
      "description": "ASM, a very small and fast Java bytecode manipulation framework",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "9cb72080438acf27f2607002e1444a7b"
        },
        {
          "alg": "SHA-1",
          "content": "ada2141c0cc52ee8f5c48cd5fa4ce0e794f22236"
        },
        {
          "alg": "SHA-256",
          "content": "ed825d10ab1399c8c0cb669e688cf0c8c82629b4c8399b58352b68e92ca10fcb"
        },
        {
          "alg": "SHA-512",
          "content": "8db6efa37d4d569bf2b95d90931b8064f87ed928d20bbf8d8e7fa6182e9a11d32e6a2cc034a3d173a38ee70ce2ea9f20f52f9d8730d9401d2bc6060674c18928"
        },
        {
          "alg": "SHA-384",
          "content": "451863dca686c04151bef6e632df2ee3c8c67ca97d191cdee3d7c4f9350f8a096011cadc1c79b4ba012b3f2179ef2bbe"
        },
        {
          "alg": "SHA3-384",
          "content": "faa7b5fa7a5fefaae6d320ad43c09d588d6deecd41b2a3ebec36a4143a2b90373b2d01936c0733413a01f451c9740bc8"
        },
        {
          "alg": "SHA3-256",
          "content": "e37aa694329cbbfcd0a81a735270166386aceff3797af2c391fd8484baa5a576"
        },
        {
          "alg": "SHA3-512",
          "content": "1d660ebc24411c38b0928b543f402e7cb09747b7c522047f36b57865acfb83d25c9348c1d70af78e3d26e1ad220f10055d63eeb2965f7b6966cb2fbd29b47671"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/org.ow2.asm/asm@9.10.1?type=jar",
      "externalReferences": [
        {
          "url": "http://asm.ow2.io/",
          "type": "website"
        },
        {
          "url": "https://repository.ow2.org/nexus/service/local/staging/deploy/maven2",
          "type": "distribution"
        },
        {
          "url": "https://gitlab.ow2.org/asm/asm/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://mail.ow2.org/wws/arc/asm/",
          "type": "mailing-list"
        },
        {
          "url": "https://gitlab.ow2.org/asm/asm/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.smallrye.config/smallrye-config-common@3.18.3?type=jar",
      "group": "io.smallrye.config",
      "name": "smallrye-config-common",
      "version": "3.18.3",
      "description": "SmallRye Parent POM",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "4558fd7e26f0962ae4ea4201f8398880"
        },
        {
          "alg": "SHA-1",
          "content": "44c7d18b11e5332b59e84b8c8e890c989033689a"
        },
        {
          "alg": "SHA-256",
          "content": "1570ecc219ac4d632232f290938dd9df0628c37a005a0a7fa52b2deae2d09339"
        },
        {
          "alg": "SHA-512",
          "content": "7e82187e82b67d7093fa411f27d1e81210af2ccdaee84447a397fe622bcb760c2eb24ddb9d48f38d2c6591a3582eb9db49b6a4cd84ff2949dea31a64de69d41d"
        },
        {
          "alg": "SHA-384",
          "content": "c389d12762a12eadf8aa3b1d010663851d88de257911249f6a51d04653dde7206df221712b9a555dbdf074972788d3d6"
        },
        {
          "alg": "SHA3-384",
          "content": "788d03a927374326bd58708fa74429ded22b4f6e021e5d4a0facc98afca17f31546d0c6080753278a380cb1b7dbc70fc"
        },
        {
          "alg": "SHA3-256",
          "content": "3f085ff3299e58e86ea2eca5ccbfc85d1177cec5469b82514a7c8ddf5a7c38e6"
        },
        {
          "alg": "SHA3-512",
          "content": "bee9a64ad0765621a8c56365836008a0602d7aff1363d757d8f437cf639a294ef8cac44250697ed848500c5a17fa90578745ce65b8da974c88508535a8aa513d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.smallrye.config/smallrye-config-common@3.18.3?type=jar",
      "externalReferences": [
        {
          "url": "https://smallrye.io",
          "type": "website"
        },
        {
          "url": "https://s01.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/smallrye/smallrye-config/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/smallrye/smallrye-config/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.micrometer/micrometer-core@1.17.1?type=jar",
      "group": "io.micrometer",
      "name": "micrometer-core",
      "version": "1.17.1",
      "description": "Core module of Micrometer containing instrumentation API and implementation",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "512fe405dfbe1caa8e8870af3fc0d8a3"
        },
        {
          "alg": "SHA-1",
          "content": "2a9a38d3d0859022fdf2a93743c0d5fe44796a39"
        },
        {
          "alg": "SHA-256",
          "content": "9ca47dfa831409b40253c8dc98c17b9d3e050ebbde4d1543c5521dca2b95ad56"
        },
        {
          "alg": "SHA-512",
          "content": "9763d9985aa9d6034d73ea3d57277d8529ff89a4e1efcd804e537d6487d7cb01d1dd2bb26d529aea313bc2a755c9c704d79984fdfb67df44e81cda7be2024a97"
        },
        {
          "alg": "SHA-384",
          "content": "8cf0b7e345c72432e608ea98a2ff84cd34106f19e9974609150daa4c12268965c5045a0412403d17b3b66a8269593b5d"
        },
        {
          "alg": "SHA3-384",
          "content": "e8a5983f0170058519b812e674c598edcd8feeeeac9f1e303d11a749cf3ca4f4bb6a22ec618f1de39f1261e42da4d546"
        },
        {
          "alg": "SHA3-256",
          "content": "4100df03006dcf2d10b0d7c2ebf3346ad8d72ce225d1dc57175b594cd0eef7bc"
        },
        {
          "alg": "SHA3-512",
          "content": "1966d50fc5729ce8eb94cfffbcfecf579452be85d6ec9df9c9f4cd876caa8f13976565348dfdf9520e9866ae8bdee7245e2e47e930c4701e5bd38c35f6a84764"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.micrometer/micrometer-core@1.17.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/micrometer-metrics/micrometer-commercial",
          "type": "website"
        },
        {
          "url": "https://github.com/micrometer-metrics/micrometer-commercial.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.micrometer/micrometer-commons@1.17.1?type=jar",
      "group": "io.micrometer",
      "name": "micrometer-commons",
      "version": "1.17.1",
      "description": "Module containing common code",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "aa9291ad211473834d3d48453ae05ea1"
        },
        {
          "alg": "SHA-1",
          "content": "b1c3fdea68c5a81495cf1c16cf2905c5ad9f30d2"
        },
        {
          "alg": "SHA-256",
          "content": "f2cee6ef046e72eec8128474c7f58c6217173b45ae373c30de0289f2a56ab0fd"
        },
        {
          "alg": "SHA-512",
          "content": "8dc6f1d7cee22c2687bf25aa6819f6c04e0176d04024761cc3bd842a0883c081839fec5c4c5058c8e2a9539c747669acaa8ab8db8ad880c22e780345baf480b4"
        },
        {
          "alg": "SHA-384",
          "content": "4ab0f18818de42fa79722032c0a2c09a50a622749507f2ecf5dc3103fc20dedc9f09355ebce8caadd63b7911c5846d82"
        },
        {
          "alg": "SHA3-384",
          "content": "0d7a5b06d28f05c986d85811349cb88fff74083676f1940041c047114e01f43e22a322718f46a32d9a85da0fe2294cd9"
        },
        {
          "alg": "SHA3-256",
          "content": "c12c8ea74697075e83b0fef160fccca0b33f22d0f22f1f646e447a7b1aba6a65"
        },
        {
          "alg": "SHA3-512",
          "content": "fb5f6b38bbb2b0f5574954bb6ea6325d6189abe630352fc48c1876defbbc6953c5bd78ee3c02c41758feb544335f5bcf64c63691cc1b0158ecbae4a4b3cdd761"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.micrometer/micrometer-commons@1.17.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/micrometer-metrics/micrometer-commercial",
          "type": "website"
        },
        {
          "url": "https://github.com/micrometer-metrics/micrometer-commercial.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.micrometer/micrometer-observation@1.17.1?type=jar",
      "group": "io.micrometer",
      "name": "micrometer-observation",
      "version": "1.17.1",
      "description": "Module containing Observation related code",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "f63baf5840fb4446b9313a3bd8773da1"
        },
        {
          "alg": "SHA-1",
          "content": "24c0b05bc06a9ab6f4e09a48949b6eccc179ca15"
        },
        {
          "alg": "SHA-256",
          "content": "eb34f0cd84a879393ae5c21160fc06385ccdc74f36a4d1e31b199f59acfdaf71"
        },
        {
          "alg": "SHA-512",
          "content": "afe72c301fa7ab119f0922c7d0232ea0723a9b0e56a3e0dfe3d4c963dc5eb482cc9da6ae33b336a28e5d0ef4d260e27b78e9e17c587d29c5fd90a92d26c0041d"
        },
        {
          "alg": "SHA-384",
          "content": "9e20ab3fdd1d58e6d00f85a8e2b5161a477529b4fa2ee1c1b64a50f86dac8fd27cc764418eca169b067c770b9c056aaf"
        },
        {
          "alg": "SHA3-384",
          "content": "e62561d8ac74c733d421a8f1ddac01333ec7cdc0d874abfe2f9f34130c880d76dcc68a6356ef8c3dfd851814c66f3d07"
        },
        {
          "alg": "SHA3-256",
          "content": "eb2e53612afc0be3e384ed97d9b2db64fb2bb25545c68b77f5ecddef59f02e8c"
        },
        {
          "alg": "SHA3-512",
          "content": "af358195266db706c1c1dffdbadf470a0b0785dba5b228e4886326d6a4901064cd207627e7003e9f43e986afd43c9b3a558546449a2bbeacd74795aaa0230b2f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.micrometer/micrometer-observation@1.17.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/micrometer-metrics/micrometer-commercial",
          "type": "website"
        },
        {
          "url": "https://github.com/micrometer-metrics/micrometer-commercial.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.hdrhistogram/HdrHistogram@2.2.2?type=jar",
      "group": "org.hdrhistogram",
      "name": "HdrHistogram",
      "version": "2.2.2",
      "description": "HdrHistogram supports the recording and analyzing sampled data value counts across a configurable integer value range with configurable value precision within the range. Value precision is expressed as the number of significant digits in the value recording, and provides control over value quantization behavior across the value range and the subsequent value resolution at any given level.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "41f807bf0c681d6f692c408a6e217eaf"
        },
        {
          "alg": "SHA-1",
          "content": "7959933ebcc0f05b2eaa5af0a0c8689fa257b15c"
        },
        {
          "alg": "SHA-256",
          "content": "22d1d4316c4ec13a68b559e98c8256d69071593731da96136640f864fa14fad8"
        },
        {
          "alg": "SHA-512",
          "content": "fb28f1bc3a3d4430474ea87a0833d56dc3d1303c98918122d93c630ebdb0d1323bbf8feb9ffdc7dddd1908105858e6959bdfdd3889ca5803cecde93a974ab6b7"
        },
        {
          "alg": "SHA-384",
          "content": "fa19cf4674dee37cb5114689cccafeadbb7989e17768b814cb431806a0f69c7b37093b6e100430bd571a45d87a319758"
        },
        {
          "alg": "SHA3-384",
          "content": "fc0a9e2e5284bc2f911c5e2fdf9eec6cfa1973b6cfb1362822580d6c8768c73ebd1c8056b6e4e5302940f6b5ec4c74b7"
        },
        {
          "alg": "SHA3-256",
          "content": "79af553410abf4d3bbfa64374dfdf8777ce49d28b4c67a615e6d4a78e97d0498"
        },
        {
          "alg": "SHA3-512",
          "content": "5b2b1795ed1ea55b5a3566bb1f4170a4367b7893256809fdb428df9405857c8454196badf3681abaf536260ed6f293c096a3f3c9d72f0f04830e8fe71d49410a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "CC0-1.0"
          }
        },
        {
          "license": {
            "id": "BSD-2-Clause",
            "url": "https://opensource.org/licenses/BSD-2-Clause"
          }
        }
      ],
      "purl": "pkg:maven/org.hdrhistogram/HdrHistogram@2.2.2?type=jar",
      "externalReferences": [
        {
          "url": "http://hdrhistogram.github.io/HdrHistogram/",
          "type": "website"
        },
        {
          "url": "https://github.com/HdrHistogram/HdrHistogram/issues",
          "type": "issue-tracker"
        },
        {
          "url": "scm:git:git://github.com/HdrHistogram/HdrHistogram.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.slf4j/slf4j-api@2.0.20?type=jar",
      "publisher": "QOS.ch",
      "group": "org.slf4j",
      "name": "slf4j-api",
      "version": "2.0.20",
      "description": "The slf4j API",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "a7a6798aa78b29152479f89565f57446"
        },
        {
          "alg": "SHA-1",
          "content": "7fea9d92ba67e9b3c8f03515fb202b86a1fe44f6"
        },
        {
          "alg": "SHA-256",
          "content": "7e1446499b359675d8aabe6af2de86b85e72ae8a2a932c0b40d0e5ba57097439"
        },
        {
          "alg": "SHA-512",
          "content": "6abf6218c2558a0059f35cecc24db3ef1552dbccdfb8f32d6c9d1d8b11fd545405e04e79673219d19e17b99ca6a2a3da7d92006bcaedaa15646bf07737115d17"
        },
        {
          "alg": "SHA-384",
          "content": "26e4fcbbda8d1037d722e04af82efacf58e28ab93b002921eadb426387c61031d80c9574f45f6a42b423b550424b9323"
        },
        {
          "alg": "SHA3-384",
          "content": "2fbe14046e3b0ffc759d8fd91cccd6913174de77085e294a10375fc453427c040b4a0b4c3d003cc1cee8263013513f31"
        },
        {
          "alg": "SHA3-256",
          "content": "3514a97b9dbec95fe329f277628bc4b2c542c5ec33727aa781d590d5dcfad3d9"
        },
        {
          "alg": "SHA3-512",
          "content": "0dcb60d4abbe2b2474585b0512d3c83c993e79872dfb49ae1880468cb875898e1eeb71d05e7537ad057f8ca666007aa85c0f51d4e272432cd30e320c0710908e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/license/mit/"
          }
        }
      ],
      "purl": "pkg:maven/org.slf4j/slf4j-api@2.0.20?type=jar",
      "externalReferences": [
        {
          "url": "http://www.slf4j.org",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/qos-ch/slf4j/slf4j-parent/slf4j-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/common-init@5.1.2?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "common-init",
      "version": "5.1.2",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "218e6a263c7852bcb4f7b79756af87a8"
        },
        {
          "alg": "SHA-1",
          "content": "76679a0ea55577ca731fbad9d133fdc146ffa5a9"
        },
        {
          "alg": "SHA-256",
          "content": "f6bcea9956196534f1909e6c46f4957cb5b033cbf31ed7e2966bccfff294d941"
        },
        {
          "alg": "SHA-512",
          "content": "1e3c6268e686bcd87289cae77d576f067b373050cff5404fe00885a4b37fd32f9e867e69f8d5c51e6e739fc7b1936798014414ce8d7f0e0d26906fa04ae5cf88"
        },
        {
          "alg": "SHA-384",
          "content": "1f98cbc1489615db1e1d96d4f1e383ca84edaf6ff866b886de64523a3ceae65a22b69e54731bf56d0b6d1cd2cf1bdd6e"
        },
        {
          "alg": "SHA3-384",
          "content": "38ff561d03a3aa69dda30ee10eb0fee0bd836f53e08e810390fb8a4e3b0318b994b3dbce5bd613437d4bc3b59031962a"
        },
        {
          "alg": "SHA3-256",
          "content": "1c4609804f8428e9cd259ece712a9ba4b94a331216f17c5504540c5a80f874a9"
        },
        {
          "alg": "SHA3-512",
          "content": "508df0c1dd1520fc98b6bb142b1fe3fbceb713cb1d33a01348142caff836a04d3702eb18aa3363044b4ec20556e4a88344b7e9a53311302d5582bffc2cc63c83"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/common-init@5.1.2?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/common-parent/common-init/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/common-parent/common-init",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.eclipse.microprofile.health/microprofile-health-api@4.0.1?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.eclipse.microprofile.health",
      "name": "microprofile-health-api",
      "version": "4.0.1",
      "description": "MicroProfile Health :: API",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "1d023ee3b9b8545318fdeebe98d66d74"
        },
        {
          "alg": "SHA-1",
          "content": "395ea08f4f636696fb23b84a18ba81430cfebe7c"
        },
        {
          "alg": "SHA-256",
          "content": "b89ca4b6c4f7a044250d31c0673f6bc221e40fd669fc5871dbad5e5a0769ca47"
        },
        {
          "alg": "SHA-512",
          "content": "87ea9c7443bf0dbe0a3d38f3f7fd5287e24440f6285fcafdaade6312380fcce802bfe083646669207d11d36b660f05a6ef6e27ab03f3093905821d44024e5764"
        },
        {
          "alg": "SHA-384",
          "content": "4ddaceabea79f53c70fd17c6140453a19d4a9dfc1c3e8910449ce32ddef4b9023dbccbd6dbfbad49b50316389df25c8c"
        },
        {
          "alg": "SHA3-384",
          "content": "893eef36f7b7edf98be7835597d06c81055887f7a59ea70550274032a5b7ebb1822600a185d626db36d38160d0632e6f"
        },
        {
          "alg": "SHA3-256",
          "content": "94ea43765310e56d62888eafd32d4595c1e8d91a4183ad3455f51f1b52a6d2eb"
        },
        {
          "alg": "SHA3-512",
          "content": "79ba68099a777dbd5e596d9697358bc122c53cd52cb5ba5ce3a2be1086abb1f45c2f7289540f1693c1950efe6189ff8f57a91f1d53915be3fa5abbb22597d15a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.eclipse.microprofile.health/microprofile-health-api@4.0.1?type=jar",
      "externalReferences": [
        {
          "url": "https://microprofile.io/project/eclipse/microprofile-health/microprofile-health-api",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse/microprofile-health/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/eclipse/microprofile-health/microprofile-health-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/common-pagination@5.1.2?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "common-pagination",
      "version": "5.1.2",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "a969e53141aa83a190857dc64b9268df"
        },
        {
          "alg": "SHA-1",
          "content": "5853a25547b314ec64485d276e22cb4bc706c4e4"
        },
        {
          "alg": "SHA-256",
          "content": "daeb09a60d39faddbabbb22d03aca91a5f6210222780216d7cf32d3c491cced2"
        },
        {
          "alg": "SHA-512",
          "content": "da7e5cbbe1d1de4d63ab4d9d560ddff35c8c02ed293ba1900e5033a64a1a1e0c96881f79ba2cff4d2f83f31d08da934088fd5445448fa7be3dce96e188b85ec7"
        },
        {
          "alg": "SHA-384",
          "content": "9bf9d5701deba6f0c49cdec2a0355b6df9d8dcf074bbdf29fa504a254829ce61421576de65f05f8465e7e6b8d0304116"
        },
        {
          "alg": "SHA3-384",
          "content": "f8536580e54cedfe9edc265306db2610b3c1ad058574a8d3dd726aff0e61c968266f488fce178099977e47fa24fcc456"
        },
        {
          "alg": "SHA3-256",
          "content": "9ab3e21958d6279ad9266187177c4a261495bd71ea93e7c750d5c1b45b852921"
        },
        {
          "alg": "SHA3-512",
          "content": "8c2f5e0b808f77935c33768b7bf948bdfbf6a29526484841bd87065d9ad522b4b2a6b51c909d59218a93250a6dc6b3c2bbdb4b36e79baab2f029d65ba7cd78fe"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/common-pagination@5.1.2?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/common-parent/common-pagination/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/common-parent/common-pagination",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-cbor@2.22.3?type=jar",
      "publisher": "FasterXML",
      "group": "com.fasterxml.jackson.dataformat",
      "name": "jackson-dataformat-cbor",
      "version": "2.22.3",
      "description": "Support for reading and writing Concise Binary Object Representation ([CBOR](https://www.rfc-editor.org/info/rfc7049) encoded data using Jackson abstractions (streaming API, data binding, tree model)",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "d48849f897b143c24225ee64788a27b9"
        },
        {
          "alg": "SHA-1",
          "content": "57434ba014a75d95cf326121a0a6ef003b219e55"
        },
        {
          "alg": "SHA-256",
          "content": "0ed7167fdc432a409459602fba668eeb9a8d3623353439433970ee916336fc2b"
        },
        {
          "alg": "SHA-512",
          "content": "8127a88e78a5911d01bd44ed348c98ba21eb83963582bafe1d17cdc0cd0eb1f63c646dbf137f089825ac1686e2a7757a2f6ba7f88c74872635ddc8219f39e8ce"
        },
        {
          "alg": "SHA-384",
          "content": "cf81eb2b9dfa09a176d8419bea5ea30518f76cf9329b151f4c7f65bdf3cf3f75bfd5fad29b4cc253a71f18525f746bb9"
        },
        {
          "alg": "SHA3-384",
          "content": "644841b4b951d55bd7a8915c0048a0529945ea6cff8c9667d2a1f70f5304f6618d53e79c6ea6c78b22a4cc983bba81b4"
        },
        {
          "alg": "SHA3-256",
          "content": "cc7ceec86a4e25b7ecc1a6a157b4c2af8264276a1749fdb67818fa3ba690558f"
        },
        {
          "alg": "SHA3-512",
          "content": "284e51411a0f3636257bf4e7e477c7981ea5a5cbe3a328e2b3a06e84cc044ff7f5cdc3b1c357558002883e142630d265b7b7a4a506a98d2d11b4c0f2d6801e18"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-cbor@2.22.3?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/FasterXML/jackson-dataformats-binary",
          "type": "website"
        },
        {
          "url": "https://central.sonatype.com/api/v1/publisher",
          "type": "distribution"
        },
        {
          "url": "https://github.com/FasterXML/jackson-dataformats-binary/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/FasterXML/jackson-dataformats-binary/jackson-dataformat-cbor",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/datanucleus-plugin@5.1.2?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "datanucleus-plugin",
      "version": "5.1.2",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "d3c556668a7db3b6847b4db4c181d38f"
        },
        {
          "alg": "SHA-1",
          "content": "a3bb07d31a92122ba8459f5302cc9307ee5c643a"
        },
        {
          "alg": "SHA-256",
          "content": "50631f0d2285698d44da4cb47fd1a06130063a97de3a4a4a340bb47a30030b21"
        },
        {
          "alg": "SHA-512",
          "content": "aaa255c33a668b1653dfc07356036434cc03df417947614e9f2c6a16fd6db22850f1c59995ed28eb960424a2e5fe8514a74e5ef38786d260fc73ffca38b69c7f"
        },
        {
          "alg": "SHA-384",
          "content": "a6488654668e83d8c66e770f75c70afbf2b94c25c6c25122423d99cbeaf2c8de69fb99586a94bed9d2d78aadf0b5443a"
        },
        {
          "alg": "SHA3-384",
          "content": "791db08b8e175f23f22335027d110d96d5b68e5118d256d93e40ef126956f6b1712717f8957db3101c9bd5aa16854f57"
        },
        {
          "alg": "SHA3-256",
          "content": "0b0e3a7d53ec9ae62c97798ea2ad872eee61a7edb26d017c6472a9e2f42ec383"
        },
        {
          "alg": "SHA3-512",
          "content": "7c1c61b8fad3ff393384d05c0ab7dc6985d1655276be98d4c1256468d627b39fef0fd97bed6c49f43aea2c15103047041cde186428dd8c963fc54448b32b4c8c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/datanucleus-plugin@5.1.2?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/support/datanucleus-plugin-parent/datanucleus-plugin/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/support/datanucleus-plugin-parent/datanucleus-plugin",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml.uuid/java-uuid-generator@5.2.0?type=jar",
      "publisher": "FasterXML.com",
      "group": "com.fasterxml.uuid",
      "name": "java-uuid-generator",
      "version": "5.2.0",
      "description": "Java UUID Generator (JUG) is a Java library for generating Universally Unique IDentifiers, UUIDs (see http://en.wikipedia.org/wiki/UUID). It can be used either as a component in a bigger application, or as a standalone command line tool. JUG generates UUIDs according to the IETF UUID draft specification. JUG supports 3 original official UUID generation methods as well as later additions (v6, v7)",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "285019a0ccc0e0a79cdfd2d667f73e26"
        },
        {
          "alg": "SHA-1",
          "content": "3ca5091c87cd327880f09447e62b86b8b93db256"
        },
        {
          "alg": "SHA-256",
          "content": "5724d6a0f27db90d45af884f4520bce581f29eebe21840d07cae22b670bb8ebb"
        },
        {
          "alg": "SHA-512",
          "content": "d1fdaa7adde071beae68363003cadb0ccaa5914cc8fb313f59a18c2b8ed5661551bee9a1f243863f1af506c45d2539bf37fab08ac4dc608bb5bf6a7acaa23362"
        },
        {
          "alg": "SHA-384",
          "content": "c8204e36cd512ef971631145329d8dfecdde1a64aea4a439b93297c24202b7eb1fab410fb5f953f356cc63e34c5cca0e"
        },
        {
          "alg": "SHA3-384",
          "content": "eff84b0cc59804a9c6ab03dc252c1164aa6f07475aa60130ba06b3a0a729a33682bbf06a127ab3993bc2ed7f88ee302a"
        },
        {
          "alg": "SHA3-256",
          "content": "5b299156e5e9eab6fa17995e44b3a20d9e9d904e5e3962b3da02dd9c0dff184a"
        },
        {
          "alg": "SHA3-512",
          "content": "d8448a2458b3d85d0cf16b14bc0f3f00bead80795b97934440f94f72f7cf015ec83136d26a8fc10c6c30e16aa76865fe5b0916a2e7f5b1c00e3031976f8ee826"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.fasterxml.uuid/java-uuid-generator@5.2.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/cowtowncoder/java-uuid-generator",
          "type": "website"
        },
        {
          "url": "https://central.sonatype.com/api/v1/publisher",
          "type": "distribution"
        },
        {
          "url": "http://github.com/cowtowncoder/java-uuid-generator/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/cowtowncoder/java-uuid-generator",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/migration@5.1.2?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "migration",
      "version": "5.1.2",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "d532657657b0cd22de72cca41a9ce8ca"
        },
        {
          "alg": "SHA-1",
          "content": "06e32b64e01106f588491bb3a73084b5650353da"
        },
        {
          "alg": "SHA-256",
          "content": "c64b665fb3bd5fc387281a3ebb01809d7fb09613497d285d23194bf660717d59"
        },
        {
          "alg": "SHA-512",
          "content": "a29feff985f1d32021ed8dd5290a324ee4ef6c61df6d2ab281ce07ed8b98ab30b280ee13b82d8c3e1b1c7eb8bc2ec129a8ec9b5723f83b8d0f8a588a5e65038f"
        },
        {
          "alg": "SHA-384",
          "content": "4be85570eb93ed76c9c8f1f1f1706ba9afd1ffc6c42474af1683837b1cd2bcf54d36687fc62996c5b4e4f2e0a9bb6ad3"
        },
        {
          "alg": "SHA3-384",
          "content": "b44f6008427311a4cd462cb0f6c19300b5c93b7538fbd001687f971ebed58a45683fbc9169491ad622008fd4c4ca69c6"
        },
        {
          "alg": "SHA3-256",
          "content": "df08602ce5192f3a8c982a7070c453dfd6dae7dd9e4f0d971e77994c2b090825"
        },
        {
          "alg": "SHA3-512",
          "content": "41370cb87ae14d05ab70d6135cb48c3ce95e469bf6bb9c07744d9f4c549eebe703734e81270589c3309de6c2f5d46ffd3b01b7c9051869d82ed158fb76170ade"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/migration@5.1.2?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/migration/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/migration",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/flyway-support@5.1.2?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "flyway-support",
      "version": "5.1.2",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "ab0d586da279a59f0735d81c55eda646"
        },
        {
          "alg": "SHA-1",
          "content": "c3de8021e677cb2007c54d53ca1e620ffde07430"
        },
        {
          "alg": "SHA-256",
          "content": "cd20024ffcbae0afeafed0c1466cbe68f815140b4de0daeb2c754566e6df5c66"
        },
        {
          "alg": "SHA-512",
          "content": "b8e1e7415635bda1dd39f990200918b492d9bcacf31fcdd0ec034e311bf12ba1db8425c8a116970e8f2ba1e9a49df4c86aa955139c44ae89ad9a9f994adbcb77"
        },
        {
          "alg": "SHA-384",
          "content": "add07e638f7b17cd4e0166c9a067fe517efdc52c07c7cafecb8a5bd646f33e5bf6102628d2853b4c3106fe81d930c03d"
        },
        {
          "alg": "SHA3-384",
          "content": "1721b53429a15ec2a8859c1a35a82512481cee03fd76b00469cb5dcd0654b3a6356c424945058a2a0f050eae77262561"
        },
        {
          "alg": "SHA3-256",
          "content": "d94a7502464e85086355aeef1aa1f095983a44c550e4f99b922a72f95c384af6"
        },
        {
          "alg": "SHA3-512",
          "content": "440d583f6a6fc8da9f4636a958e95d2b2f3a29defc013cb124fd3508c20a864969b0a49e07302f914efe80ef53ee993ba7abfecc40990f755fb48f735212d6d7"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/flyway-support@5.1.2?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/support/flyway-support/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/support/flyway-support",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.flywaydb/flyway-core@13.8.0?type=jar",
      "group": "org.flywaydb",
      "name": "flyway-core",
      "version": "13.8.0",
      "description": "Flyway: Database Migrations Made Easy.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "0ae9df156da37bc89bc6f8a574bea7b4"
        },
        {
          "alg": "SHA-1",
          "content": "dededea87402676ee658bbc973ddcc55932f60d3"
        },
        {
          "alg": "SHA-256",
          "content": "e583e617982ce57d9d20fc4c149aa86d6e622b716fcceb04c090ee7e0181ac81"
        },
        {
          "alg": "SHA-512",
          "content": "9283990c248cbb10a36d6c8e5ed5d04cca64e3df26b9d7edb8f1383ec8f164f5c50d3a6e0e58c47e2a7baca8b14cf2bea6463396acc6d6058d3cadec12de0863"
        },
        {
          "alg": "SHA-384",
          "content": "23115dc2cf44d4e491368f801f1a4b382dc13b0920fff483d8b4fa4f25b8ea2ed61cd9f9faa146b9a598f29b93b453c3"
        },
        {
          "alg": "SHA3-384",
          "content": "70efd24642fe440c084e658adc5621b123f5aff06d2334871be19efba12171139741b238f1143c0b30b926dda3dd4ced"
        },
        {
          "alg": "SHA3-256",
          "content": "0eb8e8cecbe9a674494a28ea4027b8dd3d9d90597a7e892ec484f9a0b9dc3076"
        },
        {
          "alg": "SHA3-512",
          "content": "75d121a81bae610669390ffece30e87d3f0993c82cb765b8e2e93db7408647d9a1c34d919c2b7d71c1ae69626c490057547dfa539856366023bc4b435873e2be"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.flywaydb/flyway-core@13.8.0?type=jar",
      "externalReferences": [
        {
          "url": "https://flywaydb.org/flyway-core",
          "type": "website"
        },
        {
          "url": "https://github.com/flyway/flyway/flyway-core",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.flywaydb/flyway-database-postgresql@13.8.0?type=jar",
      "group": "org.flywaydb",
      "name": "flyway-database-postgresql",
      "version": "13.8.0",
      "description": "Flyway: Database Migrations Made Easy.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "ef6a526e5b83e5e0124d411ffd5a3fbe"
        },
        {
          "alg": "SHA-1",
          "content": "dc073066879379822f36ad7529758a92a53576f0"
        },
        {
          "alg": "SHA-256",
          "content": "6aeac828edae2b029d6dc914b79960676771222d9a49593509e319004aba55fc"
        },
        {
          "alg": "SHA-512",
          "content": "e1de3a77cd4f9bed759a6e22eeb4bca2004cee9f36b5388623774119854e4d55349e17d9c58d2db5f53fa50856250a45703ac9ac8c1f31a1cbec4e1edf76fcb2"
        },
        {
          "alg": "SHA-384",
          "content": "96436663daaf74330b7984896fbcb4626baf9e6b4a3e5a027ba53e1c0871b2287f8e457ea7ee53c82e3919283044c388"
        },
        {
          "alg": "SHA3-384",
          "content": "12c60776bdceb5ded0fd47878b7cc4a6049856cae36689e9ba6442ca5e3eed9d505ba2c3ba27ad2436d0bb91e270e325"
        },
        {
          "alg": "SHA3-256",
          "content": "0b3bc48ac98f16b3ecc81863f835698ed65ab50bce2f5542b6300990d9b020d2"
        },
        {
          "alg": "SHA3-512",
          "content": "f6b5578394bc6687d701d30f408b3ce674b74fa32f87d1ddf664b7268879b037fb51a56d5b62e3f41c2949c161cc7974b7008ea372ab385aef6937a3d16694ee"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.flywaydb/flyway-database-postgresql@13.8.0?type=jar",
      "externalReferences": [
        {
          "url": "https://flywaydb.org/flyway-database-postgresql",
          "type": "website"
        },
        {
          "url": "https://github.com/flyway/flyway/flyway-database-postgresql",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.flywaydb/flyway-database-cockroachdb@13.8.0?type=jar",
      "group": "org.flywaydb",
      "name": "flyway-database-cockroachdb",
      "version": "13.8.0",
      "description": "Flyway: Database Migrations Made Easy.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "4d88db48b3bc15022304efbdf4a7fe71"
        },
        {
          "alg": "SHA-1",
          "content": "a2456a565d63654f905ab1835b332352463fb1f6"
        },
        {
          "alg": "SHA-256",
          "content": "948b93df10cd5a9703cd91551d6d864d5def159c3b38ede37cee7c591eded0c2"
        },
        {
          "alg": "SHA-512",
          "content": "a1f8d7d1ff6f42b43557f6a23cd246e4045243c58038db64e8a64e6f585d489e1490e964698d1553c21214353399a64319de7fa062ac3b0402665509b50eeb35"
        },
        {
          "alg": "SHA-384",
          "content": "fb35dee86be1aaf6d428564e4fb83e80f42ffceca75f6b6845bd13bb3ec25b9730ebb6042645e914797eeba325bc56ac"
        },
        {
          "alg": "SHA3-384",
          "content": "63ff0d1fe24c808fad932f02b4ba0a404ddcfe38947138b313cfceb7fafc168b5b4f41a4c7b2e13073c3846dfe9107de"
        },
        {
          "alg": "SHA3-256",
          "content": "6739533ab734fae1b3f700cf0b3a242739cc22c307ea65a2cea0f8476c462dcc"
        },
        {
          "alg": "SHA3-512",
          "content": "aa81b6ec0e6b5c7797d051c03f00c71d615e49dbe41ff8b3db12dd0bc029654bc1d6e8ebd8c08ac602d3049cd1815d7fc5a69f07151164ffc616ceee2026a0d8"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.flywaydb/flyway-database-cockroachdb@13.8.0?type=jar",
      "externalReferences": [
        {
          "url": "https://flywaydb.org/flyway-database-cockroachdb",
          "type": "website"
        },
        {
          "url": "https://github.com/flyway/flyway/flyway-database-cockroachdb",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/notification-api@5.1.2?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "notification-api",
      "version": "5.1.2",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "30acefd49bd8e15d4aadcb547a96e88e"
        },
        {
          "alg": "SHA-1",
          "content": "a93364bef2e21c22956e505966b42cfc9d18a382"
        },
        {
          "alg": "SHA-256",
          "content": "b66b317d0dd03b33ee03a94530974c9d4179f58289b6476311c5681108a9cc73"
        },
        {
          "alg": "SHA-512",
          "content": "0ed0f03c5cd7236720db7c030ccab48c20e62cd0b99d969536508e5c6ca33d0cd5e4ea42d303cc550ca745fc31cead4bb775535b602c08d2aeeba9eeb14553c5"
        },
        {
          "alg": "SHA-384",
          "content": "dd262da7d2c1b0d19071e4f637c3420294773b2f7d8ecc018077df3ce6571fc6c73d054944e5c1d1d33218701d75d6fd"
        },
        {
          "alg": "SHA3-384",
          "content": "959225e0101af3cce40961e924e9ea99d1cb9066748edcb1de7d5519c400209cb16949957afd99db8956fad8f8a252df"
        },
        {
          "alg": "SHA3-256",
          "content": "8c6534ee612db9768d85aa8241a7f53b47f299a7a9e299af8122ec122a521e06"
        },
        {
          "alg": "SHA3-512",
          "content": "934f6bc2aab87004e2b4118eab67592127859e1447fd1f9d12b35f796b4e65ae51c4d6c39f33cc5328a0221dbd83d4206bb0fa355f9f5777d994fbfcd5d65f04"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/notification-api@5.1.2?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/notification-parent/notification-api/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/notification-parent/notification-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/net-support@5.1.2?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "net-support",
      "version": "5.1.2",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "097b0ca4d6e657c49ab9f7eae0e3b127"
        },
        {
          "alg": "SHA-1",
          "content": "08964eb1bcd4f3bab4f6a2bb14baab78d808cca3"
        },
        {
          "alg": "SHA-256",
          "content": "380aeb4fc1445f9c785c09d6e71970ce1b221ebe5293b951a7d45284ff9a5e3f"
        },
        {
          "alg": "SHA-512",
          "content": "ee601783714f56535113c91b6aa90288db65b512fc995bd97c48b14f48ef19f29b162e49a00e3f69d94b28c60ff29f7244d5a0cb49f6e0de1f9c56e8f8fc274f"
        },
        {
          "alg": "SHA-384",
          "content": "b2cf01e5d3d93a6733c6aefe6a70043b9cf45b6f695d2bfb03cf1e384561d30c21ed1496098bd7f4ee354e81d730541c"
        },
        {
          "alg": "SHA3-384",
          "content": "5d2c908cd1345b09cb848a6c120b7a6fcfcab5a0bd1d2bedc44ea406e60cf73f68972ee84fa3d7188bd3dfe944826ddc"
        },
        {
          "alg": "SHA3-256",
          "content": "d9cce898a3450fd95c4c925d5428a4f2ef8758dccea13b6301e6a075802cc71d"
        },
        {
          "alg": "SHA3-512",
          "content": "eae3b0be5be986aabb02a76dde02a5d69a21d1ce7f14122866b154273a02c60eafadb9740f5d24845efbbd58c3f1da8547f75bc73f1cfd293957f09056d2948b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/net-support@5.1.2?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/support/net-support/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/support/net-support",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.protobuf/protobuf-java@4.36.2?type=jar",
      "group": "com.google.protobuf",
      "name": "protobuf-java",
      "version": "4.36.2",
      "description": "Core Protocol Buffers library. Protocol Buffers are a way of encoding structured data in an efficient yet extensible format.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "617a916997991c4d4e287b5f86870e66"
        },
        {
          "alg": "SHA-1",
          "content": "dbc5fbfc3936fb569a910679e971842a556a4d3d"
        },
        {
          "alg": "SHA-256",
          "content": "0773e72eaf375e1285df330575bfec5bda5da674d544d0e142a17f89c8f754da"
        },
        {
          "alg": "SHA-512",
          "content": "884b623537e8c05dea7bab426e786d7026476977cdad407d5686e10150f2bc116b8014b5099c1fec5212082b339b18d530e50788ff77f534bafab30000760694"
        },
        {
          "alg": "SHA-384",
          "content": "8eba320e587e5f2ecf25be8e2dcd14c5234be7e34fc2a647dc136fda04d3762df0ee9483894714fd8195793c969a0f6d"
        },
        {
          "alg": "SHA3-384",
          "content": "a8066e8676d14e79f4005c01ff31d6747d7d9ffa8a36df0a1f8c65e2b46980c7cc3f3280d72e0478784a886b85e7be67"
        },
        {
          "alg": "SHA3-256",
          "content": "a8bc7bd265f16bf1b41e82b93d9397d03bbc3896f0ddd1f138b2388f7b8e033d"
        },
        {
          "alg": "SHA3-512",
          "content": "3494204dacf621c2dace984b2253916434e9b2ed8dbdd277b1b3f044bffeaee051f1262cccd3969551da87af42d61261bdf16a2c8670aa3a57448e2eee8d72f5"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/com.google.protobuf/protobuf-java@4.36.2?type=jar",
      "externalReferences": [
        {
          "url": "https://developers.google.com/protocol-buffers/protobuf-java/",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/protocolbuffers/protobuf/protobuf-java",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/notification-publishing@5.1.2?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "notification-publishing",
      "version": "5.1.2",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "8ac6c494b3da995ce37c128614aecbbb"
        },
        {
          "alg": "SHA-1",
          "content": "74db50345bd32ec243081cde40a1195426bf2e9a"
        },
        {
          "alg": "SHA-256",
          "content": "ebd42e9e806e7f96b6b9abbde8e144f4cf32a6ab065201be2c59ce597b0820f7"
        },
        {
          "alg": "SHA-512",
          "content": "4564f1c515b1f48e060b2b5bb88b4ad7c8fb8390f3cba0c156b77e83672ea2f2770d93e538c3e27ba968525eb866bb94aab19f7b24e0768a22f5414b5885b3b2"
        },
        {
          "alg": "SHA-384",
          "content": "9ed202e772d503b40d3181c8d30879e0762012a0cf9fb5ff4a6e3182e9332cdd134ba6e1f7b294e0586a03613ec12ac2"
        },
        {
          "alg": "SHA3-384",
          "content": "362f4a2adf06a128b6ebc45b25933643631ae8995f7bdc9a455f6703d62c9e5f697af6641b8e15243012fa37597a8d42"
        },
        {
          "alg": "SHA3-256",
          "content": "eb52488187cb0cf8162b3ab1a8c8735a15ad00e488151eb5f4c97fd32fcd45d6"
        },
        {
          "alg": "SHA3-512",
          "content": "bef80a06e480c745e243fc4c1bc5139f280f2d92880ad6eaded13927da50cc9ccd89205dd0e05e58d705d36688b5e37947f2b12859a777d704ca5695b72a374b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/notification-publishing@5.1.2?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/notification-parent/notification-publishing/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/notification-parent/notification-publishing",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.eclipse.angus/angus-mail@2.0.5?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.eclipse.angus",
      "name": "angus-mail",
      "version": "2.0.5",
      "description": "Angus Mail Provider",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "e965a2653568c0138457b4c6fc9e5d77"
        },
        {
          "alg": "SHA-1",
          "content": "427f6d52ec0782f7efaca0c0732042e347a6cb4f"
        },
        {
          "alg": "SHA-256",
          "content": "b4d8c30d35f455def6c7a05fe595a1e62ea2b80cac3efec1e9ccf4118b23168a"
        },
        {
          "alg": "SHA-512",
          "content": "500985e3045a7640049aa1ebb008d675983f537150605f192d2746ca2aa8c7a1b5231f782f950dfd968cc8ca26c32c6e93008cc7de309c5da4b17af0139baff7"
        },
        {
          "alg": "SHA-384",
          "content": "35c797fdc52800ccfbd36d7574c0919fbba1f820eafb1d236271eefb07266360c1b87c07c089f97c07d12a634e54037c"
        },
        {
          "alg": "SHA3-384",
          "content": "9a10dd9cf09af51c29d178d2dd87c6a796121753c91ca13b8c51843b8ed737803090fa93f41ec8689469550941e12473"
        },
        {
          "alg": "SHA3-256",
          "content": "7ac45dd92d65996c4de11701bf1a1130e393a3e33b4bc02af69bf627e54b122e"
        },
        {
          "alg": "SHA3-512",
          "content": "b45eb356f855b9777cfdf6be94c6797c33e86fe28e8e2e7fe7311e661f07d162e8c4e46a2f3dd67b7c0f8261ab5610c85f4f62cc874e64ee2a76eca3501e2e2d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        },
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/org.eclipse.angus/angus-mail@2.0.5?type=jar",
      "externalReferences": [
        {
          "url": "http://eclipse-ee4j.github.io/angus-mail/angus-mail",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/angus-mail/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/angus-mail/angus-mail",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/jakarta.activation/jakarta.activation-api@2.1.4?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "jakarta.activation",
      "name": "jakarta.activation-api",
      "version": "2.1.4",
      "description": "Jakarta Activation API 2.1 Specification",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "bc1602eee7bc61a0b86f14bbbb0cc794"
        },
        {
          "alg": "SHA-1",
          "content": "9e5c2a0d75dde71a0bedc4dbdbe47b78a5dc50f8"
        },
        {
          "alg": "SHA-256",
          "content": "c9db52100ce6c8aac95cc39075f95720d2e561b11f8051b81c121ad4effd7004"
        },
        {
          "alg": "SHA-512",
          "content": "cd078772acb5ebf1f90f7c737f372b7e86a5ce31b995ed759526a9eee73fd89f97e506f9a208ba3b73e757cb78830b829733411cf7989680aea2272abba7323b"
        },
        {
          "alg": "SHA-384",
          "content": "0b9a413939a024f562c15e60b11f85c336620987441fb053645499704960464d01ae83e9989b43ae6cd4f2164eb0cebe"
        },
        {
          "alg": "SHA3-384",
          "content": "d2fa51a3e18ced20f097ae019982cbd945942103df59327f319c64eeef1c109d6262d1de332fa2b6dfde41c98a9e7b2c"
        },
        {
          "alg": "SHA3-256",
          "content": "b259d17f48ae1f357a28b9c33b66fbcae50eaa86d61ac3c8cbc5184e7914d2d5"
        },
        {
          "alg": "SHA3-512",
          "content": "aae6a55fe1fa397b13b1bcb5a05ccc3e4e87049865233482dc09a8ab2af3eb128646394e3ef529609031e7c6c2215c91ffd27de06cd97ca9ae7e07bd4b9595bd"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/jakarta.activation/jakarta.activation-api@2.1.4?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/jakartaee/jaf-api",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/jakartaee/jaf-api/issues/",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/jakartaee/jaf-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/jakarta.mail/jakarta.mail-api@2.1.5?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "jakarta.mail",
      "name": "jakarta.mail-api",
      "version": "2.1.5",
      "description": "Jakarta Mail API 2.1 Specification API",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "a1872951f46b87594806bb01e342a468"
        },
        {
          "alg": "SHA-1",
          "content": "be9b3b677ed6083f575c437ebc442a6a4bd2b931"
        },
        {
          "alg": "SHA-256",
          "content": "aa493753acb7a8c45ba8f4c9cf1230a74e20237056dd5b5c8bc86c583e8cfa0e"
        },
        {
          "alg": "SHA-512",
          "content": "f537477c3dbf81cf7112fb348221b91c0223b5dcbbac816454e88cb8f293f8c5d566b2a827f78dfdfebec1fbe5a93c909e78fb13789ed41ecbb96a86d171b267"
        },
        {
          "alg": "SHA-384",
          "content": "0ae200a91c5879f7b50b9a07c3df864d7b7af31cb771ff2a636cf8ee76d019456e7fb541efb69ca96f90f497c597d608"
        },
        {
          "alg": "SHA3-384",
          "content": "862bceaf42659250d354809cb2259bfd11b9d4a87cf1bcafc9c2346f134bad45e27f8f7227722905eb1c870e9314ee77"
        },
        {
          "alg": "SHA3-256",
          "content": "9dc094cd2476872a9da6b8065878b5e5a9895dad13762caa025ac5c2656c65e7"
        },
        {
          "alg": "SHA3-512",
          "content": "e01072fafeb8a06ca6e32bdac205189fc9dde12fa039c453cfcc9a0cbddadc466d400d117cea64066cb1d04b34b0bc7a809ef8a832b11e7adb3015abf33e34d0"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        },
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/jakarta.mail/jakarta.mail-api@2.1.5?type=jar",
      "externalReferences": [
        {
          "url": "https://projects.eclipse.org/projects/ee4j/jakarta.mail-api",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/jakartaee/mail-api/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/jakartaee/mail-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.eclipse.angus/angus-activation@2.0.3?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.eclipse.angus",
      "name": "angus-activation",
      "version": "2.0.3",
      "description": "Angus Activation Registries Implementation",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "ad20392145690b36b4f950fe31a31a2a"
        },
        {
          "alg": "SHA-1",
          "content": "7f80607ea5014fef0b1779e6c33d63a88a45a563"
        },
        {
          "alg": "SHA-256",
          "content": "a6bd35c538cf90fff941ad6258c40c08fca0b5c9c3f536c657114f27ce0527a7"
        },
        {
          "alg": "SHA-512",
          "content": "efb987b781f665589b2a524d86826ffcf37eaf105b2f823be124fded85bd118098c0749b5d268373d00b1d3b8bf0f89f86670444f9990b91948704a7052376e1"
        },
        {
          "alg": "SHA-384",
          "content": "4086b356cdf168e28a09dfa2ee9cd54926491438d556e4608508ae6a895929adf63f3a259779c83624a9bb1f886efb6d"
        },
        {
          "alg": "SHA3-384",
          "content": "7b79721ec0b28964fad4bf56ffc3be67d81b62e45a4ac703917094e281c125834b9bebcc0623176d4904c5b50c94450e"
        },
        {
          "alg": "SHA3-256",
          "content": "aecadbd33e92abf894ae28c8cc609f5f85e8af736621c44fb71b84ca34e91247"
        },
        {
          "alg": "SHA3-512",
          "content": "ebdc07c3b3cf0817f6d9ee54bb23461657f213648b70f6c7f634a1028cdf1522d5b5a7e2168130f72afa112f36cb08858d1c94bb67b40a0f051f567b4d696d1e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/org.eclipse.angus/angus-activation@2.0.3?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/eclipse-ee4j/angus-activation/angus-activation",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/angus-activation/issues/",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/angus-activation/angus-activation",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.github.ben-manes.caffeine/caffeine@3.3.0?type=jar",
      "group": "com.github.ben-manes.caffeine",
      "name": "caffeine",
      "version": "3.3.0",
      "description": "A high performance caching library",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "f53ed7e4dd9a005c0b365bcf35ec8b4b"
        },
        {
          "alg": "SHA-1",
          "content": "91a1bf2b11bd3d51f17234b335424757582cd8e1"
        },
        {
          "alg": "SHA-256",
          "content": "5d015adc655191c8f9a152c4cc871170a04d28040ed281d0e74ade87d6ae8aff"
        },
        {
          "alg": "SHA-512",
          "content": "326c53cd70527c0bc32d4d14d5edd14c6b4ee658c8bf2a98f8db9491c11cf9b7903522d417f4a33580ef9ea5133daacf63a2a0f36c91b3e9aeee61adb16b3c02"
        },
        {
          "alg": "SHA-384",
          "content": "ec239f3683bc3b756b6fd1c062ce188869ff0068cacba049442885557dd6ffa0ebda35a04fb9b9aa8eb1072e6376da73"
        },
        {
          "alg": "SHA3-384",
          "content": "64d6736ca19f04b2675a32eeb2cfcdd87fac0652fb5ac37c10acad002f958a700d06e32fcdf295f66b975fa0954e6cf3"
        },
        {
          "alg": "SHA3-256",
          "content": "ad177d3772be9a19ecd158c0a38cd13d9206cc87bc849bdbdef2535599e54702"
        },
        {
          "alg": "SHA3-512",
          "content": "9612ac7f7164703f8f3465066ec75563468c64245fe456682bdfb5a10fe8f82c80a2b1c008c6918bd692e39c22f266d5d3a49c851ffc992dadb0387f358b37a3"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.github.ben-manes.caffeine/caffeine@3.3.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/ben-manes/caffeine",
          "type": "website"
        },
        {
          "url": "https://github.com/ben-manes/caffeine",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.22.3?type=jar",
      "publisher": "FasterXML",
      "group": "com.fasterxml.jackson.core",
      "name": "jackson-databind",
      "version": "2.22.3",
      "description": "General data-binding functionality for Jackson: works on core streaming API",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "e1fbe6bbbb606fad49068fd2670a5208"
        },
        {
          "alg": "SHA-1",
          "content": "d0d4b2cdb0a1440ac02178fc2ff01dfb05cd06a8"
        },
        {
          "alg": "SHA-256",
          "content": "556db5439e206114346043f68d200497dc96a0bca62a360a81784092ebd0e0a9"
        },
        {
          "alg": "SHA-512",
          "content": "2c94560ef0f01f7dd12ae0810dbcfaf80fddd889bc25f597350fb75a0fcc266fa68f5795a773f772692426ac81a6ee65ed2bde8db8184bb2788323bc95ef7ebe"
        },
        {
          "alg": "SHA-384",
          "content": "35a064a6a2a93643e10f87b9e0a0527fa3c12a14de7f76bcdc81ce3939150fd683159c08164011532e84504eb473e277"
        },
        {
          "alg": "SHA3-384",
          "content": "40f36ac8e077efe3f141b03f1390cdb38e1c829058fb86510abea9778e792725f55f6684cbba4d366b6055ba44b7d80f"
        },
        {
          "alg": "SHA3-256",
          "content": "0ea05dee4c161251abf19cff75fd82b4937d28d346c53cb3fd7c1e062a2184da"
        },
        {
          "alg": "SHA3-512",
          "content": "e6dc5878852afc9101d66a2c16b91a419179bfc871ec66ddd8590bcfde9b3f2889d4fa317ab8fe40aa2ba6bd94a4aa8a1121ea358e10623de54a678a080f6676"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.22.3?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/FasterXML/jackson",
          "type": "website"
        },
        {
          "url": "https://central.sonatype.com/api/v1/publisher",
          "type": "distribution"
        },
        {
          "url": "https://github.com/FasterXML/jackson-databind/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/FasterXML/jackson-databind",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.kafka/kafka-clients@4.3.1?type=jar",
      "group": "org.apache.kafka",
      "name": "kafka-clients",
      "version": "4.3.1",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "5fe1478c9371fd445f6e730f1dc26744"
        },
        {
          "alg": "SHA-1",
          "content": "74209a28d36f819b2f7a9b599e468b5654cad514"
        },
        {
          "alg": "SHA-256",
          "content": "52501b7b47510c66f898871adaf6d2968ab7246561d44ced43643a8a587f0b36"
        },
        {
          "alg": "SHA-512",
          "content": "f3b76117e349b2875509cbf0d55fdb687dcf2d0d554c87273739bbda6226232a81679901613d3f1c1e49f777fd18780104390509637ba06552b868473b54b950"
        },
        {
          "alg": "SHA-384",
          "content": "38f8796f4c4883f6f50cf4304882f1fee08b2c18d0323b9990365078766c6b85e7c0f42d6a427d128eca3f2bbd4b99b9"
        },
        {
          "alg": "SHA3-384",
          "content": "96cf0303b7faa70a9e01ae6f3a0a6ee31b499e72cd507259248104369d0cf9cfb8a7a669d58517f5c784b8d81fe09f34"
        },
        {
          "alg": "SHA3-256",
          "content": "0997d620a357a166e4bda0c823c71b301299793d376a79b7ad2f17f824061d33"
        },
        {
          "alg": "SHA3-512",
          "content": "bb98536bb8b6a1504812c1e0d1971a455a5aaa79a96f516ac4a4fd4c905d2391c725e47a5b9296b8a453e8e10f0957b3762a51e913014a5bd44e085286d7428e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.kafka/kafka-clients@4.3.1?type=jar",
      "externalReferences": [
        {
          "url": "https://kafka.apache.org",
          "type": "website"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/notification-templating@5.1.2?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "notification-templating",
      "version": "5.1.2",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "a28d7d51a6664f3e556873f6ff02ec05"
        },
        {
          "alg": "SHA-1",
          "content": "1d3f1de463b3751633d3514490b7d54ded2e170f"
        },
        {
          "alg": "SHA-256",
          "content": "4cabab5fb85534b488b4fe05dcabf5b706cce1597c23c5e9849efedf85d4ca2a"
        },
        {
          "alg": "SHA-512",
          "content": "6cd7105b8603c72281c2615452f4bdd3adc1ea96f0cd25530dbfafc692526653a1e1fe72a76ea91078b121c49572084d42470a83cedf55b4eeb51ca3b73fd29b"
        },
        {
          "alg": "SHA-384",
          "content": "a3d432eabe7f762844d03aa73daf449f74c0cb2a04dbcfca587aaf1362fa783d4e28fca340366789a44498f47da0c769"
        },
        {
          "alg": "SHA3-384",
          "content": "8eb02fb2f8ec6f7af63f9f2520ba477eaefb9544a0d82fad6d95e49189732596c824be5b5fafbbf3e7a44ee654bd8c2f"
        },
        {
          "alg": "SHA3-256",
          "content": "342adc724cd3682900491dc4a4a615b5e84ef57747ad3906c0c374cc616055a4"
        },
        {
          "alg": "SHA3-512",
          "content": "23a7a3cf622e3741a7bf4fdc48d20b6c69662e43892c811456b6aa4f69c731d963553f39020e4af4eb9de6c523689522e2086560eae7b00272356b486ddad034"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/notification-templating@5.1.2?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/notification-parent/notification-templating/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/notification-parent/notification-templating",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/plugin-api@5.1.2?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "plugin-api",
      "version": "5.1.2",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "8c6a204bb61be9b32686e1b975f9910e"
        },
        {
          "alg": "SHA-1",
          "content": "cdb285a01cd7845575ea163680ab2c3b61e3e6b6"
        },
        {
          "alg": "SHA-256",
          "content": "df363711f5ded7ffa524aaea06944d12d2df84bb1039813ec3cc0077de5d36d3"
        },
        {
          "alg": "SHA-512",
          "content": "87f250c87ded25cd0fdfecf89f28ec021b2536d06085fcc1b3f16449a11ebf65469dde45bb250966822fbed38dc7de2dd409be907bbfab7f69a7545368dfd9aa"
        },
        {
          "alg": "SHA-384",
          "content": "94c3e47a3938d7e573620d985d97639bad8d98e08f9a34196e54be21536378880b336cca2123ede6a8d9c464fecef3c5"
        },
        {
          "alg": "SHA3-384",
          "content": "4b8bd239a0add1f4356dea6c06fca310f965d6a4f37f1f1462e78cfd0628f5f9577d05967165a9505025187ea97d5541"
        },
        {
          "alg": "SHA3-256",
          "content": "32a74edb97a07e0ee9721c9988355c5da50896b28c92f7d87911f108c61145cc"
        },
        {
          "alg": "SHA3-512",
          "content": "4230114e2ed2457cf83b734d048a996089cd48e41970e8f4155271b20ece155e36244fadf5ac7a11e0e8cd81bf2c207191c099d8777d2949e3cf2bdae52f4727"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/plugin-api@5.1.2?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/plugin-parent/plugin-api/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/plugin-parent/plugin-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/plugin-config@5.1.2?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "plugin-config",
      "version": "5.1.2",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "d2283a9ec3e1af3ba6d19105c8081180"
        },
        {
          "alg": "SHA-1",
          "content": "659d946b6257d48a5b3b8007d040ce3da023697b"
        },
        {
          "alg": "SHA-256",
          "content": "08842f8eeb20cee6355fa419fd62074303fec88cb79062740246ae848315d1ad"
        },
        {
          "alg": "SHA-512",
          "content": "5baf6ef2bfdae171aec283c581538785db0749906cad5092e35d8255e44bb069ff6d269332f667daef45fec4d3ee77c304561aa89ebd30d608742a8703a5be99"
        },
        {
          "alg": "SHA-384",
          "content": "63c176e22d3e51b12c327c2328ee17fc67848936a4b22348250359cd3425dcc032301c9acde7524e0e00e7640581683e"
        },
        {
          "alg": "SHA3-384",
          "content": "012fc77b04b5f0a9688297483005cee6644f914b2cedb965e94c110e16ebcad6bdfdaa1e2de36b9ec050fbcea2c892aa"
        },
        {
          "alg": "SHA3-256",
          "content": "6898a990fffd786e2d6d828ab16342e87e515773043aaa36326976fe705cd898"
        },
        {
          "alg": "SHA3-512",
          "content": "c0ff8478ef9d4751235a848026c6c1926211960c2364f5e9e683382df48e46e569b700f7cdd84f1e97cf76c39029e8282f84b4b54612d684d06c2dae4cc0eb69"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/plugin-config@5.1.2?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/plugin-parent/plugin-config/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/plugin-parent/plugin-config",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.networknt/json-schema-validator@2.0.7?type=jar",
      "group": "com.networknt",
      "name": "json-schema-validator",
      "version": "2.0.7",
      "description": "A json schema validator that supports draft v4, v6, v7, v2019-09 and v2020-12",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "17bd507f6003bb14ac47c54e533d4081"
        },
        {
          "alg": "SHA-1",
          "content": "aa1749f8907f465c0373b5238fa756bb89f4495d"
        },
        {
          "alg": "SHA-256",
          "content": "7d01cefd6f0d656666b94778c7a13ada2941aace48e76830809c0dbf61ad5be2"
        },
        {
          "alg": "SHA-512",
          "content": "39b0b1e4e68515179acae3b19e6497a0d612bc7732b5cd4086d8741022a2e80f602bdd0e9d04664f5d8ef2a0c5c9ab0a540dc05efcd1ab8aa1c3fbb5815a3485"
        },
        {
          "alg": "SHA-384",
          "content": "93e574322ef34c3e1bde817e19fa690e84c4209a1aefa17c06fb77525d8bd21d63ce5b30d854e0355cc1aa1d5ad7736e"
        },
        {
          "alg": "SHA3-384",
          "content": "390d98e24170601d7de1b18f3e031ab4970949208c82bf08617cbe9b7938b7285153ef8ad3d2b195069e13fe1c0e24a2"
        },
        {
          "alg": "SHA3-256",
          "content": "458ba71a684e1ab9027102eeb3c941e4c3930828d88691a9b61cda9119ef5a49"
        },
        {
          "alg": "SHA3-512",
          "content": "c369ee019f8fd95bcb337e7870e9c2a18eacf8a04ecfc7382712cbe9eb778cc6bb5476f4d7f030e8b870e81669bc16f270ed3e54621a527e338159ea6bdcc483"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.networknt/json-schema-validator@2.0.7?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/networknt/json-schema-validator",
          "type": "website"
        },
        {
          "url": "https://central.sonatype.com/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/networknt/json-schema-validator/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/networknt/json-schema-validator.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.ethlo.time/itu@1.14.0?type=jar",
      "group": "com.ethlo.time",
      "name": "itu",
      "version": "1.14.0",
      "description": "Extremely fast date-time parser and formatter - RFC 3339 (ISO 8601 profile) and W3C format",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "e537d0a2bc8066726f7e4654c253cf84"
        },
        {
          "alg": "SHA-1",
          "content": "c0f9f9d4f4404787e992ab3af5ae95f2fad79e47"
        },
        {
          "alg": "SHA-256",
          "content": "5cf40ab0cc77828ab2b875b1f3ecd71c8295d7721933476abc2e08fddcea164a"
        },
        {
          "alg": "SHA-512",
          "content": "aa69a6af3a7123eb41425bbaf6834e16dc3323172709e2338b8a21b970fd21333d996515f42da4aa0225251e30542ad7d9c8332bdf7d62ed96b42fadc8a1520d"
        },
        {
          "alg": "SHA-384",
          "content": "8d201334c39b68d13d66fc9df2440fa848b055a9b901e1c630ff66a47e70c8816484d106ae18c642d4257034f33e55f2"
        },
        {
          "alg": "SHA3-384",
          "content": "033715e1422cb3f22c1073bc7b058fd16d1436c6314f49f13480d81c86b656cb77a4d852cbba35542bc8f2ce49244ba6"
        },
        {
          "alg": "SHA3-256",
          "content": "f18d275dd2a0038a82432e06bb9f396151310136e3a316a869ef54d7fae834c5"
        },
        {
          "alg": "SHA3-512",
          "content": "8a51b3c6144eb2e363f8804da316d9e3dc246be07af4c0bb55e9540c2a0deb5eb9beb825120d3d203e3a561fd8a605ad64f3af5d233725e1b9c7e06232deaea9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.ethlo.time/itu@1.14.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/ethlo/itu",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/ethlo/itu",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/plugin-runtime@5.1.2?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "plugin-runtime",
      "version": "5.1.2",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "90b10176278d247f7542f53be5f71171"
        },
        {
          "alg": "SHA-1",
          "content": "2b2865e77c63370776dc9807b77cdf7d7e4cae87"
        },
        {
          "alg": "SHA-256",
          "content": "df72e99fb8b2f9abaad13227a100c33858a66500729b6a7c5e863adcf412db16"
        },
        {
          "alg": "SHA-512",
          "content": "15c58b36506fa47f7012e3ccfbe940c375a408cc758f07040d14bd0ab74f096baf8402cfc4d3ca92da6ee9735bd0bf07e510e0e529ba13a65f8c9276a912e6bc"
        },
        {
          "alg": "SHA-384",
          "content": "24591603715f9220ebb546010ece3ce028089f3c8f362d05270dd5a037b741effe9bd83905e616de1b740ea5b5a4718a"
        },
        {
          "alg": "SHA3-384",
          "content": "170447736680d6c13a578e4532637fa0fdc74c3d3ea61e938a6f924d99c565f1de4f23af02a750e44a9f60298a257517"
        },
        {
          "alg": "SHA3-256",
          "content": "0fa9eccc8fde8dd5d0f5132092724858f5d93fcd2a41f152e1d5b92214ca198f"
        },
        {
          "alg": "SHA3-512",
          "content": "c0d8ae95ea81d2c2bf0e1fba85851537c332afb3f587687e44d95a725cff047529507132a43ba792fc04417431ebcf2774e6f4c36ec6cae86ee8558eb0c8f028"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/plugin-runtime@5.1.2?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/plugin-parent/plugin-runtime/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/plugin-parent/plugin-runtime",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/common-config@5.1.2?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "common-config",
      "version": "5.1.2",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "4dc70cd9393216091ee2daf3f549cbc1"
        },
        {
          "alg": "SHA-1",
          "content": "dc43b9cd7ed32f997de6813992e954c2276cdde2"
        },
        {
          "alg": "SHA-256",
          "content": "4a76517afe7f0b1c7e53094a3b0f162df5f1c801293283f945957e72b0928bd5"
        },
        {
          "alg": "SHA-512",
          "content": "f99c6ad417e3545dded6c009a5d93e86dda8a0c4a208e332f2bc75b67b4decc10de261bfda99a0f598627437dbf129da449beddf3129facb23ed3221288fee9a"
        },
        {
          "alg": "SHA-384",
          "content": "d6d3acc5682f359b4ad5dbcc3288386a20f559dc00f878cfc37e9edd90272892db1244fcd4605c50bd86e27142c0ef91"
        },
        {
          "alg": "SHA3-384",
          "content": "0e647562259c9b8892a3e5f182b3f0fd5fb8fb7f0ac11637372619ac5cd80c495e107192641761588daef7e5d8507832"
        },
        {
          "alg": "SHA3-256",
          "content": "4e041b2384a27025fe69eea652bf75ba19549a188b618a7bc456c0134dfdc72c"
        },
        {
          "alg": "SHA3-512",
          "content": "db7c60081115f4de940e7a7f71887a1de208018bd53cec50f98441d9ac5aa87c1a55dd8cff123b0edfd340f47cdf1760e5e118e9191a4d28ea8d15c98d6e333b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/common-config@5.1.2?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/common-parent/common-config/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/common-parent/common-config",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/smallrye-config-secret-handler-file@5.1.2?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "smallrye-config-secret-handler-file",
      "version": "5.1.2",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "b2ed487923ac29cf195eacb4fa4e94fa"
        },
        {
          "alg": "SHA-1",
          "content": "38624a9a8776b26272630ef7a6832a67b74c48d0"
        },
        {
          "alg": "SHA-256",
          "content": "6871846f28ec813858f6608ed4111db033fbd35cb8d2598509ba94f2685e935c"
        },
        {
          "alg": "SHA-512",
          "content": "ac06eaf6fe15fc49480023a9312f469b012bcc5350de7e0da050ab24c3134e7650da9360995dfdf2dd6e3cc3c0a1614aebd2ef0cc2a0baaa573dfbb8865bed8c"
        },
        {
          "alg": "SHA-384",
          "content": "46000aae868ad362418d9ca7e1b0fd017096b8b071a986637036944c5bc4b114144d5b5efcfbac06032e3756b4d2bca0"
        },
        {
          "alg": "SHA3-384",
          "content": "3bea710dc6fd613a39f0bf4116bbe7eabe9896a7c288bbbca89a3a7e712f12ba933616bc4c2fb0195e42c7748546c2d9"
        },
        {
          "alg": "SHA3-256",
          "content": "7973abb329a3f783fdc9541cee620652f5fcba285f9bf2a835b9e13d5d09f3ed"
        },
        {
          "alg": "SHA3-512",
          "content": "608ba91d165b80cd1c49edfc827ff73894be6acf6103bbe58980c5a1b693c8c0439e08f1adf8abe01edb55f74004c5ab50f76b6f839e3e7e1aaaf6c4486188de"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/smallrye-config-secret-handler-file@5.1.2?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/support/smallrye-config-secret-handler-file/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/support/smallrye-config-secret-handler-file",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/proto@5.1.2?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "proto",
      "version": "5.1.2",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "8aa10a90fb999d09d4f93617ebb51910"
        },
        {
          "alg": "SHA-1",
          "content": "6e48548116abee8fb40eb577465e116ee86eba27"
        },
        {
          "alg": "SHA-256",
          "content": "f5c291122c9d8728dde597b8fd3b7dcf1c4c5c3d3d47a83b9a30d4b85216353b"
        },
        {
          "alg": "SHA-512",
          "content": "fc50a38a6ab5725a8a985bf387b6a77d6bd0510818b0884eeb9afb74e781902ae48ae00549679502ff57e9e404302f6d2ed9a5d5edf7fb4e5f51ad7f4784c7fa"
        },
        {
          "alg": "SHA-384",
          "content": "addbe61bde1cf91b6448fbe8150645f06807b77ca11eb20669d9f0495156778424052273510ea45c53e07d81b34156e3"
        },
        {
          "alg": "SHA3-384",
          "content": "ce50b73d55b4fc7b08ee8346314031e574d30d1c78020bae651cc4b2a9ec39fab99094042acf14f6bca5ef5e11075d3f"
        },
        {
          "alg": "SHA3-256",
          "content": "722c339f288d5b814a74ce38821cecb4b791937f05a484df43bccef9a5c163cf"
        },
        {
          "alg": "SHA3-512",
          "content": "a18b6925654e087febfe45e7c6663b2b2975c1a7c5b1189698be22626c7a47753b1248884f80ac80d35199d5f419dadf7c388d320d20233102afeb339fa7c508"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/proto@5.1.2?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/proto/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/proto",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/cyclonedx-proto@5.1.2?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "cyclonedx-proto",
      "version": "5.1.2",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "6d0cacd4ef123283ae58ebf144a3b405"
        },
        {
          "alg": "SHA-1",
          "content": "260ba2372d0d99cf737001ead246bc6bddd5b491"
        },
        {
          "alg": "SHA-256",
          "content": "432446b278cd2eca71b2050909c9b35a28ad44d70e2cb7d2bc24c3be5af1cbd2"
        },
        {
          "alg": "SHA-512",
          "content": "ca19c5736131a0f42be2aa1386d6170347936bb5f810666db8005ef6c6298497a103a4611b207d1ac342aaec1e4614c202fb2189ce6cd10a144a90b7c6eb3b98"
        },
        {
          "alg": "SHA-384",
          "content": "fa473650247414c4cd32cec874e82cb27ef54b82b82ef785a314b28d2eb9e4ca41e235033d92df25887c23936f5c447f"
        },
        {
          "alg": "SHA3-384",
          "content": "37f635e4807c53fd39062e74ddb49683e15ff87d832de9ed66f2f42fbee4824a795441d6e76e925a6ca214f652681dae"
        },
        {
          "alg": "SHA3-256",
          "content": "818a9a6493c34196a07b4cc5c8a6a07779e3b0af70db941073b47d46146c3631"
        },
        {
          "alg": "SHA3-512",
          "content": "98ecf84065af2a5908ac1f1dbb042bccdda1fb1a4b6b856069318deff8b57a57916c648131bec9baa6f65c12feb1e7b618c2b2f76f7b0103cea32e86c56bf758"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/cyclonedx-proto@5.1.2?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/support/cyclonedx-proto/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/support/cyclonedx-proto",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/secret-management@5.1.2?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "secret-management",
      "version": "5.1.2",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "d9e7fabd3572eb721a098033ff55e334"
        },
        {
          "alg": "SHA-1",
          "content": "79874cd970fb203d15f22c77d477efaedd6920a4"
        },
        {
          "alg": "SHA-256",
          "content": "f8ebaa2e70432844e85afad24f1f58316151b2d1bba5f47d09a03a8cb444f042"
        },
        {
          "alg": "SHA-512",
          "content": "8629ba40369f42aedbcd2eec6886f6e3a97a227fb50e4fa83e1fd8030c6c5e815f6a5be42966b7dedff51f7fce57abfa825157a031a0be73a2936ab4f7db022e"
        },
        {
          "alg": "SHA-384",
          "content": "5697bd51326e010c2917f67c19c0680a47ecd46c44e9fd745ee5e96b13d0932074b81942614e3e6caf30f0a9d78da007"
        },
        {
          "alg": "SHA3-384",
          "content": "dc6efc66608a54bc67d23e8e53f048117cd2ae5c6e0a79fa6726be49b7cd7efc0f0e7b052b9b47a4e6b9f26b73b40585"
        },
        {
          "alg": "SHA3-256",
          "content": "56b6c08406dcb13875c507726bfc2ad952f3de36b0d13f61e04bca8911b8991d"
        },
        {
          "alg": "SHA3-512",
          "content": "fc5a934a688d8607cc3c5dc66c506eecdbb691b9dff67ca50eb37ebd2877015f3672e47a174bc7208399ab0168127dd912c170a4a65cb0b5d00818255d2b4d06"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/secret-management@5.1.2?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/secret-management/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/secret-management",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.crypto.tink/tink@1.23.0?type=jar",
      "group": "com.google.crypto.tink",
      "name": "tink",
      "version": "1.23.0",
      "description": "Tink is a small cryptographic library that provides a safe, simple, agile and fast way to accomplish some common cryptographic tasks.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "3653eb60c431373789b981536f639dfd"
        },
        {
          "alg": "SHA-1",
          "content": "05bc3db7a0a7ee19ff2392bf586f85dc7b528bfd"
        },
        {
          "alg": "SHA-256",
          "content": "5bcdc8798ce106f5145acb4a0e993c5e5861337b1e75ca88ceb6ab9da10fa512"
        },
        {
          "alg": "SHA-512",
          "content": "6a236d57e3b98eba266b6a98aba65eefc2c94e1592049e676863c902b67ee7086e16bb72ce843d13b762210ff36dbaba678265637f6ad138f2ea0668b5d4dc7a"
        },
        {
          "alg": "SHA-384",
          "content": "6095a648a2c7e2f82d59cf849d8d0836023dce68ca7fff868d5f26720234c64d5982881157a2fe43ac544330ad778268"
        },
        {
          "alg": "SHA3-384",
          "content": "cd6200f5cb4a73652e617252505ff5a143be9d94a5d4c82fb3d8d38d964aca2a4c19f1e70221056bfc640ccaeaca2ab2"
        },
        {
          "alg": "SHA3-256",
          "content": "5ed24275f206e73bb2f275ab4e4d26b2d28c8ccdbf8c1683ba365569f0cde0cc"
        },
        {
          "alg": "SHA3-512",
          "content": "4b26e55b1f442d7cd9c319f1b1d6f9b2119fabba2284e8e1ff237138f2d48644829c1dbff67f80e9502ffb2f551f78ee31000363e367b1e3f3e7544b571dda81"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.crypto.tink/tink@1.23.0?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/tink-crypto/tink-java",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/tink-crypto/tink-java/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://groups.google.com/group/tink-users",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/tink-crypto/tink-java.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/vuln-analysis-api@5.1.2?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "vuln-analysis-api",
      "version": "5.1.2",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "3b81f7d9196c13ad7874a624d0f2b478"
        },
        {
          "alg": "SHA-1",
          "content": "0c76017781f355bbefcc6deb28e90ed7f3ce03a9"
        },
        {
          "alg": "SHA-256",
          "content": "21f28479d72c6efdce51ad5b468a3c020fa4c538c2d3664d67e52fc175627bfd"
        },
        {
          "alg": "SHA-512",
          "content": "b0e4b0f4814f322709ff61ac141fe36f31e5515a8b5433f45952c9e1b0d9f7d7b17f007752a21853fe022cf50cb2068136773f2e76cc3a63841e27764220ec0d"
        },
        {
