{
  "bomFormat": "CycloneDX",
  "specVersion": "1.4",
  "serialNumber": "urn:uuid:e4bb8d38-576c-47df-bcaa-a3c42d564b67",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "vendor": "OWASP Foundation",
        "name": "CycloneDX Maven plugin",
        "version": "2.9.3",
        "hashes": [
          {
            "alg": "MD5",
            "content": "e7c87ab327b65b23c681fc9dc8bb620b"
          },
          {
            "alg": "SHA-1",
            "content": "fa3f0f04f4d5077b5e085d4d09aa2e68aeba5260"
          },
          {
            "alg": "SHA-256",
            "content": "c452d5eebe28bc86bef2e7c72d129f04f60877bef843eac8120f01fb655be293"
          },
          {
            "alg": "SHA-512",
            "content": "ec0344ed2ffe62d565aaf936a37140d04c7fffa8669a666be0366cd44eec3195232d79841cdec47030b79068216ac7e1a8c805255758e3d418dae32a4b9b9beb"
          },
          {
            "alg": "SHA-384",
            "content": "3df26b2a00d87fe090851975ebcc30217f98634e7c47d07128e148f325ebfe3bc0790b2f52ad4591734b7b0de738f003"
          },
          {
            "alg": "SHA3-384",
            "content": "470c1b4962379b5b6494c75bd1475da3519bbe2543999c95f26b4021164d3d05419b0c3f704443162fe5433a204250e9"
          },
          {
            "alg": "SHA3-256",
            "content": "900e9c4edb18940ed3c4a4ba6946957fa613ef0d4b0c380551638f229206373c"
          },
          {
            "alg": "SHA3-512",
            "content": "5e36433e18ae24f7460902da27818874df5d1d73df1a97e49e7369335f7cc61ca595466a2d37789fba7eaa7f7f251b29216c3d7a78910b2ec38e2ed68ea84876"
          }
        ]
      }
    ],
    "component": {
      "type": "application",
      "bom-ref": "pkg:maven/org.dependencytrack/apiserver@5.2.1?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "apiserver",
      "version": "5.2.1",
      "description": "The Dependency-Track API Server",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/apiserver@5.2.1?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/apiserver/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/apiserver",
          "type": "vcs"
        }
      ]
    }
  },
  "components": [
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/api@5.2.1?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "api",
      "version": "5.2.1",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "b36261f8544a37473ba0e3f01658e125"
        },
        {
          "alg": "SHA-1",
          "content": "90e289d0d431395b157e0a44b029565a39435c7c"
        },
        {
          "alg": "SHA-256",
          "content": "3821aec4104ba536d574f31ee9a146cbeeba21f191b7bf42c991dee941593b32"
        },
        {
          "alg": "SHA-512",
          "content": "fbce45918730e8522f69033d49987da9a90b57087af82ca4bdfd499d667faed410284dfaf8f230ef81e3984039a13ac845c7f2c06bc7bb07e7298283faf19471"
        },
        {
          "alg": "SHA-384",
          "content": "383aca43012e10eeadd83ed8029cb8cd56d9c2a8ab54c0126871d97d9ac5271203399fe00119ccb3218d2227c769cef6"
        },
        {
          "alg": "SHA3-384",
          "content": "107088181931d1300bb52ea8daacb2ac3b5e61c2c442da92c71008d8a13269644a1a7f1cc87c0e6b0e65c5e6e4ca0ab6"
        },
        {
          "alg": "SHA3-256",
          "content": "817e08697df958bedc64ebe744298414d7cec1e4e0f78bf0d19b537fdeb1037f"
        },
        {
          "alg": "SHA3-512",
          "content": "152efd64d4e89b07f27ee20d1a62364d2d9ee2f114561c64fad3767c6159bb2f20a7a7ee644cb31662a28a2370378701ba911c053399e21a0ca72ed5b18a49ca"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/api@5.2.1?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/api/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/cache-api@5.2.1?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "cache-api",
      "version": "5.2.1",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "fcb53aed8661e90a86ca20f768c2d44f"
        },
        {
          "alg": "SHA-1",
          "content": "41da23903d1cb41e12655284df47a65d52ac74da"
        },
        {
          "alg": "SHA-256",
          "content": "549d0e46821302f5d13f2efce4f3e0db9dc43d61be0b3acb2de6c154f710b4b5"
        },
        {
          "alg": "SHA-512",
          "content": "d27dc9a68774f97c9d94a95b28e47c11834929d725f6b921b45abec2fae0396b2a687692f4db397cfad0bc440e942c7168a88ae25aa1d1c993b80a7c301285b5"
        },
        {
          "alg": "SHA-384",
          "content": "4ac75620be9d407d56c2c194653f4b99d31b3c8b8dbd9b552743fef7c6c520d2a284f25954296957ab850b0e90835540"
        },
        {
          "alg": "SHA3-384",
          "content": "c2ce230c6a95fa26d4795d5261860b2bd391bfdb99ff0a19f164b6a13792c86953ed0523a071d6ead6fb93a8b83c5bd9"
        },
        {
          "alg": "SHA3-256",
          "content": "3ac3a85da33d49375e395edc515fd7a93195530bd4c3db61505db297ddc882a0"
        },
        {
          "alg": "SHA3-512",
          "content": "42b089a0e6b0b884c4cc57ffc403077f438c0e5edccd77cac59f4052db48caf4b6dbeff7790501bc1b8044a23ac4b910f166d18c9bd9a34b1bdd6db1e17bcd4f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/cache-api@5.2.1?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/cache-parent/cache-api/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.jspecify/jspecify@1.0.1?type=jar",
      "group": "org.jspecify",
      "name": "jspecify",
      "version": "1.0.1",
      "description": "An artifact of well-named and well-specified annotations to power static analysis checks",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "d4fe1ea4d953b66fcb1d6043c22bffcf"
        },
        {
          "alg": "SHA-1",
          "content": "3d60fd98eb8ade73004f4195c37b6317e02cf3d7"
        },
        {
          "alg": "SHA-256",
          "content": "070d75f261fe4c5b8202508366715f7f2d4660f88c8ef7e6d3575e48c9683b66"
        },
        {
          "alg": "SHA-512",
          "content": "8f5ca6f5c25ee353bfbe3e5e5cd9847b3b3ed1e954a14a52c9aa016c673e02bfbc2e0f9308ad576c2a58720f8bf2139ad9883c7a881050fe96a2f87e2e623711"
        },
        {
          "alg": "SHA-384",
          "content": "f7c6aea402675ed6d9286e6107d4bf6c2d1f757f9fce4c74807cbd43d426569324cf4c7faed28dc777e90ddb3a63db68"
        },
        {
          "alg": "SHA3-384",
          "content": "d462ead4749cc7b404b1699aedf472664e9bb38db769f2ec78a6457d2d080602f673af8b3114724dd92ee2262f464c41"
        },
        {
          "alg": "SHA3-256",
          "content": "f9392a7b674c37a7617d7e5ab4a6197c235c0a036244eaf550291d6756c0f1c9"
        },
        {
          "alg": "SHA3-512",
          "content": "3154b4940937103d74b77eede7abc7034168dc986284ef00ab4e4d5b537ed6370c6856787ae50711e62906b3011243c9a656b659ddd025c1e6b828c44b980855"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.jspecify/jspecify@1.0.1?type=jar",
      "externalReferences": [
        {
          "url": "https://jspecify.dev/",
          "type": "website"
        },
        {
          "url": "https://github.com/jspecify/jspecify/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.eclipse.microprofile.config/microprofile-config-api@3.1.2?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.eclipse.microprofile.config",
      "name": "microprofile-config-api",
      "version": "3.1.2",
      "description": "MicroProfile Config :: API",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "a1d32fd3cc58739d489bc07c2e40e34f"
        },
        {
          "alg": "SHA-1",
          "content": "cc35545320c631a745c381cc0e952775d8e99fbd"
        },
        {
          "alg": "SHA-256",
          "content": "d37062050df6de7d0aba8a982192177fe613dc374b9fe7e7dbc09a2674de58a3"
        },
        {
          "alg": "SHA-512",
          "content": "e6ade5b50aefcd344203977668d0e229f253ea3b4b538226fd7f79fcc7b211e083c9f5ed833280e4154a63279e89794fd6090ec1d4910deea50a058a255e7ebf"
        },
        {
          "alg": "SHA-384",
          "content": "230aafc4c8e5a94960eaf553466d10e6ebd0df755b04b37c6352c6f134ad75b1a45de77a065de1b639b8edc191cade72"
        },
        {
          "alg": "SHA3-384",
          "content": "7918d187ffccac5d986209f4a639e0a88a720e4affb33864c8f968172803dd5430d64aafd0ee1c8745adc114d562c804"
        },
        {
          "alg": "SHA3-256",
          "content": "9e69216d089aff95c222cb253b07f8c4d654eb3fff17725a8e03f59d1c28d0e1"
        },
        {
          "alg": "SHA3-512",
          "content": "0a3e7833f0089dfb41ab3915b7642f0500d7ea886011173d29649c497814323d5c06716b7a7d32435ce76971c25cd9cf6720b4c2caa5d97403e5f5333ac141dc"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.eclipse.microprofile.config/microprofile-config-api@3.1.2?type=jar",
      "externalReferences": [
        {
          "url": "https://microprofile.io/project/eclipse/microprofile-config/microprofile-config-api",
          "type": "website"
        },
        {
          "url": "https://repo.eclipse.org/content/repositories/microprofile-maven2-releases/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse/microprofile-config/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/eclipse/microprofile-config/microprofile-config-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/cache-provider-database@5.2.1?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "cache-provider-database",
      "version": "5.2.1",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "48ee8d9d96f70399e2df9c5ed0377fa3"
        },
        {
          "alg": "SHA-1",
          "content": "28a85512ccde668223fa3bd125e78952a35219ca"
        },
        {
          "alg": "SHA-256",
          "content": "90a069117218c8d71f79d0199693d929bcf1800d84a8b6feecbcdc36080c77f8"
        },
        {
          "alg": "SHA-512",
          "content": "2a73d645ad8f78309f37dc92597623cf54288e44fc674efdcf893016e1a4ad2c0ac9da9b41b32c70a28ffb7ba6c0752d149ace4959ea5b88e740bd90523525a2"
        },
        {
          "alg": "SHA-384",
          "content": "8316f96c4246a39e8066c1e66cfa77999dcd5f125321594833c5ffa8f39a54941125c06924706bd89dc0fdef9ec90b78"
        },
        {
          "alg": "SHA3-384",
          "content": "b035bf4626ab980b557f788c500625d8d1b927c8d91da024032fe8fea6b0c80df3e4f62c29bb437096eab76f9bc1bafb"
        },
        {
          "alg": "SHA3-256",
          "content": "ae8b30f95f9f3d8250881c76ac9dfdf530aa050a8860de7f91640fa54cedf894"
        },
        {
          "alg": "SHA3-512",
          "content": "c86ff4a69300c637fbfa208331dcb7d5426d3cc72d26ef7a5d0f037d48538c8eedc8108d09e64888a9237062816a8ee653b8adbeaf7940802c1d1beaa075a5af"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/cache-provider-database@5.2.1?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/cache-parent/cache-provider-database/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/common-datasource@5.2.1?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "common-datasource",
      "version": "5.2.1",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "73148869a7627bca82d6c8020a549520"
        },
        {
          "alg": "SHA-1",
          "content": "d77a7e640d58b86da0e4354d755502c2414149b6"
        },
        {
          "alg": "SHA-256",
          "content": "aa34712736faa67353995718c90fecf7afa619785f45a7b82fd3ec65835b8936"
        },
        {
          "alg": "SHA-512",
          "content": "2aef979dff78dd3a16ca93072d799afbae94202ad816b6e265cc21ceea2481f0beec2196a35170a3575628db5f4d2c6b0be9f739ae8d9befc17c5111209b0a00"
        },
        {
          "alg": "SHA-384",
          "content": "5823b578c8eb5b5749577b5529ddd62205fb7696ccdb6cf7f32bb36c92b0d925789cffd117ae92598de83ebc07aa66fb"
        },
        {
          "alg": "SHA3-384",
          "content": "7bd20c5590a967e936e618a29b925ba0a7cbf55be8f1c84e48724f7b39410ce1cbe79b068fe9a858f488a169ef8bc03e"
        },
        {
          "alg": "SHA3-256",
          "content": "facd78dc5de6a86e9c5720107b15deadd20df97a0bd78d44ba0164d623395fd7"
        },
        {
          "alg": "SHA3-512",
          "content": "726d04bfad1c4a9050d69c80f79c5fe023c02151097307e998157e73c2ef9ca421873b2a0e7a2f6ba5e7117d7294bc0a2fd603131e5a4a3d4c864ac62fcb2d0a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/common-datasource@5.2.1?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/common-parent/common-datasource/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/common-health@5.2.1?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "common-health",
      "version": "5.2.1",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "43e8a5b30aa4af244f1e3ac788153559"
        },
        {
          "alg": "SHA-1",
          "content": "53815fbfe9e91c1e51f3190792cb8c6f4f113fac"
        },
        {
          "alg": "SHA-256",
          "content": "8bbc1f219effa21ae55e6c94aa492b443ade056d258b48b02fb346f0be673426"
        },
        {
          "alg": "SHA-512",
          "content": "662231f956331b9b837a4e57d353526b870a5fa3f152862c0f7b367628fbf9cd2b275174fec5029dfa6741ac84e53754e527e51325ea4167b27ec2c3fe483107"
        },
        {
          "alg": "SHA-384",
          "content": "08f4bfb780071f35fc135206d63e260f9ad12ab2c57a86062052fa36135255a3f5f5b3ea2ce0e2a9bec39c72526661cf"
        },
        {
          "alg": "SHA3-384",
          "content": "32403f5f64db91293072a3a8184eaa42d7df2aedf1e55ff7c613ec954e23b98a0a72c047980b7af9fc719f3b6688efa3"
        },
        {
          "alg": "SHA3-256",
          "content": "d7f384529d369e6523361c654c6e4ac4edf14d7b8a3310e6b1ef6f2391a83e46"
        },
        {
          "alg": "SHA3-512",
          "content": "1b8d9a907270b596662703ac7836d1d0e5d981412562a089249bc4471e9ecbc00241ff0a69c8915c4755675f1f80d1de14b00305060acba747a89bb09c4b2e34"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/common-health@5.2.1?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/common-parent/common-health/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.smallrye.config/smallrye-config-core@4.0.0?type=jar",
      "group": "io.smallrye.config",
      "name": "smallrye-config-core",
      "version": "4.0.0",
      "description": "SmallRye Parent POM",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "7addb5171668993a79bc9bf4a0bec70b"
        },
        {
          "alg": "SHA-1",
          "content": "c59828ef9c54d44c56ded7ddea6b56b85fb1d165"
        },
        {
          "alg": "SHA-256",
          "content": "4e1a94f3deac842fc80ad4dc5f10d858a9abefaf21bee9ed18a3e3ff2aa89e23"
        },
        {
          "alg": "SHA-512",
          "content": "20af6128e21f5b40114070352f73c39c8b29d6a4ff2af2785dc6779f783ebd5d0196735d868501a4075f9ee6fee087c9f4932efe45ec221cf5b329bc6b21b151"
        },
        {
          "alg": "SHA-384",
          "content": "2a85cd803297f37b9e05fe2b38a345d7304473f1d9fa8f7cf229269b33e732973c8128ac9c8f824e7410056eb8246b24"
        },
        {
          "alg": "SHA3-384",
          "content": "9470cdf5d3394ebbdac2367ca7984d9ea6d155c43f91b37c5962ea5ade062d8e309beb82b6ac36e90a57194aa0a0bf0a"
        },
        {
          "alg": "SHA3-256",
          "content": "b64978cd819b05f88bebe831d16efd35c009a7da11d0946d085552d4dbef2e77"
        },
        {
          "alg": "SHA3-512",
          "content": "6eda75294d268a5dfa8b2bbf2b2b61103e335f90e4d415481b499b63700d6e9cfec459e7837f75c903f2875f1caac27ed002152ec63a7ba937127cc036be0b42"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.smallrye.config/smallrye-config-core@4.0.0?type=jar",
      "externalReferences": [
        {
          "url": "https://smallrye.io",
          "type": "website"
        },
        {
          "url": "https://s01.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/smallrye/smallrye-config/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/smallrye/smallrye-config/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.smallrye.common/smallrye-common-annotation@2.20.0?type=jar",
      "group": "io.smallrye.common",
      "name": "smallrye-common-annotation",
      "version": "2.20.0",
      "description": "Common utilities for SmallRye",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "92a0ef236cb177acc1eb0bef1ac2a8a7"
        },
        {
          "alg": "SHA-1",
          "content": "beb38764f953002f0d9f3041f37dc58ddece66cd"
        },
        {
          "alg": "SHA-256",
          "content": "2a7d36f84c48b45a12843a06394519ae2679e1857fa21b55f76697865d2cad5a"
        },
        {
          "alg": "SHA-512",
          "content": "be100cf492d17daf22e8581671fedb6d9c80d4e18f4438a2981c7081a92111639718f354e76a5089a50d64eef8daea9d09dc990c4aebe1d1147a93721fc1cd52"
        },
        {
          "alg": "SHA-384",
          "content": "56ad639494c5f8913c2e5af35f3927f4d2480de00c87b72f5e7331ffa1cf6b68a15a881e4ccfbc3306359487f5fd1c28"
        },
        {
          "alg": "SHA3-384",
          "content": "897b771c0b11fa88d919dc4a10d8f9d2062968b66f4284dc63ea37fbef5733abaeed9af4d04a6a30824827eadb1cdb02"
        },
        {
          "alg": "SHA3-256",
          "content": "59dbb5d1e1bca8fe653143e8f65135d4a32e3bfc5a886e7d5e316af46720eec5"
        },
        {
          "alg": "SHA3-512",
          "content": "06c509513faf157fd71620bbd2782ee959fdeff3df93d4220b385566d9a960068b08dbef59f2186d04c89e050e138f4c10dc0a5d551cafa21f036064479029f5"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.smallrye.common/smallrye-common-annotation@2.20.0?type=jar",
      "externalReferences": [
        {
          "url": "http://smallrye.io",
          "type": "website"
        },
        {
          "url": "https://s01.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/smallrye/smallrye-common/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/smallrye/smallrye-common/smallrye-common-annotation/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.smallrye.common/smallrye-common-expression@2.20.0?type=jar",
      "group": "io.smallrye.common",
      "name": "smallrye-common-expression",
      "version": "2.20.0",
      "description": "Common utilities for SmallRye",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "8abfc6d0d5b30772f05a0e9612f61656"
        },
        {
          "alg": "SHA-1",
          "content": "829c755a667fdbc6555d158cd4429fc8e2bb58ea"
        },
        {
          "alg": "SHA-256",
          "content": "04d62cdc531bdaa2d0eb2d8901e85c7dd69f2c68c5cb8e641407436334ae423a"
        },
        {
          "alg": "SHA-512",
          "content": "9db0722ed99bc8376bece4254b41b0c2f7e68afd86c8786e773184361f3329dafe2e6a52860f72c8bf97f5fe43e301e9b2abe9189b030e5f09ce29484bcf05c8"
        },
        {
          "alg": "SHA-384",
          "content": "fb677186e911baaad926be2441721e77c266041caa9af0747a2e8e79820fad3034bff5dd7c7377a74dccc2d2b98251ac"
        },
        {
          "alg": "SHA3-384",
          "content": "41d928dd29133cf23f812090f08d7f8700b37bb6b54b1baed4cf3e3a91f6c65fd8a59467d3622fe521efaaf439faca95"
        },
        {
          "alg": "SHA3-256",
          "content": "cc6190c2b4b6b8744faf142ab4afd5651db1fd0e84b8efb1694794a21ba46abb"
        },
        {
          "alg": "SHA3-512",
          "content": "45db06544a6db061d60ce7aa6efe33ee892e17732df87215b8eb956e00d53f974d721794a5837fd44da52052a6950c7fb66a203c4e61552641c714c9221c586d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.smallrye.common/smallrye-common-expression@2.20.0?type=jar",
      "externalReferences": [
        {
          "url": "http://smallrye.io",
          "type": "website"
        },
        {
          "url": "https://s01.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/smallrye/smallrye-common/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/smallrye/smallrye-common/smallrye-common-expression/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.smallrye.common/smallrye-common-function@2.20.0?type=jar",
      "group": "io.smallrye.common",
      "name": "smallrye-common-function",
      "version": "2.20.0",
      "description": "Common utilities for SmallRye",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "7d4f3de7d2c8e81c7ad294dfc41ff074"
        },
        {
          "alg": "SHA-1",
          "content": "a96f334f23fc60908ddb51fa67df26dc440d9205"
        },
        {
          "alg": "SHA-256",
          "content": "55d4eaf7d9c914787e40db5ed7d19ff34fe52fe45e217b428c32103aaa142442"
        },
        {
          "alg": "SHA-512",
          "content": "7810fcd7eda85ec531c177a757ebee0d8dbe3f088ff7d95bcea1bd0a6fde305ad21a7279fc1f717e482c22d8848bc273a8317f28e170b189c20d7cef6f4538ab"
        },
        {
          "alg": "SHA-384",
          "content": "9cdbf4b7e1e3d83ef7238fac64a750810f9da11419d124145bf90739a6e75d658bac0d2713189aa341c6cb10c1bc2ca1"
        },
        {
          "alg": "SHA3-384",
          "content": "491ba31b660deb0b96854584815a5fad7616557e14f3803d848abf7ce8d29ee7cc3a993a5e28b23fe2e93d156190e25f"
        },
        {
          "alg": "SHA3-256",
          "content": "22d2842800450718f19fb34200da32c3ae80c3d2b829b225b30599c8f14453c6"
        },
        {
          "alg": "SHA3-512",
          "content": "3143f899c132a2c0c4ef1e64dc869730e7b09bcbb2f53d6a1906ba79bde0850858817aa77e5e5f278c5fb81749b46bd569b65bcb60753c8eba4704633bcb4780"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.smallrye.common/smallrye-common-function@2.20.0?type=jar",
      "externalReferences": [
        {
          "url": "http://smallrye.io",
          "type": "website"
        },
        {
          "url": "https://s01.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/smallrye/smallrye-common/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/smallrye/smallrye-common/smallrye-common-function/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.smallrye.common/smallrye-common-constraint@2.20.0?type=jar",
      "group": "io.smallrye.common",
      "name": "smallrye-common-constraint",
      "version": "2.20.0",
      "description": "Common utilities for SmallRye",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "85cbd7cf5c4f739eed6ea0575fceea8a"
        },
        {
          "alg": "SHA-1",
          "content": "3f0c52e6cddf003b35e3787226f8533814dd3649"
        },
        {
          "alg": "SHA-256",
          "content": "4469ff38d29e5c93b0af1f0e17d794c0ea91382aabaf796fc0e251f3a0bab3a3"
        },
        {
          "alg": "SHA-512",
          "content": "2c924b1f5aff32605bbc32b76577e2069f898155ce2daaa03cb495d68dfa8af36d63811c3455e8c4c5a107eb1408ed8d31b671591eb4095de265b244673fe569"
        },
        {
          "alg": "SHA-384",
          "content": "cb494565ce316accc8c4e5d7bcd60982bfc9461a6e7787d5a7b5186511e2d4203858e353430868ce169aeeec937fd609"
        },
        {
          "alg": "SHA3-384",
          "content": "cbbeef6f5f7324fced627696100c2458c3e5de88b391bb0397cf57339aa77b5d04eed346c38d10b2b6f1b62b82714aec"
        },
        {
          "alg": "SHA3-256",
          "content": "1b7559a92dc2d8d6a41ab9e6f9fcda7cae84a615227ef70de3db1d33caff556c"
        },
        {
          "alg": "SHA3-512",
          "content": "89eec59bb01da521c027ed72e0486b74b81ca7339711a192ca15f0cec771256e8721abf641020c9e6ae53584a27f7a0c756da0e359aebaf7f2572729feb59a2c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.smallrye.common/smallrye-common-constraint@2.20.0?type=jar",
      "externalReferences": [
        {
          "url": "http://smallrye.io",
          "type": "website"
        },
        {
          "url": "https://s01.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/smallrye/smallrye-common/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/smallrye/smallrye-common/smallrye-common-constraint/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.smallrye.common/smallrye-common-classloader@2.20.0?type=jar",
      "group": "io.smallrye.common",
      "name": "smallrye-common-classloader",
      "version": "2.20.0",
      "description": "Common utilities for SmallRye",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "2965f28b69bad5c32fd1eecba5284e56"
        },
        {
          "alg": "SHA-1",
          "content": "c60e93e4a10a4ebbf0e7c877b7cae8be4b81dc81"
        },
        {
          "alg": "SHA-256",
          "content": "fcf314eb2e4997610c8c03617f4e1811179ab9a58bc0745a9a8d2c5294d844ed"
        },
        {
          "alg": "SHA-512",
          "content": "5c8126c84e75356dbaa6fa826fefc790d4e327b3c37887b4b2663c4fac4e162356209da85a43159ec71ae41ef1bd510a0a313017df57480248d135ece5da1250"
        },
        {
          "alg": "SHA-384",
          "content": "ba3f050c32b5cc723f379b8978f0f76ae96647ea1c84188c136aa320fedb071ba0fc41d08c239c57fc7fdfa420d3d915"
        },
        {
          "alg": "SHA3-384",
          "content": "94e21a3d12891acf656dfbe123ed39ff61c35067d76a19ddda917ffc4ed80b2a599efc8c1a668f98a6c93ef7ed9ba899"
        },
        {
          "alg": "SHA3-256",
          "content": "c8784770575762ff3928238dcb1851746de75938b3baaf87082a328060826bfb"
        },
        {
          "alg": "SHA3-512",
          "content": "970528fc1d14f9f52d112600f96fa68ef3b932559cfa08aa50247d03c73461c06866b0f5857cf597695af804e5d7c36865bffd2193a5d09ad226507932b12c0f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.smallrye.common/smallrye-common-classloader@2.20.0?type=jar",
      "externalReferences": [
        {
          "url": "http://smallrye.io",
          "type": "website"
        },
        {
          "url": "https://s01.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/smallrye/smallrye-common/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/smallrye/smallrye-common/smallrye-common-classloader/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.ow2.asm/asm@9.10.1?type=jar",
      "publisher": "OW2",
      "group": "org.ow2.asm",
      "name": "asm",
      "version": "9.10.1",
      "description": "ASM, a very small and fast Java bytecode manipulation framework",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "9cb72080438acf27f2607002e1444a7b"
        },
        {
          "alg": "SHA-1",
          "content": "ada2141c0cc52ee8f5c48cd5fa4ce0e794f22236"
        },
        {
          "alg": "SHA-256",
          "content": "ed825d10ab1399c8c0cb669e688cf0c8c82629b4c8399b58352b68e92ca10fcb"
        },
        {
          "alg": "SHA-512",
          "content": "8db6efa37d4d569bf2b95d90931b8064f87ed928d20bbf8d8e7fa6182e9a11d32e6a2cc034a3d173a38ee70ce2ea9f20f52f9d8730d9401d2bc6060674c18928"
        },
        {
          "alg": "SHA-384",
          "content": "451863dca686c04151bef6e632df2ee3c8c67ca97d191cdee3d7c4f9350f8a096011cadc1c79b4ba012b3f2179ef2bbe"
        },
        {
          "alg": "SHA3-384",
          "content": "faa7b5fa7a5fefaae6d320ad43c09d588d6deecd41b2a3ebec36a4143a2b90373b2d01936c0733413a01f451c9740bc8"
        },
        {
          "alg": "SHA3-256",
          "content": "e37aa694329cbbfcd0a81a735270166386aceff3797af2c391fd8484baa5a576"
        },
        {
          "alg": "SHA3-512",
          "content": "1d660ebc24411c38b0928b543f402e7cb09747b7c522047f36b57865acfb83d25c9348c1d70af78e3d26e1ad220f10055d63eeb2965f7b6966cb2fbd29b47671"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/org.ow2.asm/asm@9.10.1?type=jar",
      "externalReferences": [
        {
          "url": "http://asm.ow2.io/",
          "type": "website"
        },
        {
          "url": "https://repository.ow2.org/nexus/service/local/staging/deploy/maven2",
          "type": "distribution"
        },
        {
          "url": "https://gitlab.ow2.org/asm/asm/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://mail.ow2.org/wws/arc/asm/",
          "type": "mailing-list"
        },
        {
          "url": "https://gitlab.ow2.org/asm/asm/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.smallrye.config/smallrye-config-common@4.0.0?type=jar",
      "group": "io.smallrye.config",
      "name": "smallrye-config-common",
      "version": "4.0.0",
      "description": "SmallRye Parent POM",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "dec7200db253eba69733f0d8ee503303"
        },
        {
          "alg": "SHA-1",
          "content": "6ad21476cb8e59afaa80e73047c6e924adab03c2"
        },
        {
          "alg": "SHA-256",
          "content": "0eb3b17bd2808e7ba434b55a69fb9047b589213f041fb89573fb47946908d8c3"
        },
        {
          "alg": "SHA-512",
          "content": "4d0a75700d4f09fc8d75fe26e67602e4209d9579ff5e4ec19f7533e71ac59233d39b3ae3883347aa758b046d9644b91c5325304f95713de402248a04142c6dcf"
        },
        {
          "alg": "SHA-384",
          "content": "154fed037bac5940e1617bc155a87069f4eba396b177d1d98ffa89e8b811dde006956ee045d7057341640aa98a4d47df"
        },
        {
          "alg": "SHA3-384",
          "content": "979eab0f30020314f20a24d51c5a313ec0cdeb97050ce6b2909a27d5f6bade3e433952b90c7b57f4a44b961a2ecc6a37"
        },
        {
          "alg": "SHA3-256",
          "content": "cc6f2a79658ba25c86be2343c951511209957d11060eb72b4e509aa9ae062a79"
        },
        {
          "alg": "SHA3-512",
          "content": "5836c5cda39e48c225724d424810aa38001ae99e3313c73a842b9baf8649fd1dea599785cec43e943ed14f31eafe0ddaca08603b0c7c76e4b8c73ed85004740c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.smallrye.config/smallrye-config-common@4.0.0?type=jar",
      "externalReferences": [
        {
          "url": "https://smallrye.io",
          "type": "website"
        },
        {
          "url": "https://s01.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/smallrye/smallrye-config/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/smallrye/smallrye-config/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.micrometer/micrometer-core@1.17.1?type=jar",
      "group": "io.micrometer",
      "name": "micrometer-core",
      "version": "1.17.1",
      "description": "Core module of Micrometer containing instrumentation API and implementation",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "512fe405dfbe1caa8e8870af3fc0d8a3"
        },
        {
          "alg": "SHA-1",
          "content": "2a9a38d3d0859022fdf2a93743c0d5fe44796a39"
        },
        {
          "alg": "SHA-256",
          "content": "9ca47dfa831409b40253c8dc98c17b9d3e050ebbde4d1543c5521dca2b95ad56"
        },
        {
          "alg": "SHA-512",
          "content": "9763d9985aa9d6034d73ea3d57277d8529ff89a4e1efcd804e537d6487d7cb01d1dd2bb26d529aea313bc2a755c9c704d79984fdfb67df44e81cda7be2024a97"
        },
        {
          "alg": "SHA-384",
          "content": "8cf0b7e345c72432e608ea98a2ff84cd34106f19e9974609150daa4c12268965c5045a0412403d17b3b66a8269593b5d"
        },
        {
          "alg": "SHA3-384",
          "content": "e8a5983f0170058519b812e674c598edcd8feeeeac9f1e303d11a749cf3ca4f4bb6a22ec618f1de39f1261e42da4d546"
        },
        {
          "alg": "SHA3-256",
          "content": "4100df03006dcf2d10b0d7c2ebf3346ad8d72ce225d1dc57175b594cd0eef7bc"
        },
        {
          "alg": "SHA3-512",
          "content": "1966d50fc5729ce8eb94cfffbcfecf579452be85d6ec9df9c9f4cd876caa8f13976565348dfdf9520e9866ae8bdee7245e2e47e930c4701e5bd38c35f6a84764"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.micrometer/micrometer-core@1.17.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/micrometer-metrics/micrometer-commercial",
          "type": "website"
        },
        {
          "url": "https://github.com/micrometer-metrics/micrometer-commercial.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.micrometer/micrometer-commons@1.17.1?type=jar",
      "group": "io.micrometer",
      "name": "micrometer-commons",
      "version": "1.17.1",
      "description": "Module containing common code",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "aa9291ad211473834d3d48453ae05ea1"
        },
        {
          "alg": "SHA-1",
          "content": "b1c3fdea68c5a81495cf1c16cf2905c5ad9f30d2"
        },
        {
          "alg": "SHA-256",
          "content": "f2cee6ef046e72eec8128474c7f58c6217173b45ae373c30de0289f2a56ab0fd"
        },
        {
          "alg": "SHA-512",
          "content": "8dc6f1d7cee22c2687bf25aa6819f6c04e0176d04024761cc3bd842a0883c081839fec5c4c5058c8e2a9539c747669acaa8ab8db8ad880c22e780345baf480b4"
        },
        {
          "alg": "SHA-384",
          "content": "4ab0f18818de42fa79722032c0a2c09a50a622749507f2ecf5dc3103fc20dedc9f09355ebce8caadd63b7911c5846d82"
        },
        {
          "alg": "SHA3-384",
          "content": "0d7a5b06d28f05c986d85811349cb88fff74083676f1940041c047114e01f43e22a322718f46a32d9a85da0fe2294cd9"
        },
        {
          "alg": "SHA3-256",
          "content": "c12c8ea74697075e83b0fef160fccca0b33f22d0f22f1f646e447a7b1aba6a65"
        },
        {
          "alg": "SHA3-512",
          "content": "fb5f6b38bbb2b0f5574954bb6ea6325d6189abe630352fc48c1876defbbc6953c5bd78ee3c02c41758feb544335f5bcf64c63691cc1b0158ecbae4a4b3cdd761"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.micrometer/micrometer-commons@1.17.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/micrometer-metrics/micrometer-commercial",
          "type": "website"
        },
        {
          "url": "https://github.com/micrometer-metrics/micrometer-commercial.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.micrometer/micrometer-observation@1.17.1?type=jar",
      "group": "io.micrometer",
      "name": "micrometer-observation",
      "version": "1.17.1",
      "description": "Module containing Observation related code",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "f63baf5840fb4446b9313a3bd8773da1"
        },
        {
          "alg": "SHA-1",
          "content": "24c0b05bc06a9ab6f4e09a48949b6eccc179ca15"
        },
        {
          "alg": "SHA-256",
          "content": "eb34f0cd84a879393ae5c21160fc06385ccdc74f36a4d1e31b199f59acfdaf71"
        },
        {
          "alg": "SHA-512",
          "content": "afe72c301fa7ab119f0922c7d0232ea0723a9b0e56a3e0dfe3d4c963dc5eb482cc9da6ae33b336a28e5d0ef4d260e27b78e9e17c587d29c5fd90a92d26c0041d"
        },
        {
          "alg": "SHA-384",
          "content": "9e20ab3fdd1d58e6d00f85a8e2b5161a477529b4fa2ee1c1b64a50f86dac8fd27cc764418eca169b067c770b9c056aaf"
        },
        {
          "alg": "SHA3-384",
          "content": "e62561d8ac74c733d421a8f1ddac01333ec7cdc0d874abfe2f9f34130c880d76dcc68a6356ef8c3dfd851814c66f3d07"
        },
        {
          "alg": "SHA3-256",
          "content": "eb2e53612afc0be3e384ed97d9b2db64fb2bb25545c68b77f5ecddef59f02e8c"
        },
        {
          "alg": "SHA3-512",
          "content": "af358195266db706c1c1dffdbadf470a0b0785dba5b228e4886326d6a4901064cd207627e7003e9f43e986afd43c9b3a558546449a2bbeacd74795aaa0230b2f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.micrometer/micrometer-observation@1.17.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/micrometer-metrics/micrometer-commercial",
          "type": "website"
        },
        {
          "url": "https://github.com/micrometer-metrics/micrometer-commercial.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.hdrhistogram/HdrHistogram@2.2.2?type=jar",
      "group": "org.hdrhistogram",
      "name": "HdrHistogram",
      "version": "2.2.2",
      "description": "HdrHistogram supports the recording and analyzing sampled data value counts across a configurable integer value range with configurable value precision within the range. Value precision is expressed as the number of significant digits in the value recording, and provides control over value quantization behavior across the value range and the subsequent value resolution at any given level.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "41f807bf0c681d6f692c408a6e217eaf"
        },
        {
          "alg": "SHA-1",
          "content": "7959933ebcc0f05b2eaa5af0a0c8689fa257b15c"
        },
        {
          "alg": "SHA-256",
          "content": "22d1d4316c4ec13a68b559e98c8256d69071593731da96136640f864fa14fad8"
        },
        {
          "alg": "SHA-512",
          "content": "fb28f1bc3a3d4430474ea87a0833d56dc3d1303c98918122d93c630ebdb0d1323bbf8feb9ffdc7dddd1908105858e6959bdfdd3889ca5803cecde93a974ab6b7"
        },
        {
          "alg": "SHA-384",
          "content": "fa19cf4674dee37cb5114689cccafeadbb7989e17768b814cb431806a0f69c7b37093b6e100430bd571a45d87a319758"
        },
        {
          "alg": "SHA3-384",
          "content": "fc0a9e2e5284bc2f911c5e2fdf9eec6cfa1973b6cfb1362822580d6c8768c73ebd1c8056b6e4e5302940f6b5ec4c74b7"
        },
        {
          "alg": "SHA3-256",
          "content": "79af553410abf4d3bbfa64374dfdf8777ce49d28b4c67a615e6d4a78e97d0498"
        },
        {
          "alg": "SHA3-512",
          "content": "5b2b1795ed1ea55b5a3566bb1f4170a4367b7893256809fdb428df9405857c8454196badf3681abaf536260ed6f293c096a3f3c9d72f0f04830e8fe71d49410a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "CC0-1.0"
          }
        },
        {
          "license": {
            "id": "BSD-2-Clause",
            "url": "https://opensource.org/licenses/BSD-2-Clause"
          }
        }
      ],
      "purl": "pkg:maven/org.hdrhistogram/HdrHistogram@2.2.2?type=jar",
      "externalReferences": [
        {
          "url": "http://hdrhistogram.github.io/HdrHistogram/",
          "type": "website"
        },
        {
          "url": "https://github.com/HdrHistogram/HdrHistogram/issues",
          "type": "issue-tracker"
        },
        {
          "url": "scm:git:git://github.com/HdrHistogram/HdrHistogram.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.slf4j/slf4j-api@2.0.20?type=jar",
      "publisher": "QOS.ch",
      "group": "org.slf4j",
      "name": "slf4j-api",
      "version": "2.0.20",
      "description": "The slf4j API",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "a7a6798aa78b29152479f89565f57446"
        },
        {
          "alg": "SHA-1",
          "content": "7fea9d92ba67e9b3c8f03515fb202b86a1fe44f6"
        },
        {
          "alg": "SHA-256",
          "content": "7e1446499b359675d8aabe6af2de86b85e72ae8a2a932c0b40d0e5ba57097439"
        },
        {
          "alg": "SHA-512",
          "content": "6abf6218c2558a0059f35cecc24db3ef1552dbccdfb8f32d6c9d1d8b11fd545405e04e79673219d19e17b99ca6a2a3da7d92006bcaedaa15646bf07737115d17"
        },
        {
          "alg": "SHA-384",
          "content": "26e4fcbbda8d1037d722e04af82efacf58e28ab93b002921eadb426387c61031d80c9574f45f6a42b423b550424b9323"
        },
        {
          "alg": "SHA3-384",
          "content": "2fbe14046e3b0ffc759d8fd91cccd6913174de77085e294a10375fc453427c040b4a0b4c3d003cc1cee8263013513f31"
        },
        {
          "alg": "SHA3-256",
          "content": "3514a97b9dbec95fe329f277628bc4b2c542c5ec33727aa781d590d5dcfad3d9"
        },
        {
          "alg": "SHA3-512",
          "content": "0dcb60d4abbe2b2474585b0512d3c83c993e79872dfb49ae1880468cb875898e1eeb71d05e7537ad057f8ca666007aa85c0f51d4e272432cd30e320c0710908e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/license/mit/"
          }
        }
      ],
      "purl": "pkg:maven/org.slf4j/slf4j-api@2.0.20?type=jar",
      "externalReferences": [
        {
          "url": "http://www.slf4j.org",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/qos-ch/slf4j/slf4j-parent/slf4j-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/common-init@5.2.1?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "common-init",
      "version": "5.2.1",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "c27c79fbfd6a104f1af46dcaca98568f"
        },
        {
          "alg": "SHA-1",
          "content": "f0f586ab79c765bdd449b8af91e58b78ef902305"
        },
        {
          "alg": "SHA-256",
          "content": "bee83e04ecaece35e296ab1bf47b453e6bd83e4622d1184d39e4af1302df005a"
        },
        {
          "alg": "SHA-512",
          "content": "762a780c34dc0bf49d08319fdeea15167dea0520b967e41653a05c5ac6bbf37bae06c114e7c9e8a43135ce51766e87eb9ee779de8b5952656870f26cb874d00a"
        },
        {
          "alg": "SHA-384",
          "content": "1939e4805b0e03edb4eb608bf47ffd2861bab4610287d0c88eb59983c596c02420f2b2292e81074c589757983e5fab21"
        },
        {
          "alg": "SHA3-384",
          "content": "3ea70a8ea9e3afd1075c860f6c666656e728d0686f025886965db1d0ed56a908424615bfeccddb6907700fbf23716ca4"
        },
        {
          "alg": "SHA3-256",
          "content": "5a66e87db880c3c8403fd3da94f2d74f29eb93b6ebc7b9e0e7e6f56760cd9344"
        },
        {
          "alg": "SHA3-512",
          "content": "18ec0bcae4eb50b6330ee29a1a10720e6740396ed2a70d0ecc767af12d9896d2c68a388406095d3d628f7f681f5d285c4373dc0a922b56b5770735056c7f17ca"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/common-init@5.2.1?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/common-parent/common-init/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.eclipse.microprofile.health/microprofile-health-api@4.0.1?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.eclipse.microprofile.health",
      "name": "microprofile-health-api",
      "version": "4.0.1",
      "description": "MicroProfile Health :: API",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "1d023ee3b9b8545318fdeebe98d66d74"
        },
        {
          "alg": "SHA-1",
          "content": "395ea08f4f636696fb23b84a18ba81430cfebe7c"
        },
        {
          "alg": "SHA-256",
          "content": "b89ca4b6c4f7a044250d31c0673f6bc221e40fd669fc5871dbad5e5a0769ca47"
        },
        {
          "alg": "SHA-512",
          "content": "87ea9c7443bf0dbe0a3d38f3f7fd5287e24440f6285fcafdaade6312380fcce802bfe083646669207d11d36b660f05a6ef6e27ab03f3093905821d44024e5764"
        },
        {
          "alg": "SHA-384",
          "content": "4ddaceabea79f53c70fd17c6140453a19d4a9dfc1c3e8910449ce32ddef4b9023dbccbd6dbfbad49b50316389df25c8c"
        },
        {
          "alg": "SHA3-384",
          "content": "893eef36f7b7edf98be7835597d06c81055887f7a59ea70550274032a5b7ebb1822600a185d626db36d38160d0632e6f"
        },
        {
          "alg": "SHA3-256",
          "content": "94ea43765310e56d62888eafd32d4595c1e8d91a4183ad3455f51f1b52a6d2eb"
        },
        {
          "alg": "SHA3-512",
          "content": "79ba68099a777dbd5e596d9697358bc122c53cd52cb5ba5ce3a2be1086abb1f45c2f7289540f1693c1950efe6189ff8f57a91f1d53915be3fa5abbb22597d15a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.eclipse.microprofile.health/microprofile-health-api@4.0.1?type=jar",
      "externalReferences": [
        {
          "url": "https://microprofile.io/project/eclipse/microprofile-health/microprofile-health-api",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse/microprofile-health/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/eclipse/microprofile-health/microprofile-health-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/common-pagination@5.2.1?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "common-pagination",
      "version": "5.2.1",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "fd6d7f9cff9d92c84198db698ef5593f"
        },
        {
          "alg": "SHA-1",
          "content": "8a9e9c0018442033c02870fd575950eb93eb24bc"
        },
        {
          "alg": "SHA-256",
          "content": "51edc70be39d7e374e5c2fb90e68c688130b4a293dd65e4c8f72c7fcb4d616a3"
        },
        {
          "alg": "SHA-512",
          "content": "e7c7a204bafa7ba5601e6e118d36137e65e5841bbb850f024101eb1fd1559aeefd25eae5ffc781fb5acba8ed9f707be79d18f6d349c1ccf76fe7860092f2adf9"
        },
        {
          "alg": "SHA-384",
          "content": "7290793184b5b586613895c1a1c59a540dc7dd349e3773125318f8f4f25c3f49d8c6d34fc180dd59063e407f32157673"
        },
        {
          "alg": "SHA3-384",
          "content": "b1284160ad618f3ca00bcf6fce4dd29df76533f26e5e0e0789e3d561f01f836398114edd75198f213363a2bcc3586817"
        },
        {
          "alg": "SHA3-256",
          "content": "19e8441d1df98a2b24e811b0022a5a1ae27c8c9d47e1fff39304e91d05bce82e"
        },
        {
          "alg": "SHA3-512",
          "content": "809a70fccbdf908fdd8b33f0350f34d72928a7740862906a858247dda6fe9709759e385ed8e5d0ca4aaefbaa2d5386bf61537b8947c1176ab5f8784ab13bed77"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/common-pagination@5.2.1?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/common-parent/common-pagination/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-cbor@2.22.3?type=jar",
      "publisher": "FasterXML",
      "group": "com.fasterxml.jackson.dataformat",
      "name": "jackson-dataformat-cbor",
      "version": "2.22.3",
      "description": "Support for reading and writing Concise Binary Object Representation ([CBOR](https://www.rfc-editor.org/info/rfc7049) encoded data using Jackson abstractions (streaming API, data binding, tree model)",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "d48849f897b143c24225ee64788a27b9"
