{
  "bomFormat": "CycloneDX",
  "specVersion": "1.4",
  "serialNumber": "urn:uuid:194b4536-be81-4659-9c35-dab77c6c4f62",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "vendor": "OWASP Foundation",
        "name": "CycloneDX Maven plugin",
        "version": "2.9.1",
        "hashes": [
          {
            "alg": "MD5",
            "content": "9c7a565cf28cce58557d0c621c5ea4b1"
          },
          {
            "alg": "SHA-1",
            "content": "be882d5a22050bfa9d19090b1420c188617d0e1c"
          },
          {
            "alg": "SHA-256",
            "content": "698e0f37184a5b28c245c4065fd036dfce253b52f82fbb7113d81d36326cc249"
          },
          {
            "alg": "SHA-512",
            "content": "c0f0b11026858166f872a2eb54719492e5cecaa0bc9cd6b30b3ecb4a174eed220f4a1b5829d18d6734128e778d3cb3db7ffed177c92866133129cb29081814a0"
          },
          {
            "alg": "SHA-384",
            "content": "d80964707dfe5caca8c70521d5066f57589304c0a657e6fbc7c0614ea0fc7b3b3dbe7778361eee0f54ba111e9cb0ffcb"
          },
          {
            "alg": "SHA3-384",
            "content": "80bc3a275d9514bc457461ff52a72add8c7ecbbc01d8912efce57139016c544ee776981851be0a58fa977ab4221f703f"
          },
          {
            "alg": "SHA3-256",
            "content": "142317d6f245390f4fd2d0c100b16281b8dfc5c0c2cff86943bdcc97039cb699"
          },
          {
            "alg": "SHA3-512",
            "content": "af0fb9137c90b65d1a07f72e4d51ae509956cdb8800f35c961b037cdda1fe4a14ce3b496cef71ba85f1621affcfe29cd42704ae4191ff0b090a9602087c8997b"
          }
        ]
      }
    ],
    "component": {
      "type": "application",
      "bom-ref": "pkg:maven/org.dependencytrack/apiserver@5.0.0?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "apiserver",
      "version": "5.0.0",
      "description": "The Dependency-Track API Server",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/apiserver@5.0.0?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/apiserver/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/apiserver",
          "type": "vcs"
        }
      ]
    }
  },
  "components": [
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/api@5.0.0?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "api",
      "version": "5.0.0",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "2e82c568bf2f1245baa0a6fe825209a0"
        },
        {
          "alg": "SHA-1",
          "content": "147e44fa8a7afa56c3d2d265165e802ffb9e0f93"
        },
        {
          "alg": "SHA-256",
          "content": "d71ac9ddc4c34735ae976a6414c49040f16611770ea9d5e87698a88b9283d399"
        },
        {
          "alg": "SHA-512",
          "content": "7676fd15f72edd88df84bd9ad6b2ab08b90b7bb9502b882e233663bb75135b5770649aa895110a1e3239b604b8d2fc36a1f9ee7ac393cc6afd2d342d6e6712b5"
        },
        {
          "alg": "SHA-384",
          "content": "e5c375fd4fa6f04f566c9ac2a7a48074eb1b6611e4d2545f9a337245e77a7da3ac10e072ba3892c21773edb1b8b4d95e"
        },
        {
          "alg": "SHA3-384",
          "content": "d49ed9366346d31453e4ba466411b9116c712aafe0309e2340f011b61306128f8709e1400dac834f69131e9d5eeeaff8"
        },
        {
          "alg": "SHA3-256",
          "content": "a8ab06ab3228a1269a7257ddffd82ad1138993e8455c0b8f94323a11e5425695"
        },
        {
          "alg": "SHA3-512",
          "content": "dbbd125addb966fe5b559f0f1b9e6f3b1d6a703b52ae226ef1235077cdedbb9c159a682693965efdef22d0d1c3bc49b5b34698a4fe5d9d72db528c5186bc728b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/api@5.0.0?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/api/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/cache-api@5.0.0?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "cache-api",
      "version": "5.0.0",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "241f084e8ceb589c41d4371bde088e20"
        },
        {
          "alg": "SHA-1",
          "content": "10d9bd61aa4cfa236169ca71614202235ed49622"
        },
        {
          "alg": "SHA-256",
          "content": "6a946ba60667c20966cec556587e2e48f9f073a62e80dabe42438582785a0f21"
        },
        {
          "alg": "SHA-512",
          "content": "8940a535e37f36933838f3e93b22da831fadb0cff1cab20b4b38c48cb610f9ec37c0958b2e8dd538945bebdbed1d1b84e8c8995143652ff816bfa39b2313bd52"
        },
        {
          "alg": "SHA-384",
          "content": "b10c495d4e2d57ebdd4d09860c9ab8d614143381e0a7244f77fc883a0a623b3e0445dbfc008d093a683f4a8c5ed6ef5d"
        },
        {
          "alg": "SHA3-384",
          "content": "96f9658f31dc629ca1832abb00ea8a307e4175eb3130b1dd1a08f631c67ea8dc00cff9e68750b7a0efae0900f44ceb11"
        },
        {
          "alg": "SHA3-256",
          "content": "1a47c11625548580ed62abc7071fe0e744d6910ce6f7f31184bde34a4fe50454"
        },
        {
          "alg": "SHA3-512",
          "content": "aa2b098fae0c099c37bf3337e92bebdf443f1412e6026fa0cf81a73fc1ebdaf3a22d7c8d34f18a69a83c09cee04965d107df4a71b3b9249129d8c176345c0292"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/cache-api@5.0.0?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/cache-parent/cache-api/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/cache-parent/cache-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
      "group": "org.jspecify",
      "name": "jspecify",
      "version": "1.0.0",
      "description": "An artifact of well-named and well-specified annotations to power static analysis checks",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "9133aba420d0ca3b001dbb6ae9992cf6"
        },
        {
          "alg": "SHA-1",
          "content": "7425a601c1c7ec76645a78d22b8c6a627edee507"
        },
        {
          "alg": "SHA-256",
          "content": "1fad6e6be7557781e4d33729d49ae1cdc8fdda6fe477bb0cc68ce351eafdfbab"
        },
        {
          "alg": "SHA-512",
          "content": "efded31ef5b342f09422935076e599789076431e93a746685c0607e7de5592719ba6aacde0be670b3f064d1e85630d58d5bce6b34aed2a288fdb34f745efb7bc"
        },
        {
          "alg": "SHA-384",
          "content": "814f860e5a44ead6c457676841eef471a8b87be31b84c60a8a4477a18a9cbcb6e3c2ae700969d5c5e52309d961e0537a"
        },
        {
          "alg": "SHA3-384",
          "content": "c8844e5b71e5ecfbb7366097ce34af2f5863d86d5ccc3f9ec384d8ade4b60ccc8124c7fc88664f1afd2b0962fc8775bf"
        },
        {
          "alg": "SHA3-256",
          "content": "4b4f08ad7606a3ac62997779484919a302267b26d26ee19125f8a7eea60e8a71"
        },
        {
          "alg": "SHA3-512",
          "content": "65c6845ebae981cb81b61107707ced39f5b377dae970b47606ef482aaf10e3729def0da40d9377c43abbfb483a5ceae039b0d51c129c50a6d36ad351a5d6b01e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
      "externalReferences": [
        {
          "url": "http://jspecify.org/",
          "type": "website"
        },
        {
          "url": "https://github.com/jspecify/jspecify/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.eclipse.microprofile.config/microprofile-config-api@3.1.1?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.eclipse.microprofile.config",
      "name": "microprofile-config-api",
      "version": "3.1.1",
      "description": "MicroProfile Config :: API",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "22af9d6a9821440e2f3c5d8831816cea"
        },
        {
          "alg": "SHA-1",
          "content": "448885d7505256a6b21c578f5867c6a6f5706c32"
        },
        {
          "alg": "SHA-256",
          "content": "0d4eaa7e17730e153b1e0613104a989af7d7a0d4ba4d19c84c71862bff993773"
        },
        {
          "alg": "SHA-512",
          "content": "a3c70968b9723cfc13bcfa602fd7e56afdb2da684f865c546488cb79b050c9c3fdbe18138de561b6fcb308e3b8762cd8fe2bc53f3b22c29b0ee7faa8715bd0b6"
        },
        {
          "alg": "SHA-384",
          "content": "082cf193b5f1d2a9a477348bb94e43cf9c54f900791820240ae5496aacce205039866e95b7650eee38755f69dd823979"
        },
        {
          "alg": "SHA3-384",
          "content": "555999b1fc72bcf324b818e0ab1c83b982541de4dfbd313552069ced8367111de1c8665615d3a701a5d0478fa5442de2"
        },
        {
          "alg": "SHA3-256",
          "content": "2a1cbb68a81065b657699fc4ff7caedc30d3b55a3c0901057bb9084f24eff2db"
        },
        {
          "alg": "SHA3-512",
          "content": "c5f590d1c46457e8288a45b18494f5d7601a8de88755811b630b0ed5088c5ff06b1ea87318a2c1184218ec8c4391dc5288b825f1a949c1b1003c739c390694a9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.eclipse.microprofile.config/microprofile-config-api@3.1.1?type=jar",
      "externalReferences": [
        {
          "url": "https://microprofile.io/project/eclipse/microprofile-config/microprofile-config-api",
          "type": "website"
        },
        {
          "url": "https://central.sonatype.org/publish/publish-maven/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse/microprofile-config/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/eclipse/microprofile-config/microprofile-config-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/cache-provider-database@5.0.0?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "cache-provider-database",
      "version": "5.0.0",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "1c902ff751028bc5445ba7a6593a0b1c"
        },
        {
          "alg": "SHA-1",
          "content": "3a97a6910d7d153ffef6f212f7e4d3635d830705"
        },
        {
          "alg": "SHA-256",
          "content": "9741bcf54e34086bd0c5ff4c5dda14e508bb0503b7a363dfb85b9160461b822d"
        },
        {
          "alg": "SHA-512",
          "content": "ccee864eb30fd901cb0101cd5454cfc0f9b41464880bd09c705f5417839e7c80cddcd7008e058a2edac62e9adb33596e856b3e80c2ccbffe5ab2fe5a0c8b3a38"
        },
        {
          "alg": "SHA-384",
          "content": "4dae7e69c45386551c4178f598ace929674049e2764658b4f5af11429563012244502e24a8b4a23d8b47f6a1b7c94003"
        },
        {
          "alg": "SHA3-384",
          "content": "17ecf14bc4baa8a0d86213a23f7b8edf87d1d3a18e71862a013669578e78fff51e470f666d7eff069fba54dc491ceb52"
        },
        {
          "alg": "SHA3-256",
          "content": "8910dc88c17ed3275293b42252648704b2cbe07cb7db392fa4f882c898b4e7ba"
        },
        {
          "alg": "SHA3-512",
          "content": "33ffb0c9a0448cfc095698250b7e5b0aacc581fe1a376c5bfaac93a4e84fa422569f339ff3571907cf6ea62c1e915a45a384f5086d8ae60b58e6c691d9415637"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/cache-provider-database@5.0.0?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/cache-parent/cache-provider-database/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/cache-parent/cache-provider-database",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/common-datasource@5.0.0?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "common-datasource",
      "version": "5.0.0",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "27d4bcb89b9293bdc2c8b38356e0367d"
        },
        {
          "alg": "SHA-1",
          "content": "67aa233a3562a7a1a18dff78e4989ab8912a5b56"
        },
        {
          "alg": "SHA-256",
          "content": "ac29da87926e660b20940b238c5774602d261fb7580591a110e1c081834aadc5"
        },
        {
          "alg": "SHA-512",
          "content": "5edf9c49d6a47deebdbb69cbf7e20e4c006e02a5cb660564d9358e9a252c8f3c63083c86d48b637c4ed41c8a4b1d2e2a8ab20c33e6017efe63020b06b93677bb"
        },
        {
          "alg": "SHA-384",
          "content": "97f4a40b0fdb6d87aac921ec5948f68cceff230a18e5e8606a6cfbfa0a084ce0003d5d4497f2c6e7f4d7553879b3f03f"
        },
        {
          "alg": "SHA3-384",
          "content": "fa59cf5d5f1d1eb7ae38ab8935cfe6c83f97fd0bf05d6f27c1c7c791c96c551f2f96b94b02a22ae340e90083efe1dcaf"
        },
        {
          "alg": "SHA3-256",
          "content": "0efa078412bcbc8ccb6b51910e89c29c57a2337175aeb13bd900f64948bcac91"
        },
        {
          "alg": "SHA3-512",
          "content": "1b982faee4747c9b3df39afb2ae9d150d9d8da8d1132aefa374b5cf33f3e225fb45124ce61846dafdc0065564867333bc5775f8fbf8982e14cecb42f025a5c71"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/common-datasource@5.0.0?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/common-parent/common-datasource/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/common-parent/common-datasource",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/common-health@5.0.0?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "common-health",
      "version": "5.0.0",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "fdb8c5f48b18e22684376d1b71460e19"
        },
        {
          "alg": "SHA-1",
          "content": "d330c8fe70c36034804dea15f31a1fb2c2cbeeef"
        },
        {
          "alg": "SHA-256",
          "content": "ef0a5807c047cc06290021edcf28d51bdceb68fe2ba07519cbb1f95ba2325b37"
        },
        {
          "alg": "SHA-512",
          "content": "9b486c4c67c019238a4e2e33d95c72c6b7f7c07ce83e79587a97c08e9b45f3202e1f971c04d68d8c76de2c69f340dc6038edd9dc36d16532719fbe4b7bf09dd3"
        },
        {
          "alg": "SHA-384",
          "content": "ee16143018e10a9230757b4caa2200cadcdfc4dbab54ac67281d7dd1ea23f766d2496e5ad70e12219b968b894f36b905"
        },
        {
          "alg": "SHA3-384",
          "content": "737af6cffc8dceddb49571403564e51aa052380bc3d9f89e4f9cc580da557490a2609ec0481b35e4b3e306dc27b8e99c"
        },
        {
          "alg": "SHA3-256",
          "content": "8c33dc4e25860b387a70be9e35bda6bc15317bc4b265a95637e6280566a9b4bb"
        },
        {
          "alg": "SHA3-512",
          "content": "092efa9ce32dc8063081e41a2eec346e2b7ce63842e1a7c874e83ec505f395e7715defbcb2d234c4d456de2421e9aa668867e21fea00057a3da141fdd57e93ec"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/common-health@5.0.0?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/common-parent/common-health/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/common-parent/common-health",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.smallrye.config/smallrye-config-core@3.17.2?type=jar",
      "group": "io.smallrye.config",
      "name": "smallrye-config-core",
      "version": "3.17.2",
      "description": "SmallRye Parent POM",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "8dfe0e9e97017ff650e6a56bc77e8185"
        },
        {
          "alg": "SHA-1",
          "content": "5d229922e431122704af3248720b5efc37d37747"
        },
        {
          "alg": "SHA-256",
          "content": "092050099d3144bcc64b33165b3c2b7d25a519808d3c7618a6e1c1debcc0d832"
        },
        {
          "alg": "SHA-512",
          "content": "df4854aedb784e48e079dc3946a8553e0d3a6a6d5114eaf6e515907c1bc5ccbf0d3f8e64016791eb1cf60c7f6a18b01a07778e19eb5088a7cb1a72ce43793b53"
        },
        {
          "alg": "SHA-384",
          "content": "624bed2bba02a7fcd8f41d0e9ff634962ea4039f97753e0445a27f5adadbd3140a7340552258c76cbfb32fe4910b72c9"
        },
        {
          "alg": "SHA3-384",
          "content": "6d51de7f529195daabb370ba8cb7f56e0ec0a8e055c54c8256ae5bcfe1eac6e2a7b28a21fd537ce38a2815109c04b1ae"
        },
        {
          "alg": "SHA3-256",
          "content": "06806e0b49eba5371d38466309d246d1b3bce2121248c1f4222fbcac26f73635"
        },
        {
          "alg": "SHA3-512",
          "content": "38ee6abd59daa1c3427858b6858f434b2eae6301eb101071b3916b5ef7536e7a7510deed31ecbd123aa42f5110d2971a61f95970e248cedf7343434b1a1b0b18"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.smallrye.config/smallrye-config-core@3.17.2?type=jar",
      "externalReferences": [
        {
          "url": "https://smallrye.io",
          "type": "website"
        },
        {
          "url": "https://s01.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/smallrye/smallrye-config/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/smallrye/smallrye-config/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.smallrye.common/smallrye-common-annotation@2.17.1?type=jar",
      "group": "io.smallrye.common",
      "name": "smallrye-common-annotation",
      "version": "2.17.1",
      "description": "Common utilities for SmallRye",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "875eb9fb98e95dd0c0c233ae6ee700a8"
        },
        {
          "alg": "SHA-1",
          "content": "7942e2e5e819833c515c89841fa0f75436fa8f56"
        },
        {
          "alg": "SHA-256",
          "content": "72ef4e4072ad87250823207ec197a5d3111b3fa276fa19d12bf5583debba1bdb"
        },
        {
          "alg": "SHA-512",
          "content": "50e4e5f3acf1bc7286460f7f741a32c6154a4e8405d88c5e866c3e7cac27db83321773262b900d04096a1d10c81498d12bc653050b6598a63d6b3aa97fa4cbc7"
        },
        {
          "alg": "SHA-384",
          "content": "94bc939b1080216d3d53e2710ab60085fd62bcdb482e865dadb80cd602040a56d5ced931a912aac3afda736d0fa3dddf"
        },
        {
          "alg": "SHA3-384",
          "content": "4d9c8aff0b4d8a1e27b5535c82117b3c40ba1b7e846685dd811cd04898da3800681cd491f4bbb6aea8cdd2a2ff7da319"
        },
        {
          "alg": "SHA3-256",
          "content": "6d533f30919c005c4755bcef101604ac766ce92a9b278322a9b6aee108e616d0"
        },
        {
          "alg": "SHA3-512",
          "content": "5b619c5ae43a8444b1fe2d81ee3be42c9f49826ad647d7c881ff7810d663d46d2b9dca12507451356496974d91f1f4986a860b5f4b00614c7b9a9974c8434973"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.smallrye.common/smallrye-common-annotation@2.17.1?type=jar",
      "externalReferences": [
        {
          "url": "http://smallrye.io",
          "type": "website"
        },
        {
          "url": "https://s01.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/smallrye/smallrye-common/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/smallrye/smallrye-common/smallrye-common-annotation/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.smallrye.common/smallrye-common-expression@2.17.1?type=jar",
      "group": "io.smallrye.common",
      "name": "smallrye-common-expression",
      "version": "2.17.1",
      "description": "Common utilities for SmallRye",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "d621994be30bd133132e15ccf7b000a5"
        },
        {
          "alg": "SHA-1",
          "content": "61dd85a3dfae09f1d84f7b8d2cd51d0d3187cd5f"
        },
        {
          "alg": "SHA-256",
          "content": "0f6949d555b2dae374f8e03be9b09a55baaa825c5445f7210cdc837f4546f4e2"
        },
        {
          "alg": "SHA-512",
          "content": "8181f6a146e2d8df72e7f3f81bf701e3fe701a7d78d0807d1a7e97d1951e8984bc93a546ef075627824145bb928e8e3a07dd42d4335f548b22383449e2101b87"
        },
        {
          "alg": "SHA-384",
          "content": "72cb4b0b0026ee41656b9780214a0da0a584e11c1cb009018fd09b36670a612e2983381d93fb549b86c98ce0cc5b1a7e"
        },
        {
          "alg": "SHA3-384",
          "content": "449ce0b2a82d690fdc6929ce28b904083c0ffe8bababa61d62a549d1c467de4eecaa6a5763a560ac4fad4f582b49c84c"
        },
        {
          "alg": "SHA3-256",
          "content": "2f16c2272f9269f180ee45b838407afa5b7b43365dd025518e9fb35f83822673"
        },
        {
          "alg": "SHA3-512",
          "content": "9eb0b8451608e00858eb5f0071fd0c8a1e90db8606527ba30d757b3091202f37702b6153622795ca6e6c2183684103da5cff56ad136f52d54e32b4a2694e0d77"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.smallrye.common/smallrye-common-expression@2.17.1?type=jar",
      "externalReferences": [
        {
          "url": "http://smallrye.io",
          "type": "website"
        },
        {
          "url": "https://s01.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/smallrye/smallrye-common/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/smallrye/smallrye-common/smallrye-common-expression/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.smallrye.common/smallrye-common-function@2.17.1?type=jar",
      "group": "io.smallrye.common",
      "name": "smallrye-common-function",
      "version": "2.17.1",
      "description": "Common utilities for SmallRye",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "7b185d69509de5bb659c55935a16e322"
        },
        {
          "alg": "SHA-1",
          "content": "f2f3667b71610bcd31b4731200ecee674b6cd23b"
        },
        {
          "alg": "SHA-256",
          "content": "7f5a0c6011250474514585857e24ef01678627733b6e4f1e1eb10207b87cf1ba"
        },
        {
          "alg": "SHA-512",
          "content": "1ea389fc4658ba21784dee8fc7384ed2598a424f5a35e8bb6d4b26c6d463aaaf86d4f30697fc5aab39be1aadf7653999b9e003b9b8a16c8437f2b44b44ff04f8"
        },
        {
          "alg": "SHA-384",
          "content": "ee6839112e25e280160886e22809f469997cd2767efa7b01296de1e65e832c8055da1f0c3165df213bddffa2e5ce9e85"
        },
        {
          "alg": "SHA3-384",
          "content": "d9d667ffed68b0b261a7f1ebfc3a587bce570361df2c743ad480c8cc2dd0e424cedd2e910c0c8c910d13808a90026219"
        },
        {
          "alg": "SHA3-256",
          "content": "d7b18af3a566d3c466e88d7e1a97a55a3b7fa9ce671d5021def4abbf0db59fcb"
        },
        {
          "alg": "SHA3-512",
          "content": "ae5c16757650cf7f69c4c30b30ef56bc5d8bc6c4c88dc83e04f8821a18c07153affd13f13cdae9cccb5dcdd71e8085f49991fe6007892e03b45cf96c94dcf5e7"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.smallrye.common/smallrye-common-function@2.17.1?type=jar",
      "externalReferences": [
        {
          "url": "http://smallrye.io",
          "type": "website"
        },
        {
          "url": "https://s01.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/smallrye/smallrye-common/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/smallrye/smallrye-common/smallrye-common-function/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.smallrye.common/smallrye-common-constraint@2.17.1?type=jar",
      "group": "io.smallrye.common",
      "name": "smallrye-common-constraint",
      "version": "2.17.1",
      "description": "Common utilities for SmallRye",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "fc8967e4b3b79bd8eb7d578cfa9c6995"
        },
        {
          "alg": "SHA-1",
          "content": "c4dee9305ffae0adfea1b10fc4264b7423d57153"
        },
        {
          "alg": "SHA-256",
          "content": "b718529ced5882249ffeefa693710fa54178d1c7e7bcd938b4c0e75812fa2461"
        },
        {
          "alg": "SHA-512",
          "content": "f8b6c2d9f3aa963a4f294f9205b69eb70353157533bbf1a0a776c0d9b90678ea0c18e65eb6aa239ee1678e07317b35a174dbecf26bfcd8dda3ec2c364ae1fabf"
        },
        {
          "alg": "SHA-384",
          "content": "b24caca22febb9130e857a34105c1935592ed1f0053e04a6be942d330a01c953451b862d169ab0a7d3090b3ae69fea01"
        },
        {
          "alg": "SHA3-384",
          "content": "5ccc1b5329f1e32376fd87ad09e5d93f7ac69dac2e8775f194b2602efee8e523892360f3f8def3cbd9e857e718057be5"
        },
        {
          "alg": "SHA3-256",
          "content": "293a456739ea0a3d85f1948316e895b5f76c67cc0e94c0a654f585fd62fc0369"
        },
        {
          "alg": "SHA3-512",
          "content": "a63388b9fb34beb3f922a087546d7104dfe68d7231ebd030a90ad30fd28a45218eaed6624cd0b0d547e6ee4c15aa3520807e996ebef70761ee3f6605ec8e30eb"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.smallrye.common/smallrye-common-constraint@2.17.1?type=jar",
      "externalReferences": [
        {
          "url": "http://smallrye.io",
          "type": "website"
        },
        {
          "url": "https://s01.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/smallrye/smallrye-common/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/smallrye/smallrye-common/smallrye-common-constraint/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.smallrye.common/smallrye-common-classloader@2.17.1?type=jar",
      "group": "io.smallrye.common",
      "name": "smallrye-common-classloader",
      "version": "2.17.1",
      "description": "Common utilities for SmallRye",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "2c65ea2786ac0905fbcc2a08e2a4936a"
        },
        {
          "alg": "SHA-1",
          "content": "2a01bb2271a304666fe32e5cfb66288b1248cc30"
        },
        {
          "alg": "SHA-256",
          "content": "76e5fb5cb65ac0711c03575b0f6a0b42f9717b19fdc5df1f0feb159adf8cf04c"
        },
        {
          "alg": "SHA-512",
          "content": "c1e47b7f34c33e06ecef7addbf46ef1a32be41c88020d5242b36c576fe83b8bd535cfd2c4d75b69b3d466a328867d84f732d2f52223189f47baf59905ccb03b8"
        },
        {
          "alg": "SHA-384",
          "content": "0a7074d8e9cd4f157c4f14284ece794aa9784d9e4468519bbf8632f76c05d85e784660fefbe4010f6de8ff8782ec489c"
        },
        {
          "alg": "SHA3-384",
          "content": "cb525639a17bf4c57d77de0f6e3a1e51a6a09d32ca56e59f3e759c9040c2a13533f2d8560b4e7ef428c0e7ee4bbbffdb"
        },
        {
          "alg": "SHA3-256",
          "content": "571e5e2fbfb43df62292c1ef3ff36eb94c69c2a267167f04dca668917e6434ad"
        },
        {
          "alg": "SHA3-512",
          "content": "c5d58d1de617e20dc424b3e3f7c5b67889dc433b16568463871ab9a8c9013c93086f1683cf94acbfb90f5421dfa0050b4180703d3b882f993c441f3659c6edcc"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.smallrye.common/smallrye-common-classloader@2.17.1?type=jar",
      "externalReferences": [
        {
          "url": "http://smallrye.io",
          "type": "website"
        },
        {
          "url": "https://s01.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/smallrye/smallrye-common/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/smallrye/smallrye-common/smallrye-common-classloader/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.ow2.asm/asm@9.9.1?type=jar",
      "publisher": "OW2",
      "group": "org.ow2.asm",
      "name": "asm",
      "version": "9.9.1",
      "description": "ASM, a very small and fast Java bytecode manipulation framework",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "1888ad1f49038441bb2d12aa6dffe396"
        },
        {
          "alg": "SHA-1",
          "content": "2ceea6ab43bcae1979b2a6d85fc0ca429877e5ab"
        },
        {
          "alg": "SHA-256",
          "content": "6f3828a215c920059a5efa2fb55c233d6c54ec5cadca99ce1b1bdd10077c7ddd"
        },
        {
          "alg": "SHA-512",
          "content": "bb43eaca8777c7b2b4bce9fc19f9be5742a736a23415e271643c3e14d3d82f565f6de0e29ebac570ce66b3921ece1ebd4de06abeb633ae28c17891de56973807"
        },
        {
          "alg": "SHA-384",
          "content": "9448b1eeafccfe061a7533a633b3cf7445312f916d372a3b6bbae8747267b6d6a9387fd100aec22bc22160007a819fa9"
        },
        {
          "alg": "SHA3-384",
          "content": "b684b8c0bc4d7cb21245b2d9e20e103460686e80b16d2b4ea5452c82948ba74fc2bcb093f4ab1d6b010448da5dc12457"
        },
        {
          "alg": "SHA3-256",
          "content": "f59abda303b133b832ad3d81076241d924dce6304dce5a1a60f8d816797dbbc2"
        },
        {
          "alg": "SHA3-512",
          "content": "d42ab2d7dfb1e11b896a1aad31d945639b5aa85ac9b5c2e33fc2e9174c4333eaa018217b58147930fb8017c7f569a6390c242c0e500f5b70600a2100bd08035b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/org.ow2.asm/asm@9.9.1?type=jar",
      "externalReferences": [
        {
          "url": "http://asm.ow2.io/",
          "type": "website"
        },
        {
          "url": "https://repository.ow2.org/nexus/service/local/staging/deploy/maven2",
          "type": "distribution"
        },
        {
          "url": "https://gitlab.ow2.org/asm/asm/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://mail.ow2.org/wws/arc/asm/",
          "type": "mailing-list"
        },
        {
          "url": "https://gitlab.ow2.org/asm/asm/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.smallrye.config/smallrye-config-common@3.17.2?type=jar",
      "group": "io.smallrye.config",
      "name": "smallrye-config-common",
      "version": "3.17.2",
      "description": "SmallRye Parent POM",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "1e8c87c322bd69861c264a92ac5df535"
        },
        {
          "alg": "SHA-1",
          "content": "70173822b50f8434eb55721be902893bab07569d"
        },
        {
          "alg": "SHA-256",
          "content": "ebbb7b03044580440f63788cb743664749e7169b8eb382b3cfc44a4fb328bb85"
        },
        {
          "alg": "SHA-512",
          "content": "de913a6754e38e35d2f8fddabdd9837f93077fb69d9b8ab27e959d9dc415c6524c14e0cb7e1b99474cd918d3a5db3a84198fb59c3260f60921859454ac8c4d76"
        },
        {
          "alg": "SHA-384",
          "content": "22463a45f96aafab96471b9362029b5c7709de330f3e7b3cdbb7b6e8666f0c24c7412ebb6a693869af30eca069b1a767"
        },
        {
          "alg": "SHA3-384",
          "content": "a9d70c6c8e5aebc235f27189a759a42a5bfba487a62cb8e730f03f65c2401b38b551770869388085fed59b5a31db3911"
        },
        {
          "alg": "SHA3-256",
          "content": "056677973870ce3071d07aacedb98fb7462e9b7b93cd43ec061802754ea3c158"
        },
        {
          "alg": "SHA3-512",
          "content": "a5ca32c28b436d51acfa4931abdd4272661c54484bbc49e8595517b328fefbcc227c9ce0d3969f2af4cd8d95d202d8d68a495f202ae3cab8b4c95294667858b3"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.smallrye.config/smallrye-config-common@3.17.2?type=jar",
      "externalReferences": [
        {
          "url": "https://smallrye.io",
          "type": "website"
        },
        {
          "url": "https://s01.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/smallrye/smallrye-config/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/smallrye/smallrye-config/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.micrometer/micrometer-core@1.16.5?type=jar",
      "group": "io.micrometer",
      "name": "micrometer-core",
      "version": "1.16.5",
      "description": "Core module of Micrometer containing instrumentation API and implementation",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "44ff087270426e6bca299885ea999367"
        },
        {
          "alg": "SHA-1",
          "content": "eed1add84bba09a75ac35733cb0ed6bf5a1d3cb7"
        },
        {
          "alg": "SHA-256",
          "content": "2908222d2eed9411d0d2a7a3725026cd6d8a8f7a3feab7009746009810248164"
        },
        {
          "alg": "SHA-512",
          "content": "a90744eb6d192be5d40999f52ad92cfc59709059d3f2399c88fec584eb9f1dc101c0590f970dd5242b5e818c7e304b9f8d9ec1090a934c5457cdf85409ae5975"
        },
        {
          "alg": "SHA-384",
          "content": "c2ad8beb07285a5694b11a350e362ad68b483b1a7935beaf5b9a0046e346b0045985461925c32e6db467a6b393321b5e"
        },
        {
          "alg": "SHA3-384",
          "content": "c8675bbfaf5ccde4854664eac4db5dd352c6ee8bea166344d071abc264d0f1600da8a57d0722604a72c482e07524bd52"
        },
        {
          "alg": "SHA3-256",
          "content": "f6600f78f4a789cc7b6beae805cc3e4024b7a322bd60f23741f1ecf82a6aca2c"
        },
        {
          "alg": "SHA3-512",
          "content": "fe6201e41677d9e1d4a08b2d8311e1bc8b33fd8f3ea10dfbf38297c3d30807b15da546a2e8fc878dc43cd91b328dae14bb3d52b3630f475bb26204538740b833"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.micrometer/micrometer-core@1.16.5?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/micrometer-metrics/micrometer",
          "type": "website"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.micrometer/micrometer-commons@1.16.5?type=jar",
      "group": "io.micrometer",
      "name": "micrometer-commons",
      "version": "1.16.5",
      "description": "Module containing common code",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "19fa8edce75d29d550c4ea726506d7e2"
        },
        {
          "alg": "SHA-1",
          "content": "f8c25a4e35d5049d41d8446b111b9891ae407881"
        },
        {
          "alg": "SHA-256",
          "content": "b0cc8c620453ef71e22d6c4ec5c496cc112f964b4e826b9f87182fc97512c8f9"
        },
        {
          "alg": "SHA-512",
          "content": "b0947e1514ef837efccfeb8ed9303d79a93e2959e297046ffa4dd395f5a8788ebf62e2d62bc3c7b2e9da843d80affcc2879e9421d2eeb72591930a5ff4ebc678"
        },
        {
          "alg": "SHA-384",
          "content": "9084f46234725f49bfaa6a7d1ebc964775726551bbf15a0e6a1afccdae213b5d265de8128dec1691795cfa3eccecec38"
        },
        {
          "alg": "SHA3-384",
          "content": "bea73a6c9ec78115e897ccacd52d271e12cba12db5efda8ea40152c603a66a27a136290f4e0d5917ebfc5b9a69754aaf"
        },
        {
          "alg": "SHA3-256",
          "content": "cdccf0e198f5b2e2fd8aae1b967eb42bfe2a3c51c3db717354a07b0974b8fb0c"
        },
        {
          "alg": "SHA3-512",
          "content": "695c2b337a85ba7d48adb21b22cd3b55ca31c6f7224f24495e7be94dfb91fb739c005f2fcc767839f5ab2c86ae5e2ebd909acaf6a996577d797e38f4f1e791a2"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.micrometer/micrometer-commons@1.16.5?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/micrometer-metrics/micrometer",
          "type": "website"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.hdrhistogram/HdrHistogram@2.2.2?type=jar",
      "group": "org.hdrhistogram",
      "name": "HdrHistogram",
      "version": "2.2.2",
      "description": "HdrHistogram supports the recording and analyzing sampled data value counts across a configurable integer value range with configurable value precision within the range. Value precision is expressed as the number of significant digits in the value recording, and provides control over value quantization behavior across the value range and the subsequent value resolution at any given level.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "41f807bf0c681d6f692c408a6e217eaf"
        },
        {
          "alg": "SHA-1",
          "content": "7959933ebcc0f05b2eaa5af0a0c8689fa257b15c"
        },
        {
          "alg": "SHA-256",
          "content": "22d1d4316c4ec13a68b559e98c8256d69071593731da96136640f864fa14fad8"
        },
        {
          "alg": "SHA-512",
          "content": "fb28f1bc3a3d4430474ea87a0833d56dc3d1303c98918122d93c630ebdb0d1323bbf8feb9ffdc7dddd1908105858e6959bdfdd3889ca5803cecde93a974ab6b7"
        },
        {
          "alg": "SHA-384",
          "content": "fa19cf4674dee37cb5114689cccafeadbb7989e17768b814cb431806a0f69c7b37093b6e100430bd571a45d87a319758"
        },
        {
          "alg": "SHA3-384",
          "content": "fc0a9e2e5284bc2f911c5e2fdf9eec6cfa1973b6cfb1362822580d6c8768c73ebd1c8056b6e4e5302940f6b5ec4c74b7"
        },
        {
          "alg": "SHA3-256",
          "content": "79af553410abf4d3bbfa64374dfdf8777ce49d28b4c67a615e6d4a78e97d0498"
        },
        {
          "alg": "SHA3-512",
          "content": "5b2b1795ed1ea55b5a3566bb1f4170a4367b7893256809fdb428df9405857c8454196badf3681abaf536260ed6f293c096a3f3c9d72f0f04830e8fe71d49410a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "CC0-1.0"
          }
        },
        {
          "license": {
            "id": "BSD-2-Clause",
            "url": "https://opensource.org/licenses/BSD-2-Clause"
          }
        }
      ],
      "purl": "pkg:maven/org.hdrhistogram/HdrHistogram@2.2.2?type=jar",
      "externalReferences": [
        {
          "url": "http://hdrhistogram.github.io/HdrHistogram/",
          "type": "website"
        },
        {
          "url": "https://github.com/HdrHistogram/HdrHistogram/issues",
          "type": "issue-tracker"
        },
        {
          "url": "scm:git:git://github.com/HdrHistogram/HdrHistogram.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.latencyutils/LatencyUtils@2.0.3?type=jar",
      "group": "org.latencyutils",
      "name": "LatencyUtils",
      "version": "2.0.3",
      "description": "LatencyUtils is a package that provides latency recording and reporting utilities.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "2ad12e1ef7614cecfb0483fa9ac6da73"
        },
        {
          "alg": "SHA-1",
          "content": "769c0b82cb2421c8256300e907298a9410a2a3d3"
        },
        {
          "alg": "SHA-256",
          "content": "a32a9ffa06b2f4e01c5360f8f9df7bc5d9454a5d373cd8f361347fa5a57165ec"
        },
        {
          "alg": "SHA-512",
          "content": "bb81a42498c65389366205f4e07cee336920e2f05cc0daae213f2784b1d0ce9a908b038daec20478f23eb00b2bf704f96c5b00f63c99615193ab2a3cc4a9f890"
        },
        {
          "alg": "SHA-384",
          "content": "16ca4640dc9d848e6c6d15441897e1b5a9f27f34207b0bb456dd54d8f267b73b348092e548e78634144de44ba3515205"
        },
        {
          "alg": "SHA3-384",
          "content": "406c2b5c6f64b0c090568e479b5e6136a04a4e77f8eea65d32b4e2b01deebcdf6a0a851240cdb740c25b5a5e61e6c179"
        },
        {
          "alg": "SHA3-256",
          "content": "50ae828358301033542fd7c412e86ee318d5451f89a182e2a679aaf18099d26d"
        },
        {
          "alg": "SHA3-512",
          "content": "456c337b9fb385579aae707409ed6a04d08e5fc87b1a46733dca617c22c625bf253dc4747e0cdbf5e7d8b48102d2938cb482b6b688a79aab645a7459c592258f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "CC0-1.0"
          }
        }
      ],
      "purl": "pkg:maven/org.latencyutils/LatencyUtils@2.0.3?type=jar",
      "externalReferences": [
        {
          "url": "http://latencyutils.github.io/LatencyUtils/",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/LatencyUtils/LatencyUtils/issues",
          "type": "issue-tracker"
        },
        {
          "url": "scm:git:git://github.com/LatencyUtils/LatencyUtils.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar",
      "publisher": "QOS.ch",
      "group": "org.slf4j",
      "name": "slf4j-api",
      "version": "2.0.18",
      "description": "The slf4j API",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "fe2837bd49bfb76657419002fed20ca9"
        },
        {
          "alg": "SHA-1",
          "content": "78a9e7a37cd6360e0b818e86341b24123d28d4df"
        },
        {
          "alg": "SHA-256",
          "content": "44508fd1576500688c790b190acdd16fec4f8c79a3e0b900afd70503cf055f55"
        },
        {
          "alg": "SHA-512",
          "content": "539288fa0c96cea750d11293dbed4c562630587aa7cd88bbf76ad04390d1c40636506da48faa6453090c7e9baa6b690b9fbded55a7e2b4a91547eeea011f971a"
        },
        {
          "alg": "SHA-384",
          "content": "917885c7812289f5178f68e3c421153d55abd7fe5cc9a071ffdc5de48b7afc79c352c667a20a3ad0f3b4660952932513"
        },
        {
          "alg": "SHA3-384",
          "content": "d6898eb5dd2e5caa2185c6cd2804735802b3848a3041b82ef7faa7904b3eaf5ac382d43a70a71e22b77a929e10ae2aaf"
        },
        {
          "alg": "SHA3-256",
          "content": "6bbc9103bec05ef3280dd895d8c6267ccf8b940df03c9f5145cfaa77f6e9a41a"
        },
        {
          "alg": "SHA3-512",
          "content": "e2913e96e4b1c94e7cb5c46828d1afe68c5a7248293d5c16aaa9ab462ee8e0ff97dd3d1155d2a64f66ccd9bc1ac0c83476cc886b675004b2f84aaaf50e2b2af2"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/license/mit/"
          }
        }
      ],
      "purl": "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar",
      "externalReferences": [
        {
          "url": "http://www.slf4j.org",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/qos-ch/slf4j/slf4j-parent/slf4j-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/common-init@5.0.0?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "common-init",
      "version": "5.0.0",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "d733bbd3938220e8d91692c7190ee47a"
        },
        {
          "alg": "SHA-1",
          "content": "41584b3ec7860bbaf1598d564890068fe92e198a"
        },
        {
          "alg": "SHA-256",
          "content": "c90cff2f60758766a599bfe0fc432cad1030f37a57788b5cce74e105e79c90f5"
        },
        {
          "alg": "SHA-512",
          "content": "200f7e637cfe30d3e162ec43226c5cdc8a026d222f1ab264b650d4627607b1a8a90f7b6eebd5a19ab496622ca23233049d7e061d13f85c318d419609861a803a"
        },
        {
          "alg": "SHA-384",
          "content": "148a84a3af79885c56730ce169b3f39d63a24abec56de5b53814c727015b4c91b2c5c188e7d1b64c615d75cea22cda46"
        },
        {
          "alg": "SHA3-384",
          "content": "0872148db91fcb00a35f879b59388193e38fc44f29f124bdfc9682c7d28eae268023346e5835792ceee9ffb886446a12"
        },
        {
          "alg": "SHA3-256",
          "content": "cf83c21f09f2eab9d579841f3f838005066ed3c74a0feee933e4cf829401fbcf"
        },
        {
          "alg": "SHA3-512",
          "content": "330141d5fff522e66292a2f7176f7e2e6c03e5f4fd5a916d77ed631d8d454b3058566e38715bcfcd89683d1d99e286184a8df6739ba0c6e155c7e9852ff91188"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/common-init@5.0.0?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/common-parent/common-init/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/common-parent/common-init",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.eclipse.microprofile.health/microprofile-health-api@4.0.1?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.eclipse.microprofile.health",
      "name": "microprofile-health-api",
      "version": "4.0.1",
      "description": "MicroProfile Health :: API",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "1d023ee3b9b8545318fdeebe98d66d74"
        },
        {
          "alg": "SHA-1",
          "content": "395ea08f4f636696fb23b84a18ba81430cfebe7c"
        },
        {
          "alg": "SHA-256",
          "content": "b89ca4b6c4f7a044250d31c0673f6bc221e40fd669fc5871dbad5e5a0769ca47"
        },
        {
          "alg": "SHA-512",
          "content": "87ea9c7443bf0dbe0a3d38f3f7fd5287e24440f6285fcafdaade6312380fcce802bfe083646669207d11d36b660f05a6ef6e27ab03f3093905821d44024e5764"
        },
        {
          "alg": "SHA-384",
          "content": "4ddaceabea79f53c70fd17c6140453a19d4a9dfc1c3e8910449ce32ddef4b9023dbccbd6dbfbad49b50316389df25c8c"
        },
        {
          "alg": "SHA3-384",
          "content": "893eef36f7b7edf98be7835597d06c81055887f7a59ea70550274032a5b7ebb1822600a185d626db36d38160d0632e6f"
        },
        {
          "alg": "SHA3-256",
          "content": "94ea43765310e56d62888eafd32d4595c1e8d91a4183ad3455f51f1b52a6d2eb"
        },
        {
          "alg": "SHA3-512",
          "content": "79ba68099a777dbd5e596d9697358bc122c53cd52cb5ba5ce3a2be1086abb1f45c2f7289540f1693c1950efe6189ff8f57a91f1d53915be3fa5abbb22597d15a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.eclipse.microprofile.health/microprofile-health-api@4.0.1?type=jar",
      "externalReferences": [
        {
          "url": "https://microprofile.io/project/eclipse/microprofile-health/microprofile-health-api",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse/microprofile-health/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/eclipse/microprofile-health/microprofile-health-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/common-pagination@5.0.0?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "common-pagination",
      "version": "5.0.0",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "0e04ef114bc623c3a01e97b0abacb7ab"
        },
        {
          "alg": "SHA-1",
          "content": "ba1bf4b77b50a7169b5413368a40bb840b112890"
        },
        {
          "alg": "SHA-256",
          "content": "f9027292de22939a9a15b7773fe898995966eecaba5e3e86e2a8c8d9fad8ec9c"
        },
        {
          "alg": "SHA-512",
          "content": "a876a0eca382f025022d021de02c6a4d6f73412749987820d74b05fb070740e6dedfe65d6c4580be5be574c561ec67896144ea3ebf5b00f345686b845452c667"
        },
        {
          "alg": "SHA-384",
          "content": "7a1337344f5ef28245c7edcccb040eead645e39d0c25af8449f3b9116aab3a04c7f761b12b4d8cf93c840acd568a0833"
        },
        {
          "alg": "SHA3-384",
          "content": "5b49813a176662290f559cc21ae0dcf0bad0e1b1b1d397ad9076bc039e365d10aef9140e97d4e26c973cb08823719118"
        },
        {
          "alg": "SHA3-256",
          "content": "6232fc256c2b0d9260e536cac59a3c09a612544852b95e54d1a73d6069934d66"
        },
        {
          "alg": "SHA3-512",
          "content": "dbaa4ab603f3f3b05f67ad088f90ff2157b0a240055be8ae83d6adc3c6293b612d8326d6a234ab19446d5262e93ee51aee07d448e56b0b96b4ab45c02d124719"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/common-pagination@5.0.0?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/common-parent/common-pagination/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/common-parent/common-pagination",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-cbor@2.21.3?type=jar",
      "publisher": "FasterXML",
      "group": "com.fasterxml.jackson.dataformat",
      "name": "jackson-dataformat-cbor",
      "version": "2.21.3",
      "description": "Support for reading and writing Concise Binary Object Representation ([CBOR](https://www.rfc-editor.org/info/rfc7049) encoded data using Jackson abstractions (streaming API, data binding, tree model)",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "6bc762f2f1fca2bdf2a2c5fc7403a3cd"
        },
        {
          "alg": "SHA-1",
          "content": "418e133c66e74a1a8b4b1b50eb2560918064c040"
        },
        {
          "alg": "SHA-256",
          "content": "b2bd3a5cabc399d1b4ceaab39b5563f247b66ab5ec534f7fa5bd6dd5493a6e10"
        },
        {
          "alg": "SHA-512",
          "content": "d4220aa1077c45d8ddd11599ff393dc8fed8c7d18d6ab6e3e76fa813c2d6ecdf47c57101cefac8eab1af32a042dde4ddd063e3aac31617611d7ff3dc1934081d"
        },
        {
          "alg": "SHA-384",
          "content": "9029b218ff6899ebe7f737ec9946b24e9fd00044c47065ad8c6c71625cc87008ae667eb816be2845151eeba123454cdd"
        },
        {
          "alg": "SHA3-384",
          "content": "a3fcb307306d223ee8baa4a944be0fdc4a91a9e3e5cce93876666064c0cc926bc021dfdf4bfff39fb966c14d75722357"
        },
        {
          "alg": "SHA3-256",
          "content": "f5d4f678d62874e532fae35b4ed02efb94004a2793817b8115fd7f1c115ef644"
        },
        {
          "alg": "SHA3-512",
          "content": "08d8f65796cd2121d49b56dd5611ac7d98762b54ed51425ed4028888b0f66834909b18c72c1519664a6aef5be5971439d1fd1eeda8ffe4db86eb174f5c27ee99"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-cbor@2.21.3?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/FasterXML/jackson-dataformats-binary",
          "type": "website"
        },
        {
          "url": "https://central.sonatype.com/api/v1/publisher",
          "type": "distribution"
        },
        {
          "url": "https://github.com/FasterXML/jackson-dataformats-binary/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/FasterXML/jackson-dataformats-binary/jackson-dataformat-cbor",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/datanucleus-plugin@5.0.0?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "datanucleus-plugin",
      "version": "5.0.0",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "5aa3f143b428e0e40091b00e2f6c2b6b"
        },
        {
          "alg": "SHA-1",
          "content": "6489832a2ec09968b33b3bf10d9e92cdac9ae32f"
        },
        {
          "alg": "SHA-256",
          "content": "493e2b94d0c5707c3182cad17fc7b4f12c2ee830ccb5a6de4acd299dbd72b42d"
        },
        {
          "alg": "SHA-512",
          "content": "706985e38f8afb76382b0272c9fcbe82606d2896af6dee548c1420250b57530aa21b28f80c4d843004e78e27b52c3b327ffdb9d6f37e56122142823a6bd9063d"
        },
        {
          "alg": "SHA-384",
          "content": "ddabe4e905eb66ffb0c8b5326f8f518b2d190883a599a38f50732946532f3db54ba08d3b26f8c26c7f859b1c6d6d10cc"
        },
        {
          "alg": "SHA3-384",
          "content": "feed45cc50e50a38575e1e1f67ec7be6fb37af6f80c4e04f79d2f0fb4f68330148b199a644f38fedbdfba9c57a61d55c"
        },
        {
          "alg": "SHA3-256",
          "content": "2f749e38d291976723a5205173773ed402bb4725e58e21911dd433c26adbf7d1"
        },
        {
          "alg": "SHA3-512",
          "content": "c03631f4f2845766167c7d51a6c4e78ffca6ed47e50c1f7b8dd2a92450378cb574c8005177355c42b187d9deb475022a7042a2bf375bf98979dcf53a5608f186"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/datanucleus-plugin@5.0.0?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/support/datanucleus-plugin-parent/datanucleus-plugin/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/support/datanucleus-plugin-parent/datanucleus-plugin",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml.uuid/java-uuid-generator@5.2.0?type=jar",
      "publisher": "FasterXML.com",
      "group": "com.fasterxml.uuid",
      "name": "java-uuid-generator",
      "version": "5.2.0",
      "description": "Java UUID Generator (JUG) is a Java library for generating Universally Unique IDentifiers, UUIDs (see http://en.wikipedia.org/wiki/UUID). It can be used either as a component in a bigger application, or as a standalone command line tool. JUG generates UUIDs according to the IETF UUID draft specification. JUG supports 3 original official UUID generation methods as well as later additions (v6, v7)",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "285019a0ccc0e0a79cdfd2d667f73e26"
        },
        {
          "alg": "SHA-1",
          "content": "3ca5091c87cd327880f09447e62b86b8b93db256"
        },
        {
          "alg": "SHA-256",
          "content": "5724d6a0f27db90d45af884f4520bce581f29eebe21840d07cae22b670bb8ebb"
        },
        {
          "alg": "SHA-512",
          "content": "d1fdaa7adde071beae68363003cadb0ccaa5914cc8fb313f59a18c2b8ed5661551bee9a1f243863f1af506c45d2539bf37fab08ac4dc608bb5bf6a7acaa23362"
        },
        {
          "alg": "SHA-384",
          "content": "c8204e36cd512ef971631145329d8dfecdde1a64aea4a439b93297c24202b7eb1fab410fb5f953f356cc63e34c5cca0e"
        },
        {
          "alg": "SHA3-384",
          "content": "eff84b0cc59804a9c6ab03dc252c1164aa6f07475aa60130ba06b3a0a729a33682bbf06a127ab3993bc2ed7f88ee302a"
        },
        {
          "alg": "SHA3-256",
          "content": "5b299156e5e9eab6fa17995e44b3a20d9e9d904e5e3962b3da02dd9c0dff184a"
        },
        {
          "alg": "SHA3-512",
          "content": "d8448a2458b3d85d0cf16b14bc0f3f00bead80795b97934440f94f72f7cf015ec83136d26a8fc10c6c30e16aa76865fe5b0916a2e7f5b1c00e3031976f8ee826"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.fasterxml.uuid/java-uuid-generator@5.2.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/cowtowncoder/java-uuid-generator",
          "type": "website"
        },
        {
          "url": "https://central.sonatype.com/api/v1/publisher",
          "type": "distribution"
        },
        {
          "url": "http://github.com/cowtowncoder/java-uuid-generator/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/cowtowncoder/java-uuid-generator",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/migration@5.0.0?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "migration",
      "version": "5.0.0",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "9522ec91afc1c10399a8e713bcafb1dd"
        },
        {
          "alg": "SHA-1",
          "content": "b25fc88987b0fdaac7b3bd9d57744da253eb3bdc"
        },
        {
          "alg": "SHA-256",
          "content": "d029b51d4dbd4deba6548a4c03647cb1e2a20bc8a8e6db60fe422e82f2fb9b36"
        },
        {
          "alg": "SHA-512",
          "content": "cc64dc5973af0f5437ef356558ed562a7610f4994fc6a222b4ec9111133cb57e767af25877b5daafebd0497e1a049908cf58d1832c0a7a8a864d0a9f1fcf97e2"
        },
        {
          "alg": "SHA-384",
          "content": "2719a45b69c07b09dbc3207ab5f5be73ebf5ebfcc9615afacdaefbe2bc21213b5485db472a0e7902ed40522699979251"
        },
        {
          "alg": "SHA3-384",
          "content": "25f067be563a7ea7469d5f49770b48723e61db6c477603355b3c0faf45febf9e74bd4a982a6e08fa93cf45753e7b68f5"
        },
        {
          "alg": "SHA3-256",
          "content": "ea22353c63230e56ed08b02621566ce811c00fb32dd5dbdf487c346e6ad55936"
        },
        {
          "alg": "SHA3-512",
          "content": "10c375f1c8f288ab3adb78f2fb8f6bfd33a956b11fbe4cce925a4129e9a559e0aa210326d309303b7dc41a81f5dcce2c63aa7f1dfbe42e3c6ee234703ecea48b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/migration@5.0.0?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/migration/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/migration",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.flywaydb/flyway-core@12.6.1?type=jar",
      "group": "org.flywaydb",
      "name": "flyway-core",
      "version": "12.6.1",
      "description": "Flyway: Database Migrations Made Easy.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "f99fc5fa3f6a8b53ab3d784e53b82aae"
        },
        {
          "alg": "SHA-1",
          "content": "d42fec034f4e56da4083dc1d5df55b0f470ad8c3"
        },
        {
          "alg": "SHA-256",
          "content": "9a5b4be2e6193d4d42e954cae023c09c3f48cd933acb2d56c46945df08ff8a7e"
        },
        {
          "alg": "SHA-512",
          "content": "de515533fb08953b983f3b3eb66c033fe00e82d1c70195d62c9b5b2bcc0fd7475b5db593692b74230bf220fa01737d33a477b6268f4d3be6d9f1e5939fa4b048"
        },
        {
          "alg": "SHA-384",
          "content": "8b4d0f35d39c58b16775a89ccfc988c3c73301b69ae942aa3bd20ade4910e6e3391a7846ec2840409fe8397e0824428e"
        },
        {
          "alg": "SHA3-384",
          "content": "dd2145e701c0a4581e95b5c85cfcf9f4d76b9eeb74048d8772e6fdc0fe89c5234f1f4760bb4a1fcc93b71904c0768597"
        },
        {
          "alg": "SHA3-256",
          "content": "57cda60d2f430f959c8566726679e9b7f506df9d5015c0001d37c9fa3380e79c"
        },
        {
          "alg": "SHA3-512",
          "content": "9bb6604e822a8810566521b2a6d776102120a0e91b6b1e124b64d37164a7bc8d5b4fc619f2d9180d58383ef68dfb6baee3b0802942bbf961d302ea816702fa34"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.flywaydb/flyway-core@12.6.1?type=jar",
      "externalReferences": [
        {
          "url": "https://flywaydb.org/flyway-core",
          "type": "website"
        },
        {
          "url": "https://github.com/flyway/flyway/flyway-core",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/tools.jackson.core/jackson-databind@3.1.1?type=jar",
      "publisher": "FasterXML",
      "group": "tools.jackson.core",
      "name": "jackson-databind",
      "version": "3.1.1",
      "description": "General data-binding functionality for Jackson: works on core streaming API",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "a2010f8f82d85fb80443485388efcf7b"
        },
        {
          "alg": "SHA-1",
          "content": "7c5ffe83238ded07ecd18d4d686febbd327929b2"
        },
        {
          "alg": "SHA-256",
          "content": "a80302c80cb02803e33d7b3301a0d619146d3191d285e6bbd39fa17d3aa5f24a"
        },
        {
          "alg": "SHA-512",
          "content": "636b575d41ee93a51b02d6750f672eb1d652fa0758499c3abef99f631738f60468b0e4b6b8662d103c84f1a99f8d93f3a757b3410ef70bc65b955ee3fe4dfa5e"
        },
        {
          "alg": "SHA-384",
          "content": "a51e0ad60d12619664a593135d62340901098458d932e02a6b9fd68a1df7cf346ac3c83715000fcb80312128ba0c9c80"
        },
        {
          "alg": "SHA3-384",
          "content": "3b533a15eb850094c536d3ddcddfb411ba5bab1af1f049fdbc2b67e1d00b15b9d78766874b7193b62ed2a6e388488db8"
        },
        {
          "alg": "SHA3-256",
          "content": "50aa91e758a72519a4639a4f396c118b7830731208905e39b7b681c4c2356a0a"
        },
        {
          "alg": "SHA3-512",
          "content": "b5cf6b169256abd7d1003ab5493066187d92f3eb32df7f1b6a3ec97696d1ab5598bf8a478355d331737b4b67a328ea0f34bc512b2e57c43097e9047dd9c8152a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/tools.jackson.core/jackson-databind@3.1.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/FasterXML/jackson",
          "type": "website"
        },
        {
          "url": "https://central.sonatype.com/api/v1/publisher",
          "type": "distribution"
        },
        {
          "url": "https://github.com/FasterXML/jackson-databind/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/FasterXML/jackson-databind",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/tools.jackson.core/jackson-core@3.1.1?type=jar",
      "publisher": "FasterXML",
      "group": "tools.jackson.core",
      "name": "jackson-core",
      "version": "3.1.1",
      "description": "Core Jackson processing abstractions (aka Streaming API), implementation for JSON",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "9c844d1e60292bc51762f661d3ce3874"
        },
        {
          "alg": "SHA-1",
          "content": "8eb0e0a912e65328bddb0b25ff499cd0d2391007"
        },
        {
          "alg": "SHA-256",
          "content": "4cd270bee1a1aa34be18da78268f3879355b6ea09154beff496831785b6194c9"
        },
        {
          "alg": "SHA-512",
          "content": "2dbf82f140428312b8ac9e8b3b2e74843f6923d7cef563161dbfe4ea93fd52cdc4943347e0ab7f6e3ec419e933fe3ea724a5a45ac3ba7fe696f85f104779cb20"
        },
        {
          "alg": "SHA-384",
          "content": "82ddd83fc7f797540c2a02bee8726c9af3f11139c4454745f91ad9f668e25b8e7f05ce1d6d297e9c42ad77d60480a3ef"
        },
        {
          "alg": "SHA3-384",
          "content": "fec024ad8c23f7d05fa57f1b98365a7a117dfa8adeeb0eea791eac1798036ec0ec47acbcec833601e93c3a67172c96eb"
        },
        {
          "alg": "SHA3-256",
          "content": "66c3c0c38e6f6d5408fd707a6f3b83e905be34f7096f0b20e6aa6c67409ad131"
        },
        {
          "alg": "SHA3-512",
          "content": "a4aa1bb4695d451ff08d9c253c5eab187571302c2bbaefd79f26a531ff9a3f363ac2808eb020c69850ca7f862e43bc975f8345eda76e0bbf46c4b17378451927"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/tools.jackson.core/jackson-core@3.1.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/FasterXML/jackson-core",
          "type": "website"
        },
        {
          "url": "https://central.sonatype.com/api/v1/publisher",
          "type": "distribution"
        },
        {
          "url": "https://github.com/FasterXML/jackson-core/issues",
          "type": "issue-tracker"
        },
        {
          "url": "http://github.com/FasterXML/jackson-core",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.flywaydb/flyway-database-postgresql@12.6.1?type=jar",
      "group": "org.flywaydb",
      "name": "flyway-database-postgresql",
      "version": "12.6.1",
      "description": "Flyway: Database Migrations Made Easy.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "b44fc20a5aaefa1ef5108b8515325a56"
        },
        {
          "alg": "SHA-1",
          "content": "714930c5467b6426afa6647459e6c88eec0e412b"
        },
        {
          "alg": "SHA-256",
          "content": "7679df22b77c47474d10db97531b3f9f2eab73ef3b1858f55d0e33c7883ffab0"
        },
        {
          "alg": "SHA-512",
          "content": "c7ff42afdf3aca08b8745ff0fa8e5a23398ad20c93d93735984dcd9b7918912e71863b6eaaadd45170ea81d8744a5777998f45f23f07b4644b51129e14fd9fb4"
        },
        {
          "alg": "SHA-384",
          "content": "137d0455095796e19109d2adc22731333c6b5cdf93883e23326b41df2aa8a66f5024cc3a674691b798d3b56d0651e6fb"
        },
        {
          "alg": "SHA3-384",
          "content": "beb5b02562d6ef2131b1908a828db32dd449323591c94390bafb631b7ba1d1f23d66aaaacdd108f5a43d26f90c057c66"
        },
        {
          "alg": "SHA3-256",
          "content": "4db6c03c786fef8649b185f0bebf21983332381f8accccb58db389e632cf3d74"
        },
        {
          "alg": "SHA3-512",
          "content": "193a5ce4dab905c24224e11b3e915f4d184de844799b1ac423ec8c67e829b72cb027d00e722a1957c6c6cfe5c24b34fd08c8b230521e24a332190e572324af0f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.flywaydb/flyway-database-postgresql@12.6.1?type=jar",
      "externalReferences": [
        {
          "url": "https://flywaydb.org/flyway-database-postgresql",
          "type": "website"
        },
        {
          "url": "https://github.com/flyway/flyway/flyway-database-postgresql",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/notification-api@5.0.0?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "notification-api",
      "version": "5.0.0",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "106e09c60c2eeccd6554e3c7971e56b1"
        },
        {
          "alg": "SHA-1",
          "content": "2da37b7d5d2107235bfdaed514535187d67317d9"
        },
        {
          "alg": "SHA-256",
          "content": "bbcaaeed43a9b891f5a42824815c29c8e0c7ce0d9a201b9779f06473055a3ece"
        },
        {
          "alg": "SHA-512",
          "content": "076831088be79fac1324ad1225c40f0d849b789b23f58f7359218c9da6e8cba865aa5fcd1de681aab5d136a03e6cf4605f7ef78c03a0e35a8f6d13cb0734f191"
        },
        {
          "alg": "SHA-384",
          "content": "7ef37ac1f41c0ccfd76a7c8b3c13a7af2f0b10c229d89b0fe983f1a623d13d10615791102dce60fb1259ae6548297c6b"
        },
        {
          "alg": "SHA3-384",
          "content": "d027270bb42c5203256e8edc11883beb1a2c07916de74d1560a59b4f2d15b5174e1eca35c4e4f380e2c77f2c9c69a645"
        },
        {
          "alg": "SHA3-256",
          "content": "b650c183ac5369ad55d33a4013874329561d2d8f2f22e3c0cc4d82fc7ae1b249"
        },
        {
          "alg": "SHA3-512",
          "content": "76fe32577177992b94fb7dace05f40efac62b4b7ffc59a8321fb13b7f1ea55fed9cae9cc7fe5107b33bfe2dd0c26ea9b210f5fbd74fe3db9ce00de4fd30dee1f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/notification-api@5.0.0?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/notification-parent/notification-api/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/notification-parent/notification-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.protobuf/protobuf-java@4.35.0?type=jar",
      "group": "com.google.protobuf",
      "name": "protobuf-java",
      "version": "4.35.0",
      "description": "Core Protocol Buffers library. Protocol Buffers are a way of encoding structured data in an efficient yet extensible format.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "5b7ce5ca505f2a5ae52c9a6b3e264180"
        },
        {
          "alg": "SHA-1",
          "content": "6d5d7c2261b26586e772f7fd2d27716272ef7bdd"
        },
        {
          "alg": "SHA-256",
          "content": "400621a8f0aac52fab7ec88f492edd356f5a4355caa8f92028f217a8b5e4ac3b"
        },
        {
          "alg": "SHA-512",
          "content": "2978603d93de23dcff85476fa4d93c46334acc5ede32aa9a400b837f75c8efa310f5be3a171ca33862d2b53ec1434d15c2ddd4b701784281ed68e595aec9c12e"
        },
        {
          "alg": "SHA-384",
          "content": "4f6be343719d3c86388016a50930c23fad3bd3bb5bc4499b658b0c09aafa725dc6bd0c460f3f86f90f77ae5c943fd9ee"
        },
        {
          "alg": "SHA3-384",
          "content": "3d6cc701c4f361f6d0375948a817c943cb0a2bd1c1479eacd1d4efe2c67e23d940200baa173ba7ab5266101072ca8895"
        },
        {
          "alg": "SHA3-256",
          "content": "9342f6538a8ab0d8f6c17697131b955c47ea28f05cb032b2bf33746f973b9ce5"
        },
        {
          "alg": "SHA3-512",
          "content": "d0490580ccdbd5b2af1752462063b89bb52df38d489369f5c5bc440888dcbb5ebfb7322407d24602cc3fd3f39bea59dff74c0b6300df864b4a9fdd826b23f7e5"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/com.google.protobuf/protobuf-java@4.35.0?type=jar",
      "externalReferences": [
        {
          "url": "https://developers.google.com/protocol-buffers/protobuf-java/",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/protocolbuffers/protobuf/protobuf-java",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/notification-publishing@5.0.0?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "notification-publishing",
      "version": "5.0.0",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "244dbc42c3a7acf7aba2f231d6ce4d31"
        },
        {
          "alg": "SHA-1",
          "content": "6a023b17fd4f8635c4f3321caf98cafb3aebb7a4"
        },
        {
          "alg": "SHA-256",
          "content": "f18ef68a23a7e05846a30986955db6918f3b48002bb7c9035ccf5165976b30d0"
        },
        {
          "alg": "SHA-512",
          "content": "976743368387ce62df5d619c342638b61515d6f2c41eb70d9dc349adf2645f94f6c1966e1ebb3486cf0d8151c3b5ed43d2466daf23f1bed6f3d45f51f4501f80"
        },
        {
          "alg": "SHA-384",
          "content": "8985478cd619118ed69fa418a59925daa66e25b615ef04fece2c16117afe747df7b47db15e18c4d2afd65ebfc2864882"
        },
        {
          "alg": "SHA3-384",
          "content": "8902cc48373f0eebe14b22995ffab5b8be3258aee0be0443dbdcd594cbfdf21685c090fe3780e357eb2b74c6a1940a5b"
        },
        {
          "alg": "SHA3-256",
          "content": "23282a8148662c28cf6cfc759ea03f860cff4a1d806b3cdf78ac5204ace72363"
        },
        {
          "alg": "SHA3-512",
          "content": "a5bfdd833c5eade8588d9eba27198648f8663cd49d13934d0c63547a3171ec252407a49c561034376024249b952cf19ada8cf5cc0c47a2bdb5bce1085a5efe79"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/notification-publishing@5.0.0?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/notification-parent/notification-publishing/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/notification-parent/notification-publishing",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.eclipse.angus/angus-mail@2.0.5?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.eclipse.angus",
      "name": "angus-mail",
      "version": "2.0.5",
      "description": "Angus Mail Provider",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "e965a2653568c0138457b4c6fc9e5d77"
        },
        {
          "alg": "SHA-1",
          "content": "427f6d52ec0782f7efaca0c0732042e347a6cb4f"
        },
        {
          "alg": "SHA-256",
          "content": "b4d8c30d35f455def6c7a05fe595a1e62ea2b80cac3efec1e9ccf4118b23168a"
        },
        {
          "alg": "SHA-512",
          "content": "500985e3045a7640049aa1ebb008d675983f537150605f192d2746ca2aa8c7a1b5231f782f950dfd968cc8ca26c32c6e93008cc7de309c5da4b17af0139baff7"
        },
        {
          "alg": "SHA-384",
          "content": "35c797fdc52800ccfbd36d7574c0919fbba1f820eafb1d236271eefb07266360c1b87c07c089f97c07d12a634e54037c"
        },
        {
          "alg": "SHA3-384",
          "content": "9a10dd9cf09af51c29d178d2dd87c6a796121753c91ca13b8c51843b8ed737803090fa93f41ec8689469550941e12473"
        },
        {
          "alg": "SHA3-256",
          "content": "7ac45dd92d65996c4de11701bf1a1130e393a3e33b4bc02af69bf627e54b122e"
        },
        {
          "alg": "SHA3-512",
          "content": "b45eb356f855b9777cfdf6be94c6797c33e86fe28e8e2e7fe7311e661f07d162e8c4e46a2f3dd67b7c0f8261ab5610c85f4f62cc874e64ee2a76eca3501e2e2d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        },
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/org.eclipse.angus/angus-mail@2.0.5?type=jar",
      "externalReferences": [
        {
          "url": "http://eclipse-ee4j.github.io/angus-mail/angus-mail",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/angus-mail/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/angus-mail/angus-mail",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/jakarta.mail/jakarta.mail-api@2.1.3?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "jakarta.mail",
      "name": "jakarta.mail-api",
      "version": "2.1.3",
      "description": "Jakarta Mail API 2.1 Specification API",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "288a687deb06b87602ce14cd03dddff4"
        },
        {
          "alg": "SHA-1",
          "content": "a327aa5f514ba86e80d54584417d7376ed2bde0e"
        },
        {
          "alg": "SHA-256",
          "content": "8051b58d75f982f9a5b963b3765426e824b2a64865ef0af17205e455b98db05c"
        },
        {
          "alg": "SHA-512",
          "content": "841a9784cfcfa1723d1c634b094280fabe6ecfdf640513a76a6a39b1ad29d59c1207c086cd66ec8e7f161ffaacd9e1dad12828ac4c57583e9d8593f12ae6460d"
        },
        {
          "alg": "SHA-384",
          "content": "dd18dbcf72559ea405946a6d73dc60e672b3bc222e32944b2bf51e81cd41348ad7873b5b2a9d86f0440b44bcd6e45176"
        },
        {
          "alg": "SHA3-384",
          "content": "c02d8861b3c9fee8f18bfcb41947d2a83eeaed4ea9d1bb8784525c7fedd2ccab6b704663ff5a452c78537d1b79fd960a"
        },
        {
          "alg": "SHA3-256",
          "content": "c10cb31acf35574a203d85427d81e36162edc44b9f6cd9b422c19144b8e7ae4b"
        },
        {
          "alg": "SHA3-512",
          "content": "4034e1d5280fde464902035e7491e997ffec62a327844deec6f7e64b7b2d8d1d9fe505f10691caf7223ec06e6d27ac263ae1341582a5c48adad1c7635c13f0d5"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        },
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/jakarta.mail/jakarta.mail-api@2.1.3?type=jar",
      "externalReferences": [
        {
          "url": "https://projects.eclipse.org/projects/ee4j/jakarta.mail-api",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/jakartaee/mail-api/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/jakartaee/mail-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.eclipse.angus/angus-activation@2.0.3?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.eclipse.angus",
      "name": "angus-activation",
      "version": "2.0.3",
      "description": "Angus Activation Registries Implementation",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "ad20392145690b36b4f950fe31a31a2a"
        },
        {
          "alg": "SHA-1",
          "content": "7f80607ea5014fef0b1779e6c33d63a88a45a563"
        },
        {
          "alg": "SHA-256",
          "content": "a6bd35c538cf90fff941ad6258c40c08fca0b5c9c3f536c657114f27ce0527a7"
        },
        {
          "alg": "SHA-512",
          "content": "efb987b781f665589b2a524d86826ffcf37eaf105b2f823be124fded85bd118098c0749b5d268373d00b1d3b8bf0f89f86670444f9990b91948704a7052376e1"
        },
        {
          "alg": "SHA-384",
          "content": "4086b356cdf168e28a09dfa2ee9cd54926491438d556e4608508ae6a895929adf63f3a259779c83624a9bb1f886efb6d"
        },
        {
          "alg": "SHA3-384",
          "content": "7b79721ec0b28964fad4bf56ffc3be67d81b62e45a4ac703917094e281c125834b9bebcc0623176d4904c5b50c94450e"
        },
        {
          "alg": "SHA3-256",
          "content": "aecadbd33e92abf894ae28c8cc609f5f85e8af736621c44fb71b84ca34e91247"
        },
        {
          "alg": "SHA3-512",
          "content": "ebdc07c3b3cf0817f6d9ee54bb23461657f213648b70f6c7f634a1028cdf1522d5b5a7e2168130f72afa112f36cb08858d1c94bb67b40a0f051f567b4d696d1e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/org.eclipse.angus/angus-activation@2.0.3?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/eclipse-ee4j/angus-activation/angus-activation",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/angus-activation/issues/",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/angus-activation/angus-activation",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.github.ben-manes.caffeine/caffeine@3.2.4?type=jar",
      "group": "com.github.ben-manes.caffeine",
      "name": "caffeine",
      "version": "3.2.4",
      "description": "A high performance caching library",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "04d655feb58be297a86fa2814a1f1ef8"
        },
        {
          "alg": "SHA-1",
          "content": "c63b303adf59c733d2a96125ad6670e938a2c15d"
        },
        {
          "alg": "SHA-256",
          "content": "9d9d2cfd681fd9272ded3d27c9930db12f89f732345975aa113ebc223bbf1224"
        },
        {
          "alg": "SHA-512",
          "content": "6923d1b826e3723a9d58b092626045bdbac48dd91e758b3b78164de31105035343145d14c20a00b62658b7d1dff2a5cfb7475b200cc630dcd967c4732c2628ee"
        },
        {
          "alg": "SHA-384",
          "content": "dd9a4951638126227d1a27ed4689391783f42f55a6e863d5022dd9f864e0cf174bc9e6267b3f7f3d6ca4a03399d38c28"
        },
        {
          "alg": "SHA3-384",
          "content": "f84911ac6299bccc137471d1ea3ca870ca0d0604e47e475ef19ee1850bcd5d98e1a13b6ae493096a4349dcaef94abcf7"
        },
        {
          "alg": "SHA3-256",
          "content": "745b6815303fc9a89f385e7d17120b1d3d5987b5af03870d72d077c2d060f038"
        },
        {
          "alg": "SHA3-512",
          "content": "cb5ea47d93b8bd42d4df7d1727c0870479acadd423c284843bd95fdc1f4becf328943adad501a253d91d369bb3b6ec9858ebca4d272008e655afe89a037a0c96"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.github.ben-manes.caffeine/caffeine@3.2.4?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/ben-manes/caffeine",
          "type": "website"
        },
        {
          "url": "https://github.com/ben-manes/caffeine",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.21.3?type=jar",
      "publisher": "FasterXML",
      "group": "com.fasterxml.jackson.core",
      "name": "jackson-databind",
      "version": "2.21.3",
      "description": "General data-binding functionality for Jackson: works on core streaming API",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "0ae595293418fd4dd9c4527d4abc5610"
        },
        {
          "alg": "SHA-1",
          "content": "aa7ccec161c275f3e6332666ab758916f3120714"
        },
        {
          "alg": "SHA-256",
          "content": "f397563d8e67630c10cab8c2334ca0e55af832fa3ebde160a379c2c96d43bf25"
        },
        {
          "alg": "SHA-512",
          "content": "bf9df0232bd26b6f00b2227fad26cee40ef31e8e12e521ee1afe89dcea61ddb2b27cbc0d1f0679d1746cc35cc361e531c84324db68d43eaa60f15933bbbcf0ab"
        },
        {
          "alg": "SHA-384",
          "content": "47cf817512cd1482eeaa54ae68e62d3b13eafa11546d99ee933de28a9514f4a41e967fa378b40b17746bc98a26f7b387"
        },
        {
          "alg": "SHA3-384",
          "content": "d0a2f03bf3223f5ad6d84541f1027f56045689ec54dc8c594db9dc11d50c041d8487b1abcaf107b05da886f2b988c628"
        },
        {
          "alg": "SHA3-256",
          "content": "f506e6ef4e26c5720065231dc654a0a99beb2e195e98e32fb5ad02ab4386e20b"
        },
        {
          "alg": "SHA3-512",
          "content": "a73c9798fa53f62bec6ca46cf8ad264d78b0a41ab9089ad8b8f4bfb8034d8eea8081bbcf3e2a9a3ac5ea018c13710098c6b1af033c088cec2385ccd62c1b84c0"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.21.3?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/FasterXML/jackson",
          "type": "website"
        },
        {
          "url": "https://central.sonatype.com/api/v1/publisher",
          "type": "distribution"
        },
        {
          "url": "https://github.com/FasterXML/jackson-databind/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/FasterXML/jackson-databind",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.kafka/kafka-clients@4.3.0?type=jar",
      "group": "org.apache.kafka",
      "name": "kafka-clients",
      "version": "4.3.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "d7b92e43f60fbe48e6f6b1980c07c790"
        },
        {
          "alg": "SHA-1",
          "content": "2bedc61c3e75cf3342b869a5b4b470458fa94b07"
        },
        {
          "alg": "SHA-256",
          "content": "97a5b492d4ad658fd2dfba969fa0e403c2e38c971fb1e083da4e391471925fc1"
        },
        {
          "alg": "SHA-512",
          "content": "7406d34fad25de6edd70ddfb4977d45bd775f8a520aa4c7d543511886e403cbaaa15c038bc217c2bb0c21c8c28998cbb5cf2b907cbf756c36d921edaffcc5a4f"
        },
        {
          "alg": "SHA-384",
          "content": "19d0ee4900708490532158b4142ffee3fda2ecfc45ab1938fc562cad6d9f1c1b9bb988bd7ba8fa129900cf90cd0338ef"
        },
        {
          "alg": "SHA3-384",
          "content": "5bcf7651e3c09456483558186686aaced342f4d25752700899b86a8e07edbcfeeeea97f032a73262de9b6a27e8149abd"
        },
        {
          "alg": "SHA3-256",
          "content": "5212967bb26f9f41e9963646b0a3174ab51965e91e52fc0a2086280ca82e6170"
        },
        {
          "alg": "SHA3-512",
          "content": "5328c0d61afdba1f2b222aac622aea30c4911826a2ae2fafce45a04ace61c24f1dee3c8e7de395f843165154c8cee6a3dcf4cddf35a14f5aaeba6c8539353b45"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.kafka/kafka-clients@4.3.0?type=jar",
      "externalReferences": [
        {
          "url": "https://kafka.apache.org",
          "type": "website"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/at.yawk.lz4/lz4-java@1.10.2?type=jar",
      "group": "at.yawk.lz4",
      "name": "lz4-java",
      "version": "1.10.2",
      "description": "Java bindings and pure Java implementations of LZ4 and XXHash",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "f9fe6db582e61989316715dca1c79f6d"