          "alg": "SHA-384",
          "content": "2e25e6c8daded51a93746fe7c6ad0896fab8671397dc3401dac3fba3ab4d99b8ab40468aa52522a4f7ae4f6a45d7a76d"
        },
        {
          "alg": "SHA3-384",
          "content": "2f80ad21962be7d83aff82280f2635dc4225f15f7b2f7468e80b3c9c2919c882a078ca9bbcb83c6b94066764c2415170"
        },
        {
          "alg": "SHA3-256",
          "content": "4dfe06182b24d4f951927723dc9240382f8a292ff2f89b5a4afef044e8b1663d"
        },
        {
          "alg": "SHA3-512",
          "content": "2cb725feab6f3b6ab358db1e2fb26224df24334cc670c87943eba730a784c4cde7e79e0a91dea69c23eb1da93bb517e499a6577b5af5184dd9afeda9129d38ad"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/vuln-analysis-api@5.1.2?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/vuln-analysis-parent/vuln-analysis-api/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/vuln-analysis-parent/vuln-analysis-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/vuln-analyzer-internal@5.1.2?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "vuln-analyzer-internal",
      "version": "5.1.2",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "47e599ace4919753ec2d22ac6878de8e"
        },
        {
          "alg": "SHA-1",
          "content": "1fdbc8d6b36cd02e416bf1a3d1f4d60fbed0589d"
        },
        {
          "alg": "SHA-256",
          "content": "7e364bf824a21ee718e8e3db32ae646776c9ed67104d3d8f6f80a6afe13a67ec"
        },
        {
          "alg": "SHA-512",
          "content": "98c46c50dab2c94e2893e462ddafaade855f2b3181a0efaf48dd2ba4db44c6731cd2c18f77769c4f0e98af8b4f838b32d006bb5aaea8823ae8eec36f451043fd"
        },
        {
          "alg": "SHA-384",
          "content": "90b8596d89c255792018735b6387c9067a4fec9edca71dca6b14e48b7c293356ba9bacd5e02cec3c60666f1f996fec48"
        },
        {
          "alg": "SHA3-384",
          "content": "6b3e995b3a55b7546b27e6c95b878976a01d082c866ed24a6595917d7385a93433a52c5da0abb59fcdce46cd03de3b2a"
        },
        {
          "alg": "SHA3-256",
          "content": "f3fbf76e6ea3d6cfe446fb20239997807926ed9c278d239b3bfef710a7203280"
        },
        {
          "alg": "SHA3-512",
          "content": "0e998095a0a8c51289de55c347c4ac18534c24d6a62668bca5250f98a647c24b973a78477965ac0a1467ad16797c6c4cd82f5f86dfd49f43526550bf57fe1c0f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/vuln-analyzer-internal@5.1.2?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/vuln-analysis-parent/vuln-analyzer-internal/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/vuln-analysis-parent/vuln-analyzer-internal",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/os-distro-metadata@5.1.2?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "os-distro-metadata",
      "version": "5.1.2",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "ff07897d4d158fc1dd358ca34af2f63f"
        },
        {
          "alg": "SHA-1",
          "content": "3c0e77e0a2319ba65c21b10e447ff4228c6573e4"
        },
        {
          "alg": "SHA-256",
          "content": "f985283ad4250aa41ae849fc9c87bece1cf2fc28fc91ab003bf62c2c39715891"
        },
        {
          "alg": "SHA-512",
          "content": "2768265032bce22f9a9e2ed4c1c9ccb8099b6cf2e26318c45b1e970f02ccdff715b90819b4ccb8b2983c60c9a852730ed7ebfe41bd675b40b80ce16075f4c479"
        },
        {
          "alg": "SHA-384",
          "content": "df84f568d1354cd6d6690fed999918ed918f13e259176a3e29133c6c664228cac57b2766fb1257caecfb10cb8773bb11"
        },
        {
          "alg": "SHA3-384",
          "content": "8e931f4be52818fd48892178bf0918249aaa2dae5a1faf63bca7f4890e52e2432ef2d2ae6fa7c805ac9efbc131254f09"
        },
        {
          "alg": "SHA3-256",
          "content": "a9bcdbaf167cbe71f38e2bf83b01e2755a7ad39d2697d7cf621d9f7c9be3fe0d"
        },
        {
          "alg": "SHA3-512",
          "content": "a5285506334e1920f68248cb5b90db069979fa5d23260aade0696f5b5ee751f06f4b19ede39378afab8723b6ce16372b975bff65c5f19aea15765ee3238f9c26"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/os-distro-metadata@5.1.2?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/support/os-distro-metadata/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/support/os-distro-metadata",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/vuln-analyzer-checkmarx@5.1.2?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "vuln-analyzer-checkmarx",
      "version": "5.1.2",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "9bc35c7a8f9d936a3d75b18243d3e9c9"
        },
        {
          "alg": "SHA-1",
          "content": "74c5a95d7992e67e3ac257208066fde12f68c943"
        },
        {
          "alg": "SHA-256",
          "content": "e0df9c62ccdac421be3e57a14f4f21bd36bd463d62012eccdcd69b987bba4622"
        },
        {
          "alg": "SHA-512",
          "content": "8d90fcb271db4101180ec14a800ffe85723a0294fd16a92b69773745c9525254c8e27568916cd7d91f3ba29904a72809681f7fbcc951b1ba2819710f70358169"
        },
        {
          "alg": "SHA-384",
          "content": "2399d878be29fce4119b539f34dce92bf5ffb20e17c77528d3a53309fe701f1c65bff266673629a7ec05fe258ed01a92"
        },
        {
          "alg": "SHA3-384",
          "content": "9c57b4c37c592a4ccba2e8e37040813780e82afa0c666eb89ede9c185dff91cd2c01d9b695a08350efd7581d282a486c"
        },
        {
          "alg": "SHA3-256",
          "content": "d4ed190dec7fd7cca4472624d3511c378c1cc3f0855501dede8926490cc71da7"
        },
        {
          "alg": "SHA3-512",
          "content": "e43551d81cffb879c07d8dfd9c10f66fa6c5cda5a3730f97bf30e7961ba91209a739b425baedd6def09b234934a4bdef1e840a10f101ae60397fe7af6db68294"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/vuln-analyzer-checkmarx@5.1.2?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/vuln-analysis-parent/vuln-analyzer-checkmarx/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/vuln-analysis-parent/vuln-analyzer-checkmarx",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/package-metadata-api@5.1.2?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "package-metadata-api",
      "version": "5.1.2",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "9d979eaa41f9fa91095d0fcefff37443"
        },
        {
          "alg": "SHA-1",
          "content": "aa81fa9aba4faa1debc623c0cc7ae754ad03d631"
        },
        {
          "alg": "SHA-256",
          "content": "7a3395f329fad29d94a8350c0f7efbc633ecded45c63dcd0cb062e153bdbc8a3"
        },
        {
          "alg": "SHA-512",
          "content": "210e2996441741e812c7d0d8a887853f72697061817be2ace8ee32f98dd8ab395a227e821b2f1108b4d89614505a28a5c67a8d82db9ccf1fd3f843f2540d146a"
        },
        {
          "alg": "SHA-384",
          "content": "2c423d022be13106b44f89b62dd9c0f07d391121352f7ca3013034bcf821a66f1216f710a98affd6edbc3313772ef9c6"
        },
        {
          "alg": "SHA3-384",
          "content": "8c5f4310d9c3ae5f34bff7613933a1ff5ed2108a6bd2d981ab65cf48246759c51c381d99733080655b84ba9995a6af42"
        },
        {
          "alg": "SHA3-256",
          "content": "72289ba9b81edb10d0a9213b3352a8c90e1866c0d370cea5f86da1e23447346a"
        },
        {
          "alg": "SHA3-512",
          "content": "5b402a3b27924af70391dc5b5f30501a463be6b6c9afddb791933d570ce9792932ef5e4e4483143f3b0de4376f9e21f3af2ff42a25953e2a1ddeea2f399aca73"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/package-metadata-api@5.1.2?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/package-metadata-parent/package-metadata-api/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/package-metadata-parent/package-metadata-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/package-metadata-resolution@5.1.2?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "package-metadata-resolution",
      "version": "5.1.2",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "34c94810247e9b327c52d553fb5bd14a"
        },
        {
          "alg": "SHA-1",
          "content": "a43538fd7353365b7b973c8192730fd736688b8d"
        },
        {
          "alg": "SHA-256",
          "content": "ca411eb706c093cf3319a135edbf23ba11a986ed032c83640bf2250ba0caa76e"
        },
        {
          "alg": "SHA-512",
          "content": "051f229adcaddae216f38dfdea9fd1df541e03649573f8a3ea063368e2d917bccf4e7976105f55a304145f43adbadaf4fe7ee0945d775c467466e260c9ace61f"
        },
        {
          "alg": "SHA-384",
          "content": "2a0193062822bc8b5241065435fd5f81bcd3cac5601309231045928e97f756773da664c0ca4b96374121cbc67e8b81b6"
        },
        {
          "alg": "SHA3-384",
          "content": "5817c1f250366ed6313f114e0dcd863f5cf926e3b2ad4e3f6288e9ac4147c5d441a5e05370097117e2cfaaaaac0346bb"
        },
        {
          "alg": "SHA3-256",
          "content": "854a2abee6ed752ed0a12a589574c9c3df52f9682d60e9afa3bc0680a5f27c5b"
        },
        {
          "alg": "SHA3-512",
          "content": "229ad3f6387793e7b29245920d9d2f7af5c45b0d9f2e17b78d780f490fa5080420f267adad01710a32d753f314f2940e7aa7bb69138216b4ffd5a8401d712f6a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/package-metadata-resolution@5.1.2?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/package-metadata-parent/package-metadata-resolution/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/package-metadata-parent/package-metadata-resolution",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.brotli/dec@0.1.2?type=jar",
      "group": "org.brotli",
      "name": "dec",
      "version": "0.1.2",
      "description": "Brotli is a generic-purpose lossless compression algorithm.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "4b1cd14cf29733941cc536b27e6aedfa"
        },
        {
          "alg": "SHA-1",
          "content": "0c26a897ae0d524809eef1c786cc6183b4ddcc3b"
        },
        {
          "alg": "SHA-256",
          "content": "615c0c3efef990d77831104475fba6a1f7971388691d4bad1471ad84101f6d52"
        },
        {
          "alg": "SHA-512",
          "content": "d4cd2b33f7c358012ff01db6a13ebfe1e8051a580698bffcd942c47451012cf53ce49a400b1c8bf7502b01e631d79d7c6417202a145622572d79fd145ccde61a"
        },
        {
          "alg": "SHA-384",
          "content": "d6b8ad9d0ee6baf8c3a29c1dc2911eaf207352e2c7de893a0185e987e7eae87827890c1d4dbf31c46f25846fbcdc08bb"
        },
        {
          "alg": "SHA3-384",
          "content": "d16c32130bf6b168ff4c8a3dedf1b17787f8d6f0eab9de21e51ed3ab1e7d85925dd02315972f6ca3a4493357aad545cb"
        },
        {
          "alg": "SHA3-256",
          "content": "962dc76a5c487de8d34308860ab65927bf91f50ccb12f37bffb036a7a05145a4"
        },
        {
          "alg": "SHA3-512",
          "content": "a82a3f79b57d30613606ca51dc432b097fa75aab5c87fb45eabec6d80ddeff1b329100b325bb07005aebaec166952c4599a863d4bfd5a684bad21103a2046311"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/license/mit/"
          }
        }
      ],
      "purl": "pkg:maven/org.brotli/dec@0.1.2?type=jar",
      "externalReferences": [
        {
          "url": "http://brotli.org/dec",
          "type": "website"
        },
        {
          "url": "https://github.com/google/brotli/dec",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/vuln-analyzer-oss-index@5.1.2?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "vuln-analyzer-oss-index",
      "version": "5.1.2",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "19bb148f94e37d6b11fa83357ee1bfd2"
        },
        {
          "alg": "SHA-1",
          "content": "b2453096e4df2fc281f86d90268a1e992a7e3872"
        },
        {
          "alg": "SHA-256",
          "content": "1dc41aeae56684e50fde822ea30cc01aa18e8accd5fa2904086e0e087d5e78a2"
        },
        {
          "alg": "SHA-512",
          "content": "3a7abe648f90100c025c845dd71e8d86bb88ed9a236258ac80269de1905ae85b2af65cafdfd13ec170275250655e221396420495521e713d66e1fe51891f3437"
        },
        {
          "alg": "SHA-384",
          "content": "ff708a337bb3179f18e6bce7572cf6b78bbc10eb37a00220503ef78e4372687c2dc6a0523905a4dec3968643574f1f69"
        },
        {
          "alg": "SHA3-384",
          "content": "1149b3a6346205395d4b6e6fd90cc345397396b7b8d15feaf69d5797a850c3ab1a0f4a81458aa6c2d7323f0ea35dc17a"
        },
        {
          "alg": "SHA3-256",
          "content": "9d9c5741d87fdea3b7708ab76f1d8c026af3a73a2f05eec4e7d906605867ba8e"
        },
        {
          "alg": "SHA3-512",
          "content": "07d670176e626e24b4346ff6784a2b58d3ba52228ab12edf4a3b648ddd5f9b4451457c4398884eead621afe2bcf4051b7ab0fce381cad8eeb3ed79d88bf3cefb"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/vuln-analyzer-oss-index@5.1.2?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/vuln-analysis-parent/vuln-analyzer-oss-index/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/vuln-analysis-parent/vuln-analyzer-oss-index",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/vuln-analyzer-snyk@5.1.2?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "vuln-analyzer-snyk",
      "version": "5.1.2",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "0b90d0895a849c43abc2b19c16056ea3"
        },
        {
          "alg": "SHA-1",
          "content": "69b76c72ed26445f51faa6d5a61e9ded6f22c0b8"
        },
        {
          "alg": "SHA-256",
          "content": "91b2981e5dc3a509dd10e3726b0bf0c6710715d38240c69ea16a99aa19208179"
        },
        {
          "alg": "SHA-512",
          "content": "0026543a4f4577963f6c8d9dcd5334db270b733b42bb2318675a441cc5214b995211d99659f3de7197ef2c83cc9eb6d001ff3a7609efb149be869d1ce0adf944"
        },
        {
          "alg": "SHA-384",
          "content": "4e84a19d1c651de7ab21ecdbe218bf147edf6f99fc2f075d799b8a9d6743e5cee518760ac57524931e8ea6a6020812ed"
        },
        {
          "alg": "SHA3-384",
          "content": "2506d30f918fa51680ccfca1c884b767c7e73acad11323f3cf668db989c648f1f0a2a5cbc81418896c8c383ef7385b2f"
        },
        {
          "alg": "SHA3-256",
          "content": "5d1d0db89c3010228e3d02e62048b8360b17adc495e7d549d9c01c64a53b76a3"
        },
        {
          "alg": "SHA3-512",
          "content": "3a8ceda43022f841e5f71f7bbb9f88c34f110af85c256cacdb2e46d25625b88a92045b5419a4bf91afe96a415afc5faec108de4809e0d0ea78e894ee0a0f1416"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/vuln-analyzer-snyk@5.1.2?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/vuln-analysis-parent/vuln-analyzer-snyk/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/vuln-analysis-parent/vuln-analyzer-snyk",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/vuln-analyzer-trivy@5.1.2?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "vuln-analyzer-trivy",
      "version": "5.1.2",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "20597716821691bf80d06d2fc0537efd"
        },
        {
          "alg": "SHA-1",
          "content": "0c4757b4e70d6e266fa7629f63536809cfd6e6d6"
        },
        {
          "alg": "SHA-256",
          "content": "2d0cd625bb340db52bca910b6cbe900a75bef3cf0acfa11ace11425a9755b2e3"
        },
        {
          "alg": "SHA-512",
          "content": "bf1f9afad9797a5db47bea6bccc75da9777550daf8a2c8cc6daa328bf6594203256d0d031132416a8a71bf1aa3557f23469fa46813f43a84e998a5a12cee7c60"
        },
        {
          "alg": "SHA-384",
          "content": "1dce7083edd44958ed57033efb75729d17a7513fed55be2179abe068983de7ae9a0ee97708eeee545946d3d0e5cadee7"
        },
        {
          "alg": "SHA3-384",
          "content": "a9e59edd6b130eb585355327eb71fd638c08b2652b4b954dbaff8514277ab5297a9581dda0b4b22fb89aea3d81ec5208"
        },
        {
          "alg": "SHA3-256",
          "content": "bd0d8d0f724b55a410b9a7a2403573fa5d55dab0171248eff886cd7bc450c46a"
        },
        {
          "alg": "SHA3-512",
          "content": "0c970a3922dfbc1480e5ad83389761e273e2a044cdc5ad3aa89ae262a2baabd0ee3ffc9939d174949081d3a41b5353cbdc450ea9a951997e5907f2992fdefe2e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/vuln-analyzer-trivy@5.1.2?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/vuln-analysis-parent/vuln-analyzer-trivy/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/vuln-analysis-parent/vuln-analyzer-trivy",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/vuln-analyzer-vuln-db@5.1.2?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "vuln-analyzer-vuln-db",
      "version": "5.1.2",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "5d6e7feaa68d94a6fb99d6292bd64690"
        },
        {
          "alg": "SHA-1",
          "content": "c5765653662cc181707981d4042f072a31cd6a85"
        },
        {
          "alg": "SHA-256",
          "content": "0aa4bdef9b7e3f5cfe26b860446ae65f336839f8d1777ad189e77deb354ae40a"
        },
        {
          "alg": "SHA-512",
          "content": "69a08ce022e0f24dca15431d9cbbbbe27b59a983c0ea3d34aebb94dc12cebac9e864a42e9d5d43494817469db7c72bfde8e7033fb0b1b782917a2e6b8b3ad711"
        },
        {
          "alg": "SHA-384",
          "content": "66ba6d9692e0ff73bd54c835351b91581234266c056685a49f895342b708e2b573c408697f6b9650443f89cdd47b3927"
        },
        {
          "alg": "SHA3-384",
          "content": "78a5d4fef153ce98bc378a766c2d89d7e24e4a1cddf8e09df2597b8c70fea9c5f504810b9578c7ea0f6d15cae9cc05f9"
        },
        {
          "alg": "SHA3-256",
          "content": "8d9d385b2cd9c4401c59d24c940ef0f00d0c6850f204649e180a3278d78ee89e"
        },
        {
          "alg": "SHA3-512",
          "content": "f79728264b4f5200935d04eec5d878c76e123005625672aad7d5f2cf72bec40e326c04bc3d3a16079d2e9a541100cc27aefda87233d3d39a1f983563b6479f5c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/vuln-analyzer-vuln-db@5.1.2?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/vuln-analysis-parent/vuln-analyzer-vuln-db/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/vuln-analysis-parent/vuln-analyzer-vuln-db",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/dex-engine@5.1.2?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "dex-engine",
      "version": "5.1.2",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "c41a526b1972e98e6d0e42ff45fb0201"
        },
        {
          "alg": "SHA-1",
          "content": "be26146c48d7420fe4055e0a61a6ae3c6a6e4782"
        },
        {
          "alg": "SHA-256",
          "content": "8a2c77bb2a6824c0ac973fc85a2ac94af07e706653f983355206bd4ee4cf3d39"
        },
        {
          "alg": "SHA-512",
          "content": "1f1cb8c0af08692c5fc6f9eebd5c83ceb5f1167b2ad684dbfd614cad57f38c3b373b4fe4281842dfee71afd6822cdb24f41989080480b216b2d3ee533cfabe0c"
        },
        {
          "alg": "SHA-384",
          "content": "9372cb871513e1704216de85905ebf6b835f57fd4c83b654b325aed28075ea410efa563db2336e8d8764a3e553bf2369"
        },
        {
          "alg": "SHA3-384",
          "content": "a3ec8da55b32ec3784621277c324e9eafa5bee46aebde53eaef2b3c6a5b6db6673dbe69af79efed7c7725b450af184d0"
        },
        {
          "alg": "SHA3-256",
          "content": "e12b694c9546ec592ce1862a8e0015b7914f571844331fa269d16eb3939f0811"
        },
        {
          "alg": "SHA3-512",
          "content": "a285c06654d3107ef45e6bf984b1fca7e8d81627d553fcaa87fa44712bcb5c006d3d941ee74441fb28f191ea0f090016fcd5ebd1fb83437410b3ec911b3f78bd"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/dex-engine@5.1.2?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/dex-parent/dex-engine/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/dex-parent/dex-engine",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/dex-api@5.1.2?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "dex-api",
      "version": "5.1.2",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "b821262865cd5469b6b94e202ef9ba8e"
        },
        {
          "alg": "SHA-1",
          "content": "1d35ed272437c96c3395ba93c6d67bf726ceb106"
        },
        {
          "alg": "SHA-256",
          "content": "1b85ebec5e3139c67a96b7802b66b8307c7e2e3e3510b56aed1b7c844bbac65e"
        },
        {
          "alg": "SHA-512",
          "content": "4afdeaff6e52ae3ad0c39f95d9f1fccadaa62f199f30b20c307f67cb516eaa19f718625b4827c4ec84cc32fb1b2ca7a7d4d4b7e37ff912bed546ea5ec1425fdf"
        },
        {
          "alg": "SHA-384",
          "content": "ec162765486c218fe2bdbead42a8dd7eb1c1eecf97a28619292d99b35f9980dc041822710e7d5d5a3f99f80c7a7bf905"
        },
        {
          "alg": "SHA3-384",
          "content": "aa56fbcd92faa72743f14d770775fb6957e841145e6d21a30de98fe7e799c26537efb6c2c7d7a0e92bb81fa5e6e8b548"
        },
        {
          "alg": "SHA3-256",
          "content": "13b0d18aaccff1090fb8ea353a751adda93a68c3d7dfb6103b232634487b1fc6"
        },
        {
          "alg": "SHA3-512",
          "content": "45a177855ea84bc8b1a45c90be9a7e81284c3b5f0538c1102defa74f830ab6911c87ede822e40a26b15905623724c055b7355111e16a302ec5e874efddf11239"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/dex-api@5.1.2?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/dex-parent/dex-api/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/dex-parent/dex-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/dex-engine-api@5.1.2?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "dex-engine-api",
      "version": "5.1.2",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "f40db65e3e48d886b022f2fd4fb9a5f2"
        },
        {
          "alg": "SHA-1",
          "content": "62bc09fb4107780a2d157da94394e8061c42ac03"
        },
        {
          "alg": "SHA-256",
          "content": "d9c59c72302d977cbd5640ec4b3862ee5964354fdd98de56b2699e552e9cdef3"
        },
        {
          "alg": "SHA-512",
          "content": "3c789e00988d9b9249fded02410a1efae86928ba2348c58b2d5dbdae50f90d45ef3d9f0175b980a83354c74238ee52a8a0f9544a7fac39d25f9599a0c714e6ac"
        },
        {
          "alg": "SHA-384",
          "content": "7871e395b7347f5eaedf20e4bfb36f3793b8a2700bb57796157c474dab5f8107043355613ca4108cdc42a36f8100d0d7"
        },
        {
          "alg": "SHA3-384",
          "content": "8bb3d04fe2db9e7673d756f666a791caf8943b33579fbb754cb79eb31a02023f8c7343125366a55ef6c4fdc2fd9b650a"
        },
        {
          "alg": "SHA3-256",
          "content": "590121517bf9046ee54ae91def7fa30fb95c3adf41938bb250773c9261be3e01"
        },
        {
          "alg": "SHA3-512",
          "content": "0d4cb822dc6980a09ed3b08dabe520b3abb704a1960bcea9c8f8fe72013ad82cf1865e2b00b428704779f1b7f7f161a353fd7022bdcca5f065ec279ff333b53c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/dex-engine-api@5.1.2?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/dex-parent/dex-engine-api/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/dex-parent/dex-engine-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/dex-engine-migration@5.1.2?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "dex-engine-migration",
      "version": "5.1.2",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "0d3718d0a2e39e6dafb039a59a08c949"
        },
        {
          "alg": "SHA-1",
          "content": "b562d9745dadbe1fdbbdc24c9819278784ae18c0"
        },
        {
          "alg": "SHA-256",
          "content": "677a734bd4c6e39aaea5bf424f0bccfefc2937d8f9bbb6a1c0dd7b483957c467"
        },
        {
          "alg": "SHA-512",
          "content": "d6aa080f6849d9b905b04657f0e7b71307f576e9c88f26447a99d440859ed452dab7bf640e5d24d3edb646e0473086e6b4948981769fd15736f517e3e621d478"
        },
        {
          "alg": "SHA-384",
          "content": "0f4c826ed7301c443c7368bd9c6db15f1133534d8bf74746a5ddf1acbfa46c1461cdf83218f479815dc62c3c9400ed9d"
        },
        {
          "alg": "SHA3-384",
          "content": "90b6109d7d7c79b53cf6b8f92daadcf45388490e663826a55dcbfef295d39fb73e6487edb2a7549c1b255134dcc2882d"
        },
        {
          "alg": "SHA3-256",
          "content": "9b06d559d64914c6660a2e6080afa6b8e902dc5af92bf15640a84e1c202c0862"
        },
        {
          "alg": "SHA3-512",
          "content": "81979d615e2a6a2eea84524ee6f31dc54f36d58b5c711fb89846ae64f1570c0014751cb50e862ff7988b21d930c94d3ec19e98739f6a294cd45f231bf8898d00"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/dex-engine-migration@5.1.2?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/dex-parent/dex-engine-migration/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/dex-parent/dex-engine-migration",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.github.resilience4j/resilience4j-circuitbreaker@2.4.0?type=jar",
      "group": "io.github.resilience4j",
      "name": "resilience4j-circuitbreaker",
      "version": "2.4.0",
      "description": "Resilience4j is a lightweight, easy-to-use fault tolerance library designed for Java8 and functional programming",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "5e142f710747b6d4746413aca6757222"
        },
        {
          "alg": "SHA-1",
          "content": "10b06bc2b679f5682f5528b0058ba1a166734db5"
        },
        {
          "alg": "SHA-256",
          "content": "31ab1d15570357271b8c28d82b2f412c5f36a81ac253145aa32177c4f087efdc"
        },
        {
          "alg": "SHA-512",
          "content": "b5d23f8ddabb8d22585e93db1d5ed0b11cb2807c1279b45c74988eaf621e87324cd9a74deaad8b17c6b5a7219f2a17b32550be478c0621cb9fea762f3f5d867c"
        },
        {
          "alg": "SHA-384",
          "content": "826513581ccb029b95c9fb4b579035131a3166e6d99381b7084875fe2997545dfc41956f9449f3f4963d233b71f9d647"
        },
        {
          "alg": "SHA3-384",
          "content": "6f25185fccf89be43a7aef0349ce69a272ef09bc179d8394932bf473cd17650d143cdc6a24a3aaeb77bb806be018b630"
        },
        {
          "alg": "SHA3-256",
          "content": "6de361abc2ecbde73d99917ee11cc808c12f72f4a4c0da8682835675da985f4b"
        },
        {
          "alg": "SHA3-512",
          "content": "3baa1529e89d34844eab621f170ff4ea78771f15bdda9a5ff50ae1095b3d1c579b4ca45bc169c654f8934118325bd82ea6cdb3977d06d76218b2c128591b9a44"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.github.resilience4j/resilience4j-circuitbreaker@2.4.0?type=jar",
      "externalReferences": [
        {
          "url": "https://resilience4j.readme.io",
          "type": "website"
        },
        {
          "url": "https://github.com/resilience4j/resilience4j.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.github.resilience4j/resilience4j-micrometer@2.4.0?type=jar",
      "group": "io.github.resilience4j",
      "name": "resilience4j-micrometer",
      "version": "2.4.0",
      "description": "Resilience4j is a lightweight, easy-to-use fault tolerance library designed for Java8 and functional programming",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "b89d1f870641d912bbb350339b63bd94"
        },
        {
          "alg": "SHA-1",
          "content": "4d81d22237b84c5c075f805a0c7d4640bbd7ca33"
        },
        {
          "alg": "SHA-256",
          "content": "728613147bbbc0c329f69f5423b760778322e2f9af345cb0bd69b3fc89b17e88"
        },
        {
          "alg": "SHA-512",
          "content": "ec0f842b57a23b8536f9672c0c3eeb6831c9e9951be5862141ee029c6ff51994e9c3a046343ae985286acb3ab35766a770507fbaf35735aafc269fb28cf4fad4"
        },
        {
          "alg": "SHA-384",
          "content": "2187703d3e99f7f8b86f5d3280b3a247721752c38ef0dab42962729bf3ef6d88aff5eb34c6349e4b3f9e524d77ff1433"
        },
        {
          "alg": "SHA3-384",
          "content": "38f298fca66df6f9421b7cc92cfa13a537c49f57aa3651dd680684ca452fd764bc2e51e0d00b5774eb45b6126ebcf0da"
        },
        {
          "alg": "SHA3-256",
          "content": "2a57abc1c0ab88009c34b48f4135ce4e23974fc37deb33b99e4310cb8f0ff0a4"
        },
        {
          "alg": "SHA3-512",
          "content": "8b0f573a05168383121e9590c73c3263b43e9fc8f84b6813034baf07841d23661a965aa0abd348bc1c5b0166c9d3e50b896c8462b9d9381d60a7d1c08a10c9fe"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.github.resilience4j/resilience4j-micrometer@2.4.0?type=jar",
      "externalReferences": [
        {
          "url": "https://resilience4j.readme.io",
          "type": "website"
        },
        {
          "url": "https://github.com/resilience4j/resilience4j.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.github.resilience4j/resilience4j-bulkhead@2.4.0?type=jar",
      "group": "io.github.resilience4j",
      "name": "resilience4j-bulkhead",
      "version": "2.4.0",
      "description": "Resilience4j is a lightweight, easy-to-use fault tolerance library designed for Java8 and functional programming",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "dfd76f43ef9c2d7912a99c128af344bb"
        },
        {
          "alg": "SHA-1",
          "content": "eb8ba5861207fcaec13468eab5a4dbe1d9e9e66f"
        },
        {
          "alg": "SHA-256",
          "content": "d718b601cedd94946c7572caafac1d93f5c9695bad61e0e4b6518e3f5f7c6ccc"
        },
        {
          "alg": "SHA-512",
          "content": "00b42a5110c37bcef4df56a807882f1d6919ceb9fc53e0daca2564258d7dafd299925f2f5ef9ac65c076c2757a934f48e88028f7bf839a956d44350ecfd4d28e"
        },
        {
          "alg": "SHA-384",
          "content": "03455782043e549dcb307f728281cfc8ecb4a8d6dd96d944db0d8cdb9bf80bed43cef1370b65f32e71dc52505a0803f1"
        },
        {
          "alg": "SHA3-384",
          "content": "af46a0541107931e8f5f7995d0f40f35914c66b8944f56417aff9605d29f888f571a1afcca1ea81f384eb747cd350e40"
        },
        {
          "alg": "SHA3-256",
          "content": "b00fd36b17bfb3db6b0ee095f9980af4829df095fdf326f78b0a26163a4d3916"
        },
        {
          "alg": "SHA3-512",
          "content": "de367c0a1d1bfe4c38333f8668567416adee1eba420e80c4524842180da9e2dc09579d4b2063edbab2da1e468f1fd093e42adfe174b0afa372cd33f421f9146c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.github.resilience4j/resilience4j-bulkhead@2.4.0?type=jar",
      "externalReferences": [
        {
          "url": "https://resilience4j.readme.io",
          "type": "website"
        },
        {
          "url": "https://github.com/resilience4j/resilience4j.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.github.resilience4j/resilience4j-retry@2.4.0?type=jar",
      "group": "io.github.resilience4j",
      "name": "resilience4j-retry",
      "version": "2.4.0",
      "description": "Resilience4j is a lightweight, easy-to-use fault tolerance library designed for Java8 and functional programming",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "0cdac2f0d96184c09dfe3e4f1705e963"
        },
        {
          "alg": "SHA-1",
          "content": "7072ed9351dc3a38a7c5a4a1ca21d3355e1f6453"
        },
        {
          "alg": "SHA-256",
          "content": "13cd52c89b69b9dbd68188877f16bdbeb3ae524d351a2d947f31ae07684c420a"
        },
        {
          "alg": "SHA-512",
          "content": "1e60cc69111eee4fe1d18d9c36e1baad62cc6ea06aa065cdce461fbd3cdc8c625f4ef818750def5b31469a80af2f8f52d4441aa946205b3203cafceed55655c0"
        },
        {
          "alg": "SHA-384",
          "content": "a1373917623fd647255c0c29533604d69d4f8395b8b7c50c95830447871d52d983df4a16a58990f9f7d6c242fdbb2903"
        },
        {
          "alg": "SHA3-384",
          "content": "b405c2ddefb6b78aa8d936c5c581e62cfdefc719c892da1625d82a624a6ac5afc60aa78251ccccbf056e8b6b4a4ce766"
        },
        {
          "alg": "SHA3-256",
          "content": "320682e81e53f54397c029244f5b1ee1b0cd589f88e57b00643e300c924f4623"
        },
        {
          "alg": "SHA3-512",
          "content": "9bc37b4a7fc968fc2c2f6f17b1083208b95a82aa5f826974a110cd9b057040071f02b850b32099f7657b20e36198da8eec5dd46e203a574338428d2f84d0845e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.github.resilience4j/resilience4j-retry@2.4.0?type=jar",
      "externalReferences": [
        {
          "url": "https://resilience4j.readme.io",
          "type": "website"
        },
        {
          "url": "https://github.com/resilience4j/resilience4j.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.github.resilience4j/resilience4j-ratelimiter@2.4.0?type=jar",
      "group": "io.github.resilience4j",
      "name": "resilience4j-ratelimiter",
      "version": "2.4.0",
      "description": "Resilience4j is a lightweight, easy-to-use fault tolerance library designed for Java8 and functional programming",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "6a450ca57c1c0172ffc32c2355d4885d"
        },
        {
          "alg": "SHA-1",
          "content": "4017079c1f73b0cc73fcc53a25306f3f8743e64c"
        },
        {
          "alg": "SHA-256",
          "content": "09a3c33cced3e1135cefda8667914b32b7304429c509b07fca771bd92d0c1780"
        },
        {
          "alg": "SHA-512",
          "content": "d50e1bcb0700963bfe2b4802301cdf2156a553f29caae07aa8192a44e0a2abac703fa190b1527a9aeae1412ae9215d701b494220ee3f3edfdeb9d3b3652f71ae"
        },
        {
          "alg": "SHA-384",
          "content": "6ee2786d1c40380381393adb6beef91b978bc9ba66647b16316ab448e3c97e2eb486521ebfdb965c5db6aae7c72e0fb6"
        },
        {
          "alg": "SHA3-384",
          "content": "189831d7d92301ca5f1211909d8787cb4a2fa6d9f267e3af9b0d9900dfe718ec75130d26110c21b34c59674e1f2720e4"
        },
        {
          "alg": "SHA3-256",
          "content": "8ac8f08bc4c21b1dcff1e8561364e5c7149523cdd658cecc426eb9fcfc4114d0"
        },
        {
          "alg": "SHA3-512",
          "content": "c078763d56a7190c102719fac6c012bd4c4d6e4e1b61c8201a8ed9909b4c7736c9d681163a0c46d99251ac1d2186d158ffd6539666bccf8b5ac759825dc2f755"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.github.resilience4j/resilience4j-ratelimiter@2.4.0?type=jar",
      "externalReferences": [
        {
          "url": "https://resilience4j.readme.io",
          "type": "website"
        },
        {
          "url": "https://github.com/resilience4j/resilience4j.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.github.resilience4j/resilience4j-timelimiter@2.4.0?type=jar",
      "group": "io.github.resilience4j",
      "name": "resilience4j-timelimiter",
      "version": "2.4.0",
      "description": "Resilience4j is a lightweight, easy-to-use fault tolerance library designed for Java8 and functional programming",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "2d421c59f3f87eaee243997f529cf5b4"
        },
        {
          "alg": "SHA-1",
          "content": "28351433fa75cccb0e0c8154676a427b5b4a3340"
        },
        {
          "alg": "SHA-256",
          "content": "946237017a5f52a878cfad8227c3eb6b957482be30d25a409cb8004e13237d38"
        },
        {
          "alg": "SHA-512",
          "content": "74e100e06388785058cd506459a0190bef879953dfd2ae2e3f16dcc83e76c5ecff62880d8ac7b96fcdf4087e863f4f3423b44290010a15a5b64c60808d2544f1"
        },
        {
          "alg": "SHA-384",
          "content": "586453333996b3d2b8150277eb41dbb7e2146b8e2a877e7cf8932cdddfe8a0e7c690335ba6e53e7051b0265a5016ecfa"
        },
        {
          "alg": "SHA3-384",
          "content": "b99c965e83e8f57bded1e66856b1278525947bea15c905dda5e13333ab9b82ebc5d0c27f14e6a8961ee32a0861995772"
        },
        {
          "alg": "SHA3-256",
          "content": "8709bedf51af90c9ee3c31b64fb893a199ef5defe54670507825b15551312737"
        },
        {
          "alg": "SHA3-512",
          "content": "865aa0e62b990fda80679824ae9ba32b631fe6cd72ea437201e0ce43bbae1b3a5c23fcdfe7454736822a7e6a38ba68456494f694775fc7b06a1077847357e988"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.github.resilience4j/resilience4j-timelimiter@2.4.0?type=jar",
      "externalReferences": [
        {
          "url": "https://resilience4j.readme.io",
          "type": "website"
        },
        {
          "url": "https://github.com/resilience4j/resilience4j.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/file-storage-api@5.1.2?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "file-storage-api",
      "version": "5.1.2",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "b562b0821ee1172c2fd9bf05cfcdbee1"
        },
        {
          "alg": "SHA-1",
          "content": "add2ce62f4f9d17c28c843f4a1a5a9e4e7d143e8"
        },
        {
          "alg": "SHA-256",
          "content": "67ec48a42777587821cd2ff18fc299c7c19c38077494f286d8a9201decb759dd"
        },
        {
          "alg": "SHA-512",
          "content": "5866729482c9972b2f1469a550c008b0132914c30cf97c1b93ef6131f3d0eb6ed867396b1c4183bc73836e8922108563db29065b9e15ce3afb41ad3f72fc8132"
        },
        {
          "alg": "SHA-384",
          "content": "2c6e5e9b4280b95ba2a74c4388bf8084f39f6dc21510952bd6f2485d6edc4587455f9e52f2674a6147c1c130c2d551f4"
        },
        {
          "alg": "SHA3-384",
          "content": "1dcf2367078449e1c67e84153670e78a01931be950134af2802d35ae8d1f50b14d11e0ef8706391f832425f4af0e60d3"
        },
        {
          "alg": "SHA3-256",
          "content": "55e17f270fee1158b86e59c39fbf19fa924c118a697bd7407ff8abf991297072"
        },
        {
          "alg": "SHA3-512",
          "content": "1d9714bf7862447303fe812794d1f68007027135fcb847382fefe65c725b8778b596c54932a257a66aec92f1e3f2303b189cebdef03f61486a16e95ccd32c0e7"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/file-storage-api@5.1.2?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/file-storage-parent/file-storage-api/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/file-storage-parent/file-storage-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/file-storage-provider-local@5.1.2?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "file-storage-provider-local",
      "version": "5.1.2",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "fdf00ec32a8c908623fa726aeb4075ab"
        },
        {
          "alg": "SHA-1",
          "content": "6febde67748021d301dc78bc245e56198fe9ab9f"
        },
        {
          "alg": "SHA-256",
          "content": "a8d7df98b4f8ea939fb8bdd4e903dcc44379642281a9d848c92cbb05611ac429"
        },
        {
          "alg": "SHA-512",
          "content": "9d171a2745c2bb28d484c747ba7666d14693b7131067fa2e5a95bbbddc0e2e97ec2fd5f3fb59f863d342182af69821020c7d08cc1309c7e800720c73aa5d47a8"
        },
        {
          "alg": "SHA-384",
          "content": "c74d20177b29b6e3423b49969f4f116d96a5e7299455e6c4eff56d1d14f46e4534fd436002538d6dfc87acac34b9cf17"
        },
        {
          "alg": "SHA3-384",
          "content": "0a24b1038609f64b1917f627aaeb722df24cc4cb967c10ab38b5f80e761bb9020c3090b5e12f8696825406ac0f140dfa"
        },
        {
          "alg": "SHA3-256",
          "content": "5ca6986a435594c77b2f906dd5c9c6c8d043f1a4ce678731e2f62434eaeae2a9"
        },
        {
          "alg": "SHA3-512",
          "content": "4be821a192796f751131a18e727a4a8fe2fec5ccf2d023702992ecc659a7696c7bf8591593dd4995f3a8c7629295d5cbafdfd9d795d1b8879983194fccea841b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/file-storage-provider-local@5.1.2?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/file-storage-parent/file-storage-provider-local/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/file-storage-parent/file-storage-provider-local",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.github.luben/zstd-jni@1.5.7-20?type=jar",
      "publisher": "com.github.luben",
      "group": "com.github.luben",
      "name": "zstd-jni",
      "version": "1.5.7-20",
      "description": "JNI bindings for Zstd native library that provides fast and high compression lossless algorithm for Java and all JVM languages.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "3c8c50422fcae2724b356e5d94806dcc"
        },
        {
          "alg": "SHA-1",
          "content": "d83ac64e8d2bf40ed2c40f5bdfa3b9ec88c63003"
        },
        {
          "alg": "SHA-256",
          "content": "b9995fa20dce1007b8c4bead9532776088a44be0a228a2fa71da8d8ce70d797e"
        },
        {
          "alg": "SHA-512",
          "content": "69828a7a6640d86c45cf3c062cd949340408d81b8194f01cc99931ee7b772688351f38a3e8ccb352fdc5614b6fdd858f6ecc0d01bdbdf2fdae0e7eb83db5b970"
        },
        {
          "alg": "SHA-384",
          "content": "24e43da4fc638cdd13d5be988e95f7372787bed37e23d12ab1cc9c2e7a371b99e9fbc6cd320d484380b572e2ded073be"
        },
        {
          "alg": "SHA3-384",
          "content": "eb640506e27255ecf13031e6c69955126448e8c76659ca06b0657d1cb3e38a9c274c4774ceda2a637d3f6d719c0ece02"
        },
        {
          "alg": "SHA3-256",
          "content": "adfbf563a7b4cbf5c550cfe42d3aaa21cf46a51a5abeaecf15f61d5c0a7aadf1"
        },
        {
          "alg": "SHA3-512",
          "content": "232425fc983e9c1331cb1d2fa5be8adec8d4832b3317c5272052f7e9b9f4ee9a8e7a64205b4f7253dd367e263d6de3ff5ac1ac8f50946bd29470c893a5aee7cb"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause"
          }
        }
      ],
      "purl": "pkg:maven/com.github.luben/zstd-jni@1.5.7-20?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/luben/zstd-jni",
          "type": "website"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/file-storage-provider-memory@5.1.2?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "file-storage-provider-memory",
      "version": "5.1.2",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "7a09cfe2f60dca737bae9623554f91b2"
        },
        {
          "alg": "SHA-1",
          "content": "02ff4f5327a0a370ed24c2623186fcccf85dc96e"
        },
        {
          "alg": "SHA-256",
          "content": "370bfdec0326d8cf91cb6b1d88e7fe7f14cae81939d084b6c66d1314c9be2fe8"
        },
        {
          "alg": "SHA-512",
          "content": "5ca8b11475d5dc0a8f6c163c25f8edc61c637a00d251483449e7601af4473c27a312d1106be185b50be694e2bd6056ee898658723ad8657cadff0d6d37e6dd80"
        },
        {
          "alg": "SHA-384",
          "content": "8f404d782be63be303f6273c9cdcb395d80d03183b103c81ce8786e7ee66441a5149a1a6e932f2b28c09864cf88510a4"
        },
        {
          "alg": "SHA3-384",
          "content": "ae24c2dc7a311955bee0e4be378577fbba6c41d6de1d710af99d4ec6a3a336721a93d1d19e01b4df21e75bd8b6839916"
        },
        {
          "alg": "SHA3-256",
          "content": "f65546ed7cf53230914a4698b74b66fe6e5baca5b29a82fdf76da30461d53301"
        },
        {
          "alg": "SHA3-512",
          "content": "d9eba781da64bcc1fd6a85542c3f1dc03d77d02600cf7f9013d11b013c6917160fb7ded4c33f69e536fe629b91d52c6092ff0c69b86c8edf292baf5ac12f720d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/file-storage-provider-memory@5.1.2?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/file-storage-parent/file-storage-provider-memory/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/file-storage-parent/file-storage-provider-memory",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/file-storage-provider-s3@5.1.2?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "file-storage-provider-s3",
      "version": "5.1.2",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "fca0a7e506069234b3b86cabc6d8cab2"
        },
        {
          "alg": "SHA-1",
          "content": "ea91a5534c8abe4c09dc941153ef929a58bad305"
        },
        {
          "alg": "SHA-256",
          "content": "d6f8af3bc96bdc745cdfe2aeafef221ab26c1f9d5f07edba7479f17cc5cac067"
        },
        {
          "alg": "SHA-512",
          "content": "3cccc8e0c870984f09ad00016a54c0c331adc08fe46150c838b4429d6feab3b5c723e7682e3833b88bb54acc79113f7c6b4348e6e1f97bcef84e94b812e7742b"
        },
        {
          "alg": "SHA-384",
          "content": "5d78aaaf955edbf73591a53659d65181fd4829b93007338ccbbf15a445eb34dd4f08b2cff798a4033b4ee322ad206276"
        },
        {
          "alg": "SHA3-384",
          "content": "2cc714f45bc1745defe3b632e3b443fb25328e29f4616245d52be815d97a6faa89b2df49d6307b86a37b950bddc27892"
        },
        {
          "alg": "SHA3-256",
          "content": "ed12152114208f2a3f118fa193dd0e4c0f134bb216405e25beeacad1d4e91e1c"
        },
        {
          "alg": "SHA3-512",
          "content": "f6a8178e8ae18499ce5bb180499c51188a5e3b6f82e914767d5fe2e6a37041904ff2347e30708bafe19900afde7e10db69dc4d9423dcd1c6ef331fa42c3b8e92"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/file-storage-provider-s3@5.1.2?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/file-storage-parent/file-storage-provider-s3/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/file-storage-parent/file-storage-provider-s3",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/kev-data-source-api@5.1.2?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "kev-data-source-api",
      "version": "5.1.2",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "180bce81d36f905d8b3bad37de1b8f56"
        },
        {
          "alg": "SHA-1",
          "content": "a2fb684dc2cbe713e913e5fd36a5dffaaf18315a"
        },
        {
          "alg": "SHA-256",
          "content": "8d523ce0cb2f8fd52cd5b83c3d816730f5353b0f0a0ab2e2b499180ac1d83484"
        },
        {
          "alg": "SHA-512",
          "content": "16b147e09a5ac9ff89fc01d5db8d69c506c7a98e12bbcc4b8c762107d9377c1656393a3b15e88803002570f7461b9af26955c6a100d1ed0a1978694016e56e4f"
        },
        {
          "alg": "SHA-384",
          "content": "f845f0898e3c15cb4906d8b09798617f9c10d4de63d4b2f6b72c65c8bdea1a656571ccd2d749a964779f8105e05847b3"
        },
        {
          "alg": "SHA3-384",
          "content": "32c3ca9ed60dad6e03146825cf4d8504eab2b7b24a1fc143cac25ae711b7fe306e8efb73ef8c09451b2e8fe9be961a14"
        },
        {
          "alg": "SHA3-256",
          "content": "a07fb6a32210c7b8a3dba502ff19ab7bb0333590d0dc1d8f9314250d55c36d79"
        },
        {
          "alg": "SHA3-512",
          "content": "c007666af41ba802481a79f109f72f91f25340e40885bcb28eeda2384f9e2c6506bd6aff41aec75003516ba3aa7c4950600ab40c3e773609c0d42db9b3005d92"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/kev-data-source-api@5.1.2?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/kev-data-source-parent/kev-data-source-api/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/kev-data-source-parent/kev-data-source-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/kev-data-source-builtin@5.1.2?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "kev-data-source-builtin",
      "version": "5.1.2",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "13ee82a5bd1b2324bf7beb2d9a7880b7"
        },
        {
          "alg": "SHA-1",
          "content": "dd7efa4da4dd2d97466939fd530d8352dc04dfa1"
        },
        {
          "alg": "SHA-256",
          "content": "99880fc41ede3a078240a6dab6490b7f0d2bdaacfb9cc43bc428259fdfbe3c4b"
        },
        {
          "alg": "SHA-512",
          "content": "ff50db2b76359f03ac03580e05e7ac7e8eabd657d584afa725089924029567e1661baac4f0175afd736c7bcdd226bfe02067e0132f8a6e26c86a3091868c0409"
        },
        {
          "alg": "SHA-384",
          "content": "c5aa96887c85b0338a1195b4e787eee48fbb75d7cc5a4235123887a455e7c85fcfb4dc05d4da6fdc0ac0b9354576c1e2"
        },
        {
          "alg": "SHA3-384",
          "content": "e4bdd366fff0d8f5e863f8747e9f5ea4418aa174dfe6f9c103ed28d1fe9b0c6bac432a46bf391ae9ab0132de17ffedc9"
        },
        {
          "alg": "SHA3-256",
          "content": "624ceea5a7442ee5f4cf45c72c9282e4d527b1d93085b7c019105820480ed146"
        },
        {
          "alg": "SHA3-512",
          "content": "7c9662db22116c3dc76b57efd79411d4b712e8145dafb59f47c74910f76130a8f60e515ac4cf68732e46a85d75b4862940743c29943a57814d56afdabf41708b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/kev-data-source-builtin@5.1.2?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/kev-data-source-parent/kev-data-source-builtin/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/kev-data-source-parent/kev-data-source-builtin",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/vuln-data-source-api@5.1.2?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "vuln-data-source-api",
      "version": "5.1.2",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "3280744bd0d1fc43190c220be38d990c"
        },
        {
          "alg": "SHA-1",
          "content": "11ee0f237584a88ca6533316c62cf416cd72ceb8"
        },
        {
          "alg": "SHA-256",
          "content": "5e85c82a9d3645aae0e4f5bee6aa84adc4f32e4b3336850098a2c0be1afeb518"
        },
        {
          "alg": "SHA-512",
          "content": "f0625f1947e5ee451a4d7b729d73d9c54e93e47fc98c7e945f7121666b1ec64f8b37eaaa96c82a43223d6fc410692d8e59efae443483f15fbecc5cfc4ab13f5d"
        },
        {
          "alg": "SHA-384",
          "content": "67b0d82297a63a91346ceb851ad2c0ade46911dbc8d729e8102bd8e32406111c120852ec51c4e1388ffd59f33f89f893"
        },
        {
          "alg": "SHA3-384",
          "content": "4e1850058b20a837e073c8f0f41d6e94109c2929a80f10487baae2c4648b27e77b2f811e5c464067c13dbaafb5f71c35"
        },
        {
          "alg": "SHA3-256",
          "content": "462e681a59673d20a0563118913e67b666f29f238c1918f3464ebdc3f2e7b2fb"
        },
        {
          "alg": "SHA3-512",
          "content": "a50be7a4ff5479c29a60a81d15bad283110d9ecc2cffe3cd59d604dfa252f5a709a06705eca902f4fda0a5928f6885141f559ad011ae4b3b556ad2197b4facd5"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/vuln-data-source-api@5.1.2?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/vuln-data-source-parent/vuln-data-source-api/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/vuln-data-source-parent/vuln-data-source-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/vuln-data-source-github@5.1.2?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "vuln-data-source-github",
      "version": "5.1.2",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "d40ea4242db5357bf42dc29f6e465b8e"
        },
        {
          "alg": "SHA-1",
          "content": "552e37e678d725317768c2416dd286968c92a696"
        },
        {
          "alg": "SHA-256",
          "content": "51d00c6da04acbfa852055cb42340ecf467d3f14c0847f485983a22ba2a92672"
        },
        {
          "alg": "SHA-512",
          "content": "849b3c3f9687d556ad92c7ecc2f193e48f5d27126419e199d55afafe52a62984a60b99ee65916b3c7073a13a6ef4572624cc88629ac5b7e9845f0fddc94baee1"
        },
        {
          "alg": "SHA-384",
          "content": "1c8b65d86eebfef60ae76c36cb23c0b8df8a86d49016b3137be1e5dd1e6afb4f6fc74df298047dee59c94579de25e7a2"
        },
        {
          "alg": "SHA3-384",
          "content": "6a80f943d4d1cc9783f9f3c4396eeda5dba046cc8cb1cce40d631b7c65dc1e1ca5c0e7efb5a3f2bd600de52fbfc13d5b"
        },
        {
          "alg": "SHA3-256",
          "content": "f533ac1e362212dbbb3d7a0db228213f71ca0435ace2bb341b8865b45cc7fcb4"
        },
        {
          "alg": "SHA3-512",
          "content": "1bb298c1ff96a65750b41ecfe54397ff5a126b551f4828874e6e8983064f611eec416c60fb16845aea995f93145f648988e1caf6abb8df80e5ad9322249925f8"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/vuln-data-source-github@5.1.2?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/vuln-data-source-parent/vuln-data-source-github/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/vuln-data-source-parent/vuln-data-source-github",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.commons/commons-lang3@3.21.0?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.commons",
      "name": "commons-lang3",
      "version": "3.21.0",
      "description": "Apache Commons Lang is a package of Java utility classes for the Java lang packages, classes that could be considered standard to justify their existence in java.lang. The code is tested using the latest revision of the JDK for supported LTS releases: 8, 11, 17, 21, and 25. See https://github.com/apache/commons-lang/blob/master/.github/workflows/maven.yml Please ensure your build environment is up-to-date and kindly report any build issues. Starting with Commons Lang 3.9, we target Java 8 and use those features. For advice on upgrading from 2.x to 3.x, see https://commons.apache.org/lang/article3_0.html",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "74a94a62f74cf1566767a085b3b9c758"
        },
        {
          "alg": "SHA-1",
          "content": "7bad013a5acee0a078d75fc352a906baa57acb74"
        },
        {
          "alg": "SHA-256",
          "content": "a2af247ec4db6eb8947e18e23e0433e4871a7c5d0a40e1f92e46ede54ae1defe"
        },
        {
          "alg": "SHA-512",
          "content": "839bd4a0e63a82334c46f7acad520dac56900c8c4ea3e663811c1e8863de416df2bb8ff334c407caf6cb6d20fb892c6c730d7f271bd59c5c973611ed2f890b37"
        },
        {
          "alg": "SHA-384",
          "content": "39615b3093cf020161bcdfa6813d0d608892b6a69b6e7d413bc27a9b8c2e4500cb4d0a64f1b2ffd9d0c3b9f611687872"
        },
        {
          "alg": "SHA3-384",
          "content": "54b8b1d35b30254d17751cd0ea42fd51cb8d6511c9aa761b76752396af67e14b16bce998aa8d31da9faa7846ee9cd478"
        },
        {
          "alg": "SHA3-256",
          "content": "d4c089ab0bf23ff52bfb24f2bb9e2cb629b66efcd43fa263fe4ae5affcbc567f"
        },
        {
          "alg": "SHA3-512",
          "content": "8bf09495990791415be6bbb9f72f2f3f40f4517b2b56501329e8c5ca716381c1858ea75a734b86346b37d8f5a7697f3361c204f3affe3f8fee656ee68a72480f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.commons/commons-lang3@3.21.0?type=jar",
      "externalReferences": [
        {
          "url": "https://commons.apache.org/proper/commons-lang/",
          "type": "website"
        },
        {
          "url": "https://github.com/apache/commons-lang/actions",
          "type": "build-system"
        },
        {
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2",
          "type": "distribution"
        },
        {
          "url": "https://issues.apache.org/jira/browse/LANG",
          "type": "issue-tracker"
        },
        {
          "url": "https://mail-archives.apache.org/mod_mbox/commons-user/",
          "type": "mailing-list"
        },
        {
          "url": "https://gitbox.apache.org/repos/asf/commons-lang.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.httpcomponents.client5/httpclient5@5.6.4?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.httpcomponents.client5",
      "name": "httpclient5",
      "version": "5.6.4",
      "description": "Apache HttpComponents Client",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "42f90ff32bc3f72cb8bdfdf235e28328"
        },
        {
          "alg": "SHA-1",
          "content": "2a8ff1366303ac253e0ea64dab1e5abb5b7687bd"
        },
        {
          "alg": "SHA-256",
          "content": "bdef5f8841145cd76c4c605ff301bc840eea0d5292332b7b892a93316c0d8ee1"
        },
        {
          "alg": "SHA-512",
          "content": "2acc897cde347dc33d7c180f2b8c9b255f1fb687f6afc75e271b037998cf248d69648f1c92225c2ed1ba370ef212ad08ff36a1b90d5faad2cddb3bcc7129b0cf"
        },
        {
          "alg": "SHA-384",
          "content": "43856479fa74a1d193930d26f37fefeb4eadef0dd480c4e840cdaabae6138304ba8aecdaed6a8940d0e971d82c597dd7"
        },
        {
          "alg": "SHA3-384",
          "content": "1684a4ccb7c533cc531d96274fc8f6ff33106840f0f1523655b4313393a952ed376b83004d5e0217213ece2035005ee3"
        },
        {
          "alg": "SHA3-256",
          "content": "ab2b8fd38edd948d38fbcc23baa8e6e2437e25610c16bb1df7bbe7d95453bbcd"
        },
        {
          "alg": "SHA3-512",
          "content": "9503f6ec6318d2aecae0e68e3eabbfaa012c512141b89e52d12fa4f13450114482508ef2ded7e9a3262fd7c4b5f08e7f1bfe4fa343b870dae81d5c04acaac6eb"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.httpcomponents.client5/httpclient5@5.6.4?type=jar",
      "externalReferences": [
        {
          "url": "https://hc.apache.org/httpcomponents-client-5.6.x/5.6.4/httpclient5/",
          "type": "website"
        },
        {
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2",
          "type": "distribution"
        },
        {
          "url": "https://issues.apache.org/jira/browse/HTTPCLIENT",
          "type": "issue-tracker"
        },
        {
          "url": "https://lists.apache.org/list.html?httpclient-users@hc.apache.org",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/apache/httpcomponents-client/tree/5.6.4/httpclient5",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.4.3?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.httpcomponents.core5",
      "name": "httpcore5",
      "version": "5.4.3",
      "description": "Apache HttpComponents HTTP/1.1 core components",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "40cba87d4704bc9e1691f340fb8042cf"
        },
        {
          "alg": "SHA-1",
          "content": "32a0699fbcb103f5621c00983ee8f5aac080e4a6"
        },
        {
          "alg": "SHA-256",
          "content": "18bfbbabb478dfb67f31aeaf428c387f3c3df654582e1309f708ee1f3086830a"
        },
        {
          "alg": "SHA-512",
          "content": "2ae04ae83015c46314a502a0973bec86312680cb548f0ae68002af4f5fd958deb60c702ad9dcae72c23561e2e0954518bb0355a1496096f7e9b9a2efbb7c9bae"
        },
        {
          "alg": "SHA-384",
          "content": "09312cfbd7b33c3c8712405aff437ef7b93260a07a625b7cc491d3e2fa0d65852d72f4f6701ef707c4cae52caadcddd0"
        },
        {
          "alg": "SHA3-384",
          "content": "419f9608bec952746b274a3510bc0f0dbdb6cc4b1269c9bd89c218894a42fda0dfd7b46912b57cc722b3d76b7f11c07b"
        },
        {
          "alg": "SHA3-256",
          "content": "8cb162e60b804205084fcc8e562f6eb47f5c13eefa42208cf6accab1d28e0ba2"
        },
        {
          "alg": "SHA3-512",
          "content": "eccc71fecc0525c6fca46ca9e19eaecf26d646f3e71528796e8dcc0f16cb0882d485ceffa1c48e14e60eb8b429ae0fd5935274bb8907c2869ab54cb76e931abd"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.4.3?type=jar",
      "externalReferences": [
        {
          "url": "https://hc.apache.org/httpcomponents-core-5.4.x/5.4.3/httpcore5/",
          "type": "website"
        },
        {
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2",
          "type": "distribution"
        },
        {
          "url": "https://issues.apache.org/jira/browse/HTTPCORE",
          "type": "issue-tracker"
        },
        {
          "url": "https://lists.apache.org/list.html?httpclient-users@hc.apache.org",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/apache/httpcomponents-core/tree/5.4.3/httpcore5",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.httpcomponents.core5/httpcore5-h2@5.4.3?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.httpcomponents.core5",
      "name": "httpcore5-h2",
      "version": "5.4.3",
      "description": "Apache HttpComponents HTTP/2 Core Components",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "4b9da0d3e87ed769ef6a162223f2265c"
        },
        {
          "alg": "SHA-1",
          "content": "33bcd37d645539d27c65e17420843fd7f6c0ebf4"
        },
        {
          "alg": "SHA-256",
          "content": "c7db7026b8e2dea39132b04a6069f6671e2858309b20a146ec5c7dd6ed73a0b6"
        },
        {
          "alg": "SHA-512",
          "content": "0bde9a7579cba0dbb6322c8a25eefd0bdb80bd907b4e66c20570ce23558fd57daf9ae5233a571546171456b9f7da6e970507cde971a1155d1bce011c62b281af"
        },
        {
          "alg": "SHA-384",
          "content": "31c865c7c4fd4975d1a60223478b1aa9a8c374e77e23f46c3033f9f88a4fa774850c5f7c4974ee6c98a8f0ac031ed843"
        },
        {
          "alg": "SHA3-384",
          "content": "06cf3bffe6edd2fc68630b79d041cc1af328f83f55356d75e69ebed85057edcd3c3f1319d5d7c777878807122ed9c86b"
        },
        {
          "alg": "SHA3-256",
          "content": "d9e78aa4f4420d006a5df8b339df2c58d5fc680e5c344d746bdb39ecf4af1791"
        },
        {
          "alg": "SHA3-512",
          "content": "63557025bcf6a3b28d85a62d06840290d5587e10b35cf41f4b4a640c29d09f1cc96bba26a3aec0cc0de37098edfb42c53de401ce94cbf32680f6e1143cd091a4"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.httpcomponents.core5/httpcore5-h2@5.4.3?type=jar",
      "externalReferences": [
        {
          "url": "https://hc.apache.org/httpcomponents-core-5.4.x/5.4.3/httpcore5-h2/",
          "type": "website"
        },
        {
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2",
          "type": "distribution"
        },
        {
          "url": "https://issues.apache.org/jira/browse/HTTPCORE",
          "type": "issue-tracker"
        },
        {
          "url": "https://lists.apache.org/list.html?httpclient-users@hc.apache.org",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/apache/httpcomponents-core/tree/5.4.3/httpcore5-h2",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.22?type=jar",
      "publisher": "FasterXML",
      "group": "com.fasterxml.jackson.core",
      "name": "jackson-annotations",
      "version": "2.22",
      "description": "Core annotations used for value types, used by Jackson data binding package.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "04c11c456fd1e21b9a21c25c665109cc"
        },
        {
          "alg": "SHA-1",
          "content": "15c67f9498d6934cff9510fc70c5a12e52290457"
        },
        {
          "alg": "SHA-256",
          "content": "21ddb598807d3a51a876704eb979d9296e1c6a6f47ab1826ff88c6d6a127a2d0"
        },
        {
          "alg": "SHA-512",
          "content": "63b597ec02b4e31c57266d9b96f05f301f217bc12ffb7ba046a5658d2829728930a559947b98eb6c3cc448413a96b4939427aa669ae1e2dc3597ab5d5d287f9f"
        },
        {
          "alg": "SHA-384",
          "content": "35b6fe651afeed54d1e6f7a39ac6cf6fdbafacdf2e3bdff7b29b965ccb79a0c53342a56bf0ecea4d6c4c4651b1d6aa19"
        },
        {
          "alg": "SHA3-384",
          "content": "72267dc54c4175c42ca0dd430a87b12cc68619a8777be2048e1d2f0747db884a568b5c346c77c9c8c0714ab96018f5f7"
        },
        {
          "alg": "SHA3-256",
          "content": "6bfc7b4ba70779fe5f0b1e2af585abab982f7929a68beb2c0e62ea2e2a321de0"
        },
        {
          "alg": "SHA3-512",
          "content": "3f1bdfa32f7df76ac14cd2a3e689b65066fa0a6a760a9b8b1121773bb1b043a44587d4148c67f361dc6c630e6b31f29b2691a57d47caabea5ca23ae44af34a5e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.22?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/FasterXML/jackson",
          "type": "website"
        },
        {
          "url": "https://central.sonatype.com/api/v1/publisher",
          "type": "distribution"
        },
        {
          "url": "https://github.com/FasterXML/jackson-annotations/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/FasterXML/jackson-annotations",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.github.jeremylong/open-vulnerability-clients@9.0.7?type=jar",
      "group": "io.github.jeremylong",
      "name": "open-vulnerability-clients",
      "version": "9.0.7",
      "description": "Clients for vulnerability sources",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "ce3bb27c9d23e1272aa99747a707d1cb"
        },
        {
          "alg": "SHA-1",
          "content": "647c75c9f1ceeb83c965bf89c0aad6e1058a2686"
        },
        {
          "alg": "SHA-256",
          "content": "c1c606bef86c19820affe3516b57c8bab295122c4368993b828d387aa70f36ce"
        },
        {
          "alg": "SHA-512",
          "content": "4ce8572785d9d3bb181a1569bc6fc5c3983db812b125f7590c06cbf86b33c93349e6d68932088eca4e62da96f2994d4c3da63cafacc357ab57f57f7788a17fa5"
        },
        {
          "alg": "SHA-384",
          "content": "4e5c4d17a23650ed07ced8efdc7c1a530f2c1db98cb8c02f79cfe5078cc9889a90ee8d18fd00f28502b0d77f4838b465"
        },
        {
          "alg": "SHA3-384",
          "content": "cc6915519e9c751c41286ebfe91a3cb641e18ee31c409443f775982c0953d2fa06cea3ebd476c54a95004fd78d76888d"
        },
        {
          "alg": "SHA3-256",
          "content": "4bf1f7b2cc6422b0a77ee9c36597e327fefb108c9542f33ed7f707847adcb27b"
        },
        {
          "alg": "SHA3-512",
          "content": "8ea702a2976d1831bee10ffb0af67b691f9ee66bbb30af27fc1e2d3462f93558cd0694ce92035b1bb9bf05685048199ed00a3568d72e6cbd00c42dd416cc8846"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.github.jeremylong/open-vulnerability-clients@9.0.7?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/jeremylong/open-vulnerability-clients/",
          "type": "website"
        },
        {
          "url": "https://github.com/jeremylong/open-vulnerability-clients",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.httpcomponents.client5/httpclient5-cache@5.6.4?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.httpcomponents.client5",
      "name": "httpclient5-cache",
      "version": "5.6.4",
      "description": "Apache HttpComponents HttpClient Cache",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "46daa09dd78f02573160870e6d86576e"
        },
        {
          "alg": "SHA-1",
          "content": "31d5caa40f72c58eb34635cf161b4aceb239b7e8"
        },
        {
          "alg": "SHA-256",
          "content": "c425cb6db4863480982899092d1d283f84c0f32914a59bf2de479e69daa8fa11"
        },
        {
          "alg": "SHA-512",
          "content": "977293d0d63ae00bb12bbbd0ffb1496703a2e282735e0814f6935973edba3f8390d7bc322ac9d44aefffe19bba815a23688eaa47d539cdc37742c4487034895d"
        },
        {
          "alg": "SHA-384",
          "content": "df1c73fe68f6822f2b70eb4e781cf4d48523112165a0544005b7f6e9b5898a6874040596b0c9000083791f695468e122"
        },
        {
          "alg": "SHA3-384",
          "content": "af46b28142c5cebf871a35e3df9bb3b197592e31d4bd7c0b9725262446b48d16bc13e8792086a0ac8eeedf7999dc9ced"
        },
        {
          "alg": "SHA3-256",
          "content": "83ae739248c35e4872f39f9283b641a48ab10de25f472582ba96d69a0a33917b"
        },
        {
          "alg": "SHA3-512",
          "content": "d596745dbeebe33feab5e2151a7e1050f88cc5a685d8f2f92b35e907a023ce37014c7b857f1205773f30a905922dc596d13fe71bf79618f79618fa07bb967033"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.httpcomponents.client5/httpclient5-cache@5.6.4?type=jar",
      "externalReferences": [
        {
          "url": "https://hc.apache.org/httpcomponents-client-5.6.x/5.6.4/httpclient5-cache/",
          "type": "website"
        },
        {
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2",
          "type": "distribution"
        },
        {
          "url": "https://issues.apache.org/jira/browse/HTTPCLIENT",
          "type": "issue-tracker"
        },
        {
          "url": "https://lists.apache.org/list.html?httpclient-users@hc.apache.org",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/apache/httpcomponents-client/tree/5.6.4/httpclient5-cache",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.samskivert/jmustache@1.16?type=jar",
      "group": "com.samskivert",
      "name": "jmustache",
      "version": "1.16",
      "description": "A Java implementation of the Mustache templating language.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "7eff40c29c2fdf3faac3db921f07dc80"
        },
        {
          "alg": "SHA-1",
          "content": "979c7145a406b83bf28da32531f88a34c2d2919c"
        },
        {
          "alg": "SHA-256",
          "content": "3d4b984abd66908f05b38c9c892325cd4785d01ff33922569ff9b90c9ebfc475"
        },
        {
          "alg": "SHA-512",
          "content": "f245f8b979cf63fb4ad762e586a27468fa91b751aecf94f9f1dce32f551dec30c4b2dd881ea8b9b6a7eea3e9dfb34ceb96204d358bbb62120233416a4df382e1"
        },
        {
          "alg": "SHA-384",
          "content": "f53c07c96c4a4e8f9b424b17bbb152cc540dea8174db43b9bf5a12357d5207e5b8c0de506d83703fb46cfab13051c142"
        },
        {
          "alg": "SHA3-384",
          "content": "ac74164c34a0b40bf8e2d2c9f737bbae1b5c9c2c3a342487ca8271888379be51c5a0e3f45d1db57538eaed470bd7722f"
        },
        {
          "alg": "SHA3-256",
          "content": "2fdfe84999fe4930c399d5f78b678907881eea246fa30fd97f42f31ec90a2a8d"
        },
        {
          "alg": "SHA3-512",
          "content": "e213ee1cc34d3fde03785ac05a5df09c4b462fb1b1d0f02dff41e7b53522005df2e38b303bc193cff9203ab7f8a50764e1dea967035a454cf1988c056a615d57"
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "The (New) BSD License",
            "url": "http://www.opensource.org/licenses/bsd-license.php"
          }
        }
      ],
      "purl": "pkg:maven/com.samskivert/jmustache@1.16?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/samskivert/jmustache",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "http://github.com/samskivert/jmustache/issues",
          "type": "issue-tracker"
        },
        {
          "url": "http://github.com/samskivert/jmustache",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/vuln-data-source-jvn@5.1.2?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "vuln-data-source-jvn",
      "version": "5.1.2",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "1d89bf7403e4c61cf64396f09e25c069"
        },
        {
          "alg": "SHA-1",
          "content": "534d316ae7415d7781039f5cd582fde7a187852c"
        },
        {
          "alg": "SHA-256",
          "content": "c968feadc594a71392b10ab0b44713462519810a76f615f2b12e9a391cafae51"
        },
        {
          "alg": "SHA-512",
          "content": "f3a18b48e1c362fe8fc6e8b57408a3053bca23b943d588d56a251b1534665902e4c4e9b282d22b57e5e491710de40e8b920fc2503f8ecd38533f037abbb6402b"
        },
        {
          "alg": "SHA-384",
          "content": "ffad3b351b88b4665e588424bfed5875795041ad4554881da94a4d51229a2c632e31a5d1976047ef7d160d077b0f01ca"
        },
        {
          "alg": "SHA3-384",
          "content": "79c0090a5b4aae40fe472cbcc7e3750350f3d8d500988173c93825140fc92b10855e136c31662e4b32113df57f0cc299"
        },
        {
          "alg": "SHA3-256",
          "content": "6c9348d39bde7cf3331943ad74ece3ef8014e1fd055fbdce4cebc019744f4275"
        },
        {
          "alg": "SHA3-512",
          "content": "83147d7be1b8f8ab805a6f55074786b66796e380c8edeab94d9e2d9358584d2ded8f2eac210be150bdb617d06e239d2925b77e7e423e494f9a0922755db1bce8"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/vuln-data-source-jvn@5.1.2?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/vuln-data-source-parent/vuln-data-source-jvn/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/vuln-data-source-parent/vuln-data-source-jvn",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/vuln-data-source-nvd@5.1.2?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "vuln-data-source-nvd",
      "version": "5.1.2",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "a8dfda170b5bd5d3b1d52bb4c7f4eaca"
        },
        {
          "alg": "SHA-1",
          "content": "5e75dd16bad5af6de8a8c7976f86a21f786df329"
        },
        {
          "alg": "SHA-256",
          "content": "6f809704a438d8e640d52e81cefb898079c2e655e7746d1efab6c63552e3a0b5"
        },
        {
          "alg": "SHA-512",
          "content": "8cb01aa837ed38d5dfcd9c8fd32afe8163e6bdc5bf58d5fab6b99ed7a6735ea18de5a84af2aa09897c96ec80787249ec4b499bc5a8fe7cc5ca35f8dafb685f14"
        },
        {
          "alg": "SHA-384",
          "content": "e4bfdb578746df90024a263892b256604cafe3887224e5c5d61bd49547e6a8bbb56c296b4b464e3a66c9734b75419bf7"
        },
        {
          "alg": "SHA3-384",
          "content": "f7123ba13a17f3914408941034086360db116c7375ec9afc6267e26e900186d8756f3e9e46b8243b9d71a72cc84cd201"
        },
        {
          "alg": "SHA3-256",
          "content": "816cca974caf7070c04005a1e5196b127c0873d703f6e5af902a9eb0ddb7581e"
        },
        {
          "alg": "SHA3-512",
          "content": "56732f6510c17c02ffdc8609c566ab1709c40bc7c8b42dfce916bcdb3f8288f1c7e59a47edff9035ea8a1e2b161d9873004f57ae1154e858bb5de974d69183aa"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/vuln-data-source-nvd@5.1.2?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/vuln-data-source-parent/vuln-data-source-nvd/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/vuln-data-source-parent/vuln-data-source-nvd",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/vuln-data-source-osv@5.1.2?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "vuln-data-source-osv",
      "version": "5.1.2",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "0965abefd8c83982322e9f11deab0eea"
        },
        {
          "alg": "SHA-1",
          "content": "4e7cf8bea5edf265143e7a457de906d443bb0ade"
        },
        {
          "alg": "SHA-256",
          "content": "62d88e0faba3761be6a5399b332772b7576617f20295181d08e28a5c5e66c5b5"
        },
        {
          "alg": "SHA-512",
          "content": "2b82a94b8f5ecebb89ed9cd592d75a240f4a026f3a0a560e076ca88803909e9e29da4840aa844e19a5a0a53a6a46dfece12bb54a8694148743b8be629c10fe81"
        },
        {
          "alg": "SHA-384",
          "content": "4de5434bc693ae811dbb42861390a96bbe667a6c27909352f9af855e877df5a47aeaaa1b54b8da8a89b1ef1052d0e3fd"
        },
        {
          "alg": "SHA3-384",
          "content": "ccc2df5ad718f62439d205080e64be6ce717d44ca40f5f220e4261e0aa7a12f6ba9a3e8e6b0b5419ad142ad0edb5f9ce"
        },
        {
          "alg": "SHA3-256",
          "content": "175f42797d48cee825e14fbcf80177c5afaa2a0cfafdd029a724e8d832631637"
        },
        {
          "alg": "SHA3-512",
          "content": "c0b7b36e7861d34f45088b7d1c8331d5a331f8ab4e2c00c3487fc68c161b53c34b1f4ac842cf342c7149c0fcfaf9359de0eb7fa8e80cfb9ef4c034f7854c2974"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/vuln-data-source-osv@5.1.2?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/vuln-data-source-parent/vuln-data-source-osv/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/vuln-data-source-parent/vuln-data-source-osv",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/alpine-common@5.1.2?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "alpine-common",
      "version": "5.1.2",
      "description": "An opinionated scaffolding library that jumpstarts Java projects with an API-first design, secure defaults, and minimal dependencies.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "ebe5e99a2f5992e23afce7875f78d45b"
        },
        {
          "alg": "SHA-1",
          "content": "bee99c9f47178849e99a3966f5e1502d2b1dfaae"
        },
        {
          "alg": "SHA-256",
          "content": "4ca9e9fce30fc93891cd6f2d51c69cbf0e2c2e13f69ea93689c7b9671ea925d1"
        },
        {
          "alg": "SHA-512",
          "content": "c83ecbcf608e2d95e00e288285bb591216dc3e0e9409859766521413715014954248beb9dd1c58f604fdbf1a292784a45ca17d04580b0a4d9f50931547694b09"