        },
        {
          "alg": "SHA-1",
          "content": "57434ba014a75d95cf326121a0a6ef003b219e55"
        },
        {
          "alg": "SHA-256",
          "content": "0ed7167fdc432a409459602fba668eeb9a8d3623353439433970ee916336fc2b"
        },
        {
          "alg": "SHA-512",
          "content": "8127a88e78a5911d01bd44ed348c98ba21eb83963582bafe1d17cdc0cd0eb1f63c646dbf137f089825ac1686e2a7757a2f6ba7f88c74872635ddc8219f39e8ce"
        },
        {
          "alg": "SHA-384",
          "content": "cf81eb2b9dfa09a176d8419bea5ea30518f76cf9329b151f4c7f65bdf3cf3f75bfd5fad29b4cc253a71f18525f746bb9"
        },
        {
          "alg": "SHA3-384",
          "content": "644841b4b951d55bd7a8915c0048a0529945ea6cff8c9667d2a1f70f5304f6618d53e79c6ea6c78b22a4cc983bba81b4"
        },
        {
          "alg": "SHA3-256",
          "content": "cc7ceec86a4e25b7ecc1a6a157b4c2af8264276a1749fdb67818fa3ba690558f"
        },
        {
          "alg": "SHA3-512",
          "content": "284e51411a0f3636257bf4e7e477c7981ea5a5cbe3a328e2b3a06e84cc044ff7f5cdc3b1c357558002883e142630d265b7b7a4a506a98d2d11b4c0f2d6801e18"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-cbor@2.22.3?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/FasterXML/jackson-dataformats-binary",
          "type": "website"
        },
        {
          "url": "https://central.sonatype.com/api/v1/publisher",
          "type": "distribution"
        },
        {
          "url": "https://github.com/FasterXML/jackson-dataformats-binary/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/FasterXML/jackson-dataformats-binary/jackson-dataformat-cbor",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/datanucleus-plugin@5.2.1?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "datanucleus-plugin",
      "version": "5.2.1",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "73d2a5d8b076323446fc0eb807a9f1f0"
        },
        {
          "alg": "SHA-1",
          "content": "baecf3b1455ec240a22b97d74ae2e975d3538699"
        },
        {
          "alg": "SHA-256",
          "content": "ddeef83276ed7628d81b8ab59a899707f1cc75b7341b564b360acef8b98b30df"
        },
        {
          "alg": "SHA-512",
          "content": "22318eb8c14eea2f4c4e3e7ed9ed8b49e0141e008c01899bb123930a8f532487350b94e9a2bd1b2c1625211c6146642cb75467c2fbaca50164feb75874e6ac47"
        },
        {
          "alg": "SHA-384",
          "content": "60d85dcb569f4a0367e8e86e8450b19970fbb8765b98129d7dd6d1ade58d3f1c29c600769e4bdb8fca29b14ea94f654c"
        },
        {
          "alg": "SHA3-384",
          "content": "13bd32b88c5d5e05056cecc4649ee3c3d51b0a2ed3050933b71794717aa754ec3aed480e7e4b1509dfe4a75f24d05a57"
        },
        {
          "alg": "SHA3-256",
          "content": "7d98cb7d56faa91e0e4a6c90fecb978fb22613e8f5a8f84ca97ae662290e4a64"
        },
        {
          "alg": "SHA3-512",
          "content": "87f94982e0e704a8e55d9ef146f7880ff0bd3e7730aa1ddea369da3c555764caffe53ba78d88d580ce93559f732acc03671449a450e6ec18e7fb1fb36dded5a6"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/datanucleus-plugin@5.2.1?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/support/datanucleus-plugin-parent/datanucleus-plugin/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml.uuid/java-uuid-generator@5.2.0?type=jar",
      "publisher": "FasterXML.com",
      "group": "com.fasterxml.uuid",
      "name": "java-uuid-generator",
      "version": "5.2.0",
      "description": "Java UUID Generator (JUG) is a Java library for generating Universally Unique IDentifiers, UUIDs (see http://en.wikipedia.org/wiki/UUID). It can be used either as a component in a bigger application, or as a standalone command line tool. JUG generates UUIDs according to the IETF UUID draft specification. JUG supports 3 original official UUID generation methods as well as later additions (v6, v7)",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "285019a0ccc0e0a79cdfd2d667f73e26"
        },
        {
          "alg": "SHA-1",
          "content": "3ca5091c87cd327880f09447e62b86b8b93db256"
        },
        {
          "alg": "SHA-256",
          "content": "5724d6a0f27db90d45af884f4520bce581f29eebe21840d07cae22b670bb8ebb"
        },
        {
          "alg": "SHA-512",
          "content": "d1fdaa7adde071beae68363003cadb0ccaa5914cc8fb313f59a18c2b8ed5661551bee9a1f243863f1af506c45d2539bf37fab08ac4dc608bb5bf6a7acaa23362"
        },
        {
          "alg": "SHA-384",
          "content": "c8204e36cd512ef971631145329d8dfecdde1a64aea4a439b93297c24202b7eb1fab410fb5f953f356cc63e34c5cca0e"
        },
        {
          "alg": "SHA3-384",
          "content": "eff84b0cc59804a9c6ab03dc252c1164aa6f07475aa60130ba06b3a0a729a33682bbf06a127ab3993bc2ed7f88ee302a"
        },
        {
          "alg": "SHA3-256",
          "content": "5b299156e5e9eab6fa17995e44b3a20d9e9d904e5e3962b3da02dd9c0dff184a"
        },
        {
          "alg": "SHA3-512",
          "content": "d8448a2458b3d85d0cf16b14bc0f3f00bead80795b97934440f94f72f7cf015ec83136d26a8fc10c6c30e16aa76865fe5b0916a2e7f5b1c00e3031976f8ee826"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.fasterxml.uuid/java-uuid-generator@5.2.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/cowtowncoder/java-uuid-generator",
          "type": "website"
        },
        {
          "url": "https://central.sonatype.com/api/v1/publisher",
          "type": "distribution"
        },
        {
          "url": "http://github.com/cowtowncoder/java-uuid-generator/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/cowtowncoder/java-uuid-generator",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/migration@5.2.1?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "migration",
      "version": "5.2.1",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "c78be7c87e09365886378abdfa259f3e"
        },
        {
          "alg": "SHA-1",
          "content": "e18748f33c9f41aadf52d2c2abe80d6c078a4352"
        },
        {
          "alg": "SHA-256",
          "content": "6dfde610df022f501e8549083420554df18298932842242720773deefcf89d2b"
        },
        {
          "alg": "SHA-512",
          "content": "876fdce1efac63f5f81bf47168e08617eb6acaeb2a2688e4463c79a797654a2325dbff8805da8012d0622c44fb31ad3a11c467411c2c86b4f0a84c796f20f73a"
        },
        {
          "alg": "SHA-384",
          "content": "0270fb09d97509754ba963ef07ff7c242433189e6cb43e78521077067fad98fbce80cbdbea2fc23911b14eb0e9966658"
        },
        {
          "alg": "SHA3-384",
          "content": "486ebe8c8680b42c10e9ffaa8dd5567e58531f54ab9ace64ea9fa70fed68ba2f8871e8e021a9c9dce0b6ff61a1b1744f"
        },
        {
          "alg": "SHA3-256",
          "content": "cd8f8d047fc28b7a21e7be118adf99382e3164a8dc6805d0432d10bff3c945e8"
        },
        {
          "alg": "SHA3-512",
          "content": "3ddb725ecd98764903131dc8c9aa1719004d63555660c66eb08d28c46ada297d6c0a1c3d7acf0e1e53cfea951e18f6a4e4780126c797290eb395afb17237e149"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/migration@5.2.1?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/migration/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/flyway-support@5.2.1?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "flyway-support",
      "version": "5.2.1",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "0c44ab2c973ad74791208c083032ddfd"
        },
        {
          "alg": "SHA-1",
          "content": "b28b73ff3cc7d5cbb7d899bb3ef7256dfbc76402"
        },
        {
          "alg": "SHA-256",
          "content": "84fb0ce684fc80504d6095d97bf3d4b629e7de0231bbe24641ff99c07bad642e"
        },
        {
          "alg": "SHA-512",
          "content": "3985c5317437d4b515302f2d6967cbdcea309ec2f25c3786d85eb31ab5534253dff5a24257e53dbee96bc9e39762fd0d1c1c3e17864f65098b093868de60b87d"
        },
        {
          "alg": "SHA-384",
          "content": "22f47bda45d24e7a2bcb992f563327014325a6a75edf279f8aad3c090838205b1d383f1b65b2f4745a66c31a6ad9d85b"
        },
        {
          "alg": "SHA3-384",
          "content": "baf2bd3cd871e8f09c167c9da48791031c462fe68bffaa494bd2122c121b167cc6d49ec805a9e3eecc735828eae2456b"
        },
        {
          "alg": "SHA3-256",
          "content": "c7367806a752b1e68d4432c508f356b1b1a76b705377b1b08b99077efc9c3d6b"
        },
        {
          "alg": "SHA3-512",
          "content": "75fa0cc6bf52e4560217b1c9ee479ea7166760d06899c3aae9a9754c5381e058806a0a6cb6e2c52bfc9c36eda2f18e11f4e3d9035129669c139c982df69f8479"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/flyway-support@5.2.1?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/support/flyway-support/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.flywaydb/flyway-core@13.9.0?type=jar",
      "group": "org.flywaydb",
      "name": "flyway-core",
      "version": "13.9.0",
      "description": "Flyway: Database Migrations Made Easy.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "d37c6c00bf0f928e36dfe15cbeadbd52"
        },
        {
          "alg": "SHA-1",
          "content": "3eb571c2b59efe92d4c3bd2e77471ff6db75c119"
        },
        {
          "alg": "SHA-256",
          "content": "d7ef137f0c02ef18fb85f21370504c737061a446d0387109ee6111ff27e631fe"
        },
        {
          "alg": "SHA-512",
          "content": "3f1ac56868852a3b2794308186493700eae07a865e6ca641511ea388ee75c26cb568e29ed76ad5a6dc81e6807b620bb782c86e83d3a21848c99119203db63f2d"
        },
        {
          "alg": "SHA-384",
          "content": "b2c16a21e2de284bbf17e7350f6771585ca21e60ba1cd39837b58157d08c676b9ddd6dae2ee3950418b9d3d41cbcab89"
        },
        {
          "alg": "SHA3-384",
          "content": "4cbaaab7cb5394dbb67da4e9752aacfae58230280dce02c14f0ee1cbb10e41b50f9bb0c41de8ba2766999d9305673b99"
        },
        {
          "alg": "SHA3-256",
          "content": "5c518cf666ddf04a6d9a788a1d57efc9119539554153a8c7c36ddcd89f49dfb1"
        },
        {
          "alg": "SHA3-512",
          "content": "f87d0f2d41878d914f62b062ffbc339ff27f4b3791b20af750eef5ab3eb096ff007cf415769a02bbb3c7e2da2213b15f281f0e9500a37b38e4cd11ad1ae96fe5"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.flywaydb/flyway-core@13.9.0?type=jar",
      "externalReferences": [
        {
          "url": "https://flywaydb.org/flyway-core",
          "type": "website"
        },
        {
          "url": "https://github.com/flyway/flyway/flyway-core",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.flywaydb/flyway-database-postgresql@13.9.0?type=jar",
      "group": "org.flywaydb",
      "name": "flyway-database-postgresql",
      "version": "13.9.0",
      "description": "Flyway: Database Migrations Made Easy.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "8002fec471ae80b6a2fc95fd84841bec"
        },
        {
          "alg": "SHA-1",
          "content": "bd293e850ca67c6f4730da8d4043586e21e49030"
        },
        {
          "alg": "SHA-256",
          "content": "cab30d5a1a4de2723b55601ebb54ec412e869d8b7583f45acdd32cff7c037ef7"
        },
        {
          "alg": "SHA-512",
          "content": "3b7315e2f3bd83fbcd87dbdd90e0f163388a2dd216426f2e2176e0441f0b6552d6bf0b91f99a6d99ecf59a3d04df989b3a616517755fe5d420d674bbe3f98a2d"
        },
        {
          "alg": "SHA-384",
          "content": "66d11242a7d98f3f2c2eb08f165c181c7f8e0d40016550ffdee75012f9f4785c56eaae01c82e005c2ea86c877f49d843"
        },
        {
          "alg": "SHA3-384",
          "content": "f9714fec0e36a12d9b8dc8c441749777f42ee824369d489df11fde305c53618dcf86d77511edfcdb1c4dd45cefba2793"
        },
        {
          "alg": "SHA3-256",
          "content": "fc5a83faa0c8c720c617a0c31468f19ef37c2d855d7cd2377b1108957a8536de"
        },
        {
          "alg": "SHA3-512",
          "content": "c22b9b18833585c114e3dc164e6d971e160c1ed3b6f02d660fc0670b2cab623e7f95dc0a8efb8050346ba3a88dad2917c488d1e75a37349887850c057fd06574"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.flywaydb/flyway-database-postgresql@13.9.0?type=jar",
      "externalReferences": [
        {
          "url": "https://flywaydb.org/flyway-database-postgresql",
          "type": "website"
        },
        {
          "url": "https://github.com/flyway/flyway/flyway-database-postgresql",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.flywaydb/flyway-database-cockroachdb@13.9.0?type=jar",
      "group": "org.flywaydb",
      "name": "flyway-database-cockroachdb",
      "version": "13.9.0",
      "description": "Flyway: Database Migrations Made Easy.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "129b0ffddfa8ebf8cd5d04b910af565d"
        },
        {
          "alg": "SHA-1",
          "content": "5efdc251e53de6a2b20a7bc5f48cf06aa6cba3b2"
        },
        {
          "alg": "SHA-256",
          "content": "5df0261e26f14ad8ede5673ec2723d8687852fa47a384934f1a52a97c1c73d3a"
        },
        {
          "alg": "SHA-512",
          "content": "65ee79b4017e974a2eb6715e172406a4dc674982688fffa05ae2310250712005d315d55282f8f1bca69bb25c6f27114e02a66b9d0b91c48d18a7842e31b2515d"
        },
        {
          "alg": "SHA-384",
          "content": "17905715193d0ca9eabc9768dee7c03d7b7a5c1c7d89db51b603b9d602ae6c75e9f7a55aeb14dc7b2f882b7688f3ee68"
        },
        {
          "alg": "SHA3-384",
          "content": "c5409b3a5138fa1c2d30e12f524a42eb8b5e71f1aeb43dbf2125318d7ed854eea78d1a2b0f2c19f8b17d3aa81d8ef32c"
        },
        {
          "alg": "SHA3-256",
          "content": "ec95cda887d850f1a2da8bbe2f86e7629cd54c0e069fa45facd3fcef7093d60c"
        },
        {
          "alg": "SHA3-512",
          "content": "463bcc6e13b3a70101cd0cb029f4f42234294bbc3afa7350cf2acccf7396d5a1327f03038dc8ce6beb635bc5bc16f51523022e2fa989b5c49f265f974ca67f0d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.flywaydb/flyway-database-cockroachdb@13.9.0?type=jar",
      "externalReferences": [
        {
          "url": "https://flywaydb.org/flyway-database-cockroachdb",
          "type": "website"
        },
        {
          "url": "https://github.com/flyway/flyway/flyway-database-cockroachdb",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/notification-api@5.2.1?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "notification-api",
      "version": "5.2.1",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "2e9fb1981d570f0f8330ecb04d4e0ab3"
        },
        {
          "alg": "SHA-1",
          "content": "ae4e8461fd3e4c4eb58b18c1fd926a44152443e5"
        },
        {
          "alg": "SHA-256",
          "content": "989541cba768a3cff5980a9e296e297c96c599eac48b6e6c7277555f763223d8"
        },
        {
          "alg": "SHA-512",
          "content": "52bab0ea34c8df1ecefa3fc014cfeef8dfb909a55bd817bf6472352615ca4b18e233cc3b7b5db9759cbc9cc7c00d10a1ac8fb2a494a1073217aa0da2121a4062"
        },
        {
          "alg": "SHA-384",
          "content": "19aebefa3369765c8ee38f4bc130a689e58f4821a46756ba8886b65db7e766d9da5f56ec92fa9891b5b8c96f7aa90581"
        },
        {
          "alg": "SHA3-384",
          "content": "3480aada3d42fd7bb0dce1168cbfeeec28ee5481add0cf6db800e3e075331a57a47c07aeee52c24c7556d5a6363dd5fd"
        },
        {
          "alg": "SHA3-256",
          "content": "790712b4503d5b940462cc569a1edc6f26b076439fe18c065702dba83dd00035"
        },
        {
          "alg": "SHA3-512",
          "content": "0b0de5a612ecea8c244fb020eaaa5b434f7a676806f021a5e394d5ddbc19d425ef5e298c4967e77dca14e0f15b3bedd64d9874a351a1f2eb7322d11bc039fea0"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/notification-api@5.2.1?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/notification-parent/notification-api/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/net-support@5.2.1?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "net-support",
      "version": "5.2.1",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "fa07cfede5ee40ef98aad2faa8d2c8e2"
        },
        {
          "alg": "SHA-1",
          "content": "ff87f2228dece7afe372ad409caefdc67e08a4f1"
        },
        {
          "alg": "SHA-256",
          "content": "24e73b2694d094442a239b827a0e69266687c67c3976b7afebe0b3ba6c007d27"
        },
        {
          "alg": "SHA-512",
          "content": "1d30fb1edbeb28d9d1c52e70bc7a6f19d455393ac5049a182e8c5c7ed7b50a2262f46d6520cd91ff40250dfbd881a14514c0fec03533817d1ce602d1f5f910f7"
        },
        {
          "alg": "SHA-384",
          "content": "d5d27f0ca02ea85740d9b7339e19c3a9d159a1f49c44b862476baf6029d4e18208f714d21d55c0f663930aa9e29adec7"
        },
        {
          "alg": "SHA3-384",
          "content": "385856289a608564c9fb13f369f4bdae5b645a328c8f4f1b5e8baad2947153b4e6ecd048b95e078ced9fe2efc9413e62"
        },
        {
          "alg": "SHA3-256",
          "content": "314394201406fc6e3eff7cb8eafb3f3161af2424fddc67334c649789f034b11d"
        },
        {
          "alg": "SHA3-512",
          "content": "96a20521f5e15f3dfb8554d1995237fc7e4b16fdd2c3c6dcb84949350ccf31143702f436834311010404f5e411321f04399b8ea5d5eba583e7232cca8f049641"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/net-support@5.2.1?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/support/net-support/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.protobuf/protobuf-java@4.36.2?type=jar",
      "group": "com.google.protobuf",
      "name": "protobuf-java",
      "version": "4.36.2",
      "description": "Core Protocol Buffers library. Protocol Buffers are a way of encoding structured data in an efficient yet extensible format.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "617a916997991c4d4e287b5f86870e66"
        },
        {
          "alg": "SHA-1",
          "content": "dbc5fbfc3936fb569a910679e971842a556a4d3d"
        },
        {
          "alg": "SHA-256",
          "content": "0773e72eaf375e1285df330575bfec5bda5da674d544d0e142a17f89c8f754da"
        },
        {
          "alg": "SHA-512",
          "content": "884b623537e8c05dea7bab426e786d7026476977cdad407d5686e10150f2bc116b8014b5099c1fec5212082b339b18d530e50788ff77f534bafab30000760694"
        },
        {
          "alg": "SHA-384",
          "content": "8eba320e587e5f2ecf25be8e2dcd14c5234be7e34fc2a647dc136fda04d3762df0ee9483894714fd8195793c969a0f6d"
        },
        {
          "alg": "SHA3-384",
          "content": "a8066e8676d14e79f4005c01ff31d6747d7d9ffa8a36df0a1f8c65e2b46980c7cc3f3280d72e0478784a886b85e7be67"
        },
        {
          "alg": "SHA3-256",
          "content": "a8bc7bd265f16bf1b41e82b93d9397d03bbc3896f0ddd1f138b2388f7b8e033d"
        },
        {
          "alg": "SHA3-512",
          "content": "3494204dacf621c2dace984b2253916434e9b2ed8dbdd277b1b3f044bffeaee051f1262cccd3969551da87af42d61261bdf16a2c8670aa3a57448e2eee8d72f5"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/com.google.protobuf/protobuf-java@4.36.2?type=jar",
      "externalReferences": [
        {
          "url": "https://developers.google.com/protocol-buffers/protobuf-java/",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/protocolbuffers/protobuf/protobuf-java",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/notification-publishing@5.2.1?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "notification-publishing",
      "version": "5.2.1",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "52983a2620dadead7b63a1db26a1b1de"
        },
        {
          "alg": "SHA-1",
          "content": "dca73fd4fe164066e0ce18e83f5e00fe18e82603"
        },
        {
          "alg": "SHA-256",
          "content": "27a54de06899a2af25414e3f5eae032938006f46a3ba7fd2e84d1fe643925c35"
        },
        {
          "alg": "SHA-512",
          "content": "dbb3cdd1b982f289e28a30938ddcbd24eeb26ff0114dca92edc0d5fe11d8cd29f8cd2336a2b8e78f3323d5f8bf6833de155ce32106571ca601d9f718dad6c001"
        },
        {
          "alg": "SHA-384",
          "content": "c8ebcf441dc3387e6cf1ab50838f7431f083fc2afa962e9f48d192ea9bf3e70dec5b922727e58f4a52f48f487debc611"
        },
        {
          "alg": "SHA3-384",
          "content": "0b654dc62f92475e19b4a381b9359aab8fd35555bed4ba7af903917d9e1d43fce37509a04a95a8a1138a5c629a804901"
        },
        {
          "alg": "SHA3-256",
          "content": "5229b4c961e523364925a08acab85b86c0e0a42d19870cd928331670895bacbf"
        },
        {
          "alg": "SHA3-512",
          "content": "23a2b8abbd6139a423eda5ba02528f77d329f073088be4267e3d571715a8c770c65071c3e94d082d7117a716825c4178e9459bf214c0a6361db9b447177286a2"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/notification-publishing@5.2.1?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/notification-parent/notification-publishing/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.eclipse.angus/angus-mail@2.0.5?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.eclipse.angus",
      "name": "angus-mail",
      "version": "2.0.5",
      "description": "Angus Mail Provider",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "e965a2653568c0138457b4c6fc9e5d77"
        },
        {
          "alg": "SHA-1",
          "content": "427f6d52ec0782f7efaca0c0732042e347a6cb4f"
        },
        {
          "alg": "SHA-256",
          "content": "b4d8c30d35f455def6c7a05fe595a1e62ea2b80cac3efec1e9ccf4118b23168a"
        },
        {
          "alg": "SHA-512",
          "content": "500985e3045a7640049aa1ebb008d675983f537150605f192d2746ca2aa8c7a1b5231f782f950dfd968cc8ca26c32c6e93008cc7de309c5da4b17af0139baff7"
        },
        {
          "alg": "SHA-384",
          "content": "35c797fdc52800ccfbd36d7574c0919fbba1f820eafb1d236271eefb07266360c1b87c07c089f97c07d12a634e54037c"
        },
        {
          "alg": "SHA3-384",
          "content": "9a10dd9cf09af51c29d178d2dd87c6a796121753c91ca13b8c51843b8ed737803090fa93f41ec8689469550941e12473"
        },
        {
          "alg": "SHA3-256",
          "content": "7ac45dd92d65996c4de11701bf1a1130e393a3e33b4bc02af69bf627e54b122e"
        },
        {
          "alg": "SHA3-512",
          "content": "b45eb356f855b9777cfdf6be94c6797c33e86fe28e8e2e7fe7311e661f07d162e8c4e46a2f3dd67b7c0f8261ab5610c85f4f62cc874e64ee2a76eca3501e2e2d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        },
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/org.eclipse.angus/angus-mail@2.0.5?type=jar",
      "externalReferences": [
        {
          "url": "http://eclipse-ee4j.github.io/angus-mail/angus-mail",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/angus-mail/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/angus-mail/angus-mail",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/jakarta.activation/jakarta.activation-api@2.1.4?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "jakarta.activation",
      "name": "jakarta.activation-api",
      "version": "2.1.4",
      "description": "Jakarta Activation API 2.1 Specification",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "bc1602eee7bc61a0b86f14bbbb0cc794"
        },
        {
          "alg": "SHA-1",
          "content": "9e5c2a0d75dde71a0bedc4dbdbe47b78a5dc50f8"
        },
        {
          "alg": "SHA-256",
          "content": "c9db52100ce6c8aac95cc39075f95720d2e561b11f8051b81c121ad4effd7004"
        },
        {
          "alg": "SHA-512",
          "content": "cd078772acb5ebf1f90f7c737f372b7e86a5ce31b995ed759526a9eee73fd89f97e506f9a208ba3b73e757cb78830b829733411cf7989680aea2272abba7323b"
        },
        {
          "alg": "SHA-384",
          "content": "0b9a413939a024f562c15e60b11f85c336620987441fb053645499704960464d01ae83e9989b43ae6cd4f2164eb0cebe"
        },
        {
          "alg": "SHA3-384",
          "content": "d2fa51a3e18ced20f097ae019982cbd945942103df59327f319c64eeef1c109d6262d1de332fa2b6dfde41c98a9e7b2c"
        },
        {
          "alg": "SHA3-256",
          "content": "b259d17f48ae1f357a28b9c33b66fbcae50eaa86d61ac3c8cbc5184e7914d2d5"
        },
        {
          "alg": "SHA3-512",
          "content": "aae6a55fe1fa397b13b1bcb5a05ccc3e4e87049865233482dc09a8ab2af3eb128646394e3ef529609031e7c6c2215c91ffd27de06cd97ca9ae7e07bd4b9595bd"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/jakarta.activation/jakarta.activation-api@2.1.4?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/jakartaee/jaf-api",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/jakartaee/jaf-api/issues/",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/jakartaee/jaf-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/jakarta.mail/jakarta.mail-api@2.1.5?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "jakarta.mail",
      "name": "jakarta.mail-api",
      "version": "2.1.5",
      "description": "Jakarta Mail API 2.1 Specification API",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "a1872951f46b87594806bb01e342a468"
        },
        {
          "alg": "SHA-1",
          "content": "be9b3b677ed6083f575c437ebc442a6a4bd2b931"
        },
        {
          "alg": "SHA-256",
          "content": "aa493753acb7a8c45ba8f4c9cf1230a74e20237056dd5b5c8bc86c583e8cfa0e"
        },
        {
          "alg": "SHA-512",
          "content": "f537477c3dbf81cf7112fb348221b91c0223b5dcbbac816454e88cb8f293f8c5d566b2a827f78dfdfebec1fbe5a93c909e78fb13789ed41ecbb96a86d171b267"
        },
        {
          "alg": "SHA-384",
          "content": "0ae200a91c5879f7b50b9a07c3df864d7b7af31cb771ff2a636cf8ee76d019456e7fb541efb69ca96f90f497c597d608"
        },
        {
          "alg": "SHA3-384",
          "content": "862bceaf42659250d354809cb2259bfd11b9d4a87cf1bcafc9c2346f134bad45e27f8f7227722905eb1c870e9314ee77"
        },
        {
          "alg": "SHA3-256",
          "content": "9dc094cd2476872a9da6b8065878b5e5a9895dad13762caa025ac5c2656c65e7"
        },
        {
          "alg": "SHA3-512",
          "content": "e01072fafeb8a06ca6e32bdac205189fc9dde12fa039c453cfcc9a0cbddadc466d400d117cea64066cb1d04b34b0bc7a809ef8a832b11e7adb3015abf33e34d0"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        },
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/jakarta.mail/jakarta.mail-api@2.1.5?type=jar",
      "externalReferences": [
        {
          "url": "https://projects.eclipse.org/projects/ee4j/jakarta.mail-api",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/jakartaee/mail-api/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/jakartaee/mail-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.eclipse.angus/angus-activation@2.0.3?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.eclipse.angus",
      "name": "angus-activation",
      "version": "2.0.3",
      "description": "Angus Activation Registries Implementation",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "ad20392145690b36b4f950fe31a31a2a"
        },
        {
          "alg": "SHA-1",
          "content": "7f80607ea5014fef0b1779e6c33d63a88a45a563"
        },
        {
          "alg": "SHA-256",
          "content": "a6bd35c538cf90fff941ad6258c40c08fca0b5c9c3f536c657114f27ce0527a7"
        },
        {
          "alg": "SHA-512",
          "content": "efb987b781f665589b2a524d86826ffcf37eaf105b2f823be124fded85bd118098c0749b5d268373d00b1d3b8bf0f89f86670444f9990b91948704a7052376e1"
        },
        {
          "alg": "SHA-384",
          "content": "4086b356cdf168e28a09dfa2ee9cd54926491438d556e4608508ae6a895929adf63f3a259779c83624a9bb1f886efb6d"
        },
        {
          "alg": "SHA3-384",
          "content": "7b79721ec0b28964fad4bf56ffc3be67d81b62e45a4ac703917094e281c125834b9bebcc0623176d4904c5b50c94450e"
        },
        {
          "alg": "SHA3-256",
          "content": "aecadbd33e92abf894ae28c8cc609f5f85e8af736621c44fb71b84ca34e91247"
        },
        {
          "alg": "SHA3-512",
          "content": "ebdc07c3b3cf0817f6d9ee54bb23461657f213648b70f6c7f634a1028cdf1522d5b5a7e2168130f72afa112f36cb08858d1c94bb67b40a0f051f567b4d696d1e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/org.eclipse.angus/angus-activation@2.0.3?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/eclipse-ee4j/angus-activation/angus-activation",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/angus-activation/issues/",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/angus-activation/angus-activation",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.github.ben-manes.caffeine/caffeine@3.3.1?type=jar",
      "group": "com.github.ben-manes.caffeine",
      "name": "caffeine",
      "version": "3.3.1",
      "description": "A high performance caching library",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "a3e4b1a786869a2c6f840a9f341bd1d0"
        },
        {
          "alg": "SHA-1",
          "content": "5a27a5d1b7bf7e796b4d90644c53c6c8336bfb09"
        },
        {
          "alg": "SHA-256",
          "content": "1f916d052a3f8c0c10951f343f043f176ff2d3c2f9e380e15f0be673c5e67c48"
        },
        {
          "alg": "SHA-512",
          "content": "6cd5efc3f2d4aa58b1f0f68503347a730594a9d308290e94a1cd2a01a1ab0755447e305b08370ed6b66311583e6728c6358c139808cd0a3db4801db7311f9675"
        },
        {
          "alg": "SHA-384",
          "content": "a2e11cf101a2c9b7dfdbb52931f20abb88a73825ecc51519f10ea15988d537df8d9e0ec3425c76545e7692b203a9bb02"
        },
        {
          "alg": "SHA3-384",
          "content": "30e62dd97bb68761ea50656699564cfb15b4bddead8fcbb446cb02df19309c7ad89366c2d0be56276f7eebce87e50ce5"
        },
        {
          "alg": "SHA3-256",
          "content": "1271090fb51f73b66ab8bd2567a92b3a28ff3ebd7b88b215ebfaef584ac873db"
        },
        {
          "alg": "SHA3-512",
          "content": "8954f39878ac43b450cd41f310bc55405b984bf29060bdb0cefcf35e688fc76865ee9db232c59e9c079ee45e7714c56e7545f03f440e4b4f080cc2406056f32c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.github.ben-manes.caffeine/caffeine@3.3.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/ben-manes/caffeine",
          "type": "website"
        },
        {
          "url": "https://github.com/ben-manes/caffeine",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.22.3?type=jar",
      "publisher": "FasterXML",
      "group": "com.fasterxml.jackson.core",
      "name": "jackson-databind",
      "version": "2.22.3",
      "description": "General data-binding functionality for Jackson: works on core streaming API",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "e1fbe6bbbb606fad49068fd2670a5208"
        },
        {
          "alg": "SHA-1",
          "content": "d0d4b2cdb0a1440ac02178fc2ff01dfb05cd06a8"
        },
        {
          "alg": "SHA-256",
          "content": "556db5439e206114346043f68d200497dc96a0bca62a360a81784092ebd0e0a9"
        },
        {
          "alg": "SHA-512",
          "content": "2c94560ef0f01f7dd12ae0810dbcfaf80fddd889bc25f597350fb75a0fcc266fa68f5795a773f772692426ac81a6ee65ed2bde8db8184bb2788323bc95ef7ebe"
        },
        {
          "alg": "SHA-384",
          "content": "35a064a6a2a93643e10f87b9e0a0527fa3c12a14de7f76bcdc81ce3939150fd683159c08164011532e84504eb473e277"
        },
        {
          "alg": "SHA3-384",
          "content": "40f36ac8e077efe3f141b03f1390cdb38e1c829058fb86510abea9778e792725f55f6684cbba4d366b6055ba44b7d80f"
        },
        {
          "alg": "SHA3-256",
          "content": "0ea05dee4c161251abf19cff75fd82b4937d28d346c53cb3fd7c1e062a2184da"
        },
        {
          "alg": "SHA3-512",
          "content": "e6dc5878852afc9101d66a2c16b91a419179bfc871ec66ddd8590bcfde9b3f2889d4fa317ab8fe40aa2ba6bd94a4aa8a1121ea358e10623de54a678a080f6676"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.22.3?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/FasterXML/jackson",
          "type": "website"
        },
        {
          "url": "https://central.sonatype.com/api/v1/publisher",
          "type": "distribution"
        },
        {
          "url": "https://github.com/FasterXML/jackson-databind/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/FasterXML/jackson-databind",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.kafka/kafka-clients@4.4.0?type=jar",
      "group": "org.apache.kafka",
      "name": "kafka-clients",
      "version": "4.4.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "bf2922ade241b89c5f68dcbf35778b2a"
        },
        {
          "alg": "SHA-1",
          "content": "1d2ebc2a3f0ecce03faa288c42d4e8f998aac47d"
        },
        {
          "alg": "SHA-256",
          "content": "1ab07317eb6633241392449d329dbdc5d9251e6ffc4926860f42dd966e88bdf9"
        },
        {
          "alg": "SHA-512",
          "content": "c15e74d3b5e94094e06f8441b9a055ece431bf27748663905f3c0e8a333fdcd1db07bd8517152f34f6b5c276aa83bec374fb184aa3da16b7989ee773aa07298a"
        },
        {
          "alg": "SHA-384",
          "content": "1caf36e2780dcd8bd5ddede266770f117a7ce60750ff4491f79f7980b6297a4ca18e42ca0470eefa2b720ba4ba77400f"
        },
        {
          "alg": "SHA3-384",
          "content": "49a58a2323df6a3b3636d926f99295bb8f9364880f1468a54a24173562b84b06b03695640ffcb3eb65b7bc058d778899"
        },
        {
          "alg": "SHA3-256",
          "content": "fcea1bb0b29984deee342b7f57c51cd39c8d41cd4ad1dd617f256a943e44d3e8"
        },
        {
          "alg": "SHA3-512",
          "content": "5bfbbca759bcecc57376b1b0d60fb222dd0d3c48a06c19b772d08c9dc55742079839c6bed83e195025d046d34e7f67e8286e76b5ecc2f10524e3ab108cf29ef7"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.kafka/kafka-clients@4.4.0?type=jar",
      "externalReferences": [
        {
          "url": "https://kafka.apache.org",
          "type": "website"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/notification-templating@5.2.1?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "notification-templating",
      "version": "5.2.1",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "b13fbe7080c1cbc1127ea82b929783c3"
        },
        {
          "alg": "SHA-1",
          "content": "f9e5e0530450239c9e6c3f0c2f963583db6744e0"
        },
        {
          "alg": "SHA-256",
          "content": "b380312bcbdfa23ae2001e36dfeb3122738e6af3f37f685d6b125d38fba8838f"
        },
        {
          "alg": "SHA-512",
          "content": "0b510590d2a7934e26058209d3b29ac807c585c2b6f5e4b61be81c440167ac9c9050e5941504f03df47ecfa3be007faf5fb460f4c6a56ec248f8786f41a5bc0a"
        },
        {
          "alg": "SHA-384",
          "content": "ec7e6134da341e473e5ee48fef4a0792ba15293ef010e628684831e17dc64370564fc1141dd6f1ccbe52e2e0c9e0be27"
        },
        {
          "alg": "SHA3-384",
          "content": "f7c9bced689332ec59a7c9a6fbed69d518b0b36634dc01d5326b68cbcdf564915a07b3618c3f745a7d42642b641d00af"
        },
        {
          "alg": "SHA3-256",
          "content": "9a4277f17f4320c6004aaf973b3d136de8885c30b146f0e5056eff902cb7e328"
        },
        {
          "alg": "SHA3-512",
          "content": "e5b389c5fb0a254bfb730007f7c4cdda613c8c1159447b76a9b74cf0cbb71487359d89fa7c6b7ec8018eb3c201cc78e5f0ce4e02f5b352b5b5313f538a2fb601"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/notification-templating@5.2.1?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/notification-parent/notification-templating/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/plugin-api@5.2.1?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "plugin-api",
      "version": "5.2.1",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "b827fabb44891536b705100de819d967"
        },
        {
          "alg": "SHA-1",
          "content": "b0033ea63a4750a3bf97f8b5d76bfa636a63c60f"
        },
        {
          "alg": "SHA-256",
          "content": "b12040dd19873bdca01b274ea0809de91af9296b9a9956c81ee4730fb08dc701"
        },
        {
          "alg": "SHA-512",
          "content": "50de5abef4ee31960a63172392ee0a21c804fdb4d524af035dd157e10ab36db1587949566f4b114f88a4292944e7ff9671a4a974cf4dc7009c1bf787a581d3c2"
        },
        {
          "alg": "SHA-384",
          "content": "5c177b93551f72041d98b7a52c50a3e7b05f73b77318c30b0883bf2ec1a82afded9367b135b9c337c7ca4e9f2d7f2b7f"
        },
        {
          "alg": "SHA3-384",
          "content": "c150c99e50095b49e54706669d7992c3e58b48ed87cac63694dea60d2ff97a718466aa7c07d5a3e8cca759430586e5a2"
        },
        {
          "alg": "SHA3-256",
          "content": "6d78d8857d3260866b55a6b2ccceba563081dffd2b7dfacc15259558bd0a622f"
        },
        {
          "alg": "SHA3-512",
          "content": "f11ab998c1c57ec5655a43ee6a1a46dc1da02dedce172b2625e71a3d723ac5fb08922558d36030df6a76771ed05da28b7058a4b3072f7f1e6f51b2ab876863eb"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/plugin-api@5.2.1?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/plugin-parent/plugin-api/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/plugin-config@5.2.1?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "plugin-config",
      "version": "5.2.1",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "d290ed0647bf39e513adbf8d55c6f0ce"
        },
        {
          "alg": "SHA-1",
          "content": "0f48803b22680b26040c140203799acb85117896"
        },
        {
          "alg": "SHA-256",
          "content": "f48e25f2a7d5a9c0cd6fc6dc490af411fd011b6c480f0e0aad4113faa3fed405"
        },
        {
          "alg": "SHA-512",
          "content": "e11e78474e02764d54c6571425329c4b54e6411b6abe43851aa78a6567dc35ed5af65d4ac18eb602a1b8dc8290b424c214be0abec328e33558e5da6010669235"
        },
        {
          "alg": "SHA-384",
          "content": "8fdcea4e90c61b7d2d55cb4d38bf97f3ae468d0b68d1cdb6b46b612449fc438d0999d52526e22d57d7e0f048edd8043b"
        },
        {
          "alg": "SHA3-384",
          "content": "f8f9f087278b0e457186f0cd052e08d7d7760066b035641f78fa13ba4717ef9cfb9cce42a74967be97c73f5fbd512c12"
        },
        {
          "alg": "SHA3-256",
          "content": "8bb8ccf685051b857800397aa33f394e9b83cea6cad2b82d0fb7ecc437f8c7c6"
        },
        {
          "alg": "SHA3-512",
          "content": "aa01689837b4de6050fd1e06c7b76d8ea4296a92993061f11901fa28501dcf745baf1f0d83f79441127aad05df671d07f372164d02beacc9250b6f230df3cd1f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/plugin-config@5.2.1?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/plugin-parent/plugin-config/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.networknt/json-schema-validator@2.0.8?type=jar",
      "group": "com.networknt",
      "name": "json-schema-validator",
      "version": "2.0.8",
      "description": "A json schema validator that supports draft v4, v6, v7, v2019-09 and v2020-12",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "f2ba476832e0d4bf972b47d2a5dd7898"
        },
        {
          "alg": "SHA-1",
          "content": "44ff375e8959269386f740434731c94b5df51ceb"
        },
        {
          "alg": "SHA-256",
          "content": "26602201cca8a0bc03cd893dad5a719d5218ab3c0b7cda5a68bfbbaa55b6711a"
        },
        {
          "alg": "SHA-512",
          "content": "cebbce24a065f10a5aa4348069305e695a6ab633bf276042f2f03ef80e2f1188313dc82a262d47f4c59d6abf027ae34ae45a651766204f42420d0444cc9249c1"
        },
        {
          "alg": "SHA-384",
          "content": "e693164b1302f22008239d342805921fdbd49812e7be455d470b6fcda7bc42e6de866fee5fff0ba3c80ea03553302da8"
        },
        {
          "alg": "SHA3-384",
          "content": "d13c83efd59c1365d92fb721af92cd6cd07b838c1bd066e94cff92f242630d81aa69ee93f90dbae0c26411e8aa022b16"
        },
        {
          "alg": "SHA3-256",
          "content": "c31b4d268db2144d720fc47eb81924d36f2769fb7c044d293a9f5b8508e06df2"
        },
        {
          "alg": "SHA3-512",
          "content": "48ee563c18a5282c7063d04a833b8b2a6c027cba5818b7c45dc62723006b8f97a6fd185054139dfe28b815de64888dd3fe52c36b3e776568d64b73ee3d047c80"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.networknt/json-schema-validator@2.0.8?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/networknt/json-schema-validator",
          "type": "website"
        },
        {
          "url": "https://central.sonatype.com/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/networknt/json-schema-validator/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/networknt/json-schema-validator.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.ethlo.time/itu@1.14.0?type=jar",
      "group": "com.ethlo.time",
      "name": "itu",
      "version": "1.14.0",
      "description": "Extremely fast date-time parser and formatter - RFC 3339 (ISO 8601 profile) and W3C format",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "e537d0a2bc8066726f7e4654c253cf84"
        },
        {
          "alg": "SHA-1",
          "content": "c0f9f9d4f4404787e992ab3af5ae95f2fad79e47"
        },
        {
          "alg": "SHA-256",
          "content": "5cf40ab0cc77828ab2b875b1f3ecd71c8295d7721933476abc2e08fddcea164a"
        },
        {
          "alg": "SHA-512",
          "content": "aa69a6af3a7123eb41425bbaf6834e16dc3323172709e2338b8a21b970fd21333d996515f42da4aa0225251e30542ad7d9c8332bdf7d62ed96b42fadc8a1520d"
        },
        {
          "alg": "SHA-384",
          "content": "8d201334c39b68d13d66fc9df2440fa848b055a9b901e1c630ff66a47e70c8816484d106ae18c642d4257034f33e55f2"
        },
        {
          "alg": "SHA3-384",
          "content": "033715e1422cb3f22c1073bc7b058fd16d1436c6314f49f13480d81c86b656cb77a4d852cbba35542bc8f2ce49244ba6"
        },
        {
          "alg": "SHA3-256",
          "content": "f18d275dd2a0038a82432e06bb9f396151310136e3a316a869ef54d7fae834c5"
        },
        {
          "alg": "SHA3-512",
          "content": "8a51b3c6144eb2e363f8804da316d9e3dc246be07af4c0bb55e9540c2a0deb5eb9beb825120d3d203e3a561fd8a605ad64f3af5d233725e1b9c7e06232deaea9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.ethlo.time/itu@1.14.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/ethlo/itu",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/ethlo/itu",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/plugin-runtime@5.2.1?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "plugin-runtime",
      "version": "5.2.1",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "81a97391c38e9d3e404025f29599d0a8"
        },
        {
          "alg": "SHA-1",
          "content": "c6fcfe9cd2c7fb7b562ea6e54a302d7aaf6d5498"
        },
        {
          "alg": "SHA-256",
          "content": "15b8f01ae98869116cebb951383cfb97d393b201d169f0e5bdccca3087e98680"
        },
        {
          "alg": "SHA-512",
          "content": "64d803f9be37a2b4bdffbc1eabd079002e69cc88e6ba1fec655d455dc429cc212fc31877b11ff079394e913a75c6c067a3dd5ddff2f102bd3367197abdb6cb43"
        },
        {
          "alg": "SHA-384",
          "content": "eab77b5f9c617a6cd454f559b3826c8be7fd6cee6d598834b3847812a55745c051b7da0098615cd9e9173c0262692a5a"
        },
        {
          "alg": "SHA3-384",
          "content": "2fee74efc5e8008a40ef60f24d51c7b819020d2081adbda05f81924b4e930cbe9bb9178ce0cfcd5f25416347eabe72aa"
        },
        {
          "alg": "SHA3-256",
          "content": "f76b202630a47b0624f420d5e4bceb3de75e29a3dad9d1a55b335ba6670beffc"
        },
        {
          "alg": "SHA3-512",
          "content": "f20033fe686f81937295cd55e6447b40028b144ff808b567c14a7fdcdefefae338274d773e4fc5a293a8e88dc0bf0589050e15ce403e9f1c625827a6c4acb5e4"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/plugin-runtime@5.2.1?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/plugin-parent/plugin-runtime/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/common-config@5.2.1?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "common-config",
      "version": "5.2.1",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "63eab36f66fb6bf57e8ff5fee9a0f189"
        },
        {
          "alg": "SHA-1",
          "content": "810315486e09a9a94be091dc18186d3d297c2378"
        },
        {
          "alg": "SHA-256",
          "content": "2759438e20636b1f3925747104ac46fd55583039bb6f9b63d60e096db5f8a20c"
        },
        {
          "alg": "SHA-512",
          "content": "a9576c748a5d71035c37213b2c07b81d8ec8796a4108bbd7deb1c6afeacee43c7ea45ab13c29e3e4ef0df94db44140e1f8b546b36e62c2cd3457f0353c421f7e"
        },
        {
          "alg": "SHA-384",
          "content": "7b62a66ca9e10d7739a138e710b07aff3e5bb484a280cc062c5b575a06934b941eb69a16d7476645d264a89098ab98e3"
        },
        {
          "alg": "SHA3-384",
          "content": "fa8ef504b563971537b18d7a128b7f3a3dbbd721e4f5833f997430992706781d6479c3c786cca1633cef0f75823c7d63"
        },
        {
          "alg": "SHA3-256",