        },
        {
          "alg": "SHA-1",
          "content": "1df182cf1b030e347c81ca8768c24dab414a04d8"
        },
        {
          "alg": "SHA-256",
          "content": "252dabd586d22149a31661a8afc1a50747714eb1a298bd4a6e780c8c91a13866"
        },
        {
          "alg": "SHA-512",
          "content": "2634adf408910c3a1cff41f5bbde0f0643d6aa89b9c10c84ee5982628ceaf092015acaa0ed90eb56cdb0cc1c72b6667bc51b4312c8674662d5150a821c512f88"
        },
        {
          "alg": "SHA-384",
          "content": "0583dafa52d9c28aa84204fb3996528fd3fac71ed7c452b904bcc8f3f8fc07ca36da13fea1bd7a5eec34f9e6480925f5"
        },
        {
          "alg": "SHA3-384",
          "content": "70753f41fb3eba873d96c9a2dc79bc92bf1bfd9e71c1153841338b01c986f95f47c264e651e16a359b2abc0d61339dc6"
        },
        {
          "alg": "SHA3-256",
          "content": "bd18f6b4f05872ec9baf1fae2fa743a102d076f9ae1856c0b38ad03aeaa02e2e"
        },
        {
          "alg": "SHA3-512",
          "content": "82edfdade65175934695df09016a2b6af81d89250afb905a31453e991ac92e5952b274410344f2aca7c3458c77b1d5e38a8f37ddbf77e11caf03d04bc1591832"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/at.yawk.lz4/lz4-java@1.10.2?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/yawkat/lz4-java",
          "type": "website"
        },
        {
          "url": "https://github.com/yawkat/lz4-java",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/notification-templating@5.0.0?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "notification-templating",
      "version": "5.0.0",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "cf009e3eb33225926db3dcf93dfd9a3e"
        },
        {
          "alg": "SHA-1",
          "content": "2600cef78eb139926a414cc6964a466b03e6818b"
        },
        {
          "alg": "SHA-256",
          "content": "46a8a227bf617ff6e5dfc0d65f2c0272bfe77c0f0f50226530ce11f3028037db"
        },
        {
          "alg": "SHA-512",
          "content": "62097f6a547cc1eda7c2aeebc54b70b9baad8d3a9398efb4877334c82986445960bb3cc017923e0eda2e76da26387603a243b4c678caea2bfdfae8556effb7f6"
        },
        {
          "alg": "SHA-384",
          "content": "a6d1b976d315edd4bf0eac37290fd31316252bac2d61759e33ebb338272019e6b14e5252b89b6987630cba1287d95362"
        },
        {
          "alg": "SHA3-384",
          "content": "7afa0a6704c25f0f41110c6c8e04fd546cae3322c7f8a1a96eede8879fc18b36e8d9a31a9bb9e8e125964f1ea65d0064"
        },
        {
          "alg": "SHA3-256",
          "content": "dcab79767d9f72f8c82a4c86ccd91448f7e57647af386dca207ea5217461a09e"
        },
        {
          "alg": "SHA3-512",
          "content": "9594077bd37ccc94c69c36fc4a083c66abb0ee490389c05f689826e393197528f3055efc1b83b256a3ddb3bf36becaca2f9394c2814e3b5367bc6aab52a10da0"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/notification-templating@5.0.0?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/notification-parent/notification-templating/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/notification-parent/notification-templating",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/plugin-api@5.0.0?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "plugin-api",
      "version": "5.0.0",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "659af4787d1eeda770b488282fb48bf7"
        },
        {
          "alg": "SHA-1",
          "content": "09c773ad3baa54accff051b00e20d69b7ab61224"
        },
        {
          "alg": "SHA-256",
          "content": "416b55c539c924680a0d1b312279ec6b68f4ba64bb21746467c8b4a4bd19238c"
        },
        {
          "alg": "SHA-512",
          "content": "6bbebfd1a4333c11d88a08e0ad7314e42d79015ca5f9c92bf7695f044297f3df79d2cc936fa641d77b3423ffef0f997c3bafc5302fc1dd4a8535a01e797c7022"
        },
        {
          "alg": "SHA-384",
          "content": "5a25c35d4b55fab20f8bd22fb59df29ec491db1d9ec633ca2ad9879dc2cb6abdbf28f13a74eaf741e5207dd7bc6b6965"
        },
        {
          "alg": "SHA3-384",
          "content": "d3103e8904e37c474b9de8c84def75e1f3230bbc05f60ce5da8841236bc4f7583e7d102a391859a780ae348d2c1eba91"
        },
        {
          "alg": "SHA3-256",
          "content": "d63c6ba084362be05565975b5a846c9edb5aea3708905ee695ebb3041966e550"
        },
        {
          "alg": "SHA3-512",
          "content": "b7e28dbe4398447f3107b474618acb40ce7e3624651438b4e56e9b4a467c14af3a96cdc3fd3d29803a96b571a20d58d687b0ad5b71eeb5632c3ae00d0d194c91"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/plugin-api@5.0.0?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/plugin-parent/plugin-api/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/plugin-parent/plugin-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/plugin-config@5.0.0?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "plugin-config",
      "version": "5.0.0",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "e1ee2868806e9d25047f243a7a2e6371"
        },
        {
          "alg": "SHA-1",
          "content": "d66e99a226c20502773018dedb21585c7027129c"
        },
        {
          "alg": "SHA-256",
          "content": "1e12b8510dbbf3b03a4afabf528fe248221b522ad6b0496446be00cfe99096f7"
        },
        {
          "alg": "SHA-512",
          "content": "1e5b6cb7bfd6266c72db1ddc56fa2888056006dd803d92ca32d3b4eea51ea18a32552ae256cdd6c753422d8edaa7cc2bc4d36e9e61f4f7cbe1288e817678dd4c"
        },
        {
          "alg": "SHA-384",
          "content": "42ae1eb885552b43da97f77dc86b2e16eb455c1f3805e255a49ff3d4c6cd8383a97522fabdcd3277679a16606b6fa639"
        },
        {
          "alg": "SHA3-384",
          "content": "f9406056797af82528237823730b3e52abac271c0adc9cbd167ad50faf910dfa11e529b63f350f03cb5d1baaebc9ac6a"
        },
        {
          "alg": "SHA3-256",
          "content": "78d404ac007c7a83183154d577f55328169f2b1f522a3ae72f1cc846c6ca9d29"
        },
        {
          "alg": "SHA3-512",
          "content": "802eb406a8b6dd67c97cc7d49a386f4005b41b39ef706d2ae951a7942222b2a89f7960f069b422291c8e4d18b351287af8ed11696fddda33de006c33a2b94935"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/plugin-config@5.0.0?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/plugin-parent/plugin-config/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/plugin-parent/plugin-config",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.networknt/json-schema-validator@1.5.9?type=jar",
      "group": "com.networknt",
      "name": "json-schema-validator",
      "version": "1.5.9",
      "description": "A json schema validator that supports draft v4, v6, v7, v2019-09 and v2020-12",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "84622292ac5001bac8f16dc5002a8b94"
        },
        {
          "alg": "SHA-1",
          "content": "6a2f9fe324b9dc8d8e0c3d7b435f7ae99595a556"
        },
        {
          "alg": "SHA-256",
          "content": "e0b8baeb78fd1ba027454ee3974d8a02f54447eaa510d3052820a7d2160d9ae4"
        },
        {
          "alg": "SHA-512",
          "content": "5ba210c135717a6ed043e0889d96f6381b3668f9e2a011bd0def8138ad327813f792259858ae5ed192cb8ec0645308113769aa8ebee903db1ccd82e98cb3009d"
        },
        {
          "alg": "SHA-384",
          "content": "21a4f4fb586959241ce92ad788cb4326d62232aafcddf6953ef7769efa5c6936487ffea51693ff44206f4d66c83ee753"
        },
        {
          "alg": "SHA3-384",
          "content": "36bb0b96a34254780e991440e879c1f44a0a62362e115a5c761df0ec1c8f2a9f64a7421ea3cb50a589ae501619fd3942"
        },
        {
          "alg": "SHA3-256",
          "content": "c97a2638d46c235056bacfe90d8e0b88a823a5622e88b608a31f481f3adb9ccf"
        },
        {
          "alg": "SHA3-512",
          "content": "08b256bb3ac49102d87c0e635d025699154bfa7785916d591173af6ec14dfde885e34500a7bd13159a00a7fe78dc859aefa9dc930d0719a64ea08209ccffb20a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.networknt/json-schema-validator@1.5.9?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/networknt/json-schema-validator",
          "type": "website"
        },
        {
          "url": "https://central.sonatype.com/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/networknt/json-schema-validator/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/networknt/json-schema-validator.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.ethlo.time/itu@1.14.0?type=jar",
      "group": "com.ethlo.time",
      "name": "itu",
      "version": "1.14.0",
      "description": "Extremely fast date-time parser and formatter - RFC 3339 (ISO 8601 profile) and W3C format",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "e537d0a2bc8066726f7e4654c253cf84"
        },
        {
          "alg": "SHA-1",
          "content": "c0f9f9d4f4404787e992ab3af5ae95f2fad79e47"
        },
        {
          "alg": "SHA-256",
          "content": "5cf40ab0cc77828ab2b875b1f3ecd71c8295d7721933476abc2e08fddcea164a"
        },
        {
          "alg": "SHA-512",
          "content": "aa69a6af3a7123eb41425bbaf6834e16dc3323172709e2338b8a21b970fd21333d996515f42da4aa0225251e30542ad7d9c8332bdf7d62ed96b42fadc8a1520d"
        },
        {
          "alg": "SHA-384",
          "content": "8d201334c39b68d13d66fc9df2440fa848b055a9b901e1c630ff66a47e70c8816484d106ae18c642d4257034f33e55f2"
        },
        {
          "alg": "SHA3-384",
          "content": "033715e1422cb3f22c1073bc7b058fd16d1436c6314f49f13480d81c86b656cb77a4d852cbba35542bc8f2ce49244ba6"
        },
        {
          "alg": "SHA3-256",
          "content": "f18d275dd2a0038a82432e06bb9f396151310136e3a316a869ef54d7fae834c5"
        },
        {
          "alg": "SHA3-512",
          "content": "8a51b3c6144eb2e363f8804da316d9e3dc246be07af4c0bb55e9540c2a0deb5eb9beb825120d3d203e3a561fd8a605ad64f3af5d233725e1b9c7e06232deaea9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.ethlo.time/itu@1.14.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/ethlo/itu",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/ethlo/itu",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/plugin-runtime@5.0.0?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "plugin-runtime",
      "version": "5.0.0",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "170599cd78b9b7009a19f2b1deb56568"
        },
        {
          "alg": "SHA-1",
          "content": "6b23a0f4f27a8926a75bcbec095ed0a6a5b48b97"
        },
        {
          "alg": "SHA-256",
          "content": "9757bd061e5505a5621d9d47df7c3d0678cb60cda086d3edc840257e1f3353e3"
        },
        {
          "alg": "SHA-512",
          "content": "f83dbcd200ede6dccd33d2c4cf4f5aef49a707f1a0dda3d4357c9e946709261d400dcd31e90485c7aa6d85876de0f96c0bdc1dd248a912a0177db49864a5b3a0"
        },
        {
          "alg": "SHA-384",
          "content": "205174cf85e37f606e5b0e301436c5400d710cf2174f0e9d038363aeb6191b6a561ae28c869365ad9e58137f24a2a51f"
        },
        {
          "alg": "SHA3-384",
          "content": "02bedb04bb534e7c10eff762133ce0f3a99ec97e37f6d27c3a91bd6e14c6da3dc50bd2c809d6d28aab034314e585a9ce"
        },
        {
          "alg": "SHA3-256",
          "content": "9e0a0935139937f4abf12bef80449a5b27181510bcba6089f984cac8a4e32b96"
        },
        {
          "alg": "SHA3-512",
          "content": "eaf7833fe5a0d343ee23c834f71dcffa265e20e4272de78a20c998761572c040796b95d8b3b43cefb3174494fd5b0a1b15177447afbf52e4eacdd4cd091e94e7"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/plugin-runtime@5.0.0?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/plugin-parent/plugin-runtime/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/plugin-parent/plugin-runtime",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/common-config@5.0.0?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "common-config",
      "version": "5.0.0",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "11b02f93d0c144e81ec632224e09e4b8"
        },
        {
          "alg": "SHA-1",
          "content": "5c727132541a697721cc398bf20f2709d95c21b4"
        },
        {
          "alg": "SHA-256",
          "content": "14d5e2cb300ca1ba36db0e72f4a41b7720929bd9bb94d060abd7a40eeb4e352a"
        },
        {
          "alg": "SHA-512",
          "content": "13e894d1301db79be240533dc6f878390a89312bfffbf3821631fd8a931e7e7c3691483ef148b0c22fd5b851fa48364e8d86ce285ff7d720b6527704df5f6ed9"
        },
        {
          "alg": "SHA-384",
          "content": "68db80faefb48456b93ba75d93bfeb49f3ed4c574c48080c230dabfb29cc18e47836ec8746c73a55bed5c919e1763ef1"
        },
        {
          "alg": "SHA3-384",
          "content": "56b3f0118bfa3f5bcf0ffe81c87e01e59499fa5b52755d76924fecceba8963f6194073e68e1ae9ca8cab2036be3662da"
        },
        {
          "alg": "SHA3-256",
          "content": "651d00066f3b7dbe5f2e2081b00aecb6d27c2aa91a99c0a1b4a9879a6a7e6ce6"
        },
        {
          "alg": "SHA3-512",
          "content": "b377ddf2828f65cc768f6e31b34ad8dd5e520466fd19198e9803cb5476e1852e1ab56b47b5cdb832d08a32038e2210365008402b80214627ed7698128801be02"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/common-config@5.0.0?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/common-parent/common-config/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/common-parent/common-config",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/smallrye-config-secret-handler-file@5.0.0?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "smallrye-config-secret-handler-file",
      "version": "5.0.0",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "f0f6377078bf8fb080282837fb54f65f"
        },
        {
          "alg": "SHA-1",
          "content": "621089e89873e26b43c19976ef71ac3f59f16840"
        },
        {
          "alg": "SHA-256",
          "content": "10bf21ed3bd91ecda25a4c05f29af0780aae2f0f395a8faca3b574d6a5e6dd15"
        },
        {
          "alg": "SHA-512",
          "content": "358c284fdffa206f98efaf2a02fdafe6f5f209a98eaf3b32af777c9e90c01f4209b40a75d259dd5fc9070cbe7a440394718ff95a766762d76ff802ecf14b2b00"
        },
        {
          "alg": "SHA-384",
          "content": "f431a448d4eb2bed4ce689700887a6555b6f430d7cb5ed4cb83be6e5b818c077f92e7c2d04c59628eccc16c658aa2c78"
        },
        {
          "alg": "SHA3-384",
          "content": "436745031bd57cf1004f8aeb749b268c206c2f1c532e22093a79a64971a97fdb695acbd0301c5ebc402ed7fcdc642977"
        },
        {
          "alg": "SHA3-256",
          "content": "df09f32f13c5d63338a2157a9b5980eb83936cd43ed4cd1bf4e5d8a0f262093b"
        },
        {
          "alg": "SHA3-512",
          "content": "f14e3513e53d01c6ab84de58282b96b113cefb2fb955125403841bc141905896b78eb5781b86e2afb4c3d78c73acdb424fe460fe0d21356cfc9ce72750de1ba5"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/smallrye-config-secret-handler-file@5.0.0?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/support/smallrye-config-secret-handler-file/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/support/smallrye-config-secret-handler-file",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/proto@5.0.0?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "proto",
      "version": "5.0.0",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "2bfd18a8bbf2e96baa55a89ec16b2634"
        },
        {
          "alg": "SHA-1",
          "content": "05d28d2fe6ec0807d6be1b914787fb66900f7845"
        },
        {
          "alg": "SHA-256",
          "content": "57cc53e27332b5ebb55f4df2f0e81e71d1623156f95a48a1f347d5f171eabc00"
        },
        {
          "alg": "SHA-512",
          "content": "cf3a84a4e456ebc057203ca8ab1e37d87c8946e6b5433e29caddb550820998e905a075185380ffe96146a08fbe1aaf652b9ef3b3eee80fd510ffb5b5ad0b6b92"
        },
        {
          "alg": "SHA-384",
          "content": "948cac129371336bb7a025aeb83a81233b2fcdc44c1b110b8a6bf4a2073208e5467a087e2791d44043bfdaf7b61f767f"
        },
        {
          "alg": "SHA3-384",
          "content": "fe39e38b32f52ff8ebe3af63e39fb8a1ffb4cd37198eca8e12b02c1c77bcc0fba6496cccef617cfee72db184a582e148"
        },
        {
          "alg": "SHA3-256",
          "content": "490c26d415e94c31f3ff69aba5f4922ea890d4e5825a90eb6213486ba78981b8"
        },
        {
          "alg": "SHA3-512",
          "content": "a28fcbf035cd44031b0debf74112a3545b5916825c01980d166256b6bbcdb44743d14eee3f6d6bc722f8c69310aa03127ff488512f3ae0a59c954fbfbced269a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/proto@5.0.0?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/proto/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/proto",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/cyclonedx-proto@5.0.0?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "cyclonedx-proto",
      "version": "5.0.0",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "f4d1fa7dd09966aa399fb2585c1bb30c"
        },
        {
          "alg": "SHA-1",
          "content": "a5ff3f2950b4c0f2558ec931e1e43f517478a6d4"
        },
        {
          "alg": "SHA-256",
          "content": "4f3f6d3773d68e2ff2996a846484a6de8bf9644629707f351c9aa8762291b70e"
        },
        {
          "alg": "SHA-512",
          "content": "cd81cdc0929ddba528e22331fc3c726197309017f200c87dc20d6653d6cd43e195f496c1a7a494c0cdb3919d3d51cb138e077f40ac952b6ab9ff0222d5a8061f"
        },
        {
          "alg": "SHA-384",
          "content": "6ff3979920e3935b3b6754f7caaf542fae44e0e8bbf9e28f733f3d92caad3b7d497b4d81de8583626b9352ea306dd3c4"
        },
        {
          "alg": "SHA3-384",
          "content": "4631af142b894efb746522ae2d301f6989af47ba74e235e4f010353d32d36bbd5f628c28a7cb95d0d1a896be1fb4b010"
        },
        {
          "alg": "SHA3-256",
          "content": "d6a3f0e7bb9f49c401a37c6b97d3a3b71541281d65a9f371202517ee0243569e"
        },
        {
          "alg": "SHA3-512",
          "content": "705cc046de6cc9ad874ff8d8e29e308ad94851ee663803e97424cccf7cdb90627ce8bb5c0b82d34623120d86fe164abec882282ef3f255a60d0d847aba188a5f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/cyclonedx-proto@5.0.0?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/support/cyclonedx-proto/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/support/cyclonedx-proto",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/secret-management@5.0.0?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "secret-management",
      "version": "5.0.0",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "dc7baa2c927e0d0b00ee7e440f40c637"
        },
        {
          "alg": "SHA-1",
          "content": "5d21efc9137276109092fe7dd5610d525984c70a"
        },
        {
          "alg": "SHA-256",
          "content": "b80bbe7ac86635e6bc3dfe4da6c83975741dc9ab7c39f9f4b80e7abc5ee55536"
        },
        {
          "alg": "SHA-512",
          "content": "8c055c8350567e93581a922fed0a3de1009ea70ef782044db2ad7dcc59c6a181e0b85642cd250a7d28deb1797227fd6440e6559db57abb8408c937babfd379e7"
        },
        {
          "alg": "SHA-384",
          "content": "aa6d04b8367543a997c3777f99ef2863ec1c06691f5b9bf3953cfcbfc6702f9457130bc03f25f47da349f12a5865df51"
        },
        {
          "alg": "SHA3-384",
          "content": "e196e419164c93184e5551296880ace3cd39322c5c17fd7afc19af6cca7838e0b4685303f5732b0be87af266a6090fcc"
        },
        {
          "alg": "SHA3-256",
          "content": "6a6addd2cfb25eb23c73c76bf2c109c3b5ae89f2187a861ca51e013eacfe0779"
        },
        {
          "alg": "SHA3-512",
          "content": "0a07771b3c033077db20f079e41969cc0fcc8c2f65378ae478ef7a2740b908734dd22fa41e61917ebdb80036e1e9a5d0ddcbb65fb4f57a263c4ee11770e4a172"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/secret-management@5.0.0?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/secret-management/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/secret-management",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.crypto.tink/tink@1.21.0?type=jar",
      "group": "com.google.crypto.tink",
      "name": "tink",
      "version": "1.21.0",
      "description": "Tink is a small cryptographic library that provides a safe, simple, agile and fast way to accomplish some common cryptographic tasks.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "f710f7b1331937bfdda94cc0a1e8653d"
        },
        {
          "alg": "SHA-1",
          "content": "cfb40763a9dc2e0cd887bbb3b1a0002dfa1216d5"
        },
        {
          "alg": "SHA-256",
          "content": "065086dbbd61c95529f782966c3462838cc8a801ba78420223aa319175a444ff"
        },
        {
          "alg": "SHA-512",
          "content": "d2683a4fd5af1f0bbf5ef97d16e10c7bcb7a58aaa75dcc0ebc25e8cce68296b728deb6ae2ca0d0569b088cd1b98efb9d5ede4475761fc53c40b77939ff9da6d1"
        },
        {
          "alg": "SHA-384",
          "content": "7192392f6593290a578b78ca2b4cbc31b2ec456aa8e80bae52817abdc434ea19079473c220d57867ad30d39cf0f61ac9"
        },
        {
          "alg": "SHA3-384",
          "content": "6376978f10ec2a1ccf7cd2434fca6823e2145561bc53329ff3fb7f596f69b59f13c98d3fea225d165902d920283b3dd7"
        },
        {
          "alg": "SHA3-256",
          "content": "9e4f60fb275e64c2f8e883cc088dd9f976d59d435cf936c22b27ae2cf1e4c7bc"
        },
        {
          "alg": "SHA3-512",
          "content": "35f13efd45722d54899a5dc3cd58500128a9140f6a9d253fa8af41fe138296642d3923299a58594cb07907dde214d3538719ab0d8c0785aa76d7d29e95ccfa4b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.crypto.tink/tink@1.21.0?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/tink-crypto/tink-java",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/tink-crypto/tink-java/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://groups.google.com/group/tink-users",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/tink-crypto/tink-java.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/vuln-analysis-api@5.0.0?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "vuln-analysis-api",
      "version": "5.0.0",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "2085edafdbcdbe2adc8e484a053f0ba3"
        },
        {
          "alg": "SHA-1",
          "content": "2d7b780d85ae1feed141cbbbb9b4f06a953f34b3"
        },
        {
          "alg": "SHA-256",
          "content": "76dd030011d5436a828d1bf525b36b02269ceccc59ad0ab27e3121e110bee2f3"
        },
        {
          "alg": "SHA-512",
          "content": "193bc2c79c51eb6b9d7c62bc82e9a63d3a66dac5fd8ee6ac3fa4a12b8be3cc72c3c0a11a535a639198ee9299bd4c9bc52c47ac02fe8c197278e3126b0b5e6317"
        },
        {
          "alg": "SHA-384",
          "content": "7b36ab0541e15bff3fe28239832ac2ea9c652b34e625385cc516d7209eec5dd656f78d452a05a7288977d2d8bba4d4bd"
        },
        {
          "alg": "SHA3-384",
          "content": "a8d1ad1202c2fd8a58fd3e8acbfbb1cf87b7e22539bba0cea5b93d694c14cd544ebf9f68013b10061e52d17dbbf77265"
        },
        {
          "alg": "SHA3-256",
          "content": "4cff33ab8b60eafc5e660014de053e0be8fc184e681a0088b7da850d4170a124"
        },
        {
          "alg": "SHA3-512",
          "content": "1dd20797601b70df42db3e4400d227c8c0579353775aa5c0f11910274bff26e5dc628d867fc407f682ca0a917491a9b2847d64ccd98474bbf27cec81140c58a6"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/vuln-analysis-api@5.0.0?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/vuln-analysis-parent/vuln-analysis-api/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/vuln-analysis-parent/vuln-analysis-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/vuln-analyzer-internal@5.0.0?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "vuln-analyzer-internal",
      "version": "5.0.0",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "699c2c067cdefb0686b4da598fd27dde"
        },
        {
          "alg": "SHA-1",
          "content": "dda770b22a42a36ef3dd5ed002fde550f8e1eda5"
        },
        {
          "alg": "SHA-256",
          "content": "29a5fdb99bc2e99e3e184877a862fcaed6accb09ce766ec33337cfe2292561e4"
        },
        {
          "alg": "SHA-512",
          "content": "4c31022b80f1da43cebf7942ff467c05a94b53e289345f003fc28272e272e80391ed4d4adfe6962a71d215697b253dc253afe071352380a57e6c48b9053f8aa7"
        },
        {
          "alg": "SHA-384",
          "content": "776ccd458b66de33cc66b9476103d3f22ab587e24896f95f0bff48b568f939887b9a245d7fa63fee99919ec630f9e90e"
        },
        {
          "alg": "SHA3-384",
          "content": "01fa5c4febb15eca4313d1fdd0559ece7b7cc26ef60bfe58ff89f4d1cff5056add3ebe972ee79a4006f309a49c96a448"
        },
        {
          "alg": "SHA3-256",
          "content": "a7dbe27e5695944f3faaceeeda089991150faed39af753711fdd236fb2794f3e"
        },
        {
          "alg": "SHA3-512",
          "content": "75846ee986870ceaf72f9b287142f831ff081c07a808ed1389918a8ffde40d1bb07f876071d76810c38457b5b4328008b8e11a8773e547338cb03e556c7f203d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/vuln-analyzer-internal@5.0.0?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/vuln-analysis-parent/vuln-analyzer-internal/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/vuln-analysis-parent/vuln-analyzer-internal",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/os-distro-metadata@5.0.0?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "os-distro-metadata",
      "version": "5.0.0",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "a1e3903e1570b05274052b0514489d29"
        },
        {
          "alg": "SHA-1",
          "content": "7b2740e633cf76e413290327c8977319bcf22d32"
        },
        {
          "alg": "SHA-256",
          "content": "094c0e028b6dff6f645bc09edd7410191d6e53fad7a8172843c20f51293f46c6"
        },
        {
          "alg": "SHA-512",
          "content": "1ec4a1ef5b84679900b2574fbaac28491c50d7052a6a7cf41bcadf4baca874cffd6f89682890d42cbdd29b1751e6dc1615456a6f0d4cd792af8b2db75d368b97"
        },
        {
          "alg": "SHA-384",
          "content": "756275222dde354271277363b00119e128ace533c06fb817a805a93b68364bb3dc942e1947b4b7f92f3f05093bb157f1"
        },
        {
          "alg": "SHA3-384",
          "content": "32cacca6b5b658da5c470401710f9e7b8b47526b8b00ba7581d7f7025130134b5f23bc09f55127930ca2823573a1f587"
        },
        {
          "alg": "SHA3-256",
          "content": "3658242eaf4b74fa33c1c1dd8b19a03d8a44012c03aacdcd6fd68b3750b7bb12"
        },
        {
          "alg": "SHA3-512",
          "content": "96d6e57abceeb6997a0cc8799d85b411dbf08ff5db3bf82ab5386d3fc0c776151d019b8a7c823e50f671d0f822702fe5084b435af8e4f15248dc5ba426ec96d4"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/os-distro-metadata@5.0.0?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/support/os-distro-metadata/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/support/os-distro-metadata",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/package-metadata-api@5.0.0?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "package-metadata-api",
      "version": "5.0.0",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "7e34fb9022d707477ba5dc53944db9a8"
        },
        {
          "alg": "SHA-1",
          "content": "423cefe30ce61c3e5a6b7f6c7fc3b0ee711e8dc7"
        },
        {
          "alg": "SHA-256",
          "content": "fcb701317fdc9dd6be9dd4745a4df7b173af15decf5ef128af358530dba3b377"
        },
        {
          "alg": "SHA-512",
          "content": "6bf800feb481850ec85008cf41e9cff47f33cb4f7cc639961bef47bdf56ea941f05957ea26b465dfde06f1d4eba674900238a70a0cf3a09d52879a7a45e19d1e"
        },
        {
          "alg": "SHA-384",
          "content": "a7b11300318c42c763d1073a4e751dc94b5cfb43fa77b6da34d3ed7fa147cb860460a35eee3e578ba4141b84b09a174d"
        },
        {
          "alg": "SHA3-384",
          "content": "29069172a49f501f805e686f8a616f086c69f417a0f61807795eee7d017b16efcad7a641bd6fed9b3a24e2ad3400c4eb"
        },
        {
          "alg": "SHA3-256",
          "content": "4d52f618d4e219aac265ce9402ed3337758b20ff5fac314e022c8803f43931bd"
        },
        {
          "alg": "SHA3-512",
          "content": "b8b20a543c6b09df924034e1f3295ed31c6c8ff0e4fa41eda46b18791f0b91748eade2a2df158a7ef1780c925b7910b9c62814157dcf5575fb7e777305a71f3e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/package-metadata-api@5.0.0?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/package-metadata-parent/package-metadata-api/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/package-metadata-parent/package-metadata-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/package-metadata-resolution@5.0.0?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "package-metadata-resolution",
      "version": "5.0.0",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "11d8591d58b684f11c539172a7b2eca9"
        },
        {
          "alg": "SHA-1",
          "content": "e90a1f9f8c830f68b63ce333921ecb228a0da2a7"
        },
        {
          "alg": "SHA-256",
          "content": "690229d7091777836a6748d7ffa50030982aa73785ed9c9e57ea9e7250ad8ec1"
        },
        {
          "alg": "SHA-512",
          "content": "a830b67e5ef7dc94ca9f6931c3f2e9ea6fec2d2ea4247cb1bd4cc4f17b45a3546a8ec15a6d55b91716c82ef25d2c8a6788c74cb0dfa32a338c0c4e2e78c3224a"
        },
        {
          "alg": "SHA-384",
          "content": "21daf990afacd0a802ab62f2470a04a3d95a8168b497a5719695e202a3910f6d73a16aea4f363f457d6b0bbc4a7e3eda"
        },
        {
          "alg": "SHA3-384",
          "content": "22cf44607e50e84a4ec0c5f08a7d89981893dad82f1fdb74b477424e2383c173f681eb703e55aabf1e0f7b0c9efccfbf"
        },
        {
          "alg": "SHA3-256",
          "content": "dacb5b91156430078c95f64cc8c51584c2c79a19c4e15bd3140cfe977793699b"
        },
        {
          "alg": "SHA3-512",
          "content": "109e32f3c043d92a137bf84de328c4b9357d2f751eab434f35593bd686388de1c3f346eb999267aeafd85502b0db8eb2f2a250d55b08b8254f949d8d6f3625e0"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/package-metadata-resolution@5.0.0?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/package-metadata-parent/package-metadata-resolution/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/package-metadata-parent/package-metadata-resolution",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.brotli/dec@0.1.2?type=jar",
      "group": "org.brotli",
      "name": "dec",
      "version": "0.1.2",
      "description": "Brotli is a generic-purpose lossless compression algorithm.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "4b1cd14cf29733941cc536b27e6aedfa"
        },
        {
          "alg": "SHA-1",
          "content": "0c26a897ae0d524809eef1c786cc6183b4ddcc3b"
        },
        {
          "alg": "SHA-256",
          "content": "615c0c3efef990d77831104475fba6a1f7971388691d4bad1471ad84101f6d52"
        },
        {
          "alg": "SHA-512",
          "content": "d4cd2b33f7c358012ff01db6a13ebfe1e8051a580698bffcd942c47451012cf53ce49a400b1c8bf7502b01e631d79d7c6417202a145622572d79fd145ccde61a"
        },
        {
          "alg": "SHA-384",
          "content": "d6b8ad9d0ee6baf8c3a29c1dc2911eaf207352e2c7de893a0185e987e7eae87827890c1d4dbf31c46f25846fbcdc08bb"
        },
        {
          "alg": "SHA3-384",
          "content": "d16c32130bf6b168ff4c8a3dedf1b17787f8d6f0eab9de21e51ed3ab1e7d85925dd02315972f6ca3a4493357aad545cb"
        },
        {
          "alg": "SHA3-256",
          "content": "962dc76a5c487de8d34308860ab65927bf91f50ccb12f37bffb036a7a05145a4"
        },
        {
          "alg": "SHA3-512",
          "content": "a82a3f79b57d30613606ca51dc432b097fa75aab5c87fb45eabec6d80ddeff1b329100b325bb07005aebaec166952c4599a863d4bfd5a684bad21103a2046311"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/license/mit/"
          }
        }
      ],
      "purl": "pkg:maven/org.brotli/dec@0.1.2?type=jar",
      "externalReferences": [
        {
          "url": "http://brotli.org/dec",
          "type": "website"
        },
        {
          "url": "https://github.com/google/brotli/dec",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/vuln-analyzer-oss-index@5.0.0?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "vuln-analyzer-oss-index",
      "version": "5.0.0",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "3359311505aa00cf4779dcd8a1cf7e2c"
        },
        {
          "alg": "SHA-1",
          "content": "0775090c778d5fe9731e145539c8986814610e2b"
        },
        {
          "alg": "SHA-256",
          "content": "79599d754c971caf0cb7fa6b886353c1735a6990faaa86069106b7b3939cb39f"
        },
        {
          "alg": "SHA-512",
          "content": "a12ed4e075933ee278ca87855160cd70571dce5b3d46d5723186a1d986271ce4bddc5d2fd6298a9af3758ea2533c2fdf6bb692fe5498c51419400d3193d5b78c"
        },
        {
          "alg": "SHA-384",
          "content": "782ba0c2fe4555e5f6b437082687afe804c0b285abcf21eee3c15d4341029cbe162ee59f13cbc17194377a660dae0446"
        },
        {
          "alg": "SHA3-384",
          "content": "9568c3211e589ef4e25c88402fd5eb041245e8733acab1bc07105454a6321c9e32499ed427eada65b1789f8ec4e5506b"
        },
        {
          "alg": "SHA3-256",
          "content": "726566ecccb1c8ab530807bf5c09e1a2fd4be89cc1a478f84b7569331cb5aa07"
        },
        {
          "alg": "SHA3-512",
          "content": "6a2c56ae41837e9f4a843e204a36f00ae89f8a5706ea6df430fd713a635b239ba6073565aefe0d6a82d102f8389307be68da687d3af18d395436498067a6e055"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/vuln-analyzer-oss-index@5.0.0?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/vuln-analysis-parent/vuln-analyzer-oss-index/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/vuln-analysis-parent/vuln-analyzer-oss-index",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/vuln-analyzer-snyk@5.0.0?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "vuln-analyzer-snyk",
      "version": "5.0.0",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "a08e5729c03930c144dc5329b09d38a7"
        },
        {
          "alg": "SHA-1",
          "content": "2168e385cfceea56d446147a1b6ae8c5417ea432"
        },
        {
          "alg": "SHA-256",
          "content": "4e4c1d9e169e94827dc644fd7ad3605f5232e183f87703b4f1f3d79bf0aa34d2"
        },
        {
          "alg": "SHA-512",
          "content": "3be0c9f61d8dfaaa3459ee3ef683ca3be4469f6970b1e3f83b32bccb91eb25e8a1ee0bb0d96a024ddea71ffc7d67988992d91ecc2d6dae7a96bfae58177c9874"
        },
        {
          "alg": "SHA-384",
          "content": "ec02c8313b1397099231677a86d8b2a54028f4ed70326482a0f54e1c516d2b5b1a6439a8d903c2e4c379b121e1180657"
        },
        {
          "alg": "SHA3-384",
          "content": "c645b4f4fc752a4301fc71fc9c9e2bb509e4dca9b0c021b4608fc8d08f9911d2ec70c863c5074513a37338de51989c69"
        },
        {
          "alg": "SHA3-256",
          "content": "ba33c1fed520c0139a84da1dd34be6aac243be51ca8b7d554beabf8eb1574d0e"
        },
        {
          "alg": "SHA3-512",
          "content": "921ab19cc1807c2fc566fc8c9ff3edbb9e5b520fe663469dc91bcef87eae963723753d542a8f0db05d3b63b0bd0b94607eab63cae414aeb9df21cf86d7c4be81"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/vuln-analyzer-snyk@5.0.0?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/vuln-analysis-parent/vuln-analyzer-snyk/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/vuln-analysis-parent/vuln-analyzer-snyk",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/vuln-analyzer-trivy@5.0.0?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "vuln-analyzer-trivy",
      "version": "5.0.0",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "671c8c3fbfc4c6a702a22ef3e5f99b5a"
        },
        {
          "alg": "SHA-1",
          "content": "9e08b742c3b6a31c9594332168688f3ae5f42279"
        },
        {
          "alg": "SHA-256",
          "content": "1b3d1ce387e6554ed06c332798dbc08ab1ca153159436f7b335ef85dda7e7345"
        },
        {
          "alg": "SHA-512",
          "content": "c7d4f7490e1bd481f12d3950db12ce8a774b71779295091b5485fb03aa4596f07f082f68347c4733f9b146007d04d8257feface68a42dce0fe1a71b0de621ab4"
        },
        {
          "alg": "SHA-384",
          "content": "df07b2ac03123df16e10f0bdf1733912d173fd9c3d3800f9269a55f0aafa0cc9160921a628d978e239be8077eab89dcb"
        },
        {
          "alg": "SHA3-384",
          "content": "25148dc937b3cc9abaa8b4bb2512329c01b044e0a19b743127727613e539539f503ed05a6c95c46cea4ce9f21a8f7a70"
        },
        {
          "alg": "SHA3-256",
          "content": "bce67b003709214a9a50c884ecd09757640ac08c56ba87e6227d373be229ff3d"
        },
        {
          "alg": "SHA3-512",
          "content": "17e268d48276132fd46a38038e52ab319adc88a4b48381e3bff79bfbb9bad2154a467ff35def98d3228f9d9c38d7a803741f0320568c90e57e604d4c12008ac9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/vuln-analyzer-trivy@5.0.0?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/vuln-analysis-parent/vuln-analyzer-trivy/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/vuln-analysis-parent/vuln-analyzer-trivy",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/vuln-analyzer-vuln-db@5.0.0?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "vuln-analyzer-vuln-db",
      "version": "5.0.0",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "9caa3cff68467c7c4ec16fde50b6a9b7"
        },
        {
          "alg": "SHA-1",
          "content": "472abdfcff7fbd2fb00ed60f4cc482eb94a15f46"
        },
        {
          "alg": "SHA-256",
          "content": "8c1a57064a9fba2db26d5a536d3d66d7b4db3786585ce8e879930ba3caf5b005"
        },
        {
          "alg": "SHA-512",
          "content": "7dd2a6ca14fae6ddff7e35f9a588aff994c3564fad3a6fe2af274524db1fa54406122419960633b35f024e0242d8588bcf1dd113125799495d2dc7b14413856a"
        },
        {
          "alg": "SHA-384",
          "content": "a1a73f4d856f42a881451e05667ac74fff7313b026f1717194075153e0a2a76b0ee3cd9ceba150a76cbe6fd50af63b2b"
        },
        {
          "alg": "SHA3-384",
          "content": "c75d43731c4098f22da78e46a7d55bf5a73fbe58f351c219f508736e9df9835464bbce4235ea1745d6419a1bed69848a"
        },
        {
          "alg": "SHA3-256",
          "content": "afaeab9269f64b916b0c333d0d300423750a36976ed77c70d16a4918e6815f60"
        },
        {
          "alg": "SHA3-512",
          "content": "d8a2d6f7c96559b7ac96b3ff533900ec0875cb83b0e00b2f450cda9d6a058a503c08a1a31ccf8b82e8f7a4d091422383f6f5b6dca5797e97c010c29a4acc6fbf"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/vuln-analyzer-vuln-db@5.0.0?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/vuln-analysis-parent/vuln-analyzer-vuln-db/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/vuln-analysis-parent/vuln-analyzer-vuln-db",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/dex-engine@5.0.0?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "dex-engine",
      "version": "5.0.0",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "c572be4ff79623e7fbcad6e602c42507"
        },
        {
          "alg": "SHA-1",
          "content": "2b8611f3f83598d174bac98ca3563fe7f0aab1a6"
        },
        {
          "alg": "SHA-256",
          "content": "12a618919fd38ba8cab061abe24f870d11a93527540112e99f8f21cc1d73a579"
        },
        {
          "alg": "SHA-512",
          "content": "de1c6377e658740d4edf35c4e3186b54c5aa69cc61e169720b580d2ee7cd282723688ae0ec0175098631d0f594abed7983c2e5a005a7ada7a802f251999e87ab"
        },
        {
          "alg": "SHA-384",
          "content": "4c84b030dacc379bcd5f0b173beb008250f3db931bd68e98375ea272b3223a87e9ac8473d6d7ba19a0751c9d7db5c8d6"
        },
        {
          "alg": "SHA3-384",
          "content": "d3e84dd537067363e1c1a6b564dcf05f71883bc3aa9523caa8091a26c6fc2c24405fc51eaf967198d5baccb78270c34a"
        },
        {
          "alg": "SHA3-256",
          "content": "3f6eacee7210dfb4e5e48428f68201c56eaca23ca8fb173871b9a7ce937615ef"
        },
        {
          "alg": "SHA3-512",
          "content": "13093decb1b965d457bb6f4ef189f86b49530cab53a13857702ef6891c6e835b15613f1c55dff83b531a7f0edd5ff1c1524ffff17ec357b057eea7d1bf89ad70"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/dex-engine@5.0.0?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/dex-parent/dex-engine/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/dex-parent/dex-engine",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/dex-api@5.0.0?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "dex-api",
      "version": "5.0.0",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "e52dcfa283c186d2be59f6e149e77a35"
        },
        {
          "alg": "SHA-1",
          "content": "1143d72314e36d76d4a69b0231ae14ee0d37d7ea"
        },
        {
          "alg": "SHA-256",
          "content": "5f7bd2724949271124003aa34db5f9bd91f32cb4925566bfb7b0d3541affcb50"
        },
        {
          "alg": "SHA-512",
          "content": "2ee0ab535f0e14ff80f96eabcf1c1d4004d25ffb5cb96e8aa23cbb16789ebdfd0ad208f73f8f74c5a840dc36dae83e837b0f2a5810dcb65c0b68ebf9b8dcc8fd"
        },
        {
          "alg": "SHA-384",
          "content": "f7498e92134acb0d0eea4f6965360a733dfda6a5edbb4b0ef04543e679ff93b8c4a86906f8ec8f60b95b29bbf7d41335"
        },
        {
          "alg": "SHA3-384",
          "content": "fa3bd42cbc810430e60f31b93b23816d6b07aa817be33513630424be681ac5469a9787cbd1738909817bc70cc0c8923f"
        },
        {
          "alg": "SHA3-256",
          "content": "ddc77f7ab60e3e3ff7560e8415866ab8c7ff2cbe10e7d8c5a5f7ba494665713d"
        },
        {
          "alg": "SHA3-512",
          "content": "e979874a5fc08f637e82d841e3ac200f4f22f942f1dcf9c7c9b0358d38957cb3ba5572de9976476bfc4317008e107d5876becf5c04645f561d206c8169d82cdd"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/dex-api@5.0.0?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/dex-parent/dex-api/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/dex-parent/dex-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/dex-engine-api@5.0.0?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "dex-engine-api",
      "version": "5.0.0",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "e5d13582cb19b9624cc1fe1fcafa868b"
        },
        {
          "alg": "SHA-1",
          "content": "51c9b2fab72adccd8578e0b821730bc09395d6e6"
        },
        {
          "alg": "SHA-256",
          "content": "a37b7747516a6eff19af6ee677c458a5e138e3995fc8061fadc9a0add94c0fdf"
        },
        {
          "alg": "SHA-512",
          "content": "fd8ae962d1c9ea2171bdc46e82275e2f63cb4bf56b09075b233651e2e93040ab4bd67816aa2254a5e28d2d5e90d933c465ac07a47d90ad08ed2aa2f0cdc5ad66"
        },
        {
          "alg": "SHA-384",
          "content": "55b05268732ce800040af75921d93af469b5ac9825893e1ab0ac75b82ba7aae7fce40d573c2fd45dcf145ffbf7a632da"
        },
        {
          "alg": "SHA3-384",
          "content": "aae0b1e2e5e746344fd3df45600907a1d77763c87a35721e03babe44db3a8eaa88da8154c4d908d5c20ae02b117f2383"
        },
        {
          "alg": "SHA3-256",
          "content": "d57888477f122bd0a48fbd1e661b5fcc7d7c5afd778612bb08c4a566013f02cc"
        },
        {
          "alg": "SHA3-512",
          "content": "28b316a8106ab17e626a03e55f1b91518d3a2d945bccbc7e7ab14e7c3d46df22021c3b28e78a0d77f1bfd444e4ce911ecbd6a85841d6ca1417486da5f1a5e241"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/dex-engine-api@5.0.0?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/dex-parent/dex-engine-api/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/dex-parent/dex-engine-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/dex-engine-migration@5.0.0?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "dex-engine-migration",
      "version": "5.0.0",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "5f4596e304031593c5c1e37696032ab1"
        },
        {
          "alg": "SHA-1",
          "content": "8ec3249bcad4374eb1a2ff68e265216a62e06169"
        },
        {
          "alg": "SHA-256",
          "content": "77c1480432dbbeeba3e5d323172a97935e24e67f793f7d02c8ea025f2e0ae57d"
        },
        {
          "alg": "SHA-512",
          "content": "c22cb341136ec8ebf21527354c487b2c358206fad7fc604c83209c9f4bba887570154b824281ac8f9d50273f0568c8443760cd14c045224dd65dcaa7823ead0c"
        },
        {
          "alg": "SHA-384",
          "content": "0c9f6acf494f83c6b813c94a4b8b58ba6f16562e757064193e87e2c2d5085894a3aefe1094dfb194326ee6f86b126579"
        },
        {
          "alg": "SHA3-384",
          "content": "52875f4782dc237ede0c08e7696cf0c12cec9f48d973a86d438af801577b1ae30f4e372df6a0b4795b1183de7b44da13"
        },
        {
          "alg": "SHA3-256",
          "content": "e993be21734f8c091cc08207317f3d581222e769160c007d8b0456f49ab95077"
        },
        {
          "alg": "SHA3-512",
          "content": "1c9511b56c06fcf87903bf4af69be955a34fbeeb8c5ed64edc7314f8d4c2b7477692c77e9278d46a9b043ec0bbd33c2987745e5ae7e81903a3e0b8ae6bdd61ee"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/dex-engine-migration@5.0.0?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/dex-parent/dex-engine-migration/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/dex-parent/dex-engine-migration",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.github.resilience4j/resilience4j-circuitbreaker@2.4.0?type=jar",
      "group": "io.github.resilience4j",
      "name": "resilience4j-circuitbreaker",
      "version": "2.4.0",
      "description": "Resilience4j is a lightweight, easy-to-use fault tolerance library designed for Java8 and functional programming",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "5e142f710747b6d4746413aca6757222"
        },
        {
          "alg": "SHA-1",
          "content": "10b06bc2b679f5682f5528b0058ba1a166734db5"
        },
        {
          "alg": "SHA-256",
          "content": "31ab1d15570357271b8c28d82b2f412c5f36a81ac253145aa32177c4f087efdc"
        },
        {
          "alg": "SHA-512",
          "content": "b5d23f8ddabb8d22585e93db1d5ed0b11cb2807c1279b45c74988eaf621e87324cd9a74deaad8b17c6b5a7219f2a17b32550be478c0621cb9fea762f3f5d867c"
        },
        {
          "alg": "SHA-384",
          "content": "826513581ccb029b95c9fb4b579035131a3166e6d99381b7084875fe2997545dfc41956f9449f3f4963d233b71f9d647"
        },
        {
          "alg": "SHA3-384",
          "content": "6f25185fccf89be43a7aef0349ce69a272ef09bc179d8394932bf473cd17650d143cdc6a24a3aaeb77bb806be018b630"
        },
        {
          "alg": "SHA3-256",
          "content": "6de361abc2ecbde73d99917ee11cc808c12f72f4a4c0da8682835675da985f4b"
        },
        {
          "alg": "SHA3-512",
          "content": "3baa1529e89d34844eab621f170ff4ea78771f15bdda9a5ff50ae1095b3d1c579b4ca45bc169c654f8934118325bd82ea6cdb3977d06d76218b2c128591b9a44"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.github.resilience4j/resilience4j-circuitbreaker@2.4.0?type=jar",
      "externalReferences": [
        {
          "url": "https://resilience4j.readme.io",
          "type": "website"
        },
        {
          "url": "https://github.com/resilience4j/resilience4j.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.github.resilience4j/resilience4j-core@2.4.0?type=jar",
      "group": "io.github.resilience4j",
      "name": "resilience4j-core",
      "version": "2.4.0",
      "description": "Resilience4j is a lightweight, easy-to-use fault tolerance library designed for Java8 and functional programming",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "876d87ec308d8636105e17577dc32ec0"
        },
        {
          "alg": "SHA-1",
          "content": "917315545f2ae0221ef3d6c27337b9ba6cba2702"
        },
        {
          "alg": "SHA-256",
          "content": "a15d25c4709a4c12432cd0a4f620e37a00a82dbe112f5d1a7a68b31325ffc978"
        },
        {
          "alg": "SHA-512",
          "content": "0b297e68f9e4542a724d507697c5476568dc8459156e70dc2e4b3fa812be7a6d070c603a58ba9eb1e2331df78479da71a44ada6a4d303f6f0ab224cb24bb2f07"
        },
        {
          "alg": "SHA-384",
          "content": "73498053467091de64ba6cdb62948e268afba62386a03fabcee6aafcfde6ed152bcec726c1f7d78d5b9ee7a1c34008fe"
        },
        {
          "alg": "SHA3-384",
          "content": "d1adb2a7e58982ff23beafd2aebfd2b3769d37caa965a1542d8d1c6d3cc1499117d874fa2e95c8e4b1c98033ecc37656"
        },
        {
          "alg": "SHA3-256",
          "content": "db568c467b698f1e695e75982105fbce261f91ba528539cc3ff10c67e81562b5"
        },
        {
          "alg": "SHA3-512",
          "content": "635fd7c97582d1deaf7b3fc74ff38d796656fd110e881d3cf793aafd30d73e649a25e58f7575bf8ce54e85291061871c21bbf31c19db937902b31a5de27f0054"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.github.resilience4j/resilience4j-core@2.4.0?type=jar",
      "externalReferences": [
        {
          "url": "https://resilience4j.readme.io",
          "type": "website"
        },
        {
          "url": "https://github.com/resilience4j/resilience4j.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/file-storage-api@5.0.0?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "file-storage-api",
      "version": "5.0.0",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "29a3b09273ec17f19f957c62c314f637"
        },
        {
          "alg": "SHA-1",
          "content": "aa2803742135eefcabf2c3de23aa253fd4d1c901"
        },
        {
          "alg": "SHA-256",
          "content": "03c207bbc467d42ebfbd8cc88f0c592872185d1a24165ccb80cc73accf79c947"
        },
        {
          "alg": "SHA-512",
          "content": "eab9e29c2e44ee1ee29c7ec1398b8e9d0678a15359d6e04fdeb73323f35332c73efa1772633d468646d392f09f2f86cd475dd43787ac90a4aad6bad99a82f320"
        },
        {
          "alg": "SHA-384",
          "content": "95f045d6b4c73d0cbb6eb941026db116c0b158f33b3ca63642372fe1d260fbda05193f30c528e8f8747effec7c0fef4d"
        },
        {
          "alg": "SHA3-384",
          "content": "843fe9a943b5dfae86d77551ef24ff4172613497f1203235b2433669bb425a6a3e20a9c7440c069b5328f9d06d9b7159"
        },
        {
          "alg": "SHA3-256",
          "content": "fb0c06271804291670846cb4eae5e56308477de1e5ea9911ad4941739e0737a7"
        },
        {
          "alg": "SHA3-512",
          "content": "e73441233bf9abbc3e3369d050f51dfa9e920ece4cd5caddbe613a24e5ab1b658af373ae579bb8ce0e672506349923911a2bb6fdd485c688b78043f7b8c8c6db"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/file-storage-api@5.0.0?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/file-storage-parent/file-storage-api/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/file-storage-parent/file-storage-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/file-storage-provider-local@5.0.0?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "file-storage-provider-local",
      "version": "5.0.0",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "2839c1898dfa659ec7c1c7fc667ba782"
        },
        {
          "alg": "SHA-1",
          "content": "956f926d500210d3c0bc66966adb89f6be41d475"
        },
        {
          "alg": "SHA-256",
          "content": "af2a632e44775fd7eab12e04e2c8bc07aa6831cb1e5d1c5c7d098d509ec60a5d"
        },
        {
          "alg": "SHA-512",
          "content": "d98f7c16476f01a2c88da9802079070d20c20b892126d177f823b6242686759ced37cb6c8b71331f34451e7c75f26b4d7f690bb3b6d283f4e406f1c22fc1a9c2"
        },
        {
          "alg": "SHA-384",
          "content": "e96e2417cc5fc97a663aa76eac185dc5f7393e29098173369f27cf3e611d762412fbb8edf86f1aa5d17a650de36b1c08"
        },
        {
          "alg": "SHA3-384",
          "content": "50fa2d9b35b70345baf6b18fe4814370f1ef0eaf6abf0493d929f3bcb0e605b845fa5c6aeb749e725a48810badc6ea4e"
        },
        {
          "alg": "SHA3-256",
          "content": "7097c13212332da9b4d02e40ace981f2b654ceeaa0d9ac3d7e85d07ec13cc590"
        },
        {
          "alg": "SHA3-512",
          "content": "b203c925baf5ff5ef2c58a27c62773c4fd12d6c2753f20742293e725712ef9f239f13e7172af0ae2305795bf993d858be7765c200c95e93b8cd3ea60b353b34d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/file-storage-provider-local@5.0.0?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/file-storage-parent/file-storage-provider-local/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/file-storage-parent/file-storage-provider-local",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.github.luben/zstd-jni@1.5.7-9?type=jar",
      "publisher": "com.github.luben",
      "group": "com.github.luben",
      "name": "zstd-jni",
      "version": "1.5.7-9",
      "description": "JNI bindings for Zstd native library that provides fast and high compression lossless algorithm for Java and all JVM languages.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "f01a37a4790153bcd57238a0a2a1cbc8"
        },
        {
          "alg": "SHA-1",
          "content": "49dbc40087f8b8150e0cad3e5396dca060727aa1"
        },
        {
          "alg": "SHA-256",
          "content": "087d02f39a46ab79b18f883ac7c3a3d6c2df1fd3bf7eaafeade699e0743d0dbe"
        },
        {
          "alg": "SHA-512",
          "content": "7a5df5273a6552cd9869995e85464dfd5992a5751747b76a062858789a95bbdb0731d0d175c365d0d65b18ceeb20a68763ce2a1d489699153a13c4d587f5623b"
        },
        {
          "alg": "SHA-384",
          "content": "9d684bb2b74de2c15dbfbf8cb837e1c3fdac7635590179f08e748b70db699886301a8d7da05ee04930451c913b0ba77d"
        },
        {
          "alg": "SHA3-384",
          "content": "bdb54a162d0dedd29da7ae3498e44ad29d75521e763ff83ae1dd9cc435809009593b74be9308b188bdb1d7ca16797342"
        },
        {
          "alg": "SHA3-256",
          "content": "0ac2ef503dc0ad9563a3dd7e24f1a3b1591d032b53a6d4758b8acb1b0b0d5180"
        },
        {
          "alg": "SHA3-512",
          "content": "2746ac595ea064e4a70f32bd1728cf7ce7fcc53e752d82b85731cfe5ffa66f32e729aa2e94a9afc5c85e3078f99dbe35dd7ba8372ad7577c52050d9021a6d95e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause"
          }
        }
      ],
      "purl": "pkg:maven/com.github.luben/zstd-jni@1.5.7-9?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/luben/zstd-jni",
          "type": "website"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/file-storage-provider-memory@5.0.0?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "file-storage-provider-memory",
      "version": "5.0.0",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "5443957a6bef38ea12eedbb8b11951dd"
        },
        {
          "alg": "SHA-1",
          "content": "db2ced4ec8bd6e308fadec8266fada5f0f817d5d"
        },
        {
          "alg": "SHA-256",
          "content": "5bed254a77f6027ea0382c6feb349fe637f8858b342d83cbcb065fe83f5773de"
        },
        {
          "alg": "SHA-512",
          "content": "b5e300b2b6726fd2d1372bacf8fdc61f7079fc6ee09e9116260f0266953d54ff0f696c930ea49a624c8a9263f87abdff41d197fc2b9715f3f180366c84b68ec5"
        },
        {
          "alg": "SHA-384",
          "content": "51884283681cfcdc358735fbb75c8218ee565744e064d65b18a0425ce8f5bddbc02d61d7bf5981f8a0b23bf80fd4646b"
        },
        {
          "alg": "SHA3-384",
          "content": "6b00ed1e9d54d40903feaab76f07d8ae7b8e8ae4f9fc9ab12ecf2855cc424252ec6a3dbf1a866e09e4a6083be6b67227"
        },
        {
          "alg": "SHA3-256",
          "content": "f247fdbcb13836593f976f1214f97b67c64b88f53a07ec72949985631b8f04b1"
        },
        {
          "alg": "SHA3-512",
          "content": "100f6a72fba4f69f5bebdcb6ab1720746a3a6cef5c9b39865cf355dd7a65aa0d3ba1819cbc024e9fbaa04fbde8fb37937aa976a56389f42fa3b58a9862433dc5"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/file-storage-provider-memory@5.0.0?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/file-storage-parent/file-storage-provider-memory/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/file-storage-parent/file-storage-provider-memory",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/file-storage-provider-s3@5.0.0?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "file-storage-provider-s3",
      "version": "5.0.0",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "4e2ed9199ac6da91b23fc574ac32f6be"
        },
        {
          "alg": "SHA-1",
          "content": "2aa02a5c9333eda1ee6653aa7ba80fc103f55ea6"
        },
        {
          "alg": "SHA-256",
          "content": "356815ed895cf4225203421dd5f206d2d8ec75601ecb46d4aa0dcc7ae3aafa35"
        },
        {
          "alg": "SHA-512",
          "content": "ef9e82d02316d370766a3f1d8e8e67972eea5ed27c8fb949b5b989613a1271cccc8de08f9bcbfc9c53537c6f645b0eb52ff4a148f0a0db5b2b103e8c92cf9de3"
        },
        {
          "alg": "SHA-384",
          "content": "d59d5e3eaba4ad2dbc85dcd9d06e400f42604501859f97a09e5ee9da97519469e45bd6102914bcb3f15e85bdc9269807"
        },
        {
          "alg": "SHA3-384",
          "content": "34f0ffb8529462ca63d2d863fa37d08716b1836e3ffd8e5e9acadb26f77923150280102410aa8f14c12aa84ba57a3bc4"
        },
        {
          "alg": "SHA3-256",
          "content": "69532f876552c7e8761688dbb3952c174017b08f87297cd08151b8e54fbf5fde"
        },
        {
          "alg": "SHA3-512",
          "content": "23cd9baaf1f6064eb2d3e790c59b58133fb4da35febb9d5b6e30ff4fad610845bd2508caec4e06c2371e8c9d9b64b7a4daf72a78c9c7ce8d5f3efe7f74c370df"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/file-storage-provider-s3@5.0.0?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/file-storage-parent/file-storage-provider-s3/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/file-storage-parent/file-storage-provider-s3",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/vuln-data-source-api@5.0.0?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "vuln-data-source-api",
      "version": "5.0.0",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "e5d04ad397143ac96cf16bc131c8be4c"
        },
        {
          "alg": "SHA-1",
          "content": "4a0fbba79fa8b107ec71478790cfed99ce30c623"
        },
        {
          "alg": "SHA-256",
          "content": "613c7fb62d5dae2435f27eaf457853853710bd6d8cc2c502b6ff08326de992cd"
        },
        {
          "alg": "SHA-512",
          "content": "6c0dd1397918cd97235b423a8cdb23e91a3fa826b7e0a16a8d4893688bcad4ef80ea0b2ac21ff8e06e620720506096c38d9b7c055fcc46f4219c2e0a63851da8"
        },
        {
          "alg": "SHA-384",
          "content": "e51c8092a47bfbc2b449c832edbccfff08c1a5c80a6759413f186e3277a6b4297668091f15d686c60ed6643494fa4bbe"
        },
        {
          "alg": "SHA3-384",
          "content": "586d5d9dd8e15f45544102cc32be3c65432b7b8f564fe7adf0ed2cf489dce2f104c4e2534155b40e822e0a9a12269a8b"
        },
        {
          "alg": "SHA3-256",
          "content": "fbe02d10fe9730d54973672e6f1f0989dfc942f24ab766d6c96e92276996bcf6"
        },
        {
          "alg": "SHA3-512",
          "content": "1e87cb0eea499a8aa2e1af493324a032fb3561c894184188dd2b0a0cc3683e8af58852412eefafd19507b9f25977e77e7a4016a9f87c23a8c1f5ff59570fc34d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/vuln-data-source-api@5.0.0?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/vuln-data-source-parent/vuln-data-source-api/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/vuln-data-source-parent/vuln-data-source-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/vuln-data-source-github@5.0.0?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "vuln-data-source-github",
      "version": "5.0.0",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "1b09f6dc419321ba5e0ed05f7944830f"
        },
        {
          "alg": "SHA-1",
          "content": "fc7f6f3147b093713b2e99083e67e848a98f09e5"
        },
        {
          "alg": "SHA-256",
          "content": "aa77c17b2c522891e580a1becc806069047d5283bb3dc69f69feb781694751bc"
        },
        {
          "alg": "SHA-512",
          "content": "1329b8242a603f0f7838a7f9d5cb30b73f03862473084f2d6cce828fa136db9080ce84d5e30689670040898d096f5279963e2d78046f2789ab4fafa989cad8e2"
        },
        {
          "alg": "SHA-384",
          "content": "d7bd2702eecaca93d5ea59f84834bd9ad8770fa986132a26631098c8e9bc138b7656092b304a31b6673a53ad63510bae"
        },
        {
          "alg": "SHA3-384",
          "content": "70309ea87757aa204e1713c67f1db6357b8b03018dd682179bb6a0d489cd43983d39baad8dc317bfc2e007fdc700f6f3"
        },
        {
          "alg": "SHA3-256",
          "content": "22fe781e0ccb0740bb10cf074f576752c11b2dfc4f633705f6641a5a76076a58"
        },
        {
          "alg": "SHA3-512",
          "content": "579991f0939716d37ed53ebb5cf46279261d6ece85d21a911b6c398815eecd96606dff8807bb6b89c507e92b52b7f610eb575aceb6c3b8430f3a087ed01df415"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/vuln-data-source-github@5.0.0?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/vuln-data-source-parent/vuln-data-source-github/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/vuln-data-source-parent/vuln-data-source-github",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.commons/commons-lang3@3.20.0?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.commons",
      "name": "commons-lang3",
      "version": "3.20.0",
      "description": "Apache Commons Lang, a package of Java utility classes for the classes that are in java.lang\u0027s hierarchy, or are considered to be so standard as to justify existence in java.lang. The code is tested using the latest revision of the JDK for supported LTS releases: 8, 11, 17, 21 and 25 currently. See https://github.com/apache/commons-lang/blob/master/.github/workflows/maven.yml Please ensure your build environment is up-to-date and kindly report any build issues.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "4b29562ded527aa074e1d44f8646dac5"
        },
        {
          "alg": "SHA-1",
          "content": "65897b3e5731220962e659e001904af3c3cbeba9"
        },
        {
          "alg": "SHA-256",
          "content": "69e5c9fa35da7a51a5fd2099dfe56a2d8d32cf233e2f6d770e796146440263f4"
        },
        {
          "alg": "SHA-512",
          "content": "1c72db334ea44f932c35e602b78907865f5bab43e30c871c9be67c8184eaa778f32d7bc3ab525d5921cd28619d3f9babfd483f17de54f007ee07db2e074b0307"
        },
        {
          "alg": "SHA-384",
          "content": "77dd27c4d5e9372c002bd6878d2cfaaec3cf46dd57d65de63d7f2e09351344531cfa81a537b56628ac6db18adee7e484"
        },
        {
          "alg": "SHA3-384",
          "content": "3456de40eef224b3ad195d2f218dd28eacb0da07607aee7ead94bd8d54bd8311d51c28d4066db4bf8b69a2df48c415f5"
        },
        {
          "alg": "SHA3-256",
          "content": "36e3f71352fa14bc580db45a05b09b063392c6d39acf9e24ffa6a67bbc07a336"
        },
        {
          "alg": "SHA3-512",
          "content": "6ecbc05bb5cd3f7537078b0cf51b0a5f7189dfa60c22e5ec0d6b9e2fd3f7fa7566770b5da87e0c9929f48769933c3e3a473fd5cc7231672fca36ab1fee1f8670"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.commons/commons-lang3@3.20.0?type=jar",
      "externalReferences": [
        {
          "url": "https://commons.apache.org/proper/commons-lang/",
          "type": "website"
        },
        {
          "url": "https://github.com/apache/commons-lang/actions",
          "type": "build-system"
        },
        {
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2",
          "type": "distribution"
        },
        {
          "url": "https://issues.apache.org/jira/browse/LANG",
          "type": "issue-tracker"
        },
        {
          "url": "https://mail-archives.apache.org/mod_mbox/commons-user/",
          "type": "mailing-list"
        },
        {
          "url": "https://gitbox.apache.org/repos/asf/commons-lang.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.httpcomponents.client5/httpclient5@5.6.1?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.httpcomponents.client5",
      "name": "httpclient5",
      "version": "5.6.1",
      "description": "Apache HttpComponents Client",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "ab01ab53ec62de3b50ed071dcaba3bfd"
        },
        {
          "alg": "SHA-1",
          "content": "b418ba210ace28adf920f1decf64d673953d07cf"
        },
        {
          "alg": "SHA-256",
          "content": "1e3d8444c3c27772e4b9d42a790f06b3345a8ece4fd16d00981f2f2460e1e772"
        },
        {
          "alg": "SHA-512",
          "content": "2835c56a960c5c926cdd69183d55f9bf84fe3a076247ada8b5849374ac85fafbe39551441eac66f3d7f45652531a9b5beee33dbbd59ae216039d2970d49df772"
        },
        {
          "alg": "SHA-384",
          "content": "4e055f538e0e8748c30e58a6496786a0bda8696a132b9d3c15e11205e3814152b9d3a3ec638e27ba8d30eea80a418fd6"
        },
        {
          "alg": "SHA3-384",
          "content": "5b8306f67927298d10c658777e7e9ee70e52e6120982148f823bf6e63145edafa717b5738a45d516e87be0f19cb87282"
        },
        {
          "alg": "SHA3-256",
          "content": "9e05e2adb777099009635ed79c944bb7aa4a96f466b714c3441c5eaafcfd963e"
        },
        {
          "alg": "SHA3-512",
          "content": "50d4343a5e9d892ae23480079d8de24b45751ac4555b503e2cee2e791d7028c4a7f183b545c216fb66598f79e7f054ac37a87c4af978b7fe337bccf566ee0895"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.httpcomponents.client5/httpclient5@5.6.1?type=jar",
      "externalReferences": [
        {
          "url": "https://hc.apache.org/httpcomponents-client-5.5.x/5.6.1/httpclient5/",
          "type": "website"
        },
        {
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2",
          "type": "distribution"
        },
        {
          "url": "https://issues.apache.org/jira/browse/HTTPCLIENT",
          "type": "issue-tracker"
        },
        {
          "url": "https://lists.apache.org/list.html?httpclient-users@hc.apache.org",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/apache/httpcomponents-client/tree/5.6.1/httpclient5",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.4?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.httpcomponents.core5",
      "name": "httpcore5",
      "version": "5.4",
      "description": "Apache HttpComponents HTTP/1.1 core components",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "584964cc15b7390de975e97e8eb2e6e1"
        },
        {
          "alg": "SHA-1",
          "content": "e40011ec0dae056466399f8e414ede4772001621"
        },
        {
          "alg": "SHA-256",
          "content": "cec2981fa7f520efb63f0787c24f10af2679e31f9f75c448c4dde40a3ae8100d"
        },
        {
          "alg": "SHA-512",
          "content": "5d0dc9ea175373a6bbf76e48246bb3f4d3c43a4ca1cc4db0a10970736a30d3fd72996cce5fe07d675eabb0cad4da1e2fd6b3100d31e7d9d4507c617fc1bbe425"
        },
        {
          "alg": "SHA-384",
          "content": "7a9cf59bf40074c84dc395cd6dc91c2b2da630a2932eff8d42567bd870f0fc94f9605ea6c0725a83a7faf03f8d967305"
        },
        {
          "alg": "SHA3-384",
          "content": "2acb353316cbf3d0649e7c2f0765591f3ab9bab2f3a4aa1029f86a15338e7806a9ec41b101fa06b7fb29111d807eb33d"
        },
        {
          "alg": "SHA3-256",
          "content": "47dea1de78d259c1fb903bac72dd61acce885fbe2ab8e6b6d4f6e2439710699e"
        },
        {
          "alg": "SHA3-512",
          "content": "37c162c8a37107846e5950b2b15168d3b5677a4338dbc37b2f178f6fb5d5ad21c5cd81a6178054efe007d8fd088c42e8b2398df3e8d636d973a5035a01306808"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.4?type=jar",
      "externalReferences": [
        {
          "url": "https://hc.apache.org/httpcomponents-core-5.4.x/5.4/httpcore5/",
          "type": "website"
        },
        {
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2",
          "type": "distribution"
        },
        {
          "url": "https://issues.apache.org/jira/browse/HTTPCORE",
          "type": "issue-tracker"
        },
        {
          "url": "https://lists.apache.org/list.html?httpclient-users@hc.apache.org",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/apache/httpcomponents-core/tree/5.4/httpcore5",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.httpcomponents.core5/httpcore5-h2@5.4?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.httpcomponents.core5",
      "name": "httpcore5-h2",
      "version": "5.4",
      "description": "Apache HttpComponents HTTP/2 Core Components",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "a027e88d219ee744ddcdb32ed1e69633"
        },
        {
          "alg": "SHA-1",
          "content": "83cdd62ef3140664f46be59c2c2727141d1c5a32"
        },
        {
          "alg": "SHA-256",
          "content": "2e0f4ace15db2d1609c2b06eca6012e7582afe4a99ad8d15073f62dd8edb3460"
        },
        {
          "alg": "SHA-512",
          "content": "d9fed54460b52b68fc91502b1e7a0723cd97740455574b101929d6c77818f81340077fed7748a2b76a6d95e2dda711717caecf72f0f4d6331736fbad88ae66af"
        },
        {
          "alg": "SHA-384",
          "content": "e97a8a3cf311231461998c8b89ab037b08d6331283f12ee85bb82165f6977f21d9d56e1224bec7bc1cac73c92ef7a457"
        },
        {
          "alg": "SHA3-384",
          "content": "35bd22b763e02311f7419615c46e11ee029b3437127a573942e2441938ef0856c30853e8490e5ad3844d4c3920fd7752"
        },
        {
          "alg": "SHA3-256",
          "content": "bed09b6e99b25b6780b0ab0d2faa960ca7799e6b33a02ebac47adff6f70c441d"
        },
        {
          "alg": "SHA3-512",
          "content": "e812bcd3945a5559b676ead01c01a4f710ffc3c03fe4ee1e3332af960e58c1f4f87387242b9cd7c445a059a799c505f8ae5d397dacea722b020b6ed12064407c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.httpcomponents.core5/httpcore5-h2@5.4?type=jar",
      "externalReferences": [
        {
          "url": "https://hc.apache.org/httpcomponents-core-5.4.x/5.4/httpcore5-h2/",
          "type": "website"
        },
        {
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2",
          "type": "distribution"
        },
        {
          "url": "https://issues.apache.org/jira/browse/HTTPCORE",
          "type": "issue-tracker"
        },
        {
          "url": "https://lists.apache.org/list.html?httpclient-users@hc.apache.org",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/apache/httpcomponents-core/tree/5.4/httpcore5-h2",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.21?type=jar",
      "publisher": "FasterXML",
      "group": "com.fasterxml.jackson.core",
      "name": "jackson-annotations",
      "version": "2.21",
      "description": "Core annotations used for value types, used by Jackson data binding package.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "e0d0c3e7300954f73e43c67d933aaea4"
        },
        {
          "alg": "SHA-1",
          "content": "b1bc1868bf02dc0bd6c7836257a036a331005309"
        },
        {
          "alg": "SHA-256",
          "content": "53ca085f4a150f703f49e1aabd935bd03b43e1ea3d55d135438292af22cef56b"
        },
        {
          "alg": "SHA-512",
          "content": "d832a99867acc2d5afb2596da760c50e6a6b54c1bbc8e6c4186f267a16e1d55c7a916ef8b034ad6b277c41e3342b91dcdc2e3dcea8bdccfe89e7c147894591be"
        },
        {
          "alg": "SHA-384",
          "content": "30b15d68f8da6f6c26aa9f6c95d09152b6c1a8092cd976cf600d63d1751509a73865f937e0ad97d8d55bf20f6a749b44"
        },
        {
          "alg": "SHA3-384",
          "content": "5205b51f6ed689cf31b58b98a61ca9e17a439c15d669dcb408ec4d430e77ac9ac57d39d5ca1f9973e8d184f6dd57ec4f"
        },
        {
          "alg": "SHA3-256",
          "content": "d6782d188a72b2bb96e4b595343e783012b3f98c30f7b9950244c21739334509"
        },
        {
          "alg": "SHA3-512",
          "content": "b648f1e9ffe818227d53fbde409e61858ac22d3f78705eaf08065587ed512c9b33b0f5e2222356bfb33fb2973bb5a3184e31d2a7099f8fc8d2fd23eb4612a4bf"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.21?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/FasterXML/jackson",
          "type": "website"
        },
        {
          "url": "https://central.sonatype.com/api/v1/publisher",
          "type": "distribution"
        },
        {
          "url": "https://github.com/FasterXML/jackson-annotations/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/FasterXML/jackson-annotations",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.github.jeremylong/open-vulnerability-clients@9.0.5?type=jar",
      "group": "io.github.jeremylong",
      "name": "open-vulnerability-clients",
      "version": "9.0.5",
      "description": "Clients for vulnerability sources",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "ffb30f5216c160cf97b59ac846e885f1"
        },
        {
          "alg": "SHA-1",
          "content": "f88ff671b4f4c0d7bf69169ae119887e933cacc3"
        },
        {
          "alg": "SHA-256",
          "content": "4c74763f5f251702d8e842529ce929bbba0c961348d37a28477e327a589f4f52"
        },
        {
          "alg": "SHA-512",
          "content": "b4857ac81fc948f722fd96f60619786149f86091a980277a40085fc5a9d7fb0e24e01189771b95ae5ea5cf17c2fa7e3b1bad3fb9b5b0a71e69796ffd78d347d6"
        },
        {
          "alg": "SHA-384",
          "content": "a4cfcbf7285c7abec9e8d2422544ad616e267f4aaffa478f8e38657897ab01f3c91b14c1b204ac623f1f1c597675af96"
        },
        {
          "alg": "SHA3-384",
          "content": "cc521bb2f13e0b64806d5605fd74b82dc7c9e90868480c5964040910661d44d3ac261eb09a82efa767b29065c5f850a6"
        },
        {
          "alg": "SHA3-256",
          "content": "2439eb9af7871a4faac10ebdb1dc87ef8258a7ea5b877532744425622277ea72"
        },
        {
          "alg": "SHA3-512",
          "content": "8483ed16d094534223784fda547ec076fbf7b8ca636bb0d5db2d1bbffc5b08b7455ad9caa3cbe23b7e42115855ac23e5d368d1716207d4bd54693f5eff1bfb3b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.github.jeremylong/open-vulnerability-clients@9.0.5?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/jeremylong/open-vulnerability-clients/",
          "type": "website"
        },
        {
          "url": "https://github.com/jeremylong/open-vulnerability-clients",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.httpcomponents.client5/httpclient5-cache@5.6?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.httpcomponents.client5",
      "name": "httpclient5-cache",
      "version": "5.6",
      "description": "Apache HttpComponents HttpClient Cache",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "8cec7f04887daf5db87b49a75037297f"
        },
        {
          "alg": "SHA-1",
          "content": "161f12ce409b84c92bd092a8e7509f57f0a5f31f"
        },
        {
          "alg": "SHA-256",
          "content": "1cceca0cad38592e30126b0655b050a737e92e48be70c3959cdc95347d0cb06a"
        },
        {
          "alg": "SHA-512",
          "content": "d411f5a9cbc53b3d50d7ac48410a34006d4b050793704ce1c5b415b212f81ab1018d2eec148b1a323723436f4cdcdb524c5f2872d8ba0cb52533f903a4d1c6e4"
        },
        {
          "alg": "SHA-384",
          "content": "549438ced92f3dcb0251284ccccda096ef41ac810bcbd5be9105b8730e8bb04ce453ea142470f2c8c31bf4f66a1e6013"
        },
        {
          "alg": "SHA3-384",
          "content": "66f328ef55cb03b58061a4e08be71d6b23745e786b31913b2d4fd66110819d7b5e01768cf3f09595e40186f08ce534df"
        },
        {
          "alg": "SHA3-256",
          "content": "0c389088e726c03bc80b25b0de1da4e409c82f7a4fe595f6b351b6923a99e16b"
        },
        {
          "alg": "SHA3-512",
          "content": "fdfeeebc941420b249284e2938bc786cf01446a33de542847f88176ec6e63c7f7f3b01a2841c364e1189254e608b260948fed01e7d9c57c9adf3a6e50ab12d8e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.httpcomponents.client5/httpclient5-cache@5.6?type=jar",
      "externalReferences": [
        {
          "url": "https://hc.apache.org/httpcomponents-client-5.5.x/5.6/httpclient5-cache/",
          "type": "website"
        },
        {
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2",
          "type": "distribution"
        },
        {
          "url": "https://issues.apache.org/jira/browse/HTTPCLIENT",
          "type": "issue-tracker"
        },
        {
          "url": "https://lists.apache.org/list.html?httpclient-users@hc.apache.org",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/apache/httpcomponents-client/tree/5.6/httpclient5-cache",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.samskivert/jmustache@1.16?type=jar",
      "group": "com.samskivert",
      "name": "jmustache",
      "version": "1.16",
      "description": "A Java implementation of the Mustache templating language.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "7eff40c29c2fdf3faac3db921f07dc80"
        },
        {
          "alg": "SHA-1",
          "content": "979c7145a406b83bf28da32531f88a34c2d2919c"