        },
        {
          "alg": "SHA-384",
          "content": "c72e7e2df00bb0fa99c8be94dd437cfdb24fbfddbcfd536736a296f6365b44b2310559ad1c0816deef266e6dd23180e1"
        },
        {
          "alg": "SHA3-384",
          "content": "de11658da9bd00a303ac6b1b4e6a5406b6eddd139006fd0ec64d4ecc855b7cd0f0e32a2c5b0b928ba11dcdfcb7efa593"
        },
        {
          "alg": "SHA3-256",
          "content": "b10d5f57b26d47a666e8df2b26bae7b211cf50f9f1065ddeb4362c4c1ac5ef5f"
        },
        {
          "alg": "SHA3-512",
          "content": "9335e80dc5a713973e16c3346793dfd84c012e1e80c009518db0f5a1c803fc12b1b2efdf029b5b50ff18ae4017aaa88aed3fb654ee9efceac75fcf6076a2ad51"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/alpine-common@5.1.2?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/stevespringett/Alpine/alpine-common",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/alpine-parent/alpine-common",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/alpine-model@5.1.2?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "alpine-model",
      "version": "5.1.2",
      "description": "An opinionated scaffolding library that jumpstarts Java projects with an API-first design, secure defaults, and minimal dependencies.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "cda221a127d76e20f823bb9d8a3fc599"
        },
        {
          "alg": "SHA-1",
          "content": "7f0b1fcf975e59560bf91fe17ea397d888f17429"
        },
        {
          "alg": "SHA-256",
          "content": "e39138bf5cc172c4f202ec91881276b1c8b925502be865ba7adb1f11cf99faa7"
        },
        {
          "alg": "SHA-512",
          "content": "ca6b8e83715642feb96ee74a6749d6f33cb4d90b6d7b85df00eeaea7aaeea35fb047fd3ab4dcf57021ae9bc2658997367299b52ccd16e71aff359c3035fccf98"
        },
        {
          "alg": "SHA-384",
          "content": "f269427e0a86346037118dcd89de17ec91c68a373ef171f0133333298b4689d61f4881144173ad914e58871fae8b5832"
        },
        {
          "alg": "SHA3-384",
          "content": "8537a21639895840a88157cc2b0b02095b022affb1d73c6d9d6ed5682c6d12dc85e144616eef445e5aabb56a9671ec5d"
        },
        {
          "alg": "SHA3-256",
          "content": "0a76e4382b9c083acf9f91d08c66f571211f78936724bc1e89647dd007000aa7"
        },
        {
          "alg": "SHA3-512",
          "content": "b07ed96a5ded40d2698492606f0c42bd84f24b7c245e509378b72d06b91399a6f9c615d8599c81012661c0f8039f5e9a972b3969849df370cb7c14b2e590f244"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/alpine-model@5.1.2?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/stevespringett/Alpine/alpine-model",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/alpine-parent/alpine-model",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.datanucleus/datanucleus-api-jdo@6.0.5?type=jar",
      "group": "org.datanucleus",
      "name": "datanucleus-api-jdo",
      "version": "6.0.5",
      "description": "Plugin providing DataNucleus implementation of the JDO API.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "9b7448a21838cae99a8b9f3875d93a08"
        },
        {
          "alg": "SHA-1",
          "content": "30f49348795e1d2e9a8e1613e9dbc6c3f851f1ca"
        },
        {
          "alg": "SHA-256",
          "content": "423ea8da36763d6c17d55434477b7ab2339d3cef5acf67dd30198ef1dd0ed477"
        },
        {
          "alg": "SHA-512",
          "content": "5262a518ccc344692af86a30d51e4d1d9ee2b3167dc16657b37e8cfb2affc3fd73db4df9df5463e4a25097d9eff27c9f305407239e19381cd32c0c7f9f01aaab"
        },
        {
          "alg": "SHA-384",
          "content": "96e3ee21e3958259fcbc3bcd8af53d0814415f027a73bb1a1025c9112406564e65eaff74c874f02d994e6239562a7202"
        },
        {
          "alg": "SHA3-384",
          "content": "8c88668e57a4ccf381e6fb3a9859e8fe15376bd9a0fd4d9b9d771c9f7712459e97edc219dcdf008971f0d06363592d09"
        },
        {
          "alg": "SHA3-256",
          "content": "54562d403842a670b5f4cfa2a272bbb05789bd39f278b52732f1df540c7e33b3"
        },
        {
          "alg": "SHA3-512",
          "content": "55accaf6c0e8a6082d09619351596707df28223929dd313bbfe25abd1f8693c2eb195c0dada149f11dd0aecdfca724edfd67de84152e0a2aa8c39383fbc8b8d2"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.datanucleus/datanucleus-api-jdo@6.0.5?type=jar",
      "externalReferences": [
        {
          "url": "http://www.datanucleus.org/#/datanucleus-api-jdo",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/datanucleus/datanucleus-api-jdo",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.datanucleus/datanucleus-core@6.0.11?type=jar",
      "group": "org.datanucleus",
      "name": "datanucleus-core",
      "version": "6.0.11",
      "description": "DataNucleus Core provides the primary components of a heterogenous Java persistence solution. It supports persistence API\u0027s being layered on top of the core functionality.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "2493fed928c1eade5a38f4016f1ba7c0"
        },
        {
          "alg": "SHA-1",
          "content": "87fae77204b7032165d6cfb468cb5dafacf39200"
        },
        {
          "alg": "SHA-256",
          "content": "2e2a23d21100e82a8bd0822eebe8bb9f39a8e3ea1ba5e2bb068c24cb0515bd08"
        },
        {
          "alg": "SHA-512",
          "content": "969e5e8b3330e1bd675af05d106f0081dbef25bfea99689a6a051eac96e81907dc8d42e574b464b33fe467c5024a282416f114946ed4374510b4abe7897027d3"
        },
        {
          "alg": "SHA-384",
          "content": "286413cbd9c681561bf5c7d83839893879a9476a0a2a9b60e60d6e161a665e92bef6db57cd9e18b4d13a6ed2a75bbe73"
        },
        {
          "alg": "SHA3-384",
          "content": "afcc830fdadc3c4b7130921ad521f4e0a7fe23b57614ac61f4c2a1d9eae47b56e6a0df82d1ebef82c1cbe1d2244c547d"
        },
        {
          "alg": "SHA3-256",
          "content": "02b169414ef4c5a9d7c79e6e98e86e21071054f035ce4a1ca8fde85aa5f726ef"
        },
        {
          "alg": "SHA3-512",
          "content": "1de064ff2de6452618e7a9f3bc83e91228105722697597e4dc0b836349d21c3d71ff6ee4613433f7da795efba9b56be7bfa3c6854a02587271cd7d4a6001bdb5"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.datanucleus/datanucleus-core@6.0.11?type=jar",
      "externalReferences": [
        {
          "url": "http://www.datanucleus.org/#/datanucleus-core",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/datanucleus/datanucleus-core",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.datanucleus/javax.jdo@3.2.1?type=jar",
      "group": "org.datanucleus",
      "name": "javax.jdo",
      "version": "3.2.1",
      "description": "The Java Data Objects API (JDO) : a standard interface-based Java model abstraction of persistence, developed by the JCP.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "79f1e95e6d7f1eb191edce207ac6ecd8"
        },
        {
          "alg": "SHA-1",
          "content": "e8d1af5779f95d3c85b641184b605725762a36c3"
        },
        {
          "alg": "SHA-256",
          "content": "61646f544baf75fc7a305410443c5f5f7d219fa7a2cabe3b782950a350ca5d3f"
        },
        {
          "alg": "SHA-512",
          "content": "29580963b5478646b0f3b47ae3387d0bdb5bd86da37afceef6841c32b9db3a4407186fc257855c5c47efbbf1f1bfbff0b45b6ad45101b6dfbed7946a9251fe43"
        },
        {
          "alg": "SHA-384",
          "content": "1845d95a87e9fb954ff3e0c80a0dae62eca817abb3f727d65edc9296a0992e60a7fa57db0a72858afaf9e2d872f6435f"
        },
        {
          "alg": "SHA3-384",
          "content": "e4f04e5be64a1a58ef475cf5b155e6169307dd9636cd4fe6661dd394fe28a0a9ee9dee426291bff62d66885ae35ab2c8"
        },
        {
          "alg": "SHA3-256",
          "content": "3703404351c56d4a658de2012266838fea9741cceb09e7304b4c323e33d88ca3"
        },
        {
          "alg": "SHA3-512",
          "content": "da4b8c30667d67651469ed1a750004a3afbaad1ce8c6697ac29889fd2e78dadbcde07d414161e42bc972017afe83e690329d4ede5e94a67553377ee7c2a7929a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.datanucleus/javax.jdo@3.2.1?type=jar",
      "externalReferences": [
        {
          "url": "http://www.datanucleus.org/#/javax.jdo",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/datanucleus/javax.jdo",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/javax.transaction/javax.transaction-api@1.3?type=jar",
      "publisher": "GlassFish Community",
      "group": "javax.transaction",
      "name": "javax.transaction-api",
      "version": "1.3",
      "description": "Project GlassFish Java Transaction API",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "6e9cb1684621821248b6823143ae26c0"
        },
        {
          "alg": "SHA-1",
          "content": "e006adf5cf3cca2181d16bd640ecb80148ec0fce"
        },
        {
          "alg": "SHA-256",
          "content": "603df5e4fc1eeae8f5e5d363a8be6c1fa47d0df1df8739a05cbcb9fafd6df2da"
        },
        {
          "alg": "SHA-512",
          "content": "3497cf77352aa1317c70ad1d28e8e7da51337d844c8227a35707209c750ba6f5d644a4ffdbdb10e5fbde204003aa43ff80e9e2ff3164584a7a34d8292266b2bc"
        },
        {
          "alg": "SHA-384",
          "content": "7044d8d5829a777d85e1a987c3e346eb535dd321366bdf32a9e8ed4f52facd0610ac2f3f58b4a1b001893f01fddc5eae"
        },
        {
          "alg": "SHA3-384",
          "content": "d0c1807001e02ce47320be657be055b4777b8b5673c22a78b0574955f7a6105dacc42b46b86ab967dc382cf332da59d8"
        },
        {
          "alg": "SHA3-256",
          "content": "c7c48884317a2d0e1596f201763acbca4ef76462af9172fd5e68aca3465303e1"
        },
        {
          "alg": "SHA3-512",
          "content": "bf053d4fe995cb5c1d6c01320fc73530017ee364de6ae21eb98fa0372b2aa6eff2fa4ac2d9cd5f692c930ee573c2f6226441918123fcfc48b5b4a126d350928c"
        }
      ],
      "licenses": [
        {
          "expression": "(CDDL-1.0 OR GPL-2.0-with-classpath-exception)"
        }
      ],
      "purl": "pkg:maven/javax.transaction/javax.transaction-api@1.3?type=jar",
      "externalReferences": [
        {
          "url": "http://jta-spec.java.net",
          "type": "website"
        },
        {
          "url": "https://maven.java.net/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/javaee/javax.transaction/issues",
          "type": "issue-tracker"
        },
        {
          "url": "javaee-spec@javaee.groups.io",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/javaee/javax.transaction",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.jersey.ext/jersey-bean-validation@4.0.2?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.glassfish.jersey.ext",
      "name": "jersey-bean-validation",
      "version": "4.0.2",
      "description": "Jersey extension module providing support for Bean Validation (JSR-349) API.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "254cf1628fdd8561cab876a729c98564"
        },
        {
          "alg": "SHA-1",
          "content": "db93aaf2cd038fbb77f0184b1df866782592e2df"
        },
        {
          "alg": "SHA-256",
          "content": "e92fa0ab1e4882e9c749b09ec7f5019ec3f165bdcef3888f0a1988c1da7347ae"
        },
        {
          "alg": "SHA-512",
          "content": "d127fdeba362dcb5677ee4d68bfd7e53b2636087de4769cff73c43553a5b39a6588b83d971147fa6c73af18fc2946c0c7349af221523a162c30094c7dcb5ecc9"
        },
        {
          "alg": "SHA-384",
          "content": "bb1940e39ab4580e898c652b4cc3b74560ac7eecaf97e4e06f0023ff0193d288f4407625ee713ede5604163b97515441"
        },
        {
          "alg": "SHA3-384",
          "content": "ac63c81e85bd6cd0dd05b6185b99c79552a57ac696d49b4f4abeb97b86c01572c07483e6acc9a81ef244c3fb086b39d3"
        },
        {
          "alg": "SHA3-256",
          "content": "10b67f4c5c7790e224b48885ca67c27802468a8505bc7ab039041322b27637c4"
        },
        {
          "alg": "SHA3-512",
          "content": "e2628bac3fbd61793d403f4cf5e93ca5a1c8e1c2a9210c4a1b02ed8bc314f7c06ef4bf340b0bd0b62a15f2999552016f3aa5b68cd00e2cbd6f14afbfc1545e08"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        },
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        },
        {
          "license": {
            "id": "BSD-2-Clause"
          }
        },
        {
          "license": {
            "name": "Apache License, 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        },
        {
          "license": {
            "name": "Public Domain",
            "url": "https://creativecommons.org/publicdomain/zero/1.0/"
          }
        },
        {
          "license": {
            "name": "Modified BSD",
            "url": "https://asm.ow2.io/license.html"
          }
        },
        {
          "license": {
            "name": "jQuery license",
            "url": "jquery.org/license"
          }
        },
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/license/mit/"
          }
        },
        {
          "license": {
            "name": "W3C license",
            "url": "https://www.w3.org/Consortium/Legal/copyright-documents-19990405"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.jersey.ext/jersey-bean-validation@4.0.2?type=jar",
      "externalReferences": [
        {
          "url": "https://projects.eclipse.org/projects/ee4j.jersey/project/jersey-bean-validation",
          "type": "website"
        },
        {
          "url": "https://ci.eclipse.org/jersey",
          "type": "build-system"
        },
        {
          "url": "http://localhost",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/project/jersey-bean-validation",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/jakarta.inject/jakarta.inject-api@2.0.1?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "jakarta.inject",
      "name": "jakarta.inject-api",
      "version": "2.0.1",
      "description": "Jakarta Dependency Injection",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "72003bf6efcc8455d414bbd7da86c11c"
        },
        {
          "alg": "SHA-1",
          "content": "4c28afe1991a941d7702fe1362c365f0a8641d1e"
        },
        {
          "alg": "SHA-256",
          "content": "f7dc98062fccf14126abb751b64fab12c312566e8cbdc8483598bffcea93af7c"
        },
        {
          "alg": "SHA-512",
          "content": "f186b2ada470abba1cc3b4f8c4373d940fb7c71a051b2c26f7c204ad4dfb69235fbf3f9c33da36d744cb90f52d921c51d76c0ff263bacb35eafb66cab83dc47d"
        },
        {
          "alg": "SHA-384",
          "content": "405bd297a73901f013d48a0da028d04d400f3e61f4997c0e7297eb08120670a0e242e0002db8f130c33ab16cb02feb2d"
        },
        {
          "alg": "SHA3-384",
          "content": "4db7e54434d0a208c876868f5595b808f2728c0455feaa752ab7b569a2186fc37cb891c9aa0076de3d08f6da6ff06eba"
        },
        {
          "alg": "SHA3-256",
          "content": "3a5aba9f1ff1a130b76af886123eb375fa578498490df3dc60bb7ce7d59e9404"
        },
        {
          "alg": "SHA3-512",
          "content": "00bba8efc2d6e7f0a509b321868d75f1aaf0681a750d089d913bde8424ab7bb88aadf49de6e291e352523e4f8c117b1b48033ff31d4d665dcc43c4c6ea000ba9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/jakarta.inject/jakarta.inject-api@2.0.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/eclipse-ee4j/injection-api",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/ee4j/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/injection-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/jakarta.validation/jakarta.validation-api@3.1.1?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "jakarta.validation",
      "name": "jakarta.validation-api",
      "version": "3.1.1",
      "description": "Jakarta Validation API",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "93ce96e77734f4280157edeffcae44e8"
        },
        {
          "alg": "SHA-1",
          "content": "ec8622148afc5564235d17af80ea80288d0e7f92"
        },
        {
          "alg": "SHA-256",
          "content": "63ce00156388c365f3ac1be71fcfaf114682fc0c452020b5df6e7ec236e142ab"
        },
        {
          "alg": "SHA-512",
          "content": "02483f9d631538a71f436982ed3842c5d054781ec58350ba33fd0e0db92db531caa17abd2e7aa25a062ba4cd5e85b63a27b615041df236ffb979a73fdd121e18"
        },
        {
          "alg": "SHA-384",
          "content": "8e4a235fb69ebf7327fe8947b0be32c76ae8ebb748d0b3195efb87cd1d57ea92402403a59e2c4312a11a3a2300bbb4d6"
        },
        {
          "alg": "SHA3-384",
          "content": "7f52280ddd46c87e00c6b10f708aa77d571e68942651ada952b4b9e58805a0216394a31a4666c88908af0a6408c9b64d"
        },
        {
          "alg": "SHA3-256",
          "content": "21e404a7897b223e9324f7b709c3038f4ca01599896a0e166cee4eb714b9e600"
        },
        {
          "alg": "SHA3-512",
          "content": "6bc15a9beecdbdb881c1ed5d7682156417db766898a14e205a496b8d7e0e552a4e4c2303727b1c4dbc2391d62257b1b9a9504827dc6b8ceff149225d94bf10a9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/jakarta.validation/jakarta.validation-api@3.1.1?type=jar",
      "externalReferences": [
        {
          "url": "https://beanvalidation.org",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://hibernate.atlassian.net/projects/BVAL/",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/jakartaee/validation",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.hibernate.validator/hibernate-validator@8.0.2.Final?type=jar",
      "group": "org.hibernate.validator",
      "name": "hibernate-validator",
      "version": "8.0.2.Final",
      "description": "Hibernate\u0027s Jakarta Bean Validation reference implementation.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "1adda123292ba2627d03a696d8c7e76a"
        },
        {
          "alg": "SHA-1",
          "content": "220e64815dd87535525331de20570017f899eb13"
        },
        {
          "alg": "SHA-256",
          "content": "2f2224a5a19bdcfa73540e9ff5c971b6c425ad80415876f305259fe873a15b2f"
        },
        {
          "alg": "SHA-512",
          "content": "3b4c68e41a245050addba3d5a856fad838e6a27fb0b8c13d34200274e13e0b3aa04c3f3d3cd883ceed880f0683093022625ed4db9522fc557782b8ad9668902d"
        },
        {
          "alg": "SHA-384",
          "content": "4addce04dd4599547dd81a02bb38426087edc11fc929ddc04790536264aa4bd4a62337b0f91604fe47b2b898039828f7"
        },
        {
          "alg": "SHA3-384",
          "content": "bcd829d013c6bb110a5d9dee2b4249678e41d670c9a7beb8b0c7ac52b7fae90be75997ef54a17900e8ef42e7afc171de"
        },
        {
          "alg": "SHA3-256",
          "content": "a1ff9dd13a537d46735504b4b3074277102c31f1b13eef40ba65537c25e1a9e6"
        },
        {
          "alg": "SHA3-512",
          "content": "db82be4ff0ca253beac177cf9fe474e3d448081a439e85e949f8f1d3a857b41c249c1bbebad1219b45a4ed580284b444c0aade591e907457e2d43fdc3f56cb60"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.hibernate.validator/hibernate-validator@8.0.2.Final?type=jar",
      "externalReferences": [
        {
          "url": "http://hibernate.org/validator/hibernate-validator",
          "type": "website"
        },
        {
          "url": "http://ci.hibernate.org/view/Validator/",
          "type": "build-system"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://hibernate.atlassian.net/projects/HV/summary",
          "type": "issue-tracker"
        },
        {
          "url": "http://github.com/hibernate/hibernate-validator/hibernate-validator",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml/classmate@1.5.1?type=jar",
      "publisher": "fasterxml.com",
      "group": "com.fasterxml",
      "name": "classmate",
      "version": "1.5.1",
      "description": "Library for introspecting types with full generic information including resolving of field and method types.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "e91fcd30ba329fd1b0b6dc5321fd067c"
        },
        {
          "alg": "SHA-1",
          "content": "3fe0bed568c62df5e89f4f174c101eab25345b6c"
        },
        {
          "alg": "SHA-256",
          "content": "aab4de3006808c09d25dd4ff4a3611cfb63c95463cfd99e73d2e1680d229a33b"
        },
        {
          "alg": "SHA-512",
          "content": "7fc4764eb65227f5ba614698a5cf2f9430133f42ec6e2ae53b4c724ee53f258541a0109fe0659e0b9e45729b46c95c00227e696b8d1addcd772c85f877658c9a"
        },
        {
          "alg": "SHA-384",
          "content": "28b4780b2353ebc08dbc02c9a343527a9062a0455bfb4ab135cb639c03e5dfd9c2250a835c44d5f17d275667c2009694"
        },
        {
          "alg": "SHA3-384",
          "content": "b194ace8f1f49f410286bd859866678b95a1b2c6f73e41f48291eb7438dffea57aaa9b177459038b6997771ce4d1cee1"
        },
        {
          "alg": "SHA3-256",
          "content": "50234c94efed4c816eb77bd2f70b869c9f89ddf8ee73dc25e354f4d0b81b3e1f"
        },
        {
          "alg": "SHA3-512",
          "content": "9886421726066b313a62283a6811b76d904ea1c1e9b7b2d850cb47afa189b03cdef053c8f7f6b79e77f2269c45f8cc2ed75c3389e96594b50987fef311d5a25f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.fasterxml/classmate@1.5.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/FasterXML/java-classmate",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/FasterXML/classmate/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/FasterXML/java-classmate",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.jboss.logging/jboss-logging@3.6.3.Final?type=jar",
      "publisher": "JBoss by Red Hat",
      "group": "org.jboss.logging",
      "name": "jboss-logging",
      "version": "3.6.3.Final",
      "description": "The JBoss Logging Framework",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "b4cf5872f18b3e80e18769d51c7ae9b2"
        },
        {
          "alg": "SHA-1",
          "content": "1cc9f976725720bb4a66f80af3e3aa6b9890d969"
        },
        {
          "alg": "SHA-256",
          "content": "7c12ee575508f81e22b1db9334b969d0ec54ef0fd1dcba24eeab1a44235fc366"
        },
        {
          "alg": "SHA-512",
          "content": "5b4e0213185d79b407352020e550ab0baba879fa465670b592f3671a53ae0128ce9d2d1fd67c2263bd625cd5549ec449521d200054c8bed9e0c0d1b6004a0287"
        },
        {
          "alg": "SHA-384",
          "content": "7022c646c30fe91fd1f483eda642290bfdbc3e8b033df7f177101758daaebdf157ac2ddd1e992cb020123482bcc7c3e6"
        },
        {
          "alg": "SHA3-384",
          "content": "ddc81176c1e55dddb8b20ba888bd096fcd372566ffb60b51068165879b6face6a4170d9d204a6ddc76e17f7e2ad68d68"
        },
        {
          "alg": "SHA3-256",
          "content": "ad9aa5fd92d755bc8717c4095fd815d0213f8456d7209727a796548f5b3bf46e"
        },
        {
          "alg": "SHA3-512",
          "content": "e0ea47f66d8ff6e2796732d82aa4772b17441751469c78a1cd5f4ab227c953addcd9810e6ebdbca48634ad874da0933ecaaf5848a38f3ea07de0ccd601965ecd"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.jboss.logging/jboss-logging@3.6.3.Final?type=jar",
      "externalReferences": [
        {
          "url": "https://www.jboss.org",
          "type": "website"
        },
        {
          "url": "https://issues.redhat.com/",
          "type": "issue-tracker"
        },
        {
          "url": "http://lists.jboss.org/pipermail/jboss-user/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/jboss-logging/jboss-logging/tree/main/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/jakarta.el/jakarta.el-api@6.0.1?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "jakarta.el",
      "name": "jakarta.el-api",
      "version": "6.0.1",
      "description": "Jakarta Expression Language defines an expression language for Java applications",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "a98f097e059552a75748fcdd067e5c16"
        },
        {
          "alg": "SHA-1",
          "content": "c7c4a2eb1e40e0ff45ab5e2e52bd77d8c7a75176"
        },
        {
          "alg": "SHA-256",
          "content": "7e84b5bed49de32b79cc5e85d90b6f5adb1a953ac67283adbb41c1e297f9c605"
        },
        {
          "alg": "SHA-512",
          "content": "fbab7bdf18e9bfb316b519a8c3b3d1f2e769e3f318b72e46cf33621f2942b84eede9b97970ff46fe29b54f8d61cb0df9e584d371f10e56bf0050d7727eb0ee23"
        },
        {
          "alg": "SHA-384",
          "content": "8c9c0712f90e359567fb2f080a18d38227ebd3096730980aeec86ee290b79f79cb4cf9888f72944ac240c01330828344"
        },
        {
          "alg": "SHA3-384",
          "content": "3c82d728737f09f400956a25664b008a307a359f33084ae9304ecf850b2b8448b27a7f017a6630299b7bd7ea4dddc239"
        },
        {
          "alg": "SHA3-256",
          "content": "2e870db1b8d460705534cba4ccd57b2d8247db1ff9bba831e2b2aef28261b4ea"
        },
        {
          "alg": "SHA3-512",
          "content": "d7eba15a92c49d1061ed4ac4c6a298dcd5b17896d8de214d5ad560624c2e2c855e9846626821754c47b898dea656ab516138d0ef607d5faf7c1dbed8c660ee6f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "name": "GNU General Public License, version 2 with the GNU Classpath Exception",
            "url": "https://www.gnu.org/software/classpath/license.html"
          }
        }
      ],
      "purl": "pkg:maven/jakarta.el/jakarta.el-api@6.0.1?type=jar",
      "externalReferences": [
        {
          "url": "https://projects.eclipse.org/projects/ee4j.el",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/el-ri/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/el-dev",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/el-ri",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.expressly/expressly@5.0.0?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.glassfish.expressly",
      "name": "expressly",
      "version": "5.0.0",
      "description": "Jakarta Expression Language Implementation",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "d4448c69fe69ebca37b2c76e62e385c3"
        },
        {
          "alg": "SHA-1",
          "content": "78637fec7db6414c3ad32f3aa9e5d6610a299e5b"
        },
        {
          "alg": "SHA-256",
          "content": "b0c872737bb8381921b304d0952854666d1ba320b9b3c5bf4d70a09a86b61524"
        },
        {
          "alg": "SHA-512",
          "content": "8abd592d1fd70ef7fac5d0c1debe59dddea59dd82262bae016b44c506ceb68bb0619f464a07e553cc6885d527e1b8b8571e8975ca040c7864baba2349f30b725"
        },
        {
          "alg": "SHA-384",
          "content": "dc233d0838d2912d2473b8b6f5988145f4116dc2b139ea0378e78f260ed4c7609c954875c21fa579c4901f3202b3ca61"
        },
        {
          "alg": "SHA3-384",
          "content": "d946ffea99369b9933d07076f88a605a8b724edbc1d771ec92db145e6a68e447ac261efd9a4cdb74dce38827f75bd7d4"
        },
        {
          "alg": "SHA3-256",
          "content": "a46f1d62e482167ead93bc3f1261852cbd968e8fc7b68b399685d0bf6eb095d7"
        },
        {
          "alg": "SHA3-512",
          "content": "5e23912f838fe9487d5c0ab44d806e05f1754df1d18f1f7231a32975a73d7747edab4166903b5cbdc6ef002efc4a768b10baa4d7dabcb1c29bca61e9ab923347"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "name": "GNU General Public License, version 2 with the GNU Classpath Exception",
            "url": "https://www.gnu.org/software/classpath/license.html"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.expressly/expressly@5.0.0?type=jar",
      "externalReferences": [
        {
          "url": "https://projects.eclipse.org/projects/ee4j.expressly",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/expressly-ri/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/expressly-dev",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/expressly-ri",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/alpine-infra@5.1.2?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "alpine-infra",
      "version": "5.1.2",
      "description": "An opinionated scaffolding library that jumpstarts Java projects with an API-first design, secure defaults, and minimal dependencies.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "96f6cf513f09ec6be045aaaa95c7211a"
        },
        {
          "alg": "SHA-1",
          "content": "6f19366fc54a4595d5c936cfb49080eb8eb6482e"
        },
        {
          "alg": "SHA-256",
          "content": "d14d3918948fb648700815e60dfc80ea517cd60dec6d3cbe5a353af2d424f25a"
        },
        {
          "alg": "SHA-512",
          "content": "68f3fbf301738f578b5175280492fb5caac0d9ee7ceac3f39b4fa8414c6dfaf019c547a53cb3cbb76c24d3a9999f7158ef4290c926457fddb9b1d3c873bbafc7"
        },
        {
          "alg": "SHA-384",
          "content": "4fa5a8c1b1c1bf6c17f814f194c88e11c8e8c7fd68a1b990ba9742315358c3dd0c27a6669c6c1db7ef699eeca48ebb81"
        },
        {
          "alg": "SHA3-384",
          "content": "649d287b79e8ae2615388c76bfcf1458bf0316024e98a86a8fac893c45af426965ee677127fe694219a07eb6127f0b68"
        },
        {
          "alg": "SHA3-256",
          "content": "c8aeb3ebbfcedcd205dc40242b9d33266dc81823ed63124e99d111df905b75eb"
        },
        {
          "alg": "SHA3-512",
          "content": "84ef8cb09ddfcbd798060c696d083faa9d0212e295542ed41695022c86ac45f99b10211db66627092f5ca3db6b3ecdd9ac9eb2d15b13c6d4eadc2ebf56df6f64"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/alpine-infra@5.1.2?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/stevespringett/Alpine/alpine-infra",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/alpine-parent/alpine-infra",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.datanucleus/datanucleus-rdbms@6.0.11?type=jar",
      "group": "org.datanucleus",
      "name": "datanucleus-rdbms",
      "version": "6.0.11",
      "description": "Plugin for DataNucleus providing persistence to RDBMS datastores.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "33a96bd9a1e242d31cc0929562e3af04"
        },
        {
          "alg": "SHA-1",
          "content": "52d9d3d77483021736ee88ee7f53d2447cb1049e"
        },
        {
          "alg": "SHA-256",
          "content": "a9271d3c793bdd73ab6444346d6036982929529cdcb874dbd8fad1e90de04338"
        },
        {
          "alg": "SHA-512",
          "content": "fe93c578f598f5282e637b542e7dd44061b59ea6e9f00fc6df595c9f26ff567daccf7ec7359e3a120e5a4090b8b7f4ff36e991210507123d6e3477f0aae24984"
        },
        {
          "alg": "SHA-384",
          "content": "f80c7aa7375f1317172236773e4ba02a67c45b788566977278d8125fe4226ffd60604c4fe5ad2b82aa97122f15ed8e7d"
        },
        {
          "alg": "SHA3-384",
          "content": "0583f548e429a4412a87e6423ec0d334aca631470b3e7a355d192e39a68c64e68d59fbff11552eefc7b7cb2153fcc2a3"
        },
        {
          "alg": "SHA3-256",
          "content": "8cb46d03fdee2bc0f022e5d724c1b7affcd378e5bd4c72c0779e80f35fe40b47"
        },
        {
          "alg": "SHA3-512",
          "content": "e630592197b25c46cf137b4146e884b18b6b4793ed4a4a32f6169ab51f64775a5eabdbccd3bb3e2dc87526330bc4cf0b0b8a661e457a32ca565d10f3b2759af8"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.datanucleus/datanucleus-rdbms@6.0.11?type=jar",
      "externalReferences": [
        {
          "url": "http://www.datanucleus.org/#/datanucleus-rdbms",
          "type": "website"
        },
        {
          "url": "https://github.com/datanucleus/datanucleus-rdbms",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/alpine-server@5.1.2?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "alpine-server",
      "version": "5.1.2",
      "description": "An opinionated scaffolding library that jumpstarts Java projects with an API-first design, secure defaults, and minimal dependencies.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "85c42fc45ba3d9c7ac62b3a6176ec13a"
        },
        {
          "alg": "SHA-1",
          "content": "ab740708652452f104dd9d5d98a9d559f5505b1f"
        },
        {
          "alg": "SHA-256",
          "content": "f57c4928a0a41c2d2fed6eb744854d1b63c3607aab1ae256ba78d381577df0da"
        },
        {
          "alg": "SHA-512",
          "content": "6d526fdd7cb8be2772f1a3649e5b2c0a47d3c797986784c40caad1b0736cb14d0d72b1efbc65ec01dc3d2578ca4272aca7053ec8099ec971da035e30f5bb23ae"
        },
        {
          "alg": "SHA-384",
          "content": "3ee89c448e1639faaa13f24bc00086e1ee169653b1aece4c4986abf4fffc132b6830ed86720df83b7ae24404be50e70c"
        },
        {
          "alg": "SHA3-384",
          "content": "d4938a46c003929b2a0668cfdc91bd686f13098c72d4becbab638b8ad68ff9c5940d4f05325e3c6727e232aac345de5e"
        },
        {
          "alg": "SHA3-256",
          "content": "47002e6d3dd9206a6827a1d2ffe11ed808f7b08d0c6fae05f946ff0d7fbb21be"
        },
        {
          "alg": "SHA3-512",
          "content": "783094784828b74d2dd288b962e0e8dec08f52f5295c0e101ea04799b3821e61139c1f883b9be749062e29775994649e534a48a89a3390808fad999196b2e488"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/alpine-server@5.1.2?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/stevespringett/Alpine/alpine-server",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/alpine-parent/alpine-server",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.jersey.containers/jersey-container-servlet@4.0.2?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.glassfish.jersey.containers",
      "name": "jersey-container-servlet",
      "version": "4.0.2",
      "description": "Jersey core Servlet 3.x implementation",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "25818f2d34a03809a4e2a1a4949aa3c5"
        },
        {
          "alg": "SHA-1",
          "content": "e49f6b43e8f35fc42d78aadebf9ce675be83eb2a"
        },
        {
          "alg": "SHA-256",
          "content": "9317b4c9cc8f86906fe6f64b2ae613d7b586d7fb396cd13eaf615a2d5bb142ae"
        },
        {
          "alg": "SHA-512",
          "content": "f881cd95bd25fae560bf52771a3e869cfe732c5ac99aae1645a014da92a2f5db7b6e2353dfdfa595e3f39aa85a1516a0b45b71b33d226d5af8fb1aaca3a9492b"
        },
        {
          "alg": "SHA-384",
          "content": "a71eea737f5a1a65ba648fe4e315f5f7a5731649199fa4c925146592639642ee48b15939f30277c8b27022294394dc1a"
        },
        {
          "alg": "SHA3-384",
          "content": "b4ca6ab8e6eb625bbafe472a8c5be3aa3b93e296345243e4ef5f8a29b37a517954b41829a7d9a214bdc0c02976d3a48a"
        },
        {
          "alg": "SHA3-256",
          "content": "49b2b2914f513aa873f17692bb67b324c9109ce9b8ea95db11e2c92101c4e4fa"
        },
        {
          "alg": "SHA3-512",
          "content": "887968d759326a48839b736ed1f44cc444f6c6e2895219c4886323eb417ae8ef824e4d87b9739906e84fd101073be0eddb2b0e1e2b9a66f19cb7ef37b86bd193"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        },
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        },
        {
          "license": {
            "id": "BSD-2-Clause"
          }
        },
        {
          "license": {
            "name": "Apache License, 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        },
        {
          "license": {
            "name": "Public Domain",
            "url": "https://creativecommons.org/publicdomain/zero/1.0/"
          }
        },
        {
          "license": {
            "name": "Modified BSD",
            "url": "https://asm.ow2.io/license.html"
          }
        },
        {
          "license": {
            "name": "jQuery license",
            "url": "jquery.org/license"
          }
        },
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/license/mit/"
          }
        },
        {
          "license": {
            "name": "W3C license",
            "url": "https://www.w3.org/Consortium/Legal/copyright-documents-19990405"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.jersey.containers/jersey-container-servlet@4.0.2?type=jar",
      "externalReferences": [
        {
          "url": "https://projects.eclipse.org/projects/ee4j.jersey/project/jersey-container-servlet",
          "type": "website"
        },
        {
          "url": "https://ci.eclipse.org/jersey",
          "type": "build-system"
        },
        {
          "url": "http://localhost",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/project/jersey-container-servlet",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.jersey.media/jersey-media-json-jackson@4.0.2?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.glassfish.jersey.media",
      "name": "jersey-media-json-jackson",
      "version": "4.0.2",
      "description": "Jersey JSON Jackson (2.x) entity providers support module.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "35bc0ebd87e351b294c4c2d80a49637d"
        },
        {
          "alg": "SHA-1",
          "content": "49a43c8e343340e8a91671d14a4e71bf6bcca832"
        },
        {
          "alg": "SHA-256",
          "content": "efa2fdad26e994adde4f827c11e44ab5fd3cf3c3e0aa4f99e8eefd1b83449fa7"
        },
        {
          "alg": "SHA-512",
          "content": "c57f5a439c0fec721d8776afe4947d004bb77a3beae809bf71cfe621f6a3aad3342450529a0e0d0696dce691bf3ab35c167829aa60829db903f5b5b73998b5ba"
        },
        {
          "alg": "SHA-384",
          "content": "f324740990411a83622cd12bdefb3e89cfb02c4ea703f4b6a693033b906f0c51b36ff28bb6ff38e5de1553b8e56b8e09"
        },
        {
          "alg": "SHA3-384",
          "content": "67024bf3a7e0eb78074482c54a6bb8edde46152a8421b0018948592358b548c653049d1cfea3c46d2f2e6a43696d260c"
        },
        {
          "alg": "SHA3-256",
          "content": "929d16ec5a727e2fb44e970048f7b9afb15af7e3cfe8ae6927faf9214ce1bc9e"
        },
        {
          "alg": "SHA3-512",
          "content": "9e21c8523d65bb618302f96ab10914fe217e60d18ec6ef3ebea51fdccd8c0fe8c5e6b159a59d257134448c152dde8496e4b23e054d55254465f0797fa5e1a703"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "name": "The GNU General Public License (GPL), Version 2, With Classpath Exception",
            "url": "https://www.gnu.org/software/classpath/license.html"
          }
        },
        {
          "license": {
            "name": "Apache License, 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.jersey.media/jersey-media-json-jackson@4.0.2?type=jar",
      "externalReferences": [
        {
          "url": "https://projects.eclipse.org/projects/ee4j.jersey/project/jersey-media-json-jackson",
          "type": "website"
        },
        {
          "url": "https://ci.eclipse.org/jersey",
          "type": "build-system"
        },
        {
          "url": "http://localhost",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/project/jersey-media-json-jackson",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.jersey.ext/jersey-entity-filtering@4.0.2?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.glassfish.jersey.ext",
      "name": "jersey-entity-filtering",
      "version": "4.0.2",
      "description": "Jersey extension module providing support for Entity Data Filtering.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "6a9d18c10c375eaf87da84354bdbea31"
        },
        {
          "alg": "SHA-1",
          "content": "ebe669571bf00ea4030cfd17c3593ad1d334662d"
        },
        {
          "alg": "SHA-256",
          "content": "633afbf5f3c1ae53aeffbec1f486a878446f19ec8df42b2f795cb06620d1db90"
        },
        {
          "alg": "SHA-512",
          "content": "db48c6417f847d2f51b41d15315c6e73ed3a50e8b3f3b767f05c3f50827bc64359a9132a76283913ea753e840bfb96b0aa602e92b8b8818cb80d47fed11eb4f9"
        },
        {
          "alg": "SHA-384",
          "content": "c290248a96e5ccbc7bda48f0ac8312f829c801921aa1614066595b0f7395af94d67732bb4684834db85c1fa59db96d76"
        },
        {
          "alg": "SHA3-384",
          "content": "53d6d7c09162840e7bed9f1fb7a4bbf761c641b9701d8d562b3233e866cb424887120e7933dbcaea37d9951b67579773"
        },
        {
          "alg": "SHA3-256",
          "content": "189e43a565898a7fa96814e1c2430033a3e85f053958dc5c9c803e26385f899c"
        },
        {
          "alg": "SHA3-512",
          "content": "8789df3ed80682cc9bcdc0706c967a6749490a7b00f2a017fb9c5f1a500a14f2ddd2ff3596a95c0e44d86b156eb1be4b75a4b8bdb44aa4087323b6908716fd09"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        },
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        },
        {
          "license": {
            "id": "BSD-2-Clause"
          }
        },
        {
          "license": {
            "name": "Apache License, 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        },
        {
          "license": {
            "name": "Public Domain",
            "url": "https://creativecommons.org/publicdomain/zero/1.0/"
          }
        },
        {
          "license": {
            "name": "Modified BSD",
            "url": "https://asm.ow2.io/license.html"
          }
        },
        {
          "license": {
            "name": "jQuery license",
            "url": "jquery.org/license"
          }
        },
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/license/mit/"
          }
        },
        {
          "license": {
            "name": "W3C license",
            "url": "https://www.w3.org/Consortium/Legal/copyright-documents-19990405"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.jersey.ext/jersey-entity-filtering@4.0.2?type=jar",
      "externalReferences": [
        {
          "url": "https://projects.eclipse.org/projects/ee4j.jersey/project/jersey-entity-filtering",
          "type": "website"
        },
        {
          "url": "https://ci.eclipse.org/jersey",
          "type": "build-system"
        },
        {
          "url": "http://localhost",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/project/jersey-entity-filtering",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml.jackson.module/jackson-module-jakarta-xmlbind-annotations@2.22.3?type=jar",
      "publisher": "FasterXML",
      "group": "com.fasterxml.jackson.module",
      "name": "jackson-module-jakarta-xmlbind-annotations",
      "version": "2.22.3",
      "description": "Support for using Jakarta XML Bind (aka JAXB 3.0) annotations as an alternative to \u0022native\u0022 Jackson annotations, for configuring data-binding.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "6c200c8acecd147379acf993d5a8e3cb"
        },
        {
          "alg": "SHA-1",
          "content": "c5858c73043ca2924f79bf23cefb092e415a5c2c"
        },
        {
          "alg": "SHA-256",
          "content": "ce2bbc8d3f27e9321a80e30231288aa0c340c100c45eb413efffbab7b98f3c1e"
        },
        {
          "alg": "SHA-512",
          "content": "4b3191048418585444d530ba9e5da2754d0623b2710e065c285d2d49f3a0c1db9da357679d7ba2777817f1a1616675046489ac3e4b5d3a9061debcc0212f099c"
        },
        {
          "alg": "SHA-384",
          "content": "82061994eb0edd761a0e4b337517db42238523ce3d349ffcf204f59a2c5f245b902907ef3e3ef2f8f96d894362937f8a"
        },
        {
          "alg": "SHA3-384",
          "content": "4b1678a5df2b188b44581d525ddf058d116210c19ca3f30dfd643e8e4d0cbc3dd892d6908d6f37d9dcbe8b3ee69f11f4"
        },
        {
          "alg": "SHA3-256",
          "content": "e0d21f8fdb6ccdeb295584b7fb7a91008ec9bc74360e99c3e4fac1cc3d4cea6d"
        },
        {
          "alg": "SHA3-512",
          "content": "2a417192c2b4c506ee9b786cd1ee04fdd0175b48ed6b63a4b2817ae5a38f4ccd47c8fde835406275b39710df633960c62d95dfe41c12e76f77fa60a416b56cfa"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.module/jackson-module-jakarta-xmlbind-annotations@2.22.3?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/FasterXML/jackson-modules-base",
          "type": "website"
        },
        {
          "url": "https://central.sonatype.com/api/v1/publisher",
          "type": "distribution"
        },
        {
          "url": "https://github.com/FasterXML/jackson-modules-base/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/FasterXML/jackson-modules-base/jackson-module-jakarta-xmlbind-annotations",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@4.0.2?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "jakarta.xml.bind",
      "name": "jakarta.xml.bind-api",
      "version": "4.0.2",
      "description": "Jakarta XML Binding API",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "0c8f9991081def819435c3ff36e4d93f"
        },
        {
          "alg": "SHA-1",
          "content": "6cd5a999b834b63238005b7144136379dc36cad2"
        },
        {
          "alg": "SHA-256",
          "content": "0d6bcfe47763e85047acf7c398336dc84ff85ebcad0a7cb6f3b9d3e981245406"
        },
        {
          "alg": "SHA-512",
          "content": "2e57ce867ae3592959243ab9d7d064b09d9587933c98f89f5d5eeb8fe70556a53fea6db91520a2e086555684e8917f4001741bd8ffb07d26c59fe95c13d71fa0"
        },
        {
          "alg": "SHA-384",
          "content": "7ac5da337fccfa426b48691febed0d874a8e9a6a230bb7a53169f902e5b499778106f7b710afbe133dbd7bfacca693a0"
        },
        {
          "alg": "SHA3-384",
          "content": "fc952425a51459a5d18dc7b6315625c55889e1b92e700450c84205506e5107ca4c7c8bc449190220bf471db3dcbf9c8a"
        },
        {
          "alg": "SHA3-256",
          "content": "a78dd7c5883b16cf899495930e653650005c71b4d9b509e56cac4665778d715e"
        },
        {
          "alg": "SHA3-512",
          "content": "bdf9db79b8ade9421c3f5fc497ebe13a552be5852d99cedfa38bb6c760c8bf190f88204ab6e02442db5fb24378afc6112297c5a582d4e721de71285405a6429d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@4.0.2?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/jakartaee/jaxb-api/jakarta.xml.bind-api",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/jakartaee/jaxb-api/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/jaxb-dev",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/jakartaee/jaxb-api.git/jakarta.xml.bind-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.jersey.media/jersey-media-multipart@4.0.2?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.glassfish.jersey.media",
      "name": "jersey-media-multipart",
      "version": "4.0.2",
      "description": "Jersey Multipart entity providers support module.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "aae6111826bc8092f33c8e80de9c120d"
        },
        {
          "alg": "SHA-1",
          "content": "f5400fc442af3cdcc46f0204f2b6072402aaca9d"
        },
        {
          "alg": "SHA-256",
          "content": "b9bbd74fa5337753c1f96e2ef1e9ab5c7ab1ad3b8fe1c4f719a311e8f3821aed"
        },
        {
          "alg": "SHA-512",
          "content": "75a380ec7fee2a1a04327cc765ea6a52e1b70da3a91dc921cbc221085b1541e68e40d5c743a6227c86d2d74a65cfe68b05ec1fbce42ac739f6a5e4498c8dcdd6"
        },
        {
          "alg": "SHA-384",
          "content": "f09f5dcd92f1960593f1909c13813774658f735e8a875502c9061c51cc6a78d5195d1973ea346809d837d25e3dff2ee4"
        },
        {
          "alg": "SHA3-384",
          "content": "07030c4ab91f627b75f8d93460e45e4966db068a6a06fc2108a2cde14360685717d4669d0311885687d787085e79c97a"
        },
        {
          "alg": "SHA3-256",
          "content": "d4110cad7c9d2fb29775aa789b662dfda3b70755706d90815eaaf0ee0c3f5d4d"
        },
        {
          "alg": "SHA3-512",
          "content": "ecd7b48b0e3069d4441f9a9f357552ba7f15a952fab0d71e52bfac349c04492c80687f849b88d2b22b85ee1dc902d56a9b7cf1c20d9c0440bfea5113798d290c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        },
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        },
        {
          "license": {
            "id": "BSD-2-Clause"
          }
        },
        {
          "license": {
            "name": "Apache License, 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        },
        {
          "license": {
            "name": "Public Domain",
            "url": "https://creativecommons.org/publicdomain/zero/1.0/"
          }
        },
        {
          "license": {
            "name": "Modified BSD",
            "url": "https://asm.ow2.io/license.html"
          }
        },
        {
          "license": {
            "name": "jQuery license",
            "url": "jquery.org/license"
          }
        },
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/license/mit/"
          }
        },
        {
          "license": {
            "name": "W3C license",
            "url": "https://www.w3.org/Consortium/Legal/copyright-documents-19990405"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.jersey.media/jersey-media-multipart@4.0.2?type=jar",
      "externalReferences": [
        {
          "url": "https://projects.eclipse.org/projects/ee4j.jersey/project/jersey-media-multipart",
          "type": "website"
        },
        {
          "url": "https://ci.eclipse.org/jersey",
          "type": "build-system"
        },
        {
          "url": "http://localhost",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/project/jersey-media-multipart",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.jvnet.mimepull/mimepull@1.9.15?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.jvnet.mimepull",
      "name": "mimepull",
      "version": "1.9.15",
      "description": "Provides a streaming API to access attachments parts in a MIME message.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "fdc35a1eae84c5a60c95d617551d4a06"
        },
        {
          "alg": "SHA-1",
          "content": "60f9a7991ad9ec1a280db8deea216a91c10aae74"
        },
        {
          "alg": "SHA-256",
          "content": "b9f586bf8844b14a33e75fe7a4b94896dc80d80b732d128777e287af14c836fa"
        },
        {
          "alg": "SHA-512",
          "content": "d80e7f2550272edefe8eebace17c8b836d72602bfff67007c6463d4c7b02a36b97467f23d358601d97882160533ed110da938082994434e2312fb0c4e0f2a19e"
        },
        {
          "alg": "SHA-384",
          "content": "dea380fc137e9784a6c6d114c0a12d4a415baa21e2ce188b952ee1bfa59baaa53e133a0c5fcde9ff1abdbf4dbe93a58b"
        },
        {
          "alg": "SHA3-384",
          "content": "c4d8fc6eff8b9325c07f037484d49e1a52ad580237ba247eec92617e15be03501862b7f64b334919077e124bb94975c5"
        },
        {
          "alg": "SHA3-256",
          "content": "648e6b07265e79912cf8191efdaf316a7f2d317e79d7e4e9b7e323556da74fac"
        },
        {
          "alg": "SHA3-512",
          "content": "14672a4a8dd2a5fe1d437a1204de922eb668ff76c72dae0acc4438fa54eb25a2f6232c75038a391428544b3e77a0a6290d84a99b9c60ea7ce743561ca9b4e1ba"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/org.jvnet.mimepull/mimepull@1.9.15?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/eclipse-ee4j/metro-mimepull",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/metro-mimepull/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://www.eclipse.org/lists/metro-dev",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/metro-mimepull",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.jersey.inject/jersey-hk2@4.0.2?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.glassfish.jersey.inject",
      "name": "jersey-hk2",
      "version": "4.0.2",
      "description": "HK2 InjectionManager implementation",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "295f464e22b0303c2c5dc23888194042"
        },
        {
          "alg": "SHA-1",
          "content": "8283989a7a36b51f31c5f35b354881d106bee6b3"
        },
        {
          "alg": "SHA-256",
          "content": "5df758fc55d0d7cdb431b4c9ab50fbf613965ce0a7898d1a923d957e3a93df2c"
        },
        {
          "alg": "SHA-512",
          "content": "846c8d018bb0059eda93b8b1f464f7bf14d284b36d871df0233b6655486344168373a31b8a778891d2de0d8e4141446e04b0845b21bce793ce728c0d93bda512"
        },
        {
          "alg": "SHA-384",
          "content": "1b3d5da027e60c1cd2d0c97069350cef3e42b45b4814976ce8185dcf57b1dac907375835f8a34f25f59fdcd0c394e4fb"
        },
        {
          "alg": "SHA3-384",
          "content": "fd5e03a684c044960e176577371ce74cadabc5673d558f96a7d1dff56b59bef6809a897913c99660bcdcc8c27fe43be4"
        },
        {
          "alg": "SHA3-256",
          "content": "b9c053c2b3cd0fe0c1bd0c8b78ac4a7a1b97ce5c80f7722483b70d40c1cfb476"
        },
        {
          "alg": "SHA3-512",
          "content": "087e8d0583f2db5c0b877188d8bd85e15af42e0e6bdb10e5363639a8e721cf128874fdeaead7ad5d2b5c6b2e2741708d4bddd3638c7f27275b11c3a96095c2ef"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        },
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        },
        {
          "license": {
            "id": "BSD-2-Clause"
          }
        },
        {
          "license": {
            "name": "Apache License, 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        },
        {
          "license": {
            "name": "Public Domain",
            "url": "https://creativecommons.org/publicdomain/zero/1.0/"
          }
        },
        {
          "license": {
            "name": "Modified BSD",
            "url": "https://asm.ow2.io/license.html"
          }
        },
        {
          "license": {
            "name": "jQuery license",
            "url": "jquery.org/license"
          }
        },
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/license/mit/"
          }
        },
        {
          "license": {
            "name": "W3C license",
            "url": "https://www.w3.org/Consortium/Legal/copyright-documents-19990405"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.jersey.inject/jersey-hk2@4.0.2?type=jar",
      "externalReferences": [
        {
          "url": "https://projects.eclipse.org/projects/ee4j.jersey/project/jersey-hk2",
          "type": "website"
        },
        {
          "url": "https://ci.eclipse.org/jersey",
          "type": "build-system"
        },
        {
          "url": "http://localhost",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/project/jersey-hk2",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.hk2/hk2-locator@4.0.0-M3?type=jar",
      "publisher": "Oracle Corporation",
      "group": "org.glassfish.hk2",
      "name": "hk2-locator",
      "version": "4.0.0-M3",
      "description": "ServiceLocator Default Implementation",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "b4208d604d4c23e3acae9f6300aafd4c"
        },
        {
          "alg": "SHA-1",
          "content": "64a198be0ce5a86c6e6e439188fc4e7187416588"
        },
        {
          "alg": "SHA-256",
          "content": "290027395d95bfcbb5f40c992376a6f21c75bf63c9c8d4df3cfc034ba1a85ded"
        },
        {
          "alg": "SHA-512",
          "content": "cb3280c9af78f7fa19cf537448bb28be7e1981733fbf2bc1e86823288539def8c856cb915c921c9cd6ef490b39bb93aba998eb35ed967aa3c0a11d7a65b05cad"
        },
        {
          "alg": "SHA-384",
          "content": "a0a74b0787b7240632ac04fb635bfb8cdb8ce7529ebeca5a03f3157ee5ccdd902ce83300995eff2e44ff5d58e0ed330b"
        },
        {
          "alg": "SHA3-384",
          "content": "f260e2b328e7be64987ac4b2f72b7f627eac5dbfb318ae40ae5c7cd08a5cb4a8e2b60cd2e5863bfb54782200563a7f6c"
        },
        {
          "alg": "SHA3-256",
          "content": "a3bd95277a4f2f33a9e8b0fec11ef6b7e7e57efe6454bb35a8b9a9474c7d8818"
        },
        {
          "alg": "SHA3-512",
          "content": "1a4eb5c85a9346ee214f5f9afc1a9fa5bc9b0d8bcf4261370a6dc6efd595b3a3ff50ad89eb85a4c6693ebf86590d362d58fbffdc5c399c7746524caef25ad24b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.hk2/hk2-locator@4.0.0-M3?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/eclipse-ee4j/glassfish-hk2/hk2-locator",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/glassfish-hk2/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/glassfish-hk2-dev/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/glassfish-hk2/hk2-locator",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.hk2.external/aopalliance-repackaged@4.0.0-M3?type=jar",
      "publisher": "Oracle Corporation",
      "group": "org.glassfish.hk2.external",
      "name": "aopalliance-repackaged",
      "version": "4.0.0-M3",
      "description": "Dependency Injection Kernel",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "265ded5507ff1db7cd2184d4846fc85b"
        },
        {
          "alg": "SHA-1",
          "content": "71779579326f1648524a86fdee77bdf1d2d45336"
        },
        {
          "alg": "SHA-256",
          "content": "65c0abb946d2ab3a1237c610f24bf15f04696151e9cafbe1afa6cee52fbed5ed"
        },
        {
          "alg": "SHA-512",
          "content": "e45784cc801cef6726c4c74ba6158f34de84b6ee7b3c4823be16b9a53aee22f0b251c8c0144953c8c09d4e8169c2134a1530baece93169efbb33c0c118af7de5"
        },
        {
          "alg": "SHA-384",
          "content": "de80c2803aafdedaddb185277ca9946c5ea24e8f3f10f172abedf8cf9fd2de61d4ac022ae466cbe9fc54ffff3a43acd8"
        },
        {
          "alg": "SHA3-384",
          "content": "af3ce290b4aecad2cf4f5b163a484013732d2891b640b927169e9dfdaec19254404b5ce9a0162842a1d915024fa5752a"
        },
        {
          "alg": "SHA3-256",
          "content": "9043468d2fa46fd4b156845bcfa8a5ed350dcab0929a970aa2d4f885c62f69c6"
        },
        {
          "alg": "SHA3-512",
          "content": "88722b8a289ecbe9753c9801ffadc909089879b4c3d71edd4ec298eb5d6fddb5a6bd0d56fa01ae6fad5f9826460d0809a6d0f4aabc009a1d2d4377f03fb507ed"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.hk2.external/aopalliance-repackaged@4.0.0-M3?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/eclipse-ee4j/glassfish-hk2/external/aopalliance-repackaged",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/glassfish-hk2/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/glassfish-hk2-dev/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/glassfish-hk2/external/aopalliance-repackaged",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.hk2/hk2-api@4.0.0-M3?type=jar",
      "publisher": "Oracle Corporation",
      "group": "org.glassfish.hk2",
      "name": "hk2-api",
      "version": "4.0.0-M3",
      "description": "HK2 API module",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "4a7799f8b0c76121478fdbfd3fa481cb"
        },
        {
          "alg": "SHA-1",
          "content": "4b9520d9c4ecdc8b688a50968c19b54b55fc1274"
        },
        {
          "alg": "SHA-256",
          "content": "66f859916e6a7de3622973acf7f672a895c9bac81622080dfbb95ac9b021b1f8"
        },
        {
          "alg": "SHA-512",
          "content": "f202d82a2493430495b7c0d2006f21b3435f5367b6e24f7ef41736c2fb0d551a8ab4a269808dec7f8c8df8b3bb62fc05f148740ca5b4f642becac6216971ba12"
        },
        {
          "alg": "SHA-384",
          "content": "be02adf52ba9a8cfc1fa5792b4b2ede0a577e8f55d7589740c563ddd3c6fcbabf9ed9d9a310f5f8ac4aac91b09cecc58"
        },
        {
          "alg": "SHA3-384",
          "content": "0c5d90d77991c80953945914bbc2cf22420765396edf899863f16dc50527cb251c04c8e3ee6b68a44e657ce76a97c7e3"
        },
        {
          "alg": "SHA3-256",
          "content": "25692ba0b74506800453bed8bc69f98b6b8ebe75cf78984cb5af1047a0e3f028"
        },
        {
          "alg": "SHA3-512",
          "content": "e4d89788416d7f29a91758f03715fc3bc5c85023bc0e0f2093852d72c0437308bb53e71c5710f6e8f0841a1eaece0af1351ea0bce5ca075f9b2c19af8508b9d6"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.hk2/hk2-api@4.0.0-M3?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/eclipse-ee4j/glassfish-hk2/hk2-api",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/glassfish-hk2/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/glassfish-hk2-dev/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/glassfish-hk2/hk2-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.hk2/hk2-utils@4.0.0-M3?type=jar",
      "publisher": "Oracle Corporation",
      "group": "org.glassfish.hk2",
      "name": "hk2-utils",
      "version": "4.0.0-M3",
      "description": "HK2 Implementation Utilities",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "8bc6984bd681f30286f4d95ee8795b61"
        },
        {
          "alg": "SHA-1",
          "content": "d0017a4fffdb8184582d579c15e4d90765e4d11b"
        },
        {
          "alg": "SHA-256",
          "content": "ba7087827fe89af3d824fc26556c985ce9afa0cc30faa24e8b65145ca0fefcf1"
        },
        {
          "alg": "SHA-512",
          "content": "b39a525b64d012ae99e09809ecd906bab9fc98baf027005b86f964b2baf2ca455e4fca655bca1b147ddc8225b0f6abda32859beed920d59f813bf4c3a5de7a43"
        },
        {
          "alg": "SHA-384",
          "content": "08d57c36622c3cfd6471b0552653aea5194d491e7cef0a8946ebc7c26195e640c6fe54c5db4829e71f5a213294fc5a6c"
        },
        {
          "alg": "SHA3-384",
          "content": "b5d5b9bb24d31585a42052571cb6cad2b10035a3439ec6f66689dff03034cab04d81a3b0187c3917158f1e6332ae75e5"
        },
        {
          "alg": "SHA3-256",
          "content": "0d635ee61147b0fcf9ec3208926e86e14752e390f45ec26828d427a12b0cf15e"
        },
        {
          "alg": "SHA3-512",
          "content": "5280173e2349d1490362b2b320cbbd17e56f751d995ac20e2867de2c7955118c3d12f852c784e0e8dce21854c534a0c1721245e8b4ab1d96a97788a3dc006372"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.hk2/hk2-utils@4.0.0-M3?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/eclipse-ee4j/glassfish-hk2/hk2-utils",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/glassfish-hk2/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/glassfish-hk2-dev/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/glassfish-hk2/hk2-utils",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.javassist/javassist@3.30.2-GA?type=jar",
      "publisher": "Shigeru Chiba, www.javassist.org",
      "group": "org.javassist",
      "name": "javassist",
      "version": "3.30.2-GA",
      "description": "Javassist (JAVA programming ASSISTant) makes Java bytecode manipulation simple. It is a class library for editing bytecodes in Java.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "f5b827b8ddec0629cc7a6d7dafc45999"
        },
        {
          "alg": "SHA-1",
          "content": "284580b5e42dfa1b8267058566435d9e93fae7f7"
        },
        {
          "alg": "SHA-256",
          "content": "eba37290994b5e4868f3af98ff113f6244a6b099385d9ad46881307d3cb01aaf"
        },
        {
          "alg": "SHA-512",
          "content": "046c5b87732ef28540c56f88891238e49ac15fcc23e1f13e0b12de816831ba3de54e68a727b6163877a7b19b13f1362c0e6affa2664af1fdac5748632ed7a09e"
        },
        {
          "alg": "SHA-384",
          "content": "d1dfb87ac4d7797ea07098b7814190eed3aa16e86dd792916ff7f86c30ad456dd153f9ae4e77f13cee03e23dd3cfb24b"
        },
        {
          "alg": "SHA3-384",
          "content": "f70abfcb1b0d9e7903171bf52fe34b33ceffa9c53b697fabac9f2d3e02b8621446f7b2471d44e2cb70862e559b4d36b2"
        },
        {
          "alg": "SHA3-256",
          "content": "cf3f1d9150d71a6f23a749c24d355accb133991a9272110c5fa0ccff73220367"
        },
        {
          "alg": "SHA3-512",
          "content": "e294c989c20271f42a4bf0c63cbb691cb2fa284088c8a846983aa0e4948b4325131b8829b210214f539d30eb4e20b14c06f4b164208488719512739d78dfd454"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MPL-1.1"
          }
        },
        {
          "license": {
            "id": "LGPL-2.1-only"
          }
        },
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.javassist/javassist@3.30.2-GA?type=jar",
      "externalReferences": [
        {
          "url": "https://www.javassist.org/",
          "type": "website"
        },
        {
          "url": "https://repository.jboss.org/nexus/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://jira.jboss.org/jira/browse/JASSIST/",
          "type": "issue-tracker"
        },
        {
          "url": "scm:git:git@github.com:jboss-javassist/javassist.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/jakarta.annotation/jakarta.annotation-api@3.0.0?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "jakarta.annotation",
      "name": "jakarta.annotation-api",
      "version": "3.0.0",
      "description": "Jakarta Annotations API",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "7faffaab962918da4cf5ddfd76609dd2"
        },
        {
          "alg": "SHA-1",
          "content": "54f928fadec906a99d558536756d171917b9d936"
        },
        {
          "alg": "SHA-256",
          "content": "b01f55552284cfb149411e64eabca75e942d26d2e1786b32914250e4330afaa2"
        },
        {
          "alg": "SHA-512",
          "content": "2bd5a16684c4e8144897ba6dc467628d1b8a85326235240e4c20101b6df3681d23aeebc30ca99e395ec848f33cb5244085031b2a0fbce746c8ede7148a5e7c1d"
        },
        {
          "alg": "SHA-384",
          "content": "1a12cb78019d310eb08314f863c2a0e48aa2845bde844f8204e653ec50713bf135cc58cce882e14ef631327952b5ad99"
        },
        {
          "alg": "SHA3-384",
          "content": "a0dd7dd32e8dc5ed679589f6066f16593b52334b9947a71381aeab44b3cbe295ec24dfef4fbfa5514ba24ea60fe042a9"
        },
        {
          "alg": "SHA3-256",
          "content": "6ae915a05b483f75c51f3a109cf368842d186b2996758b8a106377a7a9485c12"
        },
        {
          "alg": "SHA3-512",
          "content": "52f611aa0a98812e525be2b9d5a5712aef660598cff64282dbd9afc237560f442ab745fc95c919216f9cb4197c224ba6c7317282962c638fee956925bfa031c0"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl": "pkg:maven/jakarta.annotation/jakarta.annotation-api@3.0.0?type=jar",
      "externalReferences": [
        {
          "url": "https://projects.eclipse.org/projects/ee4j.ca",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/jakartaee/common-annotations-api/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/ca-dev",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/jakartaee/common-annotations-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/jakarta.json/jakarta.json-api@2.1.3?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "jakarta.json",
      "name": "jakarta.json-api",
      "version": "2.1.3",
      "description": "Jakarta JSON Processing defines a Java(R) based framework for parsing, generating, transforming, and querying JSON documents.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "596997520702889d4afef9cffbd4b71a"
        },
        {
          "alg": "SHA-1",
          "content": "4febd83e1d9d1561d078af460ecd19532383735c"
        },
        {
          "alg": "SHA-256",
          "content": "bc934142805ea1d794f1440563965a3861a2a9fb7414ecd3fe44f26500734414"
        },
        {
          "alg": "SHA-512",
          "content": "5a6566f0ceaa8b0ca40ae643942c0d46acd118a3b4d85af5f3a977e738465e8c8d4bc977f0c3e4b51f4471e408c28f66dbc0b19adf61237f6f6f7fa1d0dacc31"
        },
        {
          "alg": "SHA-384",
          "content": "1a17b8a416692ba0e485d7290782b2b5c4de8cb65c2043f221381deee668953655c221dc3efa29d3c65c8b2c1fab173f"
        },
        {
          "alg": "SHA3-384",
          "content": "4c009f9fec6b1e14b2c675ee7addb49ebd047d71d7aaf31601ccea3ffe4af1d82838a3452b0e5d7c2814e27861cd3ffd"
        },
        {
          "alg": "SHA3-256",
          "content": "5b839f4645dbac0d1bc76a91e168a52574c2bb6de0b7e92cd14aafd0ad6a28b0"
        },
        {
          "alg": "SHA3-512",
          "content": "fedcd8618f44ab0b771bef7d2fcb61d49021eb2e592d8d3058d3f57e7fe0ed1a9239cac859fe534dd0629aaf577fb8f77841412dbb3ae58b8d8cd0754da2ec48"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0",
            "url": "https://www.eclipse.org/legal/epl-2.0"
          }
        },
        {
          "license": {
            "name": "GNU General Public License, version 2 with the GNU Classpath Exception",
            "url": "https://projects.eclipse.org/license/secondary-gpl-2.0-cp"
          }
        }
      ],
      "purl": "pkg:maven/jakarta.json/jakarta.json-api@2.1.3?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/eclipse-ee4j/jsonp",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/ee4j/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jsonp",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.eclipse.parsson/jakarta.json@1.1.9?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.eclipse.parsson",
      "name": "jakarta.json",
      "version": "1.1.9",
      "description": "Default provider for Jakarta JSON Processing",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "f91d45a29f468d318ec82a943145a32d"
        },
        {
          "alg": "SHA-1",
          "content": "afd42f540fbecc38984fe6024d8ed00adcefe08c"
        },
        {
          "alg": "SHA-256",
          "content": "75b97f4c8dd035aae97a92478fdd7fe961a6ed7c4051b54377152decafa62a57"
        },
        {
          "alg": "SHA-512",
          "content": "e134152aa2a57327dda6cca1ffc3f5aac4292cc2e6251b1175b391a9fb11f1179a0432e25fd654118e3f5c7ef1d965d3f75f2a5cbbc5045c7926b5dd28efb5da"
        },
        {
          "alg": "SHA-384",
          "content": "da0a39754ede607264486f9fa01d1f2c0220a02f4bd1c869e3bd82960a367fa8d506b1fb05c8e61ded867846ab46d754"
        },
        {
          "alg": "SHA3-384",
          "content": "47af9b290e08d9df2bf50b3cee1b9ea68962622fab1825e48086c7dc7d36c72b67516fa1042af7420373c5c3c915ecba"
        },
        {
          "alg": "SHA3-256",
          "content": "437a64aec47b276b787f9a297e254c6c7edbc65762f466128ed812152bcdbdb2"
        },
        {
          "alg": "SHA3-512",
          "content": "e406baed4cb9e2e7c5560a93f07c0dad73fcf270f1fd0245ffe515057100eae52c22f3f62db524febdbbdea4b319fbf7a9068be3e33b4e6b82b0272514831939"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0",
            "url": "https://www.eclipse.org/legal/epl-2.0"
          }
        },
        {
          "license": {
            "name": "GNU General Public License, version 2 with the GNU Classpath Exception",
            "url": "https://projects.eclipse.org/license/secondary-gpl-2.0-cp"
          }
        }
      ],
      "purl": "pkg:maven/org.eclipse.parsson/jakarta.json@1.1.9?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/eclipse-ee4j/parsson/parsson-bundles/jakarta.json",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/ee4j/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/parsson/parsson-bundles/jakarta.json",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.zaxxer/HikariCP@7.1.0?type=jar",
      "publisher": "Zaxxer.com",
      "group": "com.zaxxer",
      "name": "HikariCP",
      "version": "7.1.0",
      "description": "Ultimate JDBC Connection Pool",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "4f40811c9309be1d38e27dbec4200359"
        },
        {
          "alg": "SHA-1",
          "content": "13ac26e0d5ef25ae7f1515e59e525c500f013ccc"
        },
        {
          "alg": "SHA-256",
          "content": "2be45c641b841e81df87292e181f2c203500c5f0e9a1676f135927387f3cf40b"
        },
        {
          "alg": "SHA-512",
          "content": "d49d6cfd831d0b973fa16e61dc8682f983205dbb4399b679df4f18f3f30e1ddbc5247d3724881c1d3579144cc9aba11bd56e2aa9755a2c4754f5df21cc4760f3"
        },
        {
          "alg": "SHA-384",
          "content": "dd518256d0ecade85921e17bae8b41d63e458b06cf7b80e8d2d666735b1ad87b6f6c4ebcb9545454cad5253966c3b11b"
        },
        {
          "alg": "SHA3-384",
          "content": "ca14a89ee53fa74f2864fd70da166b9ea70ba7ddf74aa06d19b3f034163ab0afd664bb168f28d9d7c255d7758faff67b"
        },
        {
          "alg": "SHA3-256",
          "content": "5ef8c54addf0ee782714d73dbcb40f64dca61f38dc1dd00b6e477a1854f7d22d"
        },
        {
          "alg": "SHA3-512",
          "content": "d46da214debedf24f58be53c2b679c1300af4ce96f8fdc94e2fb9c73608750056004f3b6d60f00c2884ce899b82a6b191bbc2a1455be6205af226b9ed2129b43"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.zaxxer/HikariCP@7.1.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/brettwooldridge/HikariCP",
          "type": "website"
        },
        {
          "url": "https://github.com/brettwooldridge/HikariCP/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/brettwooldridge/HikariCP",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.mindrot/jbcrypt@0.4?type=jar",
      "group": "org.mindrot",
      "name": "jbcrypt",
      "version": "0.4",
      "description": "OpenBSD-style Blowfish password hashing for Java",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "d2b39d874e0d512f85386a72b0083682"
        },
        {
          "alg": "SHA-1",
          "content": "af7e61017f73abb18ac4e036954f9f28c6366c07"
        },
        {
          "alg": "SHA-256",
          "content": "e183f6f59404fc1e12073cfea4ace7ea103c900463cd21fb609a7c617ecdf624"
        },
        {
          "alg": "SHA-512",
          "content": "95ffe1f6593f83da047ff289a52b5ef73adcaca4a9a990a47744fbd50a52fce39958c17ed393e95d64093b2acbcaba39ba0b5b983a2e0ad98ce5c6e9282a67cd"
        },
        {
          "alg": "SHA-384",
          "content": "66a24af2134e6fcee1f4232c2c4bab43ab97d0c8ffbbc009f9bb0e5ef2a7d8795a6da3c6b47c583675b98036958aa729"
        },
        {
          "alg": "SHA3-384",
          "content": "33cf5e13897f25c525017888e7fcd2faf9a0f25135be03a65dd154feb11455e33c1df31963470b2ecaaba5267f6ad652"
        },
        {
          "alg": "SHA3-256",
          "content": "a347c842385e1d76780f9afe2200a7b9815bcd873b2a9fdd2652d0b0a5e0d324"
        },
        {
          "alg": "SHA3-512",
          "content": "5a71c6f1fde98865302e8c9ee6c99ace9efa220c0193bcdd56423015d1c73e54bd65f19a9a3ba3199b242589eb9ccc96b1d6c0d413387f8e8fbed7c691fc8790"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://www.isc.org/licenses/"
          }
        }
      ],
      "purl": "pkg:maven/org.mindrot/jbcrypt@0.4?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/djmdjm/jBCrypt",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/djmdjm/jBCrypt.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.nimbusds/oauth2-oidc-sdk@11.38.2?type=jar",
      "publisher": "Connect2id Ltd.",
      "group": "com.nimbusds",
      "name": "oauth2-oidc-sdk",
      "version": "11.38.2",
      "description": "OAuth 2.0 SDK with OpenID Connect and Federation extensions for developing client and server applications.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "38e046019e13d821b2c4bc17b0aa7bb1"
        },
        {
          "alg": "SHA-1",
          "content": "633504f3430c148cc583d9d481f5f4e48e29cccf"
        },
        {
          "alg": "SHA-256",
          "content": "30e63220c15bd93006c557bd0d614bb57a5f00232188693577c222383ea4bbe7"
        },
        {
          "alg": "SHA-512",
          "content": "30928fd2dcb6680ad1a8bf0923b2e7125eca4ec22eae584695468db82529a17f43ac405ecd28e622446ea4c96755b9c111311deb7d53179cb9c435fa0140f114"