          "content": "5c3dd27bff016ccf0f7b9c771bd4a7f0f6f35bc8205579b1a5e819bc8ce8bd2e"
        },
        {
          "alg": "SHA3-512",
          "content": "53ebd31b3fb14b5d2f9a3b103b31e6dca4d2f84e8641189ebeb61c2972780fcd9766d6b37beaa07dffd6b7d3806e3db9b7060b0a9423264989bf13175e0a8391"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/common-config@5.2.1?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/common-parent/common-config/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/smallrye-config-secret-handler-file@5.2.1?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "smallrye-config-secret-handler-file",
      "version": "5.2.1",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "446da96323d983a007baaa7a3a5d0be3"
        },
        {
          "alg": "SHA-1",
          "content": "8fda1bdaa1b1236466f846b7ad559c77acb9e22d"
        },
        {
          "alg": "SHA-256",
          "content": "68ea2e1fb7b8c44cedd6725c96539c49a138ca85c6925b551781b3ea6236cdfe"
        },
        {
          "alg": "SHA-512",
          "content": "f6acb7c14b65ba87b1696f1ef3b70140e131b8df6581b6d918be3b2be30dc854446fb8e22a51c077568996007d12665dc306221ec7ae7fd0ad1da56c958a4dad"
        },
        {
          "alg": "SHA-384",
          "content": "884598cf83e73d98dcc43f0f4bc8c70a73785f56f4376e22ffc84f44c6dc026ce3e9974dd0f9d9313a584d28fd9048c6"
        },
        {
          "alg": "SHA3-384",
          "content": "b5998c9a0abe5f450f8868265154d424e87f9287950f02bf34d835dba137a63277bb90c58124b4ff2015cbd61237d593"
        },
        {
          "alg": "SHA3-256",
          "content": "a9b3bfc1b92fdcbf6547bf253294f01f8d93daca27627d6d31ac3cbf80634df3"
        },
        {
          "alg": "SHA3-512",
          "content": "fc817d3dc2fa922519763c91db06cdff53b530621271cfc6763ade9e6ec47e854329b0008c5974a036780d2e287dc6814cebf4d9ff4dfe4bff138966f1e4e409"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/smallrye-config-secret-handler-file@5.2.1?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/support/smallrye-config-secret-handler-file/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/proto@5.2.1?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "proto",
      "version": "5.2.1",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "da56dac855b5b5d3d6241370f7dfde5e"
        },
        {
          "alg": "SHA-1",
          "content": "d52825dbdb2b074ec6b54cfc90c98720a5dcb346"
        },
        {
          "alg": "SHA-256",
          "content": "6186c9b097c3e54c97d8de7347aa1d6ff81fc69cc12ecf160e5a95b7e740e532"
        },
        {
          "alg": "SHA-512",
          "content": "4a223798fbc79020d980795e60955f00ccaddf70704f94caec10bfa03ffa59360f0a1c688fec0940b57beefe95b6982ebdc28d0a7b7ea6e5d5febe12bcf29308"
        },
        {
          "alg": "SHA-384",
          "content": "9b36bdf7acca1550d4063027ba1aa1108bedbda686541bc6be9ef0f9069127004889d237c4e017def5483c96302a35d6"
        },
        {
          "alg": "SHA3-384",
          "content": "10168ff5c0fba74ffbf082477d39ff07fb5ac2ee97a0f7db99aee6bc5f04690e6c05f391e3f2d8e40c6674fc88c9cbad"
        },
        {
          "alg": "SHA3-256",
          "content": "086ee4ba3ad7a9501f7a0384b41877e8098a20a8c371df4c2953e1868e74fb29"
        },
        {
          "alg": "SHA3-512",
          "content": "13bfb8a8bdb114f6bfb82660db7b6f5f6bd2f727e38270c559112073b4b3b3a2d126941384b094ed9c404f01a82559ca583101ff2fc2cffa19a97ddf0b4c8fa9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/proto@5.2.1?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/proto/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/cyclonedx-proto@5.2.1?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "cyclonedx-proto",
      "version": "5.2.1",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "a320da77ec2a4bd5e6dbbd89ed566f9a"
        },
        {
          "alg": "SHA-1",
          "content": "d922b4836ee22af8dbf33864449f148e28d9d30d"
        },
        {
          "alg": "SHA-256",
          "content": "8a6459832dcee507c85cd9cefb732b8cab88858efbb2a8393099e11029d7686f"
        },
        {
          "alg": "SHA-512",
          "content": "2336dfcc48eb1a262c08b6ae1f43411349df2b8e5f5a1bfb0c71264df39ac9f29ac7eff14a842d060677b9504180efdf6bc39656fa7654fb5adc387786fbed4c"
        },
        {
          "alg": "SHA-384",
          "content": "25b1a84b133d9867b521e586e6337efa31ca3aed4036e2dfdd93f61a70d77b2ba851f2aeb1c5d512c5eec998394b31cd"
        },
        {
          "alg": "SHA3-384",
          "content": "bbf3e0484ea3007b12a3974cf2bfc80903178ab100d55be0e49eb131d850220cf470f2a98bd22baf5ce55ce524cdc40c"
        },
        {
          "alg": "SHA3-256",
          "content": "9a18914cab1d50335fb441d15202537140392a4e0bb2852e7b5c4837f4165252"
        },
        {
          "alg": "SHA3-512",
          "content": "7b80f26e4c1918f7b4aac7a29c3b9818182318c39b91de8eea4b8484eea8cdd9583500e4492a5423f726e448718536a7590c894654f7182d084836fa84366ace"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/cyclonedx-proto@5.2.1?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/support/cyclonedx-proto/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/secret-management@5.2.1?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "secret-management",
      "version": "5.2.1",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "ac289252d3b62fb5b54513e09c31e54e"
        },
        {
          "alg": "SHA-1",
          "content": "2395f3052a355b9be67cf497aba6572c1405fad2"
        },
        {
          "alg": "SHA-256",
          "content": "872391dc6d8089d10854696586f6062939c50c76f1b42302aa98466ae1bb56b2"
        },
        {
          "alg": "SHA-512",
          "content": "5344a7166bd70205612a76815f870ed2477c83706c3fd422f1ea874276843678b4123370ce47202e6c45578d338cfa9089e06d8150e3862e07046d00f9506573"
        },
        {
          "alg": "SHA-384",
          "content": "6bfc9f08c98d73ec07386d2f5f075b92a4b0fabc2f596e9a49726e1659c0d51a93db36320df9f8fc05b8ed0953e0ac0e"
        },
        {
          "alg": "SHA3-384",
          "content": "fd7193a3b4e2920974b59091663f3724c4cdf3867d00535fcd6023abe333a5847a38520cc43e7eb71fade968bc789e54"
        },
        {
          "alg": "SHA3-256",
          "content": "d6749355ed2ececd77507fb86f6c96b49fb8bcdd1bc4113fc5a17f4b148115fc"
        },
        {
          "alg": "SHA3-512",
          "content": "2ac9ebcf9070df6097a4c2f98438cdf824eaceaf5d54ff63bbaa505244cb4b9a40fb05acac5012bdf1d438d31fb6cdc98673b5212014f443b067465173e10eb5"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/secret-management@5.2.1?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/secret-management/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.crypto.tink/tink@1.24.0?type=jar",
      "group": "com.google.crypto.tink",
      "name": "tink",
      "version": "1.24.0",
      "description": "Tink is a small cryptographic library that provides a safe, simple, agile and fast way to accomplish some common cryptographic tasks.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "ffc7b900f028495e98920eea93949120"
        },
        {
          "alg": "SHA-1",
          "content": "2b99f42dccd47a632198a8a81e08fa88c7b57f7c"
        },
        {
          "alg": "SHA-256",
          "content": "463bb0cddc8131379c4f87d8185a0314f651286c28e52a8dea5df206d8a3e175"
        },
        {
          "alg": "SHA-512",
          "content": "b7e621060b15342f43d35a915c872c003c109d92da1c30a16c384439457d2be0bdaa91ca8fa55747a48e6c7f08e740fcc54d82e1a96973d670c4b36be17c9f8c"
        },
        {
          "alg": "SHA-384",
          "content": "e4cb9a512bde8f99ea3595bfee9065b9aa8c68bc835a682bf929ef83c17b548a411a9094e04b9bc4570b51a67c354aa8"
        },
        {
          "alg": "SHA3-384",
          "content": "1d11d5bbac3cdbd73cb6a6429702a8f57d78a8b0d0f032c3591a0ecc814f4f7cceaf6e6625d4b82312116a5c5c28d2c8"
        },
        {
          "alg": "SHA3-256",
          "content": "f0274bd9a5e2d5af46697568f817fd790e5b84071fba83793315f7a0233a914f"
        },
        {
          "alg": "SHA3-512",
          "content": "3da22501ad2f10484aa50aa2a3b77e2babd69b8c1219f79c753e358e8831af6013b180b5e93dede7ea850e814ec6aeb35491fca6a94e79ef6fc39faff4b490c8"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.crypto.tink/tink@1.24.0?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/tink-crypto/tink-java",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/tink-crypto/tink-java/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://groups.google.com/group/tink-users",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/tink-crypto/tink-java.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/vuln-analysis-api@5.2.1?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "vuln-analysis-api",
      "version": "5.2.1",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "3d4f07eba753004c81944ef689b7e2ed"
        },
        {
          "alg": "SHA-1",
          "content": "078e3a9b726f10b8aa7d774480833c1a941df938"
        },
        {
          "alg": "SHA-256",
          "content": "22bda3db2bb576aba25b600e1a8dbdeb81665ed27a64d830301bf7b0f9725273"
        },
        {
          "alg": "SHA-512",
          "content": "aef32a4a9ac96d1c9922ce52cc3462f5778de4f90789941044ddd9658b33523b80e12f9973a1fb6e117e8758c10e0f27f88b067ea24297cd943ee33d87ce990f"
        },
        {
          "alg": "SHA-384",
          "content": "cf77c385ca6c473b65ddd0f659109e63e101394169d75febc15787b9a39f9c370325248ac08bc5de50330992d001a8b8"
        },
        {
          "alg": "SHA3-384",
          "content": "4314d63f33a918f8a27e0bf8ca8da23d5437caa19b9384ac6de531ef5dfee485a166c00073e588f09cca474a86de7231"
        },
        {
          "alg": "SHA3-256",
          "content": "3d7e662814b7a2f85f2c0ac4d3146f6e6acb1f5a08241687c0dbd420a7351234"
        },
        {
          "alg": "SHA3-512",
          "content": "674f8d6d58399de2097e6355956785f783d1765634d4159d6f7de2d85798e66582823f6e65e7c1943716a8c1353796071435a9e72c363ad0ee5136ccca75ef11"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/vuln-analysis-api@5.2.1?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/vuln-analysis-parent/vuln-analysis-api/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/vuln-analyzer-internal@5.2.1?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "vuln-analyzer-internal",
      "version": "5.2.1",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "29be067ee7ba55fed7b9279aeedc4b63"
        },
        {
          "alg": "SHA-1",
          "content": "fe2a3d4a9751615fb900f16df41554289cc6efda"
        },
        {
          "alg": "SHA-256",
          "content": "a9f2ef815667ab8a37dbf452c991813da72cd7bc3970411b3c5923953b095464"
        },
        {
          "alg": "SHA-512",
          "content": "50755c180123b5274fcb0a34ad4e51b7532f761793af9646e29726808288f237ebd8cf485da8d9f9a451bea2ecf1bedcb07f992a7a0032258da93207cbbdf5ef"
        },
        {
          "alg": "SHA-384",
          "content": "02b4b79472825b9c00850c2793819e63982af8b5ee1f763a2b45ce9dbabce8d76c2d06767bda08324d7ec87c673d00bd"
        },
        {
          "alg": "SHA3-384",
          "content": "39a6cfb4c9c2e8ddf1e2b97d3bdf0374c671179ad8b03b9e33e872c6fe87d7c504d009dafec85e7c29822fff100605ac"
        },
        {
          "alg": "SHA3-256",
          "content": "e745db62488e0e6ea0183eb859e87d61db820636fed15c366df3ae99f71392be"
        },
        {
          "alg": "SHA3-512",
          "content": "5535eea1ad8a7402356aa13450d11513b045d9c619b7e52930a0955955f904fa9f9e1262a5b1e08cbacfdff9cafb2f4123d0f9c3e87957d8418076fb0542d4e4"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/vuln-analyzer-internal@5.2.1?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/vuln-analysis-parent/vuln-analyzer-internal/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/os-distro-metadata@5.2.1?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "os-distro-metadata",
      "version": "5.2.1",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "f01fd9bb502d6413197d76eea5e93988"
        },
        {
          "alg": "SHA-1",
          "content": "7bf2e09aedde43f36b83072e22a8c31acec777e6"
        },
        {
          "alg": "SHA-256",
          "content": "6127196d3bba12d606b9ccace1f100ffc46ce290c5d98db342da348bf37ad2d7"
        },
        {
          "alg": "SHA-512",
          "content": "9c2a3af6a5b5ce4ab93d110f6125ade63b3fdf01f46d707db8b47fcd214526878cee39a7d6be07d3233caefe376930eb577c72f560a181fa657991b6a321082a"
        },
        {
          "alg": "SHA-384",
          "content": "29f9f6c7ed80c802a4784f107d84477d0007b1fb44134f4a8d11f24fb6c55ec49c619e4205103609b093a26408073713"
        },
        {
          "alg": "SHA3-384",
          "content": "b59ae9133afffef44787c53ff5282430a51a30510fc7dfd6f7ce0abac92ad80bc1b4f4281f25410ec151d0bef6b0117a"
        },
        {
          "alg": "SHA3-256",
          "content": "db76e85921a080d1355d86440221b62ae90bfe76bcee2c41385fe672f49195a8"
        },
        {
          "alg": "SHA3-512",
          "content": "7e6e2d3c453212447e6d8650aeae460c6477821d015ed640b5a619274beeececd7e5e26f378c7e8170438033313f73032ab6e1f7a5e4ef37cc1805865dc92eb2"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/os-distro-metadata@5.2.1?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/support/os-distro-metadata/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/vuln-analyzer-checkmarx@5.2.1?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "vuln-analyzer-checkmarx",
      "version": "5.2.1",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "ae0fe390a3cfc30531a673af275602db"
        },
        {
          "alg": "SHA-1",
          "content": "25035303f0be75b8eeecc16277c3738f43d2e563"
        },
        {
          "alg": "SHA-256",
          "content": "33f3223bdf46118a78c80b91a9356a896f1f2c2ad7546f1afc6e82c62bbb3cf7"
        },
        {
          "alg": "SHA-512",
          "content": "292c747491a8e2f59ae781d1a7f949476f3fc51f7562b93111dcce33f75542ffa837a86a32c5d74ce2c7cca1619d0fb1411ca0089cc1ae654256cbd5d8973c21"
        },
        {
          "alg": "SHA-384",
          "content": "38e53ce7df2990bd0e09c239dce0e35b13d9988ca44f665c59a1dfd5a57ba70236fa5d8d2d0997cb4735b6ed937a3a99"
        },
        {
          "alg": "SHA3-384",
          "content": "a1ff5b08f751e0fae59dc99ba228356a0db1de2627bc2588997038c49c4e614cb89e7908b65b3aab1486c32aa3757c6d"
        },
        {
          "alg": "SHA3-256",
          "content": "ac809500cf5d9a524368837369a91395f85225a10d7c9714dbfbe3253c9624c5"
        },
        {
          "alg": "SHA3-512",
          "content": "968bce8ad959936c4ca5dcb320bb098039f669972a6cb69f1f1fda7e6b2a48ca91d7f27f0e8611d8bb82ae78fd27b9f3052e5cf43b2d3c750870df168ebf5b2a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/vuln-analyzer-checkmarx@5.2.1?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/vuln-analysis-parent/vuln-analyzer-checkmarx/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/package-metadata-api@5.2.1?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "package-metadata-api",
      "version": "5.2.1",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "5296330a8fa5def1de708edb38c8245f"
        },
        {
          "alg": "SHA-1",
          "content": "03cf09a49a51d6f23a8e9071fafcea390f80f6d9"
        },
        {
          "alg": "SHA-256",
          "content": "d6b92e521c1e09947836284596475464ba58197fbf3d30d2a641dae81eaf3e6e"
        },
        {
          "alg": "SHA-512",
          "content": "e36f1fcb154b9ebdc0acf26b5dd1813a246ecbd02fe7c2713759bbcb64d5d7b900859f58db08c859330e9de2920ecb54a97ac954ce425341bff228855aba1f44"
        },
        {
          "alg": "SHA-384",
          "content": "772ad0d5ba1b28407a546d5fd5645b983bebef6d91391b45e8ebd952f35f5acaab32458588b7184f29bca599c4adbcd6"
        },
        {
          "alg": "SHA3-384",
          "content": "5e5c232ef7346aacb70de5d53828d5e6a2e9216ad614f25062e08d8af8a2b5abb46670b8cd6fc5437057009a3439d642"
        },
        {
          "alg": "SHA3-256",
          "content": "219849e32db0e95b96096c087ed5baf339beb7847dde9e1b82832104ad0258c3"
        },
        {
          "alg": "SHA3-512",
          "content": "8715b8343f3473962ddb3299be86449432af7ea233817edb51bb8c28688544f358d241f9420c0f733ce034ed9fc4c57d2f5baab217b512c465aac65f469240d9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/package-metadata-api@5.2.1?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/package-metadata-parent/package-metadata-api/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/package-metadata-resolution@5.2.1?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "package-metadata-resolution",
      "version": "5.2.1",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "c3ca0c1c1abc6772c54bad1bbd781d3e"
        },
        {
          "alg": "SHA-1",
          "content": "19dafe980cc52823e2c26e0c8fb631cef6ee57cf"
        },
        {
          "alg": "SHA-256",
          "content": "e64d062ec92e79f1a1ba0a5d816771ed50b02c82c4e3ec3296c2736189ef4499"
        },
        {
          "alg": "SHA-512",
          "content": "97202cb7181062dd97dee270e66c36fb3bee22a049ad7c0ca7722e011e40fa6bfc0fb397f68605f4fb01f8629aa0c1a5b4e3cdf932b920bbd8ae258fd3c399aa"
        },
        {
          "alg": "SHA-384",
          "content": "27cdef8e3976e8905853398852f2ab7a0eeba1a4527b3061112e9b111921570c1ff26ada69f33b87b4e1ba576ff3fd5b"
        },
        {
          "alg": "SHA3-384",
          "content": "5500da484a8c7f433767b322e5ab363482ae13901e181043b6a55713d0e69e8c4c821a6ec81e062daf6a102b71a01b52"
        },
        {
          "alg": "SHA3-256",
          "content": "b896c79fb85cf758af4b154fff25d14c07592760be7c4b6d4cf58e4b568f6359"
        },
        {
          "alg": "SHA3-512",
          "content": "3814ef7553f47adf7a649114402841c0f0e8ec6e801595d920b822c22e8638d80d53792cbd482c217409c696dcbe7f7e3f1c05f1d5e33d6aa01ab0696f16b1d9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/package-metadata-resolution@5.2.1?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/package-metadata-parent/package-metadata-resolution/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.brotli/dec@0.1.2?type=jar",
      "group": "org.brotli",
      "name": "dec",
      "version": "0.1.2",
      "description": "Brotli is a generic-purpose lossless compression algorithm.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "4b1cd14cf29733941cc536b27e6aedfa"
        },
        {
          "alg": "SHA-1",
          "content": "0c26a897ae0d524809eef1c786cc6183b4ddcc3b"
        },
        {
          "alg": "SHA-256",
          "content": "615c0c3efef990d77831104475fba6a1f7971388691d4bad1471ad84101f6d52"
        },
        {
          "alg": "SHA-512",
          "content": "d4cd2b33f7c358012ff01db6a13ebfe1e8051a580698bffcd942c47451012cf53ce49a400b1c8bf7502b01e631d79d7c6417202a145622572d79fd145ccde61a"
        },
        {
          "alg": "SHA-384",
          "content": "d6b8ad9d0ee6baf8c3a29c1dc2911eaf207352e2c7de893a0185e987e7eae87827890c1d4dbf31c46f25846fbcdc08bb"
        },
        {
          "alg": "SHA3-384",
          "content": "d16c32130bf6b168ff4c8a3dedf1b17787f8d6f0eab9de21e51ed3ab1e7d85925dd02315972f6ca3a4493357aad545cb"
        },
        {
          "alg": "SHA3-256",
          "content": "962dc76a5c487de8d34308860ab65927bf91f50ccb12f37bffb036a7a05145a4"
        },
        {
          "alg": "SHA3-512",
          "content": "a82a3f79b57d30613606ca51dc432b097fa75aab5c87fb45eabec6d80ddeff1b329100b325bb07005aebaec166952c4599a863d4bfd5a684bad21103a2046311"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/license/mit/"
          }
        }
      ],
      "purl": "pkg:maven/org.brotli/dec@0.1.2?type=jar",
      "externalReferences": [
        {
          "url": "http://brotli.org/dec",
          "type": "website"
        },
        {
          "url": "https://github.com/google/brotli/dec",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/vuln-analyzer-oss-index@5.2.1?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "vuln-analyzer-oss-index",
      "version": "5.2.1",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "2684e9f1dfd0d76d9d8cd59131507e50"
        },
        {
          "alg": "SHA-1",
          "content": "98e476150b6f9f3f81acc1c55af0772540cea179"
        },
        {
          "alg": "SHA-256",
          "content": "ac952d2651180e7077e3e4e5ba964f00bb87e105685424bd5bce2c8aa080f07f"
        },
        {
          "alg": "SHA-512",
          "content": "7130cd7ccd5de995cfc27465ead292ee422e4a9571c405525f50dfbf9a564fc5d7cbd48dd3d863f5079380bfab2ae90cd928fc2ad833ee6b63e66082522a3447"
        },
        {
          "alg": "SHA-384",
          "content": "3831534f6bcc527e4bca6818e68102ebff8a32de37bb1d0a85dc5733e2057b1d522c4db6de0d8f20c0d19a0819db434b"
        },
        {
          "alg": "SHA3-384",
          "content": "4fb7b5cb512cbed7dc29bb5c038c15d87aff734f3f386f4184c169dd060987f3258a5ed3669c1f6b2a9544d5cb284f80"
        },
        {
          "alg": "SHA3-256",
          "content": "abd1014dcd86b4c25324bf436f2fec463f90870b702b43f1a9fbafe2aea7aee7"
        },
        {
          "alg": "SHA3-512",
          "content": "6ac7385aaec9c693d7d620ea36cafebb20022a3377005f32e530ea41eddf057fc910b8015a4a56a5302a97e5ac047b025a5f2e674b576326a09fbe7fb045185a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/vuln-analyzer-oss-index@5.2.1?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/vuln-analysis-parent/vuln-analyzer-oss-index/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/vuln-analyzer-snyk@5.2.1?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "vuln-analyzer-snyk",
      "version": "5.2.1",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "ded8a9f8490f840e2e21d2a64b4240fa"
        },
        {
          "alg": "SHA-1",
          "content": "bc500ceb7ce9195ecd0d4bce8d30838765ed30c7"
        },
        {
          "alg": "SHA-256",
          "content": "fbcf648bf1cc845eb9434a6bd563a74100a25e1d3ff1b9e6151733eca8db54ff"
        },
        {
          "alg": "SHA-512",
          "content": "510a723d149c569629647356e24bb9797e72b8389beec6e0bd998d38cff1c5dce552046e367eb5ccd2e43eba5ede354b4e84a23aecd73466fe44379d9a005f66"
        },
        {
          "alg": "SHA-384",
          "content": "9539658d6467f422c06319dce34abdd796ba55f9487f66b65b9ca8b5875af0ef77e833aace1a78a27226c1871170fded"
        },
        {
          "alg": "SHA3-384",
          "content": "5dc7a15788736c77dbbf1f6c29629bcfec7fd03e3aff72d247ef5bea32a5fe4f19740dcb5c007b6b948d8e68e2867d97"
        },
        {
          "alg": "SHA3-256",
          "content": "8adec4476deb294364e209207adfb6c4f5f94d0231543129466f2338abdb21bc"
        },
        {
          "alg": "SHA3-512",
          "content": "4ecb036564cd594e7fb068922e11819a21796fe88f3ef12cd6f012212dac8e4d864cc5bdd25793e291e890e94271c96861fd0af1eab3880370539aa69c66e4b4"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/vuln-analyzer-snyk@5.2.1?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/vuln-analysis-parent/vuln-analyzer-snyk/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/vuln-analyzer-trivy@5.2.1?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "vuln-analyzer-trivy",
      "version": "5.2.1",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "550566058d844b6159a8cf99ea1cc85a"
        },
        {
          "alg": "SHA-1",
          "content": "bc2c2bdb2d96ebc14105a3e2a5da2ce5be4a12fb"
        },
        {
          "alg": "SHA-256",
          "content": "ea74935a107bb0969c8691594168ca99bf6675635fb037b5cfac21376385dc47"
        },
        {
          "alg": "SHA-512",
          "content": "751d1ef770ab18f900ece987e644eaa79029a10db289d501d620058fb47bedffc983969588becd78b9ff9c3cd368671cb3365fd5adeb88cc2d1b2f879cd0811d"
        },
        {
          "alg": "SHA-384",
          "content": "f4fbb0245d7cd9473f68082b18ba9f26da29c33a6036b8ba57f5377920b8f72dabc17856b0a2d85caa64a2140b7d767f"
        },
        {
          "alg": "SHA3-384",
          "content": "61f59edb6289f34c2abf16970cae724afec2311743f84c94420205844f38204b1af0fe2699c3dbb3604b5c43553873d0"
        },
        {
          "alg": "SHA3-256",
          "content": "2b1480227f6a6064a4e4f4737c3f2dc75f4acdbb1975a6801b3e1c42619a4ed4"
        },
        {
          "alg": "SHA3-512",
          "content": "488cc88ed02dbaac76abb9749fb88d274941a0f70ae6530588a91febdf0f06c9c64a7b555a473b81aa9bd88fd758565d2caa66ed7d44cb41712d899090771c3e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/vuln-analyzer-trivy@5.2.1?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/vuln-analysis-parent/vuln-analyzer-trivy/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/vuln-analyzer-vuln-db@5.2.1?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "vuln-analyzer-vuln-db",
      "version": "5.2.1",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "3b50f10a0dce7d917041212bd73f9349"
        },
        {
          "alg": "SHA-1",
          "content": "e0f1a5cd5b933417933beb5ce24edd41e10d4af2"
        },
        {
          "alg": "SHA-256",
          "content": "4f250de44ea17d5820f0e0d81b4dbd9662ba50aa24677a1a512ee322e965f92e"
        },
        {
          "alg": "SHA-512",
          "content": "e97b3141aae42b25d2667f00652540794e6853fe453af0433e13223681749b855055cd71ed3952e7352dd092c91f70c1ab031f67c4caa9f77c678a16db56bcec"
        },
        {
          "alg": "SHA-384",
          "content": "feafaf42d6e3d79ef27b91af6f82300fcbc4ef22a431b27664657d83d9c6fa3b26030e5e122f11f79bb93c9d03ccc161"
        },
        {
          "alg": "SHA3-384",
          "content": "acd47050e441daf5e77d7309e7541a623c1a151ecd9d2ae1cf763ad684ce22fdca7ed347d1c2abc9a831b3a3cb0d30b2"
        },
        {
          "alg": "SHA3-256",
          "content": "b09e0ed9a7716bd034fadccbd44a56e82ebbf3817ea3e1902150d8e6c6a5ab5a"
        },
        {
          "alg": "SHA3-512",
          "content": "6d66dcf5496dfe075ef00f38e75f183b0e3dcfef0ed26d2a212c7555d3411eba6c879306e71a719599c28862f8b8ef5f0e1477f86fe7d3722004a02c41cb950b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/vuln-analyzer-vuln-db@5.2.1?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/vuln-analysis-parent/vuln-analyzer-vuln-db/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/dex-engine@5.2.1?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "dex-engine",
      "version": "5.2.1",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "abcc642466e333b82cdac45d533006a1"
        },
        {
          "alg": "SHA-1",
          "content": "5206c13d23a4078ccc72e8a1e1367098dc439f30"
        },
        {
          "alg": "SHA-256",
          "content": "d98c1e1b0860435b2c58918fff10a3ac772612f9f53f43393a7e180a2ac6ec09"
        },
        {
          "alg": "SHA-512",
          "content": "572eed903f49c355fbf95122c0cb06a1b3675402912a7fe1012c372eb773ec1e886b5a3e3167bbba7ad7e9f358f8906681d809d7dd04df8ad465c42bd579306c"
        },
        {
          "alg": "SHA-384",
          "content": "2aad84315bc37b4601f747347caaadecd21120443b7d76ad221f35b25fdb16a3643c1faa52ecb0b44d4710cf1a0e9e95"
        },
        {
          "alg": "SHA3-384",
          "content": "ec96ec5bcb158bc287849509364342f921d9998c1e66627fa93403e6e01e7b1d230321e6465fa998f6874223328fb2c9"
        },
        {
          "alg": "SHA3-256",
          "content": "51c454c012ed3abfdf4bc2c7826bbca5857dc281c02df74a4fe04c9f4486a2fd"
        },
        {
          "alg": "SHA3-512",
          "content": "92114604bc2e7dfb338386d39ba79ae997e6e532a61841307a6d5e80a586a9fe00d39482b1beb0ee1d2798fdcce945b719d1857c71a56abafe76d087d114e752"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/dex-engine@5.2.1?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/dex-parent/dex-engine/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/dex-api@5.2.1?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "dex-api",
      "version": "5.2.1",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "8a9ab75e08984949a5198308d444dd48"
        },
        {
          "alg": "SHA-1",
          "content": "0a02c18f55c790059eb6e04f1585f7a01acfd5e7"
        },
        {
          "alg": "SHA-256",
          "content": "67535830ca050d7cf6750c8ad23fe304853aac2da77cbd03de75bde6a94b9507"
        },
        {
          "alg": "SHA-512",
          "content": "b620c38038990ade4f3fc26f0809a6a9a68c660737fc29cd9aac712ab2be35cf90a52625d48f786aceacdbb73c6457636102e7c8d7e959da131d493b44d32331"
        },
        {
          "alg": "SHA-384",
          "content": "c28b40a3d3c54eefb4ea730863a84da1d4ca55c8d8d7c0c21b1264e5811fdfbde21fe768d28d0d8845a66cd6be235c2b"
        },
        {
          "alg": "SHA3-384",
          "content": "a8ff5603441f9d11e611cb1e97d9c5e891eb9bda35fe9ca6aad01b9696a8c0ead7cacb30e856d925e121aea7846725d3"
        },
        {
          "alg": "SHA3-256",
          "content": "8fa19a3750e5a0c3e5d3b196e9d3a7c75322e515814a9a0af8e08bf32d097bfd"
        },
        {
          "alg": "SHA3-512",
          "content": "151ee8fedd56e50ae39b545825d90405712af2e8adbfba1d8d8750fb9a25107339a3d15785cfc261b558c4d2036cefdc35217f715244a42aeb3a93a3ed7803e0"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/dex-api@5.2.1?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/dex-parent/dex-api/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/dex-engine-api@5.2.1?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "dex-engine-api",
      "version": "5.2.1",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "1fe334097cb6ad772623eb9a4a82bbb1"
        },
        {
          "alg": "SHA-1",
          "content": "9f1a2492e0d3eb89319f39a5b94c2c78892f9370"
        },
        {
          "alg": "SHA-256",
          "content": "d574250e863f1a516c64cc4b671e316d9ece8f1a63213ccfa673bd9bfdddff7a"
        },
        {
          "alg": "SHA-512",
          "content": "a101894b25056258163883237e01d4254af24fc8aa55c6b4c3fe41b765f32849bc0fa1de774743cddc3ddaa93d2f2b33cf1564f42ddac56537807828f9701343"
        },
        {
          "alg": "SHA-384",
          "content": "d0ec89689ce6b534b810eb69ddd7368ecbf77a1f9bfa74c549b2408d6e1e75da92598e9c0641f65130538fc10998dbe0"
        },
        {
          "alg": "SHA3-384",
          "content": "d9e0c6f7ba69ae479f255f17cfe5ab8a421968d6637d4e08bb8bafc9326f85df5bfe8cfb0b4387230e3ff76c59627626"
        },
        {
          "alg": "SHA3-256",
          "content": "e65fef89d8d418f0b6707b69eb75604071443f375c7bb4dc39ebf8637a27af48"
        },
        {
          "alg": "SHA3-512",
          "content": "4eecbd60619e2ff0033699cb4a5f4121b646b53aba659f8374a2ed7844e670efb1ff8d82f224911cf821d46a9becf4f7e3cdd2eef62b1a5f59ac989ce5b70204"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/dex-engine-api@5.2.1?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/dex-parent/dex-engine-api/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/dex-engine-migration@5.2.1?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "dex-engine-migration",
      "version": "5.2.1",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "37253850667bfec895a68594bbfd4706"
        },
        {
          "alg": "SHA-1",
          "content": "014a1c08b7adf0d20116cd6f5f5f8497dc98cdf3"
        },
        {
          "alg": "SHA-256",
          "content": "9216b7e87d3dce3efe2865df43206043742459a773cda03485cc9718e5e6e389"
        },
        {
          "alg": "SHA-512",
          "content": "0cc12439cb36ee80573763816fe91551950a3640e4fe0190e06f42f24a6c7060e7f4a69d622364efef8715c235968b4844ce961a771a94367b16cbd4c417a54b"
        },
        {
          "alg": "SHA-384",
          "content": "e403e047b4a71d527800a9a989d0cd09a1d1df039a3fdc92dd4dc1809a19e2f8728bf9f9d0b3ebe419897327ffc81445"
        },
        {
          "alg": "SHA3-384",
          "content": "9534be5b4c18115e0f9636f31b4e4a80dd2d50b645909e6596e0023f452286af224abd3d430e76687c946f71d69f5b23"
        },
        {
          "alg": "SHA3-256",
          "content": "0ad9292ea903549d5f08e597013db645b11cab5f350c78557f393e60e83e9c0a"
        },
        {
          "alg": "SHA3-512",
          "content": "c18edc16cb9cd7db07a966b5ef6a80ad264fa162a7dc918e9d9f712e83a962f204f59c8ab0876c8a0edaf5689c36f50726c472ca55db122a82e07136b9d8fa4c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/dex-engine-migration@5.2.1?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/dex-parent/dex-engine-migration/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.github.resilience4j/resilience4j-circuitbreaker@2.4.0?type=jar",
      "group": "io.github.resilience4j",
      "name": "resilience4j-circuitbreaker",
      "version": "2.4.0",
      "description": "Resilience4j is a lightweight, easy-to-use fault tolerance library designed for Java8 and functional programming",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "5e142f710747b6d4746413aca6757222"
        },
        {
          "alg": "SHA-1",
          "content": "10b06bc2b679f5682f5528b0058ba1a166734db5"
        },
        {
          "alg": "SHA-256",
          "content": "31ab1d15570357271b8c28d82b2f412c5f36a81ac253145aa32177c4f087efdc"
        },
        {
          "alg": "SHA-512",
          "content": "b5d23f8ddabb8d22585e93db1d5ed0b11cb2807c1279b45c74988eaf621e87324cd9a74deaad8b17c6b5a7219f2a17b32550be478c0621cb9fea762f3f5d867c"
        },
        {
          "alg": "SHA-384",
          "content": "826513581ccb029b95c9fb4b579035131a3166e6d99381b7084875fe2997545dfc41956f9449f3f4963d233b71f9d647"
        },
        {
          "alg": "SHA3-384",
          "content": "6f25185fccf89be43a7aef0349ce69a272ef09bc179d8394932bf473cd17650d143cdc6a24a3aaeb77bb806be018b630"
        },
        {
          "alg": "SHA3-256",
          "content": "6de361abc2ecbde73d99917ee11cc808c12f72f4a4c0da8682835675da985f4b"
        },
        {
          "alg": "SHA3-512",
          "content": "3baa1529e89d34844eab621f170ff4ea78771f15bdda9a5ff50ae1095b3d1c579b4ca45bc169c654f8934118325bd82ea6cdb3977d06d76218b2c128591b9a44"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.github.resilience4j/resilience4j-circuitbreaker@2.4.0?type=jar",
      "externalReferences": [
        {
          "url": "https://resilience4j.readme.io",
          "type": "website"
        },
        {
          "url": "https://github.com/resilience4j/resilience4j.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.github.resilience4j/resilience4j-micrometer@2.4.0?type=jar",
      "group": "io.github.resilience4j",
      "name": "resilience4j-micrometer",
      "version": "2.4.0",
      "description": "Resilience4j is a lightweight, easy-to-use fault tolerance library designed for Java8 and functional programming",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "b89d1f870641d912bbb350339b63bd94"
        },
        {
          "alg": "SHA-1",
          "content": "4d81d22237b84c5c075f805a0c7d4640bbd7ca33"
        },
        {
          "alg": "SHA-256",
          "content": "728613147bbbc0c329f69f5423b760778322e2f9af345cb0bd69b3fc89b17e88"
        },
        {
          "alg": "SHA-512",
          "content": "ec0f842b57a23b8536f9672c0c3eeb6831c9e9951be5862141ee029c6ff51994e9c3a046343ae985286acb3ab35766a770507fbaf35735aafc269fb28cf4fad4"
        },
        {
          "alg": "SHA-384",
          "content": "2187703d3e99f7f8b86f5d3280b3a247721752c38ef0dab42962729bf3ef6d88aff5eb34c6349e4b3f9e524d77ff1433"
        },
        {
          "alg": "SHA3-384",
          "content": "38f298fca66df6f9421b7cc92cfa13a537c49f57aa3651dd680684ca452fd764bc2e51e0d00b5774eb45b6126ebcf0da"
        },
        {
          "alg": "SHA3-256",
          "content": "2a57abc1c0ab88009c34b48f4135ce4e23974fc37deb33b99e4310cb8f0ff0a4"
        },
        {
          "alg": "SHA3-512",
          "content": "8b0f573a05168383121e9590c73c3263b43e9fc8f84b6813034baf07841d23661a965aa0abd348bc1c5b0166c9d3e50b896c8462b9d9381d60a7d1c08a10c9fe"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.github.resilience4j/resilience4j-micrometer@2.4.0?type=jar",
      "externalReferences": [
        {
          "url": "https://resilience4j.readme.io",
          "type": "website"
        },
        {
          "url": "https://github.com/resilience4j/resilience4j.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.github.resilience4j/resilience4j-bulkhead@2.4.0?type=jar",
      "group": "io.github.resilience4j",
      "name": "resilience4j-bulkhead",
      "version": "2.4.0",
      "description": "Resilience4j is a lightweight, easy-to-use fault tolerance library designed for Java8 and functional programming",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "dfd76f43ef9c2d7912a99c128af344bb"
        },
        {
          "alg": "SHA-1",
          "content": "eb8ba5861207fcaec13468eab5a4dbe1d9e9e66f"
        },
        {
          "alg": "SHA-256",
          "content": "d718b601cedd94946c7572caafac1d93f5c9695bad61e0e4b6518e3f5f7c6ccc"
        },
        {
          "alg": "SHA-512",
          "content": "00b42a5110c37bcef4df56a807882f1d6919ceb9fc53e0daca2564258d7dafd299925f2f5ef9ac65c076c2757a934f48e88028f7bf839a956d44350ecfd4d28e"
        },
        {
          "alg": "SHA-384",
          "content": "03455782043e549dcb307f728281cfc8ecb4a8d6dd96d944db0d8cdb9bf80bed43cef1370b65f32e71dc52505a0803f1"
        },
        {
          "alg": "SHA3-384",
          "content": "af46a0541107931e8f5f7995d0f40f35914c66b8944f56417aff9605d29f888f571a1afcca1ea81f384eb747cd350e40"
        },
        {
          "alg": "SHA3-256",
          "content": "b00fd36b17bfb3db6b0ee095f9980af4829df095fdf326f78b0a26163a4d3916"
        },
        {
          "alg": "SHA3-512",
          "content": "de367c0a1d1bfe4c38333f8668567416adee1eba420e80c4524842180da9e2dc09579d4b2063edbab2da1e468f1fd093e42adfe174b0afa372cd33f421f9146c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.github.resilience4j/resilience4j-bulkhead@2.4.0?type=jar",
      "externalReferences": [
        {
          "url": "https://resilience4j.readme.io",
          "type": "website"
        },
        {
          "url": "https://github.com/resilience4j/resilience4j.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.github.resilience4j/resilience4j-retry@2.4.0?type=jar",
      "group": "io.github.resilience4j",
      "name": "resilience4j-retry",
      "version": "2.4.0",
      "description": "Resilience4j is a lightweight, easy-to-use fault tolerance library designed for Java8 and functional programming",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "0cdac2f0d96184c09dfe3e4f1705e963"
        },
        {
          "alg": "SHA-1",
          "content": "7072ed9351dc3a38a7c5a4a1ca21d3355e1f6453"
        },
        {
          "alg": "SHA-256",
          "content": "13cd52c89b69b9dbd68188877f16bdbeb3ae524d351a2d947f31ae07684c420a"
        },
        {
          "alg": "SHA-512",
          "content": "1e60cc69111eee4fe1d18d9c36e1baad62cc6ea06aa065cdce461fbd3cdc8c625f4ef818750def5b31469a80af2f8f52d4441aa946205b3203cafceed55655c0"
        },
        {
          "alg": "SHA-384",
          "content": "a1373917623fd647255c0c29533604d69d4f8395b8b7c50c95830447871d52d983df4a16a58990f9f7d6c242fdbb2903"
        },
        {
          "alg": "SHA3-384",
          "content": "b405c2ddefb6b78aa8d936c5c581e62cfdefc719c892da1625d82a624a6ac5afc60aa78251ccccbf056e8b6b4a4ce766"
        },
        {
          "alg": "SHA3-256",
          "content": "320682e81e53f54397c029244f5b1ee1b0cd589f88e57b00643e300c924f4623"
        },
        {
          "alg": "SHA3-512",
          "content": "9bc37b4a7fc968fc2c2f6f17b1083208b95a82aa5f826974a110cd9b057040071f02b850b32099f7657b20e36198da8eec5dd46e203a574338428d2f84d0845e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.github.resilience4j/resilience4j-retry@2.4.0?type=jar",
      "externalReferences": [
        {
          "url": "https://resilience4j.readme.io",
          "type": "website"
        },
        {
          "url": "https://github.com/resilience4j/resilience4j.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.github.resilience4j/resilience4j-ratelimiter@2.4.0?type=jar",
      "group": "io.github.resilience4j",
      "name": "resilience4j-ratelimiter",
      "version": "2.4.0",
      "description": "Resilience4j is a lightweight, easy-to-use fault tolerance library designed for Java8 and functional programming",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "6a450ca57c1c0172ffc32c2355d4885d"
        },
        {
          "alg": "SHA-1",
          "content": "4017079c1f73b0cc73fcc53a25306f3f8743e64c"
        },
        {
          "alg": "SHA-256",
          "content": "09a3c33cced3e1135cefda8667914b32b7304429c509b07fca771bd92d0c1780"
        },
        {
          "alg": "SHA-512",
          "content": "d50e1bcb0700963bfe2b4802301cdf2156a553f29caae07aa8192a44e0a2abac703fa190b1527a9aeae1412ae9215d701b494220ee3f3edfdeb9d3b3652f71ae"
        },
        {
          "alg": "SHA-384",
          "content": "6ee2786d1c40380381393adb6beef91b978bc9ba66647b16316ab448e3c97e2eb486521ebfdb965c5db6aae7c72e0fb6"
        },
        {
          "alg": "SHA3-384",
          "content": "189831d7d92301ca5f1211909d8787cb4a2fa6d9f267e3af9b0d9900dfe718ec75130d26110c21b34c59674e1f2720e4"
        },
        {
          "alg": "SHA3-256",
          "content": "8ac8f08bc4c21b1dcff1e8561364e5c7149523cdd658cecc426eb9fcfc4114d0"
        },
        {
          "alg": "SHA3-512",
          "content": "c078763d56a7190c102719fac6c012bd4c4d6e4e1b61c8201a8ed9909b4c7736c9d681163a0c46d99251ac1d2186d158ffd6539666bccf8b5ac759825dc2f755"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.github.resilience4j/resilience4j-ratelimiter@2.4.0?type=jar",
      "externalReferences": [
        {
          "url": "https://resilience4j.readme.io",
          "type": "website"
        },
        {
          "url": "https://github.com/resilience4j/resilience4j.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.github.resilience4j/resilience4j-timelimiter@2.4.0?type=jar",
      "group": "io.github.resilience4j",
      "name": "resilience4j-timelimiter",
      "version": "2.4.0",
      "description": "Resilience4j is a lightweight, easy-to-use fault tolerance library designed for Java8 and functional programming",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "2d421c59f3f87eaee243997f529cf5b4"
        },
        {
          "alg": "SHA-1",
          "content": "28351433fa75cccb0e0c8154676a427b5b4a3340"
        },
        {
          "alg": "SHA-256",
          "content": "946237017a5f52a878cfad8227c3eb6b957482be30d25a409cb8004e13237d38"
        },
        {
          "alg": "SHA-512",
          "content": "74e100e06388785058cd506459a0190bef879953dfd2ae2e3f16dcc83e76c5ecff62880d8ac7b96fcdf4087e863f4f3423b44290010a15a5b64c60808d2544f1"
        },
        {
          "alg": "SHA-384",
          "content": "586453333996b3d2b8150277eb41dbb7e2146b8e2a877e7cf8932cdddfe8a0e7c690335ba6e53e7051b0265a5016ecfa"
        },
        {
          "alg": "SHA3-384",
          "content": "b99c965e83e8f57bded1e66856b1278525947bea15c905dda5e13333ab9b82ebc5d0c27f14e6a8961ee32a0861995772"
        },
        {
          "alg": "SHA3-256",
          "content": "8709bedf51af90c9ee3c31b64fb893a199ef5defe54670507825b15551312737"
        },
        {
          "alg": "SHA3-512",
          "content": "865aa0e62b990fda80679824ae9ba32b631fe6cd72ea437201e0ce43bbae1b3a5c23fcdfe7454736822a7e6a38ba68456494f694775fc7b06a1077847357e988"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.github.resilience4j/resilience4j-timelimiter@2.4.0?type=jar",
      "externalReferences": [
        {
          "url": "https://resilience4j.readme.io",
          "type": "website"
        },
        {
          "url": "https://github.com/resilience4j/resilience4j.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/file-storage-api@5.2.1?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "file-storage-api",
      "version": "5.2.1",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "c196c195a0840f072ef543c372d6890e"
        },
        {
          "alg": "SHA-1",
          "content": "0760f37857a7f8e99b6a0c8bcd08455588bb7a6f"
        },
        {
          "alg": "SHA-256",
          "content": "91d52680970b99b21f1d8bed6b7b1be7bf8f2fcbf1f021f48c0d221a8217a89c"
        },
        {
          "alg": "SHA-512",
          "content": "fdcdbd133e21ee67a5e14d4ebec4f68454383be9e06a3e300fe8831f21da453657f34d80e8c29a4e4fd38100d91154df8121bd89110a92cda07ff9071efa5801"
        },
        {
          "alg": "SHA-384",
          "content": "2d063775f2326d4cf1578cdab846e5ea4ee690eb3c15a930f06064758932673274f1932b7aeeca3d6cced48aec56bce7"