        },
        {
          "alg": "SHA-256",
          "content": "3d4b984abd66908f05b38c9c892325cd4785d01ff33922569ff9b90c9ebfc475"
        },
        {
          "alg": "SHA-512",
          "content": "f245f8b979cf63fb4ad762e586a27468fa91b751aecf94f9f1dce32f551dec30c4b2dd881ea8b9b6a7eea3e9dfb34ceb96204d358bbb62120233416a4df382e1"
        },
        {
          "alg": "SHA-384",
          "content": "f53c07c96c4a4e8f9b424b17bbb152cc540dea8174db43b9bf5a12357d5207e5b8c0de506d83703fb46cfab13051c142"
        },
        {
          "alg": "SHA3-384",
          "content": "ac74164c34a0b40bf8e2d2c9f737bbae1b5c9c2c3a342487ca8271888379be51c5a0e3f45d1db57538eaed470bd7722f"
        },
        {
          "alg": "SHA3-256",
          "content": "2fdfe84999fe4930c399d5f78b678907881eea246fa30fd97f42f31ec90a2a8d"
        },
        {
          "alg": "SHA3-512",
          "content": "e213ee1cc34d3fde03785ac05a5df09c4b462fb1b1d0f02dff41e7b53522005df2e38b303bc193cff9203ab7f8a50764e1dea967035a454cf1988c056a615d57"
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "The (New) BSD License",
            "url": "http://www.opensource.org/licenses/bsd-license.php"
          }
        }
      ],
      "purl": "pkg:maven/com.samskivert/jmustache@1.16?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/samskivert/jmustache",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "http://github.com/samskivert/jmustache/issues",
          "type": "issue-tracker"
        },
        {
          "url": "http://github.com/samskivert/jmustache",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/vuln-data-source-nvd@5.0.0?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "vuln-data-source-nvd",
      "version": "5.0.0",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "9e697a054c802f8b350745d4696cec7c"
        },
        {
          "alg": "SHA-1",
          "content": "7bbf647b8411c18f5b584adcecdb7fca5030b6f9"
        },
        {
          "alg": "SHA-256",
          "content": "11800b1910e1fdaf85321d95335e62b9cab655dade5bd8e572db55609faf3a98"
        },
        {
          "alg": "SHA-512",
          "content": "e2e9f2c9ed46138258f0089119426b40a38327e4d376d34d3ba0f85684a8096b56cb8d150ec29cae913aacee7c4a2c4bf9a818075ce1f07a0a36aca21d588433"
        },
        {
          "alg": "SHA-384",
          "content": "a02e916e08620ac0217dda7bdef62d15eaeeed3c3e1685bdb9b3b01c53554033a9ce34f15b1d95f76ea05c9ce8924e0c"
        },
        {
          "alg": "SHA3-384",
          "content": "e6bfdc0eb48f837d1602445d911a9763de9f6d9cf841f5fa95c3a1a999ab798924c091d8b630a3d8fafd03964a87670f"
        },
        {
          "alg": "SHA3-256",
          "content": "89b12cb59de2c507fd40d870c7d37061364a6dbc4b8eee59ea6f55fd60860311"
        },
        {
          "alg": "SHA3-512",
          "content": "c9529bf1f6149ebd06e7abfa5f155e97e50a4e4d274d5c450bafbddeee7ff59a8ac053a07cc4e68d6482d2dc75f9e77230b752d5b1a2561ce6ad40b4df29270f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/vuln-data-source-nvd@5.0.0?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/vuln-data-source-parent/vuln-data-source-nvd/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/vuln-data-source-parent/vuln-data-source-nvd",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/vuln-data-source-osv@5.0.0?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "vuln-data-source-osv",
      "version": "5.0.0",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "8380fdec141840016146375c65633ea2"
        },
        {
          "alg": "SHA-1",
          "content": "a30caf3c8d3b296d99bb2858e6ea7566121bc1bd"
        },
        {
          "alg": "SHA-256",
          "content": "d276147f1221c578b67e905abf0814be6cae595e7fdd4968efbd496f62f5b126"
        },
        {
          "alg": "SHA-512",
          "content": "bd9408986c048ac17de6b3bd91ae8e711cfdcacd35595df41c1197c2ea23433b433c4c546838cdef74268ea239efba13bedfa838e9fe2967ec812903662d8c98"
        },
        {
          "alg": "SHA-384",
          "content": "8ee62eeaf632123731cfd142a6ad2654f1e343a3725c6b454d90b48723cb3624adb3212910a8db6995b85a53bd6ca236"
        },
        {
          "alg": "SHA3-384",
          "content": "b241534554b2040592825ee54357a16bc172dc8c0fd53e2edc3e8ebc6f6d53b6eb204ff70bc30bab7c614acdc84891d6"
        },
        {
          "alg": "SHA3-256",
          "content": "09e0f595b781af3b1fe737d930bda6567f04c2e0e072ecd28fb448522ac0b5a8"
        },
        {
          "alg": "SHA3-512",
          "content": "0d22b05486f1ae9cbfd79176c7f59290a522e4e43409bc5132c16a399dde23ca06208d81873f4558ad1ea67ec7bc78aa369c188f9c9da68d571548aeef914591"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/vuln-data-source-osv@5.0.0?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/vuln-data-source-parent/vuln-data-source-osv/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/vuln-data-source-parent/vuln-data-source-osv",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/alpine-common@5.0.0?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "alpine-common",
      "version": "5.0.0",
      "description": "An opinionated scaffolding library that jumpstarts Java projects with an API-first design, secure defaults, and minimal dependencies.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "ceccaa02fff5f7469bced16625957934"
        },
        {
          "alg": "SHA-1",
          "content": "8df5e2597fd3bac4c2f49ebfab19d93775090b9d"
        },
        {
          "alg": "SHA-256",
          "content": "b9f803c56644f68a7dd0eea09aeaf8695baccf1d783acea06891c4a613a46981"
        },
        {
          "alg": "SHA-512",
          "content": "5328e7c3cee1e63080b6d5d8604d83f2032ced117ef6ddfe00a55a1b60e3f5de2f4461b655066c14332ddd7347c704a107e56632cf0ebf0047369581a0e7b991"
        },
        {
          "alg": "SHA-384",
          "content": "a19f670ab14d14aa7cb71b064d379f0608feb23f5524b86f3919883f6d25104f3087769c3e733cfe7df39c04cc781c3d"
        },
        {
          "alg": "SHA3-384",
          "content": "60356a15a7dccb4f0e23b115574ec0aa1c6e4a7ef74a7eb9daefc93ef13477925f16e4e01e3d0700e1a46d3b535b2043"
        },
        {
          "alg": "SHA3-256",
          "content": "c09119d6e72992f16cc317e45be07ff49d083654c61d30f3597e48c63ff4303f"
        },
        {
          "alg": "SHA3-512",
          "content": "35c93f6c83394ce2055837f4bff0826481b277e3947818b5221b177b62ef8142522360ca915684fab0670d63b953c8c52a9124ae43ddbb658e14184d1987f0c6"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/alpine-common@5.0.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/stevespringett/Alpine/alpine-common",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/alpine-parent/alpine-common",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/alpine-model@5.0.0?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "alpine-model",
      "version": "5.0.0",
      "description": "An opinionated scaffolding library that jumpstarts Java projects with an API-first design, secure defaults, and minimal dependencies.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "420c8ccd98eeadaad992730d9473e302"
        },
        {
          "alg": "SHA-1",
          "content": "f90c6c4b571ac35c5afd914897bf214b8259606e"
        },
        {
          "alg": "SHA-256",
          "content": "b859c6a06806d30f143b893e8d3e5cd18dbc49485369e0b27d852d25318c7316"
        },
        {
          "alg": "SHA-512",
          "content": "7c1fa6c61a4cfcf39aec6450c1e9ff3a4749fa4562c2f7feb33ee73760e5fb71ed55454ae57a4890e763c27a0bd11a8d004ddcd0b1c9e0668c25b99d3785e0e4"
        },
        {
          "alg": "SHA-384",
          "content": "4fdd11126a2ee6581afb4d36cdb7c596b0394c9dd3e1477d574af1caf03059f3f5d17f471c72da1cc1181c5b4acc61af"
        },
        {
          "alg": "SHA3-384",
          "content": "3bce87ce4168eb71dc4162e22bd631e5efa79a16cd75105bdb7641164f146f8cf8cb34e4c0f907284386df2bb2983a27"
        },
        {
          "alg": "SHA3-256",
          "content": "7f70d5895ffc8bf5d9e13619b88a98feb9a53f563b26de3aa600b09a38f4911d"
        },
        {
          "alg": "SHA3-512",
          "content": "1f51cd1ee16166b17b8ebb21021baaab210c2eca8de829a519736a836fc4ab803a8fc5057860ecc631514e26860073f404e517fa86b1a8edb5eda79401753ba0"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/alpine-model@5.0.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/stevespringett/Alpine/alpine-model",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/alpine-parent/alpine-model",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.datanucleus/datanucleus-api-jdo@6.0.5?type=jar",
      "group": "org.datanucleus",
      "name": "datanucleus-api-jdo",
      "version": "6.0.5",
      "description": "Plugin providing DataNucleus implementation of the JDO API.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "9b7448a21838cae99a8b9f3875d93a08"
        },
        {
          "alg": "SHA-1",
          "content": "30f49348795e1d2e9a8e1613e9dbc6c3f851f1ca"
        },
        {
          "alg": "SHA-256",
          "content": "423ea8da36763d6c17d55434477b7ab2339d3cef5acf67dd30198ef1dd0ed477"
        },
        {
          "alg": "SHA-512",
          "content": "5262a518ccc344692af86a30d51e4d1d9ee2b3167dc16657b37e8cfb2affc3fd73db4df9df5463e4a25097d9eff27c9f305407239e19381cd32c0c7f9f01aaab"
        },
        {
          "alg": "SHA-384",
          "content": "96e3ee21e3958259fcbc3bcd8af53d0814415f027a73bb1a1025c9112406564e65eaff74c874f02d994e6239562a7202"
        },
        {
          "alg": "SHA3-384",
          "content": "8c88668e57a4ccf381e6fb3a9859e8fe15376bd9a0fd4d9b9d771c9f7712459e97edc219dcdf008971f0d06363592d09"
        },
        {
          "alg": "SHA3-256",
          "content": "54562d403842a670b5f4cfa2a272bbb05789bd39f278b52732f1df540c7e33b3"
        },
        {
          "alg": "SHA3-512",
          "content": "55accaf6c0e8a6082d09619351596707df28223929dd313bbfe25abd1f8693c2eb195c0dada149f11dd0aecdfca724edfd67de84152e0a2aa8c39383fbc8b8d2"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.datanucleus/datanucleus-api-jdo@6.0.5?type=jar",
      "externalReferences": [
        {
          "url": "http://www.datanucleus.org/#/datanucleus-api-jdo",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/datanucleus/datanucleus-api-jdo",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.datanucleus/datanucleus-core@6.0.11?type=jar",
      "group": "org.datanucleus",
      "name": "datanucleus-core",
      "version": "6.0.11",
      "description": "DataNucleus Core provides the primary components of a heterogenous Java persistence solution. It supports persistence API\u0027s being layered on top of the core functionality.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "2493fed928c1eade5a38f4016f1ba7c0"
        },
        {
          "alg": "SHA-1",
          "content": "87fae77204b7032165d6cfb468cb5dafacf39200"
        },
        {
          "alg": "SHA-256",
          "content": "2e2a23d21100e82a8bd0822eebe8bb9f39a8e3ea1ba5e2bb068c24cb0515bd08"
        },
        {
          "alg": "SHA-512",
          "content": "969e5e8b3330e1bd675af05d106f0081dbef25bfea99689a6a051eac96e81907dc8d42e574b464b33fe467c5024a282416f114946ed4374510b4abe7897027d3"
        },
        {
          "alg": "SHA-384",
          "content": "286413cbd9c681561bf5c7d83839893879a9476a0a2a9b60e60d6e161a665e92bef6db57cd9e18b4d13a6ed2a75bbe73"
        },
        {
          "alg": "SHA3-384",
          "content": "afcc830fdadc3c4b7130921ad521f4e0a7fe23b57614ac61f4c2a1d9eae47b56e6a0df82d1ebef82c1cbe1d2244c547d"
        },
        {
          "alg": "SHA3-256",
          "content": "02b169414ef4c5a9d7c79e6e98e86e21071054f035ce4a1ca8fde85aa5f726ef"
        },
        {
          "alg": "SHA3-512",
          "content": "1de064ff2de6452618e7a9f3bc83e91228105722697597e4dc0b836349d21c3d71ff6ee4613433f7da795efba9b56be7bfa3c6854a02587271cd7d4a6001bdb5"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.datanucleus/datanucleus-core@6.0.11?type=jar",
      "externalReferences": [
        {
          "url": "http://www.datanucleus.org/#/datanucleus-core",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/datanucleus/datanucleus-core",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.datanucleus/javax.jdo@3.2.1?type=jar",
      "group": "org.datanucleus",
      "name": "javax.jdo",
      "version": "3.2.1",
      "description": "The Java Data Objects API (JDO) : a standard interface-based Java model abstraction of persistence, developed by the JCP.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "79f1e95e6d7f1eb191edce207ac6ecd8"
        },
        {
          "alg": "SHA-1",
          "content": "e8d1af5779f95d3c85b641184b605725762a36c3"
        },
        {
          "alg": "SHA-256",
          "content": "61646f544baf75fc7a305410443c5f5f7d219fa7a2cabe3b782950a350ca5d3f"
        },
        {
          "alg": "SHA-512",
          "content": "29580963b5478646b0f3b47ae3387d0bdb5bd86da37afceef6841c32b9db3a4407186fc257855c5c47efbbf1f1bfbff0b45b6ad45101b6dfbed7946a9251fe43"
        },
        {
          "alg": "SHA-384",
          "content": "1845d95a87e9fb954ff3e0c80a0dae62eca817abb3f727d65edc9296a0992e60a7fa57db0a72858afaf9e2d872f6435f"
        },
        {
          "alg": "SHA3-384",
          "content": "e4f04e5be64a1a58ef475cf5b155e6169307dd9636cd4fe6661dd394fe28a0a9ee9dee426291bff62d66885ae35ab2c8"
        },
        {
          "alg": "SHA3-256",
          "content": "3703404351c56d4a658de2012266838fea9741cceb09e7304b4c323e33d88ca3"
        },
        {
          "alg": "SHA3-512",
          "content": "da4b8c30667d67651469ed1a750004a3afbaad1ce8c6697ac29889fd2e78dadbcde07d414161e42bc972017afe83e690329d4ede5e94a67553377ee7c2a7929a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.datanucleus/javax.jdo@3.2.1?type=jar",
      "externalReferences": [
        {
          "url": "http://www.datanucleus.org/#/javax.jdo",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/datanucleus/javax.jdo",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/javax.transaction/javax.transaction-api@1.3?type=jar",
      "publisher": "GlassFish Community",
      "group": "javax.transaction",
      "name": "javax.transaction-api",
      "version": "1.3",
      "description": "Project GlassFish Java Transaction API",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "6e9cb1684621821248b6823143ae26c0"
        },
        {
          "alg": "SHA-1",
          "content": "e006adf5cf3cca2181d16bd640ecb80148ec0fce"
        },
        {
          "alg": "SHA-256",
          "content": "603df5e4fc1eeae8f5e5d363a8be6c1fa47d0df1df8739a05cbcb9fafd6df2da"
        },
        {
          "alg": "SHA-512",
          "content": "3497cf77352aa1317c70ad1d28e8e7da51337d844c8227a35707209c750ba6f5d644a4ffdbdb10e5fbde204003aa43ff80e9e2ff3164584a7a34d8292266b2bc"
        },
        {
          "alg": "SHA-384",
          "content": "7044d8d5829a777d85e1a987c3e346eb535dd321366bdf32a9e8ed4f52facd0610ac2f3f58b4a1b001893f01fddc5eae"
        },
        {
          "alg": "SHA3-384",
          "content": "d0c1807001e02ce47320be657be055b4777b8b5673c22a78b0574955f7a6105dacc42b46b86ab967dc382cf332da59d8"
        },
        {
          "alg": "SHA3-256",
          "content": "c7c48884317a2d0e1596f201763acbca4ef76462af9172fd5e68aca3465303e1"
        },
        {
          "alg": "SHA3-512",
          "content": "bf053d4fe995cb5c1d6c01320fc73530017ee364de6ae21eb98fa0372b2aa6eff2fa4ac2d9cd5f692c930ee573c2f6226441918123fcfc48b5b4a126d350928c"
        }
      ],
      "licenses": [
        {
          "expression": "(CDDL-1.0 OR GPL-2.0-with-classpath-exception)"
        }
      ],
      "purl": "pkg:maven/javax.transaction/javax.transaction-api@1.3?type=jar",
      "externalReferences": [
        {
          "url": "http://jta-spec.java.net",
          "type": "website"
        },
        {
          "url": "https://maven.java.net/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/javaee/javax.transaction/issues",
          "type": "issue-tracker"
        },
        {
          "url": "javaee-spec@javaee.groups.io",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/javaee/javax.transaction",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.jersey.ext/jersey-bean-validation@4.0.2?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.glassfish.jersey.ext",
      "name": "jersey-bean-validation",
      "version": "4.0.2",
      "description": "Jersey extension module providing support for Bean Validation (JSR-349) API.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "254cf1628fdd8561cab876a729c98564"
        },
        {
          "alg": "SHA-1",
          "content": "db93aaf2cd038fbb77f0184b1df866782592e2df"
        },
        {
          "alg": "SHA-256",
          "content": "e92fa0ab1e4882e9c749b09ec7f5019ec3f165bdcef3888f0a1988c1da7347ae"
        },
        {
          "alg": "SHA-512",
          "content": "d127fdeba362dcb5677ee4d68bfd7e53b2636087de4769cff73c43553a5b39a6588b83d971147fa6c73af18fc2946c0c7349af221523a162c30094c7dcb5ecc9"
        },
        {
          "alg": "SHA-384",
          "content": "bb1940e39ab4580e898c652b4cc3b74560ac7eecaf97e4e06f0023ff0193d288f4407625ee713ede5604163b97515441"
        },
        {
          "alg": "SHA3-384",
          "content": "ac63c81e85bd6cd0dd05b6185b99c79552a57ac696d49b4f4abeb97b86c01572c07483e6acc9a81ef244c3fb086b39d3"
        },
        {
          "alg": "SHA3-256",
          "content": "10b67f4c5c7790e224b48885ca67c27802468a8505bc7ab039041322b27637c4"
        },
        {
          "alg": "SHA3-512",
          "content": "e2628bac3fbd61793d403f4cf5e93ca5a1c8e1c2a9210c4a1b02ed8bc314f7c06ef4bf340b0bd0b62a15f2999552016f3aa5b68cd00e2cbd6f14afbfc1545e08"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        },
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        },
        {
          "license": {
            "id": "BSD-2-Clause"
          }
        },
        {
          "license": {
            "name": "Apache License, 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        },
        {
          "license": {
            "name": "Public Domain",
            "url": "https://creativecommons.org/publicdomain/zero/1.0/"
          }
        },
        {
          "license": {
            "name": "Modified BSD",
            "url": "https://asm.ow2.io/license.html"
          }
        },
        {
          "license": {
            "name": "jQuery license",
            "url": "jquery.org/license"
          }
        },
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/license/mit/"
          }
        },
        {
          "license": {
            "name": "W3C license",
            "url": "https://www.w3.org/Consortium/Legal/copyright-documents-19990405"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.jersey.ext/jersey-bean-validation@4.0.2?type=jar",
      "externalReferences": [
        {
          "url": "https://projects.eclipse.org/projects/ee4j.jersey/project/jersey-bean-validation",
          "type": "website"
        },
        {
          "url": "https://ci.eclipse.org/jersey",
          "type": "build-system"
        },
        {
          "url": "http://localhost",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/project/jersey-bean-validation",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/jakarta.inject/jakarta.inject-api@2.0.1?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "jakarta.inject",
      "name": "jakarta.inject-api",
      "version": "2.0.1",
      "description": "Jakarta Dependency Injection",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "72003bf6efcc8455d414bbd7da86c11c"
        },
        {
          "alg": "SHA-1",
          "content": "4c28afe1991a941d7702fe1362c365f0a8641d1e"
        },
        {
          "alg": "SHA-256",
          "content": "f7dc98062fccf14126abb751b64fab12c312566e8cbdc8483598bffcea93af7c"
        },
        {
          "alg": "SHA-512",
          "content": "f186b2ada470abba1cc3b4f8c4373d940fb7c71a051b2c26f7c204ad4dfb69235fbf3f9c33da36d744cb90f52d921c51d76c0ff263bacb35eafb66cab83dc47d"
        },
        {
          "alg": "SHA-384",
          "content": "405bd297a73901f013d48a0da028d04d400f3e61f4997c0e7297eb08120670a0e242e0002db8f130c33ab16cb02feb2d"
        },
        {
          "alg": "SHA3-384",
          "content": "4db7e54434d0a208c876868f5595b808f2728c0455feaa752ab7b569a2186fc37cb891c9aa0076de3d08f6da6ff06eba"
        },
        {
          "alg": "SHA3-256",
          "content": "3a5aba9f1ff1a130b76af886123eb375fa578498490df3dc60bb7ce7d59e9404"
        },
        {
          "alg": "SHA3-512",
          "content": "00bba8efc2d6e7f0a509b321868d75f1aaf0681a750d089d913bde8424ab7bb88aadf49de6e291e352523e4f8c117b1b48033ff31d4d665dcc43c4c6ea000ba9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/jakarta.inject/jakarta.inject-api@2.0.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/eclipse-ee4j/injection-api",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/ee4j/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/injection-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/jakarta.validation/jakarta.validation-api@3.1.1?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "jakarta.validation",
      "name": "jakarta.validation-api",
      "version": "3.1.1",
      "description": "Jakarta Validation API",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "93ce96e77734f4280157edeffcae44e8"
        },
        {
          "alg": "SHA-1",
          "content": "ec8622148afc5564235d17af80ea80288d0e7f92"
        },
        {
          "alg": "SHA-256",
          "content": "63ce00156388c365f3ac1be71fcfaf114682fc0c452020b5df6e7ec236e142ab"
        },
        {
          "alg": "SHA-512",
          "content": "02483f9d631538a71f436982ed3842c5d054781ec58350ba33fd0e0db92db531caa17abd2e7aa25a062ba4cd5e85b63a27b615041df236ffb979a73fdd121e18"
        },
        {
          "alg": "SHA-384",
          "content": "8e4a235fb69ebf7327fe8947b0be32c76ae8ebb748d0b3195efb87cd1d57ea92402403a59e2c4312a11a3a2300bbb4d6"
        },
        {
          "alg": "SHA3-384",
          "content": "7f52280ddd46c87e00c6b10f708aa77d571e68942651ada952b4b9e58805a0216394a31a4666c88908af0a6408c9b64d"
        },
        {
          "alg": "SHA3-256",
          "content": "21e404a7897b223e9324f7b709c3038f4ca01599896a0e166cee4eb714b9e600"
        },
        {
          "alg": "SHA3-512",
          "content": "6bc15a9beecdbdb881c1ed5d7682156417db766898a14e205a496b8d7e0e552a4e4c2303727b1c4dbc2391d62257b1b9a9504827dc6b8ceff149225d94bf10a9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/jakarta.validation/jakarta.validation-api@3.1.1?type=jar",
      "externalReferences": [
        {
          "url": "https://beanvalidation.org",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://hibernate.atlassian.net/projects/BVAL/",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/jakartaee/validation",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.hibernate.validator/hibernate-validator@8.0.2.Final?type=jar",
      "group": "org.hibernate.validator",
      "name": "hibernate-validator",
      "version": "8.0.2.Final",
      "description": "Hibernate\u0027s Jakarta Bean Validation reference implementation.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "1adda123292ba2627d03a696d8c7e76a"
        },
        {
          "alg": "SHA-1",
          "content": "220e64815dd87535525331de20570017f899eb13"
        },
        {
          "alg": "SHA-256",
          "content": "2f2224a5a19bdcfa73540e9ff5c971b6c425ad80415876f305259fe873a15b2f"
        },
        {
          "alg": "SHA-512",
          "content": "3b4c68e41a245050addba3d5a856fad838e6a27fb0b8c13d34200274e13e0b3aa04c3f3d3cd883ceed880f0683093022625ed4db9522fc557782b8ad9668902d"
        },
        {
          "alg": "SHA-384",
          "content": "4addce04dd4599547dd81a02bb38426087edc11fc929ddc04790536264aa4bd4a62337b0f91604fe47b2b898039828f7"
        },
        {
          "alg": "SHA3-384",
          "content": "bcd829d013c6bb110a5d9dee2b4249678e41d670c9a7beb8b0c7ac52b7fae90be75997ef54a17900e8ef42e7afc171de"
        },
        {
          "alg": "SHA3-256",
          "content": "a1ff9dd13a537d46735504b4b3074277102c31f1b13eef40ba65537c25e1a9e6"
        },
        {
          "alg": "SHA3-512",
          "content": "db82be4ff0ca253beac177cf9fe474e3d448081a439e85e949f8f1d3a857b41c249c1bbebad1219b45a4ed580284b444c0aade591e907457e2d43fdc3f56cb60"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.hibernate.validator/hibernate-validator@8.0.2.Final?type=jar",
      "externalReferences": [
        {
          "url": "http://hibernate.org/validator/hibernate-validator",
          "type": "website"
        },
        {
          "url": "http://ci.hibernate.org/view/Validator/",
          "type": "build-system"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://hibernate.atlassian.net/projects/HV/summary",
          "type": "issue-tracker"
        },
        {
          "url": "http://github.com/hibernate/hibernate-validator/hibernate-validator",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml/classmate@1.5.1?type=jar",
      "publisher": "fasterxml.com",
      "group": "com.fasterxml",
      "name": "classmate",
      "version": "1.5.1",
      "description": "Library for introspecting types with full generic information including resolving of field and method types.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "e91fcd30ba329fd1b0b6dc5321fd067c"
        },
        {
          "alg": "SHA-1",
          "content": "3fe0bed568c62df5e89f4f174c101eab25345b6c"
        },
        {
          "alg": "SHA-256",
          "content": "aab4de3006808c09d25dd4ff4a3611cfb63c95463cfd99e73d2e1680d229a33b"
        },
        {
          "alg": "SHA-512",
          "content": "7fc4764eb65227f5ba614698a5cf2f9430133f42ec6e2ae53b4c724ee53f258541a0109fe0659e0b9e45729b46c95c00227e696b8d1addcd772c85f877658c9a"
        },
        {
          "alg": "SHA-384",
          "content": "28b4780b2353ebc08dbc02c9a343527a9062a0455bfb4ab135cb639c03e5dfd9c2250a835c44d5f17d275667c2009694"
        },
        {
          "alg": "SHA3-384",
          "content": "b194ace8f1f49f410286bd859866678b95a1b2c6f73e41f48291eb7438dffea57aaa9b177459038b6997771ce4d1cee1"
        },
        {
          "alg": "SHA3-256",
          "content": "50234c94efed4c816eb77bd2f70b869c9f89ddf8ee73dc25e354f4d0b81b3e1f"
        },
        {
          "alg": "SHA3-512",
          "content": "9886421726066b313a62283a6811b76d904ea1c1e9b7b2d850cb47afa189b03cdef053c8f7f6b79e77f2269c45f8cc2ed75c3389e96594b50987fef311d5a25f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.fasterxml/classmate@1.5.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/FasterXML/java-classmate",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/FasterXML/classmate/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/FasterXML/java-classmate",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.jboss.logging/jboss-logging@3.6.1.Final?type=jar",
      "publisher": "JBoss by Red Hat",
      "group": "org.jboss.logging",
      "name": "jboss-logging",
      "version": "3.6.1.Final",
      "description": "The JBoss Logging Framework",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "acab989faf62db02c092448e95614fab"
        },
        {
          "alg": "SHA-1",
          "content": "886afbb445b4016a37c8960a7aef6ebd769ce7e5"
        },
        {
          "alg": "SHA-256",
          "content": "5e08a4b092dc85b337f0910a740571d8720cfa565fabd880a8caf94a657ca416"
        },
        {
          "alg": "SHA-512",
          "content": "3dee7fadc04407538248def38fd0ae885c2aa454e2a38ecaaf7ef74abc1505f4efcd3e1a4e024c9f28d37fabb663c19cc3f29b7641b3094d5a504e93730c4a22"
        },
        {
          "alg": "SHA-384",
          "content": "26b1ba129bd9cd1777ba90da087d343698b1f7fa48b855ce0a1030afc1c7ae81433f75e7b8293eb42fc063ce35386280"
        },
        {
          "alg": "SHA3-384",
          "content": "7fbed126ae79578a4136d769f31d9d879e14cd0f0b78ec91515be7cfce5fea7f1c1ca10bf752d19edd5511d3d4ef5254"
        },
        {
          "alg": "SHA3-256",
          "content": "0de02a61df5dc9fbb8e9a344a8744356f3e867b4567ca2baa0bbf16a8763de01"
        },
        {
          "alg": "SHA3-512",
          "content": "2c7b522c04afab22900222f287da17c1526b3b3fd6a9376298613112918afb050af3d8ead2239be3e7dc3337ae74a636bf1963a1bc56426996b0f7283681bb3c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.jboss.logging/jboss-logging@3.6.1.Final?type=jar",
      "externalReferences": [
        {
          "url": "http://www.jboss.org",
          "type": "website"
        },
        {
          "url": "https://issues.redhat.com/",
          "type": "issue-tracker"
        },
        {
          "url": "http://lists.jboss.org/pipermail/jboss-user/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/jboss-logging/jboss-logging/tree/main/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/jakarta.el/jakarta.el-api@6.0.1?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "jakarta.el",
      "name": "jakarta.el-api",
      "version": "6.0.1",
      "description": "Jakarta Expression Language defines an expression language for Java applications",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "a98f097e059552a75748fcdd067e5c16"
        },
        {
          "alg": "SHA-1",
          "content": "c7c4a2eb1e40e0ff45ab5e2e52bd77d8c7a75176"
        },
        {
          "alg": "SHA-256",
          "content": "7e84b5bed49de32b79cc5e85d90b6f5adb1a953ac67283adbb41c1e297f9c605"
        },
        {
          "alg": "SHA-512",
          "content": "fbab7bdf18e9bfb316b519a8c3b3d1f2e769e3f318b72e46cf33621f2942b84eede9b97970ff46fe29b54f8d61cb0df9e584d371f10e56bf0050d7727eb0ee23"
        },
        {
          "alg": "SHA-384",
          "content": "8c9c0712f90e359567fb2f080a18d38227ebd3096730980aeec86ee290b79f79cb4cf9888f72944ac240c01330828344"
        },
        {
          "alg": "SHA3-384",
          "content": "3c82d728737f09f400956a25664b008a307a359f33084ae9304ecf850b2b8448b27a7f017a6630299b7bd7ea4dddc239"
        },
        {
          "alg": "SHA3-256",
          "content": "2e870db1b8d460705534cba4ccd57b2d8247db1ff9bba831e2b2aef28261b4ea"
        },
        {
          "alg": "SHA3-512",
          "content": "d7eba15a92c49d1061ed4ac4c6a298dcd5b17896d8de214d5ad560624c2e2c855e9846626821754c47b898dea656ab516138d0ef607d5faf7c1dbed8c660ee6f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "name": "GNU General Public License, version 2 with the GNU Classpath Exception",
            "url": "https://www.gnu.org/software/classpath/license.html"
          }
        }
      ],
      "purl": "pkg:maven/jakarta.el/jakarta.el-api@6.0.1?type=jar",
      "externalReferences": [
        {
          "url": "https://projects.eclipse.org/projects/ee4j.el",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/el-ri/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/el-dev",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/el-ri",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.expressly/expressly@5.0.0?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.glassfish.expressly",
      "name": "expressly",
      "version": "5.0.0",
      "description": "Jakarta Expression Language Implementation",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "d4448c69fe69ebca37b2c76e62e385c3"
        },
        {
          "alg": "SHA-1",
          "content": "78637fec7db6414c3ad32f3aa9e5d6610a299e5b"
        },
        {
          "alg": "SHA-256",
          "content": "b0c872737bb8381921b304d0952854666d1ba320b9b3c5bf4d70a09a86b61524"
        },
        {
          "alg": "SHA-512",
          "content": "8abd592d1fd70ef7fac5d0c1debe59dddea59dd82262bae016b44c506ceb68bb0619f464a07e553cc6885d527e1b8b8571e8975ca040c7864baba2349f30b725"
        },
        {
          "alg": "SHA-384",
          "content": "dc233d0838d2912d2473b8b6f5988145f4116dc2b139ea0378e78f260ed4c7609c954875c21fa579c4901f3202b3ca61"
        },
        {
          "alg": "SHA3-384",
          "content": "d946ffea99369b9933d07076f88a605a8b724edbc1d771ec92db145e6a68e447ac261efd9a4cdb74dce38827f75bd7d4"
        },
        {
          "alg": "SHA3-256",
          "content": "a46f1d62e482167ead93bc3f1261852cbd968e8fc7b68b399685d0bf6eb095d7"
        },
        {
          "alg": "SHA3-512",
          "content": "5e23912f838fe9487d5c0ab44d806e05f1754df1d18f1f7231a32975a73d7747edab4166903b5cbdc6ef002efc4a768b10baa4d7dabcb1c29bca61e9ab923347"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "name": "GNU General Public License, version 2 with the GNU Classpath Exception",
            "url": "https://www.gnu.org/software/classpath/license.html"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.expressly/expressly@5.0.0?type=jar",
      "externalReferences": [
        {
          "url": "https://projects.eclipse.org/projects/ee4j.expressly",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/expressly-ri/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/expressly-dev",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/expressly-ri",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/alpine-infra@5.0.0?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "alpine-infra",
      "version": "5.0.0",
      "description": "An opinionated scaffolding library that jumpstarts Java projects with an API-first design, secure defaults, and minimal dependencies.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "386a104fdecba5f555f0826ead17b067"
        },
        {
          "alg": "SHA-1",
          "content": "0f1dc6580038bc8f75f7965b1a2d3e823ccbe534"
        },
        {
          "alg": "SHA-256",
          "content": "5d82848ada17c52570f2c607f29550af13f2c77d967a411e6346ec24dd5af218"
        },
        {
          "alg": "SHA-512",
          "content": "669435baf41d79d4cd4f0a5f0d9e4f05bbbf137ebffbbefcd98d11418013baf0eb6179bf39d90e6410fbe270b07cde5fcc89094fc0f291dc441d44625744c05c"
        },
        {
          "alg": "SHA-384",
          "content": "e075ffe669bf70f39f7ae1be1f41176e8fabb50f5e635e0d0aa7f2f5477fc181086c6365b44791c17ab072820a06fac3"
        },
        {
          "alg": "SHA3-384",
          "content": "671a096bef12d9318f1ffb88003a6d736f3bb961b2c3dcfe3ba22d0e1696fdb1f63748572bf0b83967566de2a82c595c"
        },
        {
          "alg": "SHA3-256",
          "content": "c1c8ff17e588d0ced4d6c71c9b949c0a1a0edbb657e7dc39325512012d1fece9"
        },
        {
          "alg": "SHA3-512",
          "content": "9ca8b046f1907b6a7cfae1d42effe283d968ab70b58b155c910222457a4fbb01c2fc6a56bcee6c91e3f1c5ca69c5f966408d2dcfd128c6321dfc14f719f1bb02"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/alpine-infra@5.0.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/stevespringett/Alpine/alpine-infra",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/alpine-parent/alpine-infra",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.datanucleus/datanucleus-rdbms@6.0.11?type=jar",
      "group": "org.datanucleus",
      "name": "datanucleus-rdbms",
      "version": "6.0.11",
      "description": "Plugin for DataNucleus providing persistence to RDBMS datastores.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "33a96bd9a1e242d31cc0929562e3af04"
        },
        {
          "alg": "SHA-1",
          "content": "52d9d3d77483021736ee88ee7f53d2447cb1049e"
        },
        {
          "alg": "SHA-256",
          "content": "a9271d3c793bdd73ab6444346d6036982929529cdcb874dbd8fad1e90de04338"
        },
        {
          "alg": "SHA-512",
          "content": "fe93c578f598f5282e637b542e7dd44061b59ea6e9f00fc6df595c9f26ff567daccf7ec7359e3a120e5a4090b8b7f4ff36e991210507123d6e3477f0aae24984"
        },
        {
          "alg": "SHA-384",
          "content": "f80c7aa7375f1317172236773e4ba02a67c45b788566977278d8125fe4226ffd60604c4fe5ad2b82aa97122f15ed8e7d"
        },
        {
          "alg": "SHA3-384",
          "content": "0583f548e429a4412a87e6423ec0d334aca631470b3e7a355d192e39a68c64e68d59fbff11552eefc7b7cb2153fcc2a3"
        },
        {
          "alg": "SHA3-256",
          "content": "8cb46d03fdee2bc0f022e5d724c1b7affcd378e5bd4c72c0779e80f35fe40b47"
        },
        {
          "alg": "SHA3-512",
          "content": "e630592197b25c46cf137b4146e884b18b6b4793ed4a4a32f6169ab51f64775a5eabdbccd3bb3e2dc87526330bc4cf0b0b8a661e457a32ca565d10f3b2759af8"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.datanucleus/datanucleus-rdbms@6.0.11?type=jar",
      "externalReferences": [
        {
          "url": "http://www.datanucleus.org/#/datanucleus-rdbms",
          "type": "website"
        },
        {
          "url": "https://github.com/datanucleus/datanucleus-rdbms",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/alpine-server@5.0.0?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "alpine-server",
      "version": "5.0.0",
      "description": "An opinionated scaffolding library that jumpstarts Java projects with an API-first design, secure defaults, and minimal dependencies.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "a735063a577233917626b376e624d97c"
        },
        {
          "alg": "SHA-1",
          "content": "2bc67707944121978dbda8ef142ad18c9af978c7"
        },
        {
          "alg": "SHA-256",
          "content": "9d7d1f9af4a19c397cbb94dc4428c0ba6bd68fb391a8040240489d048dc358c4"
        },
        {
          "alg": "SHA-512",
          "content": "5a2963438960252835186eccfeafebe5ddb835f3be958952c7cb4f1ea204008e352c476ce44eb48128652f8b99f1f7778158cdb142ffabc560c7ac422bf342a3"
        },
        {
          "alg": "SHA-384",
          "content": "7e4ee366b3b8fdd2d4e0148fbf41dad3c3dddad47834ce47dd6c01fd88bb2c98cb56d4d188bf7cc93d5f94925df59eae"
        },
        {
          "alg": "SHA3-384",
          "content": "a52f51c4306ffd15017271b86d109930a53f4d6c6ca9a5296f116633a234a170866ea18375dd3efb8866db0bf1bd1ed8"
        },
        {
          "alg": "SHA3-256",
          "content": "794c2c9f3929660a7072c67ff07892ee91a8db2c860a02fbb8c03e00cdb8eab6"
        },
        {
          "alg": "SHA3-512",
          "content": "075f7fb8622404d039a4054bb10b51e05a57d45f80a1b8c5c2c70c07a2637d9649056af26bc26ce130420975f156c4715383e4aea5f0ff4d2bc960cb63964887"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/alpine-server@5.0.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/stevespringett/Alpine/alpine-server",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/alpine-parent/alpine-server",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.jersey.containers/jersey-container-servlet@4.0.2?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.glassfish.jersey.containers",
      "name": "jersey-container-servlet",
      "version": "4.0.2",
      "description": "Jersey core Servlet 3.x implementation",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "25818f2d34a03809a4e2a1a4949aa3c5"
        },
        {
          "alg": "SHA-1",
          "content": "e49f6b43e8f35fc42d78aadebf9ce675be83eb2a"
        },
        {
          "alg": "SHA-256",
          "content": "9317b4c9cc8f86906fe6f64b2ae613d7b586d7fb396cd13eaf615a2d5bb142ae"
        },
        {
          "alg": "SHA-512",
          "content": "f881cd95bd25fae560bf52771a3e869cfe732c5ac99aae1645a014da92a2f5db7b6e2353dfdfa595e3f39aa85a1516a0b45b71b33d226d5af8fb1aaca3a9492b"
        },
        {
          "alg": "SHA-384",
          "content": "a71eea737f5a1a65ba648fe4e315f5f7a5731649199fa4c925146592639642ee48b15939f30277c8b27022294394dc1a"
        },
        {
          "alg": "SHA3-384",
          "content": "b4ca6ab8e6eb625bbafe472a8c5be3aa3b93e296345243e4ef5f8a29b37a517954b41829a7d9a214bdc0c02976d3a48a"
        },
        {
          "alg": "SHA3-256",
          "content": "49b2b2914f513aa873f17692bb67b324c9109ce9b8ea95db11e2c92101c4e4fa"
        },
        {
          "alg": "SHA3-512",
          "content": "887968d759326a48839b736ed1f44cc444f6c6e2895219c4886323eb417ae8ef824e4d87b9739906e84fd101073be0eddb2b0e1e2b9a66f19cb7ef37b86bd193"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        },
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        },
        {
          "license": {
            "id": "BSD-2-Clause"
          }
        },
        {
          "license": {
            "name": "Apache License, 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        },
        {
          "license": {
            "name": "Public Domain",
            "url": "https://creativecommons.org/publicdomain/zero/1.0/"
          }
        },
        {
          "license": {
            "name": "Modified BSD",
            "url": "https://asm.ow2.io/license.html"
          }
        },
        {
          "license": {
            "name": "jQuery license",
            "url": "jquery.org/license"
          }
        },
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/license/mit/"
          }
        },
        {
          "license": {
            "name": "W3C license",
            "url": "https://www.w3.org/Consortium/Legal/copyright-documents-19990405"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.jersey.containers/jersey-container-servlet@4.0.2?type=jar",
      "externalReferences": [
        {
          "url": "https://projects.eclipse.org/projects/ee4j.jersey/project/jersey-container-servlet",
          "type": "website"
        },
        {
          "url": "https://ci.eclipse.org/jersey",
          "type": "build-system"
        },
        {
          "url": "http://localhost",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/project/jersey-container-servlet",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.jersey.media/jersey-media-json-jackson@4.0.2?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.glassfish.jersey.media",
      "name": "jersey-media-json-jackson",
      "version": "4.0.2",
      "description": "Jersey JSON Jackson (2.x) entity providers support module.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "35bc0ebd87e351b294c4c2d80a49637d"
        },
        {
          "alg": "SHA-1",
          "content": "49a43c8e343340e8a91671d14a4e71bf6bcca832"
        },
        {
          "alg": "SHA-256",
          "content": "efa2fdad26e994adde4f827c11e44ab5fd3cf3c3e0aa4f99e8eefd1b83449fa7"
        },
        {
          "alg": "SHA-512",
          "content": "c57f5a439c0fec721d8776afe4947d004bb77a3beae809bf71cfe621f6a3aad3342450529a0e0d0696dce691bf3ab35c167829aa60829db903f5b5b73998b5ba"
        },
        {
          "alg": "SHA-384",
          "content": "f324740990411a83622cd12bdefb3e89cfb02c4ea703f4b6a693033b906f0c51b36ff28bb6ff38e5de1553b8e56b8e09"
        },
        {
          "alg": "SHA3-384",
          "content": "67024bf3a7e0eb78074482c54a6bb8edde46152a8421b0018948592358b548c653049d1cfea3c46d2f2e6a43696d260c"
        },
        {
          "alg": "SHA3-256",
          "content": "929d16ec5a727e2fb44e970048f7b9afb15af7e3cfe8ae6927faf9214ce1bc9e"
        },
        {
          "alg": "SHA3-512",
          "content": "9e21c8523d65bb618302f96ab10914fe217e60d18ec6ef3ebea51fdccd8c0fe8c5e6b159a59d257134448c152dde8496e4b23e054d55254465f0797fa5e1a703"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "name": "The GNU General Public License (GPL), Version 2, With Classpath Exception",
            "url": "https://www.gnu.org/software/classpath/license.html"
          }
        },
        {
          "license": {
            "name": "Apache License, 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.jersey.media/jersey-media-json-jackson@4.0.2?type=jar",
      "externalReferences": [
        {
          "url": "https://projects.eclipse.org/projects/ee4j.jersey/project/jersey-media-json-jackson",
          "type": "website"
        },
        {
          "url": "https://ci.eclipse.org/jersey",
          "type": "build-system"
        },
        {
          "url": "http://localhost",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/project/jersey-media-json-jackson",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.jersey.ext/jersey-entity-filtering@4.0.2?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.glassfish.jersey.ext",
      "name": "jersey-entity-filtering",
      "version": "4.0.2",
      "description": "Jersey extension module providing support for Entity Data Filtering.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "6a9d18c10c375eaf87da84354bdbea31"
        },
        {
          "alg": "SHA-1",
          "content": "ebe669571bf00ea4030cfd17c3593ad1d334662d"
        },
        {
          "alg": "SHA-256",
          "content": "633afbf5f3c1ae53aeffbec1f486a878446f19ec8df42b2f795cb06620d1db90"
        },
        {
          "alg": "SHA-512",
          "content": "db48c6417f847d2f51b41d15315c6e73ed3a50e8b3f3b767f05c3f50827bc64359a9132a76283913ea753e840bfb96b0aa602e92b8b8818cb80d47fed11eb4f9"
        },
        {
          "alg": "SHA-384",
          "content": "c290248a96e5ccbc7bda48f0ac8312f829c801921aa1614066595b0f7395af94d67732bb4684834db85c1fa59db96d76"
        },
        {
          "alg": "SHA3-384",
          "content": "53d6d7c09162840e7bed9f1fb7a4bbf761c641b9701d8d562b3233e866cb424887120e7933dbcaea37d9951b67579773"
        },
        {
          "alg": "SHA3-256",
          "content": "189e43a565898a7fa96814e1c2430033a3e85f053958dc5c9c803e26385f899c"
        },
        {
          "alg": "SHA3-512",
          "content": "8789df3ed80682cc9bcdc0706c967a6749490a7b00f2a017fb9c5f1a500a14f2ddd2ff3596a95c0e44d86b156eb1be4b75a4b8bdb44aa4087323b6908716fd09"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        },
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        },
        {
          "license": {
            "id": "BSD-2-Clause"
          }
        },
        {
          "license": {
            "name": "Apache License, 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        },
        {
          "license": {
            "name": "Public Domain",
            "url": "https://creativecommons.org/publicdomain/zero/1.0/"
          }
        },
        {
          "license": {
            "name": "Modified BSD",
            "url": "https://asm.ow2.io/license.html"
          }
        },
        {
          "license": {
            "name": "jQuery license",
            "url": "jquery.org/license"
          }
        },
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/license/mit/"
          }
        },
        {
          "license": {
            "name": "W3C license",
            "url": "https://www.w3.org/Consortium/Legal/copyright-documents-19990405"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.jersey.ext/jersey-entity-filtering@4.0.2?type=jar",
      "externalReferences": [
        {
          "url": "https://projects.eclipse.org/projects/ee4j.jersey/project/jersey-entity-filtering",
          "type": "website"
        },
        {
          "url": "https://ci.eclipse.org/jersey",
          "type": "build-system"
        },
        {
          "url": "http://localhost",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/project/jersey-entity-filtering",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml.jackson.module/jackson-module-jakarta-xmlbind-annotations@2.21.3?type=jar",
      "publisher": "FasterXML",
      "group": "com.fasterxml.jackson.module",
      "name": "jackson-module-jakarta-xmlbind-annotations",
      "version": "2.21.3",
      "description": "Support for using Jakarta XML Bind (aka JAXB 3.0) annotations as an alternative to \u0022native\u0022 Jackson annotations, for configuring data-binding.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "9651f3099857d4cdbd9fd2e3af0dc2b3"
        },
        {
          "alg": "SHA-1",
          "content": "5464ed68549201b60eeeacbe4fdfe7ff2f3b3a7d"
        },
        {
          "alg": "SHA-256",
          "content": "3bb8a3bf2a6637f036d4881971f1417de3e31d300f0154d5865bcdd34411d983"
        },
        {
          "alg": "SHA-512",
          "content": "4075d97567801fb3f218c3438f2ab8a66909d2be14e9cbe50e5db3c586957a708427522c09fd84afadeaf260bec1350dc534424824108d59f6c71272ccc7f363"
        },
        {
          "alg": "SHA-384",
          "content": "2b3de6918a402917d363368fdbac8adadc842744e7fb953355f58d3294fac255afbe4759bb5de9b260f0ffbc7dab8a07"
        },
        {
          "alg": "SHA3-384",
          "content": "76abb8f3320dc76f9beb931e38bcf28df9c4e722fa18930fef836f2c9fccac71fabdd1957a60ecbc1e0584c541bb0433"
        },
        {
          "alg": "SHA3-256",
          "content": "d907fa96ee0da35bd1fd84db0f6171098e88619371312e2ee2cb832e9e2fe41f"
        },
        {
          "alg": "SHA3-512",
          "content": "75955ddddc6d47be64703b11cd99bcf3450dcfc2473f6d040166183768c204e5cae287660c60db666135ccc10dbf1aa33c96d6873d1e68b672d6b0d358286e0c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.module/jackson-module-jakarta-xmlbind-annotations@2.21.3?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/FasterXML/jackson-modules-base",
          "type": "website"
        },
        {
          "url": "https://central.sonatype.com/api/v1/publisher",
          "type": "distribution"
        },
        {
          "url": "https://github.com/FasterXML/jackson-modules-base/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/FasterXML/jackson-modules-base/jackson-module-jakarta-xmlbind-annotations",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@4.0.2?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "jakarta.xml.bind",
      "name": "jakarta.xml.bind-api",
      "version": "4.0.2",
      "description": "Jakarta XML Binding API",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "0c8f9991081def819435c3ff36e4d93f"
        },
        {
          "alg": "SHA-1",
          "content": "6cd5a999b834b63238005b7144136379dc36cad2"
        },
        {
          "alg": "SHA-256",
          "content": "0d6bcfe47763e85047acf7c398336dc84ff85ebcad0a7cb6f3b9d3e981245406"
        },
        {
          "alg": "SHA-512",
          "content": "2e57ce867ae3592959243ab9d7d064b09d9587933c98f89f5d5eeb8fe70556a53fea6db91520a2e086555684e8917f4001741bd8ffb07d26c59fe95c13d71fa0"
        },
        {
          "alg": "SHA-384",
          "content": "7ac5da337fccfa426b48691febed0d874a8e9a6a230bb7a53169f902e5b499778106f7b710afbe133dbd7bfacca693a0"
        },
        {
          "alg": "SHA3-384",
          "content": "fc952425a51459a5d18dc7b6315625c55889e1b92e700450c84205506e5107ca4c7c8bc449190220bf471db3dcbf9c8a"
        },
        {
          "alg": "SHA3-256",
          "content": "a78dd7c5883b16cf899495930e653650005c71b4d9b509e56cac4665778d715e"
        },
        {
          "alg": "SHA3-512",
          "content": "bdf9db79b8ade9421c3f5fc497ebe13a552be5852d99cedfa38bb6c760c8bf190f88204ab6e02442db5fb24378afc6112297c5a582d4e721de71285405a6429d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@4.0.2?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/jakartaee/jaxb-api/jakarta.xml.bind-api",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/jakartaee/jaxb-api/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/jaxb-dev",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/jakartaee/jaxb-api.git/jakarta.xml.bind-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.jersey.media/jersey-media-multipart@4.0.2?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.glassfish.jersey.media",
      "name": "jersey-media-multipart",
      "version": "4.0.2",
      "description": "Jersey Multipart entity providers support module.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "aae6111826bc8092f33c8e80de9c120d"
        },
        {
          "alg": "SHA-1",
          "content": "f5400fc442af3cdcc46f0204f2b6072402aaca9d"
        },
        {
          "alg": "SHA-256",
          "content": "b9bbd74fa5337753c1f96e2ef1e9ab5c7ab1ad3b8fe1c4f719a311e8f3821aed"
        },
        {
          "alg": "SHA-512",
          "content": "75a380ec7fee2a1a04327cc765ea6a52e1b70da3a91dc921cbc221085b1541e68e40d5c743a6227c86d2d74a65cfe68b05ec1fbce42ac739f6a5e4498c8dcdd6"
        },
        {
          "alg": "SHA-384",
          "content": "f09f5dcd92f1960593f1909c13813774658f735e8a875502c9061c51cc6a78d5195d1973ea346809d837d25e3dff2ee4"
        },
        {
          "alg": "SHA3-384",
          "content": "07030c4ab91f627b75f8d93460e45e4966db068a6a06fc2108a2cde14360685717d4669d0311885687d787085e79c97a"
        },
        {
          "alg": "SHA3-256",
          "content": "d4110cad7c9d2fb29775aa789b662dfda3b70755706d90815eaaf0ee0c3f5d4d"
        },
        {
          "alg": "SHA3-512",
          "content": "ecd7b48b0e3069d4441f9a9f357552ba7f15a952fab0d71e52bfac349c04492c80687f849b88d2b22b85ee1dc902d56a9b7cf1c20d9c0440bfea5113798d290c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        },
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        },
        {
          "license": {
            "id": "BSD-2-Clause"
          }
        },
        {
          "license": {
            "name": "Apache License, 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        },
        {
          "license": {
            "name": "Public Domain",
            "url": "https://creativecommons.org/publicdomain/zero/1.0/"
          }
        },
        {
          "license": {
            "name": "Modified BSD",
            "url": "https://asm.ow2.io/license.html"
          }
        },
        {
          "license": {
            "name": "jQuery license",
            "url": "jquery.org/license"
          }
        },
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/license/mit/"
          }
        },
        {
          "license": {
            "name": "W3C license",
            "url": "https://www.w3.org/Consortium/Legal/copyright-documents-19990405"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.jersey.media/jersey-media-multipart@4.0.2?type=jar",
      "externalReferences": [
        {
          "url": "https://projects.eclipse.org/projects/ee4j.jersey/project/jersey-media-multipart",
          "type": "website"
        },
        {
          "url": "https://ci.eclipse.org/jersey",
          "type": "build-system"
        },
        {
          "url": "http://localhost",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/project/jersey-media-multipart",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.jvnet.mimepull/mimepull@1.9.15?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.jvnet.mimepull",
      "name": "mimepull",
      "version": "1.9.15",
      "description": "Provides a streaming API to access attachments parts in a MIME message.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "fdc35a1eae84c5a60c95d617551d4a06"
        },
        {
          "alg": "SHA-1",
          "content": "60f9a7991ad9ec1a280db8deea216a91c10aae74"
        },
        {
          "alg": "SHA-256",
          "content": "b9f586bf8844b14a33e75fe7a4b94896dc80d80b732d128777e287af14c836fa"
        },
        {
          "alg": "SHA-512",
          "content": "d80e7f2550272edefe8eebace17c8b836d72602bfff67007c6463d4c7b02a36b97467f23d358601d97882160533ed110da938082994434e2312fb0c4e0f2a19e"
        },
        {
          "alg": "SHA-384",
          "content": "dea380fc137e9784a6c6d114c0a12d4a415baa21e2ce188b952ee1bfa59baaa53e133a0c5fcde9ff1abdbf4dbe93a58b"
        },
        {
          "alg": "SHA3-384",
          "content": "c4d8fc6eff8b9325c07f037484d49e1a52ad580237ba247eec92617e15be03501862b7f64b334919077e124bb94975c5"
        },
        {
          "alg": "SHA3-256",
          "content": "648e6b07265e79912cf8191efdaf316a7f2d317e79d7e4e9b7e323556da74fac"
        },
        {
          "alg": "SHA3-512",
          "content": "14672a4a8dd2a5fe1d437a1204de922eb668ff76c72dae0acc4438fa54eb25a2f6232c75038a391428544b3e77a0a6290d84a99b9c60ea7ce743561ca9b4e1ba"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/org.jvnet.mimepull/mimepull@1.9.15?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/eclipse-ee4j/metro-mimepull",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/metro-mimepull/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://www.eclipse.org/lists/metro-dev",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/metro-mimepull",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.jersey.inject/jersey-hk2@4.0.2?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.glassfish.jersey.inject",
      "name": "jersey-hk2",
      "version": "4.0.2",
      "description": "HK2 InjectionManager implementation",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "295f464e22b0303c2c5dc23888194042"
        },
        {
          "alg": "SHA-1",
          "content": "8283989a7a36b51f31c5f35b354881d106bee6b3"
        },
        {
          "alg": "SHA-256",
          "content": "5df758fc55d0d7cdb431b4c9ab50fbf613965ce0a7898d1a923d957e3a93df2c"
        },
        {
          "alg": "SHA-512",
          "content": "846c8d018bb0059eda93b8b1f464f7bf14d284b36d871df0233b6655486344168373a31b8a778891d2de0d8e4141446e04b0845b21bce793ce728c0d93bda512"
        },
        {
          "alg": "SHA-384",
          "content": "1b3d5da027e60c1cd2d0c97069350cef3e42b45b4814976ce8185dcf57b1dac907375835f8a34f25f59fdcd0c394e4fb"
        },
        {
          "alg": "SHA3-384",
          "content": "fd5e03a684c044960e176577371ce74cadabc5673d558f96a7d1dff56b59bef6809a897913c99660bcdcc8c27fe43be4"
        },
        {
          "alg": "SHA3-256",
          "content": "b9c053c2b3cd0fe0c1bd0c8b78ac4a7a1b97ce5c80f7722483b70d40c1cfb476"
        },
        {
          "alg": "SHA3-512",
          "content": "087e8d0583f2db5c0b877188d8bd85e15af42e0e6bdb10e5363639a8e721cf128874fdeaead7ad5d2b5c6b2e2741708d4bddd3638c7f27275b11c3a96095c2ef"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        },
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        },
        {
          "license": {
            "id": "BSD-2-Clause"
          }
        },
        {
          "license": {
            "name": "Apache License, 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        },
        {
          "license": {
            "name": "Public Domain",
            "url": "https://creativecommons.org/publicdomain/zero/1.0/"
          }
        },
        {
          "license": {
            "name": "Modified BSD",
            "url": "https://asm.ow2.io/license.html"
          }
        },
        {
          "license": {
            "name": "jQuery license",
            "url": "jquery.org/license"
          }
        },
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/license/mit/"
          }
        },
        {
          "license": {
            "name": "W3C license",
            "url": "https://www.w3.org/Consortium/Legal/copyright-documents-19990405"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.jersey.inject/jersey-hk2@4.0.2?type=jar",
      "externalReferences": [
        {
          "url": "https://projects.eclipse.org/projects/ee4j.jersey/project/jersey-hk2",
          "type": "website"
        },
        {
          "url": "https://ci.eclipse.org/jersey",
          "type": "build-system"
        },
        {
          "url": "http://localhost",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/project/jersey-hk2",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.hk2/hk2-locator@4.0.0-M3?type=jar",
      "publisher": "Oracle Corporation",
      "group": "org.glassfish.hk2",
      "name": "hk2-locator",
      "version": "4.0.0-M3",
      "description": "ServiceLocator Default Implementation",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "b4208d604d4c23e3acae9f6300aafd4c"
        },
        {
          "alg": "SHA-1",
          "content": "64a198be0ce5a86c6e6e439188fc4e7187416588"
        },
        {
          "alg": "SHA-256",
          "content": "290027395d95bfcbb5f40c992376a6f21c75bf63c9c8d4df3cfc034ba1a85ded"
        },
        {
          "alg": "SHA-512",
          "content": "cb3280c9af78f7fa19cf537448bb28be7e1981733fbf2bc1e86823288539def8c856cb915c921c9cd6ef490b39bb93aba998eb35ed967aa3c0a11d7a65b05cad"
        },
        {
          "alg": "SHA-384",
          "content": "a0a74b0787b7240632ac04fb635bfb8cdb8ce7529ebeca5a03f3157ee5ccdd902ce83300995eff2e44ff5d58e0ed330b"
        },
        {
          "alg": "SHA3-384",
          "content": "f260e2b328e7be64987ac4b2f72b7f627eac5dbfb318ae40ae5c7cd08a5cb4a8e2b60cd2e5863bfb54782200563a7f6c"
        },
        {
          "alg": "SHA3-256",
          "content": "a3bd95277a4f2f33a9e8b0fec11ef6b7e7e57efe6454bb35a8b9a9474c7d8818"
        },
        {
          "alg": "SHA3-512",
          "content": "1a4eb5c85a9346ee214f5f9afc1a9fa5bc9b0d8bcf4261370a6dc6efd595b3a3ff50ad89eb85a4c6693ebf86590d362d58fbffdc5c399c7746524caef25ad24b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.hk2/hk2-locator@4.0.0-M3?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/eclipse-ee4j/glassfish-hk2/hk2-locator",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/glassfish-hk2/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/glassfish-hk2-dev/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/glassfish-hk2/hk2-locator",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.hk2.external/aopalliance-repackaged@4.0.0-M3?type=jar",
      "publisher": "Oracle Corporation",
      "group": "org.glassfish.hk2.external",
      "name": "aopalliance-repackaged",
      "version": "4.0.0-M3",
      "description": "Dependency Injection Kernel",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "265ded5507ff1db7cd2184d4846fc85b"
        },
        {
          "alg": "SHA-1",
          "content": "71779579326f1648524a86fdee77bdf1d2d45336"
        },
        {
          "alg": "SHA-256",
          "content": "65c0abb946d2ab3a1237c610f24bf15f04696151e9cafbe1afa6cee52fbed5ed"
        },
        {
          "alg": "SHA-512",
          "content": "e45784cc801cef6726c4c74ba6158f34de84b6ee7b3c4823be16b9a53aee22f0b251c8c0144953c8c09d4e8169c2134a1530baece93169efbb33c0c118af7de5"
        },
        {
          "alg": "SHA-384",
          "content": "de80c2803aafdedaddb185277ca9946c5ea24e8f3f10f172abedf8cf9fd2de61d4ac022ae466cbe9fc54ffff3a43acd8"
        },
        {
          "alg": "SHA3-384",
          "content": "af3ce290b4aecad2cf4f5b163a484013732d2891b640b927169e9dfdaec19254404b5ce9a0162842a1d915024fa5752a"
        },
        {
          "alg": "SHA3-256",
          "content": "9043468d2fa46fd4b156845bcfa8a5ed350dcab0929a970aa2d4f885c62f69c6"
        },
        {
          "alg": "SHA3-512",
          "content": "88722b8a289ecbe9753c9801ffadc909089879b4c3d71edd4ec298eb5d6fddb5a6bd0d56fa01ae6fad5f9826460d0809a6d0f4aabc009a1d2d4377f03fb507ed"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.hk2.external/aopalliance-repackaged@4.0.0-M3?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/eclipse-ee4j/glassfish-hk2/external/aopalliance-repackaged",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/glassfish-hk2/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/glassfish-hk2-dev/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/glassfish-hk2/external/aopalliance-repackaged",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.hk2/hk2-api@4.0.0-M3?type=jar",
      "publisher": "Oracle Corporation",
      "group": "org.glassfish.hk2",
      "name": "hk2-api",
      "version": "4.0.0-M3",
      "description": "HK2 API module",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "4a7799f8b0c76121478fdbfd3fa481cb"
        },
        {
          "alg": "SHA-1",
          "content": "4b9520d9c4ecdc8b688a50968c19b54b55fc1274"
        },
        {
          "alg": "SHA-256",
          "content": "66f859916e6a7de3622973acf7f672a895c9bac81622080dfbb95ac9b021b1f8"
        },
        {
          "alg": "SHA-512",
          "content": "f202d82a2493430495b7c0d2006f21b3435f5367b6e24f7ef41736c2fb0d551a8ab4a269808dec7f8c8df8b3bb62fc05f148740ca5b4f642becac6216971ba12"
        },
        {
          "alg": "SHA-384",
          "content": "be02adf52ba9a8cfc1fa5792b4b2ede0a577e8f55d7589740c563ddd3c6fcbabf9ed9d9a310f5f8ac4aac91b09cecc58"
        },
        {
          "alg": "SHA3-384",
          "content": "0c5d90d77991c80953945914bbc2cf22420765396edf899863f16dc50527cb251c04c8e3ee6b68a44e657ce76a97c7e3"
        },
        {
          "alg": "SHA3-256",
          "content": "25692ba0b74506800453bed8bc69f98b6b8ebe75cf78984cb5af1047a0e3f028"
        },
        {
          "alg": "SHA3-512",
          "content": "e4d89788416d7f29a91758f03715fc3bc5c85023bc0e0f2093852d72c0437308bb53e71c5710f6e8f0841a1eaece0af1351ea0bce5ca075f9b2c19af8508b9d6"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.hk2/hk2-api@4.0.0-M3?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/eclipse-ee4j/glassfish-hk2/hk2-api",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/glassfish-hk2/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/glassfish-hk2-dev/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/glassfish-hk2/hk2-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.hk2/hk2-utils@4.0.0-M3?type=jar",
      "publisher": "Oracle Corporation",
      "group": "org.glassfish.hk2",
      "name": "hk2-utils",
      "version": "4.0.0-M3",
      "description": "HK2 Implementation Utilities",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "8bc6984bd681f30286f4d95ee8795b61"
        },
        {
          "alg": "SHA-1",
          "content": "d0017a4fffdb8184582d579c15e4d90765e4d11b"
        },
        {
          "alg": "SHA-256",
          "content": "ba7087827fe89af3d824fc26556c985ce9afa0cc30faa24e8b65145ca0fefcf1"
        },
        {
          "alg": "SHA-512",
          "content": "b39a525b64d012ae99e09809ecd906bab9fc98baf027005b86f964b2baf2ca455e4fca655bca1b147ddc8225b0f6abda32859beed920d59f813bf4c3a5de7a43"
        },
        {
          "alg": "SHA-384",
          "content": "08d57c36622c3cfd6471b0552653aea5194d491e7cef0a8946ebc7c26195e640c6fe54c5db4829e71f5a213294fc5a6c"
        },
        {
          "alg": "SHA3-384",
          "content": "b5d5b9bb24d31585a42052571cb6cad2b10035a3439ec6f66689dff03034cab04d81a3b0187c3917158f1e6332ae75e5"
        },
        {
          "alg": "SHA3-256",
          "content": "0d635ee61147b0fcf9ec3208926e86e14752e390f45ec26828d427a12b0cf15e"
        },
        {
          "alg": "SHA3-512",
          "content": "5280173e2349d1490362b2b320cbbd17e56f751d995ac20e2867de2c7955118c3d12f852c784e0e8dce21854c534a0c1721245e8b4ab1d96a97788a3dc006372"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.hk2/hk2-utils@4.0.0-M3?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/eclipse-ee4j/glassfish-hk2/hk2-utils",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/glassfish-hk2/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/glassfish-hk2-dev/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/glassfish-hk2/hk2-utils",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.javassist/javassist@3.30.2-GA?type=jar",
      "publisher": "Shigeru Chiba, www.javassist.org",
      "group": "org.javassist",
      "name": "javassist",
      "version": "3.30.2-GA",
      "description": "Javassist (JAVA programming ASSISTant) makes Java bytecode manipulation simple. It is a class library for editing bytecodes in Java.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "f5b827b8ddec0629cc7a6d7dafc45999"
        },
        {
          "alg": "SHA-1",
          "content": "284580b5e42dfa1b8267058566435d9e93fae7f7"
        },
        {
          "alg": "SHA-256",
          "content": "eba37290994b5e4868f3af98ff113f6244a6b099385d9ad46881307d3cb01aaf"
        },
        {
          "alg": "SHA-512",
          "content": "046c5b87732ef28540c56f88891238e49ac15fcc23e1f13e0b12de816831ba3de54e68a727b6163877a7b19b13f1362c0e6affa2664af1fdac5748632ed7a09e"
        },
        {
          "alg": "SHA-384",
          "content": "d1dfb87ac4d7797ea07098b7814190eed3aa16e86dd792916ff7f86c30ad456dd153f9ae4e77f13cee03e23dd3cfb24b"
        },
        {
          "alg": "SHA3-384",
          "content": "f70abfcb1b0d9e7903171bf52fe34b33ceffa9c53b697fabac9f2d3e02b8621446f7b2471d44e2cb70862e559b4d36b2"
        },
        {
          "alg": "SHA3-256",
          "content": "cf3f1d9150d71a6f23a749c24d355accb133991a9272110c5fa0ccff73220367"
        },
        {
          "alg": "SHA3-512",
          "content": "e294c989c20271f42a4bf0c63cbb691cb2fa284088c8a846983aa0e4948b4325131b8829b210214f539d30eb4e20b14c06f4b164208488719512739d78dfd454"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MPL-1.1"
          }
        },
        {
          "license": {
            "id": "LGPL-2.1-only"
          }
        },
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.javassist/javassist@3.30.2-GA?type=jar",
      "externalReferences": [
        {
          "url": "https://www.javassist.org/",
          "type": "website"
        },
        {
          "url": "https://repository.jboss.org/nexus/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://jira.jboss.org/jira/browse/JASSIST/",
          "type": "issue-tracker"
        },
        {
          "url": "scm:git:git@github.com:jboss-javassist/javassist.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/jakarta.annotation/jakarta.annotation-api@3.0.0?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "jakarta.annotation",
      "name": "jakarta.annotation-api",
      "version": "3.0.0",
      "description": "Jakarta Annotations API",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "7faffaab962918da4cf5ddfd76609dd2"
        },
        {
          "alg": "SHA-1",
          "content": "54f928fadec906a99d558536756d171917b9d936"
        },
        {
          "alg": "SHA-256",
          "content": "b01f55552284cfb149411e64eabca75e942d26d2e1786b32914250e4330afaa2"
        },
        {
          "alg": "SHA-512",
          "content": "2bd5a16684c4e8144897ba6dc467628d1b8a85326235240e4c20101b6df3681d23aeebc30ca99e395ec848f33cb5244085031b2a0fbce746c8ede7148a5e7c1d"
        },
        {
          "alg": "SHA-384",
          "content": "1a12cb78019d310eb08314f863c2a0e48aa2845bde844f8204e653ec50713bf135cc58cce882e14ef631327952b5ad99"
        },
        {
          "alg": "SHA3-384",
          "content": "a0dd7dd32e8dc5ed679589f6066f16593b52334b9947a71381aeab44b3cbe295ec24dfef4fbfa5514ba24ea60fe042a9"
        },
        {
          "alg": "SHA3-256",
          "content": "6ae915a05b483f75c51f3a109cf368842d186b2996758b8a106377a7a9485c12"
        },
        {
          "alg": "SHA3-512",
          "content": "52f611aa0a98812e525be2b9d5a5712aef660598cff64282dbd9afc237560f442ab745fc95c919216f9cb4197c224ba6c7317282962c638fee956925bfa031c0"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl": "pkg:maven/jakarta.annotation/jakarta.annotation-api@3.0.0?type=jar",
      "externalReferences": [
        {
          "url": "https://projects.eclipse.org/projects/ee4j.ca",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/jakartaee/common-annotations-api/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/ca-dev",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/jakartaee/common-annotations-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/jakarta.json/jakarta.json-api@2.1.3?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "jakarta.json",
      "name": "jakarta.json-api",
      "version": "2.1.3",
      "description": "Jakarta JSON Processing defines a Java(R) based framework for parsing, generating, transforming, and querying JSON documents.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "596997520702889d4afef9cffbd4b71a"
        },
        {
          "alg": "SHA-1",
          "content": "4febd83e1d9d1561d078af460ecd19532383735c"
        },
        {
          "alg": "SHA-256",
          "content": "bc934142805ea1d794f1440563965a3861a2a9fb7414ecd3fe44f26500734414"
        },
        {
          "alg": "SHA-512",
          "content": "5a6566f0ceaa8b0ca40ae643942c0d46acd118a3b4d85af5f3a977e738465e8c8d4bc977f0c3e4b51f4471e408c28f66dbc0b19adf61237f6f6f7fa1d0dacc31"
        },
        {
          "alg": "SHA-384",
          "content": "1a17b8a416692ba0e485d7290782b2b5c4de8cb65c2043f221381deee668953655c221dc3efa29d3c65c8b2c1fab173f"
        },
        {
          "alg": "SHA3-384",
          "content": "4c009f9fec6b1e14b2c675ee7addb49ebd047d71d7aaf31601ccea3ffe4af1d82838a3452b0e5d7c2814e27861cd3ffd"
        },
        {
          "alg": "SHA3-256",
          "content": "5b839f4645dbac0d1bc76a91e168a52574c2bb6de0b7e92cd14aafd0ad6a28b0"
        },
        {
          "alg": "SHA3-512",
          "content": "fedcd8618f44ab0b771bef7d2fcb61d49021eb2e592d8d3058d3f57e7fe0ed1a9239cac859fe534dd0629aaf577fb8f77841412dbb3ae58b8d8cd0754da2ec48"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0",
            "url": "https://www.eclipse.org/legal/epl-2.0"
          }
        },
        {
          "license": {
            "name": "GNU General Public License, version 2 with the GNU Classpath Exception",
            "url": "https://projects.eclipse.org/license/secondary-gpl-2.0-cp"
          }
        }
      ],
      "purl": "pkg:maven/jakarta.json/jakarta.json-api@2.1.3?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/eclipse-ee4j/jsonp",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/ee4j/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jsonp",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.eclipse.parsson/jakarta.json@1.1.7?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.eclipse.parsson",
      "name": "jakarta.json",
      "version": "1.1.7",
      "description": "Default provider for Jakarta JSON Processing",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "68b696da0b95318047ff3a2403bfd86d"
        },
        {
          "alg": "SHA-1",
          "content": "91a668f91f296fe82c6a25cb0175b733e9e05fe7"
        },
        {
          "alg": "SHA-256",
          "content": "5905f52283a7491e06ba58556103d45c3199a42602abcd36d510ceda65490ff0"
        },
        {
          "alg": "SHA-512",
          "content": "32d57ea7b52edd91967e13f2812ddea03785d3b2b75f1a35e7567ece81b95b015ce9372fe044d8cdfe5a2cfe27df5a124cb653f5750332a7a9f583c9c429e076"
        },
        {
          "alg": "SHA-384",
          "content": "9b41d27f58cd2f3f787a7ff744f366b5cfe2f23892983bee8305a45c75c846da935155e67132b16e510261c6573611ec"
        },
        {
          "alg": "SHA3-384",
          "content": "2fa091c2f4c818e1296eb3652b212a866c86a804e003cfa81f7c2a328e38b4cfeea3601899321ea3a23671bc8dd5c032"
        },
        {
          "alg": "SHA3-256",
          "content": "6c61679b2f56bf5921c12244452f1dd2a555f73888258f66b8af026f71bfcd87"
        },
        {
          "alg": "SHA3-512",
          "content": "a39ffc271743b687342ef32a2b5be3f5cbfe97b6a09b9832ce5262008af6f77e7fd2f249f141a6ffc295f9e02a444f090dc5187db8b8744d0c32ece338e261c7"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0",
            "url": "https://www.eclipse.org/legal/epl-2.0"
          }
        },
        {
          "license": {
            "name": "GNU General Public License, version 2 with the GNU Classpath Exception",
            "url": "https://projects.eclipse.org/license/secondary-gpl-2.0-cp"
          }
        }
      ],
      "purl": "pkg:maven/org.eclipse.parsson/jakarta.json@1.1.7?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/eclipse-ee4j/parsson/parsson-bundles/jakarta.json",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/ee4j/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/parsson/parsson-bundles/jakarta.json",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.zaxxer/HikariCP@7.0.2?type=jar",
      "publisher": "Zaxxer.com",
      "group": "com.zaxxer",
      "name": "HikariCP",
      "version": "7.0.2",
      "description": "Ultimate JDBC Connection Pool",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "c36937c742c20cbdc7bcb47019e33151"
        },
        {
          "alg": "SHA-1",
          "content": "c2b43c946b86a14a96342379e22b004c56c6166d"
        },
        {
          "alg": "SHA-256",
          "content": "f1e612fa27345be3107a85431e8a8aeb205c15364ab2f2d411e40a9d7bb08095"
        },
        {
          "alg": "SHA-512",
          "content": "fab69440ecf96687ac9cd69d19503a824f7bec74d97329ee6f8568981200799a1503df5517b9e0322a8d139fc71d6af193314890716ff8f0fd52163dad6f0c6c"
        },
        {
          "alg": "SHA-384",