        },
        {
          "alg": "SHA-384",
          "content": "daec981126c784ad4214d7959e72f2c4464fa2cdfc35d41523d032448b0bea32a7d275908cea9d1afc9b3533be6a6159"
        },
        {
          "alg": "SHA3-384",
          "content": "4282a8dbfd0b80180b72883cb9a5cdb28be7c68fe2c571d36a8cbe5541cb87b79405214512a3dfdcbf539629062bd0e0"
        },
        {
          "alg": "SHA3-256",
          "content": "260ca92e0aeed607eb58bc11f06a4ca825ca03b7c6da048eb9fd231acab9fca2"
        },
        {
          "alg": "SHA3-512",
          "content": "5de230dd0e11e61afc711ed0c5e1e33526c955109b1edbaf4330d595aac565a51164b775d82f81caa1fa0a3a9b10d7dbbb64cde0d6d595b8c8618733c8229889"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.nimbusds/oauth2-oidc-sdk@11.38.2?type=jar",
      "externalReferences": [
        {
          "url": "https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.github.stephenc.jcip/jcip-annotations@1.0-1?type=jar",
      "group": "com.github.stephenc.jcip",
      "name": "jcip-annotations",
      "version": "1.0-1",
      "description": "A clean room implementation of the JCIP Annotations based entirely on the specification provided by the javadocs.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "d62dbfa8789378457ada685e2f614846"
        },
        {
          "alg": "SHA-1",
          "content": "ef31541dd28ae2cefdd17c7ebf352d93e9058c63"
        },
        {
          "alg": "SHA-256",
          "content": "4fccff8382aafc589962c4edb262f6aa595e34f1e11e61057d1c6a96e8fc7323"
        },
        {
          "alg": "SHA-512",
          "content": "02fcd16a30d0e68b3e9e4899731181c6abb7117baa15c096ca940e01dde08bb86101cbeae552c497f8a90d923b5fa2f2b6f3850baf8dc94dbd399887924a9069"
        },
        {
          "alg": "SHA-384",
          "content": "88b0ecfde391a3d8468349c70e1539569768dfac3233dfe0b4660904df04e6c6bf26ed9c0784b9b22c122c3448e2a6b6"
        },
        {
          "alg": "SHA3-384",
          "content": "487b53f48b55b98a61ae60abedc43543887944867aa6bcb78d5ed46e2d0d7c19510c5fcadc362d939313feafdcfc55e1"
        },
        {
          "alg": "SHA3-256",
          "content": "3e79c8f58865d2d58a5311a8bb45772007f07e7f3ed2780784d1e4382dc934d0"
        },
        {
          "alg": "SHA3-512",
          "content": "ff32665e1b6d8176ccc7e8c836ca7343c2603dab053e42d79b4258d51a14ff63933c67d24034169ac91e11ebda21cc2c84a2a540072e656d2a8e6fcea7808421"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.github.stephenc.jcip/jcip-annotations@1.0-1?type=jar",
      "externalReferences": [
        {
          "url": "http://stephenc.github.com/jcip-annotations",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "http://github.com/stephenc/jcip-annotations/issues",
          "type": "issue-tracker"
        },
        {
          "url": "http://github.com/stephenc/jcip-annotations/tree/master/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.nimbusds/content-type@2.3?type=jar",
      "publisher": "Connect2id Ltd.",
      "group": "com.nimbusds",
      "name": "content-type",
      "version": "2.3",
      "description": "Java library for Content (Media) Type representation",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "f0fc0d6be73e838863e2197c03a27c3f"
        },
        {
          "alg": "SHA-1",
          "content": "e3aa0be212d7a42839a8f3f506f5b990bcce0222"
        },
        {
          "alg": "SHA-256",
          "content": "60349793e006fba96b532cb0c21e10e969fe0db8d87f91c3b9eaf82ba2998895"
        },
        {
          "alg": "SHA-512",
          "content": "58f7fe3b4303cecd6eac73c3345af71536479ce4bc38c88153bdcf6176a7cf5a0875420ea4a6024b4e734b78de08a8e544014b435cb63416c759b957ad3818e4"
        },
        {
          "alg": "SHA-384",
          "content": "9dbe31f543aaf807093fe1dd18a0ed33346252e2f6fce598e1b193b9d73fcebf79608fce6a620ede8ea7adf45f1a7422"
        },
        {
          "alg": "SHA3-384",
          "content": "67b8b5d051230739ee85678006758450cd6510c5fb9a6b3134d43f644c2d70bc6dc3cff6133b132b5b158a1f346880a9"
        },
        {
          "alg": "SHA3-256",
          "content": "b8046b3dd12321400b4643ff0c47ea5c1e77d6252177bdd8be6f0e0b234c80bf"
        },
        {
          "alg": "SHA3-512",
          "content": "734a6a5a383aac8dcfaca09c8e37637f74334ce2d5c050b519277ad7c20f065fad44b5a6417cdc32d6cd43f80c0e1e0c37d9daa9279651facb6c38cb88376396"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.nimbusds/content-type@2.3?type=jar",
      "externalReferences": [
        {
          "url": "https://bitbucket.org/connect2id/nimbus-content-type",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://bitbucket.org/connect2id/nimbus-content-type",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/net.minidev/json-smart@2.6.0?type=jar",
      "publisher": "Chemouni Uriel",
      "group": "net.minidev",
      "name": "json-smart",
      "version": "2.6.0",
      "description": "JSON (JavaScript Object Notation) is a lightweight data-interchange format. It is easy for humans to read and write. It is easy for machines to parse and generate. It is based on a subset of the JavaScript Programming Language, Standard ECMA-262 3rd Edition - December 1999. JSON is a text format that is completely language independent but uses conventions that are familiar to programmers of the C-family of languages, including C, C\u002B\u002B, C#, Java, JavaScript, Perl, Python, and many others. These properties make JSON an ideal data-interchange language.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "fde8981f31c3b972355a5adf26a9ec65"
        },
        {
          "alg": "SHA-1",
          "content": "5f858a43a325a8673da6869ab2bc787a1bcb2244"
        },
        {
          "alg": "SHA-256",
          "content": "1ae4b561458afb540be8ec5c6dbb4f2e715a319a7ae64854998aaf924770d61b"
        },
        {
          "alg": "SHA-512",
          "content": "fc8269826394dbca52fa9366f28226e5e37bc64c1268d7a49e2dea7fb2c62da2be8c8bcf362da5561a3cf413816019d8c4f95199a585eb8b13e8a8b634259a00"
        },
        {
          "alg": "SHA-384",
          "content": "13db694eb1f73778d628452b6840bff4c044101f2dcf7c3782f4bb48798fbae8b752cb8f7536b5173e896de4c225c3a6"
        },
        {
          "alg": "SHA3-384",
          "content": "86c0dc99d98a7c70015b6158f76253cd16a4b2bfb754ea6526991860e2536880b95130044cbe953865b284eebadad781"
        },
        {
          "alg": "SHA3-256",
          "content": "edee009cc2977ff4c2aae9098d14e7e651168dca1735726772d6bda5b66e2e98"
        },
        {
          "alg": "SHA3-512",
          "content": "23f8d5a59cd7111680f65d9fc2ed80b9876ab3094a2048526b376ae16ad855680b1c90264c23c52468efe0646a30db8a22f6b279ec67e047f3951b55a6d0d104"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/net.minidev/json-smart@2.6.0?type=jar",
      "externalReferences": [
        {
          "url": "https://urielch.github.io/",
          "type": "website"
        },
        {
          "url": "https://github.com/netplex/json-smart-v2",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/net.minidev/accessors-smart@2.6.0?type=jar",
      "publisher": "Chemouni Uriel",
      "group": "net.minidev",
      "name": "accessors-smart",
      "version": "2.6.0",
      "description": "Java reflect give poor performance on getter setter an constructor calls, accessors-smart use ASM to speed up those calls.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "0ad72639eea293193f68898da9b0b902"
        },
        {
          "alg": "SHA-1",
          "content": "2d96f1d9b6ab7f13261aa81b15703574185747a0"
        },
        {
          "alg": "SHA-256",
          "content": "222c9f547bb20a99fc486403a398352d1306fb671b38abd7ecab6401df170e61"
        },
        {
          "alg": "SHA-512",
          "content": "220eb28c94fdd15e7ac9b7e80d238a9871fc78db3127db9ca6207251e0e5563c62cfd5ab7625d69eb9e2563fc726e71a25562a4081f089f564dc206e0569665f"
        },
        {
          "alg": "SHA-384",
          "content": "c861d37b7a3a5d3d42a699239e3437cf094a8359b2371bacce5f7a17da02f9a0eb65ca2456d0168c4870be36bddc135f"
        },
        {
          "alg": "SHA3-384",
          "content": "4fa8ea0794e22ccc34ecc9b73cb9cad062cd82561227b15f1261541180d584ba745611ff31e98653e4f5d481846de361"
        },
        {
          "alg": "SHA3-256",
          "content": "1b170bf2e79abd9a77bb330c51b73d695c17e5db41817efab22294f4ee65a2c1"
        },
        {
          "alg": "SHA3-512",
          "content": "224c001707e5b478f6503b88ab8c07b94f82bfb02bc81094a3ffdcf05d29f1377a8e518b223f9282d0147f386f13faf319692002d59f4c6f452b282aa6b000c0"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/net.minidev/accessors-smart@2.6.0?type=jar",
      "externalReferences": [
        {
          "url": "https://urielch.github.io/",
          "type": "website"
        },
        {
          "url": "https://github.com/netplex/json-smart-v2",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.nimbusds/lang-tag@1.7?type=jar",
      "publisher": "Connect2id Ltd.",
      "group": "com.nimbusds",
      "name": "lang-tag",
      "version": "1.7",
      "description": "Java implementation of \u0022Tags for Identifying Languages\u0022 (RFC 5646)",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "31b8a4f76fdbf21f1d667f9d6618e0b2"
        },
        {
          "alg": "SHA-1",
          "content": "97c73ecd70bc7e8eefb26c5eea84f251a63f1031"
        },
        {
          "alg": "SHA-256",
          "content": "e8c1c594e2425bdbea2d860de55c69b69fc5d59454452449a0f0913c2a5b8a31"
        },
        {
          "alg": "SHA-512",
          "content": "494267766c974ce16a99cb221953edc91fde8db0c920230758ecea0ea9d3006e95d86ad46f7a9d61b810d85b0fa6da9a3ce2b507cdbe4be320c499eaea93666b"
        },
        {
          "alg": "SHA-384",
          "content": "fdc2cde39a1b07a2542cbc07222afd6292ae19cb1f9ae008476f7ec1b8ebe1e3e84aca08e47e1ef81887a23ac5267d00"
        },
        {
          "alg": "SHA3-384",
          "content": "b0e673087533f60173a11a55b0fde554c0830e7b3b6609e1ea6546de19fc9a97fbfe6eee73580d09b2de66989d0603c7"
        },
        {
          "alg": "SHA3-256",
          "content": "ea208d4eb55212ce9835a9be60396861b0fc33f4161efee3736c3e7159acb9f7"
        },
        {
          "alg": "SHA3-512",
          "content": "450f819981d73711c30d838261ff55a7f1988c8b965c786708dc27fbd10a2018cfde82b8fee5d7d1022eacf085dfdabe22d9de92462eba80e2c15a116c3c73ed"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.nimbusds/lang-tag@1.7?type=jar",
      "externalReferences": [
        {
          "url": "https://bitbucket.org/connect2id/nimbus-language-tags",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://bitbucket.org/connect2id/nimbus-language-tags.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.nimbusds/nimbus-jose-jwt@10.9.1?type=jar",
      "publisher": "Connect2id Ltd.",
      "group": "com.nimbusds",
      "name": "nimbus-jose-jwt",
      "version": "10.9.1",
      "description": "Java library for Javascript Object Signing and Encryption (JOSE) and JSON Web Tokens (JWT)",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "2dcec009745fe5ba876b5c5d8ac71caf"
        },
        {
          "alg": "SHA-1",
          "content": "82ab15c57686545d989dd2c82cbec5b6b6f1c860"
        },
        {
          "alg": "SHA-256",
          "content": "33152ea83ec50d22706fdaf3b07acbcd716f9a68edcabdd7c4d02843cbdcdcf6"
        },
        {
          "alg": "SHA-512",
          "content": "5942ec095618438497425b3c0b96f97a3910d75897b27babf570673a7e5311e05d6be441b9794eb0eb528bc9eba1ba805a7bab9b669b088db7c549978d4eb8c2"
        },
        {
          "alg": "SHA-384",
          "content": "e1bb6bd950a286e9f0099a2274c1eaedf53c273cff53022833a7178b4f369d294d1e312af3babe11bbe752b5405e5e0d"
        },
        {
          "alg": "SHA3-384",
          "content": "094843f7ddba4a8f62591f95c1bf2cc087eeb8c9bda335cc6b8dd368bfdc2294f8f94ca757a361eee0ddc46caa75d38c"
        },
        {
          "alg": "SHA3-256",
          "content": "e2782041f5ac52a36e8841ffda3b8bb8c3bfb53f4aca52cffe2c78b81f268a98"
        },
        {
          "alg": "SHA3-512",
          "content": "d44432a00f7a447d53c96ce50b21a7368076f30b152b1006b1ae3573acbd6f190ae020b531e919d3779b7e0a712c56d1acb62e0e6511da42d15cdf4d9d2367fc"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.nimbusds/nimbus-jose-jwt@10.9.1?type=jar",
      "externalReferences": [
        {
          "url": "https://bitbucket.org/connect2id/nimbus-jose-jwt",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://bitbucket.org/connect2id/nimbus-jose-jwt",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml.jackson.jakarta.rs/jackson-jakarta-rs-base@2.22.3?type=jar",
      "publisher": "FasterXML",
      "group": "com.fasterxml.jackson.jakarta.rs",
      "name": "jackson-jakarta-rs-base",
      "version": "2.22.3",
      "description": "Pile of code that is shared by all Jackson-based Jakarta-RS providers.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "e132693d221adda4b879f5a8dd7debb2"
        },
        {
          "alg": "SHA-1",
          "content": "84332c2f21e47534a0ef74a74023a44207ea4211"
        },
        {
          "alg": "SHA-256",
          "content": "d1bbe9ca3637b62950d17cfe3c69c5f6c10825b4d3ce6cfec82cf90bca4b934b"
        },
        {
          "alg": "SHA-512",
          "content": "849d7c45dd442de5b596742f52cd413e8be3b35e4099e7b961676511cb53d1589117d5502987ee9a01b8b8fb3eb192771da0aabdaac2ccd86b14757ea1b8c5f8"
        },
        {
          "alg": "SHA-384",
          "content": "88a07fc1d02046349249e5a9b1c743d3adda53131ea2d295fb82664659001a6dcd82b702213665d3fc90e150496dfcdf"
        },
        {
          "alg": "SHA3-384",
          "content": "5666e6f6f3af92abc54947eb2daef9f7739ffef3f938ece0db58340f9c170e74821184d1ded18607191677a6499c77b5"
        },
        {
          "alg": "SHA3-256",
          "content": "0809ff78b632f47186448c520b6667e88b289f3ef6cbb2082960c14e3d697010"
        },
        {
          "alg": "SHA3-512",
          "content": "9a19bf3f98f00e7df2c22ae6ccc77ba4886d42d35a25ed2fb478ff5fb782fa671b4bbd37e17830313616585a3584694dae42a0ba7b48b710c10c972f8c6a7add"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.jakarta.rs/jackson-jakarta-rs-base@2.22.3?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/FasterXML/jackson-jakarta-rs-providers/jackson-jakarta-rs-base",
          "type": "website"
        },
        {
          "url": "https://central.sonatype.com/api/v1/publisher",
          "type": "distribution"
        },
        {
          "url": "https://github.com/FasterXML/jackson-jakarta-rs-base/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/FasterXML/jackson-jakarta-rs-providers/jackson-jakarta-rs-base",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml.jackson.jakarta.rs/jackson-jakarta-rs-json-provider@2.22.3?type=jar",
      "publisher": "FasterXML",
      "group": "com.fasterxml.jackson.jakarta.rs",
      "name": "jackson-jakarta-rs-json-provider",
      "version": "2.22.3",
      "description": "Functionality to handle JSON input/output for Jakarta-RS implementations (like Jersey and RESTeasy) using standard Jackson data binding.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "032270e95b744c0207c87760b23ee164"
        },
        {
          "alg": "SHA-1",
          "content": "5198a2370b42d8a4380dacb33416024ad355bedc"
        },
        {
          "alg": "SHA-256",
          "content": "1538611c44c4abc067b41dfb8bb48908edb84905ccf406cf6c12d1868c33c47e"
        },
        {
          "alg": "SHA-512",
          "content": "5e5ece6893031b729ead68fceefc2f2b32b95a3cdf829c9da177cd6a69f5474aa837533fd5fadb9e5f20c1248e2b9cc2815e6c1cb8723763f2f064ddde341d93"
        },
        {
          "alg": "SHA-384",
          "content": "20343caaa0b787f2252bedb1e2cd6821a9fc0cd6e525a30ca896e76ecec41b904e42200cfdc569fd0c395e97e2f75c36"
        },
        {
          "alg": "SHA3-384",
          "content": "2ca6e5f09dbba289b46aa9b2c612070b954860e6e1b0e942d0fff612382e5b33f45ada450951438386c4be7ac7443771"
        },
        {
          "alg": "SHA3-256",
          "content": "1f19bdd992ebde6e936c7d11823f3d845fa1e8b745c2cbc5f18e783c977a2d66"
        },
        {
          "alg": "SHA3-512",
          "content": "b92fa3334ff99bae230f46f6742fcbba26253993cabf1fbc96ac8e90dd7f2e2dea3e7108e27bf82e1b161705b55ed230c626d8872f739d1f0b4067ef19962057"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.jakarta.rs/jackson-jakarta-rs-json-provider@2.22.3?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/FasterXML/jackson-jakarta-rs-providers/jackson-jakarta-rs-json-provider",
          "type": "website"
        },
        {
          "url": "https://central.sonatype.com/api/v1/publisher",
          "type": "distribution"
        },
        {
          "url": "https://github.com/FasterXML/jackson-jakarta-rs-json-provider/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/FasterXML/jackson-jakarta-rs-providers/jackson-jakarta-rs-json-provider",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8@2.22.3?type=jar",
      "publisher": "FasterXML",
      "group": "com.fasterxml.jackson.datatype",
      "name": "jackson-datatype-jdk8",
      "version": "2.22.3",
      "description": "Add-on module for Jackson (https://github.com/FasterXML/jackson) to support JDK 8 data types.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "283c51f09192d5354168e8e1db5bad01"
        },
        {
          "alg": "SHA-1",
          "content": "1c8e07b4eefb9ccb6a2247c54f42f293ff0dc8aa"
        },
        {
          "alg": "SHA-256",
          "content": "f223061a5aaecdc9506458143807c73bcd1a744d6b3bbb8da4703a0abc408f7d"
        },
        {
          "alg": "SHA-512",
          "content": "0ec3c7bae5df6b3140a18a41a784767748870e7e2067592985c68b144b1cd775601902d9d7af7c14d5039e25025cd0f9b95cd6a172f809fd8bb4b5880932067b"
        },
        {
          "alg": "SHA-384",
          "content": "8ef3987a9223e834e529c184cbb00633e3ad7e943ba2b8df2949c8c1d5ae7cb45c490c301a851bf15e8e48dceef041da"
        },
        {
          "alg": "SHA3-384",
          "content": "2ce308f3b9252489b0453f1e9eee1a8bcfcf255913910e0ef6c7f87d55bcb48d9a1364989bc163ed8aae166acd8b14b5"
        },
        {
          "alg": "SHA3-256",
          "content": "b6c27271cdf47235c59997fb390d8569b19dc0c82b848daf0d750b67a6b21074"
        },
        {
          "alg": "SHA3-512",
          "content": "c9acd1a2ed3ec82b8411c3fa7c7132784029aaf5226edf3b622ac57862a9d3bebc19fba5be10048853d5b6456c5ce3fcdf9b4962f538480cea42d5698bb2824b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8@2.22.3?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/FasterXML/jackson-modules-java8/jackson-datatype-jdk8",
          "type": "website"
        },
        {
          "url": "https://central.sonatype.com/api/v1/publisher",
          "type": "distribution"
        },
        {
          "url": "https://github.com/FasterXML/jackson-modules-java8/issues",
          "type": "issue-tracker"
        },
        {
          "url": "http://github.com/FasterXML/jackson-modules-java8/jackson-datatype-jdk8",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/ch.qos.logback/logback-classic@1.6.4?type=jar",
      "publisher": "QOS.ch",
      "group": "ch.qos.logback",
      "name": "logback-classic",
      "version": "1.6.4",
      "description": "logback-classic module",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "0d8af78d22a485a930b0eedc039fbd4b"
        },
        {
          "alg": "SHA-1",
          "content": "f244bc79f26869efa8a4efc6d40fae6b48edd4ce"
        },
        {
          "alg": "SHA-256",
          "content": "16ccdfd1847eca169d5651c5f799ea990472350e0c38f68fd6bc47d705ef4a0a"
        },
        {
          "alg": "SHA-512",
          "content": "4ea2274ac2701219db54a4447bfe22de39784ee8b8b8412b6567942a28223752086f0aefaf470b20366353d7f77df136a8b3c5565ddc2579e6bdaefddd1e7166"
        },
        {
          "alg": "SHA-384",
          "content": "7ff8f67fdf6a90902319fe4415619b230dd6399fff5e2db78d08cbd1d59f742b4aaa7d1c78cdc5d9d5926e52cbc2b5a6"
        },
        {
          "alg": "SHA3-384",
          "content": "e43ff8901207a457bafbc2ca08bd3a7474544dc9ebc1d8a67d6049b4b0b8aba77b758b72c853e439960bcefeabe9db25"
        },
        {
          "alg": "SHA3-256",
          "content": "dec4db2ba36b1489ef0df8492451561167401ec7a0cdf7cf750822fda0c293d7"
        },
        {
          "alg": "SHA3-512",
          "content": "214c766495312c6a4eebd98365d9ce0c5d16c6bffed8f44ed520af5dacc4e4aaeb7844251e87110b7a1de3d08238c1206d233cc3b0d95d2003935a409b75aa49"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0",
            "url": "https://www.eclipse.org/legal/epl-2.0"
          }
        },
        {
          "license": {
            "id": "LGPL-2.1-only",
            "url": "https://www.gnu.org/licenses/old-licenses/lgpl-2.1-standalone.html"
          }
        }
      ],
      "purl": "pkg:maven/ch.qos.logback/logback-classic@1.6.4?type=jar",
      "externalReferences": [
        {
          "url": "http://logback.qos.ch/logback-classic",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/qos-ch/logback/logback-classic",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/ch.qos.logback/logback-core@1.6.4?type=jar",
      "publisher": "QOS.ch",
      "group": "ch.qos.logback",
      "name": "logback-core",
      "version": "1.6.4",
      "description": "logback-core module",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "cccf9f602d1dc7f987312ce7cd00034a"
        },
        {
          "alg": "SHA-1",
          "content": "abe12d3d8979438b02baf9fe2032016ed3f286b0"
        },
        {
          "alg": "SHA-256",
          "content": "1b67779e224455ae7e00bd4ccadaf05c38531927ea4363f66412359373f2e9d7"
        },
        {
          "alg": "SHA-512",
          "content": "0498feca8b6592df7f4db1cec18da68dc923c308bae7320588390a16cbec88b33c825c25b5f31de7206702c489b61fd72ef9a86ab0f33397b5d92f1d7066c34c"
        },
        {
          "alg": "SHA-384",
          "content": "61d4510aa19beae17845d40d8ecbb6b50d59f5e212a097ede417f6509595e20f340b9cbc7fc872fe15456d2bcd95efa2"
        },
        {
          "alg": "SHA3-384",
          "content": "79ed782aec3660ee2f691c6ce6fba206e7bd11cfef8268d84886d3db79938beb9d736727dcde2b425a1890cff96dc124"
        },
        {
          "alg": "SHA3-256",
          "content": "66181ba6937afe4d0234baa02670b110221b53000d5344b58a39c92b71708756"
        },
        {
          "alg": "SHA3-512",
          "content": "f3482da340676590e74c5e708cb971465c98fdb6f85dac64d018f9dff17d3569fc614ba33ba72f4334639cca13fd6d57ffb4b418cc3ca0af5c558c9fe82840f9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0",
            "url": "https://www.eclipse.org/legal/epl-2.0"
          }
        },
        {
          "license": {
            "id": "LGPL-2.1-only",
            "url": "https://www.gnu.org/licenses/old-licenses/lgpl-2.1-standalone.html"
          }
        }
      ],
      "purl": "pkg:maven/ch.qos.logback/logback-core@1.6.4?type=jar",
      "externalReferences": [
        {
          "url": "http://logback.qos.ch/logback-core",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/qos-ch/logback/logback-core",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.owasp/security-logging-common@1.1.7?type=jar",
      "group": "org.owasp",
      "name": "security-logging-common",
      "version": "1.1.7",
      "description": "The OWASP Security Logging project provides developers and ops personnel with APIs for logging security-related events.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "9f11b84aefd2f2dcf48f8443a6213619"
        },
        {
          "alg": "SHA-1",
          "content": "4717c0c2225a2aad898b2fbdf717ec6e034d48f8"
        },
        {
          "alg": "SHA-256",
          "content": "ef9c6e4fefcf8ffcee7590239a8e8c56b192fc71c183fd8a943cf177e01b07eb"
        },
        {
          "alg": "SHA-512",
          "content": "d30fa0cce5b75758289a255946f165418786d96c5de3dbb12084d6da6bb75e556e43e002050ea114e3adb0ca15dc16e28b6218f5b2fcf993eadcb37076fb522a"
        },
        {
          "alg": "SHA-384",
          "content": "f10fbb5250849634a79477a536eb7f4a07aa66d5d1234e18caf5dbd2ab9473a4e26baa4fe381af9240eb6f9471cbb937"
        },
        {
          "alg": "SHA3-384",
          "content": "fee72e5c1e41740264f6d0f1fcfd72731c92df25af3d529509a006ce8330430390ab1139b8798c8cd6b78bcc0656d4e4"
        },
        {
          "alg": "SHA3-256",
          "content": "2c7bf9e688071240437f106b05955c298c9ee42f6c119cd918460af5a3a82a48"
        },
        {
          "alg": "SHA3-512",
          "content": "0ff1a2d6da110ca1a1713b052bab481bf052033e9cef7362a69a30e485d4a8ae8ba78ecd02278f4f81558d9cd2f12402108f82668754eade77fde3670433740c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.owasp/security-logging-common@1.1.7?type=jar",
      "externalReferences": [
        {
          "url": "https://www.owasp.org/index.php/OWASP_Security_Logging_Project",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/javabeanz/owasp-security-logging",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.owasp/security-logging-logback@1.1.7?type=jar",
      "group": "org.owasp",
      "name": "security-logging-logback",
      "version": "1.1.7",
      "description": "The OWASP Security Logging project provides developers and ops personnel with APIs for logging security-related events.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "c1148e1a96d53351f39b407185a59e06"
        },
        {
          "alg": "SHA-1",
          "content": "e609fe8531b96fcd559c9e146342aa3a56d16231"
        },
        {
          "alg": "SHA-256",
          "content": "100f5e85cbf9cf395983d85355cc17ed1d19d77176d93c58a14f339e62382168"
        },
        {
          "alg": "SHA-512",
          "content": "9bdb7df787ae5264e509082aa3b6f865ec543801587270eb582c3cb430a15f019c24a25e5a1d4df462a2dec0e6e82ce636807b055d5e72b73d67d90805e9e5d1"
        },
        {
          "alg": "SHA-384",
          "content": "8502c6a84746dfd8b9960d599cd476dd3b2c0017b2e8eba169411f7adbfea4236323ada03cb7e005812456976e673a7b"
        },
        {
          "alg": "SHA3-384",
          "content": "283c28b7760973dc0195fcd2127294c4c77a2a8c95bcc597401f00ffbd8c5367788ae9c9b6874deac178526fe93c1265"
        },
        {
          "alg": "SHA3-256",
          "content": "5a2f21e6fe6fe4bc45c439d7dbb5a16d07cc56ecf15b10a60125ee777bac1122"
        },
        {
          "alg": "SHA3-512",
          "content": "f2fa575c8838d7dcb5d11678cff9afaeb65d3bb227f501cf86541e4131c7a3cb72921d8ff8d28f91f7a6d5d3ac08d579f1fba73e8a7627c7a46371ed0a62fad9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.owasp/security-logging-logback@1.1.7?type=jar",
      "externalReferences": [
        {
          "url": "https://www.owasp.org/index.php/OWASP_Security_Logging_Project",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/javabeanz/owasp-security-logging",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/net.logstash.logback/logstash-logback-encoder@8.1?type=jar",
      "group": "net.logstash.logback",
      "name": "logstash-logback-encoder",
      "version": "8.1",
      "description": "Provides logback encoders, layouts, and appenders to log in JSON and other formats supported by Jackson",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "08a18cd6a4737221773acc1d2a5c9e3a"
        },
        {
          "alg": "SHA-1",
          "content": "aca81cdb03c48f4e0213d3e351ab1befafa9991e"
        },
        {
          "alg": "SHA-256",
          "content": "2716cb6a3e83ec2f296395b8752063f502d10a90de1a88f711f06ae5b6ecefb7"
        },
        {
          "alg": "SHA-512",
          "content": "71c73ef76d1f1562a54ba2f0fe8335f5e5a4938dc7896bcb58abd8a2b466e8c46640361d63ea475a5d37b12334335fd3e2827eda54fd17b0384027d955cdec7b"
        },
        {
          "alg": "SHA-384",
          "content": "5c332ad34b65c15869217e79c5e505502df624b0e76f47a7a9eba4d323a1ca4ea34dabb1ef75de489b329e2f94deba1d"
        },
        {
          "alg": "SHA3-384",
          "content": "cd44829a3e71f245a300f9b5a6d9b1e7838835b5f16dcb3d5c01c3cdcf23f76693abe517014bb5318d528e74a0ea150e"
        },
        {
          "alg": "SHA3-256",
          "content": "a5fd0008198d89b57aff757173ea60f1aa0e3cc2ea4ff043b2a73c5bf200244e"
        },
        {
          "alg": "SHA3-512",
          "content": "e3769fe9dbdc066f346b3f38cd3738d6d19bc5a0551164bb7593bf3dfa2deeb338d24ae664fda0b7f20510127fddb9875b4621b8f63cf76c851369711ea4e79a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        },
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/license/mit/"
          }
        }
      ],
      "purl": "pkg:maven/net.logstash.logback/logstash-logback-encoder@8.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/logfellow/logstash-logback-encoder",
          "type": "website"
        },
        {
          "url": "https://github.com/logfellow/logstash-logback-encoder",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/dev.cel/cel@0.14.0?type=jar",
      "group": "dev.cel",
      "name": "cel",
      "version": "0.14.0",
      "description": "Common Expression Language for Java. This include both the compilation and runtime packages.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "a1d9ada6680a62b65e27dbb5cd3ad6da"
        },
        {
          "alg": "SHA-1",
          "content": "14d1a6e93d4cf94d05e11a0ad25d6dd710d6aa82"
        },
        {
          "alg": "SHA-256",
          "content": "fb097817053766580f74ea6ef1ee345570a44aee84bf0d49a2d3ff5d84b9a910"
        },
        {
          "alg": "SHA-512",
          "content": "6b94abc1e666e449f1f5858b23cd83ba450361245ba704feabfe415c8e0ad54bf53eedaa65de43224637fcf575a75e9a2a5480115eb6123c6e9625fdb0b5d43f"
        },
        {
          "alg": "SHA-384",
          "content": "9b36790e9a2e069d42e63f7a46611ddc19e396407805b7f4847aba752f34632bd8519ca826471e7062457b3bb1f28179"
        },
        {
          "alg": "SHA3-384",
          "content": "d37d051b2e6220fe9b841ed175b670d12156237507fbe4c04ae23a54fd26f4db87174dfabc646702ff0f6c1a6e4c8ee3"
        },
        {
          "alg": "SHA3-256",
          "content": "e3419df41d75758ab5220594e53e29e7b22a7a18337fc358044838e0b7376f57"
        },
        {
          "alg": "SHA3-512",
          "content": "de3a43867be8adc0bcd60cc1c84367d1e7b4a6bb2d36d49520ee64335e3c36f3b87e8ffb8c64e9b4a0285800081738f826245e52815aba55b640edd9d32861e6"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/dev.cel/cel@0.14.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/cel-expr/cel-java",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/cel-expr/cel-java/tree/main",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.auto.value/auto-value-annotations@1.11.1?type=jar",
      "publisher": "Google LLC",
      "group": "com.google.auto.value",
      "name": "auto-value-annotations",
      "version": "1.11.1",
      "description": "Immutable value-type code generation for Java 8\u002B.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "681ea8fefc26a4eabb6869d1bbd7626c"
        },
        {
          "alg": "SHA-1",
          "content": "3493561c5809b92f9e5f54f48ecfe9682ba6cbbe"
        },
        {
          "alg": "SHA-256",
          "content": "6c61a11420a5cddf3313888e9d335d5eedfbeb9a8da26591470fbfe61f5bf859"
        },
        {
          "alg": "SHA-512",
          "content": "7013da74bfd4e7dee21576ba47900fce1505a1b6a1afd96b93cf214215c45c7a68ce8aaf4e1d3c02edcca88afa3c9ed47cfdbf045ea72ecb0e9766675b4b8dc0"
        },
        {
          "alg": "SHA-384",
          "content": "bf9a74c80cd9565c6d03bfe85312ef5723e36ace19291a4cb5f828cad8244e89025323592bafc262d0697ec3a899b0fa"
        },
        {
          "alg": "SHA3-384",
          "content": "b0417d3f07234d6190c3d8e6400533d19ecf49506a16a1300b138eba48e949126924202d2ba3dd2a501e26659c996fbc"
        },
        {
          "alg": "SHA3-256",
          "content": "6e21e869b925fbbbfad9f1156d9305e99e63021c58dd2fbd4e5e368d43336b2f"
        },
        {
          "alg": "SHA3-512",
          "content": "a2806e32a750bac3850faa59d7f4adafc81ca7c114aed1f6de1a8928fdae80002daec6804db90f197313921d823ebfddce63dbcb9576b89d042eb504dfcd580a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.auto.value/auto-value-annotations@1.11.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/google/auto/tree/main/value",
          "type": "website"
        },
        {
          "url": "http://github.com/google/auto/issues",
          "type": "issue-tracker"
        },
        {
          "url": "http://github.com/google/auto",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.guava/guava@33.7.1-jre?type=jar",
      "group": "com.google.guava",
      "name": "guava",
      "version": "33.7.1-jre",
      "description": "Guava is a suite of core and expanded libraries that include utility classes, Google\u0027s collections, I/O classes, and much more.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "1a86f411821e4ba79f2747f301b7e2ba"
        },
        {
          "alg": "SHA-1",
          "content": "77e37866fb969b4ff6710faaefd3a86067730ada"
        },
        {
          "alg": "SHA-256",
          "content": "796d8e28ac64e83a47c4c5935a8fecc4682650a04bbdead738ef0f5a3a0e6c46"
        },
        {
          "alg": "SHA-512",
          "content": "b4f274ef89218b5d541e194024431a8ddbebf476f3b7537e9095d78876b51dafa1ed567c4c26822cd3f4062fa443ec1abaca1cbb3126e5128f03084c3814912b"
        },
        {
          "alg": "SHA-384",
          "content": "0ae5c300f00abfedec54675cbac048bf02580b3a26cb14377d1eb1cefac27556ceb802b704597feefbaf9e145d253be9"
        },
        {
          "alg": "SHA3-384",
          "content": "ed98f4aea3f491328105c0f33a30ba0801a365519de4776ae7708b9013b273fc5aa523fc044b1d22585b5987041f21c7"
        },
        {
          "alg": "SHA3-256",
          "content": "2ea89f7ecc8ee4945fee9161d54d0c1952f34fd2a15d1f18eeb5997b69b73a21"
        },
        {
          "alg": "SHA3-512",
          "content": "5ba21822a88e541a0b941ca525aac9dd836b2fb7255073937c6df6c49dbb3992e614b502405756dc1cbac505cc5dde98101628b608eadd491e36f3ca910a8d15"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.guava/guava@33.7.1-jre?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/google/guava",
          "type": "website"
        },
        {
          "url": "https://github.com/google/guava/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/google/guava/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/google/guava/guava",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.guava/failureaccess@1.0.3?type=jar",
      "group": "com.google.guava",
      "name": "failureaccess",
      "version": "1.0.3",
      "description": "Contains com.google.common.util.concurrent.internal.InternalFutureFailureAccess and InternalFutures. Most users will never need to use this artifact. Its classes are conceptually a part of Guava, but they\u0027re in this separate artifact so that Android libraries can use them without pulling in all of Guava (just as they can use ListenableFuture by depending on the listenablefuture artifact).",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "29a782e90f6b37218b18bb880d2a8f4a"
        },
        {
          "alg": "SHA-1",
          "content": "aeaffd00d57023a2c947393ed251f0354f0985fc"
        },
        {
          "alg": "SHA-256",
          "content": "cbfc3906b19b8f55dd7cfd6dfe0aa4532e834250d7f080bd8d211a3e246b59cb"
        },
        {
          "alg": "SHA-512",
          "content": "72be228e7805da5623e42bf024ded7d9147023c66b22f4dbd04ac6898201af46ee82e1f92ea51eb0595f1b49151c4b8ecb862653d4906c17609c42544ee97abf"
        },
        {
          "alg": "SHA-384",
          "content": "9dd1a2a08efda311604992d3e7cee64873bc8c64de3b423b1b3a3dcc1f7f0810bb03901fbfe39a5f835accb0646f4ad8"
        },
        {
          "alg": "SHA3-384",
          "content": "ffd67766c165ee77e96824e06de2c19864a6e61f785b2085eb825f308f173d71f2555559d90d910f33f3367378ace0e3"
        },
        {
          "alg": "SHA3-256",
          "content": "08a77b528a72ca412b36e4004692705ebfd75cfb4897c88632d367d08a34b09f"
        },
        {
          "alg": "SHA3-512",
          "content": "7cba6c266babbe8272f029eea6e2cbddadee96eb1a16916a6eb2441a55837867ce717385d4388735fd83f2f6555931077c0ebda011a1ee9a37ac38c8c0c43a65"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.guava/failureaccess@1.0.3?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/google/guava/failureaccess",
          "type": "website"
        },
        {
          "url": "https://github.com/google/guava/actions",
          "type": "build-system"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/google/guava/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/google/guava/failureaccess",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar",
      "group": "com.google.guava",
      "name": "listenablefuture",
      "version": "9999.0-empty-to-avoid-conflict-with-guava",
      "description": "An empty artifact that Guava depends on to signal that it is providing ListenableFuture -- but is also available in a second \u0022version\u0022 that contains com.google.common.util.concurrent.ListenableFuture class, without any other Guava classes. The idea is: - If users want only ListenableFuture, they depend on listenablefuture-1.0. - If users want all of Guava, they depend on guava, which, as of Guava 27.0, depends on listenablefuture-9999.0-empty-to-avoid-conflict-with-guava. The 9999.0-... version number is enough for some build systems (notably, Gradle) to select that empty artifact over the \u0022real\u0022 listenablefuture-1.0 -- avoiding a conflict with the copy of ListenableFuture in guava itself. If users are using an older version of Guava or a build system other than Gradle, they may see class conflicts. If so, they can solve them by manually excluding the listenablefuture artifact or manually forcing their build systems to use 9999.0-....",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "d094c22570d65e132c19cea5d352e381"
        },
        {
          "alg": "SHA-1",
          "content": "b421526c5f297295adef1c886e5246c39d4ac629"
        },
        {
          "alg": "SHA-256",
          "content": "b372a037d4230aa57fbeffdef30fd6123f9c0c2db85d0aced00c91b974f33f99"
        },
        {
          "alg": "SHA-512",
          "content": "c5987a979174cbacae2e78b319f080420cc71bcdbcf7893745731eeb93c23ed13bff8d4599441f373f3a246023d33df03e882de3015ee932a74a774afdd0782f"
        },
        {
          "alg": "SHA-384",
          "content": "caff9b74079f95832ca7f6029346b34b606051cc8c5a4389fac263511d277ada0c55f28b0d43011055b268c6eb7184d5"
        },
        {
          "alg": "SHA3-384",
          "content": "e939f08df0545847ea0d3e4b04a114b08499ad069ba8ec9461d1779f87a56e0c37273630a0f4c14e78c348d3ac7eb97f"
        },
        {
          "alg": "SHA3-256",
          "content": "1f0a8b1177773b3a8ace839df5eed63cbf56b24a38714898a6e4ed065c42559f"
        },
        {
          "alg": "SHA3-512",
          "content": "6b495ecc2a18b17365cb08d124a0da47f04bcdde81927b5245edf3edd8e498c3c3fb92ce6a4127f660bac851bb1d3e4510e5c20d03be47ce99dc296d360db285"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/google/guava/listenablefuture",
          "type": "website"
        },
        {
          "url": "https://travis-ci.org/google/guava",
          "type": "build-system"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/google/guava/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/google/guava/listenablefuture",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.j2objc/j2objc-annotations@3.1?type=jar",
      "group": "com.google.j2objc",
      "name": "j2objc-annotations",
      "version": "3.1",
      "description": "A set of annotations that provide additional information to the J2ObjC translator to modify the result of translation.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "abe8bd3abff622b9a8b15c3a737aa741"
        },
        {
          "alg": "SHA-1",
          "content": "a892ca9507839bbdb900d64310ac98256cab992f"
        },
        {
          "alg": "SHA-256",
          "content": "84d3a150518485f8140ea99b8a985656749629f6433c92b80c75b36aba3b099b"
        },
        {
          "alg": "SHA-512",
          "content": "34ee5aad57b0b507e89c897306f73043f80fa0eb02b453e54d9052feb0808a0d2ed835d888946211921d2bf733780b19ff636479ce19b9f48814ba6008733ce1"
        },
        {
          "alg": "SHA-384",
          "content": "7b760a346a586d6a3fa4477807e2f02f091e61898fc9a6ff449e43c55b6465fbbc17720663183c84c41d4d8814085e51"
        },
        {
          "alg": "SHA3-384",
          "content": "a2166c1c08f947c0e60aa7c9167602942e7bac37ba45863d34c0132a1f352e7807a382588d350b93bdbbbbe315a3573f"
        },
        {
          "alg": "SHA3-256",
          "content": "3d4d3b8bfd2ad13351a53610aa4bf1c5a69d2bde4272c281003120ed9bcddb8c"
        },
        {
          "alg": "SHA3-512",
          "content": "0a574b379a3f8022f0b88252c87d0e6b6cfa434fdb981efd1b24387025a962d7ac4e90161e8bd048df142bf52f4fc41e4a0c1d45e4eeb872c5954aad552988e9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.j2objc/j2objc-annotations@3.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/google/j2objc/",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "http://github.com/google/j2objc",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.re2j/re2j@1.8?type=jar",
      "group": "com.google.re2j",
      "name": "re2j",
      "version": "1.8",
      "description": "Linear time regular expressions for Java",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "4240e655caa938c61ddbec8b92bfb061"
        },
        {
          "alg": "SHA-1",
          "content": "12c25e923e9e4fb1575a7640a2698745c6f19a94"
        },
        {
          "alg": "SHA-256",
          "content": "7b52c72156dd7f98b3237a5b35c1d34fba381b21048c89208913ad80a45dfbd7"
        },
        {
          "alg": "SHA-512",
          "content": "f556b098dc29ed8fbfa7ecd343b457c49c4deda80dc495ed164297a415328c20d7c89b17cb240f6d2f92607828db52e4f13b66b11277e33e6ebc34a97832da86"
        },
        {
          "alg": "SHA-384",
          "content": "beef5588c374be01cb9cb1c7854e2741827444ce6908c73e4494fb6c7b14fda4a8424f257c1cf900957dd7928e7247d4"
        },
        {
          "alg": "SHA3-384",
          "content": "580230a2224e63cbbe5dd3742935e8ff51333b9e38510203b7ab22070b903dbbc8d720a820db3a01b65cb06983632f7d"
        },
        {
          "alg": "SHA3-256",
          "content": "1346abb0ccffe538d735667ba664b4ee2eaec5c30f2052115d34b16fb0fb350b"
        },
        {
          "alg": "SHA3-512",
          "content": "68b26bddbacc2d72fde5db285549bdefc62206adbf285b58cd5b49f7a20ce1e2545a031c021b5d4402ff068170f4ce1fb90b618b5ed1e1f3b7a1b694f5ddf5ec"
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "Go License",
            "url": "https://golang.org/LICENSE"
          }
        }
      ],
      "purl": "pkg:maven/com.google.re2j/re2j@1.8?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/google/re2j",
          "type": "website"
        },
        {
          "url": "https://github.com/google/re2j.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/dev.cel/common@0.14.0?type=jar",
      "group": "dev.cel",
      "name": "common",
      "version": "0.14.0",
      "description": "Common dependencies for Common Expression Language for Java.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "3aea2ab46685914b2f9882b6311860b2"
        },
        {
          "alg": "SHA-1",
          "content": "dbd026061f0d7cf0ff4fdaaa180818cb68591443"
        },
        {
          "alg": "SHA-256",
          "content": "e6095487af0d67178b570805397dac180527bbf0c2514c04a8e7511aaecc6597"
        },
        {
          "alg": "SHA-512",
          "content": "e33215b1079c04c81a6777fea3ab1fa732600a6970c22a3c100c5e9e55f72855bb7ea59758725862ba989d4433b67d03a2932730a5918588af5edf932c5e9821"
        },
        {
          "alg": "SHA-384",
          "content": "3589e03d5115fad71aeac6180ad949218fe3a8fa93519bdd857177088d49cceb3f1596c35cb20e986a7db0aea0f1e0f6"
        },
        {
          "alg": "SHA3-384",
          "content": "940d680aac4ffef6545ae3ca9e7a6e66b72851dbabf608434973beeeb30ea141b91904bf8263c8303fc03c4f0b9bbdba"
        },
        {
          "alg": "SHA3-256",
          "content": "2ffa8d54e67da6e2f43f5135c414d2d202304f4aedade12d54cb1ec6191aee66"
        },
        {
          "alg": "SHA3-512",
          "content": "114b895f1d6f1b8fc30a6949032636e06143164a4cee8ea7fbadee4aacc20ab41a0645ceabc5fc4eb655b6984df60e6ae9bfea0316e4d978eaf2988356886371"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/dev.cel/common@0.14.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/cel-expr/cel-java",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/cel-expr/cel-java/tree/main",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/dev.cel/compiler@0.14.0?type=jar",
      "group": "dev.cel",
      "name": "compiler",
      "version": "0.14.0",
      "description": "Common Expression Language Compiler for Java",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "abf093eca4b2e84082c81690a515a99f"
        },
        {
          "alg": "SHA-1",
          "content": "b4a4817c3dbb01f037d260346e652e2591a677f7"
        },
        {
          "alg": "SHA-256",
          "content": "53a17e1b5216843c0d20105eeb31b3eff6304e260d5d021e169fb8b37e3472c3"
        },
        {
          "alg": "SHA-512",
          "content": "615f1c910759927d3931a807f5a7c076f472f4a97d1ca9011d9a23daf499e5964e33c10bb438403939329ed0c5c5ce1f7b71ce31cde381b85e39d99795d367d2"
        },
        {
          "alg": "SHA-384",
          "content": "d9499193d8142799330069d03236704967ae5829d8bbef178cddc9e67395dc537395b27f0b45b14f6d2d2b2a63604b4b"
        },
        {
          "alg": "SHA3-384",
          "content": "c33876871b7d33ae5eff89a7ac894244cd72aa5abc305454258557acd2d480cf222874ab2df52c1978909009b11022ed"
        },
        {
          "alg": "SHA3-256",
          "content": "8edf1761bcabe82da54969c819a37e2bd88164fa7c608c688322c1e53f891406"
        },
        {
          "alg": "SHA3-512",
          "content": "55431d3a760c535455986b22f9e616722bc40522b850c78a22b9bd44eb51955ba80819c9a1bbc76032adc37b05fba2fd425648f0f20827df0c6ba01f94240d94"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/dev.cel/compiler@0.14.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/cel-expr/cel-java",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/cel-expr/cel-java/tree/main",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/dev.cel/protobuf@0.14.0?type=jar",
      "group": "dev.cel",
      "name": "protobuf",
      "version": "0.14.0",
      "description": "Common Expression Language Adapter for converting canonical cel.expr protobuf definitions",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "c4798da20df25096c3d07b4363498aeb"
        },
        {
          "alg": "SHA-1",
          "content": "699898915157cef5a4e77c66d075856f6c046661"
        },
        {
          "alg": "SHA-256",
          "content": "d2c314946539351e433e3ffc39ba578a5d1f0eb350ab047c58b87241adaeed1b"
        },
        {
          "alg": "SHA-512",
          "content": "249a81d04fc47d96adeef4863354d3ad3122f2563235af7f77e041f56bca77458a5f79a2d730bcb0cce839adb6d7bb91ab31963fe179fe8815f95748a21a1060"
        },
        {
          "alg": "SHA-384",
          "content": "ae81d4cbc4e9722a33c9bdb2b0b17ddd8eace0eece47f330df647830b139dfa1f37b2a50d0ec1ea20644f7c153cd8d6c"
        },
        {
          "alg": "SHA3-384",
          "content": "662ad067d38441d4babd380df16f62c82403687bf0f09e693291ee4523a8d51ab96c4a5705c41109864916dbedc100fb"
        },
        {
          "alg": "SHA3-256",
          "content": "1099d1d4e5f5af00db210dd05e18f57a0b83ddbadfb4020a294fd2bdb42a67f0"
        },
        {
          "alg": "SHA3-512",
          "content": "39b743f73bac461e638d80d60e93131459c200f10b7354adfb0ecab3df17af4c8fd0aa75bc6e120be0e31d30b88eb0040a6d9a148a06ab0024ef0f4eaafc7329"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/dev.cel/protobuf@0.14.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/cel-expr/cel-java",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/cel-expr/cel-java/tree/main",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/dev.cel/runtime@0.14.0?type=jar",
      "group": "dev.cel",
      "name": "runtime",
      "version": "0.14.0",
      "description": "Common Expression Language Runtime for Java",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "e1b75eb375a7a044f68b8a7d44c64602"
        },
        {
          "alg": "SHA-1",
          "content": "91828cf4a3ade470070f7c58e9d6722342a01068"
        },
        {
          "alg": "SHA-256",
          "content": "3e2e4267d2c83a5323a6724147082564a18965c19e4a3cbbb4a832821780f26b"
        },
        {
          "alg": "SHA-512",
          "content": "22c3a590f727bd0dd283868ce13ad3dfc7b4d9f3446c7d82bc3aff2919a8ab324101a7f90d103167c487aab76e8f5288be9af9afbb93610c52c626680a437cf5"
        },
        {
          "alg": "SHA-384",
          "content": "4d6ff4e741f4f4699a68d10c421fdaadd76491fd3501d4f7c3d2818bf28fa7af265b349100579ac1ae697e0946d40749"
        },
        {
          "alg": "SHA3-384",
          "content": "029dd6132947e1c2ba7cd60ea06b6df2188d258ef3af651a2925e4055b20de3e95614534c0e1331dce13cba259f937c9"
        },
        {
          "alg": "SHA3-256",
          "content": "fad75d350cec38ce5a5bfd971199d081da12ea56571087233b1c0a52100b4823"
        },
        {
          "alg": "SHA3-512",
          "content": "74d94a371ba03a452014eb6905a7b34dc483c38cee35af5383680ce5c8ab39d9bbc06aae697c5473fe063af71dc87e6c88169654bd69a25ca9f10da1f4bc982f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/dev.cel/runtime@0.14.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/cel-expr/cel-java",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/cel-expr/cel-java/tree/main",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/dev.cel/v1alpha1@0.14.0?type=jar",
      "group": "dev.cel",
      "name": "v1alpha1",
      "version": "0.14.0",
      "description": "Common Expression Language Utility for supporting v1alpha1 protobuf definitions",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "8e09c5e79de99fafa3893d9bc1f12d13"
        },
        {
          "alg": "SHA-1",
          "content": "4e7c13ddf4e23c44b67e1c8041044be927be47a5"
        },
        {
          "alg": "SHA-256",
          "content": "429a705bc974d06c63fc14f4d7be7d23e5e7825d6fe76ab657bad2a2d9791c77"
        },
        {
          "alg": "SHA-512",
          "content": "efaa8638137267a26e11668936a53b58716f71437cf1a1d057d6432a53e5c273c4c17fc656d2b47aa0e4c6ba56ef9896aa8d54b156688c6b25ec4fe3dafda8ad"
        },
        {
          "alg": "SHA-384",
          "content": "b4e1fc34a8ac52f90779970b6b1d40877978396c29de475aeb16853ffcc65526949bf9a3c5593284a82335ad60b25e75"
        },
        {
          "alg": "SHA3-384",
          "content": "b86559a1571b69592384cdde36a0ee23a1599270002d6488d3401e05e4f569b616c44a59bfa69b55d39e28aca8aaf406"
        },
        {
          "alg": "SHA3-256",
          "content": "6891df0f460647f9d1f20e2cf708602d76027b5d089cc777d437adc77b1bfda6"
        },
        {
          "alg": "SHA3-512",
          "content": "5e148f912d1a9e89b0bdd836b0ada4f5145792d39632c19589fe172e9251a09d3f1115a8a20fdea837087b6eb6dc77c5ae6c7378cf75c6ae5d927ca43b5a1b85"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/dev.cel/v1alpha1@0.14.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/cel-expr/cel-java",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/cel-expr/cel-java/tree/main",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.antlr/antlr4-runtime@4.13.2?type=jar",
      "publisher": "ANTLR",
      "group": "org.antlr",
      "name": "antlr4-runtime",
      "version": "4.13.2",
      "description": "The ANTLR 4 Runtime",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "eecf1908f0cfff10f8bb82878b5ca401"
        },
        {
          "alg": "SHA-1",
          "content": "fc3db6d844df652a3d5db31c87fa12757f13691d"
        },
        {
          "alg": "SHA-256",
          "content": "dd3e8a13a2d669bf84fb8d834de35ce4875f27157698d206241ec8488aadcaf7"
        },
        {
          "alg": "SHA-512",
          "content": "1c3e47b6b5dc40ca13927a7ae2ed187f470b8f406cea325e73c7a18af8e07b9ada0484312dd611f225f030b5585924932c702fd9326c143a626e271682b2b95e"
        },
        {
          "alg": "SHA-384",
          "content": "f49c2395e16fe71fa35622bcca225c0910609ef09626207ce4522c73c760fd232489489ea88d54c88fc21b05a03031e0"
        },
        {
          "alg": "SHA3-384",
          "content": "322345326586e3f8954e80efa80b510228a7eb06f6d7283177f04809c15aad1722c700897c8c8f405955946b63808bc0"
        },
        {
          "alg": "SHA3-256",
          "content": "2d39db66ce6dc530c7796f75d646f4d8316586e2acd0756524c25b238eb71618"
        },
        {
          "alg": "SHA3-512",
          "content": "a4cdaec49dff4a6963a0db56712a837db7300de7145335b915ffc2234b0d53d6f9fd4b1d6e82c4350e22fee9390ca643cfbf7f51ff47a11bc44561b6686be32b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/org.antlr/antlr4-runtime@4.13.2?type=jar",
      "externalReferences": [
        {
          "url": "https://www.antlr.org/antlr4-runtime/",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/antlr/antlr4/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://groups.google.com/forum/?fromgroups#!forum/antlr-discussion",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/antlr/antlr4/tree/master/antlr4-runtime",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.threeten/threeten-extra@1.10.0?type=jar",
      "publisher": "ThreeTen.org",
      "group": "org.threeten",
      "name": "threeten-extra",
      "version": "1.10.0",
      "description": "Additional functionality that enhances JSR-310 dates and times in Java SE 8 and later",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "f125ea1eceb338384c66da89a335cd6d"
        },
        {
          "alg": "SHA-1",
          "content": "74c202e2b8893b8314ceae84f71223f8a6765771"
        },
        {
          "alg": "SHA-256",
          "content": "861ea99147f158214950955c82fd2ebc4d7b020c0422945a1086e0686cadb10d"
        },
        {
          "alg": "SHA-512",
          "content": "82bd2ba066bff273560edf3ced5ec0631e2aa025446d40d9e142662286f4ca5d58958e9ccd19e3ad5e9ca06e59a40dd4751fa23a4289221c1c9ea10ef2ac0be5"
        },
        {
          "alg": "SHA-384",
          "content": "0c9d944cb4759dac1081c5fb17c38c5c5b9debe1ec4bb116920d53dfbe3fa5f763ed8ea84bcfaeae12fcaaa4f6d26146"
        },
        {
          "alg": "SHA3-384",
          "content": "5439f19d6e6ac7ae1b42d8903fc005fa0068638b7d037cc8fe359c28b792dc5a581d89e0eea6218a68fce8a6e0271987"
        },
        {
          "alg": "SHA3-256",
          "content": "acc357df4a811460fc7a9f04399a283fe8d091bf5b4a8ce5c7d0554b33552e6d"
        },
        {
          "alg": "SHA3-512",
          "content": "4ab98e09b0e3de1315acc55bf01aaf25012a6792566d7b46cf661cfc5a86063db5362b691571283e9d85f3f381054a8f22812d01a22ad9ae7e3e6fc63acbe591"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/org.threeten/threeten-extra@1.10.0?type=jar",
      "externalReferences": [
        {
          "url": "https://www.threeten.org/threeten-extra",
          "type": "website"
        },
        {
          "url": "https://github.com/ThreeTen/threeten-extra/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/ThreeTen/threeten-extra",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.yaml/snakeyaml@2.6?type=jar",
      "group": "org.yaml",
      "name": "snakeyaml",
      "version": "2.6",
      "description": "YAML 1.1 parser and emitter for Java",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "d8bd94536cee962cfff39730bffdb8da"
        },
        {
          "alg": "SHA-1",
          "content": "2bc14918a2f8d5414749ab12d0c590cd3198b8c1"
        },
        {
          "alg": "SHA-256",
          "content": "c8f7a98e7394adda02f6317249710e4d1b4c7a25aa8c7eace0c2eea52eb8bf85"
        },
        {
          "alg": "SHA-512",
          "content": "6acd69508b8287f4843048930ce0d87378d29974e13bb85a0c600424fca46b5069983679225b41a5d772feb776d1d8886e3c19165c15b4b50fbf7a9134364a5a"
        },
        {
          "alg": "SHA-384",
          "content": "2ef9d7fdd8e15a639f23f94708fa40e2cf8254a02ad9c204ac2be5e7258d6fc439c8b0440ba0dece8701a0d3ea64eabd"
        },
        {
          "alg": "SHA3-384",
          "content": "1adcf66914123e71160de433ed0dcd39c061e022ca944f66496b6109e43456dcc8c95948640125d24b51b1dfb417a7a2"
        },
        {
          "alg": "SHA3-256",
          "content": "f5158c7a4a070ab149e2b4703a579addec5a183d83f97b0a40b22b0fd297e9f0"
        },
        {
          "alg": "SHA3-512",
          "content": "3688a0fb15be372db00605d3d469881198fbb91ada469995667bbcaadc5fb8119b71290558e534bfc739babc03e1b95d927cd62814c9a65b81e5c1976ca5d1e4"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.yaml/snakeyaml@2.6?type=jar",
      "externalReferences": [
        {
          "url": "https://bitbucket.org/snakeyaml/snakeyaml",
          "type": "website"
        },
        {
          "url": "https://bitbucket.org/snakeyaml/snakeyaml/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://bitbucket.org/snakeyaml/snakeyaml/src",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.metaeffekt.core/ae-security@0.157.2?type=jar",
      "publisher": "metaeffekt GmbH",
      "group": "org.metaeffekt.core",
      "name": "ae-security",
      "version": "0.157.2",
      "description": "Core project with fundamental runtime and build support.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "cef5eecbcc16351ea584a4642d87034d"
        },
        {
          "alg": "SHA-1",
          "content": "a7f642641002091c8e45fd4f05631dfa3a38d99e"
        },
        {
          "alg": "SHA-256",
          "content": "9d44028c5918297a978df8585ba445eb33f444926bb4faaa509c3aab414e17c2"
        },
        {
          "alg": "SHA-512",
          "content": "b9651b971a715f36011759d1ff1134858e8475056b621b5f1565aece3f50ebc4dec58b9b5e51d399580c77e60add7e2f598f44d5e404f936809daad37edd5ee3"
        },
        {
          "alg": "SHA-384",
          "content": "e601626bb29885b87fad47fb9fd13fb74d45fd981b8288d005e44a854002e570910cc5bcfaa69f7fa4ce491d0ef257a7"
        },
        {
          "alg": "SHA3-384",
          "content": "e7c4a8f4f28482bf9a85f7bb723569281e77d7c802cee1fce7876ab44ba033ea85298422cad1cc2d947b82e1e27bc741"
        },
        {
          "alg": "SHA3-256",
          "content": "83989d7dbb192c117b2f793bdfc7a880b84d68c3dfb5ce09123b95ad8cc066ce"
        },
        {
          "alg": "SHA3-512",
          "content": "9425be6bc3464ed5ec6518dc9ffff8198395fe9eaa180661f268998b1493fcfd79db5cc42b74c9708916c525688047fffd8eed50b7f86e9c3a35256195b4c39a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.metaeffekt.core/ae-security@0.157.2?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/org-metaeffekt/metaeffekt-core/ae-core-poms/ae-core-plugin-management-pom/ae-libraries/ae-security",
          "type": "website"
        },
        {
          "url": "https://github.com/org-metaeffekt/metaeffekt-core.git/ae-core-poms/ae-core-plugin-management-pom/ae-libraries/ae-security",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.slf4j/jcl-over-slf4j@2.0.20?type=jar",
      "publisher": "QOS.ch",
      "group": "org.slf4j",
      "name": "jcl-over-slf4j",
      "version": "2.0.20",
      "description": "JCL 1.2 implemented over SLF4J",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "4a2f67a3feba29618916f8ccbd3dab18"
        },
        {
          "alg": "SHA-1",
          "content": "7cb2437e20d244474b1c5a50747e4b376e9a2daf"
        },
        {
          "alg": "SHA-256",
          "content": "32f95628a4baa60ea8a5b052c8cb6e51d07b0fee3e6092414070874f69daf710"
        },
        {
          "alg": "SHA-512",
          "content": "db6cc4c11967e80d7392173f13cb1cc10874cc493f3357e7a01867cb927510e1ee7b11f5621e2874fc0e38c3afb0af21dd75a0fdb57ac7c660bdd4107e5ae296"
        },
        {
          "alg": "SHA-384",
          "content": "a7498a4a9561300327ef159f237ceb31698b5396d35829e454455718d84f72c9fd1b9c6cfcdc6d5573727d6d83219cd6"
        },
        {
          "alg": "SHA3-384",
          "content": "ccbfcdfd999e04a0bcf9830e427e9f8ad5a26bdef078044bc4ed15ceebbf51caaa218c4e4a1ed60200bcebb227a6e988"
        },
        {
          "alg": "SHA3-256",
          "content": "7866d4950ad2d335c7804390ade70c2143befbcb67e21c29d60c0fdefe5a8685"
        },
        {
          "alg": "SHA3-512",
          "content": "961c4df212cae468bd02cd134dfdf1fb8a7e5a2efac6fef45a535a753988e08f547cdd34ec13da1913118994f354a73005810ae602d58f033d191ee3921835f6"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.slf4j/jcl-over-slf4j@2.0.20?type=jar",
      "externalReferences": [
        {
          "url": "http://www.slf4j.org",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/qos-ch/slf4j/slf4j-parent/jcl-over-slf4j",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/commons-io/commons-io@2.22.0?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "commons-io",
      "name": "commons-io",
      "version": "2.22.0",
      "description": "The Apache Commons IO library contains utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "f91d54bd47c42456b4a5ae62eed85565"
        },
        {
          "alg": "SHA-1",
          "content": "5b1e18bc0ad651ed878029d83f88d9c8189fd51e"
        },
        {
          "alg": "SHA-256",
          "content": "2b9a7b1f726fb86216dbd2c8321eabe0221dbd5b1be81c18e1cb53811b104758"
        },
        {
          "alg": "SHA-512",
          "content": "fca0b4ae70e531bee74413e0b865981aa8b60a9390f789b63997203dae67be65362e95a0c35b9d4b072fbb0810114783415dd22b92fb42e5594b10992f632bc5"
        },
        {
          "alg": "SHA-384",
          "content": "e1fbf3729c4d2d77b036d90234d9e2ed3fe0c2f5379d333a695c1cb0037f63d288c8b62de05022da0f612da65835fee0"
        },
        {
          "alg": "SHA3-384",
          "content": "02acc6e7f614d8684e7104a52123573152a2e1b651bc6a5be12d4b58861c757d6c56f51105bb97c92309d126059232ea"
        },
        {
          "alg": "SHA3-256",
          "content": "134157813629f4d9b97044602e1fa2f61c14c3be1f641490b3e06ac941ff3315"
        },
        {
          "alg": "SHA3-512",
          "content": "47832f3b7abe375f3b0ed169996d9776b2a0007b073ab3f06438dce67be9bda45e8aac84737cc639ada4424b13c7614d8c9fcb23779868f7421414777cc0946a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/commons-io/commons-io@2.22.0?type=jar",
      "externalReferences": [
        {
          "url": "https://commons.apache.org/proper/commons-io/",
          "type": "website"
        },
        {
          "url": "https://github.com/apache/commons-io/actions",
          "type": "build-system"
        },
        {
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2",
          "type": "distribution"
        },
        {
          "url": "https://issues.apache.org/jira/browse/IO",
          "type": "issue-tracker"
        },
        {
          "url": "https://mail-archives.apache.org/mod_mbox/commons-user/",
          "type": "mailing-list"
        },
        {
          "url": "https://gitbox.apache.org/repos/asf?p=commons-io.git/commons-io",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.json/json@20231013?type=jar",
      "group": "org.json",
      "name": "json",
      "version": "20231013",
      "description": "JSON is a light-weight, language independent, data interchange format. See http://www.JSON.org/ The files in this package implement JSON encoders/decoders in Java. It also includes the capability to convert between JSON and XML, HTTP headers, Cookies, and CDL. This is a reference implementation. There are a large number of JSON packages in Java. Perhaps someday the Java community will standardize on one. Until then, choose carefully.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "1a0702c57783ce9e948252c34644f328"
        },
        {
          "alg": "SHA-1",
          "content": "e22e0c040fe16f04ffdb85d851d77b07fc05ea52"
        },
        {
          "alg": "SHA-256",
          "content": "0f18192df289114e17aa1a0d0a7f8372cc9f5c7e4f7e39adcf8906fe714fa7d3"
        },
        {
          "alg": "SHA-512",
          "content": "a5cdd1ed984448d6538746429f2d1a0ec8f64f93af0e84870ce898a9f07a81d11bf27d2ee081471975772efc8a0d3d5e05541197a532066e9edb09ad032d31a3"
        },
        {
          "alg": "SHA-384",
          "content": "5d2629c7fa21af332369d9feb30dca6bbc76378615252fd5fc8a9bd55deba17951a45ae3384672f317b12a5d25a285bc"
        },
        {
          "alg": "SHA3-384",
          "content": "b96f3dc5d35e439d33e31522538d5d91cb8d88f12d19071a66ab31722c46fbb9c945f3894942203f4dd945df93bc3d91"
        },
        {
          "alg": "SHA3-256",
          "content": "69c7a6f7873b85a74ec9547b081d217a7407deac8d0912ac4906c0eb2c2f87f5"
        },
        {
          "alg": "SHA3-512",
          "content": "fd2bcc534d0bcd4b1cf3337e1f5f8073d5693f3e65d789203312a166f91874d7c31ea1715de9eaea3e0437639591ae4157ceef4b76354e6681f34bc034a06d7a"
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "Public Domain",
            "url": "https://github.com/stleary/JSON-java/blob/master/LICENSE"
          }
        }
      ],
      "purl": "pkg:maven/org.json/json@20231013?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/douglascrockford/JSON-java",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/douglascrockford/JSON-java.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.github.kagkarlsson/db-scheduler@16.12.0?type=jar",
      "publisher": "Gustav Karlsson",
      "group": "com.github.kagkarlsson",
      "name": "db-scheduler",
      "version": "16.12.0",
      "description": "Simple persistent scheduler for scheduled tasks, recurring or ad-hoc.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "6d5a136ad6650017b4b31072c8e043af"
        },
        {
          "alg": "SHA-1",
          "content": "129913568e06c3fd3a3480c896d698653d2fdf74"
        },
        {
          "alg": "SHA-256",
          "content": "2238bdad70014c41a762dd215d500a57a0bf22138df7dace1faf5c82eaeed545"
        },
        {
          "alg": "SHA-512",
          "content": "0ee889aecbf89b2fafbc953b53e91770020cfe96ec95e28891ef38e453a1a07e96116d32a5ac18fb30beba40ad618276cfc562a300876e15932bb4dd50cbb99c"
        },
        {
          "alg": "SHA-384",
          "content": "2192fa79ffa02a5a673539f646d7507220a0980e7a5e26148bb747e8e44482f5b3ed812bc769a3dbd76c790da86446ce"
        },
        {
          "alg": "SHA3-384",
          "content": "1b6a30851aa7d815a0e60a26e9896def19d0e04b8318570152a8934cd7e3429b1e2e057b845cfa31440ed1c62e22cd5f"
        },
        {
          "alg": "SHA3-256",
          "content": "560ee50d2a0c7693b872b117107e5cc164aba3d031ef7e44892d07244f598c41"
        },
        {
          "alg": "SHA3-512",
          "content": "c9fb738c3d59c498226deedec73c95e57f7f43b0ceefad1ea09081839f30ac543c31652fbfa30f39c7acea3b980619198f659d5392dbd339c31e1cec5badc894"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.github.kagkarlsson/db-scheduler@16.12.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/kagkarlsson/db-scheduler",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/kagkarlsson/db-scheduler/db-scheduler/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/jdbi-support@5.1.2?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "jdbi-support",
      "version": "5.1.2",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "cb1d8c418aa4916cc677da83a0a776d1"
        },
        {
          "alg": "SHA-1",
          "content": "ae44dab4ceed1ef3d46df98e2f37d6b09a8d3606"
        },
        {
          "alg": "SHA-256",
          "content": "086e2d29a7199e33f4e65288e7e3718b49e90006846a37c10db4d58b5cbbcc80"
        },
        {
          "alg": "SHA-512",
          "content": "5e0442577f117eba3e23a08d5854e8ebfd4d20e4b3aa18bb23310bd82a3b37f28b556f0c0d574abde74079cbd75da1fa23c7e5fbfd07eec67f8f5299378f1477"
        },
        {
          "alg": "SHA-384",
          "content": "b47af90bdc824dd6c987f8be01a9fe1df3152fe0be3ff2b28971f0757821443767d9890912d2c1fe20a3665d88141e83"
        },
        {
          "alg": "SHA3-384",
          "content": "95f241f48497dab69fc959a5f816ba22e72cd9be1f2c0337e9f5a457733ed233dcc63eb9853c46e7b815c0b1806797be"
        },
        {
          "alg": "SHA3-256",
          "content": "085d559bf0320db616313b597c2129940571f8f8985c3fb5a788fe8731631d11"
        },
        {
          "alg": "SHA3-512",
          "content": "a9fb08165596a4435a402f7a6d3e3176692b53e88657b9d3e316e2faea6d3b989fadcfe34809ad17435612f5dc09fd3a32bef753617cde088cb3609a98c9eabb"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/jdbi-support@5.1.2?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/support/jdbi-support/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/support/jdbi-support",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.jdbi/jdbi3-core@3.55.0?type=jar",
      "group": "org.jdbi",
      "name": "jdbi3-core",
      "version": "3.55.0",
      "description": "The Jdbi core API. Jdbi 3 is designed to provide convenient tabular data access in Java(tm) and other JVM based languages. It uses the Java collections framework for query results, provides a convenient means of externalizing SQL statements, and named parameter support for any database that supports JDBC.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "0738c63a9ac33843365f835a4c5acfba"
        },
        {
          "alg": "SHA-1",
          "content": "29c673861dc5c563a52330cf460ff9a76be7ce68"
        },
        {
          "alg": "SHA-256",
          "content": "6101be0886145b60be2d773b935017ecc2b0ce8d657c981a43d5cf2c19ddddf3"
        },
        {
          "alg": "SHA-512",
          "content": "3a399777a112d78e3b3e31efc109334859b1d369e012bc5ddfbda2dc12cb4927e853c3e4291daf5cff025260e596d1a00ae6bfbb5e36ab176602b3ed1259f0ca"
        },
        {
          "alg": "SHA-384",
          "content": "000edeb873789d612c22ba4c4bff14f2ac9b3e8e93a180df9124f711ac032bf14fdc5864262965fc905d013656b925c5"
        },
        {
          "alg": "SHA3-384",
          "content": "ea97d2b956b75191ac2f5472f0c4c567f0e21390e562527795fdc4c37dbaa3f5dbacbad778205b9034e912f55b1dd79a"
        },
        {
          "alg": "SHA3-256",
          "content": "d0c1c4162508ee6c01d2790cfa091f6fe086d47eefd1429f08cf11ecf70f667b"
        },
        {
          "alg": "SHA3-512",
          "content": "0cb4634a758f18c062ce23c6c9294823ce3b691f18bc96fa474cededdddc69fa7d91a39f8a773954ff6479cce5518f6d36950493454eb2c81a7a27ab408dda57"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.jdbi/jdbi3-core@3.55.0?type=jar",
      "externalReferences": [
        {
          "url": "https://jdbi.org/",
          "type": "website"
        },
        {
          "url": "https://github.com/jdbi/jdbi/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.leangen.geantyref/geantyref@2.0.1?type=jar",
      "group": "io.leangen.geantyref",
      "name": "geantyref",
      "version": "2.0.1",
      "description": "Generic type reflection library with support for AnnotatedType",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "08dce47c87ec3228628a42cb3eb8c181"
        },
        {
          "alg": "SHA-1",
          "content": "81253383ac75126142f97781d22d19de2532bf76"
        },
        {
          "alg": "SHA-256",
          "content": "386b535c079be7d65ddbe0ad9c00955155b7862225aa92b4c6553ab2b1ea95f9"
        },
        {
          "alg": "SHA-512",
          "content": "c6655ef00ede5d9bb17d4e7556200acaeb5babd67295e9f72e26e8ea48fd50978cc147156e35feada204163163292ad3a0daf0d6b1366c9e933f13a1b4a9eb2f"
        },
        {
          "alg": "SHA-384",
          "content": "3b97009b3b70156fcd3f39a8365e562d481fed54d779e6f60a82bdb0736ee7701edd0c69f58409154dc1823895e7da05"
        },
        {
          "alg": "SHA3-384",
          "content": "36cfd6a2d9d4f0df12e9c688b1981f494f4b77f6f05dc57af69f03ab2d7f9d5628f9b90ad324dbadc2ffc210a74d25aa"
        },
        {
          "alg": "SHA3-256",
          "content": "414a37fe9755beb446609dbc43f2eb702a0789ef5d046baff144596774e189ac"
        },
        {
          "alg": "SHA3-512",
          "content": "6a2ecd82a48dc5272720726298d21a8548c46df8b52f9dea1c97c38e77372fb620ca5c5fbed1b9ea7234f7328c47ba9642366d63f0d3f0340c33faf1f5f7de76"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.leangen.geantyref/geantyref@2.0.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/leangen/geantyref",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/leangen/geantyref/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/leangen/geantyref",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.jdbi/jdbi3-jackson2@3.55.0?type=jar",
      "group": "org.jdbi",
      "name": "jdbi3-jackson2",
      "version": "3.55.0",
      "description": "Use Jackson 2.x for JSON column serialization/deserialization.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "0854390fde86cdd8267d13aeffb7d051"
        },
        {
          "alg": "SHA-1",
          "content": "34eb6236aa00aa0fff404554952da571550ce604"
        },
        {
          "alg": "SHA-256",
          "content": "b7236356c2a42364d8bb1422cb350b0350639228225b149cb19d5aac77bde979"
        },
        {
          "alg": "SHA-512",
          "content": "e1ac6a482267d6ffcd6fe73a0edea85677de834508c6844d19a2d83ad41ae68a964050ca875adaedcba326dcbc9516584b4d94e31156a3c5774238c878aa75df"
        },
        {
          "alg": "SHA-384",
          "content": "64bb6ad5b464904b861f95a6fc6bccacb5e04e580f291fb5ea838f2b35ec80afb55f1451823f21cb36fc186e4c6acb3e"
        },
        {
          "alg": "SHA3-384",
          "content": "5b602a701ea43fc20e62cc95f8dac6b88a9b4b2e4e83d4f768294ef7796036b0ad9dd6590238586c71bec7158138dbfc"
        },
        {
          "alg": "SHA3-256",
          "content": "4af34ab326c58c6399ecba4b1901f2095ce922eb1416a0f3eed6a34754d75f15"
        },
        {
          "alg": "SHA3-512",