        },
        {
          "alg": "SHA3-384",
          "content": "343f3d0b299a7d4e5b39123712ea23a7325088903aac18b2076484c03f472cd679244defc1ec74bf850d1355535fddc5"
        },
        {
          "alg": "SHA3-256",
          "content": "aba96481029be66ba4a04f2151431686a5b992ee268b605fd1e01efc91a62221"
        },
        {
          "alg": "SHA3-512",
          "content": "f62f2cdf6f2925ea24fff5ed530d54e799a8e84f9a933f1ce1db3e81fe1e92589f54693fe4f0eb5a93a8a13292dab19d5efb9a3c611691a1c57acedc5397e073"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/file-storage-api@5.2.1?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/file-storage-parent/file-storage-api/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/file-storage-provider-local@5.2.1?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "file-storage-provider-local",
      "version": "5.2.1",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "554c6a80377e12b63f9bbb85c8519eb4"
        },
        {
          "alg": "SHA-1",
          "content": "6bf41e17cc52eaedc6f01c3523b26b63b6ecbf28"
        },
        {
          "alg": "SHA-256",
          "content": "826ece718007a3fb5ad59baaaf136fdbd137da4bdd2393cf8fb4b77ceb12f447"
        },
        {
          "alg": "SHA-512",
          "content": "3f7fb0a66ce50b1e7642d55b8ef97fb98f7157b8e3f7c62222b89f8e1d815ca30acbdbb5d143d3b3e90c5092784413e32d3ae5e58a638001f4d5483648e65d97"
        },
        {
          "alg": "SHA-384",
          "content": "9af6883a7d7edf44838bf75bb5f4eec299ff4c2c492523dd502447b086750f588310edde5dd527dbee0345ebf86652cc"
        },
        {
          "alg": "SHA3-384",
          "content": "e4e303b8080a54d6b4d50b48c98b19417eccc5cb1d1553f43c70b5ae562d2a4b8e4dcdbff7b6984ee45fe57f4e6283f1"
        },
        {
          "alg": "SHA3-256",
          "content": "4990b2c862cc7d45a1e45b91e1766f192dddcbb770b01df9eba7c36c2dbc84be"
        },
        {
          "alg": "SHA3-512",
          "content": "dbc452dbe70eeb7f5ecdb334429ef11cdea801550db5545eff7ecf2963ae2469bfbf1574fa8dc01b7cbb6e278211e44524ed7c320e03acc4daf8005886c5538f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/file-storage-provider-local@5.2.1?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/file-storage-parent/file-storage-provider-local/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.github.luben/zstd-jni@1.5.7-23?type=jar",
      "publisher": "com.github.luben",
      "group": "com.github.luben",
      "name": "zstd-jni",
      "version": "1.5.7-23",
      "description": "JNI bindings for Zstd native library that provides fast and high compression lossless algorithm for Java and all JVM languages.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "0211221aa3d44f0c68a21a29836eea8b"
        },
        {
          "alg": "SHA-1",
          "content": "3eb4d0184f061471d9266b4db5ba3e23367c7a73"
        },
        {
          "alg": "SHA-256",
          "content": "7d2532cec67276bfde31055025937eab34faeda536867482003e2903808af300"
        },
        {
          "alg": "SHA-512",
          "content": "1bff194019dbe663dac2292cabc735c83619a923f64127f4b55e066e8594d8cc58cebbbe53476d08f0580b823d32486bb111707461d3ee62fa557a23c6acf270"
        },
        {
          "alg": "SHA-384",
          "content": "14508f0971a7b251b5bcba1ac77113b1a613b8e99fe213e81a04f421b307191762302ffe978646211f8d55afe19b6d9a"
        },
        {
          "alg": "SHA3-384",
          "content": "c8bf71a086269dd0a13e8a1961f679f744bb03f4548dbe10fe81ea852a49c929fb3524b235a0262077ab4aebdb6019ca"
        },
        {
          "alg": "SHA3-256",
          "content": "9db189f492fec2a6700b4f9faf08a22ceb04af6e89c5471117f1813b03d8435a"
        },
        {
          "alg": "SHA3-512",
          "content": "6e0031a6792b72b317917ecb296a9c845bddf80df8046d0e983e9f27b0753423b73d4bd51e96d312c57a780ce33900ba71c0199bdda31ec9b88f44bfa2228a66"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause"
          }
        }
      ],
      "purl": "pkg:maven/com.github.luben/zstd-jni@1.5.7-23?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/luben/zstd-jni",
          "type": "website"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/file-storage-provider-memory@5.2.1?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "file-storage-provider-memory",
      "version": "5.2.1",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "3e958ff7bdc7222b6323ee1cae10fbc4"
        },
        {
          "alg": "SHA-1",
          "content": "efcf97bf06e5a324449ec1e20af8a6830fed2b0e"
        },
        {
          "alg": "SHA-256",
          "content": "5b1ba77576a9de83cbd87006ed663710ca69302f63843352d4f58c4ac09b9067"
        },
        {
          "alg": "SHA-512",
          "content": "933f86c45fc899484337d57f9f13ba6afd9e741d62370bf6dfca4604d987c6256199162e14d160c0d4c21a2a0bc1101ebc856c7db14326b0a0504052630c5bc7"
        },
        {
          "alg": "SHA-384",
          "content": "a8947605e1c4eb6e0ca769dd721d96ff660a1146b60a772f6dbb911c8861ca80644b7297132bb07bc99df206ed613d2f"
        },
        {
          "alg": "SHA3-384",
          "content": "b310eb603a1a418d8732165fc15f5ca2e253446c54ca9ca38a0c3cf238db1c525e109986d56882bcb219ff5eed0215ea"
        },
        {
          "alg": "SHA3-256",
          "content": "20aa0574e2f9c8c98822e43985daf827e366d7d15bd25f4524a2c12f1d8dc8b6"
        },
        {
          "alg": "SHA3-512",
          "content": "734eee9a3b854ff9b557135244d4ba5c1efb04931d353dab71082aab90e32b60b5d4012b61cfa1859a6c311545f7fa381876200b2af4d90172770c1bf67ee613"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/file-storage-provider-memory@5.2.1?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/file-storage-parent/file-storage-provider-memory/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/file-storage-provider-s3@5.2.1?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "file-storage-provider-s3",
      "version": "5.2.1",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "9c6e9e6993275cd129f3042f65a23cdf"
        },
        {
          "alg": "SHA-1",
          "content": "a1edf1cb97366b778398718d3e751756db684267"
        },
        {
          "alg": "SHA-256",
          "content": "9d446d292e9b7a94ca80698fcb1599fd37133291b0c49f703040f690c3534017"
        },
        {
          "alg": "SHA-512",
          "content": "63f55dd827c7ac56a7b37483a0b01b73306ecb4bab646b2a8197a965c7d68a212b511b717cdd5210fbc2c32180ab47ae32eaf5b9aba0c50b63c3d7d29d23cbc2"
        },
        {
          "alg": "SHA-384",
          "content": "47f8fefc8359688cd945b2f6800b3a6a0e943b37c5da19bc754a0074ba8e3e71430712fc9f1f07dfb13fd552f1414530"
        },
        {
          "alg": "SHA3-384",
          "content": "a3c090f5e1f57d570e6b1d72ec47bc05e4cea758e429fe927410759df72f398dd2bb1529e080fe744b2288a8a19343ea"
        },
        {
          "alg": "SHA3-256",
          "content": "8531f046203e0b25a7ce4f890d479988a5e2fcb249327da4d9e6f75b1d6f68f3"
        },
        {
          "alg": "SHA3-512",
          "content": "a48e2ee47e0dc3b201110dc401b4290d947dc63d2940307d87d76566cfdd1ce934a164600ed5b3c8ab5e409652267ca70837361c5e174161974343e6bf0cd407"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/file-storage-provider-s3@5.2.1?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/file-storage-parent/file-storage-provider-s3/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/kev-data-source-api@5.2.1?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "kev-data-source-api",
      "version": "5.2.1",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "dbaa86385e47942017a62f7969298ba2"
        },
        {
          "alg": "SHA-1",
          "content": "e74b6baa6b317d5843e869308b474aaaf16a0963"
        },
        {
          "alg": "SHA-256",
          "content": "4023121bf79af3212d867ad741f9ca43777145da26eb5f1002d3625d7e586da4"
        },
        {
          "alg": "SHA-512",
          "content": "d9345d23795d7df124ddf71c7aa07fa864afa6a0e37ebf3367ab92a83291d371eb9a2f0a2b9115c35b922c98d87e5380334695bf4c70862c0d3888b5ed4e467e"
        },
        {
          "alg": "SHA-384",
          "content": "972beec1a69893b4154d9bfb37be1843266ff3eaa10affb48636e82a55bceedc904bc370b23bff1c81f5b1374157e4f9"
        },
        {
          "alg": "SHA3-384",
          "content": "03176193aaafab6fe457e65d936776490d71a8f33ccd16df83cfb3ed838d3f13116996ff2c9eeaa0d950c65237cdb967"
        },
        {
          "alg": "SHA3-256",
          "content": "27e71a91a64156f9769d3178752e330904056bdf3ae1554fa0778e3b3e72a68b"
        },
        {
          "alg": "SHA3-512",
          "content": "d4807008c4506fee6481625e50f9f91b2d573c57a18dcb86aeb9f1361df3b6432d5d0c22d450b9a6bf5880d1cecd2eb8d34b965be8f849f6cbdf581029b55532"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/kev-data-source-api@5.2.1?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/kev-data-source-parent/kev-data-source-api/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/kev-data-source-builtin@5.2.1?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "kev-data-source-builtin",
      "version": "5.2.1",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "cb8bc78c7db33e985e486f399559463a"
        },
        {
          "alg": "SHA-1",
          "content": "b9ff9a47a19c0fc1cf2d659713f7b274c3d6e69b"
        },
        {
          "alg": "SHA-256",
          "content": "942f6917455605d189f13379a95c1ca79ba9e834e7420cf29077985f9b73111f"
        },
        {
          "alg": "SHA-512",
          "content": "f2e178c82302da057401ec79410fcc31b93f90356005ddac3b82ccd55a9277df117058fc74875aec0891ebd7eb8748c6648b4bc0fa5645559c5d950ab1bead55"
        },
        {
          "alg": "SHA-384",
          "content": "3977945f9d0d942217b5e488da0fe93beb2446369f21dbc24761aeeca443caabf9ea0786bef51c021290c6991b24cf9f"
        },
        {
          "alg": "SHA3-384",
          "content": "0305dd91cb454326c0bdd0a6550cc0406cd6cd2535d5a5612403855285f44faba74457c1095a50fcde86b1430157f064"
        },
        {
          "alg": "SHA3-256",
          "content": "8bdc8722a501d058f6a07a130e36fc0d81c5c54a68e67b69b71fb6143220598e"
        },
        {
          "alg": "SHA3-512",
          "content": "086b3c52de79d42c50fa978945a4ff8f26f176eb0750d976d9e11e09c7b388f32dd7baf910950891f6618c1578ac7e6dbc401ab7f1d00eff0e9e5d68aaf8750e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/kev-data-source-builtin@5.2.1?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/kev-data-source-parent/kev-data-source-builtin/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/vuln-data-source-api@5.2.1?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "vuln-data-source-api",
      "version": "5.2.1",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "462b298c92e6b23254260086dee84d4f"
        },
        {
          "alg": "SHA-1",
          "content": "5afea372f1a284ec60594ff8338a0dd1b1081118"
        },
        {
          "alg": "SHA-256",
          "content": "cc14864e84dc977bfd0661aca469174456aac5aa9ca4fea639612c255fe8a1dc"
        },
        {
          "alg": "SHA-512",
          "content": "310c22c47ca751ad7d4802d76c018468387c29fd7a4bc7a7a01ea0519b562d5e53126e1526587e4d1d6020352c520141c0ed4f9b5252ada7aabba9e49a716707"
        },
        {
          "alg": "SHA-384",
          "content": "a274f7fb58a1cb567ad09a44ecb50249782522c4c9e771b5495939324292da7f329b8c3ea8265d17e1bbdd36c9cf963c"
        },
        {
          "alg": "SHA3-384",
          "content": "713ace4a978c4d5f1e8b3ba4548360eb330c6edcb6bdd3520b95e66330fb8eb5df214b79fb2b8687519dd2c1ac990004"
        },
        {
          "alg": "SHA3-256",
          "content": "a4fd6cfce8eb2b46d496edb0c22225b7613bd07bfa9285587fa97dd4307645ef"
        },
        {
          "alg": "SHA3-512",
          "content": "0745529a73ad8409333795bb5c512cb3d535134542cb3f59858ad67cc3e294ecb7121254aaa7343896387c06a163cc8e1d64a051407e7c6eed2300ddb016330c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/vuln-data-source-api@5.2.1?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/vuln-data-source-parent/vuln-data-source-api/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/vuln-data-source-github@5.2.1?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "vuln-data-source-github",
      "version": "5.2.1",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "67320615c6e446bd3eecb7da6664cef3"
        },
        {
          "alg": "SHA-1",
          "content": "cc7c7938b92ec92308cbc48300ad1d4b1949ee22"
        },
        {
          "alg": "SHA-256",
          "content": "bfa58cc106fa7c558b96ebf51fe7f98f9a3334bdaef228679e36e9910227a9f0"
        },
        {
          "alg": "SHA-512",
          "content": "9c1ae3a0bbcb9c5bdacd472b37bc8628216db691d36c3656b86161fd63b2225bb112db117bc974a98b3aacfe9eb8ad78906c4c550182e4f6f9c28acbcc76f4d7"
        },
        {
          "alg": "SHA-384",
          "content": "ca3f94dfb0ab04c3e6d43da526be1a543c4551c83502f079f8764252083519f289e3f9d43e978fb3a25c465e391c7d92"
        },
        {
          "alg": "SHA3-384",
          "content": "6709726277138206cf6c98d9e3a8dbedfbf78916d6e8e5364214e78266cc02d73bfc249a65265c162b2267ad3403beb2"
        },
        {
          "alg": "SHA3-256",
          "content": "82bfb4c56f0e68c45809f313ccc531afb31f019762cef2ac174b0bb825e67876"
        },
        {
          "alg": "SHA3-512",
          "content": "03ae417db5e70835337a59aacb465e39367e3e06a44e36fb31ec3877082db0e428950f3de64c7d26ef7fc57b8d2007f581df7c83668708aeed128013a98378cd"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/vuln-data-source-github@5.2.1?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/vuln-data-source-parent/vuln-data-source-github/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.commons/commons-lang3@3.21.0?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.commons",
      "name": "commons-lang3",
      "version": "3.21.0",
      "description": "Apache Commons Lang is a package of Java utility classes for the Java lang packages, classes that could be considered standard to justify their existence in java.lang. The code is tested using the latest revision of the JDK for supported LTS releases: 8, 11, 17, 21, and 25. See https://github.com/apache/commons-lang/blob/master/.github/workflows/maven.yml Please ensure your build environment is up-to-date and kindly report any build issues. Starting with Commons Lang 3.9, we target Java 8 and use those features. For advice on upgrading from 2.x to 3.x, see https://commons.apache.org/lang/article3_0.html",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "74a94a62f74cf1566767a085b3b9c758"
        },
        {
          "alg": "SHA-1",
          "content": "7bad013a5acee0a078d75fc352a906baa57acb74"
        },
        {
          "alg": "SHA-256",
          "content": "a2af247ec4db6eb8947e18e23e0433e4871a7c5d0a40e1f92e46ede54ae1defe"
        },
        {
          "alg": "SHA-512",
          "content": "839bd4a0e63a82334c46f7acad520dac56900c8c4ea3e663811c1e8863de416df2bb8ff334c407caf6cb6d20fb892c6c730d7f271bd59c5c973611ed2f890b37"
        },
        {
          "alg": "SHA-384",
          "content": "39615b3093cf020161bcdfa6813d0d608892b6a69b6e7d413bc27a9b8c2e4500cb4d0a64f1b2ffd9d0c3b9f611687872"
        },
        {
          "alg": "SHA3-384",
          "content": "54b8b1d35b30254d17751cd0ea42fd51cb8d6511c9aa761b76752396af67e14b16bce998aa8d31da9faa7846ee9cd478"
        },
        {
          "alg": "SHA3-256",
          "content": "d4c089ab0bf23ff52bfb24f2bb9e2cb629b66efcd43fa263fe4ae5affcbc567f"
        },
        {
          "alg": "SHA3-512",
          "content": "8bf09495990791415be6bbb9f72f2f3f40f4517b2b56501329e8c5ca716381c1858ea75a734b86346b37d8f5a7697f3361c204f3affe3f8fee656ee68a72480f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.commons/commons-lang3@3.21.0?type=jar",
      "externalReferences": [
        {
          "url": "https://commons.apache.org/proper/commons-lang/",
          "type": "website"
        },
        {
          "url": "https://github.com/apache/commons-lang/actions",
          "type": "build-system"
        },
        {
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2",
          "type": "distribution"
        },
        {
          "url": "https://issues.apache.org/jira/browse/LANG",
          "type": "issue-tracker"
        },
        {
          "url": "https://mail-archives.apache.org/mod_mbox/commons-user/",
          "type": "mailing-list"
        },
        {
          "url": "https://gitbox.apache.org/repos/asf/commons-lang.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.httpcomponents.client5/httpclient5@5.6.5?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.httpcomponents.client5",
      "name": "httpclient5",
      "version": "5.6.5",
      "description": "Apache HttpComponents Client",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "d8cc8b781781dc447050138b9cd7bf68"
        },
        {
          "alg": "SHA-1",
          "content": "4540cf4269d2e4a713a434a01e195af29e1ef9e1"
        },
        {
          "alg": "SHA-256",
          "content": "a10b555f7c85a720d1011a086d679d854b155816cde91a40198cc98c2b0867e8"
        },
        {
          "alg": "SHA-512",
          "content": "d31ba483b5de27071efe116b3a94913f90d0f410e71809c68d3142cf4968f289cb7dabe423320770d6bdc56acfe8d2943f8850b338e73d61afd4182bf700ffb8"
        },
        {
          "alg": "SHA-384",
          "content": "91514a155a1ba9e4ca14f39f408acbca061efe3602fe3a7875ab8200589bff72adec28eace8460379b7e7aeef6459d18"
        },
        {
          "alg": "SHA3-384",
          "content": "c4f5791a47f959530943619c01381ced385910caad4a3e3389f5cbcaa30ac752f0d5c361ca55d9b14296a6747392c18a"
        },
        {
          "alg": "SHA3-256",
          "content": "00ae74969636542a25131300b1da43702daa0a22e446aeb07b2a088d0290882f"
        },
        {
          "alg": "SHA3-512",
          "content": "1b730aca7330167292d6325c27f2ec6964d751fa7d1fb84b170ca3fc635ee2ad0a97102be01b1328d7f2ed6f996576ba98bbc321f0e3be561ee864749679a63b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.httpcomponents.client5/httpclient5@5.6.5?type=jar",
      "externalReferences": [
        {
          "url": "https://hc.apache.org/httpcomponents-client-5.6.x/5.6.5/httpclient5/",
          "type": "website"
        },
        {
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2",
          "type": "distribution"
        },
        {
          "url": "https://issues.apache.org/jira/browse/HTTPCLIENT",
          "type": "issue-tracker"
        },
        {
          "url": "https://lists.apache.org/list.html?httpclient-users@hc.apache.org",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/apache/httpcomponents-client/tree/5.6.5/httpclient5",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.4.4?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.httpcomponents.core5",
      "name": "httpcore5",
      "version": "5.4.4",
      "description": "Apache HttpComponents HTTP/1.1 core components",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "1d7150db6792387e1f39dd626060c746"
        },
        {
          "alg": "SHA-1",
          "content": "fb236f682f1eaae1abec9b60e940158ac369f15b"
        },
        {
          "alg": "SHA-256",
          "content": "b08e3c3a440fec2029e89980134c7c787dd6796454641ad1eafb81478d7e8b0b"
        },
        {
          "alg": "SHA-512",
          "content": "9c341b5529705d56e13d74c4ed91b3b3afdd2add5b4783ebc0488f7c5c1299b12eaa827b92b1ebcedf4fd2516fb5cae96f8becbe604749fa47a928d42b999bab"
        },
        {
          "alg": "SHA-384",
          "content": "dc2cc35dfaf7dc67ebc776ccbe4300f580f587db0c192d9c177f0020b7ecca0c9dc5e2932d260daac052b302336da012"
        },
        {
          "alg": "SHA3-384",
          "content": "af970fe47d3244c602bc966c727ebbf67073c4fee4c7ee0b957cbcfb840b692b9f2a1f8c318870179bb8d033e8700535"
        },
        {
          "alg": "SHA3-256",
          "content": "3f80bf2a9c2120c21f955e8c5976e591c55dff53a0915e65ba46e981c7164ea7"
        },
        {
          "alg": "SHA3-512",
          "content": "8b85ec771c37aaaecf35b275f1933d799024be69546a3568bfa85b2db3ba3738bccf8c5624f1412785a8d907bc2ca740beb3779238a72b20761c8c78c59bf1c9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.4.4?type=jar",
      "externalReferences": [
        {
          "url": "https://hc.apache.org/httpcomponents-core-5.4.x/5.4.4/httpcore5/",
          "type": "website"
        },
        {
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2",
          "type": "distribution"
        },
        {
          "url": "https://issues.apache.org/jira/browse/HTTPCORE",
          "type": "issue-tracker"
        },
        {
          "url": "https://lists.apache.org/list.html?httpclient-users@hc.apache.org",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/apache/httpcomponents-core/tree/5.4.4/httpcore5",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.httpcomponents.core5/httpcore5-h2@5.4.4?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.httpcomponents.core5",
      "name": "httpcore5-h2",
      "version": "5.4.4",
      "description": "Apache HttpComponents HTTP/2 Core Components",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "8f56560c50101d9422ca597c48973c9b"
        },
        {
          "alg": "SHA-1",
          "content": "90c30ff56e226bdb96cf5c987aebc42e1a8a9f45"
        },
        {
          "alg": "SHA-256",
          "content": "9a61441889f9b222ce99581977cc549b4dfca7ac9d2841582c1e57a31fa65b48"
        },
        {
          "alg": "SHA-512",
          "content": "6fd81dffd73dee36e85d676f587738d7a31c5b35bfc2ece82fd749cca9894b997ad1b9264bfd9ce4a92ffeba5751d0eaee4b106b03ce7ef4110e6bb4f3bb8eee"
        },
        {
          "alg": "SHA-384",
          "content": "28a1970490d83c9ebaba10d31ea9a933563f2d99db7eb800264e9f7da61e9d80b19ae9ea898bd2457577c0c8daa3cd1c"
        },
        {
          "alg": "SHA3-384",
          "content": "b47195f8b614c9225471dd05cad344ccab47d5716141807e5414894af4cbcb70e22095694fc59d85b36dbef637f8c509"
        },
        {
          "alg": "SHA3-256",
          "content": "408ac7a375ebf2de02ace34081f259d8f62188ff32514e38a754ee717843ef4f"
        },
        {
          "alg": "SHA3-512",
          "content": "db379c65037f375bc79c74a017815af3a83c296bdeec3c2654688b3f354eb16d4a669870201078112aa9975a7088bec36d80a727c937b84d1d78536a9a715770"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.httpcomponents.core5/httpcore5-h2@5.4.4?type=jar",
      "externalReferences": [
        {
          "url": "https://hc.apache.org/httpcomponents-core-5.4.x/5.4.4/httpcore5-h2/",
          "type": "website"
        },
        {
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2",
          "type": "distribution"
        },
        {
          "url": "https://issues.apache.org/jira/browse/HTTPCORE",
          "type": "issue-tracker"
        },
        {
          "url": "https://lists.apache.org/list.html?httpclient-users@hc.apache.org",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/apache/httpcomponents-core/tree/5.4.4/httpcore5-h2",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.22?type=jar",
      "publisher": "FasterXML",
      "group": "com.fasterxml.jackson.core",
      "name": "jackson-annotations",
      "version": "2.22",
      "description": "Core annotations used for value types, used by Jackson data binding package.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "04c11c456fd1e21b9a21c25c665109cc"
        },
        {
          "alg": "SHA-1",
          "content": "15c67f9498d6934cff9510fc70c5a12e52290457"
        },
        {
          "alg": "SHA-256",
          "content": "21ddb598807d3a51a876704eb979d9296e1c6a6f47ab1826ff88c6d6a127a2d0"
        },
        {
          "alg": "SHA-512",
          "content": "63b597ec02b4e31c57266d9b96f05f301f217bc12ffb7ba046a5658d2829728930a559947b98eb6c3cc448413a96b4939427aa669ae1e2dc3597ab5d5d287f9f"
        },
        {
          "alg": "SHA-384",
          "content": "35b6fe651afeed54d1e6f7a39ac6cf6fdbafacdf2e3bdff7b29b965ccb79a0c53342a56bf0ecea4d6c4c4651b1d6aa19"
        },
        {
          "alg": "SHA3-384",
          "content": "72267dc54c4175c42ca0dd430a87b12cc68619a8777be2048e1d2f0747db884a568b5c346c77c9c8c0714ab96018f5f7"
        },
        {
          "alg": "SHA3-256",
          "content": "6bfc7b4ba70779fe5f0b1e2af585abab982f7929a68beb2c0e62ea2e2a321de0"
        },
        {
          "alg": "SHA3-512",
          "content": "3f1bdfa32f7df76ac14cd2a3e689b65066fa0a6a760a9b8b1121773bb1b043a44587d4148c67f361dc6c630e6b31f29b2691a57d47caabea5ca23ae44af34a5e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.22?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/FasterXML/jackson",
          "type": "website"
        },
        {
          "url": "https://central.sonatype.com/api/v1/publisher",
          "type": "distribution"
        },
        {
          "url": "https://github.com/FasterXML/jackson-annotations/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/FasterXML/jackson-annotations",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.github.jeremylong/open-vulnerability-clients@9.0.7?type=jar",
      "group": "io.github.jeremylong",
      "name": "open-vulnerability-clients",
      "version": "9.0.7",
      "description": "Clients for vulnerability sources",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "ce3bb27c9d23e1272aa99747a707d1cb"
        },
        {
          "alg": "SHA-1",
          "content": "647c75c9f1ceeb83c965bf89c0aad6e1058a2686"
        },
        {
          "alg": "SHA-256",
          "content": "c1c606bef86c19820affe3516b57c8bab295122c4368993b828d387aa70f36ce"
        },
        {
          "alg": "SHA-512",
          "content": "4ce8572785d9d3bb181a1569bc6fc5c3983db812b125f7590c06cbf86b33c93349e6d68932088eca4e62da96f2994d4c3da63cafacc357ab57f57f7788a17fa5"
        },
        {
          "alg": "SHA-384",
          "content": "4e5c4d17a23650ed07ced8efdc7c1a530f2c1db98cb8c02f79cfe5078cc9889a90ee8d18fd00f28502b0d77f4838b465"
        },
        {
          "alg": "SHA3-384",
          "content": "cc6915519e9c751c41286ebfe91a3cb641e18ee31c409443f775982c0953d2fa06cea3ebd476c54a95004fd78d76888d"
        },
        {
          "alg": "SHA3-256",
          "content": "4bf1f7b2cc6422b0a77ee9c36597e327fefb108c9542f33ed7f707847adcb27b"
        },
        {
          "alg": "SHA3-512",
          "content": "8ea702a2976d1831bee10ffb0af67b691f9ee66bbb30af27fc1e2d3462f93558cd0694ce92035b1bb9bf05685048199ed00a3568d72e6cbd00c42dd416cc8846"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.github.jeremylong/open-vulnerability-clients@9.0.7?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/jeremylong/open-vulnerability-clients/",
          "type": "website"
        },
        {
          "url": "https://github.com/jeremylong/open-vulnerability-clients",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.httpcomponents.client5/httpclient5-cache@5.6.4?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.httpcomponents.client5",
      "name": "httpclient5-cache",
      "version": "5.6.4",
      "description": "Apache HttpComponents HttpClient Cache",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "46daa09dd78f02573160870e6d86576e"
        },
        {
          "alg": "SHA-1",
          "content": "31d5caa40f72c58eb34635cf161b4aceb239b7e8"
        },
        {
          "alg": "SHA-256",
          "content": "c425cb6db4863480982899092d1d283f84c0f32914a59bf2de479e69daa8fa11"
        },
        {
          "alg": "SHA-512",
          "content": "977293d0d63ae00bb12bbbd0ffb1496703a2e282735e0814f6935973edba3f8390d7bc322ac9d44aefffe19bba815a23688eaa47d539cdc37742c4487034895d"
        },
        {
          "alg": "SHA-384",
          "content": "df1c73fe68f6822f2b70eb4e781cf4d48523112165a0544005b7f6e9b5898a6874040596b0c9000083791f695468e122"
        },
        {
          "alg": "SHA3-384",
          "content": "af46b28142c5cebf871a35e3df9bb3b197592e31d4bd7c0b9725262446b48d16bc13e8792086a0ac8eeedf7999dc9ced"
        },
        {
          "alg": "SHA3-256",
          "content": "83ae739248c35e4872f39f9283b641a48ab10de25f472582ba96d69a0a33917b"
        },
        {
          "alg": "SHA3-512",
          "content": "d596745dbeebe33feab5e2151a7e1050f88cc5a685d8f2f92b35e907a023ce37014c7b857f1205773f30a905922dc596d13fe71bf79618f79618fa07bb967033"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.httpcomponents.client5/httpclient5-cache@5.6.4?type=jar",
      "externalReferences": [
        {
          "url": "https://hc.apache.org/httpcomponents-client-5.6.x/5.6.4/httpclient5-cache/",
          "type": "website"
        },
        {
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2",
          "type": "distribution"
        },
        {
          "url": "https://issues.apache.org/jira/browse/HTTPCLIENT",
          "type": "issue-tracker"
        },
        {
          "url": "https://lists.apache.org/list.html?httpclient-users@hc.apache.org",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/apache/httpcomponents-client/tree/5.6.4/httpclient5-cache",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.samskivert/jmustache@1.16?type=jar",
      "group": "com.samskivert",
      "name": "jmustache",
      "version": "1.16",
      "description": "A Java implementation of the Mustache templating language.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "7eff40c29c2fdf3faac3db921f07dc80"
        },
        {
          "alg": "SHA-1",
          "content": "979c7145a406b83bf28da32531f88a34c2d2919c"
        },
        {
          "alg": "SHA-256",
          "content": "3d4b984abd66908f05b38c9c892325cd4785d01ff33922569ff9b90c9ebfc475"
        },
        {
          "alg": "SHA-512",
          "content": "f245f8b979cf63fb4ad762e586a27468fa91b751aecf94f9f1dce32f551dec30c4b2dd881ea8b9b6a7eea3e9dfb34ceb96204d358bbb62120233416a4df382e1"
        },
        {
          "alg": "SHA-384",
          "content": "f53c07c96c4a4e8f9b424b17bbb152cc540dea8174db43b9bf5a12357d5207e5b8c0de506d83703fb46cfab13051c142"
        },
        {
          "alg": "SHA3-384",
          "content": "ac74164c34a0b40bf8e2d2c9f737bbae1b5c9c2c3a342487ca8271888379be51c5a0e3f45d1db57538eaed470bd7722f"
        },
        {
          "alg": "SHA3-256",
          "content": "2fdfe84999fe4930c399d5f78b678907881eea246fa30fd97f42f31ec90a2a8d"
        },
        {
          "alg": "SHA3-512",
          "content": "e213ee1cc34d3fde03785ac05a5df09c4b462fb1b1d0f02dff41e7b53522005df2e38b303bc193cff9203ab7f8a50764e1dea967035a454cf1988c056a615d57"
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "The (New) BSD License",
            "url": "http://www.opensource.org/licenses/bsd-license.php"
          }
        }
      ],
      "purl": "pkg:maven/com.samskivert/jmustache@1.16?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/samskivert/jmustache",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "http://github.com/samskivert/jmustache/issues",
          "type": "issue-tracker"
        },
        {
          "url": "http://github.com/samskivert/jmustache",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/vuln-data-source-jvn@5.2.1?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "vuln-data-source-jvn",
      "version": "5.2.1",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "1ff4b9c5c9175fa6e1d98f6fbad5b39b"
        },
        {
          "alg": "SHA-1",
          "content": "9670be8e5705f9621d026dc1d208b9fdb2829497"
        },
        {
          "alg": "SHA-256",
          "content": "3d18401018b2f78237739e9a21ca0adcbcc7cd02e19837d098b6f6ac9406e8ee"
        },
        {
          "alg": "SHA-512",
          "content": "f509bad91b6cfc4012d184c231fa5da2c869b151dbc94058fc933f94772865d9091fa8d401ff53d6e89652183dff295cd7895357153f5a6c3d7820f449538416"
        },
        {
          "alg": "SHA-384",
          "content": "885fb8502b6a8569ce7893cec3c005421a012d5396227e76537133f67374764219b90985d453e8347a48ec6fd546f984"
        },
        {
          "alg": "SHA3-384",
          "content": "05e02d282d1ff0abc4f0319eb8440880acfdbe2911865b1301d8f555cabe91382114259190ee14b3f23c3fb1a0084372"
        },
        {
          "alg": "SHA3-256",
          "content": "2f212e1b486f28d374f5bf8a9a9d2c8d612e59ef29db4c415ed9a2e1cee0e00e"
        },
        {
          "alg": "SHA3-512",
          "content": "9a776c4e077b64c52f2cb93f807f39de60877eb4376cc95f17a9db6b6fff3453408d83144e9d6b144d8a363c4f89f6a863ee73dbed1bee0c4d32ece9f9186333"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/vuln-data-source-jvn@5.2.1?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/vuln-data-source-parent/vuln-data-source-jvn/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/vuln-data-source-nvd@5.2.1?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "vuln-data-source-nvd",
      "version": "5.2.1",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "69e5825050099b7ad6359cffe28050ca"
        },
        {
          "alg": "SHA-1",
          "content": "1b29fc3965bb5b393a3c887c5640eb16b0f3cb18"
        },
        {
          "alg": "SHA-256",
          "content": "8cf7b42d07e7381de3dfde3861ab917253bfaf7e88635358c79e7da16b174b26"
        },
        {
          "alg": "SHA-512",
          "content": "931de68c0811a53d256c10b2ac7eb4e3d0868744121de3c5847f8a3a5b594a4e1c2c1797624c00f04a182dd48a0bb6bfa0d6afac2ca317c5e69cce4d54f4a625"
        },
        {
          "alg": "SHA-384",
          "content": "60b83d4e04215097280dc67f0024ecff6809322e1de9ffa6141146b209907138a0364063b3974438939aa1263b903dcd"
        },
        {
          "alg": "SHA3-384",
          "content": "a1dc4cd5eff88f6d56e306510036153b1ca57af4b370e8595dd9dfedff49d36466dbe26de801f2f7f03f0f2bbd20988b"
        },
        {
          "alg": "SHA3-256",
          "content": "cf092931b9fd9b1a81a18e0ef3214c52bbadb9902f7eda5c0d70fa3a585efc34"
        },
        {
          "alg": "SHA3-512",
          "content": "39899b7da3dcdba788fa1315531f33a1c599d77239858024a085ed295d8b7574c3952f22d276970cf4f50caf0cde09dd5383868ad1edab97df74ed80119e5cda"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/vuln-data-source-nvd@5.2.1?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/vuln-data-source-parent/vuln-data-source-nvd/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/vuln-data-source-osv@5.2.1?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "vuln-data-source-osv",
      "version": "5.2.1",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "a0d9b724a03e51b592f2893cba341c4f"
        },
        {
          "alg": "SHA-1",
          "content": "97fc27942a2ee6500245d8d5d59945ba034062d5"
        },
        {
          "alg": "SHA-256",
          "content": "18b9d5b34554bf6349759eab5edf3e4ffb933b34efea16719b4bf1bb882b11ac"
        },
        {
          "alg": "SHA-512",
          "content": "867e852c2c3ffe06b071cef6d57a21b24c889534b8488c3d578603ebdd248fa6f5902bc8415c0ec3115c1c72b9b5a1075ce260c6fe64049b308667f0edf13e0f"
        },
        {
          "alg": "SHA-384",
          "content": "fec4e71e1b97df0dd7dd1b16c60bbaded701f740dba51069bad58d2c9a73f7acab77ca063884024d3a7eae9d6d9fa717"
        },
        {
          "alg": "SHA3-384",
          "content": "9d74cff8b2260af1a8a0f2fd7997f92f90ae04bf7d2dca64e86a4452940524aec02c5d5d1cb36cdf41fd46d926a2d363"
        },
        {
          "alg": "SHA3-256",
          "content": "34aec7a14e892ad1385617905e5bd786e7b07fa424ac9df6c0480c1b2a0c7abd"
        },
        {
          "alg": "SHA3-512",
          "content": "ab19175a99c48ff1e3be02fd5163a5eeb0f7cc100e264402160ede5c8947d7de488447bf688261307f3508bfe2a95d7fc3d4b518ed84678dde0caab0010e2bd6"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/vuln-data-source-osv@5.2.1?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/vuln-data-source-parent/vuln-data-source-osv/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/alpine-common@5.2.1?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "alpine-common",
      "version": "5.2.1",
      "description": "An opinionated scaffolding library that jumpstarts Java projects with an API-first design, secure defaults, and minimal dependencies.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "47f115ac642775e03b8fc8dab46d8027"
        },
        {
          "alg": "SHA-1",
          "content": "2e15ab6915800eccfbfdae0e4a0e4aec6e58e8bd"
        },
        {
          "alg": "SHA-256",
          "content": "de913d848e956496c54f2779adb248261639b8e707a96b7b5bba7fcba532eaaa"
        },
        {
          "alg": "SHA-512",
          "content": "251654b47a2faec89b5de2850563ea6942601e0fb2c2378afabc05d1977515f04c21eb30e318ef55d62b46f939f894a8f1c71b0ff4a213eaa8f309bdd36dd348"
        },
        {
          "alg": "SHA-384",
          "content": "bafc63ebec61b65ef3016ae177420b53e822d674872bde387c8fa89e2115c982ca1e680a3944a5818fc75b246631a183"
        },
        {
          "alg": "SHA3-384",
          "content": "c13a4b9d3aebb66cd3e8fa9b3dfe8c0483b9fb995ebbfffc17aa8857a20b84e523ec6b9e7338ea749113f612be53ccf0"
        },
        {
          "alg": "SHA3-256",
          "content": "0a8e539e5dd27ef2388e568161c3bf9e10b788f57a3016e69c20b91e2e10039c"
        },
        {
          "alg": "SHA3-512",
          "content": "7d460b496340d63a0d2ce0ae4694675aefded188a6a9a56d3112c282606cc1c3823c7199af4e82851e4486533578489ec1df56f99eb41ea6578960fbb8918385"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/alpine-common@5.2.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/stevespringett/Alpine/alpine-common",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/alpine-model@5.2.1?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "alpine-model",
      "version": "5.2.1",
      "description": "An opinionated scaffolding library that jumpstarts Java projects with an API-first design, secure defaults, and minimal dependencies.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "37997838711deb0ebd78a283f75f81d0"
        },
        {
          "alg": "SHA-1",
          "content": "0583b87cfd3c97f11ce8684390c9bf7df5e4ce68"
        },
        {
          "alg": "SHA-256",
          "content": "479ec5c3d8293a39916f18fecdb6fc739f8e70f949d01d6f18089789166701f4"
        },
        {
          "alg": "SHA-512",
          "content": "6fcb9bcc6fbf2bf269b21aec1f8b1d632dd3be6ecd39c1ff014c58149956b48e0fed63e9e2728785532c360f5d52b10c161eafdc440ca9a900aeff33b4bdb265"
        },
        {
          "alg": "SHA-384",
          "content": "614becc4e2a160ca0a887388364d65943d9b7e292ae05f03b3740540c9f2f834f6fc5e93847bfdba8289e229c09ffcb2"
        },
        {
          "alg": "SHA3-384",
          "content": "7b3a29be33bb3315f74e97e45626b11343bf17b1609f88baccf1d65ff794fdefb2f4ce1035c758e98329c3a9a49d5e6a"
        },
        {
          "alg": "SHA3-256",
          "content": "c0b8923d84e78df18c6e56a1170d9771e3242ce5df3dc51dfc9bd84869e0d599"
        },
        {
          "alg": "SHA3-512",
          "content": "64c252651c81528985b32941d3aec342cf039bc94ba441967b33f7b182cccd0e7300e52c1f3c7d69a520a1c31724a4d45ccb6ad886d53d11f46259a403b281e8"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/alpine-model@5.2.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/stevespringett/Alpine/alpine-model",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.datanucleus/datanucleus-api-jdo@6.0.5?type=jar",
      "group": "org.datanucleus",
      "name": "datanucleus-api-jdo",
      "version": "6.0.5",
      "description": "Plugin providing DataNucleus implementation of the JDO API.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "9b7448a21838cae99a8b9f3875d93a08"
        },
        {
          "alg": "SHA-1",
          "content": "30f49348795e1d2e9a8e1613e9dbc6c3f851f1ca"
        },
        {
          "alg": "SHA-256",
          "content": "423ea8da36763d6c17d55434477b7ab2339d3cef5acf67dd30198ef1dd0ed477"
        },
        {
          "alg": "SHA-512",
          "content": "5262a518ccc344692af86a30d51e4d1d9ee2b3167dc16657b37e8cfb2affc3fd73db4df9df5463e4a25097d9eff27c9f305407239e19381cd32c0c7f9f01aaab"
        },
        {
          "alg": "SHA-384",
          "content": "96e3ee21e3958259fcbc3bcd8af53d0814415f027a73bb1a1025c9112406564e65eaff74c874f02d994e6239562a7202"
        },
        {
          "alg": "SHA3-384",
          "content": "8c88668e57a4ccf381e6fb3a9859e8fe15376bd9a0fd4d9b9d771c9f7712459e97edc219dcdf008971f0d06363592d09"
        },
        {
          "alg": "SHA3-256",
          "content": "54562d403842a670b5f4cfa2a272bbb05789bd39f278b52732f1df540c7e33b3"
        },
        {
          "alg": "SHA3-512",
          "content": "55accaf6c0e8a6082d09619351596707df28223929dd313bbfe25abd1f8693c2eb195c0dada149f11dd0aecdfca724edfd67de84152e0a2aa8c39383fbc8b8d2"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.datanucleus/datanucleus-api-jdo@6.0.5?type=jar",
      "externalReferences": [
        {
          "url": "http://www.datanucleus.org/#/datanucleus-api-jdo",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/datanucleus/datanucleus-api-jdo",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.datanucleus/datanucleus-core@6.0.11?type=jar",
      "group": "org.datanucleus",
      "name": "datanucleus-core",
      "version": "6.0.11",
      "description": "DataNucleus Core provides the primary components of a heterogenous Java persistence solution. It supports persistence API\u0027s being layered on top of the core functionality.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "2493fed928c1eade5a38f4016f1ba7c0"
        },
        {
          "alg": "SHA-1",
          "content": "87fae77204b7032165d6cfb468cb5dafacf39200"
        },
        {
          "alg": "SHA-256",
          "content": "2e2a23d21100e82a8bd0822eebe8bb9f39a8e3ea1ba5e2bb068c24cb0515bd08"
        },
        {
          "alg": "SHA-512",
          "content": "969e5e8b3330e1bd675af05d106f0081dbef25bfea99689a6a051eac96e81907dc8d42e574b464b33fe467c5024a282416f114946ed4374510b4abe7897027d3"
        },
        {
          "alg": "SHA-384",
          "content": "286413cbd9c681561bf5c7d83839893879a9476a0a2a9b60e60d6e161a665e92bef6db57cd9e18b4d13a6ed2a75bbe73"
        },
        {
          "alg": "SHA3-384",
          "content": "afcc830fdadc3c4b7130921ad521f4e0a7fe23b57614ac61f4c2a1d9eae47b56e6a0df82d1ebef82c1cbe1d2244c547d"
        },
        {
          "alg": "SHA3-256",
          "content": "02b169414ef4c5a9d7c79e6e98e86e21071054f035ce4a1ca8fde85aa5f726ef"
        },
        {
          "alg": "SHA3-512",
          "content": "1de064ff2de6452618e7a9f3bc83e91228105722697597e4dc0b836349d21c3d71ff6ee4613433f7da795efba9b56be7bfa3c6854a02587271cd7d4a6001bdb5"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.datanucleus/datanucleus-core@6.0.11?type=jar",
      "externalReferences": [
        {
          "url": "http://www.datanucleus.org/#/datanucleus-core",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/datanucleus/datanucleus-core",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.datanucleus/javax.jdo@3.2.1?type=jar",
      "group": "org.datanucleus",
      "name": "javax.jdo",
      "version": "3.2.1",
      "description": "The Java Data Objects API (JDO) : a standard interface-based Java model abstraction of persistence, developed by the JCP.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "79f1e95e6d7f1eb191edce207ac6ecd8"
        },
        {
          "alg": "SHA-1",
          "content": "e8d1af5779f95d3c85b641184b605725762a36c3"
        },
        {
          "alg": "SHA-256",
          "content": "61646f544baf75fc7a305410443c5f5f7d219fa7a2cabe3b782950a350ca5d3f"
        },
        {
          "alg": "SHA-512",
          "content": "29580963b5478646b0f3b47ae3387d0bdb5bd86da37afceef6841c32b9db3a4407186fc257855c5c47efbbf1f1bfbff0b45b6ad45101b6dfbed7946a9251fe43"
        },
        {
          "alg": "SHA-384",
          "content": "1845d95a87e9fb954ff3e0c80a0dae62eca817abb3f727d65edc9296a0992e60a7fa57db0a72858afaf9e2d872f6435f"
        },
        {
          "alg": "SHA3-384",
          "content": "e4f04e5be64a1a58ef475cf5b155e6169307dd9636cd4fe6661dd394fe28a0a9ee9dee426291bff62d66885ae35ab2c8"
        },
        {
          "alg": "SHA3-256",
          "content": "3703404351c56d4a658de2012266838fea9741cceb09e7304b4c323e33d88ca3"
        },
        {
          "alg": "SHA3-512",
          "content": "da4b8c30667d67651469ed1a750004a3afbaad1ce8c6697ac29889fd2e78dadbcde07d414161e42bc972017afe83e690329d4ede5e94a67553377ee7c2a7929a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.datanucleus/javax.jdo@3.2.1?type=jar",