          "content": "b14c735ebeeb00e113c159cbc22b579ebe9676949a0c50f478bdc54daad8370d13954fc8df7b751ce6b3ab978fbfc43c"
        },
        {
          "alg": "SHA3-384",
          "content": "ecbcb443c087f455cc0e15f65736f9559a79e6375c4686830ede2e653d9dc79c36bb99b537f242f0f8a8acf3d5f22d56"
        },
        {
          "alg": "SHA3-256",
          "content": "3ff38f8630222d165d6ac18696a780e19d8e70019210a59a1dbff293de0b2db2"
        },
        {
          "alg": "SHA3-512",
          "content": "7ca91f467a107c528c8da8ea75a3503d8aa88fc4ac521e2d5d0359c28c4f8997bf472bc0445089a77f1a0efa0513fd9304de9bfd6ed4b14288b87461046b2e1b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.zaxxer/HikariCP@7.0.2?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/brettwooldridge/HikariCP",
          "type": "website"
        },
        {
          "url": "https://github.com/brettwooldridge/HikariCP/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/brettwooldridge/HikariCP",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.mindrot/jbcrypt@0.4?type=jar",
      "group": "org.mindrot",
      "name": "jbcrypt",
      "version": "0.4",
      "description": "OpenBSD-style Blowfish password hashing for Java",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "d2b39d874e0d512f85386a72b0083682"
        },
        {
          "alg": "SHA-1",
          "content": "af7e61017f73abb18ac4e036954f9f28c6366c07"
        },
        {
          "alg": "SHA-256",
          "content": "e183f6f59404fc1e12073cfea4ace7ea103c900463cd21fb609a7c617ecdf624"
        },
        {
          "alg": "SHA-512",
          "content": "95ffe1f6593f83da047ff289a52b5ef73adcaca4a9a990a47744fbd50a52fce39958c17ed393e95d64093b2acbcaba39ba0b5b983a2e0ad98ce5c6e9282a67cd"
        },
        {
          "alg": "SHA-384",
          "content": "66a24af2134e6fcee1f4232c2c4bab43ab97d0c8ffbbc009f9bb0e5ef2a7d8795a6da3c6b47c583675b98036958aa729"
        },
        {
          "alg": "SHA3-384",
          "content": "33cf5e13897f25c525017888e7fcd2faf9a0f25135be03a65dd154feb11455e33c1df31963470b2ecaaba5267f6ad652"
        },
        {
          "alg": "SHA3-256",
          "content": "a347c842385e1d76780f9afe2200a7b9815bcd873b2a9fdd2652d0b0a5e0d324"
        },
        {
          "alg": "SHA3-512",
          "content": "5a71c6f1fde98865302e8c9ee6c99ace9efa220c0193bcdd56423015d1c73e54bd65f19a9a3ba3199b242589eb9ccc96b1d6c0d413387f8e8fbed7c691fc8790"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://www.isc.org/licenses/"
          }
        }
      ],
      "purl": "pkg:maven/org.mindrot/jbcrypt@0.4?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/djmdjm/jBCrypt",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/djmdjm/jBCrypt.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.nimbusds/oauth2-oidc-sdk@11.37.2?type=jar",
      "publisher": "Connect2id Ltd.",
      "group": "com.nimbusds",
      "name": "oauth2-oidc-sdk",
      "version": "11.37.2",
      "description": "OAuth 2.0 SDK with OpenID Connection extensions for developing client and server applications.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "a0896c7feee39572a49bac9b5790974b"
        },
        {
          "alg": "SHA-1",
          "content": "09034768074fa4810a93fa0e9df7293c65b83f83"
        },
        {
          "alg": "SHA-256",
          "content": "b66e74746dcf516d77f20344e6fbcbcffe1b483b5cf1ad41ea81cec83cb27b3c"
        },
        {
          "alg": "SHA-512",
          "content": "a0f30dac78cce23cd1a8d9c0f6af2707722b0b36fb6ea8ac9afbd1051e121182a7fd82f6107ea25c6b4b4d8c5aca56f40dd0ddc62cd9f029bd1a068e561277ac"
        },
        {
          "alg": "SHA-384",
          "content": "08e4727e78ed1fbb6055620f5032e8ef4b8f15f8d0a4d49420476745840b935cb42cf1dc3e0b4455888ec0c7a28f67eb"
        },
        {
          "alg": "SHA3-384",
          "content": "4edb0ef58b3ab707591cca1707a43ed1b455cd6b73f48bc30dd48fcfc801aa582332fdd1eccac53af5ac4d28834acc08"
        },
        {
          "alg": "SHA3-256",
          "content": "254d946f4d8fc7fb08a7049452aff0bc12c6407ac6be4b4a8ff466312448a6a1"
        },
        {
          "alg": "SHA3-512",
          "content": "0c91de6b9a56707a1b7046462cb01db30a57b951a021000658e445fd9f30644e4a9d648c402ac7b29499aea31fc36e6f4b45297ef527550a8e7a7757c418a25c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.nimbusds/oauth2-oidc-sdk@11.37.2?type=jar",
      "externalReferences": [
        {
          "url": "https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.github.stephenc.jcip/jcip-annotations@1.0-1?type=jar",
      "group": "com.github.stephenc.jcip",
      "name": "jcip-annotations",
      "version": "1.0-1",
      "description": "A clean room implementation of the JCIP Annotations based entirely on the specification provided by the javadocs.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "d62dbfa8789378457ada685e2f614846"
        },
        {
          "alg": "SHA-1",
          "content": "ef31541dd28ae2cefdd17c7ebf352d93e9058c63"
        },
        {
          "alg": "SHA-256",
          "content": "4fccff8382aafc589962c4edb262f6aa595e34f1e11e61057d1c6a96e8fc7323"
        },
        {
          "alg": "SHA-512",
          "content": "02fcd16a30d0e68b3e9e4899731181c6abb7117baa15c096ca940e01dde08bb86101cbeae552c497f8a90d923b5fa2f2b6f3850baf8dc94dbd399887924a9069"
        },
        {
          "alg": "SHA-384",
          "content": "88b0ecfde391a3d8468349c70e1539569768dfac3233dfe0b4660904df04e6c6bf26ed9c0784b9b22c122c3448e2a6b6"
        },
        {
          "alg": "SHA3-384",
          "content": "487b53f48b55b98a61ae60abedc43543887944867aa6bcb78d5ed46e2d0d7c19510c5fcadc362d939313feafdcfc55e1"
        },
        {
          "alg": "SHA3-256",
          "content": "3e79c8f58865d2d58a5311a8bb45772007f07e7f3ed2780784d1e4382dc934d0"
        },
        {
          "alg": "SHA3-512",
          "content": "ff32665e1b6d8176ccc7e8c836ca7343c2603dab053e42d79b4258d51a14ff63933c67d24034169ac91e11ebda21cc2c84a2a540072e656d2a8e6fcea7808421"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.github.stephenc.jcip/jcip-annotations@1.0-1?type=jar",
      "externalReferences": [
        {
          "url": "http://stephenc.github.com/jcip-annotations",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "http://github.com/stephenc/jcip-annotations/issues",
          "type": "issue-tracker"
        },
        {
          "url": "http://github.com/stephenc/jcip-annotations/tree/master/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.nimbusds/content-type@2.3?type=jar",
      "publisher": "Connect2id Ltd.",
      "group": "com.nimbusds",
      "name": "content-type",
      "version": "2.3",
      "description": "Java library for Content (Media) Type representation",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "f0fc0d6be73e838863e2197c03a27c3f"
        },
        {
          "alg": "SHA-1",
          "content": "e3aa0be212d7a42839a8f3f506f5b990bcce0222"
        },
        {
          "alg": "SHA-256",
          "content": "60349793e006fba96b532cb0c21e10e969fe0db8d87f91c3b9eaf82ba2998895"
        },
        {
          "alg": "SHA-512",
          "content": "58f7fe3b4303cecd6eac73c3345af71536479ce4bc38c88153bdcf6176a7cf5a0875420ea4a6024b4e734b78de08a8e544014b435cb63416c759b957ad3818e4"
        },
        {
          "alg": "SHA-384",
          "content": "9dbe31f543aaf807093fe1dd18a0ed33346252e2f6fce598e1b193b9d73fcebf79608fce6a620ede8ea7adf45f1a7422"
        },
        {
          "alg": "SHA3-384",
          "content": "67b8b5d051230739ee85678006758450cd6510c5fb9a6b3134d43f644c2d70bc6dc3cff6133b132b5b158a1f346880a9"
        },
        {
          "alg": "SHA3-256",
          "content": "b8046b3dd12321400b4643ff0c47ea5c1e77d6252177bdd8be6f0e0b234c80bf"
        },
        {
          "alg": "SHA3-512",
          "content": "734a6a5a383aac8dcfaca09c8e37637f74334ce2d5c050b519277ad7c20f065fad44b5a6417cdc32d6cd43f80c0e1e0c37d9daa9279651facb6c38cb88376396"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.nimbusds/content-type@2.3?type=jar",
      "externalReferences": [
        {
          "url": "https://bitbucket.org/connect2id/nimbus-content-type",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://bitbucket.org/connect2id/nimbus-content-type",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/net.minidev/json-smart@2.6.0?type=jar",
      "publisher": "Chemouni Uriel",
      "group": "net.minidev",
      "name": "json-smart",
      "version": "2.6.0",
      "description": "JSON (JavaScript Object Notation) is a lightweight data-interchange format. It is easy for humans to read and write. It is easy for machines to parse and generate. It is based on a subset of the JavaScript Programming Language, Standard ECMA-262 3rd Edition - December 1999. JSON is a text format that is completely language independent but uses conventions that are familiar to programmers of the C-family of languages, including C, C\u002B\u002B, C#, Java, JavaScript, Perl, Python, and many others. These properties make JSON an ideal data-interchange language.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "fde8981f31c3b972355a5adf26a9ec65"
        },
        {
          "alg": "SHA-1",
          "content": "5f858a43a325a8673da6869ab2bc787a1bcb2244"
        },
        {
          "alg": "SHA-256",
          "content": "1ae4b561458afb540be8ec5c6dbb4f2e715a319a7ae64854998aaf924770d61b"
        },
        {
          "alg": "SHA-512",
          "content": "fc8269826394dbca52fa9366f28226e5e37bc64c1268d7a49e2dea7fb2c62da2be8c8bcf362da5561a3cf413816019d8c4f95199a585eb8b13e8a8b634259a00"
        },
        {
          "alg": "SHA-384",
          "content": "13db694eb1f73778d628452b6840bff4c044101f2dcf7c3782f4bb48798fbae8b752cb8f7536b5173e896de4c225c3a6"
        },
        {
          "alg": "SHA3-384",
          "content": "86c0dc99d98a7c70015b6158f76253cd16a4b2bfb754ea6526991860e2536880b95130044cbe953865b284eebadad781"
        },
        {
          "alg": "SHA3-256",
          "content": "edee009cc2977ff4c2aae9098d14e7e651168dca1735726772d6bda5b66e2e98"
        },
        {
          "alg": "SHA3-512",
          "content": "23f8d5a59cd7111680f65d9fc2ed80b9876ab3094a2048526b376ae16ad855680b1c90264c23c52468efe0646a30db8a22f6b279ec67e047f3951b55a6d0d104"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/net.minidev/json-smart@2.6.0?type=jar",
      "externalReferences": [
        {
          "url": "https://urielch.github.io/",
          "type": "website"
        },
        {
          "url": "https://github.com/netplex/json-smart-v2",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/net.minidev/accessors-smart@2.6.0?type=jar",
      "publisher": "Chemouni Uriel",
      "group": "net.minidev",
      "name": "accessors-smart",
      "version": "2.6.0",
      "description": "Java reflect give poor performance on getter setter an constructor calls, accessors-smart use ASM to speed up those calls.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "0ad72639eea293193f68898da9b0b902"
        },
        {
          "alg": "SHA-1",
          "content": "2d96f1d9b6ab7f13261aa81b15703574185747a0"
        },
        {
          "alg": "SHA-256",
          "content": "222c9f547bb20a99fc486403a398352d1306fb671b38abd7ecab6401df170e61"
        },
        {
          "alg": "SHA-512",
          "content": "220eb28c94fdd15e7ac9b7e80d238a9871fc78db3127db9ca6207251e0e5563c62cfd5ab7625d69eb9e2563fc726e71a25562a4081f089f564dc206e0569665f"
        },
        {
          "alg": "SHA-384",
          "content": "c861d37b7a3a5d3d42a699239e3437cf094a8359b2371bacce5f7a17da02f9a0eb65ca2456d0168c4870be36bddc135f"
        },
        {
          "alg": "SHA3-384",
          "content": "4fa8ea0794e22ccc34ecc9b73cb9cad062cd82561227b15f1261541180d584ba745611ff31e98653e4f5d481846de361"
        },
        {
          "alg": "SHA3-256",
          "content": "1b170bf2e79abd9a77bb330c51b73d695c17e5db41817efab22294f4ee65a2c1"
        },
        {
          "alg": "SHA3-512",
          "content": "224c001707e5b478f6503b88ab8c07b94f82bfb02bc81094a3ffdcf05d29f1377a8e518b223f9282d0147f386f13faf319692002d59f4c6f452b282aa6b000c0"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/net.minidev/accessors-smart@2.6.0?type=jar",
      "externalReferences": [
        {
          "url": "https://urielch.github.io/",
          "type": "website"
        },
        {
          "url": "https://github.com/netplex/json-smart-v2",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.nimbusds/lang-tag@1.7?type=jar",
      "publisher": "Connect2id Ltd.",
      "group": "com.nimbusds",
      "name": "lang-tag",
      "version": "1.7",
      "description": "Java implementation of \u0022Tags for Identifying Languages\u0022 (RFC 5646)",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "31b8a4f76fdbf21f1d667f9d6618e0b2"
        },
        {
          "alg": "SHA-1",
          "content": "97c73ecd70bc7e8eefb26c5eea84f251a63f1031"
        },
        {
          "alg": "SHA-256",
          "content": "e8c1c594e2425bdbea2d860de55c69b69fc5d59454452449a0f0913c2a5b8a31"
        },
        {
          "alg": "SHA-512",
          "content": "494267766c974ce16a99cb221953edc91fde8db0c920230758ecea0ea9d3006e95d86ad46f7a9d61b810d85b0fa6da9a3ce2b507cdbe4be320c499eaea93666b"
        },
        {
          "alg": "SHA-384",
          "content": "fdc2cde39a1b07a2542cbc07222afd6292ae19cb1f9ae008476f7ec1b8ebe1e3e84aca08e47e1ef81887a23ac5267d00"
        },
        {
          "alg": "SHA3-384",
          "content": "b0e673087533f60173a11a55b0fde554c0830e7b3b6609e1ea6546de19fc9a97fbfe6eee73580d09b2de66989d0603c7"
        },
        {
          "alg": "SHA3-256",
          "content": "ea208d4eb55212ce9835a9be60396861b0fc33f4161efee3736c3e7159acb9f7"
        },
        {
          "alg": "SHA3-512",
          "content": "450f819981d73711c30d838261ff55a7f1988c8b965c786708dc27fbd10a2018cfde82b8fee5d7d1022eacf085dfdabe22d9de92462eba80e2c15a116c3c73ed"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.nimbusds/lang-tag@1.7?type=jar",
      "externalReferences": [
        {
          "url": "https://bitbucket.org/connect2id/nimbus-language-tags",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://bitbucket.org/connect2id/nimbus-language-tags.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.nimbusds/nimbus-jose-jwt@10.9?type=jar",
      "publisher": "Connect2id Ltd.",
      "group": "com.nimbusds",
      "name": "nimbus-jose-jwt",
      "version": "10.9",
      "description": "Java library for Javascript Object Signing and Encryption (JOSE) and JSON Web Tokens (JWT)",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "5982206678d76d60ec3744d907de7f31"
        },
        {
          "alg": "SHA-1",
          "content": "59fa8df26e59665566d9795036e005d149d1fcf3"
        },
        {
          "alg": "SHA-256",
          "content": "64d613d91140bad0dab8f0c41960f919ec8705a9ced9418146598b4b3ae71349"
        },
        {
          "alg": "SHA-512",
          "content": "da670966aeb3c1413a425f6856756c40bcab38a8e65927d115543d9c8b1c9a5ff9897510d29727582728259236421a5e8c60d796f1b71c6453581277e9310aa7"
        },
        {
          "alg": "SHA-384",
          "content": "a6afedef07c724327a21571fd1da8137857494be216763086d79dec4d16932cc5bc9066f9f673aa35d38bd5a79f7694d"
        },
        {
          "alg": "SHA3-384",
          "content": "545e24068e9b805a82915a6009d1316ed5f291ac9fad79f7f425ef58d0777cf732cfd0e609271ea781cecce591a94276"
        },
        {
          "alg": "SHA3-256",
          "content": "d954694ccd716ed8c4ea24933a76fb31e30861e37ca198dfb4d007996b9801f6"
        },
        {
          "alg": "SHA3-512",
          "content": "37ef2eb4ebbdfc6cb400e376c36de141fc5dc9a6d83c259866d336c2ed97c1ffd0dbf005b293ebf53ce70a9aca7ea4329de26df9be3ed30eefd79b9c74f8e854"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.nimbusds/nimbus-jose-jwt@10.9?type=jar",
      "externalReferences": [
        {
          "url": "https://bitbucket.org/connect2id/nimbus-jose-jwt",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://bitbucket.org/connect2id/nimbus-jose-jwt",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml.jackson.jakarta.rs/jackson-jakarta-rs-base@2.21.3?type=jar",
      "publisher": "FasterXML",
      "group": "com.fasterxml.jackson.jakarta.rs",
      "name": "jackson-jakarta-rs-base",
      "version": "2.21.3",
      "description": "Pile of code that is shared by all Jackson-based Jakarta-RS providers.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "c446e2d1cd311b0635ea9bc0dc9d6cc2"
        },
        {
          "alg": "SHA-1",
          "content": "ee9631cf82c7fc636f7d8acce6fd256ddc459092"
        },
        {
          "alg": "SHA-256",
          "content": "ea1e80963511a61ecfdb48bab893795cdcdcd4dd90cb05d7c8d6c55189032a3a"
        },
        {
          "alg": "SHA-512",
          "content": "89a48b66224af43fba046abac3c801d77417f476f97b2029e0a05d633a5a0ac416d35bc861ab5a777c4660832639a733e53447abfd886dc7f49b2ba4d4c12fc8"
        },
        {
          "alg": "SHA-384",
          "content": "9159e8db627775902f370d4c04c65a2da9bebfac4f927a825218c8e02dd95238d6198b86e3b92c16afc51e16b9978e10"
        },
        {
          "alg": "SHA3-384",
          "content": "fac1f88fb6ef4104d69a4f035df9841585a8ec5c164c6c8ddbe6dd5288f09478624a4367699e4736c1e03011adc7558e"
        },
        {
          "alg": "SHA3-256",
          "content": "88da7cb68646a01c2547d8d3957316ec5bfdf6b9c0e54ebc724ffde173cdfc9c"
        },
        {
          "alg": "SHA3-512",
          "content": "0b8ac6f7839d9f6af0fd387ed41c972ff0a7b105525bac2e2c386f65659710404fcefaa9c54b0c6a01d1a97319837c48195749cfaa186c1d2c5ef9e7c8fac3dd"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.jakarta.rs/jackson-jakarta-rs-base@2.21.3?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/FasterXML/jackson-jakarta-rs-providers/jackson-jakarta-rs-base",
          "type": "website"
        },
        {
          "url": "https://central.sonatype.com/api/v1/publisher",
          "type": "distribution"
        },
        {
          "url": "https://github.com/FasterXML/jackson-jakarta-rs-base/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/FasterXML/jackson-jakarta-rs-providers/jackson-jakarta-rs-base",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml.jackson.jakarta.rs/jackson-jakarta-rs-json-provider@2.21.3?type=jar",
      "publisher": "FasterXML",
      "group": "com.fasterxml.jackson.jakarta.rs",
      "name": "jackson-jakarta-rs-json-provider",
      "version": "2.21.3",
      "description": "Functionality to handle JSON input/output for Jakarta-RS implementations (like Jersey and RESTeasy) using standard Jackson data binding.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "daea0ba7d06a82ac0e65acb0b5d16ae7"
        },
        {
          "alg": "SHA-1",
          "content": "662c4ad495411a79f6b18dfc5e9e172350fd168b"
        },
        {
          "alg": "SHA-256",
          "content": "8275308b37a6c4f9b0f4b0b599255a1eaf9b3e3c4a5248e1c9a311b7e4d254bf"
        },
        {
          "alg": "SHA-512",
          "content": "7016e4eb734fc6e827788345b332a96c0427c2086d183b0249c30da2b793465514603c114bad8d943e358211d677067d839cbf74718358cc7cad03754f18416a"
        },
        {
          "alg": "SHA-384",
          "content": "ba6d33c1e6383490ea4039cbbccd510c8b0c6aa65cef3702878bab4d92c7681158a72157d23e8be5d2cc626b62950f8d"
        },
        {
          "alg": "SHA3-384",
          "content": "44e13412c1c755d886db09605f55df7e3defafaf32df9d1f15732fbec92997aea32ab854c910440998ebf39ba76b69bc"
        },
        {
          "alg": "SHA3-256",
          "content": "7793a25a88e1cbf3735689dc044ef93933c523256cf3965b16312ab8e1a0a383"
        },
        {
          "alg": "SHA3-512",
          "content": "da340c3b64c21ac2462e37186678e19c57106a072125fcafb7cce8bc71294990e71e4805784d501bbe1bbad48ef3b0318a56f6a4ffe59b74fb61fee733dfa8cf"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.jakarta.rs/jackson-jakarta-rs-json-provider@2.21.3?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/FasterXML/jackson-jakarta-rs-providers/jackson-jakarta-rs-json-provider",
          "type": "website"
        },
        {
          "url": "https://central.sonatype.com/api/v1/publisher",
          "type": "distribution"
        },
        {
          "url": "https://github.com/FasterXML/jackson-jakarta-rs-json-provider/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/FasterXML/jackson-jakarta-rs-providers/jackson-jakarta-rs-json-provider",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8@2.21.3?type=jar",
      "publisher": "FasterXML",
      "group": "com.fasterxml.jackson.datatype",
      "name": "jackson-datatype-jdk8",
      "version": "2.21.3",
      "description": "Add-on module for Jackson (https://github.com/FasterXML/jackson) to support JDK 8 data types.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "6442b75807cc5c1fc96fa4f7bb2dde25"
        },
        {
          "alg": "SHA-1",
          "content": "d43500553adcacf036f24eeb8c91f2a222b7176c"
        },
        {
          "alg": "SHA-256",
          "content": "33d1960d9b50cf79dc7d891cf239415fac8a7bcb2d40b786a089f5bb92b51252"
        },
        {
          "alg": "SHA-512",
          "content": "a9dee111eef296ae8b920fda1b7ee2a152508c3015dc98ded1901230a4814774941f386dc57d8fb6c8d45d9598d443d3e99bae095c72466140f913c7c0e37a79"
        },
        {
          "alg": "SHA-384",
          "content": "0bc18619785f21f7b6ad96a825a2960d0aab55303c44ba43d7707d1f85f5b166bd1424e81ac5438721286b0be35d654e"
        },
        {
          "alg": "SHA3-384",
          "content": "cb4b8bd80cad71179fa0410b5108f97f0ce2e60f25c6db8598da9fed2728abfe035ddd1b0728a02929e22aeebfce8aae"
        },
        {
          "alg": "SHA3-256",
          "content": "abcfb90b26dcc7099a883cd35d1d46b695513f7ee17dfbd35599c3bcbf538728"
        },
        {
          "alg": "SHA3-512",
          "content": "e2a5831b732ba21501b58b02d2bbacf4d01dde54d0cb7755007da700139c647bb09a6e10040da232c4fc448176b0cd5b58913d2b358582332b7324d2f847cc66"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8@2.21.3?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/FasterXML/jackson-modules-java8/jackson-datatype-jdk8",
          "type": "website"
        },
        {
          "url": "https://central.sonatype.com/api/v1/publisher",
          "type": "distribution"
        },
        {
          "url": "https://github.com/FasterXML/jackson-modules-java8/issues",
          "type": "issue-tracker"
        },
        {
          "url": "http://github.com/FasterXML/jackson-modules-java8/jackson-datatype-jdk8",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/ch.qos.logback/logback-classic@1.5.33?type=jar",
      "publisher": "QOS.ch",
      "group": "ch.qos.logback",
      "name": "logback-classic",
      "version": "1.5.33",
      "description": "logback-classic module",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "b2e78ba53fb0172ac1c4f8ed9ed61f16"
        },
        {
          "alg": "SHA-1",
          "content": "72dcaad849d37bf2e3e0b1c986d614c30ac601b1"
        },
        {
          "alg": "SHA-256",
          "content": "6d9ab1406e884084105940fe71378b53d2fe3b4806d856945703a27216014c97"
        },
        {
          "alg": "SHA-512",
          "content": "98a50b0223eea782bcc283ebae42089f8043e5b7c90ebfa1f3f7dbc2585f7af3dcd66113453c270e77432315933861222f2c290eec8772cb36f60b91a06dd10b"
        },
        {
          "alg": "SHA-384",
          "content": "fc3729f449c9def60dd5abbb7213af16b3dcf452621659e93a5b50d65acd91e1133296faf061194c78c33daac37959dd"
        },
        {
          "alg": "SHA3-384",
          "content": "fc5cf5382096250644fe3363bd8f00e04b6e358db1995ccd1781060510d0d261b9c92bffba407abceae015564396b35e"
        },
        {
          "alg": "SHA3-256",
          "content": "594d6b66d0982e4dba094bde58d854ee70b7515b64d47cf6b81ceb295e35fd86"
        },
        {
          "alg": "SHA3-512",
          "content": "d828be7779af91f67f451271b8b95677079e4ac65af4bdbf6a4bbe2357f2c6a45bc1a2871754faf4f11bb43a1052c8d85b65f1d936436184cd8a66310c4c9217"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0",
            "url": "https://www.eclipse.org/legal/epl-2.0"
          }
        },
        {
          "license": {
            "id": "LGPL-2.1-only",
            "url": "https://www.gnu.org/licenses/old-licenses/lgpl-2.1-standalone.html"
          }
        }
      ],
      "purl": "pkg:maven/ch.qos.logback/logback-classic@1.5.33?type=jar",
      "externalReferences": [
        {
          "url": "http://logback.qos.ch/logback-classic",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/qos-ch/logback/logback-classic",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/ch.qos.logback/logback-core@1.5.33?type=jar",
      "publisher": "QOS.ch",
      "group": "ch.qos.logback",
      "name": "logback-core",
      "version": "1.5.33",
      "description": "logback-core module",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "b09630b6c5c07a3427921d6cd5f28fef"
        },
        {
          "alg": "SHA-1",
          "content": "e61819ff7baad2e37c13b65206b87059c2b18960"
        },
        {
          "alg": "SHA-256",
          "content": "48b106f3abf3498eff7e59406a15226f351cf9c625017652e63c346a07011d81"
        },
        {
          "alg": "SHA-512",
          "content": "b1448365023c11a0e613e26c669990f2f8d54bfabce5d2aac822c6a7d0339dad540312be1f2be68c2efc38f0b3962a8938b3ed7ad849160aba821e9efa781faf"
        },
        {
          "alg": "SHA-384",
          "content": "66b6f97463ad45930b4d73c9bcd378aba7b6b8da9ab41d18b9a8d7b25e518b746944a23bf8d405a16c3b45a2d2236882"
        },
        {
          "alg": "SHA3-384",
          "content": "062b50947889d61ccbe6b7f5555abe3ed5719cc413535c86fa7aaf6b0d937684418a1ec2b93b2ce1206ac808c9a98419"
        },
        {
          "alg": "SHA3-256",
          "content": "1376bce2317c848df335c1c61dc874b84a04a043c3212d118b6bbdd62aa975ed"
        },
        {
          "alg": "SHA3-512",
          "content": "a8a9529d420568cdf4910b9b686597ca7299cae4dde532ccec53920a1cbd460178cf41a6de82dd8ea524bdcbe06c90a778a79ee14bf389a033380d4923cc4a62"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0",
            "url": "https://www.eclipse.org/legal/epl-2.0"
          }
        },
        {
          "license": {
            "id": "LGPL-2.1-only",
            "url": "https://www.gnu.org/licenses/old-licenses/lgpl-2.1-standalone.html"
          }
        }
      ],
      "purl": "pkg:maven/ch.qos.logback/logback-core@1.5.33?type=jar",
      "externalReferences": [
        {
          "url": "http://logback.qos.ch/logback-core",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/qos-ch/logback/logback-core",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.owasp/security-logging-common@1.1.7?type=jar",
      "group": "org.owasp",
      "name": "security-logging-common",
      "version": "1.1.7",
      "description": "The OWASP Security Logging project provides developers and ops personnel with APIs for logging security-related events.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "9f11b84aefd2f2dcf48f8443a6213619"
        },
        {
          "alg": "SHA-1",
          "content": "4717c0c2225a2aad898b2fbdf717ec6e034d48f8"
        },
        {
          "alg": "SHA-256",
          "content": "ef9c6e4fefcf8ffcee7590239a8e8c56b192fc71c183fd8a943cf177e01b07eb"
        },
        {
          "alg": "SHA-512",
          "content": "d30fa0cce5b75758289a255946f165418786d96c5de3dbb12084d6da6bb75e556e43e002050ea114e3adb0ca15dc16e28b6218f5b2fcf993eadcb37076fb522a"
        },
        {
          "alg": "SHA-384",
          "content": "f10fbb5250849634a79477a536eb7f4a07aa66d5d1234e18caf5dbd2ab9473a4e26baa4fe381af9240eb6f9471cbb937"
        },
        {
          "alg": "SHA3-384",
          "content": "fee72e5c1e41740264f6d0f1fcfd72731c92df25af3d529509a006ce8330430390ab1139b8798c8cd6b78bcc0656d4e4"
        },
        {
          "alg": "SHA3-256",
          "content": "2c7bf9e688071240437f106b05955c298c9ee42f6c119cd918460af5a3a82a48"
        },
        {
          "alg": "SHA3-512",
          "content": "0ff1a2d6da110ca1a1713b052bab481bf052033e9cef7362a69a30e485d4a8ae8ba78ecd02278f4f81558d9cd2f12402108f82668754eade77fde3670433740c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.owasp/security-logging-common@1.1.7?type=jar",
      "externalReferences": [
        {
          "url": "https://www.owasp.org/index.php/OWASP_Security_Logging_Project",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/javabeanz/owasp-security-logging",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.owasp/security-logging-logback@1.1.7?type=jar",
      "group": "org.owasp",
      "name": "security-logging-logback",
      "version": "1.1.7",
      "description": "The OWASP Security Logging project provides developers and ops personnel with APIs for logging security-related events.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "c1148e1a96d53351f39b407185a59e06"
        },
        {
          "alg": "SHA-1",
          "content": "e609fe8531b96fcd559c9e146342aa3a56d16231"
        },
        {
          "alg": "SHA-256",
          "content": "100f5e85cbf9cf395983d85355cc17ed1d19d77176d93c58a14f339e62382168"
        },
        {
          "alg": "SHA-512",
          "content": "9bdb7df787ae5264e509082aa3b6f865ec543801587270eb582c3cb430a15f019c24a25e5a1d4df462a2dec0e6e82ce636807b055d5e72b73d67d90805e9e5d1"
        },
        {
          "alg": "SHA-384",
          "content": "8502c6a84746dfd8b9960d599cd476dd3b2c0017b2e8eba169411f7adbfea4236323ada03cb7e005812456976e673a7b"
        },
        {
          "alg": "SHA3-384",
          "content": "283c28b7760973dc0195fcd2127294c4c77a2a8c95bcc597401f00ffbd8c5367788ae9c9b6874deac178526fe93c1265"
        },
        {
          "alg": "SHA3-256",
          "content": "5a2f21e6fe6fe4bc45c439d7dbb5a16d07cc56ecf15b10a60125ee777bac1122"
        },
        {
          "alg": "SHA3-512",
          "content": "f2fa575c8838d7dcb5d11678cff9afaeb65d3bb227f501cf86541e4131c7a3cb72921d8ff8d28f91f7a6d5d3ac08d579f1fba73e8a7627c7a46371ed0a62fad9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.owasp/security-logging-logback@1.1.7?type=jar",
      "externalReferences": [
        {
          "url": "https://www.owasp.org/index.php/OWASP_Security_Logging_Project",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/javabeanz/owasp-security-logging",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/net.logstash.logback/logstash-logback-encoder@8.1?type=jar",
      "group": "net.logstash.logback",
      "name": "logstash-logback-encoder",
      "version": "8.1",
      "description": "Provides logback encoders, layouts, and appenders to log in JSON and other formats supported by Jackson",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "08a18cd6a4737221773acc1d2a5c9e3a"
        },
        {
          "alg": "SHA-1",
          "content": "aca81cdb03c48f4e0213d3e351ab1befafa9991e"
        },
        {
          "alg": "SHA-256",
          "content": "2716cb6a3e83ec2f296395b8752063f502d10a90de1a88f711f06ae5b6ecefb7"
        },
        {
          "alg": "SHA-512",
          "content": "71c73ef76d1f1562a54ba2f0fe8335f5e5a4938dc7896bcb58abd8a2b466e8c46640361d63ea475a5d37b12334335fd3e2827eda54fd17b0384027d955cdec7b"
        },
        {
          "alg": "SHA-384",
          "content": "5c332ad34b65c15869217e79c5e505502df624b0e76f47a7a9eba4d323a1ca4ea34dabb1ef75de489b329e2f94deba1d"
        },
        {
          "alg": "SHA3-384",
          "content": "cd44829a3e71f245a300f9b5a6d9b1e7838835b5f16dcb3d5c01c3cdcf23f76693abe517014bb5318d528e74a0ea150e"
        },
        {
          "alg": "SHA3-256",
          "content": "a5fd0008198d89b57aff757173ea60f1aa0e3cc2ea4ff043b2a73c5bf200244e"
        },
        {
          "alg": "SHA3-512",
          "content": "e3769fe9dbdc066f346b3f38cd3738d6d19bc5a0551164bb7593bf3dfa2deeb338d24ae664fda0b7f20510127fddb9875b4621b8f63cf76c851369711ea4e79a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        },
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/license/mit/"
          }
        }
      ],
      "purl": "pkg:maven/net.logstash.logback/logstash-logback-encoder@8.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/logfellow/logstash-logback-encoder",
          "type": "website"
        },
        {
          "url": "https://github.com/logfellow/logstash-logback-encoder",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/dev.cel/cel@0.13.0?type=jar",
      "group": "dev.cel",
      "name": "cel",
      "version": "0.13.0",
      "description": "Common Expression Language for Java. This include both the compilation and runtime packages.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "d7f4525de0d57682acbdbff10e69a3ed"
        },
        {
          "alg": "SHA-1",
          "content": "2b1601f32fb965341aa4e9e16e63d3da1f629662"
        },
        {
          "alg": "SHA-256",
          "content": "a3bc22d78affe749f81b17cce2131a3807275436157ba4d6fe3f10d8f541ea94"
        },
        {
          "alg": "SHA-512",
          "content": "217de55c94d25a5b9bcee6abd69a700931f3327669df1bac67f0cb74c44e78a3dc1201938288d087cce20e8071051008dcc0c38686bf3b291a3fa42a572efb1a"
        },
        {
          "alg": "SHA-384",
          "content": "3925228f66b5791753613d141b7bf2f2c9c017132277e13be03f2880d60b97dd02e573881d2f101d06e4f2d44f2831b0"
        },
        {
          "alg": "SHA3-384",
          "content": "9fbd591e1cf58725b3303ca147c93517b49e6573663af49195d8a3076272c7927e32aef2394137786bf0fceb2902199f"
        },
        {
          "alg": "SHA3-256",
          "content": "714de99406248c0ec88a8d58a708bca87eb0562175c2f5bd06459fd9dec60813"
        },
        {
          "alg": "SHA3-512",
          "content": "fb7353d14a30c4e5ddc6ef29aba8fd4bb45e1636b3b0693394714723d23884fde0806daf9cad31206e4eafbd90c182f7dbdea7e8f33a09f11450de0181828f9a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/dev.cel/cel@0.13.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/google/cel-java",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/google/cel-java/tree/main",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.auto.value/auto-value-annotations@1.11.0?type=jar",
      "publisher": "Google LLC",
      "group": "com.google.auto.value",
      "name": "auto-value-annotations",
      "version": "1.11.0",
      "description": "Immutable value-type code generation for Java 8\u002B.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "8fc3c2d0bbdef8927f08a5c7c829a768"
        },
        {
          "alg": "SHA-1",
          "content": "f0d047931d07cfbc6fa4079854f181ff62891d6f"
        },
        {
          "alg": "SHA-256",
          "content": "5a055ce4255333b3346e1a8703da5bf8ff049532286fdcd31712d624abe111dd"
        },
        {
          "alg": "SHA-512",
          "content": "339742a85491c0fe529e97668cd86d9c3a7a80061d226e1a51eae45fb9c466e10ee2a4d4fc3b502b96aa473ac4e03850aef8a3b744d3972a934b279ceb80816e"
        },
        {
          "alg": "SHA-384",
          "content": "626c76525b939a087be13919b760b447ef6b8668004634650e9c98105c7b31412c205e022a8ba15ea7bc1c7061a6367c"
        },
        {
          "alg": "SHA3-384",
          "content": "f5c85d8934f52d108217ce20c0641c7692023c657049e40b4916185cd3f9d4386f4404dbc13a0694c9bb13fdf9b687e5"
        },
        {
          "alg": "SHA3-256",
          "content": "549eac3adc58ec5271c45ff9390bbfc0b30c3af27a8d74392ca0a46c19062ed7"
        },
        {
          "alg": "SHA3-512",
          "content": "9f65f28e7b022ea782b45939fd1170d6d0a175f639ca8cf66363f87390b642046da5d5bb0c8adc679b6b9533c9d8cd4b4dfefb7f09d6fb5028219c96fb37d508"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.auto.value/auto-value-annotations@1.11.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/google/auto/tree/main/value",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "http://github.com/google/auto/issues",
          "type": "issue-tracker"
        },
        {
          "url": "http://github.com/google/auto",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.guava/guava@33.5.0-jre?type=jar",
      "group": "com.google.guava",
      "name": "guava",
      "version": "33.5.0-jre",
      "description": "Guava is a suite of core and expanded libraries that include utility classes, Google\u0027s collections, I/O classes, and much more.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "d9fbf39a41a5bab891348f07668e18c5"
        },
        {
          "alg": "SHA-1",
          "content": "8699de25f2f979108d6c1b804a7ba38cda1116bc"
        },
        {
          "alg": "SHA-256",
          "content": "1e301f0c52ac248b0b14fdc3d12283c77252d4d6f48521d572e7d8c4c2cc4ac7"
        },
        {
          "alg": "SHA-512",
          "content": "994a4dbcbd8e528ad3b4a7acf49b631a40dcebb03d9a8f5e1d3b74351f805f77774e9a19f7233e42036cb415b7838710f207ac1e18335e4a219b7f99ea22a44f"
        },
        {
          "alg": "SHA-384",
          "content": "9dabff6e543ead881b20d38a533e9151aaa83999239cf0ace3e712cf678e7976c3a50d79e3f3c57afc05a3b9ff14ad90"
        },
        {
          "alg": "SHA3-384",
          "content": "9f65d4d942113facb2eb25229c1530b79dd3b8994574034b8d4a1c2b39ed8ee5bb4d415ec690d3d87cee0d8cb2283564"
        },
        {
          "alg": "SHA3-256",
          "content": "fedafab2279bdf6eff66314fc61b056e92312695678e66dc1e25fe1d18af5a36"
        },
        {
          "alg": "SHA3-512",
          "content": "e64f3c49f9030358554bb0b8abdff729394988f1e3247b05a86302014eeff4a2855acf46d9bf1c683cbecc33a24173a20a103d3c82c94f8cabd6676a01b40fb6"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.guava/guava@33.5.0-jre?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/google/guava",
          "type": "website"
        },
        {
          "url": "https://github.com/google/guava/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/google/guava/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/google/guava/guava",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.guava/failureaccess@1.0.3?type=jar",
      "group": "com.google.guava",
      "name": "failureaccess",
      "version": "1.0.3",
      "description": "Contains com.google.common.util.concurrent.internal.InternalFutureFailureAccess and InternalFutures. Most users will never need to use this artifact. Its classes are conceptually a part of Guava, but they\u0027re in this separate artifact so that Android libraries can use them without pulling in all of Guava (just as they can use ListenableFuture by depending on the listenablefuture artifact).",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "29a782e90f6b37218b18bb880d2a8f4a"
        },
        {
          "alg": "SHA-1",
          "content": "aeaffd00d57023a2c947393ed251f0354f0985fc"
        },
        {
          "alg": "SHA-256",
          "content": "cbfc3906b19b8f55dd7cfd6dfe0aa4532e834250d7f080bd8d211a3e246b59cb"
        },
        {
          "alg": "SHA-512",
          "content": "72be228e7805da5623e42bf024ded7d9147023c66b22f4dbd04ac6898201af46ee82e1f92ea51eb0595f1b49151c4b8ecb862653d4906c17609c42544ee97abf"
        },
        {
          "alg": "SHA-384",
          "content": "9dd1a2a08efda311604992d3e7cee64873bc8c64de3b423b1b3a3dcc1f7f0810bb03901fbfe39a5f835accb0646f4ad8"
        },
        {
          "alg": "SHA3-384",
          "content": "ffd67766c165ee77e96824e06de2c19864a6e61f785b2085eb825f308f173d71f2555559d90d910f33f3367378ace0e3"
        },
        {
          "alg": "SHA3-256",
          "content": "08a77b528a72ca412b36e4004692705ebfd75cfb4897c88632d367d08a34b09f"
        },
        {
          "alg": "SHA3-512",
          "content": "7cba6c266babbe8272f029eea6e2cbddadee96eb1a16916a6eb2441a55837867ce717385d4388735fd83f2f6555931077c0ebda011a1ee9a37ac38c8c0c43a65"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.guava/failureaccess@1.0.3?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/google/guava/failureaccess",
          "type": "website"
        },
        {
          "url": "https://github.com/google/guava/actions",
          "type": "build-system"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/google/guava/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/google/guava/failureaccess",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar",
      "group": "com.google.guava",
      "name": "listenablefuture",
      "version": "9999.0-empty-to-avoid-conflict-with-guava",
      "description": "An empty artifact that Guava depends on to signal that it is providing ListenableFuture -- but is also available in a second \u0022version\u0022 that contains com.google.common.util.concurrent.ListenableFuture class, without any other Guava classes. The idea is: - If users want only ListenableFuture, they depend on listenablefuture-1.0. - If users want all of Guava, they depend on guava, which, as of Guava 27.0, depends on listenablefuture-9999.0-empty-to-avoid-conflict-with-guava. The 9999.0-... version number is enough for some build systems (notably, Gradle) to select that empty artifact over the \u0022real\u0022 listenablefuture-1.0 -- avoiding a conflict with the copy of ListenableFuture in guava itself. If users are using an older version of Guava or a build system other than Gradle, they may see class conflicts. If so, they can solve them by manually excluding the listenablefuture artifact or manually forcing their build systems to use 9999.0-....",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "d094c22570d65e132c19cea5d352e381"
        },
        {
          "alg": "SHA-1",
          "content": "b421526c5f297295adef1c886e5246c39d4ac629"
        },
        {
          "alg": "SHA-256",
          "content": "b372a037d4230aa57fbeffdef30fd6123f9c0c2db85d0aced00c91b974f33f99"
        },
        {
          "alg": "SHA-512",
          "content": "c5987a979174cbacae2e78b319f080420cc71bcdbcf7893745731eeb93c23ed13bff8d4599441f373f3a246023d33df03e882de3015ee932a74a774afdd0782f"
        },
        {
          "alg": "SHA-384",
          "content": "caff9b74079f95832ca7f6029346b34b606051cc8c5a4389fac263511d277ada0c55f28b0d43011055b268c6eb7184d5"
        },
        {
          "alg": "SHA3-384",
          "content": "e939f08df0545847ea0d3e4b04a114b08499ad069ba8ec9461d1779f87a56e0c37273630a0f4c14e78c348d3ac7eb97f"
        },
        {
          "alg": "SHA3-256",
          "content": "1f0a8b1177773b3a8ace839df5eed63cbf56b24a38714898a6e4ed065c42559f"
        },
        {
          "alg": "SHA3-512",
          "content": "6b495ecc2a18b17365cb08d124a0da47f04bcdde81927b5245edf3edd8e498c3c3fb92ce6a4127f660bac851bb1d3e4510e5c20d03be47ce99dc296d360db285"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/google/guava/listenablefuture",
          "type": "website"
        },
        {
          "url": "https://travis-ci.org/google/guava",
          "type": "build-system"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/google/guava/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/google/guava/listenablefuture",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.j2objc/j2objc-annotations@3.1?type=jar",
      "group": "com.google.j2objc",
      "name": "j2objc-annotations",
      "version": "3.1",
      "description": "A set of annotations that provide additional information to the J2ObjC translator to modify the result of translation.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "abe8bd3abff622b9a8b15c3a737aa741"
        },
        {
          "alg": "SHA-1",
          "content": "a892ca9507839bbdb900d64310ac98256cab992f"
        },
        {
          "alg": "SHA-256",
          "content": "84d3a150518485f8140ea99b8a985656749629f6433c92b80c75b36aba3b099b"
        },
        {
          "alg": "SHA-512",
          "content": "34ee5aad57b0b507e89c897306f73043f80fa0eb02b453e54d9052feb0808a0d2ed835d888946211921d2bf733780b19ff636479ce19b9f48814ba6008733ce1"
        },
        {
          "alg": "SHA-384",
          "content": "7b760a346a586d6a3fa4477807e2f02f091e61898fc9a6ff449e43c55b6465fbbc17720663183c84c41d4d8814085e51"
        },
        {
          "alg": "SHA3-384",
          "content": "a2166c1c08f947c0e60aa7c9167602942e7bac37ba45863d34c0132a1f352e7807a382588d350b93bdbbbbe315a3573f"
        },
        {
          "alg": "SHA3-256",
          "content": "3d4d3b8bfd2ad13351a53610aa4bf1c5a69d2bde4272c281003120ed9bcddb8c"
        },
        {
          "alg": "SHA3-512",
          "content": "0a574b379a3f8022f0b88252c87d0e6b6cfa434fdb981efd1b24387025a962d7ac4e90161e8bd048df142bf52f4fc41e4a0c1d45e4eeb872c5954aad552988e9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.j2objc/j2objc-annotations@3.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/google/j2objc/",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "http://github.com/google/j2objc",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.re2j/re2j@1.8?type=jar",
      "group": "com.google.re2j",
      "name": "re2j",
      "version": "1.8",
      "description": "Linear time regular expressions for Java",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "4240e655caa938c61ddbec8b92bfb061"
        },
        {
          "alg": "SHA-1",
          "content": "12c25e923e9e4fb1575a7640a2698745c6f19a94"
        },
        {
          "alg": "SHA-256",
          "content": "7b52c72156dd7f98b3237a5b35c1d34fba381b21048c89208913ad80a45dfbd7"
        },
        {
          "alg": "SHA-512",
          "content": "f556b098dc29ed8fbfa7ecd343b457c49c4deda80dc495ed164297a415328c20d7c89b17cb240f6d2f92607828db52e4f13b66b11277e33e6ebc34a97832da86"
        },
        {
          "alg": "SHA-384",
          "content": "beef5588c374be01cb9cb1c7854e2741827444ce6908c73e4494fb6c7b14fda4a8424f257c1cf900957dd7928e7247d4"
        },
        {
          "alg": "SHA3-384",
          "content": "580230a2224e63cbbe5dd3742935e8ff51333b9e38510203b7ab22070b903dbbc8d720a820db3a01b65cb06983632f7d"
        },
        {
          "alg": "SHA3-256",
          "content": "1346abb0ccffe538d735667ba664b4ee2eaec5c30f2052115d34b16fb0fb350b"
        },
        {
          "alg": "SHA3-512",
          "content": "68b26bddbacc2d72fde5db285549bdefc62206adbf285b58cd5b49f7a20ce1e2545a031c021b5d4402ff068170f4ce1fb90b618b5ed1e1f3b7a1b694f5ddf5ec"
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "Go License",
            "url": "https://golang.org/LICENSE"
          }
        }
      ],
      "purl": "pkg:maven/com.google.re2j/re2j@1.8?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/google/re2j",
          "type": "website"
        },
        {
          "url": "https://github.com/google/re2j.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/dev.cel/common@0.13.0?type=jar",
      "group": "dev.cel",
      "name": "common",
      "version": "0.13.0",
      "description": "Common dependencies for Common Expression Language for Java.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "20679958cc49c52807dcdc1a71912d98"
        },
        {
          "alg": "SHA-1",
          "content": "517a7c500a365048a4c6221f08475a5aaa634440"
        },
        {
          "alg": "SHA-256",
          "content": "d4ccdb74ce41ddf06c53d13750eafda6a0ce500c36df15280b3d0e4cd9bf7a21"
        },
        {
          "alg": "SHA-512",
          "content": "154c076921a918440747751540e1498a1493ae087eabf0757c5900ff3f7fa7cb12045f49758afcd1e2f152eb37dabc25d75dd648ac2be8e7031079c142f9e647"
        },
        {
          "alg": "SHA-384",
          "content": "c6c28b4e592e9a815fbf0badfc278cabec5c8016d8f07dc18f7c9fbf1f020a8e0465847983a044923e902feaaf7f3d25"
        },
        {
          "alg": "SHA3-384",
          "content": "b81c2bb921d7e96d632013ca1767ea24ac10b135c1e01e2e9c77601551ddb9fdd46a546e13305c9271da11e62fedc6ec"
        },
        {
          "alg": "SHA3-256",
          "content": "5d38eadeeb69b7464b4f0f87e3e5546cb772fbd702e268e069cc47a850fb7849"
        },
        {
          "alg": "SHA3-512",
          "content": "2fae5c3d2cccf79a5af480bebcd7f26781bb8b4339e6995cd89b01814e9ecef6faaa534d38d249a91f113c0ef5886f55e4e75a083a5556e21bf503ff4ec2ef58"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/dev.cel/common@0.13.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/google/cel-java",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/google/cel-java/tree/main",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/dev.cel/compiler@0.13.0?type=jar",
      "group": "dev.cel",
      "name": "compiler",
      "version": "0.13.0",
      "description": "Common Expression Language Compiler for Java",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "b074b4f9cd6fef204377b7722af53994"
        },
        {
          "alg": "SHA-1",
          "content": "3534df53b6add29f9415a0496adb4f4ea0ed709c"
        },
        {
          "alg": "SHA-256",
          "content": "49e97f882e4f9bd44457dad4f797bb4dac2bc8b6c61c722d21447d637113eb19"
        },
        {
          "alg": "SHA-512",
          "content": "ea7eacb6c11f9156638e84fccf4902d4d158fb24091fca237607a577609a4cfb20dd532ef346fdb03f36fe5c308467672c266c35f6d65a6b01604d063c86151f"
        },
        {
          "alg": "SHA-384",
          "content": "b4f6081f54e35bf3a0d18111acf2493a58cf32172d4094d12d628ef69a2176aaaab85afd23a275bfdd36c2e412af17ee"
        },
        {
          "alg": "SHA3-384",
          "content": "0c59e12781d30e30a8194be89f066f64542b64017325eebb5f511d5e67339e2a87d59a537b998be53b37fe27168562e1"
        },
        {
          "alg": "SHA3-256",
          "content": "90467e2ebc54e15d28334c1844fc4efbfae33accaf4b7f4e5311155645f2d861"
        },
        {
          "alg": "SHA3-512",
          "content": "a2f6f87c5bb1ebefd2d54077b917301d429dcfccee34a7558ba4c5f40f60c952a48686e394dcd2d2638bdb48bf6d8666c0fe965910a9108985078eb9294fd62c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/dev.cel/compiler@0.13.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/google/cel-java",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/google/cel-java/tree/main",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/dev.cel/protobuf@0.13.0?type=jar",
      "group": "dev.cel",
      "name": "protobuf",
      "version": "0.13.0",
      "description": "Common Expression Language Adapter for converting canonical cel.expr protobuf definitions",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "ec7a1682a109ef7874fed038ec9d7aa4"
        },
        {
          "alg": "SHA-1",
          "content": "02b2080dba5dcf5016d1eecbe76723f80ca64ffc"
        },
        {
          "alg": "SHA-256",
          "content": "d343b22e4d1507c636fca5d61c8272f2394a3fd0c1e1729568a8f575a9002143"
        },
        {
          "alg": "SHA-512",
          "content": "9e5d876a7abfe0d7d1fbbc03cd2b3a79fc87469b75de37c4b23b792f505e196c6c5afbec05353d6cc5be7548ce54b91ecb809ce5d99df7ba7e9162507c1f772b"
        },
        {
          "alg": "SHA-384",
          "content": "5d698cda243836a4764ec87e4813fc2788e34b4fd2efd23ea9bcd128998578333a43602620f57ea67a3e1f026cef1664"
        },
        {
          "alg": "SHA3-384",
          "content": "30f7375ab08fa2fe5bbc8b823fe2e1fc0b6adc7f93edcd71649a56aba3052b3a6edd5f34d7dcdbdd14234f4c4b27f47a"
        },
        {
          "alg": "SHA3-256",
          "content": "898a10881463dafebac86e9537a4c81efb6b5465bafcb9fe7c1f4289f5ebee58"
        },
        {
          "alg": "SHA3-512",
          "content": "fcf5bc79d2e1e5d6ca908365fb5ac539237928a04e62bf6537f494302c86e2bb0f968c488efe8f178049f2bf2e9dd88c09e5aa7b65edb778ca61fb2bce8bb6e2"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/dev.cel/protobuf@0.13.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/google/cel-java",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/google/cel-java/tree/main",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/dev.cel/runtime@0.13.0?type=jar",
      "group": "dev.cel",
      "name": "runtime",
      "version": "0.13.0",
      "description": "Common Expression Language Runtime for Java",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "952b764ed7d8ed2f49381b6961fedb19"
        },
        {
          "alg": "SHA-1",
          "content": "4dca217f6a1866797c5d21f85a4f3cd384d8e496"
        },
        {
          "alg": "SHA-256",
          "content": "3deaba45e430e26370953c6982d0c4f6421a1fac575f9be06f5687e0f982d005"
        },
        {
          "alg": "SHA-512",
          "content": "1244798e7c68a1cad0d7a5e40a65a7bdf06a2641f5209b2cf2ec05adae8ebfb8f91a0d041878ebe877e315d37109e0a9cea060e53acebc86e526b1562ba875fc"
        },
        {
          "alg": "SHA-384",
          "content": "71122433575864a269a8fabfe48045b09bcd9c0cd5868be8a251a0f356cf027bcddecac2976d441fcfc94cfda78f7f1a"
        },
        {
          "alg": "SHA3-384",
          "content": "4d01fa90e3007d194a068a3380356bfb73da78642f00b79454b29410f8dd4faef83a8614f4b9742eea65d2ea6940d278"
        },
        {
          "alg": "SHA3-256",
          "content": "092c169fcf1240da26e5366ea45c1807b416493d3f2483242602b6413adf8c07"
        },
        {
          "alg": "SHA3-512",
          "content": "a9aa8d5c8f8ef31dbd991edc0e820146f78e1a9a240bb9a9d727e34bb49753c25af142b3b77a50f628a1aada2b342e55dc0d40bbf6c9fbe825dfdfaf5f4fdba1"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/dev.cel/runtime@0.13.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/google/cel-java",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/google/cel-java/tree/main",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/dev.cel/v1alpha1@0.13.0?type=jar",
      "group": "dev.cel",
      "name": "v1alpha1",
      "version": "0.13.0",
      "description": "Common Expression Language Utility for supporting v1alpha1 protobuf definitions",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "8e09c5e79de99fafa3893d9bc1f12d13"
        },
        {
          "alg": "SHA-1",
          "content": "4e7c13ddf4e23c44b67e1c8041044be927be47a5"
        },
        {
          "alg": "SHA-256",
          "content": "429a705bc974d06c63fc14f4d7be7d23e5e7825d6fe76ab657bad2a2d9791c77"
        },
        {
          "alg": "SHA-512",
          "content": "efaa8638137267a26e11668936a53b58716f71437cf1a1d057d6432a53e5c273c4c17fc656d2b47aa0e4c6ba56ef9896aa8d54b156688c6b25ec4fe3dafda8ad"
        },
        {
          "alg": "SHA-384",
          "content": "b4e1fc34a8ac52f90779970b6b1d40877978396c29de475aeb16853ffcc65526949bf9a3c5593284a82335ad60b25e75"
        },
        {
          "alg": "SHA3-384",
          "content": "b86559a1571b69592384cdde36a0ee23a1599270002d6488d3401e05e4f569b616c44a59bfa69b55d39e28aca8aaf406"
        },
        {
          "alg": "SHA3-256",
          "content": "6891df0f460647f9d1f20e2cf708602d76027b5d089cc777d437adc77b1bfda6"
        },
        {
          "alg": "SHA3-512",
          "content": "5e148f912d1a9e89b0bdd836b0ada4f5145792d39632c19589fe172e9251a09d3f1115a8a20fdea837087b6eb6dc77c5ae6c7378cf75c6ae5d927ca43b5a1b85"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/dev.cel/v1alpha1@0.13.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/google/cel-java",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/google/cel-java/tree/main",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.antlr/antlr4-runtime@4.13.2?type=jar",
      "publisher": "ANTLR",
      "group": "org.antlr",
      "name": "antlr4-runtime",
      "version": "4.13.2",
      "description": "The ANTLR 4 Runtime",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "eecf1908f0cfff10f8bb82878b5ca401"
        },
        {
          "alg": "SHA-1",
          "content": "fc3db6d844df652a3d5db31c87fa12757f13691d"
        },
        {
          "alg": "SHA-256",
          "content": "dd3e8a13a2d669bf84fb8d834de35ce4875f27157698d206241ec8488aadcaf7"
        },
        {
          "alg": "SHA-512",
          "content": "1c3e47b6b5dc40ca13927a7ae2ed187f470b8f406cea325e73c7a18af8e07b9ada0484312dd611f225f030b5585924932c702fd9326c143a626e271682b2b95e"
        },
        {
          "alg": "SHA-384",
          "content": "f49c2395e16fe71fa35622bcca225c0910609ef09626207ce4522c73c760fd232489489ea88d54c88fc21b05a03031e0"
        },
        {
          "alg": "SHA3-384",
          "content": "322345326586e3f8954e80efa80b510228a7eb06f6d7283177f04809c15aad1722c700897c8c8f405955946b63808bc0"
        },
        {
          "alg": "SHA3-256",
          "content": "2d39db66ce6dc530c7796f75d646f4d8316586e2acd0756524c25b238eb71618"
        },
        {
          "alg": "SHA3-512",
          "content": "a4cdaec49dff4a6963a0db56712a837db7300de7145335b915ffc2234b0d53d6f9fd4b1d6e82c4350e22fee9390ca643cfbf7f51ff47a11bc44561b6686be32b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/org.antlr/antlr4-runtime@4.13.2?type=jar",
      "externalReferences": [
        {
          "url": "https://www.antlr.org/antlr4-runtime/",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/antlr/antlr4/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://groups.google.com/forum/?fromgroups#!forum/antlr-discussion",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/antlr/antlr4/tree/master/antlr4-runtime",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.threeten/threeten-extra@1.8.0?type=jar",
      "publisher": "ThreeTen.org",
      "group": "org.threeten",
      "name": "threeten-extra",
      "version": "1.8.0",
      "description": "Additional functionality that enhances JSR-310 dates and times in Java SE 8 and later",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "4af91264b2e3d26f4c41f055f7ce02f8"
        },
        {
          "alg": "SHA-1",
          "content": "d3b1ac7e361b642132e529f562622aac7dfea752"
        },
        {
          "alg": "SHA-256",
          "content": "51e4d21edc4e9447f7760c050e0baee75d7d973f387ba605a17abdc4d24fd6d8"
        },
        {
          "alg": "SHA-512",
          "content": "b60d18135450dbca9660097f6f726676940c1925343e0ce9547e57e68beb321ecd5df73710332113e1ea3aba71fb5ceb0483cc8f41806a3c6ef075d3c690aae6"
        },
        {
          "alg": "SHA-384",
          "content": "b6e8c6861fe876ac0fc34f97b4966c8816d94ab566cfe8458709b48825cf600fcec4d845de35a3d518d4c28e160b665b"
        },
        {
          "alg": "SHA3-384",
          "content": "1eaf035067146399ff4698dfe6f418e2f812d203b7b8b9b2bb7afaa34b4d380bbc06d8836456e732111ea2c35820d09a"
        },
        {
          "alg": "SHA3-256",
          "content": "981ad37d8273108f1bd1de37f7bca594b8ef49ab33dfbbc2e84c647aba733ead"
        },
        {
          "alg": "SHA3-512",
          "content": "7b528b1f6d625f647f63fc7117c006dce4c08c5f447151c34b1acfa9bd8062c2c31f2e579a38024dad6f86d9f3e7f0cc4a3ea0e9c011926b49413515045a291d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/org.threeten/threeten-extra@1.8.0?type=jar",
      "externalReferences": [
        {
          "url": "https://www.threeten.org/threeten-extra",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/content/repositories/threeten-releases",
          "type": "distribution"
        },
        {
          "url": "https://github.com/ThreeTen/threeten-extra/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/ThreeTen/threeten-extra",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.yaml/snakeyaml@2.5?type=jar",
      "group": "org.yaml",
      "name": "snakeyaml",
      "version": "2.5",
      "description": "YAML 1.1 parser and emitter for Java",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "8d3b7581db5c7620db55183f33a4f2ad"
        },
        {
          "alg": "SHA-1",
          "content": "2d53ddec134280cb384c1e35d094e5f71c1f2316"
        },
        {
          "alg": "SHA-256",
          "content": "e6682acf1ace77508ef13649cbf4f8d09d2cf5457bdb61d25ffb6ac0233d78dd"
        },
        {
          "alg": "SHA-512",
          "content": "a69bea3ae0ed31b12d9fa23bf1cd3fb71bae88e231d9657f0291e3000ae17a1df50709e072134f9155158f488eba67a3f8daf879462499f07b07d9239e78933e"
        },
        {
          "alg": "SHA-384",
          "content": "2fa12e4330d6da0a693a13588c8cdeff562c1bd1dc32e043d402ca1fc72d87a30dcc7bb31f9b582df3fe018eb6c6a3bb"
        },
        {
          "alg": "SHA3-384",
          "content": "8c5037c75bb2f464829ba38126a4773c88951705effc2b14289f3bbdef05bb598f10e4d9603dcd1b58efd7cb68d996a2"
        },
        {
          "alg": "SHA3-256",
          "content": "3aa9329b0eab5185331e526a011c74b45b4c4a506214e6c3ec2d2038c51cc261"
        },
        {
          "alg": "SHA3-512",
          "content": "f80ff702aee20a5150a11818985d659fffb1d5238e331aca2048524649e0270e5bca0186ce7caf04ecf85fd95c95c6b9d8ed1f362ed399fef624eb94b70dc6de"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.yaml/snakeyaml@2.5?type=jar",
      "externalReferences": [
        {
          "url": "https://bitbucket.org/snakeyaml/snakeyaml",
          "type": "website"
        },
        {
          "url": "https://bitbucket.org/snakeyaml/snakeyaml/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://bitbucket.org/snakeyaml/snakeyaml/src",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/dev.cel/extensions@0.4.1?type=jar",
      "group": "dev.cel",
      "name": "extensions",
      "version": "0.4.1",
      "description": "Common Expression Language Extensions for Java",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "a70eab4afa038505e57783b72666eb1c"
        },
        {
          "alg": "SHA-1",
          "content": "433df034d55c456425a3c96165d650bc583fe2e0"
        },
        {
          "alg": "SHA-256",
          "content": "291835f64786e5b973ae289b77ddc5bfacf4c85d5f67861cab65e0c59bb6742c"
        },
        {
          "alg": "SHA-512",
          "content": "1fd37f3929287fd365e58713d1512244f12079874b4498e033c3df542d89b5881a379554aa55d5270c9abf42509d7fdf4a3c9dda4b6bd8756eccc96f1360c666"
        },
        {
          "alg": "SHA-384",
          "content": "f8a4ca7ce0726ebc7cef49f394090da5de40c4b330f97a6389606faf64885d12247dff049bff4e4b18ebb6b052b85ea6"
        },
        {
          "alg": "SHA3-384",
          "content": "9431fa635ec7721498c93401cad4d5a70e4b872396a60e407a0041eb2dd32ce5d94de269843cf71bd6257b860f28dbcc"
        },
        {
          "alg": "SHA3-256",
          "content": "579c399929539362444428bf48b7935de926d454bad990de27dee3844df40565"
        },
        {
          "alg": "SHA3-512",
          "content": "10bfaf33daa8618a7771845a167f294dcf7c2caa90081b21c11da08a6b2cb4f443e9ea06e675cb93a7a635eb31db05a2e31dcde9f92c8ff013c191e6cec0e879"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/dev.cel/extensions@0.4.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/google/cel-java",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/google/cel-java/tree/main",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.metaeffekt.core/ae-security@0.155.0?type=jar",
      "publisher": "metaeffekt GmbH",
      "group": "org.metaeffekt.core",
      "name": "ae-security",
      "version": "0.155.0",
      "description": "Core project with fundamental runtime and build support.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "328c77e73d6f0040415be18664128836"
        },
        {
          "alg": "SHA-1",
          "content": "d8948c395c789bd02c8773a27d63b6fa08a1a6ee"
        },
        {
          "alg": "SHA-256",
          "content": "6358204991f188d5a8015c2dc37003dd87655a3e85d98f04a8717a85a7fceed6"
        },
        {
          "alg": "SHA-512",
          "content": "aca9ca701bbe3d5173cecb2118ddc72477fbfca4920231f6b1865fc1119fe7f10250643f4d08a0a49d0c3eb0606bd454b6bbd6b3f776296add8cda9669fc2297"
        },
        {
          "alg": "SHA-384",
          "content": "1957815bb74c4dcad55f125ad6b576024a278152733719965868da646d4c1c6905fdfcdcf72c53a43843755e22f4381b"
        },
        {
          "alg": "SHA3-384",
          "content": "86f8cc5f2c850a6e0458affd63484e9bb37342a55cc221be207667e15a953f7118492acc6afa7bb3b907fd19d8344420"
        },
        {
          "alg": "SHA3-256",
          "content": "3f4e8798deb1f589447dee9adf7638d90cf476186136d0fece1d6dbb4b24a9d9"
        },
        {
          "alg": "SHA3-512",
          "content": "01f9e56a320185ee1d5ce11fd6d8c8f59084d601f4795167d5d7f80848ddce729cd326d8055fbb9edc6078fc0854a5a18bad76dde64a93e34fe581d48e889452"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.metaeffekt.core/ae-security@0.155.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/org-metaeffekt/metaeffekt-core/ae-core-poms/ae-core-plugin-management-pom/ae-libraries/ae-security",
          "type": "website"
        },
        {
          "url": "https://github.com/org-metaeffekt/metaeffekt-core.git/ae-core-poms/ae-core-plugin-management-pom/ae-libraries/ae-security",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.slf4j/jcl-over-slf4j@2.0.18?type=jar",
      "publisher": "QOS.ch",
      "group": "org.slf4j",
      "name": "jcl-over-slf4j",
      "version": "2.0.18",
      "description": "JCL 1.2 implemented over SLF4J",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "889b3b36f33843d83ba84f7355c2150d"
        },
        {
          "alg": "SHA-1",
          "content": "fb36c10c70e27bb427bb3cec86ac30bb83f667c7"
        },
        {
          "alg": "SHA-256",
          "content": "ec5c36d57d2dbe100f84878f944575cb7871da32c7a115b8d7e0721277045d67"
        },
        {
          "alg": "SHA-512",
          "content": "6a2d26ab6873b25bab037f5620ce5a4a1c35cf79e89a09ff900d873877231bf117e35e9dfd05912c36be0b4a89a739c84ba20231fd0f74c1fcf14126c8846248"
        },
        {
          "alg": "SHA-384",
          "content": "6c8413069e3d41c85ff74f94e0ea01553b2edaf8b589b390c6b3d935d4a6e256720ded91d98a5aeadb67920bc8c10f35"
        },
        {
          "alg": "SHA3-384",
          "content": "6fc21de57edba60d2f58e7907e051f70efc9d20729190d2dd0453a6bde313d764a96e1e392fe50042e09c2a1221067fb"
        },
        {
          "alg": "SHA3-256",
          "content": "4c3fbe65804bd4e70d9698c553819bd9866eec21b8ba4a4d01b89f4e8895ff24"
        },
        {
          "alg": "SHA3-512",
          "content": "d4fa671a7f0365d0dbe49b42fd5f354a6af2d22dbbcc7c1f5afbdba084845ea0aeabc112b89379988c7dcf57ab36350a39e436ddc45895ddf29f48082485c5b3"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.slf4j/jcl-over-slf4j@2.0.18?type=jar",
      "externalReferences": [
        {
          "url": "http://www.slf4j.org",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/qos-ch/slf4j/slf4j-parent/jcl-over-slf4j",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/commons-io/commons-io@2.22.0?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "commons-io",
      "name": "commons-io",
      "version": "2.22.0",
      "description": "The Apache Commons IO library contains utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "f91d54bd47c42456b4a5ae62eed85565"
        },
        {
          "alg": "SHA-1",
          "content": "5b1e18bc0ad651ed878029d83f88d9c8189fd51e"
        },
        {
          "alg": "SHA-256",
          "content": "2b9a7b1f726fb86216dbd2c8321eabe0221dbd5b1be81c18e1cb53811b104758"
        },
        {
          "alg": "SHA-512",
          "content": "fca0b4ae70e531bee74413e0b865981aa8b60a9390f789b63997203dae67be65362e95a0c35b9d4b072fbb0810114783415dd22b92fb42e5594b10992f632bc5"
        },
        {
          "alg": "SHA-384",
          "content": "e1fbf3729c4d2d77b036d90234d9e2ed3fe0c2f5379d333a695c1cb0037f63d288c8b62de05022da0f612da65835fee0"
        },
        {
          "alg": "SHA3-384",
          "content": "02acc6e7f614d8684e7104a52123573152a2e1b651bc6a5be12d4b58861c757d6c56f51105bb97c92309d126059232ea"
        },
        {
          "alg": "SHA3-256",
          "content": "134157813629f4d9b97044602e1fa2f61c14c3be1f641490b3e06ac941ff3315"
        },
        {
          "alg": "SHA3-512",
          "content": "47832f3b7abe375f3b0ed169996d9776b2a0007b073ab3f06438dce67be9bda45e8aac84737cc639ada4424b13c7614d8c9fcb23779868f7421414777cc0946a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/commons-io/commons-io@2.22.0?type=jar",
      "externalReferences": [
        {
          "url": "https://commons.apache.org/proper/commons-io/",
          "type": "website"
        },
        {
          "url": "https://github.com/apache/commons-io/actions",
          "type": "build-system"
        },
        {
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2",
          "type": "distribution"
        },
        {
          "url": "https://issues.apache.org/jira/browse/IO",
          "type": "issue-tracker"
        },
        {
          "url": "https://mail-archives.apache.org/mod_mbox/commons-user/",
          "type": "mailing-list"
        },
        {
          "url": "https://gitbox.apache.org/repos/asf?p=commons-io.git/commons-io",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.json/json@20231013?type=jar",
      "group": "org.json",
      "name": "json",
      "version": "20231013",
      "description": "JSON is a light-weight, language independent, data interchange format. See http://www.JSON.org/ The files in this package implement JSON encoders/decoders in Java. It also includes the capability to convert between JSON and XML, HTTP headers, Cookies, and CDL. This is a reference implementation. There are a large number of JSON packages in Java. Perhaps someday the Java community will standardize on one. Until then, choose carefully.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "1a0702c57783ce9e948252c34644f328"
        },
        {
          "alg": "SHA-1",
          "content": "e22e0c040fe16f04ffdb85d851d77b07fc05ea52"
        },
        {
          "alg": "SHA-256",
          "content": "0f18192df289114e17aa1a0d0a7f8372cc9f5c7e4f7e39adcf8906fe714fa7d3"
        },
        {
          "alg": "SHA-512",
          "content": "a5cdd1ed984448d6538746429f2d1a0ec8f64f93af0e84870ce898a9f07a81d11bf27d2ee081471975772efc8a0d3d5e05541197a532066e9edb09ad032d31a3"
        },
        {
          "alg": "SHA-384",
          "content": "5d2629c7fa21af332369d9feb30dca6bbc76378615252fd5fc8a9bd55deba17951a45ae3384672f317b12a5d25a285bc"
        },
        {
          "alg": "SHA3-384",
          "content": "b96f3dc5d35e439d33e31522538d5d91cb8d88f12d19071a66ab31722c46fbb9c945f3894942203f4dd945df93bc3d91"
        },
        {
          "alg": "SHA3-256",
          "content": "69c7a6f7873b85a74ec9547b081d217a7407deac8d0912ac4906c0eb2c2f87f5"
        },
        {
          "alg": "SHA3-512",
          "content": "fd2bcc534d0bcd4b1cf3337e1f5f8073d5693f3e65d789203312a166f91874d7c31ea1715de9eaea3e0437639591ae4157ceef4b76354e6681f34bc034a06d7a"
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "Public Domain",
            "url": "https://github.com/stleary/JSON-java/blob/master/LICENSE"
          }
        }
      ],
      "purl": "pkg:maven/org.json/json@20231013?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/douglascrockford/JSON-java",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/douglascrockford/JSON-java.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.github.kagkarlsson/db-scheduler@16.11.0?type=jar",
      "publisher": "Gustav Karlsson",
      "group": "com.github.kagkarlsson",
      "name": "db-scheduler",
      "version": "16.11.0",
      "description": "Simple persistent scheduler for scheduled tasks, recurring or ad-hoc.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "d51b7bce826c3a7ff4ace230d3dca9e2"
        },
        {
          "alg": "SHA-1",
          "content": "2c74ee3d1bc3c03fbdc5350ea1b7e5453b646641"
        },
        {
          "alg": "SHA-256",
          "content": "06288e70974976c91f95ac9a7e729c9b3ed64f5c4f33041522349184ddb73aef"
        },
        {
          "alg": "SHA-512",
          "content": "7d303f07a2bc6951b7d7bb55d54837d3a8bb136e76d2de07242c75b22b286346b7c8b02aa9203fc3cc086342f0e081785e462b7855d5cf130c5244ec4fb5cd99"
        },
        {
          "alg": "SHA-384",
          "content": "0463646333de46461b77aa92222e816ca580e2155edc37923531aba6e81a6ea926fe9719826f49c8de4ddae4882da40b"
        },
        {
          "alg": "SHA3-384",
          "content": "22f221ad3c4e8106cf39039c287a8d3048c0e25acbe02bec12b93954f7a2671ef81d2aeed49acddf5aa6ee52983bf031"
        },
        {
          "alg": "SHA3-256",
          "content": "40f1d2980ca9b345f4b8ac508ac3214621833b5ba3ce6c69c23c5e36a05a80a0"
        },
        {
          "alg": "SHA3-512",
          "content": "f14a2858d0050bce14a4064e1a7d4da7554bee278f52d3b9a93d9fc2a69ba9b11dd33fa07a6ec977e1a6c3092a290c3d90e316fa46bf4ddf7d47e689fd6568cb"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.github.kagkarlsson/db-scheduler@16.11.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/kagkarlsson/db-scheduler",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/kagkarlsson/db-scheduler/db-scheduler/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/jdbi-support@5.0.0?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "jdbi-support",
      "version": "5.0.0",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "57b6e68621bda711d17ac6c40b03c4c9"
        },
        {
          "alg": "SHA-1",
          "content": "d80ce8e2eaba88ca9afd093c038cb0eee41a5280"
        },
        {
          "alg": "SHA-256",
          "content": "619a5aeca60639e18d8278f36fc459bcebbdf541886065a8930f6549cf5f69d2"
        },
        {
          "alg": "SHA-512",
          "content": "61488877dfbef21a10dfc3e2be0417ba8b2a965de8c88962780e4f34aec5bab0cb14cd5751df83ddd91c8a7754774435d63eabbf0252c9a4b4cee6397516aa05"
        },
        {
          "alg": "SHA-384",
          "content": "0a82476a151d85f3d9aa6bf407a83370c37d43c0ec7142f46bc736dfa8c85d83b904369cd723f84c5deb4a5d09763d33"
        },
        {
          "alg": "SHA3-384",
          "content": "437e2c6e77268ab0fe639ad34cc17b81f5216568f9c4a1287bfb3ea1da57476059f80775471856b079b220a0821d7e60"
        },
        {
          "alg": "SHA3-256",
          "content": "cce0096ed07c1dac1c8bc0a791bbb47bca87623b6295d92f159e8f12f17e2791"
        },
        {
          "alg": "SHA3-512",
          "content": "b068f450105bcbb47fa599f10935ca5547167a905f7cf6eca8b6a2a76c7110357037948cf484665b16cd4fca9d46eea3e4e3062a9f343c4665aeaa7d20cbbad0"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/jdbi-support@5.0.0?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/support/jdbi-support/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/support/jdbi-support",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.jdbi/jdbi3-core@3.53.0?type=jar",
      "group": "org.jdbi",
      "name": "jdbi3-core",
      "version": "3.53.0",
      "description": "The Jdbi core API. Jdbi 3 is designed to provide convenient tabular data access in Java(tm) and other JVM based languages. It uses the Java collections framework for query results, provides a convenient means of externalizing SQL statements, and named parameter support for any database that supports JDBC.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "8ac1babb7fc3bba8de01e4c9d6ee685a"
        },
        {
          "alg": "SHA-1",
          "content": "7e741ad5776099dd8d6e4acbae65ff9d7e6d7e66"
        },
        {
          "alg": "SHA-256",
          "content": "df512225aaccd0c15a9ace972e9f98c514daac66efeb00843dbcad299c98c186"
        },
        {
          "alg": "SHA-512",
          "content": "18dc20c0d1ad1c6d6969eb53a3618d49d2ebbbdbac4ba450133707186363694de8abbc5c891b52bd153ccc67943fb918202f0db13f04c9014268ce154e0ba3ef"
        },
        {
          "alg": "SHA-384",
          "content": "5ce4e784ccc1f1e8bf6a8771bad339890a50b6a1ee3d271d75f4f990e12192f4e6062f975442c64f29d759375d1c4f56"
        },
        {
          "alg": "SHA3-384",
          "content": "874187451f7430753341ec0c41dd8b2ad69c04aa1660fdd89bbd912eaf7cbdb5b4e6d84542a0a356754c48aa2447bfdf"
        },
        {
          "alg": "SHA3-256",
          "content": "b2581cddb37a86d11ad87f43ac62ba64869b38981aeb195c24cc2ccb242758df"
        },
        {
          "alg": "SHA3-512",
          "content": "8dabd1b8f36c17457564970444f1679a47a16038f8de67a58a344b2c4edd6cf4a620c9038723aef62780edbcbd9b9456161922367fe7580f8552e2b18d1e2800"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.jdbi/jdbi3-core@3.53.0?type=jar",
      "externalReferences": [
        {
          "url": "https://jdbi.org/",
          "type": "website"
        },
        {
          "url": "https://github.com/jdbi/jdbi/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.leangen.geantyref/geantyref@2.0.1?type=jar",
      "group": "io.leangen.geantyref",
      "name": "geantyref",
      "version": "2.0.1",