          "content": "e741175c1e45da329ee1cb4616052d55ec60d088c371c29e9787bee7bf7e005ff36b26a4b224fbcd17518485d4fefce3bf47910577ed5e4639270af75c789442"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.jdbi/jdbi3-jackson2@3.55.0?type=jar",
      "externalReferences": [
        {
          "url": "https://jdbi.org/",
          "type": "website"
        },
        {
          "url": "https://github.com/jdbi/jdbi/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.jdbi/jdbi3-json@3.55.0?type=jar",
      "group": "org.jdbi",
      "name": "jdbi3-json",
      "version": "3.55.0",
      "description": "Support for JSON column types. In addition to this module, a serialization module (jackson2, gson2, moshi) is required.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "3c2000395c39002b731a972be73329db"
        },
        {
          "alg": "SHA-1",
          "content": "fc44b0da029880493315aa8a959ade337d0eed97"
        },
        {
          "alg": "SHA-256",
          "content": "3619a25a3c8da393501e2147166f010df75dae762de6a29caf563449bc9bad95"
        },
        {
          "alg": "SHA-512",
          "content": "c40fb596046b069f8b5b6ab63f3de9b662a07ea7dfa68433d3033590f93d3d036353ada467eb6dd795888f448cafdd0a60f11ac4b6ce987622b951d34abfd070"
        },
        {
          "alg": "SHA-384",
          "content": "c4962f738a060416a84db6b12acff6b90947101f747585fa379caeb06a3df69d63175ba0c22d2108848ca91c388a2804"
        },
        {
          "alg": "SHA3-384",
          "content": "a293d628b8aac9c7621fd5f30da07be7fa9464603a5ba45a2bb636c503b73dd0328ce7fad993d3647dfeb02630e83227"
        },
        {
          "alg": "SHA3-256",
          "content": "04e388cb66f83382d9a33d83362077188009da6a83fa01df25fb9494121fbdf4"
        },
        {
          "alg": "SHA3-512",
          "content": "d7a1c2d4adc803ccdbb74d2825ce297608e6d4726a267075c77553a2319fe0ccb955a8980e5662518a264c741f32a32f3d3016b5ae930c1adf11904f0f9c8239"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.jdbi/jdbi3-json@3.55.0?type=jar",
      "externalReferences": [
        {
          "url": "https://jdbi.org/",
          "type": "website"
        },
        {
          "url": "https://github.com/jdbi/jdbi/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.22.3?type=jar",
      "publisher": "FasterXML",
      "group": "com.fasterxml.jackson.core",
      "name": "jackson-core",
      "version": "2.22.3",
      "description": "Core Jackson processing abstractions (aka Streaming API), implementation for JSON",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "75691eef4483b7eb0e1c43e08dcb6573"
        },
        {
          "alg": "SHA-1",
          "content": "8695aab38355c65b60e242ec62edf13c52916d88"
        },
        {
          "alg": "SHA-256",
          "content": "8a501126a385b25841915d839508f8a66e2a0dbc8a6709d055ef3b3e852b094c"
        },
        {
          "alg": "SHA-512",
          "content": "8d5984961b37f9570d0581a74f005442fe37c46c601ee0fe63e3695f967bd7598dd268cfb33509a289ff472385cedd99396660e31d7cb873d1e7ffff676912e8"
        },
        {
          "alg": "SHA-384",
          "content": "788125564042463c3b3f856d803c955282cacbda361d8dc172fdc8288013dd17db525e490bc0bde360c480e431a7a1d1"
        },
        {
          "alg": "SHA3-384",
          "content": "5706651739544e7216903e0e6c5f4edd362b158b787d04afe0d31b65137394605ed569ecb924728d9cd5a4850fa07b3f"
        },
        {
          "alg": "SHA3-256",
          "content": "f41bb3e563a0b67d3ae1d9c29e0ebe8b86aa650da68b66e66d9403bd6e774c37"
        },
        {
          "alg": "SHA3-512",
          "content": "3d3116030b1efdab1ca91f0ec21a72bf8f2a0397d1eae70dddc1848906781c22aa941b8a24b47c1a33ede3675a47b12510aeea1a042b198936fc5fbcf7b645e0"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.22.3?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/FasterXML/jackson-core",
          "type": "website"
        },
        {
          "url": "https://central.sonatype.com/api/v1/publisher",
          "type": "distribution"
        },
        {
          "url": "https://github.com/FasterXML/jackson-core/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/FasterXML/jackson-core",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.jdbi/jdbi3-sqlobject@3.55.0?type=jar",
      "group": "org.jdbi",
      "name": "jdbi3-sqlobject",
      "version": "3.55.0",
      "description": "SqlObject is a declarative, annotation-driven API for database access. It complements the core API. Jdbi 3 is designed to provide convenient tabular data access in Java(tm) and other JVM based languages. It uses the Java collections framework for query results, provides a convenient means of externalizing SQL statements, and named parameter support for any database that supports JDBC.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "134e574b0189b45851a8cfe013c9f25e"
        },
        {
          "alg": "SHA-1",
          "content": "289c56c0ee1748fefaa37732b0d6589183b26431"
        },
        {
          "alg": "SHA-256",
          "content": "d27fc273cdfc1e19b5658756ee198048044583330a89ac7b76cf8bfb98750dd8"
        },
        {
          "alg": "SHA-512",
          "content": "05d379a377c85c896048ca81c07ad318583b62573a111b06289867bda2be7b192666ed21e11e92903ae1ae662388e014225ad9236bad69291e6ceffe85f3e9e6"
        },
        {
          "alg": "SHA-384",
          "content": "fd7e84e18a262ddd194882d9fe438812b37cddcbd7e60e514295d92e219113946edc6dd2e57f7d5659edb9aa44bc7c7d"
        },
        {
          "alg": "SHA3-384",
          "content": "cb72e8b45c5dccb74ecfe99e086f71e1bd517f759457343eb72fc6c237d97567f9db511fae46e6d6a452998e0d204c8d"
        },
        {
          "alg": "SHA3-256",
          "content": "69efccda75704d9bead40827a09eae0d47ee0cfe7a958feef0645742ccfd0418"
        },
        {
          "alg": "SHA3-512",
          "content": "52f0d18f91db2260899cae63c93825b723aaeddf83734f5c96654642336efd2322daabe3ceee1efdde7d7d85e84e2dd1832dafc514a10344be75a2a60dcae35c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.jdbi/jdbi3-sqlobject@3.55.0?type=jar",
      "externalReferences": [
        {
          "url": "https://jdbi.org/",
          "type": "website"
        },
        {
          "url": "https://github.com/jdbi/jdbi/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.jdbi/jdbi3-postgres@3.55.0?type=jar",
      "group": "org.jdbi",
      "name": "jdbi3-postgres",
      "version": "3.55.0",
      "description": "Support for additional PostgreSQL features and data types.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "cbd392c23603720ea8409a3dedf5b344"
        },
        {
          "alg": "SHA-1",
          "content": "307062403f1845a8a369f63a692e4a0fa3ab6372"
        },
        {
          "alg": "SHA-256",
          "content": "4517b5c65fabfdf8cdfea9125d1bda773a4d49de017131ddbc7135f42c02246c"
        },
        {
          "alg": "SHA-512",
          "content": "d7230c563f55a325c89665277b1c308b2c1207e4149b57bd9b4ca35d07a6697d45e2f6a144754562b46a4b4eeef889e4fedde7599a53b2edf49dca9d9fe86e49"
        },
        {
          "alg": "SHA-384",
          "content": "2d314455e35e23c4043192616a43e2edea4030e3d21ec16b8df631cb203bf1ba68c0bc0ad70f5d8c37a3ef0846f4830c"
        },
        {
          "alg": "SHA3-384",
          "content": "b486c5040c72e2bd73b97a1f4e15a53f70b261a78a9ff7e33e9ce26f25faf820130c0fe59682ec6d8db46209f6a04bf6"
        },
        {
          "alg": "SHA3-256",
          "content": "fa6212a0412d4caf94df5b1d1a8d7b8af517b8bcc9c3ad574b7afb1e5444492a"
        },
        {
          "alg": "SHA3-512",
          "content": "5e1f0c5c03890e19bdad9483827ca947194afa85bca87caf8d1c6cb1ada8ec27ab0201a912755b10e9c2dbce8a4fec1efafb668ef7352df7045316d724ccdfd9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.jdbi/jdbi3-postgres@3.55.0?type=jar",
      "externalReferences": [
        {
          "url": "https://jdbi.org/",
          "type": "website"
        },
        {
          "url": "https://github.com/jdbi/jdbi/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.jdbi/jdbi3-freemarker@3.55.0?type=jar",
      "group": "org.jdbi",
      "name": "jdbi3-freemarker",
      "version": "3.55.0",
      "description": "Use Apache Freemarker for query templating.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "d52d202f0da155c6a2f501f56b553f78"
        },
        {
          "alg": "SHA-1",
          "content": "1695ac81595d5c9263196b8f7211b7ee0c1b0d2c"
        },
        {
          "alg": "SHA-256",
          "content": "a8886fbb11ab879421278358e6d2fda68c19f1f3608301dc56c9e92adf2b3b38"
        },
        {
          "alg": "SHA-512",
          "content": "1de9010f66eb40dab774224b2c261d486708d8f9ad24cb87950efc533825c8d0d2bba1b6bcdcea1b81b01d26d04b7a8266f14e099c1400709932923a5fc61eea"
        },
        {
          "alg": "SHA-384",
          "content": "06e387d491daac62f46e523fcadda847773c3e43527b375272d7341ec32606a0c5abb3339d6dcd7b328a939d4f5a524c"
        },
        {
          "alg": "SHA3-384",
          "content": "0ab6d97729d638b88c796026be1b756255da8e644105bf9cdea2bfcb1060a389a381f58550c5b0ec1b7f6a112f99d283"
        },
        {
          "alg": "SHA3-256",
          "content": "a249581bb003e28a8079ee26ccf5d02aac45935f831d18914865ecaac35f9362"
        },
        {
          "alg": "SHA3-512",
          "content": "9ff900b7cbff47bb41ef9701a87b199e74f5f60768f6f9af18d6bc17d5eb90343577efabe8a1ef32db89b57c9a5cc5f8192f1f27038095ba14e278b157d4f011"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.jdbi/jdbi3-freemarker@3.55.0?type=jar",
      "externalReferences": [
        {
          "url": "https://jdbi.org/",
          "type": "website"
        },
        {
          "url": "https://github.com/jdbi/jdbi/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.freemarker/freemarker@2.3.34?type=jar",
      "publisher": "Apache Software Foundation",
      "group": "org.freemarker",
      "name": "freemarker",
      "version": "2.3.34",
      "description": "FreeMarker is a \u0022template engine\u0022; a generic tool to generate text output based on templates.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "1704fd3c579385ca5fd0ebcdf50df73c"
        },
        {
          "alg": "SHA-1",
          "content": "c2fa47a1c3b6dcdfca90e952e51211967a4baa54"
        },
        {
          "alg": "SHA-256",
          "content": "9a9fb91cd64199232eb1ca9766148a5d30ef8944be5fac051018f96c70c8f6a3"
        },
        {
          "alg": "SHA-512",
          "content": "58bc6e157452f6b3a70a7d1bcfb89013e7204e716e267386014f6834fb66a56333fe4b538ef25b651913ab585bfa5c8fa010159d96ab952de42a82edb9552fca"
        },
        {
          "alg": "SHA-384",
          "content": "3def74003978738e770a121746f2fd5b3f179f117050fac529ba9a6eee104ac7d20f74a1e815f97a5bf451b3f36f0ed1"
        },
        {
          "alg": "SHA3-384",
          "content": "5636e107cd5406439d57e41ebcfa3cb068e32639941f1b7d780efb5acdb50ee99f7966b9174c52e9cfb27de22666fec6"
        },
        {
          "alg": "SHA3-256",
          "content": "22113afa6de5d146e0be2840ffd3103323b87849f020b06f24d9a70f3dfd3571"
        },
        {
          "alg": "SHA3-512",
          "content": "69c49e3ffb693fbeb98515f578c5a1bf1a6f81baf04efb21d8b2cdcbe93d59eff28f3e6d82a785c9c5b27222fc6f1bfa16a33bc08c92ea792a26a5d1b6068df9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.freemarker/freemarker@2.3.34?type=jar",
      "externalReferences": [
        {
          "url": "https://freemarker.apache.org/",
          "type": "website"
        },
        {
          "url": "https://issues.apache.org/jira/browse/FREEMARKER/",
          "type": "issue-tracker"
        },
        {
          "url": "http://mail-archives.apache.org/mod_mbox/freemarker-dev/",
          "type": "mailing-list"
        },
        {
          "url": "https://git-wip-us.apache.org/repos/asf?p=freemarker.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.jersey.ext/jersey-micrometer@4.0.2?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.glassfish.jersey.ext",
      "name": "jersey-micrometer",
      "version": "4.0.2",
      "description": "Jersey extension modules providing utilities, filters as well as integrations with external frameworks (Guice, Spring, Freemarker, etc.) and languages (Scala, Groovy, etc.). NOTE: Jersey security extensions have their own dedicated security umbrella project.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "3f236652b18c85dd1d3d42be134e5304"
        },
        {
          "alg": "SHA-1",
          "content": "f32a752d69e3ac4c4b02181bb24a8eb596437fbc"
        },
        {
          "alg": "SHA-256",
          "content": "703dd4ec1ca66d0cfe0e8a4ae5fb804b496f5160c68b881ff4730e8d63370a78"
        },
        {
          "alg": "SHA-512",
          "content": "9898a4196b1f282023471a6dabc1fb0a10e6cd614c6ff721cb0ac59eee3950e4badf532db999fca3da25df2d3880cec470112aa327bd446cea58596b79069786"
        },
        {
          "alg": "SHA-384",
          "content": "8016c540b330bffd9bfdcfe67ffa70634924af42be3caa10a03d7a652da7b2553397ad3f0db07089f3387236eaed152e"
        },
        {
          "alg": "SHA3-384",
          "content": "7a17537bf467022f7578410aefcbf826e5272cbe889956f18927806ad1bf5ea329c1541d802258bdc385480f2b6d3433"
        },
        {
          "alg": "SHA3-256",
          "content": "5816cc53154fac6d0726fc11d948884007d8bf2abbe7fdb7606ad128b887fa19"
        },
        {
          "alg": "SHA3-512",
          "content": "56c27796e3961ec83ae7154bc9c3a16970530b7607728394b8eba41c256b248726d90264e0597b67c0affa868c1562e71a14f0e448bf54958e2edebdf6839037"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        },
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        },
        {
          "license": {
            "id": "BSD-2-Clause"
          }
        },
        {
          "license": {
            "name": "Apache License, 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        },
        {
          "license": {
            "name": "Public Domain",
            "url": "https://creativecommons.org/publicdomain/zero/1.0/"
          }
        },
        {
          "license": {
            "name": "Modified BSD",
            "url": "https://asm.ow2.io/license.html"
          }
        },
        {
          "license": {
            "name": "jQuery license",
            "url": "jquery.org/license"
          }
        },
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/license/mit/"
          }
        },
        {
          "license": {
            "name": "W3C license",
            "url": "https://www.w3.org/Consortium/Legal/copyright-documents-19990405"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.jersey.ext/jersey-micrometer@4.0.2?type=jar",
      "externalReferences": [
        {
          "url": "https://projects.eclipse.org/projects/ee4j.jersey/project/jersey-micrometer",
          "type": "website"
        },
        {
          "url": "https://ci.eclipse.org/jersey",
          "type": "build-system"
        },
        {
          "url": "http://localhost",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/project/jersey-micrometer",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.jersey.core/jersey-common@4.0.2?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.glassfish.jersey.core",
      "name": "jersey-common",
      "version": "4.0.2",
      "description": "Jersey core common packages",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "727c798720203d12c8e41bbefcd3e66d"
        },
        {
          "alg": "SHA-1",
          "content": "0f45e98ad8798ee80a3904d32fffdab62c1cbbd6"
        },
        {
          "alg": "SHA-256",
          "content": "83466815c46d8f813509411986a22d1d3a2abe572b15b03078f98bc020154538"
        },
        {
          "alg": "SHA-512",
          "content": "8deadb5f070eea6d25523d8e634394f13183124aa673e5b08751371c558c49bb428452d07c74cfb477f7da53e3827818bb0ff3715fa97a19b515976a9d9fd65a"
        },
        {
          "alg": "SHA-384",
          "content": "fe3592ead798bfbe2d28093e589f2f73d73314e134f49e186ebf338c6f4ca030def8b982fc0b5fc6f9dc0c4d090d6cf7"
        },
        {
          "alg": "SHA3-384",
          "content": "17afad77ae4b187499349ffdaa877b80cf51da0e573407ab3ff550ff8f4e44f60de4861cce0a8c7ffc9f02edd688e5b9"
        },
        {
          "alg": "SHA3-256",
          "content": "5920f7c36054a487d8a66a8541fd69cf60fb01d96f6c9da1f05a52f6fbd56d50"
        },
        {
          "alg": "SHA3-512",
          "content": "fd0dc5c6ba36eae0cfaac1f2cc02676c87cf899bff7f21d3f367499a7695dab26aaa122a9a442156cd86b86dfd8a158bbaa832bfd1be89b2b902bddde043e7cb"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "name": "The GNU General Public License (GPL), Version 2, With Classpath Exception",
            "url": "https://www.gnu.org/software/classpath/license.html"
          }
        },
        {
          "license": {
            "name": "Apache License, 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        },
        {
          "license": {
            "name": "Public Domain",
            "url": "https://creativecommons.org/publicdomain/zero/1.0/"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.jersey.core/jersey-common@4.0.2?type=jar",
      "externalReferences": [
        {
          "url": "https://projects.eclipse.org/projects/ee4j.jersey/jersey-common",
          "type": "website"
        },
        {
          "url": "https://ci.eclipse.org/jersey",
          "type": "build-system"
        },
        {
          "url": "http://localhost",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/jersey-common",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.hk2/osgi-resource-locator@3.0.0?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.glassfish.hk2",
      "name": "osgi-resource-locator",
      "version": "3.0.0",
      "description": "Eclipse Enterprise for Java (EE4J) is an open source initiative to create standard APIs, implementations of those APIs, and technology compatibility kits for Java runtimes that enable development, deployment, and management of server-side and cloud-native applications.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "de9e96f2606a6f86def8659e9762c163"
        },
        {
          "alg": "SHA-1",
          "content": "5483c94aa9a7e16319abaec0a6c74c999678feac"
        },
        {
          "alg": "SHA-256",
          "content": "a1866ccfddaa29f18da5d39df662894ab2dd9902994a5000e7644f6cc1e37e55"
        },
        {
          "alg": "SHA-512",
          "content": "ff7e7fc1656bd6f938f69186aa6be1379aacdd4ba9724735c7613d76edf4496d5ff74589bbb83d42c98a22620c6eaa17319d77f878f206744be3e8677f3cba09"
        },
        {
          "alg": "SHA-384",
          "content": "65739334c0f2f3f877a4a14b4d8009711f05d37d9ab4ad3e89560c0a7635011e3dc24ab3ee31ad3f19396bc320d9962b"
        },
        {
          "alg": "SHA3-384",
          "content": "dc6237482f129cb62e8bc16233174d36d76c114b2a51de64505374105a7099454143d18e4e2700e34f6aa497740dcbc4"
        },
        {
          "alg": "SHA3-256",
          "content": "b02549e92eb21dc206488d6d7cade6f94867c537646c9ab3009fd4c119a73c2c"
        },
        {
          "alg": "SHA3-512",
          "content": "d0ed41c9b5d0fe75a12d8dbfa65df17e6d2380c25e52436929d9eaa8154f474e66447e518dbee445c4c94660882a20f509b6f69aff8081805802b7a34d518f1c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.hk2/osgi-resource-locator@3.0.0?type=jar",
      "externalReferences": [
        {
          "url": "https://projects.eclipse.org/projects/ee4j/hk2-extra-parent/osgi-resource-locator",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/ee4j/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/glassfish-hk2-extra/osgi-resource-locator",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.jersey.core/jersey-server@4.0.2?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.glassfish.jersey.core",
      "name": "jersey-server",
      "version": "4.0.2",
      "description": "Jersey core server implementation",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "d938a53dc417de9bc60f3158068dd1c4"
        },
        {
          "alg": "SHA-1",
          "content": "5b684689d7d36001b883eca81b00e4597f31f414"
        },
        {
          "alg": "SHA-256",
          "content": "c92030c36d6b72cea53464f954e23260ed1ad3559cbb653264497d83882a9aba"
        },
        {
          "alg": "SHA-512",
          "content": "df351826bf9b32dc4f76293029f9202b9141d939532e839afe1bfa504137644ef5156874eefa299db2f7e17fa204e2f7a390b87a3f3ad62282db622078546cd4"
        },
        {
          "alg": "SHA-384",
          "content": "4e00f26790de2a10b90285f7bc3ff0b094c8fb3c1870ef556920f698dcdb61809d2929448c044a686520256e007645d6"
        },
        {
          "alg": "SHA3-384",
          "content": "152cdbab19536c2c3f3d3189e58143253e4cbf35146314097da457cefacf0b96dc6aba4eb3c37195baa87fb8550f1744"
        },
        {
          "alg": "SHA3-256",
          "content": "71d88e8db96d993601980beeaf55d28e5bbbac8ba3438bd6e409ee8fed7e51dd"
        },
        {
          "alg": "SHA3-512",
          "content": "555f64a84060dd85c5ed5df97221e2a5d38d465f58a1cd60f33ad602163d858f6d08b44cf2a3e40b466db2b839e5c1a902b6ad1997edc04ea993fa15cf10c2c5"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "name": "The GNU General Public License (GPL), Version 2, With Classpath Exception",
            "url": "https://www.gnu.org/software/classpath/license.html"
          }
        },
        {
          "license": {
            "name": "Apache License, 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        },
        {
          "license": {
            "name": "Modified BSD",
            "url": "https://asm.ow2.io/license.html"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.jersey.core/jersey-server@4.0.2?type=jar",
      "externalReferences": [
        {
          "url": "https://projects.eclipse.org/projects/ee4j.jersey/jersey-server",
          "type": "website"
        },
        {
          "url": "https://ci.eclipse.org/jersey",
          "type": "build-system"
        },
        {
          "url": "http://localhost",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/jersey-server",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.jersey.core/jersey-client@4.0.2?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.glassfish.jersey.core",
      "name": "jersey-client",
      "version": "4.0.2",
      "description": "Jersey core client implementation",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "9c61cbd9c4fc6749f0dc2338ea0eb870"
        },
        {
          "alg": "SHA-1",
          "content": "15a14c04c458dc9eafc12af7d33ed43fd78dab04"
        },
        {
          "alg": "SHA-256",
          "content": "91fd986ee7c7fa468b2f601d7a2cdf9bfad6ce4fa0fbf5d4f7e6d0c07c12a023"
        },
        {
          "alg": "SHA-512",
          "content": "3121c7fa53d914bb2af504ca183b245bc3184fb080f1d1b2cc0721c733be3e6c4b8cda1c4860ce0646ccd921ea83f6d145af529fa595fe6aacb4bc14644b7250"
        },
        {
          "alg": "SHA-384",
          "content": "754112b2b37246559223abb5d8cf6828ef82507b732c2abe2bdbf28c343cd1815266ddfedb7e8a16797547cda70cd053"
        },
        {
          "alg": "SHA3-384",
          "content": "334b0e0352e584761bedab51a1220f6d1ba8d4cd4221a9cc6fd1ce90d528e5f00c1fe716bdf06b9babb8f757f0740ea0"
        },
        {
          "alg": "SHA3-256",
          "content": "4ea8a1ec58dfa91a85277f085b64b3d5c979984bb50ebe60900b335f21f5ebf5"
        },
        {
          "alg": "SHA3-512",
          "content": "808a3272d41658fcfe831cc2b482968d3962544ffcf8d00d45096f80bfb37b4415b6cb72e1f608f42f04a397ba843f677a8970fcb18267aede08b1c8ad20c928"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        },
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        },
        {
          "license": {
            "id": "BSD-2-Clause"
          }
        },
        {
          "license": {
            "name": "Apache License, 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        },
        {
          "license": {
            "name": "Public Domain",
            "url": "https://creativecommons.org/publicdomain/zero/1.0/"
          }
        },
        {
          "license": {
            "name": "Modified BSD",
            "url": "https://asm.ow2.io/license.html"
          }
        },
        {
          "license": {
            "name": "jQuery license",
            "url": "jquery.org/license"
          }
        },
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/license/mit/"
          }
        },
        {
          "license": {
            "name": "W3C license",
            "url": "https://www.w3.org/Consortium/Legal/copyright-documents-19990405"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.jersey.core/jersey-client@4.0.2?type=jar",
      "externalReferences": [
        {
          "url": "https://projects.eclipse.org/projects/ee4j.jersey/jersey-client",
          "type": "website"
        },
        {
          "url": "https://ci.eclipse.org/jersey",
          "type": "build-system"
        },
        {
          "url": "http://localhost",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/jersey-client",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@4.0.0?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "jakarta.ws.rs",
      "name": "jakarta.ws.rs-api",
      "version": "4.0.0",
      "description": "Jakarta RESTful Web Services",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "9b7cc90c000f193157d60d95caf45972"
        },
        {
          "alg": "SHA-1",
          "content": "c27a67f84ca491efcb3fa68f4df926e8a110069e"
        },
        {
          "alg": "SHA-256",
          "content": "6368b126cbcf34e694bb9ba5b9fe3e5040b7acea7ce622e636d698bb085fd2a6"
        },
        {
          "alg": "SHA-512",
          "content": "e423f90e5f20d133986c60c3fc2f63cfc74531d51b57bf38942cf8e603d8c6817005708117b0bb07e242eae3ba6e1cf23c6ded8fb2776274a9382505ea726ac1"
        },
        {
          "alg": "SHA-384",
          "content": "494b2962ad17d9477d58125cd99d4c0e52e58e10b7ad81e66196649da6651a3187d1ccf64e642083d0a6e54c70f07401"
        },
        {
          "alg": "SHA3-384",
          "content": "1803d40582c05b6956cfeb2cfc7b39c03f2211d4d8511b2b9df2fc4c5830f5a1f8e05d86731f4b168caa3a78bae28d69"
        },
        {
          "alg": "SHA3-256",
          "content": "5e91619ebc4cc811f1639acf926dc4935ac38808d5d834b6d6f26784d7299e9b"
        },
        {
          "alg": "SHA3-512",
          "content": "48c8ed0acd56c83a0d9413bdaa950c92345ac0f36491745e8675b96909c35311fcb05bd80839d0d1247eb5b373754ce5d922d99d06cd1ef9f6063a491e51d671"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0",
            "url": "https://www.eclipse.org/legal/epl-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception",
            "url": "https://www.gnu.org/software/classpath/license.html"
          }
        }
      ],
      "purl": "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@4.0.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/jakartaee/rest/jakarta.ws.rs-api",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/jakartaee/rest/issues",
          "type": "issue-tracker"
        },
        {
          "url": "jaxrs-dev@eclipse.org",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/jakartaee/rest/jakarta.ws.rs-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/us.springett/owasp-risk-rating-calculator@1.0.1?type=jar",
      "group": "us.springett",
      "name": "owasp-risk-rating-calculator",
      "version": "1.0.1",
      "description": "A Java library for calculating OWASP Risk Rating scores",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "f387d7ce91df7f1b56224b972b916ebe"
        },
        {
          "alg": "SHA-1",
          "content": "f4ae15b14d7a4c3686f6a8a8a93e30560472b1f8"
        },
        {
          "alg": "SHA-256",
          "content": "9b66d91d1ff61f99e320466ff451555696f139147260528591ff1718c5605d1c"
        },
        {
          "alg": "SHA-512",
          "content": "449331aaabc401a7c7ac42c6bba06d17a2c2dc8def07961b93de7bde8fb9f54aa2541cbab7e541b6fa1552977d46e5367a78277cffbafc60873bb7042facff65"
        },
        {
          "alg": "SHA-384",
          "content": "e83afc9976cfcb5419768fdba983815bf755101fef34df693b6033094e12a29d23127148edef4ba6db3573e0b2bb3871"
        },
        {
          "alg": "SHA3-384",
          "content": "07bed3d3cc524090d01da7711e684d7c645e9225e38225ca92da6f58f3ae86c9d9f2e1a45ad923f9345abecb609c0be1"
        },
        {
          "alg": "SHA3-256",
          "content": "153dbb661c502fd174cdbb735a0a89f69555365e165dd6a91d7c765226b9947a"
        },
        {
          "alg": "SHA3-512",
          "content": "6c6bb8298f8f3337395693f4963d08d21d7f76e6ef8802773e37efc64b1b25a6f8ec77169f730591f429cfa5ac5f6a1b2ef0948af67fa49f19cf7ba8a0223f25"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/us.springett/owasp-risk-rating-calculator@1.0.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/stevespringett/owasp-risk-rating-calculator",
          "type": "website"
        },
        {
          "url": "https://travis-ci.org/stevespringett/owasp-risk-rating-calculator",
          "type": "build-system"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/stevespringett/owasp-risk-rating-calculator/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/stevespringett/owasp-risk-rating-calculator.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/us.springett/cpe-parser@3.0.1?type=jar",
      "group": "us.springett",
      "name": "cpe-parser",
      "version": "3.0.1",
      "description": "A utility for validating and parsing Common Platform Enumeration (CPE) v2.2 and v2.3 as originally defined by MITRE and maintained by NIST.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "753b3f9a2223c44111f7098ff8a65e3f"
        },
        {
          "alg": "SHA-1",
          "content": "377c4cdca1c3c800dd1ff77d6b5cece16dbf1852"
        },
        {
          "alg": "SHA-256",
          "content": "f98a50dce0a381e08f0f0ac067801c7f4c51dc7f8f1fe7a3c9960c684a809705"
        },
        {
          "alg": "SHA-512",
          "content": "241e1a559ac01966f74e820d0af3fb4f79ec41b76590f26198929790a35579f5663d3d8f97b98e841665f57eb5bc6c51370969f0db34c99c3293c6d98093d9c2"
        },
        {
          "alg": "SHA-384",
          "content": "92929bc29a157cbe13d424875e5a66eacd52b2e20a412306ae48a43076123dca75f1cf0d6d075e140cec34e4bf7a5e25"
        },
        {
          "alg": "SHA3-384",
          "content": "bf36fd4e57aa02054d12018926b7fdb8f89b1fa669b1b4c7ff8327c3203c86843c53825facedd34b86c6d95455ce1907"
        },
        {
          "alg": "SHA3-256",
          "content": "064ece86c096355ca9a06fb4942fb3abac3555e8213653fce7ed1f7767b5531d"
        },
        {
          "alg": "SHA3-512",
          "content": "2f005c9caa28acb5a4f9d521a4b847316f949f9f377bbad4cf25ba485127104717bab5e2382238c4f7349d598eb4de073f08dea0838990d32b6d1f2741b33fc5"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/us.springett/cpe-parser@3.0.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/stevespringett/CPE-Parser",
          "type": "website"
        },
        {
          "url": "https://github.com/stevespringett/CPE-Parser/actions/workflows/maven.yml",
          "type": "build-system"
        },
        {
          "url": "https://github.com/stevespringett/CPE-Parser/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/stevespringett/CPE-Parser.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.cyclonedx/cyclonedx-core-java@13.2.0?type=jar",
      "publisher": "OWASP Foundation",
      "group": "org.cyclonedx",
      "name": "cyclonedx-core-java",
      "version": "13.2.0",
      "description": "The CycloneDX core module provides a model representation of the BOM along with utilities to assist in creating, parsing, and validating BOMs.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "ed54c76ee765e14cb00e54aa97235196"
        },
        {
          "alg": "SHA-1",
          "content": "dfdc0b8d97280973f9e5690c1820b00d0969d022"
        },
        {
          "alg": "SHA-256",
          "content": "2ffa412d7adc10e810f620ce72d1fcaa11b30bfdce690cd803de998aee5f0bb9"
        },
        {
          "alg": "SHA-512",
          "content": "8364cbc6f5bbd04f90983c14c798d7b399b719933bf4b0f6c733249843d417e4ed54491976188b80716b5ed310d4984d75a9cef46349b65f5950eb7bde050064"
        },
        {
          "alg": "SHA-384",
          "content": "02ef794b8b3310b81872d93c71e4b60d5f8570b7492cb9b9e095320023545a7169ad2d406cc494fb196912bd3986545a"
        },
        {
          "alg": "SHA3-384",
          "content": "4276393050f6e167470242d1403d2b8dee0a3368e35a5643061ecc30fdc9b2005877e40ca920343072823185d6ee1e72"
        },
        {
          "alg": "SHA3-256",
          "content": "a1cea1ce541d64f24561a6067eb8078c1a498de195de43c7a5f64ff53dce7680"
        },
        {
          "alg": "SHA3-512",
          "content": "51fdc89512584fa6531f47bfffddd86bd71cac655fd80432fdc115e8ba970a81b28952889e0d51e68b3803a91db2673caee625966cad65ed4ab07d1b8fd287a5"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.cyclonedx/cyclonedx-core-java@13.2.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/CycloneDX/cyclonedx-core-java",
          "type": "website"
        },
        {
          "url": "https://github.com/CycloneDX/cyclonedx-core-java/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/CycloneDX/cyclonedx-core-java/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.22.3?type=jar",
      "publisher": "FasterXML",
      "group": "com.fasterxml.jackson.dataformat",
      "name": "jackson-dataformat-xml",
      "version": "2.22.3",
      "description": "Data format extension for Jackson to offer alternative support for serializing POJOs as XML and deserializing XML as POJOs.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "79220170925ab28331a88c0a625c87f0"
        },
        {
          "alg": "SHA-1",
          "content": "a9b438014867a6f65216e0e663fc92b72288b16d"
        },
        {
          "alg": "SHA-256",
          "content": "8b99f4a11761246f2d721f02d2865dcca32dd8101082ebfbc3c16133b6c0d3e0"
        },
        {
          "alg": "SHA-512",
          "content": "a137d96d2ff2b4441738def126c6f136ac2b1c61aeb0e40934658db21c0573e195936b3b79199fb4c13d05a636137e5f69da139de08127cbe635e568fa24109e"
        },
        {
          "alg": "SHA-384",
          "content": "af768ee29336c7a5f106248caa7570849d3cacee4f9501541082593dc0eee55627ed342d88b91d6c114dfbb9636bb429"
        },
        {
          "alg": "SHA3-384",
          "content": "dede9dd81120fdd69eabfc5418b1949a500b33a3c60da71279467545a2379094fe9d6bc88db07b6f77af7ee4e0917239"
        },
        {
          "alg": "SHA3-256",
          "content": "8c29e54d097336fccdd13221d24792f3bdf3842f4231f0635365ab116afde68f"
        },
        {
          "alg": "SHA3-512",
          "content": "d44c8ddb763568d0a592958b8181cb7f2d75b319885e54c8fe1f277a14b6c2723c6fb5092265bebd0c922796e7994ae984d090b5e2ba9a60075bcb87ab858161"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.22.3?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/FasterXML/jackson-dataformat-xml",
          "type": "website"
        },
        {
          "url": "https://central.sonatype.com/api/v1/publisher",
          "type": "distribution"
        },
        {
          "url": "https://github.com/FasterXML/jackson-dataformat-xml/issues",
          "type": "issue-tracker"
        },
        {
          "url": "http://github.com/FasterXML/jackson-dataformat-xml",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/jakarta.servlet/jakarta.servlet-api@6.1.0?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "jakarta.servlet",
      "name": "jakarta.servlet-api",
      "version": "6.1.0",
      "description": "Eclipse Enterprise for Java (EE4J) is an open source initiative to create standard APIs, implementations of those APIs, and technology compatibility kits for Java runtimes that enable development, deployment, and management of server-side and cloud-native applications.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "314c930b3e40ac1abc3529c7c9942f09"
        },
        {
          "alg": "SHA-1",
          "content": "1169a246913fe3823782af7943e7a103634867c5"
        },
        {
          "alg": "SHA-256",
          "content": "8a31f465f3593bf2351531a5c952014eb839da96a605b5825b93dd54714c48c4"
        },
        {
          "alg": "SHA-512",
          "content": "8651fc14b79e284fe29dff5b2cadbf6748615ececde798c42687472f4f6fd1f80ee05ec53794021c62a11abed0c0170bb08b28d3f9cd7f562eb320bc9870ddec"
        },
        {
          "alg": "SHA-384",
          "content": "48b2a26351619286ffe41d25e5e61cbc0eb8a5a648a205d0f8db48178278cb16850469fe8dbc219aee0ee37f4081c248"
        },
        {
          "alg": "SHA3-384",
          "content": "2047f0b88a12619fb3f07a98048fc405e9cec4ddee6af2a2efc06c1172d2bebefc6c23bdb4df0a1054060f91d5cc5617"
        },
        {
          "alg": "SHA3-256",
          "content": "4b506d06772f32251cadc40251623ebd4f3144531249ce4821787b1a9c4a55b3"
        },
        {
          "alg": "SHA3-512",
          "content": "07632a67f7ca7b460cfc3042ecf97f9097e7d7638209434def89a3bd55da5a31e287f32def27ce776d5775ec0629979abb08fe2836d88d638802194af0320fe0"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl": "pkg:maven/jakarta.servlet/jakarta.servlet-api@6.1.0?type=jar",
      "externalReferences": [
        {
          "url": "https://projects.eclipse.org/projects/ee4j.servlet",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/servlet-api/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/servlet-dev",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/servlet-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.eclipse.jetty/jetty-server@12.1.13?type=jar",
      "publisher": "Webtide",
      "group": "org.eclipse.jetty",
      "name": "jetty-server",
      "version": "12.1.13",
      "description": "Jetty Server Artifact",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "8b072e45e35822eb3d3d26c3551d2114"
        },
        {
          "alg": "SHA-1",
          "content": "445d0614d8169314e6c30ab0f5ce2c35b3cfeff3"
        },
        {
          "alg": "SHA-256",
          "content": "978265f1ac637c504b537f5d56e07d4a47e7c4bb0752d9dd66b79f5be754abfa"
        },
        {
          "alg": "SHA-512",
          "content": "100b2ab4fbbc2643eb8d89781818b123234413ee7bd6690f4cf06aa8889d5fbeb1a95c2a90f5eea6d5a53d42cd8ab5f7afa771172a6f1a235935109bd349cf8b"
        },
        {
          "alg": "SHA-384",
          "content": "1be00a4b82125d236463f902f3848f44db8d8cd18cf225bc3e5730051215d47b71e0cdda672cde056163523f02048d76"
        },
        {
          "alg": "SHA3-384",
          "content": "3e49470553afb6a2310852b4bdcca5c892e1783ca2c00e18ad5595c9a9841ca6cad2b5b6044b8f65629917ff6bd00cee"
        },
        {
          "alg": "SHA3-256",
          "content": "cceb1588afdb554cb50dff4ce230f19b49f50f3b7fc2d288d2a1daa8647fc6a3"
        },
        {
          "alg": "SHA3-512",
          "content": "ff1eb66a5122293bc9dfe0ec561a192a68d9660a4b02689c5242fc8be31b77ef4d124c6a20f28ee79417e6f5cce61388a26b5571369db22b32ab685ee704dded"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0",
            "url": "https://www.eclipse.org/legal/epl-2.0"
          }
        },
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.eclipse.jetty/jetty-server@12.1.13?type=jar",
      "externalReferences": [
        {
          "url": "https://jetty.org/jetty-core/jetty-server",
          "type": "website"
        },
        {
          "url": "https://repo.maven.apache.org/maven2",
          "type": "distribution"
        },
        {
          "url": "https://github.com/jetty/jetty.project/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://www.eclipse.org/lists/jetty-dev/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/jetty/jetty.project/jetty-core/jetty-server",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.eclipse.jetty/jetty-http@12.1.13?type=jar",
      "publisher": "Webtide",
      "group": "org.eclipse.jetty",
      "name": "jetty-http",
      "version": "12.1.13",
      "description": "Jetty HTTP Artifact",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "b206de5ac4de42b5dd1261f256ae9057"
        },
        {
          "alg": "SHA-1",
          "content": "efb01d8b06210c12f76e8362a158802b00626c84"
        },
        {
          "alg": "SHA-256",
          "content": "3bb84bfdd0992453986a8f7422dbf55cf779a0a780ff8a68041bb6119fb997fd"
        },
        {
          "alg": "SHA-512",
          "content": "df4f7983ae7c7d56e5512a1600e196931b241df18988f4ea4d4ad9fa10bb11dd276efc6dcf83333eef2f263ce8fb9198665015d62c5bfbeac61c94a6315e68e3"
        },
        {
          "alg": "SHA-384",
          "content": "c84d0b3b53b5aea028c5ec26ffee824c38baabb01aec5cafbc1cdd209b95c374412d8768e950d4c7583de501f40d7fa7"
        },
        {
          "alg": "SHA3-384",
          "content": "48045f0ab9678f1100b95f19344d2db8fa85adb49186aac3076ff483b861fdbaaa61540f6f28bfaafe8e3823a7282593"
        },
        {
          "alg": "SHA3-256",
          "content": "63106026cf0c519c4a421dec77b38d0cf8a79570bf1edfd0f473ff7df4476467"
        },
        {
          "alg": "SHA3-512",
          "content": "a04f87d526d4b0ed50713de84e7637456b0d0c4d4c756c24c2202122f2c2be54f6ed4d0d91addfee0936fc9d4694a6e806d4649d6c1915f6b17eed70f7ba8e80"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0",
            "url": "https://www.eclipse.org/legal/epl-2.0"
          }
        },
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.eclipse.jetty/jetty-http@12.1.13?type=jar",
      "externalReferences": [
        {
          "url": "https://jetty.org/jetty-core/jetty-http",
          "type": "website"
        },
        {
          "url": "https://repo.maven.apache.org/maven2",
          "type": "distribution"
        },
        {
          "url": "https://github.com/jetty/jetty.project/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://www.eclipse.org/lists/jetty-dev/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/jetty/jetty.project/jetty-core/jetty-http",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.eclipse.jetty/jetty-util@12.1.13?type=jar",
      "publisher": "Webtide",
      "group": "org.eclipse.jetty",
      "name": "jetty-util",
      "version": "12.1.13",
      "description": "Jetty Utilities Artifact",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "db0b2f2b8bbca1c8f27f4f8f47386aa0"
        },
        {
          "alg": "SHA-1",
          "content": "0be3bfc956fad35b16070fb48952db4d8949a749"
        },
        {
          "alg": "SHA-256",
          "content": "3e408e60fe71a337979004fc4e47bfd3c08a931cf33b46b6a5dc4dbdd088c2fd"
        },
        {
          "alg": "SHA-512",
          "content": "60a012d80c9fbf2512fa4818258b77343198c9a2f89d614576ddae2b413e07db7b7dcd29867d575e1ce89aeae5868777866f7a3b0d19d6d159f58f5974ecb830"
        },
        {
          "alg": "SHA-384",
          "content": "c6bbe048217c139d98f647fc57de2e170cd56517b3654186d3561343c3fca545df70f001e7d68a63ecd2fba8f3701b32"
        },
        {
          "alg": "SHA3-384",
          "content": "b391c06d4cf9cdb211f0c40d96b81aff8299d40fa0ef09e6ee1291b90f193eddc1e4e39ea2723f0c32b56c9bb3747853"
        },
        {
          "alg": "SHA3-256",
          "content": "241b3e41a68217dd74edcbb2eb435a19a317bcd8b1f75a2d0283cb899cf2231d"
        },
        {
          "alg": "SHA3-512",
          "content": "74ad05a10bac690be8e2fae63494df49d7b339c742b136354c3a7f9ec4ba0a505fe902a62bb187d31d3b742b13e55902cfc0b3719409613ceb1bb5b50653df5a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0",
            "url": "https://www.eclipse.org/legal/epl-2.0"
          }
        },
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.eclipse.jetty/jetty-util@12.1.13?type=jar",
      "externalReferences": [
        {
          "url": "https://jetty.org/jetty-core/jetty-util",
          "type": "website"
        },
        {
          "url": "https://repo.maven.apache.org/maven2",
          "type": "distribution"
        },
        {
          "url": "https://github.com/jetty/jetty.project/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://www.eclipse.org/lists/jetty-dev/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/jetty/jetty.project/jetty-core/jetty-util",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.eclipse.jetty/jetty-io@12.1.13?type=jar",
      "publisher": "Webtide",
      "group": "org.eclipse.jetty",
      "name": "jetty-io",
      "version": "12.1.13",
      "description": "Jetty I/O Artifact",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "28eec03abed3ce7725ace9cd069bde24"
        },
        {
          "alg": "SHA-1",
          "content": "db1fedfa77d4723970cb5f1c68ea2ca3ebf24b27"
        },
        {
          "alg": "SHA-256",
          "content": "946338a5db4e906ba0698dcdae350394736062cf915b5f16ebf787bcee7fffae"
        },
        {
          "alg": "SHA-512",
          "content": "93d88e24c11a787d4b819a1530edc0ba678870f3ddaa5f08a5fc16cf8afe7941dffe89395470871e6a6bff95b05b40549562e04561deade2882e93052cc353a9"
        },
        {
          "alg": "SHA-384",
          "content": "4ddc8c0f66ccda7432059a2c3998d8ad800080cfc7ceba3d9ec66ea53f4534924680522ef23f892e12ae3e1bba4c5312"
        },
        {
          "alg": "SHA3-384",
          "content": "16bdd60d327ee183f649885270a16abcaa9d546764692a5c613f71d2f7f359b1517701c3486ae729775a31082eb5175e"
        },
        {
          "alg": "SHA3-256",
          "content": "357a42722a5dcc42e951d172a741dfe05bbe87b11dd81e3e0c7dc2299da74863"
        },
        {
          "alg": "SHA3-512",
          "content": "1f11d2d64f620949687d331c7fa349b4f7e7f07dac3592fd806df8081bbaa472364a88955b80fdba96a9e79d5e345ed1b65e50355a27259bdf2622ef3b38982b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0",
            "url": "https://www.eclipse.org/legal/epl-2.0"
          }
        },
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.eclipse.jetty/jetty-io@12.1.13?type=jar",
      "externalReferences": [
        {
          "url": "https://jetty.org/jetty-core/jetty-io",
          "type": "website"
        },
        {
          "url": "https://repo.maven.apache.org/maven2",
          "type": "distribution"
        },
        {
          "url": "https://github.com/jetty/jetty.project/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://www.eclipse.org/lists/jetty-dev/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/jetty/jetty.project/jetty-core/jetty-io",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.eclipse.jetty.compression/jetty-compression-gzip@12.1.13?type=jar",
      "publisher": "Webtide",
      "group": "org.eclipse.jetty.compression",
      "name": "jetty-compression-gzip",
      "version": "12.1.13",
      "description": "Jetty Compression Gzip Artifact",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "79639a3532f303937d2660ccb62008b4"
        },
        {
          "alg": "SHA-1",
          "content": "968296c8c6965ff596c9d7f716510ca48e00a398"
        },
        {
          "alg": "SHA-256",
          "content": "987afca3706a82595533ab49b60281f77daba688a46f2a7b2ac9498c9484be7d"
        },
        {
          "alg": "SHA-512",
          "content": "d4b38df2aa37ba535439d2a226ea5a7a4c64d14285ea9cd1fb4c82ce3830923c28fdb3c300b8fbb3740e74f974b39d8511bb904495be453c89643142cc8f31d6"
        },
        {
          "alg": "SHA-384",
          "content": "2787529004b0295319b6bec743af5478dceef636ea2aa7de1caf2605a997731cc17d3004debd0ce1d9a7c90d2b074b94"
        },
        {
          "alg": "SHA3-384",
          "content": "9f35837abc9ed27ae42d68f4bf61033b129cef560274dcea8a48ff52df8fb77ebedecd4c5cc7dda2c4cb122e0afb17d7"
        },
        {
          "alg": "SHA3-256",
          "content": "15dc3b23ba6999e4c3ab4f904a25c05c3fb4e7c058672c21df54d702faf9bc46"
        },
        {
          "alg": "SHA3-512",
          "content": "d749e3207aae5f2e6c87765c58518b6eb1f531e3c09aa2ec3d3d5ab9bd09cfce08344409c10fb79f1fe5ab07cfcdc32b83d0557f02315730ab8f6e1b3d3123cb"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0",
            "url": "https://www.eclipse.org/legal/epl-2.0"
          }
        },
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.eclipse.jetty.compression/jetty-compression-gzip@12.1.13?type=jar",
      "externalReferences": [
        {
          "url": "https://jetty.org/jetty-core/jetty-compression/jetty-compression-gzip",
          "type": "website"
        },
        {
          "url": "https://repo.maven.apache.org/maven2",
          "type": "distribution"
        },
        {
          "url": "https://github.com/jetty/jetty.project/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://www.eclipse.org/lists/jetty-dev/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/jetty/jetty.project/jetty-core/jetty-compression/jetty-compression-gzip",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.eclipse.jetty.compression/jetty-compression-common@12.1.13?type=jar",
      "publisher": "Webtide",
      "group": "org.eclipse.jetty.compression",
      "name": "jetty-compression-common",
      "version": "12.1.13",
      "description": "Jetty Compression Common Artifact",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "c144dcf5186aed122c6c0e962dcfcba7"
        },
        {
          "alg": "SHA-1",
          "content": "a06610f85607b5ca14f34a7364e4213810f359d7"
        },
        {
          "alg": "SHA-256",
          "content": "91bf7b735619870fd369aed9d79372ed8e6cdba2e4b4c44131a2a78fa15d4737"
        },
        {
          "alg": "SHA-512",
          "content": "312c38d44ae483e078b3af082333f5668abb1e7dec2f28e8e74211f75222a0712768806b58a7982352b5b339a49beaaba1029eda18bd8775680f86b9c0fb437b"
        },
        {
          "alg": "SHA-384",
          "content": "2c499192a6615dfd9a105938ce22145b9b644e14ef002b04599bd44c0ee3daf4ffbcc3e582dd36b2e5e04948cf2e8770"
        },
        {
          "alg": "SHA3-384",
          "content": "7046742582a424e017a865141e129f15472566ca882cbf14f395ebaf12767281294b1f12f8faa9f02c4946178fad4220"
        },
        {
          "alg": "SHA3-256",
          "content": "c5fabea4033286acdfd882c21b63a4373e71838a29e114adc21ee869ec0e9867"
        },
        {
          "alg": "SHA3-512",
          "content": "4c4407d82d531039386d4e3c129203ed19b1ca60355ec4ce44562c045a8166b5e2d9a8e14c19aa752c128d412d887c3ac975c7a8c04c98be9fe805c3e65990ad"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0",
            "url": "https://www.eclipse.org/legal/epl-2.0"
          }
        },
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.eclipse.jetty.compression/jetty-compression-common@12.1.13?type=jar",
      "externalReferences": [
        {
          "url": "https://jetty.org/jetty-core/jetty-compression/jetty-compression-common",
          "type": "website"
        },
        {
          "url": "https://repo.maven.apache.org/maven2",
          "type": "distribution"
        },
        {
          "url": "https://github.com/jetty/jetty.project/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://www.eclipse.org/lists/jetty-dev/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/jetty/jetty.project/jetty-core/jetty-compression/jetty-compression-common",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.eclipse.jetty.compression/jetty-compression-zstandard@12.1.13?type=jar",
      "publisher": "Webtide",
      "group": "org.eclipse.jetty.compression",
      "name": "jetty-compression-zstandard",
      "version": "12.1.13",
      "description": "Jetty Compression Zstandard Artifact",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "0190666fca7fd04769f351266dc4b930"
        },
        {
          "alg": "SHA-1",
          "content": "0b586a93069a58f687d0b40e4ae2f963acdd1b21"
        },
        {
          "alg": "SHA-256",
          "content": "5d2d3f465956feab9b6c573961e7aa3f7d734119e6c6c6b55e4da01ffa26d1a3"
        },
        {
          "alg": "SHA-512",
          "content": "adb5cf76c6d0b9ec017b99f20383129a38404263a8b32f526a0e46e0e903e230797eb9b5e6fa03d40eeeb551f0d8c0d0ca6187c2f4277c2e97c1ffc9780b4644"
        },
        {
          "alg": "SHA-384",
          "content": "1d5196128e11bb1ac59428291ddcc290b5292cf0f87b24d75a8ef565db0dc6220f9cfd203068edbc01853bf3e9f754df"
        },
        {
          "alg": "SHA3-384",
          "content": "1c75aea04e6d63da4c3b7c78bf7e9c4e94fc91bbe5d19a8a4a1520b7005befda7fe3842bcfaa873f573f212ec84e815b"
        },
        {
          "alg": "SHA3-256",
          "content": "c350b6db424e033a8999c96381e11751d6d598a208461ba56dcbcc5eb3b72c25"
        },
        {
          "alg": "SHA3-512",
          "content": "36e93e1d21041aaa61a88c28913888068c427bad28acfe6a96a00f9cd07faba136d6ac699d72d411bb56066df7ba0607f6a92f29d6888dfa0de87549e27bc972"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0",
            "url": "https://www.eclipse.org/legal/epl-2.0"
          }
        },
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.eclipse.jetty.compression/jetty-compression-zstandard@12.1.13?type=jar",
      "externalReferences": [
        {
          "url": "https://jetty.org/jetty-core/jetty-compression/jetty-compression-zstandard",
          "type": "website"
        },
        {
          "url": "https://repo.maven.apache.org/maven2",
          "type": "distribution"
        },
        {
          "url": "https://github.com/jetty/jetty.project/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://www.eclipse.org/lists/jetty-dev/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/jetty/jetty.project/jetty-core/jetty-compression/jetty-compression-zstandard",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.eclipse.jetty.compression/jetty-compression-server@12.1.13?type=jar",
      "publisher": "Webtide",
      "group": "org.eclipse.jetty.compression",
      "name": "jetty-compression-server",
      "version": "12.1.13",
      "description": "Jetty Compression Server Artifact",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "46d05a1318a17920a6a7d61c3ab443e2"
        },
        {
          "alg": "SHA-1",
          "content": "f91b2f822cb4a07366f07c0d6d8ca31aa6c570ea"
        },
        {
          "alg": "SHA-256",
          "content": "69e69cd1ee46139a2abbe16abd2f98342e6e50ac82651ed0859dcd0c515e3a53"
        },
        {
          "alg": "SHA-512",
          "content": "092b09c679be7c3b681c173c53c403f4533d1ca782475c5c952ed403efe727e77261498ab0d4d940577e2b1674b4b33dc761ca69f7e8609d2c0cc47e79b7bbbc"
        },
        {
          "alg": "SHA-384",
          "content": "a270fb91f7fab9b156f5f9177f8262ec150d8eef2caa7eb0a57ba0e1cb52b15c0b4052e52c80adc4603c1ffd05e5a000"
        },
        {
          "alg": "SHA3-384",
          "content": "bfdebf27dd7f13f27e7c1f565379632ef9e44870a26af84c8ee32ac52243805733b19054a8c2117587716fda4dd03925"
        },
        {
          "alg": "SHA3-256",
          "content": "05183d784c1866bc8fc99a14a9cb01c33de7523c9f914bf188b380152213e11b"
        },
        {
          "alg": "SHA3-512",
          "content": "b0a7cf6346ab36ed099d4ae1112104106013374decb9a3e43113c73a490a101c68c5c957505dbaa6ae1215e5e55b0b63dacb254e4e44e99d30bf027609e0c50d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0",
            "url": "https://www.eclipse.org/legal/epl-2.0"
          }
        },
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.eclipse.jetty.compression/jetty-compression-server@12.1.13?type=jar",
      "externalReferences": [
        {
          "url": "https://jetty.org/jetty-core/jetty-compression/jetty-compression-server",
          "type": "website"
        },
        {
          "url": "https://repo.maven.apache.org/maven2",
          "type": "distribution"
        },
        {
          "url": "https://github.com/jetty/jetty.project/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://www.eclipse.org/lists/jetty-dev/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/jetty/jetty.project/jetty-core/jetty-compression/jetty-compression-server",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.eclipse.jetty.ee11/jetty-ee11-servlet@12.1.13?type=jar",
      "publisher": "Webtide",
      "group": "org.eclipse.jetty.ee11",
      "name": "jetty-ee11-servlet",
      "version": "12.1.13",
      "description": "Jetty Servlet Container",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "ace64ba6ea6f4176e78dfbc6b66a689a"
        },
        {
          "alg": "SHA-1",
          "content": "272beb501a776ba16ba83c8299773115b47319ee"
        },
        {
          "alg": "SHA-256",
          "content": "c6fb3047015c4ba543e869056e68451574417af0ab3fc0a28a9c73993499f45e"
        },
        {
          "alg": "SHA-512",
          "content": "e5b577e7212610990f5d0e2f705df8fd6d3decdca9274aeaa4da9bf618e72f02a8ee9a3f456d1d54da35c5ee2486d6f57ecf0b506211025a9054435d47c21211"
        },
        {
          "alg": "SHA-384",
          "content": "b9b88261bb2d6db3a98763f883c3037ac991ea493e679458f62cabec5675c84551a6aa6701a3917ed8389c73a449e2c9"
        },
        {
          "alg": "SHA3-384",
          "content": "9681bac9127b5e6ff45bebd0fdc04faec0797f340dba3af3119dbe31f04c27588104da7aaf7152a087611d1d1e001f55"
        },
        {
          "alg": "SHA3-256",
          "content": "e93c0b4557e9dff6ebcaa7497ea4af3e9f8c21ee100cbce2db02f4c506e63b4a"
        },
        {
          "alg": "SHA3-512",
          "content": "30f00a22d575d92c61ad824f1b246a730b20c930170030941f71a9ac4480e7712eacd69f5968c4142b252f4ffc941722c2565df60ce25c56b0c1a2381421bad8"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0",
            "url": "https://www.eclipse.org/legal/epl-2.0"
          }
        },
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.eclipse.jetty.ee11/jetty-ee11-servlet@12.1.13?type=jar",
      "externalReferences": [
        {
          "url": "https://jetty.org/jetty-ee11/jetty-ee11-servlet",
          "type": "website"
        },
        {
          "url": "https://repo.maven.apache.org/maven2",
          "type": "distribution"
        },
        {
          "url": "https://github.com/jetty/jetty.project/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://www.eclipse.org/lists/jetty-dev/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/jetty/jetty.project/jetty-ee11/jetty-ee11-servlet",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.eclipse.jetty/jetty-security@12.1.13?type=jar",
      "publisher": "Webtide",
      "group": "org.eclipse.jetty",
      "name": "jetty-security",
      "version": "12.1.13",
      "description": "Jetty Server Security Artifact",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "143ae86be0e67296fd3354f21719227e"
        },
        {
          "alg": "SHA-1",
          "content": "f42bee220f1a8ea7c738793731add4960a604477"
        },
        {
          "alg": "SHA-256",
          "content": "64b15214158097af40db345a31bb71cfe0d4a6c7c19cb59cd4c0a97245999ee8"
        },
        {
          "alg": "SHA-512",
          "content": "75e4e467b85630f2ee60c1572866072d2402039a1c38756f4e83d0b513d1231b5efcd22b87a8692bcbce5c1daec6e44bc1137296e5540cdf05386da1fd9cd316"
        },
        {
          "alg": "SHA-384",
          "content": "e429bb6cf7e682a57350cb8ae20a36bd0a765c786d488aee85178ee814ad1eac7a5c057555131eece2177d96d9656617"
        },
        {
          "alg": "SHA3-384",
          "content": "ce75162c3258f5d57b3abfdb9d3c7d408215c219da6386d9f442cdceb4276ebfbd1cc73a0e284d96f36329cd3c8d10c1"
        },
        {
          "alg": "SHA3-256",
          "content": "073276dbf2754e927b2e919aff5a22a9797ad4ef3d7fcd4f0a610215f5f727d4"
        },
        {
          "alg": "SHA3-512",
          "content": "2a4375f996ca0aebb4d38af49e28dac854ecf27e23d8db3aec00e456e17a333595ff28c21e986647a2f4c3ed8f764485188b610230608f945a2ff0912163dcaa"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0",
            "url": "https://www.eclipse.org/legal/epl-2.0"
          }
        },
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.eclipse.jetty/jetty-security@12.1.13?type=jar",
      "externalReferences": [
        {
          "url": "https://jetty.org/jetty-core/jetty-security",
          "type": "website"
        },
        {
          "url": "https://repo.maven.apache.org/maven2",
          "type": "distribution"
        },
        {
          "url": "https://github.com/jetty/jetty.project/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://www.eclipse.org/lists/jetty-dev/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/jetty/jetty.project/jetty-core/jetty-security",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.eclipse.jetty/jetty-session@12.1.13?type=jar",
      "publisher": "Webtide",
      "group": "org.eclipse.jetty",
      "name": "jetty-session",
      "version": "12.1.13",
      "description": "Jetty Session Artifact",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "058a4b618626e176e81ec1e4522ce88b"
        },
        {
          "alg": "SHA-1",
          "content": "33611cf54d23ff8427039f6459d05bf7b124b73c"
        },
        {
          "alg": "SHA-256",
          "content": "30ebd5d63895f97aad0d626a567b40552d4c2bd9978adedc46e7a23b4652f595"
        },
        {
          "alg": "SHA-512",
          "content": "57fd0555bd388463dbf1c56168a0eaf7d551a8665bd2d052a398b02d30f9c1450a4439d5aef2bc3a490119a3b7c110c48bd236a8bd3a8deeca81ba750d529f5c"
        },
        {
          "alg": "SHA-384",
          "content": "cceb141d67c497dcef35d47a49b667f6fed124a111880a4332642feaf9b6f20a54bb9fd885d49f9846c91a6d90805dbe"
        },
        {
          "alg": "SHA3-384",
          "content": "0fe823235a2297058d875ffc3b25860003f944f5ace2b7085aed7a19851e220f069c2787141a9817cbc0da1426b2612e"
        },
        {
          "alg": "SHA3-256",
          "content": "3a762a7881e3394b4b05146df1eee2cf21eb4c44637ef90cea91ea8f4fa7759e"
        },
        {
          "alg": "SHA3-512",
          "content": "a424ecee035ddb0264664de1d93e99a4071ca82a707175484284c2aa9dd0933354afd36ac9231f857e9ad7ef7b5efde878a10a083c95eed0935eaea5f48386b7"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0",
            "url": "https://www.eclipse.org/legal/epl-2.0"
          }
        },
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.eclipse.jetty/jetty-session@12.1.13?type=jar",
      "externalReferences": [
        {
          "url": "https://jetty.org/jetty-core/jetty-session",
          "type": "website"
        },
        {
          "url": "https://repo.maven.apache.org/maven2",
          "type": "distribution"
        },
        {
          "url": "https://github.com/jetty/jetty.project/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://www.eclipse.org/lists/jetty-dev/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/jetty/jetty.project/jetty-core/jetty-session",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.slf4j/jul-to-slf4j@2.0.20?type=jar",
      "publisher": "QOS.ch",
      "group": "org.slf4j",
      "name": "jul-to-slf4j",
      "version": "2.0.20",
      "description": "JUL to SLF4J bridge",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "f853422b1400b2631e79edcee8067833"
        },
        {
          "alg": "SHA-1",
          "content": "f227b76739ea6a0e014478659d72bdc455fd7fd2"
        },
        {
          "alg": "SHA-256",
          "content": "062249d0677a0e08039120a2292a8db064c69d04282bf562af2e54c53ff06976"
        },
        {
          "alg": "SHA-512",
          "content": "2e3ba76efcd6c900cc8a744ff653784fcb5db265fe34cef1b9740d48be54a9f137e3dab94e62c4db7f88c4ae138d6ab1d1263176e2274e269ff645489805c18d"
        },
        {
          "alg": "SHA-384",
          "content": "b10cde599a2da147fecff6a699d5183cc7dd53ac6f41f56b4c01e2bc7a5b7e24a5979de95fa99968486729774bc06fe9"
        },
        {
          "alg": "SHA3-384",
          "content": "aa0fd23f7baaa2fe59749b94e8b8adc41b45b6b1c19f6d09da7778a20b32ae99bff87384f44905c0884ef83f03e71051"
        },
        {
          "alg": "SHA3-256",
          "content": "0bafb3338d402071c6c2e83824fd0dadbd93e207b70049a317bb75e311e20fb0"
        },
        {
          "alg": "SHA3-512",
          "content": "74b1f68435111ed30b8dd6a5c6513c4ab28d09e3eb37d8d2ae9dac9294ad9fb4065e6458021fad54f86c4f2e5766e6e4439a5b940026cd58d732e7a4a8e665e2"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/license/mit/"
          }
        }
      ],
      "purl": "pkg:maven/org.slf4j/jul-to-slf4j@2.0.20?type=jar",
      "externalReferences": [
        {
          "url": "http://www.slf4j.org",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/qos-ch/slf4j/slf4j-parent/jul-to-slf4j",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.swagger.core.v3/swagger-annotations-jakarta@2.2.55?type=jar",
      "group": "io.swagger.core.v3",
      "name": "swagger-annotations-jakarta",
      "version": "2.2.55",
      "description": "swagger-annotations-jakarta",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "576a29f3692ccc16ec3161faf1af6b47"
        },
        {
          "alg": "SHA-1",
          "content": "a8af2e7fdca945d8871316e84a9b3154694e26ba"
        },
        {
          "alg": "SHA-256",
          "content": "d464521aac0e9ae2cfead9d2f56e9e8c110ef4b15ad9c046408a087a4c58952b"
        },
        {
          "alg": "SHA-512",
          "content": "bde4be280bc11a982555b907ad3eb94c92eec22352607cea936db7da77eba8b693a2a1b34a560946cb16501012e022295cdaf0225cb873b39b00eaabeaf6e62a"
        },
        {
          "alg": "SHA-384",
          "content": "82e6121fc4c5a51e04b22da5051e296ad7d380ad5362ace077bac0214d2bd13d2fe41708ccd0f6adeb3273e27a6cc8e6"
        },
        {
          "alg": "SHA3-384",
          "content": "5b6112434edb044cc0971f905fdecb168d9e6f3f166cfc7d73d062d88c8c0a3e897bf1936217590e0cae286e3dc6a0fd"
        },
        {
          "alg": "SHA3-256",
          "content": "2ca762aefe4eb8a7396f7299116249866ed539b3751c6124246deebe7bee5af9"
        },
        {
          "alg": "SHA3-512",
          "content": "47213a991d5cc9ac3f0e1ed1bf10266238035b5b275f14fcf1b03f0233764ca353fa0a40641d655d9bb48e275e4fd03d4ddf6516aec7eb5c996d4ab88387e6f9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.swagger.core.v3/swagger-annotations-jakarta@2.2.55?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/swagger-api/swagger-core/modules/swagger-annotations-jakarta",
          "type": "website"
        },
        {
          "url": "https://github.com/swagger-api/swagger-core/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://groups.google.com/forum/#!forum/swagger-swaggersocket",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/swagger-api/swagger-core/modules/swagger-annotations-jakarta",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.httpcomponents/httpclient@4.5.14?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.httpcomponents",
      "name": "httpclient",
      "version": "4.5.14",
      "description": "Apache HttpComponents Client",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "2cb357c4b763f47e58af6cad47df6ba3"
        },
        {
          "alg": "SHA-1",
          "content": "1194890e6f56ec29177673f2f12d0b8e627dec98"
        },
        {
          "alg": "SHA-256",
          "content": "c8bc7e1c51a6d4ce72f40d2ebbabf1c4b68bfe76e732104b04381b493478e9d6"
        },
        {
          "alg": "SHA-512",
          "content": "a084ef30fb0a2a25397d8fab439fe68f67e294bf53153e2e1355b8df92886d40fe6abe35dc84f014245f7158e92641bcbd98019b4fbbd9e5a0db495b160b4ced"
        },
        {
          "alg": "SHA-384",
          "content": "c8ccaa1fa8ba7c421413e3c30375bd9c31284e837c476fd831e18043ad4187e92166f49554123108891241bed674b95d"
        },
        {
          "alg": "SHA3-384",
          "content": "9a17dfcf12b2af3a9b006ec369f9bc78ba322348bf1a01146e0d4f3fec2bed6cbe8b2193fac5b4d5a0c3036c06477510"
        },
        {
          "alg": "SHA3-256",
          "content": "48f0a61b691e22dec9d6db8e0b58be4ca17a42a2846c82f0875de21f72bb0faa"
        },
        {
          "alg": "SHA3-512",
          "content": "4ad2c9adc761b7e813330f0dcad3f9978702896c7d0cbf81f60a472d550e320b1527be425ba597c8c9352d587e32e1d46ceb4c73e99c70a6190df4c699a7c2a9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.httpcomponents/httpclient@4.5.14?type=jar",
      "externalReferences": [
        {
          "url": "http://hc.apache.org/httpcomponents-client-ga",
          "type": "website"
        },
        {
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2",
          "type": "distribution"
        },
        {
          "url": "http://issues.apache.org/jira/browse/HTTPCLIENT",
          "type": "issue-tracker"
        },
        {
          "url": "http://mail-archives.apache.org/mod_mbox/hc-httpclient-users/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/apache/httpcomponents-client/tree/4.5.14/httpclient",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/commons-logging/commons-logging@1.4.0?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "commons-logging",
      "name": "commons-logging",
      "version": "1.4.0",
      "description": "Apache Commons Logging is a thin adapter allowing configurable bridging to other, well-known logging systems.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "954e27d33e55e587a4694d5952a0c5c6"
        },
        {
          "alg": "SHA-1",
          "content": "e8f6313365dfa0580e49c58837afc8caa9b4ce05"
        },
        {
          "alg": "SHA-256",
          "content": "d175dbd751dd782a63bde28c7a039520e971f25e84b79c19b8435edc3603e0dc"
        },
        {
          "alg": "SHA-512",
          "content": "5c333d925f81fdd09a80176ff15cd38381eb12e9ec2dac75f113d66006002175b33cdd9a0668100c5c6a49ae81f9f576909b89219a345a0075ed4683a997570a"
        },
        {
          "alg": "SHA-384",
          "content": "31ed518d623d408894a188878693fd953a3aefebebdddc4a304769bf2862ae70623340cdea387b911a62ef7cb9043a37"
        },
        {
          "alg": "SHA3-384",
          "content": "1c91fab5c64bfa679da2186cdef39a0360c9d18122bf37b4dd932eee4502527e8458b5c849dbcc11e46ef5fb87d1a777"
        },
        {
          "alg": "SHA3-256",
          "content": "2189847ad7dd3d50bd17aab9dab8b31c8e7e25e72ca0d25ad83a4215bbfb5e2d"
        },
        {
          "alg": "SHA3-512",
          "content": "f57be786553cc10966ce4af25ce401125ae76f6ee569812eafd67a6eaff06618ae835d637e5e198bd121463afa4993db61975f4ed0380fe1dcbfe3108b3ada51"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/commons-logging/commons-logging@1.4.0?type=jar",
      "externalReferences": [
        {
          "url": "https://commons.apache.org/proper/commons-logging/",
          "type": "website"
        },
        {
          "url": "https://github.com/apache/commons-logging/actions",
          "type": "build-system"
        },
        {
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2",
          "type": "distribution"
        },
        {
          "url": "https://issues.apache.org/jira/browse/LOGGING",
          "type": "issue-tracker"
        },
        {
          "url": "https://mail-archives.apache.org/mod_mbox/commons-user/",
          "type": "mailing-list"
        },
        {
          "url": "https://gitbox.apache.org/repos/asf/commons-logging",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.22.3?type=jar",
      "publisher": "FasterXML",
      "group": "com.fasterxml.jackson.datatype",
      "name": "jackson-datatype-jsr310",
      "version": "2.22.3",
      "description": "Add-on module to support JSR-310 (Java 8 Date \u0026 Time API) data types.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "1f14fa9b9779d0545287bba2bfb927df"
        },
        {
          "alg": "SHA-1",
          "content": "8d54f48cfe4865bdfa245b8a90fb15b56c8a4a3c"
        },
        {
          "alg": "SHA-256",
          "content": "ec7052ee48c9d873bb8148338a643f02cf89c01d035dd219411473030d6d2b22"
        },
        {
          "alg": "SHA-512",
          "content": "3a711d091436497aa84ea83316f948bbc73644c9a0a8ed478cf76d34b28340d3e596025bf5c8a61ca8ab1806c35f3db5e45d499340d091e224b75270a730b2d2"
        },
        {
          "alg": "SHA-384",
          "content": "38782f7a5b6f857e98362212cb953bfe4fb9f11fed935a6621145fe35c4a2f5afc034c048849d96f490b86bf9c1b69ee"
        },
        {
          "alg": "SHA3-384",
          "content": "bf40dfc2bccb29fc9eca32455203e7d9d26b18c54ba9fa1f47ce60b45036479d07fcfda880fadc61270d52f9a7d2150d"
        },
        {
          "alg": "SHA3-256",
          "content": "0d17f4e5f1b237905a3b1d63992a01908250e7a98cd6dff099d59c1e8e202dc0"
        },
        {
          "alg": "SHA3-512",
          "content": "2153206c85167b6737e4f2cd3dd1e93ed213ebc049bdc8d099b61934301c4c9bc738c5fc19b7f3a778a918d92fbdbfe19df8ccfdc088ed8ee22648417dc99ffe"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.22.3?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/FasterXML/jackson-modules-java8/jackson-datatype-jsr310",
          "type": "website"
        },
        {
          "url": "https://central.sonatype.com/api/v1/publisher",
          "type": "distribution"
        },
        {
          "url": "https://github.com/FasterXML/jackson-modules-java8/issues",
          "type": "issue-tracker"
        },
        {
          "url": "http://github.com/FasterXML/jackson-modules-java8/jackson-datatype-jsr310",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.github.package-url/packageurl-java@1.5.0?type=jar",
      "group": "com.github.package-url",
      "name": "packageurl-java",
      "version": "1.5.0",
      "description": "The official Java implementation of the PackageURL specification. PackageURL (purl) is a minimal specification for describing a package via a \u0022mostly universal\u0022 URL.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "90856d8bb5b17e08fdf03b6a2f93b81c"
        },
        {
          "alg": "SHA-1",
          "content": "e6bf530f52feab911f4032604ca0b8216f7ff337"
        },
        {
          "alg": "SHA-256",
          "content": "e45551727707acc0c56ac62d56964332ea0f138d6cc3656d988b9369150f5247"
        },
        {
          "alg": "SHA-512",
          "content": "8064df400154caa110b8845bd17e6cea2683307e575ce88e40d7c0c8965ea0af6c150a376d8b9ba7354676c41b52c94535f30c6e830447613299ccf5fc7aa959"
        },
        {