      "externalReferences": [
        {
          "url": "http://www.datanucleus.org/#/javax.jdo",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/datanucleus/javax.jdo",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/javax.transaction/javax.transaction-api@1.3?type=jar",
      "publisher": "GlassFish Community",
      "group": "javax.transaction",
      "name": "javax.transaction-api",
      "version": "1.3",
      "description": "Project GlassFish Java Transaction API",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "6e9cb1684621821248b6823143ae26c0"
        },
        {
          "alg": "SHA-1",
          "content": "e006adf5cf3cca2181d16bd640ecb80148ec0fce"
        },
        {
          "alg": "SHA-256",
          "content": "603df5e4fc1eeae8f5e5d363a8be6c1fa47d0df1df8739a05cbcb9fafd6df2da"
        },
        {
          "alg": "SHA-512",
          "content": "3497cf77352aa1317c70ad1d28e8e7da51337d844c8227a35707209c750ba6f5d644a4ffdbdb10e5fbde204003aa43ff80e9e2ff3164584a7a34d8292266b2bc"
        },
        {
          "alg": "SHA-384",
          "content": "7044d8d5829a777d85e1a987c3e346eb535dd321366bdf32a9e8ed4f52facd0610ac2f3f58b4a1b001893f01fddc5eae"
        },
        {
          "alg": "SHA3-384",
          "content": "d0c1807001e02ce47320be657be055b4777b8b5673c22a78b0574955f7a6105dacc42b46b86ab967dc382cf332da59d8"
        },
        {
          "alg": "SHA3-256",
          "content": "c7c48884317a2d0e1596f201763acbca4ef76462af9172fd5e68aca3465303e1"
        },
        {
          "alg": "SHA3-512",
          "content": "bf053d4fe995cb5c1d6c01320fc73530017ee364de6ae21eb98fa0372b2aa6eff2fa4ac2d9cd5f692c930ee573c2f6226441918123fcfc48b5b4a126d350928c"
        }
      ],
      "licenses": [
        {
          "expression": "(CDDL-1.0 OR GPL-2.0-with-classpath-exception)"
        }
      ],
      "purl": "pkg:maven/javax.transaction/javax.transaction-api@1.3?type=jar",
      "externalReferences": [
        {
          "url": "http://jta-spec.java.net",
          "type": "website"
        },
        {
          "url": "https://maven.java.net/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/javaee/javax.transaction/issues",
          "type": "issue-tracker"
        },
        {
          "url": "javaee-spec@javaee.groups.io",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/javaee/javax.transaction",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.jersey.ext/jersey-bean-validation@4.0.3?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.glassfish.jersey.ext",
      "name": "jersey-bean-validation",
      "version": "4.0.3",
      "description": "Jersey extension module providing support for Bean Validation (JSR-349) API.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "be022c734f05c486aa3f40cd4bc37173"
        },
        {
          "alg": "SHA-1",
          "content": "5a30093b56151adc007be383367ef9dc109dc026"
        },
        {
          "alg": "SHA-256",
          "content": "8f154b37c204c50c6a108bb29985292d5b6072e84e242046f50e6b42ad7d3681"
        },
        {
          "alg": "SHA-512",
          "content": "4283e89ce5ae47d9bb7d1ac20896b13c2660b925ff13b95ff0f00305dd0df5f585a7583b4d74b489c7b94f0b5c45874678a030b7fe32c96572d90c26451e654b"
        },
        {
          "alg": "SHA-384",
          "content": "57c2aa799f14159315751ef873205e0b8aa60ce269283a8a01c7a31057d80cb6ba9a1ab9f1573cd46c46665777e65c73"
        },
        {
          "alg": "SHA3-384",
          "content": "bf2c3239bfba5fdefe7fdd9b9a42d024a3907fe028ba1b02ea14bbf8e8b3aa3b73312d1ae1067e38e1391fcbaa9bc3d1"
        },
        {
          "alg": "SHA3-256",
          "content": "e30c46279b14149db385f22284ecf7bbcbc5bd43ada544a02f9ca9034a03ccff"
        },
        {
          "alg": "SHA3-512",
          "content": "3a99a9f8220fbfd47d8755484db6d90f93fe38be119951c6067f20b63254663f517bfdc8ee9ff16fe27cf957f97b32b4ecbcf751da4b9aa3d87dcf35ac1699d0"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        },
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        },
        {
          "license": {
            "id": "BSD-2-Clause"
          }
        },
        {
          "license": {
            "name": "Apache License, 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        },
        {
          "license": {
            "name": "Public Domain",
            "url": "https://creativecommons.org/publicdomain/zero/1.0/"
          }
        },
        {
          "license": {
            "name": "Modified BSD",
            "url": "https://asm.ow2.io/license.html"
          }
        },
        {
          "license": {
            "name": "jQuery license",
            "url": "jquery.org/license"
          }
        },
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/license/mit/"
          }
        },
        {
          "license": {
            "name": "W3C license",
            "url": "https://www.w3.org/Consortium/Legal/copyright-documents-19990405"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.jersey.ext/jersey-bean-validation@4.0.3?type=jar",
      "externalReferences": [
        {
          "url": "https://projects.eclipse.org/projects/ee4j.jersey",
          "type": "website"
        },
        {
          "url": "https://ci.eclipse.org/jersey",
          "type": "build-system"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/jakarta.inject/jakarta.inject-api@2.0.1?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "jakarta.inject",
      "name": "jakarta.inject-api",
      "version": "2.0.1",
      "description": "Jakarta Dependency Injection",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "72003bf6efcc8455d414bbd7da86c11c"
        },
        {
          "alg": "SHA-1",
          "content": "4c28afe1991a941d7702fe1362c365f0a8641d1e"
        },
        {
          "alg": "SHA-256",
          "content": "f7dc98062fccf14126abb751b64fab12c312566e8cbdc8483598bffcea93af7c"
        },
        {
          "alg": "SHA-512",
          "content": "f186b2ada470abba1cc3b4f8c4373d940fb7c71a051b2c26f7c204ad4dfb69235fbf3f9c33da36d744cb90f52d921c51d76c0ff263bacb35eafb66cab83dc47d"
        },
        {
          "alg": "SHA-384",
          "content": "405bd297a73901f013d48a0da028d04d400f3e61f4997c0e7297eb08120670a0e242e0002db8f130c33ab16cb02feb2d"
        },
        {
          "alg": "SHA3-384",
          "content": "4db7e54434d0a208c876868f5595b808f2728c0455feaa752ab7b569a2186fc37cb891c9aa0076de3d08f6da6ff06eba"
        },
        {
          "alg": "SHA3-256",
          "content": "3a5aba9f1ff1a130b76af886123eb375fa578498490df3dc60bb7ce7d59e9404"
        },
        {
          "alg": "SHA3-512",
          "content": "00bba8efc2d6e7f0a509b321868d75f1aaf0681a750d089d913bde8424ab7bb88aadf49de6e291e352523e4f8c117b1b48033ff31d4d665dcc43c4c6ea000ba9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/jakarta.inject/jakarta.inject-api@2.0.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/eclipse-ee4j/injection-api",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/ee4j/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/injection-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/jakarta.validation/jakarta.validation-api@3.1.1?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "jakarta.validation",
      "name": "jakarta.validation-api",
      "version": "3.1.1",
      "description": "Jakarta Validation API",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "93ce96e77734f4280157edeffcae44e8"
        },
        {
          "alg": "SHA-1",
          "content": "ec8622148afc5564235d17af80ea80288d0e7f92"
        },
        {
          "alg": "SHA-256",
          "content": "63ce00156388c365f3ac1be71fcfaf114682fc0c452020b5df6e7ec236e142ab"
        },
        {
          "alg": "SHA-512",
          "content": "02483f9d631538a71f436982ed3842c5d054781ec58350ba33fd0e0db92db531caa17abd2e7aa25a062ba4cd5e85b63a27b615041df236ffb979a73fdd121e18"
        },
        {
          "alg": "SHA-384",
          "content": "8e4a235fb69ebf7327fe8947b0be32c76ae8ebb748d0b3195efb87cd1d57ea92402403a59e2c4312a11a3a2300bbb4d6"
        },
        {
          "alg": "SHA3-384",
          "content": "7f52280ddd46c87e00c6b10f708aa77d571e68942651ada952b4b9e58805a0216394a31a4666c88908af0a6408c9b64d"
        },
        {
          "alg": "SHA3-256",
          "content": "21e404a7897b223e9324f7b709c3038f4ca01599896a0e166cee4eb714b9e600"
        },
        {
          "alg": "SHA3-512",
          "content": "6bc15a9beecdbdb881c1ed5d7682156417db766898a14e205a496b8d7e0e552a4e4c2303727b1c4dbc2391d62257b1b9a9504827dc6b8ceff149225d94bf10a9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/jakarta.validation/jakarta.validation-api@3.1.1?type=jar",
      "externalReferences": [
        {
          "url": "https://beanvalidation.org",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://hibernate.atlassian.net/projects/BVAL/",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/jakartaee/validation",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.hibernate.validator/hibernate-validator@8.0.5.Final?type=jar",
      "group": "org.hibernate.validator",
      "name": "hibernate-validator",
      "version": "8.0.5.Final",
      "description": "Hibernate\u0027s Jakarta Bean Validation reference implementation.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "138ad15cdabc8c618c4d4f79a8ae8211"
        },
        {
          "alg": "SHA-1",
          "content": "7431d3a055b74abeba729a2039ba68d26bbf0d76"
        },
        {
          "alg": "SHA-256",
          "content": "4b2b502dbdc271887a5fa1669c5a8bf85910da9483f3fa0713d38e273f159e4f"
        },
        {
          "alg": "SHA-512",
          "content": "1fb1d48473663628083537f4a7d2367c5f427a397cb4283508aa0c148d7f8521b54b5b311ce13480f57dfebd73edd2c3a8fbf1fae1c5d6f77572fd02a2e100ed"
        },
        {
          "alg": "SHA-384",
          "content": "53843cc1b930352bec8b6818a5481bba155b369f00c84098727da9e0c9a60778e0f5bf366c9dd12572c7c41e13bce069"
        },
        {
          "alg": "SHA3-384",
          "content": "b10ce2d370257a3aea9265443b04c2553ac65bd60352ccca7b2e6c1aa71c1348f2799e08baf72159473f080104c26102"
        },
        {
          "alg": "SHA3-256",
          "content": "13f4ca1b44438e6bd3db07804adb353ab1fde50985924a6acee2746a286b059c"
        },
        {
          "alg": "SHA3-512",
          "content": "81a36ca751a64693c38dc6e09d13d6ce03d8df6116e22ba54d58a4df28cb6e1298198259656f3194f6ea6ecd00d49a1cd64528ce433222c938c898a38bf5f36a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.hibernate.validator/hibernate-validator@8.0.5.Final?type=jar",
      "externalReferences": [
        {
          "url": "https://hibernate.org/validator",
          "type": "website"
        },
        {
          "url": "https://github.com/hibernate/hibernate-validator",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml/classmate@1.5.1?type=jar",
      "publisher": "fasterxml.com",
      "group": "com.fasterxml",
      "name": "classmate",
      "version": "1.5.1",
      "description": "Library for introspecting types with full generic information including resolving of field and method types.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "e91fcd30ba329fd1b0b6dc5321fd067c"
        },
        {
          "alg": "SHA-1",
          "content": "3fe0bed568c62df5e89f4f174c101eab25345b6c"
        },
        {
          "alg": "SHA-256",
          "content": "aab4de3006808c09d25dd4ff4a3611cfb63c95463cfd99e73d2e1680d229a33b"
        },
        {
          "alg": "SHA-512",
          "content": "7fc4764eb65227f5ba614698a5cf2f9430133f42ec6e2ae53b4c724ee53f258541a0109fe0659e0b9e45729b46c95c00227e696b8d1addcd772c85f877658c9a"
        },
        {
          "alg": "SHA-384",
          "content": "28b4780b2353ebc08dbc02c9a343527a9062a0455bfb4ab135cb639c03e5dfd9c2250a835c44d5f17d275667c2009694"
        },
        {
          "alg": "SHA3-384",
          "content": "b194ace8f1f49f410286bd859866678b95a1b2c6f73e41f48291eb7438dffea57aaa9b177459038b6997771ce4d1cee1"
        },
        {
          "alg": "SHA3-256",
          "content": "50234c94efed4c816eb77bd2f70b869c9f89ddf8ee73dc25e354f4d0b81b3e1f"
        },
        {
          "alg": "SHA3-512",
          "content": "9886421726066b313a62283a6811b76d904ea1c1e9b7b2d850cb47afa189b03cdef053c8f7f6b79e77f2269c45f8cc2ed75c3389e96594b50987fef311d5a25f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.fasterxml/classmate@1.5.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/FasterXML/java-classmate",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/FasterXML/classmate/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/FasterXML/java-classmate",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.jboss.logging/jboss-logging@3.6.3.Final?type=jar",
      "publisher": "JBoss by Red Hat",
      "group": "org.jboss.logging",
      "name": "jboss-logging",
      "version": "3.6.3.Final",
      "description": "The JBoss Logging Framework",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "b4cf5872f18b3e80e18769d51c7ae9b2"
        },
        {
          "alg": "SHA-1",
          "content": "1cc9f976725720bb4a66f80af3e3aa6b9890d969"
        },
        {
          "alg": "SHA-256",
          "content": "7c12ee575508f81e22b1db9334b969d0ec54ef0fd1dcba24eeab1a44235fc366"
        },
        {
          "alg": "SHA-512",
          "content": "5b4e0213185d79b407352020e550ab0baba879fa465670b592f3671a53ae0128ce9d2d1fd67c2263bd625cd5549ec449521d200054c8bed9e0c0d1b6004a0287"
        },
        {
          "alg": "SHA-384",
          "content": "7022c646c30fe91fd1f483eda642290bfdbc3e8b033df7f177101758daaebdf157ac2ddd1e992cb020123482bcc7c3e6"
        },
        {
          "alg": "SHA3-384",
          "content": "ddc81176c1e55dddb8b20ba888bd096fcd372566ffb60b51068165879b6face6a4170d9d204a6ddc76e17f7e2ad68d68"
        },
        {
          "alg": "SHA3-256",
          "content": "ad9aa5fd92d755bc8717c4095fd815d0213f8456d7209727a796548f5b3bf46e"
        },
        {
          "alg": "SHA3-512",
          "content": "e0ea47f66d8ff6e2796732d82aa4772b17441751469c78a1cd5f4ab227c953addcd9810e6ebdbca48634ad874da0933ecaaf5848a38f3ea07de0ccd601965ecd"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.jboss.logging/jboss-logging@3.6.3.Final?type=jar",
      "externalReferences": [
        {
          "url": "https://www.jboss.org",
          "type": "website"
        },
        {
          "url": "https://issues.redhat.com/",
          "type": "issue-tracker"
        },
        {
          "url": "http://lists.jboss.org/pipermail/jboss-user/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/jboss-logging/jboss-logging/tree/main/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/jakarta.el/jakarta.el-api@6.0.1?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "jakarta.el",
      "name": "jakarta.el-api",
      "version": "6.0.1",
      "description": "Jakarta Expression Language defines an expression language for Java applications",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "a98f097e059552a75748fcdd067e5c16"
        },
        {
          "alg": "SHA-1",
          "content": "c7c4a2eb1e40e0ff45ab5e2e52bd77d8c7a75176"
        },
        {
          "alg": "SHA-256",
          "content": "7e84b5bed49de32b79cc5e85d90b6f5adb1a953ac67283adbb41c1e297f9c605"
        },
        {
          "alg": "SHA-512",
          "content": "fbab7bdf18e9bfb316b519a8c3b3d1f2e769e3f318b72e46cf33621f2942b84eede9b97970ff46fe29b54f8d61cb0df9e584d371f10e56bf0050d7727eb0ee23"
        },
        {
          "alg": "SHA-384",
          "content": "8c9c0712f90e359567fb2f080a18d38227ebd3096730980aeec86ee290b79f79cb4cf9888f72944ac240c01330828344"
        },
        {
          "alg": "SHA3-384",
          "content": "3c82d728737f09f400956a25664b008a307a359f33084ae9304ecf850b2b8448b27a7f017a6630299b7bd7ea4dddc239"
        },
        {
          "alg": "SHA3-256",
          "content": "2e870db1b8d460705534cba4ccd57b2d8247db1ff9bba831e2b2aef28261b4ea"
        },
        {
          "alg": "SHA3-512",
          "content": "d7eba15a92c49d1061ed4ac4c6a298dcd5b17896d8de214d5ad560624c2e2c855e9846626821754c47b898dea656ab516138d0ef607d5faf7c1dbed8c660ee6f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "name": "GNU General Public License, version 2 with the GNU Classpath Exception",
            "url": "https://www.gnu.org/software/classpath/license.html"
          }
        }
      ],
      "purl": "pkg:maven/jakarta.el/jakarta.el-api@6.0.1?type=jar",
      "externalReferences": [
        {
          "url": "https://projects.eclipse.org/projects/ee4j.el",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/el-ri/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/el-dev",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/el-ri",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.expressly/expressly@5.0.0?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.glassfish.expressly",
      "name": "expressly",
      "version": "5.0.0",
      "description": "Jakarta Expression Language Implementation",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "d4448c69fe69ebca37b2c76e62e385c3"
        },
        {
          "alg": "SHA-1",
          "content": "78637fec7db6414c3ad32f3aa9e5d6610a299e5b"
        },
        {
          "alg": "SHA-256",
          "content": "b0c872737bb8381921b304d0952854666d1ba320b9b3c5bf4d70a09a86b61524"
        },
        {
          "alg": "SHA-512",
          "content": "8abd592d1fd70ef7fac5d0c1debe59dddea59dd82262bae016b44c506ceb68bb0619f464a07e553cc6885d527e1b8b8571e8975ca040c7864baba2349f30b725"
        },
        {
          "alg": "SHA-384",
          "content": "dc233d0838d2912d2473b8b6f5988145f4116dc2b139ea0378e78f260ed4c7609c954875c21fa579c4901f3202b3ca61"
        },
        {
          "alg": "SHA3-384",
          "content": "d946ffea99369b9933d07076f88a605a8b724edbc1d771ec92db145e6a68e447ac261efd9a4cdb74dce38827f75bd7d4"
        },
        {
          "alg": "SHA3-256",
          "content": "a46f1d62e482167ead93bc3f1261852cbd968e8fc7b68b399685d0bf6eb095d7"
        },
        {
          "alg": "SHA3-512",
          "content": "5e23912f838fe9487d5c0ab44d806e05f1754df1d18f1f7231a32975a73d7747edab4166903b5cbdc6ef002efc4a768b10baa4d7dabcb1c29bca61e9ab923347"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "name": "GNU General Public License, version 2 with the GNU Classpath Exception",
            "url": "https://www.gnu.org/software/classpath/license.html"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.expressly/expressly@5.0.0?type=jar",
      "externalReferences": [
        {
          "url": "https://projects.eclipse.org/projects/ee4j.expressly",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/expressly-ri/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/expressly-dev",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/expressly-ri",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/alpine-infra@5.2.1?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "alpine-infra",
      "version": "5.2.1",
      "description": "An opinionated scaffolding library that jumpstarts Java projects with an API-first design, secure defaults, and minimal dependencies.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "df28f5fdbe7bb7b7f035490fbb543bcb"
        },
        {
          "alg": "SHA-1",
          "content": "1589454ace0e01538943eb928f35848b9bf551f2"
        },
        {
          "alg": "SHA-256",
          "content": "45ed1af7f7734c9125465ba72c0d9c62b405b1eb0525bb880b7bfafab5e8a768"
        },
        {
          "alg": "SHA-512",
          "content": "914db20111106c70627d8f53c446f8a453b18004781594ccd818c03fdc8eb6dfca576b25bcf7a5409a220a4dce87b84fb4858b65c76c646566facc42c2f0bf13"
        },
        {
          "alg": "SHA-384",
          "content": "b647a329a7955845d12a3ab1e03be8f3f27680b819ba5e2fbccb4686545813b668132926eb361adf43905c91c1e95c93"
        },
        {
          "alg": "SHA3-384",
          "content": "3f1472afa09b56530e92a354b829af4398da4e0f8d2714596982cee791b6a1d9dfbeda6f1e1de6e9c342a83886421329"
        },
        {
          "alg": "SHA3-256",
          "content": "f269ea72b34e4bc1e6515517279a056862f063513b09ead9323db92cb81fb760"
        },
        {
          "alg": "SHA3-512",
          "content": "80e416ce69878a6548555287f5cecf49eff55065455008525ac24d2d191911c8a7c95694e7ef3ad749abee38ce68c527cc432df91c405aa718da15515ba41256"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/alpine-infra@5.2.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/stevespringett/Alpine/alpine-infra",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.datanucleus/datanucleus-rdbms@6.0.11?type=jar",
      "group": "org.datanucleus",
      "name": "datanucleus-rdbms",
      "version": "6.0.11",
      "description": "Plugin for DataNucleus providing persistence to RDBMS datastores.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "33a96bd9a1e242d31cc0929562e3af04"
        },
        {
          "alg": "SHA-1",
          "content": "52d9d3d77483021736ee88ee7f53d2447cb1049e"
        },
        {
          "alg": "SHA-256",
          "content": "a9271d3c793bdd73ab6444346d6036982929529cdcb874dbd8fad1e90de04338"
        },
        {
          "alg": "SHA-512",
          "content": "fe93c578f598f5282e637b542e7dd44061b59ea6e9f00fc6df595c9f26ff567daccf7ec7359e3a120e5a4090b8b7f4ff36e991210507123d6e3477f0aae24984"
        },
        {
          "alg": "SHA-384",
          "content": "f80c7aa7375f1317172236773e4ba02a67c45b788566977278d8125fe4226ffd60604c4fe5ad2b82aa97122f15ed8e7d"
        },
        {
          "alg": "SHA3-384",
          "content": "0583f548e429a4412a87e6423ec0d334aca631470b3e7a355d192e39a68c64e68d59fbff11552eefc7b7cb2153fcc2a3"
        },
        {
          "alg": "SHA3-256",
          "content": "8cb46d03fdee2bc0f022e5d724c1b7affcd378e5bd4c72c0779e80f35fe40b47"
        },
        {
          "alg": "SHA3-512",
          "content": "e630592197b25c46cf137b4146e884b18b6b4793ed4a4a32f6169ab51f64775a5eabdbccd3bb3e2dc87526330bc4cf0b0b8a661e457a32ca565d10f3b2759af8"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.datanucleus/datanucleus-rdbms@6.0.11?type=jar",
      "externalReferences": [
        {
          "url": "http://www.datanucleus.org/#/datanucleus-rdbms",
          "type": "website"
        },
        {
          "url": "https://github.com/datanucleus/datanucleus-rdbms",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/alpine-server@5.2.1?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "alpine-server",
      "version": "5.2.1",
      "description": "An opinionated scaffolding library that jumpstarts Java projects with an API-first design, secure defaults, and minimal dependencies.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "d50c0271c380d71981b01896d6a9f776"
        },
        {
          "alg": "SHA-1",
          "content": "ce6fb4c5da508a5f700f795343d6c5552c40dfc5"
        },
        {
          "alg": "SHA-256",
          "content": "b8c1106546f173ea390747eb799fa3b050ba4e06ee703040aba23d0b8a16f3f5"
        },
        {
          "alg": "SHA-512",
          "content": "45cc1b23bf35fcf1a55776c98a9f98d4dda92e668a7776da312b7bad3b053d6767484782c540138c831b8537d9195df4f603439c4b54b6fc64b7dccdd8d83b51"
        },
        {
          "alg": "SHA-384",
          "content": "c5e92c01080fb42b8b9ea87a2a9ce3a5587d3324972376d04c46c218c0ffd9e2377f4b0666fd15b72c518493d76a200f"
        },
        {
          "alg": "SHA3-384",
          "content": "5657f915bb400ad6b3e63c4bfc187fb93ea155bdd3dd17e5daf62e131a1af671cb0ad057a4761ced73b6dd0e40a6005d"
        },
        {
          "alg": "SHA3-256",
          "content": "858df356895c40a99672c861e328f50d1ad86fc5b4b6187f6dc9882633f5cba5"
        },
        {
          "alg": "SHA3-512",
          "content": "670eb39807a3d403b0f6d46040eac12f9828889018b3b0b59505e787edd5f0f020c21abf54b4339b4469b0d5dcb932abfba526b2139ad91d5e7e5d80f85c5efa"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/alpine-server@5.2.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/stevespringett/Alpine/alpine-server",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.jersey.containers/jersey-container-servlet@4.0.3?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.glassfish.jersey.containers",
      "name": "jersey-container-servlet",
      "version": "4.0.3",
      "description": "Jersey core Servlet 3.x implementation",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "8e92ee1230a09e777de3d6a339d49c3d"
        },
        {
          "alg": "SHA-1",
          "content": "97eb5f1ff3b4abb40faf5ac0ede9ca447456523d"
        },
        {
          "alg": "SHA-256",
          "content": "ddf054a3de54a1ebc2653baa7cdbd9a0a5455dbff82602bcbc64a49fbb3e7969"
        },
        {
          "alg": "SHA-512",
          "content": "d833cd1d950a7797e917692d2a979e6b27fcd96280375e00ebee04e83ddf57bc431b7df27e224b0404d4d39e174e28516a7e3823c314657b14aa788cfb17b9ee"
        },
        {
          "alg": "SHA-384",
          "content": "6dff6e26b5e422e6c7d3a4ec9e33f8da5dd6b2ed37f210e224730eeac6ea23e475ce1652bdfd20a649ba11a9bcc09f7e"
        },
        {
          "alg": "SHA3-384",
          "content": "ba829a775eca74e088ed08c6c71010417afc25e2000961d68402d93606fe29ab70a24638bb86fcb72964746ffaf8456e"
        },
        {
          "alg": "SHA3-256",
          "content": "32c10d664d78f6fe8cbc5e06cbde361a2e1869c2ccce058f39ec11da8d76e50a"
        },
        {
          "alg": "SHA3-512",
          "content": "1ce10b5fec8769316b712f0a66e8286923ac73ec64caf24d9fd1bc9a3d39d6df2db2f293128202d0fa1c0e4a07c6b68836b225a4b552304eabf48ca9c6298714"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        },
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        },
        {
          "license": {
            "id": "BSD-2-Clause"
          }
        },
        {
          "license": {
            "name": "Apache License, 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        },
        {
          "license": {
            "name": "Public Domain",
            "url": "https://creativecommons.org/publicdomain/zero/1.0/"
          }
        },
        {
          "license": {
            "name": "Modified BSD",
            "url": "https://asm.ow2.io/license.html"
          }
        },
        {
          "license": {
            "name": "jQuery license",
            "url": "jquery.org/license"
          }
        },
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/license/mit/"
          }
        },
        {
          "license": {
            "name": "W3C license",
            "url": "https://www.w3.org/Consortium/Legal/copyright-documents-19990405"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.jersey.containers/jersey-container-servlet@4.0.3?type=jar",
      "externalReferences": [
        {
          "url": "https://projects.eclipse.org/projects/ee4j.jersey",
          "type": "website"
        },
        {
          "url": "https://ci.eclipse.org/jersey",
          "type": "build-system"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.jersey.media/jersey-media-json-jackson@4.0.3?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.glassfish.jersey.media",
      "name": "jersey-media-json-jackson",
      "version": "4.0.3",
      "description": "Jersey JSON Jackson (2.x) entity providers support module.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "5afd3230133d4419b8840408aec05c75"
        },
        {
          "alg": "SHA-1",
          "content": "c3514fdf68830d5cd0c4757468d1965e9d7a6b87"
        },
        {
          "alg": "SHA-256",
          "content": "cd84f283624bfaf35e354353162d5c701a297fb59aa78e5e2b347dfd09c20860"
        },
        {
          "alg": "SHA-512",
          "content": "415c9789bb609161eb21337b234202e578bb67b2234cc77d95d8c6b9daed59c7224e12a8b4f737c7d833a82b71d932e3c7cb3ef300dbbabc9e18cf501b9fbe9f"
        },
        {
          "alg": "SHA-384",
          "content": "458e5ae3e71e4a84616ae33c73618b4f3f2a6fc1779f81bd7e49f005b08bb985b2f13138e72e9240c31dd8b18e027517"
        },
        {
          "alg": "SHA3-384",
          "content": "7c933874cafa4476589065c015a3980e1bfd0f24a777cd80a78a2946af587cdccd1caf8cc5932684fe34d02f33c135ef"
        },
        {
          "alg": "SHA3-256",
          "content": "61aa44b9d776eab5f5d5dfe24c32b25d0b1fe4975077d254a307800bdb3ee451"
        },
        {
          "alg": "SHA3-512",
          "content": "0e34874ed50d9037b1e91655ac2e36caa348b4da6d422a5a27e5b7bc69e466459b6835cabadc712f6d3273da4884ae5fb7e2d2e081d64907ac80c4d70518b8c0"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "name": "The GNU General Public License (GPL), Version 2, With Classpath Exception",
            "url": "https://www.gnu.org/software/classpath/license.html"
          }
        },
        {
          "license": {
            "name": "Apache License, 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.jersey.media/jersey-media-json-jackson@4.0.3?type=jar",
      "externalReferences": [
        {
          "url": "https://projects.eclipse.org/projects/ee4j.jersey",
          "type": "website"
        },
        {
          "url": "https://ci.eclipse.org/jersey",
          "type": "build-system"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.jersey.ext/jersey-entity-filtering@4.0.3?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.glassfish.jersey.ext",
      "name": "jersey-entity-filtering",
      "version": "4.0.3",
      "description": "Jersey extension module providing support for Entity Data Filtering.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "a378168e3d94af08f38678be450f0df0"
        },
        {
          "alg": "SHA-1",
          "content": "765403a664a7d3dbe703a0919977aaf4db14f5b7"
        },
        {
          "alg": "SHA-256",
          "content": "64503ee18c51f660d456e26e78e6cb113e06c6320e49347ba5722746862c8f1c"
        },
        {
          "alg": "SHA-512",
          "content": "0922af5abc95a2e6a275f2fe1634fc59c1169680eacd81d7f183a9cab557a3dd966fcc13f4fa16e5bbb7dae01fe7a08588cb5278d160bec1bcd093b6491da0ae"
        },
        {
          "alg": "SHA-384",
          "content": "1ed3d6b58350067bcf50d3777608ae68714837418185c7dec7097a6ccee5cad27f11cbb98c5e80da63cc92d9d24e28fb"
        },
        {
          "alg": "SHA3-384",
          "content": "7962adaa528e1b8d9f7c779276d10a53d397ad7c850e846afbe879484f4b20f6c8687f77f6e5e08afd8fccbbeefcd083"
        },
        {
          "alg": "SHA3-256",
          "content": "fb288d89c8197cd4c2ae1ce6a1ad9172720b0823f271ce34f81f0973e9807531"
        },
        {
          "alg": "SHA3-512",
          "content": "6affe6fa24fd9fc20fd56e410586ae9468b358927807554fed3cab19e61a708f6e0ee619bb53d20d550fd5e618a798cee35fc8692048867f4d59a96315e8a414"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        },
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        },
        {
          "license": {
            "id": "BSD-2-Clause"
          }
        },
        {
          "license": {
            "name": "Apache License, 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        },
        {
          "license": {
            "name": "Public Domain",
            "url": "https://creativecommons.org/publicdomain/zero/1.0/"
          }
        },
        {
          "license": {
            "name": "Modified BSD",
            "url": "https://asm.ow2.io/license.html"
          }
        },
        {
          "license": {
            "name": "jQuery license",
            "url": "jquery.org/license"
          }
        },
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/license/mit/"
          }
        },
        {
          "license": {
            "name": "W3C license",
            "url": "https://www.w3.org/Consortium/Legal/copyright-documents-19990405"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.jersey.ext/jersey-entity-filtering@4.0.3?type=jar",
      "externalReferences": [
        {
          "url": "https://projects.eclipse.org/projects/ee4j.jersey",
          "type": "website"
        },
        {
          "url": "https://ci.eclipse.org/jersey",
          "type": "build-system"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml.jackson.module/jackson-module-jakarta-xmlbind-annotations@2.22.3?type=jar",
      "publisher": "FasterXML",
      "group": "com.fasterxml.jackson.module",
      "name": "jackson-module-jakarta-xmlbind-annotations",
      "version": "2.22.3",
      "description": "Support for using Jakarta XML Bind (aka JAXB 3.0) annotations as an alternative to \u0022native\u0022 Jackson annotations, for configuring data-binding.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "6c200c8acecd147379acf993d5a8e3cb"
        },
        {
          "alg": "SHA-1",
          "content": "c5858c73043ca2924f79bf23cefb092e415a5c2c"
        },
        {
          "alg": "SHA-256",
          "content": "ce2bbc8d3f27e9321a80e30231288aa0c340c100c45eb413efffbab7b98f3c1e"
        },
        {
          "alg": "SHA-512",
          "content": "4b3191048418585444d530ba9e5da2754d0623b2710e065c285d2d49f3a0c1db9da357679d7ba2777817f1a1616675046489ac3e4b5d3a9061debcc0212f099c"
        },
        {
          "alg": "SHA-384",
          "content": "82061994eb0edd761a0e4b337517db42238523ce3d349ffcf204f59a2c5f245b902907ef3e3ef2f8f96d894362937f8a"
        },
        {
          "alg": "SHA3-384",
          "content": "4b1678a5df2b188b44581d525ddf058d116210c19ca3f30dfd643e8e4d0cbc3dd892d6908d6f37d9dcbe8b3ee69f11f4"
        },
        {
          "alg": "SHA3-256",
          "content": "e0d21f8fdb6ccdeb295584b7fb7a91008ec9bc74360e99c3e4fac1cc3d4cea6d"
        },
        {
          "alg": "SHA3-512",
          "content": "2a417192c2b4c506ee9b786cd1ee04fdd0175b48ed6b63a4b2817ae5a38f4ccd47c8fde835406275b39710df633960c62d95dfe41c12e76f77fa60a416b56cfa"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.module/jackson-module-jakarta-xmlbind-annotations@2.22.3?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/FasterXML/jackson-modules-base",
          "type": "website"
        },
        {
          "url": "https://central.sonatype.com/api/v1/publisher",
          "type": "distribution"
        },
        {
          "url": "https://github.com/FasterXML/jackson-modules-base/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/FasterXML/jackson-modules-base/jackson-module-jakarta-xmlbind-annotations",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@4.0.5?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "jakarta.xml.bind",
      "name": "jakarta.xml.bind-api",
      "version": "4.0.5",
      "description": "Jakarta XML Binding API",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "935053b2c792f34c7ea3a238ea96f3ac"
        },
        {
          "alg": "SHA-1",
          "content": "161811f36cad3c65991502e80317f2f6703361df"
        },
        {
          "alg": "SHA-256",
          "content": "5e489b6c874c4119e003ff1403db523ee3a8959ec499f3de29e77245efccf216"
        },
        {
          "alg": "SHA-512",
          "content": "3f3e522bd716ab6842ba2eed8bd44fc7d859ca5a3798e5adf2447eabde1c5d3b74b6f58d217d6cd772cbb034e4f003d9f9e10fafa15f4e108ea802548d1e5044"
        },
        {
          "alg": "SHA-384",
          "content": "0030a82d345127efdf52273c7ed5939deb67163821d73ba6050f51d5b6d918539c43a8c1e04594afce16e0b47b4576aa"
        },
        {
          "alg": "SHA3-384",
          "content": "9161e41f583009e64c236660b561acb1c04e3f46adde5383cb0006a31a71884c6580548ba583530460d04801507447a9"
        },
        {
          "alg": "SHA3-256",
          "content": "f5490e1ab440817067b53e3c381c7d6eb4fa86d8eeed297f89ae1b7e5f31424a"
        },
        {
          "alg": "SHA3-512",
          "content": "4f4d18ab8edf47e5debf05fdd52f92f2d18d4089e7d705300830be0964bba93c6ff810e308bad2f5e4875e5588cab171221027c4704315388ca4668b195d25eb"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@4.0.5?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/jakartaee/jaxb-api/jakarta.xml.bind-api",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/jakartaee/jaxb-api/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/jaxb-dev",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/jakartaee/jaxb-api.git/jakarta.xml.bind-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.jersey.media/jersey-media-multipart@4.0.3?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.glassfish.jersey.media",
      "name": "jersey-media-multipart",
      "version": "4.0.3",
      "description": "Jersey Multipart entity providers support module.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "2ba663b839c8f5ae56b0395cc45ae5b3"
        },
        {
          "alg": "SHA-1",
          "content": "95b47d3975eed27188fcae0af6bf4f2bd9c93e92"
        },
        {
          "alg": "SHA-256",
          "content": "9f6bdf2bd3c541a931ef01e85173f98f27f12268a36008c1f3780188f2769e5a"
        },
        {
          "alg": "SHA-512",
          "content": "dc340ea2a6843563fca67fe2b0ea8e24502acbb96a7477c0d3a8e3367db954a962068cfa1b796255fa56090a61f35e77041a7b636290a78ba7dc4b0985a804b3"
        },
        {
          "alg": "SHA-384",
          "content": "74f7d6c283eb190137bd0d261d643eaddd4803072614321e25340fd15d44b651080f65813db45fbd93708de385d1b082"
        },
        {
          "alg": "SHA3-384",
          "content": "ebb643fe451b5950908428ceeb232559e47463d1ea2d93d29511c9b289a6f51bc97c4cff24d62b7afa9b93e25e54a40c"
        },
        {
          "alg": "SHA3-256",
          "content": "f2fe2b458033562c56688d6e3c81b3113f83ed1425cc8934f5e5135ad4cf53b1"
        },
        {
          "alg": "SHA3-512",
          "content": "dc981ce7a24d772e70ed59f116eb79616c14d524294ad42a5d9fe7d1250801c1a64324a28ff57fb48a07038c9efa9dce0324d49ee689d0344a4498064c54e650"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        },
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        },
        {
          "license": {
            "id": "BSD-2-Clause"
          }
        },
        {
          "license": {
            "name": "Apache License, 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        },
        {
          "license": {
            "name": "Public Domain",
            "url": "https://creativecommons.org/publicdomain/zero/1.0/"
          }
        },
        {
          "license": {
            "name": "Modified BSD",
            "url": "https://asm.ow2.io/license.html"
          }
        },
        {
          "license": {
            "name": "jQuery license",
            "url": "jquery.org/license"
          }
        },
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/license/mit/"
          }
        },
        {
          "license": {
            "name": "W3C license",
            "url": "https://www.w3.org/Consortium/Legal/copyright-documents-19990405"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.jersey.media/jersey-media-multipart@4.0.3?type=jar",
      "externalReferences": [
        {
          "url": "https://projects.eclipse.org/projects/ee4j.jersey",
          "type": "website"
        },
        {
          "url": "https://ci.eclipse.org/jersey",
          "type": "build-system"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.jvnet.mimepull/mimepull@1.11.0?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.jvnet.mimepull",
      "name": "mimepull",
      "version": "1.11.0",
      "description": "Provides a streaming API to access attachments parts in a MIME message.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "60f4f0b5a4ed35f778433cdc100a3b29"
        },
        {
          "alg": "SHA-1",
          "content": "42dd827cb8fcb27d47bef306ee7132e90a5ad44f"
        },
        {
          "alg": "SHA-256",
          "content": "af26c386c4baf48dab68f38b132d5990bd8f8324424c8579edd3ffce250d329e"
        },
        {
          "alg": "SHA-512",
          "content": "14ca3be7f61d49aa5b238301da2e1746719da57f82b80f464729004b903b0e47f76b26f750e38093bb434e91c207e551610629a16f47f8699c4048f3f9874080"
        },
        {
          "alg": "SHA-384",
          "content": "0197cd3c8468d5f163217590f4d3332736d3b23eeff206811fdd6edd609172d5f93bc0fbb4db604feab102ee01cc151d"
        },
        {
          "alg": "SHA3-384",
          "content": "9672853143978ac9bd509d0958da12e9238f69c9030a6d982cf26b938334155158105dda773a8090346b3d6b180c0974"
        },
        {
          "alg": "SHA3-256",
          "content": "61b3b26a4fb95d12060020ffd877bb20cd4811946adbebbfdd8300930a1c7deb"
        },
        {
          "alg": "SHA3-512",
          "content": "32104e435db8b283fce81b780bc905c60f7f966d6b69a0864aa17dc623574f3d335d0bf4724c7c120a05af93abfade25932b53dd116a672b9fa481c7e8f58166"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/org.jvnet.mimepull/mimepull@1.11.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/eclipse-ee4j/metro-mimepull",
          "type": "website"
        },
        {
          "url": "https://github.com/eclipse-ee4j/metro-mimepull/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://www.eclipse.org/lists/metro-dev",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/metro-mimepull",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.jersey.inject/jersey-hk2@4.0.3?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.glassfish.jersey.inject",
      "name": "jersey-hk2",
      "version": "4.0.3",
      "description": "HK2 InjectionManager implementation",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "d9a020f09e252e816ab2c91ee5c88115"
        },
        {
          "alg": "SHA-1",
          "content": "3d565d02de7291353d37efc8f8c6606646ce78ac"
        },
        {
          "alg": "SHA-256",
          "content": "fa9332d19d2607a31fe26cf52065f5ee86a763f1a091668a4d5351202a84babe"
        },
        {
          "alg": "SHA-512",
          "content": "51aa76e417784ef4aef66bfe3dcf8d26d27cbe7afd94f6992756f463784c7c0f5d8cfff4a6c209cc406dacfcc6fd7eebb4c2989750005dde504742c191746a72"
        },
        {
          "alg": "SHA-384",
          "content": "b074441e600bd4b598b8f38a63bcbb0c700d5f1e22c3f390284e8ca7f2601dcf3d42d317a1e19333f1f91204067c0fb4"
        },
        {
          "alg": "SHA3-384",
          "content": "c004d200f569a227a96a94c95ee76ae6d448ca36260f1aacc058792a392769ccf4cd6c0bd5288a2070abd1b1f302778e"
        },
        {
          "alg": "SHA3-256",
          "content": "a4d5a602e56a6e04791fa0cc80f2f7ce26075f8ced9fe13b693e8bc05b2283b7"
        },
        {
          "alg": "SHA3-512",
          "content": "21ec4fd05ab37a8aaef798d3c7ff78564f1a05db99dc513981a2458d704c71052b57f9d26dd62a81d5fc5ad80d77e6a89c9cfb6bec245ac89b521e06802aa139"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        },
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        },
        {
          "license": {
            "id": "BSD-2-Clause"
          }
        },
        {
          "license": {
            "name": "Apache License, 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        },
        {
          "license": {
            "name": "Public Domain",
            "url": "https://creativecommons.org/publicdomain/zero/1.0/"
          }
        },
        {
          "license": {
            "name": "Modified BSD",
            "url": "https://asm.ow2.io/license.html"
          }
        },
        {
          "license": {
            "name": "jQuery license",
            "url": "jquery.org/license"
          }
        },
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/license/mit/"
          }
        },
        {
          "license": {
            "name": "W3C license",
            "url": "https://www.w3.org/Consortium/Legal/copyright-documents-19990405"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.jersey.inject/jersey-hk2@4.0.3?type=jar",
      "externalReferences": [
        {
          "url": "https://projects.eclipse.org/projects/ee4j.jersey",
          "type": "website"
        },
        {
          "url": "https://ci.eclipse.org/jersey",
          "type": "build-system"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.hk2/hk2-locator@4.0.3?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.glassfish.hk2",
      "name": "hk2-locator",
      "version": "4.0.3",
      "description": "ServiceLocator Default Implementation",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "e59792f8de32596a026197ca4f3d45c0"
        },
        {
          "alg": "SHA-1",