      "description": "Generic type reflection library with support for AnnotatedType",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "08dce47c87ec3228628a42cb3eb8c181"
        },
        {
          "alg": "SHA-1",
          "content": "81253383ac75126142f97781d22d19de2532bf76"
        },
        {
          "alg": "SHA-256",
          "content": "386b535c079be7d65ddbe0ad9c00955155b7862225aa92b4c6553ab2b1ea95f9"
        },
        {
          "alg": "SHA-512",
          "content": "c6655ef00ede5d9bb17d4e7556200acaeb5babd67295e9f72e26e8ea48fd50978cc147156e35feada204163163292ad3a0daf0d6b1366c9e933f13a1b4a9eb2f"
        },
        {
          "alg": "SHA-384",
          "content": "3b97009b3b70156fcd3f39a8365e562d481fed54d779e6f60a82bdb0736ee7701edd0c69f58409154dc1823895e7da05"
        },
        {
          "alg": "SHA3-384",
          "content": "36cfd6a2d9d4f0df12e9c688b1981f494f4b77f6f05dc57af69f03ab2d7f9d5628f9b90ad324dbadc2ffc210a74d25aa"
        },
        {
          "alg": "SHA3-256",
          "content": "414a37fe9755beb446609dbc43f2eb702a0789ef5d046baff144596774e189ac"
        },
        {
          "alg": "SHA3-512",
          "content": "6a2ecd82a48dc5272720726298d21a8548c46df8b52f9dea1c97c38e77372fb620ca5c5fbed1b9ea7234f7328c47ba9642366d63f0d3f0340c33faf1f5f7de76"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.leangen.geantyref/geantyref@2.0.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/leangen/geantyref",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/leangen/geantyref/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/leangen/geantyref",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.jdbi/jdbi3-jackson2@3.53.0?type=jar",
      "group": "org.jdbi",
      "name": "jdbi3-jackson2",
      "version": "3.53.0",
      "description": "Use Jackson 2.x for JSON column serialization/deserialization.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "c1ef0ceea863f2edd1ad8bf8e4d98a96"
        },
        {
          "alg": "SHA-1",
          "content": "943b0e66bc23fc183bd3cbb8b414214e1a2d0a37"
        },
        {
          "alg": "SHA-256",
          "content": "832a3a28beb109f04905d2bb65410cf6e4ca5770afb1757f2f8f2925f6e9ca5c"
        },
        {
          "alg": "SHA-512",
          "content": "4a4b38e37823b0e400356a40002dab960aee26ebb2bbe2884ca620c44640eabd3540bf95914bc7700122988ace5a6f01ee3a5d97be54633e25a7f0d3d33eb437"
        },
        {
          "alg": "SHA-384",
          "content": "7efdcd7f42ee0d1d6cbe3e0f290fd4a7a37c745b6e5c66f99782651d155b2d6f36e5355ad782d1da12d572bf32db76c5"
        },
        {
          "alg": "SHA3-384",
          "content": "abafb0139141924de3e66c04ba34a3c532ee039c798427da3297f20bfb8393f80eeb7f24ae03fbf5fc78de2b903f4d00"
        },
        {
          "alg": "SHA3-256",
          "content": "cb59d59ce8799f6835d9579a9d8fdcb5e744809d214f7fc09557216bc3a33eba"
        },
        {
          "alg": "SHA3-512",
          "content": "487685261f6c5215625afc7e0d0cc8670c3efd955f06e28f71a4fc0f8d78625a3d51fb7dac61fb93a03dcc3a9236c1f991e507163ba8af8eb8e8d37baa220ea0"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.jdbi/jdbi3-jackson2@3.53.0?type=jar",
      "externalReferences": [
        {
          "url": "https://jdbi.org/",
          "type": "website"
        },
        {
          "url": "https://github.com/jdbi/jdbi/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.jdbi/jdbi3-json@3.53.0?type=jar",
      "group": "org.jdbi",
      "name": "jdbi3-json",
      "version": "3.53.0",
      "description": "Support for JSON column types. In addition to this module, a serialization module (jackson2, gson2, moshi) is required.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "fc4f71df06a55fd90819feb1e009b4ed"
        },
        {
          "alg": "SHA-1",
          "content": "2ab09661d0f934df39138358ad9cb2fa8a7026f6"
        },
        {
          "alg": "SHA-256",
          "content": "fb703e53cba842cb8e1b972de6e032b6a4c27b6f4696899c7b2186a2cdee5237"
        },
        {
          "alg": "SHA-512",
          "content": "4338faf434467ebb0e17aa95b852e2b148cd4f92ea0775a91078ad67cc7afd30a7cfc9e3dd69fecdcc23388c562f1ad4ee14869dcb3ffd2ed0241aaeec17eac5"
        },
        {
          "alg": "SHA-384",
          "content": "a4c58911e3a1288995ed3d11a6a41db228f2ef77fadd1cc1c0eb9453c6fa41adaa7a2060eb181d6ce0368a34fa7fbb03"
        },
        {
          "alg": "SHA3-384",
          "content": "b11d9fd3e84ee757d4f55d96cfe82132a93f10edd3868197d9cf057bea103ccf82e60e572ba9821a592d0d1b152f9e73"
        },
        {
          "alg": "SHA3-256",
          "content": "401f591c326465726938d84e2ee728436405b4334418c590af84811f772b0591"
        },
        {
          "alg": "SHA3-512",
          "content": "d60be8ff248eb66c7133308b02e524f94735c5b96cbfae3a348ab734b9403d6f8d3821e02f90421911c44781ba795df17c56c2921d63629df9138348be06adbf"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.jdbi/jdbi3-json@3.53.0?type=jar",
      "externalReferences": [
        {
          "url": "https://jdbi.org/",
          "type": "website"
        },
        {
          "url": "https://github.com/jdbi/jdbi/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.21.3?type=jar",
      "publisher": "FasterXML",
      "group": "com.fasterxml.jackson.core",
      "name": "jackson-core",
      "version": "2.21.3",
      "description": "Core Jackson processing abstractions (aka Streaming API), implementation for JSON",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "513c4f2160300c336a02bb13592d0d98"
        },
        {
          "alg": "SHA-1",
          "content": "3358e9345dd0f2537c47bee152c0377df6c81ad5"
        },
        {
          "alg": "SHA-256",
          "content": "baf8b739e9d9b93bcdb33f25046bfdb8dbd74c97de2a8698539fbe0c7eeac0bb"
        },
        {
          "alg": "SHA-512",
          "content": "3b1140a023f12df08e891aa1d623d01c79d1932d310cc90907603103abf1d5b1b288eba45c45a3fd292f44642d042c541ec50a17be4c6c8ec6a2e6cc6a1644d6"
        },
        {
          "alg": "SHA-384",
          "content": "7a6d40916c50e4c8f3471cf21ef9d123c38757387e98c5c209fac558b976e8628f343f1629a7903ebc428a724581e639"
        },
        {
          "alg": "SHA3-384",
          "content": "d090d6e06798b7ad7db8aa5a481d36ef8bccb38c1b026af34936d5182963e4a30db88e15ccbf3a24a45cdfd613d03d10"
        },
        {
          "alg": "SHA3-256",
          "content": "04754d7de00152f4923b4053603280bc5d88117a6e4e4257809f705b4014a321"
        },
        {
          "alg": "SHA3-512",
          "content": "56e4801e9037f7ec12ae63ac581a71cac68e2eada3723f0a834af65ff18c852350fe13486ea4458c314861455c58d79f0329eab32f9e35778ee330f879a43c22"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.21.3?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/FasterXML/jackson-core",
          "type": "website"
        },
        {
          "url": "https://central.sonatype.com/api/v1/publisher",
          "type": "distribution"
        },
        {
          "url": "https://github.com/FasterXML/jackson-core/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/FasterXML/jackson-core",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.jdbi/jdbi3-sqlobject@3.53.0?type=jar",
      "group": "org.jdbi",
      "name": "jdbi3-sqlobject",
      "version": "3.53.0",
      "description": "SqlObject is a declarative, annotation-driven API for database access. It complements the core API. Jdbi 3 is designed to provide convenient tabular data access in Java(tm) and other JVM based languages. It uses the Java collections framework for query results, provides a convenient means of externalizing SQL statements, and named parameter support for any database that supports JDBC.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "f2a385634641574a970a4576cff2f8f4"
        },
        {
          "alg": "SHA-1",
          "content": "2f03470cca31e2493287a999d8d05e6a0faebe6d"
        },
        {
          "alg": "SHA-256",
          "content": "b4acea22cd809b3797b4274fd88bc816157b375fc002c75310d44636dff439ec"
        },
        {
          "alg": "SHA-512",
          "content": "df3ea8759216145ef7d2bbf30fba976b3de327210b603fbcee6aca228d286959f3186065f856e6997050d8f72f5a18a9f7239bee555376b1b2029b75b94aaab3"
        },
        {
          "alg": "SHA-384",
          "content": "a6942dd295d97ab1b87cd9dde32a68ad73f92c23c931278751bca2ba4ae8807cc4c25e0a3e964587c69fb00325a4690b"
        },
        {
          "alg": "SHA3-384",
          "content": "253e70135d432deda7b0d9f27d79a936d3f3129aab2b733f945d2af4262aa69c420fda0291d26aa2e0502925d4b92267"
        },
        {
          "alg": "SHA3-256",
          "content": "ba096715e629c7c3b38f1e762b3feeb6257bb23a01de4c4bbaf54fbc1503f9f8"
        },
        {
          "alg": "SHA3-512",
          "content": "a1100f0f3277e18245d3189a7583768984398df42a05bcf71ca79c1099e852932d19a690481ed6e05ff6e41e7767849769f7be97ceab62db1f3381620f48b034"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.jdbi/jdbi3-sqlobject@3.53.0?type=jar",
      "externalReferences": [
        {
          "url": "https://jdbi.org/",
          "type": "website"
        },
        {
          "url": "https://github.com/jdbi/jdbi/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.jdbi/jdbi3-postgres@3.53.0?type=jar",
      "group": "org.jdbi",
      "name": "jdbi3-postgres",
      "version": "3.53.0",
      "description": "Support for additional PostgreSQL features and data types.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "a8d4950c846c951defdd4ab803940f9c"
        },
        {
          "alg": "SHA-1",
          "content": "64dc8ae4b30b0d3482848a0969727cb62ecc08b0"
        },
        {
          "alg": "SHA-256",
          "content": "4b0bdf1b2d179af5152080e9dc5f6f35407ec1622b1364fa81c58078ffa75d24"
        },
        {
          "alg": "SHA-512",
          "content": "19561efcc24661e0d49935b007cb994a6e3acd554a8f79ded17302d219f9adea7852d3263ca3bf0cc445a45800a0a1053f0cfa903108316706892497e577edcb"
        },
        {
          "alg": "SHA-384",
          "content": "bc2446c10e04a24fea6c889656f9566f08ce227281498e3bc02941881595490a86f97b5a1a98c060d5c4eea3ff71944c"
        },
        {
          "alg": "SHA3-384",
          "content": "52e588ad39be6a8c2845309ac546915f0c268eb41364359b50741d5c78e14dceecfab5303f4f20f4d94931ca2d520518"
        },
        {
          "alg": "SHA3-256",
          "content": "ff00895ffdbb0a789014e7efc098fa18d9b0fac566fe920dd55d59571e127d60"
        },
        {
          "alg": "SHA3-512",
          "content": "b7789d279d224c1e878b5188eeb120554a0cecd517210d13ea655ad7d7d4607d79b8ca3f6aaf63c2b259bc66dafae54ddbb3995f4acad76c657a6887ccee1ccd"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.jdbi/jdbi3-postgres@3.53.0?type=jar",
      "externalReferences": [
        {
          "url": "https://jdbi.org/",
          "type": "website"
        },
        {
          "url": "https://github.com/jdbi/jdbi/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.jdbi/jdbi3-freemarker@3.53.0?type=jar",
      "group": "org.jdbi",
      "name": "jdbi3-freemarker",
      "version": "3.53.0",
      "description": "Use Apache Freemarker for query templating.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "cdc2b3782e6c4213a303bfcbf3bdd7e9"
        },
        {
          "alg": "SHA-1",
          "content": "2f0f83b1b984c4167f20fca099fb83501b9f6acf"
        },
        {
          "alg": "SHA-256",
          "content": "6521f7b389cc8edee05f33de7d13771dddb641bf8b2958bf18141199f129e948"
        },
        {
          "alg": "SHA-512",
          "content": "6c7f36af0ab516156423656f39f2a90e5f4351b5ba2f035cd4517f721156ecc36208e6c43fd8a0310413efd56a90a5f52e3f5dafe2d1ad1af1c11bdf2a972e15"
        },
        {
          "alg": "SHA-384",
          "content": "e93385a993b21cd5baf50734536274660741caf5950a81507b125508ba6ecdd73c04a5f9bb9703291a5221c24a44259c"
        },
        {
          "alg": "SHA3-384",
          "content": "667a7dc420d333ad65ec1287c74ff67d9fc778a0216f590f6e0307fcb228baeacc8324ca3d11c3061d93e8feb3dee803"
        },
        {
          "alg": "SHA3-256",
          "content": "1031a9edca6b079ab02e973dbd4d2aa387497e72d8626a056c98ebbffec32ea7"
        },
        {
          "alg": "SHA3-512",
          "content": "d9f97f40c5bd525e2ae16c0046a25f465e30fd791d1fe394f59c0313c58fca5f4c498c0ef4798cb53fc6cc9ec9940d6cccb8a1960eb47d1e94e64a76a9f01d1a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.jdbi/jdbi3-freemarker@3.53.0?type=jar",
      "externalReferences": [
        {
          "url": "https://jdbi.org/",
          "type": "website"
        },
        {
          "url": "https://github.com/jdbi/jdbi/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.freemarker/freemarker@2.3.34?type=jar",
      "publisher": "Apache Software Foundation",
      "group": "org.freemarker",
      "name": "freemarker",
      "version": "2.3.34",
      "description": "FreeMarker is a \u0022template engine\u0022; a generic tool to generate text output based on templates.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "1704fd3c579385ca5fd0ebcdf50df73c"
        },
        {
          "alg": "SHA-1",
          "content": "c2fa47a1c3b6dcdfca90e952e51211967a4baa54"
        },
        {
          "alg": "SHA-256",
          "content": "9a9fb91cd64199232eb1ca9766148a5d30ef8944be5fac051018f96c70c8f6a3"
        },
        {
          "alg": "SHA-512",
          "content": "58bc6e157452f6b3a70a7d1bcfb89013e7204e716e267386014f6834fb66a56333fe4b538ef25b651913ab585bfa5c8fa010159d96ab952de42a82edb9552fca"
        },
        {
          "alg": "SHA-384",
          "content": "3def74003978738e770a121746f2fd5b3f179f117050fac529ba9a6eee104ac7d20f74a1e815f97a5bf451b3f36f0ed1"
        },
        {
          "alg": "SHA3-384",
          "content": "5636e107cd5406439d57e41ebcfa3cb068e32639941f1b7d780efb5acdb50ee99f7966b9174c52e9cfb27de22666fec6"
        },
        {
          "alg": "SHA3-256",
          "content": "22113afa6de5d146e0be2840ffd3103323b87849f020b06f24d9a70f3dfd3571"
        },
        {
          "alg": "SHA3-512",
          "content": "69c49e3ffb693fbeb98515f578c5a1bf1a6f81baf04efb21d8b2cdcbe93d59eff28f3e6d82a785c9c5b27222fc6f1bfa16a33bc08c92ea792a26a5d1b6068df9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.freemarker/freemarker@2.3.34?type=jar",
      "externalReferences": [
        {
          "url": "https://freemarker.apache.org/",
          "type": "website"
        },
        {
          "url": "https://issues.apache.org/jira/browse/FREEMARKER/",
          "type": "issue-tracker"
        },
        {
          "url": "http://mail-archives.apache.org/mod_mbox/freemarker-dev/",
          "type": "mailing-list"
        },
        {
          "url": "https://git-wip-us.apache.org/repos/asf?p=freemarker.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.jersey.ext/jersey-micrometer@4.0.2?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.glassfish.jersey.ext",
      "name": "jersey-micrometer",
      "version": "4.0.2",
      "description": "Jersey extension modules providing utilities, filters as well as integrations with external frameworks (Guice, Spring, Freemarker, etc.) and languages (Scala, Groovy, etc.). NOTE: Jersey security extensions have their own dedicated security umbrella project.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "3f236652b18c85dd1d3d42be134e5304"
        },
        {
          "alg": "SHA-1",
          "content": "f32a752d69e3ac4c4b02181bb24a8eb596437fbc"
        },
        {
          "alg": "SHA-256",
          "content": "703dd4ec1ca66d0cfe0e8a4ae5fb804b496f5160c68b881ff4730e8d63370a78"
        },
        {
          "alg": "SHA-512",
          "content": "9898a4196b1f282023471a6dabc1fb0a10e6cd614c6ff721cb0ac59eee3950e4badf532db999fca3da25df2d3880cec470112aa327bd446cea58596b79069786"
        },
        {
          "alg": "SHA-384",
          "content": "8016c540b330bffd9bfdcfe67ffa70634924af42be3caa10a03d7a652da7b2553397ad3f0db07089f3387236eaed152e"
        },
        {
          "alg": "SHA3-384",
          "content": "7a17537bf467022f7578410aefcbf826e5272cbe889956f18927806ad1bf5ea329c1541d802258bdc385480f2b6d3433"
        },
        {
          "alg": "SHA3-256",
          "content": "5816cc53154fac6d0726fc11d948884007d8bf2abbe7fdb7606ad128b887fa19"
        },
        {
          "alg": "SHA3-512",
          "content": "56c27796e3961ec83ae7154bc9c3a16970530b7607728394b8eba41c256b248726d90264e0597b67c0affa868c1562e71a14f0e448bf54958e2edebdf6839037"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        },
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        },
        {
          "license": {
            "id": "BSD-2-Clause"
          }
        },
        {
          "license": {
            "name": "Apache License, 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        },
        {
          "license": {
            "name": "Public Domain",
            "url": "https://creativecommons.org/publicdomain/zero/1.0/"
          }
        },
        {
          "license": {
            "name": "Modified BSD",
            "url": "https://asm.ow2.io/license.html"
          }
        },
        {
          "license": {
            "name": "jQuery license",
            "url": "jquery.org/license"
          }
        },
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/license/mit/"
          }
        },
        {
          "license": {
            "name": "W3C license",
            "url": "https://www.w3.org/Consortium/Legal/copyright-documents-19990405"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.jersey.ext/jersey-micrometer@4.0.2?type=jar",
      "externalReferences": [
        {
          "url": "https://projects.eclipse.org/projects/ee4j.jersey/project/jersey-micrometer",
          "type": "website"
        },
        {
          "url": "https://ci.eclipse.org/jersey",
          "type": "build-system"
        },
        {
          "url": "http://localhost",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/project/jersey-micrometer",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.jersey.core/jersey-common@4.0.2?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.glassfish.jersey.core",
      "name": "jersey-common",
      "version": "4.0.2",
      "description": "Jersey core common packages",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "727c798720203d12c8e41bbefcd3e66d"
        },
        {
          "alg": "SHA-1",
          "content": "0f45e98ad8798ee80a3904d32fffdab62c1cbbd6"
        },
        {
          "alg": "SHA-256",
          "content": "83466815c46d8f813509411986a22d1d3a2abe572b15b03078f98bc020154538"
        },
        {
          "alg": "SHA-512",
          "content": "8deadb5f070eea6d25523d8e634394f13183124aa673e5b08751371c558c49bb428452d07c74cfb477f7da53e3827818bb0ff3715fa97a19b515976a9d9fd65a"
        },
        {
          "alg": "SHA-384",
          "content": "fe3592ead798bfbe2d28093e589f2f73d73314e134f49e186ebf338c6f4ca030def8b982fc0b5fc6f9dc0c4d090d6cf7"
        },
        {
          "alg": "SHA3-384",
          "content": "17afad77ae4b187499349ffdaa877b80cf51da0e573407ab3ff550ff8f4e44f60de4861cce0a8c7ffc9f02edd688e5b9"
        },
        {
          "alg": "SHA3-256",
          "content": "5920f7c36054a487d8a66a8541fd69cf60fb01d96f6c9da1f05a52f6fbd56d50"
        },
        {
          "alg": "SHA3-512",
          "content": "fd0dc5c6ba36eae0cfaac1f2cc02676c87cf899bff7f21d3f367499a7695dab26aaa122a9a442156cd86b86dfd8a158bbaa832bfd1be89b2b902bddde043e7cb"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "name": "The GNU General Public License (GPL), Version 2, With Classpath Exception",
            "url": "https://www.gnu.org/software/classpath/license.html"
          }
        },
        {
          "license": {
            "name": "Apache License, 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        },
        {
          "license": {
            "name": "Public Domain",
            "url": "https://creativecommons.org/publicdomain/zero/1.0/"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.jersey.core/jersey-common@4.0.2?type=jar",
      "externalReferences": [
        {
          "url": "https://projects.eclipse.org/projects/ee4j.jersey/jersey-common",
          "type": "website"
        },
        {
          "url": "https://ci.eclipse.org/jersey",
          "type": "build-system"
        },
        {
          "url": "http://localhost",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/jersey-common",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.hk2/osgi-resource-locator@3.0.0?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.glassfish.hk2",
      "name": "osgi-resource-locator",
      "version": "3.0.0",
      "description": "Eclipse Enterprise for Java (EE4J) is an open source initiative to create standard APIs, implementations of those APIs, and technology compatibility kits for Java runtimes that enable development, deployment, and management of server-side and cloud-native applications.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "de9e96f2606a6f86def8659e9762c163"
        },
        {
          "alg": "SHA-1",
          "content": "5483c94aa9a7e16319abaec0a6c74c999678feac"
        },
        {
          "alg": "SHA-256",
          "content": "a1866ccfddaa29f18da5d39df662894ab2dd9902994a5000e7644f6cc1e37e55"
        },
        {
          "alg": "SHA-512",
          "content": "ff7e7fc1656bd6f938f69186aa6be1379aacdd4ba9724735c7613d76edf4496d5ff74589bbb83d42c98a22620c6eaa17319d77f878f206744be3e8677f3cba09"
        },
        {
          "alg": "SHA-384",
          "content": "65739334c0f2f3f877a4a14b4d8009711f05d37d9ab4ad3e89560c0a7635011e3dc24ab3ee31ad3f19396bc320d9962b"
        },
        {
          "alg": "SHA3-384",
          "content": "dc6237482f129cb62e8bc16233174d36d76c114b2a51de64505374105a7099454143d18e4e2700e34f6aa497740dcbc4"
        },
        {
          "alg": "SHA3-256",
          "content": "b02549e92eb21dc206488d6d7cade6f94867c537646c9ab3009fd4c119a73c2c"
        },
        {
          "alg": "SHA3-512",
          "content": "d0ed41c9b5d0fe75a12d8dbfa65df17e6d2380c25e52436929d9eaa8154f474e66447e518dbee445c4c94660882a20f509b6f69aff8081805802b7a34d518f1c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.hk2/osgi-resource-locator@3.0.0?type=jar",
      "externalReferences": [
        {
          "url": "https://projects.eclipse.org/projects/ee4j/hk2-extra-parent/osgi-resource-locator",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/ee4j/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/glassfish-hk2-extra/osgi-resource-locator",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.jersey.core/jersey-server@4.0.2?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.glassfish.jersey.core",
      "name": "jersey-server",
      "version": "4.0.2",
      "description": "Jersey core server implementation",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "d938a53dc417de9bc60f3158068dd1c4"
        },
        {
          "alg": "SHA-1",
          "content": "5b684689d7d36001b883eca81b00e4597f31f414"
        },
        {
          "alg": "SHA-256",
          "content": "c92030c36d6b72cea53464f954e23260ed1ad3559cbb653264497d83882a9aba"
        },
        {
          "alg": "SHA-512",
          "content": "df351826bf9b32dc4f76293029f9202b9141d939532e839afe1bfa504137644ef5156874eefa299db2f7e17fa204e2f7a390b87a3f3ad62282db622078546cd4"
        },
        {
          "alg": "SHA-384",
          "content": "4e00f26790de2a10b90285f7bc3ff0b094c8fb3c1870ef556920f698dcdb61809d2929448c044a686520256e007645d6"
        },
        {
          "alg": "SHA3-384",
          "content": "152cdbab19536c2c3f3d3189e58143253e4cbf35146314097da457cefacf0b96dc6aba4eb3c37195baa87fb8550f1744"
        },
        {
          "alg": "SHA3-256",
          "content": "71d88e8db96d993601980beeaf55d28e5bbbac8ba3438bd6e409ee8fed7e51dd"
        },
        {
          "alg": "SHA3-512",
          "content": "555f64a84060dd85c5ed5df97221e2a5d38d465f58a1cd60f33ad602163d858f6d08b44cf2a3e40b466db2b839e5c1a902b6ad1997edc04ea993fa15cf10c2c5"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "name": "The GNU General Public License (GPL), Version 2, With Classpath Exception",
            "url": "https://www.gnu.org/software/classpath/license.html"
          }
        },
        {
          "license": {
            "name": "Apache License, 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        },
        {
          "license": {
            "name": "Modified BSD",
            "url": "https://asm.ow2.io/license.html"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.jersey.core/jersey-server@4.0.2?type=jar",
      "externalReferences": [
        {
          "url": "https://projects.eclipse.org/projects/ee4j.jersey/jersey-server",
          "type": "website"
        },
        {
          "url": "https://ci.eclipse.org/jersey",
          "type": "build-system"
        },
        {
          "url": "http://localhost",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/jersey-server",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.jersey.core/jersey-client@4.0.2?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.glassfish.jersey.core",
      "name": "jersey-client",
      "version": "4.0.2",
      "description": "Jersey core client implementation",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "9c61cbd9c4fc6749f0dc2338ea0eb870"
        },
        {
          "alg": "SHA-1",
          "content": "15a14c04c458dc9eafc12af7d33ed43fd78dab04"
        },
        {
          "alg": "SHA-256",
          "content": "91fd986ee7c7fa468b2f601d7a2cdf9bfad6ce4fa0fbf5d4f7e6d0c07c12a023"
        },
        {
          "alg": "SHA-512",
          "content": "3121c7fa53d914bb2af504ca183b245bc3184fb080f1d1b2cc0721c733be3e6c4b8cda1c4860ce0646ccd921ea83f6d145af529fa595fe6aacb4bc14644b7250"
        },
        {
          "alg": "SHA-384",
          "content": "754112b2b37246559223abb5d8cf6828ef82507b732c2abe2bdbf28c343cd1815266ddfedb7e8a16797547cda70cd053"
        },
        {
          "alg": "SHA3-384",
          "content": "334b0e0352e584761bedab51a1220f6d1ba8d4cd4221a9cc6fd1ce90d528e5f00c1fe716bdf06b9babb8f757f0740ea0"
        },
        {
          "alg": "SHA3-256",
          "content": "4ea8a1ec58dfa91a85277f085b64b3d5c979984bb50ebe60900b335f21f5ebf5"
        },
        {
          "alg": "SHA3-512",
          "content": "808a3272d41658fcfe831cc2b482968d3962544ffcf8d00d45096f80bfb37b4415b6cb72e1f608f42f04a397ba843f677a8970fcb18267aede08b1c8ad20c928"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        },
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        },
        {
          "license": {
            "id": "BSD-2-Clause"
          }
        },
        {
          "license": {
            "name": "Apache License, 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        },
        {
          "license": {
            "name": "Public Domain",
            "url": "https://creativecommons.org/publicdomain/zero/1.0/"
          }
        },
        {
          "license": {
            "name": "Modified BSD",
            "url": "https://asm.ow2.io/license.html"
          }
        },
        {
          "license": {
            "name": "jQuery license",
            "url": "jquery.org/license"
          }
        },
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/license/mit/"
          }
        },
        {
          "license": {
            "name": "W3C license",
            "url": "https://www.w3.org/Consortium/Legal/copyright-documents-19990405"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.jersey.core/jersey-client@4.0.2?type=jar",
      "externalReferences": [
        {
          "url": "https://projects.eclipse.org/projects/ee4j.jersey/jersey-client",
          "type": "website"
        },
        {
          "url": "https://ci.eclipse.org/jersey",
          "type": "build-system"
        },
        {
          "url": "http://localhost",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/jersey-client",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@4.0.0?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "jakarta.ws.rs",
      "name": "jakarta.ws.rs-api",
      "version": "4.0.0",
      "description": "Jakarta RESTful Web Services",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "9b7cc90c000f193157d60d95caf45972"
        },
        {
          "alg": "SHA-1",
          "content": "c27a67f84ca491efcb3fa68f4df926e8a110069e"
        },
        {
          "alg": "SHA-256",
          "content": "6368b126cbcf34e694bb9ba5b9fe3e5040b7acea7ce622e636d698bb085fd2a6"
        },
        {
          "alg": "SHA-512",
          "content": "e423f90e5f20d133986c60c3fc2f63cfc74531d51b57bf38942cf8e603d8c6817005708117b0bb07e242eae3ba6e1cf23c6ded8fb2776274a9382505ea726ac1"
        },
        {
          "alg": "SHA-384",
          "content": "494b2962ad17d9477d58125cd99d4c0e52e58e10b7ad81e66196649da6651a3187d1ccf64e642083d0a6e54c70f07401"
        },
        {
          "alg": "SHA3-384",
          "content": "1803d40582c05b6956cfeb2cfc7b39c03f2211d4d8511b2b9df2fc4c5830f5a1f8e05d86731f4b168caa3a78bae28d69"
        },
        {
          "alg": "SHA3-256",
          "content": "5e91619ebc4cc811f1639acf926dc4935ac38808d5d834b6d6f26784d7299e9b"
        },
        {
          "alg": "SHA3-512",
          "content": "48c8ed0acd56c83a0d9413bdaa950c92345ac0f36491745e8675b96909c35311fcb05bd80839d0d1247eb5b373754ce5d922d99d06cd1ef9f6063a491e51d671"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0",
            "url": "https://www.eclipse.org/legal/epl-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception",
            "url": "https://www.gnu.org/software/classpath/license.html"
          }
        }
      ],
      "purl": "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@4.0.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/jakartaee/rest/jakarta.ws.rs-api",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/jakartaee/rest/issues",
          "type": "issue-tracker"
        },
        {
          "url": "jaxrs-dev@eclipse.org",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/jakartaee/rest/jakarta.ws.rs-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/us.springett/owasp-risk-rating-calculator@1.0.1?type=jar",
      "group": "us.springett",
      "name": "owasp-risk-rating-calculator",
      "version": "1.0.1",
      "description": "A Java library for calculating OWASP Risk Rating scores",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "f387d7ce91df7f1b56224b972b916ebe"
        },
        {
          "alg": "SHA-1",
          "content": "f4ae15b14d7a4c3686f6a8a8a93e30560472b1f8"
        },
        {
          "alg": "SHA-256",
          "content": "9b66d91d1ff61f99e320466ff451555696f139147260528591ff1718c5605d1c"
        },
        {
          "alg": "SHA-512",
          "content": "449331aaabc401a7c7ac42c6bba06d17a2c2dc8def07961b93de7bde8fb9f54aa2541cbab7e541b6fa1552977d46e5367a78277cffbafc60873bb7042facff65"
        },
        {
          "alg": "SHA-384",
          "content": "e83afc9976cfcb5419768fdba983815bf755101fef34df693b6033094e12a29d23127148edef4ba6db3573e0b2bb3871"
        },
        {
          "alg": "SHA3-384",
          "content": "07bed3d3cc524090d01da7711e684d7c645e9225e38225ca92da6f58f3ae86c9d9f2e1a45ad923f9345abecb609c0be1"
        },
        {
          "alg": "SHA3-256",
          "content": "153dbb661c502fd174cdbb735a0a89f69555365e165dd6a91d7c765226b9947a"
        },
        {
          "alg": "SHA3-512",
          "content": "6c6bb8298f8f3337395693f4963d08d21d7f76e6ef8802773e37efc64b1b25a6f8ec77169f730591f429cfa5ac5f6a1b2ef0948af67fa49f19cf7ba8a0223f25"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/us.springett/owasp-risk-rating-calculator@1.0.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/stevespringett/owasp-risk-rating-calculator",
          "type": "website"
        },
        {
          "url": "https://travis-ci.org/stevespringett/owasp-risk-rating-calculator",
          "type": "build-system"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/stevespringett/owasp-risk-rating-calculator/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/stevespringett/owasp-risk-rating-calculator.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/us.springett/cpe-parser@3.0.1?type=jar",
      "group": "us.springett",
      "name": "cpe-parser",
      "version": "3.0.1",
      "description": "A utility for validating and parsing Common Platform Enumeration (CPE) v2.2 and v2.3 as originally defined by MITRE and maintained by NIST.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "753b3f9a2223c44111f7098ff8a65e3f"
        },
        {
          "alg": "SHA-1",
          "content": "377c4cdca1c3c800dd1ff77d6b5cece16dbf1852"
        },
        {
          "alg": "SHA-256",
          "content": "f98a50dce0a381e08f0f0ac067801c7f4c51dc7f8f1fe7a3c9960c684a809705"
        },
        {
          "alg": "SHA-512",
          "content": "241e1a559ac01966f74e820d0af3fb4f79ec41b76590f26198929790a35579f5663d3d8f97b98e841665f57eb5bc6c51370969f0db34c99c3293c6d98093d9c2"
        },
        {
          "alg": "SHA-384",
          "content": "92929bc29a157cbe13d424875e5a66eacd52b2e20a412306ae48a43076123dca75f1cf0d6d075e140cec34e4bf7a5e25"
        },
        {
          "alg": "SHA3-384",
          "content": "bf36fd4e57aa02054d12018926b7fdb8f89b1fa669b1b4c7ff8327c3203c86843c53825facedd34b86c6d95455ce1907"
        },
        {
          "alg": "SHA3-256",
          "content": "064ece86c096355ca9a06fb4942fb3abac3555e8213653fce7ed1f7767b5531d"
        },
        {
          "alg": "SHA3-512",
          "content": "2f005c9caa28acb5a4f9d521a4b847316f949f9f377bbad4cf25ba485127104717bab5e2382238c4f7349d598eb4de073f08dea0838990d32b6d1f2741b33fc5"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/us.springett/cpe-parser@3.0.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/stevespringett/CPE-Parser",
          "type": "website"
        },
        {
          "url": "https://github.com/stevespringett/CPE-Parser/actions/workflows/maven.yml",
          "type": "build-system"
        },
        {
          "url": "https://github.com/stevespringett/CPE-Parser/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/stevespringett/CPE-Parser.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.cyclonedx/cyclonedx-core-java@12.1.0?type=jar",
      "publisher": "OWASP Foundation",
      "group": "org.cyclonedx",
      "name": "cyclonedx-core-java",
      "version": "12.1.0",
      "description": "The CycloneDX core module provides a model representation of the BOM along with utilities to assist in creating, parsing, and validating BOMs.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "dabcf66c24dc633f2d7b88a69beeb16d"
        },
        {
          "alg": "SHA-1",
          "content": "449f227a8e1603880fff41789a8c1d3a090b42ec"
        },
        {
          "alg": "SHA-256",
          "content": "9f7c0dba25f5c02eccf3d79dea9566f1794e3e357655286c4831480952ab4788"
        },
        {
          "alg": "SHA-512",
          "content": "9691c6928c7681ec3b733b02febd2b95c1727d8fb8d25fe5dc116d0bbba33bfff688bcaf38b709d605516924bcc3156b404d699c94ca119682e362f8fcda4926"
        },
        {
          "alg": "SHA-384",
          "content": "57f1d23616aae2409e17165c172f290349a51a088189e37751460b97dc08e20028bd52121d9b4a97a98cf3d5b8245079"
        },
        {
          "alg": "SHA3-384",
          "content": "e7f119b0488c8f78e2afb47c253e6c39c5f1cc80beaa0c6c44924654362a0d475b885a4605253c0b8a3ca4ec1587d60e"
        },
        {
          "alg": "SHA3-256",
          "content": "f34c7330ac0e58fadd1c82c0f0cdc21984840b63f07fea340a7b8f2acdae3701"
        },
        {
          "alg": "SHA3-512",
          "content": "3fa4373bd6178acba5a6da96c137108ca1ece1fb916c2a804da935c5febd38cc02684284126884b925759a2d8aeff3c4611caca3a24e201630ef9b76567f4ce8"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.cyclonedx/cyclonedx-core-java@12.1.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/CycloneDX/cyclonedx-core-java",
          "type": "website"
        },
        {
          "url": "https://github.com/CycloneDX/cyclonedx-core-java/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/CycloneDX/cyclonedx-core-java/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/commons-codec/commons-codec@1.21.0?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "commons-codec",
      "name": "commons-codec",
      "version": "1.21.0",
      "description": "The Apache Commons Codec component contains encoders and decoders for formats such as Base16, Base32, Base64, digest, and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a collection of phonetic encoding utilities.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "c49977029838babaf8a71485aa9aaef8"
        },
        {
          "alg": "SHA-1",
          "content": "d95f998db5f89900fe895daf6cd2cddcb2f1d64b"
        },
        {
          "alg": "SHA-256",
          "content": "4da851cb6abfb98bfe9eb77c5e5fc47f5414fa28b94e21b7fd9a646705dc167f"
        },
        {
          "alg": "SHA-512",
          "content": "3ceb4aa588d0b918e46b1ddda9ff41b5a765985bf66542d2728458fc3f83b9dedfd972ff5d919cf6f456fbaa9f8c4e5f0c0913848ec3a471c316374e683b1f2a"
        },
        {
          "alg": "SHA-384",
          "content": "05786582b0a85264688ad5b49ad6da09db1cdfe6301cf31ddea48f97f45b13ff25d9e3def1702890457fd5bbbd00f793"
        },
        {
          "alg": "SHA3-384",
          "content": "805bda170837bbedbecc5c63a5defc6a348777952906d8e6f33544866e86aa25c9d28f3b351e981d0fa49bb16e07884c"
        },
        {
          "alg": "SHA3-256",
          "content": "cbc2eafcba305c08e852133d0881d209799c4dc83d587869eed5f281d6bed4f3"
        },
        {
          "alg": "SHA3-512",
          "content": "244e6a342d4b5a6e7d077426427979f26320be305f1cb33d933672c926ea3a96fe4f284c9f592970f604928209fe0e149613b64990202d595bce01a669de418b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/commons-codec/commons-codec@1.21.0?type=jar",
      "externalReferences": [
        {
          "url": "https://commons.apache.org/proper/commons-codec/",
          "type": "website"
        },
        {
          "url": "https://github.com/apache/commons-codec/actions",
          "type": "build-system"
        },
        {
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2",
          "type": "distribution"
        },
        {
          "url": "https://issues.apache.org/jira/browse/CODEC",
          "type": "issue-tracker"
        },
        {
          "url": "https://mail-archives.apache.org/mod_mbox/commons-user/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/apache/commons-codec",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.commons/commons-collections4@4.5.0?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.commons",
      "name": "commons-collections4",
      "version": "4.5.0",
      "description": "The Apache Commons Collections package contains types that extend and augment the Java Collections Framework.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "d564105594035b363b193d8ce3c18b98"
        },
        {
          "alg": "SHA-1",
          "content": "e5cf89f0c6e132fc970bd9a465fdcb8dbe94f75a"
        },
        {
          "alg": "SHA-256",
          "content": "00f93263c267be201b8ae521b44a7137271b16688435340bf629db1bac0a5845"
        },
        {
          "alg": "SHA-512",
          "content": "ee43c513ac9dcbd7dd23b5cbb4ea5f65a2e10cdfbb403d080b87e778b3b45062315522297c41eca514a9a946228ad7650f0a572d5b78effb8260dd8084131988"
        },
        {
          "alg": "SHA-384",
          "content": "73db8eb3e79569b3fa62aefdce413e6ea250b9853953cb75b9d5ce0f2f35b59b6e86ef708326a608ff20d95bdade8522"
        },
        {
          "alg": "SHA3-384",
          "content": "7a9c035fa846cdcebd4331eb86ed31a67595518299a8bee54597c1eb663aee63214553a561a510b929035266c2a4800b"
        },
        {
          "alg": "SHA3-256",
          "content": "614c41bfd8f9c6c1c1e5667c5be45587c3021b780937ad62f54d17051f425086"
        },
        {
          "alg": "SHA3-512",
          "content": "3cfd12ec2d03ed29b682123cedae422a4c6dc459034a7e0ab5f00ccd422cb9a2ec423a08b953119c426569b888157a6d80aa0e0c63debea50c5c54c481e2eff5"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.commons/commons-collections4@4.5.0?type=jar",
      "externalReferences": [
        {
          "url": "https://commons.apache.org/proper/commons-collections/",
          "type": "website"
        },
        {
          "url": "https://github.com/apache/commons-parent/actions",
          "type": "build-system"
        },
        {
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2",
          "type": "distribution"
        },
        {
          "url": "https://issues.apache.org/jira/browse/COLLECTIONS",
          "type": "issue-tracker"
        },
        {
          "url": "https://mail-archives.apache.org/mod_mbox/commons-user/",
          "type": "mailing-list"
        },
        {
          "url": "https://gitbox.apache.org/repos/asf?p=commons-collections.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.21.3?type=jar",
      "publisher": "FasterXML",
      "group": "com.fasterxml.jackson.dataformat",
      "name": "jackson-dataformat-xml",
      "version": "2.21.3",
      "description": "Data format extension for Jackson to offer alternative support for serializing POJOs as XML and deserializing XML as POJOs.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "10109a3b4a1798ab10551ee081d1a86c"
        },
        {
          "alg": "SHA-1",
          "content": "e3bdcc80b645f1c8780b3b3583787f6019540fee"
        },
        {
          "alg": "SHA-256",
          "content": "a434f465462c7c5f471e965f4a7d1eaddee957cbf674f8f2c578ab2295f8939d"
        },
        {
          "alg": "SHA-512",
          "content": "4401ef078cb23d300dc7d9b467f17165b7c12a9b968f626e1d54892863e5ed0fb989dfdb167959971c898bfebd8af356df7594199673a610cfba8410bd420348"
        },
        {
          "alg": "SHA-384",
          "content": "837909513f29b0f90c47b9dae8b833a8b18bc74e4833cc4b27e0d846cb1b4b471357be99b61264970c4d4519c97b9ea9"
        },
        {
          "alg": "SHA3-384",
          "content": "4edc2c593630006b54682fed4846c0edaf26422190e1b867f05928612490b27ba73e301b1470b8309f339569bdea3786"
        },
        {
          "alg": "SHA3-256",
          "content": "ea9aa8cf8a8e88ecba5b14ba58dd2c5929abb0855e4a6ea67513fb078dd23097"
        },
        {
          "alg": "SHA3-512",
          "content": "a901de954bb0c7ddb14af9d045785c050e1c0884121ec1421b5e0a473e031671a2523c92164588b64fabac2b7b22092f5c09f60c1a1178abd74cdac440cef541"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.21.3?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/FasterXML/jackson-dataformat-xml",
          "type": "website"
        },
        {
          "url": "https://central.sonatype.com/api/v1/publisher",
          "type": "distribution"
        },
        {
          "url": "https://github.com/FasterXML/jackson-dataformat-xml/issues",
          "type": "issue-tracker"
        },
        {
          "url": "http://github.com/FasterXML/jackson-dataformat-xml",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/jakarta.activation/jakarta.activation-api@2.1.3?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "jakarta.activation",
      "name": "jakarta.activation-api",
      "version": "2.1.3",
      "description": "Jakarta Activation API 2.1 Specification",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "76e7b680375ea9f40f3ddbd702efcd25"
        },
        {
          "alg": "SHA-1",
          "content": "fa165bd70cda600368eee31555222776a46b881f"
        },
        {
          "alg": "SHA-256",
          "content": "01b176d718a169263e78290691fc479977186bcc6b333487325084d6586f4627"
        },
        {
          "alg": "SHA-512",
          "content": "aaabd4d6085a07035eaaae7b5a81aef429fea76e7fe1c8d29971e6595f0adad6bcf1088cff8a1c8936d739b0e3fce4b845323032f046b7edab2eaebd0e10a2ad"
        },
        {
          "alg": "SHA-384",
          "content": "4c4e73f59bf09342ca7691fd4855b41d3466da80618a5b7df059a2d89cf6d9779a4af751a6c4a9c48e5025c3ff75f42e"
        },
        {
          "alg": "SHA3-384",
          "content": "20be816700c87778e9453d41b6d8cb9dc992a092a308a9b7f2dfbf72e2393940a7d666c46625f130a2b57bc414df85ca"
        },
        {
          "alg": "SHA3-256",
          "content": "8a574b0a249842ea1b397d4cdef9b6d00b34ce8a849ea34184cdf45ac5aafe67"
        },
        {
          "alg": "SHA3-512",
          "content": "69cfb7dddda70ac1fca272ace0a3d5551b85dd60a6dbaf987ee777fbf573b420d13f06b8990ae70e8fe063f92b78c8a447cf9309ba516a5e993ba2d49cca8d23"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/jakarta.activation/jakarta.activation-api@2.1.3?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/jakartaee/jaf-api",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/jakartaee/jaf-api/issues/",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/jakartaee/jaf-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/jakarta.servlet/jakarta.servlet-api@6.1.0?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "jakarta.servlet",
      "name": "jakarta.servlet-api",
      "version": "6.1.0",
      "description": "Eclipse Enterprise for Java (EE4J) is an open source initiative to create standard APIs, implementations of those APIs, and technology compatibility kits for Java runtimes that enable development, deployment, and management of server-side and cloud-native applications.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "314c930b3e40ac1abc3529c7c9942f09"
        },
        {
          "alg": "SHA-1",
          "content": "1169a246913fe3823782af7943e7a103634867c5"
        },
        {
          "alg": "SHA-256",
          "content": "8a31f465f3593bf2351531a5c952014eb839da96a605b5825b93dd54714c48c4"
        },
        {
          "alg": "SHA-512",
          "content": "8651fc14b79e284fe29dff5b2cadbf6748615ececde798c42687472f4f6fd1f80ee05ec53794021c62a11abed0c0170bb08b28d3f9cd7f562eb320bc9870ddec"
        },
        {
          "alg": "SHA-384",
          "content": "48b2a26351619286ffe41d25e5e61cbc0eb8a5a648a205d0f8db48178278cb16850469fe8dbc219aee0ee37f4081c248"
        },
        {
          "alg": "SHA3-384",
          "content": "2047f0b88a12619fb3f07a98048fc405e9cec4ddee6af2a2efc06c1172d2bebefc6c23bdb4df0a1054060f91d5cc5617"
        },
        {
          "alg": "SHA3-256",
          "content": "4b506d06772f32251cadc40251623ebd4f3144531249ce4821787b1a9c4a55b3"
        },
        {
          "alg": "SHA3-512",
          "content": "07632a67f7ca7b460cfc3042ecf97f9097e7d7638209434def89a3bd55da5a31e287f32def27ce776d5775ec0629979abb08fe2836d88d638802194af0320fe0"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl": "pkg:maven/jakarta.servlet/jakarta.servlet-api@6.1.0?type=jar",
      "externalReferences": [
        {
          "url": "https://projects.eclipse.org/projects/ee4j.servlet",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/servlet-api/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/servlet-dev",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/servlet-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.eclipse.jetty/jetty-server@12.1.9?type=jar",
      "publisher": "Webtide",
      "group": "org.eclipse.jetty",
      "name": "jetty-server",
      "version": "12.1.9",
      "description": "Jetty Server Artifact",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "16bbb6d08db98909901b235e132a51f6"
        },
        {
          "alg": "SHA-1",
          "content": "d9b173609c17b7ff258b03f9dd79192c4684d12a"
        },
        {
          "alg": "SHA-256",
          "content": "5dfc3736056cd941a783b21e50c983c235c1b0a593d4b0d2954966173a3f6a3e"
        },
        {
          "alg": "SHA-512",
          "content": "5b9a29a4cc343f7db9f003a5560c786ef117b02369b8a55f0e672cc1cc6432c17669b3c97ff005b70552180a73c1abe36745794e26dc3e31d8d4896a5dde0e85"
        },
        {
          "alg": "SHA-384",
          "content": "d17b94811c3b33a21479cb6b5138eb916e503460b1ba84778295f4eea11c6cdee975ee0711a3ac2d5c4dc224ca4e7795"
        },
        {
          "alg": "SHA3-384",
          "content": "e63ecb4afb3b12696a88f09270f9bd5f1bf24e05eec7977118232659e54f6ed87f3be11bad705b670cb5619b6bad0466"
        },
        {
          "alg": "SHA3-256",
          "content": "4475067f71ce1fd538aea75882eedfaae6d835909b6e9236e31c8b4010e1b556"
        },
        {
          "alg": "SHA3-512",
          "content": "5f231e278d289a31995d9c883e180fb4ff00f24a54d22c1033ea20f963d0e23bda608bdef037196f243280fa005402b93671605f115f2ed3b6c49f5d254734cd"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0",
            "url": "https://www.eclipse.org/legal/epl-2.0"
          }
        },
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.eclipse.jetty/jetty-server@12.1.9?type=jar",
      "externalReferences": [
        {
          "url": "https://jetty.org/jetty-core/jetty-server",
          "type": "website"
        },
        {
          "url": "https://repo.maven.apache.org/maven2",
          "type": "distribution"
        },
        {
          "url": "https://github.com/jetty/jetty.project/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://www.eclipse.org/lists/jetty-dev/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/jetty/jetty.project/jetty-core/jetty-server",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.eclipse.jetty/jetty-http@12.1.9?type=jar",
      "publisher": "Webtide",
      "group": "org.eclipse.jetty",
      "name": "jetty-http",
      "version": "12.1.9",
      "description": "Jetty HTTP Artifact",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "957922ad8031fa851fb697f866f30e8f"
        },
        {
          "alg": "SHA-1",
          "content": "d4c8ce16b394a2cbea4834781d734e314bf26cfb"
        },
        {
          "alg": "SHA-256",
          "content": "857eaf5e7823f9ee91099db5bedd179b7d3e93653ac288e27321544231014df0"
        },
        {
          "alg": "SHA-512",
          "content": "76fd6ba75fa2a2be9bcde0578303dff917cae8850957728f593b97110b7df665670f52aba8ed14719f334c3c2372de92a4db9b4491ffcf9026265be2fba3242f"
        },
        {
          "alg": "SHA-384",
          "content": "a37cc182c39ea15bb2d0be37368f746fe6327b3b422e9b1d9ef8351d4bc4b13b750170ec4d1ea0ab88c1705ae58aa4bc"
        },
        {
          "alg": "SHA3-384",
          "content": "435b0ec402af3907c216115c26282a211ca0f919f168759537eed04ed92d47d722d0d92d6c4fe647ba4747243352c181"
        },
        {
          "alg": "SHA3-256",
          "content": "cc2e25388af780b5ad283cdf995ba623830dbd058f63cd4a66d7e14f25592ec0"
        },
        {
          "alg": "SHA3-512",
          "content": "886f0bfddbd019759b588b08a8242128a4fbc064284b4b8d5682f1a2cca223e556e4feda76061cb3fe035679bd6808f6cb5b4b9f2d698cb62587f285ab4d3e5e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0",
            "url": "https://www.eclipse.org/legal/epl-2.0"
          }
        },
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.eclipse.jetty/jetty-http@12.1.9?type=jar",
      "externalReferences": [
        {
          "url": "https://jetty.org/jetty-core/jetty-http",
          "type": "website"
        },
        {
          "url": "https://repo.maven.apache.org/maven2",
          "type": "distribution"
        },
        {
          "url": "https://github.com/jetty/jetty.project/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://www.eclipse.org/lists/jetty-dev/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/jetty/jetty.project/jetty-core/jetty-http",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.eclipse.jetty/jetty-util@12.1.9?type=jar",
      "publisher": "Webtide",
      "group": "org.eclipse.jetty",
      "name": "jetty-util",
      "version": "12.1.9",
      "description": "Jetty Utilities Artifact",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "5a450ba05c7252a83c57e727f273c501"
        },
        {
          "alg": "SHA-1",
          "content": "d8a512027f8ccf8aa2299d4fdd5cd7ca1edc6fa1"
        },
        {
          "alg": "SHA-256",
          "content": "bb228358d4ae45c004d949edc397de1eb8aabc7adc5f9b9cbc833336e70a23bd"
        },
        {
          "alg": "SHA-512",
          "content": "bb2878f56eafbdb024644bd4cad7813f86f2be75c559c8cfe285ca698b78deb08498fe4f5e73c2d18fa485c961479a9ce5aedc251274421ab92019beb1a3ae13"
        },
        {
          "alg": "SHA-384",
          "content": "195e01855ef7b179dfce12c8cc2a2d43e4eff4fbbc37ff92247e5c723c0f0c6fe6db5601497a5a5b8936e945e4468b14"
        },
        {
          "alg": "SHA3-384",
          "content": "802e40fc483e2deef0f387bba58b06276c6f201285b20fe66d8ab8bf1ae947f44feba324a630d5df79233da03dd9c55e"
        },
        {
          "alg": "SHA3-256",
          "content": "c597615133d62662e3daaba93c09eb785cf09759898ed407d73145d4061a6f5a"
        },
        {
          "alg": "SHA3-512",
          "content": "77c0b5a9baf83a9293012e9d13968e2a8f1de974052a6b5cbe14033f5945731dde3101290899411be5a2e3f26d0146d99f80cc6ec7a49bc093bd94544c7d0aa1"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0",
            "url": "https://www.eclipse.org/legal/epl-2.0"
          }
        },
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.eclipse.jetty/jetty-util@12.1.9?type=jar",
      "externalReferences": [
        {
          "url": "https://jetty.org/jetty-core/jetty-util",
          "type": "website"
        },
        {
          "url": "https://repo.maven.apache.org/maven2",
          "type": "distribution"
        },
        {
          "url": "https://github.com/jetty/jetty.project/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://www.eclipse.org/lists/jetty-dev/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/jetty/jetty.project/jetty-core/jetty-util",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.eclipse.jetty/jetty-io@12.1.9?type=jar",
      "publisher": "Webtide",
      "group": "org.eclipse.jetty",
      "name": "jetty-io",
      "version": "12.1.9",
      "description": "Jetty I/O Artifact",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "e2b075927f922ce8bb84ae7742a5bcab"
        },
        {
          "alg": "SHA-1",
          "content": "eded2b009448a5e44e16addd2fbb66701fe6456b"
        },
        {
          "alg": "SHA-256",
          "content": "904c1680e74705794c15f9df2a9ccfb155152bdd3067521fd6522df009bfa9d9"
        },
        {
          "alg": "SHA-512",
          "content": "8cda5c20b675f9fcbd0ca3032183f954d44e2d353325afed631f56a41e85b1c872bab05f549f7efd1eb95f334468ce599e40ea1a2d8f0836538031646f625497"
        },
        {
          "alg": "SHA-384",
          "content": "9fffd7cd604f06e58529b817df0bf017ab57771ccdc3776e2e3c72cf2004fbc09a9bf9b760993db7e135b6add16eb1f6"
        },
        {
          "alg": "SHA3-384",
          "content": "4177dcffaa33f121832ae6afe93b688f64b082f00d752f2adc8e313d8bd874bb2a0187697c09ef288d0de75ad6cd89d5"
        },
        {
          "alg": "SHA3-256",
          "content": "29bc9d192834b1db69a0dc804a610f70ced31740f36f81b79857c4c3d2f4751d"
        },
        {
          "alg": "SHA3-512",
          "content": "b3b4396e11594b070c697b1fddd2b1d7d84da1e43d4552c7ac1ed50849a663eba2de02e88a17c76eecce73b869a0e1a29c3d41d309bbe3d9449818444791ed95"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0",
            "url": "https://www.eclipse.org/legal/epl-2.0"
          }
        },
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.eclipse.jetty/jetty-io@12.1.9?type=jar",
      "externalReferences": [
        {
          "url": "https://jetty.org/jetty-core/jetty-io",
          "type": "website"
        },
        {
          "url": "https://repo.maven.apache.org/maven2",
          "type": "distribution"
        },
        {
          "url": "https://github.com/jetty/jetty.project/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://www.eclipse.org/lists/jetty-dev/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/jetty/jetty.project/jetty-core/jetty-io",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.eclipse.jetty.compression/jetty-compression-gzip@12.1.9?type=jar",
      "publisher": "Webtide",
      "group": "org.eclipse.jetty.compression",
      "name": "jetty-compression-gzip",
      "version": "12.1.9",
      "description": "Jetty Compression Gzip Artifact",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "3c95592a52488248b09dabc25c39b769"
        },
        {
          "alg": "SHA-1",
          "content": "7433139b49e24d51cf5e75102d78b3d39c43dd97"
        },
        {
          "alg": "SHA-256",
          "content": "ce9754ca916c696d26d750ae6702a8d22ec1a03b8053e5c5502d409142da87f3"
        },
        {
          "alg": "SHA-512",
          "content": "ea51180bb322c22558a26bd4bb33e7e8f50f8c09d46398c71000af741d2d9290b947a9b404b686badabc7943fff883ddb9ba6c272ee175a8c5100ab133b7dc53"
        },
        {
          "alg": "SHA-384",
          "content": "12ca06f4f5eebb88980aaa3a8f33058a77e19b7bfe13652803e5e809716a1bef233bdbdad49e22bc217af7605609b588"
        },
        {
          "alg": "SHA3-384",
          "content": "b2db1b0f4d12fabfee8d7314bfd8dd664c9c1d9816dc9cbdd04c445f55167d390da023a6d600e523a98525f87d3c64dc"
        },
        {
          "alg": "SHA3-256",
          "content": "3dbdcef6b42c4786b02ff173e944f4ebf4fa47e8314db3dca5d330240e795318"
        },
        {
          "alg": "SHA3-512",
          "content": "cd31fdd0bcf278f5ccfe6632ced4b9b839d32b1cf44fe7adf59cb2b96efcca7d17092e063e437a61935279831b66a987be5c37fb6bbfab4948adf1499fc7d400"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0",
            "url": "https://www.eclipse.org/legal/epl-2.0"
          }
        },
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.eclipse.jetty.compression/jetty-compression-gzip@12.1.9?type=jar",
      "externalReferences": [
        {
          "url": "https://jetty.org/jetty-core/jetty-compression/jetty-compression-gzip",
          "type": "website"
        },
        {
          "url": "https://repo.maven.apache.org/maven2",
          "type": "distribution"
        },
        {
          "url": "https://github.com/jetty/jetty.project/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://www.eclipse.org/lists/jetty-dev/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/jetty/jetty.project/jetty-core/jetty-compression/jetty-compression-gzip",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.eclipse.jetty.compression/jetty-compression-common@12.1.9?type=jar",
      "publisher": "Webtide",
      "group": "org.eclipse.jetty.compression",
      "name": "jetty-compression-common",
      "version": "12.1.9",
      "description": "Jetty Compression Common Artifact",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "eef60a9aa64796c32dd9ee284f43cb18"
        },
        {
          "alg": "SHA-1",
          "content": "b5d45ac4d8396a78ec879d44bec19c4efaddf60d"
        },
        {
          "alg": "SHA-256",
          "content": "0c54ab8f546235088ef8cd6552f7ed876b1d204f75d6de3ae614142338b4c934"
        },
        {
          "alg": "SHA-512",
          "content": "f5f38534072a8d08ac0e3ee68837a4d11116603554c7a31f21e6073a5b5209738443bfb4a3e8cb3e4c6397fb715322c1a4c930ff67e2581af159d9083a258a43"
        },
        {
          "alg": "SHA-384",
          "content": "7e20e040e6cabf3cdb5c9d09053ec4eb8f6afeff41a68eca54ca669e791cda8903494b5df1ab3d36dab6a12ff747ac87"
        },
        {
          "alg": "SHA3-384",
          "content": "2638ff53825049aa9978c724731a4d978888add0eeaa56a4a6e31b3ac9e4ded5194b4a714ba1e5144ca8b25d3ed44287"
        },
        {
          "alg": "SHA3-256",
          "content": "118272ca2f13ceed35330e9a3967f691e6d27f705b8a5d27d1f39ad4f109607d"
        },
        {
          "alg": "SHA3-512",
          "content": "eb938fc8a8b118df1ee237a96a171fee480b4d2df6fcfc3054d02194134492c380bf2d4afc19e097643613c1586cc1e4ffcf3ed5abd3521134635fc5cb79b0b7"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0",
            "url": "https://www.eclipse.org/legal/epl-2.0"
          }
        },
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.eclipse.jetty.compression/jetty-compression-common@12.1.9?type=jar",
      "externalReferences": [
        {
          "url": "https://jetty.org/jetty-core/jetty-compression/jetty-compression-common",
          "type": "website"
        },
        {
          "url": "https://repo.maven.apache.org/maven2",
          "type": "distribution"
        },
        {
          "url": "https://github.com/jetty/jetty.project/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://www.eclipse.org/lists/jetty-dev/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/jetty/jetty.project/jetty-core/jetty-compression/jetty-compression-common",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.eclipse.jetty.compression/jetty-compression-server@12.1.9?type=jar",
      "publisher": "Webtide",
      "group": "org.eclipse.jetty.compression",
      "name": "jetty-compression-server",
      "version": "12.1.9",
      "description": "Jetty Compression Server Artifact",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "0d0dc8548e7df7b9927bbda34b261924"
        },
        {
          "alg": "SHA-1",
          "content": "5a4de89661cc1cbd803d01bf8737ecf41cfe48f1"
        },
        {
          "alg": "SHA-256",
          "content": "0aa0fb2032b156334a13d83631fb18936154368b2a426ad2359f226bcfda7fe6"
        },
        {
          "alg": "SHA-512",
          "content": "4deda5f459f31c4840afc5f388c38a380716889a1975312c245a586f55050265b3c5c5509954b8cc95de50a9e9e34a70115f4c2513b10cb990e44a42d9956398"
        },
        {
          "alg": "SHA-384",
          "content": "77bf21423405d031b1cb0fdcf5abfe8f79630436af7eb0ac415ff3ffe25a5e8a0068099f6e8fe1ec03cda2fe49c62a11"
        },
        {
          "alg": "SHA3-384",
          "content": "3377daf3f0abeb709b80f51bdbb46876d8ea43cedfd029d425b62cd972094df75b647ee3e4b3c2f7ca10ecba5b718a9b"
        },
        {
          "alg": "SHA3-256",
          "content": "ef408cf4a802f33600054fb1758bad91fc6088247a3a7ce730a98cbbccef3753"
        },
        {
          "alg": "SHA3-512",
          "content": "8fa6824c24b03d8a0dd0f94669266868bf3ba24ce211241333c7206f84df8bd6b943bd376cc58b6322297b8fe2fa13882882416a70531e1039b9cc8ae48cda8d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0",
            "url": "https://www.eclipse.org/legal/epl-2.0"
          }
        },
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.eclipse.jetty.compression/jetty-compression-server@12.1.9?type=jar",
      "externalReferences": [
        {
          "url": "https://jetty.org/jetty-core/jetty-compression/jetty-compression-server",
          "type": "website"
        },
        {
          "url": "https://repo.maven.apache.org/maven2",
          "type": "distribution"
        },
        {
          "url": "https://github.com/jetty/jetty.project/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://www.eclipse.org/lists/jetty-dev/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/jetty/jetty.project/jetty-core/jetty-compression/jetty-compression-server",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.eclipse.jetty.ee11/jetty-ee11-servlet@12.1.9?type=jar",
      "publisher": "Webtide",
      "group": "org.eclipse.jetty.ee11",
      "name": "jetty-ee11-servlet",
      "version": "12.1.9",
      "description": "Jetty Servlet Container",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "534eecb2b7fb229c24e83a5f1b51161c"
        },
        {
          "alg": "SHA-1",
          "content": "6b6a8fec7a0681f98a0925f8d4e69265fdc977d6"
        },
        {
          "alg": "SHA-256",
          "content": "adc8811e16e3c255f291c8ef20075a4c70b1a56a1fa723eb65733f662f23e5b6"
        },
        {
          "alg": "SHA-512",
          "content": "f9bcee843a9461fdd3652786fdff64469120cf7dddb8e79bd873ca683c1b774c57f294864b7a298508237d93b52d69899b161b1eeb2afd40782e3941fb9866e4"
        },
        {
          "alg": "SHA-384",
          "content": "3f3b7219914e3f4d455df92aaac15cc13b3fbb4e56ca7288aea7dee1cafabcbb9fd164be8fc6450656c83cfe5d93f2e5"
        },
        {
          "alg": "SHA3-384",
          "content": "d8e3f79b02045519143d59b45c9d327668839ea5c87fa93dc1828a529a2d27a58868a2f29057ce9b7ff5f0d9c0a28358"
        },
        {
          "alg": "SHA3-256",
          "content": "28f746847c536aaf2c006db49d10008de52390ad6e3a54879775a9c31558230c"
        },
        {
          "alg": "SHA3-512",
          "content": "fa24b6d12f41a8a2cb84f6a59c1e24c30b8781c1f291015e87bf5d87544524fd197d1700684d3a8ebeb7b638de9e9666ae7e5f28956e83cfba31a8b6f005577e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0",
            "url": "https://www.eclipse.org/legal/epl-2.0"
          }
        },
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.eclipse.jetty.ee11/jetty-ee11-servlet@12.1.9?type=jar",
      "externalReferences": [
        {
          "url": "https://jetty.org/jetty-ee11/jetty-ee11-servlet",
          "type": "website"
        },
        {
          "url": "https://repo.maven.apache.org/maven2",
          "type": "distribution"
        },
        {
          "url": "https://github.com/jetty/jetty.project/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://www.eclipse.org/lists/jetty-dev/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/jetty/jetty.project/jetty-ee11/jetty-ee11-servlet",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.eclipse.jetty/jetty-security@12.1.9?type=jar",
      "publisher": "Webtide",
      "group": "org.eclipse.jetty",
      "name": "jetty-security",
      "version": "12.1.9",
      "description": "Jetty Server Security Artifact",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "9b5837463c49ba4d850af991b31c479b"
        },
        {
          "alg": "SHA-1",
          "content": "da8049b28929f428a3945049be0d6956f2ab5363"
        },
        {
          "alg": "SHA-256",
          "content": "00dcd3f9258d7eb41fc1c1cbcbaa33a1a47710783e30ad512816f0c051423142"
        },
        {
          "alg": "SHA-512",
          "content": "ebefa6bdec3a936f2ff2f2cc484911277caafd0f53b7e6b62ecc25b2542c113a90c3210297f2b3dd22b8afe27432c55556742862206d76cd8d8a973166b1da76"
        },
        {
          "alg": "SHA-384",
          "content": "065f1c0bc6298cdcbfab0b5a937c7d334369cf770028a049ae64589dbd342a09cb692ec0ff5483729ef1313167c668c6"
        },
        {
          "alg": "SHA3-384",
          "content": "80c297fa55f57bc9bf0ededa6d001e9e32684bada76a4030f601b586b35b77f09f16a63722cd3e58e19f150bf64ab61a"
        },
        {
          "alg": "SHA3-256",
          "content": "09703d966a29694ff55122674f02f22563d12a8d1936d8798ad9196c90aa36ef"
        },
        {
          "alg": "SHA3-512",
          "content": "90c12fef39041932ab9c2fc28d4a893da0c607501be7a49f583a2597cdca815babf4b2b6d910da94e3a428399d4b16afb5fadd776418267690a026dc1cd56508"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0",
            "url": "https://www.eclipse.org/legal/epl-2.0"
          }
        },
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.eclipse.jetty/jetty-security@12.1.9?type=jar",
      "externalReferences": [
        {
          "url": "https://jetty.org/jetty-core/jetty-security",
          "type": "website"
        },
        {
          "url": "https://repo.maven.apache.org/maven2",
          "type": "distribution"
        },
        {
          "url": "https://github.com/jetty/jetty.project/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://www.eclipse.org/lists/jetty-dev/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/jetty/jetty.project/jetty-core/jetty-security",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.eclipse.jetty/jetty-session@12.1.9?type=jar",
      "publisher": "Webtide",
      "group": "org.eclipse.jetty",
      "name": "jetty-session",
      "version": "12.1.9",
      "description": "Jetty Session Artifact",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "2c40adc4e4ec0aa38818c65a5410cbb0"
        },
        {
          "alg": "SHA-1",
          "content": "e21cde48bb64be19453015ab7d3c79c205b0edd4"
        },
        {
          "alg": "SHA-256",
          "content": "121a9c2c9ba7274d751fe3e0d5408612c95b46df2ed20910cfecced5ae7b1659"
        },
        {
          "alg": "SHA-512",
          "content": "4c3667d17d0a46ea7e04c3058a01941bda22de784d22ac6b466796040552723113b83a7ba0f7476fa11b9080d82b126aae7316382a8ab8b0fe6b9326dd142e24"
        },
        {
          "alg": "SHA-384",
          "content": "fd1424983969111a58198797ffe34fd33c4b555f5e199c2e659544ac256d45a16ab95704685cab53f7f1179758211fe8"
        },
        {
          "alg": "SHA3-384",
          "content": "5547d1fb57e55c3a9718ab8a63e815bf81ed9e6202d44502b558c5af6f7a049497d08b35ec9ad76faf60c6c085f886cb"
        },
        {
          "alg": "SHA3-256",
          "content": "224414f40005c94cbba2bea2158b8b4aabf28ca15a6c2d73fbbbe97d5cd0f2b0"
        },
        {
          "alg": "SHA3-512",
          "content": "343cbccd69e94bb5ffffa2c09a1c9108027ca2a3e2621b5a0fadf166c4d5768b7ad887dceaf57c3a35d2a7b6562d49597198fce9f2848607250de13b34dcbd03"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0",
            "url": "https://www.eclipse.org/legal/epl-2.0"
          }
        },
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.eclipse.jetty/jetty-session@12.1.9?type=jar",
      "externalReferences": [
        {
          "url": "https://jetty.org/jetty-core/jetty-session",
          "type": "website"
        },
        {
          "url": "https://repo.maven.apache.org/maven2",
          "type": "distribution"
        },
        {
          "url": "https://github.com/jetty/jetty.project/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://www.eclipse.org/lists/jetty-dev/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/jetty/jetty.project/jetty-core/jetty-session",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.slf4j/jul-to-slf4j@2.0.18?type=jar",
      "publisher": "QOS.ch",
      "group": "org.slf4j",
      "name": "jul-to-slf4j",
      "version": "2.0.18",
      "description": "JUL to SLF4J bridge",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "f339bf7648049b2105e180cab6c45c9d"
        },
        {
          "alg": "SHA-1",
          "content": "79739c98001d5c9d078d087d5a348ec9e474ec8f"
        },
        {
          "alg": "SHA-256",
          "content": "cbb7d1aaaa9e871eb1a06594abd911bf97027152976edf1edc315be75239204e"
        },
        {
          "alg": "SHA-512",
          "content": "fd6019636513f7b121d0321f0897667713e7d9a0d21f6d15c3b55d2bc804687c1d264ad3d79aa227e9712169e4d6b4d05d5d8746399e900c933ce330f1850569"
        },
        {
          "alg": "SHA-384",
          "content": "0d6d600cab9a960b2b5de8e8591fbba648c155f19c5d10d11eb4eee0572edd9670ed5a63197412bfeb9d58ce4a72259f"
        },
        {
          "alg": "SHA3-384",
          "content": "cedd50402de6b6f146b3f2b71a253a24a17b17eb7f632d555f287da572d8ee157dfd154169f3b3c9a2b2b917a2001f23"
        },
        {
          "alg": "SHA3-256",
          "content": "0c8f1bf469bbfda88c4a601408e40116eb8a27e89bb77f82f7feeee409d4b12e"
        },
        {
          "alg": "SHA3-512",
          "content": "0b25b9049a933eeadca90876ba1d499bf53779063846367870b5ef69c916b041354c33d256bdba9d4f87143d1e07dad9ec66fe502a9bba0858c23e9fca416066"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/license/mit/"
          }
        }
      ],
      "purl": "pkg:maven/org.slf4j/jul-to-slf4j@2.0.18?type=jar",
      "externalReferences": [
        {
          "url": "http://www.slf4j.org",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/qos-ch/slf4j/slf4j-parent/jul-to-slf4j",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.swagger.core.v3/swagger-annotations-jakarta@2.2.50?type=jar",
      "group": "io.swagger.core.v3",
      "name": "swagger-annotations-jakarta",
      "version": "2.2.50",
      "description": "swagger-annotations-jakarta",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "89b8ef9d76a45e676106750cff90a89f"
        },
        {
          "alg": "SHA-1",
          "content": "70163c80b74224c887a63367b34a69c877515346"
        },
        {
          "alg": "SHA-256",
          "content": "e31028d4271c8753b316523c04e426988a0a5c9baa6220d7f1ac62a00d95f481"
        },
        {
          "alg": "SHA-512",
          "content": "c522842a69476abc55452c74e0a01ede97f81c7751cee061525a31602e62863ee7c9f5b4d34f52086d730b46888ab968792f7224bcbcad3717e81ecc9f2cc790"
        },
        {
          "alg": "SHA-384",
          "content": "bc201ce700503d888a790c29e9eb94c00ab1c7e23a3101347ad1a6aad3131dafbca22c813e2cb9cd5b291fa6f5784802"
        },
        {
          "alg": "SHA3-384",
          "content": "0867f423f5a4cacdabe3e69a90c146dfd4e406bfddeaefd79669637f77ce6e3e17ef3d24a770ddfa9cff515fc5694641"
        },
        {
          "alg": "SHA3-256",
          "content": "23d0a590f752c23befd61effdfe28b9da41d1c9de5308a04c3979f956307fa78"
        },
        {
          "alg": "SHA3-512",
          "content": "442595ad57af14375b11ea70a991915c2e49da8d423ebd555cff107462e7b786537f70b43b5906a7336670fbbc0ebb5baf869adf6dc623f9eb155698ab0dafb2"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.swagger.core.v3/swagger-annotations-jakarta@2.2.50?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/swagger-api/swagger-core/modules/swagger-annotations-jakarta",
          "type": "website"
        },
        {
          "url": "https://github.com/swagger-api/swagger-core/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://groups.google.com/forum/#!forum/swagger-swaggersocket",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/swagger-api/swagger-core/modules/swagger-annotations-jakarta",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.httpcomponents/httpclient@4.5.14?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.httpcomponents",
      "name": "httpclient",
      "version": "4.5.14",
      "description": "Apache HttpComponents Client",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "2cb357c4b763f47e58af6cad47df6ba3"
        },
        {
          "alg": "SHA-1",
          "content": "1194890e6f56ec29177673f2f12d0b8e627dec98"
        },
        {
          "alg": "SHA-256",
          "content": "c8bc7e1c51a6d4ce72f40d2ebbabf1c4b68bfe76e732104b04381b493478e9d6"
        },
        {
          "alg": "SHA-512",
          "content": "a084ef30fb0a2a25397d8fab439fe68f67e294bf53153e2e1355b8df92886d40fe6abe35dc84f014245f7158e92641bcbd98019b4fbbd9e5a0db495b160b4ced"
        },
        {
          "alg": "SHA-384",
          "content": "c8ccaa1fa8ba7c421413e3c30375bd9c31284e837c476fd831e18043ad4187e92166f49554123108891241bed674b95d"
        },
        {
          "alg": "SHA3-384",
          "content": "9a17dfcf12b2af3a9b006ec369f9bc78ba322348bf1a01146e0d4f3fec2bed6cbe8b2193fac5b4d5a0c3036c06477510"
        },
        {
          "alg": "SHA3-256",
          "content": "48f0a61b691e22dec9d6db8e0b58be4ca17a42a2846c82f0875de21f72bb0faa"
        },
        {
          "alg": "SHA3-512",
          "content": "4ad2c9adc761b7e813330f0dcad3f9978702896c7d0cbf81f60a472d550e320b1527be425ba597c8c9352d587e32e1d46ceb4c73e99c70a6190df4c699a7c2a9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.httpcomponents/httpclient@4.5.14?type=jar",
      "externalReferences": [
        {
          "url": "http://hc.apache.org/httpcomponents-client-ga",
          "type": "website"
        },
        {
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2",
          "type": "distribution"
        },
        {
          "url": "http://issues.apache.org/jira/browse/HTTPCLIENT",
          "type": "issue-tracker"
        },
        {
          "url": "http://mail-archives.apache.org/mod_mbox/hc-httpclient-users/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/apache/httpcomponents-client/tree/4.5.14/httpclient",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/commons-logging/commons-logging@1.2?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "commons-logging",
      "name": "commons-logging",
      "version": "1.2",
      "description": "Apache Commons Logging is a thin adapter allowing configurable bridging to other, well known logging systems.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "040b4b4d8eac886f6b4a2a3bd2f31b00"