          "alg": "SHA-384",
          "content": "0597100022f72e020c9d929bf57ecef91af7574610fb03b4019feba4b25f491a076f03577be2009e66d9001c4c0f8ab0"
        },
        {
          "alg": "SHA3-384",
          "content": "bbdd55a31a4755ef589bcb176283fe03e3c9089d315eab577fef3a9c2d02e632c6ac3fdebbc90a2f0f8ed7974b9f397c"
        },
        {
          "alg": "SHA3-256",
          "content": "c9881b69bde35ea6ff4006877b9fbf91462f911b5b142aa699a45a00867d413a"
        },
        {
          "alg": "SHA3-512",
          "content": "2b9caf58deef687a9bf01abd61a7af4abdb61247a8a966683a18157ee948f1ea424602598dc8f665bf24f7e1e516866298ef0507e9d697cb20dcf60eff2095ca"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/license/mit/"
          }
        }
      ],
      "purl": "pkg:maven/com.github.package-url/packageurl-java@1.5.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/package-url/packageurl-java",
          "type": "website"
        },
        {
          "url": "https://travis-ci.com/package-url/packageurl-java",
          "type": "build-system"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/package-url/packageurl-java/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/package-url/packageurl-java.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.asahaf.javacron/javacron@1.4.0?type=jar",
      "group": "com.asahaf.javacron",
      "name": "javacron",
      "version": "1.4.0",
      "description": "A java library for parsing crontab expressions and calculating the next run time",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "5129700c6b2af8e972d52829faae173c"
        },
        {
          "alg": "SHA-1",
          "content": "2291bf1f0996c6ba0dbe6783aa8a473f09cec3d9"
        },
        {
          "alg": "SHA-256",
          "content": "c1866f1c6dc28cec113c3388101d4d0a3816cb3a9025c07d2e71f668a2845538"
        },
        {
          "alg": "SHA-512",
          "content": "b64c450770445f349f2e76f696ed5599ea87c32d5006818122e59b412792a4d71b19a7c13ecbee3b5dbf86dfb0b7350cb1e32615bd5d910e2839e165dcd9b5ca"
        },
        {
          "alg": "SHA-384",
          "content": "0f66c5ddf22ebc720cd2b765c45c639843a00a882e2d19c89e562c564878a5d40a374d491cdff275187156c2dd464724"
        },
        {
          "alg": "SHA3-384",
          "content": "a854ed19a5cf790abd511f309a1674d1050c94567fce257da250de541a63215f78aa7629d6fe53ec1291c59011f3922e"
        },
        {
          "alg": "SHA3-256",
          "content": "a9b1643fdf1d81eab85d8cdc51d02f77dd36860c04f2d0ff717ebddb9cee5b3e"
        },
        {
          "alg": "SHA3-512",
          "content": "8f860b34f901cb5b3feb74037cbe852f5723256c8f5c44c25bb34cda5148fc511a240b9c0f34cd934d3843d55960a3600dd95ba7b0ae0fde5af569ce232ae645"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/license/mit/"
          }
        }
      ],
      "purl": "pkg:maven/com.asahaf.javacron/javacron@1.4.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/asahaf/javacron",
          "type": "website"
        },
        {
          "url": "https://github.com/asahaf/javacron",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.micrometer/micrometer-java11@1.17.1?type=jar",
      "group": "io.micrometer",
      "name": "micrometer-java11",
      "version": "1.17.1",
      "description": "Micrometer core classes that require Java 11",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "62e9c59246483579b9d2ea3fac4683ad"
        },
        {
          "alg": "SHA-1",
          "content": "e55e340e33052ee15fe7d63cc9e8d14c4f43c589"
        },
        {
          "alg": "SHA-256",
          "content": "e0160adc3a3f9768d6ac9b46097df52c2058670c419780c7379c24bb8e72241d"
        },
        {
          "alg": "SHA-512",
          "content": "684dff5f566bfb6990006a71da1d4ac96aef6b1f4cf95c5f31a6bec00e768280ee844e33615d7f2135a4b79f17a9c8b8bf60c170b5d3578627db49653dab4164"
        },
        {
          "alg": "SHA-384",
          "content": "ebd72a4a36d25e5fcb99825647f7d99c76b187c4b5de71a1b5688ee00dd5f26e7a756a27be79609b173b798627b3f1dd"
        },
        {
          "alg": "SHA3-384",
          "content": "0ae8b9bc2c02b871e30191e974cf8c41d5a6dc5374ce09ae73b9e3bb64a632554399cd6ae9f8c69067fb8ddd6f110055"
        },
        {
          "alg": "SHA3-256",
          "content": "9bbb5d1362cc2e08ba1938f896e8101e2bbfda05e778fabc3a2026645b047b6e"
        },
        {
          "alg": "SHA3-512",
          "content": "07b1b61767471f634a065d8de501c71d5374b665764534d4848cff729f184e66f61a8a505842e38c3dbd59db780e081997d7e07dea2a57c436332da26cabcfa9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.micrometer/micrometer-java11@1.17.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/micrometer-metrics/micrometer-commercial",
          "type": "website"
        },
        {
          "url": "https://github.com/micrometer-metrics/micrometer-commercial.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.micrometer/micrometer-registry-prometheus@1.17.1?type=jar",
      "group": "io.micrometer",
      "name": "micrometer-registry-prometheus",
      "version": "1.17.1",
      "description": "MeterRegistry implementation for Prometheus using io.prometheus:prometheus-metrics-core. If you have compatibility issues with this module, you can go back to io.micrometer:micrometer-registry-prometheus-simpleclient that uses io.prometheus:simpleclient_common.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "2d25d73f9a8755694cbf01323649870e"
        },
        {
          "alg": "SHA-1",
          "content": "fa0a245ad6fee4763264dc76d2b3e0166a5f5e47"
        },
        {
          "alg": "SHA-256",
          "content": "ac24d43f123e103828a23a86f092a8709d87d309ad3212e798305654e951a8ce"
        },
        {
          "alg": "SHA-512",
          "content": "74f9c0e1d89011f670f96b2204cab473fb5fc79c8ef828d2a0da86c4ebf36a65b1504b94b59ead25829a7925d4ec0fdcd9b3b3fd33414e644e9dd4d878b3b103"
        },
        {
          "alg": "SHA-384",
          "content": "3823683f4208578b895ad4f88cfbcebe36077cd8e1d271b7fee82c7e9973e007c5f16b16f10269e578b4abac1e29fcd2"
        },
        {
          "alg": "SHA3-384",
          "content": "cb1a06337430b95f2dc21d907e95184d57056f62d50a5d8c147f6a449158a23bf6e4d957a6e95c12137b75b445e7878a"
        },
        {
          "alg": "SHA3-256",
          "content": "698cefcec693354d8c719ead3a8d8b9e5397be71ad0eb79752824fa58e84fcfb"
        },
        {
          "alg": "SHA3-512",
          "content": "047aa1181564f223471e69879257f17112584d3a3f99835542184b30d1cae8478b89f47f3b2b709521e9714104b4897a519be7deb5d71ed04aeb0c674a0e5584"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.micrometer/micrometer-registry-prometheus@1.17.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/micrometer-metrics/micrometer-commercial",
          "type": "website"
        },
        {
          "url": "https://github.com/micrometer-metrics/micrometer-commercial.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.prometheus/prometheus-metrics-core@1.9.0?type=jar",
      "group": "io.prometheus",
      "name": "prometheus-metrics-core",
      "version": "1.9.0",
      "description": "Core Prometheus metric types",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "8d1d1874511ee40501ddb1bf62355ce4"
        },
        {
          "alg": "SHA-1",
          "content": "83bc3076efee5c7e5c2ad6932b91bc058bac20f7"
        },
        {
          "alg": "SHA-256",
          "content": "11b42aff13ef16a9f8b29acf40806ef254f7477f68604c03d19b590e436615b2"
        },
        {
          "alg": "SHA-512",
          "content": "5082337b58de4ef9748f119137c44c25ad96f1056cd8a9a6b83e3d156273848980335d37e0d3129851463765a94d3a749e70941a12887dc5b9aef050f25f3e6c"
        },
        {
          "alg": "SHA-384",
          "content": "f94a669b8f59abdb5d2cd2ae8b7c7e7cc73a919a0f19b4fe6bb41e8ce2367d22937066b047ba6201d468f1ba2496ee4c"
        },
        {
          "alg": "SHA3-384",
          "content": "8f47cb9c804c92077f3009412b84b2647c559f3e90722cb32f97d9ef8f58c38937e15679e44b9bb18da1577e3c700b3e"
        },
        {
          "alg": "SHA3-256",
          "content": "340d7f52c554150d55d42ba9f7ff85edca833b868f61863441ca097a744b24ac"
        },
        {
          "alg": "SHA3-512",
          "content": "c1e35c4d27e56c55ea790bc31004fbb47fd4c6f13bbd8a3491aefb822e40068c441aa851a877a5e7f0d8edd0962fe2ac1257ad817731eb343a3e06c2098e5474"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.prometheus/prometheus-metrics-core@1.9.0?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/prometheus/client_java/client_java/prometheus-metrics-core",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.prometheus/prometheus-metrics-tracer-common@1.9.0?type=jar",
      "group": "io.prometheus",
      "name": "prometheus-metrics-tracer-common",
      "version": "1.9.0",
      "description": "Common Module for Prometheus integrations with distributed tracing libraries.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "16cd7b75b2989207b186ac830e61632a"
        },
        {
          "alg": "SHA-1",
          "content": "a3f7289067cf6d286a1cd93075be42c269a2fee8"
        },
        {
          "alg": "SHA-256",
          "content": "5f227fcfd5d3d44b279776882092022d4fab917e3859a57f5cf7740c30b03bfc"
        },
        {
          "alg": "SHA-512",
          "content": "f1578d4f264223261c6639701c9880ee9fc4eaae919edb8de3227b81f64c2dd538a940f5d7c3062f7f3db7a52a93c2c0419f011c4b65ed5859e3192187bb78c2"
        },
        {
          "alg": "SHA-384",
          "content": "2355739a6296646c90b896b437bb97afe12e2319ae07fdb204f0af38c968543471bed68620ea2dd27fd30ba646cdf55c"
        },
        {
          "alg": "SHA3-384",
          "content": "6d0f5a28cf3fcee73312621e2476205425d0f822c8acb72e50cb093d6467461503bd5dfae45f3e9fc6e860db5fcdbbfb"
        },
        {
          "alg": "SHA3-256",
          "content": "6891cfdd59eed859fd499c6369ef28f831b6e68a5531d7d51dfbc8f9a8adefb8"
        },
        {
          "alg": "SHA3-512",
          "content": "485c50a42ad0a14b01f8d800220b8677274ce1de22164e9cbb563ad2291c15aeb73536ccfc0d8765c637e26b25b9a1f2ff267fd0f4963bdc6064c6c00acf1f0d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.prometheus/prometheus-metrics-tracer-common@1.9.0?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/prometheus/client_java/client_java/prometheus-metrics-tracer/prometheus-metrics-tracer-common",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.prometheus/prometheus-metrics-exposition-formats@1.9.0?type=jar",
      "group": "io.prometheus",
      "name": "prometheus-metrics-exposition-formats",
      "version": "1.9.0",
      "description": "Prometheus exposition formats.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "90322c44e7450fa6ecee90082b208da9"
        },
        {
          "alg": "SHA-1",
          "content": "0e1aa743f1230c2171e926c9fceaf00b4a9d6b0f"
        },
        {
          "alg": "SHA-256",
          "content": "1ab1508d50af7d38f2114291db872f5639b503ad2fc3ca2c10edf2fd694738cd"
        },
        {
          "alg": "SHA-512",
          "content": "57c2dd5cbd881935fec696c4320656c381b3d2ecfe6764c4e21c6bc4bc3443ed3d779a66e386ffc592eb576f000834b7b9dbfc7629ee035454bf1a0ed4975cfd"
        },
        {
          "alg": "SHA-384",
          "content": "cf0b391bb7a9bd611c2869b84dfa571c5a8c32a1207b8797e7947bf5c48838150d4c5718a403bd360dfbd6fd311e3a42"
        },
        {
          "alg": "SHA3-384",
          "content": "7288cfbd70cd7715bf13e77cda5696113cf7eb18b43c0e758a6470c324dc768833b2675af78eb57abd23fedb7601baa2"
        },
        {
          "alg": "SHA3-256",
          "content": "8a9906fcdb7e0cb8c95fa21588d7f56b51a69b353c1cb4a5c2871d29e2c40f41"
        },
        {
          "alg": "SHA3-512",
          "content": "7aaca5356facaea91df9191eb6e063b0875cabfc4c3d33b9057fae291455b699f8748667656afe604b27faff1c9fd324900c7bb2a6d6fb6d53af95ca4e0b7ba2"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.prometheus/prometheus-metrics-exposition-formats@1.9.0?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/prometheus/client_java/client_java/prometheus-metrics-exposition-formats",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.prometheus/prometheus-metrics-exposition-textformats@1.9.0?type=jar",
      "group": "io.prometheus",
      "name": "prometheus-metrics-exposition-textformats",
      "version": "1.9.0",
      "description": "Prometheus exposition text formats.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "339bb5df692a9919b0c429a1d7416581"
        },
        {
          "alg": "SHA-1",
          "content": "1cdc586efb9272e8f9ae43c3a881177b72792e81"
        },
        {
          "alg": "SHA-256",
          "content": "639c2e39caf2e25a98a783a940f0f9160532242135bbc026d255e36cdf62e2b6"
        },
        {
          "alg": "SHA-512",
          "content": "3aebe98ce2ca76eb28e1c1c60b08faf89d0f392eb777c932334c97b617923c413c6e4da3ef7af20eaa9b90fcc549c1d804198d0a7a55cadc2495eaba6c49a238"
        },
        {
          "alg": "SHA-384",
          "content": "1202ae036c8503a71bd1cbc269fc54b9c54882d72872a62714c490fa51402b865606035202e175e5fdb198e5d05362d9"
        },
        {
          "alg": "SHA3-384",
          "content": "170ebe96dfef3354481679785dd971d0e464f1fe965302098a0da7eda5a4dcdb78807175c97fb628664cc6a572776c79"
        },
        {
          "alg": "SHA3-256",
          "content": "cd34134fbeee3c027bcee0c5f494f0410f44304959adc6672bd756193761afdf"
        },
        {
          "alg": "SHA3-512",
          "content": "235975cb9ebb7bc249b326eb9df12773b439404e02c51efa5c2ee491078e4f33c31f46ef0009cdabc509eb1a9a39908fa988942309bbf4badf825e135867cb5e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.prometheus/prometheus-metrics-exposition-textformats@1.9.0?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/prometheus/client_java/client_java/prometheus-metrics-exposition-textformats",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.prometheus/prometheus-metrics-model@1.9.0?type=jar",
      "group": "io.prometheus",
      "name": "prometheus-metrics-model",
      "version": "1.9.0",
      "description": "Data model for read-only immutable Prometheus metrics snapshots.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "4fd399378715b62384942a531b4f9762"
        },
        {
          "alg": "SHA-1",
          "content": "23f973f90ef143e96d7bc0dd37c6c09e071be7d1"
        },
        {
          "alg": "SHA-256",
          "content": "277677fa9633a33a3bc687a54c71d4dad75dc68d0f0adc3f1478a3230402f7ad"
        },
        {
          "alg": "SHA-512",
          "content": "2d599304a138589107a96f9e5b5fb4330fefef94781cb26c8c2ae9e2bb86ee7e3212dcd3581fdcaccc4b573178a2a33c590e8c43d6ed0c6cf2bcdfb8d8992bff"
        },
        {
          "alg": "SHA-384",
          "content": "39d3d84cd48d7059aa1284fbf3a223538db2a7b699a69d1c82f03b795b4643bc463babaf90c3c77a215db645ee37b0c2"
        },
        {
          "alg": "SHA3-384",
          "content": "75176f24425167279769b16211b283b76a0402450f6ce2db97e0247f8d9df1cb129cb335b18f9a00e5db528976b7c0d3"
        },
        {
          "alg": "SHA3-256",
          "content": "cc28c9be062c96fc8aee7e4e3fad7e813e4a1ea3db8f7a19e944f03722e36263"
        },
        {
          "alg": "SHA3-512",
          "content": "fb9e36ba9f14ad4238c14a031b5071474b6974c5bb52abcb55de94834acc5a70adf3599cc2c4477152cb42db928f3f8cf2b4392850bdc6f0232a00698c17c71e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.prometheus/prometheus-metrics-model@1.9.0?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/prometheus/client_java/client_java/prometheus-metrics-model",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.prometheus/prometheus-metrics-config@1.9.0?type=jar",
      "group": "io.prometheus",
      "name": "prometheus-metrics-config",
      "version": "1.9.0",
      "description": "Configuration for Prometheus metrics and exposition formats.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "57788ad5231fdda664679e2139649a4d"
        },
        {
          "alg": "SHA-1",
          "content": "c8f23eb76575eb91628a16952aa4d9432fa43f14"
        },
        {
          "alg": "SHA-256",
          "content": "2d1000d44edb43f5903611ae4d16214f1a9c8725382c34cf0b67a1df781b3e11"
        },
        {
          "alg": "SHA-512",
          "content": "6b2a653467c8b2decacdb15b423d7cf002abfcf953482114c19c8be9b09335c5342f9ad3a4afbb671dbf0129270931d09bb680799d87bd3de73af7b7bb0d8786"
        },
        {
          "alg": "SHA-384",
          "content": "8409768b8cf96953aa7dcfac6907486ec791276a9c9f08dd47959d9f016ba685d55be0d9ba278a67c169b1c0b98e12e4"
        },
        {
          "alg": "SHA3-384",
          "content": "1800cb49b893eae789a74936fccb4eced23fdac89869bc2669d1f0cb182fd16683f72e867e5df32b283ec146d9b6e1ff"
        },
        {
          "alg": "SHA3-256",
          "content": "d129b0217f4c53314fe7f4a9c73794d071e4c76af5514b5434fbfb731283b59b"
        },
        {
          "alg": "SHA3-512",
          "content": "e6cfba048d52043d33ca349e58b609478354fa8985bcfc12d891a57c3ce7eff3cf46acdb2f6f7d9efb7028bfa0364971709d30252850fb70b938a4ebf2f55a96"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.prometheus/prometheus-metrics-config@1.9.0?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/prometheus/client_java/client_java/prometheus-metrics-config",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.github.mweirauch/micrometer-jvm-extras@0.3.0?type=jar",
      "group": "io.github.mweirauch",
      "name": "micrometer-jvm-extras",
      "version": "0.3.0",
      "description": "A set of additional JVM process metrics for micrometer.io.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "c63df9d0f3a3f2297052741dfd275e94"
        },
        {
          "alg": "SHA-1",
          "content": "86fce8e8a3bffaa50f87e5d67427419b7b5c72d3"
        },
        {
          "alg": "SHA-256",
          "content": "9e9699ddddf1d1be033eb99ac2b7b4a2f2213b7ce2ad946b13e943990e8bf223"
        },
        {
          "alg": "SHA-512",
          "content": "d71d7ea0868c7d55ab0c0f668d5461ff4b27e36ebe60c12036a652690ca12d701f941fa44f075c8ad3bf0e10a7706c90fa42db378b99df6a2594f050fbe8f054"
        },
        {
          "alg": "SHA-384",
          "content": "36353c016cb1be7637eb202b60bfa2a2eb2044506e8f5855eedae96c1e1f610dcdf1ca0539b81e99d39844b6c4b2b2d5"
        },
        {
          "alg": "SHA3-384",
          "content": "2067d2f63917f8cfde473c081ccf8b5d0ff7428ad0904d2649b65822e6d3de1e96c29b4956f445c34319de522af8a87a"
        },
        {
          "alg": "SHA3-256",
          "content": "c7131c9c0dcc8fc90e60e5ea5b9ca94844c391fb9afc83ac9cce2f0296caf3b9"
        },
        {
          "alg": "SHA3-512",
          "content": "bc5e6b0ee1c4ab411114585b8bd26fc19a9c14861811bdea97b83c02bc4ae17498cbbd9d7198e9b3c23040d566a41f1500a0980d63847fe85b5cf0bdd357f1b5"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.github.mweirauch/micrometer-jvm-extras@0.3.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/mweirauch/micrometer-jvm-extras",
          "type": "website"
        },
        {
          "url": "https://github.com/mweirauch/micrometer-jvm-extras",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.pebbletemplates/pebble@4.1.2?type=jar",
      "group": "io.pebbletemplates",
      "name": "pebble",
      "version": "4.1.2",
      "description": "Templating engine for Java.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "6d20632243292dadc46ab7d02084c8b9"
        },
        {
          "alg": "SHA-1",
          "content": "a29bdfb56da29d41fac5a34f953082f5bee883ff"
        },
        {
          "alg": "SHA-256",
          "content": "bd4021cebeb3d34ca80dc1e406b6ec23baa3ead4b9b82d5282fdacc64f655cd7"
        },
        {
          "alg": "SHA-512",
          "content": "784924f3e2c257bc8aada40114213440bffb1c14d68fd7cdf8849a6f7783358348ad52245555b635e7043a854d9f433866caaf78f002190f2545617b202959d0"
        },
        {
          "alg": "SHA-384",
          "content": "93fb5aaffa80adee0aa2e7d0bcd2e28180559a0ef4d8517307951340f3d7476111253e17b98590ca80960cbb6eec556c"
        },
        {
          "alg": "SHA3-384",
          "content": "d12e78bf915681f5c2d99867b02ba8b3d3b90704c7df221b86a7984154724e089d6866ddaa8b2864181bbff75315d688"
        },
        {
          "alg": "SHA3-256",
          "content": "37b7c73535d329214f3fe4ff224555b10e6d72f7226dc5a02465229266babf74"
        },
        {
          "alg": "SHA3-512",
          "content": "17a9c905267453131adcf03f774790afcffdb064231184967b79fd392339c2f12a10cdd60bad5dc25697fbf1a6271ef78ccb27afdf145138aa344cec22f79bce"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/io.pebbletemplates/pebble@4.1.2?type=jar",
      "externalReferences": [
        {
          "url": "http://pebbletemplates.io",
          "type": "website"
        },
        {
          "url": "https://github.com/PebbleTemplates/pebble.git/pebble",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.unbescape/unbescape@1.1.6.RELEASE?type=jar",
      "publisher": "The UNBESCAPE team",
      "group": "org.unbescape",
      "name": "unbescape",
      "version": "1.1.6.RELEASE",
      "description": "Advanced yet easy-to-use escape/unescape library for Java",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "d95ed94e1624e307a1958ee105ccbf39"
        },
        {
          "alg": "SHA-1",
          "content": "7b90360afb2b860e09e8347112800d12c12b2a13"
        },
        {
          "alg": "SHA-256",
          "content": "597cf87d5b1a4f385b9d1cec974b7b483abb3ee85fc5b3f8b62af8e4bec95c2c"
        },
        {
          "alg": "SHA-512",
          "content": "6918e9579b06721942fdcd91e401f5b996fb4eac13056dbafdf594661f355a34874eb5266784bc2c4f82df9fdd9e219d71a96f52945a354f01665f85f8166bb3"
        },
        {
          "alg": "SHA-384",
          "content": "1b808b67c784b69afea64364ba4c0d433c7f042c512f5c18f07d5388fe7ac4741913f696424bd8fbde147383cfb3d8f9"
        },
        {
          "alg": "SHA3-384",
          "content": "6525bd20a12ff43a0089c0d59369574ae6c01e2b4b1aacf466847d4433ae403db08404a9b59be397c3034f972bcd6b06"
        },
        {
          "alg": "SHA3-256",
          "content": "a190c9bedccff959d08db12fe7080437fb4e98f05516b39d6540be718e151cc6"
        },
        {
          "alg": "SHA3-512",
          "content": "5d7b5edc0c2a0d47c9625936c14b4122330b96cdf54260fe2a6468289c2f4cbc4ee19770c1144acfa702f2f058a81544b4aea9258fe0e15166a1a331736d7b77"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.unbescape/unbescape@1.1.6.RELEASE?type=jar",
      "externalReferences": [
        {
          "url": "http://www.unbescape.org",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2",
          "type": "distribution"
        },
        {
          "url": "scm:git:git@github.com:unbescape/unbescape.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.protobuf/protobuf-java-util@4.36.2?type=jar",
      "group": "com.google.protobuf",
      "name": "protobuf-java-util",
      "version": "4.36.2",
      "description": "Utilities for Protocol Buffers",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "19bd9c1e391a97014eebba6451bd2bae"
        },
        {
          "alg": "SHA-1",
          "content": "6c476510c485fcca280cd4ae8104003404adbd26"
        },
        {
          "alg": "SHA-256",
          "content": "b67a109066cf06f60bb447a6cbcc6709b94d1a5a41ced84330d68e8023e8e0c5"
        },
        {
          "alg": "SHA-512",
          "content": "2a388506aaefc39533dcb879bdca424ea6f4d8cf1706a24d39bb7a1fc13b9b73ba36980c6d7b434dc555358cabb180df74ddcfe2893f7891be881fa42e94256d"
        },
        {
          "alg": "SHA-384",
          "content": "5ec0a3f34e29ace57a25f804bda6911a81a31d12c03d93677d36426f3cd9b7bd0f62f2dcb8c8c9b0f1e54682413fc590"
        },
        {
          "alg": "SHA3-384",
          "content": "ed5d20f701f46fd2c460d3b3b032a72220d003cc4393f8d86237fed7d8441a072f8c42bb876db4c75db7f1607a28bdaa"
        },
        {
          "alg": "SHA3-256",
          "content": "676b0e0552110a6a317c9711292f2d30b7ebf4f29390bd62f020b766d4465562"
        },
        {
          "alg": "SHA3-512",
          "content": "630481a3ba6911ca4c8777f249573b3124169b30003e0178ec93d55d2b89da7ad3c2445f66f6c95d15ff32b7220e706ceedd0bf6830f5caa38543de77ff777a1"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/com.google.protobuf/protobuf-java-util@4.36.2?type=jar",
      "externalReferences": [
        {
          "url": "https://developers.google.com/protocol-buffers/protobuf-java-util/",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/protocolbuffers/protobuf/protobuf-java-util",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
      "group": "com.google.code.findbugs",
      "name": "jsr305",
      "version": "3.0.2",
      "description": "JSR305 Annotations for Findbugs",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "dd83accb899363c32b07d7a1b2e4ce40"
        },
        {
          "alg": "SHA-1",
          "content": "25ea2e8b0c338a877313bd4672d3fe056ea78f0d"
        },
        {
          "alg": "SHA-256",
          "content": "766ad2a0783f2687962c8ad74ceecc38a28b9f72a2d085ee438b7813e928d0c7"
        },
        {
          "alg": "SHA-512",
          "content": "bb09db62919a50fa5b55906013be6ca4fc7acb2e87455fac5eaf9ede2e41ce8bbafc0e5a385a561264ea4cd71bbbd3ef5a45e02d63277a201d06a0ae1636f804"
        },
        {
          "alg": "SHA-384",
          "content": "ca0b169d3eb2d0922dc031133a021f861a043bb3e405a88728215fd6ff00fa52fdc7347842dcc2031472e3726164bdc4"
        },
        {
          "alg": "SHA3-384",
          "content": "9903fd7505218999f8262efedb3d935d64bcef84aae781064ab5e1b24755466b269517cada562fa140cd1d417ede57a1"
        },
        {
          "alg": "SHA3-256",
          "content": "223fda9a89a461afaae73b177a2dc20ed4a90f2f8757f5c65f3241b0510f00ff"
        },
        {
          "alg": "SHA3-512",
          "content": "3996b5af57a5d5c6a0cd62b11773360fb051dd86a2ba968476806a2a5d32049b82d69a24a3c694e8fe4d735be6a28e41000cc500cc2a9fb577e058045855d2d6"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
      "externalReferences": [
        {
          "url": "http://findbugs.sourceforge.net/",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://code.google.com/p/jsr-305/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.code.gson/gson@2.14.0?type=jar",
      "group": "com.google.code.gson",
      "name": "gson",
      "version": "2.14.0",
      "description": "Gson JSON library",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "43b20830936ec97d8df6b174e3509d9e"
        },
        {
          "alg": "SHA-1",
          "content": "efc0e34ede4e3204eaefb84a00e55e8c86634382"
        },
        {
          "alg": "SHA-256",
          "content": "2cbd119bf1961c28788310963dc80ba65f58cdeec1dd139c8bdb1240faa2c36f"
        },
        {
          "alg": "SHA-512",
          "content": "d040d19a47ca2df33365493f9813a1d0a40b91685f7d87ca445b98d37b4c1b801314aef87940dc8b43dd1b0b96f6d5e6e4296778bf1af8dbfb1091425b37da21"
        },
        {
          "alg": "SHA-384",
          "content": "fb3f4db322b691e37e48df3eda60b8a216d1136619f9e354aa5e3ee7aa0b4afab985ae9510c16a6fe05ea674417b4cd6"
        },
        {
          "alg": "SHA3-384",
          "content": "7943b642d76b35f1e322ec7753c4de85cecc233d4cbd79582e93cf3551896c436f3bcc1166f51789470dec715f515312"
        },
        {
          "alg": "SHA3-256",
          "content": "46eafa830748a2fde4dc595d2aaf94417bc2956570f8406dc000b323738f8764"
        },
        {
          "alg": "SHA3-512",
          "content": "ba3abdb15073b5159782f05dbc440b76139d1d129d80a5cf98b035c399a405dec39b9c7fa7e6d8e5a2676f10fda63ed8b817538a8504ef381992a91fa1832b68"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.code.gson/gson@2.14.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/google/gson",
          "type": "website"
        },
        {
          "url": "https://github.com/google/gson/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/google/gson/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.errorprone/error_prone_annotations@2.50.0?type=jar",
      "publisher": "Google LLC",
      "group": "com.google.errorprone",
      "name": "error_prone_annotations",
      "version": "2.50.0",
      "description": "Error Prone is a static analysis tool for Java that catches common programming mistakes at compile-time.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "1ded1848cfd4f5167e00824faf9c4d3b"
        },
        {
          "alg": "SHA-1",
          "content": "74ba43e49ab1184d41634af2ef0047e82c4064b0"
        },
        {
          "alg": "SHA-256",
          "content": "4667724877f1d37a689202da191e23efa7657c62eef93ccdac406eccfe5cdd0a"
        },
        {
          "alg": "SHA-512",
          "content": "f867b1a1fbc057fcfc37c2fa86082f5965ad6a1c45373eac6cfa6ec058cedbf7b348ab4f3d4fea2d4d105ecc401c14f24d9b16f344507e126a221d50532cb8b2"
        },
        {
          "alg": "SHA-384",
          "content": "2986b161379c30e9805f3bcff197d7861b8c0690a021e2d7464707e57028b1953d24eefd1a36722f3c04665190b3cb48"
        },
        {
          "alg": "SHA3-384",
          "content": "597fe452ff7e21149da3c537b61d8e1b17df792f67bcd80fbccd6647acca571a94fa8bbcf4840826a37814bb2ef0249a"
        },
        {
          "alg": "SHA3-256",
          "content": "5447d9786f79d7dc20e8f75ac93f3a05181f3707faf6e91696dd326cdd5f5754"
        },
        {
          "alg": "SHA3-512",
          "content": "b51065218c88f5ce0b94e6607dee42d6c01aeb69a87b6e1c656dd406f2196cc999150ce87f56fbeeecbed7e1e354ed285589fa560012e9fb5858a97dc17d2129"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.errorprone/error_prone_annotations@2.50.0?type=jar",
      "externalReferences": [
        {
          "url": "https://errorprone.info/error_prone_annotations",
          "type": "website"
        },
        {
          "url": "https://github.com/google/error-prone/error_prone_annotations",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml.woodstox/woodstox-core@7.2.2?type=jar",
      "publisher": "FasterXML",
      "group": "com.fasterxml.woodstox",
      "name": "woodstox-core",
      "version": "7.2.2",
      "description": "Woodstox is a high-performance XML processor that implements Stax (JSR-173), SAX2 and Stax2 APIs",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "6ec867fa050ede38a47d87ef0b367dc0"
        },
        {
          "alg": "SHA-1",
          "content": "64e3e5e7fd3158068c7329d74bcfee3217df1741"
        },
        {
          "alg": "SHA-256",
          "content": "3bd35f778fb15cd517fae51961ba7a9388eae8e4a836fac1166c7f70740e55cd"
        },
        {
          "alg": "SHA-512",
          "content": "94a9d1ee7faca772e726d69f3e96095b8e05bad688ab2ca45a44f0ef13e778bd40d01e15ec746b80ba69248aab34689ada24fedc90627fe58008270579ee5538"
        },
        {
          "alg": "SHA-384",
          "content": "9150fda1390d6cfb34a431f8fc7b12b181a129711878c675849ae93e5182a79f614702cfa63ce2bc6919e45e1508a556"
        },
        {
          "alg": "SHA3-384",
          "content": "58a117f6d291e49a6939f2f7092306f375aa2825c1b1fde6557f98546baf4f0e8369cb5f520ccd29d2b7df8c70894c3c"
        },
        {
          "alg": "SHA3-256",
          "content": "910c28c947503cba339735f3f27097fc021ad8c4acdf96c1961f868659563206"
        },
        {
          "alg": "SHA3-512",
          "content": "5afd0a28f3f34f0021de6c382007be06e628206826caee10d39176d55c04b37d88807b3a56335a15b66a789306543f1cae2ae98c031531d5daf7da1ef1b9108d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.fasterxml.woodstox/woodstox-core@7.2.2?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/FasterXML/woodstox",
          "type": "website"
        },
        {
          "url": "https://central.sonatype.com/api/v1/publisher",
          "type": "distribution"
        },
        {
          "url": "https://github.com/FasterXML/woodstox/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/FasterXML/woodstox",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.codehaus.woodstox/stax2-api@4.3.0?type=jar",
      "publisher": "fasterxml.com",
      "group": "org.codehaus.woodstox",
      "name": "stax2-api",
      "version": "4.3.0",
      "description": "Stax2 API is an extension to basic Stax 1.0 API that adds significant new functionality, such as full-featured bi-direction validation interface and high-performance Typed Access API.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "6eec6c1cb7f63d8a8098cc5569a47e99"
        },
        {
          "alg": "SHA-1",
          "content": "59251773c44122e8d1366f68884e29dd784e141b"
        },
        {
          "alg": "SHA-256",
          "content": "7c805f36129ea9fa42b696093b7ae1eb20bb6ccec65c8280d6f33db5609ca5e1"
        },
        {
          "alg": "SHA-512",
          "content": "4d1bf5cb3a803423c5420050c245227b944acb4ced29e8095e470bc3a742d6a057c484fa1d531b58933ed8f81d52d5bbfc8406acc4241f6e4ec4c5116fe30d53"
        },
        {
          "alg": "SHA-384",
          "content": "664bf1044e8c9e80083d02d2ccdba3c3953a515594b6a262baef76d1cf3790da9d71eb853806c27c94721e65983d72a3"
        },
        {
          "alg": "SHA3-384",
          "content": "298f2dcfffb3fe28229452770a969b2138008a23c508599a13303f48f21d3458c61ad19df53a20d6447c0f8ef56e4216"
        },
        {
          "alg": "SHA3-256",
          "content": "5a3bc0bf1b00df535d572ae16c62817788bea0f7d02a8c430fadd4cf4df95f5e"
        },
        {
          "alg": "SHA3-512",
          "content": "5d4e4618b22accb1fee19d6d2702dcd0538df7f9e3b7aa8590e7554811770bb317d4bab1eecebc4b31df49a349c68e746256b3e9cca5fbea6f102df411c0e678"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause"
          }
        }
      ],
      "purl": "pkg:maven/org.codehaus.woodstox/stax2-api@4.3.0?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/FasterXML/stax2-api",
          "type": "website"
        },
        {
          "url": "https://central.sonatype.com/api/v1/publisher",
          "type": "distribution"
        },
        {
          "url": "https://github.com/FasterXML/stax2-api/issues",
          "type": "issue-tracker"
        },
        {
          "url": "http://github.com/FasterXML/stax2-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.github.nscuro/versatile-core@0.26.0?type=jar",
      "group": "io.github.nscuro",
      "name": "versatile-core",
      "version": "0.26.0",
      "description": "Java implementation of vers, a mostly universal version range specifier",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "efb55919555b9d33c635a3ad2b3043a0"
        },
        {
          "alg": "SHA-1",
          "content": "572a929a465a11b9bc3ed689ccdc6fc0553e27c5"
        },
        {
          "alg": "SHA-256",
          "content": "8dd4dd9ae7e303532b9a66303c99a84d18dba8cb831311b9974593cb0c2a28e2"
        },
        {
          "alg": "SHA-512",
          "content": "45ad989a2f5e399c4a6c3f4e032cfe0f0bf944f9a0ef3bf5adeef0097b763e5967fe1bbc3963661c3bcf6ee000bba0e83480eedaf56d35b2991a02512d5c3571"
        },
        {
          "alg": "SHA-384",
          "content": "f4e53e4a4b526cebe14585cc9bc94e97941ec1f02c80086010e992200f7b7ea23d5363d6ebeb5e522bcfa742130d8b66"
        },
        {
          "alg": "SHA3-384",
          "content": "508b31fc57d2df7a91e85384242bcc862d7ce21c340c9f608fb4cc08fdf38b60485a687224998c18bbf9eea5d657675b"
        },
        {
          "alg": "SHA3-256",
          "content": "d1bd33c716c914fcb709e2887b1456676f014fa594267137c7ad0f9478c15f37"
        },
        {
          "alg": "SHA3-512",
          "content": "73ce63990a5631ef54ee56fbb304f38aafda0c7d57303c9ad4b09ce95ed280e768445d9b1fd3c5e717cb8fbefecf43cd4bd472d2d7941b843c2501f9b8f96f7f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.github.nscuro/versatile-core@0.26.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/nscuro/versatile/versatile-core",
          "type": "website"
        },
        {
          "url": "https://github.com/nscuro/versatile/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/versatile-core",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.maven/maven-artifact@3.9.16?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.maven",
      "name": "maven-artifact",
      "version": "3.9.16",
      "description": "Maven is a software build management and comprehension tool. Based on the concept of a project object model: builds, dependency management, documentation creation, site publication, and distribution publication are all controlled from the declarative file. Maven can be extended by plugins to utilise a number of other development tools for reporting or the build process.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "6005ab2198a19a41cd3cf59618f9abc1"
        },
        {
          "alg": "SHA-1",
          "content": "1176c6579a8a68508c3479ef72d514e71c98ddca"
        },
        {
          "alg": "SHA-256",
          "content": "54cc1c1ef932e3d4a903352111b42b4d3c3ed8e7a1d0de73b625309d9c3ad3e8"
        },
        {
          "alg": "SHA-512",
          "content": "9688ea1f519c113dd4f78b63e6ff2256b65c2fc13446e5c5c776ef4e330a1087311a89fd4212c3a75a8a327d44a855aa98e9e6215c22416cc91cf6e0db48942f"
        },
        {
          "alg": "SHA-384",
          "content": "d0c7c604f82f74eae1b820d88d621fd87ebc567bd7159ce00364a60cb065da1208341ed05f0f8277afcdfbc85544da8f"
        },
        {
          "alg": "SHA3-384",
          "content": "55c50e32471d19532c40489cd76ed77015965ce4a9137fb8daba5c40702ffd9acca4bf54d9d449a2ff6b1d67364122e9"
        },
        {
          "alg": "SHA3-256",
          "content": "69ad66e3d9391c3ed5b6e7bbeb6731568b13d93ad3e795a85b67f7cea15b7008"
        },
        {
          "alg": "SHA3-512",
          "content": "48b82cdfecaee78545011e0c5ada2fa0bc1ea8bf21493da92b39e7742f6cdefb32c5f4e75efe8991d1946c1bbeb345667a632031c2844d3cf440241d92887a70"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.maven/maven-artifact@3.9.16?type=jar",
      "externalReferences": [
        {
          "url": "https://maven.apache.org/ref/3.9.16/maven-artifact/",
          "type": "website"
        },
        {
          "url": "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/",
          "type": "build-system"
        },
        {
          "url": "https://maven.apache.org/download.html",
          "type": "distribution"
        },
        {
          "url": "https://github.com/apache/maven/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://lists.apache.org/list.html?users@maven.apache.org",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/apache/maven/tree/maven-3.9.16/maven-artifact",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.codehaus.plexus/plexus-utils@3.6.1?type=jar",
      "publisher": "Codehaus Plexus",
      "group": "org.codehaus.plexus",
      "name": "plexus-utils",
      "version": "3.6.1",
      "description": "A collection of various utility classes to ease working with strings, files, command lines, XML and more.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "bf77c7ef462342bd42ce245be9648540"
        },
        {
          "alg": "SHA-1",
          "content": "9dce1b9c69b197f453223e45a2cb9fa0cd48b424"
        },
        {
          "alg": "SHA-256",
          "content": "05a63effd67e2d6b9d610cc82e2bd7473289d34802e57a529b28110f28af5679"
        },
        {
          "alg": "SHA-512",
          "content": "cdf52ae14e19fbc040a8ce9eb56f25fb6f3c1c2703b8cb7815329f06f675a284934e4fb19acedb49a24abc8ba28493fd5aedf15f0ac8033d123c71620de0ac98"
        },
        {
          "alg": "SHA-384",
          "content": "a02b453e4590c5028dcd94a72b818eb63ff7831cda8337daef63f774c1972b920b9eaae979867be34d9d4843e8296d42"
        },
        {
          "alg": "SHA3-384",
          "content": "28541c0fccf50c5eafa4b420c1453a77a8db9466b4da35f94ca745100f5b8b5a3f9ac2b3ab7f1008edb5ce33204a3ae2"
        },
        {
          "alg": "SHA3-256",
          "content": "f7353bfe893ab5932fe443ef26d2a9d9541f1f62105f35f923bd9b6b94808683"
        },
        {
          "alg": "SHA3-512",
          "content": "a7d95eaf9c02a688bcfaa1702c555eac1975190abda0ca626f3e41cec2492125e712c561a3cc67ed0d76a1b174ff03a8cd05afc0d377af1ff4c74a846546675f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.codehaus.plexus/plexus-utils@3.6.1?type=jar",
      "externalReferences": [
        {
          "url": "https://codehaus-plexus.github.io/plexus-utils/",
          "type": "website"
        },
        {
          "url": "https://repo.maven.apache.org/maven2",
          "type": "distribution"
        },
        {
          "url": "https://github.com/codehaus-plexus/plexus-utils/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://groups.google.com/forum/#!forum/mojohaus-dev",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/codehaus-plexus/plexus-utils/tree/plexus-utils-3.6.1/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.postgresql/postgresql@42.7.13?type=jar",
      "publisher": "PostgreSQL Global Development Group",
      "group": "org.postgresql",
      "name": "postgresql",
      "version": "42.7.13",
      "description": "PostgreSQL JDBC Driver Postgresql",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "52ba042322b750121222bd57423003b5"
        },
        {
          "alg": "SHA-1",
          "content": "a6e1bd21b412d6ffb3df23cd13d507bc2cc9e37d"
        },
        {
          "alg": "SHA-256",
          "content": "6e0e4cc2d8cae902084f8a2b18728b073a6fd9d1f87c9d8bff8f298c18185b93"
        },
        {
          "alg": "SHA-512",
          "content": "9c1c4abd2febc8bfb0cedc02b8ec073f0b5ab1fce25956024e2bf81353b0a67e424fbc4cbf8e804e8d92a11f2c6440538ec962de52938516aa5251efff9ab187"
        },
        {
          "alg": "SHA-384",
          "content": "3c74706eed0df6c847aca07a7f5554702887a3345e5da057efd629b3f404eb0f6fd33ddbafa687dfca09ca1fa9185a87"
        },
        {
          "alg": "SHA3-384",
          "content": "617e565389029a213ee778fe88fcdaaf5a21b1f97660726de358b40b9c41d304e6a681b71a27fb77fd017514df2e1346"
        },
        {
          "alg": "SHA3-256",
          "content": "8eb1a86d856497aec0b9c428c215a75f3b8acf8c519a33c538a4c95564db9a95"
        },
        {
          "alg": "SHA3-512",
          "content": "cf48526f5d57e7852351197be9c7698353e29f72c2219cf0af0425e9502046d032ba566f98ee3e5446cd5e2d34c30fec2df3ff784ef93d5c3750dc7dff3dc07e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause",
            "url": "https://opensource.org/licenses/BSD-2-Clause"
          }
        }
      ],
      "purl": "pkg:maven/org.postgresql/postgresql@42.7.13?type=jar",
      "externalReferences": [
        {
          "url": "https://jdbc.postgresql.org",
          "type": "website"
        },
        {
          "url": "https://github.com/pgjdbc/pgjdbc/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://www.postgresql.org/list/pgsql-jdbc/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/pgjdbc/pgjdbc",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.checkerframework/checker-qual@3.55.1?type=jar",
      "group": "org.checkerframework",
      "name": "checker-qual",
      "version": "3.55.1",
      "description": "checker-qual contains annotations (type qualifiers) that a programmerwrites to specify Java code for type-checking by the Checker Framework.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "05361199dc29af8334d1405f28b83109"
        },
        {
          "alg": "SHA-1",
          "content": "3d40699936a66b2d4c1f759f2f1a0446c8cf64fc"
        },
        {
          "alg": "SHA-256",
          "content": "857658c8bdcbff794949a8d9922f88d63ee3751c203c7cd7d21ea97f9e745288"
        },
        {
          "alg": "SHA-512",
          "content": "564b78a1a0e76c756b74c60f9441a43cc5232b5d887bf7a701fdf8ff9e646f2900a10a56254534fa69499dff864338037edfb6d05f59ba52351e1013a522f316"
        },
        {
          "alg": "SHA-384",
          "content": "cd20464a20b4f93e85f5e1917f747696b28803d171fa8d34762b3eac6b4541a0472772c21585fa5f43c1ae188a6dab48"
        },
        {
          "alg": "SHA3-384",
          "content": "1c7d8fe4a8922ef5a739ff7cf52c1a93f3aec79c7024a0e6f827ec865e6c63ee2818ce1d9412d9768bb2f45eb441bc0b"
        },
        {
          "alg": "SHA3-256",
          "content": "9eae4832715938932bbaf8846e4f8d24daf664bc2f368f65a6847644faab7329"
        },
        {
          "alg": "SHA3-512",
          "content": "5be2781a61e995e9cf1b284a9439f32391fc280b41d5b5c34c75539e055be9fd519564caef2f4a96672ad4946fd83ee391126c45d74f30c1ef606e5338dd842e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:maven/org.checkerframework/checker-qual@3.55.1?type=jar",
      "externalReferences": [
        {
          "url": "https://checkerframework.org/",
          "type": "website"
        },
        {
          "url": "https://github.com/typetools/checker-framework.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.cloud.sql/postgres-socket-factory@1.29.0?type=jar",
      "publisher": "Google LLC",
      "group": "com.google.cloud.sql",
      "name": "postgres-socket-factory",
      "version": "1.29.0",
      "description": "Socket factory for the Postgres JDBC driver that allows a user with the appropriate permissions to connect to a Cloud SQL database without having to deal with IP allowlisting or SSL certificates manually.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "401d379a8d70a5c08d62bc8dd00d8b8b"
        },
        {
          "alg": "SHA-1",
          "content": "010dbc6d48eec9aba40f8283ddd60ddc173f4482"
        },
        {
          "alg": "SHA-256",
          "content": "6719b75338426a0aca0ea0254b2e0b4cc59364f1848a910ed722cf03497311b3"
        },
        {
          "alg": "SHA-512",
          "content": "9a23e5198a0dbfd1f64d3c1324fe67c88e8e2bc065e45d4ea6e5d631050bc55e8471520947d1d4129a8ed86bfadb6ebc7e4eead6a503f285bacdaa46fd5adc73"
        },
        {
          "alg": "SHA-384",
          "content": "d4056bffb7a05be5c834eda1895b0ab5335181b22032aac9402eb810beaa9321ff00c4b18a13362fdd30a19aee0cf383"
        },
        {
          "alg": "SHA3-384",
          "content": "31e8e67999f48ee9adf35adee9305f25482ddd0685b10e578cfe5e4e91af49f4f310ae436aef36e6d74ca06c77f0f2d0"
        },
        {
          "alg": "SHA3-256",
          "content": "f42977b743b1d031db5ab87e48314848e4c75b7984f9e6dd1a47a0cf3808ac39"
        },
        {
          "alg": "SHA3-512",
          "content": "fc673e39e3b8d1333b15436f5f3257bbb0b725fff1fccf5ac3a1278355b3d1937230e9ffcc772bba2e4b7621d83104e1790de500228ae0eb573525c45c88a2de"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.cloud.sql/postgres-socket-factory@1.29.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/GoogleCloudPlatform/cloud-sql-mysql-socket-factory/postgres-socket-factory",
          "type": "website"
        },
        {
          "url": "https://google.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/googleapis/java-shared-config/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/GoogleCloudPlatform/cloud-sql-mysql-socket-factory.git/postgres-socket-factory",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.cloud.sql/jdbc-socket-factory-core@1.29.0?type=jar",
      "publisher": "Google LLC",
      "group": "com.google.cloud.sql",
      "name": "jdbc-socket-factory-core",
      "version": "1.29.0",
      "description": "Core library for establishing secure connections. End users should depend on the driver-specific socket factory artifacts.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "f131b6c725a38addda66368d4655a14b"
        },
        {
          "alg": "SHA-1",
          "content": "8a4f540654048946e7e36f6ddb9af651a479259c"
        },
        {
          "alg": "SHA-256",
          "content": "ce66c25efd38261784238d5a0ef6996ae72fe73886f48c3be33ebdec7a78cf5b"
        },
        {
          "alg": "SHA-512",
          "content": "64b60fdf4cb3af24b2242f40d0cd77fb3c55f104f6db378c49d9354e53b4f616913f9dc3b50660f8146082f329e3e934a71d40ab7fa5f236ddcf38a6a18487ca"
        },
        {
          "alg": "SHA-384",
          "content": "e176bfeb295c55ac95f9caa306af59786777b7ecb1cd777e2e3fd5c775059a0d756662e07d1783f53b5b158819af9cdc"
        },
        {
          "alg": "SHA3-384",
          "content": "493719ad41922936ab54056229c65899f1216a0353fb5eee9db8db84d9760ae79c93f43cec50a91c8f9e4ee6edcc733b"
        },
        {
          "alg": "SHA3-256",
          "content": "f3566fe6ade6f66316640a7a07ec57f3497671ff8b5790620d44f8d9d15d6b62"
        },
        {
          "alg": "SHA3-512",
          "content": "d10ae55c9a1e2ee1a0a160ad79defc7315c202bacd8d674e092be25d3fbf9e32ab5d86f8efa4b300dfb866316b2d0bbfc2cf8e09923d6db79fef24f02044be09"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.cloud.sql/jdbc-socket-factory-core@1.29.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/GoogleCloudPlatform/cloud-sql-mysql-socket-factory/jdbc-socket-factory-core",
          "type": "website"
        },
        {
          "url": "https://google.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/googleapis/java-shared-config/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/GoogleCloudPlatform/cloud-sql-mysql-socket-factory.git/jdbc-socket-factory-core",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.github.jnr/jnr-enxio@0.33.0?type=jar",
      "group": "com.github.jnr",
      "name": "jnr-enxio",
      "version": "0.33.0",
      "description": "Native I/O access for java",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "1ed377ea4acc981096fdbe3401788489"
        },
        {
          "alg": "SHA-1",
          "content": "bc3b93de47133c401b69e5bc2ad5825ebb406988"
        },
        {
          "alg": "SHA-256",
          "content": "d3b45a999bcd1b0faa7e774e90cf2c49dbec7724f5a7f8272f7b4e081fd3f584"
        },
        {
          "alg": "SHA-512",
          "content": "1cc0257f6c9b244a9c3649c9098c9aefe382c0967f699402588ccb35405d7f960cc9bc9bb617540154c8ff2c3c4cf0d212a435569fe968cbc0bd36c224f690c6"
        },
        {
          "alg": "SHA-384",
          "content": "620509095bc543670d7e5aee1e87b2574eb47d9091e3b415bafc14cf6bf11c00f7c684390f6fbf72d24a0a6181a4b9d6"
        },
        {
          "alg": "SHA3-384",
          "content": "d58bbf4ab2227b9d38b81e155e1e96b8d71b16f15c338b7db1fdf37b155c35a9095fa26daac5f42879bf5bbc5399527e"
        },
        {
          "alg": "SHA3-256",
          "content": "7cdf5fb96968032740f9102c7e2b1db789edfe1b4b90293e064c156270c5dacf"
        },
        {
          "alg": "SHA3-512",
          "content": "98ff3de0f753801814ffa44f2051813d0ad193ace7f59b5860b5f4149491368611e83a076117b5be84bd8d24f0b212bec4120de2e4cfcf091fb511504a2ff981"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.github.jnr/jnr-enxio@0.33.0?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/jnr/jnr-enxio",
          "type": "website"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.github.jnr/jnr-constants@0.11.0?type=jar",
      "group": "com.github.jnr",
      "name": "jnr-constants",
      "version": "0.11.0",
      "description": "A set of platform constants (e.g. errno values)",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "1fa9c25140e2d1ac6fd3d9693766d091"
        },
        {
          "alg": "SHA-1",
          "content": "cc423a78bd94b039dda484a9311a8ac2e4acd2ee"
        },
        {
          "alg": "SHA-256",
          "content": "1286892ff3f4a1481bfdada9dfbddff518aaae47e93428694069bf7e9c4b0b56"
        },
        {
          "alg": "SHA-512",
          "content": "724fd91984f10ebd953f3e5bbbbff7c319669401bcfdb4a722e1a3347054237a2fe1753f3c8c0db12d445d9c88b73b30b004f1c6b2a674debcf14cc3628cab06"
        },
        {
          "alg": "SHA-384",
          "content": "1ec3018e18b686f662b60049f60d7def9ecede197e5279515906be816643daa8ee91f716e66466d4b1b5f4777ecbe1e8"
        },
        {
          "alg": "SHA3-384",
          "content": "3a1602b516fe782496ad50341be96c9b68de2c70c51c8821cce437124cae564faf78234ae2ef1a023e4d03ad0be53e3b"
        },
        {
          "alg": "SHA3-256",
          "content": "8fa17a9ab1d926bb8534bcde974be9866fa5e111757fb4c951c49ccb06d5b929"
        },
        {
          "alg": "SHA3-512",
          "content": "758108d55816fcade3b8f9bb787023b3de630ff0f2064ea3d5aefacb591434fad4a761334ea5b7c4cc110ce8fa7a12c09ba43c67471f1905ac3eef32fe49b8c5"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.github.jnr/jnr-constants@0.11.0?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/jnr/jnr-constants",
          "type": "website"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.github.jnr/jnr-ffi@2.3.0?type=jar",
      "group": "com.github.jnr",
      "name": "jnr-ffi",
      "version": "2.3.0",
      "description": "A library for invoking native functions from java",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "b75a3d25ac022d065c161fcad5f9b6e9"
        },
        {
          "alg": "SHA-1",
          "content": "fd9b104ecab259c957be9a1bb6cfa595a056c8ce"
        },
        {
          "alg": "SHA-256",
          "content": "3d6170c74e08fee6178579fabdc89e6736d23023e7a22b7d4088880fb518cae8"
        },
        {
          "alg": "SHA-512",
          "content": "d1fb633807f0d98e2c354c01a26953ca24145b2b5622ca6e887d5c1d15e762bd05297325662890b43e4472733b1a3ae0f28973a17df2a5e1805edfa093e9c49a"
        },
        {
          "alg": "SHA-384",
          "content": "738877b6eaf4f639f32ef111799cb29ba8faa5c0c953f104e5d0806acdfe75b4cc6b96ac108d17bcb881d323359839ae"
        },
        {
          "alg": "SHA3-384",
          "content": "7739ecb7fdc3588f9ca47130c0dde681f3cff9d84af5d57ed48f0a9226d16082c43977e8f3ee32570dc98338e34748e4"
        },
        {
          "alg": "SHA3-256",
          "content": "1febb38358827d088cc55584c079e8060cd7f50f1ebf0328eb7974e44a80921b"
        },
        {
          "alg": "SHA3-512",
          "content": "732bfe28640e30fc0b66e0b6e1ad5c9b79f5232420a3efb808fed84426405bf284c007f17e1087cf096749b2436c390c2c1b064ab1d8844a0d2a0b870f1528ef"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.github.jnr/jnr-ffi@2.3.0?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/jnr/jnr-ffi",
          "type": "website"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.github.jnr/jffi@1.4.0?type=jar",
      "group": "com.github.jnr",
      "name": "jffi",
      "version": "1.4.0",
      "description": "Java Foreign Function Interface",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "5ac57484aee2a369940f4cf56f95d718"
        },
        {
          "alg": "SHA-1",
          "content": "5dee1a7550fc212b9e3a61a67b1df784b1611f5a"
        },
        {
          "alg": "SHA-256",
          "content": "d09efb36e0412be7361e2fbbee05e13417c5e851fab6e8b6c8659c5cb9410c0f"
        },
        {
          "alg": "SHA-512",
          "content": "6e928d5198cb676d4bb28bf8f0ae9df5c5bfbe116c20835d00860ff062f05c53f49a5092e8b987041b0297332d4df165786153395c305c354c966fc6375bf5d1"
        },
        {
          "alg": "SHA-384",
          "content": "94e94308b2a8b0b01929c2e3a2edcaf0cdfcf0e97f7406d4ee89d7e9cdd009eaa3f2acc9c122e866c7af2b2a7ffc58fa"
        },
        {
          "alg": "SHA3-384",
          "content": "755852ce9b09c10960689fb3a25b3adee81345e6c7dfb9df73964b69cb98f3894a9af1f44646fd1d23e7cb69e3f1f4c6"
        },
        {
          "alg": "SHA3-256",
          "content": "80db604a08e6fcd8e6fc48a5932497a82a3900cad237d7c556534ca3662148e6"
        },
        {
          "alg": "SHA3-512",
          "content": "edf2f8fa436351bc1c157efbbb64c01025fac622a78914d767f3fcb0601196e907abb02df599d6aeb5cc851aebda61df8d862adea849ba055373ccbbdc660d1c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        },
        {
          "license": {
            "name": "GNU Lesser General Public License version 3",
            "url": "https://www.gnu.org/licenses/lgpl-3.0.txt"
          }
        }
      ],
      "purl": "pkg:maven/com.github.jnr/jffi@1.4.0?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/jnr/jffi",
          "type": "website"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.github.jnr/jffi@1.4.0?classifier=native\u0026type=jar",
      "group": "com.github.jnr",
      "name": "jffi",
      "version": "1.4.0",
      "description": "Java Foreign Function Interface",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "29079bbeeef6148ce8543000017558ed"
        },
        {
          "alg": "SHA-1",
          "content": "ccc14a9b21a9c613b1d7e5313123c3ee1d6de34f"
        },
        {
          "alg": "SHA-256",
          "content": "c389706177511f685998d431467e0c55a9763eb389d7974298a8d08912767d16"
        },
        {
          "alg": "SHA-512",
          "content": "6b2330be569a08540aa400d7992b4a94d4a1693f7311171cc97a373f8a0102c17c7c941acec891b7790a57b3c0a9ea9f732ff5e942884c0fe814556f62dbb3c1"
        },
        {
          "alg": "SHA-384",
          "content": "efedefd85ac7712f6664163cfd68fefbb54ff289590c26bff6fe159558524d2071a5c58470c701366e14912108c74ffc"
        },
        {
          "alg": "SHA3-384",
          "content": "6c50325b668aee925d0416891524716b51d451713b1b01117a19da682ebc5e938a577dd9cb679303a9f84086102bd506"
        },
        {
          "alg": "SHA3-256",
          "content": "4f2fa59665f92dfe8c18db80dc61cb48d2af2eee38c81e3fa8b31dbfb100ee2e"
        },
        {
          "alg": "SHA3-512",
          "content": "c2aa5910c6ecfaab72b97ef14812a86c420d05dae33bb081ba4524e00eaf6245a37f255d29695481f04d1d227e212011e2dccac83aefd667433dd240236cffaa"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        },
        {
          "license": {
            "name": "GNU Lesser General Public License version 3",
            "url": "https://www.gnu.org/licenses/lgpl-3.0.txt"
          }
        }
      ],
      "purl": "pkg:maven/com.github.jnr/jffi@1.4.0?classifier=native\u0026type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/jnr/jffi",
          "type": "website"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.ow2.asm/asm-commons@9.10.1?type=jar",
      "publisher": "OW2",
      "group": "org.ow2.asm",
      "name": "asm-commons",
      "version": "9.10.1",
      "description": "Usefull class adapters based on ASM, a very small and fast Java bytecode manipulation framework",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "8eee0b1bdd046baf472eb83dd5e6bb44"
        },
        {
          "alg": "SHA-1",
          "content": "4229e4c55fd8e01c23f9fe9884075cc628aacc50"
        },
        {
          "alg": "SHA-256",
          "content": "6d0abefb7cbf972ea16edb37ec14835372505063a45f976ab7ea889ed9497895"
        },
        {
          "alg": "SHA-512",
          "content": "8540a8f9a63b22bae54fc501f2da405c2c1c45fa13921a1193629cfbfbb716473f8a19984559af7b0b1ea3814d439ec445ea1cfeb159bf922bb7e60a40acf823"
        },
        {
          "alg": "SHA-384",
          "content": "f5af3084db87003010b4b46ef666ba2b981e1e09dd4c232de731cb71e5e1fd8166e93ad96d63a85f359c82da93c7b7a9"
        },
        {
          "alg": "SHA3-384",
          "content": "e0825b7c5e5815d196d5d2eeebd89221ac2ccac24976892d4ea46413c836e06c015d3c7aec708203a1cdcb2c8041bf97"
        },
        {
          "alg": "SHA3-256",
          "content": "00c38b6149e09b247b84aaae5b01cca589f5464ae76bedc03edfd3bf8c96fe8e"
        },
        {
          "alg": "SHA3-512",
          "content": "80587f5518e9a24fb1a9e2d81d7a96ad35545bbc8e50a162d3b199040536a0457ceb9342b8d4ef762efa4455314e8c6f7d8eefc68afcb84c89365781d0bad83c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/org.ow2.asm/asm-commons@9.10.1?type=jar",
      "externalReferences": [
        {
          "url": "http://asm.ow2.io/",
          "type": "website"
        },
        {
          "url": "https://repository.ow2.org/nexus/service/local/staging/deploy/maven2",
          "type": "distribution"
        },
        {
          "url": "https://gitlab.ow2.org/asm/asm/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://mail.ow2.org/wws/arc/asm/",
          "type": "mailing-list"
        },
        {
          "url": "https://gitlab.ow2.org/asm/asm/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.ow2.asm/asm-analysis@9.10.1?type=jar",
      "publisher": "OW2",
      "group": "org.ow2.asm",
      "name": "asm-analysis",
      "version": "9.10.1",
      "description": "Static code analysis API of ASM, a very small and fast Java bytecode manipulation framework",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "6dd9011ec87f65e4b2e14e938c4118e4"
        },
        {
          "alg": "SHA-1",
          "content": "8d49f14d51f632cb1d87c88d1ceaf50db0d8af1b"
        },
        {
          "alg": "SHA-256",
          "content": "dede75a21306b65974ecd8f87114ff6970f09fb794157a4ca09ab25c888c2bfc"
        },
        {
          "alg": "SHA-512",
          "content": "0542a90be38f81e39ef43a9253630a2d59f82c17c24492f005c67619561308afbbd23bf8504d3e83b1d4cebe5746126da76037473ddac3071b028c2ae279296b"
        },
        {
          "alg": "SHA-384",
          "content": "2ea2f3e3a56fb4db022575571587f359bcaaa737f67d8da090a3162b566275646e3d5cc497680518077888f6b8086183"
        },
        {
          "alg": "SHA3-384",
          "content": "c628dac683022dcd2cdcc8634d147dc0d38e9535147e4ca82a67e68df34c90fab1f8d1aa1bef7602bd1c739b6e4fc491"
        },
        {
          "alg": "SHA3-256",
          "content": "8a6d91fef9a93a7c0bcf7bd0374ab83a8aba0394104718f88a81445ad03be382"
        },
        {
          "alg": "SHA3-512",
          "content": "b6e1087c15aa39dda89655dc4f568e0d5e17a606f31a5fac0f20347561212f724469f21e6c60830299f9bf5ead086d992a749329bbef53c052d923996d1afda8"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/org.ow2.asm/asm-analysis@9.10.1?type=jar",
      "externalReferences": [
        {
          "url": "http://asm.ow2.io/",
          "type": "website"
        },
        {
          "url": "https://repository.ow2.org/nexus/service/local/staging/deploy/maven2",
          "type": "distribution"
        },
        {
          "url": "https://gitlab.ow2.org/asm/asm/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://mail.ow2.org/wws/arc/asm/",
          "type": "mailing-list"
        },
        {
          "url": "https://gitlab.ow2.org/asm/asm/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.ow2.asm/asm-tree@9.10.1?type=jar",
      "publisher": "OW2",
      "group": "org.ow2.asm",
      "name": "asm-tree",
      "version": "9.10.1",
      "description": "Tree API of ASM, a very small and fast Java bytecode manipulation framework",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "62541e1dc62331408ef31317555bf4fa"
        },
        {
          "alg": "SHA-1",
          "content": "e244332a17564c1d1572449399a842de35881be2"
        },
        {
          "alg": "SHA-256",
          "content": "3dfb0d5b6a106cd40b5b250e39935fbf2f927f4477546a5369a3ac609cf0506b"
        },
        {
          "alg": "SHA-512",
          "content": "2ffe5bbfac53bbacc1e4e474628b4247fb1c5f592017f393a327b3f2d2a72a338263f2f6549a42cea57a42f676b967153a10a22aae46affed83608f74daf3768"
        },
        {
          "alg": "SHA-384",
          "content": "847b70b47e73412531dbe8a4d2d8249accbc26ee6c51878f2d49ba16d6d7b7cebde1f09d1b2810b3b3f9ccf1fe50bdbf"
        },
        {
          "alg": "SHA3-384",
          "content": "15b57ecebed0cd80a0bba96ba7bb45ccc0c88ba76fb7b721a37407899c7d9f7f6ff6a1608b04a83d4c84f6fc1c777fc0"
        },
        {
          "alg": "SHA3-256",
          "content": "caa1fbee0889f0a23d84920e0b129c63f04f0b9f459a46f1e4759f8071756f3f"
        },
        {
          "alg": "SHA3-512",
          "content": "d7439f4f4d4b34caf02932ea6434f80748038a16375241ac8f28e145e06dc79d4a15d12585f533dfccf86440f55bc7001f6ad6f696e0b2c78f9741be35d12b2e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/org.ow2.asm/asm-tree@9.10.1?type=jar",
      "externalReferences": [
        {
          "url": "http://asm.ow2.io/",
          "type": "website"
        },
        {
          "url": "https://repository.ow2.org/nexus/service/local/staging/deploy/maven2",
          "type": "distribution"
        },
        {
          "url": "https://gitlab.ow2.org/asm/asm/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://mail.ow2.org/wws/arc/asm/",
          "type": "mailing-list"
        },
        {
          "url": "https://gitlab.ow2.org/asm/asm/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.ow2.asm/asm-util@9.10.1?type=jar",
      "publisher": "OW2",
      "group": "org.ow2.asm",
      "name": "asm-util",
      "version": "9.10.1",
      "description": "Utilities for ASM, a very small and fast Java bytecode manipulation framework",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "d0892ecb209867805e7d2418e5dc6c42"
        },
        {
          "alg": "SHA-1",
          "content": "7bb9d450e8d4cbf9f9e04096c44bbfe7fba80b15"
        },
        {
          "alg": "SHA-256",
          "content": "1bb99d091fba2597dc6d51193e9bbcf0d8447e7ed96bd8f0198b18152f09655c"
        },
        {
          "alg": "SHA-512",
          "content": "7330ded981ddeb01b302cba12d56b419207b6b02ebfaf814cbbc3d2d2d1055e055294ce108ac9e4de9e1d0f3c4e0064f133e87e8085922241c1a2e5fa1fedd2c"
        },
        {
          "alg": "SHA-384",
          "content": "b5cb85ec0ea75e131e6b36f16fa70b83f6453a113e2d26f1dd98c43e9de2842dd1d699db8b64e7b0062aaa0ce9690137"
        },
        {
          "alg": "SHA3-384",
          "content": "219222dbe46404adf68e451689645b611ef102f2ffd911c9c6495212fd1ca0ea44835786b96c166db24bad2119398f30"
        },
        {
          "alg": "SHA3-256",
          "content": "c94d09d3f74706ba73cf2fa9d58167d0b50add082fb72b5821d36aee6d0a8d7f"
        },
        {
          "alg": "SHA3-512",
          "content": "00a24d0a2e6feb1877f3662f3678397f1e904527b17dc12fdece673c9e99d936aab22ae48b2b9fa1f22c6a808d0c413e640d1957066086fb8c1159ee16472944"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/org.ow2.asm/asm-util@9.10.1?type=jar",
      "externalReferences": [
        {
          "url": "http://asm.ow2.io/",
          "type": "website"
        },
        {
          "url": "https://repository.ow2.org/nexus/service/local/staging/deploy/maven2",
          "type": "distribution"
        },
        {
          "url": "https://gitlab.ow2.org/asm/asm/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://mail.ow2.org/wws/arc/asm/",
          "type": "mailing-list"
        },
        {
          "url": "https://gitlab.ow2.org/asm/asm/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.github.jnr/jnr-a64asm@1.0.0?type=jar",
      "group": "com.github.jnr",
      "name": "jnr-a64asm",
      "version": "1.0.0",
      "description": "A pure-java A64 assembler",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "6cb469cbbcf9eca78d50f7da595a8337"
        },
        {
          "alg": "SHA-1",
          "content": "0a1cb8dbe71b5a6a0288043c3ba3ca64545be165"
        },
        {
          "alg": "SHA-256",
          "content": "53ae5ea7fa5c284e8279aa348e7b9de4548b0cae10bfd058fa217c791875e4cf"
        },
        {
          "alg": "SHA-512",
          "content": "922bdf2883c6a9cd6491289020d404ab151fd9ffa78d2ec884a2ac3af739d397016f1f4596c3e6c58744ea600fdbc2d330c8f520a1a9ab0eef6af6b667b35b89"
        },
        {
          "alg": "SHA-384",
          "content": "933298b61960f09eccb672a0622a93a721d06cf85cdb29500ff6efdf874bad7b08aede29b6cf3b51141c16b38b250be2"
        },
        {
          "alg": "SHA3-384",
          "content": "2a7231c649f4805d34eb19c7e6b6dbb5ecdb663e29ef69a4523e2f7d2ae70740ca3aa03eba3476960d0fe344ea45df2d"
        },
        {
          "alg": "SHA3-256",
          "content": "fc270fd94a4e2b4fb1a9e4dd42ff4600c94e226ef3431aee998a915b62eb19ae"
        },
        {
          "alg": "SHA3-512",
          "content": "8ee64fec1b5e93ff9c2b596c0345ef120479217bea95d669c6e17f338a45945545b546813af2f58920a6bb2d607bd004870d10c8660a516261288d9f555fc850"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.github.jnr/jnr-a64asm@1.0.0?type=jar",
      "externalReferences": [
        {
          "url": "http://nexus.sonatype.org/oss-repository-hosting.html/jnr-a64asm",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.github.jnr/jnr-x86asm@1.0.2?type=jar",
      "group": "com.github.jnr",
      "name": "jnr-x86asm",
      "version": "1.0.2",
      "description": "A pure-java X86 and X86_64 assembler",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "00670735acb2a9d1421b506dc7d338bc"
        },
        {
          "alg": "SHA-1",
          "content": "006936bbd6c5b235665d87bd450f5e13b52d4b48"
        },
        {
          "alg": "SHA-256",
          "content": "39f3675b910e6e9b93825f8284bec9f4ad3044cd20a6f7c8ff9e2f8695ebf21e"
        },
        {
          "alg": "SHA-512",
          "content": "e928926b01ce545144c1bbf160edee9b923773e32f9a399a71c2ab5e8325d9cbcfb41f41c8f008b80d1beab8da1c4b74845996479c07ed73bc131959911d4762"
        },
        {
          "alg": "SHA-384",
          "content": "91839815885716f1202a824b195a475d4d7561690192b42cf05b8c6432556a3e7e2dab13b6e970986a97711fb7060844"
        },
        {
          "alg": "SHA3-384",
          "content": "ed27f9b39907e92805c2d6ae6a045e00e24f51544501df3b98b593177df4fe55fee2347c668df66c2ea6fae64c66ee0c"
        },
        {
          "alg": "SHA3-256",
          "content": "f2e4e4807f6674a5b428cebdbdd01e8cadbeee71b785a046bec2bec1de63a41b"
        },
        {
          "alg": "SHA3-512",
          "content": "0dfffcf0daac9513b347ab8bf22887360feea890428e12857d7d3400400ba498fdc61307d9fd9c6a5e1baa9a96279afc07bba08c6229ed4ede71569d710fd0f6"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/license/mit/"
          }
        }
      ],
      "purl": "pkg:maven/com.github.jnr/jnr-x86asm@1.0.2?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/jnr/jnr-x86asm",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.github.jnr/jnr-unixsocket@0.39.2?type=jar",
      "group": "com.github.jnr",
      "name": "jnr-unixsocket",
      "version": "0.39.2",
      "description": "UNIX socket channels for java",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "12e04e672c5acc26d7f4896295e3791c"
        },
        {
          "alg": "SHA-1",
          "content": "c5dc78e28ab006e830e29b120353910970c33da1"
        },
        {
          "alg": "SHA-256",
          "content": "d05d662592ce8af99740094d9289acec1312078d655a9386f6f3d2fad669c23c"
        },
        {
          "alg": "SHA-512",
          "content": "8632483070b674f77175596c24e6a8850c51066eb775e2e3b10c8ef2d8272c46a36499a0e010524ea65c36f90970a9447e10d1b48ae1fc043ddb16459d438f5f"
        },
        {
          "alg": "SHA-384",
          "content": "40bd1346659d56cead087e5e633c2f9755ac18dd263ffe83914e6db65d34eed31d4a4033d46ad0ea74f812bad8f59f98"
        },
        {
          "alg": "SHA3-384",
          "content": "fe2441a45d1404a1f8a250f2c4cf0d9f4558615af8e6d5cd74d4ca3718d9b25edfad8d6b30cd549398fb47ef64625b8b"
        },
        {
          "alg": "SHA3-256",
          "content": "d0d0b9a890297fc6adbc1c68905679f97428ab7407d87e69516304b3660f8d78"
        },
        {
          "alg": "SHA3-512",
          "content": "04e32884475640d9070126e5864f6219119cb0973bd143e21730d0294e415703d5b6e2a1e329879c5f3fd14c10aa9f52de0e504aca5c406f9b9ca3063e61a196"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.github.jnr/jnr-unixsocket@0.39.2?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/jnr/jnr-unixsocket",
          "type": "website"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.github.jnr/jnr-posix@3.2.1?type=jar",
      "group": "com.github.jnr",
      "name": "jnr-posix",
      "version": "3.2.1",
      "description": "Common cross-project/cross-platform POSIX APIs",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "72e3bb177ae1c6709fd643ea400fa9d3"
        },
        {
          "alg": "SHA-1",
          "content": "af4f42e3ce01b2dd8bb8fc95c11ee13a3b7fcc55"
        },
        {
          "alg": "SHA-256",
          "content": "8382256523dd103f604b940456449963baa8b8f3e57f89a71ecbb2f0074268ae"
        },
        {
          "alg": "SHA-512",
          "content": "924049c2f465458596abe1c75ebd012e5d614df086c40674aca67c8cb6cafea4178fd62d61864f4e0e9ad68587cd55fd31c2b882bde3d8575ea851fbf43aad9c"
        },
        {
          "alg": "SHA-384",
          "content": "6922ea61f9038c228154771ed532fc202d5f61bb78bdaf94115c80a67d81c937e45746d055cb604432448fec6f2d3ed8"
        },
        {
          "alg": "SHA3-384",
          "content": "70871ba8c2862f06015e68930d8932170c0ab6504e5bf8468019180f5914ae003691d1ad9f5234f3675fc8b20513f1db"
        },
        {
          "alg": "SHA3-256",
          "content": "c83bf6c5e0c543323336b42c18127ba1adea39be1b0990eb9f0706d859b45013"
        },
        {
          "alg": "SHA3-512",
          "content": "8b43d899d724fafce9945ca4428ae20dd57f2d11d36045ceffbd28513743eb1728523789642980f734f662b76232977f809ee1c1156ab176b94cadc8e3070d86"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "name": "GNU General Public License Version 2",
            "url": "http://www.gnu.org/copyleft/gpl.html"
          }
        },
        {
          "license": {
            "name": "GNU Lesser General Public License Version 2.1",
            "url": "http://www.gnu.org/licenses/lgpl.html"
          }
        }
      ],
      "purl": "pkg:maven/com.github.jnr/jnr-posix@3.2.1?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/jnr/jnr-posix",
          "type": "website"
        },
        {
          "url": "http://github.com/jnr/jnr-posix/issues",
          "type": "issue-tracker"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.http-client/google-http-client@2.2.0?type=jar",
      "publisher": "Google",
      "group": "com.google.http-client",
      "name": "google-http-client",
      "version": "2.2.0",
      "description": "Google HTTP Client Library for Java. Functionality that works on all supported Java platforms, including Java 7 (or higher) desktop (SE) and web (EE), Android, and Google App Engine.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "2361b215989253ba873b1955cc4aa688"
        },
        {
          "alg": "SHA-1",
          "content": "8321c1af1e7c5ce9ffb243b9bbe90c56fa60de9d"
        },
        {
          "alg": "SHA-256",
          "content": "36cea7079c550aeb12fa7366a1ae65d503eaf15bcfc4f50124fde2a8f784e568"
        },
        {
          "alg": "SHA-512",
          "content": "bab5ff46ea114de8c3945a3b110ebbd136c8ef31236e618a1d71983dc1b3ba0b777683cc9fe8dbc34a5419067a6e8da47b6911e0a904104b808cea5d272e2cc4"