          "content": "026fc0e62497343180f2f21866afdb4d9d30e17d"
        },
        {
          "alg": "SHA-256",
          "content": "738c5a5713240bc2b2d4adad1df0a0480a6111dc32ccc2ff1a0f5f3db8800f45"
        },
        {
          "alg": "SHA-512",
          "content": "842d1542a23003b4d7e0db605c8c8b9770a3b724966187b43bf2613918f3c8a6d782e41b4526e88440b1a3831c55c549c15d0d8da85d1e399637ad11c5f17710"
        },
        {
          "alg": "SHA-384",
          "content": "39aeda67a15b427cb570d361a72055a9e21ae75b3ff078773daa164d5039a647e31a54befa0fefaf25f4d171913db5f8"
        },
        {
          "alg": "SHA3-384",
          "content": "26010d7c6a2bb75c1e724f339b8642260b3cebf1cbb33c78c8c154660913f44981e14e4699985a177489f9c6076e21a6"
        },
        {
          "alg": "SHA3-256",
          "content": "3f05cb03e256d256aef9588d7436ec425be74b22e49b2b2d3feefc0ed5fafabb"
        },
        {
          "alg": "SHA3-512",
          "content": "48444e151c1daa156becc55e3b42843cfb4ff641221afe2b7bfc45c0e00b12c391166dab1ea600f1e25e881a6c45524e2d2431cecb2fbad2d3e185f347d1cbff"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.hk2/hk2-locator@4.0.3?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/eclipse-ee4j/glassfish-hk2",
          "type": "website"
        },
        {
          "url": "https://github.com/eclipse-ee4j/glassfish-hk2/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/glassfish-hk2-dev/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/glassfish-hk2",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.hk2.external/aopalliance-repackaged@4.0.3?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.glassfish.hk2.external",
      "name": "aopalliance-repackaged",
      "version": "4.0.3",
      "description": "Dependency Injection Kernel",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "899e3540610595a35d2a941bf413d520"
        },
        {
          "alg": "SHA-1",
          "content": "ae9a15978dddd6a2f13f1cb84dda81ab27e50876"
        },
        {
          "alg": "SHA-256",
          "content": "aeb7d67b20730a1533448083dd5d6d6c837e577b10ccf1e534cf0951bc573470"
        },
        {
          "alg": "SHA-512",
          "content": "8bc2f38a7791004e625ce5cc2b3c82a48717c41e9812fbe7a306fd68fa2cee858459d4a6ac97dedc35394446f7386bacd18eddd2688775e201b48aff5b22067c"
        },
        {
          "alg": "SHA-384",
          "content": "a28839c268eb452b12169c37b42fae2211ec1066eaf125e511167616809e3ff31f3222dca162f941a4715484e497c26e"
        },
        {
          "alg": "SHA3-384",
          "content": "d7d6a679ec5d1fcabc69c763e35a8514b641c1786a80a2aa8ddd3f944cebea57d72fdb91924ec93ba31fd3ee784157d9"
        },
        {
          "alg": "SHA3-256",
          "content": "b62035ca9f191615588931a99183580ba71bbc48a02c41d2c5545908454dc83d"
        },
        {
          "alg": "SHA3-512",
          "content": "187983797c304cf590033d2d6c8ca3a0ba887887ad8f6f1cb45e81859b01ff7db0fe784dc43c4d7fe788bab9dd03a273bfcf44ded67d3c2d5b61676f8ef57b8e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.hk2.external/aopalliance-repackaged@4.0.3?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/eclipse-ee4j/glassfish-hk2",
          "type": "website"
        },
        {
          "url": "https://github.com/eclipse-ee4j/glassfish-hk2/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/glassfish-hk2-dev/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/glassfish-hk2",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.hk2/hk2-api@4.0.3?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.glassfish.hk2",
      "name": "hk2-api",
      "version": "4.0.3",
      "description": "HK2 API module",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "c3845c8071df93a4492284082351f47e"
        },
        {
          "alg": "SHA-1",
          "content": "90ccaa5ac1d10c6e89a8f92ab44d1e85cad6bde5"
        },
        {
          "alg": "SHA-256",
          "content": "c93e95e1c4851ce7ae24e39b5aa4fc7828457b7a01f427aae4a6721b288cee4a"
        },
        {
          "alg": "SHA-512",
          "content": "a3c66cc04115aacbb54cc211f902036880c3c5290fbde8de630163f6ac59df390f514b9f371d08750c4c8cf72c50d24a4c5275af3934d6eb4b03203f2b3838cf"
        },
        {
          "alg": "SHA-384",
          "content": "3ee30426b28e52fe01ad21c1b48075156ae3bb5ce9a13d55e1d5f2e21bbb0ae5adf4d7fc957f51b5342ab360ba077c4a"
        },
        {
          "alg": "SHA3-384",
          "content": "5b69a1853017fa2846ef9faf441b4dbeedb7d34c71bb3207f23337191669988f3cf0a1a1c8bf6e9d74ea52c1d383b1ed"
        },
        {
          "alg": "SHA3-256",
          "content": "d2cd0d5424779a9730bc42c1c61a74f3627223ff0a47da1ee089ed3f51740ca6"
        },
        {
          "alg": "SHA3-512",
          "content": "47975b10178c56a2c30a792a7de83b40d3fa17c0045f29325824144d0ddea9d2fa24e0c6978a4e9bcec6b715cb3ba689730637c322c068b9ac82adf9bb591ff9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.hk2/hk2-api@4.0.3?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/eclipse-ee4j/glassfish-hk2",
          "type": "website"
        },
        {
          "url": "https://github.com/eclipse-ee4j/glassfish-hk2/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/glassfish-hk2-dev/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/glassfish-hk2",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.hk2/hk2-utils@4.0.3?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.glassfish.hk2",
      "name": "hk2-utils",
      "version": "4.0.3",
      "description": "HK2 Implementation Utilities",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "09f2fc391f3312cef099096244b7f2c4"
        },
        {
          "alg": "SHA-1",
          "content": "84947f303e64efabe28bc9f309427005032bf825"
        },
        {
          "alg": "SHA-256",
          "content": "db8a953634e5c23bcc8a4fd122ddeb5ac29283142a08357cceb4bdcbb028897d"
        },
        {
          "alg": "SHA-512",
          "content": "d42dd904d0034f7162c90e0e8c3f63197d8e883f945acd400d93a43227a49233fe45521d86dc070fb6ae8c6470f9e78b6fa8330e85dd76f51ea7e42389988c84"
        },
        {
          "alg": "SHA-384",
          "content": "2ce8348b148437b6524c584b8ed226c5143aa818d8fdc5a00b0c08ca6c7ed3130bcfdb558ca431dff47c73a72aa1d25c"
        },
        {
          "alg": "SHA3-384",
          "content": "98bc1130d6e52bc8567ded18d6c951d9a1d2756f20a9070f79f66329a6d64894704a201ad9071df48dd8688de70d95b1"
        },
        {
          "alg": "SHA3-256",
          "content": "0dbe0f205f044af22b8132192da6a863a649b9c8b153849f45185b595eec9f28"
        },
        {
          "alg": "SHA3-512",
          "content": "1d2f7095151d71afc37f89ed9c388caf0df192c548a8aabe5eacb2d9e8b7ab0d309e9e02f9990a66106eb3230b3b690344353f53c2d7afdc845df6fbb627a67b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.hk2/hk2-utils@4.0.3?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/eclipse-ee4j/glassfish-hk2",
          "type": "website"
        },
        {
          "url": "https://github.com/eclipse-ee4j/glassfish-hk2/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/glassfish-hk2-dev/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/glassfish-hk2",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.javassist/javassist@3.33.0-GA?type=jar",
      "publisher": "Shigeru Chiba, www.javassist.org",
      "group": "org.javassist",
      "name": "javassist",
      "version": "3.33.0-GA",
      "description": "Javassist (JAVA programming ASSISTant) makes Java bytecode manipulation simple. It is a class library for editing bytecodes in Java.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "6751a24bfc86d2c00ad571d316723b3e"
        },
        {
          "alg": "SHA-1",
          "content": "20680ccee671059525390c9050f134cc857baed3"
        },
        {
          "alg": "SHA-256",
          "content": "1620478adc5f4d2eccd356e59513c270f1508bed53ce75deffb3107b7b43db2c"
        },
        {
          "alg": "SHA-512",
          "content": "ca22ee9eccb10cc61c2f83fe336f814ca9473081dc75622db20541be0d701e1f1c3d933ca43469cea953ff66e3731b4923f3542a3ba2e3a237d06ec47684546f"
        },
        {
          "alg": "SHA-384",
          "content": "c35ddd469d6c1496173932fd3e00654333be93229ca45cbf4b90f482d56acb4a518e26a1a47f0e46be289b3fa60cb7f5"
        },
        {
          "alg": "SHA3-384",
          "content": "0242412d096edb98e9f2b419c6835b75e0015dcc2bfa934efabc1eca00d970a7502ed91d233d5b08f10d87e141fc2bbb"
        },
        {
          "alg": "SHA3-256",
          "content": "d6758cbb73cf9dc9cd125a751d950d2e9764329dc8c55476c1bddb2f95ad2738"
        },
        {
          "alg": "SHA3-512",
          "content": "29d39d186bd0ea031979c071b4439bf14e6c6e1779c4825f97e366c7f448aa832c66d434baea0eb1c2a02461cdee9abeaa077a66c0c9237fc2279200f17cbb89"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MPL-1.1"
          }
        },
        {
          "license": {
            "id": "LGPL-2.1-only"
          }
        },
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.javassist/javassist@3.33.0-GA?type=jar",
      "externalReferences": [
        {
          "url": "https://www.javassist.org/",
          "type": "website"
        },
        {
          "url": "https://repository.jboss.org/nexus/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://jira.jboss.org/jira/browse/JASSIST/",
          "type": "issue-tracker"
        },
        {
          "url": "scm:git:git@github.com:jboss-javassist/javassist.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/jakarta.annotation/jakarta.annotation-api@3.0.0?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "jakarta.annotation",
      "name": "jakarta.annotation-api",
      "version": "3.0.0",
      "description": "Jakarta Annotations API",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "7faffaab962918da4cf5ddfd76609dd2"
        },
        {
          "alg": "SHA-1",
          "content": "54f928fadec906a99d558536756d171917b9d936"
        },
        {
          "alg": "SHA-256",
          "content": "b01f55552284cfb149411e64eabca75e942d26d2e1786b32914250e4330afaa2"
        },
        {
          "alg": "SHA-512",
          "content": "2bd5a16684c4e8144897ba6dc467628d1b8a85326235240e4c20101b6df3681d23aeebc30ca99e395ec848f33cb5244085031b2a0fbce746c8ede7148a5e7c1d"
        },
        {
          "alg": "SHA-384",
          "content": "1a12cb78019d310eb08314f863c2a0e48aa2845bde844f8204e653ec50713bf135cc58cce882e14ef631327952b5ad99"
        },
        {
          "alg": "SHA3-384",
          "content": "a0dd7dd32e8dc5ed679589f6066f16593b52334b9947a71381aeab44b3cbe295ec24dfef4fbfa5514ba24ea60fe042a9"
        },
        {
          "alg": "SHA3-256",
          "content": "6ae915a05b483f75c51f3a109cf368842d186b2996758b8a106377a7a9485c12"
        },
        {
          "alg": "SHA3-512",
          "content": "52f611aa0a98812e525be2b9d5a5712aef660598cff64282dbd9afc237560f442ab745fc95c919216f9cb4197c224ba6c7317282962c638fee956925bfa031c0"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl": "pkg:maven/jakarta.annotation/jakarta.annotation-api@3.0.0?type=jar",
      "externalReferences": [
        {
          "url": "https://projects.eclipse.org/projects/ee4j.ca",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/jakartaee/common-annotations-api/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/ca-dev",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/jakartaee/common-annotations-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/jakarta.json/jakarta.json-api@2.1.3?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "jakarta.json",
      "name": "jakarta.json-api",
      "version": "2.1.3",
      "description": "Jakarta JSON Processing defines a Java(R) based framework for parsing, generating, transforming, and querying JSON documents.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "596997520702889d4afef9cffbd4b71a"
        },
        {
          "alg": "SHA-1",
          "content": "4febd83e1d9d1561d078af460ecd19532383735c"
        },
        {
          "alg": "SHA-256",
          "content": "bc934142805ea1d794f1440563965a3861a2a9fb7414ecd3fe44f26500734414"
        },
        {
          "alg": "SHA-512",
          "content": "5a6566f0ceaa8b0ca40ae643942c0d46acd118a3b4d85af5f3a977e738465e8c8d4bc977f0c3e4b51f4471e408c28f66dbc0b19adf61237f6f6f7fa1d0dacc31"
        },
        {
          "alg": "SHA-384",
          "content": "1a17b8a416692ba0e485d7290782b2b5c4de8cb65c2043f221381deee668953655c221dc3efa29d3c65c8b2c1fab173f"
        },
        {
          "alg": "SHA3-384",
          "content": "4c009f9fec6b1e14b2c675ee7addb49ebd047d71d7aaf31601ccea3ffe4af1d82838a3452b0e5d7c2814e27861cd3ffd"
        },
        {
          "alg": "SHA3-256",
          "content": "5b839f4645dbac0d1bc76a91e168a52574c2bb6de0b7e92cd14aafd0ad6a28b0"
        },
        {
          "alg": "SHA3-512",
          "content": "fedcd8618f44ab0b771bef7d2fcb61d49021eb2e592d8d3058d3f57e7fe0ed1a9239cac859fe534dd0629aaf577fb8f77841412dbb3ae58b8d8cd0754da2ec48"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0",
            "url": "https://www.eclipse.org/legal/epl-2.0"
          }
        },
        {
          "license": {
            "name": "GNU General Public License, version 2 with the GNU Classpath Exception",
            "url": "https://projects.eclipse.org/license/secondary-gpl-2.0-cp"
          }
        }
      ],
      "purl": "pkg:maven/jakarta.json/jakarta.json-api@2.1.3?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/eclipse-ee4j/jsonp",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/ee4j/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jsonp",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.eclipse.parsson/jakarta.json@1.1.9?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.eclipse.parsson",
      "name": "jakarta.json",
      "version": "1.1.9",
      "description": "Default provider for Jakarta JSON Processing",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "f91d45a29f468d318ec82a943145a32d"
        },
        {
          "alg": "SHA-1",
          "content": "afd42f540fbecc38984fe6024d8ed00adcefe08c"
        },
        {
          "alg": "SHA-256",
          "content": "75b97f4c8dd035aae97a92478fdd7fe961a6ed7c4051b54377152decafa62a57"
        },
        {
          "alg": "SHA-512",
          "content": "e134152aa2a57327dda6cca1ffc3f5aac4292cc2e6251b1175b391a9fb11f1179a0432e25fd654118e3f5c7ef1d965d3f75f2a5cbbc5045c7926b5dd28efb5da"
        },
        {
          "alg": "SHA-384",
          "content": "da0a39754ede607264486f9fa01d1f2c0220a02f4bd1c869e3bd82960a367fa8d506b1fb05c8e61ded867846ab46d754"
        },
        {
          "alg": "SHA3-384",
          "content": "47af9b290e08d9df2bf50b3cee1b9ea68962622fab1825e48086c7dc7d36c72b67516fa1042af7420373c5c3c915ecba"
        },
        {
          "alg": "SHA3-256",
          "content": "437a64aec47b276b787f9a297e254c6c7edbc65762f466128ed812152bcdbdb2"
        },
        {
          "alg": "SHA3-512",
          "content": "e406baed4cb9e2e7c5560a93f07c0dad73fcf270f1fd0245ffe515057100eae52c22f3f62db524febdbbdea4b319fbf7a9068be3e33b4e6b82b0272514831939"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0",
            "url": "https://www.eclipse.org/legal/epl-2.0"
          }
        },
        {
          "license": {
            "name": "GNU General Public License, version 2 with the GNU Classpath Exception",
            "url": "https://projects.eclipse.org/license/secondary-gpl-2.0-cp"
          }
        }
      ],
      "purl": "pkg:maven/org.eclipse.parsson/jakarta.json@1.1.9?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/eclipse-ee4j/parsson/parsson-bundles/jakarta.json",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/ee4j/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/parsson/parsson-bundles/jakarta.json",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.zaxxer/HikariCP@7.1.0?type=jar",
      "publisher": "Zaxxer.com",
      "group": "com.zaxxer",
      "name": "HikariCP",
      "version": "7.1.0",
      "description": "Ultimate JDBC Connection Pool",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "4f40811c9309be1d38e27dbec4200359"
        },
        {
          "alg": "SHA-1",
          "content": "13ac26e0d5ef25ae7f1515e59e525c500f013ccc"
        },
        {
          "alg": "SHA-256",
          "content": "2be45c641b841e81df87292e181f2c203500c5f0e9a1676f135927387f3cf40b"
        },
        {
          "alg": "SHA-512",
          "content": "d49d6cfd831d0b973fa16e61dc8682f983205dbb4399b679df4f18f3f30e1ddbc5247d3724881c1d3579144cc9aba11bd56e2aa9755a2c4754f5df21cc4760f3"
        },
        {
          "alg": "SHA-384",
          "content": "dd518256d0ecade85921e17bae8b41d63e458b06cf7b80e8d2d666735b1ad87b6f6c4ebcb9545454cad5253966c3b11b"
        },
        {
          "alg": "SHA3-384",
          "content": "ca14a89ee53fa74f2864fd70da166b9ea70ba7ddf74aa06d19b3f034163ab0afd664bb168f28d9d7c255d7758faff67b"
        },
        {
          "alg": "SHA3-256",
          "content": "5ef8c54addf0ee782714d73dbcb40f64dca61f38dc1dd00b6e477a1854f7d22d"
        },
        {
          "alg": "SHA3-512",
          "content": "d46da214debedf24f58be53c2b679c1300af4ce96f8fdc94e2fb9c73608750056004f3b6d60f00c2884ce899b82a6b191bbc2a1455be6205af226b9ed2129b43"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.zaxxer/HikariCP@7.1.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/brettwooldridge/HikariCP",
          "type": "website"
        },
        {
          "url": "https://github.com/brettwooldridge/HikariCP/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/brettwooldridge/HikariCP",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.mindrot/jbcrypt@0.4?type=jar",
      "group": "org.mindrot",
      "name": "jbcrypt",
      "version": "0.4",
      "description": "OpenBSD-style Blowfish password hashing for Java",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "d2b39d874e0d512f85386a72b0083682"
        },
        {
          "alg": "SHA-1",
          "content": "af7e61017f73abb18ac4e036954f9f28c6366c07"
        },
        {
          "alg": "SHA-256",
          "content": "e183f6f59404fc1e12073cfea4ace7ea103c900463cd21fb609a7c617ecdf624"
        },
        {
          "alg": "SHA-512",
          "content": "95ffe1f6593f83da047ff289a52b5ef73adcaca4a9a990a47744fbd50a52fce39958c17ed393e95d64093b2acbcaba39ba0b5b983a2e0ad98ce5c6e9282a67cd"
        },
        {
          "alg": "SHA-384",
          "content": "66a24af2134e6fcee1f4232c2c4bab43ab97d0c8ffbbc009f9bb0e5ef2a7d8795a6da3c6b47c583675b98036958aa729"
        },
        {
          "alg": "SHA3-384",
          "content": "33cf5e13897f25c525017888e7fcd2faf9a0f25135be03a65dd154feb11455e33c1df31963470b2ecaaba5267f6ad652"
        },
        {
          "alg": "SHA3-256",
          "content": "a347c842385e1d76780f9afe2200a7b9815bcd873b2a9fdd2652d0b0a5e0d324"
        },
        {
          "alg": "SHA3-512",
          "content": "5a71c6f1fde98865302e8c9ee6c99ace9efa220c0193bcdd56423015d1c73e54bd65f19a9a3ba3199b242589eb9ccc96b1d6c0d413387f8e8fbed7c691fc8790"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://www.isc.org/licenses/"
          }
        }
      ],
      "purl": "pkg:maven/org.mindrot/jbcrypt@0.4?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/djmdjm/jBCrypt",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/djmdjm/jBCrypt.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml.jackson.jakarta.rs/jackson-jakarta-rs-base@2.22.3?type=jar",
      "publisher": "FasterXML",
      "group": "com.fasterxml.jackson.jakarta.rs",
      "name": "jackson-jakarta-rs-base",
      "version": "2.22.3",
      "description": "Pile of code that is shared by all Jackson-based Jakarta-RS providers.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "e132693d221adda4b879f5a8dd7debb2"
        },
        {
          "alg": "SHA-1",
          "content": "84332c2f21e47534a0ef74a74023a44207ea4211"
        },
        {
          "alg": "SHA-256",
          "content": "d1bbe9ca3637b62950d17cfe3c69c5f6c10825b4d3ce6cfec82cf90bca4b934b"
        },
        {
          "alg": "SHA-512",
          "content": "849d7c45dd442de5b596742f52cd413e8be3b35e4099e7b961676511cb53d1589117d5502987ee9a01b8b8fb3eb192771da0aabdaac2ccd86b14757ea1b8c5f8"
        },
        {
          "alg": "SHA-384",
          "content": "88a07fc1d02046349249e5a9b1c743d3adda53131ea2d295fb82664659001a6dcd82b702213665d3fc90e150496dfcdf"
        },
        {
          "alg": "SHA3-384",
          "content": "5666e6f6f3af92abc54947eb2daef9f7739ffef3f938ece0db58340f9c170e74821184d1ded18607191677a6499c77b5"
        },
        {
          "alg": "SHA3-256",
          "content": "0809ff78b632f47186448c520b6667e88b289f3ef6cbb2082960c14e3d697010"
        },
        {
          "alg": "SHA3-512",
          "content": "9a19bf3f98f00e7df2c22ae6ccc77ba4886d42d35a25ed2fb478ff5fb782fa671b4bbd37e17830313616585a3584694dae42a0ba7b48b710c10c972f8c6a7add"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.jakarta.rs/jackson-jakarta-rs-base@2.22.3?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/FasterXML/jackson-jakarta-rs-providers/jackson-jakarta-rs-base",
          "type": "website"
        },
        {
          "url": "https://central.sonatype.com/api/v1/publisher",
          "type": "distribution"
        },
        {
          "url": "https://github.com/FasterXML/jackson-jakarta-rs-base/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/FasterXML/jackson-jakarta-rs-providers/jackson-jakarta-rs-base",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml.jackson.jakarta.rs/jackson-jakarta-rs-json-provider@2.22.3?type=jar",
      "publisher": "FasterXML",
      "group": "com.fasterxml.jackson.jakarta.rs",
      "name": "jackson-jakarta-rs-json-provider",
      "version": "2.22.3",
      "description": "Functionality to handle JSON input/output for Jakarta-RS implementations (like Jersey and RESTeasy) using standard Jackson data binding.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "032270e95b744c0207c87760b23ee164"
        },
        {
          "alg": "SHA-1",
          "content": "5198a2370b42d8a4380dacb33416024ad355bedc"
        },
        {
          "alg": "SHA-256",
          "content": "1538611c44c4abc067b41dfb8bb48908edb84905ccf406cf6c12d1868c33c47e"
        },
        {
          "alg": "SHA-512",
          "content": "5e5ece6893031b729ead68fceefc2f2b32b95a3cdf829c9da177cd6a69f5474aa837533fd5fadb9e5f20c1248e2b9cc2815e6c1cb8723763f2f064ddde341d93"
        },
        {
          "alg": "SHA-384",
          "content": "20343caaa0b787f2252bedb1e2cd6821a9fc0cd6e525a30ca896e76ecec41b904e42200cfdc569fd0c395e97e2f75c36"
        },
        {
          "alg": "SHA3-384",
          "content": "2ca6e5f09dbba289b46aa9b2c612070b954860e6e1b0e942d0fff612382e5b33f45ada450951438386c4be7ac7443771"
        },
        {
          "alg": "SHA3-256",
          "content": "1f19bdd992ebde6e936c7d11823f3d845fa1e8b745c2cbc5f18e783c977a2d66"
        },
        {
          "alg": "SHA3-512",
          "content": "b92fa3334ff99bae230f46f6742fcbba26253993cabf1fbc96ac8e90dd7f2e2dea3e7108e27bf82e1b161705b55ed230c626d8872f739d1f0b4067ef19962057"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.jakarta.rs/jackson-jakarta-rs-json-provider@2.22.3?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/FasterXML/jackson-jakarta-rs-providers/jackson-jakarta-rs-json-provider",
          "type": "website"
        },
        {
          "url": "https://central.sonatype.com/api/v1/publisher",
          "type": "distribution"
        },
        {
          "url": "https://github.com/FasterXML/jackson-jakarta-rs-json-provider/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/FasterXML/jackson-jakarta-rs-providers/jackson-jakarta-rs-json-provider",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8@2.22.3?type=jar",
      "publisher": "FasterXML",
      "group": "com.fasterxml.jackson.datatype",
      "name": "jackson-datatype-jdk8",
      "version": "2.22.3",
      "description": "Add-on module for Jackson (https://github.com/FasterXML/jackson) to support JDK 8 data types.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "283c51f09192d5354168e8e1db5bad01"
        },
        {
          "alg": "SHA-1",
          "content": "1c8e07b4eefb9ccb6a2247c54f42f293ff0dc8aa"
        },
        {
          "alg": "SHA-256",
          "content": "f223061a5aaecdc9506458143807c73bcd1a744d6b3bbb8da4703a0abc408f7d"
        },
        {
          "alg": "SHA-512",
          "content": "0ec3c7bae5df6b3140a18a41a784767748870e7e2067592985c68b144b1cd775601902d9d7af7c14d5039e25025cd0f9b95cd6a172f809fd8bb4b5880932067b"
        },
        {
          "alg": "SHA-384",
          "content": "8ef3987a9223e834e529c184cbb00633e3ad7e943ba2b8df2949c8c1d5ae7cb45c490c301a851bf15e8e48dceef041da"
        },
        {
          "alg": "SHA3-384",
          "content": "2ce308f3b9252489b0453f1e9eee1a8bcfcf255913910e0ef6c7f87d55bcb48d9a1364989bc163ed8aae166acd8b14b5"
        },
        {
          "alg": "SHA3-256",
          "content": "b6c27271cdf47235c59997fb390d8569b19dc0c82b848daf0d750b67a6b21074"
        },
        {
          "alg": "SHA3-512",
          "content": "c9acd1a2ed3ec82b8411c3fa7c7132784029aaf5226edf3b622ac57862a9d3bebc19fba5be10048853d5b6456c5ce3fcdf9b4962f538480cea42d5698bb2824b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8@2.22.3?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/FasterXML/jackson-modules-java8/jackson-datatype-jdk8",
          "type": "website"
        },
        {
          "url": "https://central.sonatype.com/api/v1/publisher",
          "type": "distribution"
        },
        {
          "url": "https://github.com/FasterXML/jackson-modules-java8/issues",
          "type": "issue-tracker"
        },
        {
          "url": "http://github.com/FasterXML/jackson-modules-java8/jackson-datatype-jdk8",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/ch.qos.logback/logback-classic@1.6.5?type=jar",
      "publisher": "QOS.ch",
      "group": "ch.qos.logback",
      "name": "logback-classic",
      "version": "1.6.5",
      "description": "logback-classic module",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "5d3aac2618d86f4e2b0b079eb545ac09"
        },
        {
          "alg": "SHA-1",
          "content": "3a0959903d420ba1ca087100a34063938ac0602b"
        },
        {
          "alg": "SHA-256",
          "content": "2e8c73aadad525e854af1ac95793af3dc75ecedd53c010ea2389de44c08e729b"
        },
        {
          "alg": "SHA-512",
          "content": "c81783a4214abe0ad805f8a827f368228dfcc828ede35af0dbd77576d422b407d5236048bb9f58b501900848a5fe419269bff3c5eaec202aee77a34abffb0a41"
        },
        {
          "alg": "SHA-384",
          "content": "c00573ac23f8324f80c6fe682e466000ce1d57e054cd2ee01f6d8cb236070f51d3d55762b332dc2a036d25c6475cedcd"
        },
        {
          "alg": "SHA3-384",
          "content": "724aa2957186386463919e1e3a695fa3fbb9aa78d3e4ae689b04ec44833995ecca31ab2dea938d43101b560b3270b081"
        },
        {
          "alg": "SHA3-256",
          "content": "d0cb30910958c18a737fe92367e22af045354f64abbb9bddb0a6e9e1eb89afb9"
        },
        {
          "alg": "SHA3-512",
          "content": "1c9f92bffbe897fa8e8902c5e42092aa6729a3a62faf8fb1b2d3fa92d956d2275836e4da700693a7d727486bf6aebf8a853dea666e2b67b3de62985bf97506be"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0",
            "url": "https://www.eclipse.org/legal/epl-2.0"
          }
        },
        {
          "license": {
            "id": "LGPL-2.1-only",
            "url": "https://www.gnu.org/licenses/old-licenses/lgpl-2.1-standalone.html"
          }
        }
      ],
      "purl": "pkg:maven/ch.qos.logback/logback-classic@1.6.5?type=jar",
      "externalReferences": [
        {
          "url": "http://logback.qos.ch/logback-classic",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/qos-ch/logback/logback-classic",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/ch.qos.logback/logback-core@1.6.5?type=jar",
      "publisher": "QOS.ch",
      "group": "ch.qos.logback",
      "name": "logback-core",
      "version": "1.6.5",
      "description": "logback-core module",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "c1fd0c330f33ec7c2e35f18f06d1c2f9"
        },
        {
          "alg": "SHA-1",
          "content": "821f011acaffb543404e94bc35f651b483a5a161"
        },
        {
          "alg": "SHA-256",
          "content": "03dcbf053b40166849b8eb0a30cbde40c04a448820e9a7589c4b0a2ec3a9db63"
        },
        {
          "alg": "SHA-512",
          "content": "bfb5bc79e3621cee4693a15e9866ea5500dda9ca370de3349a5abc4d47cdda76229091dfc1ab1a2742564c5bcf40a304b804554173cd71f3eee6296116a41861"
        },
        {
          "alg": "SHA-384",
          "content": "82744eaea67a2df1075c0407c369f279bea38c05de73b34d8634bcf50c1163449ad52894626f9b8e46afcb6a055b9dc9"
        },
        {
          "alg": "SHA3-384",
          "content": "d9ea4ac8b154e663e642f8e68868ed20a49757efff7aad1d67be43b83dc66f535f240dcc2e0cd8b6353232dfd81ee77f"
        },
        {
          "alg": "SHA3-256",
          "content": "3bcb1e0bb1ba36817da3cb61d3ab9eda2284bb41cb4872d21f10e55cfee97a60"
        },
        {
          "alg": "SHA3-512",
          "content": "19f93900933ae967669bc179885ed14b3ce1b4e3274f5f465f7e5cf05b72945fcedfcdd5182920ab904c09e93b1f9d1a20f684a2e565128a0c237e53898874ef"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0",
            "url": "https://www.eclipse.org/legal/epl-2.0"
          }
        },
        {
          "license": {
            "id": "LGPL-2.1-only",
            "url": "https://www.gnu.org/licenses/old-licenses/lgpl-2.1-standalone.html"
          }
        }
      ],
      "purl": "pkg:maven/ch.qos.logback/logback-core@1.6.5?type=jar",
      "externalReferences": [
        {
          "url": "http://logback.qos.ch/logback-core",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/qos-ch/logback/logback-core",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.owasp/security-logging-common@1.1.7?type=jar",
      "group": "org.owasp",
      "name": "security-logging-common",
      "version": "1.1.7",
      "description": "The OWASP Security Logging project provides developers and ops personnel with APIs for logging security-related events.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "9f11b84aefd2f2dcf48f8443a6213619"
        },
        {
          "alg": "SHA-1",
          "content": "4717c0c2225a2aad898b2fbdf717ec6e034d48f8"
        },
        {
          "alg": "SHA-256",
          "content": "ef9c6e4fefcf8ffcee7590239a8e8c56b192fc71c183fd8a943cf177e01b07eb"
        },
        {
          "alg": "SHA-512",
          "content": "d30fa0cce5b75758289a255946f165418786d96c5de3dbb12084d6da6bb75e556e43e002050ea114e3adb0ca15dc16e28b6218f5b2fcf993eadcb37076fb522a"
        },
        {
          "alg": "SHA-384",
          "content": "f10fbb5250849634a79477a536eb7f4a07aa66d5d1234e18caf5dbd2ab9473a4e26baa4fe381af9240eb6f9471cbb937"
        },
        {
          "alg": "SHA3-384",
          "content": "fee72e5c1e41740264f6d0f1fcfd72731c92df25af3d529509a006ce8330430390ab1139b8798c8cd6b78bcc0656d4e4"
        },
        {
          "alg": "SHA3-256",
          "content": "2c7bf9e688071240437f106b05955c298c9ee42f6c119cd918460af5a3a82a48"
        },
        {
          "alg": "SHA3-512",
          "content": "0ff1a2d6da110ca1a1713b052bab481bf052033e9cef7362a69a30e485d4a8ae8ba78ecd02278f4f81558d9cd2f12402108f82668754eade77fde3670433740c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.owasp/security-logging-common@1.1.7?type=jar",
      "externalReferences": [
        {
          "url": "https://www.owasp.org/index.php/OWASP_Security_Logging_Project",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/javabeanz/owasp-security-logging",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.owasp/security-logging-logback@1.1.7?type=jar",
      "group": "org.owasp",
      "name": "security-logging-logback",
      "version": "1.1.7",
      "description": "The OWASP Security Logging project provides developers and ops personnel with APIs for logging security-related events.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "c1148e1a96d53351f39b407185a59e06"
        },
        {
          "alg": "SHA-1",
          "content": "e609fe8531b96fcd559c9e146342aa3a56d16231"
        },
        {
          "alg": "SHA-256",
          "content": "100f5e85cbf9cf395983d85355cc17ed1d19d77176d93c58a14f339e62382168"
        },
        {
          "alg": "SHA-512",
          "content": "9bdb7df787ae5264e509082aa3b6f865ec543801587270eb582c3cb430a15f019c24a25e5a1d4df462a2dec0e6e82ce636807b055d5e72b73d67d90805e9e5d1"
        },
        {
          "alg": "SHA-384",
          "content": "8502c6a84746dfd8b9960d599cd476dd3b2c0017b2e8eba169411f7adbfea4236323ada03cb7e005812456976e673a7b"
        },
        {
          "alg": "SHA3-384",
          "content": "283c28b7760973dc0195fcd2127294c4c77a2a8c95bcc597401f00ffbd8c5367788ae9c9b6874deac178526fe93c1265"
        },
        {
          "alg": "SHA3-256",
          "content": "5a2f21e6fe6fe4bc45c439d7dbb5a16d07cc56ecf15b10a60125ee777bac1122"
        },
        {
          "alg": "SHA3-512",
          "content": "f2fa575c8838d7dcb5d11678cff9afaeb65d3bb227f501cf86541e4131c7a3cb72921d8ff8d28f91f7a6d5d3ac08d579f1fba73e8a7627c7a46371ed0a62fad9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.owasp/security-logging-logback@1.1.7?type=jar",
      "externalReferences": [
        {
          "url": "https://www.owasp.org/index.php/OWASP_Security_Logging_Project",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/javabeanz/owasp-security-logging",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/net.logstash.logback/logstash-logback-encoder@8.1?type=jar",
      "group": "net.logstash.logback",
      "name": "logstash-logback-encoder",
      "version": "8.1",
      "description": "Provides logback encoders, layouts, and appenders to log in JSON and other formats supported by Jackson",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "08a18cd6a4737221773acc1d2a5c9e3a"
        },
        {
          "alg": "SHA-1",
          "content": "aca81cdb03c48f4e0213d3e351ab1befafa9991e"
        },
        {
          "alg": "SHA-256",
          "content": "2716cb6a3e83ec2f296395b8752063f502d10a90de1a88f711f06ae5b6ecefb7"
        },
        {
          "alg": "SHA-512",
          "content": "71c73ef76d1f1562a54ba2f0fe8335f5e5a4938dc7896bcb58abd8a2b466e8c46640361d63ea475a5d37b12334335fd3e2827eda54fd17b0384027d955cdec7b"
        },
        {
          "alg": "SHA-384",
          "content": "5c332ad34b65c15869217e79c5e505502df624b0e76f47a7a9eba4d323a1ca4ea34dabb1ef75de489b329e2f94deba1d"
        },
        {
          "alg": "SHA3-384",
          "content": "cd44829a3e71f245a300f9b5a6d9b1e7838835b5f16dcb3d5c01c3cdcf23f76693abe517014bb5318d528e74a0ea150e"
        },
        {
          "alg": "SHA3-256",
          "content": "a5fd0008198d89b57aff757173ea60f1aa0e3cc2ea4ff043b2a73c5bf200244e"
        },
        {
          "alg": "SHA3-512",
          "content": "e3769fe9dbdc066f346b3f38cd3738d6d19bc5a0551164bb7593bf3dfa2deeb338d24ae664fda0b7f20510127fddb9875b4621b8f63cf76c851369711ea4e79a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        },
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/license/mit/"
          }
        }
      ],
      "purl": "pkg:maven/net.logstash.logback/logstash-logback-encoder@8.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/logfellow/logstash-logback-encoder",
          "type": "website"
        },
        {
          "url": "https://github.com/logfellow/logstash-logback-encoder",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/dev.cel/cel@0.14.0?type=jar",
      "group": "dev.cel",
      "name": "cel",
      "version": "0.14.0",
      "description": "Common Expression Language for Java. This include both the compilation and runtime packages.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "a1d9ada6680a62b65e27dbb5cd3ad6da"
        },
        {
          "alg": "SHA-1",
          "content": "14d1a6e93d4cf94d05e11a0ad25d6dd710d6aa82"
        },
        {
          "alg": "SHA-256",
          "content": "fb097817053766580f74ea6ef1ee345570a44aee84bf0d49a2d3ff5d84b9a910"
        },
        {
          "alg": "SHA-512",
          "content": "6b94abc1e666e449f1f5858b23cd83ba450361245ba704feabfe415c8e0ad54bf53eedaa65de43224637fcf575a75e9a2a5480115eb6123c6e9625fdb0b5d43f"
        },
        {
          "alg": "SHA-384",
          "content": "9b36790e9a2e069d42e63f7a46611ddc19e396407805b7f4847aba752f34632bd8519ca826471e7062457b3bb1f28179"
        },
        {
          "alg": "SHA3-384",
          "content": "d37d051b2e6220fe9b841ed175b670d12156237507fbe4c04ae23a54fd26f4db87174dfabc646702ff0f6c1a6e4c8ee3"
        },
        {
          "alg": "SHA3-256",
          "content": "e3419df41d75758ab5220594e53e29e7b22a7a18337fc358044838e0b7376f57"
        },
        {
          "alg": "SHA3-512",
          "content": "de3a43867be8adc0bcd60cc1c84367d1e7b4a6bb2d36d49520ee64335e3c36f3b87e8ffb8c64e9b4a0285800081738f826245e52815aba55b640edd9d32861e6"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/dev.cel/cel@0.14.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/cel-expr/cel-java",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/cel-expr/cel-java/tree/main",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.auto.value/auto-value-annotations@1.11.1?type=jar",
      "publisher": "Google LLC",
      "group": "com.google.auto.value",
      "name": "auto-value-annotations",
      "version": "1.11.1",
      "description": "Immutable value-type code generation for Java 8\u002B.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "681ea8fefc26a4eabb6869d1bbd7626c"
        },
        {
          "alg": "SHA-1",
          "content": "3493561c5809b92f9e5f54f48ecfe9682ba6cbbe"
        },
        {
          "alg": "SHA-256",
          "content": "6c61a11420a5cddf3313888e9d335d5eedfbeb9a8da26591470fbfe61f5bf859"
        },
        {
          "alg": "SHA-512",
          "content": "7013da74bfd4e7dee21576ba47900fce1505a1b6a1afd96b93cf214215c45c7a68ce8aaf4e1d3c02edcca88afa3c9ed47cfdbf045ea72ecb0e9766675b4b8dc0"
        },
        {
          "alg": "SHA-384",
          "content": "bf9a74c80cd9565c6d03bfe85312ef5723e36ace19291a4cb5f828cad8244e89025323592bafc262d0697ec3a899b0fa"
        },
        {
          "alg": "SHA3-384",
          "content": "b0417d3f07234d6190c3d8e6400533d19ecf49506a16a1300b138eba48e949126924202d2ba3dd2a501e26659c996fbc"
        },
        {
          "alg": "SHA3-256",
          "content": "6e21e869b925fbbbfad9f1156d9305e99e63021c58dd2fbd4e5e368d43336b2f"
        },
        {
          "alg": "SHA3-512",
          "content": "a2806e32a750bac3850faa59d7f4adafc81ca7c114aed1f6de1a8928fdae80002daec6804db90f197313921d823ebfddce63dbcb9576b89d042eb504dfcd580a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.auto.value/auto-value-annotations@1.11.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/google/auto/tree/main/value",
          "type": "website"
        },
        {
          "url": "http://github.com/google/auto/issues",
          "type": "issue-tracker"
        },
        {
          "url": "http://github.com/google/auto",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.guava/guava@33.7.2-jre?type=jar",
      "group": "com.google.guava",
      "name": "guava",
      "version": "33.7.2-jre",
      "description": "Guava is a suite of core and expanded libraries that include utility classes, Google\u0027s collections, I/O classes, and much more.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "b07f61705f717d9ae7946c7fdb1efd7a"
        },
        {
          "alg": "SHA-1",
          "content": "e70def5b06cfb109ea050de99870e79c8ce80dbc"
        },
        {
          "alg": "SHA-256",
          "content": "b530942257fb935f8b2cfaa5f8eb5bd59c555fd8e8d01b8ce98912e077ea606c"
        },
        {
          "alg": "SHA-512",
          "content": "bd663dc02f2293a552d82829518435b8cfcd77b7c73eeb638aef93918ef7613ad2a869003b09d1afb4446fa74308041daa7a6aea85c1bedb17db1f5f0c2c5c0b"
        },
        {
          "alg": "SHA-384",
          "content": "7c1d8db6504620e2feb70d56e4bffb479e5ba292c1d911da060cb66f2ac3d4050c718a72e6cfd6c82a36fd840c499942"
        },
        {
          "alg": "SHA3-384",
          "content": "13dcb7e8318a75368b33e1abc3a5b9b674bed950d6cfe1e7ca8be8f42f642816e69ae5d39d5ddbe998fe2c9acbf6ee28"
        },
        {
          "alg": "SHA3-256",
          "content": "adee2b0b99a4777a1fb04eb1a26d6b44aa47457c850dbf43d743d17801615c18"
        },
        {
          "alg": "SHA3-512",
          "content": "5bff0e702aaa6bfbf3fdd8fb963b6242d5dbecd8b7601afc0bfe158314887352d48c79c4ef9e256a0510474ac39493c59ca277bd1989a04705a723c6045fe4b7"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.guava/guava@33.7.2-jre?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/google/guava",
          "type": "website"
        },
        {
          "url": "https://github.com/google/guava/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/google/guava/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/google/guava/guava",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.guava/failureaccess@1.0.3?type=jar",
      "group": "com.google.guava",
      "name": "failureaccess",
      "version": "1.0.3",
      "description": "Contains com.google.common.util.concurrent.internal.InternalFutureFailureAccess and InternalFutures. Most users will never need to use this artifact. Its classes are conceptually a part of Guava, but they\u0027re in this separate artifact so that Android libraries can use them without pulling in all of Guava (just as they can use ListenableFuture by depending on the listenablefuture artifact).",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "29a782e90f6b37218b18bb880d2a8f4a"
        },
        {
          "alg": "SHA-1",
          "content": "aeaffd00d57023a2c947393ed251f0354f0985fc"
        },
        {
          "alg": "SHA-256",
          "content": "cbfc3906b19b8f55dd7cfd6dfe0aa4532e834250d7f080bd8d211a3e246b59cb"
        },
        {
          "alg": "SHA-512",
          "content": "72be228e7805da5623e42bf024ded7d9147023c66b22f4dbd04ac6898201af46ee82e1f92ea51eb0595f1b49151c4b8ecb862653d4906c17609c42544ee97abf"
        },
        {
          "alg": "SHA-384",
          "content": "9dd1a2a08efda311604992d3e7cee64873bc8c64de3b423b1b3a3dcc1f7f0810bb03901fbfe39a5f835accb0646f4ad8"
        },
        {
          "alg": "SHA3-384",
          "content": "ffd67766c165ee77e96824e06de2c19864a6e61f785b2085eb825f308f173d71f2555559d90d910f33f3367378ace0e3"
        },
        {
          "alg": "SHA3-256",
          "content": "08a77b528a72ca412b36e4004692705ebfd75cfb4897c88632d367d08a34b09f"
        },
        {
          "alg": "SHA3-512",
          "content": "7cba6c266babbe8272f029eea6e2cbddadee96eb1a16916a6eb2441a55837867ce717385d4388735fd83f2f6555931077c0ebda011a1ee9a37ac38c8c0c43a65"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.guava/failureaccess@1.0.3?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/google/guava/failureaccess",
          "type": "website"
        },
        {
          "url": "https://github.com/google/guava/actions",
          "type": "build-system"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/google/guava/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/google/guava/failureaccess",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar",
      "group": "com.google.guava",
      "name": "listenablefuture",
      "version": "9999.0-empty-to-avoid-conflict-with-guava",
      "description": "An empty artifact that Guava depends on to signal that it is providing ListenableFuture -- but is also available in a second \u0022version\u0022 that contains com.google.common.util.concurrent.ListenableFuture class, without any other Guava classes. The idea is: - If users want only ListenableFuture, they depend on listenablefuture-1.0. - If users want all of Guava, they depend on guava, which, as of Guava 27.0, depends on listenablefuture-9999.0-empty-to-avoid-conflict-with-guava. The 9999.0-... version number is enough for some build systems (notably, Gradle) to select that empty artifact over the \u0022real\u0022 listenablefuture-1.0 -- avoiding a conflict with the copy of ListenableFuture in guava itself. If users are using an older version of Guava or a build system other than Gradle, they may see class conflicts. If so, they can solve them by manually excluding the listenablefuture artifact or manually forcing their build systems to use 9999.0-....",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "d094c22570d65e132c19cea5d352e381"