        },
        {
          "alg": "SHA-1",
          "content": "4bfc12adfe4842bf07b657f0369c4cb522955686"
        },
        {
          "alg": "SHA-256",
          "content": "daddea1ea0be0f56978ab3006b8ac92834afeefbd9b7e4e6316fca57df0fa636"
        },
        {
          "alg": "SHA-512",
          "content": "ed00dbfabd9ae00efa26dd400983601d076fe36408b7d6520084b447e5d1fa527ce65bd6afdcb58506c3a808323d28e88f26cb99c6f5db9ff64f6525ecdfa557"
        },
        {
          "alg": "SHA-384",
          "content": "ac20720d7156131478205f1b454395abf84cfc8da2f163301af32f63bd3c4764bd26cb54ed53800f33193ae591f3ce9c"
        },
        {
          "alg": "SHA3-384",
          "content": "628eb4407e95dca84da1a06b08a6d9b832a49de8472b1b217e8607f08efeeed18b996232d64dd07f03e78e0e3bb4b078"
        },
        {
          "alg": "SHA3-256",
          "content": "9aab62deccf156ee6e324c925dfc30ecb53e8465802863a551901a461424e807"
        },
        {
          "alg": "SHA3-512",
          "content": "3fd76857f6d20c03799537cc961c1c4ddf1c375c6c192fb982363e3b9397ba138b77f24ef38b4202f44e37586789c0320e4de18fdadd2772304fd14a9b26d552"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/commons-logging/commons-logging@1.2?type=jar",
      "externalReferences": [
        {
          "url": "http://commons.apache.org/proper/commons-logging/",
          "type": "website"
        },
        {
          "url": "https://continuum-ci.apache.org/",
          "type": "build-system"
        },
        {
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2",
          "type": "distribution"
        },
        {
          "url": "http://issues.apache.org/jira/browse/LOGGING",
          "type": "issue-tracker"
        },
        {
          "url": "http://mail-archives.apache.org/mod_mbox/commons-user/",
          "type": "mailing-list"
        },
        {
          "url": "http://svn.apache.org/repos/asf/commons/proper/logging/trunk",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.21.3?type=jar",
      "publisher": "FasterXML",
      "group": "com.fasterxml.jackson.datatype",
      "name": "jackson-datatype-jsr310",
      "version": "2.21.3",
      "description": "Add-on module to support JSR-310 (Java 8 Date \u0026 Time API) data types.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "307bd11fde09b891e4c9d99b82e9dc3a"
        },
        {
          "alg": "SHA-1",
          "content": "a0958ebdaba836d31e5462ebc37b6349a0725ff9"
        },
        {
          "alg": "SHA-256",
          "content": "c6f721d6ea16f5557567a476069f7c08c598ff8f02766f229b45fe1e87139a20"
        },
        {
          "alg": "SHA-512",
          "content": "b8f37ae5fed1516dcc0ea2e8b7ab8d1a46b9348cc5edbb047c253c7efec16be283ad45734104634d932c3d1377e9cfad6d2933573825699f2bddc03d605197b8"
        },
        {
          "alg": "SHA-384",
          "content": "1a4a5d4813b3112131c0bdeb79fc92b5c617107206f352a2129e3b072853353ad4514cbc6751ad0374d0cc1607e09543"
        },
        {
          "alg": "SHA3-384",
          "content": "820b992bcaedc879bf519eafb06d081875efe0bb6d77022dadc3a6447f8f42bb02093549a7ae979bf5c20529e743ef4b"
        },
        {
          "alg": "SHA3-256",
          "content": "5a7dac689d0a57a807dcdc0c9652e748ee2424de8fcd599186c4ac2da70c1fb1"
        },
        {
          "alg": "SHA3-512",
          "content": "7afc3468f40ad0ca1416d76ac2b61c81cc68ca24699b24d42aa94eaa5d009b0d5c8517f435c19a857c983b01561e6a3663709ea067236c9bdbc228a4782336a7"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.21.3?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/FasterXML/jackson-modules-java8/jackson-datatype-jsr310",
          "type": "website"
        },
        {
          "url": "https://central.sonatype.com/api/v1/publisher",
          "type": "distribution"
        },
        {
          "url": "https://github.com/FasterXML/jackson-modules-java8/issues",
          "type": "issue-tracker"
        },
        {
          "url": "http://github.com/FasterXML/jackson-modules-java8/jackson-datatype-jsr310",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.github.package-url/packageurl-java@1.5.0?type=jar",
      "group": "com.github.package-url",
      "name": "packageurl-java",
      "version": "1.5.0",
      "description": "The official Java implementation of the PackageURL specification. PackageURL (purl) is a minimal specification for describing a package via a \u0022mostly universal\u0022 URL.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "90856d8bb5b17e08fdf03b6a2f93b81c"
        },
        {
          "alg": "SHA-1",
          "content": "e6bf530f52feab911f4032604ca0b8216f7ff337"
        },
        {
          "alg": "SHA-256",
          "content": "e45551727707acc0c56ac62d56964332ea0f138d6cc3656d988b9369150f5247"
        },
        {
          "alg": "SHA-512",
          "content": "8064df400154caa110b8845bd17e6cea2683307e575ce88e40d7c0c8965ea0af6c150a376d8b9ba7354676c41b52c94535f30c6e830447613299ccf5fc7aa959"
        },
        {
          "alg": "SHA-384",
          "content": "0597100022f72e020c9d929bf57ecef91af7574610fb03b4019feba4b25f491a076f03577be2009e66d9001c4c0f8ab0"
        },
        {
          "alg": "SHA3-384",
          "content": "bbdd55a31a4755ef589bcb176283fe03e3c9089d315eab577fef3a9c2d02e632c6ac3fdebbc90a2f0f8ed7974b9f397c"
        },
        {
          "alg": "SHA3-256",
          "content": "c9881b69bde35ea6ff4006877b9fbf91462f911b5b142aa699a45a00867d413a"
        },
        {
          "alg": "SHA3-512",
          "content": "2b9caf58deef687a9bf01abd61a7af4abdb61247a8a966683a18157ee948f1ea424602598dc8f665bf24f7e1e516866298ef0507e9d697cb20dcf60eff2095ca"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/license/mit/"
          }
        }
      ],
      "purl": "pkg:maven/com.github.package-url/packageurl-java@1.5.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/package-url/packageurl-java",
          "type": "website"
        },
        {
          "url": "https://travis-ci.com/package-url/packageurl-java",
          "type": "build-system"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/package-url/packageurl-java/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/package-url/packageurl-java.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.asahaf.javacron/javacron@1.4.0?type=jar",
      "group": "com.asahaf.javacron",
      "name": "javacron",
      "version": "1.4.0",
      "description": "A java library for parsing crontab expressions and calculating the next run time",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "5129700c6b2af8e972d52829faae173c"
        },
        {
          "alg": "SHA-1",
          "content": "2291bf1f0996c6ba0dbe6783aa8a473f09cec3d9"
        },
        {
          "alg": "SHA-256",
          "content": "c1866f1c6dc28cec113c3388101d4d0a3816cb3a9025c07d2e71f668a2845538"
        },
        {
          "alg": "SHA-512",
          "content": "b64c450770445f349f2e76f696ed5599ea87c32d5006818122e59b412792a4d71b19a7c13ecbee3b5dbf86dfb0b7350cb1e32615bd5d910e2839e165dcd9b5ca"
        },
        {
          "alg": "SHA-384",
          "content": "0f66c5ddf22ebc720cd2b765c45c639843a00a882e2d19c89e562c564878a5d40a374d491cdff275187156c2dd464724"
        },
        {
          "alg": "SHA3-384",
          "content": "a854ed19a5cf790abd511f309a1674d1050c94567fce257da250de541a63215f78aa7629d6fe53ec1291c59011f3922e"
        },
        {
          "alg": "SHA3-256",
          "content": "a9b1643fdf1d81eab85d8cdc51d02f77dd36860c04f2d0ff717ebddb9cee5b3e"
        },
        {
          "alg": "SHA3-512",
          "content": "8f860b34f901cb5b3feb74037cbe852f5723256c8f5c44c25bb34cda5148fc511a240b9c0f34cd934d3843d55960a3600dd95ba7b0ae0fde5af569ce232ae645"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/license/mit/"
          }
        }
      ],
      "purl": "pkg:maven/com.asahaf.javacron/javacron@1.4.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/asahaf/javacron",
          "type": "website"
        },
        {
          "url": "https://github.com/asahaf/javacron",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.micrometer/micrometer-java11@1.16.5?type=jar",
      "group": "io.micrometer",
      "name": "micrometer-java11",
      "version": "1.16.5",
      "description": "Micrometer core classes that require Java 11",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "02b3ed5b4b18575ca44d7b6657912d23"
        },
        {
          "alg": "SHA-1",
          "content": "87bd7ec1f4c60cffad9f908ffe7348c4574604bd"
        },
        {
          "alg": "SHA-256",
          "content": "b79008266b2151244fdf5b175b736da80e16d400a770ce78e7fdbf8cd0878b16"
        },
        {
          "alg": "SHA-512",
          "content": "cb1a325d4c1f2f11f7ce78a1151cf0f41658f93e89387e8eb772b3466f7284ef07ebaada1d51570650ec48743485fef92bff63d0289fc4655e3d4aa3592afa09"
        },
        {
          "alg": "SHA-384",
          "content": "e27368ffa9d13f08641ee38454dfc2c60f761311dd5f3aa62473376bf6ea0ac8ff6e77a98b9b79bf72ef8535a64a3ff4"
        },
        {
          "alg": "SHA3-384",
          "content": "182df91fc62d7700b888ee0c0f71c2471869911416e1ad183c9ddffa8795650a10b99222129a19f5352496a095ac02c2"
        },
        {
          "alg": "SHA3-256",
          "content": "f5ab8b3f2d1b7ac744d69fd5d1bc0710cc0843b18505a98679a3c6959950525a"
        },
        {
          "alg": "SHA3-512",
          "content": "3fce1f681f207471226156378a65978a24ccebc5298dc423d7f20c4906b27a28777691076704a419c206db1ca0241d2eeaa89ff58d6b6ed2f3b9e8afab5e6e4c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.micrometer/micrometer-java11@1.16.5?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/micrometer-metrics/micrometer",
          "type": "website"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.micrometer/micrometer-registry-prometheus@1.16.5?type=jar",
      "group": "io.micrometer",
      "name": "micrometer-registry-prometheus",
      "version": "1.16.5",
      "description": "MeterRegistry implementation for Prometheus using io.prometheus:prometheus-metrics-core. If you have compatibility issues with this module, you can go back to io.micrometer:micrometer-registry-prometheus-simpleclient that uses io.prometheus:simpleclient_common.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "c8891265c7cf404435627fd58c3c6e26"
        },
        {
          "alg": "SHA-1",
          "content": "cde72d1c305727e20397170a8c46c2fa88c12e9e"
        },
        {
          "alg": "SHA-256",
          "content": "c8ee6627baa1458a625eee3aaf000555cb4af37935d0b8c36b1ec0cc3dd31bab"
        },
        {
          "alg": "SHA-512",
          "content": "53cda336f70ce7f0877a8fa7eb95b58809d608a714fee8c806507c9171fa052071ffdc95a8f2a67b764cb503ba19bfb8164c814ae342140267593e30c9d937f4"
        },
        {
          "alg": "SHA-384",
          "content": "3fdc8c84600728dda0ad4ecf9fdbac6427164ddd3bbd4b3234b54d6986a5f12d9cd98452436d9cacdfb41a215214b89a"
        },
        {
          "alg": "SHA3-384",
          "content": "b995fc6b3f8b88bc20156297dae965a93d2536df42a9bc7747ee10b5b74d7fb5cd71ace4764b66892bdda9874210c296"
        },
        {
          "alg": "SHA3-256",
          "content": "9790d44e7fdbe8a1aea2192782f94c52a06ee45628fc481db1054ead462ba9ac"
        },
        {
          "alg": "SHA3-512",
          "content": "9c0ca499324cbc6a45e6032c18129190c3c80e56eb5222a782ce4ce80a479d8d80698289af685eadd3d5954ae4f27bfb4b530e5590ac932f6090b1739785a094"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.micrometer/micrometer-registry-prometheus@1.16.5?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/micrometer-metrics/micrometer",
          "type": "website"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.prometheus/prometheus-metrics-core@1.6.1?type=jar",
      "group": "io.prometheus",
      "name": "prometheus-metrics-core",
      "version": "1.6.1",
      "description": "Core Prometheus metric types",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "8d61d62a57454c761c5893b5961417d3"
        },
        {
          "alg": "SHA-1",
          "content": "0ab30b3530abb5fc3761a4f1cca820bbb47345ca"
        },
        {
          "alg": "SHA-256",
          "content": "ce22ed0d82a79451876b8d5c600b3b14100d95846ef7d647a3189543fa648f59"
        },
        {
          "alg": "SHA-512",
          "content": "47ce685ead110e1bd5d539a295d015e0a3f1b5a7cdf8637e8ebb743a76afae5b10f086170058eccb7f5b8497b74789e8f97e6717265ee6175475597451c9d1f0"
        },
        {
          "alg": "SHA-384",
          "content": "256309e1f7a4ff37025370c9fb8f5598b7bc19b37551d0a6592b338ca878693f0db5f5b5c8f4afa187949c72884f985c"
        },
        {
          "alg": "SHA3-384",
          "content": "42fefc99d1a4cd55a7aeed4c166c6662e384cb24691984c96377770c34731b98bc4695ca8dc3d02ca6f2f4d30feeca5c"
        },
        {
          "alg": "SHA3-256",
          "content": "bc4fde8b36ab54591ef2769232690c3355e11481265d047d260913c96c2f71d1"
        },
        {
          "alg": "SHA3-512",
          "content": "0f5fd87d98559e2d1c95e0baf2229fb1f542bb6ddd23752e8014e39e5c246216ee691115a90f38f7e2b3c0a1d2f35b2e53d09f8412a6a56f2519ec1a69b61de2"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.prometheus/prometheus-metrics-core@1.6.1?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/prometheus/client_java/client_java/prometheus-metrics-core",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.prometheus/prometheus-metrics-tracer-common@1.6.1?type=jar",
      "group": "io.prometheus",
      "name": "prometheus-metrics-tracer-common",
      "version": "1.6.1",
      "description": "Common Module for Prometheus integrations with distributed tracing libraries.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "f2c137b72d71a46b50d5504176a4970f"
        },
        {
          "alg": "SHA-1",
          "content": "39c53d67fb9e35cd6f9ee4de75c2b1cdb8821e1f"
        },
        {
          "alg": "SHA-256",
          "content": "1b8688e02aa00bf49824f424c8ce379c4597e635ad6cfdef81a9d670a45d04ed"
        },
        {
          "alg": "SHA-512",
          "content": "8d04ab38d19ad0bf01bf14eb5bb351349d8d887f86d6223d22afa313ba73d93d3b1543c1ff06ed38e6704f5c6d01cdc101d75b2a95f921c5cb314960e5c5e879"
        },
        {
          "alg": "SHA-384",
          "content": "f417f3395ceee0aa0b585f263d648a01f9cba0186aae339b2e72234dd6da527abf10c39c3751205fbdb5277d0e615d28"
        },
        {
          "alg": "SHA3-384",
          "content": "23c55d880e129bcd56c8c23bbee5d0684aee96e7c1da6282810e33e76c825ad8a31197cea0bba3426bef84480cc2200d"
        },
        {
          "alg": "SHA3-256",
          "content": "a7b8e32d087616ebb26dc8c3a5905ee391e80b61b6b4536c8d811b7710cff93b"
        },
        {
          "alg": "SHA3-512",
          "content": "2e104dc3e8e636e67b5a45e32df25fc4ec492d53289070d6c3a9146135cc9b19f303f8f15286c9ab5fbebc945455e7ede1e27a363c3e7f4823f730c57be18410"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.prometheus/prometheus-metrics-tracer-common@1.6.1?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/prometheus/client_java/client_java/prometheus-metrics-tracer/prometheus-metrics-tracer-common",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.prometheus/prometheus-metrics-exposition-formats@1.6.1?type=jar",
      "group": "io.prometheus",
      "name": "prometheus-metrics-exposition-formats",
      "version": "1.6.1",
      "description": "Prometheus exposition formats.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "3b55ec3e09c0e92af9b0023af112a312"
        },
        {
          "alg": "SHA-1",
          "content": "0d6886b9d45b126b37215bbaffa2598c187f95b2"
        },
        {
          "alg": "SHA-256",
          "content": "75a2581eb831e22b3df9da5345ab266e0632dab9ed050ef44de6968d135edede"
        },
        {
          "alg": "SHA-512",
          "content": "5bc3249cbb103a5c01474e9645fffd65ae0d70bd6035ea7c0ee5592785e43727498e8be91cfa0c41c25ed08213a965df8d799d010dd4bfcd92b7d91f2aadaf2b"
        },
        {
          "alg": "SHA-384",
          "content": "82f8eeda223e9e5db150104afa3b62c28764539179573e281a62973f4d1dc27c0b95e916947d862b6d2ad056a9a67ca5"
        },
        {
          "alg": "SHA3-384",
          "content": "ef649a4ee47c5102630543da63c4deaf857c5264c375a0e912c78987e81f7cc9465b8fe1b939371dd58250ec3273ffe5"
        },
        {
          "alg": "SHA3-256",
          "content": "6e243905555fffbc348a571a23f1a6c89bc7650aa7efd5c05b52bbc6213004da"
        },
        {
          "alg": "SHA3-512",
          "content": "efb967fc95c9a48eb3ecf157f21521b1ed7fbd543d2f393da112bdf60cc5220365cf1e40b45c8c4bb7c8754cc5b53c83e91531d4ed7ff5309f5e831a4e028ffd"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.prometheus/prometheus-metrics-exposition-formats@1.6.1?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/prometheus/client_java/client_java/prometheus-metrics-exposition-formats",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.prometheus/prometheus-metrics-exposition-textformats@1.6.1?type=jar",
      "group": "io.prometheus",
      "name": "prometheus-metrics-exposition-textformats",
      "version": "1.6.1",
      "description": "Prometheus exposition text formats.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "4234f154932b99f3fd6d357a22472562"
        },
        {
          "alg": "SHA-1",
          "content": "606b727a9cb02a162a8418d96b788430c3037e44"
        },
        {
          "alg": "SHA-256",
          "content": "22b23c4a74a72e2b317ac378adfa917137934b898d6c3ba9d32697abe5484477"
        },
        {
          "alg": "SHA-512",
          "content": "c4d2d47902fcc35603011a27f830455ce65901acfb67788cd004ec51d9ced4fa9e2c0f87ae73099f17e8ff16e3d2f6add84557ab91dce339eaadab5d0089b102"
        },
        {
          "alg": "SHA-384",
          "content": "294755712eb71eb4488271c8bc7c77905353a84b7aa19eaf6b1f5e3be6c8fd2c526e5d9bf90bdfb4096d8c88b788f70f"
        },
        {
          "alg": "SHA3-384",
          "content": "f133c18a895874a55ce756467653aacf46aca789b7f40e5cf7c3ac1b94341b56cfb60f732465136e5c313086431830e4"
        },
        {
          "alg": "SHA3-256",
          "content": "040dd54a293e0d9ffbb04a340103e292d18c50662411cc2c5309a92eb6f3e5a0"
        },
        {
          "alg": "SHA3-512",
          "content": "532b6307622f37873e1991d75038d11d64a8fe529fa310fa36a775b650ee6cd647bab5d313740e6c0c64861feeba483379653dfd003c8b896aa9c1870ba48226"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.prometheus/prometheus-metrics-exposition-textformats@1.6.1?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/prometheus/client_java/client_java/prometheus-metrics-exposition-textformats",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.prometheus/prometheus-metrics-model@1.6.1?type=jar",
      "group": "io.prometheus",
      "name": "prometheus-metrics-model",
      "version": "1.6.1",
      "description": "Data model for read-only immutable Prometheus metrics snapshots.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "69c49c7e39a124a570da372ec92edff1"
        },
        {
          "alg": "SHA-1",
          "content": "72825c7aa87dc98b140d6d5dd45b5f22bbb00878"
        },
        {
          "alg": "SHA-256",
          "content": "b2814fc72a1851f57cf4a6babdb47dcfd0095682d6d8a683606027344121b3b5"
        },
        {
          "alg": "SHA-512",
          "content": "25e18fdf12998927b69918f202538849c1328842d90f2cdcaf8e5d51f447b90f1b02688c31764ee9f170031112ac1dbe7325bce7c6ac34beb3a64223355dd7cc"
        },
        {
          "alg": "SHA-384",
          "content": "94dfce1f0d66aa888da225a2e770a5820191ccb6792eae1c198bfda09bc41f63c8a72366877081f848b3d07009408b5a"
        },
        {
          "alg": "SHA3-384",
          "content": "44730fc21bddd202fb6de2d6690afdce9e2904f03e372ed37c288e02880ed07faf2f7f527c15574f12a45707984f5839"
        },
        {
          "alg": "SHA3-256",
          "content": "4b6ce67ace6417a6d5ce11912c603f1c328efcf1ee6bd72e9545e4ddd58d47bf"
        },
        {
          "alg": "SHA3-512",
          "content": "c2734e6231fa6a477e5ee5e2c81ddf5b440fd5d43fcde10efdf9bc7c18be4a65fc6538d68d2c791397a955d9aa72fdb09c561ec870dcc5eacb58ade34aadb401"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.prometheus/prometheus-metrics-model@1.6.1?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/prometheus/client_java/client_java/prometheus-metrics-model",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.prometheus/prometheus-metrics-config@1.6.1?type=jar",
      "group": "io.prometheus",
      "name": "prometheus-metrics-config",
      "version": "1.6.1",
      "description": "Configuration for Prometheus metrics and exposition formats.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "ba8208dd5ed196e4821f1e218a170739"
        },
        {
          "alg": "SHA-1",
          "content": "ab47af126e8e2f933d790dfa62beb5825e7576a6"
        },
        {
          "alg": "SHA-256",
          "content": "1c24880b2bbc1a408b5038d85056407fde330d8c0d863cf3631e3743fca4904d"
        },
        {
          "alg": "SHA-512",
          "content": "13fd3229c4503097df2a4c39e67f3ae23da553d3466829de8470d3525136738e43fc681392da9b14fa4e322d0121d1a48bf2138de0a831aabd0af69a01be1990"
        },
        {
          "alg": "SHA-384",
          "content": "ed603c7db40463410824fa963ab7dba6e10d5bf289644b62b2fd6ade2ce2117c0784568af705399f169a360af96be17c"
        },
        {
          "alg": "SHA3-384",
          "content": "ce1a9ed3fa67961dd0f12d15d87beb59f16ed0f4fa15b09a10f621691b7fcc0d00f97351ef3061295c72ac1b9fa30dc6"
        },
        {
          "alg": "SHA3-256",
          "content": "31afefe3aec3826c10ae7b935bf6b416521c5093378d51c4213eb06576d432a1"
        },
        {
          "alg": "SHA3-512",
          "content": "19c95e7afc3645f29f680fda09e7466e42724a1f36ed0cefd78ccbaf085e45c9f73d986ca299960022cc36c9784d1ce706a08831054d7d8259329b89ce9185fa"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.prometheus/prometheus-metrics-config@1.6.1?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/prometheus/client_java/client_java/prometheus-metrics-config",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.github.mweirauch/micrometer-jvm-extras@0.3.0?type=jar",
      "group": "io.github.mweirauch",
      "name": "micrometer-jvm-extras",
      "version": "0.3.0",
      "description": "A set of additional JVM process metrics for micrometer.io.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "c63df9d0f3a3f2297052741dfd275e94"
        },
        {
          "alg": "SHA-1",
          "content": "86fce8e8a3bffaa50f87e5d67427419b7b5c72d3"
        },
        {
          "alg": "SHA-256",
          "content": "9e9699ddddf1d1be033eb99ac2b7b4a2f2213b7ce2ad946b13e943990e8bf223"
        },
        {
          "alg": "SHA-512",
          "content": "d71d7ea0868c7d55ab0c0f668d5461ff4b27e36ebe60c12036a652690ca12d701f941fa44f075c8ad3bf0e10a7706c90fa42db378b99df6a2594f050fbe8f054"
        },
        {
          "alg": "SHA-384",
          "content": "36353c016cb1be7637eb202b60bfa2a2eb2044506e8f5855eedae96c1e1f610dcdf1ca0539b81e99d39844b6c4b2b2d5"
        },
        {
          "alg": "SHA3-384",
          "content": "2067d2f63917f8cfde473c081ccf8b5d0ff7428ad0904d2649b65822e6d3de1e96c29b4956f445c34319de522af8a87a"
        },
        {
          "alg": "SHA3-256",
          "content": "c7131c9c0dcc8fc90e60e5ea5b9ca94844c391fb9afc83ac9cce2f0296caf3b9"
        },
        {
          "alg": "SHA3-512",
          "content": "bc5e6b0ee1c4ab411114585b8bd26fc19a9c14861811bdea97b83c02bc4ae17498cbbd9d7198e9b3c23040d566a41f1500a0980d63847fe85b5cf0bdd357f1b5"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.github.mweirauch/micrometer-jvm-extras@0.3.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/mweirauch/micrometer-jvm-extras",
          "type": "website"
        },
        {
          "url": "https://github.com/mweirauch/micrometer-jvm-extras",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.pebbletemplates/pebble@4.1.1?type=jar",
      "group": "io.pebbletemplates",
      "name": "pebble",
      "version": "4.1.1",
      "description": "Templating engine for Java.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "155784323535e68cf19ed52a491c5301"
        },
        {
          "alg": "SHA-1",
          "content": "3ef33f88360ab0c54e201933e59a490547e2834c"
        },
        {
          "alg": "SHA-256",
          "content": "3b1ceff69a50cefa135c71e88f69f305a370c2460e15e97cd7572ddb37824b47"
        },
        {
          "alg": "SHA-512",
          "content": "793534b0fafd57783380817e15d454a08c5e5a23c79d3c78b171ea1fe197fe0032c77b8238455fc35cf70089442fe00307d156756b43c0dbc9a9e91f76f562bb"
        },
        {
          "alg": "SHA-384",
          "content": "96d08cface1df37f816ca732124fd268c7411fe012b24878b8473e1e8ae32e323591fb7b30c4cdebb125d134952282d9"
        },
        {
          "alg": "SHA3-384",
          "content": "234931563517965d90ab790f1ad3ca974e77e24903d8464493798713f11f948ab61005517594bcf1a646ea7971c8684a"
        },
        {
          "alg": "SHA3-256",
          "content": "d8cdcab93c52712909bd58b616ed0b9f721a2b70b36fa1dba1f9dc453d86efba"
        },
        {
          "alg": "SHA3-512",
          "content": "6bf62672dab917ce94206d5f3e7111828900d4241ffd898251b536095e87c0128a02b6f114eeea7458620fb8c206658ff6de10dd87ca6094700504a8c82c6be1"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/io.pebbletemplates/pebble@4.1.1?type=jar",
      "externalReferences": [
        {
          "url": "http://pebbletemplates.io",
          "type": "website"
        },
        {
          "url": "https://github.com/PebbleTemplates/pebble.git/pebble",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.unbescape/unbescape@1.1.6.RELEASE?type=jar",
      "publisher": "The UNBESCAPE team",
      "group": "org.unbescape",
      "name": "unbescape",
      "version": "1.1.6.RELEASE",
      "description": "Advanced yet easy-to-use escape/unescape library for Java",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "d95ed94e1624e307a1958ee105ccbf39"
        },
        {
          "alg": "SHA-1",
          "content": "7b90360afb2b860e09e8347112800d12c12b2a13"
        },
        {
          "alg": "SHA-256",
          "content": "597cf87d5b1a4f385b9d1cec974b7b483abb3ee85fc5b3f8b62af8e4bec95c2c"
        },
        {
          "alg": "SHA-512",
          "content": "6918e9579b06721942fdcd91e401f5b996fb4eac13056dbafdf594661f355a34874eb5266784bc2c4f82df9fdd9e219d71a96f52945a354f01665f85f8166bb3"
        },
        {
          "alg": "SHA-384",
          "content": "1b808b67c784b69afea64364ba4c0d433c7f042c512f5c18f07d5388fe7ac4741913f696424bd8fbde147383cfb3d8f9"
        },
        {
          "alg": "SHA3-384",
          "content": "6525bd20a12ff43a0089c0d59369574ae6c01e2b4b1aacf466847d4433ae403db08404a9b59be397c3034f972bcd6b06"
        },
        {
          "alg": "SHA3-256",
          "content": "a190c9bedccff959d08db12fe7080437fb4e98f05516b39d6540be718e151cc6"
        },
        {
          "alg": "SHA3-512",
          "content": "5d7b5edc0c2a0d47c9625936c14b4122330b96cdf54260fe2a6468289c2f4cbc4ee19770c1144acfa702f2f058a81544b4aea9258fe0e15166a1a331736d7b77"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.unbescape/unbescape@1.1.6.RELEASE?type=jar",
      "externalReferences": [
        {
          "url": "http://www.unbescape.org",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2",
          "type": "distribution"
        },
        {
          "url": "scm:git:git@github.com:unbescape/unbescape.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.protobuf/protobuf-java-util@4.35.0?type=jar",
      "group": "com.google.protobuf",
      "name": "protobuf-java-util",
      "version": "4.35.0",
      "description": "Utilities for Protocol Buffers",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "7d3bb7d81eef1a8dfdb12227c169f42f"
        },
        {
          "alg": "SHA-1",
          "content": "d83c7e6716d9d3a1893f4c978c84e5220cb1d751"
        },
        {
          "alg": "SHA-256",
          "content": "1153aadc409482ac094727e8ed4f641aebc87a68e6d6f96cd602acd837c1846d"
        },
        {
          "alg": "SHA-512",
          "content": "194b38f13fa630f920166e81168689a023507df14c51bf5358b00c7e5b10cd326c14a9e63824661e6e278ecb17ecd82f33f687c6b8df7af826bce8cb76208481"
        },
        {
          "alg": "SHA-384",
          "content": "f2b00abc27ab02494f6907ebd9ea823ca0d17fe590c866daa0e2bf1667a03f0d4fce3db8ce76119bdb7d54cb28b2cdef"
        },
        {
          "alg": "SHA3-384",
          "content": "a512eaf126043af761be01da5018f06ee9e203342d650007194030ef945d1845b9af0d3c58c40007034a691b0d786770"
        },
        {
          "alg": "SHA3-256",
          "content": "c723d8963a38b8bed67cc9d9e53025bb2a6173124b5ee0ef85d11c195c0847c3"
        },
        {
          "alg": "SHA3-512",
          "content": "0970ec27d27456546cacc91eae1a3f9ef49169ad608c5153d9efb9934d249f9240e22d31ad4dc8a072b7e7aba34fe8b4c54294feb03b85e31a7aa96603b8b39a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/com.google.protobuf/protobuf-java-util@4.35.0?type=jar",
      "externalReferences": [
        {
          "url": "https://developers.google.com/protocol-buffers/protobuf-java-util/",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/protocolbuffers/protobuf/protobuf-java-util",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
      "group": "com.google.code.findbugs",
      "name": "jsr305",
      "version": "3.0.2",
      "description": "JSR305 Annotations for Findbugs",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "dd83accb899363c32b07d7a1b2e4ce40"
        },
        {
          "alg": "SHA-1",
          "content": "25ea2e8b0c338a877313bd4672d3fe056ea78f0d"
        },
        {
          "alg": "SHA-256",
          "content": "766ad2a0783f2687962c8ad74ceecc38a28b9f72a2d085ee438b7813e928d0c7"
        },
        {
          "alg": "SHA-512",
          "content": "bb09db62919a50fa5b55906013be6ca4fc7acb2e87455fac5eaf9ede2e41ce8bbafc0e5a385a561264ea4cd71bbbd3ef5a45e02d63277a201d06a0ae1636f804"
        },
        {
          "alg": "SHA-384",
          "content": "ca0b169d3eb2d0922dc031133a021f861a043bb3e405a88728215fd6ff00fa52fdc7347842dcc2031472e3726164bdc4"
        },
        {
          "alg": "SHA3-384",
          "content": "9903fd7505218999f8262efedb3d935d64bcef84aae781064ab5e1b24755466b269517cada562fa140cd1d417ede57a1"
        },
        {
          "alg": "SHA3-256",
          "content": "223fda9a89a461afaae73b177a2dc20ed4a90f2f8757f5c65f3241b0510f00ff"
        },
        {
          "alg": "SHA3-512",
          "content": "3996b5af57a5d5c6a0cd62b11773360fb051dd86a2ba968476806a2a5d32049b82d69a24a3c694e8fe4d735be6a28e41000cc500cc2a9fb577e058045855d2d6"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
      "externalReferences": [
        {
          "url": "http://findbugs.sourceforge.net/",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://code.google.com/p/jsr-305/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.code.gson/gson@2.8.9?type=jar",
      "group": "com.google.code.gson",
      "name": "gson",
      "version": "2.8.9",
      "description": "Gson JSON library",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "e67627f67e03301092dc7de0a2d7cef8"
        },
        {
          "alg": "SHA-1",
          "content": "8a432c1d6825781e21a02db2e2c33c5fde2833b9"
        },
        {
          "alg": "SHA-256",
          "content": "d3999291855de495c94c743761b8ab5176cfeabe281a5ab0d8e8d45326fd703e"
        },
        {
          "alg": "SHA-512",
          "content": "46501e4dd34c9a6f33ff63aeeec45b049579365c5273490e5dfd5ea4effaeced907d0fc728204c619aa136e867ad826204582ff9ba3080d06693c1c675c8473f"
        },
        {
          "alg": "SHA-384",
          "content": "2f2897912784595e52d3f8e57741aed7dd866f16a69562d57e0604d85e2fef08b2a32e58afd00d264f66cc6ec775dc79"
        },
        {
          "alg": "SHA3-384",
          "content": "3ce084f79191afdbdb0a9aa83073b128f620cf585b65c2e81ba98080fd91e9f327db3f0952903094b7dd387bc802b5ba"
        },
        {
          "alg": "SHA3-256",
          "content": "e82ae9fa3a783ee683880d219ab529bb3d0b45ea721d002ee948fad99a67b4f0"
        },
        {
          "alg": "SHA3-512",
          "content": "25cfe43039c6d41344434f89e9a8ad6f93a341512baf93e894a14a9dfd3af1cb0f0afaed4ade6db3c719f910fd9dfbeb7bec8bcfd7f49ac572ab217bce9e595e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.code.gson/gson@2.8.9?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/google/gson/gson",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/google/gson/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/google/gson/gson/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0?type=jar",
      "publisher": "Google LLC",
      "group": "com.google.errorprone",
      "name": "error_prone_annotations",
      "version": "2.18.0",
      "description": "Error Prone is a static analysis tool for Java that catches common programming mistakes at compile-time.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "64145d0e7fee5a69ed7b84cf402de998"
        },
        {
          "alg": "SHA-1",
          "content": "89b684257096f548fa39a7df9fdaa409d4d4df91"
        },
        {
          "alg": "SHA-256",
          "content": "9e6814cb71816988a4fd1b07a993a8f21bb7058d522c162b1de849e19bea54ae"
        },
        {
          "alg": "SHA-512",
          "content": "3cea86be94bb8ae40d21ad4bf7d7f6b2233e89593b7b741ad84c78840cd3837bb5136f52e62fe9ae0953d7b190c46ad3edc102dfa97b4c7ea472a80206bf5db7"
        },
        {
          "alg": "SHA-384",
          "content": "7622eb33f83f03ab32b710b36c2fe836e24c5318f65fb8c0631a99507ca3ae65c2df8e33b63a5ce853b9cab6d9cb32e5"
        },
        {
          "alg": "SHA3-384",
          "content": "1ea52a5ce2a9ee1a960dc2a1bbe4b009d4d6a4448498e4cd76401605fa877662911e8c93b2b8bfda57bedc56c83f10a0"
        },
        {
          "alg": "SHA3-256",
          "content": "ed53f4295da75753267f241315352c4a39e60796f04e1c0c12d29c3a38be48ed"
        },
        {
          "alg": "SHA3-512",
          "content": "8266b313bd4e1170daf60642e838841370d99bc24b2a1f91825ca22037a6a30ff15cc76069f8e8770f1dc12772c277ee1320de67e815041697d93d6d7ba884fb"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0?type=jar",
      "externalReferences": [
        {
          "url": "https://errorprone.info/error_prone_annotations",
          "type": "website"
        },
        {
          "url": "https://github.com/google/error-prone/error_prone_annotations",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml.woodstox/woodstox-core@7.2.0?type=jar",
      "publisher": "FasterXML",
      "group": "com.fasterxml.woodstox",
      "name": "woodstox-core",
      "version": "7.2.0",
      "description": "Woodstox is a high-performance XML processor that implements Stax (JSR-173), SAX2 and Stax2 APIs",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "d32a36b91bfa2ba1f69e9671ce2fba6a"
        },
        {
          "alg": "SHA-1",
          "content": "ec9c97f566f812e249a7aba6c76815369ac00864"
        },
        {
          "alg": "SHA-256",
          "content": "689f5be95f9bb369d6c0e8db99a99f930b0c48d6a69b46151782b5816c7ea820"
        },
        {
          "alg": "SHA-512",
          "content": "f3baa0b19322e22ef0b5bb6739c1497167938901450e141b2e8769f0acf7ec2e5498349db007f6958de7eee00b2a9b36b0a1c09fa7877f074cb8b5ad2485559d"
        },
        {
          "alg": "SHA-384",
          "content": "d3f9eee2aa2ff88fa3efd0d52d4a0fa8cf79707d36f5a9dacc2852df80584300a32e5d54b77af3a7bf29e35b84413e18"
        },
        {
          "alg": "SHA3-384",
          "content": "f4862abab750ed951776c465833ecf3fc8747dd2bf4f6a3108b5d4ff1e6261a24cd4708e889154848d7bad55099c6c42"
        },
        {
          "alg": "SHA3-256",
          "content": "5f57a8d1f1a9cd8920c94436f53bcbca6164a221e793e5ef5db2b8861f9b113b"
        },
        {
          "alg": "SHA3-512",
          "content": "960c8d80a53fdbb0423432d018723f805fcdd674a49d2aef7a58f181bcc53d7a7adf2668ab51300e8789d9ffd4e98267cbceb34fcf03195a779b2faacbe461a8"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.fasterxml.woodstox/woodstox-core@7.2.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/FasterXML/woodstox",
          "type": "website"
        },
        {
          "url": "https://central.sonatype.com/api/v1/publisher",
          "type": "distribution"
        },
        {
          "url": "https://github.com/FasterXML/woodstox/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/FasterXML/woodstox",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.codehaus.woodstox/stax2-api@4.3.0?type=jar",
      "publisher": "fasterxml.com",
      "group": "org.codehaus.woodstox",
      "name": "stax2-api",
      "version": "4.3.0",
      "description": "Stax2 API is an extension to basic Stax 1.0 API that adds significant new functionality, such as full-featured bi-direction validation interface and high-performance Typed Access API.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "6eec6c1cb7f63d8a8098cc5569a47e99"
        },
        {
          "alg": "SHA-1",
          "content": "59251773c44122e8d1366f68884e29dd784e141b"
        },
        {
          "alg": "SHA-256",
          "content": "7c805f36129ea9fa42b696093b7ae1eb20bb6ccec65c8280d6f33db5609ca5e1"
        },
        {
          "alg": "SHA-512",
          "content": "4d1bf5cb3a803423c5420050c245227b944acb4ced29e8095e470bc3a742d6a057c484fa1d531b58933ed8f81d52d5bbfc8406acc4241f6e4ec4c5116fe30d53"
        },
        {
          "alg": "SHA-384",
          "content": "664bf1044e8c9e80083d02d2ccdba3c3953a515594b6a262baef76d1cf3790da9d71eb853806c27c94721e65983d72a3"
        },
        {
          "alg": "SHA3-384",
          "content": "298f2dcfffb3fe28229452770a969b2138008a23c508599a13303f48f21d3458c61ad19df53a20d6447c0f8ef56e4216"
        },
        {
          "alg": "SHA3-256",
          "content": "5a3bc0bf1b00df535d572ae16c62817788bea0f7d02a8c430fadd4cf4df95f5e"
        },
        {
          "alg": "SHA3-512",
          "content": "5d4e4618b22accb1fee19d6d2702dcd0538df7f9e3b7aa8590e7554811770bb317d4bab1eecebc4b31df49a349c68e746256b3e9cca5fbea6f102df411c0e678"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause"
          }
        }
      ],
      "purl": "pkg:maven/org.codehaus.woodstox/stax2-api@4.3.0?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/FasterXML/stax2-api",
          "type": "website"
        },
        {
          "url": "https://central.sonatype.com/api/v1/publisher",
          "type": "distribution"
        },
        {
          "url": "https://github.com/FasterXML/stax2-api/issues",
          "type": "issue-tracker"
        },
        {
          "url": "http://github.com/FasterXML/stax2-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.github.nscuro/versatile-core@0.18.3?type=jar",
      "group": "io.github.nscuro",
      "name": "versatile-core",
      "version": "0.18.3",
      "description": "Java implementation of vers, a mostly universal version range specifier",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "753fa38633fc67f9ea4cd8fde5599cf5"
        },
        {
          "alg": "SHA-1",
          "content": "46247f7e991a6149134494cc5e328fa2ea76e529"
        },
        {
          "alg": "SHA-256",
          "content": "ebbaaa2cc240de95c24039c7e8285ad6e20043b5e4057e04d54f4f6d3e0bbd97"
        },
        {
          "alg": "SHA-512",
          "content": "f04aca8199a462eac2aad6d1f0d9709ce12d65db539bc63d220280aeab7c4766ce3d5c1d62f01f8e9f70b88a6a5c3ab3c34316335e2a910a1b5a2fe20b492ecf"
        },
        {
          "alg": "SHA-384",
          "content": "d174c8a6c3d3c9e176f10c8b384e6f761d7fd68fa795ec67fab2496b56166c41774e557b51642db8db50dbffea6d4e7d"
        },
        {
          "alg": "SHA3-384",
          "content": "76bac2803b6f2157c64e210283d8cc1787257b1bcf956eac61b2ca4d9867a3b10ac039664da0268837cbd1a962df1dab"
        },
        {
          "alg": "SHA3-256",
          "content": "6cdedf96b5347dfbdd1d22af808f0fdaabaf3455a354b53729b55759252b148c"
        },
        {
          "alg": "SHA3-512",
          "content": "fcf04f117bc2850084c9074f14a7abb9d91830a66dceff9c4fb1bda2615a5c02d47238648ac6f759724cc97cd9d089a60dbf4731a0bed691c59aafb081001aeb"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.github.nscuro/versatile-core@0.18.3?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/nscuro/versatile/versatile-core",
          "type": "website"
        },
        {
          "url": "https://github.com/nscuro/versatile/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/versatile-core",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.github.nscuro/versatile-spi@0.18.3?type=jar",
      "group": "io.github.nscuro",
      "name": "versatile-spi",
      "version": "0.18.3",
      "description": "Java implementation of vers, a mostly universal version range specifier",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "126a6e3e9e4d2330422856da1657c24e"
        },
        {
          "alg": "SHA-1",
          "content": "e972080b28557b78da890ffd5ad74e6d42c6227a"
        },
        {
          "alg": "SHA-256",
          "content": "1315ba77f5035d0905acd9a46f1d90da606dcc960065c5d04f4b37e69017f625"
        },
        {
          "alg": "SHA-512",
          "content": "4ab44e5254639a2c9af2090315728021bce3b2675f3a8d69f5211867e725991f9d93f51e56c3a3ac4f36b3d9be1e5f1d47844abf7f6ce96cde7cc3c21ba890ea"
        },
        {
          "alg": "SHA-384",
          "content": "96f12e046e5904f281515589d1fc8da3649835d4dbe21812b6cd99b8939e54d81f907d3de38e44840113477f881296f9"
        },
        {
          "alg": "SHA3-384",
          "content": "81e5513b7ff6cb2e383b7b831933ca4c830b2107e38b2286546a44622e8047849f05a5f7c3c678cd2f11df46f4fcc995"
        },
        {
          "alg": "SHA3-256",
          "content": "291f608c60ac36eb6c5554cdbd6f96aae457f5d633b762ac0d7406c6e9fb99e7"
        },
        {
          "alg": "SHA3-512",
          "content": "00351ab0ed0e1d79dd3c31e3ca0ff0c6870ff21332c316b20c7b9355ce2cbba760c4d99687cf0f3e43d0bdd8e34f41e12c7e7a27bfb85fc4dd2a73edc7e03424"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.github.nscuro/versatile-spi@0.18.3?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/nscuro/versatile/versatile-spi",
          "type": "website"
        },
        {
          "url": "https://github.com/nscuro/versatile/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/versatile-spi",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.maven/maven-artifact@3.9.16?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.maven",
      "name": "maven-artifact",
      "version": "3.9.16",
      "description": "Maven is a software build management and comprehension tool. Based on the concept of a project object model: builds, dependency management, documentation creation, site publication, and distribution publication are all controlled from the declarative file. Maven can be extended by plugins to utilise a number of other development tools for reporting or the build process.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "6005ab2198a19a41cd3cf59618f9abc1"
        },
        {
          "alg": "SHA-1",
          "content": "1176c6579a8a68508c3479ef72d514e71c98ddca"
        },
        {
          "alg": "SHA-256",
          "content": "54cc1c1ef932e3d4a903352111b42b4d3c3ed8e7a1d0de73b625309d9c3ad3e8"
        },
        {
          "alg": "SHA-512",
          "content": "9688ea1f519c113dd4f78b63e6ff2256b65c2fc13446e5c5c776ef4e330a1087311a89fd4212c3a75a8a327d44a855aa98e9e6215c22416cc91cf6e0db48942f"
        },
        {
          "alg": "SHA-384",
          "content": "d0c7c604f82f74eae1b820d88d621fd87ebc567bd7159ce00364a60cb065da1208341ed05f0f8277afcdfbc85544da8f"
        },
        {
          "alg": "SHA3-384",
          "content": "55c50e32471d19532c40489cd76ed77015965ce4a9137fb8daba5c40702ffd9acca4bf54d9d449a2ff6b1d67364122e9"
        },
        {
          "alg": "SHA3-256",
          "content": "69ad66e3d9391c3ed5b6e7bbeb6731568b13d93ad3e795a85b67f7cea15b7008"
        },
        {
          "alg": "SHA3-512",
          "content": "48b82cdfecaee78545011e0c5ada2fa0bc1ea8bf21493da92b39e7742f6cdefb32c5f4e75efe8991d1946c1bbeb345667a632031c2844d3cf440241d92887a70"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.maven/maven-artifact@3.9.16?type=jar",
      "externalReferences": [
        {
          "url": "https://maven.apache.org/ref/3.9.16/maven-artifact/",
          "type": "website"
        },
        {
          "url": "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/",
          "type": "build-system"
        },
        {
          "url": "https://maven.apache.org/download.html",
          "type": "distribution"
        },
        {
          "url": "https://github.com/apache/maven/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://lists.apache.org/list.html?users@maven.apache.org",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/apache/maven/tree/maven-3.9.16/maven-artifact",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.codehaus.plexus/plexus-utils@3.6.1?type=jar",
      "publisher": "Codehaus Plexus",
      "group": "org.codehaus.plexus",
      "name": "plexus-utils",
      "version": "3.6.1",
      "description": "A collection of various utility classes to ease working with strings, files, command lines, XML and more.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "bf77c7ef462342bd42ce245be9648540"
        },
        {
          "alg": "SHA-1",
          "content": "9dce1b9c69b197f453223e45a2cb9fa0cd48b424"
        },
        {
          "alg": "SHA-256",
          "content": "05a63effd67e2d6b9d610cc82e2bd7473289d34802e57a529b28110f28af5679"
        },
        {
          "alg": "SHA-512",
          "content": "cdf52ae14e19fbc040a8ce9eb56f25fb6f3c1c2703b8cb7815329f06f675a284934e4fb19acedb49a24abc8ba28493fd5aedf15f0ac8033d123c71620de0ac98"
        },
        {
          "alg": "SHA-384",
          "content": "a02b453e4590c5028dcd94a72b818eb63ff7831cda8337daef63f774c1972b920b9eaae979867be34d9d4843e8296d42"
        },
        {
          "alg": "SHA3-384",
          "content": "28541c0fccf50c5eafa4b420c1453a77a8db9466b4da35f94ca745100f5b8b5a3f9ac2b3ab7f1008edb5ce33204a3ae2"
        },
        {
          "alg": "SHA3-256",
          "content": "f7353bfe893ab5932fe443ef26d2a9d9541f1f62105f35f923bd9b6b94808683"
        },
        {
          "alg": "SHA3-512",
          "content": "a7d95eaf9c02a688bcfaa1702c555eac1975190abda0ca626f3e41cec2492125e712c561a3cc67ed0d76a1b174ff03a8cd05afc0d377af1ff4c74a846546675f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.codehaus.plexus/plexus-utils@3.6.1?type=jar",
      "externalReferences": [
        {
          "url": "https://codehaus-plexus.github.io/plexus-utils/",
          "type": "website"
        },
        {
          "url": "https://repo.maven.apache.org/maven2",
          "type": "distribution"
        },
        {
          "url": "https://github.com/codehaus-plexus/plexus-utils/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://groups.google.com/forum/#!forum/mojohaus-dev",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/codehaus-plexus/plexus-utils/tree/plexus-utils-3.6.1/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.vdurmont/semver4j@3.1.0?type=jar",
      "group": "com.vdurmont",
      "name": "semver4j",
      "version": "3.1.0",
      "description": "Semantic versioning for Java apps.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "b39112afda0af7dba1f160f7284d402f"
        },
        {
          "alg": "SHA-1",
          "content": "0de1248f09dfe8df3b021c84e0642ee222cceb13"
        },
        {
          "alg": "SHA-256",
          "content": "0f33724dd012099f0737e3d9203e28f4a804435526998d4f5841993058651cb8"
        },
        {
          "alg": "SHA-512",
          "content": "4b7cc68857eb7633d0ef8a6bd8101243d0300537e51fac1380ebb944a8708f0f75ec3fa10186845b7e3a2d7988ae0bf22369909a52b6d95b5faaa9bc96dbbe64"
        },
        {
          "alg": "SHA-384",
          "content": "5e193b3ae6a6f34fb38abca0a2f9124daa0401238bb18015f8dfe4431da87525afa82921dd57754a1095d30451dfc363"
        },
        {
          "alg": "SHA3-384",
          "content": "62d09d2c1151a5108b55f04c8cf520c1b1b9e96ff045973e7aa729ff79522cf6772af7808c7435e6679620bdd0b722bc"
        },
        {
          "alg": "SHA3-256",
          "content": "fa98f695faa97464ce8b90f8c93b0179843ab2cc8a9e09d09586523e1cf4f401"
        },
        {
          "alg": "SHA3-512",
          "content": "6b24821607cb2040dd649c569e01cb87af0b5b92488111655ef15eb675a1e9f33029616c154253b4a865c42906b699a44dacf36411f42d062f57ccc60a0b5d42"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:maven/com.vdurmont/semver4j@3.1.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/vdurmont/semver4j",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.postgresql/postgresql@42.7.11?type=jar",
      "publisher": "PostgreSQL Global Development Group",
      "group": "org.postgresql",
      "name": "postgresql",
      "version": "42.7.11",
      "description": "PostgreSQL JDBC Driver Postgresql",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "b969f87f07d6434bd77cdc5e440da49a"
        },
        {
          "alg": "SHA-1",
          "content": "4c21cdd1b3938f400703716d37c4e8ca4d332808"
        },
        {
          "alg": "SHA-256",
          "content": "1981b31d3993c58702783c1cddf10a34e48c1f413d70ff1cb6def0a143484647"
        },
        {
          "alg": "SHA-512",
          "content": "7022c5eb9ca40612748af2d51fedaf773beeef60d46742c807ea0eb4a72107ea98bd1bb7fde484afa199f862b8be9dc827cc203a36c61df832fe6797413bf944"
        },
        {
          "alg": "SHA-384",
          "content": "71efac9613404865e11e81f96086aec5f851ebdf96b68b915bff57ccc8359b9a2114123e09ba897280518e64f6cfb0ad"
        },
        {
          "alg": "SHA3-384",
          "content": "65aa9b43829ac1998496b941fb12f2b8d1220ce025a426fcb93d68b83637a72fbd3d899195209d0f0b061f085d9b32da"
        },
        {
          "alg": "SHA3-256",
          "content": "1b7b5d4ac5792d6a8223d567790a2d6c999d3166813e41d3774c5e3f8619c988"
        },
        {
          "alg": "SHA3-512",
          "content": "2a4f18f20598ed0b8c0a7cc9f4b9b28be4856d03e4f6ae399b1aec07b3362e4632e6e8132dc2ca6e010faf92362e291d0acb2542c84a45c9c1dc746dd872b4e6"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause",
            "url": "https://opensource.org/licenses/BSD-2-Clause"
          }
        }
      ],
      "purl": "pkg:maven/org.postgresql/postgresql@42.7.11?type=jar",
      "externalReferences": [
        {
          "url": "https://jdbc.postgresql.org",
          "type": "website"
        },
        {
          "url": "https://github.com/pgjdbc/pgjdbc/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://www.postgresql.org/list/pgsql-jdbc/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/pgjdbc/pgjdbc",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.cloud.sql/postgres-socket-factory@1.28.3?type=jar",
      "publisher": "Google LLC",
      "group": "com.google.cloud.sql",
      "name": "postgres-socket-factory",
      "version": "1.28.3",
      "description": "Socket factory for the Postgres JDBC driver that allows a user with the appropriate permissions to connect to a Cloud SQL database without having to deal with IP allowlisting or SSL certificates manually.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "fa00f6ea71f76a7b327f7e4a9b86d6d9"
        },
        {
          "alg": "SHA-1",
          "content": "31287a3a6b06f7b1ff9da2de19cdfdab2025aaf9"
        },
        {
          "alg": "SHA-256",
          "content": "0a9008bf529d5810ac944d6e8b40b0db4e39a0054f3e8e052075965a8405e45f"
        },
        {
          "alg": "SHA-512",
          "content": "c1d2050d8df2918d45c3814670e8f5b21407b9a432259ddb19beea93d7ea9c393ccc8c04a4df241e9790d527b100396a205b950630ebdbd6fcf2f70f29f5652f"
        },
        {
          "alg": "SHA-384",
          "content": "431891990f4d6ca84093a6bb43753260d5fe4fe0d18501a9245b001e85598b87aa6403edd9e0590305e61cec92816dcf"
        },
        {
          "alg": "SHA3-384",
          "content": "c7fcbfa6df29d75d3cc2a63a37e267c04c6c830e3cb6b5912c88d0032415e30db4b67b24a26c27486e0669e3c137142b"
        },
        {
          "alg": "SHA3-256",
          "content": "aa385d441b9b4472ff99b07e3e6c88353e11528337008a06496b5c5746b91706"
        },
        {
          "alg": "SHA3-512",
          "content": "81a04c064e6bbe11c21569bb04b203ffbc469d72ec0ac5d79fbee0fdc65315b01ae0045986653852f60c2118e9b521c4c727ae6cda925161a0fe724265885f7c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.cloud.sql/postgres-socket-factory@1.28.3?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/GoogleCloudPlatform/cloud-sql-mysql-socket-factory/postgres-socket-factory",
          "type": "website"
        },
        {
          "url": "https://google.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/googleapis/java-shared-config/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/GoogleCloudPlatform/cloud-sql-mysql-socket-factory.git/postgres-socket-factory",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.cloud.sql/jdbc-socket-factory-core@1.28.3?type=jar",
      "publisher": "Google LLC",
      "group": "com.google.cloud.sql",
      "name": "jdbc-socket-factory-core",
      "version": "1.28.3",
      "description": "Core library for establishing secure connections. End users should depend on the driver-specific socket factory artifacts.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "48bc954954b52342dee364635de30b84"
        },
        {
          "alg": "SHA-1",
          "content": "4fc190438fb6cfaccbb3e9575dcc89fb8c1c5915"
        },
        {
          "alg": "SHA-256",
          "content": "080a85fda0fde4ebebdf8ce3d221b753b169cd00da01ad83637d90e61353ab7f"
        },
        {
          "alg": "SHA-512",
          "content": "04a9f299c33648b35b77be463d00d3f6d27b61e9f8f020e782cdc55cff188ea4f620b66c1af5ec20b1764020f6d17ad0a15c19a759c9472baedff6faf22542a0"
        },
        {
          "alg": "SHA-384",
          "content": "023856fee9bac7aeac9f09adaab6740e2f02ab133ccc3df9f1d4a8c90a74548aedd51ff236a6374f6176c182ed028c4f"
        },
        {
          "alg": "SHA3-384",
          "content": "58a9cf6e80e5afd8017533989b9b18eeab641e5173d0762aad3fcd5b26c5ef99840835bcdd4f600cdda5a7013c746d65"
        },
        {
          "alg": "SHA3-256",
          "content": "549aa9c80ee944518cfaa5550b7b48215e9a1f7ffc34f17b7cfec5a4cf211409"
        },
        {
          "alg": "SHA3-512",
          "content": "e765459a1c86800dc457f1c87d5784bc8b206ca59ea959c93f161b5ceb95aa7cec0c6d877d610d16d9baf6fde4fcf103206364688cd07d51a0d0d200231e63e3"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.cloud.sql/jdbc-socket-factory-core@1.28.3?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/GoogleCloudPlatform/cloud-sql-mysql-socket-factory/jdbc-socket-factory-core",
          "type": "website"
        },
        {
          "url": "https://google.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/googleapis/java-shared-config/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/GoogleCloudPlatform/cloud-sql-mysql-socket-factory.git/jdbc-socket-factory-core",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.github.jnr/jnr-enxio@0.32.20?type=jar",
      "group": "com.github.jnr",
      "name": "jnr-enxio",
      "version": "0.32.20",
      "description": "Native I/O access for java",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "cb5113570f8674c401a3025784239528"
        },
        {
          "alg": "SHA-1",
          "content": "b2cec8e40691976e1e2686d92edefa7e060a7798"
        },
        {
          "alg": "SHA-256",
          "content": "8f3062892a5edf03922eaee282ba9ac69d6e3142ad036810a50b15919a85d8b8"
        },
        {
          "alg": "SHA-512",
          "content": "a15f42e4ce45ea4ac903e8e355e672bf0de1d539b510b2ac0ed952a7cd7b0f35c54495c4a8925ed2a4a44f754f105686361dd6d5d9887230d4eb886af90b8a2d"
        },
        {
          "alg": "SHA-384",
          "content": "7983451dcd76d6bcfd2a0307ff963aa87882ab20a308f0affa85a53ff9186fc0442bd279fc3027aaa621465e32e8ea61"
        },
        {
          "alg": "SHA3-384",
          "content": "62b00e6937e6d2497514d0d755ff49b36468c7a2a49451772a98c656ad4330665b03f351b5c81c21acea4cefa89c431e"
        },
        {
          "alg": "SHA3-256",
          "content": "7ac41d4747670bd1e9d670adafeafc0e7a24d409320a827d7d77c3bbdf64789e"
        },
        {
          "alg": "SHA3-512",
          "content": "2750b642fe87f11210e891f5905149349546d9a65adf4436ff58aba89cdddcbd5d1e8fc60e47cba584f19bdc42a531d4f5f73da370b776e035627307d90dd1d0"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.github.jnr/jnr-enxio@0.32.20?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/jnr/jnr-enxio",
          "type": "website"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.github.jnr/jnr-constants@0.10.4?type=jar",
      "group": "com.github.jnr",
      "name": "jnr-constants",
      "version": "0.10.4",
      "description": "A set of platform constants (e.g. errno values)",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "a5a4036fd334522540041b062b304abc"
        },
        {
          "alg": "SHA-1",
          "content": "09f6f23763bf40ea7b56391791f574174914430a"
        },
        {
          "alg": "SHA-256",
          "content": "9a5b8cf9798d9d0331b8d8966c5235a22c4307676e35803a24659e6d76096f78"
        },
        {
          "alg": "SHA-512",
          "content": "608b2c53914aeb3fb36e2fb81a948e5dbec835a9d220d50a4bb9693d4a534414d1bc4c5e5582b196793317fb64fe7617d78d5ec974e6413732940e141201fdba"
        },
        {
          "alg": "SHA-384",
          "content": "dfe87e3b585304854d0dd23d2d5b3a4f00ca47fc52e8e28c6c75f976cc12bbe627cdfcca5fccaf6cb3b2591cf70dee89"
        },
        {
          "alg": "SHA3-384",
          "content": "8d1bf7084c5f34d13fab9b9b77dd095f43f105a7722a0d95fcc4e050e41f608f426914c3ff63573da053a9188e7f30bc"
        },
        {
          "alg": "SHA3-256",
          "content": "842f986856d42bf3703b2b9b8a5db9c8cbd166fafb94d81739dc3ff9469b8ae0"
        },
        {
          "alg": "SHA3-512",
          "content": "b87d2ffb045ed6bcf0d1976933e8ec258132f43b705388c905805e27e6f3b547d212c4eed37dec53541eebf17669365fa88519e8436f22545e56f8fc4215eda6"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.github.jnr/jnr-constants@0.10.4?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/jnr/jnr-constants",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.github.jnr/jnr-ffi@2.2.19?type=jar",
      "group": "com.github.jnr",
      "name": "jnr-ffi",
      "version": "2.2.19",
      "description": "A library for invoking native functions from java",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "3f14d83a07419b92cf5a4474c2a9e080"
        },
        {
          "alg": "SHA-1",
          "content": "2b0e946924b7f63b5375840398bfaec50265626d"
        },
        {
          "alg": "SHA-256",
          "content": "0896484223ef8dede16ff08c97f000b4f29a40db18151ad8b9bd8c0b89b7c847"
        },
        {
          "alg": "SHA-512",
          "content": "650443269242324bfe8ba0adb33bd743448a3dfea3a1029e0c892c6405d6379ab7d3fd97a78156a2b1e097dd21c6219559e92d6bb3596247915ad0d7c4cb8448"
        },
        {
          "alg": "SHA-384",
          "content": "f9c827f2477bc2c5358c13893f315acd535e6d21fd2865587f35e1ad22c5ac5eac57bffd8fa710635054c90af0a8a0f5"
        },
        {
          "alg": "SHA3-384",
          "content": "6dbb707f0a8d67e40adceaaf44d2a7288c74623b655f064fe69129bc275ec105cb28d998125f8a0a90c8e19c27557493"
        },
        {
          "alg": "SHA3-256",
          "content": "36946349d7af6c6d2ef4e3847d293fa07a2efbbe68568675550cca0a0d6a07ab"
        },
        {
          "alg": "SHA3-512",
          "content": "a404d027b7da956cfe9ef300cf3339d523073df1dbf818cc6265d73b7c08438eeb150a2d34232d0662314bbe1a3ca35509a314dd41e6add844cb58042bae3e9e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.github.jnr/jnr-ffi@2.2.19?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/jnr/jnr-ffi",
          "type": "website"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.github.jnr/jffi@1.3.15?type=jar",
      "group": "com.github.jnr",
      "name": "jffi",
      "version": "1.3.15",
      "description": "Java Foreign Function Interface",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "661a5bc9ace0463ca2125c357cb2def7"
        },
        {
          "alg": "SHA-1",
          "content": "4d5016e7a6042b8b01ec4e55803ef79f684b217e"
        },
        {
          "alg": "SHA-256",
          "content": "ed247e2325586ae036532a46f130811d0af73a0b494c8303fc30ead7d653ca86"
        },
        {
          "alg": "SHA-512",
          "content": "e49b61931371213cf1b30daa1c9ed47c6ab12cce81d248fccbb0fbbedcdf73f626b322cea647510bee1bcd5e0d4cfdc06c78147d424f2a2ef7fe3d6d86183139"
        },
        {
          "alg": "SHA-384",
          "content": "9a91c8e76c5c3d00bd6694f29031534928800e5ed233eef748e540c074067c82c26c01f5a68b73d29c8438a09860799e"
        },
        {
          "alg": "SHA3-384",
          "content": "8d8359c05c08cabff8ce0e6c2b5e555d5172974134500be984531c54df20c58f54d4c67920f52c1aa7ed7fa0d1f463c4"
        },
        {
          "alg": "SHA3-256",
          "content": "966ad023c42aa93fb0716b2f2d0c11665327bb79543264afb4d98a5987cc26c8"
        },
        {
          "alg": "SHA3-512",
          "content": "7f0c6a3e4a00c248731f26d81eed30d88ffe37cf0a4827cf87944736c13f05903903bb7260c70fae46ce80e07e243a92f2378485049b4ba4c02534a84283dbb7"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        },
        {
          "license": {
            "name": "GNU Lesser General Public License version 3",
            "url": "https://www.gnu.org/licenses/lgpl-3.0.txt"
          }
        }
      ],
      "purl": "pkg:maven/com.github.jnr/jffi@1.3.15?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/jnr/jffi",
          "type": "website"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.github.jnr/jffi@1.3.15?classifier=native\u0026type=jar",
      "group": "com.github.jnr",
      "name": "jffi",
      "version": "1.3.15",
      "description": "Java Foreign Function Interface",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "5e070ba8b9ee448e4effbddc53bca984"
        },
        {
          "alg": "SHA-1",
          "content": "561b84cb4e96bb8d21b35a3a5bae725ad88d4b1b"
        },
        {
          "alg": "SHA-256",
          "content": "dd54a800877593cfd033d6bdae1b67ebb9b5ca38f9e9b4ae7ea080375371e41a"
        },
        {
          "alg": "SHA-512",
          "content": "f230e39d8c239858821df194ddb0c9c159e39475ee8c6ebeb81dc72f162729c4e3a2d4ff277905dd82a494cbfdadc3ff7cf3f69be1e898b0f1fa4bb848fd1f43"
        },
        {
          "alg": "SHA-384",
          "content": "ab5d732df66611a3697a2a9c3d6359d21ccaeb2616e5216ec4a1ba905a921425d59ba9b5a5268f2bc404e877b6455220"
        },
        {
          "alg": "SHA3-384",
          "content": "028a768f557931875833c4d125ec35a1f9db4ddc82fad41905494ef00d60b13fe3d9bf2a431948dfe296e455bff820cf"
        },
        {
          "alg": "SHA3-256",
          "content": "4b77d991ef1a3ac77397bc0c129ec321d894d00c5480d7cce5d3865e047cffcf"
        },
        {
          "alg": "SHA3-512",
          "content": "6673f10f0e8592f2bf90e1ced2df086a51adafdab57e50c13abd1f6bf504ae6b58cf3c13e78d26922352fac2e2758b465a9e4590a7ef1ed6e921f86d9750e3d3"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        },
        {
          "license": {
            "name": "GNU Lesser General Public License version 3",
            "url": "https://www.gnu.org/licenses/lgpl-3.0.txt"
          }
        }
      ],
      "purl": "pkg:maven/com.github.jnr/jffi@1.3.15?classifier=native\u0026type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/jnr/jffi",
          "type": "website"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.ow2.asm/asm-commons@9.7.1?type=jar",
      "publisher": "OW2",
      "group": "org.ow2.asm",
      "name": "asm-commons",
      "version": "9.7.1",
      "description": "Usefull class adapters based on ASM, a very small and fast Java bytecode manipulation framework",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "8344aea3c8b7d707e9d35a62710e77c9"
        },
        {
          "alg": "SHA-1",
          "content": "406c6a2225cfe1819f102a161e54cc16a5c24f75"
        },
        {
          "alg": "SHA-256",
          "content": "9a579b54d292ad9be171d4313fd4739c635592c2b5ac3a459bbd1049cddec6a0"
        },
        {
          "alg": "SHA-512",
          "content": "81daf5765e387e6aeec5d45c4b9e4e1b471fb4f350931e5a214845c7c657a2142768f6902765e49c0ce2c595962e5d008883cba2e4a40c4bdce8f2e92518d2db"
        },
        {
          "alg": "SHA-384",
          "content": "473ba9b72bd47d2000d127dababdd649fd7738d658cd5b818266cd978e8d3bb2589e431a52bfaa7fb8a03d2345a529f2"
        },
        {
          "alg": "SHA3-384",
          "content": "1a792b9567115e97b81242325de41d3757e8b11dc5c38b4f6b8c9aa34ef8a33b5ef9a7401c725574ee4c36ebb5c0f46a"
        },
        {
          "alg": "SHA3-256",
          "content": "2974918408bf8791d133c96cee74e86f4fa9659faa1faaf886eed3c586b7c717"
        },
        {
          "alg": "SHA3-512",
          "content": "21c2635f5cdee961ea6aedee78589603b0ff1d56ee295d4548e882abe4485a5818a82848a99851592de5a8d09e4c74e406fc0bea9f23e250e58e0e31986845af"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/org.ow2.asm/asm-commons@9.7.1?type=jar",
      "externalReferences": [
        {
          "url": "http://asm.ow2.io/",
          "type": "website"
        },
        {
          "url": "https://repository.ow2.org/nexus/service/local/staging/deploy/maven2",
          "type": "distribution"
        },
        {
          "url": "https://gitlab.ow2.org/asm/asm/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://mail.ow2.org/wws/arc/asm/",
          "type": "mailing-list"
        },
        {
          "url": "https://gitlab.ow2.org/asm/asm/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.ow2.asm/asm-analysis@9.7.1?type=jar",
      "publisher": "OW2",
      "group": "org.ow2.asm",
      "name": "asm-analysis",
      "version": "9.7.1",
      "description": "Static code analysis API of ASM, a very small and fast Java bytecode manipulation framework",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "4cd9e7178dfb85371bba3077e40cd514"
        },
        {
          "alg": "SHA-1",
          "content": "f97a3b319f0ed6a8cd944dc79060d3912a28985f"
        },
        {
          "alg": "SHA-256",
          "content": "85b29371884ba31bb76edf22323c2c24e172c3267a67152eba3d1ccc2e041ef2"
        },
        {
          "alg": "SHA-512",
          "content": "a8bd265c81d9bb4371cafd3f5d18f96ad79aec65031457d518c54599144d199d9feddf13b8dc822b2598b8b504a88edbd81d1f2c52991a70a6b343d8f5bb6fe5"
        },
        {
          "alg": "SHA-384",
          "content": "31620bb948127b811684769f966990170ced469f4b15f30bf22a7a0d28c7da644027cf7c9ffd10f80fcc4cdf377909d8"
        },
        {
          "alg": "SHA3-384",
          "content": "fe5920760dfcbe5dda26d7839ba9ad621a8d2b139994e0d2107873512651cfffdb73e85e635dbad0f9db7cfee55420d3"
        },
        {
          "alg": "SHA3-256",
          "content": "3fe7b153bea627308dbfb2ce682a3c10646a06eee5d34a13acd76e60a7cda240"
        },
        {
          "alg": "SHA3-512",
          "content": "1acd097141b321e440561a9ef759b5b5ab125b42ae02e5806fd026978727740124a483f608db230563fde701161e51f8548a662e29ba12d97ba3d24949b4c821"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/org.ow2.asm/asm-analysis@9.7.1?type=jar",
      "externalReferences": [
        {
          "url": "http://asm.ow2.io/",
          "type": "website"
        },
        {
          "url": "https://repository.ow2.org/nexus/service/local/staging/deploy/maven2",
          "type": "distribution"
        },
        {
          "url": "https://gitlab.ow2.org/asm/asm/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://mail.ow2.org/wws/arc/asm/",
          "type": "mailing-list"
        },
        {
          "url": "https://gitlab.ow2.org/asm/asm/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.ow2.asm/asm-tree@9.7.1?type=jar",
      "publisher": "OW2",
      "group": "org.ow2.asm",
      "name": "asm-tree",
      "version": "9.7.1",
      "description": "Tree API of ASM, a very small and fast Java bytecode manipulation framework",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "e85029f613b6469989cc7cf53fe06b74"
        },
        {
          "alg": "SHA-1",
          "content": "3a53139787663b139de76b627fca0084ab60d32c"
        },
        {
          "alg": "SHA-256",
          "content": "9929881f59eb6b840e86d54570c77b59ce721d104e6dfd7a40978991c2d3b41f"
        },
        {
          "alg": "SHA-512",
          "content": "e55008c392fdd35e95d3404766b12dd4b46e13d5c362fcd0ab42a65751a82737eaf0ebc857691d1916190d34407adfde4437615d69c278785416fd911e00978d"
        },
        {
          "alg": "SHA-384",
          "content": "4363d7d075700cbe6161bf86a0ff1b0e732fe96963010f1fc66f7701e8139673cc4fba81ae2937d25e0a5032368b0d5a"
        },
        {
          "alg": "SHA3-384",
          "content": "d22a3eeb20ee739bfbf3535655e7d25e3b3910f13ac86d9e4c29b4e0b19efd53ab65c1d843bbc0e289a8744d27e09453"
        },
        {
          "alg": "SHA3-256",
          "content": "9d57ddbdd10cda7f9bc45bc0bcb54143f7ea1b802540cf3029ab7e31dfc59df7"
        },
        {
          "alg": "SHA3-512",
          "content": "1352a6d8caca6649bc7e1c8e209a1e3864ac8eac8d6af2f11e2701eab5304a4cff41355828ed0c69adc8fc3b8d639d607bec574834e8e3185a3e3f81199e756a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/org.ow2.asm/asm-tree@9.7.1?type=jar",
      "externalReferences": [
        {
          "url": "http://asm.ow2.io/",
          "type": "website"
        },
        {
          "url": "https://repository.ow2.org/nexus/service/local/staging/deploy/maven2",
          "type": "distribution"
        },
        {
          "url": "https://gitlab.ow2.org/asm/asm/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://mail.ow2.org/wws/arc/asm/",
          "type": "mailing-list"
        },
        {
          "url": "https://gitlab.ow2.org/asm/asm/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.ow2.asm/asm-util@9.7.1?type=jar",
      "publisher": "OW2",
      "group": "org.ow2.asm",
      "name": "asm-util",
      "version": "9.7.1",
      "description": "Utilities for ASM, a very small and fast Java bytecode manipulation framework",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "36d373a9cd6cad9b35db9f984c6b4bbb"
        },
        {
          "alg": "SHA-1",
          "content": "9e23359b598ec6b74b23e53110dd5c577adf2243"
        },
        {
          "alg": "SHA-256",
          "content": "f885be71b5c90556f5f1ad1c4f9276b29b96057c497d46666fe4ddbec3cb43c6"
        },
        {
          "alg": "SHA-512",
          "content": "522d793d15a2c5ea6504a50222cf0750f1eab7b881cf289675042539b1aba8b3868197b1bebe729de728dd10020eb028ae16252dcd5d84fdcbf7f925832bc269"
        },
        {
          "alg": "SHA-384",
          "content": "c073e7d64d5891d024860f638c3ee901aca60637b820ad05f9be7d33b4f4ad99fc448173dd9cb0b1cd0032485e813b24"
        },
        {
          "alg": "SHA3-384",
          "content": "2300d5572d929e6f20a7569dceb05bd9930b6ca18bcf11f648e37f28d00e78883f632ff60f4c4f9997aaa3d560a9450b"
        },
        {
          "alg": "SHA3-256",
          "content": "f5b3d45b832550fc3d1a675fdc4531a32eb8688db37b7102f0d544635f967ed2"
        },
        {
          "alg": "SHA3-512",
          "content": "ae097429b38febbc39a91d9697b6f709a49aad2fbc032ae2222e8f11c2907ef1a526afc4ee38d4dee46c09a7196f4f676f5704461dd3a0fe1e606bc9e3ef970a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/org.ow2.asm/asm-util@9.7.1?type=jar",
      "externalReferences": [
        {
          "url": "http://asm.ow2.io/",
          "type": "website"
        },
        {
          "url": "https://repository.ow2.org/nexus/service/local/staging/deploy/maven2",
          "type": "distribution"
        },
        {
          "url": "https://gitlab.ow2.org/asm/asm/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://mail.ow2.org/wws/arc/asm/",
          "type": "mailing-list"
        },
        {
          "url": "https://gitlab.ow2.org/asm/asm/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.github.jnr/jnr-a64asm@1.0.0?type=jar",
      "group": "com.github.jnr",
      "name": "jnr-a64asm",
      "version": "1.0.0",
      "description": "A pure-java A64 assembler",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "6cb469cbbcf9eca78d50f7da595a8337"
        },
        {
          "alg": "SHA-1",
          "content": "0a1cb8dbe71b5a6a0288043c3ba3ca64545be165"
        },
        {
          "alg": "SHA-256",
          "content": "53ae5ea7fa5c284e8279aa348e7b9de4548b0cae10bfd058fa217c791875e4cf"
        },
        {
          "alg": "SHA-512",
          "content": "922bdf2883c6a9cd6491289020d404ab151fd9ffa78d2ec884a2ac3af739d397016f1f4596c3e6c58744ea600fdbc2d330c8f520a1a9ab0eef6af6b667b35b89"
        },
        {
          "alg": "SHA-384",
          "content": "933298b61960f09eccb672a0622a93a721d06cf85cdb29500ff6efdf874bad7b08aede29b6cf3b51141c16b38b250be2"
        },
        {
          "alg": "SHA3-384",
          "content": "2a7231c649f4805d34eb19c7e6b6dbb5ecdb663e29ef69a4523e2f7d2ae70740ca3aa03eba3476960d0fe344ea45df2d"
        },
        {
          "alg": "SHA3-256",
          "content": "fc270fd94a4e2b4fb1a9e4dd42ff4600c94e226ef3431aee998a915b62eb19ae"
        },
        {
          "alg": "SHA3-512",
          "content": "8ee64fec1b5e93ff9c2b596c0345ef120479217bea95d669c6e17f338a45945545b546813af2f58920a6bb2d607bd004870d10c8660a516261288d9f555fc850"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.github.jnr/jnr-a64asm@1.0.0?type=jar",
      "externalReferences": [
        {
          "url": "http://nexus.sonatype.org/oss-repository-hosting.html/jnr-a64asm",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.github.jnr/jnr-x86asm@1.0.2?type=jar",
      "group": "com.github.jnr",
      "name": "jnr-x86asm",
      "version": "1.0.2",
      "description": "A pure-java X86 and X86_64 assembler",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "00670735acb2a9d1421b506dc7d338bc"
        },
        {
          "alg": "SHA-1",
          "content": "006936bbd6c5b235665d87bd450f5e13b52d4b48"
        },
        {
          "alg": "SHA-256",
          "content": "39f3675b910e6e9b93825f8284bec9f4ad3044cd20a6f7c8ff9e2f8695ebf21e"
        },
        {
          "alg": "SHA-512",
          "content": "e928926b01ce545144c1bbf160edee9b923773e32f9a399a71c2ab5e8325d9cbcfb41f41c8f008b80d1beab8da1c4b74845996479c07ed73bc131959911d4762"
        },
        {
          "alg": "SHA-384",
          "content": "91839815885716f1202a824b195a475d4d7561690192b42cf05b8c6432556a3e7e2dab13b6e970986a97711fb7060844"
        },
        {
          "alg": "SHA3-384",
          "content": "ed27f9b39907e92805c2d6ae6a045e00e24f51544501df3b98b593177df4fe55fee2347c668df66c2ea6fae64c66ee0c"
        },
        {
          "alg": "SHA3-256",
          "content": "f2e4e4807f6674a5b428cebdbdd01e8cadbeee71b785a046bec2bec1de63a41b"
        },
        {
          "alg": "SHA3-512",
          "content": "0dfffcf0daac9513b347ab8bf22887360feea890428e12857d7d3400400ba498fdc61307d9fd9c6a5e1baa9a96279afc07bba08c6229ed4ede71569d710fd0f6"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/license/mit/"
          }
        }
      ],
      "purl": "pkg:maven/com.github.jnr/jnr-x86asm@1.0.2?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/jnr/jnr-x86asm",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.github.jnr/jnr-unixsocket@0.38.25?type=jar",
      "group": "com.github.jnr",
      "name": "jnr-unixsocket",
      "version": "0.38.25",
      "description": "UNIX socket channels for java",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "6128f5bfe53ea584f3f90ddc00572273"
        },
        {
          "alg": "SHA-1",
          "content": "e8e0a87d80789510109337d6b66df7d8f90dfbee"
        },
        {
          "alg": "SHA-256",
          "content": "9961504058668059d7fbfcc050252afd99901604c4c954bfe7c1325be06a34c0"
        },
        {
          "alg": "SHA-512",