        },
        {
          "alg": "SHA-384",
          "content": "7d6c457b030ef5f6b9a779db363e7a5446dc3a35b7aa06aa91fbe7756bec73587312751822bc75141d9550d7c9467d2d"
        },
        {
          "alg": "SHA3-384",
          "content": "836f4172fc69af599f7674b68faafd935ecdaa759c08eacd55a2e5c777fb1101a8d1c87aff89d0ec38514e99de91ddf6"
        },
        {
          "alg": "SHA3-256",
          "content": "fbfeafb0b89421a31956758d862193005faf650508bfb2dd0b87c3892ddb6a6e"
        },
        {
          "alg": "SHA3-512",
          "content": "3853e94e0d26a2839fba7de981ccfb3aee23fadf5c4b6d22c9b690eb2cc81b4095e76dc5efdda869f84f83166193f1c80aca84edfc5cd0e671a338be57039bde"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.http-client/google-http-client@2.2.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/googleapis/google-http-java-client/google-http-client",
          "type": "website"
        },
        {
          "url": "https://google.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/googleapis/google-http-java-client/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/googleapis/google-http-java-client/google-http-client",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.httpcomponents",
      "name": "httpcore",
      "version": "4.4.16",
      "description": "Apache HttpComponents Core (blocking I/O)",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "28d2cd9bf8789fd2ec774fb88436ebd1"
        },
        {
          "alg": "SHA-1",
          "content": "51cf043c87253c9f58b539c9f7e44c8894223850"
        },
        {
          "alg": "SHA-256",
          "content": "6c9b3dd142a09dc468e23ad39aad6f75a0f2b85125104469f026e52a474e464f"
        },
        {
          "alg": "SHA-512",
          "content": "168026436a6bcf5e96c0c59606638abbdc30de4b405ae55afde70fdf2895e267a3d48bba6bdadc5a89f38e31da3d9a9dc91e1cab7ea76f5e04322cf1ec63b838"
        },
        {
          "alg": "SHA-384",
          "content": "ba9ceaee1a37ca3201d6a1315ecb0327b495489efd0baa155c219c475df8d3eb69fe77ab0026563db406497626da6562"
        },
        {
          "alg": "SHA3-384",
          "content": "b9dc44dcc7cc86d5036f26d54c4003a2d72808ae7b07a0808bb53505c6d4281b5ad213eb1f3d0fef1113dec57cb0dfe1"
        },
        {
          "alg": "SHA3-256",
          "content": "fd8ab51846476c6c18822151c9ec07b39a9633010b5d20ea937fc6910407bc64"
        },
        {
          "alg": "SHA3-512",
          "content": "b42fa528242981a9d70e4f68ab75a24292df5112c44c21b6f18cb9201ce747885ba1d4dc69bc3d14d0da46a6c2638f937c11bc45749abeb55dc89ddada90cdda"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar",
      "externalReferences": [
        {
          "url": "http://hc.apache.org/httpcomponents-core-ga",
          "type": "website"
        },
        {
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2",
          "type": "distribution"
        },
        {
          "url": "http://issues.apache.org/jira/browse/HTTPCORE",
          "type": "issue-tracker"
        },
        {
          "url": "http://mail-archives.apache.org/mod_mbox/hc-httpclient-users/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/apache/httpcomponents-core/tree/4.4.16/httpcore",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.grpc/grpc-context@1.70.0?type=jar",
      "group": "io.grpc",
      "name": "grpc-context",
      "version": "1.70.0",
      "description": "gRPC: Context",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "b7e575dcff9de5208d81a29566a3d76a"
        },
        {
          "alg": "SHA-1",
          "content": "375570c198b9ff46f2202731d11271bb5cb396fa"
        },
        {
          "alg": "SHA-256",
          "content": "eb2824831c0ac03e741efda86b141aa863a481ebc4aaf5a5c1f13a481dbb40ff"
        },
        {
          "alg": "SHA-512",
          "content": "430cd53a07173fcfe8ac65d0b6f682a30eb7a50df9c33850a39dd2d48a159e63afec1e430471aeeb00c9c88e2354d4d5c456e451309ef5640c91a73def197fb7"
        },
        {
          "alg": "SHA-384",
          "content": "abf8b56a9d9848ec73c2567f1fca13bbb77e5c106b216a8112347b057caa2d9793804d6f1e1f235c9433fb7edd1c27a2"
        },
        {
          "alg": "SHA3-384",
          "content": "5c4c6b820f489296a340822b6891773e5d801d7e266f5ecde111b85c53be9e965094e80b98a396858c6fe2672688caf0"
        },
        {
          "alg": "SHA3-256",
          "content": "fa505119427ecd73239a401444f43654b5e7d2ed7c78a6bd7407b1d9f5cc3a58"
        },
        {
          "alg": "SHA3-512",
          "content": "56d7389a20562d264b1b759a7f0ff7057b3f832eee5a57eba65d4f2ba878fe7d1569b44ea22e42c9ae0abf5a79506a8dccffe5f51ce56563812d53442395e115"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.grpc/grpc-context@1.70.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/grpc/grpc-java",
          "type": "website"
        },
        {
          "url": "https://github.com/grpc/grpc-java",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.opencensus/opencensus-api@0.31.1?type=jar",
      "group": "io.opencensus",
      "name": "opencensus-api",
      "version": "0.31.1",
      "description": "null",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "a5e7092bb89baaaee424f5a7b20d1bad"
        },
        {
          "alg": "SHA-1",
          "content": "66a60c7201c2b8b20ce495f0295b32bb0ccbbc57"
        },
        {
          "alg": "SHA-256",
          "content": "f1474d47f4b6b001558ad27b952e35eda5cc7146788877fc52938c6eba24b382"
        },
        {
          "alg": "SHA-512",
          "content": "aac98ed2de298609bac9cb5a69ac16df0ca9c9fc82f429720ddcfdd769fdae96b707ed81c8d8c37380de846b302aacaac80156ef75567061aed3f77cc3c3b725"
        },
        {
          "alg": "SHA-384",
          "content": "d8dfdbc7d584809f00b5a4239cbaf575e8924a176e92a44230e8ac1e9dc85e458b63fad69b0b445d8d2e8c1a70e7633a"
        },
        {
          "alg": "SHA3-384",
          "content": "5cb3db9b30adb23c2b33ce0ded61a69e5347a4531d0563fc9185aba11aab7a639bf40286fc8d0f52a73c50add15775c7"
        },
        {
          "alg": "SHA3-256",
          "content": "733221e8a1dc4476c53fee92837757bfd468afe25f57bbce79d25c60f2e240f6"
        },
        {
          "alg": "SHA3-512",
          "content": "cdb61cef7324e1173f297867ec9274c6439779cdd674a442d26724de047258a64f3f76ad4e496f7afde785b5dbdf5d03f0b0f1d4424868cf14ebc1fd3b63dc76"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.opencensus/opencensus-api@0.31.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/census-instrumentation/opencensus-java",
          "type": "website"
        },
        {
          "url": "https://github.com/census-instrumentation/opencensus-java",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.opencensus/opencensus-contrib-http-util@0.31.1?type=jar",
      "group": "io.opencensus",
      "name": "opencensus-contrib-http-util",
      "version": "0.31.1",
      "description": "null",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "9ecc9c428eb87dc734ae8d07b820ce26"
        },
        {
          "alg": "SHA-1",
          "content": "3c13fc5715231fadb16a9b74a44d9d59c460cfa8"
        },
        {
          "alg": "SHA-256",
          "content": "3ea995b55a4068be22989b70cc29a4d788c2d328d1d50613a7a9afd13fdd2d0a"
        },
        {
          "alg": "SHA-512",
          "content": "3192532e4989a26d9a69f4246ef994b35058d155e199b500196d14427d1b46b1515f872a36500cb84768524870297388c90272ffa61dc8448f6f7571c4f86b27"
        },
        {
          "alg": "SHA-384",
          "content": "46f9dcc71f71f33be99a00fdd9a2ba602eb547b56b6e8177660d3a44d3dd974609bf16d2a1b58359a0f39797cb3ee683"
        },
        {
          "alg": "SHA3-384",
          "content": "21d66f5efa2511de4e4b4f3ea18d37aeb954ea1b4315f1e11cd84a11a95e9bb9841addee4d1230c3813f06144a675a1c"
        },
        {
          "alg": "SHA3-256",
          "content": "8352c7dcd73fced7e49425d70f6955579f5c24fafd4529e5f5e54ef5a88a3c83"
        },
        {
          "alg": "SHA3-512",
          "content": "f8ec86e5728b9acbdaa684cbf385ab3834006e44363de43f9af4b50dca71d4e0d77d0d8b2e7bb97435581dda6572691b1d263835e4e97256999df550b9efc13b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.opencensus/opencensus-contrib-http-util@0.31.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/census-instrumentation/opencensus-java",
          "type": "website"
        },
        {
          "url": "https://github.com/census-instrumentation/opencensus-java",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.http-client/google-http-client-gson@2.2.0?type=jar",
      "publisher": "Google",
      "group": "com.google.http-client",
      "name": "google-http-client-gson",
      "version": "2.2.0",
      "description": "Google HTTP Client Library for Java",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "597bf140f23203562b33345fc43a4c9c"
        },
        {
          "alg": "SHA-1",
          "content": "2e991335e2fed8f78fde7e52834dcbae4659d3d5"
        },
        {
          "alg": "SHA-256",
          "content": "3242dc7e91d355d118a355c5d586271bedfeb84c3f2f6fa2f3b9b42503a4dc59"
        },
        {
          "alg": "SHA-512",
          "content": "375a33499f1f014c93b5de4c3f9b15ebab9f9c39b9f7692830d6c8e78451abe53c908dfd4ad9c2eceb1ba9ba343c984d6f787b3a3a89f7b9f3a637ee2292c6a4"
        },
        {
          "alg": "SHA-384",
          "content": "979d06fe09abfe7b8f4071832ecc61470b7d5ed42bd0b0ec17d2d91dfca3ebe3f5adee74b1b845db81176d4052b8efed"
        },
        {
          "alg": "SHA3-384",
          "content": "b87967590cab3a4c798c86adaca4316b4c5be160e86a6b27a743f9a347e0acec4a3119564d8c2fc7b70fb096662631fd"
        },
        {
          "alg": "SHA3-256",
          "content": "3551c67ad9890e610084dae984c27e759d6a5d720e795a4f66ec5fa4a56a71fe"
        },
        {
          "alg": "SHA3-512",
          "content": "bd9ae0748949e34866129d94c55a3b2798d83039b6af63f0ad81a56855c0852dc24eeb4533983a9e6ddd1b7a04d7604cd0a1d7d7b3324dcf57cd24c2dbbfb24f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.http-client/google-http-client-gson@2.2.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/googleapis/google-http-java-client/google-http-client-gson",
          "type": "website"
        },
        {
          "url": "https://google.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/googleapis/google-http-java-client/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/googleapis/google-http-java-client/google-http-client-gson",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.api-client/google-api-client@2.9.0?type=jar",
      "publisher": "Google",
      "group": "com.google.api-client",
      "name": "google-api-client",
      "version": "2.9.0",
      "description": "The Google APIs Client Library for Java is a Java client library for accessing any HTTP-based API on the web",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "ea5f238f3ad4f44eb2261e66a2dcfc9d"
        },
        {
          "alg": "SHA-1",
          "content": "d5729efe51f8d0d03314749079921ddf69507082"
        },
        {
          "alg": "SHA-256",
          "content": "461377a5c904e8e4e0091cd1b4752bc9ef58b7223d608886d9642436d4b21273"
        },
        {
          "alg": "SHA-512",
          "content": "f2071c5d1da4220d3ea1127802cb569ba5558cedc820f092d1db44a52a60bf444eb523a1593335a12f7dab5f9f1942b1d3f989850d6e35419b52ee28c9743b6e"
        },
        {
          "alg": "SHA-384",
          "content": "6b9cfcf0a7dd6fd93b5bb8d77457a7994144f971a4cd6c82e024b34879c0cc03d6a8e873e6f886be16604161204153f5"
        },
        {
          "alg": "SHA3-384",
          "content": "832023844ea373aa06b8a59ed71a77b5189c86ee8d6b2a8bff66bf9a19868475f39a8739210af63cca01c241d02a029c"
        },
        {
          "alg": "SHA3-256",
          "content": "1125d8a859a8dff49278597119cf238a26513c2c784ae5b83791d44aa0e77bda"
        },
        {
          "alg": "SHA3-512",
          "content": "5058fe8f99b63f9fe25e76d04be905f0c39910afc3e1dabaa3a75837455e2ba324d78270dffef52b15bbd2653e2ccaaf684479df512118092e0b56a5c8db0692"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.api-client/google-api-client@2.9.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/googleapis/google-api-java-client/google-api-client",
          "type": "website"
        },
        {
          "url": "https://github.com/googleapis/google-api-java-client/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/googleapis/google-api-java-client/google-api-client",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.http-client/google-http-client-apache-v2@2.0.0?type=jar",
      "publisher": "Google",
      "group": "com.google.http-client",
      "name": "google-http-client-apache-v2",
      "version": "2.0.0",
      "description": "Google HTTP Client Library for Java",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "2eea96e72c1d01d74e0f93c9b677519b"
        },
        {
          "alg": "SHA-1",
          "content": "9d7ec2f47541ac747bce141c0d04b07c01a9f820"
        },
        {
          "alg": "SHA-256",
          "content": "9dfeedb952d2f0351dabc3327c42d87431acba63ad15eee272282af56ec033ab"
        },
        {
          "alg": "SHA-512",
          "content": "a6c7f96546105edbeff39373eace61893f0c53a6efca1de071ee481ca0a2b8845c2c5fc7c0f8a24f9dd7a0a1e69e177ac00f28aefbf54aca29a681470a523a17"
        },
        {
          "alg": "SHA-384",
          "content": "c5e0867f05fa5961d761c57a0f2a799bb20b3544a35ff5192ed17e220c07e43fc5eba7a9758130c0976d48f854790bd0"
        },
        {
          "alg": "SHA3-384",
          "content": "08a2b32fa6656f17a65983de440a7789c904616371458f200a8bbf7e8b9dbabd5c8720e9d83a490247289d6759e89cb3"
        },
        {
          "alg": "SHA3-256",
          "content": "edd458343dec03285dcedf4a29f094678b9295085dba2b9c7ab13faa06e80c3c"
        },
        {
          "alg": "SHA3-512",
          "content": "cda69daafb9b6743c32b3a4e9c1267454c98d35102fb1534d4dd0d7b4f6ee28f89c2d8121ec00155d35324e73b9e22ad32e437072d49075187b7d79f2e95fdb4"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.http-client/google-http-client-apache-v2@2.0.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/googleapis/google-http-java-client/google-http-client-apache-v2",
          "type": "website"
        },
        {
          "url": "https://google.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/googleapis/google-http-java-client/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/googleapis/google-http-java-client/google-http-client-apache-v2",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.apis/google-api-services-sqladmin@v1beta4-rev20260627-2.0.0?type=jar",
      "publisher": "Google",
      "group": "com.google.apis",
      "name": "google-api-services-sqladmin",
      "version": "v1beta4-rev20260627-2.0.0",
      "description": "Sonatype helps open source projects to set up Maven repositories on https://oss.sonatype.org/",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "c04a4d50e8a945fd2c632a6cc257beb2"
        },
        {
          "alg": "SHA-1",
          "content": "9c1fbf968a701459e57d605859fd0668e047cc9f"
        },
        {
          "alg": "SHA-256",
          "content": "a68711e044bbddfa065186d0aef7f3f9a1d3dda756a54f02a9a5cbf31ce12687"
        },
        {
          "alg": "SHA-512",
          "content": "721ff2092e525cf16fd87f8aa20f061ab31cbd71c79cc2ea0794418569b6714d9e2ffcb3be7e4bbb383ef84fa9dcc0c130cc165a4ef1234635935e6807330be1"
        },
        {
          "alg": "SHA-384",
          "content": "22c09a198bb031b9588bea2e946343df799712a60d92428e6b9c50b8597033eb1bfb47378176f36e24e304c655d24326"
        },
        {
          "alg": "SHA3-384",
          "content": "6bbf7273781f9086b5b3bf44ef76d216753a1ed97618010c1da6bb6cd693526bb15c004455fe39f6eed14f768d567d44"
        },
        {
          "alg": "SHA3-256",
          "content": "e9650503753a6996adc20e44e789f50539b01e38a8753b5ead32a7d1478dc426"
        },
        {
          "alg": "SHA3-512",
          "content": "728b1acf690bf91fe82d26b63c0ac1855d815b8e09249b913a779b98be3c8b9e958c600c8905ec539a1a60540a8535bfe206d3fb81d1cee8d88542c73427f3bf"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.apis/google-api-services-sqladmin@v1beta4-rev20260627-2.0.0?type=jar",
      "externalReferences": [
        {
          "url": "http://nexus.sonatype.org/oss-repository-hosting.html/google-api-services-sqladmin",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "http://svn.sonatype.org/spice/tags/oss-parent-7/google-api-services-sqladmin",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.auth/google-auth-library-credentials@1.49.0?type=jar",
      "publisher": "Google",
      "group": "com.google.auth",
      "name": "google-auth-library-credentials",
      "version": "1.49.0",
      "description": "Client libraries providing authentication and authorization to enable calling Google APIs.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "71257df0f8f22cbaec480f18c6175129"
        },
        {
          "alg": "SHA-1",
          "content": "c3235c6d96de203dc6f30b3404a389de768eec10"
        },
        {
          "alg": "SHA-256",
          "content": "a32008bf4643ccabfa5da38f1b40f047675e739a32447a58203ea52f2b3866ca"
        },
        {
          "alg": "SHA-512",
          "content": "ec5a9a73363eafd8375245dd04b403960636998a12690b962078f93b3c5f3fec453fb2041a87cfe1fe9f5a13c85f5eea2a2de7eaeaffae0a5b6bea84cf2c67a5"
        },
        {
          "alg": "SHA-384",
          "content": "2dc5d381d26e7457563e4aaf0c36d5e4ec272562664172b6eee2d56748c9dd3a70af3c92198a126780e7b0cb9d9b422d"
        },
        {
          "alg": "SHA3-384",
          "content": "68149c5a7fa9be9509d35fecc60278ce06b87e3dc5e961e549ad5d7687b53536c833b241460ba24082c1e07c60ead3ac"
        },
        {
          "alg": "SHA3-256",
          "content": "d10a371c325d8ecdac1f1a01f47aa4ad56159fd5ae0c45fa577d53cd28aa8fa7"
        },
        {
          "alg": "SHA3-512",
          "content": "995c0d04a1f885e1dde81c9b304b1899133fc38e1f9d49b40cf11ff68c9f6e26bedb03f6bf7597a33bb1593dd1698beb589d84c2e4a0f9ef41192d43101d98af"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/com.google.auth/google-auth-library-credentials@1.49.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/googleapis/google-cloud-java/google-auth-library-credentials",
          "type": "website"
        },
        {
          "url": "https://google.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/googleapis/java-shared-config/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/googleapis/google-cloud-java/google-auth-library-credentials",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.auth/google-auth-library-oauth2-http@1.49.0?type=jar",
      "publisher": "Google",
      "group": "com.google.auth",
      "name": "google-auth-library-oauth2-http",
      "version": "1.49.0",
      "description": "Client libraries providing authentication and authorization to enable calling Google APIs.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "6f0002932c04785f9aa88249ea70b2d0"
        },
        {
          "alg": "SHA-1",
          "content": "72e4084e7e933d634f4145db092d4df925e932b2"
        },
        {
          "alg": "SHA-256",
          "content": "1aed82b028537e7cb38815df5b5ee10fe3f2203a742cfbc417ae51e9a4315c47"
        },
        {
          "alg": "SHA-512",
          "content": "7b26adb1b0c504aee3be1dedca16cb2ef39d4943fc00998a84626a839df32786498fdcc2eb5f361222be745314ce8d189e2dc04cdb7102b6277dc3252c82415e"
        },
        {
          "alg": "SHA-384",
          "content": "edff88b9b57685c5900a8a43561239d84a4452c29fcf475e4443a1fac3f2a760994c17d390ca17ed7862eebd8f0e5593"
        },
        {
          "alg": "SHA3-384",
          "content": "38b8436e0949c5c20621b02878603e67c0e4dc45e98e635024ff5b84f12f5dc24213eac06cc9437102a3354694a3bf5e"
        },
        {
          "alg": "SHA3-256",
          "content": "45c614fd189a251bb478094eaae6bc14b5e36167dc9d1a5c6923968655c94af1"
        },
        {
          "alg": "SHA3-512",
          "content": "10b12e49acaaff9b19a8f4783340924a288341b33704f4c9c9dd277ce1de2ea9172bb472cbd9ead0dadedd7f381f58f132268de7fe03f99981c6ecf4a0fddca5"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/com.google.auth/google-auth-library-oauth2-http@1.49.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/googleapis/google-cloud-java/google-auth-library-oauth2-http",
          "type": "website"
        },
        {
          "url": "https://google.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/googleapis/java-shared-config/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/googleapis/google-cloud-java/google-auth-library-oauth2-http",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.api/api-common@2.65.0?type=jar",
      "publisher": "Google LLC",
      "group": "com.google.api",
      "name": "api-common",
      "version": "2.65.0",
      "description": "Common utilities for Google APIs in Java",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "5c4b69b856a9a695c7bfbff85a29ffaf"
        },
        {
          "alg": "SHA-1",
          "content": "6d37d2174c9990d01eed6d3442266831f829ee59"
        },
        {
          "alg": "SHA-256",
          "content": "c89999349fe57e863d1fc51057a7316e986eed4a9e93afcc51709bebf4b5815f"
        },
        {
          "alg": "SHA-512",
          "content": "223cb7f3492f2a5ee2e138d5a1dc891f818fa7945531887b5016b4fd696ea322319137ee1df6782fe605d9baf739671c7cb667720930f9d56c1df330e7451956"
        },
        {
          "alg": "SHA-384",
          "content": "43b49adaecb1edf30013316382c3a61e842cd6e2839fd67c986df6d4b3d9c2ad6470edde2e75c5e7367068c9205a8ebb"
        },
        {
          "alg": "SHA3-384",
          "content": "ec30067c25f99573b0b8985fda353e5bc1231816b3eded9ab5432d521136bae6f655c5ac7b3944a1447e8b0d9409dd3b"
        },
        {
          "alg": "SHA3-256",
          "content": "8cd2d334597903c7ba1133d4056cc829db2230be908e4b40e1598159c48048c2"
        },
        {
          "alg": "SHA3-512",
          "content": "1635421f84b92c0cb2735ac085af00c53e5dfee65b1a7e09f3c1c45be759e279574fe23da90272bd3149022359162690cfcec163c23ae9f86777b728239622f3"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/com.google.api/api-common@2.65.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/googleapis/sdk-platform-java",
          "type": "website"
        },
        {
          "url": "https://google.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/googleapis/sdk-platform-java/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/googleapis/sdk-platform-java",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/javax.annotation/javax.annotation-api@1.3.2?type=jar",
      "publisher": "GlassFish Community",
      "group": "javax.annotation",
      "name": "javax.annotation-api",
      "version": "1.3.2",
      "description": "Common Annotations for the JavaTM Platform API",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "2ab1973eefffaa2aeec47d50b9e40b9d"
        },
        {
          "alg": "SHA-1",
          "content": "934c04d3cfef185a8008e7bf34331b79730a9d43"
        },
        {
          "alg": "SHA-256",
          "content": "e04ba5195bcd555dc95650f7cc614d151e4bcd52d29a10b8aa2197f3ab89ab9b"
        },
        {
          "alg": "SHA-512",
          "content": "679cf44c3b9d635b43ed122a555d570292c3f0937c33871c40438a1a53e2058c80578694ec9466eac9e280e19bfb7a95b261594cc4c1161c85dc97df6235e553"
        },
        {
          "alg": "SHA-384",
          "content": "fc0058495e54efb6e05a34e3ff422e7c8347bcc77d6d9b87e9253424968dee6ef6a215c318d7e54f8705276be81f0682"
        },
        {
          "alg": "SHA3-384",
          "content": "ed6464b715de6ced0d9981a3f28140824946a4b7a02ffaff6116c833bb36e8f77a6282ce63c0d82cfe841d4fd6916891"
        },
        {
          "alg": "SHA3-256",
          "content": "ecfc9bef24ae28cf94c6775ecf6e2086d90a25d8d5476a4f6bb24001601b6cd0"
        },
        {
          "alg": "SHA3-512",
          "content": "f2b333527faedf504f60aa70a3d491972fa76f7e61e6351027f74613f41001157656824fe312b6e1df6dc4979704fe2a745b618d5368a97fe0bf8749739de9e2"
        }
      ],
      "licenses": [
        {
          "expression": "(CDDL-1.0 OR GPL-2.0-with-classpath-exception)"
        }
      ],
      "purl": "pkg:maven/javax.annotation/javax.annotation-api@1.3.2?type=jar",
      "externalReferences": [
        {
          "url": "http://jcp.org/en/jsr/detail?id=250",
          "type": "website"
        },
        {
          "url": "https://maven.java.net/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/javaee/javax.annotation/issues",
          "type": "issue-tracker"
        },
        {
          "url": "javaee-spec@javaee.groups.io",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/javaee/javax.annotation",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.oauth-client/google-oauth-client@1.39.0?type=jar",
      "publisher": "Google",
      "group": "com.google.oauth-client",
      "name": "google-oauth-client",
      "version": "1.39.0",
      "description": "Google OAuth Client Library for Java. Functionality that works on all supported Java platforms, including Java 7 (or higher) desktop (SE) and web (EE), Android, and Google App Engine.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "cf4992aee304401b66f6d03e654ab981"
        },
        {
          "alg": "SHA-1",
          "content": "99f02f3c46c68c01dfc95878456b009a13229c88"
        },
        {
          "alg": "SHA-256",
          "content": "27fc61ee2d526e33d31350b5ea383091c0879345e261f9b2e6fcc97a20c86f88"
        },
        {
          "alg": "SHA-512",
          "content": "f8973ab9ddda79746cc4e5d6c156e571604304627db7ebc2a570f56679cdeeddad86ce8e36a8acb7593a215c9a55cd8b8f86d85d9bec67b71c15b27eb1af45fd"
        },
        {
          "alg": "SHA-384",
          "content": "a3ef0821a2964960487e39747c2a69ec2030ac04e0fd1bae025c5c71036ffa6dc8a1c99effb7c5a63fe9ce81b742e9d0"
        },
        {
          "alg": "SHA3-384",
          "content": "c3c37f7e6c0f7d107c8e52546c8ec9e4f726308dfb065e9cdd8265904ca1a06d401b29fa6b84d3df67c420b8604b6330"
        },
        {
          "alg": "SHA3-256",
          "content": "44c05e415db8bdfef87fb2207b5d4d02c115aa661b334cf26ef9b97be29d019e"
        },
        {
          "alg": "SHA3-512",
          "content": "abd5c4d3fe3a17103f09c70f6adaf130b59690d8639fd771ed03588451bd061c3d38782dd178ff1999806942a950b584d016b77a4bab0fa28e66b64052e08d60"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.oauth-client/google-oauth-client@1.39.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/googleapis/google-oauth-java-client/google-oauth-client",
          "type": "website"
        },
        {
          "url": "https://google.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/googleapis/google-oauth-java-client/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/googleapis/google-oauth-java-client/google-oauth-client",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/dnsjava/dnsjava@3.6.5?type=jar",
      "publisher": "dnsjava.org",
      "group": "dnsjava",
      "name": "dnsjava",
      "version": "3.6.5",
      "description": "dnsjava is an implementation of DNS in Java. It supports all defined record types (including the DNSSEC types), and unknown types. It can be used for queries, zone transfers, and dynamic updates. It includes a cache which can be used by clients, and a minimal implementation of a server. It supports TSIG authenticated messages, partial DNSSEC verification, and EDNS0.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "f3596bdfe0e357a51843a2cb523f0b7d"
        },
        {
          "alg": "SHA-1",
          "content": "7a632e247adc97efb36ce9f6b90a6cc397f9cc68"
        },
        {
          "alg": "SHA-256",
          "content": "d1208e39e4ba17ec643ac5832b8b17dcaf5e3ae28f8c65904a755e23523cd94a"
        },
        {
          "alg": "SHA-512",
          "content": "5a6d6446c26ebf714f5513ad13149866e5e93c65004ef6908b7fd896b54cdefafa87c6f920bc42f1458630f2130590be16a793e8b09bc119f686f0e2a84566f8"
        },
        {
          "alg": "SHA-384",
          "content": "8caba4dbf132bd99fe73f175f58eac448db3aeb1d418da62e1081e41b686c9be67ae4359af374a1ad14f9769496ca5e6"
        },
        {
          "alg": "SHA3-384",
          "content": "2c9be6818658466c8efa2b7a00f547a0a408faf7088bafd1d88540e123e02e4fd377da40ef7108ce7bab193da456da48"
        },
        {
          "alg": "SHA3-256",
          "content": "f64645c1dcac3b98a0f16bf01ee3b90a061d140b1769387ae441702bb6e7b34f"
        },
        {
          "alg": "SHA3-512",
          "content": "6fb98f1e049a3464e42cb9f21e69dc5bc80edc8c6205c78ffaf14c08444a4e3a170e1e71a0b62fa2b276d736035b81470171165298d842eb15e52ad1b5118713"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/dnsjava/dnsjava@3.6.5?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/dnsjava/dnsjava",
          "type": "website"
        },
        {
          "url": "https://github.com/dnsjava/dnsjava",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.api/gax@2.82.0?type=jar",
      "publisher": "Google LLC",
      "group": "com.google.api",
      "name": "gax",
      "version": "2.82.0",
      "description": "Google Api eXtensions for Java (Core)",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "8b629643dd5e0eae10c0fad023203978"
        },
        {
          "alg": "SHA-1",
          "content": "014c1059fcb67a7534455cd8d9b71c75faef89b0"
        },
        {
          "alg": "SHA-256",
          "content": "e1fa5bb5f942989604017e203902403a8f8a19a2e1cd5776e3649c13082fa13a"
        },
        {
          "alg": "SHA-512",
          "content": "44580fb7cbd9fe4c499b00583478d7effbfbf84569d56b114bbe121a7a0f5333f9f6c9d499f53dc06692275e62dfe171110d9001161b14346e84193e55bab145"
        },
        {
          "alg": "SHA-384",
          "content": "ef104ad56db3308c41f30a7f0a363ed82afdb2f0b6c6317a8e8b51f84756ad535a6258d2f1aaddb24dabb404ac0a329a"
        },
        {
          "alg": "SHA3-384",
          "content": "122929d5e00ca328321e7d59e5e0e8294360432f688511384b487271b4916bb5d5214663768e36f738e1398a6b30369e"
        },
        {
          "alg": "SHA3-256",
          "content": "bc60e50fc7bfdc6c75f390cef5b8e22ee05b0b74b89d4e3dcc134101f1877696"
        },
        {
          "alg": "SHA3-512",
          "content": "cfcc79abb194243dc0c5b277e5b80b888814ea1a3f06d1a5aacc3381d63e5cdbc771bc063f9be1044702f97107dbaab71b7a2b5bd0d64309687014513d9659b1"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/com.google.api/gax@2.82.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/googleapis/sdk-platform-java",
          "type": "website"
        },
        {
          "url": "https://google.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/googleapis/sdk-platform-java/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/googleapis/sdk-platform-java",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.grpc/grpc-api@1.81.0?type=jar",
      "group": "io.grpc",
      "name": "grpc-api",
      "version": "1.81.0",
      "description": "gRPC: API",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "e20b9839dbdb36c7a244b0f80c9c96bb"
        },
        {
          "alg": "SHA-1",
          "content": "7a5827c8180858b12ba3d308c7ce31e95002b6ed"
        },
        {
          "alg": "SHA-256",
          "content": "3e6a659ba3edcdac730c857b27725e2e4d985c2241055e8326eb4fe0f9573d53"
        },
        {
          "alg": "SHA-512",
          "content": "f03336b82344848c7dfe51bd6bfe39cb2264b995da0c8292ce209e5988f91e4823ac62a63808bf460faaa67c6b8abe6dcf80f71bed6ff6b9910860b2bbb6ce8e"
        },
        {
          "alg": "SHA-384",
          "content": "21796ada3e05f81167df5351b1bc9e645f7a2f2475092d9c868bd8e79372d10d1bfd5ba8e74957e29da8f8b22a0e924c"
        },
        {
          "alg": "SHA3-384",
          "content": "c3ce688ee606c772013983961fb663c1ab6e8cfe94f3f794c73dbf52211c9c7f37f57561e196761688e81f6a78385e62"
        },
        {
          "alg": "SHA3-256",
          "content": "524fc17b730ec117cef5cc75545c66d89bea1b2808869ac65989c1d740b7355b"
        },
        {
          "alg": "SHA3-512",
          "content": "5d198429bd74f1bde9be473df65b98b4beccbdd07f45afc851fe5c586ee107cc0c7fdd09dbfb10d5c6cc382c1ebd5bf64007679c1dfc63b62377b0c49c75668a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.grpc/grpc-api@1.81.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/grpc/grpc-java",
          "type": "website"
        },
        {
          "url": "https://github.com/grpc/grpc-java",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.cloud.sql/schemas@1.29.0?type=jar",
      "publisher": "Google LLC",
      "group": "com.google.cloud.sql",
      "name": "schemas",
      "version": "1.29.0",
      "description": "Generated source code to support the Metadata Exchange Protocol.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "45e1fae920407b5110bb06e09fe4d04f"
        },
        {
          "alg": "SHA-1",
          "content": "15a196e662838e21e7197c88e55052414067ada0"
        },
        {
          "alg": "SHA-256",
          "content": "63d832f5ebad8114983a87e6ac1d4f880036a583a9adc274cc25296b32ce58b4"
        },
        {
          "alg": "SHA-512",
          "content": "bf2f725abcbe64d4402a1da0416930f665a041c67c38503a4d964fb5d2dc63590caf6ce09a04e0a1986cb5cd55c1858eba328362cc15e71e62202994e26db1f2"
        },
        {
          "alg": "SHA-384",
          "content": "cd4a38aa2aac9c66a51c7320bb43ee22934851e34d9e2984e61a41f3dd5aca8d66155a7fe57b7b3453c8d196a468b8a8"
        },
        {
          "alg": "SHA3-384",
          "content": "bce0cf0ade462ab2c9c1790b0fb6ccacfd975ba45a446fec84d5883ede095fc5efcaede9ee5c1976e8369c2045c28f5c"
        },
        {
          "alg": "SHA3-256",
          "content": "556b966f486b80ca79b19328c0df73d1d9476d25bbc0bc808263cb5d22302eac"
        },
        {
          "alg": "SHA3-512",
          "content": "59d598ad049c4507dc7cdb6b4f6c5409625e457a4fb802b621f555444488ba4c680ae4fe61434e7d219f4a84cf2fedbe0a5c1e5f797d7a040ef241818316e308"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.cloud.sql/schemas@1.29.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/GoogleCloudPlatform/cloud-sql-mysql-socket-factory/schemas",
          "type": "website"
        },
        {
          "url": "https://google.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/googleapis/java-shared-config/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/GoogleCloudPlatform/cloud-sql-mysql-socket-factory.git/schemas",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.github.resilience4j/resilience4j-core@2.4.0?type=jar",
      "group": "io.github.resilience4j",
      "name": "resilience4j-core",
      "version": "2.4.0",
      "description": "Resilience4j is a lightweight, easy-to-use fault tolerance library designed for Java8 and functional programming",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "876d87ec308d8636105e17577dc32ec0"
        },
        {
          "alg": "SHA-1",
          "content": "917315545f2ae0221ef3d6c27337b9ba6cba2702"
        },
        {
          "alg": "SHA-256",
          "content": "a15d25c4709a4c12432cd0a4f620e37a00a82dbe112f5d1a7a68b31325ffc978"
        },
        {
          "alg": "SHA-512",
          "content": "0b297e68f9e4542a724d507697c5476568dc8459156e70dc2e4b3fa812be7a6d070c603a58ba9eb1e2331df78479da71a44ada6a4d303f6f0ab224cb24bb2f07"
        },
        {
          "alg": "SHA-384",
          "content": "73498053467091de64ba6cdb62948e268afba62386a03fabcee6aafcfde6ed152bcec726c1f7d78d5b9ee7a1c34008fe"
        },
        {
          "alg": "SHA3-384",
          "content": "d1adb2a7e58982ff23beafd2aebfd2b3769d37caa965a1542d8d1c6d3cc1499117d874fa2e95c8e4b1c98033ecc37656"
        },
        {
          "alg": "SHA3-256",
          "content": "db568c467b698f1e695e75982105fbce261f91ba528539cc3ff10c67e81562b5"
        },
        {
          "alg": "SHA3-512",
          "content": "635fd7c97582d1deaf7b3fc74ff38d796656fd110e881d3cf793aafd30d73e649a25e58f7575bf8ce54e85291061871c21bbf31c19db937902b31a5de27f0054"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.github.resilience4j/resilience4j-core@2.4.0?type=jar",
      "externalReferences": [
        {
          "url": "https://resilience4j.readme.io",
          "type": "website"
        },
        {
          "url": "https://github.com/resilience4j/resilience4j.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.22.3?type=jar",
      "publisher": "FasterXML",
      "group": "com.fasterxml.jackson.dataformat",
      "name": "jackson-dataformat-yaml",
      "version": "2.22.3",
      "description": "Support for reading and writing YAML-encoded data via Jackson abstractions.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "ba1c8448785cea71b8cc68275d0e542b"
        },
        {
          "alg": "SHA-1",
          "content": "520097fe76cde11c7448c622e8cb6e07714c8c7c"
        },
        {
          "alg": "SHA-256",
          "content": "2bcbc3b9abaefbeba11409b9e30ec35ed7071a61a47c8c2a9c688e40e45b90f9"
        },
        {
          "alg": "SHA-512",
          "content": "ee48047fd585539f236161c37160992d448ae88d25d846eb108e05c7b44611b70cf2b9d69f9eccf269cc6ba7c2009c00aace274571b8b8c71cc0ccc247ae0821"
        },
        {
          "alg": "SHA-384",
          "content": "8241d6e22dc366a674e84ad5f0f8f93e47bb8172d4f093892a97236f1b312e88c3a40c3e561d3cb79d6acfbf1b849c66"
        },
        {
          "alg": "SHA3-384",
          "content": "515619c8e8dd4d6c2f254d8e80d15dae097449ace9639a4ed2ebc6689efcf433008e1c8a9e4ceb29586a97bd13a6415b"
        },
        {
          "alg": "SHA3-256",
          "content": "f3897d47a0284457413c652eea70b93eb09dff8733eace11c269b6a5c144d44a"
        },
        {
          "alg": "SHA3-512",
          "content": "878d4ec298b983906135a9ea09100c4c2b1f27b854a3da9d871d4012db9e2399abac73942605257b482cf698b77224462537d8f33cb1882cb688578956b3cee0"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.22.3?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/FasterXML/jackson-dataformats-text",
          "type": "website"
        },
        {
          "url": "https://central.sonatype.com/api/v1/publisher",
          "type": "distribution"
        },
        {
          "url": "https://github.com/FasterXML/jackson-dataformats-text/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/FasterXML/jackson-dataformats-text/jackson-dataformat-yaml",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.minio/minio@9.0.3?type=jar",
      "group": "io.minio",
      "name": "minio",
      "version": "9.0.3",
      "description": "MinIO Java SDK for Amazon S3 Compatible Cloud Storage",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "63fca58827ec65d71930f31d04832460"
        },
        {
          "alg": "SHA-1",
          "content": "f44ec333c12a1a3773c92d8d48e9f5d52942d4e6"
        },
        {
          "alg": "SHA-256",
          "content": "db827b8ede16cfa33196b1249ecc7f7df0391c6d2a82e841499d09f84df7b11c"
        },
        {
          "alg": "SHA-512",
          "content": "5c3dc1c2a75f6b0f8ad3a7b30fc87236fd8545d516dac54372fdd5f2ecce6fac6a6bcce0fd29fe2c6c3ef9fcd433618624484262fa543f5b6002b72dc3d5ccbf"
        },
        {
          "alg": "SHA-384",
          "content": "924a5fbb47d05c2d54d33c9553bd60c22368d8b03eaa1ebde0219292ace0eb83fbc51a5c7f9d166e891e65b62e2c9a09"
        },
        {
          "alg": "SHA3-384",
          "content": "3be4b9555bd3267d1406986da5674188205ad4ea21bd0a033115921a15ee3677e718682b5c032f73e824f33bf81b6330"
        },
        {
          "alg": "SHA3-256",
          "content": "8793cb0022f8230c6affb7f3afc152ea34aa63d36d507bca83d534f09b595b9d"
        },
        {
          "alg": "SHA3-512",
          "content": "a1c50384ed0c280f36105a3b717f194dacefc4b3021b55994802635f48cc50361f4249b87c71e385636a677633419e9beaf2e011e97090e6a743065773574bcd"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.minio/minio@9.0.3?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/minio/minio-java",
          "type": "website"
        },
        {
          "url": "http://github.com/minio/minio-java",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.carrotsearch.thirdparty/simple-xml-safe@2.7.1?type=jar",
      "publisher": "Carrot Search s.c.",
      "group": "com.carrotsearch.thirdparty",
      "name": "simple-xml-safe",
      "version": "2.7.1",
      "description": "A fork of Niall Gallagher\u0027s simple-xml library with web-safe defaults",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "150936ed745f2c207db42931d7d5839b"
        },
        {
          "alg": "SHA-1",
          "content": "045fda5ac6087bc82a209d8cdb73f8d0dbdcfc7b"
        },
        {
          "alg": "SHA-256",
          "content": "4506e4bb57d41481936f0ac684468ca4b2cc9e002ca8466ee19e23228d455957"
        },
        {
          "alg": "SHA-512",
          "content": "d13c25a9c4b7ce07e6b096e37591b37e415332d3e1adcb65c753238f1c3d968a98293223a720101b0af0d76c4bd9f8a0d487de9b0122172187b59e923877592a"
        },
        {
          "alg": "SHA-384",
          "content": "a96086b4fe29a470978638f14d5508daa1f1f2a629de4cc424964e8c05a7d0d6960650b5536aee098fda03c6b5a8acae"
        },
        {
          "alg": "SHA3-384",
          "content": "3975d435b3f32c32dfdebc88625c7226d5052275269f4b0533f0d2cca05fd7d91c9a7ca58eb9559a6f4855166d3fd4bc"
        },
        {
          "alg": "SHA3-256",
          "content": "ed6f680d21c9fc1cd9606dc0dfcbbbed7baa71d41c51654b32159fef896d8806"
        },
        {
          "alg": "SHA3-512",
          "content": "d35d823731ce1d4bd9dbfca093f59ab91346b2b7f901c43c5aabe36fdc6ad5e1af130129da75dc9d731c3d9597e53afe888efefd752891b4f09f3eb2a8a6a5f5"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.carrotsearch.thirdparty/simple-xml-safe@2.7.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/dweiss/simplexml",
          "type": "website"
        },
        {
          "url": "https://github.com/dweiss/simplexml",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.squareup.okhttp3/okhttp@5.3.2?type=jar",
      "group": "com.squareup.okhttp3",
      "name": "okhttp",
      "version": "5.3.2",
      "description": "Square\u2019s meticulous HTTP client for Java and Kotlin.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "7cefaebda364337f3770168187124f31"
        },
        {
          "alg": "SHA-1",
          "content": "6891a4fd19bcab6f69fe091c2bc6077edec5258e"
        },
        {
          "alg": "SHA-256",
          "content": "e720a383fdc3eb1df4aac77a085e61b7730837364151de867093fdbcafcb44aa"
        },
        {
          "alg": "SHA-512",
          "content": "165c65503bded11490b09c46935864aa71ee8b9fc4ea1c01e1cb91b209a64af97e92d5d8fd9b4bc78209a8949a79f37ff49edd992171d25ba6f7e0d968cee87c"
        },
        {
          "alg": "SHA-384",
          "content": "c17bcf23262c3979a72e2c1746757b0f67ddad0b060c95d655a3d912136654b2468c96bd1921b316f4f05f43ce86c872"
        },
        {
          "alg": "SHA3-384",
          "content": "2bde1832a1b0bb7bb1a0eac22a2af8c4c25059dc98584667247c6efd3e8de3c4350b5ba9d378d689b285d05604601d81"
        },
        {
          "alg": "SHA3-256",
          "content": "07a360a76512ec19d3220d3ed9b594638ff63f8be6fb0bca1eee93057cd23861"
        },
        {
          "alg": "SHA3-512",
          "content": "fbb062b8370d6b9547edc1c3bf9a0a3bedf65b33e644cdc05e8c8101482757c8371f98616c13391cad7dfab3a01dac8a174ffcd99ebcc515a384aa8f022de8c3"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.squareup.okhttp3/okhttp@5.3.2?type=jar",
      "externalReferences": [
        {
          "url": "https://square.github.io/okhttp/",
          "type": "website"
        },
        {
          "url": "https://github.com/square/okhttp",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.squareup.okio/okio@3.16.4?type=jar",
      "group": "com.squareup.okio",
      "name": "okio",
      "version": "3.16.4",
      "description": "A modern I/O library for Android, Java, and Kotlin Multiplatform.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "ca878d553dd4cdae891d16df87cdae7d"
        },
        {
          "alg": "SHA-1",
          "content": "dbd63ccb67502e388975c9b5e4fb029638aecc78"
        },
        {
          "alg": "SHA-256",
          "content": "c9964f394c4cd32b79bf338afbfa2f2297221eee08311787061cea55f87dd60e"
        },
        {
          "alg": "SHA-512",
          "content": "d848277d1da157f22b4ba2dd42bea11c7569aab1107181b886e97943dbb6058851e78d6582eb13bdfc05350b1f82c8d4b681a42435eee0f631d126dd8f3b39ee"
        },
        {
          "alg": "SHA-384",
          "content": "edad8c48669ffbb1b079bc8f7f4ee5d3671dc4563df0598cc0e27b5d50ced49a90f2f510ea963051a2ffbfc95eb91159"
        },
        {
          "alg": "SHA3-384",
          "content": "68a3fe67b2e285fbb352e262dfea29c03151dbfa934c1ac900cd7ab2ad8a1a9c0e7cac4aa718a7677fe7ee391ac65027"
        },
        {
          "alg": "SHA3-256",
          "content": "8544496fbf4ead4fc95b999eb2bf5f7af01dab0809a806c080a226ddee50011b"
        },
        {
          "alg": "SHA3-512",
          "content": "2a39fe798a87a2b89f73b2c3b9143003dbc93434bce334d0cb55f422bb048e4cd39a05c9ab2c53411cab9138b84cb72510dd08f516e9c46438a8644cc7c974f6"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.squareup.okio/okio@3.16.4?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/square/okio/",
          "type": "website"
        },
        {
          "url": "https://github.com/square/okio/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.commons/commons-compress@1.28.0?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.commons",
      "name": "commons-compress",
      "version": "1.28.0",
      "description": "Apache Commons Compress defines an API for working with compression and archive formats. These include bzip2, gzip, pack200, LZMA, XZ, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4, Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "f33efe616d561f8281ef7bf9f2576ad0"
        },
        {
          "alg": "SHA-1",
          "content": "e482f2c7a88dac3c497e96aa420b6a769f59c8d7"
        },
        {
          "alg": "SHA-256",
          "content": "e1522945218456f3649a39bc4afd70ce4bd466221519dba7d378f2141a4642ca"
        },
        {
          "alg": "SHA-512",
          "content": "f1f140f4f40ab3cf3265919db9dbb95a631a29aa784e305f291de4e68876bb711d9217d62d7937cddddd393982decdf71a608b4b3ab7f4e6375cf28af2893d7f"
        },
        {
          "alg": "SHA-384",
          "content": "afe6a8fc8e7486c4ecce95276bb1467763d7ff7d941c7bcff8661bbbd4bff442fd0899ff7a11bc540cda86818ee4a8f0"
        },
        {
          "alg": "SHA3-384",
          "content": "6afb636ad0805e522913cfd91c8293c485b7f4eff5e45dd3a17a716c3f4b8ab8969e9c00927559a5fb762cba1fdb3d3f"
        },
        {
          "alg": "SHA3-256",
          "content": "4420e0b462b5dcc45077e95e012a82a5ae17659e5abe8a685fa086dab6995298"
        },
        {
          "alg": "SHA3-512",
          "content": "23e37d13c8ee6c7369e407c29d1f9ee1bb44eca9f09a6f9742f6b4cf3d38dd7a0509fe0142536cd8087b68a76e71d819105af2c23f2aeed08acc58eb93cf7e61"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.commons/commons-compress@1.28.0?type=jar",
      "externalReferences": [
        {
          "url": "https://commons.apache.org/proper/commons-compress/",
          "type": "website"
        },
        {
          "url": "https://github.com/apache/commons-compress/actions",
          "type": "build-system"
        },
        {
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2",
          "type": "distribution"
        },
        {
          "url": "https://issues.apache.org/jira/browse/COMPRESS",
          "type": "issue-tracker"
        },
        {
          "url": "https://mail-archives.apache.org/mod_mbox/commons-user/",
          "type": "mailing-list"
        },
        {
          "url": "https://gitbox.apache.org/repos/asf?p=commons-compress.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/commons-codec/commons-codec@1.22.1?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "commons-codec",
      "name": "commons-codec",
      "version": "1.22.1",
      "description": "The Apache Commons Codec component contains encoders and decoders for formats such as Base16, Base32, Base64, digest, and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a collection of phonetic encoding utilities.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "7bfd10447817907ffd7f14fbc6493940"
        },
        {
          "alg": "SHA-1",
          "content": "da09bcdb330deef7cfee70f30c6889fda70d5ebf"
        },
        {
          "alg": "SHA-256",
          "content": "78a5d732fbd715e2d10bd7150d2f8030bae57267f8aacc5c88f642cb6c2e5d3f"
        },
        {
          "alg": "SHA-512",
          "content": "1e2023b6e7715339a309226c94635db77fd3d8d7f6fc1048e0138dc4b4ff27540e1e1ff2238a41b94029a9497b2935af6e8b05eeeed69b76600c2f4eed3e36ed"
        },
        {
          "alg": "SHA-384",
          "content": "29f01c913caa51660ff4a8623255f819961ee63b20b125a1c3e5f061b4a75864c1a349420f6d314009b4cf12524aecfb"
        },
        {
          "alg": "SHA3-384",
          "content": "de7a0317378663055c9a2f80d30bc543549924e994a27c683ee1ff405587395d00b13d277dd39ceb09fa64a9f110d09e"
        },
        {
          "alg": "SHA3-256",
          "content": "70d7c377536c088c88d043b4f3297cb58ea9bd7d8374514f16060ca62977253e"
        },
        {
          "alg": "SHA3-512",
          "content": "7885692a52215d8ea620afc25b22719c835d9079265592a9b790e4c13b1cd5cbb023eb9cf39a304e463cf280dd7931ca966528c9bb14b58c400018699c058ec7"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/commons-codec/commons-codec@1.22.1?type=jar",
      "externalReferences": [
        {
          "url": "https://commons.apache.org/proper/commons-codec/",
          "type": "website"
        },
        {
          "url": "https://github.com/apache/commons-codec/actions",
          "type": "build-system"
        },
        {
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2",
          "type": "distribution"
        },
        {
          "url": "https://issues.apache.org/jira/browse/CODEC",
          "type": "issue-tracker"
        },
        {
          "url": "https://mail-archives.apache.org/mod_mbox/commons-user/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/apache/commons-codec",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.xerial.snappy/snappy-java@1.1.10.8?type=jar",
      "publisher": "xerial.org",
      "group": "org.xerial.snappy",
      "name": "snappy-java",
      "version": "1.1.10.8",
      "description": "snappy-java: A fast compression/decompression library",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "a25bd213d1ca2f3c605c5f03050db070"
        },
        {
          "alg": "SHA-1",
          "content": "ccbaa2b5ea6a023a27c44daf2d6cdec0e138592d"
        },
        {
          "alg": "SHA-256",
          "content": "50485d06037fea3d6e40c968386feeca6338cc9872e25549593ff3eb352cefcc"
        },
        {
          "alg": "SHA-512",
          "content": "c7133f726f366b9f06df98d94b4dd7c91c7702c543e1a318055a886af5e625d8231b0a6728250596181bc20a6c4147855eeb02ed55c447fe13ff2156e29985a9"
        },
        {
          "alg": "SHA-384",
          "content": "aeb78b3f4c56ce769f5fda9cfabe00be77d21b93637f70601c28b16eef41405e1291001c3a6e45001b356543e33b664b"
        },
        {
          "alg": "SHA3-384",
          "content": "6137f6354b574d8decb579ad9147dd9463e3a9f62d1e929266bee1adc020f57382973d0a1abf9daeb2007bb32671fed8"
        },
        {
          "alg": "SHA3-256",
          "content": "f44a4a8cffe82ce6c99b401e9d822e71cdfc63c1b279b278282eda07243b2a94"
        },
        {
          "alg": "SHA3-512",
          "content": "655731ef3b20a2cec213138c170f7dc7182c2a09536d74c1d8a13224bb204dd706a35749bf99b51c4b945b75784a0a26c60931a158d27e1378ccd1c8ac7a0783"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.xerial.snappy/snappy-java@1.1.10.8?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/xerial/snappy-java",
          "type": "website"
        },
        {
          "url": "https://github.com/xerial/snappy-java",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.squareup.okhttp3/okhttp-jvm@5.5.0?type=jar",
      "group": "com.squareup.okhttp3",
      "name": "okhttp-jvm",
      "version": "5.5.0",
      "description": "Square\u2019s meticulous HTTP client for Java and Kotlin.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "a9506ae9545544d219c6775bce435349"
        },
        {
          "alg": "SHA-1",
          "content": "cefe1eb26408176d30511420b7e36b065e38bca0"
        },
        {
          "alg": "SHA-256",
          "content": "234194a04aac54858df0a750d243af7b2e39df5e4eb86e9912043ad33a9f9a52"
        },
        {
          "alg": "SHA-512",
          "content": "f05cc85dc48556c120b69497722d1ed5db08007445b30ba1901c24cc3496a913b34cc0b3b0866c41206624e90f230ec23bbacfcac532590321bcb2ff261333ac"
        },
        {
          "alg": "SHA-384",
          "content": "9c97973f9e4bcf5fb0777f3b0977d5e8907609d45962df9b091f53fcda9e68199a85cdf1c6bf7a2df28d71a45ca23b48"
        },
        {
          "alg": "SHA3-384",
          "content": "3371409f0357b640ca68c63f06c8c16a09d2e2de85fc11516ee04d348b5745758752c39905a21320ca0ad422cdeb8a88"
        },
        {
          "alg": "SHA3-256",
          "content": "eeb80a1af674f4066f9640a6399aa4e869deaa35369444cdb311684c557ee2c6"
        },
        {
          "alg": "SHA3-512",
          "content": "0341c39261a731a4d4aac03557ad4d3235d68cebed2462f5d450e432018382407ba10a5afe23fc9ca4071419accc3630bf0d61ed2dc552b829c0378668651c7b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.squareup.okhttp3/okhttp-jvm@5.5.0?type=jar",
      "externalReferences": [
        {
          "url": "https://lysine.dev/okhttp/",
          "type": "website"
        },
        {
          "url": "https://github.com/lysine-dev/okhttp",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.jetbrains.kotlin/kotlin-stdlib@2.4.20?type=jar",
      "group": "org.jetbrains.kotlin",
      "name": "kotlin-stdlib",
      "version": "2.4.20",
      "description": "Kotlin Standard Library",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "99b8b084c36f4bb0ecfbfcbce05dd1c2"
        },
        {
          "alg": "SHA-1",
          "content": "94c1451890d164aed65d43b3db0b7ecef7c183e7"
        },
        {
          "alg": "SHA-256",
          "content": "2226de463d309d4a5500a481320b3dea515a6981dcae1def531fbc158884e25f"
        },
        {
          "alg": "SHA-512",
          "content": "5b9c00afc75ac3a7d17f39c2315ee65ed88ca2d08a3711d56ff07140b0e74d7a5ffe53e7255434e8e1d37ad5182aba609360613391f23f12281740fcd62483f5"
        },
        {
          "alg": "SHA-384",
          "content": "20d58727852c3e1f80744791a18e9035d0cfcc8a040a1e868a26a18cfae4102922438648fe8dea6f0dee54227079c1c7"
        },
        {
          "alg": "SHA3-384",
          "content": "4f3ec8d7d455cf7220168a7548c212bd155f17c51f0f42e0380832974a19e24aed36d2fe44d243234c327f1f6d31370a"
        },
        {
          "alg": "SHA3-256",
          "content": "5579869652baab969361673cb0062166399131e2598f8ed882ee8caf70883b7e"
        },
        {
          "alg": "SHA3-512",
          "content": "9ccd903605d4e772a770c166f21d3f9f2f3b5bd73a806cbad0fd33e127c4e6100db08279d39f7fa3d0102d49e9e4a245792f742903aca978350586b46b25ec57"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.jetbrains.kotlin/kotlin-stdlib@2.4.20?type=jar",
      "externalReferences": [
        {
          "url": "https://kotlinlang.org/",
          "type": "website"
        },
        {
          "url": "https://github.com/JetBrains/kotlin",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.jetbrains/annotations@13.0?type=jar",
      "group": "org.jetbrains",
      "name": "annotations",
      "version": "13.0",
      "description": "A set of annotations used for code inspection support and code documentation.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "f4fb462172517b46b6cd90003508515a"
        },
        {
          "alg": "SHA-1",
          "content": "919f0dfe192fb4e063e7dacadee7f8bb9a2672a9"
        },
        {
          "alg": "SHA-256",
          "content": "ace2a10dc8e2d5fd34925ecac03e4988b2c0f851650c94b8cef49ba1bd111478"
        },
        {
          "alg": "SHA-512",
          "content": "5622d0ffe410e7272e2bb9fae1006caedeb86d0c62d2d9f3929a3b3cdcdef1963218fcf0cede82e95ef9f4da3ed4a173fa055ee6e4038886376181e0423e02ff"
        },
        {
          "alg": "SHA-384",
          "content": "6bcde3a6e471d416522e6288474bc4f9115e2e8abf8ce5d300829bee4aa98dff73be7d8c6f0607f3d6d423c7f5abbf90"
        },
        {
          "alg": "SHA3-384",
          "content": "f4d5a5d5a76b24c4751c8c52f2879b097d2430c3571c59b4630e8c871c9bdb08e24e803a14c24fc8d3378417f29b7244"
        },
        {
          "alg": "SHA3-256",
          "content": "b4a80ea81c4bc7e364e07981465f547e8ed83031806eaf3b97dfb38f894f5b6f"
        },
        {
          "alg": "SHA3-512",
          "content": "15b23bce818b4399b334dd632eb85de5a1b70c47fb9260561e70b1f726211c83bddbc957f3b4c32a1d8c687f9bc6c38d0a638c731cb5daf5b619aa725d6050c2"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.jetbrains/annotations@13.0?type=jar",
      "externalReferences": [
        {
          "url": "http://www.jetbrains.org",
          "type": "website"
        },
        {
          "url": "http://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/JetBrains/intellij-community",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.squareup.okio/okio-jvm@3.18.1?type=jar",
      "group": "com.squareup.okio",
      "name": "okio-jvm",
      "version": "3.18.1",
      "description": "A modern I/O library for Android, Java, and Kotlin Multiplatform.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "582df8b383508e316081006d1fbd73d9"
        },
        {
          "alg": "SHA-1",
          "content": "a3a8128bb3a0157d23ecc18c17e8330d9c0ac96c"
        },
        {
          "alg": "SHA-256",
          "content": "b97b640557a650d15411f2be29aef558c4e422a83653cb18ba494311dbed18be"
        },
        {
          "alg": "SHA-512",
          "content": "a4b9db7bc68876aefbbd57e1e232aadcd9666fffb1ead59f7a9f4dfcc22f2f90a50b29524380548d08dd040379b5dad4737513ed4a78d6f5fc99ae1b5665ef1f"
        },
        {
          "alg": "SHA-384",
          "content": "155fcef96eaaa87db8ce1e4cb19d9997e956d1d072fec1e69ccfc11ff6bd8d5bd242acb6b9567dad67a6675a39db6337"
        },
        {
          "alg": "SHA3-384",
          "content": "85cee2efa2df46ebc75ef24d56f732409dae15702b8a15cd4ab614f8e86627d6b52b3496a774015a9383088842f1cb63"
        },
        {
          "alg": "SHA3-256",
          "content": "d884e246b47b314a0e2b67287223aaea1798b4c19065acb78b8bf8ba7724ad5d"
        },
        {
          "alg": "SHA3-512",
          "content": "e1e27fe4a7fe21aefc092d541ac745bad3c28f77482ed52a818a98f371a276c37d4617f71e64ef4f0354f2b7fee82fbc5642a00e6d2d5414f3043c90eaa46ba7"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.squareup.okio/okio-jvm@3.18.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/lysine-dev/okio/",
          "type": "website"
        },
        {
          "url": "https://github.com/lysine-dev/okio/",
          "type": "vcs"
        }
      ]
    }
  ],
  "services": [
    {
      "bom-ref": "service:gov.nist.nvd",
      "provider": {
        "name": "National Institute of Standards and Technology (NIST)",
        "url": [
          "https://nist.gov"
        ],
        "contact": [
          {
            "email": "nvd@nist.gov"
          }
        ]
      },
      "group": "gov.nist.nvd",
      "name": "National Vulnerability Database (NVD)",
      "description": "Used as a vulnerability data source. CVE feeds are mirrored to Dependency-Track.",
      "endpoints": [
        "https://nvd.nist.gov/feeds"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "Public domain"
          }
        }
      ]
    },
    {
      "bom-ref": "service:org.sonatype.ossindex",
      "provider": {
        "name": "Sonatype",
        "url": [
          "https://sonatype.com"
        ],
        "contact": [
          {
            "email": "ossindex@sonatype.org"
          }
        ]
      },
      "group": "org.sonatype.ossindex",
      "name": "OSS Index",
      "description": "Optional vulnerability analyzer. Queried by component package URL to retrieve known vulnerabilities.",
      "endpoints": [
        "https://ossindex.sonatype.org/api/v3/component-report",
        "https://ossindex.sonatype.org/api/v3/version"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:com.cyberriskanalytics.vulndb",
      "provider": {
        "name": "Risk Based Security",
        "url": [
          "https://riskbasedsecurity.com/"
        ],
        "contact": [
          {
            "email": "support@riskbasedsecurity.com"
          },
          {
            "email": "sales@riskbasedsecurity.com",
            "phone": "1-855-RBS-RISK"
          }
        ]
      },
      "group": "com.cyberriskanalytics.vulndb",
      "name": "VulnDB",
      "description": "Optional commercial vulnerability analyzer. Queried for component vulnerabilities. Requires a paid subscription.",
      "endpoints": [
        "https://vulndb.cyberriskanalytics.com/api/v1/account_status",
        "https://vulndb.cyberriskanalytics.com/api/v1/vendors/",
        "https://vulndb.cyberriskanalytics.com/api/v1/products/",
        "https://vulndb.cyberriskanalytics.com/api/v1/versions/by_product_id",
        "https://vulndb.cyberriskanalytics.com/api/v1/vulnerabilities/",
        "https://vulndb.cyberriskanalytics.com/api/v1/vulnerabilities/find_by_cpe"
      ],
      "authenticated": true,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:com.github.api",
      "provider": {
        "name": "GitHub",
        "url": [
          "https://github.com/"
        ]
      },
      "group": "com.github.api",
      "name": "GitHub Advisories",
      "description": "Used as a vulnerability data source. GitHub Security Advisories are mirrored to Dependency-Track via GraphQL. Also queried for repository metadata of packages hosted on GitHub.",
      "endpoints": [
        "https://api.github.com/graphql",
        "https://api.github.com/repos/"
      ],
      "authenticated": true,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:io.crates",
      "provider": {
        "name": "Crates.io",
        "url": [
          "https://crates.io"
        ]
      },
      "group": "io.crates",
      "name": "Crates.io",
      "description": "Queried for package metadata and latest version information of Rust crates.",
      "endpoints": [
        "https://crates.io/api/v1/crates"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:org.packagist.repo",
      "provider": {
        "name": "Packagist",
        "url": [
          "https://packagist.org"
        ]
      },
      "group": "org.packagist.repo",
      "name": "Packagist",
      "description": "Queried for latest version information of PHP Composer packages.",
      "endpoints": [
        "https://repo.packagist.org/p/"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:org.rubygems",
      "provider": {
        "name": "RubyGems",
        "url": [
          "https://rubygems.org"
        ]
      },
      "group": "org.rubygems",
      "name": "RubyGems",
      "description": "Queried for package metadata and latest version information of Ruby gems.",
      "endpoints": [
        "https://rubygems.org/api/v1/versions"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:org.golang.proxy",
      "provider": {
        "name": "Google",
        "url": [
          "https://go.dev/"
        ]
      },
      "group": "org.golang.proxy",
      "name": "Go Module Mirror, Index, and Checksum Database",
      "description": "Queried for package metadata and latest version information of Go modules.",
      "endpoints": [
        "https://proxy.golang.org/"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:pm.hex",
      "provider": {
        "name": "Six Colors AB.",
        "url": [
          "https://hex.pm"
        ],
        "contact": [
          {
            "name": "Eric Meadows-J\u00F6nsson",
            "phone": "\u002B46 070-893 94 01"
          }
        ]
      },
      "group": "pm.hex",
      "name": "hex",
      "description": "Queried for package metadata and latest version information of Erlang and Elixir packages.",
      "endpoints": [
        "https://hex.pm/api/packages"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:org.maven.repo1",
      "provider": {
        "name": "Sonatype",
        "url": [
          "https://sonatype.com"
        ]
      },
      "group": "org.maven.repo1",
      "name": "Maven Central",
      "description": "Queried for package metadata and latest version information of Java artifacts.",
      "endpoints": [
        "https://repo1.maven.org/maven2"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:com.atlassian.maven",
      "provider": {
        "name": "Atlassian",
        "url": [
          "https://atlassian.com"
        ]
      },
      "group": "com.atlassian.maven",
      "name": "Atlassian Public",
      "description": "Queried for latest version information of Atlassian-published Maven artifacts.",
      "endpoints": [
        "https://packages.atlassian.com/content/repositories/atlassian-public/"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:org.jboss.repository",
      "provider": {
        "name": "RedHat",
        "url": [
          "https://redhat.com"
        ]
      },
      "group": "org.jboss.repository",
      "name": "JBoss Releases",
      "description": "Queried for latest version information of JBoss-published Maven artifacts.",
      "endpoints": [
        "https://repository.jboss.org/nexus/content/repositories/releases/"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:org.clojars.repo",
      "provider": {
        "name": "Clojars",
        "url": [
          "https://clojars.org/"
        ]
      },
      "group": "org.clojars.repo",
      "name": "Clojars",
      "description": "Queried for latest version information of Clojure libraries.",
      "endpoints": [
        "https://repo.clojars.org/"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:com.google.maven",
      "provider": {
        "name": "Google",
        "url": [
          "https://google.com"
        ]
      },
      "group": "com.google.maven",
      "name": "Google\u0027s Maven Repository",
      "description": "Queried for latest version information of Google and Android Maven artifacts.",
      "endpoints": [
        "https://maven.google.com/"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:org.npmjs.registry",
      "provider": {
        "name": "npm",
        "url": [
          "https://www.npmjs.com/"
        ]
      },
      "group": "org.npmjs.registry",
      "name": "NPM Registry",
      "description": "Queried for package metadata and latest version information of npm packages.",
      "endpoints": [
        "https://registry.npmjs.org/-/package/"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:org.nuget.api",
      "provider": {
        "name": "Microsoft",
        "url": [
          "https://www.microsoft.com/"
        ],
        "contact": [
          {
            "email": "support@nuget.org"
          }
        ]
      },
      "group": "org.nuget.api",
      "name": "NuGet Registry",
      "description": "Queried for package metadata and latest version information of NuGet packages.",
      "endpoints": [
        "https://api.nuget.org/v3-flatcontainer/",
        "https://api.nuget.org/v3/registration3/"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:dev.osv",
      "provider": {
        "name": "Google",
        "url": [
          "https://google.com"
        ]
      },
      "group": "dev.osv",
      "name": "OSV",
      "description": "Used as a vulnerability data source. Per-ecosystem OSV feeds are mirrored to Dependency-Track.",
      "endpoints": [
        "https://osv-vulnerabilities.storage.googleapis.com"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:org.pypi",
      "provider": {
        "name": "Python Software Foundation",
        "url": [
          "https://www.python.org/psf/"
        ],
        "contact": [
          {
            "email": "psf@python.org"
          }
        ]
      },
      "group": "org.pypi",
      "name": "PyPI",
      "description": "Queried for package metadata and latest version information of Python packages.",
      "endpoints": [
        "https://pypi.org/pypi/"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:org.dependencytrack.metrics",
      "provider": {
        "name": "OWASP",
        "url": [
          "https://owasp.org"
        ]
      },
      "group": "org.dependencytrack.metrics",
      "name": "Dependency-Track Telemetry",
      "description": "Receives anonymous usage telemetry submitted by this Dependency-Track instance. Optional.",
      "endpoints": [
        "https://metrics.dependencytrack.org"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "outbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:io.snyk",
      "provider": {
        "name": "Snyk",
        "url": [
          "https://snyk.io"
        ]
      },
      "group": "io.snyk",
      "name": "Snyk",
      "description": "Optional commercial vulnerability analyzer. Queried for component vulnerabilities. Requires a paid subscription.",
      "endpoints": [
        "https://api.snyk.io"
      ],
      "authenticated": true,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:com.empiricalsecurity.epss",
      "provider": {
        "name": "Empirical Security",
        "url": [
          "https://www.first.org/epss/"
        ]
      },
      "group": "com.empiricalsecurity.epss",
      "name": "EPSS",
      "description": "Used as a source of EPSS exploit prediction scores for CVEs. Feeds are mirrored to Dependency-Track.",
      "endpoints": [
        "https://epss.empiricalsecurity.com/epss_scores-current.csv.gz"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:org.metacpan",
      "provider": {
        "name": "The Perl Foundation",
        "url": [
          "https://metacpan.org"
        ]
      },
      "group": "org.metacpan",
      "name": "MetaCPAN",
      "description": "Queried for latest version information of Perl modules on CPAN.",
      "endpoints": [
        "https://fastapi.metacpan.org/v1/"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:org.haskell.hackage",
      "provider": {
        "name": "Haskell.org",
        "url": [
          "https://www.haskell.org"
        ]
      },
      "group": "org.haskell.hackage",
      "name": "Hackage",
      "description": "Queried for latest version information of Haskell packages.",
      "endpoints": [
        "https://hackage.haskell.org/"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:org.nixos.channels",
      "provider": {
        "name": "NixOS Foundation",
        "url": [
          "https://nixos.org"
        ]
      },
      "group": "org.nixos.channels",
      "name": "Nixpkgs",
      "description": "Queried for latest version information of Nixpkgs packages.",
      "endpoints": [
        "https://channels.nixos.org/nixpkgs-unstable/packages.json.br"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.dependencytrack/apiserver@5.1.2?type=jar",
      "dependsOn": [
        "pkg:maven/org.dependencytrack/api@5.1.2?type=jar",
        "pkg:maven/org.dependencytrack/cache-api@5.1.2?type=jar",
        "pkg:maven/org.dependencytrack/cache-provider-database@5.1.2?type=jar",
        "pkg:maven/org.dependencytrack/common-init@5.1.2?type=jar",
        "pkg:maven/org.dependencytrack/common-pagination@5.1.2?type=jar",
        "pkg:maven/org.dependencytrack/datanucleus-plugin@5.1.2?type=jar",
        "pkg:maven/org.dependencytrack/migration@5.1.2?type=jar",
        "pkg:maven/org.dependencytrack/notification-api@5.1.2?type=jar",
        "pkg:maven/org.dependencytrack/notification-publishing@5.1.2?type=jar",
        "pkg:maven/org.dependencytrack/notification-templating@5.1.2?type=jar",
        "pkg:maven/org.dependencytrack/plugin-api@5.1.2?type=jar",
        "pkg:maven/org.dependencytrack/plugin-config@5.1.2?type=jar",
        "pkg:maven/org.dependencytrack/plugin-runtime@5.1.2?type=jar",
        "pkg:maven/org.dependencytrack/proto@5.1.2?type=jar",
        "pkg:maven/org.dependencytrack/secret-management@5.1.2?type=jar",
        "pkg:maven/org.dependencytrack/vuln-analysis-api@5.1.2?type=jar",
        "pkg:maven/org.dependencytrack/vuln-analyzer-internal@5.1.2?type=jar",
        "pkg:maven/org.dependencytrack/vuln-analyzer-checkmarx@5.1.2?type=jar",
        "pkg:maven/org.dependencytrack/package-metadata-api@5.1.2?type=jar",
        "pkg:maven/org.dependencytrack/package-metadata-resolution@5.1.2?type=jar",
        "pkg:maven/org.dependencytrack/vuln-analyzer-oss-index@5.1.2?type=jar",
        "pkg:maven/org.dependencytrack/vuln-analyzer-snyk@5.1.2?type=jar",
        "pkg:maven/org.dependencytrack/vuln-analyzer-trivy@5.1.2?type=jar",
        "pkg:maven/org.dependencytrack/vuln-analyzer-vuln-db@5.1.2?type=jar",
        "pkg:maven/org.dependencytrack/dex-engine@5.1.2?type=jar",
        "pkg:maven/org.dependencytrack/file-storage-api@5.1.2?type=jar",
        "pkg:maven/org.dependencytrack/file-storage-provider-local@5.1.2?type=jar",
        "pkg:maven/org.dependencytrack/file-storage-provider-memory@5.1.2?type=jar",
        "pkg:maven/org.dependencytrack/file-storage-provider-s3@5.1.2?type=jar",
        "pkg:maven/org.dependencytrack/kev-data-source-api@5.1.2?type=jar",
        "pkg:maven/org.dependencytrack/kev-data-source-builtin@5.1.2?type=jar",
        "pkg:maven/org.dependencytrack/vuln-data-source-api@5.1.2?type=jar",
        "pkg:maven/org.dependencytrack/vuln-data-source-github@5.1.2?type=jar",
        "pkg:maven/org.dependencytrack/vuln-data-source-jvn@5.1.2?type=jar",
        "pkg:maven/org.dependencytrack/vuln-data-source-nvd@5.1.2?type=jar",
        "pkg:maven/org.dependencytrack/vuln-data-source-osv@5.1.2?type=jar",
        "pkg:maven/org.dependencytrack/alpine-common@5.1.2?type=jar",