        },
        {
          "alg": "SHA-1",
          "content": "b421526c5f297295adef1c886e5246c39d4ac629"
        },
        {
          "alg": "SHA-256",
          "content": "b372a037d4230aa57fbeffdef30fd6123f9c0c2db85d0aced00c91b974f33f99"
        },
        {
          "alg": "SHA-512",
          "content": "c5987a979174cbacae2e78b319f080420cc71bcdbcf7893745731eeb93c23ed13bff8d4599441f373f3a246023d33df03e882de3015ee932a74a774afdd0782f"
        },
        {
          "alg": "SHA-384",
          "content": "caff9b74079f95832ca7f6029346b34b606051cc8c5a4389fac263511d277ada0c55f28b0d43011055b268c6eb7184d5"
        },
        {
          "alg": "SHA3-384",
          "content": "e939f08df0545847ea0d3e4b04a114b08499ad069ba8ec9461d1779f87a56e0c37273630a0f4c14e78c348d3ac7eb97f"
        },
        {
          "alg": "SHA3-256",
          "content": "1f0a8b1177773b3a8ace839df5eed63cbf56b24a38714898a6e4ed065c42559f"
        },
        {
          "alg": "SHA3-512",
          "content": "6b495ecc2a18b17365cb08d124a0da47f04bcdde81927b5245edf3edd8e498c3c3fb92ce6a4127f660bac851bb1d3e4510e5c20d03be47ce99dc296d360db285"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/google/guava/listenablefuture",
          "type": "website"
        },
        {
          "url": "https://travis-ci.org/google/guava",
          "type": "build-system"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/google/guava/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/google/guava/listenablefuture",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.j2objc/j2objc-annotations@3.1?type=jar",
      "group": "com.google.j2objc",
      "name": "j2objc-annotations",
      "version": "3.1",
      "description": "A set of annotations that provide additional information to the J2ObjC translator to modify the result of translation.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "abe8bd3abff622b9a8b15c3a737aa741"
        },
        {
          "alg": "SHA-1",
          "content": "a892ca9507839bbdb900d64310ac98256cab992f"
        },
        {
          "alg": "SHA-256",
          "content": "84d3a150518485f8140ea99b8a985656749629f6433c92b80c75b36aba3b099b"
        },
        {
          "alg": "SHA-512",
          "content": "34ee5aad57b0b507e89c897306f73043f80fa0eb02b453e54d9052feb0808a0d2ed835d888946211921d2bf733780b19ff636479ce19b9f48814ba6008733ce1"
        },
        {
          "alg": "SHA-384",
          "content": "7b760a346a586d6a3fa4477807e2f02f091e61898fc9a6ff449e43c55b6465fbbc17720663183c84c41d4d8814085e51"
        },
        {
          "alg": "SHA3-384",
          "content": "a2166c1c08f947c0e60aa7c9167602942e7bac37ba45863d34c0132a1f352e7807a382588d350b93bdbbbbe315a3573f"
        },
        {
          "alg": "SHA3-256",
          "content": "3d4d3b8bfd2ad13351a53610aa4bf1c5a69d2bde4272c281003120ed9bcddb8c"
        },
        {
          "alg": "SHA3-512",
          "content": "0a574b379a3f8022f0b88252c87d0e6b6cfa434fdb981efd1b24387025a962d7ac4e90161e8bd048df142bf52f4fc41e4a0c1d45e4eeb872c5954aad552988e9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.j2objc/j2objc-annotations@3.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/google/j2objc/",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "http://github.com/google/j2objc",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.re2j/re2j@1.8?type=jar",
      "group": "com.google.re2j",
      "name": "re2j",
      "version": "1.8",
      "description": "Linear time regular expressions for Java",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "4240e655caa938c61ddbec8b92bfb061"
        },
        {
          "alg": "SHA-1",
          "content": "12c25e923e9e4fb1575a7640a2698745c6f19a94"
        },
        {
          "alg": "SHA-256",
          "content": "7b52c72156dd7f98b3237a5b35c1d34fba381b21048c89208913ad80a45dfbd7"
        },
        {
          "alg": "SHA-512",
          "content": "f556b098dc29ed8fbfa7ecd343b457c49c4deda80dc495ed164297a415328c20d7c89b17cb240f6d2f92607828db52e4f13b66b11277e33e6ebc34a97832da86"
        },
        {
          "alg": "SHA-384",
          "content": "beef5588c374be01cb9cb1c7854e2741827444ce6908c73e4494fb6c7b14fda4a8424f257c1cf900957dd7928e7247d4"
        },
        {
          "alg": "SHA3-384",
          "content": "580230a2224e63cbbe5dd3742935e8ff51333b9e38510203b7ab22070b903dbbc8d720a820db3a01b65cb06983632f7d"
        },
        {
          "alg": "SHA3-256",
          "content": "1346abb0ccffe538d735667ba664b4ee2eaec5c30f2052115d34b16fb0fb350b"
        },
        {
          "alg": "SHA3-512",
          "content": "68b26bddbacc2d72fde5db285549bdefc62206adbf285b58cd5b49f7a20ce1e2545a031c021b5d4402ff068170f4ce1fb90b618b5ed1e1f3b7a1b694f5ddf5ec"
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "Go License",
            "url": "https://golang.org/LICENSE"
          }
        }
      ],
      "purl": "pkg:maven/com.google.re2j/re2j@1.8?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/google/re2j",
          "type": "website"
        },
        {
          "url": "https://github.com/google/re2j.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/dev.cel/common@0.14.0?type=jar",
      "group": "dev.cel",
      "name": "common",
      "version": "0.14.0",
      "description": "Common dependencies for Common Expression Language for Java.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "3aea2ab46685914b2f9882b6311860b2"
        },
        {
          "alg": "SHA-1",
          "content": "dbd026061f0d7cf0ff4fdaaa180818cb68591443"
        },
        {
          "alg": "SHA-256",
          "content": "e6095487af0d67178b570805397dac180527bbf0c2514c04a8e7511aaecc6597"
        },
        {
          "alg": "SHA-512",
          "content": "e33215b1079c04c81a6777fea3ab1fa732600a6970c22a3c100c5e9e55f72855bb7ea59758725862ba989d4433b67d03a2932730a5918588af5edf932c5e9821"
        },
        {
          "alg": "SHA-384",
          "content": "3589e03d5115fad71aeac6180ad949218fe3a8fa93519bdd857177088d49cceb3f1596c35cb20e986a7db0aea0f1e0f6"
        },
        {
          "alg": "SHA3-384",
          "content": "940d680aac4ffef6545ae3ca9e7a6e66b72851dbabf608434973beeeb30ea141b91904bf8263c8303fc03c4f0b9bbdba"
        },
        {
          "alg": "SHA3-256",
          "content": "2ffa8d54e67da6e2f43f5135c414d2d202304f4aedade12d54cb1ec6191aee66"
        },
        {
          "alg": "SHA3-512",
          "content": "114b895f1d6f1b8fc30a6949032636e06143164a4cee8ea7fbadee4aacc20ab41a0645ceabc5fc4eb655b6984df60e6ae9bfea0316e4d978eaf2988356886371"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/dev.cel/common@0.14.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/cel-expr/cel-java",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/cel-expr/cel-java/tree/main",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/dev.cel/compiler@0.14.0?type=jar",
      "group": "dev.cel",
      "name": "compiler",
      "version": "0.14.0",
      "description": "Common Expression Language Compiler for Java",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "abf093eca4b2e84082c81690a515a99f"
        },
        {
          "alg": "SHA-1",
          "content": "b4a4817c3dbb01f037d260346e652e2591a677f7"
        },
        {
          "alg": "SHA-256",
          "content": "53a17e1b5216843c0d20105eeb31b3eff6304e260d5d021e169fb8b37e3472c3"
        },
        {
          "alg": "SHA-512",
          "content": "615f1c910759927d3931a807f5a7c076f472f4a97d1ca9011d9a23daf499e5964e33c10bb438403939329ed0c5c5ce1f7b71ce31cde381b85e39d99795d367d2"
        },
        {
          "alg": "SHA-384",
          "content": "d9499193d8142799330069d03236704967ae5829d8bbef178cddc9e67395dc537395b27f0b45b14f6d2d2b2a63604b4b"
        },
        {
          "alg": "SHA3-384",
          "content": "c33876871b7d33ae5eff89a7ac894244cd72aa5abc305454258557acd2d480cf222874ab2df52c1978909009b11022ed"
        },
        {
          "alg": "SHA3-256",
          "content": "8edf1761bcabe82da54969c819a37e2bd88164fa7c608c688322c1e53f891406"
        },
        {
          "alg": "SHA3-512",
          "content": "55431d3a760c535455986b22f9e616722bc40522b850c78a22b9bd44eb51955ba80819c9a1bbc76032adc37b05fba2fd425648f0f20827df0c6ba01f94240d94"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/dev.cel/compiler@0.14.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/cel-expr/cel-java",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/cel-expr/cel-java/tree/main",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/dev.cel/protobuf@0.14.0?type=jar",
      "group": "dev.cel",
      "name": "protobuf",
      "version": "0.14.0",
      "description": "Common Expression Language Adapter for converting canonical cel.expr protobuf definitions",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "c4798da20df25096c3d07b4363498aeb"
        },
        {
          "alg": "SHA-1",
          "content": "699898915157cef5a4e77c66d075856f6c046661"
        },
        {
          "alg": "SHA-256",
          "content": "d2c314946539351e433e3ffc39ba578a5d1f0eb350ab047c58b87241adaeed1b"
        },
        {
          "alg": "SHA-512",
          "content": "249a81d04fc47d96adeef4863354d3ad3122f2563235af7f77e041f56bca77458a5f79a2d730bcb0cce839adb6d7bb91ab31963fe179fe8815f95748a21a1060"
        },
        {
          "alg": "SHA-384",
          "content": "ae81d4cbc4e9722a33c9bdb2b0b17ddd8eace0eece47f330df647830b139dfa1f37b2a50d0ec1ea20644f7c153cd8d6c"
        },
        {
          "alg": "SHA3-384",
          "content": "662ad067d38441d4babd380df16f62c82403687bf0f09e693291ee4523a8d51ab96c4a5705c41109864916dbedc100fb"
        },
        {
          "alg": "SHA3-256",
          "content": "1099d1d4e5f5af00db210dd05e18f57a0b83ddbadfb4020a294fd2bdb42a67f0"
        },
        {
          "alg": "SHA3-512",
          "content": "39b743f73bac461e638d80d60e93131459c200f10b7354adfb0ecab3df17af4c8fd0aa75bc6e120be0e31d30b88eb0040a6d9a148a06ab0024ef0f4eaafc7329"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/dev.cel/protobuf@0.14.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/cel-expr/cel-java",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/cel-expr/cel-java/tree/main",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/dev.cel/runtime@0.14.0?type=jar",
      "group": "dev.cel",
      "name": "runtime",
      "version": "0.14.0",
      "description": "Common Expression Language Runtime for Java",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "e1b75eb375a7a044f68b8a7d44c64602"
        },
        {
          "alg": "SHA-1",
          "content": "91828cf4a3ade470070f7c58e9d6722342a01068"
        },
        {
          "alg": "SHA-256",
          "content": "3e2e4267d2c83a5323a6724147082564a18965c19e4a3cbbb4a832821780f26b"
        },
        {
          "alg": "SHA-512",
          "content": "22c3a590f727bd0dd283868ce13ad3dfc7b4d9f3446c7d82bc3aff2919a8ab324101a7f90d103167c487aab76e8f5288be9af9afbb93610c52c626680a437cf5"
        },
        {
          "alg": "SHA-384",
          "content": "4d6ff4e741f4f4699a68d10c421fdaadd76491fd3501d4f7c3d2818bf28fa7af265b349100579ac1ae697e0946d40749"
        },
        {
          "alg": "SHA3-384",
          "content": "029dd6132947e1c2ba7cd60ea06b6df2188d258ef3af651a2925e4055b20de3e95614534c0e1331dce13cba259f937c9"
        },
        {
          "alg": "SHA3-256",
          "content": "fad75d350cec38ce5a5bfd971199d081da12ea56571087233b1c0a52100b4823"
        },
        {
          "alg": "SHA3-512",
          "content": "74d94a371ba03a452014eb6905a7b34dc483c38cee35af5383680ce5c8ab39d9bbc06aae697c5473fe063af71dc87e6c88169654bd69a25ca9f10da1f4bc982f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/dev.cel/runtime@0.14.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/cel-expr/cel-java",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/cel-expr/cel-java/tree/main",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/dev.cel/v1alpha1@0.14.0?type=jar",
      "group": "dev.cel",
      "name": "v1alpha1",
      "version": "0.14.0",
      "description": "Common Expression Language Utility for supporting v1alpha1 protobuf definitions",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "8e09c5e79de99fafa3893d9bc1f12d13"
        },
        {
          "alg": "SHA-1",
          "content": "4e7c13ddf4e23c44b67e1c8041044be927be47a5"
        },
        {
          "alg": "SHA-256",
          "content": "429a705bc974d06c63fc14f4d7be7d23e5e7825d6fe76ab657bad2a2d9791c77"
        },
        {
          "alg": "SHA-512",
          "content": "efaa8638137267a26e11668936a53b58716f71437cf1a1d057d6432a53e5c273c4c17fc656d2b47aa0e4c6ba56ef9896aa8d54b156688c6b25ec4fe3dafda8ad"
        },
        {
          "alg": "SHA-384",
          "content": "b4e1fc34a8ac52f90779970b6b1d40877978396c29de475aeb16853ffcc65526949bf9a3c5593284a82335ad60b25e75"
        },
        {
          "alg": "SHA3-384",
          "content": "b86559a1571b69592384cdde36a0ee23a1599270002d6488d3401e05e4f569b616c44a59bfa69b55d39e28aca8aaf406"
        },
        {
          "alg": "SHA3-256",
          "content": "6891df0f460647f9d1f20e2cf708602d76027b5d089cc777d437adc77b1bfda6"
        },
        {
          "alg": "SHA3-512",
          "content": "5e148f912d1a9e89b0bdd836b0ada4f5145792d39632c19589fe172e9251a09d3f1115a8a20fdea837087b6eb6dc77c5ae6c7378cf75c6ae5d927ca43b5a1b85"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/dev.cel/v1alpha1@0.14.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/cel-expr/cel-java",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/cel-expr/cel-java/tree/main",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.antlr/antlr4-runtime@4.13.2?type=jar",
      "publisher": "ANTLR",
      "group": "org.antlr",
      "name": "antlr4-runtime",
      "version": "4.13.2",
      "description": "The ANTLR 4 Runtime",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "eecf1908f0cfff10f8bb82878b5ca401"
        },
        {
          "alg": "SHA-1",
          "content": "fc3db6d844df652a3d5db31c87fa12757f13691d"
        },
        {
          "alg": "SHA-256",
          "content": "dd3e8a13a2d669bf84fb8d834de35ce4875f27157698d206241ec8488aadcaf7"
        },
        {
          "alg": "SHA-512",
          "content": "1c3e47b6b5dc40ca13927a7ae2ed187f470b8f406cea325e73c7a18af8e07b9ada0484312dd611f225f030b5585924932c702fd9326c143a626e271682b2b95e"
        },
        {
          "alg": "SHA-384",
          "content": "f49c2395e16fe71fa35622bcca225c0910609ef09626207ce4522c73c760fd232489489ea88d54c88fc21b05a03031e0"
        },
        {
          "alg": "SHA3-384",
          "content": "322345326586e3f8954e80efa80b510228a7eb06f6d7283177f04809c15aad1722c700897c8c8f405955946b63808bc0"
        },
        {
          "alg": "SHA3-256",
          "content": "2d39db66ce6dc530c7796f75d646f4d8316586e2acd0756524c25b238eb71618"
        },
        {
          "alg": "SHA3-512",
          "content": "a4cdaec49dff4a6963a0db56712a837db7300de7145335b915ffc2234b0d53d6f9fd4b1d6e82c4350e22fee9390ca643cfbf7f51ff47a11bc44561b6686be32b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/org.antlr/antlr4-runtime@4.13.2?type=jar",
      "externalReferences": [
        {
          "url": "https://www.antlr.org/antlr4-runtime/",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/antlr/antlr4/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://groups.google.com/forum/?fromgroups#!forum/antlr-discussion",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/antlr/antlr4/tree/master/antlr4-runtime",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.threeten/threeten-extra@1.10.0?type=jar",
      "publisher": "ThreeTen.org",
      "group": "org.threeten",
      "name": "threeten-extra",
      "version": "1.10.0",
      "description": "Additional functionality that enhances JSR-310 dates and times in Java SE 8 and later",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "f125ea1eceb338384c66da89a335cd6d"
        },
        {
          "alg": "SHA-1",
          "content": "74c202e2b8893b8314ceae84f71223f8a6765771"
        },
        {
          "alg": "SHA-256",
          "content": "861ea99147f158214950955c82fd2ebc4d7b020c0422945a1086e0686cadb10d"
        },
        {
          "alg": "SHA-512",
          "content": "82bd2ba066bff273560edf3ced5ec0631e2aa025446d40d9e142662286f4ca5d58958e9ccd19e3ad5e9ca06e59a40dd4751fa23a4289221c1c9ea10ef2ac0be5"
        },
        {
          "alg": "SHA-384",
          "content": "0c9d944cb4759dac1081c5fb17c38c5c5b9debe1ec4bb116920d53dfbe3fa5f763ed8ea84bcfaeae12fcaaa4f6d26146"
        },
        {
          "alg": "SHA3-384",
          "content": "5439f19d6e6ac7ae1b42d8903fc005fa0068638b7d037cc8fe359c28b792dc5a581d89e0eea6218a68fce8a6e0271987"
        },
        {
          "alg": "SHA3-256",
          "content": "acc357df4a811460fc7a9f04399a283fe8d091bf5b4a8ce5c7d0554b33552e6d"
        },
        {
          "alg": "SHA3-512",
          "content": "4ab98e09b0e3de1315acc55bf01aaf25012a6792566d7b46cf661cfc5a86063db5362b691571283e9d85f3f381054a8f22812d01a22ad9ae7e3e6fc63acbe591"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/org.threeten/threeten-extra@1.10.0?type=jar",
      "externalReferences": [
        {
          "url": "https://www.threeten.org/threeten-extra",
          "type": "website"
        },
        {
          "url": "https://github.com/ThreeTen/threeten-extra/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/ThreeTen/threeten-extra",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.yaml/snakeyaml@2.6?type=jar",
      "group": "org.yaml",
      "name": "snakeyaml",
      "version": "2.6",
      "description": "YAML 1.1 parser and emitter for Java",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "d8bd94536cee962cfff39730bffdb8da"
        },
        {
          "alg": "SHA-1",
          "content": "2bc14918a2f8d5414749ab12d0c590cd3198b8c1"
        },
        {
          "alg": "SHA-256",
          "content": "c8f7a98e7394adda02f6317249710e4d1b4c7a25aa8c7eace0c2eea52eb8bf85"
        },
        {
          "alg": "SHA-512",
          "content": "6acd69508b8287f4843048930ce0d87378d29974e13bb85a0c600424fca46b5069983679225b41a5d772feb776d1d8886e3c19165c15b4b50fbf7a9134364a5a"
        },
        {
          "alg": "SHA-384",
          "content": "2ef9d7fdd8e15a639f23f94708fa40e2cf8254a02ad9c204ac2be5e7258d6fc439c8b0440ba0dece8701a0d3ea64eabd"
        },
        {
          "alg": "SHA3-384",
          "content": "1adcf66914123e71160de433ed0dcd39c061e022ca944f66496b6109e43456dcc8c95948640125d24b51b1dfb417a7a2"
        },
        {
          "alg": "SHA3-256",
          "content": "f5158c7a4a070ab149e2b4703a579addec5a183d83f97b0a40b22b0fd297e9f0"
        },
        {
          "alg": "SHA3-512",
          "content": "3688a0fb15be372db00605d3d469881198fbb91ada469995667bbcaadc5fb8119b71290558e534bfc739babc03e1b95d927cd62814c9a65b81e5c1976ca5d1e4"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.yaml/snakeyaml@2.6?type=jar",
      "externalReferences": [
        {
          "url": "https://bitbucket.org/snakeyaml/snakeyaml",
          "type": "website"
        },
        {
          "url": "https://bitbucket.org/snakeyaml/snakeyaml/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://bitbucket.org/snakeyaml/snakeyaml/src",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.errorprone/error_prone_annotations@2.50.0?type=jar",
      "publisher": "Google LLC",
      "group": "com.google.errorprone",
      "name": "error_prone_annotations",
      "version": "2.50.0",
      "description": "Error Prone is a static analysis tool for Java that catches common programming mistakes at compile-time.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "1ded1848cfd4f5167e00824faf9c4d3b"
        },
        {
          "alg": "SHA-1",
          "content": "74ba43e49ab1184d41634af2ef0047e82c4064b0"
        },
        {
          "alg": "SHA-256",
          "content": "4667724877f1d37a689202da191e23efa7657c62eef93ccdac406eccfe5cdd0a"
        },
        {
          "alg": "SHA-512",
          "content": "f867b1a1fbc057fcfc37c2fa86082f5965ad6a1c45373eac6cfa6ec058cedbf7b348ab4f3d4fea2d4d105ecc401c14f24d9b16f344507e126a221d50532cb8b2"
        },
        {
          "alg": "SHA-384",
          "content": "2986b161379c30e9805f3bcff197d7861b8c0690a021e2d7464707e57028b1953d24eefd1a36722f3c04665190b3cb48"
        },
        {
          "alg": "SHA3-384",
          "content": "597fe452ff7e21149da3c537b61d8e1b17df792f67bcd80fbccd6647acca571a94fa8bbcf4840826a37814bb2ef0249a"
        },
        {
          "alg": "SHA3-256",
          "content": "5447d9786f79d7dc20e8f75ac93f3a05181f3707faf6e91696dd326cdd5f5754"
        },
        {
          "alg": "SHA3-512",
          "content": "b51065218c88f5ce0b94e6607dee42d6c01aeb69a87b6e1c656dd406f2196cc999150ce87f56fbeeecbed7e1e354ed285589fa560012e9fb5858a97dc17d2129"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.errorprone/error_prone_annotations@2.50.0?type=jar",
      "externalReferences": [
        {
          "url": "https://errorprone.info/error_prone_annotations",
          "type": "website"
        },
        {
          "url": "https://github.com/google/error-prone/error_prone_annotations",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.metaeffekt.core/ae-security@0.159.0?type=jar",
      "publisher": "metaeffekt GmbH",
      "group": "org.metaeffekt.core",
      "name": "ae-security",
      "version": "0.159.0",
      "description": "Core project with fundamental runtime and build support.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "48745ae732e8d14d6882450a4a7796a6"
        },
        {
          "alg": "SHA-1",
          "content": "ac26bd43d32c01d0a76a12a79ca96bca9f9c5584"
        },
        {
          "alg": "SHA-256",
          "content": "436a2ed21e096a459cff218c980503e2d205e1d7f2ef1a866798d5e07068fc7f"
        },
        {
          "alg": "SHA-512",
          "content": "4cc2911a5c2e4ecccb9c96ceeb3c9fbfcff20dee8be875aa83a84b27fc637156b1ad4d094eefb7d9ac2a05f47f59cf97ea3722038fa81deadf1bc2fe3f241021"
        },
        {
          "alg": "SHA-384",
          "content": "22c0acb96538a1dda4423c52fb8c804b6f1ae2f09e7f15348daa795838df7a965b0f00aac9784d64b7ecd3c102288538"
        },
        {
          "alg": "SHA3-384",
          "content": "7207ec2d535541319e2c6b0e60a1530ec4219bb42c4dd334ba76c2d272d38586eb286cd47bc8918e1626d44ee269c948"
        },
        {
          "alg": "SHA3-256",
          "content": "7258efe4f81037d56e0afdd947b86aac281bb31da06f3a3d451270f6ca39ff32"
        },
        {
          "alg": "SHA3-512",
          "content": "9708f4f0d244f089e0667ac61363ebc4575b47a5874174776106a267191ce84b005d1e3c975444afad151d9f5d555970ab2829718222de01fb8db019367a4672"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.metaeffekt.core/ae-security@0.159.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/org-metaeffekt/metaeffekt-core/ae-core-poms/ae-core-plugin-management-pom/ae-libraries/ae-security",
          "type": "website"
        },
        {
          "url": "https://github.com/org-metaeffekt/metaeffekt-core.git/ae-core-poms/ae-core-plugin-management-pom/ae-libraries/ae-security",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.slf4j/jcl-over-slf4j@2.0.20?type=jar",
      "publisher": "QOS.ch",
      "group": "org.slf4j",
      "name": "jcl-over-slf4j",
      "version": "2.0.20",
      "description": "JCL 1.2 implemented over SLF4J",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "4a2f67a3feba29618916f8ccbd3dab18"
        },
        {
          "alg": "SHA-1",
          "content": "7cb2437e20d244474b1c5a50747e4b376e9a2daf"
        },
        {
          "alg": "SHA-256",
          "content": "32f95628a4baa60ea8a5b052c8cb6e51d07b0fee3e6092414070874f69daf710"
        },
        {
          "alg": "SHA-512",
          "content": "db6cc4c11967e80d7392173f13cb1cc10874cc493f3357e7a01867cb927510e1ee7b11f5621e2874fc0e38c3afb0af21dd75a0fdb57ac7c660bdd4107e5ae296"
        },
        {
          "alg": "SHA-384",
          "content": "a7498a4a9561300327ef159f237ceb31698b5396d35829e454455718d84f72c9fd1b9c6cfcdc6d5573727d6d83219cd6"
        },
        {
          "alg": "SHA3-384",
          "content": "ccbfcdfd999e04a0bcf9830e427e9f8ad5a26bdef078044bc4ed15ceebbf51caaa218c4e4a1ed60200bcebb227a6e988"
        },
        {
          "alg": "SHA3-256",
          "content": "7866d4950ad2d335c7804390ade70c2143befbcb67e21c29d60c0fdefe5a8685"
        },
        {
          "alg": "SHA3-512",
          "content": "961c4df212cae468bd02cd134dfdf1fb8a7e5a2efac6fef45a535a753988e08f547cdd34ec13da1913118994f354a73005810ae602d58f033d191ee3921835f6"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.slf4j/jcl-over-slf4j@2.0.20?type=jar",
      "externalReferences": [
        {
          "url": "http://www.slf4j.org",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/qos-ch/slf4j/slf4j-parent/jcl-over-slf4j",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/commons-io/commons-io@2.22.0?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "commons-io",
      "name": "commons-io",
      "version": "2.22.0",
      "description": "The Apache Commons IO library contains utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "f91d54bd47c42456b4a5ae62eed85565"
        },
        {
          "alg": "SHA-1",
          "content": "5b1e18bc0ad651ed878029d83f88d9c8189fd51e"
        },
        {
          "alg": "SHA-256",
          "content": "2b9a7b1f726fb86216dbd2c8321eabe0221dbd5b1be81c18e1cb53811b104758"
        },
        {
          "alg": "SHA-512",
          "content": "fca0b4ae70e531bee74413e0b865981aa8b60a9390f789b63997203dae67be65362e95a0c35b9d4b072fbb0810114783415dd22b92fb42e5594b10992f632bc5"
        },
        {
          "alg": "SHA-384",
          "content": "e1fbf3729c4d2d77b036d90234d9e2ed3fe0c2f5379d333a695c1cb0037f63d288c8b62de05022da0f612da65835fee0"
        },
        {
          "alg": "SHA3-384",
          "content": "02acc6e7f614d8684e7104a52123573152a2e1b651bc6a5be12d4b58861c757d6c56f51105bb97c92309d126059232ea"
        },
        {
          "alg": "SHA3-256",
          "content": "134157813629f4d9b97044602e1fa2f61c14c3be1f641490b3e06ac941ff3315"
        },
        {
          "alg": "SHA3-512",
          "content": "47832f3b7abe375f3b0ed169996d9776b2a0007b073ab3f06438dce67be9bda45e8aac84737cc639ada4424b13c7614d8c9fcb23779868f7421414777cc0946a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/commons-io/commons-io@2.22.0?type=jar",
      "externalReferences": [
        {
          "url": "https://commons.apache.org/proper/commons-io/",
          "type": "website"
        },
        {
          "url": "https://github.com/apache/commons-io/actions",
          "type": "build-system"
        },
        {
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2",
          "type": "distribution"
        },
        {
          "url": "https://issues.apache.org/jira/browse/IO",
          "type": "issue-tracker"
        },
        {
          "url": "https://mail-archives.apache.org/mod_mbox/commons-user/",
          "type": "mailing-list"
        },
        {
          "url": "https://gitbox.apache.org/repos/asf?p=commons-io.git/commons-io",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.json/json@20231013?type=jar",
      "group": "org.json",
      "name": "json",
      "version": "20231013",
      "description": "JSON is a light-weight, language independent, data interchange format. See http://www.JSON.org/ The files in this package implement JSON encoders/decoders in Java. It also includes the capability to convert between JSON and XML, HTTP headers, Cookies, and CDL. This is a reference implementation. There are a large number of JSON packages in Java. Perhaps someday the Java community will standardize on one. Until then, choose carefully.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "1a0702c57783ce9e948252c34644f328"
        },
        {
          "alg": "SHA-1",
          "content": "e22e0c040fe16f04ffdb85d851d77b07fc05ea52"
        },
        {
          "alg": "SHA-256",
          "content": "0f18192df289114e17aa1a0d0a7f8372cc9f5c7e4f7e39adcf8906fe714fa7d3"
        },
        {
          "alg": "SHA-512",
          "content": "a5cdd1ed984448d6538746429f2d1a0ec8f64f93af0e84870ce898a9f07a81d11bf27d2ee081471975772efc8a0d3d5e05541197a532066e9edb09ad032d31a3"
        },
        {
          "alg": "SHA-384",
          "content": "5d2629c7fa21af332369d9feb30dca6bbc76378615252fd5fc8a9bd55deba17951a45ae3384672f317b12a5d25a285bc"
        },
        {
          "alg": "SHA3-384",
          "content": "b96f3dc5d35e439d33e31522538d5d91cb8d88f12d19071a66ab31722c46fbb9c945f3894942203f4dd945df93bc3d91"
        },
        {
          "alg": "SHA3-256",
          "content": "69c7a6f7873b85a74ec9547b081d217a7407deac8d0912ac4906c0eb2c2f87f5"
        },
        {
          "alg": "SHA3-512",
          "content": "fd2bcc534d0bcd4b1cf3337e1f5f8073d5693f3e65d789203312a166f91874d7c31ea1715de9eaea3e0437639591ae4157ceef4b76354e6681f34bc034a06d7a"
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "Public Domain",
            "url": "https://github.com/stleary/JSON-java/blob/master/LICENSE"
          }
        }
      ],
      "purl": "pkg:maven/org.json/json@20231013?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/douglascrockford/JSON-java",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/douglascrockford/JSON-java.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.nimbusds/oauth2-oidc-sdk@11.38.2?type=jar",
      "publisher": "Connect2id Ltd.",
      "group": "com.nimbusds",
      "name": "oauth2-oidc-sdk",
      "version": "11.38.2",
      "description": "OAuth 2.0 SDK with OpenID Connect and Federation extensions for developing client and server applications.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "38e046019e13d821b2c4bc17b0aa7bb1"
        },
        {
          "alg": "SHA-1",
          "content": "633504f3430c148cc583d9d481f5f4e48e29cccf"
        },
        {
          "alg": "SHA-256",
          "content": "30e63220c15bd93006c557bd0d614bb57a5f00232188693577c222383ea4bbe7"
        },
        {
          "alg": "SHA-512",
          "content": "30928fd2dcb6680ad1a8bf0923b2e7125eca4ec22eae584695468db82529a17f43ac405ecd28e622446ea4c96755b9c111311deb7d53179cb9c435fa0140f114"
        },
        {
          "alg": "SHA-384",
          "content": "daec981126c784ad4214d7959e72f2c4464fa2cdfc35d41523d032448b0bea32a7d275908cea9d1afc9b3533be6a6159"
        },
        {
          "alg": "SHA3-384",
          "content": "4282a8dbfd0b80180b72883cb9a5cdb28be7c68fe2c571d36a8cbe5541cb87b79405214512a3dfdcbf539629062bd0e0"
        },
        {
          "alg": "SHA3-256",
          "content": "260ca92e0aeed607eb58bc11f06a4ca825ca03b7c6da048eb9fd231acab9fca2"
        },
        {
          "alg": "SHA3-512",
          "content": "5de230dd0e11e61afc711ed0c5e1e33526c955109b1edbaf4330d595aac565a51164b775d82f81caa1fa0a3a9b10d7dbbb64cde0d6d595b8c8618733c8229889"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.nimbusds/oauth2-oidc-sdk@11.38.2?type=jar",
      "externalReferences": [
        {
          "url": "https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.github.stephenc.jcip/jcip-annotations@1.0-1?type=jar",
      "group": "com.github.stephenc.jcip",
      "name": "jcip-annotations",
      "version": "1.0-1",
      "description": "A clean room implementation of the JCIP Annotations based entirely on the specification provided by the javadocs.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "d62dbfa8789378457ada685e2f614846"
        },
        {
          "alg": "SHA-1",
          "content": "ef31541dd28ae2cefdd17c7ebf352d93e9058c63"
        },
        {
          "alg": "SHA-256",
          "content": "4fccff8382aafc589962c4edb262f6aa595e34f1e11e61057d1c6a96e8fc7323"
        },
        {
          "alg": "SHA-512",
          "content": "02fcd16a30d0e68b3e9e4899731181c6abb7117baa15c096ca940e01dde08bb86101cbeae552c497f8a90d923b5fa2f2b6f3850baf8dc94dbd399887924a9069"
        },
        {
          "alg": "SHA-384",
          "content": "88b0ecfde391a3d8468349c70e1539569768dfac3233dfe0b4660904df04e6c6bf26ed9c0784b9b22c122c3448e2a6b6"
        },
        {
          "alg": "SHA3-384",
          "content": "487b53f48b55b98a61ae60abedc43543887944867aa6bcb78d5ed46e2d0d7c19510c5fcadc362d939313feafdcfc55e1"
        },
        {
          "alg": "SHA3-256",
          "content": "3e79c8f58865d2d58a5311a8bb45772007f07e7f3ed2780784d1e4382dc934d0"
        },
        {
          "alg": "SHA3-512",
          "content": "ff32665e1b6d8176ccc7e8c836ca7343c2603dab053e42d79b4258d51a14ff63933c67d24034169ac91e11ebda21cc2c84a2a540072e656d2a8e6fcea7808421"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.github.stephenc.jcip/jcip-annotations@1.0-1?type=jar",
      "externalReferences": [
        {
          "url": "http://stephenc.github.com/jcip-annotations",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "http://github.com/stephenc/jcip-annotations/issues",
          "type": "issue-tracker"
        },
        {
          "url": "http://github.com/stephenc/jcip-annotations/tree/master/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.nimbusds/content-type@2.3?type=jar",
      "publisher": "Connect2id Ltd.",
      "group": "com.nimbusds",
      "name": "content-type",
      "version": "2.3",
      "description": "Java library for Content (Media) Type representation",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "f0fc0d6be73e838863e2197c03a27c3f"
        },
        {
          "alg": "SHA-1",
          "content": "e3aa0be212d7a42839a8f3f506f5b990bcce0222"
        },
        {
          "alg": "SHA-256",
          "content": "60349793e006fba96b532cb0c21e10e969fe0db8d87f91c3b9eaf82ba2998895"
        },
        {
          "alg": "SHA-512",
          "content": "58f7fe3b4303cecd6eac73c3345af71536479ce4bc38c88153bdcf6176a7cf5a0875420ea4a6024b4e734b78de08a8e544014b435cb63416c759b957ad3818e4"
        },
        {
          "alg": "SHA-384",
          "content": "9dbe31f543aaf807093fe1dd18a0ed33346252e2f6fce598e1b193b9d73fcebf79608fce6a620ede8ea7adf45f1a7422"
        },
        {
          "alg": "SHA3-384",
          "content": "67b8b5d051230739ee85678006758450cd6510c5fb9a6b3134d43f644c2d70bc6dc3cff6133b132b5b158a1f346880a9"
        },
        {
          "alg": "SHA3-256",
          "content": "b8046b3dd12321400b4643ff0c47ea5c1e77d6252177bdd8be6f0e0b234c80bf"
        },
        {
          "alg": "SHA3-512",
          "content": "734a6a5a383aac8dcfaca09c8e37637f74334ce2d5c050b519277ad7c20f065fad44b5a6417cdc32d6cd43f80c0e1e0c37d9daa9279651facb6c38cb88376396"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.nimbusds/content-type@2.3?type=jar",
      "externalReferences": [
        {
          "url": "https://bitbucket.org/connect2id/nimbus-content-type",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://bitbucket.org/connect2id/nimbus-content-type",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/net.minidev/json-smart@2.6.0?type=jar",
      "publisher": "Chemouni Uriel",
      "group": "net.minidev",
      "name": "json-smart",
      "version": "2.6.0",
      "description": "JSON (JavaScript Object Notation) is a lightweight data-interchange format. It is easy for humans to read and write. It is easy for machines to parse and generate. It is based on a subset of the JavaScript Programming Language, Standard ECMA-262 3rd Edition - December 1999. JSON is a text format that is completely language independent but uses conventions that are familiar to programmers of the C-family of languages, including C, C\u002B\u002B, C#, Java, JavaScript, Perl, Python, and many others. These properties make JSON an ideal data-interchange language.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "fde8981f31c3b972355a5adf26a9ec65"
        },
        {
          "alg": "SHA-1",
          "content": "5f858a43a325a8673da6869ab2bc787a1bcb2244"
        },
        {
          "alg": "SHA-256",
          "content": "1ae4b561458afb540be8ec5c6dbb4f2e715a319a7ae64854998aaf924770d61b"
        },
        {
          "alg": "SHA-512",
          "content": "fc8269826394dbca52fa9366f28226e5e37bc64c1268d7a49e2dea7fb2c62da2be8c8bcf362da5561a3cf413816019d8c4f95199a585eb8b13e8a8b634259a00"
        },
        {
          "alg": "SHA-384",
          "content": "13db694eb1f73778d628452b6840bff4c044101f2dcf7c3782f4bb48798fbae8b752cb8f7536b5173e896de4c225c3a6"
        },
        {
          "alg": "SHA3-384",
          "content": "86c0dc99d98a7c70015b6158f76253cd16a4b2bfb754ea6526991860e2536880b95130044cbe953865b284eebadad781"
        },
        {
          "alg": "SHA3-256",
          "content": "edee009cc2977ff4c2aae9098d14e7e651168dca1735726772d6bda5b66e2e98"
        },
        {
          "alg": "SHA3-512",
          "content": "23f8d5a59cd7111680f65d9fc2ed80b9876ab3094a2048526b376ae16ad855680b1c90264c23c52468efe0646a30db8a22f6b279ec67e047f3951b55a6d0d104"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/net.minidev/json-smart@2.6.0?type=jar",
      "externalReferences": [
        {
          "url": "https://urielch.github.io/",
          "type": "website"
        },
        {
          "url": "https://github.com/netplex/json-smart-v2",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/net.minidev/accessors-smart@2.6.0?type=jar",
      "publisher": "Chemouni Uriel",
      "group": "net.minidev",
      "name": "accessors-smart",
      "version": "2.6.0",
      "description": "Java reflect give poor performance on getter setter an constructor calls, accessors-smart use ASM to speed up those calls.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "0ad72639eea293193f68898da9b0b902"
        },
        {
          "alg": "SHA-1",
          "content": "2d96f1d9b6ab7f13261aa81b15703574185747a0"
        },
        {
          "alg": "SHA-256",
          "content": "222c9f547bb20a99fc486403a398352d1306fb671b38abd7ecab6401df170e61"
        },
        {
          "alg": "SHA-512",
          "content": "220eb28c94fdd15e7ac9b7e80d238a9871fc78db3127db9ca6207251e0e5563c62cfd5ab7625d69eb9e2563fc726e71a25562a4081f089f564dc206e0569665f"
        },
        {
          "alg": "SHA-384",
          "content": "c861d37b7a3a5d3d42a699239e3437cf094a8359b2371bacce5f7a17da02f9a0eb65ca2456d0168c4870be36bddc135f"
        },
        {
          "alg": "SHA3-384",
          "content": "4fa8ea0794e22ccc34ecc9b73cb9cad062cd82561227b15f1261541180d584ba745611ff31e98653e4f5d481846de361"
        },
        {
          "alg": "SHA3-256",
          "content": "1b170bf2e79abd9a77bb330c51b73d695c17e5db41817efab22294f4ee65a2c1"
        },
        {
          "alg": "SHA3-512",
          "content": "224c001707e5b478f6503b88ab8c07b94f82bfb02bc81094a3ffdcf05d29f1377a8e518b223f9282d0147f386f13faf319692002d59f4c6f452b282aa6b000c0"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/net.minidev/accessors-smart@2.6.0?type=jar",
      "externalReferences": [
        {
          "url": "https://urielch.github.io/",
          "type": "website"
        },
        {
          "url": "https://github.com/netplex/json-smart-v2",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.nimbusds/lang-tag@1.7?type=jar",
      "publisher": "Connect2id Ltd.",
      "group": "com.nimbusds",
      "name": "lang-tag",
      "version": "1.7",
      "description": "Java implementation of \u0022Tags for Identifying Languages\u0022 (RFC 5646)",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "31b8a4f76fdbf21f1d667f9d6618e0b2"
        },
        {
          "alg": "SHA-1",
          "content": "97c73ecd70bc7e8eefb26c5eea84f251a63f1031"
        },
        {
          "alg": "SHA-256",
          "content": "e8c1c594e2425bdbea2d860de55c69b69fc5d59454452449a0f0913c2a5b8a31"
        },
        {
          "alg": "SHA-512",
          "content": "494267766c974ce16a99cb221953edc91fde8db0c920230758ecea0ea9d3006e95d86ad46f7a9d61b810d85b0fa6da9a3ce2b507cdbe4be320c499eaea93666b"
        },
        {
          "alg": "SHA-384",
          "content": "fdc2cde39a1b07a2542cbc07222afd6292ae19cb1f9ae008476f7ec1b8ebe1e3e84aca08e47e1ef81887a23ac5267d00"
        },
        {
          "alg": "SHA3-384",
          "content": "b0e673087533f60173a11a55b0fde554c0830e7b3b6609e1ea6546de19fc9a97fbfe6eee73580d09b2de66989d0603c7"
        },
        {
          "alg": "SHA3-256",
          "content": "ea208d4eb55212ce9835a9be60396861b0fc33f4161efee3736c3e7159acb9f7"
        },
        {
          "alg": "SHA3-512",
          "content": "450f819981d73711c30d838261ff55a7f1988c8b965c786708dc27fbd10a2018cfde82b8fee5d7d1022eacf085dfdabe22d9de92462eba80e2c15a116c3c73ed"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.nimbusds/lang-tag@1.7?type=jar",
      "externalReferences": [
        {
          "url": "https://bitbucket.org/connect2id/nimbus-language-tags",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://bitbucket.org/connect2id/nimbus-language-tags.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.nimbusds/nimbus-jose-jwt@10.9.1?type=jar",
      "publisher": "Connect2id Ltd.",
      "group": "com.nimbusds",
      "name": "nimbus-jose-jwt",
      "version": "10.9.1",
      "description": "Java library for Javascript Object Signing and Encryption (JOSE) and JSON Web Tokens (JWT)",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "2dcec009745fe5ba876b5c5d8ac71caf"
        },
        {
          "alg": "SHA-1",
          "content": "82ab15c57686545d989dd2c82cbec5b6b6f1c860"
        },
        {
          "alg": "SHA-256",
          "content": "33152ea83ec50d22706fdaf3b07acbcd716f9a68edcabdd7c4d02843cbdcdcf6"
        },
        {
          "alg": "SHA-512",
          "content": "5942ec095618438497425b3c0b96f97a3910d75897b27babf570673a7e5311e05d6be441b9794eb0eb528bc9eba1ba805a7bab9b669b088db7c549978d4eb8c2"
        },
        {
          "alg": "SHA-384",
          "content": "e1bb6bd950a286e9f0099a2274c1eaedf53c273cff53022833a7178b4f369d294d1e312af3babe11bbe752b5405e5e0d"
        },
        {
          "alg": "SHA3-384",
          "content": "094843f7ddba4a8f62591f95c1bf2cc087eeb8c9bda335cc6b8dd368bfdc2294f8f94ca757a361eee0ddc46caa75d38c"
        },
        {
          "alg": "SHA3-256",
          "content": "e2782041f5ac52a36e8841ffda3b8bb8c3bfb53f4aca52cffe2c78b81f268a98"
        },
        {
          "alg": "SHA3-512",
          "content": "d44432a00f7a447d53c96ce50b21a7368076f30b152b1006b1ae3573acbd6f190ae020b531e919d3779b7e0a712c56d1acb62e0e6511da42d15cdf4d9d2367fc"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.nimbusds/nimbus-jose-jwt@10.9.1?type=jar",
      "externalReferences": [
        {
          "url": "https://bitbucket.org/connect2id/nimbus-jose-jwt",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://bitbucket.org/connect2id/nimbus-jose-jwt",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.github.kagkarlsson/db-scheduler@16.12.0?type=jar",
      "publisher": "Gustav Karlsson",
      "group": "com.github.kagkarlsson",
      "name": "db-scheduler",
      "version": "16.12.0",
      "description": "Simple persistent scheduler for scheduled tasks, recurring or ad-hoc.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "6d5a136ad6650017b4b31072c8e043af"
        },
        {
          "alg": "SHA-1",
          "content": "129913568e06c3fd3a3480c896d698653d2fdf74"
        },
        {
          "alg": "SHA-256",
          "content": "2238bdad70014c41a762dd215d500a57a0bf22138df7dace1faf5c82eaeed545"
        },
        {
          "alg": "SHA-512",
          "content": "0ee889aecbf89b2fafbc953b53e91770020cfe96ec95e28891ef38e453a1a07e96116d32a5ac18fb30beba40ad618276cfc562a300876e15932bb4dd50cbb99c"
        },
        {
          "alg": "SHA-384",
          "content": "2192fa79ffa02a5a673539f646d7507220a0980e7a5e26148bb747e8e44482f5b3ed812bc769a3dbd76c790da86446ce"
        },
        {
          "alg": "SHA3-384",
          "content": "1b6a30851aa7d815a0e60a26e9896def19d0e04b8318570152a8934cd7e3429b1e2e057b845cfa31440ed1c62e22cd5f"
        },
        {
          "alg": "SHA3-256",