          "content": "6be26fa405fdf161b4a999899c7f1d926628059d0af310531b6d093e27233dba8b310b3dd0a5828a722b0a89f637820d71c1f257aba528e314f63062e63558d5"
        },
        {
          "alg": "SHA-384",
          "content": "b36b8d31ca8157b374b93ef17365c137283aa8871c2168c7dca1019dfc120f0074f610171abeb7ce3b4d5a2f6a3370ad"
        },
        {
          "alg": "SHA3-384",
          "content": "561ac4ec50fa1a2a2c8732c7e1c42c370bff3efdb200f29c67c354f060d250162c5118b4f03985700dd22889b7ef4b01"
        },
        {
          "alg": "SHA3-256",
          "content": "383bd00ba498176a5a2281f6be887858bf5a6a718dc9aad37e6429aae0c5840b"
        },
        {
          "alg": "SHA3-512",
          "content": "8ec7eaf87ee1857e57d92b17146bdeeea464e3265c4ffb99a270a1d5ea855adad201ea8ec6c8971d1638116df7ed179fe68bd9f4bb0fce4ddcdc4b130ff17a9f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.github.jnr/jnr-unixsocket@0.38.25?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/jnr/jnr-unixsocket",
          "type": "website"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.github.jnr/jnr-posix@3.1.22?type=jar",
      "group": "com.github.jnr",
      "name": "jnr-posix",
      "version": "3.1.22",
      "description": "Common cross-project/cross-platform POSIX APIs",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "2afdc7365d26adf44fc0bb96feeadc24"
        },
        {
          "alg": "SHA-1",
          "content": "f11ed8edba66935b0ddb76c2caa0e57d2653ddeb"
        },
        {
          "alg": "SHA-256",
          "content": "392645f602af36cd38ff0542838125e7ce39e577d09d911991f7834e7d56d8ff"
        },
        {
          "alg": "SHA-512",
          "content": "af8e8d5b385dfcaba27afafa0c0d2f4b88b80b638f47f2ed37e52550061be7925d47fbe22c95bda185127810afe50d06c379653db8120c865c7feb75ffe3309c"
        },
        {
          "alg": "SHA-384",
          "content": "ced641298c07ffd7b55bbcc45f9d4012935c65aa3185017604983a4fb1d1ad664f8cf16271271fdc838205270e56839e"
        },
        {
          "alg": "SHA3-384",
          "content": "398f2f09a6dee392b6e28a648f27e91eba786fbc7e98e29c9ab3c1fb15f03a0e63c4e5aad5f4c2ab37be4098ab7bef02"
        },
        {
          "alg": "SHA3-256",
          "content": "741556840e7bdadbbf9cd747b882ab98b4d1aa875eb3a7ecb8cbb213dd3b5f60"
        },
        {
          "alg": "SHA3-512",
          "content": "fc14db60dd4cbe7fa0bf007abc77294f12b5a0041ee678713aaeb7a78c20f6fc0099b23cad5661802be694ee2eed0c54ae7d49f2741eda51350c672d6a9734b6"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "name": "GNU General Public License Version 2",
            "url": "http://www.gnu.org/copyleft/gpl.html"
          }
        },
        {
          "license": {
            "name": "GNU Lesser General Public License Version 2.1",
            "url": "http://www.gnu.org/licenses/lgpl.html"
          }
        }
      ],
      "purl": "pkg:maven/com.github.jnr/jnr-posix@3.1.22?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/jnr/jnr-posix",
          "type": "website"
        },
        {
          "url": "http://github.com/jnr/jnr-posix/issues",
          "type": "issue-tracker"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.http-client/google-http-client@2.1.0?type=jar",
      "publisher": "Google",
      "group": "com.google.http-client",
      "name": "google-http-client",
      "version": "2.1.0",
      "description": "Google HTTP Client Library for Java. Functionality that works on all supported Java platforms, including Java 7 (or higher) desktop (SE) and web (EE), Android, and Google App Engine.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "7217e647aa20c034bc81e2a3341b2434"
        },
        {
          "alg": "SHA-1",
          "content": "f4c08fa160a5199af19f81080fbaa921ae2193c7"
        },
        {
          "alg": "SHA-256",
          "content": "20aa0948f6ceb5cfa9b2b3adddd9b7e990ab40230e084081642cbb81235d3eef"
        },
        {
          "alg": "SHA-512",
          "content": "0eb1d146ccd4abaff14178e1d3628d4df4e946caa9fd0f0b78ccf308b8fa56b653ff32de9b77227abe3def63587140917067110868f0bdf67ba11447560547ba"
        },
        {
          "alg": "SHA-384",
          "content": "27668ee79c00120f325c82c7da35a2592487a862f99e30c64bf5221952ba9887a13838852666bb3b82de5535d600f9f1"
        },
        {
          "alg": "SHA3-384",
          "content": "7d28728d58a73cb89683b0389c8ed383a4f5b578076051ba6de441a6f64c1b619692bf1d51072b9b7e9c5e71b8959b96"
        },
        {
          "alg": "SHA3-256",
          "content": "3248473756643cb20f99dae47170411c2f38a529c4483c68a08feb3a34baef4d"
        },
        {
          "alg": "SHA3-512",
          "content": "1d6c79cfb2b92bc781c4c5d3fbec390f596293d862b687c309a3f7581f698ff778b0c040773cc6cb2e87c9723e01501bbb5a9081327736c5eca721939110a661"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.http-client/google-http-client@2.1.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/googleapis/google-http-java-client/google-http-client",
          "type": "website"
        },
        {
          "url": "https://google.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/googleapis/google-http-java-client/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/googleapis/google-http-java-client/google-http-client",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.httpcomponents",
      "name": "httpcore",
      "version": "4.4.16",
      "description": "Apache HttpComponents Core (blocking I/O)",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "28d2cd9bf8789fd2ec774fb88436ebd1"
        },
        {
          "alg": "SHA-1",
          "content": "51cf043c87253c9f58b539c9f7e44c8894223850"
        },
        {
          "alg": "SHA-256",
          "content": "6c9b3dd142a09dc468e23ad39aad6f75a0f2b85125104469f026e52a474e464f"
        },
        {
          "alg": "SHA-512",
          "content": "168026436a6bcf5e96c0c59606638abbdc30de4b405ae55afde70fdf2895e267a3d48bba6bdadc5a89f38e31da3d9a9dc91e1cab7ea76f5e04322cf1ec63b838"
        },
        {
          "alg": "SHA-384",
          "content": "ba9ceaee1a37ca3201d6a1315ecb0327b495489efd0baa155c219c475df8d3eb69fe77ab0026563db406497626da6562"
        },
        {
          "alg": "SHA3-384",
          "content": "b9dc44dcc7cc86d5036f26d54c4003a2d72808ae7b07a0808bb53505c6d4281b5ad213eb1f3d0fef1113dec57cb0dfe1"
        },
        {
          "alg": "SHA3-256",
          "content": "fd8ab51846476c6c18822151c9ec07b39a9633010b5d20ea937fc6910407bc64"
        },
        {
          "alg": "SHA3-512",
          "content": "b42fa528242981a9d70e4f68ab75a24292df5112c44c21b6f18cb9201ce747885ba1d4dc69bc3d14d0da46a6c2638f937c11bc45749abeb55dc89ddada90cdda"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar",
      "externalReferences": [
        {
          "url": "http://hc.apache.org/httpcomponents-core-ga",
          "type": "website"
        },
        {
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2",
          "type": "distribution"
        },
        {
          "url": "http://issues.apache.org/jira/browse/HTTPCORE",
          "type": "issue-tracker"
        },
        {
          "url": "http://mail-archives.apache.org/mod_mbox/hc-httpclient-users/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/apache/httpcomponents-core/tree/4.4.16/httpcore",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.grpc/grpc-context@1.70.0?type=jar",
      "group": "io.grpc",
      "name": "grpc-context",
      "version": "1.70.0",
      "description": "gRPC: Context",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "b7e575dcff9de5208d81a29566a3d76a"
        },
        {
          "alg": "SHA-1",
          "content": "375570c198b9ff46f2202731d11271bb5cb396fa"
        },
        {
          "alg": "SHA-256",
          "content": "eb2824831c0ac03e741efda86b141aa863a481ebc4aaf5a5c1f13a481dbb40ff"
        },
        {
          "alg": "SHA-512",
          "content": "430cd53a07173fcfe8ac65d0b6f682a30eb7a50df9c33850a39dd2d48a159e63afec1e430471aeeb00c9c88e2354d4d5c456e451309ef5640c91a73def197fb7"
        },
        {
          "alg": "SHA-384",
          "content": "abf8b56a9d9848ec73c2567f1fca13bbb77e5c106b216a8112347b057caa2d9793804d6f1e1f235c9433fb7edd1c27a2"
        },
        {
          "alg": "SHA3-384",
          "content": "5c4c6b820f489296a340822b6891773e5d801d7e266f5ecde111b85c53be9e965094e80b98a396858c6fe2672688caf0"
        },
        {
          "alg": "SHA3-256",
          "content": "fa505119427ecd73239a401444f43654b5e7d2ed7c78a6bd7407b1d9f5cc3a58"
        },
        {
          "alg": "SHA3-512",
          "content": "56d7389a20562d264b1b759a7f0ff7057b3f832eee5a57eba65d4f2ba878fe7d1569b44ea22e42c9ae0abf5a79506a8dccffe5f51ce56563812d53442395e115"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.grpc/grpc-context@1.70.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/grpc/grpc-java",
          "type": "website"
        },
        {
          "url": "https://github.com/grpc/grpc-java",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.grpc/grpc-api@1.70.0?type=jar",
      "group": "io.grpc",
      "name": "grpc-api",
      "version": "1.70.0",
      "description": "gRPC: API",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "f4b23b6be4f2936c097e780cf6e8ef50"
        },
        {
          "alg": "SHA-1",
          "content": "c0d185f8435e2dbc9b0f430d1e89600858ee24ee"
        },
        {
          "alg": "SHA-256",
          "content": "45faf2ac1bf2791e8fdabce53684a86b62c99b84cba26fb13a5ba3f4abf80d6c"
        },
        {
          "alg": "SHA-512",
          "content": "011e0ce3870ade374954e5818f3a03ab22bd19fbbf171d2873bdf1ecdbdefae183a512043f9155aa120dce3e1c902680372b18c3dcf1bb64ae508ecfa7631677"
        },
        {
          "alg": "SHA-384",
          "content": "fd1b5f17eeeb4992c80f468e99d54d614ef0de8981d40d5a6e0e6801ce6d74844fb3e0769ba43b4e7507ae330e0c6312"
        },
        {
          "alg": "SHA3-384",
          "content": "6a74a79bef71b22bd1eb217c26ffa4a91fc571819f24af2b2fc6e2372b9289779c60ec98464c429c6bd91d50a8ff65b9"
        },
        {
          "alg": "SHA3-256",
          "content": "0a726d7583e90d3076f1d805850366c6bd2dc2bbe4d836d209247c50c062eedf"
        },
        {
          "alg": "SHA3-512",
          "content": "c47e25067c30a0a01dc0e92e0b5bf3c6c8fe0ed4738b85af6e261ccf62cecb66e7b537ba1493434dfd479633e6a3d72bb51b15868e96bdce3da5696d8b294878"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.grpc/grpc-api@1.70.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/grpc/grpc-java",
          "type": "website"
        },
        {
          "url": "https://github.com/grpc/grpc-java",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.opencensus/opencensus-api@0.31.1?type=jar",
      "group": "io.opencensus",
      "name": "opencensus-api",
      "version": "0.31.1",
      "description": "null",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "a5e7092bb89baaaee424f5a7b20d1bad"
        },
        {
          "alg": "SHA-1",
          "content": "66a60c7201c2b8b20ce495f0295b32bb0ccbbc57"
        },
        {
          "alg": "SHA-256",
          "content": "f1474d47f4b6b001558ad27b952e35eda5cc7146788877fc52938c6eba24b382"
        },
        {
          "alg": "SHA-512",
          "content": "aac98ed2de298609bac9cb5a69ac16df0ca9c9fc82f429720ddcfdd769fdae96b707ed81c8d8c37380de846b302aacaac80156ef75567061aed3f77cc3c3b725"
        },
        {
          "alg": "SHA-384",
          "content": "d8dfdbc7d584809f00b5a4239cbaf575e8924a176e92a44230e8ac1e9dc85e458b63fad69b0b445d8d2e8c1a70e7633a"
        },
        {
          "alg": "SHA3-384",
          "content": "5cb3db9b30adb23c2b33ce0ded61a69e5347a4531d0563fc9185aba11aab7a639bf40286fc8d0f52a73c50add15775c7"
        },
        {
          "alg": "SHA3-256",
          "content": "733221e8a1dc4476c53fee92837757bfd468afe25f57bbce79d25c60f2e240f6"
        },
        {
          "alg": "SHA3-512",
          "content": "cdb61cef7324e1173f297867ec9274c6439779cdd674a442d26724de047258a64f3f76ad4e496f7afde785b5dbdf5d03f0b0f1d4424868cf14ebc1fd3b63dc76"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.opencensus/opencensus-api@0.31.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/census-instrumentation/opencensus-java",
          "type": "website"
        },
        {
          "url": "https://github.com/census-instrumentation/opencensus-java",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.opencensus/opencensus-contrib-http-util@0.31.1?type=jar",
      "group": "io.opencensus",
      "name": "opencensus-contrib-http-util",
      "version": "0.31.1",
      "description": "null",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "9ecc9c428eb87dc734ae8d07b820ce26"
        },
        {
          "alg": "SHA-1",
          "content": "3c13fc5715231fadb16a9b74a44d9d59c460cfa8"
        },
        {
          "alg": "SHA-256",
          "content": "3ea995b55a4068be22989b70cc29a4d788c2d328d1d50613a7a9afd13fdd2d0a"
        },
        {
          "alg": "SHA-512",
          "content": "3192532e4989a26d9a69f4246ef994b35058d155e199b500196d14427d1b46b1515f872a36500cb84768524870297388c90272ffa61dc8448f6f7571c4f86b27"
        },
        {
          "alg": "SHA-384",
          "content": "46f9dcc71f71f33be99a00fdd9a2ba602eb547b56b6e8177660d3a44d3dd974609bf16d2a1b58359a0f39797cb3ee683"
        },
        {
          "alg": "SHA3-384",
          "content": "21d66f5efa2511de4e4b4f3ea18d37aeb954ea1b4315f1e11cd84a11a95e9bb9841addee4d1230c3813f06144a675a1c"
        },
        {
          "alg": "SHA3-256",
          "content": "8352c7dcd73fced7e49425d70f6955579f5c24fafd4529e5f5e54ef5a88a3c83"
        },
        {
          "alg": "SHA3-512",
          "content": "f8ec86e5728b9acbdaa684cbf385ab3834006e44363de43f9af4b50dca71d4e0d77d0d8b2e7bb97435581dda6572691b1d263835e4e97256999df550b9efc13b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.opencensus/opencensus-contrib-http-util@0.31.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/census-instrumentation/opencensus-java",
          "type": "website"
        },
        {
          "url": "https://github.com/census-instrumentation/opencensus-java",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.http-client/google-http-client-gson@2.1.0?type=jar",
      "publisher": "Google",
      "group": "com.google.http-client",
      "name": "google-http-client-gson",
      "version": "2.1.0",
      "description": "Google HTTP Client Library for Java",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "1416246dac1dae9f117f63c38ec6ce9c"
        },
        {
          "alg": "SHA-1",
          "content": "e65ea98fe4e8d3a512559698a0d8664908fd36f3"
        },
        {
          "alg": "SHA-256",
          "content": "3cf72c7b88375a34bf721c664f42edc8e096e2370e4126c9b8933c3c92e591f3"
        },
        {
          "alg": "SHA-512",
          "content": "16056abdea4d5accabf3e50aa572c485ea25dfca2dfe19e5258e87eef78121a5270eda3cd8c690bac9823dc8a89872de0e81fc9da62113707ec7df7f5ae88e5d"
        },
        {
          "alg": "SHA-384",
          "content": "1dc17d9a9faae3c38fdafba685600e00da33386150c5df126f450a360d26017940fcc5af2d8cb561b817195020bf1008"
        },
        {
          "alg": "SHA3-384",
          "content": "4f50fff2b447dc08918878ddc59a448383097c777fed59a0f12de85b07660faad6f5f1db0be72706806d73d162e2377d"
        },
        {
          "alg": "SHA3-256",
          "content": "23f4dbdc62afd307e7bb3354ba97a7ba614259441453fc2acdcf51f60e67d801"
        },
        {
          "alg": "SHA3-512",
          "content": "0b79e4f60953d3a8fb06c53016473c365fb019cf7c7a2a873a0ef94b2ff51c32f0b6b26044fcebc719bff7522fbeef28514d8fda568dc6d9a0a8b88362d97f3e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.http-client/google-http-client-gson@2.1.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/googleapis/google-http-java-client/google-http-client-gson",
          "type": "website"
        },
        {
          "url": "https://google.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/googleapis/google-http-java-client/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/googleapis/google-http-java-client/google-http-client-gson",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.api-client/google-api-client@2.9.0?type=jar",
      "publisher": "Google",
      "group": "com.google.api-client",
      "name": "google-api-client",
      "version": "2.9.0",
      "description": "The Google APIs Client Library for Java is a Java client library for accessing any HTTP-based API on the web",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "ea5f238f3ad4f44eb2261e66a2dcfc9d"
        },
        {
          "alg": "SHA-1",
          "content": "d5729efe51f8d0d03314749079921ddf69507082"
        },
        {
          "alg": "SHA-256",
          "content": "461377a5c904e8e4e0091cd1b4752bc9ef58b7223d608886d9642436d4b21273"
        },
        {
          "alg": "SHA-512",
          "content": "f2071c5d1da4220d3ea1127802cb569ba5558cedc820f092d1db44a52a60bf444eb523a1593335a12f7dab5f9f1942b1d3f989850d6e35419b52ee28c9743b6e"
        },
        {
          "alg": "SHA-384",
          "content": "6b9cfcf0a7dd6fd93b5bb8d77457a7994144f971a4cd6c82e024b34879c0cc03d6a8e873e6f886be16604161204153f5"
        },
        {
          "alg": "SHA3-384",
          "content": "832023844ea373aa06b8a59ed71a77b5189c86ee8d6b2a8bff66bf9a19868475f39a8739210af63cca01c241d02a029c"
        },
        {
          "alg": "SHA3-256",
          "content": "1125d8a859a8dff49278597119cf238a26513c2c784ae5b83791d44aa0e77bda"
        },
        {
          "alg": "SHA3-512",
          "content": "5058fe8f99b63f9fe25e76d04be905f0c39910afc3e1dabaa3a75837455e2ba324d78270dffef52b15bbd2653e2ccaaf684479df512118092e0b56a5c8db0692"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.api-client/google-api-client@2.9.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/googleapis/google-api-java-client/google-api-client",
          "type": "website"
        },
        {
          "url": "https://github.com/googleapis/google-api-java-client/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/googleapis/google-api-java-client/google-api-client",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.http-client/google-http-client-apache-v2@2.0.0?type=jar",
      "publisher": "Google",
      "group": "com.google.http-client",
      "name": "google-http-client-apache-v2",
      "version": "2.0.0",
      "description": "Google HTTP Client Library for Java",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "2eea96e72c1d01d74e0f93c9b677519b"
        },
        {
          "alg": "SHA-1",
          "content": "9d7ec2f47541ac747bce141c0d04b07c01a9f820"
        },
        {
          "alg": "SHA-256",
          "content": "9dfeedb952d2f0351dabc3327c42d87431acba63ad15eee272282af56ec033ab"
        },
        {
          "alg": "SHA-512",
          "content": "a6c7f96546105edbeff39373eace61893f0c53a6efca1de071ee481ca0a2b8845c2c5fc7c0f8a24f9dd7a0a1e69e177ac00f28aefbf54aca29a681470a523a17"
        },
        {
          "alg": "SHA-384",
          "content": "c5e0867f05fa5961d761c57a0f2a799bb20b3544a35ff5192ed17e220c07e43fc5eba7a9758130c0976d48f854790bd0"
        },
        {
          "alg": "SHA3-384",
          "content": "08a2b32fa6656f17a65983de440a7789c904616371458f200a8bbf7e8b9dbabd5c8720e9d83a490247289d6759e89cb3"
        },
        {
          "alg": "SHA3-256",
          "content": "edd458343dec03285dcedf4a29f094678b9295085dba2b9c7ab13faa06e80c3c"
        },
        {
          "alg": "SHA3-512",
          "content": "cda69daafb9b6743c32b3a4e9c1267454c98d35102fb1534d4dd0d7b4f6ee28f89c2d8121ec00155d35324e73b9e22ad32e437072d49075187b7d79f2e95fdb4"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.http-client/google-http-client-apache-v2@2.0.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/googleapis/google-http-java-client/google-http-client-apache-v2",
          "type": "website"
        },
        {
          "url": "https://google.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/googleapis/google-http-java-client/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/googleapis/google-http-java-client/google-http-client-apache-v2",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.apis/google-api-services-sqladmin@v1beta4-rev20260317-2.0.0?type=jar",
      "publisher": "Google",
      "group": "com.google.apis",
      "name": "google-api-services-sqladmin",
      "version": "v1beta4-rev20260317-2.0.0",
      "description": "Sonatype helps open source projects to set up Maven repositories on https://oss.sonatype.org/",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "11fcdc6922c3b79d6d7ebf53bf83ab0d"
        },
        {
          "alg": "SHA-1",
          "content": "745c8df5db2227bef7142c57461d0a8010b881b1"
        },
        {
          "alg": "SHA-256",
          "content": "59707a1559d7c6388907354e506e099993a8e775dd3bd9caaa9c1c8ea014d4b4"
        },
        {
          "alg": "SHA-512",
          "content": "7e7dea7d0e3ba996553b5e108a3e84d0c9a3aecfb1610a7b75a69efda616e6ec69028bcb0935025575021ab1c9eec8f2d53ce6b34dac5642389017032409f089"
        },
        {
          "alg": "SHA-384",
          "content": "310b74dcd5098435134218c3d02377625a975842f84b915b55cb09fd926fb0b8a04dfdab576613618128c3ee0bf1e6ea"
        },
        {
          "alg": "SHA3-384",
          "content": "a9b074155bf7f57af4cf00ed0afab5102ea0d0944e03305beb4f91d03e2ec7ce1b0b4ea509f41c733fa48526a9cfe37c"
        },
        {
          "alg": "SHA3-256",
          "content": "91f36d5925208a69e01d7aa52ec08bf39d674a66de6cb469acf8e12f420eef41"
        },
        {
          "alg": "SHA3-512",
          "content": "adebfb54ad7b84ea6f7c34d657623f5b07ec338d05083be85e830088b11e05f391c873618ff8334af0eecfecf4389c6cf0343429e9349853e1e1c2b653092233"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.apis/google-api-services-sqladmin@v1beta4-rev20260317-2.0.0?type=jar",
      "externalReferences": [
        {
          "url": "http://nexus.sonatype.org/oss-repository-hosting.html/google-api-services-sqladmin",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "http://svn.sonatype.org/spice/tags/oss-parent-7/google-api-services-sqladmin",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.auth/google-auth-library-credentials@1.46.0?type=jar",
      "publisher": "Google",
      "group": "com.google.auth",
      "name": "google-auth-library-credentials",
      "version": "1.46.0",
      "description": "Client libraries providing authentication and authorization to enable calling Google APIs.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "5b7cf063a2df1d9939ed26c7ec02da77"
        },
        {
          "alg": "SHA-1",
          "content": "b4a034dd289c23fd37fa337f40e2617fc902669b"
        },
        {
          "alg": "SHA-256",
          "content": "6364caa01ce016378dadf81f2501866d065a5840763821644e1405baaa8d929e"
        },
        {
          "alg": "SHA-512",
          "content": "94c0d13dc036e2125249fdffba8bb20bb741092e79474beea5bae3a74896eec35b21703c27e1b2ec60804233e5c8e9650ea41fc447bbb5f6074cb17788a90951"
        },
        {
          "alg": "SHA-384",
          "content": "5ca28130a0010eca684cfea77566a502542359156cf150792e67405363d948b4cfa9ad7051d07eb1edf875dfdfcf3d2d"
        },
        {
          "alg": "SHA3-384",
          "content": "ff73bd51533eb5737ebdd42d89f309b0f36514acc1b9f96c69aa8e579ab5e408cd1fd4b8d5b0f6dde9b47e1b12f6fc80"
        },
        {
          "alg": "SHA3-256",
          "content": "583e5f46a6c1fece80a379517015bb716f6ea28804fac14d502061df482917c7"
        },
        {
          "alg": "SHA3-512",
          "content": "67789ebbbfa9a794dd73d32b41437e924d16d35719a29ff74d353985ffe7e78cd591d927040310c888db6215dbae84420567ffaafdaa1e8c2b99cf5926e13951"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/com.google.auth/google-auth-library-credentials@1.46.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/googleapis/google-cloud-java/google-auth-library-credentials",
          "type": "website"
        },
        {
          "url": "https://google.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/googleapis/java-shared-config/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/googleapis/google-cloud-java/google-auth-library-credentials",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.auth/google-auth-library-oauth2-http@1.46.0?type=jar",
      "publisher": "Google",
      "group": "com.google.auth",
      "name": "google-auth-library-oauth2-http",
      "version": "1.46.0",
      "description": "Client libraries providing authentication and authorization to enable calling Google APIs.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "bd0db7e3ba6e7858aa0d16cd559d2067"
        },
        {
          "alg": "SHA-1",
          "content": "afaa62d0ad2c6ba82c0dae4f2b791b0d43e2db51"
        },
        {
          "alg": "SHA-256",
          "content": "f9d24c965bc08d27ada083fdccb62b956cd19f852fc2b3520af863bbdfc8999c"
        },
        {
          "alg": "SHA-512",
          "content": "b451e3cba2d1659e5ab55a224e3e7717db58609c589da266ed848217f3726334699e9eac92d5ca19ef17dd47e36c87a3cfc69f6d3575dcac2f7033ee5c099342"
        },
        {
          "alg": "SHA-384",
          "content": "b55799fa2b0242abf6b654891d8c9513b2ac79c7faec37ff311b14e531233b979f503363f2da237a6496b196399effe6"
        },
        {
          "alg": "SHA3-384",
          "content": "bc6e30ad8f36f4cdcb2bfbbec1fe49b40240b424e5257afbe7c67a162d62ff3aec21ce12cead46158063a6ca0d838e74"
        },
        {
          "alg": "SHA3-256",
          "content": "f82995ecd00027ccccc1ee5e0578200e0e0913fd186d93d1b10a8690e25576b8"
        },
        {
          "alg": "SHA3-512",
          "content": "7c85a1a24119fa3817992e621231a9ffd8910038211394dd978484cc43f98847a09a92d484791ade3a4551c0ee8c06fa8c2bbce23f0aafc0548c2cc78313238e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/com.google.auth/google-auth-library-oauth2-http@1.46.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/googleapis/google-cloud-java/google-auth-library-oauth2-http",
          "type": "website"
        },
        {
          "url": "https://google.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/googleapis/java-shared-config/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/googleapis/google-cloud-java/google-auth-library-oauth2-http",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.api/api-common@2.53.0?type=jar",
      "publisher": "Google LLC",
      "group": "com.google.api",
      "name": "api-common",
      "version": "2.53.0",
      "description": "Common utilities for Google APIs in Java",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "9ee05b70e837dea0aa8cf25967c017f9"
        },
        {
          "alg": "SHA-1",
          "content": "96e6ff53548b176c5d046049dc8fb1c64546a96a"
        },
        {
          "alg": "SHA-256",
          "content": "f7073fb389c2aa329981ee65241db7947e8744c988e6c4d975f18bf2748b935a"
        },
        {
          "alg": "SHA-512",
          "content": "8651f8bf699c8e088b72b9e800c61871d0732f73e227aa9451b78a0049f5ba1a125e9026eb34a7b4400f976e463b2ba816e9f33d0023ceafe9eeaccb3addbee1"
        },
        {
          "alg": "SHA-384",
          "content": "afed7f9faae0ec5fcf50162a4a16f13cff7dfdca7b959e866b84cc714de708674cb26481164d34c91576c96e5b7abb95"
        },
        {
          "alg": "SHA3-384",
          "content": "8672cb69fac3cfb97168f85a173fd1fbbeb991e845a16f3396518c67f097f8b0835c47a64043c4e17f836c2563a07dba"
        },
        {
          "alg": "SHA3-256",
          "content": "f59d897bb46c3059d491000646b59ced385c642437641f12ed1cd0cb6bbfa4a4"
        },
        {
          "alg": "SHA3-512",
          "content": "1a5f6b534a5c65f52ca5472c9d1c9a1527d8b285abb0c1c0e5b5216459bc0cb2b8d87d991384e265b490ff375d920fe530a15b979d1c112ec4bb24abf69135fa"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/com.google.api/api-common@2.53.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/googleapis/sdk-platform-java",
          "type": "website"
        },
        {
          "url": "https://google.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/googleapis/sdk-platform-java/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/googleapis/sdk-platform-java",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/javax.annotation/javax.annotation-api@1.3.2?type=jar",
      "publisher": "GlassFish Community",
      "group": "javax.annotation",
      "name": "javax.annotation-api",
      "version": "1.3.2",
      "description": "Common Annotations for the JavaTM Platform API",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "2ab1973eefffaa2aeec47d50b9e40b9d"
        },
        {
          "alg": "SHA-1",
          "content": "934c04d3cfef185a8008e7bf34331b79730a9d43"
        },
        {
          "alg": "SHA-256",
          "content": "e04ba5195bcd555dc95650f7cc614d151e4bcd52d29a10b8aa2197f3ab89ab9b"
        },
        {
          "alg": "SHA-512",
          "content": "679cf44c3b9d635b43ed122a555d570292c3f0937c33871c40438a1a53e2058c80578694ec9466eac9e280e19bfb7a95b261594cc4c1161c85dc97df6235e553"
        },
        {
          "alg": "SHA-384",
          "content": "fc0058495e54efb6e05a34e3ff422e7c8347bcc77d6d9b87e9253424968dee6ef6a215c318d7e54f8705276be81f0682"
        },
        {
          "alg": "SHA3-384",
          "content": "ed6464b715de6ced0d9981a3f28140824946a4b7a02ffaff6116c833bb36e8f77a6282ce63c0d82cfe841d4fd6916891"
        },
        {
          "alg": "SHA3-256",
          "content": "ecfc9bef24ae28cf94c6775ecf6e2086d90a25d8d5476a4f6bb24001601b6cd0"
        },
        {
          "alg": "SHA3-512",
          "content": "f2b333527faedf504f60aa70a3d491972fa76f7e61e6351027f74613f41001157656824fe312b6e1df6dc4979704fe2a745b618d5368a97fe0bf8749739de9e2"
        }
      ],
      "licenses": [
        {
          "expression": "(CDDL-1.0 OR GPL-2.0-with-classpath-exception)"
        }
      ],
      "purl": "pkg:maven/javax.annotation/javax.annotation-api@1.3.2?type=jar",
      "externalReferences": [
        {
          "url": "http://jcp.org/en/jsr/detail?id=250",
          "type": "website"
        },
        {
          "url": "https://maven.java.net/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/javaee/javax.annotation/issues",
          "type": "issue-tracker"
        },
        {
          "url": "javaee-spec@javaee.groups.io",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/javaee/javax.annotation",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.oauth-client/google-oauth-client@1.39.0?type=jar",
      "publisher": "Google",
      "group": "com.google.oauth-client",
      "name": "google-oauth-client",
      "version": "1.39.0",
      "description": "Google OAuth Client Library for Java. Functionality that works on all supported Java platforms, including Java 7 (or higher) desktop (SE) and web (EE), Android, and Google App Engine.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "cf4992aee304401b66f6d03e654ab981"
        },
        {
          "alg": "SHA-1",
          "content": "99f02f3c46c68c01dfc95878456b009a13229c88"
        },
        {
          "alg": "SHA-256",
          "content": "27fc61ee2d526e33d31350b5ea383091c0879345e261f9b2e6fcc97a20c86f88"
        },
        {
          "alg": "SHA-512",
          "content": "f8973ab9ddda79746cc4e5d6c156e571604304627db7ebc2a570f56679cdeeddad86ce8e36a8acb7593a215c9a55cd8b8f86d85d9bec67b71c15b27eb1af45fd"
        },
        {
          "alg": "SHA-384",
          "content": "a3ef0821a2964960487e39747c2a69ec2030ac04e0fd1bae025c5c71036ffa6dc8a1c99effb7c5a63fe9ce81b742e9d0"
        },
        {
          "alg": "SHA3-384",
          "content": "c3c37f7e6c0f7d107c8e52546c8ec9e4f726308dfb065e9cdd8265904ca1a06d401b29fa6b84d3df67c420b8604b6330"
        },
        {
          "alg": "SHA3-256",
          "content": "44c05e415db8bdfef87fb2207b5d4d02c115aa661b334cf26ef9b97be29d019e"
        },
        {
          "alg": "SHA3-512",
          "content": "abd5c4d3fe3a17103f09c70f6adaf130b59690d8639fd771ed03588451bd061c3d38782dd178ff1999806942a950b584d016b77a4bab0fa28e66b64052e08d60"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.oauth-client/google-oauth-client@1.39.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/googleapis/google-oauth-java-client/google-oauth-client",
          "type": "website"
        },
        {
          "url": "https://google.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/googleapis/google-oauth-java-client/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/googleapis/google-oauth-java-client/google-oauth-client",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/dnsjava/dnsjava@3.6.4?type=jar",
      "publisher": "dnsjava.org",
      "group": "dnsjava",
      "name": "dnsjava",
      "version": "3.6.4",
      "description": "dnsjava is an implementation of DNS in Java. It supports all defined record types (including the DNSSEC types), and unknown types. It can be used for queries, zone transfers, and dynamic updates. It includes a cache which can be used by clients, and a minimal implementation of a server. It supports TSIG authenticated messages, partial DNSSEC verification, and EDNS0.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "fedfa4856a051e3616b78ed7c146b1e3"
        },
        {
          "alg": "SHA-1",
          "content": "27b921d4fe745d2dcaf7185ac261b06d4a39e35b"
        },
        {
          "alg": "SHA-256",
          "content": "39d50d2b5bdee1161978bf85a1b01e95fee490e92bbe98d76d3ceb9642183570"
        },
        {
          "alg": "SHA-512",
          "content": "6a60c2dec294ba289f00afb5d919e90abea72f79067e4934bee164392f2200b292c3f004f6171ce87a7e869295c6b1a6a7e4a9880bdb1728d7661f18863f9ec8"
        },
        {
          "alg": "SHA-384",
          "content": "5bcc35e7c584ebb877fc4deb5897246f00ba4f32251555052a923ac1b555dc128e13d0a6165001b130ac7e83f678930c"
        },
        {
          "alg": "SHA3-384",
          "content": "dd26275406e2ee9a5d5fb02b252316b4ee8aebdd5567880097437c01445d489e4f01d4b0fbedf0f0f053256554175ba3"
        },
        {
          "alg": "SHA3-256",
          "content": "dec33c58965d9366771ad71c817a545838939ebe3fd3384fff95b5e6409d16d5"
        },
        {
          "alg": "SHA3-512",
          "content": "493ff36f6992cce2a78e8dc992592af45358f3acc10a1cafde2c6a1e1ab9cb824a338e949cf1a5be6524c401d625d3b253b6ee4494b87c1f7fcac01e9bbf74cb"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/dnsjava/dnsjava@3.6.4?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/dnsjava/dnsjava",
          "type": "website"
        },
        {
          "url": "https://github.com/dnsjava/dnsjava",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.api/gax@2.79.0?type=jar",
      "publisher": "Google LLC",
      "group": "com.google.api",
      "name": "gax",
      "version": "2.79.0",
      "description": "Google Api eXtensions for Java (Core)",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "82a44857a04c4794db48fe077efd0c57"
        },
        {
          "alg": "SHA-1",
          "content": "ae533be5c421a718e73fa5a7f04909f8036ac729"
        },
        {
          "alg": "SHA-256",
          "content": "05cc74a70456dcf20ae4484c444212d0f47d59b67fe2b3c6df9a79fad657d7fc"
        },
        {
          "alg": "SHA-512",
          "content": "b179a029b92b905e26a74b8f8012de44acc7828f61a2dcb4483e090561d102071c4c2e7d1f4c7b62d5efd81d0f5b8f0b54ba49d608807b02481268e71bba1f6a"
        },
        {
          "alg": "SHA-384",
          "content": "4d84ed6b16922d78d77bf480f4953909eb28e88caeef47a2ada2ae6f33d66dc2c90e622cd447476b172e2f9237b89bf4"
        },
        {
          "alg": "SHA3-384",
          "content": "24ee3ae26b78796b26fd2c049ed7ac966d21c5ea3beb90c2d4f3be92356ca2f2057dbb00f8ac0663a408ca58a7c40ad8"
        },
        {
          "alg": "SHA3-256",
          "content": "3db46f95dc14e6161d976fe34eb0d8028cf356937353a5e7d4120858deb88a1b"
        },
        {
          "alg": "SHA3-512",
          "content": "e9b5091f2f685f2a6516b34811348908425a9796d359ed3a07c8da14f65d8a3cd0c917126ff86750ddcdfa5633a7bb951ab2ebc1cb6440ccd4a33a102ea685f4"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/com.google.api/gax@2.79.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/googleapis/sdk-platform-java",
          "type": "website"
        },
        {
          "url": "https://google.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/googleapis/sdk-platform-java/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/googleapis/sdk-platform-java",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.github.resilience4j/resilience4j-retry@2.4.0?type=jar",
      "group": "io.github.resilience4j",
      "name": "resilience4j-retry",
      "version": "2.4.0",
      "description": "Resilience4j is a lightweight, easy-to-use fault tolerance library designed for Java8 and functional programming",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "0cdac2f0d96184c09dfe3e4f1705e963"
        },
        {
          "alg": "SHA-1",
          "content": "7072ed9351dc3a38a7c5a4a1ca21d3355e1f6453"
        },
        {
          "alg": "SHA-256",
          "content": "13cd52c89b69b9dbd68188877f16bdbeb3ae524d351a2d947f31ae07684c420a"
        },
        {
          "alg": "SHA-512",
          "content": "1e60cc69111eee4fe1d18d9c36e1baad62cc6ea06aa065cdce461fbd3cdc8c625f4ef818750def5b31469a80af2f8f52d4441aa946205b3203cafceed55655c0"
        },
        {
          "alg": "SHA-384",
          "content": "a1373917623fd647255c0c29533604d69d4f8395b8b7c50c95830447871d52d983df4a16a58990f9f7d6c242fdbb2903"
        },
        {
          "alg": "SHA3-384",
          "content": "b405c2ddefb6b78aa8d936c5c581e62cfdefc719c892da1625d82a624a6ac5afc60aa78251ccccbf056e8b6b4a4ce766"
        },
        {
          "alg": "SHA3-256",
          "content": "320682e81e53f54397c029244f5b1ee1b0cd589f88e57b00643e300c924f4623"
        },
        {
          "alg": "SHA3-512",
          "content": "9bc37b4a7fc968fc2c2f6f17b1083208b95a82aa5f826974a110cd9b057040071f02b850b32099f7657b20e36198da8eec5dd46e203a574338428d2f84d0845e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.github.resilience4j/resilience4j-retry@2.4.0?type=jar",
      "externalReferences": [
        {
          "url": "https://resilience4j.readme.io",
          "type": "website"
        },
        {
          "url": "https://github.com/resilience4j/resilience4j.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.github.resilience4j/resilience4j-micrometer@2.4.0?type=jar",
      "group": "io.github.resilience4j",
      "name": "resilience4j-micrometer",
      "version": "2.4.0",
      "description": "Resilience4j is a lightweight, easy-to-use fault tolerance library designed for Java8 and functional programming",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "b89d1f870641d912bbb350339b63bd94"
        },
        {
          "alg": "SHA-1",
          "content": "4d81d22237b84c5c075f805a0c7d4640bbd7ca33"
        },
        {
          "alg": "SHA-256",
          "content": "728613147bbbc0c329f69f5423b760778322e2f9af345cb0bd69b3fc89b17e88"
        },
        {
          "alg": "SHA-512",
          "content": "ec0f842b57a23b8536f9672c0c3eeb6831c9e9951be5862141ee029c6ff51994e9c3a046343ae985286acb3ab35766a770507fbaf35735aafc269fb28cf4fad4"
        },
        {
          "alg": "SHA-384",
          "content": "2187703d3e99f7f8b86f5d3280b3a247721752c38ef0dab42962729bf3ef6d88aff5eb34c6349e4b3f9e524d77ff1433"
        },
        {
          "alg": "SHA3-384",
          "content": "38f298fca66df6f9421b7cc92cfa13a537c49f57aa3651dd680684ca452fd764bc2e51e0d00b5774eb45b6126ebcf0da"
        },
        {
          "alg": "SHA3-256",
          "content": "2a57abc1c0ab88009c34b48f4135ce4e23974fc37deb33b99e4310cb8f0ff0a4"
        },
        {
          "alg": "SHA3-512",
          "content": "8b0f573a05168383121e9590c73c3263b43e9fc8f84b6813034baf07841d23661a965aa0abd348bc1c5b0166c9d3e50b896c8462b9d9381d60a7d1c08a10c9fe"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.github.resilience4j/resilience4j-micrometer@2.4.0?type=jar",
      "externalReferences": [
        {
          "url": "https://resilience4j.readme.io",
          "type": "website"
        },
        {
          "url": "https://github.com/resilience4j/resilience4j.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.micrometer/micrometer-observation@1.16.5?type=jar",
      "group": "io.micrometer",
      "name": "micrometer-observation",
      "version": "1.16.5",
      "description": "Module containing Observation related code",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "d4b4161bdbf3e4f0770f67fe11050f37"
        },
        {
          "alg": "SHA-1",
          "content": "9dff48a7a9dd84d9083e30a36855bb21a7d6836e"
        },
        {
          "alg": "SHA-256",
          "content": "4406f33535185ff896375e9a81a4b8694e28bf20c1089b24de0325d87f63dfe7"
        },
        {
          "alg": "SHA-512",
          "content": "7d9bb9f951a2434674f6e15bb14f538738679b4f74bf2459ee0b948a66d3744352ce32330f2c50898665314dc59aace193761654f7253f333b663179bb60df47"
        },
        {
          "alg": "SHA-384",
          "content": "dcfaf90f35dc2e53eb4b6abe63e5241245b365b0d9feba844f260b939dff556996486bd3e9b8b096d2c2628aca33800b"
        },
        {
          "alg": "SHA3-384",
          "content": "5a71f6b17a53b80448ec6e707664dc10894534456a307f8802397ca54200667010b20104de9704f9d79ea9ed89a65646"
        },
        {
          "alg": "SHA3-256",
          "content": "f32412cbdd25965394c0a46a0768c2ccbb6e3160c7d4db1c241571a1eba9700c"
        },
        {
          "alg": "SHA3-512",
          "content": "1c8318abbee580bb9cc2d4f9380db2567842ef2ecddef0b867b10c820cb443311c8e3fb69c0355f2da8d0546894d582a49207240b9028646d23ea4aef77dc93e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.micrometer/micrometer-observation@1.16.5?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/micrometer-metrics/micrometer",
          "type": "website"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.github.resilience4j/resilience4j-bulkhead@2.4.0?type=jar",
      "group": "io.github.resilience4j",
      "name": "resilience4j-bulkhead",
      "version": "2.4.0",
      "description": "Resilience4j is a lightweight, easy-to-use fault tolerance library designed for Java8 and functional programming",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "dfd76f43ef9c2d7912a99c128af344bb"
        },
        {
          "alg": "SHA-1",
          "content": "eb8ba5861207fcaec13468eab5a4dbe1d9e9e66f"
        },
        {
          "alg": "SHA-256",
          "content": "d718b601cedd94946c7572caafac1d93f5c9695bad61e0e4b6518e3f5f7c6ccc"
        },
        {
          "alg": "SHA-512",
          "content": "00b42a5110c37bcef4df56a807882f1d6919ceb9fc53e0daca2564258d7dafd299925f2f5ef9ac65c076c2757a934f48e88028f7bf839a956d44350ecfd4d28e"
        },
        {
          "alg": "SHA-384",
          "content": "03455782043e549dcb307f728281cfc8ecb4a8d6dd96d944db0d8cdb9bf80bed43cef1370b65f32e71dc52505a0803f1"
        },
        {
          "alg": "SHA3-384",
          "content": "af46a0541107931e8f5f7995d0f40f35914c66b8944f56417aff9605d29f888f571a1afcca1ea81f384eb747cd350e40"
        },
        {
          "alg": "SHA3-256",
          "content": "b00fd36b17bfb3db6b0ee095f9980af4829df095fdf326f78b0a26163a4d3916"
        },
        {
          "alg": "SHA3-512",
          "content": "de367c0a1d1bfe4c38333f8668567416adee1eba420e80c4524842180da9e2dc09579d4b2063edbab2da1e468f1fd093e42adfe174b0afa372cd33f421f9146c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.github.resilience4j/resilience4j-bulkhead@2.4.0?type=jar",
      "externalReferences": [
        {
          "url": "https://resilience4j.readme.io",
          "type": "website"
        },
        {
          "url": "https://github.com/resilience4j/resilience4j.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.github.resilience4j/resilience4j-ratelimiter@2.4.0?type=jar",
      "group": "io.github.resilience4j",
      "name": "resilience4j-ratelimiter",
      "version": "2.4.0",
      "description": "Resilience4j is a lightweight, easy-to-use fault tolerance library designed for Java8 and functional programming",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "6a450ca57c1c0172ffc32c2355d4885d"
        },
        {
          "alg": "SHA-1",
          "content": "4017079c1f73b0cc73fcc53a25306f3f8743e64c"
        },
        {
          "alg": "SHA-256",
          "content": "09a3c33cced3e1135cefda8667914b32b7304429c509b07fca771bd92d0c1780"
        },
        {
          "alg": "SHA-512",
          "content": "d50e1bcb0700963bfe2b4802301cdf2156a553f29caae07aa8192a44e0a2abac703fa190b1527a9aeae1412ae9215d701b494220ee3f3edfdeb9d3b3652f71ae"
        },
        {
          "alg": "SHA-384",
          "content": "6ee2786d1c40380381393adb6beef91b978bc9ba66647b16316ab448e3c97e2eb486521ebfdb965c5db6aae7c72e0fb6"
        },
        {
          "alg": "SHA3-384",
          "content": "189831d7d92301ca5f1211909d8787cb4a2fa6d9f267e3af9b0d9900dfe718ec75130d26110c21b34c59674e1f2720e4"
        },
        {
          "alg": "SHA3-256",
          "content": "8ac8f08bc4c21b1dcff1e8561364e5c7149523cdd658cecc426eb9fcfc4114d0"
        },
        {
          "alg": "SHA3-512",
          "content": "c078763d56a7190c102719fac6c012bd4c4d6e4e1b61c8201a8ed9909b4c7736c9d681163a0c46d99251ac1d2186d158ffd6539666bccf8b5ac759825dc2f755"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.github.resilience4j/resilience4j-ratelimiter@2.4.0?type=jar",
      "externalReferences": [
        {
          "url": "https://resilience4j.readme.io",
          "type": "website"
        },
        {
          "url": "https://github.com/resilience4j/resilience4j.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.github.resilience4j/resilience4j-timelimiter@2.4.0?type=jar",
      "group": "io.github.resilience4j",
      "name": "resilience4j-timelimiter",
      "version": "2.4.0",
      "description": "Resilience4j is a lightweight, easy-to-use fault tolerance library designed for Java8 and functional programming",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "2d421c59f3f87eaee243997f529cf5b4"
        },
        {
          "alg": "SHA-1",
          "content": "28351433fa75cccb0e0c8154676a427b5b4a3340"
        },
        {
          "alg": "SHA-256",
          "content": "946237017a5f52a878cfad8227c3eb6b957482be30d25a409cb8004e13237d38"
        },
        {
          "alg": "SHA-512",
          "content": "74e100e06388785058cd506459a0190bef879953dfd2ae2e3f16dcc83e76c5ecff62880d8ac7b96fcdf4087e863f4f3423b44290010a15a5b64c60808d2544f1"
        },
        {
          "alg": "SHA-384",
          "content": "586453333996b3d2b8150277eb41dbb7e2146b8e2a877e7cf8932cdddfe8a0e7c690335ba6e53e7051b0265a5016ecfa"
        },
        {
          "alg": "SHA3-384",
          "content": "b99c965e83e8f57bded1e66856b1278525947bea15c905dda5e13333ab9b82ebc5d0c27f14e6a8961ee32a0861995772"
        },
        {
          "alg": "SHA3-256",
          "content": "8709bedf51af90c9ee3c31b64fb893a199ef5defe54670507825b15551312737"
        },
        {
          "alg": "SHA3-512",
          "content": "865aa0e62b990fda80679824ae9ba32b631fe6cd72ea437201e0ce43bbae1b3a5c23fcdfe7454736822a7e6a38ba68456494f694775fc7b06a1077847357e988"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.github.resilience4j/resilience4j-timelimiter@2.4.0?type=jar",
      "externalReferences": [
        {
          "url": "https://resilience4j.readme.io",
          "type": "website"
        },
        {
          "url": "https://github.com/resilience4j/resilience4j.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.slf4j/log4j-over-slf4j@2.0.18?type=jar",
      "publisher": "QOS.ch",
      "group": "org.slf4j",
      "name": "log4j-over-slf4j",
      "version": "2.0.18",
      "description": "Log4j implemented over SLF4J",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "98ec26919bc690052e2912dad2ee2abd"
        },
        {
          "alg": "SHA-1",
          "content": "9346cfcbbe1cd58c8f80ca04de4c709fba22052c"
        },
        {
          "alg": "SHA-256",
          "content": "d030643b4b3371ac79ce9a5bf2e4f82b65ee5621e2c0c6bbfb254d74c9a90df6"
        },
        {
          "alg": "SHA-512",
          "content": "1af189c18a92a946d3d0e657dc028afaa80bbc03d26fcda5b76c237edf30d2ab3b98f949706ed4751f369ad8334d2ecf8e199ca0f5173d35096bf764859e8021"
        },
        {
          "alg": "SHA-384",
          "content": "744a93867dd330e545ed505f383d87cc6ec3b928a7f99f69932a06a3e35d38d3ed094ad46970c8efe3ad19c8f8a1a1d5"
        },
        {
          "alg": "SHA3-384",
          "content": "d5a54ea78edabc28151f4b27b7c918030fa2964182684229547314acae1e8af5d70299bfd2fd9302e31a80a34ef5806d"
        },
        {
          "alg": "SHA3-256",
          "content": "e2ade27d9fa1565c7d9612eeebc127587bf9d257a159a23c0a42d7e3a568dd0b"
        },
        {
          "alg": "SHA3-512",
          "content": "8b25d1c720684f872afdd3318b452b0887ddc0f5d31a9290cba8414aef58a91ed8315db600a46d7502117e71fed0d6783cda2f783985051b6b8df68ade90e54d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.slf4j/log4j-over-slf4j@2.0.18?type=jar",
      "externalReferences": [
        {
          "url": "http://www.slf4j.org",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/qos-ch/slf4j/slf4j-parent/log4j-over-slf4j",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.21.3?type=jar",
      "publisher": "FasterXML",
      "group": "com.fasterxml.jackson.dataformat",
      "name": "jackson-dataformat-yaml",
      "version": "2.21.3",
      "description": "Support for reading and writing YAML-encoded data via Jackson abstractions.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "cf0f62bbc7708e1e956ee88da2e9971b"
        },
        {
          "alg": "SHA-1",
          "content": "400fe3e019f87353512e1fec1c4cd61653456676"
        },
        {
          "alg": "SHA-256",
          "content": "f0aa297d46f9364af8b3617f8f16ee3d687bc11a8b20ea6266590a21e021c3a4"
        },
        {
          "alg": "SHA-512",
          "content": "7cabeadc6d1026f147c50c58747f8467705bfaba1b3f882d859dfe8d81ada2e1803613a8c15abf5d11db4b4877c1892f697d0e5ec957fa2857c8c8df4e418dc6"
        },
        {
          "alg": "SHA-384",
          "content": "5648576874e31ac219ddfe503a5774b9c318bd0f6a7d70e7f0fb0800f13813fa9a957e46258c7606530b4bbe91f8f6f3"
        },
        {
          "alg": "SHA3-384",
          "content": "11e3c1f4bd5c4c7bf4f85c558e17c94d7bf5384df997c884d697b5af1337244527d57f9911170441c72f66597b336b70"
        },
        {
          "alg": "SHA3-256",
          "content": "1f1195bfcaead393e794bfd258ab20fad46eefd3a57f9c0b7a9a2e6a43c7a6e9"
        },
        {
          "alg": "SHA3-512",
          "content": "ee039d7c901598aa0a0202a808ceae2f9563da49be1e01f68c868457aaa6316da940970494786f16cd7a02c718b0ef8c1ece510ca880b8af8362b8dad60f4470"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.21.3?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/FasterXML/jackson-dataformats-text",
          "type": "website"
        },
        {
          "url": "https://central.sonatype.com/api/v1/publisher",
          "type": "distribution"
        },
        {
          "url": "https://github.com/FasterXML/jackson-dataformats-text/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/FasterXML/jackson-dataformats-text/jackson-dataformat-yaml",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.minio/minio@9.0.1?type=jar",
      "group": "io.minio",
      "name": "minio",
      "version": "9.0.1",
      "description": "MinIO Java SDK for Amazon S3 Compatible Cloud Storage",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "5423471f693ca3edc051529f732e95a1"
        },
        {
          "alg": "SHA-1",
          "content": "88e05a509f3913ac48b702982ff67282ac9e6fcd"
        },
        {
          "alg": "SHA-256",
          "content": "704017a4914006fb796bc4698663aad23d529fefa6cc57bdb0a469ab7d1a0849"
        },
        {
          "alg": "SHA-512",
          "content": "b525aafad137e7168b168d5bbbd59a59b30cbc681c8429d6f9c8223637669c07badbb1c555926619124a7e8062363757ceb3b6d9ef56c3e42ce81746ec061dd4"
        },
        {
          "alg": "SHA-384",
          "content": "c8a5620dc6b5a5ac6756095aee3f64dd300748c53936f8964fe68bc720422ac83301916531564f743c3fb52a1c4790f2"
        },
        {
          "alg": "SHA3-384",
          "content": "fbcb89a2282d4f0bb10b896b241c11d28c363242f3621aa58e4dd95a4c571372ce616da3f90a4c525072a8af42a757f9"
        },
        {
          "alg": "SHA3-256",
          "content": "961cb5e5e263919fe3fddd02fe751efbe3b577ba9e107d530fafc8f40337d4d6"
        },
        {
          "alg": "SHA3-512",
          "content": "004f3830f836ff05784c2dd6321f6e3304ae1cee97102649ad09970a6454cc9e9c431d610cc2f97c92b97aa0369b4e4fd4ca3f6de87799c8c08c09662fedfe5a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.minio/minio@9.0.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/minio/minio-java",
          "type": "website"
        },
        {
          "url": "http://github.com/minio/minio-java",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.carrotsearch.thirdparty/simple-xml-safe@2.7.1?type=jar",
      "publisher": "Carrot Search s.c.",
      "group": "com.carrotsearch.thirdparty",
      "name": "simple-xml-safe",
      "version": "2.7.1",
      "description": "A fork of Niall Gallagher\u0027s simple-xml library with web-safe defaults",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "150936ed745f2c207db42931d7d5839b"
        },
        {
          "alg": "SHA-1",
          "content": "045fda5ac6087bc82a209d8cdb73f8d0dbdcfc7b"
        },
        {
          "alg": "SHA-256",
          "content": "4506e4bb57d41481936f0ac684468ca4b2cc9e002ca8466ee19e23228d455957"
        },
        {
          "alg": "SHA-512",
          "content": "d13c25a9c4b7ce07e6b096e37591b37e415332d3e1adcb65c753238f1c3d968a98293223a720101b0af0d76c4bd9f8a0d487de9b0122172187b59e923877592a"
        },
        {
          "alg": "SHA-384",
          "content": "a96086b4fe29a470978638f14d5508daa1f1f2a629de4cc424964e8c05a7d0d6960650b5536aee098fda03c6b5a8acae"
        },
        {
          "alg": "SHA3-384",
          "content": "3975d435b3f32c32dfdebc88625c7226d5052275269f4b0533f0d2cca05fd7d91c9a7ca58eb9559a6f4855166d3fd4bc"
        },
        {
          "alg": "SHA3-256",
          "content": "ed6f680d21c9fc1cd9606dc0dfcbbbed7baa71d41c51654b32159fef896d8806"
        },
        {
          "alg": "SHA3-512",
          "content": "d35d823731ce1d4bd9dbfca093f59ab91346b2b7f901c43c5aabe36fdc6ad5e1af130129da75dc9d731c3d9597e53afe888efefd752891b4f09f3eb2a8a6a5f5"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.carrotsearch.thirdparty/simple-xml-safe@2.7.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/dweiss/simplexml",
          "type": "website"
        },
        {
          "url": "https://github.com/dweiss/simplexml",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.squareup.okhttp3/okhttp@5.3.2?type=jar",
      "group": "com.squareup.okhttp3",
      "name": "okhttp",
      "version": "5.3.2",
      "description": "Square\u2019s meticulous HTTP client for Java and Kotlin.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "7cefaebda364337f3770168187124f31"
        },
        {
          "alg": "SHA-1",
          "content": "6891a4fd19bcab6f69fe091c2bc6077edec5258e"
        },
        {
          "alg": "SHA-256",
          "content": "e720a383fdc3eb1df4aac77a085e61b7730837364151de867093fdbcafcb44aa"
        },
        {
          "alg": "SHA-512",
          "content": "165c65503bded11490b09c46935864aa71ee8b9fc4ea1c01e1cb91b209a64af97e92d5d8fd9b4bc78209a8949a79f37ff49edd992171d25ba6f7e0d968cee87c"
        },
        {
          "alg": "SHA-384",
          "content": "c17bcf23262c3979a72e2c1746757b0f67ddad0b060c95d655a3d912136654b2468c96bd1921b316f4f05f43ce86c872"
        },
        {
          "alg": "SHA3-384",
          "content": "2bde1832a1b0bb7bb1a0eac22a2af8c4c25059dc98584667247c6efd3e8de3c4350b5ba9d378d689b285d05604601d81"
        },
        {
          "alg": "SHA3-256",
          "content": "07a360a76512ec19d3220d3ed9b594638ff63f8be6fb0bca1eee93057cd23861"
        },
        {
          "alg": "SHA3-512",
          "content": "fbb062b8370d6b9547edc1c3bf9a0a3bedf65b33e644cdc05e8c8101482757c8371f98616c13391cad7dfab3a01dac8a174ffcd99ebcc515a384aa8f022de8c3"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.squareup.okhttp3/okhttp@5.3.2?type=jar",
      "externalReferences": [
        {
          "url": "https://square.github.io/okhttp/",
          "type": "website"
        },
        {
          "url": "https://github.com/square/okhttp",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.squareup.okio/okio@3.16.4?type=jar",
      "group": "com.squareup.okio",
      "name": "okio",
      "version": "3.16.4",
      "description": "A modern I/O library for Android, Java, and Kotlin Multiplatform.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "ca878d553dd4cdae891d16df87cdae7d"
        },
        {
          "alg": "SHA-1",
          "content": "dbd63ccb67502e388975c9b5e4fb029638aecc78"
        },
        {
          "alg": "SHA-256",
          "content": "c9964f394c4cd32b79bf338afbfa2f2297221eee08311787061cea55f87dd60e"
        },
        {
          "alg": "SHA-512",
          "content": "d848277d1da157f22b4ba2dd42bea11c7569aab1107181b886e97943dbb6058851e78d6582eb13bdfc05350b1f82c8d4b681a42435eee0f631d126dd8f3b39ee"
        },
        {
          "alg": "SHA-384",
          "content": "edad8c48669ffbb1b079bc8f7f4ee5d3671dc4563df0598cc0e27b5d50ced49a90f2f510ea963051a2ffbfc95eb91159"
        },
        {
          "alg": "SHA3-384",
          "content": "68a3fe67b2e285fbb352e262dfea29c03151dbfa934c1ac900cd7ab2ad8a1a9c0e7cac4aa718a7677fe7ee391ac65027"
        },
        {
          "alg": "SHA3-256",
          "content": "8544496fbf4ead4fc95b999eb2bf5f7af01dab0809a806c080a226ddee50011b"
        },
        {
          "alg": "SHA3-512",
          "content": "2a39fe798a87a2b89f73b2c3b9143003dbc93434bce334d0cb55f422bb048e4cd39a05c9ab2c53411cab9138b84cb72510dd08f516e9c46438a8644cc7c974f6"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.squareup.okio/okio@3.16.4?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/square/okio/",
          "type": "website"
        },
        {
          "url": "https://github.com/square/okio/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.commons/commons-compress@1.28.0?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.commons",
      "name": "commons-compress",
      "version": "1.28.0",
      "description": "Apache Commons Compress defines an API for working with compression and archive formats. These include bzip2, gzip, pack200, LZMA, XZ, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4, Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "f33efe616d561f8281ef7bf9f2576ad0"
        },
        {
          "alg": "SHA-1",
          "content": "e482f2c7a88dac3c497e96aa420b6a769f59c8d7"
        },
        {
          "alg": "SHA-256",
          "content": "e1522945218456f3649a39bc4afd70ce4bd466221519dba7d378f2141a4642ca"
        },
        {
          "alg": "SHA-512",
          "content": "f1f140f4f40ab3cf3265919db9dbb95a631a29aa784e305f291de4e68876bb711d9217d62d7937cddddd393982decdf71a608b4b3ab7f4e6375cf28af2893d7f"
        },
        {
          "alg": "SHA-384",
          "content": "afe6a8fc8e7486c4ecce95276bb1467763d7ff7d941c7bcff8661bbbd4bff442fd0899ff7a11bc540cda86818ee4a8f0"
        },
        {
          "alg": "SHA3-384",
          "content": "6afb636ad0805e522913cfd91c8293c485b7f4eff5e45dd3a17a716c3f4b8ab8969e9c00927559a5fb762cba1fdb3d3f"
        },
        {
          "alg": "SHA3-256",
          "content": "4420e0b462b5dcc45077e95e012a82a5ae17659e5abe8a685fa086dab6995298"
        },
        {
          "alg": "SHA3-512",
          "content": "23e37d13c8ee6c7369e407c29d1f9ee1bb44eca9f09a6f9742f6b4cf3d38dd7a0509fe0142536cd8087b68a76e71d819105af2c23f2aeed08acc58eb93cf7e61"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.commons/commons-compress@1.28.0?type=jar",
      "externalReferences": [
        {
          "url": "https://commons.apache.org/proper/commons-compress/",
          "type": "website"
        },
        {
          "url": "https://github.com/apache/commons-compress/actions",
          "type": "build-system"
        },
        {
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2",
          "type": "distribution"
        },
        {
          "url": "https://issues.apache.org/jira/browse/COMPRESS",
          "type": "issue-tracker"
        },
        {
          "url": "https://mail-archives.apache.org/mod_mbox/commons-user/",
          "type": "mailing-list"
        },
        {
          "url": "https://gitbox.apache.org/repos/asf?p=commons-compress.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.xerial.snappy/snappy-java@1.1.10.8?type=jar",
      "publisher": "xerial.org",
      "group": "org.xerial.snappy",
      "name": "snappy-java",
      "version": "1.1.10.8",
      "description": "snappy-java: A fast compression/decompression library",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "a25bd213d1ca2f3c605c5f03050db070"
        },
        {
          "alg": "SHA-1",
          "content": "ccbaa2b5ea6a023a27c44daf2d6cdec0e138592d"
        },
        {
          "alg": "SHA-256",
          "content": "50485d06037fea3d6e40c968386feeca6338cc9872e25549593ff3eb352cefcc"
        },
        {
          "alg": "SHA-512",
          "content": "c7133f726f366b9f06df98d94b4dd7c91c7702c543e1a318055a886af5e625d8231b0a6728250596181bc20a6c4147855eeb02ed55c447fe13ff2156e29985a9"
        },
        {
          "alg": "SHA-384",
          "content": "aeb78b3f4c56ce769f5fda9cfabe00be77d21b93637f70601c28b16eef41405e1291001c3a6e45001b356543e33b664b"
        },
        {
          "alg": "SHA3-384",
          "content": "6137f6354b574d8decb579ad9147dd9463e3a9f62d1e929266bee1adc020f57382973d0a1abf9daeb2007bb32671fed8"
        },
        {
          "alg": "SHA3-256",
          "content": "f44a4a8cffe82ce6c99b401e9d822e71cdfc63c1b279b278282eda07243b2a94"
        },
        {
          "alg": "SHA3-512",
          "content": "655731ef3b20a2cec213138c170f7dc7182c2a09536d74c1d8a13224bb204dd706a35749bf99b51c4b945b75784a0a26c60931a158d27e1378ccd1c8ac7a0783"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.xerial.snappy/snappy-java@1.1.10.8?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/xerial/snappy-java",
          "type": "website"
        },
        {
          "url": "https://github.com/xerial/snappy-java",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.squareup.okhttp3/okhttp-jvm@5.3.2?type=jar",
      "group": "com.squareup.okhttp3",
      "name": "okhttp-jvm",
      "version": "5.3.2",
      "description": "Square\u2019s meticulous HTTP client for Java and Kotlin.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "827a887aa959c1f1d6b12f3345df2484"
        },
        {
          "alg": "SHA-1",
          "content": "f31e8de27feebe1e56d6c9d354a0986b65be0e1d"
        },
        {
          "alg": "SHA-256",
          "content": "c771f48075b763f6c322055e21129a94b7de4c1faf3f8f58ace320b0c9517a30"
        },
        {
          "alg": "SHA-512",
          "content": "302cba8ec649ecb20512b4878b9f347645cdeada2001e7469363b21ca251bbb05c00e48e426449a88780f0ec25c672f214112b101d8dfd059b5275999ab48768"
        },
        {
          "alg": "SHA-384",
          "content": "a2bc92e52d8e1b2b9be40b0955828313f32a4276717bf7e1cace0aefa3bf5fad17997e409aeca7f68f335c9d975f1073"
        },
        {
          "alg": "SHA3-384",
          "content": "e585ea8e1ffbd6599654b5f7e9b1210ff972799f5019420652a0215b7dde6660b3a15e56b39d4702b42e307b3040b5d1"
        },
        {
          "alg": "SHA3-256",
          "content": "4737bb453c46672bef36c86ea7292a46f9552caaccfd7e6799bb9b3c508c4467"
        },
        {
          "alg": "SHA3-512",
          "content": "08ed5b2a6449ca0b8cced909bc2ded5cf20314b5bf8f8b094ed8641c5dd90e6b738fc66c917dd0eafbcf1e51497ba05ca154cc3d6fb4832a0ebc350a35c26abe"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.squareup.okhttp3/okhttp-jvm@5.3.2?type=jar",
      "externalReferences": [
        {
          "url": "https://square.github.io/okhttp/",
          "type": "website"
        },
        {
          "url": "https://github.com/square/okhttp",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.squareup.okio/okio-jvm@3.16.4?type=jar",
      "group": "com.squareup.okio",
      "name": "okio-jvm",
      "version": "3.16.4",
      "description": "A modern I/O library for Android, Java, and Kotlin Multiplatform.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "34d866f45bb2a65bf601cde52b72d096"
        },
        {
          "alg": "SHA-1",
          "content": "ceb794cf0bbf8d0d20f49aa91ce20db7fd77675d"
        },
        {
          "alg": "SHA-256",
          "content": "2196b993cd34dbbd919e7e01f57a4781b58bee80f86106163e287c20343a96a7"
        },
        {
          "alg": "SHA-512",
          "content": "1a7158538ae341b8a61fe7292506e12ca6063c5a51a1c122d0e934164395c7da585dc31b26ed88a993c47aeca89f6a854042c67a4bc7d771d35a0ece6c4dbde0"
        },
        {
          "alg": "SHA-384",
          "content": "37949576947630aba9caf7b24ffb00677f4b21b29a98543a0a66043340d20bb42128419d2bebc4b2f2b93569f35f9ada"
        },
        {
          "alg": "SHA3-384",
          "content": "32830517d7f960b4c86229f5347e40033658999029162aad0f273636640ed8b7130689de57277aaff169ac9f227885be"
        },
        {
          "alg": "SHA3-256",
          "content": "3f65833b5d5128064f885b68da6a3955667cf4c31a098da08431561949fe398b"
        },
        {
          "alg": "SHA3-512",
          "content": "ee404499bb148b817e575c22049cb5487531605413bf38edf8fd2cecf0d15f899de42e37d7dafa5dc8bc5493e24b7a976c2bc14c42d6d7056af410bd72513ad3"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.squareup.okio/okio-jvm@3.16.4?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/square/okio/",
          "type": "website"
        },
        {
          "url": "https://github.com/square/okio/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.jetbrains.kotlin/kotlin-stdlib@2.3.21?type=jar",
      "group": "org.jetbrains.kotlin",
      "name": "kotlin-stdlib",
      "version": "2.3.21",
      "description": "Kotlin Standard Library",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "67d962e3bcffbbb88f84b4d49e47fc56"
        },
        {
          "alg": "SHA-1",
          "content": "a2ee2c4e220fee522f0451b723bab2a43f3481a7"
        },
        {
          "alg": "SHA-256",
          "content": "6f64eac736db9434dd6925b4a518b9d1d17177652320c37916cf9ba3ce7d7d7a"
        },
        {
          "alg": "SHA-512",
          "content": "5564b17f006a9fdf93c93439b357e1fb82742c72d23b7aaa2e50d6db730d0b40426257e4e40eca7c70f9d514367b0057e51b84e1d0e49817002bc463939fee59"
        },
        {
          "alg": "SHA-384",
          "content": "f035eb7c781464e1355ee0b82e73eb7eabce67c37f469b35573c3047e46198904498110a05b4e207c78fb7766cf3524a"
        },
        {
          "alg": "SHA3-384",
          "content": "3fbc298ec3e9f816a889f69fa9fb95599866993059d16fdd108241ae70d70f0960fa2901081d0ebbb9a091c9964559c9"
        },
        {
          "alg": "SHA3-256",
          "content": "ac878d6d6b3394c66b0f5082d965649c243633d4fd8ba6a0926da346e3e23f0b"
        },
        {
          "alg": "SHA3-512",
          "content": "95fa621de32a1cf23c9aad2a872afada708a8feb8c554cc37c2730fe43c64a324ffb9262f62782bbb9558f7c1c22abec2ce26379f9b798b328f13f46fdc9eff1"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.jetbrains.kotlin/kotlin-stdlib@2.3.21?type=jar",
      "externalReferences": [
        {
          "url": "https://kotlinlang.org/",
          "type": "website"
        },
        {
          "url": "https://github.com/JetBrains/kotlin",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.jetbrains/annotations@13.0?type=jar",
      "group": "org.jetbrains",
      "name": "annotations",
      "version": "13.0",
      "description": "A set of annotations used for code inspection support and code documentation.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "f4fb462172517b46b6cd90003508515a"
        },
        {
          "alg": "SHA-1",
          "content": "919f0dfe192fb4e063e7dacadee7f8bb9a2672a9"
        },
        {
          "alg": "SHA-256",
          "content": "ace2a10dc8e2d5fd34925ecac03e4988b2c0f851650c94b8cef49ba1bd111478"
        },
        {
          "alg": "SHA-512",
          "content": "5622d0ffe410e7272e2bb9fae1006caedeb86d0c62d2d9f3929a3b3cdcdef1963218fcf0cede82e95ef9f4da3ed4a173fa055ee6e4038886376181e0423e02ff"
        },
        {
          "alg": "SHA-384",
          "content": "6bcde3a6e471d416522e6288474bc4f9115e2e8abf8ce5d300829bee4aa98dff73be7d8c6f0607f3d6d423c7f5abbf90"
        },
        {
          "alg": "SHA3-384",
          "content": "f4d5a5d5a76b24c4751c8c52f2879b097d2430c3571c59b4630e8c871c9bdb08e24e803a14c24fc8d3378417f29b7244"
        },
        {
          "alg": "SHA3-256",
          "content": "b4a80ea81c4bc7e364e07981465f547e8ed83031806eaf3b97dfb38f894f5b6f"
        },
        {
          "alg": "SHA3-512",
          "content": "15b23bce818b4399b334dd632eb85de5a1b70c47fb9260561e70b1f726211c83bddbc957f3b4c32a1d8c687f9bc6c38d0a638c731cb5daf5b619aa725d6050c2"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.jetbrains/annotations@13.0?type=jar",
      "externalReferences": [
        {
          "url": "http://www.jetbrains.org",
          "type": "website"
        },
        {
          "url": "http://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/JetBrains/intellij-community",
          "type": "vcs"
        }
      ]
    }
  ],
  "services": [
    {
      "bom-ref": "service:gov.nist.nvd",
      "provider": {
        "name": "National Institute of Standards and Technology (NIST)",
        "url": [
          "https://nist.gov"
        ],
        "contact": [
          {
            "email": "nvd@nist.gov"
          }
        ]
      },
      "group": "gov.nist.nvd",
      "name": "National Vulnerability Database (NVD)",
      "description": "Used as a vulnerability data source. CVE feeds are mirrored to Dependency-Track.",
      "endpoints": [
        "https://nvd.nist.gov/feeds"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "Public domain"
          }
        }
      ]
    },
    {
      "bom-ref": "service:org.sonatype.ossindex",
      "provider": {
        "name": "Sonatype",
        "url": [
          "https://sonatype.com"
        ],
        "contact": [
          {
            "email": "ossindex@sonatype.org"
          }
        ]
      },
      "group": "org.sonatype.ossindex",
      "name": "OSS Index",
      "description": "Optional vulnerability analyzer. Queried by component package URL to retrieve known vulnerabilities.",
      "endpoints": [
        "https://ossindex.sonatype.org/api/v3/component-report",
        "https://ossindex.sonatype.org/api/v3/version"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:com.cyberriskanalytics.vulndb",
      "provider": {
        "name": "Risk Based Security",
        "url": [
          "https://riskbasedsecurity.com/"
        ],
        "contact": [
          {
            "email": "support@riskbasedsecurity.com"
          },
          {
            "email": "sales@riskbasedsecurity.com",
            "phone": "1-855-RBS-RISK"
          }
        ]
      },
      "group": "com.cyberriskanalytics.vulndb",
      "name": "VulnDB",
      "description": "Optional commercial vulnerability analyzer. Queried for component vulnerabilities. Requires a paid subscription.",
      "endpoints": [
        "https://vulndb.cyberriskanalytics.com/api/v1/account_status",
        "https://vulndb.cyberriskanalytics.com/api/v1/vendors/",
        "https://vulndb.cyberriskanalytics.com/api/v1/products/",
        "https://vulndb.cyberriskanalytics.com/api/v1/versions/by_product_id",
        "https://vulndb.cyberriskanalytics.com/api/v1/vulnerabilities/",
        "https://vulndb.cyberriskanalytics.com/api/v1/vulnerabilities/find_by_cpe"
      ],
      "authenticated": true,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:com.github.api",
      "provider": {
        "name": "GitHub",
        "url": [
          "https://github.com/"
        ]
      },
      "group": "com.github.api",
      "name": "GitHub Advisories",
      "description": "Used as a vulnerability data source. GitHub Security Advisories are mirrored to Dependency-Track via GraphQL. Also queried for repository metadata of packages hosted on GitHub.",
      "endpoints": [
        "https://api.github.com/graphql",
        "https://api.github.com/repos/"
      ],
      "authenticated": true,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:io.crates",
      "provider": {
        "name": "Crates.io",
        "url": [
          "https://crates.io"
        ]
      },
      "group": "io.crates",
      "name": "Crates.io",
      "description": "Queried for package metadata and latest version information of Rust crates.",
      "endpoints": [
        "https://crates.io/api/v1/crates"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:org.packagist.repo",
      "provider": {
        "name": "Packagist",
        "url": [
          "https://packagist.org"
        ]
      },
      "group": "org.packagist.repo",
      "name": "Packagist",
      "description": "Queried for latest version information of PHP Composer packages.",
      "endpoints": [
        "https://repo.packagist.org/p/"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:org.rubygems",
      "provider": {
        "name": "RubyGems",
        "url": [
          "https://rubygems.org"
        ]
      },
      "group": "org.rubygems",
      "name": "RubyGems",
      "description": "Queried for package metadata and latest version information of Ruby gems.",
      "endpoints": [
        "https://rubygems.org/api/v1/versions"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:org.golang.proxy",
      "provider": {
        "name": "Google",
        "url": [
          "https://go.dev/"
        ]
      },
      "group": "org.golang.proxy",
      "name": "Go Module Mirror, Index, and Checksum Database",
      "description": "Queried for package metadata and latest version information of Go modules.",
      "endpoints": [
        "https://proxy.golang.org/"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:pm.hex",
      "provider": {
        "name": "Six Colors AB.",
        "url": [
          "https://hex.pm"
        ],
        "contact": [
          {
            "name": "Eric Meadows-J\u00F6nsson",
            "phone": "\u002B46 070-893 94 01"
          }
        ]
      },
      "group": "pm.hex",
      "name": "hex",
      "description": "Queried for package metadata and latest version information of Erlang and Elixir packages.",
      "endpoints": [
        "https://hex.pm/api/packages"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:org.maven.repo1",
      "provider": {
        "name": "Sonatype",
        "url": [
          "https://sonatype.com"
        ]
      },
      "group": "org.maven.repo1",
      "name": "Maven Central",
      "description": "Queried for package metadata and latest version information of Java artifacts.",
      "endpoints": [
        "https://repo1.maven.org/maven2"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:com.atlassian.maven",
      "provider": {
        "name": "Atlassian",
        "url": [
          "https://atlassian.com"
        ]
      },
      "group": "com.atlassian.maven",
      "name": "Atlassian Public",
      "description": "Queried for latest version information of Atlassian-published Maven artifacts.",
      "endpoints": [
        "https://packages.atlassian.com/content/repositories/atlassian-public/"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:org.jboss.repository",
      "provider": {
        "name": "RedHat",
        "url": [
          "https://redhat.com"
        ]
      },
      "group": "org.jboss.repository",
      "name": "JBoss Releases",
      "description": "Queried for latest version information of JBoss-published Maven artifacts.",
      "endpoints": [