        "pkg:maven/org.dependencytrack/alpine-model@5.1.2?type=jar",
        "pkg:maven/org.dependencytrack/alpine-infra@5.1.2?type=jar",
        "pkg:maven/org.dependencytrack/alpine-server@5.1.2?type=jar",
        "pkg:maven/dev.cel/cel@0.14.0?type=jar",
        "pkg:maven/org.metaeffekt.core/ae-security@0.157.2?type=jar",
        "pkg:maven/com.github.kagkarlsson/db-scheduler@16.12.0?type=jar",
        "pkg:maven/org.dependencytrack/jdbi-support@5.1.2?type=jar",
        "pkg:maven/org.jdbi/jdbi3-core@3.55.0?type=jar",
        "pkg:maven/org.jdbi/jdbi3-jackson2@3.55.0?type=jar",
        "pkg:maven/org.jdbi/jdbi3-sqlobject@3.55.0?type=jar",
        "pkg:maven/org.jdbi/jdbi3-postgres@3.55.0?type=jar",
        "pkg:maven/org.jdbi/jdbi3-freemarker@3.55.0?type=jar",
        "pkg:maven/org.glassfish.jersey.ext/jersey-micrometer@4.0.2?type=jar",
        "pkg:maven/us.springett/owasp-risk-rating-calculator@1.0.1?type=jar",
        "pkg:maven/us.springett/cpe-parser@3.0.1?type=jar",
        "pkg:maven/org.cyclonedx/cyclonedx-core-java@13.2.0?type=jar",
        "pkg:maven/jakarta.servlet/jakarta.servlet-api@6.1.0?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-server@12.1.13?type=jar",
        "pkg:maven/org.eclipse.jetty.compression/jetty-compression-gzip@12.1.13?type=jar",
        "pkg:maven/org.eclipse.jetty.compression/jetty-compression-zstandard@12.1.13?type=jar",
        "pkg:maven/org.eclipse.jetty.compression/jetty-compression-server@12.1.13?type=jar",
        "pkg:maven/org.eclipse.jetty.ee11/jetty-ee11-servlet@12.1.13?type=jar",
        "pkg:maven/org.slf4j/jul-to-slf4j@2.0.20?type=jar",
        "pkg:maven/io.swagger.core.v3/swagger-annotations-jakarta@2.2.55?type=jar",
        "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.22.3?type=jar",
        "pkg:maven/com.github.package-url/packageurl-java@1.5.0?type=jar",
        "pkg:maven/com.asahaf.javacron/javacron@1.4.0?type=jar",
        "pkg:maven/io.micrometer/micrometer-java11@1.17.1?type=jar",
        "pkg:maven/io.micrometer/micrometer-registry-prometheus@1.17.1?type=jar",
        "pkg:maven/io.prometheus/prometheus-metrics-exposition-textformats@1.9.0?type=jar",
        "pkg:maven/io.github.mweirauch/micrometer-jvm-extras@0.3.0?type=jar",
        "pkg:maven/io.pebbletemplates/pebble@4.1.2?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java-util@4.36.2?type=jar",
        "pkg:maven/com.fasterxml.woodstox/woodstox-core@7.2.2?type=jar",
        "pkg:maven/io.github.nscuro/versatile-core@0.26.0?type=jar",
        "pkg:maven/org.postgresql/postgresql@42.7.13?type=jar",
        "pkg:maven/com.google.cloud.sql/postgres-socket-factory@1.29.0?type=jar",
        "pkg:maven/io.github.resilience4j/resilience4j-core@2.4.0?type=jar",
        "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.22.3?type=jar",
        "pkg:maven/io.minio/minio@9.0.3?type=jar",
        "pkg:maven/com.squareup.okhttp3/okhttp-jvm@5.5.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/api@5.1.2?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.dependencytrack/cache-api@5.1.2?type=jar",
      "dependsOn": [
        "pkg:maven/org.jspecify/jspecify@1.0.1?type=jar",
        "pkg:maven/org.eclipse.microprofile.config/microprofile-config-api@3.1.2?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.jspecify/jspecify@1.0.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.eclipse.microprofile.config/microprofile-config-api@3.1.2?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.dependencytrack/cache-provider-database@5.1.2?type=jar",
      "dependsOn": [
        "pkg:maven/org.dependencytrack/common-datasource@5.1.2?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.1?type=jar",
        "pkg:maven/io.micrometer/micrometer-core@1.17.1?type=jar",
        "pkg:maven/org.eclipse.microprofile.config/microprofile-config-api@3.1.2?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.20?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/common-datasource@5.1.2?type=jar",
      "dependsOn": [
        "pkg:maven/org.dependencytrack/common-health@5.1.2?type=jar",
        "pkg:maven/com.zaxxer/HikariCP@7.1.0?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.1?type=jar",
        "pkg:maven/io.micrometer/micrometer-core@1.17.1?type=jar",
        "pkg:maven/org.postgresql/postgresql@42.7.13?type=jar",
        "pkg:maven/io.smallrye.config/smallrye-config-core@3.18.3?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/common-health@5.1.2?type=jar",
      "dependsOn": [
        "pkg:maven/org.jspecify/jspecify@1.0.1?type=jar",
        "pkg:maven/org.eclipse.microprofile.health/microprofile-health-api@4.0.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.eclipse.microprofile.health/microprofile-health-api@4.0.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.zaxxer/HikariCP@7.1.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.slf4j/slf4j-api@2.0.20?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.slf4j/slf4j-api@2.0.20?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/io.micrometer/micrometer-core@1.17.1?type=jar",
      "dependsOn": [
        "pkg:maven/org.jspecify/jspecify@1.0.1?type=jar",
        "pkg:maven/io.micrometer/micrometer-commons@1.17.1?type=jar",
        "pkg:maven/io.micrometer/micrometer-observation@1.17.1?type=jar",
        "pkg:maven/org.hdrhistogram/HdrHistogram@2.2.2?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.micrometer/micrometer-commons@1.17.1?type=jar",
      "dependsOn": [
        "pkg:maven/org.jspecify/jspecify@1.0.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.micrometer/micrometer-observation@1.17.1?type=jar",
      "dependsOn": [
        "pkg:maven/org.jspecify/jspecify@1.0.1?type=jar",
        "pkg:maven/io.micrometer/micrometer-commons@1.17.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.hdrhistogram/HdrHistogram@2.2.2?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.postgresql/postgresql@42.7.13?type=jar",
      "dependsOn": [
        "pkg:maven/org.checkerframework/checker-qual@3.55.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.checkerframework/checker-qual@3.55.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/io.smallrye.config/smallrye-config-core@3.18.3?type=jar",
      "dependsOn": [
        "pkg:maven/org.eclipse.microprofile.config/microprofile-config-api@3.1.2?type=jar",
        "pkg:maven/jakarta.annotation/jakarta.annotation-api@3.0.0?type=jar",
        "pkg:maven/io.smallrye.common/smallrye-common-annotation@2.20.0?type=jar",
        "pkg:maven/io.smallrye.common/smallrye-common-expression@2.20.0?type=jar",
        "pkg:maven/io.smallrye.common/smallrye-common-constraint@2.20.0?type=jar",
        "pkg:maven/io.smallrye.common/smallrye-common-classloader@2.20.0?type=jar",
        "pkg:maven/org.jboss.logging/jboss-logging@3.6.3.Final?type=jar",
        "pkg:maven/org.ow2.asm/asm@9.10.1?type=jar",
        "pkg:maven/io.smallrye.config/smallrye-config-common@3.18.3?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/jakarta.annotation/jakarta.annotation-api@3.0.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/io.smallrye.common/smallrye-common-annotation@2.20.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/io.smallrye.common/smallrye-common-expression@2.20.0?type=jar",
      "dependsOn": [
        "pkg:maven/io.smallrye.common/smallrye-common-function@2.20.0?type=jar",
        "pkg:maven/org.jboss.logging/jboss-logging@3.6.3.Final?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.smallrye.common/smallrye-common-function@2.20.0?type=jar",
      "dependsOn": [
        "pkg:maven/io.smallrye.common/smallrye-common-constraint@2.20.0?type=jar",
        "pkg:maven/org.jboss.logging/jboss-logging@3.6.3.Final?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.smallrye.common/smallrye-common-constraint@2.20.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.jboss.logging/jboss-logging@3.6.3.Final?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.jboss.logging/jboss-logging@3.6.3.Final?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/io.smallrye.common/smallrye-common-classloader@2.20.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.ow2.asm/asm@9.10.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/io.smallrye.config/smallrye-config-common@3.18.3?type=jar",
      "dependsOn": [
        "pkg:maven/org.eclipse.microprofile.config/microprofile-config-api@3.1.2?type=jar",
        "pkg:maven/io.smallrye.common/smallrye-common-classloader@2.20.0?type=jar",
        "pkg:maven/org.jboss.logging/jboss-logging@3.6.3.Final?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/common-init@5.1.2?type=jar",
      "dependsOn": [
        "pkg:maven/org.jspecify/jspecify@1.0.1?type=jar",
        "pkg:maven/org.eclipse.microprofile.config/microprofile-config-api@3.1.2?type=jar",
        "pkg:maven/org.eclipse.microprofile.health/microprofile-health-api@4.0.1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.20?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/common-pagination@5.1.2?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-cbor@2.22.3?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-cbor@2.22.3?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.22.3?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.22.3?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.22.3?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.22.3?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.22?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.22.3?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.22?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.dependencytrack/datanucleus-plugin@5.1.2?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml.uuid/java-uuid-generator@5.2.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.fasterxml.uuid/java-uuid-generator@5.2.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.slf4j/slf4j-api@2.0.20?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/migration@5.1.2?type=jar",
      "dependsOn": [
        "pkg:maven/org.dependencytrack/flyway-support@5.1.2?type=jar",
        "pkg:maven/org.flywaydb/flyway-database-postgresql@13.8.0?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.20?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/flyway-support@5.1.2?type=jar",
      "dependsOn": [
        "pkg:maven/org.flywaydb/flyway-core@13.8.0?type=jar",
        "pkg:maven/org.flywaydb/flyway-database-postgresql@13.8.0?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.flywaydb/flyway-core@13.8.0?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.22?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.flywaydb/flyway-database-postgresql@13.8.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.flywaydb/flyway-core@13.8.0?type=jar",
        "pkg:maven/org.flywaydb/flyway-database-cockroachdb@13.8.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.flywaydb/flyway-database-cockroachdb@13.8.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.flywaydb/flyway-core@13.8.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/notification-api@5.1.2?type=jar",
      "dependsOn": [
        "pkg:maven/org.dependencytrack/net-support@5.1.2?type=jar",
        "pkg:maven/com.fasterxml.uuid/java-uuid-generator@5.2.0?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.1?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java@4.36.2?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java-util@4.36.2?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/net-support@5.1.2?type=jar",
      "dependsOn": [
        "pkg:maven/org.jspecify/jspecify@1.0.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.google.protobuf/protobuf-java@4.36.2?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.google.protobuf/protobuf-java-util@4.36.2?type=jar",
      "dependsOn": [
        "pkg:maven/com.google.protobuf/protobuf-java@4.36.2?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
        "pkg:maven/com.google.code.gson/gson@2.14.0?type=jar",
        "pkg:maven/com.google.errorprone/error_prone_annotations@2.50.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.google.code.gson/gson@2.14.0?type=jar",
      "dependsOn": [
        "pkg:maven/com.google.errorprone/error_prone_annotations@2.50.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.google.errorprone/error_prone_annotations@2.50.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.dependencytrack/notification-publishing@5.1.2?type=jar",
      "dependsOn": [
        "pkg:maven/org.eclipse.angus/angus-mail@2.0.5?type=jar",
        "pkg:maven/com.github.ben-manes.caffeine/caffeine@3.3.0?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.22.3?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.1?type=jar",
        "pkg:maven/org.apache.kafka/kafka-clients@4.3.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.eclipse.angus/angus-mail@2.0.5?type=jar",
      "dependsOn": [
        "pkg:maven/jakarta.activation/jakarta.activation-api@2.1.4?type=jar",
        "pkg:maven/jakarta.mail/jakarta.mail-api@2.1.5?type=jar",
        "pkg:maven/org.eclipse.angus/angus-activation@2.0.3?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/jakarta.activation/jakarta.activation-api@2.1.4?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/jakarta.mail/jakarta.mail-api@2.1.5?type=jar",
      "dependsOn": [
        "pkg:maven/jakarta.activation/jakarta.activation-api@2.1.4?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.eclipse.angus/angus-activation@2.0.3?type=jar",
      "dependsOn": [
        "pkg:maven/jakarta.activation/jakarta.activation-api@2.1.4?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.github.ben-manes.caffeine/caffeine@3.3.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.jspecify/jspecify@1.0.1?type=jar",
        "pkg:maven/com.google.errorprone/error_prone_annotations@2.50.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.apache.kafka/kafka-clients@4.3.1?type=jar",
      "dependsOn": [
        "pkg:maven/com.github.luben/zstd-jni@1.5.7-20?type=jar",
        "pkg:maven/org.xerial.snappy/snappy-java@1.1.10.8?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.20?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.github.luben/zstd-jni@1.5.7-20?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.xerial.snappy/snappy-java@1.1.10.8?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.dependencytrack/notification-templating@5.1.2?type=jar",
      "dependsOn": [
        "pkg:maven/com.github.ben-manes.caffeine/caffeine@3.3.0?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.1?type=jar",
        "pkg:maven/io.pebbletemplates/pebble@4.1.2?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java-util@4.36.2?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.pebbletemplates/pebble@4.1.2?type=jar",
      "dependsOn": [
        "pkg:maven/org.unbescape/unbescape@1.1.6.RELEASE?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.20?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.unbescape/unbescape@1.1.6.RELEASE?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.dependencytrack/plugin-api@5.1.2?type=jar",
      "dependsOn": [
        "pkg:maven/org.dependencytrack/cache-api@5.1.2?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/plugin-config@5.1.2?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.22.3?type=jar",
        "pkg:maven/com.networknt/json-schema-validator@2.0.7?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.20?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.networknt/json-schema-validator@2.0.7?type=jar",
      "dependsOn": [
        "pkg:maven/com.ethlo.time/itu@1.14.0?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.22.3?type=jar",
        "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.22.3?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.20?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.ethlo.time/itu@1.14.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.22.3?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.22.3?type=jar",
        "pkg:maven/org.yaml/snakeyaml@2.6?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.22.3?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.yaml/snakeyaml@2.6?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.dependencytrack/plugin-runtime@5.1.2?type=jar",
      "dependsOn": [
        "pkg:maven/org.dependencytrack/cache-api@5.1.2?type=jar",
        "pkg:maven/org.dependencytrack/common-config@5.1.2?type=jar",
        "pkg:maven/org.dependencytrack/plugin-config@5.1.2?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.22.3?type=jar",
        "pkg:maven/org.jdbi/jdbi3-core@3.55.0?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.1?type=jar",
        "pkg:maven/org.eclipse.microprofile.config/microprofile-config-api@3.1.2?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.20?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/common-config@5.1.2?type=jar",
      "dependsOn": [
        "pkg:maven/org.jspecify/jspecify@1.0.1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.20?type=jar",
        "pkg:maven/io.smallrye.config/smallrye-config-core@3.18.3?type=jar",
        "pkg:maven/org.dependencytrack/smallrye-config-secret-handler-file@5.1.2?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/smallrye-config-secret-handler-file@5.1.2?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.jdbi/jdbi3-core@3.55.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.slf4j/slf4j-api@2.0.20?type=jar",
        "pkg:maven/io.leangen.geantyref/geantyref@2.0.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.leangen.geantyref/geantyref@2.0.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.dependencytrack/proto@5.1.2?type=jar",
      "dependsOn": [
        "pkg:maven/org.dependencytrack/cyclonedx-proto@5.1.2?type=jar",
        "pkg:maven/org.dependencytrack/file-storage-api@5.1.2?type=jar",
        "pkg:maven/org.dependencytrack/notification-api@5.1.2?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java@4.36.2?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/cyclonedx-proto@5.1.2?type=jar",
      "dependsOn": [
        "pkg:maven/com.google.protobuf/protobuf-java@4.36.2?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/file-storage-api@5.1.2?type=jar",
      "dependsOn": [
        "pkg:maven/org.jspecify/jspecify@1.0.1?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java@4.36.2?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/secret-management@5.1.2?type=jar",
      "dependsOn": [
        "pkg:maven/org.dependencytrack/common-datasource@5.1.2?type=jar",
        "pkg:maven/org.dependencytrack/common-pagination@5.1.2?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.1?type=jar",
        "pkg:maven/org.postgresql/postgresql@42.7.13?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.20?type=jar",
        "pkg:maven/com.google.crypto.tink/tink@1.23.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.google.crypto.tink/tink@1.23.0?type=jar",
      "dependsOn": [
        "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
        "pkg:maven/com.google.code.gson/gson@2.14.0?type=jar",
        "pkg:maven/com.google.errorprone/error_prone_annotations@2.50.0?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java@4.36.2?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/vuln-analysis-api@5.1.2?type=jar",
      "dependsOn": [
        "pkg:maven/org.dependencytrack/cyclonedx-proto@5.1.2?type=jar",
        "pkg:maven/org.dependencytrack/net-support@5.1.2?type=jar",
        "pkg:maven/org.dependencytrack/plugin-api@5.1.2?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/vuln-analyzer-internal@5.1.2?type=jar",
      "dependsOn": [
        "pkg:maven/org.dependencytrack/jdbi-support@5.1.2?type=jar",
        "pkg:maven/org.dependencytrack/os-distro-metadata@5.1.2?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.22.3?type=jar",
        "pkg:maven/org.jdbi/jdbi3-core@3.55.0?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.20?type=jar",
        "pkg:maven/io.github.nscuro/versatile-core@0.26.0?type=jar",
        "pkg:maven/us.springett/cpe-parser@3.0.1?type=jar",
        "pkg:maven/com.github.package-url/packageurl-java@1.5.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/jdbi-support@5.1.2?type=jar",
      "dependsOn": [
        "pkg:maven/com.github.package-url/packageurl-java@1.5.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.github.package-url/packageurl-java@1.5.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.dependencytrack/os-distro-metadata@5.1.2?type=jar",
      "dependsOn": [
        "pkg:maven/us.springett/cpe-parser@3.0.1?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.1?type=jar",
        "pkg:maven/com.github.package-url/packageurl-java@1.5.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/us.springett/cpe-parser@3.0.1?type=jar",
      "dependsOn": [
        "pkg:maven/org.slf4j/slf4j-api@2.0.20?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.github.nscuro/versatile-core@0.26.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.jspecify/jspecify@1.0.1?type=jar",
        "pkg:maven/org.apache.maven/maven-artifact@3.9.16?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.apache.maven/maven-artifact@3.9.16?type=jar",
      "dependsOn": [
        "pkg:maven/org.codehaus.plexus/plexus-utils@3.6.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.codehaus.plexus/plexus-utils@3.6.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.dependencytrack/vuln-analyzer-checkmarx@5.1.2?type=jar",
      "dependsOn": [
        "pkg:maven/org.metaeffekt.core/ae-security@0.157.2?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.22.3?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.1?type=jar",
        "pkg:maven/com.github.package-url/packageurl-java@1.5.0?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java-util@4.36.2?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.20?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.metaeffekt.core/ae-security@0.157.2?type=jar",
      "dependsOn": [
        "pkg:maven/org.apache.commons/commons-lang3@3.21.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.20?type=jar",
        "pkg:maven/org.slf4j/jcl-over-slf4j@2.0.20?type=jar",
        "pkg:maven/commons-io/commons-io@2.22.0?type=jar",
        "pkg:maven/org.json/json@20231013?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.apache.commons/commons-lang3@3.21.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.slf4j/jcl-over-slf4j@2.0.20?type=jar",
      "dependsOn": [
        "pkg:maven/org.slf4j/slf4j-api@2.0.20?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/commons-io/commons-io@2.22.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.json/json@20231013?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.dependencytrack/package-metadata-api@5.1.2?type=jar",
      "dependsOn": [
        "pkg:maven/org.dependencytrack/net-support@5.1.2?type=jar",
        "pkg:maven/org.dependencytrack/plugin-api@5.1.2?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.1?type=jar",
        "pkg:maven/com.github.package-url/packageurl-java@1.5.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/package-metadata-resolution@5.1.2?type=jar",
      "dependsOn": [
        "pkg:maven/org.dependencytrack/net-support@5.1.2?type=jar",
        "pkg:maven/org.brotli/dec@0.1.2?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.22.3?type=jar",
        "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.22.3?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java@4.36.2?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.1?type=jar",
        "pkg:maven/com.github.package-url/packageurl-java@1.5.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.20?type=jar",
        "pkg:maven/io.github.nscuro/versatile-core@0.26.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.brotli/dec@0.1.2?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.22.3?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.22?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.22.3?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.22.3?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/vuln-analyzer-oss-index@5.1.2?type=jar",
      "dependsOn": [
        "pkg:maven/org.metaeffekt.core/ae-security@0.157.2?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.22.3?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.1?type=jar",
        "pkg:maven/com.github.package-url/packageurl-java@1.5.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.20?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/vuln-analyzer-snyk@5.1.2?type=jar",
      "dependsOn": [
        "pkg:maven/org.metaeffekt.core/ae-security@0.157.2?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.22.3?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.1?type=jar",
        "pkg:maven/com.github.package-url/packageurl-java@1.5.0?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java-util@4.36.2?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.20?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/vuln-analyzer-trivy@5.1.2?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.22.3?type=jar",
        "pkg:maven/com.github.package-url/packageurl-java@1.5.0?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java@4.36.2?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java-util@4.36.2?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.20?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/vuln-analyzer-vuln-db@5.1.2?type=jar",
      "dependsOn": [
        "pkg:maven/org.metaeffekt.core/ae-security@0.157.2?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.22.3?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.20?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/dex-engine@5.1.2?type=jar",
      "dependsOn": [
        "pkg:maven/org.dependencytrack/dex-api@5.1.2?type=jar",
        "pkg:maven/org.dependencytrack/dex-engine-api@5.1.2?type=jar",
        "pkg:maven/org.dependencytrack/dex-engine-migration@5.1.2?type=jar",
        "pkg:maven/com.github.ben-manes.caffeine/caffeine@3.3.0?type=jar",
        "pkg:maven/com.fasterxml.uuid/java-uuid-generator@5.2.0?type=jar",
        "pkg:maven/org.jdbi/jdbi3-core@3.55.0?type=jar",
        "pkg:maven/org.jdbi/jdbi3-freemarker@3.55.0?type=jar",
        "pkg:maven/org.jdbi/jdbi3-jackson2@3.55.0?type=jar",
        "pkg:maven/org.jdbi/jdbi3-postgres@3.55.0?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.1?type=jar",
        "pkg:maven/io.micrometer/micrometer-core@1.17.1?type=jar",
        "pkg:maven/org.postgresql/postgresql@42.7.13?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java@4.36.2?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java-util@4.36.2?type=jar",
        "pkg:maven/io.github.resilience4j/resilience4j-circuitbreaker@2.4.0?type=jar",
        "pkg:maven/io.github.resilience4j/resilience4j-core@2.4.0?type=jar",
        "pkg:maven/io.github.resilience4j/resilience4j-micrometer@2.4.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.20?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/dex-api@5.1.2?type=jar",
      "dependsOn": [
        "pkg:maven/org.jspecify/jspecify@1.0.1?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java@4.36.2?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java-util@4.36.2?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.20?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/dex-engine-api@5.1.2?type=jar",
      "dependsOn": [
        "pkg:maven/org.dependencytrack/common-pagination@5.1.2?type=jar",
        "pkg:maven/org.dependencytrack/dex-api@5.1.2?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.1?type=jar",
        "pkg:maven/io.micrometer/micrometer-core@1.17.1?type=jar",
        "pkg:maven/org.eclipse.microprofile.health/microprofile-health-api@4.0.1?type=jar",
        "pkg:maven/io.github.resilience4j/resilience4j-core@2.4.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.github.resilience4j/resilience4j-core@2.4.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.slf4j/slf4j-api@2.0.20?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/dex-engine-migration@5.1.2?type=jar",
      "dependsOn": [
        "pkg:maven/org.dependencytrack/flyway-support@5.1.2?type=jar",
        "pkg:maven/org.flywaydb/flyway-database-postgresql@13.8.0?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.jdbi/jdbi3-freemarker@3.55.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.jdbi/jdbi3-core@3.55.0?type=jar",
        "pkg:maven/org.freemarker/freemarker@2.3.34?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.freemarker/freemarker@2.3.34?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.jdbi/jdbi3-jackson2@3.55.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.jdbi/jdbi3-core@3.55.0?type=jar",
        "pkg:maven/org.jdbi/jdbi3-json@3.55.0?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.22.3?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.22.3?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.22?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.jdbi/jdbi3-json@3.55.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.jdbi/jdbi3-core@3.55.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.jdbi/jdbi3-postgres@3.55.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.jdbi/jdbi3-core@3.55.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.github.resilience4j/resilience4j-circuitbreaker@2.4.0?type=jar",
      "dependsOn": [
        "pkg:maven/io.github.resilience4j/resilience4j-core@2.4.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.20?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.github.resilience4j/resilience4j-micrometer@2.4.0?type=jar",
      "dependsOn": [
        "pkg:maven/io.micrometer/micrometer-core@1.17.1?type=jar",
        "pkg:maven/io.micrometer/micrometer-observation@1.17.1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.20?type=jar",
        "pkg:maven/io.github.resilience4j/resilience4j-bulkhead@2.4.0?type=jar",
        "pkg:maven/io.github.resilience4j/resilience4j-circuitbreaker@2.4.0?type=jar",
        "pkg:maven/io.github.resilience4j/resilience4j-retry@2.4.0?type=jar",
        "pkg:maven/io.github.resilience4j/resilience4j-ratelimiter@2.4.0?type=jar",
        "pkg:maven/io.github.resilience4j/resilience4j-timelimiter@2.4.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.github.resilience4j/resilience4j-bulkhead@2.4.0?type=jar",
      "dependsOn": [
        "pkg:maven/io.github.resilience4j/resilience4j-core@2.4.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.20?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.github.resilience4j/resilience4j-retry@2.4.0?type=jar",
      "dependsOn": [
        "pkg:maven/io.github.resilience4j/resilience4j-core@2.4.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.20?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.github.resilience4j/resilience4j-ratelimiter@2.4.0?type=jar",
      "dependsOn": [
        "pkg:maven/io.github.resilience4j/resilience4j-core@2.4.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.20?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.github.resilience4j/resilience4j-timelimiter@2.4.0?type=jar",
      "dependsOn": [
        "pkg:maven/io.github.resilience4j/resilience4j-core@2.4.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.20?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/file-storage-provider-local@5.1.2?type=jar",
      "dependsOn": [
        "pkg:maven/com.github.luben/zstd-jni@1.5.7-20?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/file-storage-provider-memory@5.1.2?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.dependencytrack/file-storage-provider-s3@5.1.2?type=jar",
      "dependsOn": [
        "pkg:maven/io.minio/minio@9.0.3?type=jar",
        "pkg:maven/com.squareup.okhttp3/okhttp-jvm@5.5.0?type=jar",
        "pkg:maven/com.github.luben/zstd-jni@1.5.7-20?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.minio/minio@9.0.3?type=jar",
      "dependsOn": [
        "pkg:maven/com.carrotsearch.thirdparty/simple-xml-safe@2.7.1?type=jar",
        "pkg:maven/com.google.guava/guava@33.7.1-jre?type=jar",
        "pkg:maven/com.squareup.okhttp3/okhttp@5.3.2?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.22?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.22.3?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.22.3?type=jar",
        "pkg:maven/org.apache.commons/commons-compress@1.28.0?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.22.1?type=jar",
        "pkg:maven/org.xerial.snappy/snappy-java@1.1.10.8?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.carrotsearch.thirdparty/simple-xml-safe@2.7.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.google.guava/guava@33.7.1-jre?type=jar",
      "dependsOn": [
        "pkg:maven/com.google.guava/failureaccess@1.0.3?type=jar",
        "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.1?type=jar",
        "pkg:maven/com.google.errorprone/error_prone_annotations@2.50.0?type=jar",
        "pkg:maven/com.google.j2objc/j2objc-annotations@3.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.google.guava/failureaccess@1.0.3?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.google.j2objc/j2objc-annotations@3.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.squareup.okhttp3/okhttp@5.3.2?type=jar",
      "dependsOn": [
        "pkg:maven/org.jetbrains.kotlin/kotlin-stdlib@2.4.20?type=jar",
        "pkg:maven/com.squareup.okio/okio@3.16.4?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.jetbrains.kotlin/kotlin-stdlib@2.4.20?type=jar",
      "dependsOn": [
        "pkg:maven/org.jetbrains/annotations@13.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.jetbrains/annotations@13.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.squareup.okio/okio@3.16.4?type=jar",
      "dependsOn": [
        "pkg:maven/com.squareup.okio/okio-jvm@3.18.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.squareup.okio/okio-jvm@3.18.1?type=jar",
      "dependsOn": [
        "pkg:maven/org.jetbrains.kotlin/kotlin-stdlib@2.4.20?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.apache.commons/commons-compress@1.28.0?type=jar",
      "dependsOn": [
        "pkg:maven/commons-codec/commons-codec@1.22.1?type=jar",
        "pkg:maven/commons-io/commons-io@2.22.0?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.21.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/commons-codec/commons-codec@1.22.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.squareup.okhttp3/okhttp-jvm@5.5.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.jetbrains.kotlin/kotlin-stdlib@2.4.20?type=jar",
        "pkg:maven/com.squareup.okio/okio-jvm@3.18.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/kev-data-source-api@5.1.2?type=jar",
      "dependsOn": [
        "pkg:maven/org.dependencytrack/plugin-api@5.1.2?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.22.3?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/kev-data-source-builtin@5.1.2?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.22.3?type=jar",
        "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.22.3?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/vuln-data-source-api@5.1.2?type=jar",
      "dependsOn": [
        "pkg:maven/org.dependencytrack/plugin-api@5.1.2?type=jar",
        "pkg:maven/org.dependencytrack/cyclonedx-proto@5.1.2?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/vuln-data-source-github@5.1.2?type=jar",
      "dependsOn": [
        "pkg:maven/org.apache.commons/commons-lang3@3.21.0?type=jar",
        "pkg:maven/org.metaeffekt.core/ae-security@0.157.2?type=jar",
        "pkg:maven/org.apache.httpcomponents.client5/httpclient5@5.6.4?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.22?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.22.3?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.1?type=jar",
        "pkg:maven/io.github.jeremylong/open-vulnerability-clients@9.0.7?type=jar",
        "pkg:maven/com.github.package-url/packageurl-java@1.5.0?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java-util@4.36.2?type=jar",
        "pkg:maven/io.github.nscuro/versatile-core@0.26.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.apache.httpcomponents.client5/httpclient5@5.6.4?type=jar",
      "dependsOn": [
        "pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.4.3?type=jar",
        "pkg:maven/org.apache.httpcomponents.core5/httpcore5-h2@5.4.3?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.20?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.4.3?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.apache.httpcomponents.core5/httpcore5-h2@5.4.3?type=jar",
      "dependsOn": [
        "pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.4.3?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.github.jeremylong/open-vulnerability-clients@9.0.7?type=jar",
      "dependsOn": [
        "pkg:maven/org.jspecify/jspecify@1.0.1?type=jar",
        "pkg:maven/org.apache.httpcomponents.client5/httpclient5@5.6.4?type=jar",
        "pkg:maven/org.apache.httpcomponents.client5/httpclient5-cache@5.6.4?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.22.3?type=jar",
        "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.22.3?type=jar",
        "pkg:maven/com.samskivert/jmustache@1.16?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.apache.httpcomponents.client5/httpclient5-cache@5.6.4?type=jar",
      "dependsOn": [
        "pkg:maven/org.apache.httpcomponents.client5/httpclient5@5.6.4?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.20?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.samskivert/jmustache@1.16?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.dependencytrack/vuln-data-source-jvn@5.1.2?type=jar",
      "dependsOn": [
        "pkg:maven/us.springett/cpe-parser@3.0.1?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.22?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java-util@4.36.2?type=jar",
        "pkg:maven/io.github.nscuro/versatile-core@0.26.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/vuln-data-source-nvd@5.1.2?type=jar",
      "dependsOn": [
        "pkg:maven/us.springett/cpe-parser@3.0.1?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.22.3?type=jar",
        "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.22.3?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.1?type=jar",
        "pkg:maven/io.github.jeremylong/open-vulnerability-clients@9.0.7?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java-util@4.36.2?type=jar",
        "pkg:maven/io.github.nscuro/versatile-core@0.26.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/vuln-data-source-osv@5.1.2?type=jar",
      "dependsOn": [
        "pkg:maven/org.dependencytrack/os-distro-metadata@5.1.2?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.21.0?type=jar",
        "pkg:maven/org.metaeffekt.core/ae-security@0.157.2?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.22.3?type=jar",
        "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.22.3?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.1?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java-util@4.36.2?type=jar",
        "pkg:maven/io.github.nscuro/versatile-core@0.26.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/alpine-common@5.1.2?type=jar",
      "dependsOn": [
        "pkg:maven/org.dependencytrack/common-config@5.1.2?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.20?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.22?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/alpine-model@5.1.2?type=jar",
      "dependsOn": [
        "pkg:maven/org.dependencytrack/alpine-common@5.1.2?type=jar",
        "pkg:maven/org.datanucleus/datanucleus-api-jdo@6.0.5?type=jar",
        "pkg:maven/org.datanucleus/datanucleus-core@6.0.11?type=jar",
        "pkg:maven/org.datanucleus/javax.jdo@3.2.1?type=jar",
        "pkg:maven/org.glassfish.jersey.ext/jersey-bean-validation@4.0.2?type=jar",
        "pkg:maven/io.swagger.core.v3/swagger-annotations-jakarta@2.2.55?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.datanucleus/datanucleus-api-jdo@6.0.5?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.datanucleus/datanucleus-core@6.0.11?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.datanucleus/javax.jdo@3.2.1?type=jar",
      "dependsOn": [
        "pkg:maven/javax.transaction/javax.transaction-api@1.3?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/javax.transaction/javax.transaction-api@1.3?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.glassfish.jersey.ext/jersey-bean-validation@4.0.2?type=jar",
      "dependsOn": [
        "pkg:maven/jakarta.inject/jakarta.inject-api@2.0.1?type=jar",
        "pkg:maven/org.glassfish.jersey.core/jersey-common@4.0.2?type=jar",
        "pkg:maven/org.glassfish.jersey.core/jersey-server@4.0.2?type=jar",
        "pkg:maven/jakarta.validation/jakarta.validation-api@3.1.1?type=jar",
        "pkg:maven/org.hibernate.validator/hibernate-validator@8.0.2.Final?type=jar",
        "pkg:maven/org.jboss.logging/jboss-logging@3.6.3.Final?type=jar",
        "pkg:maven/jakarta.el/jakarta.el-api@6.0.1?type=jar",
        "pkg:maven/org.glassfish.expressly/expressly@5.0.0?type=jar",
        "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@4.0.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/jakarta.inject/jakarta.inject-api@2.0.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.glassfish.jersey.core/jersey-common@4.0.2?type=jar",
      "dependsOn": [
        "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@4.0.0?type=jar",
        "pkg:maven/jakarta.annotation/jakarta.annotation-api@3.0.0?type=jar",
        "pkg:maven/jakarta.inject/jakarta.inject-api@2.0.1?type=jar",
        "pkg:maven/org.glassfish.hk2/osgi-resource-locator@3.0.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@4.0.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.glassfish.hk2/osgi-resource-locator@3.0.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.glassfish.jersey.core/jersey-server@4.0.2?type=jar",
      "dependsOn": [
        "pkg:maven/org.glassfish.jersey.core/jersey-common@4.0.2?type=jar",
        "pkg:maven/org.glassfish.jersey.core/jersey-client@4.0.2?type=jar",
        "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@4.0.0?type=jar",
        "pkg:maven/jakarta.annotation/jakarta.annotation-api@3.0.0?type=jar",
        "pkg:maven/jakarta.inject/jakarta.inject-api@2.0.1?type=jar",
        "pkg:maven/jakarta.validation/jakarta.validation-api@3.1.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.glassfish.jersey.core/jersey-client@4.0.2?type=jar",
      "dependsOn": [
        "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@4.0.0?type=jar",
        "pkg:maven/org.glassfish.jersey.core/jersey-common@4.0.2?type=jar",
        "pkg:maven/jakarta.inject/jakarta.inject-api@2.0.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/jakarta.validation/jakarta.validation-api@3.1.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.hibernate.validator/hibernate-validator@8.0.2.Final?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml/classmate@1.5.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.fasterxml/classmate@1.5.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/jakarta.el/jakarta.el-api@6.0.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.glassfish.expressly/expressly@5.0.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/io.swagger.core.v3/swagger-annotations-jakarta@2.2.55?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.dependencytrack/alpine-infra@5.1.2?type=jar",
      "dependsOn": [
        "pkg:maven/org.dependencytrack/alpine-common@5.1.2?type=jar",
        "pkg:maven/org.dependencytrack/alpine-model@5.1.2?type=jar",
        "pkg:maven/io.micrometer/micrometer-core@1.17.1?type=jar",
        "pkg:maven/org.datanucleus/javax.jdo@3.2.1?type=jar",
        "pkg:maven/org.datanucleus/datanucleus-api-jdo@6.0.5?type=jar",
        "pkg:maven/org.datanucleus/datanucleus-core@6.0.11?type=jar",
        "pkg:maven/org.datanucleus/datanucleus-rdbms@6.0.11?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.datanucleus/datanucleus-rdbms@6.0.11?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.dependencytrack/alpine-server@5.1.2?type=jar",
      "dependsOn": [
        "pkg:maven/org.dependencytrack/common-datasource@5.1.2?type=jar",
        "pkg:maven/org.dependencytrack/alpine-common@5.1.2?type=jar",
        "pkg:maven/org.dependencytrack/alpine-infra@5.1.2?type=jar",
        "pkg:maven/org.dependencytrack/alpine-model@5.1.2?type=jar",
        "pkg:maven/org.glassfish.jersey.containers/jersey-container-servlet@4.0.2?type=jar",
        "pkg:maven/org.glassfish.jersey.media/jersey-media-json-jackson@4.0.2?type=jar",
        "pkg:maven/org.glassfish.jersey.media/jersey-media-multipart@4.0.2?type=jar",
        "pkg:maven/org.glassfish.jersey.ext/jersey-bean-validation@4.0.2?type=jar",
        "pkg:maven/org.glassfish.jersey.inject/jersey-hk2@4.0.2?type=jar",
        "pkg:maven/jakarta.json/jakarta.json-api@2.1.3?type=jar",
        "pkg:maven/org.eclipse.parsson/jakarta.json@1.1.9?type=jar",
        "pkg:maven/io.swagger.core.v3/swagger-annotations-jakarta@2.2.55?type=jar",
        "pkg:maven/org.datanucleus/javax.jdo@3.2.1?type=jar",
        "pkg:maven/org.datanucleus/datanucleus-api-jdo@6.0.5?type=jar",
        "pkg:maven/org.datanucleus/datanucleus-core@6.0.11?type=jar",
        "pkg:maven/org.datanucleus/datanucleus-rdbms@6.0.11?type=jar",
        "pkg:maven/com.zaxxer/HikariCP@7.1.0?type=jar",
        "pkg:maven/org.mindrot/jbcrypt@0.4?type=jar",
        "pkg:maven/com.nimbusds/oauth2-oidc-sdk@11.38.2?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.22.3?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.22?type=jar",
        "pkg:maven/com.fasterxml.jackson.jakarta.rs/jackson-jakarta-rs-base@2.22.3?type=jar",
        "pkg:maven/com.fasterxml.jackson.jakarta.rs/jackson-jakarta-rs-json-provider@2.22.3?type=jar",
        "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8@2.22.3?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.20?type=jar",
        "pkg:maven/ch.qos.logback/logback-classic@1.6.4?type=jar",
        "pkg:maven/ch.qos.logback/logback-core@1.6.4?type=jar",
        "pkg:maven/org.owasp/security-logging-common@1.1.7?type=jar",
        "pkg:maven/org.owasp/security-logging-logback@1.1.7?type=jar",
        "pkg:maven/net.logstash.logback/logstash-logback-encoder@8.1?type=jar",
        "pkg:maven/org.eclipse.microprofile.health/microprofile-health-api@4.0.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.glassfish.jersey.containers/jersey-container-servlet@4.0.2?type=jar",
      "dependsOn": [
        "pkg:maven/jakarta.inject/jakarta.inject-api@2.0.1?type=jar",
        "pkg:maven/org.glassfish.jersey.core/jersey-common@4.0.2?type=jar",
        "pkg:maven/org.glassfish.jersey.core/jersey-server@4.0.2?type=jar",
        "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@4.0.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.glassfish.jersey.media/jersey-media-json-jackson@4.0.2?type=jar",
      "dependsOn": [
        "pkg:maven/org.glassfish.jersey.core/jersey-common@4.0.2?type=jar",
        "pkg:maven/org.glassfish.jersey.ext/jersey-entity-filtering@4.0.2?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.22?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.22.3?type=jar",
        "pkg:maven/com.fasterxml.jackson.module/jackson-module-jakarta-xmlbind-annotations@2.22.3?type=jar",
        "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@4.0.2?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.glassfish.jersey.ext/jersey-entity-filtering@4.0.2?type=jar",
      "dependsOn": [
        "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@4.0.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.fasterxml.jackson.module/jackson-module-jakarta-xmlbind-annotations@2.22.3?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.22?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.22.3?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.22.3?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@4.0.2?type=jar",
      "dependsOn": [
        "pkg:maven/jakarta.activation/jakarta.activation-api@2.1.4?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.glassfish.jersey.media/jersey-media-multipart@4.0.2?type=jar",
      "dependsOn": [
        "pkg:maven/org.glassfish.jersey.core/jersey-common@4.0.2?type=jar",
        "pkg:maven/org.jvnet.mimepull/mimepull@1.9.15?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.jvnet.mimepull/mimepull@1.9.15?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.glassfish.jersey.inject/jersey-hk2@4.0.2?type=jar",
      "dependsOn": [
        "pkg:maven/org.glassfish.jersey.core/jersey-common@4.0.2?type=jar",
        "pkg:maven/org.glassfish.hk2/hk2-locator@4.0.0-M3?type=jar",
        "pkg:maven/org.javassist/javassist@3.30.2-GA?type=jar",
        "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@4.0.2?type=jar",
        "pkg:maven/jakarta.annotation/jakarta.annotation-api@3.0.0?type=jar",
        "pkg:maven/jakarta.activation/jakarta.activation-api@2.1.4?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.glassfish.hk2/hk2-locator@4.0.0-M3?type=jar",
      "dependsOn": [
        "pkg:maven/org.glassfish.hk2.external/aopalliance-repackaged@4.0.0-M3?type=jar",
        "pkg:maven/org.glassfish.hk2/hk2-api@4.0.0-M3?type=jar",
        "pkg:maven/org.glassfish.hk2/hk2-utils@4.0.0-M3?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.glassfish.hk2.external/aopalliance-repackaged@4.0.0-M3?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.glassfish.hk2/hk2-api@4.0.0-M3?type=jar",
      "dependsOn": [
        "pkg:maven/org.glassfish.hk2/hk2-utils@4.0.0-M3?type=jar",
        "pkg:maven/org.glassfish.hk2.external/aopalliance-repackaged@4.0.0-M3?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.glassfish.hk2/hk2-utils@4.0.0-M3?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.javassist/javassist@3.30.2-GA?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/jakarta.json/jakarta.json-api@2.1.3?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.eclipse.parsson/jakarta.json@1.1.9?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.mindrot/jbcrypt@0.4?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.nimbusds/oauth2-oidc-sdk@11.38.2?type=jar",
      "dependsOn": [
        "pkg:maven/com.github.stephenc.jcip/jcip-annotations@1.0-1?type=jar",
        "pkg:maven/com.nimbusds/content-type@2.3?type=jar",
        "pkg:maven/net.minidev/json-smart@2.6.0?type=jar",
        "pkg:maven/com.nimbusds/lang-tag@1.7?type=jar",
        "pkg:maven/com.nimbusds/nimbus-jose-jwt@10.9.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.github.stephenc.jcip/jcip-annotations@1.0-1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.nimbusds/content-type@2.3?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/net.minidev/json-smart@2.6.0?type=jar",
      "dependsOn": [
        "pkg:maven/net.minidev/accessors-smart@2.6.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/net.minidev/accessors-smart@2.6.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.ow2.asm/asm@9.10.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.nimbusds/lang-tag@1.7?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.nimbusds/nimbus-jose-jwt@10.9.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.fasterxml.jackson.jakarta.rs/jackson-jakarta-rs-base@2.22.3?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.22.3?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.22.3?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.fasterxml.jackson.jakarta.rs/jackson-jakarta-rs-json-provider@2.22.3?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml.jackson.jakarta.rs/jackson-jakarta-rs-base@2.22.3?type=jar",
        "pkg:maven/com.fasterxml.jackson.module/jackson-module-jakarta-xmlbind-annotations@2.22.3?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8@2.22.3?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.22.3?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.22.3?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/ch.qos.logback/logback-classic@1.6.4?type=jar",
      "dependsOn": [
        "pkg:maven/ch.qos.logback/logback-core@1.6.4?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.20?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/ch.qos.logback/logback-core@1.6.4?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.owasp/security-logging-common@1.1.7?type=jar",
      "dependsOn": [
        "pkg:maven/org.slf4j/slf4j-api@2.0.20?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.owasp/security-logging-logback@1.1.7?type=jar",
      "dependsOn": [
        "pkg:maven/org.owasp/security-logging-common@1.1.7?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.20?type=jar",
        "pkg:maven/ch.qos.logback/logback-classic@1.6.4?type=jar",
        "pkg:maven/ch.qos.logback/logback-core@1.6.4?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.22.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/net.logstash.logback/logstash-logback-encoder@8.1?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.22.3?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/dev.cel/cel@0.14.0?type=jar",
      "dependsOn": [
        "pkg:maven/com.google.auto.value/auto-value-annotations@1.11.1?type=jar",
        "pkg:maven/com.google.guava/guava@33.7.1-jre?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java@4.36.2?type=jar",
        "pkg:maven/com.google.re2j/re2j@1.8?type=jar",
        "pkg:maven/dev.cel/common@0.14.0?type=jar",
        "pkg:maven/dev.cel/compiler@0.14.0?type=jar",
        "pkg:maven/dev.cel/protobuf@0.14.0?type=jar",
        "pkg:maven/dev.cel/runtime@0.14.0?type=jar",
        "pkg:maven/dev.cel/v1alpha1@0.14.0?type=jar",
        "pkg:maven/org.antlr/antlr4-runtime@4.13.2?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.1?type=jar",
        "pkg:maven/org.threeten/threeten-extra@1.10.0?type=jar",
        "pkg:maven/org.yaml/snakeyaml@2.6?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.google.auto.value/auto-value-annotations@1.11.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.google.re2j/re2j@1.8?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/dev.cel/common@0.14.0?type=jar",
      "dependsOn": [
        "pkg:maven/com.google.auto.value/auto-value-annotations@1.11.1?type=jar",
        "pkg:maven/com.google.guava/guava@33.7.1-jre?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java@4.36.2?type=jar",
        "pkg:maven/com.google.re2j/re2j@1.8?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/dev.cel/compiler@0.14.0?type=jar",
      "dependsOn": [
        "pkg:maven/com.google.auto.value/auto-value-annotations@1.11.1?type=jar",
        "pkg:maven/com.google.guava/guava@33.7.1-jre?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java@4.36.2?type=jar",
        "pkg:maven/com.google.re2j/re2j@1.8?type=jar",
        "pkg:maven/dev.cel/common@0.14.0?type=jar",
        "pkg:maven/dev.cel/protobuf@0.14.0?type=jar",
        "pkg:maven/org.antlr/antlr4-runtime@4.13.2?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/dev.cel/protobuf@0.14.0?type=jar",
      "dependsOn": [
        "pkg:maven/com.google.auto.value/auto-value-annotations@1.11.1?type=jar",
        "pkg:maven/com.google.guava/guava@33.7.1-jre?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java@4.36.2?type=jar",
        "pkg:maven/dev.cel/common@0.14.0?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.antlr/antlr4-runtime@4.13.2?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/dev.cel/runtime@0.14.0?type=jar",
      "dependsOn": [
        "pkg:maven/com.google.auto.value/auto-value-annotations@1.11.1?type=jar",
        "pkg:maven/com.google.guava/guava@33.7.1-jre?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java@4.36.2?type=jar",
        "pkg:maven/com.google.re2j/re2j@1.8?type=jar",
        "pkg:maven/dev.cel/common@0.14.0?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.1?type=jar",
        "pkg:maven/org.threeten/threeten-extra@1.10.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.threeten/threeten-extra@1.10.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/dev.cel/v1alpha1@0.14.0?type=jar",
      "dependsOn": [
        "pkg:maven/com.google.auto.value/auto-value-annotations@1.11.1?type=jar",
        "pkg:maven/com.google.guava/guava@33.7.1-jre?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java@4.36.2?type=jar",
        "pkg:maven/dev.cel/common@0.14.0?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.github.kagkarlsson/db-scheduler@16.12.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.slf4j/slf4j-api@2.0.20?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.jdbi/jdbi3-sqlobject@3.55.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.jdbi/jdbi3-core@3.55.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.glassfish.jersey.ext/jersey-micrometer@4.0.2?type=jar",
      "dependsOn": [
        "pkg:maven/io.micrometer/micrometer-core@1.17.1?type=jar",
        "pkg:maven/org.glassfish.jersey.core/jersey-common@4.0.2?type=jar",
        "pkg:maven/org.glassfish.jersey.core/jersey-server@4.0.2?type=jar",
        "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@4.0.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/us.springett/owasp-risk-rating-calculator@1.0.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.cyclonedx/cyclonedx-core-java@13.2.0?type=jar",
      "dependsOn": [
        "pkg:maven/com.github.package-url/packageurl-java@1.5.0?type=jar",
        "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.22.3?type=jar",
        "pkg:maven/com.networknt/json-schema-validator@2.0.7?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.22.3?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.22.3?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.22?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.22.3?type=jar",
        "pkg:maven/org.codehaus.woodstox/stax2-api@4.3.0?type=jar",
        "pkg:maven/com.fasterxml.woodstox/woodstox-core@7.2.2?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.codehaus.woodstox/stax2-api@4.3.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.fasterxml.woodstox/woodstox-core@7.2.2?type=jar",
      "dependsOn": [
        "pkg:maven/org.codehaus.woodstox/stax2-api@4.3.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/jakarta.servlet/jakarta.servlet-api@6.1.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.eclipse.jetty/jetty-server@12.1.13?type=jar",
      "dependsOn": [
        "pkg:maven/org.eclipse.jetty/jetty-http@12.1.13?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-io@12.1.13?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.20?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.eclipse.jetty/jetty-http@12.1.13?type=jar",
      "dependsOn": [
        "pkg:maven/org.eclipse.jetty/jetty-io@12.1.13?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-util@12.1.13?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.20?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.eclipse.jetty/jetty-io@12.1.13?type=jar",
      "dependsOn": [
        "pkg:maven/org.eclipse.jetty/jetty-util@12.1.13?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.20?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.eclipse.jetty/jetty-util@12.1.13?type=jar",
      "dependsOn": [
        "pkg:maven/org.slf4j/slf4j-api@2.0.20?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.eclipse.jetty.compression/jetty-compression-gzip@12.1.13?type=jar",
      "dependsOn": [
        "pkg:maven/org.eclipse.jetty.compression/jetty-compression-common@12.1.13?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.eclipse.jetty.compression/jetty-compression-common@12.1.13?type=jar",
      "dependsOn": [
        "pkg:maven/org.eclipse.jetty/jetty-http@12.1.13?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-io@12.1.13?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-util@12.1.13?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.eclipse.jetty.compression/jetty-compression-zstandard@12.1.13?type=jar",
      "dependsOn": [
        "pkg:maven/com.github.luben/zstd-jni@1.5.7-20?type=jar",
        "pkg:maven/org.eclipse.jetty.compression/jetty-compression-common@12.1.13?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.eclipse.jetty.compression/jetty-compression-server@12.1.13?type=jar",
      "dependsOn": [
        "pkg:maven/org.eclipse.jetty/jetty-server@12.1.13?type=jar",
        "pkg:maven/org.eclipse.jetty.compression/jetty-compression-common@12.1.13?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.eclipse.jetty.ee11/jetty-ee11-servlet@12.1.13?type=jar",
      "dependsOn": [
        "pkg:maven/jakarta.servlet/jakarta.servlet-api@6.1.0?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-security@12.1.13?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-server@12.1.13?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-session@12.1.13?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.20?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.eclipse.jetty/jetty-security@12.1.13?type=jar",
      "dependsOn": [
        "pkg:maven/org.eclipse.jetty/jetty-server@12.1.13?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.20?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.eclipse.jetty/jetty-session@12.1.13?type=jar",
      "dependsOn": [
        "pkg:maven/org.eclipse.jetty/jetty-server@12.1.13?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.20?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.slf4j/jul-to-slf4j@2.0.20?type=jar",
      "dependsOn": [
        "pkg:maven/org.slf4j/slf4j-api@2.0.20?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.asahaf.javacron/javacron@1.4.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/io.micrometer/micrometer-java11@1.17.1?type=jar",
      "dependsOn": [
        "pkg:maven/org.jspecify/jspecify@1.0.1?type=jar",
        "pkg:maven/io.micrometer/micrometer-core@1.17.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.micrometer/micrometer-registry-prometheus@1.17.1?type=jar",
      "dependsOn": [
        "pkg:maven/org.jspecify/jspecify@1.0.1?type=jar",
        "pkg:maven/io.micrometer/micrometer-core@1.17.1?type=jar",
        "pkg:maven/io.prometheus/prometheus-metrics-core@1.9.0?type=jar",
        "pkg:maven/io.prometheus/prometheus-metrics-tracer-common@1.9.0?type=jar",
        "pkg:maven/io.prometheus/prometheus-metrics-exposition-formats@1.9.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.prometheus/prometheus-metrics-core@1.9.0?type=jar",
      "dependsOn": [
        "pkg:maven/io.prometheus/prometheus-metrics-model@1.9.0?type=jar",
        "pkg:maven/io.prometheus/prometheus-metrics-config@1.9.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.prometheus/prometheus-metrics-model@1.9.0?type=jar",
      "dependsOn": [
        "pkg:maven/io.prometheus/prometheus-metrics-config@1.9.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.prometheus/prometheus-metrics-config@1.9.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/io.prometheus/prometheus-metrics-tracer-common@1.9.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/io.prometheus/prometheus-metrics-exposition-formats@1.9.0?type=jar",
      "dependsOn": [
        "pkg:maven/io.prometheus/prometheus-metrics-exposition-textformats@1.9.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.prometheus/prometheus-metrics-exposition-textformats@1.9.0?type=jar",
      "dependsOn": [
        "pkg:maven/io.prometheus/prometheus-metrics-model@1.9.0?type=jar",
        "pkg:maven/io.prometheus/prometheus-metrics-config@1.9.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.github.mweirauch/micrometer-jvm-extras@0.3.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.slf4j/slf4j-api@2.0.20?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.google.cloud.sql/postgres-socket-factory@1.29.0?type=jar",
      "dependsOn": [
        "pkg:maven/com.google.cloud.sql/jdbc-socket-factory-core@1.29.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.20?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.google.cloud.sql/jdbc-socket-factory-core@1.29.0?type=jar",
      "dependsOn": [
        "pkg:maven/com.github.jnr/jnr-enxio@0.33.0?type=jar",
        "pkg:maven/com.github.jnr/jnr-unixsocket@0.39.2?type=jar",
        "pkg:maven/com.google.http-client/google-http-client@2.2.0?type=jar",
        "pkg:maven/com.google.guava/guava@33.7.1-jre?type=jar",
        "pkg:maven/com.google.errorprone/error_prone_annotations@2.50.0?type=jar",
        "pkg:maven/com.google.http-client/google-http-client-gson@2.2.0?type=jar",
        "pkg:maven/com.google.api-client/google-api-client@2.9.0?type=jar",
        "pkg:maven/com.google.apis/google-api-services-sqladmin@v1beta4-rev20260627-2.0.0?type=jar",
        "pkg:maven/com.google.auth/google-auth-library-credentials@1.49.0?type=jar",
        "pkg:maven/com.google.auth/google-auth-library-oauth2-http@1.49.0?type=jar",
        "pkg:maven/com.google.oauth-client/google-oauth-client@1.39.0?type=jar",
        "pkg:maven/dnsjava/dnsjava@3.6.5?type=jar",
        "pkg:maven/com.google.api/gax@2.82.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.20?type=jar",
        "pkg:maven/com.google.cloud.sql/schemas@1.29.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.github.jnr/jnr-enxio@0.33.0?type=jar",
      "dependsOn": [
        "pkg:maven/com.github.jnr/jnr-constants@0.11.0?type=jar",
        "pkg:maven/com.github.jnr/jnr-ffi@2.3.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.github.jnr/jnr-constants@0.11.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.github.jnr/jnr-ffi@2.3.0?type=jar",
      "dependsOn": [
        "pkg:maven/com.github.jnr/jffi@1.4.0?type=jar",
        "pkg:maven/com.github.jnr/jffi@1.4.0?classifier=native\u0026type=jar",
        "pkg:maven/org.ow2.asm/asm@9.10.1?type=jar",
        "pkg:maven/org.ow2.asm/asm-commons@9.10.1?type=jar",
        "pkg:maven/org.ow2.asm/asm-analysis@9.10.1?type=jar",
        "pkg:maven/org.ow2.asm/asm-tree@9.10.1?type=jar",
        "pkg:maven/org.ow2.asm/asm-util@9.10.1?type=jar",
        "pkg:maven/com.github.jnr/jnr-a64asm@1.0.0?type=jar",
        "pkg:maven/com.github.jnr/jnr-x86asm@1.0.2?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.github.jnr/jffi@1.4.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.github.jnr/jffi@1.4.0?classifier=native\u0026type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.ow2.asm/asm-commons@9.10.1?type=jar",
      "dependsOn": [
        "pkg:maven/org.ow2.asm/asm@9.10.1?type=jar",
        "pkg:maven/org.ow2.asm/asm-tree@9.10.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.ow2.asm/asm-tree@9.10.1?type=jar",
      "dependsOn": [
        "pkg:maven/org.ow2.asm/asm@9.10.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.ow2.asm/asm-analysis@9.10.1?type=jar",
      "dependsOn": [
        "pkg:maven/org.ow2.asm/asm-tree@9.10.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.ow2.asm/asm-util@9.10.1?type=jar",
      "dependsOn": [
        "pkg:maven/org.ow2.asm/asm@9.10.1?type=jar",
        "pkg:maven/org.ow2.asm/asm-tree@9.10.1?type=jar",
        "pkg:maven/org.ow2.asm/asm-analysis@9.10.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.github.jnr/jnr-a64asm@1.0.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.github.jnr/jnr-x86asm@1.0.2?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.github.jnr/jnr-unixsocket@0.39.2?type=jar",
      "dependsOn": [
        "pkg:maven/com.github.jnr/jnr-ffi@2.3.0?type=jar",
        "pkg:maven/com.github.jnr/jnr-constants@0.11.0?type=jar",
        "pkg:maven/com.github.jnr/jnr-enxio@0.33.0?type=jar",
        "pkg:maven/com.github.jnr/jnr-posix@3.2.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.github.jnr/jnr-posix@3.2.1?type=jar",
      "dependsOn": [
        "pkg:maven/com.github.jnr/jnr-ffi@2.3.0?type=jar",
        "pkg:maven/com.github.jnr/jnr-constants@0.11.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.google.http-client/google-http-client@2.2.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.apache.httpcomponents/httpclient@4.5.14?type=jar",
        "pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
        "pkg:maven/com.google.errorprone/error_prone_annotations@2.50.0?type=jar",
        "pkg:maven/com.google.guava/guava@33.7.1-jre?type=jar",
        "pkg:maven/com.google.j2objc/j2objc-annotations@3.1?type=jar",
        "pkg:maven/io.grpc/grpc-context@1.70.0?type=jar",
        "pkg:maven/io.opencensus/opencensus-api@0.31.1?type=jar",
        "pkg:maven/io.opencensus/opencensus-contrib-http-util@0.31.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.apache.httpcomponents/httpclient@4.5.14?type=jar",
      "dependsOn": [
        "pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar",
        "pkg:maven/commons-logging/commons-logging@1.4.0?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.22.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/commons-logging/commons-logging@1.4.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/io.grpc/grpc-context@1.70.0?type=jar",
      "dependsOn": [
        "pkg:maven/io.grpc/grpc-api@1.81.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.grpc/grpc-api@1.81.0?type=jar",
      "dependsOn": [
        "pkg:maven/com.google.errorprone/error_prone_annotations@2.50.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.opencensus/opencensus-api@0.31.1?type=jar",
      "dependsOn": [
        "pkg:maven/io.grpc/grpc-context@1.70.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.opencensus/opencensus-contrib-http-util@0.31.1?type=jar",
      "dependsOn": [
        "pkg:maven/io.opencensus/opencensus-api@0.31.1?type=jar",
        "pkg:maven/com.google.guava/guava@33.7.1-jre?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.google.http-client/google-http-client-gson@2.2.0?type=jar",
      "dependsOn": [
        "pkg:maven/com.google.http-client/google-http-client@2.2.0?type=jar",
        "pkg:maven/com.google.code.gson/gson@2.14.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.google.api-client/google-api-client@2.9.0?type=jar",
      "dependsOn": [
        "pkg:maven/commons-codec/commons-codec@1.22.1?type=jar",
        "pkg:maven/com.google.auth/google-auth-library-credentials@1.49.0?type=jar",
        "pkg:maven/com.google.auth/google-auth-library-oauth2-http@1.49.0?type=jar",
        "pkg:maven/com.google.http-client/google-http-client-gson@2.2.0?type=jar",
        "pkg:maven/com.google.guava/guava@33.7.1-jre?type=jar",
        "pkg:maven/com.google.http-client/google-http-client-apache-v2@2.0.0?type=jar",
        "pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar",
        "pkg:maven/org.apache.httpcomponents/httpclient@4.5.14?type=jar",
        "pkg:maven/com.google.http-client/google-http-client@2.2.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.google.auth/google-auth-library-credentials@1.49.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.google.auth/google-auth-library-oauth2-http@1.49.0?type=jar",
      "dependsOn": [
        "pkg:maven/com.google.guava/guava@33.7.1-jre?type=jar",
        "pkg:maven/com.google.auto.value/auto-value-annotations@1.11.1?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
        "pkg:maven/com.google.auth/google-auth-library-credentials@1.49.0?type=jar",
        "pkg:maven/com.google.http-client/google-http-client@2.2.0?type=jar",
        "pkg:maven/com.google.http-client/google-http-client-gson@2.2.0?type=jar",
        "pkg:maven/com.google.errorprone/error_prone_annotations@2.50.0?type=jar",
        "pkg:maven/com.google.api/api-common@2.65.0?type=jar",
        "pkg:maven/com.google.code.gson/gson@2.14.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.google.api/api-common@2.65.0?type=jar",
      "dependsOn": [
        "pkg:maven/com.google.guava/guava@33.7.1-jre?type=jar",
        "pkg:maven/com.google.auto.value/auto-value-annotations@1.11.1?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
        "pkg:maven/javax.annotation/javax.annotation-api@1.3.2?type=jar",
        "pkg:maven/com.google.errorprone/error_prone_annotations@2.50.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/javax.annotation/javax.annotation-api@1.3.2?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.google.http-client/google-http-client-apache-v2@2.0.0?type=jar",
      "dependsOn": [
        "pkg:maven/com.google.http-client/google-http-client@2.2.0?type=jar",
        "pkg:maven/org.apache.httpcomponents/httpclient@4.5.14?type=jar",
        "pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.google.apis/google-api-services-sqladmin@v1beta4-rev20260627-2.0.0?type=jar",
      "dependsOn": [
        "pkg:maven/com.google.api-client/google-api-client@2.9.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.google.oauth-client/google-oauth-client@1.39.0?type=jar",
      "dependsOn": [
        "pkg:maven/com.google.http-client/google-http-client@2.2.0?type=jar",
        "pkg:maven/com.google.http-client/google-http-client-gson@2.2.0?type=jar",
        "pkg:maven/com.google.guava/guava@33.7.1-jre?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/dnsjava/dnsjava@3.6.5?type=jar",
      "dependsOn": [
        "pkg:maven/org.slf4j/slf4j-api@2.0.20?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.google.api/gax@2.82.0?type=jar",
      "dependsOn": [
        "pkg:maven/com.google.protobuf/protobuf-java-util@4.36.2?type=jar",
        "pkg:maven/io.grpc/grpc-api@1.81.0?type=jar",
        "pkg:maven/com.google.code.gson/gson@2.14.0?type=jar",
        "pkg:maven/com.google.http-client/google-http-client-gson@2.2.0?type=jar",
        "pkg:maven/com.google.http-client/google-http-client@2.2.0?type=jar",
        "pkg:maven/com.google.auto.value/auto-value-annotations@1.11.1?type=jar",
        "pkg:maven/com.google.errorprone/error_prone_annotations@2.50.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.google.cloud.sql/schemas@1.29.0?type=jar",
      "dependsOn": [
        "pkg:maven/com.google.protobuf/protobuf-java@4.36.2?type=jar"
      ]
    }
  ]
}