        "https://repository.jboss.org/nexus/content/repositories/releases/"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:org.clojars.repo",
      "provider": {
        "name": "Clojars",
        "url": [
          "https://clojars.org/"
        ]
      },
      "group": "org.clojars.repo",
      "name": "Clojars",
      "description": "Queried for latest version information of Clojure libraries.",
      "endpoints": [
        "https://repo.clojars.org/"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:com.google.maven",
      "provider": {
        "name": "Google",
        "url": [
          "https://google.com"
        ]
      },
      "group": "com.google.maven",
      "name": "Google\u0027s Maven Repository",
      "description": "Queried for latest version information of Google and Android Maven artifacts.",
      "endpoints": [
        "https://maven.google.com/"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:org.npmjs.registry",
      "provider": {
        "name": "npm",
        "url": [
          "https://www.npmjs.com/"
        ]
      },
      "group": "org.npmjs.registry",
      "name": "NPM Registry",
      "description": "Queried for package metadata and latest version information of npm packages.",
      "endpoints": [
        "https://registry.npmjs.org/-/package/"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:org.nuget.api",
      "provider": {
        "name": "Microsoft",
        "url": [
          "https://www.microsoft.com/"
        ],
        "contact": [
          {
            "email": "support@nuget.org"
          }
        ]
      },
      "group": "org.nuget.api",
      "name": "NuGet Registry",
      "description": "Queried for package metadata and latest version information of NuGet packages.",
      "endpoints": [
        "https://api.nuget.org/v3-flatcontainer/",
        "https://api.nuget.org/v3/registration3/"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:dev.osv",
      "provider": {
        "name": "Google",
        "url": [
          "https://google.com"
        ]
      },
      "group": "dev.osv",
      "name": "OSV",
      "description": "Used as a vulnerability data source. Per-ecosystem OSV feeds are mirrored to Dependency-Track.",
      "endpoints": [
        "https://osv-vulnerabilities.storage.googleapis.com"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:org.pypi",
      "provider": {
        "name": "Python Software Foundation",
        "url": [
          "https://www.python.org/psf/"
        ],
        "contact": [
          {
            "email": "psf@python.org"
          }
        ]
      },
      "group": "org.pypi",
      "name": "PyPI",
      "description": "Queried for package metadata and latest version information of Python packages.",
      "endpoints": [
        "https://pypi.org/pypi/"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:org.dependencytrack.metrics",
      "provider": {
        "name": "OWASP",
        "url": [
          "https://owasp.org"
        ]
      },
      "group": "org.dependencytrack.metrics",
      "name": "Dependency-Track Telemetry",
      "description": "Receives anonymous usage telemetry submitted by this Dependency-Track instance. Optional.",
      "endpoints": [
        "https://metrics.dependencytrack.org"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "outbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:io.snyk",
      "provider": {
        "name": "Snyk",
        "url": [
          "https://snyk.io"
        ]
      },
      "group": "io.snyk",
      "name": "Snyk",
      "description": "Optional commercial vulnerability analyzer. Queried for component vulnerabilities. Requires a paid subscription.",
      "endpoints": [
        "https://api.snyk.io"
      ],
      "authenticated": true,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:com.empiricalsecurity.epss",
      "provider": {
        "name": "Empirical Security",
        "url": [
          "https://www.first.org/epss/"
        ]
      },
      "group": "com.empiricalsecurity.epss",
      "name": "EPSS",
      "description": "Used as a source of EPSS exploit prediction scores for CVEs. Feeds are mirrored to Dependency-Track.",
      "endpoints": [
        "https://epss.empiricalsecurity.com/epss_scores-current.csv.gz"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:org.metacpan",
      "provider": {
        "name": "The Perl Foundation",
        "url": [
          "https://metacpan.org"
        ]
      },
      "group": "org.metacpan",
      "name": "MetaCPAN",
      "description": "Queried for latest version information of Perl modules on CPAN.",
      "endpoints": [
        "https://fastapi.metacpan.org/v1/"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:org.haskell.hackage",
      "provider": {
        "name": "Haskell.org",
        "url": [
          "https://www.haskell.org"
        ]
      },
      "group": "org.haskell.hackage",
      "name": "Hackage",
      "description": "Queried for latest version information of Haskell packages.",
      "endpoints": [
        "https://hackage.haskell.org/"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:org.nixos.channels",
      "provider": {
        "name": "NixOS Foundation",
        "url": [
          "https://nixos.org"
        ]
      },
      "group": "org.nixos.channels",
      "name": "Nixpkgs",
      "description": "Queried for latest version information of Nixpkgs packages.",
      "endpoints": [
        "https://channels.nixos.org/nixpkgs-unstable/packages.json.br"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.dependencytrack/apiserver@5.0.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.dependencytrack/api@5.0.0?type=jar",
        "pkg:maven/org.dependencytrack/cache-api@5.0.0?type=jar",
        "pkg:maven/org.dependencytrack/cache-provider-database@5.0.0?type=jar",
        "pkg:maven/org.dependencytrack/common-init@5.0.0?type=jar",
        "pkg:maven/org.dependencytrack/common-pagination@5.0.0?type=jar",
        "pkg:maven/org.dependencytrack/datanucleus-plugin@5.0.0?type=jar",
        "pkg:maven/org.dependencytrack/migration@5.0.0?type=jar",
        "pkg:maven/org.dependencytrack/notification-api@5.0.0?type=jar",
        "pkg:maven/org.dependencytrack/notification-publishing@5.0.0?type=jar",
        "pkg:maven/org.dependencytrack/notification-templating@5.0.0?type=jar",
        "pkg:maven/org.dependencytrack/plugin-api@5.0.0?type=jar",
        "pkg:maven/org.dependencytrack/plugin-config@5.0.0?type=jar",
        "pkg:maven/org.dependencytrack/plugin-runtime@5.0.0?type=jar",
        "pkg:maven/org.dependencytrack/proto@5.0.0?type=jar",
        "pkg:maven/org.dependencytrack/secret-management@5.0.0?type=jar",
        "pkg:maven/org.dependencytrack/vuln-analysis-api@5.0.0?type=jar",
        "pkg:maven/org.dependencytrack/vuln-analyzer-internal@5.0.0?type=jar",
        "pkg:maven/org.dependencytrack/package-metadata-api@5.0.0?type=jar",
        "pkg:maven/org.dependencytrack/package-metadata-resolution@5.0.0?type=jar",
        "pkg:maven/org.dependencytrack/vuln-analyzer-oss-index@5.0.0?type=jar",
        "pkg:maven/org.dependencytrack/vuln-analyzer-snyk@5.0.0?type=jar",
        "pkg:maven/org.dependencytrack/vuln-analyzer-trivy@5.0.0?type=jar",
        "pkg:maven/org.dependencytrack/vuln-analyzer-vuln-db@5.0.0?type=jar",
        "pkg:maven/org.dependencytrack/dex-engine@5.0.0?type=jar",
        "pkg:maven/org.dependencytrack/file-storage-api@5.0.0?type=jar",
        "pkg:maven/org.dependencytrack/file-storage-provider-local@5.0.0?type=jar",
        "pkg:maven/org.dependencytrack/file-storage-provider-memory@5.0.0?type=jar",
        "pkg:maven/org.dependencytrack/file-storage-provider-s3@5.0.0?type=jar",
        "pkg:maven/org.dependencytrack/vuln-data-source-api@5.0.0?type=jar",
        "pkg:maven/org.dependencytrack/vuln-data-source-github@5.0.0?type=jar",
        "pkg:maven/org.dependencytrack/vuln-data-source-nvd@5.0.0?type=jar",
        "pkg:maven/org.dependencytrack/vuln-data-source-osv@5.0.0?type=jar",
        "pkg:maven/org.dependencytrack/alpine-common@5.0.0?type=jar",
        "pkg:maven/org.dependencytrack/alpine-model@5.0.0?type=jar",
        "pkg:maven/org.dependencytrack/alpine-infra@5.0.0?type=jar",
        "pkg:maven/org.dependencytrack/alpine-server@5.0.0?type=jar",
        "pkg:maven/dev.cel/cel@0.13.0?type=jar",
        "pkg:maven/dev.cel/extensions@0.4.1?type=jar",
        "pkg:maven/org.metaeffekt.core/ae-security@0.155.0?type=jar",
        "pkg:maven/com.github.kagkarlsson/db-scheduler@16.11.0?type=jar",
        "pkg:maven/org.dependencytrack/jdbi-support@5.0.0?type=jar",
        "pkg:maven/org.jdbi/jdbi3-core@3.53.0?type=jar",
        "pkg:maven/org.jdbi/jdbi3-jackson2@3.53.0?type=jar",
        "pkg:maven/org.jdbi/jdbi3-sqlobject@3.53.0?type=jar",
        "pkg:maven/org.jdbi/jdbi3-postgres@3.53.0?type=jar",
        "pkg:maven/org.jdbi/jdbi3-freemarker@3.53.0?type=jar",
        "pkg:maven/org.glassfish.jersey.ext/jersey-micrometer@4.0.2?type=jar",
        "pkg:maven/us.springett/owasp-risk-rating-calculator@1.0.1?type=jar",
        "pkg:maven/us.springett/cpe-parser@3.0.1?type=jar",
        "pkg:maven/org.cyclonedx/cyclonedx-core-java@12.1.0?type=jar",
        "pkg:maven/jakarta.activation/jakarta.activation-api@2.1.3?type=jar",
        "pkg:maven/jakarta.servlet/jakarta.servlet-api@6.1.0?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-server@12.1.9?type=jar",
        "pkg:maven/org.eclipse.jetty.compression/jetty-compression-gzip@12.1.9?type=jar",
        "pkg:maven/org.eclipse.jetty.compression/jetty-compression-server@12.1.9?type=jar",
        "pkg:maven/org.eclipse.jetty.ee11/jetty-ee11-servlet@12.1.9?type=jar",
        "pkg:maven/org.slf4j/jul-to-slf4j@2.0.18?type=jar",
        "pkg:maven/io.swagger.core.v3/swagger-annotations-jakarta@2.2.50?type=jar",
        "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.21.3?type=jar",
        "pkg:maven/com.github.package-url/packageurl-java@1.5.0?type=jar",
        "pkg:maven/com.asahaf.javacron/javacron@1.4.0?type=jar",
        "pkg:maven/io.micrometer/micrometer-java11@1.16.5?type=jar",
        "pkg:maven/io.micrometer/micrometer-registry-prometheus@1.16.5?type=jar",
        "pkg:maven/io.prometheus/prometheus-metrics-exposition-textformats@1.6.1?type=jar",
        "pkg:maven/io.github.mweirauch/micrometer-jvm-extras@0.3.0?type=jar",
        "pkg:maven/io.pebbletemplates/pebble@4.1.1?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java-util@4.35.0?type=jar",
        "pkg:maven/com.fasterxml.woodstox/woodstox-core@7.2.0?type=jar",
        "pkg:maven/io.github.nscuro/versatile-core@0.18.3?type=jar",
        "pkg:maven/org.postgresql/postgresql@42.7.11?type=jar",
        "pkg:maven/com.google.cloud.sql/postgres-socket-factory@1.28.3?type=jar",
        "pkg:maven/io.github.resilience4j/resilience4j-retry@2.4.0?type=jar",
        "pkg:maven/io.github.resilience4j/resilience4j-micrometer@2.4.0?type=jar",
        "pkg:maven/org.slf4j/log4j-over-slf4j@2.0.18?type=jar",
        "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.21.3?type=jar",
        "pkg:maven/io.minio/minio@9.0.1?type=jar",
        "pkg:maven/com.squareup.okhttp3/okhttp-jvm@5.3.2?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/api@5.0.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.dependencytrack/cache-api@5.0.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
        "pkg:maven/org.eclipse.microprofile.config/microprofile-config-api@3.1.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.eclipse.microprofile.config/microprofile-config-api@3.1.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.dependencytrack/cache-provider-database@5.0.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.dependencytrack/common-datasource@5.0.0?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
        "pkg:maven/io.micrometer/micrometer-core@1.16.5?type=jar",
        "pkg:maven/org.eclipse.microprofile.config/microprofile-config-api@3.1.1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/common-datasource@5.0.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.dependencytrack/common-health@5.0.0?type=jar",
        "pkg:maven/com.zaxxer/HikariCP@7.0.2?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
        "pkg:maven/io.micrometer/micrometer-core@1.16.5?type=jar",
        "pkg:maven/org.postgresql/postgresql@42.7.11?type=jar",
        "pkg:maven/io.smallrye.config/smallrye-config-core@3.17.2?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/common-health@5.0.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
        "pkg:maven/org.eclipse.microprofile.health/microprofile-health-api@4.0.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.eclipse.microprofile.health/microprofile-health-api@4.0.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.zaxxer/HikariCP@7.0.2?type=jar",
      "dependsOn": [
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/io.micrometer/micrometer-core@1.16.5?type=jar",
      "dependsOn": [
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
        "pkg:maven/io.micrometer/micrometer-commons@1.16.5?type=jar",
        "pkg:maven/io.micrometer/micrometer-observation@1.16.5?type=jar",
        "pkg:maven/org.hdrhistogram/HdrHistogram@2.2.2?type=jar",
        "pkg:maven/org.latencyutils/LatencyUtils@2.0.3?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.micrometer/micrometer-commons@1.16.5?type=jar",
      "dependsOn": [
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.micrometer/micrometer-observation@1.16.5?type=jar",
      "dependsOn": [
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
        "pkg:maven/io.micrometer/micrometer-commons@1.16.5?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.hdrhistogram/HdrHistogram@2.2.2?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.latencyutils/LatencyUtils@2.0.3?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.postgresql/postgresql@42.7.11?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/io.smallrye.config/smallrye-config-core@3.17.2?type=jar",
      "dependsOn": [
        "pkg:maven/org.eclipse.microprofile.config/microprofile-config-api@3.1.1?type=jar",
        "pkg:maven/jakarta.annotation/jakarta.annotation-api@3.0.0?type=jar",
        "pkg:maven/io.smallrye.common/smallrye-common-annotation@2.17.1?type=jar",
        "pkg:maven/io.smallrye.common/smallrye-common-expression@2.17.1?type=jar",
        "pkg:maven/io.smallrye.common/smallrye-common-constraint@2.17.1?type=jar",
        "pkg:maven/io.smallrye.common/smallrye-common-classloader@2.17.1?type=jar",
        "pkg:maven/org.jboss.logging/jboss-logging@3.6.1.Final?type=jar",
        "pkg:maven/org.ow2.asm/asm@9.9.1?type=jar",
        "pkg:maven/io.smallrye.config/smallrye-config-common@3.17.2?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/jakarta.annotation/jakarta.annotation-api@3.0.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/io.smallrye.common/smallrye-common-annotation@2.17.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/io.smallrye.common/smallrye-common-expression@2.17.1?type=jar",
      "dependsOn": [
        "pkg:maven/io.smallrye.common/smallrye-common-function@2.17.1?type=jar",
        "pkg:maven/org.jboss.logging/jboss-logging@3.6.1.Final?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.smallrye.common/smallrye-common-function@2.17.1?type=jar",
      "dependsOn": [
        "pkg:maven/io.smallrye.common/smallrye-common-constraint@2.17.1?type=jar",
        "pkg:maven/org.jboss.logging/jboss-logging@3.6.1.Final?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.smallrye.common/smallrye-common-constraint@2.17.1?type=jar",
      "dependsOn": [
        "pkg:maven/org.jboss.logging/jboss-logging@3.6.1.Final?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.jboss.logging/jboss-logging@3.6.1.Final?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/io.smallrye.common/smallrye-common-classloader@2.17.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.ow2.asm/asm@9.9.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/io.smallrye.config/smallrye-config-common@3.17.2?type=jar",
      "dependsOn": [
        "pkg:maven/org.eclipse.microprofile.config/microprofile-config-api@3.1.1?type=jar",
        "pkg:maven/io.smallrye.common/smallrye-common-classloader@2.17.1?type=jar",
        "pkg:maven/org.jboss.logging/jboss-logging@3.6.1.Final?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/common-init@5.0.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
        "pkg:maven/org.eclipse.microprofile.config/microprofile-config-api@3.1.1?type=jar",
        "pkg:maven/org.eclipse.microprofile.health/microprofile-health-api@4.0.1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/common-pagination@5.0.0?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-cbor@2.21.3?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-cbor@2.21.3?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.21.3?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.21.3?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.21.3?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.21.3?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.21?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.21.3?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.21?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.dependencytrack/datanucleus-plugin@5.0.0?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml.uuid/java-uuid-generator@5.2.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.fasterxml.uuid/java-uuid-generator@5.2.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/migration@5.0.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.flywaydb/flyway-core@12.6.1?type=jar",
        "pkg:maven/org.flywaydb/flyway-database-postgresql@12.6.1?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.flywaydb/flyway-core@12.6.1?type=jar",
      "dependsOn": [
        "pkg:maven/tools.jackson.core/jackson-databind@3.1.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/tools.jackson.core/jackson-databind@3.1.1?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.21?type=jar",
        "pkg:maven/tools.jackson.core/jackson-core@3.1.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/tools.jackson.core/jackson-core@3.1.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.flywaydb/flyway-database-postgresql@12.6.1?type=jar",
      "dependsOn": [
        "pkg:maven/org.flywaydb/flyway-core@12.6.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/notification-api@5.0.0?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml.uuid/java-uuid-generator@5.2.0?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java@4.35.0?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java-util@4.35.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.google.protobuf/protobuf-java@4.35.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.google.protobuf/protobuf-java-util@4.35.0?type=jar",
      "dependsOn": [
        "pkg:maven/com.google.protobuf/protobuf-java@4.35.0?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
        "pkg:maven/com.google.code.gson/gson@2.8.9?type=jar",
        "pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.google.code.gson/gson@2.8.9?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.dependencytrack/notification-publishing@5.0.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.eclipse.angus/angus-mail@2.0.5?type=jar",
        "pkg:maven/com.github.ben-manes.caffeine/caffeine@3.2.4?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.21.3?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
        "pkg:maven/org.apache.kafka/kafka-clients@4.3.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.eclipse.angus/angus-mail@2.0.5?type=jar",
      "dependsOn": [
        "pkg:maven/jakarta.activation/jakarta.activation-api@2.1.3?type=jar",
        "pkg:maven/jakarta.mail/jakarta.mail-api@2.1.3?type=jar",
        "pkg:maven/org.eclipse.angus/angus-activation@2.0.3?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/jakarta.activation/jakarta.activation-api@2.1.3?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/jakarta.mail/jakarta.mail-api@2.1.3?type=jar",
      "dependsOn": [
        "pkg:maven/jakarta.activation/jakarta.activation-api@2.1.3?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.eclipse.angus/angus-activation@2.0.3?type=jar",
      "dependsOn": [
        "pkg:maven/jakarta.activation/jakarta.activation-api@2.1.3?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.github.ben-manes.caffeine/caffeine@3.2.4?type=jar",
      "dependsOn": [
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
        "pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.apache.kafka/kafka-clients@4.3.0?type=jar",
      "dependsOn": [
        "pkg:maven/com.github.luben/zstd-jni@1.5.7-9?type=jar",
        "pkg:maven/at.yawk.lz4/lz4-java@1.10.2?type=jar",
        "pkg:maven/org.xerial.snappy/snappy-java@1.1.10.8?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.github.luben/zstd-jni@1.5.7-9?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/at.yawk.lz4/lz4-java@1.10.2?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.xerial.snappy/snappy-java@1.1.10.8?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.dependencytrack/notification-templating@5.0.0?type=jar",
      "dependsOn": [
        "pkg:maven/com.github.ben-manes.caffeine/caffeine@3.2.4?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
        "pkg:maven/io.pebbletemplates/pebble@4.1.1?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java-util@4.35.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.pebbletemplates/pebble@4.1.1?type=jar",
      "dependsOn": [
        "pkg:maven/org.unbescape/unbescape@1.1.6.RELEASE?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.unbescape/unbescape@1.1.6.RELEASE?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.dependencytrack/plugin-api@5.0.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.dependencytrack/cache-api@5.0.0?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/plugin-config@5.0.0?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.21.3?type=jar",
        "pkg:maven/com.networknt/json-schema-validator@1.5.9?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.networknt/json-schema-validator@1.5.9?type=jar",
      "dependsOn": [
        "pkg:maven/com.ethlo.time/itu@1.14.0?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.21.3?type=jar",
        "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.21.3?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.ethlo.time/itu@1.14.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.21.3?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.21.3?type=jar",
        "pkg:maven/org.yaml/snakeyaml@2.5?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.21.3?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.yaml/snakeyaml@2.5?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.dependencytrack/plugin-runtime@5.0.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.dependencytrack/cache-api@5.0.0?type=jar",
        "pkg:maven/org.dependencytrack/common-config@5.0.0?type=jar",
        "pkg:maven/org.dependencytrack/plugin-config@5.0.0?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.21.3?type=jar",
        "pkg:maven/org.jdbi/jdbi3-core@3.53.0?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
        "pkg:maven/org.eclipse.microprofile.config/microprofile-config-api@3.1.1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/common-config@5.0.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar",
        "pkg:maven/io.smallrye.config/smallrye-config-core@3.17.2?type=jar",
        "pkg:maven/org.dependencytrack/smallrye-config-secret-handler-file@5.0.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/smallrye-config-secret-handler-file@5.0.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.jdbi/jdbi3-core@3.53.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar",
        "pkg:maven/io.leangen.geantyref/geantyref@2.0.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.leangen.geantyref/geantyref@2.0.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.dependencytrack/proto@5.0.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.dependencytrack/cyclonedx-proto@5.0.0?type=jar",
        "pkg:maven/org.dependencytrack/file-storage-api@5.0.0?type=jar",
        "pkg:maven/org.dependencytrack/notification-api@5.0.0?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java@4.35.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/cyclonedx-proto@5.0.0?type=jar",
      "dependsOn": [
        "pkg:maven/com.google.protobuf/protobuf-java@4.35.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/file-storage-api@5.0.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java@4.35.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/secret-management@5.0.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.dependencytrack/common-datasource@5.0.0?type=jar",
        "pkg:maven/org.dependencytrack/common-pagination@5.0.0?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
        "pkg:maven/org.postgresql/postgresql@42.7.11?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar",
        "pkg:maven/com.google.crypto.tink/tink@1.21.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.google.crypto.tink/tink@1.21.0?type=jar",
      "dependsOn": [
        "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
        "pkg:maven/com.google.code.gson/gson@2.8.9?type=jar",
        "pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java@4.35.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/vuln-analysis-api@5.0.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.dependencytrack/cyclonedx-proto@5.0.0?type=jar",
        "pkg:maven/org.dependencytrack/plugin-api@5.0.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/vuln-analyzer-internal@5.0.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.dependencytrack/jdbi-support@5.0.0?type=jar",
        "pkg:maven/org.dependencytrack/os-distro-metadata@5.0.0?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.21.3?type=jar",
        "pkg:maven/org.jdbi/jdbi3-core@3.53.0?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar",
        "pkg:maven/io.github.nscuro/versatile-core@0.18.3?type=jar",
        "pkg:maven/us.springett/cpe-parser@3.0.1?type=jar",
        "pkg:maven/com.github.package-url/packageurl-java@1.5.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/jdbi-support@5.0.0?type=jar",
      "dependsOn": [
        "pkg:maven/com.github.package-url/packageurl-java@1.5.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.github.package-url/packageurl-java@1.5.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.dependencytrack/os-distro-metadata@5.0.0?type=jar",
      "dependsOn": [
        "pkg:maven/com.github.package-url/packageurl-java@1.5.0?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.github.nscuro/versatile-core@0.18.3?type=jar",
      "dependsOn": [
        "pkg:maven/io.github.nscuro/versatile-spi@0.18.3?type=jar",
        "pkg:maven/org.apache.maven/maven-artifact@3.9.16?type=jar",
        "pkg:maven/com.github.package-url/packageurl-java@1.5.0?type=jar",
        "pkg:maven/com.vdurmont/semver4j@3.1.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.github.nscuro/versatile-spi@0.18.3?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.apache.maven/maven-artifact@3.9.16?type=jar",
      "dependsOn": [
        "pkg:maven/org.codehaus.plexus/plexus-utils@3.6.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.codehaus.plexus/plexus-utils@3.6.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.vdurmont/semver4j@3.1.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/us.springett/cpe-parser@3.0.1?type=jar",
      "dependsOn": [
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/package-metadata-api@5.0.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.dependencytrack/plugin-api@5.0.0?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
        "pkg:maven/com.github.package-url/packageurl-java@1.5.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/package-metadata-resolution@5.0.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.brotli/dec@0.1.2?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.21.3?type=jar",
        "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.21.3?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java@4.35.0?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
        "pkg:maven/com.github.package-url/packageurl-java@1.5.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar",
        "pkg:maven/io.github.nscuro/versatile-core@0.18.3?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.brotli/dec@0.1.2?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.21.3?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.21?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.21.3?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.21.3?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/vuln-analyzer-oss-index@5.0.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.metaeffekt.core/ae-security@0.155.0?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.21.3?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
        "pkg:maven/com.github.package-url/packageurl-java@1.5.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.metaeffekt.core/ae-security@0.155.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.apache.commons/commons-lang3@3.20.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar",
        "pkg:maven/org.slf4j/jcl-over-slf4j@2.0.18?type=jar",
        "pkg:maven/commons-io/commons-io@2.22.0?type=jar",
        "pkg:maven/org.json/json@20231013?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.apache.commons/commons-lang3@3.20.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.slf4j/jcl-over-slf4j@2.0.18?type=jar",
      "dependsOn": [
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/commons-io/commons-io@2.22.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.json/json@20231013?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.dependencytrack/vuln-analyzer-snyk@5.0.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.metaeffekt.core/ae-security@0.155.0?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.21.3?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
        "pkg:maven/com.github.package-url/packageurl-java@1.5.0?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java-util@4.35.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/vuln-analyzer-trivy@5.0.0?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.21.3?type=jar",
        "pkg:maven/com.github.package-url/packageurl-java@1.5.0?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java@4.35.0?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java-util@4.35.0?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/vuln-analyzer-vuln-db@5.0.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.metaeffekt.core/ae-security@0.155.0?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.21.3?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/dex-engine@5.0.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.dependencytrack/dex-api@5.0.0?type=jar",
        "pkg:maven/org.dependencytrack/dex-engine-api@5.0.0?type=jar",
        "pkg:maven/org.dependencytrack/dex-engine-migration@5.0.0?type=jar",
        "pkg:maven/com.github.ben-manes.caffeine/caffeine@3.2.4?type=jar",
        "pkg:maven/com.fasterxml.uuid/java-uuid-generator@5.2.0?type=jar",
        "pkg:maven/org.jdbi/jdbi3-core@3.53.0?type=jar",
        "pkg:maven/org.jdbi/jdbi3-freemarker@3.53.0?type=jar",
        "pkg:maven/org.jdbi/jdbi3-jackson2@3.53.0?type=jar",
        "pkg:maven/org.jdbi/jdbi3-postgres@3.53.0?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
        "pkg:maven/io.micrometer/micrometer-core@1.16.5?type=jar",
        "pkg:maven/org.postgresql/postgresql@42.7.11?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java@4.35.0?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java-util@4.35.0?type=jar",
        "pkg:maven/io.github.resilience4j/resilience4j-circuitbreaker@2.4.0?type=jar",
        "pkg:maven/io.github.resilience4j/resilience4j-core@2.4.0?type=jar",
        "pkg:maven/io.github.resilience4j/resilience4j-micrometer@2.4.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/dex-api@5.0.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java@4.35.0?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java-util@4.35.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/dex-engine-api@5.0.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.dependencytrack/common-pagination@5.0.0?type=jar",
        "pkg:maven/org.dependencytrack/dex-api@5.0.0?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
        "pkg:maven/io.micrometer/micrometer-core@1.16.5?type=jar",
        "pkg:maven/org.eclipse.microprofile.health/microprofile-health-api@4.0.1?type=jar",
        "pkg:maven/io.github.resilience4j/resilience4j-core@2.4.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.github.resilience4j/resilience4j-core@2.4.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/dex-engine-migration@5.0.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.flywaydb/flyway-core@12.6.1?type=jar",
        "pkg:maven/org.flywaydb/flyway-database-postgresql@12.6.1?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.jdbi/jdbi3-freemarker@3.53.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.jdbi/jdbi3-core@3.53.0?type=jar",
        "pkg:maven/org.freemarker/freemarker@2.3.34?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.freemarker/freemarker@2.3.34?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.jdbi/jdbi3-jackson2@3.53.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.jdbi/jdbi3-core@3.53.0?type=jar",
        "pkg:maven/org.jdbi/jdbi3-json@3.53.0?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.21.3?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.21.3?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.21?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.jdbi/jdbi3-json@3.53.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.jdbi/jdbi3-core@3.53.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.jdbi/jdbi3-postgres@3.53.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.jdbi/jdbi3-core@3.53.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.github.resilience4j/resilience4j-circuitbreaker@2.4.0?type=jar",
      "dependsOn": [
        "pkg:maven/io.github.resilience4j/resilience4j-core@2.4.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.github.resilience4j/resilience4j-micrometer@2.4.0?type=jar",
      "dependsOn": [
        "pkg:maven/io.micrometer/micrometer-core@1.16.5?type=jar",
        "pkg:maven/io.micrometer/micrometer-observation@1.16.5?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar",
        "pkg:maven/io.github.resilience4j/resilience4j-bulkhead@2.4.0?type=jar",
        "pkg:maven/io.github.resilience4j/resilience4j-circuitbreaker@2.4.0?type=jar",
        "pkg:maven/io.github.resilience4j/resilience4j-retry@2.4.0?type=jar",
        "pkg:maven/io.github.resilience4j/resilience4j-ratelimiter@2.4.0?type=jar",
        "pkg:maven/io.github.resilience4j/resilience4j-timelimiter@2.4.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.github.resilience4j/resilience4j-bulkhead@2.4.0?type=jar",
      "dependsOn": [
        "pkg:maven/io.github.resilience4j/resilience4j-core@2.4.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.github.resilience4j/resilience4j-retry@2.4.0?type=jar",
      "dependsOn": [
        "pkg:maven/io.github.resilience4j/resilience4j-core@2.4.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.github.resilience4j/resilience4j-ratelimiter@2.4.0?type=jar",
      "dependsOn": [
        "pkg:maven/io.github.resilience4j/resilience4j-core@2.4.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.github.resilience4j/resilience4j-timelimiter@2.4.0?type=jar",
      "dependsOn": [
        "pkg:maven/io.github.resilience4j/resilience4j-core@2.4.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/file-storage-provider-local@5.0.0?type=jar",
      "dependsOn": [
        "pkg:maven/com.github.luben/zstd-jni@1.5.7-9?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/file-storage-provider-memory@5.0.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.dependencytrack/file-storage-provider-s3@5.0.0?type=jar",
      "dependsOn": [
        "pkg:maven/io.minio/minio@9.0.1?type=jar",
        "pkg:maven/com.squareup.okhttp3/okhttp-jvm@5.3.2?type=jar",
        "pkg:maven/com.github.luben/zstd-jni@1.5.7-9?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.minio/minio@9.0.1?type=jar",
      "dependsOn": [
        "pkg:maven/com.carrotsearch.thirdparty/simple-xml-safe@2.7.1?type=jar",
        "pkg:maven/com.google.guava/guava@33.5.0-jre?type=jar",
        "pkg:maven/com.squareup.okhttp3/okhttp@5.3.2?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.21?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.21.3?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.21.3?type=jar",
        "pkg:maven/org.apache.commons/commons-compress@1.28.0?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.21.0?type=jar",
        "pkg:maven/org.xerial.snappy/snappy-java@1.1.10.8?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.carrotsearch.thirdparty/simple-xml-safe@2.7.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.google.guava/guava@33.5.0-jre?type=jar",
      "dependsOn": [
        "pkg:maven/com.google.guava/failureaccess@1.0.3?type=jar",
        "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
        "pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0?type=jar",
        "pkg:maven/com.google.j2objc/j2objc-annotations@3.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.google.guava/failureaccess@1.0.3?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.google.j2objc/j2objc-annotations@3.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.squareup.okhttp3/okhttp@5.3.2?type=jar",
      "dependsOn": [
        "pkg:maven/org.jetbrains.kotlin/kotlin-stdlib@2.3.21?type=jar",
        "pkg:maven/com.squareup.okio/okio@3.16.4?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.jetbrains.kotlin/kotlin-stdlib@2.3.21?type=jar",
      "dependsOn": [
        "pkg:maven/org.jetbrains/annotations@13.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.jetbrains/annotations@13.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.squareup.okio/okio@3.16.4?type=jar",
      "dependsOn": [
        "pkg:maven/com.squareup.okio/okio-jvm@3.16.4?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.squareup.okio/okio-jvm@3.16.4?type=jar",
      "dependsOn": [
        "pkg:maven/org.jetbrains.kotlin/kotlin-stdlib@2.3.21?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.apache.commons/commons-compress@1.28.0?type=jar",
      "dependsOn": [
        "pkg:maven/commons-codec/commons-codec@1.21.0?type=jar",
        "pkg:maven/commons-io/commons-io@2.22.0?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.20.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/commons-codec/commons-codec@1.21.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.squareup.okhttp3/okhttp-jvm@5.3.2?type=jar",
      "dependsOn": [
        "pkg:maven/com.squareup.okio/okio-jvm@3.16.4?type=jar",
        "pkg:maven/org.jetbrains.kotlin/kotlin-stdlib@2.3.21?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/vuln-data-source-api@5.0.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.dependencytrack/plugin-api@5.0.0?type=jar",
        "pkg:maven/org.dependencytrack/cyclonedx-proto@5.0.0?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/vuln-data-source-github@5.0.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.apache.commons/commons-lang3@3.20.0?type=jar",
        "pkg:maven/org.metaeffekt.core/ae-security@0.155.0?type=jar",
        "pkg:maven/org.apache.httpcomponents.client5/httpclient5@5.6.1?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.21?type=jar",
        "pkg:maven/io.github.jeremylong/open-vulnerability-clients@9.0.5?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java-util@4.35.0?type=jar",
        "pkg:maven/io.github.nscuro/versatile-core@0.18.3?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.apache.httpcomponents.client5/httpclient5@5.6.1?type=jar",
      "dependsOn": [
        "pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.4?type=jar",
        "pkg:maven/org.apache.httpcomponents.core5/httpcore5-h2@5.4?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.4?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.apache.httpcomponents.core5/httpcore5-h2@5.4?type=jar",
      "dependsOn": [
        "pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.4?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.github.jeremylong/open-vulnerability-clients@9.0.5?type=jar",
      "dependsOn": [
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
        "pkg:maven/org.apache.httpcomponents.client5/httpclient5@5.6.1?type=jar",
        "pkg:maven/org.apache.httpcomponents.client5/httpclient5-cache@5.6?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.21.3?type=jar",
        "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.21.3?type=jar",
        "pkg:maven/com.samskivert/jmustache@1.16?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.apache.httpcomponents.client5/httpclient5-cache@5.6?type=jar",
      "dependsOn": [
        "pkg:maven/org.apache.httpcomponents.client5/httpclient5@5.6.1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.samskivert/jmustache@1.16?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.dependencytrack/vuln-data-source-nvd@5.0.0?type=jar",
      "dependsOn": [
        "pkg:maven/us.springett/cpe-parser@3.0.1?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.21.3?type=jar",
        "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.21.3?type=jar",
        "pkg:maven/io.github.jeremylong/open-vulnerability-clients@9.0.5?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java-util@4.35.0?type=jar",
        "pkg:maven/io.github.nscuro/versatile-core@0.18.3?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/vuln-data-source-osv@5.0.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.dependencytrack/os-distro-metadata@5.0.0?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.20.0?type=jar",
        "pkg:maven/org.metaeffekt.core/ae-security@0.155.0?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.21.3?type=jar",
        "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.21.3?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java-util@4.35.0?type=jar",
        "pkg:maven/io.github.nscuro/versatile-core@0.18.3?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/alpine-common@5.0.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.dependencytrack/common-config@5.0.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.21?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/alpine-model@5.0.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.dependencytrack/alpine-common@5.0.0?type=jar",
        "pkg:maven/org.datanucleus/datanucleus-api-jdo@6.0.5?type=jar",
        "pkg:maven/org.datanucleus/datanucleus-core@6.0.11?type=jar",
        "pkg:maven/org.datanucleus/javax.jdo@3.2.1?type=jar",
        "pkg:maven/org.glassfish.jersey.ext/jersey-bean-validation@4.0.2?type=jar",
        "pkg:maven/io.swagger.core.v3/swagger-annotations-jakarta@2.2.50?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.datanucleus/datanucleus-api-jdo@6.0.5?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.datanucleus/datanucleus-core@6.0.11?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.datanucleus/javax.jdo@3.2.1?type=jar",
      "dependsOn": [
        "pkg:maven/javax.transaction/javax.transaction-api@1.3?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/javax.transaction/javax.transaction-api@1.3?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.glassfish.jersey.ext/jersey-bean-validation@4.0.2?type=jar",
      "dependsOn": [
        "pkg:maven/jakarta.inject/jakarta.inject-api@2.0.1?type=jar",
        "pkg:maven/org.glassfish.jersey.core/jersey-common@4.0.2?type=jar",
        "pkg:maven/org.glassfish.jersey.core/jersey-server@4.0.2?type=jar",
        "pkg:maven/jakarta.validation/jakarta.validation-api@3.1.1?type=jar",
        "pkg:maven/org.hibernate.validator/hibernate-validator@8.0.2.Final?type=jar",
        "pkg:maven/org.jboss.logging/jboss-logging@3.6.1.Final?type=jar",
        "pkg:maven/jakarta.el/jakarta.el-api@6.0.1?type=jar",
        "pkg:maven/org.glassfish.expressly/expressly@5.0.0?type=jar",
        "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@4.0.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/jakarta.inject/jakarta.inject-api@2.0.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.glassfish.jersey.core/jersey-common@4.0.2?type=jar",
      "dependsOn": [
        "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@4.0.0?type=jar",
        "pkg:maven/jakarta.annotation/jakarta.annotation-api@3.0.0?type=jar",
        "pkg:maven/jakarta.inject/jakarta.inject-api@2.0.1?type=jar",
        "pkg:maven/org.glassfish.hk2/osgi-resource-locator@3.0.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@4.0.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.glassfish.hk2/osgi-resource-locator@3.0.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.glassfish.jersey.core/jersey-server@4.0.2?type=jar",
      "dependsOn": [
        "pkg:maven/org.glassfish.jersey.core/jersey-common@4.0.2?type=jar",
        "pkg:maven/org.glassfish.jersey.core/jersey-client@4.0.2?type=jar",
        "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@4.0.0?type=jar",
        "pkg:maven/jakarta.annotation/jakarta.annotation-api@3.0.0?type=jar",
        "pkg:maven/jakarta.inject/jakarta.inject-api@2.0.1?type=jar",
        "pkg:maven/jakarta.validation/jakarta.validation-api@3.1.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.glassfish.jersey.core/jersey-client@4.0.2?type=jar",
      "dependsOn": [
        "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@4.0.0?type=jar",
        "pkg:maven/org.glassfish.jersey.core/jersey-common@4.0.2?type=jar",
        "pkg:maven/jakarta.inject/jakarta.inject-api@2.0.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/jakarta.validation/jakarta.validation-api@3.1.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.hibernate.validator/hibernate-validator@8.0.2.Final?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml/classmate@1.5.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.fasterxml/classmate@1.5.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/jakarta.el/jakarta.el-api@6.0.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.glassfish.expressly/expressly@5.0.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/io.swagger.core.v3/swagger-annotations-jakarta@2.2.50?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.dependencytrack/alpine-infra@5.0.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.dependencytrack/alpine-common@5.0.0?type=jar",
        "pkg:maven/org.dependencytrack/alpine-model@5.0.0?type=jar",
        "pkg:maven/io.micrometer/micrometer-core@1.16.5?type=jar",
        "pkg:maven/org.datanucleus/javax.jdo@3.2.1?type=jar",
        "pkg:maven/org.datanucleus/datanucleus-api-jdo@6.0.5?type=jar",
        "pkg:maven/org.datanucleus/datanucleus-core@6.0.11?type=jar",
        "pkg:maven/org.datanucleus/datanucleus-rdbms@6.0.11?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.datanucleus/datanucleus-rdbms@6.0.11?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.dependencytrack/alpine-server@5.0.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.dependencytrack/common-datasource@5.0.0?type=jar",
        "pkg:maven/org.dependencytrack/alpine-common@5.0.0?type=jar",
        "pkg:maven/org.dependencytrack/alpine-infra@5.0.0?type=jar",
        "pkg:maven/org.dependencytrack/alpine-model@5.0.0?type=jar",
        "pkg:maven/org.glassfish.jersey.containers/jersey-container-servlet@4.0.2?type=jar",
        "pkg:maven/org.glassfish.jersey.media/jersey-media-json-jackson@4.0.2?type=jar",
        "pkg:maven/org.glassfish.jersey.media/jersey-media-multipart@4.0.2?type=jar",
        "pkg:maven/org.glassfish.jersey.ext/jersey-bean-validation@4.0.2?type=jar",
        "pkg:maven/org.glassfish.jersey.inject/jersey-hk2@4.0.2?type=jar",
        "pkg:maven/jakarta.json/jakarta.json-api@2.1.3?type=jar",
        "pkg:maven/org.eclipse.parsson/jakarta.json@1.1.7?type=jar",
        "pkg:maven/io.swagger.core.v3/swagger-annotations-jakarta@2.2.50?type=jar",
        "pkg:maven/org.datanucleus/javax.jdo@3.2.1?type=jar",
        "pkg:maven/org.datanucleus/datanucleus-api-jdo@6.0.5?type=jar",
        "pkg:maven/org.datanucleus/datanucleus-core@6.0.11?type=jar",
        "pkg:maven/org.datanucleus/datanucleus-rdbms@6.0.11?type=jar",
        "pkg:maven/com.zaxxer/HikariCP@7.0.2?type=jar",
        "pkg:maven/org.mindrot/jbcrypt@0.4?type=jar",
        "pkg:maven/com.nimbusds/oauth2-oidc-sdk@11.37.2?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.21.3?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.21?type=jar",
        "pkg:maven/com.fasterxml.jackson.jakarta.rs/jackson-jakarta-rs-base@2.21.3?type=jar",
        "pkg:maven/com.fasterxml.jackson.jakarta.rs/jackson-jakarta-rs-json-provider@2.21.3?type=jar",
        "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8@2.21.3?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar",
        "pkg:maven/ch.qos.logback/logback-classic@1.5.33?type=jar",
        "pkg:maven/ch.qos.logback/logback-core@1.5.33?type=jar",
        "pkg:maven/org.owasp/security-logging-common@1.1.7?type=jar",
        "pkg:maven/org.owasp/security-logging-logback@1.1.7?type=jar",
        "pkg:maven/net.logstash.logback/logstash-logback-encoder@8.1?type=jar",
        "pkg:maven/org.eclipse.microprofile.health/microprofile-health-api@4.0.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.glassfish.jersey.containers/jersey-container-servlet@4.0.2?type=jar",
      "dependsOn": [
        "pkg:maven/jakarta.inject/jakarta.inject-api@2.0.1?type=jar",
        "pkg:maven/org.glassfish.jersey.core/jersey-common@4.0.2?type=jar",
        "pkg:maven/org.glassfish.jersey.core/jersey-server@4.0.2?type=jar",
        "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@4.0.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.glassfish.jersey.media/jersey-media-json-jackson@4.0.2?type=jar",
      "dependsOn": [
        "pkg:maven/org.glassfish.jersey.core/jersey-common@4.0.2?type=jar",
        "pkg:maven/org.glassfish.jersey.ext/jersey-entity-filtering@4.0.2?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.21?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.21.3?type=jar",
        "pkg:maven/com.fasterxml.jackson.module/jackson-module-jakarta-xmlbind-annotations@2.21.3?type=jar",
        "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@4.0.2?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.glassfish.jersey.ext/jersey-entity-filtering@4.0.2?type=jar",
      "dependsOn": [
        "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@4.0.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.fasterxml.jackson.module/jackson-module-jakarta-xmlbind-annotations@2.21.3?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.21?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.21.3?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.21.3?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@4.0.2?type=jar",
      "dependsOn": [
        "pkg:maven/jakarta.activation/jakarta.activation-api@2.1.3?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.glassfish.jersey.media/jersey-media-multipart@4.0.2?type=jar",
      "dependsOn": [
        "pkg:maven/org.glassfish.jersey.core/jersey-common@4.0.2?type=jar",
        "pkg:maven/org.jvnet.mimepull/mimepull@1.9.15?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.jvnet.mimepull/mimepull@1.9.15?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.glassfish.jersey.inject/jersey-hk2@4.0.2?type=jar",
      "dependsOn": [
        "pkg:maven/org.glassfish.jersey.core/jersey-common@4.0.2?type=jar",
        "pkg:maven/org.glassfish.hk2/hk2-locator@4.0.0-M3?type=jar",
        "pkg:maven/org.javassist/javassist@3.30.2-GA?type=jar",
        "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@4.0.2?type=jar",
        "pkg:maven/jakarta.annotation/jakarta.annotation-api@3.0.0?type=jar",
        "pkg:maven/jakarta.activation/jakarta.activation-api@2.1.3?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.glassfish.hk2/hk2-locator@4.0.0-M3?type=jar",
      "dependsOn": [
        "pkg:maven/org.glassfish.hk2.external/aopalliance-repackaged@4.0.0-M3?type=jar",
        "pkg:maven/org.glassfish.hk2/hk2-api@4.0.0-M3?type=jar",
        "pkg:maven/org.glassfish.hk2/hk2-utils@4.0.0-M3?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.glassfish.hk2.external/aopalliance-repackaged@4.0.0-M3?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.glassfish.hk2/hk2-api@4.0.0-M3?type=jar",
      "dependsOn": [
        "pkg:maven/org.glassfish.hk2/hk2-utils@4.0.0-M3?type=jar",
        "pkg:maven/org.glassfish.hk2.external/aopalliance-repackaged@4.0.0-M3?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.glassfish.hk2/hk2-utils@4.0.0-M3?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.javassist/javassist@3.30.2-GA?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/jakarta.json/jakarta.json-api@2.1.3?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.eclipse.parsson/jakarta.json@1.1.7?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.mindrot/jbcrypt@0.4?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.nimbusds/oauth2-oidc-sdk@11.37.2?type=jar",
      "dependsOn": [
        "pkg:maven/com.github.stephenc.jcip/jcip-annotations@1.0-1?type=jar",
        "pkg:maven/com.nimbusds/content-type@2.3?type=jar",
        "pkg:maven/net.minidev/json-smart@2.6.0?type=jar",
        "pkg:maven/com.nimbusds/lang-tag@1.7?type=jar",
        "pkg:maven/com.nimbusds/nimbus-jose-jwt@10.9?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.github.stephenc.jcip/jcip-annotations@1.0-1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.nimbusds/content-type@2.3?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/net.minidev/json-smart@2.6.0?type=jar",
      "dependsOn": [
        "pkg:maven/net.minidev/accessors-smart@2.6.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/net.minidev/accessors-smart@2.6.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.ow2.asm/asm@9.9.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.nimbusds/lang-tag@1.7?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.nimbusds/nimbus-jose-jwt@10.9?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.fasterxml.jackson.jakarta.rs/jackson-jakarta-rs-base@2.21.3?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.21.3?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.21.3?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.fasterxml.jackson.jakarta.rs/jackson-jakarta-rs-json-provider@2.21.3?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml.jackson.jakarta.rs/jackson-jakarta-rs-base@2.21.3?type=jar",
        "pkg:maven/com.fasterxml.jackson.module/jackson-module-jakarta-xmlbind-annotations@2.21.3?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8@2.21.3?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.21.3?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.21.3?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/ch.qos.logback/logback-classic@1.5.33?type=jar",
      "dependsOn": [
        "pkg:maven/ch.qos.logback/logback-core@1.5.33?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/ch.qos.logback/logback-core@1.5.33?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.owasp/security-logging-common@1.1.7?type=jar",
      "dependsOn": [
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.owasp/security-logging-logback@1.1.7?type=jar",
      "dependsOn": [
        "pkg:maven/org.owasp/security-logging-common@1.1.7?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar",
        "pkg:maven/ch.qos.logback/logback-classic@1.5.33?type=jar",
        "pkg:maven/ch.qos.logback/logback-core@1.5.33?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.21.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/net.logstash.logback/logstash-logback-encoder@8.1?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.21.3?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/dev.cel/cel@0.13.0?type=jar",
      "dependsOn": [
        "pkg:maven/com.google.auto.value/auto-value-annotations@1.11.0?type=jar",
        "pkg:maven/com.google.guava/guava@33.5.0-jre?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java@4.35.0?type=jar",
        "pkg:maven/com.google.re2j/re2j@1.8?type=jar",
        "pkg:maven/dev.cel/common@0.13.0?type=jar",
        "pkg:maven/dev.cel/compiler@0.13.0?type=jar",
        "pkg:maven/dev.cel/protobuf@0.13.0?type=jar",
        "pkg:maven/dev.cel/runtime@0.13.0?type=jar",
        "pkg:maven/dev.cel/v1alpha1@0.13.0?type=jar",
        "pkg:maven/org.antlr/antlr4-runtime@4.13.2?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
        "pkg:maven/org.threeten/threeten-extra@1.8.0?type=jar",
        "pkg:maven/org.yaml/snakeyaml@2.5?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.google.auto.value/auto-value-annotations@1.11.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.google.re2j/re2j@1.8?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/dev.cel/common@0.13.0?type=jar",
      "dependsOn": [
        "pkg:maven/com.google.auto.value/auto-value-annotations@1.11.0?type=jar",
        "pkg:maven/com.google.guava/guava@33.5.0-jre?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java@4.35.0?type=jar",
        "pkg:maven/com.google.re2j/re2j@1.8?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/dev.cel/compiler@0.13.0?type=jar",
      "dependsOn": [
        "pkg:maven/com.google.auto.value/auto-value-annotations@1.11.0?type=jar",
        "pkg:maven/com.google.guava/guava@33.5.0-jre?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java@4.35.0?type=jar",
        "pkg:maven/com.google.re2j/re2j@1.8?type=jar",
        "pkg:maven/dev.cel/common@0.13.0?type=jar",
        "pkg:maven/dev.cel/protobuf@0.13.0?type=jar",
        "pkg:maven/org.antlr/antlr4-runtime@4.13.2?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/dev.cel/protobuf@0.13.0?type=jar",
      "dependsOn": [
        "pkg:maven/com.google.auto.value/auto-value-annotations@1.11.0?type=jar",
        "pkg:maven/com.google.guava/guava@33.5.0-jre?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java@4.35.0?type=jar",
        "pkg:maven/dev.cel/common@0.13.0?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.antlr/antlr4-runtime@4.13.2?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/dev.cel/runtime@0.13.0?type=jar",
      "dependsOn": [
        "pkg:maven/com.google.auto.value/auto-value-annotations@1.11.0?type=jar",
        "pkg:maven/com.google.guava/guava@33.5.0-jre?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java@4.35.0?type=jar",
        "pkg:maven/com.google.re2j/re2j@1.8?type=jar",
        "pkg:maven/dev.cel/common@0.13.0?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
        "pkg:maven/org.threeten/threeten-extra@1.8.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.threeten/threeten-extra@1.8.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/dev.cel/v1alpha1@0.13.0?type=jar",
      "dependsOn": [
        "pkg:maven/com.google.auto.value/auto-value-annotations@1.11.0?type=jar",
        "pkg:maven/com.google.guava/guava@33.5.0-jre?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java@4.35.0?type=jar",
        "pkg:maven/dev.cel/common@0.13.0?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/dev.cel/extensions@0.4.1?type=jar",
      "dependsOn": [
        "pkg:maven/com.google.guava/guava@33.5.0-jre?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java@4.35.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.github.kagkarlsson/db-scheduler@16.11.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.jdbi/jdbi3-sqlobject@3.53.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.jdbi/jdbi3-core@3.53.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.glassfish.jersey.ext/jersey-micrometer@4.0.2?type=jar",
      "dependsOn": [
        "pkg:maven/io.micrometer/micrometer-core@1.16.5?type=jar",
        "pkg:maven/org.glassfish.jersey.core/jersey-common@4.0.2?type=jar",
        "pkg:maven/org.glassfish.jersey.core/jersey-server@4.0.2?type=jar",
        "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@4.0.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/us.springett/owasp-risk-rating-calculator@1.0.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.cyclonedx/cyclonedx-core-java@12.1.0?type=jar",
      "dependsOn": [
        "pkg:maven/commons-codec/commons-codec@1.21.0?type=jar",
        "pkg:maven/commons-io/commons-io@2.22.0?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.20.0?type=jar",
        "pkg:maven/org.apache.commons/commons-collections4@4.5.0?type=jar",
        "pkg:maven/com.github.package-url/packageurl-java@1.5.0?type=jar",
        "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.21.3?type=jar",
        "pkg:maven/com.networknt/json-schema-validator@1.5.9?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.apache.commons/commons-collections4@4.5.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.21.3?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.21.3?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.21?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.21.3?type=jar",
        "pkg:maven/org.codehaus.woodstox/stax2-api@4.3.0?type=jar",
        "pkg:maven/com.fasterxml.woodstox/woodstox-core@7.2.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.codehaus.woodstox/stax2-api@4.3.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.fasterxml.woodstox/woodstox-core@7.2.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.codehaus.woodstox/stax2-api@4.3.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/jakarta.servlet/jakarta.servlet-api@6.1.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.eclipse.jetty/jetty-server@12.1.9?type=jar",
      "dependsOn": [
        "pkg:maven/org.eclipse.jetty/jetty-http@12.1.9?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-io@12.1.9?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.eclipse.jetty/jetty-http@12.1.9?type=jar",
      "dependsOn": [
        "pkg:maven/org.eclipse.jetty/jetty-io@12.1.9?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-util@12.1.9?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.eclipse.jetty/jetty-io@12.1.9?type=jar",
      "dependsOn": [
        "pkg:maven/org.eclipse.jetty/jetty-util@12.1.9?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.eclipse.jetty/jetty-util@12.1.9?type=jar",
      "dependsOn": [
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.eclipse.jetty.compression/jetty-compression-gzip@12.1.9?type=jar",
      "dependsOn": [
        "pkg:maven/org.eclipse.jetty.compression/jetty-compression-common@12.1.9?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.eclipse.jetty.compression/jetty-compression-common@12.1.9?type=jar",
      "dependsOn": [
        "pkg:maven/org.eclipse.jetty/jetty-http@12.1.9?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-io@12.1.9?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-util@12.1.9?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.eclipse.jetty.compression/jetty-compression-server@12.1.9?type=jar",
      "dependsOn": [
        "pkg:maven/org.eclipse.jetty/jetty-server@12.1.9?type=jar",
        "pkg:maven/org.eclipse.jetty.compression/jetty-compression-common@12.1.9?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.eclipse.jetty.ee11/jetty-ee11-servlet@12.1.9?type=jar",
      "dependsOn": [
        "pkg:maven/jakarta.servlet/jakarta.servlet-api@6.1.0?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-security@12.1.9?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-server@12.1.9?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-session@12.1.9?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.eclipse.jetty/jetty-security@12.1.9?type=jar",
      "dependsOn": [
        "pkg:maven/org.eclipse.jetty/jetty-server@12.1.9?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.eclipse.jetty/jetty-session@12.1.9?type=jar",
      "dependsOn": [
        "pkg:maven/org.eclipse.jetty/jetty-server@12.1.9?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.slf4j/jul-to-slf4j@2.0.18?type=jar",
      "dependsOn": [
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.asahaf.javacron/javacron@1.4.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/io.micrometer/micrometer-java11@1.16.5?type=jar",
      "dependsOn": [
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
        "pkg:maven/io.micrometer/micrometer-core@1.16.5?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.micrometer/micrometer-registry-prometheus@1.16.5?type=jar",
      "dependsOn": [
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
        "pkg:maven/io.micrometer/micrometer-core@1.16.5?type=jar",
        "pkg:maven/io.prometheus/prometheus-metrics-core@1.6.1?type=jar",
        "pkg:maven/io.prometheus/prometheus-metrics-tracer-common@1.6.1?type=jar",
        "pkg:maven/io.prometheus/prometheus-metrics-exposition-formats@1.6.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.prometheus/prometheus-metrics-core@1.6.1?type=jar",
      "dependsOn": [
        "pkg:maven/io.prometheus/prometheus-metrics-model@1.6.1?type=jar",
        "pkg:maven/io.prometheus/prometheus-metrics-config@1.6.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.prometheus/prometheus-metrics-model@1.6.1?type=jar",
      "dependsOn": [
        "pkg:maven/io.prometheus/prometheus-metrics-config@1.6.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.prometheus/prometheus-metrics-config@1.6.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/io.prometheus/prometheus-metrics-tracer-common@1.6.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/io.prometheus/prometheus-metrics-exposition-formats@1.6.1?type=jar",
      "dependsOn": [
        "pkg:maven/io.prometheus/prometheus-metrics-exposition-textformats@1.6.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.prometheus/prometheus-metrics-exposition-textformats@1.6.1?type=jar",
      "dependsOn": [
        "pkg:maven/io.prometheus/prometheus-metrics-model@1.6.1?type=jar",
        "pkg:maven/io.prometheus/prometheus-metrics-config@1.6.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.github.mweirauch/micrometer-jvm-extras@0.3.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.google.cloud.sql/postgres-socket-factory@1.28.3?type=jar",
      "dependsOn": [
        "pkg:maven/com.google.cloud.sql/jdbc-socket-factory-core@1.28.3?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.google.cloud.sql/jdbc-socket-factory-core@1.28.3?type=jar",
      "dependsOn": [
        "pkg:maven/com.github.jnr/jnr-enxio@0.32.20?type=jar",
        "pkg:maven/com.github.jnr/jnr-unixsocket@0.38.25?type=jar",
        "pkg:maven/com.google.http-client/google-http-client@2.1.0?type=jar",
        "pkg:maven/com.google.guava/guava@33.5.0-jre?type=jar",
        "pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0?type=jar",
        "pkg:maven/com.google.http-client/google-http-client-gson@2.1.0?type=jar",
        "pkg:maven/com.google.api-client/google-api-client@2.9.0?type=jar",
        "pkg:maven/com.google.apis/google-api-services-sqladmin@v1beta4-rev20260317-2.0.0?type=jar",
        "pkg:maven/com.google.auth/google-auth-library-credentials@1.46.0?type=jar",
        "pkg:maven/com.google.auth/google-auth-library-oauth2-http@1.46.0?type=jar",
        "pkg:maven/com.google.oauth-client/google-oauth-client@1.39.0?type=jar",
        "pkg:maven/dnsjava/dnsjava@3.6.4?type=jar",
        "pkg:maven/com.google.api/gax@2.79.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java@4.35.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.github.jnr/jnr-enxio@0.32.20?type=jar",
      "dependsOn": [
        "pkg:maven/com.github.jnr/jnr-constants@0.10.4?type=jar",
        "pkg:maven/com.github.jnr/jnr-ffi@2.2.19?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.github.jnr/jnr-constants@0.10.4?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.github.jnr/jnr-ffi@2.2.19?type=jar",
      "dependsOn": [
        "pkg:maven/com.github.jnr/jffi@1.3.15?type=jar",
        "pkg:maven/com.github.jnr/jffi@1.3.15?classifier=native\u0026type=jar",
        "pkg:maven/org.ow2.asm/asm@9.9.1?type=jar",
        "pkg:maven/org.ow2.asm/asm-commons@9.7.1?type=jar",
        "pkg:maven/org.ow2.asm/asm-analysis@9.7.1?type=jar",
        "pkg:maven/org.ow2.asm/asm-tree@9.7.1?type=jar",
        "pkg:maven/org.ow2.asm/asm-util@9.7.1?type=jar",
        "pkg:maven/com.github.jnr/jnr-a64asm@1.0.0?type=jar",
        "pkg:maven/com.github.jnr/jnr-x86asm@1.0.2?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.github.jnr/jffi@1.3.15?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.github.jnr/jffi@1.3.15?classifier=native\u0026type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.ow2.asm/asm-commons@9.7.1?type=jar",
      "dependsOn": [
        "pkg:maven/org.ow2.asm/asm@9.9.1?type=jar",
        "pkg:maven/org.ow2.asm/asm-tree@9.7.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.ow2.asm/asm-tree@9.7.1?type=jar",
      "dependsOn": [
        "pkg:maven/org.ow2.asm/asm@9.9.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.ow2.asm/asm-analysis@9.7.1?type=jar",
      "dependsOn": [
        "pkg:maven/org.ow2.asm/asm-tree@9.7.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.ow2.asm/asm-util@9.7.1?type=jar",
      "dependsOn": [
        "pkg:maven/org.ow2.asm/asm@9.9.1?type=jar",
        "pkg:maven/org.ow2.asm/asm-tree@9.7.1?type=jar",
        "pkg:maven/org.ow2.asm/asm-analysis@9.7.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.github.jnr/jnr-a64asm@1.0.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.github.jnr/jnr-x86asm@1.0.2?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.github.jnr/jnr-unixsocket@0.38.25?type=jar",
      "dependsOn": [
        "pkg:maven/com.github.jnr/jnr-ffi@2.2.19?type=jar",
        "pkg:maven/com.github.jnr/jnr-constants@0.10.4?type=jar",
        "pkg:maven/com.github.jnr/jnr-enxio@0.32.20?type=jar",
        "pkg:maven/com.github.jnr/jnr-posix@3.1.22?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.github.jnr/jnr-posix@3.1.22?type=jar",
      "dependsOn": [
        "pkg:maven/com.github.jnr/jnr-ffi@2.2.19?type=jar",
        "pkg:maven/com.github.jnr/jnr-constants@0.10.4?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.google.http-client/google-http-client@2.1.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.apache.httpcomponents/httpclient@4.5.14?type=jar",
        "pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
        "pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0?type=jar",
        "pkg:maven/com.google.guava/guava@33.5.0-jre?type=jar",
        "pkg:maven/com.google.j2objc/j2objc-annotations@3.1?type=jar",
        "pkg:maven/io.grpc/grpc-context@1.70.0?type=jar",
        "pkg:maven/io.opencensus/opencensus-api@0.31.1?type=jar",
        "pkg:maven/io.opencensus/opencensus-contrib-http-util@0.31.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.apache.httpcomponents/httpclient@4.5.14?type=jar",
      "dependsOn": [
        "pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar",
        "pkg:maven/commons-logging/commons-logging@1.2?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.21.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/commons-logging/commons-logging@1.2?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/io.grpc/grpc-context@1.70.0?type=jar",
      "dependsOn": [
        "pkg:maven/io.grpc/grpc-api@1.70.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.grpc/grpc-api@1.70.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/io.opencensus/opencensus-api@0.31.1?type=jar",
      "dependsOn": [
        "pkg:maven/io.grpc/grpc-context@1.70.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.opencensus/opencensus-contrib-http-util@0.31.1?type=jar",
      "dependsOn": [
        "pkg:maven/io.opencensus/opencensus-api@0.31.1?type=jar",
        "pkg:maven/com.google.guava/guava@33.5.0-jre?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.google.http-client/google-http-client-gson@2.1.0?type=jar",
      "dependsOn": [
        "pkg:maven/com.google.http-client/google-http-client@2.1.0?type=jar",
        "pkg:maven/com.google.code.gson/gson@2.8.9?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.google.api-client/google-api-client@2.9.0?type=jar",
      "dependsOn": [
        "pkg:maven/commons-codec/commons-codec@1.21.0?type=jar",
        "pkg:maven/com.google.auth/google-auth-library-credentials@1.46.0?type=jar",
        "pkg:maven/com.google.auth/google-auth-library-oauth2-http@1.46.0?type=jar",
        "pkg:maven/com.google.http-client/google-http-client-gson@2.1.0?type=jar",
        "pkg:maven/com.google.guava/guava@33.5.0-jre?type=jar",
        "pkg:maven/com.google.http-client/google-http-client-apache-v2@2.0.0?type=jar",
        "pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar",
        "pkg:maven/org.apache.httpcomponents/httpclient@4.5.14?type=jar",
        "pkg:maven/com.google.http-client/google-http-client@2.1.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.google.auth/google-auth-library-credentials@1.46.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.google.auth/google-auth-library-oauth2-http@1.46.0?type=jar",
      "dependsOn": [
        "pkg:maven/com.google.guava/guava@33.5.0-jre?type=jar",
        "pkg:maven/com.google.auto.value/auto-value-annotations@1.11.0?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
        "pkg:maven/com.google.auth/google-auth-library-credentials@1.46.0?type=jar",
        "pkg:maven/com.google.http-client/google-http-client@2.1.0?type=jar",
        "pkg:maven/com.google.http-client/google-http-client-gson@2.1.0?type=jar",
        "pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0?type=jar",
        "pkg:maven/com.google.api/api-common@2.53.0?type=jar",
        "pkg:maven/com.google.code.gson/gson@2.8.9?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.google.api/api-common@2.53.0?type=jar",
      "dependsOn": [
        "pkg:maven/com.google.guava/guava@33.5.0-jre?type=jar",
        "pkg:maven/com.google.auto.value/auto-value-annotations@1.11.0?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
        "pkg:maven/javax.annotation/javax.annotation-api@1.3.2?type=jar",
        "pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0?type=jar",
        "pkg:maven/com.google.j2objc/j2objc-annotations@3.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/javax.annotation/javax.annotation-api@1.3.2?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.google.http-client/google-http-client-apache-v2@2.0.0?type=jar",
      "dependsOn": [
        "pkg:maven/com.google.http-client/google-http-client@2.1.0?type=jar",
        "pkg:maven/org.apache.httpcomponents/httpclient@4.5.14?type=jar",
        "pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.google.apis/google-api-services-sqladmin@v1beta4-rev20260317-2.0.0?type=jar",
      "dependsOn": [
        "pkg:maven/com.google.api-client/google-api-client@2.9.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.google.oauth-client/google-oauth-client@1.39.0?type=jar",
      "dependsOn": [
        "pkg:maven/com.google.http-client/google-http-client@2.1.0?type=jar",
        "pkg:maven/com.google.http-client/google-http-client-gson@2.1.0?type=jar",
        "pkg:maven/com.google.guava/guava@33.5.0-jre?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/dnsjava/dnsjava@3.6.4?type=jar",
      "dependsOn": [
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.google.api/gax@2.79.0?type=jar",
      "dependsOn": [
        "pkg:maven/com.google.protobuf/protobuf-java-util@4.35.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.slf4j/log4j-over-slf4j@2.0.18?type=jar",
      "dependsOn": [
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    }
  ]
}