          "content": "560ee50d2a0c7693b872b117107e5cc164aba3d031ef7e44892d07244f598c41"
        },
        {
          "alg": "SHA3-512",
          "content": "c9fb738c3d59c498226deedec73c95e57f7f43b0ceefad1ea09081839f30ac543c31652fbfa30f39c7acea3b980619198f659d5392dbd339c31e1cec5badc894"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.github.kagkarlsson/db-scheduler@16.12.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/kagkarlsson/db-scheduler",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/kagkarlsson/db-scheduler/db-scheduler/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/jdbi-support@5.2.1?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "jdbi-support",
      "version": "5.2.1",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "add5e1748a4f1e20e872c6896b4a1de6"
        },
        {
          "alg": "SHA-1",
          "content": "47d92e248e1abddc6f7cc73210d2974a756d341f"
        },
        {
          "alg": "SHA-256",
          "content": "7f392de6c7fe6895122f71268a2df8db646fde2940c43620244c40db42c68885"
        },
        {
          "alg": "SHA-512",
          "content": "4e77c0357bdcdf832836b30be98e1ea6ab9a5dffe786cbac0c5f93d343320b40b079a7727cbb3860e0d16265e07230d0c3edc48d7e6d1ff0e17522adc78eb297"
        },
        {
          "alg": "SHA-384",
          "content": "9390c8af59d77b40b329232ab1c514dc65c32b66079722d6e4797b61b2c46b5e17d53235573c82c5114a44f25b165350"
        },
        {
          "alg": "SHA3-384",
          "content": "ddc840edbae9cb2e91280822b09856a08f5fa88505379ca90ba792db7b2a0ee7b94cac531de00539b6eda5cd6eeae07e"
        },
        {
          "alg": "SHA3-256",
          "content": "6b8f8e8d8886d7f3d9adaad126eb12ed92a38be400a41490c41beb93125a0772"
        },
        {
          "alg": "SHA3-512",
          "content": "35c15970a852879e0caa71831c9c3bedea02818405422a7884743f91df34a67b2aefa360b18ce2ba5778624cf68bc5535f18bcad8c475b8f29256a6933b1529a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/jdbi-support@5.2.1?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/support/jdbi-support/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.jdbi/jdbi3-core@3.55.0?type=jar",
      "group": "org.jdbi",
      "name": "jdbi3-core",
      "version": "3.55.0",
      "description": "The Jdbi core API. Jdbi 3 is designed to provide convenient tabular data access in Java(tm) and other JVM based languages. It uses the Java collections framework for query results, provides a convenient means of externalizing SQL statements, and named parameter support for any database that supports JDBC.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "0738c63a9ac33843365f835a4c5acfba"
        },
        {
          "alg": "SHA-1",
          "content": "29c673861dc5c563a52330cf460ff9a76be7ce68"
        },
        {
          "alg": "SHA-256",
          "content": "6101be0886145b60be2d773b935017ecc2b0ce8d657c981a43d5cf2c19ddddf3"
        },
        {
          "alg": "SHA-512",
          "content": "3a399777a112d78e3b3e31efc109334859b1d369e012bc5ddfbda2dc12cb4927e853c3e4291daf5cff025260e596d1a00ae6bfbb5e36ab176602b3ed1259f0ca"
        },
        {
          "alg": "SHA-384",
          "content": "000edeb873789d612c22ba4c4bff14f2ac9b3e8e93a180df9124f711ac032bf14fdc5864262965fc905d013656b925c5"
        },
        {
          "alg": "SHA3-384",
          "content": "ea97d2b956b75191ac2f5472f0c4c567f0e21390e562527795fdc4c37dbaa3f5dbacbad778205b9034e912f55b1dd79a"
        },
        {
          "alg": "SHA3-256",
          "content": "d0c1c4162508ee6c01d2790cfa091f6fe086d47eefd1429f08cf11ecf70f667b"
        },
        {
          "alg": "SHA3-512",
          "content": "0cb4634a758f18c062ce23c6c9294823ce3b691f18bc96fa474cededdddc69fa7d91a39f8a773954ff6479cce5518f6d36950493454eb2c81a7a27ab408dda57"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.jdbi/jdbi3-core@3.55.0?type=jar",
      "externalReferences": [
        {
          "url": "https://jdbi.org/",
          "type": "website"
        },
        {
          "url": "https://github.com/jdbi/jdbi/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.leangen.geantyref/geantyref@2.0.1?type=jar",
      "group": "io.leangen.geantyref",
      "name": "geantyref",
      "version": "2.0.1",
      "description": "Generic type reflection library with support for AnnotatedType",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "08dce47c87ec3228628a42cb3eb8c181"
        },
        {
          "alg": "SHA-1",
          "content": "81253383ac75126142f97781d22d19de2532bf76"
        },
        {
          "alg": "SHA-256",
          "content": "386b535c079be7d65ddbe0ad9c00955155b7862225aa92b4c6553ab2b1ea95f9"
        },
        {
          "alg": "SHA-512",
          "content": "c6655ef00ede5d9bb17d4e7556200acaeb5babd67295e9f72e26e8ea48fd50978cc147156e35feada204163163292ad3a0daf0d6b1366c9e933f13a1b4a9eb2f"
        },
        {
          "alg": "SHA-384",
          "content": "3b97009b3b70156fcd3f39a8365e562d481fed54d779e6f60a82bdb0736ee7701edd0c69f58409154dc1823895e7da05"
        },
        {
          "alg": "SHA3-384",
          "content": "36cfd6a2d9d4f0df12e9c688b1981f494f4b77f6f05dc57af69f03ab2d7f9d5628f9b90ad324dbadc2ffc210a74d25aa"
        },
        {
          "alg": "SHA3-256",
          "content": "414a37fe9755beb446609dbc43f2eb702a0789ef5d046baff144596774e189ac"
        },
        {
          "alg": "SHA3-512",
          "content": "6a2ecd82a48dc5272720726298d21a8548c46df8b52f9dea1c97c38e77372fb620ca5c5fbed1b9ea7234f7328c47ba9642366d63f0d3f0340c33faf1f5f7de76"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.leangen.geantyref/geantyref@2.0.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/leangen/geantyref",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/leangen/geantyref/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/leangen/geantyref",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.jdbi/jdbi3-jackson2@3.55.0?type=jar",
      "group": "org.jdbi",
      "name": "jdbi3-jackson2",
      "version": "3.55.0",
      "description": "Use Jackson 2.x for JSON column serialization/deserialization.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "0854390fde86cdd8267d13aeffb7d051"
        },
        {
          "alg": "SHA-1",
          "content": "34eb6236aa00aa0fff404554952da571550ce604"
        },
        {
          "alg": "SHA-256",
          "content": "b7236356c2a42364d8bb1422cb350b0350639228225b149cb19d5aac77bde979"
        },
        {
          "alg": "SHA-512",
          "content": "e1ac6a482267d6ffcd6fe73a0edea85677de834508c6844d19a2d83ad41ae68a964050ca875adaedcba326dcbc9516584b4d94e31156a3c5774238c878aa75df"
        },
        {
          "alg": "SHA-384",
          "content": "64bb6ad5b464904b861f95a6fc6bccacb5e04e580f291fb5ea838f2b35ec80afb55f1451823f21cb36fc186e4c6acb3e"
        },
        {
          "alg": "SHA3-384",
          "content": "5b602a701ea43fc20e62cc95f8dac6b88a9b4b2e4e83d4f768294ef7796036b0ad9dd6590238586c71bec7158138dbfc"
        },
        {
          "alg": "SHA3-256",
          "content": "4af34ab326c58c6399ecba4b1901f2095ce922eb1416a0f3eed6a34754d75f15"
        },
        {
          "alg": "SHA3-512",
          "content": "e741175c1e45da329ee1cb4616052d55ec60d088c371c29e9787bee7bf7e005ff36b26a4b224fbcd17518485d4fefce3bf47910577ed5e4639270af75c789442"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.jdbi/jdbi3-jackson2@3.55.0?type=jar",
      "externalReferences": [
        {
          "url": "https://jdbi.org/",
          "type": "website"
        },
        {
          "url": "https://github.com/jdbi/jdbi/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.jdbi/jdbi3-json@3.55.0?type=jar",
      "group": "org.jdbi",
      "name": "jdbi3-json",
      "version": "3.55.0",
      "description": "Support for JSON column types. In addition to this module, a serialization module (jackson2, gson2, moshi) is required.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "3c2000395c39002b731a972be73329db"
        },
        {
          "alg": "SHA-1",
          "content": "fc44b0da029880493315aa8a959ade337d0eed97"
        },
        {
          "alg": "SHA-256",
          "content": "3619a25a3c8da393501e2147166f010df75dae762de6a29caf563449bc9bad95"
        },
        {
          "alg": "SHA-512",
          "content": "c40fb596046b069f8b5b6ab63f3de9b662a07ea7dfa68433d3033590f93d3d036353ada467eb6dd795888f448cafdd0a60f11ac4b6ce987622b951d34abfd070"
        },
        {
          "alg": "SHA-384",
          "content": "c4962f738a060416a84db6b12acff6b90947101f747585fa379caeb06a3df69d63175ba0c22d2108848ca91c388a2804"
        },
        {
          "alg": "SHA3-384",
          "content": "a293d628b8aac9c7621fd5f30da07be7fa9464603a5ba45a2bb636c503b73dd0328ce7fad993d3647dfeb02630e83227"
        },
        {
          "alg": "SHA3-256",
          "content": "04e388cb66f83382d9a33d83362077188009da6a83fa01df25fb9494121fbdf4"
        },
        {
          "alg": "SHA3-512",
          "content": "d7a1c2d4adc803ccdbb74d2825ce297608e6d4726a267075c77553a2319fe0ccb955a8980e5662518a264c741f32a32f3d3016b5ae930c1adf11904f0f9c8239"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.jdbi/jdbi3-json@3.55.0?type=jar",
      "externalReferences": [
        {
          "url": "https://jdbi.org/",
          "type": "website"
        },
        {
          "url": "https://github.com/jdbi/jdbi/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.22.3?type=jar",
      "publisher": "FasterXML",
      "group": "com.fasterxml.jackson.core",
      "name": "jackson-core",
      "version": "2.22.3",
      "description": "Core Jackson processing abstractions (aka Streaming API), implementation for JSON",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "75691eef4483b7eb0e1c43e08dcb6573"
        },
        {
          "alg": "SHA-1",
          "content": "8695aab38355c65b60e242ec62edf13c52916d88"
        },
        {
          "alg": "SHA-256",
          "content": "8a501126a385b25841915d839508f8a66e2a0dbc8a6709d055ef3b3e852b094c"
        },
        {
          "alg": "SHA-512",
          "content": "8d5984961b37f9570d0581a74f005442fe37c46c601ee0fe63e3695f967bd7598dd268cfb33509a289ff472385cedd99396660e31d7cb873d1e7ffff676912e8"
        },
        {
          "alg": "SHA-384",
          "content": "788125564042463c3b3f856d803c955282cacbda361d8dc172fdc8288013dd17db525e490bc0bde360c480e431a7a1d1"
        },
        {
          "alg": "SHA3-384",
          "content": "5706651739544e7216903e0e6c5f4edd362b158b787d04afe0d31b65137394605ed569ecb924728d9cd5a4850fa07b3f"
        },
        {
          "alg": "SHA3-256",
          "content": "f41bb3e563a0b67d3ae1d9c29e0ebe8b86aa650da68b66e66d9403bd6e774c37"
        },
        {
          "alg": "SHA3-512",
          "content": "3d3116030b1efdab1ca91f0ec21a72bf8f2a0397d1eae70dddc1848906781c22aa941b8a24b47c1a33ede3675a47b12510aeea1a042b198936fc5fbcf7b645e0"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.22.3?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/FasterXML/jackson-core",
          "type": "website"
        },
        {
          "url": "https://central.sonatype.com/api/v1/publisher",
          "type": "distribution"
        },
        {
          "url": "https://github.com/FasterXML/jackson-core/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/FasterXML/jackson-core",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.jdbi/jdbi3-sqlobject@3.55.0?type=jar",
      "group": "org.jdbi",
      "name": "jdbi3-sqlobject",
      "version": "3.55.0",
      "description": "SqlObject is a declarative, annotation-driven API for database access. It complements the core API. Jdbi 3 is designed to provide convenient tabular data access in Java(tm) and other JVM based languages. It uses the Java collections framework for query results, provides a convenient means of externalizing SQL statements, and named parameter support for any database that supports JDBC.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "134e574b0189b45851a8cfe013c9f25e"
        },
        {
          "alg": "SHA-1",
          "content": "289c56c0ee1748fefaa37732b0d6589183b26431"
        },
        {
          "alg": "SHA-256",
          "content": "d27fc273cdfc1e19b5658756ee198048044583330a89ac7b76cf8bfb98750dd8"
        },
        {
          "alg": "SHA-512",
          "content": "05d379a377c85c896048ca81c07ad318583b62573a111b06289867bda2be7b192666ed21e11e92903ae1ae662388e014225ad9236bad69291e6ceffe85f3e9e6"
        },
        {
          "alg": "SHA-384",
          "content": "fd7e84e18a262ddd194882d9fe438812b37cddcbd7e60e514295d92e219113946edc6dd2e57f7d5659edb9aa44bc7c7d"
        },
        {
          "alg": "SHA3-384",
          "content": "cb72e8b45c5dccb74ecfe99e086f71e1bd517f759457343eb72fc6c237d97567f9db511fae46e6d6a452998e0d204c8d"
        },
        {
          "alg": "SHA3-256",
          "content": "69efccda75704d9bead40827a09eae0d47ee0cfe7a958feef0645742ccfd0418"
        },
        {
          "alg": "SHA3-512",
          "content": "52f0d18f91db2260899cae63c93825b723aaeddf83734f5c96654642336efd2322daabe3ceee1efdde7d7d85e84e2dd1832dafc514a10344be75a2a60dcae35c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.jdbi/jdbi3-sqlobject@3.55.0?type=jar",
      "externalReferences": [
        {
          "url": "https://jdbi.org/",
          "type": "website"
        },
        {
          "url": "https://github.com/jdbi/jdbi/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.jdbi/jdbi3-postgres@3.55.0?type=jar",
      "group": "org.jdbi",
      "name": "jdbi3-postgres",
      "version": "3.55.0",
      "description": "Support for additional PostgreSQL features and data types.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "cbd392c23603720ea8409a3dedf5b344"
        },
        {
          "alg": "SHA-1",
          "content": "307062403f1845a8a369f63a692e4a0fa3ab6372"
        },
        {
          "alg": "SHA-256",
          "content": "4517b5c65fabfdf8cdfea9125d1bda773a4d49de017131ddbc7135f42c02246c"
        },
        {
          "alg": "SHA-512",
          "content": "d7230c563f55a325c89665277b1c308b2c1207e4149b57bd9b4ca35d07a6697d45e2f6a144754562b46a4b4eeef889e4fedde7599a53b2edf49dca9d9fe86e49"
        },
        {
          "alg": "SHA-384",
          "content": "2d314455e35e23c4043192616a43e2edea4030e3d21ec16b8df631cb203bf1ba68c0bc0ad70f5d8c37a3ef0846f4830c"
        },
        {
          "alg": "SHA3-384",
          "content": "b486c5040c72e2bd73b97a1f4e15a53f70b261a78a9ff7e33e9ce26f25faf820130c0fe59682ec6d8db46209f6a04bf6"
        },
        {
          "alg": "SHA3-256",
          "content": "fa6212a0412d4caf94df5b1d1a8d7b8af517b8bcc9c3ad574b7afb1e5444492a"
        },
        {
          "alg": "SHA3-512",
          "content": "5e1f0c5c03890e19bdad9483827ca947194afa85bca87caf8d1c6cb1ada8ec27ab0201a912755b10e9c2dbce8a4fec1efafb668ef7352df7045316d724ccdfd9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.jdbi/jdbi3-postgres@3.55.0?type=jar",
      "externalReferences": [
        {
          "url": "https://jdbi.org/",
          "type": "website"
        },
        {
          "url": "https://github.com/jdbi/jdbi/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.jdbi/jdbi3-freemarker@3.55.0?type=jar",
      "group": "org.jdbi",
      "name": "jdbi3-freemarker",
      "version": "3.55.0",
      "description": "Use Apache Freemarker for query templating.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "d52d202f0da155c6a2f501f56b553f78"
        },
        {
          "alg": "SHA-1",
          "content": "1695ac81595d5c9263196b8f7211b7ee0c1b0d2c"
        },
        {
          "alg": "SHA-256",
          "content": "a8886fbb11ab879421278358e6d2fda68c19f1f3608301dc56c9e92adf2b3b38"
        },
        {
          "alg": "SHA-512",
          "content": "1de9010f66eb40dab774224b2c261d486708d8f9ad24cb87950efc533825c8d0d2bba1b6bcdcea1b81b01d26d04b7a8266f14e099c1400709932923a5fc61eea"
        },
        {
          "alg": "SHA-384",
          "content": "06e387d491daac62f46e523fcadda847773c3e43527b375272d7341ec32606a0c5abb3339d6dcd7b328a939d4f5a524c"
        },
        {
          "alg": "SHA3-384",
          "content": "0ab6d97729d638b88c796026be1b756255da8e644105bf9cdea2bfcb1060a389a381f58550c5b0ec1b7f6a112f99d283"
        },
        {
          "alg": "SHA3-256",
          "content": "a249581bb003e28a8079ee26ccf5d02aac45935f831d18914865ecaac35f9362"
        },
        {
          "alg": "SHA3-512",
          "content": "9ff900b7cbff47bb41ef9701a87b199e74f5f60768f6f9af18d6bc17d5eb90343577efabe8a1ef32db89b57c9a5cc5f8192f1f27038095ba14e278b157d4f011"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.jdbi/jdbi3-freemarker@3.55.0?type=jar",
      "externalReferences": [
        {
          "url": "https://jdbi.org/",
          "type": "website"
        },
        {
          "url": "https://github.com/jdbi/jdbi/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.freemarker/freemarker@2.3.34?type=jar",
      "publisher": "Apache Software Foundation",
      "group": "org.freemarker",
      "name": "freemarker",
      "version": "2.3.34",
      "description": "FreeMarker is a \u0022template engine\u0022; a generic tool to generate text output based on templates.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "1704fd3c579385ca5fd0ebcdf50df73c"
        },
        {
          "alg": "SHA-1",
          "content": "c2fa47a1c3b6dcdfca90e952e51211967a4baa54"
        },
        {
          "alg": "SHA-256",
          "content": "9a9fb91cd64199232eb1ca9766148a5d30ef8944be5fac051018f96c70c8f6a3"
        },
        {
          "alg": "SHA-512",
          "content": "58bc6e157452f6b3a70a7d1bcfb89013e7204e716e267386014f6834fb66a56333fe4b538ef25b651913ab585bfa5c8fa010159d96ab952de42a82edb9552fca"
        },
        {
          "alg": "SHA-384",
          "content": "3def74003978738e770a121746f2fd5b3f179f117050fac529ba9a6eee104ac7d20f74a1e815f97a5bf451b3f36f0ed1"
        },
        {
          "alg": "SHA3-384",
          "content": "5636e107cd5406439d57e41ebcfa3cb068e32639941f1b7d780efb5acdb50ee99f7966b9174c52e9cfb27de22666fec6"
        },
        {
          "alg": "SHA3-256",
          "content": "22113afa6de5d146e0be2840ffd3103323b87849f020b06f24d9a70f3dfd3571"
        },
        {
          "alg": "SHA3-512",
          "content": "69c49e3ffb693fbeb98515f578c5a1bf1a6f81baf04efb21d8b2cdcbe93d59eff28f3e6d82a785c9c5b27222fc6f1bfa16a33bc08c92ea792a26a5d1b6068df9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.freemarker/freemarker@2.3.34?type=jar",
      "externalReferences": [
        {
          "url": "https://freemarker.apache.org/",
          "type": "website"
        },
        {
          "url": "https://issues.apache.org/jira/browse/FREEMARKER/",
          "type": "issue-tracker"
        },
        {
          "url": "http://mail-archives.apache.org/mod_mbox/freemarker-dev/",
          "type": "mailing-list"
        },
        {
          "url": "https://git-wip-us.apache.org/repos/asf?p=freemarker.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.jersey.ext/jersey-micrometer@4.0.3?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.glassfish.jersey.ext",
      "name": "jersey-micrometer",
      "version": "4.0.3",
      "description": "Jersey extension modules providing utilities, filters as well as integrations with external frameworks (Guice, Spring, Freemarker, etc.) and languages (Scala, Groovy, etc.). NOTE: Jersey security extensions have their own dedicated security umbrella project.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "40e336944d259cc74f8448adc46c83dc"
        },
        {
          "alg": "SHA-1",
          "content": "d7c2040f8f7583dc61afbf2086a6bcc7e8fe5af5"
        },
        {
          "alg": "SHA-256",
          "content": "57b51ac59194086195201268a39fb223dc567085282c9ae7f3b6ce04d859a203"
        },
        {
          "alg": "SHA-512",
          "content": "7baf8dd243827e193affd30e0cbcd81b50b2d21ac7cc98ec6574c62b8497e4142591250ea0ed6d1b262a7f7ca82ffb9073272ece34173ef3b7cc657e68d80a2c"
        },
        {
          "alg": "SHA-384",
          "content": "7d1c291b4ba3843f8e9461d1658be132dbee6d1fb22cef8465ee200e514c532f3ad7c2894f899e1dfa0514cd7f94ae26"
        },
        {
          "alg": "SHA3-384",
          "content": "efc5c647123a1e16d1b09f1b6e905c47cf0a8c166df4f918d9b49557ec66c33b17488a67fe3014029046cc59c7f508ce"
        },
        {
          "alg": "SHA3-256",
          "content": "bca9960c4fd6066327c2718603c8c4ddd0f73f86a4f0ce2c80bc492b16adc2cb"
        },
        {
          "alg": "SHA3-512",
          "content": "39daf12f7fbf87755c6db5180edb2c05dc3410fc827e7ef55ec6cbe3c9017c466d47e15e441faf208747a86dd04607a8ab7d9ca28be4f16b845c1f796ac58963"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        },
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        },
        {
          "license": {
            "id": "BSD-2-Clause"
          }
        },
        {
          "license": {
            "name": "Apache License, 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        },
        {
          "license": {
            "name": "Public Domain",
            "url": "https://creativecommons.org/publicdomain/zero/1.0/"
          }
        },
        {
          "license": {
            "name": "Modified BSD",
            "url": "https://asm.ow2.io/license.html"
          }
        },
        {
          "license": {
            "name": "jQuery license",
            "url": "jquery.org/license"
          }
        },
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/license/mit/"
          }
        },
        {
          "license": {
            "name": "W3C license",
            "url": "https://www.w3.org/Consortium/Legal/copyright-documents-19990405"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.jersey.ext/jersey-micrometer@4.0.3?type=jar",
      "externalReferences": [
        {
          "url": "https://projects.eclipse.org/projects/ee4j.jersey",
          "type": "website"
        },
        {
          "url": "https://ci.eclipse.org/jersey",
          "type": "build-system"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.jersey.core/jersey-common@4.0.3?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.glassfish.jersey.core",
      "name": "jersey-common",
      "version": "4.0.3",
      "description": "Jersey core common packages",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "b3f86d15d8bd24c7a76235c501865e35"
        },
        {
          "alg": "SHA-1",
          "content": "6ad34cd53310503efd1f22dacd79c13f450303ad"
        },
        {
          "alg": "SHA-256",
          "content": "6480837fa63edd71141aa35e4d8d8d15ccd49234246ce0d3ef3eedb9e8cb1c03"
        },
        {
          "alg": "SHA-512",
          "content": "6f8629a94c26cb9898b11b83899700f25d935add570445883d70926395dad57dea3b1b8c359a1047fbc5384b26929f70d82d12c72792e59be8c273bf2e71a9eb"
        },
        {
          "alg": "SHA-384",
          "content": "9a42dfa21b1c5c6971ade529e9524f9154357750cc6ec3b4eca2147615d2d6d255d33b1530fad07368185864770aecf3"
        },
        {
          "alg": "SHA3-384",
          "content": "4a1b29a1663846e1c63cefacbb16d8ac0c2db3311db449714a65716379d64679c84e6f8272809ad2900f4e8ae2401506"
        },
        {
          "alg": "SHA3-256",
          "content": "ca6c38fe827f64e6732467010d3a6c3738790e86b3499ec85b9f0e87978e8404"
        },
        {
          "alg": "SHA3-512",
          "content": "0e43ae41aed3a265fb8ed1eac5bc75aa8525c6de1bb587798eec4b24a8a7405cc46ade5400b4a67d5d045946d8438490faf902689a83e0ef4afbad5c3272abb7"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "name": "The GNU General Public License (GPL), Version 2, With Classpath Exception",
            "url": "https://www.gnu.org/software/classpath/license.html"
          }
        },
        {
          "license": {
            "name": "Apache License, 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        },
        {
          "license": {
            "name": "Public Domain",
            "url": "https://creativecommons.org/publicdomain/zero/1.0/"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.jersey.core/jersey-common@4.0.3?type=jar",
      "externalReferences": [
        {
          "url": "https://projects.eclipse.org/projects/ee4j.jersey",
          "type": "website"
        },
        {
          "url": "https://ci.eclipse.org/jersey",
          "type": "build-system"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.hk2/osgi-resource-locator@3.0.0?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.glassfish.hk2",
      "name": "osgi-resource-locator",
      "version": "3.0.0",
      "description": "Eclipse Enterprise for Java (EE4J) is an open source initiative to create standard APIs, implementations of those APIs, and technology compatibility kits for Java runtimes that enable development, deployment, and management of server-side and cloud-native applications.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "de9e96f2606a6f86def8659e9762c163"
        },
        {
          "alg": "SHA-1",
          "content": "5483c94aa9a7e16319abaec0a6c74c999678feac"
        },
        {
          "alg": "SHA-256",
          "content": "a1866ccfddaa29f18da5d39df662894ab2dd9902994a5000e7644f6cc1e37e55"
        },
        {
          "alg": "SHA-512",
          "content": "ff7e7fc1656bd6f938f69186aa6be1379aacdd4ba9724735c7613d76edf4496d5ff74589bbb83d42c98a22620c6eaa17319d77f878f206744be3e8677f3cba09"
        },
        {
          "alg": "SHA-384",
          "content": "65739334c0f2f3f877a4a14b4d8009711f05d37d9ab4ad3e89560c0a7635011e3dc24ab3ee31ad3f19396bc320d9962b"
        },
        {
          "alg": "SHA3-384",
          "content": "dc6237482f129cb62e8bc16233174d36d76c114b2a51de64505374105a7099454143d18e4e2700e34f6aa497740dcbc4"
        },
        {
          "alg": "SHA3-256",
          "content": "b02549e92eb21dc206488d6d7cade6f94867c537646c9ab3009fd4c119a73c2c"
        },
        {
          "alg": "SHA3-512",
          "content": "d0ed41c9b5d0fe75a12d8dbfa65df17e6d2380c25e52436929d9eaa8154f474e66447e518dbee445c4c94660882a20f509b6f69aff8081805802b7a34d518f1c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.hk2/osgi-resource-locator@3.0.0?type=jar",
      "externalReferences": [
        {
          "url": "https://projects.eclipse.org/projects/ee4j/hk2-extra-parent/osgi-resource-locator",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/ee4j/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/glassfish-hk2-extra/osgi-resource-locator",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.jersey.core/jersey-server@4.0.3?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.glassfish.jersey.core",
      "name": "jersey-server",
      "version": "4.0.3",
      "description": "Jersey core server implementation",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "caa9f73a8e9b8c643b69107ca3126359"
        },
        {
          "alg": "SHA-1",
          "content": "ca7bdf7dcb1fb7c5ecaaf7e2d2d0277109140056"
        },
        {
          "alg": "SHA-256",
          "content": "7e62e6a96a4aedc7e9905b8e429d4768b9b3ac449e6a35ac9b8c5b1004364437"
        },
        {
          "alg": "SHA-512",
          "content": "10b5d6a1d5b56756bc5e388622bf57419849c675de494c5eca8ae8691902a2183eb264f1d1090ce64cde1a0c17ba98e7871bb45fa24a1d1ca0a57530413eb449"
        },
        {
          "alg": "SHA-384",
          "content": "f694f1b77462970ddca80551879a6e36d1829430083839eac83e05913feb11698944aa54d5654991199ba474b895f1b1"
        },
        {
          "alg": "SHA3-384",
          "content": "1c0af62fa986f79d4898c13e5e9d9ea4a48a54dc4907e6a237aa3c138e14f37e21c455eb471526db734e67f4be0ed419"
        },
        {
          "alg": "SHA3-256",
          "content": "b1e36404f3f17abe1912111611f7f2f7c8bea584908a7eab419962f4bc1b9e69"
        },
        {
          "alg": "SHA3-512",
          "content": "6a907a5434e94f0a500e483c6539797d878799b75a52bd51900f708dee8362b41a5f5816db58ae6b33a1665214232bdebfb5995b44437f9e128df640219cd74d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "name": "The GNU General Public License (GPL), Version 2, With Classpath Exception",
            "url": "https://www.gnu.org/software/classpath/license.html"
          }
        },
        {
          "license": {
            "name": "Apache License, 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        },
        {
          "license": {
            "name": "Modified BSD",
            "url": "https://asm.ow2.io/license.html"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.jersey.core/jersey-server@4.0.3?type=jar",
      "externalReferences": [
        {
          "url": "https://projects.eclipse.org/projects/ee4j.jersey",
          "type": "website"
        },
        {
          "url": "https://ci.eclipse.org/jersey",
          "type": "build-system"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.jersey.core/jersey-client@4.0.3?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.glassfish.jersey.core",
      "name": "jersey-client",
      "version": "4.0.3",
      "description": "Jersey core client implementation",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "9ffcca4a189723990bb16bcc745a6ca4"
        },
        {
          "alg": "SHA-1",
          "content": "d2ecfdf380b5b3a8e8306de5676b80dcc472cfc0"
        },
        {
          "alg": "SHA-256",
          "content": "4fe1aa250b9f0f708e5f5641468d50cd773776d236926f2a51d3ece27d8d6ffc"
        },
        {
          "alg": "SHA-512",
          "content": "656d94a14457900342c2584ba4d23846b2f850fab3a2a0428ab5ec3ebf42cf0358fe8197aec0b1b687c23f73ab06958c3fb8b3c76a59e4fc1bbbcb9d81e3409a"
        },
        {
          "alg": "SHA-384",
          "content": "e7172e7bbeec2c2b4b3ecd022ea2d56071c5c6f0bb2abe2d232fbe4e07c7454edea22160e96b387f51601f3fddb03d18"
        },
        {
          "alg": "SHA3-384",
          "content": "4ba933305aeed6bf92a588874820825fdfce4704a97706e4c6ba9fe3d47334e2ae94a50924ae6d7a80568746e0d7230d"
        },
        {
          "alg": "SHA3-256",
          "content": "e2681328aa53fa6b6f9b2d071651f60e2be2a96f78f5663730c9fbfee84b0bf5"
        },
        {
          "alg": "SHA3-512",
          "content": "d799bb918c340cfd81f23d8c0d72eccf74971fba0ce50e92189199cc4d8eb4e33537586a5ef33a54db4794d4db5d2bd937785d27902a2e2675ee10925f581c72"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        },
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        },
        {
          "license": {
            "id": "BSD-2-Clause"
          }
        },
        {
          "license": {
            "name": "Apache License, 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        },
        {
          "license": {
            "name": "Public Domain",
            "url": "https://creativecommons.org/publicdomain/zero/1.0/"
          }
        },
        {
          "license": {
            "name": "Modified BSD",
            "url": "https://asm.ow2.io/license.html"
          }
        },
        {
          "license": {
            "name": "jQuery license",
            "url": "jquery.org/license"
          }
        },
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/license/mit/"
          }
        },
        {
          "license": {
            "name": "W3C license",
            "url": "https://www.w3.org/Consortium/Legal/copyright-documents-19990405"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.jersey.core/jersey-client@4.0.3?type=jar",
      "externalReferences": [
        {
          "url": "https://projects.eclipse.org/projects/ee4j.jersey",
          "type": "website"
        },
        {
          "url": "https://ci.eclipse.org/jersey",
          "type": "build-system"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@4.0.0?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "jakarta.ws.rs",
      "name": "jakarta.ws.rs-api",
      "version": "4.0.0",
      "description": "Jakarta RESTful Web Services",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "9b7cc90c000f193157d60d95caf45972"
        },
        {
          "alg": "SHA-1",
          "content": "c27a67f84ca491efcb3fa68f4df926e8a110069e"
        },
        {
          "alg": "SHA-256",
          "content": "6368b126cbcf34e694bb9ba5b9fe3e5040b7acea7ce622e636d698bb085fd2a6"
        },
        {
          "alg": "SHA-512",
          "content": "e423f90e5f20d133986c60c3fc2f63cfc74531d51b57bf38942cf8e603d8c6817005708117b0bb07e242eae3ba6e1cf23c6ded8fb2776274a9382505ea726ac1"
        },
        {
          "alg": "SHA-384",
          "content": "494b2962ad17d9477d58125cd99d4c0e52e58e10b7ad81e66196649da6651a3187d1ccf64e642083d0a6e54c70f07401"
        },
        {
          "alg": "SHA3-384",
          "content": "1803d40582c05b6956cfeb2cfc7b39c03f2211d4d8511b2b9df2fc4c5830f5a1f8e05d86731f4b168caa3a78bae28d69"
        },
        {
          "alg": "SHA3-256",
          "content": "5e91619ebc4cc811f1639acf926dc4935ac38808d5d834b6d6f26784d7299e9b"
        },
        {
          "alg": "SHA3-512",
          "content": "48c8ed0acd56c83a0d9413bdaa950c92345ac0f36491745e8675b96909c35311fcb05bd80839d0d1247eb5b373754ce5d922d99d06cd1ef9f6063a491e51d671"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0",
            "url": "https://www.eclipse.org/legal/epl-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception",
            "url": "https://www.gnu.org/software/classpath/license.html"
          }
        }
      ],
      "purl": "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@4.0.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/jakartaee/rest/jakarta.ws.rs-api",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/jakartaee/rest/issues",
          "type": "issue-tracker"
        },
        {
          "url": "jaxrs-dev@eclipse.org",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/jakartaee/rest/jakarta.ws.rs-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/us.springett/owasp-risk-rating-calculator@1.0.1?type=jar",
      "group": "us.springett",
      "name": "owasp-risk-rating-calculator",
      "version": "1.0.1",
      "description": "A Java library for calculating OWASP Risk Rating scores",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "f387d7ce91df7f1b56224b972b916ebe"
        },
        {
          "alg": "SHA-1",
          "content": "f4ae15b14d7a4c3686f6a8a8a93e30560472b1f8"
        },
        {
          "alg": "SHA-256",
          "content": "9b66d91d1ff61f99e320466ff451555696f139147260528591ff1718c5605d1c"
        },
        {
          "alg": "SHA-512",
          "content": "449331aaabc401a7c7ac42c6bba06d17a2c2dc8def07961b93de7bde8fb9f54aa2541cbab7e541b6fa1552977d46e5367a78277cffbafc60873bb7042facff65"
        },
        {
          "alg": "SHA-384",
          "content": "e83afc9976cfcb5419768fdba983815bf755101fef34df693b6033094e12a29d23127148edef4ba6db3573e0b2bb3871"
        },
        {
          "alg": "SHA3-384",
          "content": "07bed3d3cc524090d01da7711e684d7c645e9225e38225ca92da6f58f3ae86c9d9f2e1a45ad923f9345abecb609c0be1"
        },
        {
          "alg": "SHA3-256",
          "content": "153dbb661c502fd174cdbb735a0a89f69555365e165dd6a91d7c765226b9947a"
        },
        {
          "alg": "SHA3-512",
          "content": "6c6bb8298f8f3337395693f4963d08d21d7f76e6ef8802773e37efc64b1b25a6f8ec77169f730591f429cfa5ac5f6a1b2ef0948af67fa49f19cf7ba8a0223f25"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/us.springett/owasp-risk-rating-calculator@1.0.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/stevespringett/owasp-risk-rating-calculator",
          "type": "website"
        },
        {
          "url": "https://travis-ci.org/stevespringett/owasp-risk-rating-calculator",
          "type": "build-system"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/stevespringett/owasp-risk-rating-calculator/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/stevespringett/owasp-risk-rating-calculator.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/us.springett/cpe-parser@3.0.1?type=jar",
      "group": "us.springett",
      "name": "cpe-parser",
      "version": "3.0.1",
      "description": "A utility for validating and parsing Common Platform Enumeration (CPE) v2.2 and v2.3 as originally defined by MITRE and maintained by NIST.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "753b3f9a2223c44111f7098ff8a65e3f"
        },
        {
          "alg": "SHA-1",
          "content": "377c4cdca1c3c800dd1ff77d6b5cece16dbf1852"
        },
        {
          "alg": "SHA-256",
          "content": "f98a50dce0a381e08f0f0ac067801c7f4c51dc7f8f1fe7a3c9960c684a809705"
        },
        {
          "alg": "SHA-512",
          "content": "241e1a559ac01966f74e820d0af3fb4f79ec41b76590f26198929790a35579f5663d3d8f97b98e841665f57eb5bc6c51370969f0db34c99c3293c6d98093d9c2"
        },
        {
          "alg": "SHA-384",
          "content": "92929bc29a157cbe13d424875e5a66eacd52b2e20a412306ae48a43076123dca75f1cf0d6d075e140cec34e4bf7a5e25"
        },
        {
          "alg": "SHA3-384",
          "content": "bf36fd4e57aa02054d12018926b7fdb8f89b1fa669b1b4c7ff8327c3203c86843c53825facedd34b86c6d95455ce1907"
        },
        {
          "alg": "SHA3-256",
          "content": "064ece86c096355ca9a06fb4942fb3abac3555e8213653fce7ed1f7767b5531d"
        },
        {
          "alg": "SHA3-512",
          "content": "2f005c9caa28acb5a4f9d521a4b847316f949f9f377bbad4cf25ba485127104717bab5e2382238c4f7349d598eb4de073f08dea0838990d32b6d1f2741b33fc5"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/us.springett/cpe-parser@3.0.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/stevespringett/CPE-Parser",
          "type": "website"
        },
        {
          "url": "https://github.com/stevespringett/CPE-Parser/actions/workflows/maven.yml",
          "type": "build-system"
        },
        {
          "url": "https://github.com/stevespringett/CPE-Parser/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/stevespringett/CPE-Parser.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.cyclonedx/cyclonedx-core-java@13.4.0?type=jar",
      "publisher": "OWASP Foundation",
      "group": "org.cyclonedx",
      "name": "cyclonedx-core-java",
      "version": "13.4.0",
      "description": "The CycloneDX core module provides a model representation of the BOM along with utilities to assist in creating, parsing, and validating BOMs.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "d00ee0d71a5d0485aea12e5ec2b6a92c"
        },
        {
          "alg": "SHA-1",
          "content": "d244bf534a0869f4d72db600941af2763717cc46"
        },
        {
          "alg": "SHA-256",
          "content": "5e060964952a0d625eeb816cfe3a7ac46a60492488d685a9fc8fb1b341f53321"
        },
        {
          "alg": "SHA-512",
          "content": "1776d9eb6b649f6f66b2530d08ad2c13c785f279f356b43bca8875053a3625f05a6ecb1a784ba2d366a2d35309d2583299642a921d6ec4269c9b9d2ddcacbda9"
        },
        {
          "alg": "SHA-384",
          "content": "afa1ffd2fe7cac0d54ea03760e7d410831d5eaba0596b488c4c28a306855664ba70bdc1f97dbe2df35116057b9e7f4c1"
        },
        {
          "alg": "SHA3-384",
          "content": "4bf8cb00ca9da786b64b63f853478a129d8f6526a861029996e314d11e21492efafc62e40ca7445ab73a335a484b62e3"
        },
        {
          "alg": "SHA3-256",
          "content": "0b1cf6f8a7b61ef438ab9f0136ecc21c63679665dfd682f5f48a1e2050a74765"
        },
        {
          "alg": "SHA3-512",
          "content": "28cbf345e8e02cc451cc2f7bc952cb2c4d2bd570f0e4b8870c1bfa75e920612c0ac5e182c618655874ebed84779367373c577f459fc2d567ac712deb43ac0959"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.cyclonedx/cyclonedx-core-java@13.4.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/CycloneDX/cyclonedx-core-java",
          "type": "website"
        },
        {
          "url": "https://github.com/CycloneDX/cyclonedx-core-java/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/CycloneDX/cyclonedx-core-java/issues",
          "type": "issue-tracker"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.22.3?type=jar",
      "publisher": "FasterXML",
      "group": "com.fasterxml.jackson.dataformat",
      "name": "jackson-dataformat-xml",
      "version": "2.22.3",
      "description": "Data format extension for Jackson to offer alternative support for serializing POJOs as XML and deserializing XML as POJOs.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "79220170925ab28331a88c0a625c87f0"
        },
        {
          "alg": "SHA-1",
          "content": "a9b438014867a6f65216e0e663fc92b72288b16d"
        },
        {
          "alg": "SHA-256",
          "content": "8b99f4a11761246f2d721f02d2865dcca32dd8101082ebfbc3c16133b6c0d3e0"
        },
        {
          "alg": "SHA-512",
          "content": "a137d96d2ff2b4441738def126c6f136ac2b1c61aeb0e40934658db21c0573e195936b3b79199fb4c13d05a636137e5f69da139de08127cbe635e568fa24109e"
        },
        {
          "alg": "SHA-384",
          "content": "af768ee29336c7a5f106248caa7570849d3cacee4f9501541082593dc0eee55627ed342d88b91d6c114dfbb9636bb429"
        },
        {
          "alg": "SHA3-384",
          "content": "dede9dd81120fdd69eabfc5418b1949a500b33a3c60da71279467545a2379094fe9d6bc88db07b6f77af7ee4e0917239"
        },
        {
          "alg": "SHA3-256",
          "content": "8c29e54d097336fccdd13221d24792f3bdf3842f4231f0635365ab116afde68f"
        },
        {
          "alg": "SHA3-512",
          "content": "d44c8ddb763568d0a592958b8181cb7f2d75b319885e54c8fe1f277a14b6c2723c6fb5092265bebd0c922796e7994ae984d090b5e2ba9a60075bcb87ab858161"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.22.3?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/FasterXML/jackson-dataformat-xml",
          "type": "website"
        },
        {
          "url": "https://central.sonatype.com/api/v1/publisher",
          "type": "distribution"
        },
        {
          "url": "https://github.com/FasterXML/jackson-dataformat-xml/issues",
          "type": "issue-tracker"
        },
        {
          "url": "http://github.com/FasterXML/jackson-dataformat-xml",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/jakarta.servlet/jakarta.servlet-api@6.1.0?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "jakarta.servlet",
      "name": "jakarta.servlet-api",
      "version": "6.1.0",
      "description": "Eclipse Enterprise for Java (EE4J) is an open source initiative to create standard APIs, implementations of those APIs, and technology compatibility kits for Java runtimes that enable development, deployment, and management of server-side and cloud-native applications.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "314c930b3e40ac1abc3529c7c9942f09"
        },
        {
          "alg": "SHA-1",
          "content": "1169a246913fe3823782af7943e7a103634867c5"
        },
        {
          "alg": "SHA-256",
          "content": "8a31f465f3593bf2351531a5c952014eb839da96a605b5825b93dd54714c48c4"
        },
        {
          "alg": "SHA-512",
          "content": "8651fc14b79e284fe29dff5b2cadbf6748615ececde798c42687472f4f6fd1f80ee05ec53794021c62a11abed0c0170bb08b28d3f9cd7f562eb320bc9870ddec"
        },
        {
          "alg": "SHA-384",
          "content": "48b2a26351619286ffe41d25e5e61cbc0eb8a5a648a205d0f8db48178278cb16850469fe8dbc219aee0ee37f4081c248"
        },
        {
          "alg": "SHA3-384",
          "content": "2047f0b88a12619fb3f07a98048fc405e9cec4ddee6af2a2efc06c1172d2bebefc6c23bdb4df0a1054060f91d5cc5617"
        },
        {
          "alg": "SHA3-256",
          "content": "4b506d06772f32251cadc40251623ebd4f3144531249ce4821787b1a9c4a55b3"
        },
        {
          "alg": "SHA3-512",
          "content": "07632a67f7ca7b460cfc3042ecf97f9097e7d7638209434def89a3bd55da5a31e287f32def27ce776d5775ec0629979abb08fe2836d88d638802194af0320fe0"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl": "pkg:maven/jakarta.servlet/jakarta.servlet-api@6.1.0?type=jar",
      "externalReferences": [
        {
          "url": "https://projects.eclipse.org/projects/ee4j.servlet",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/servlet-api/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/servlet-dev",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/servlet-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.eclipse.jetty/jetty-server@12.1.14?type=jar",
      "publisher": "Webtide",
      "group": "org.eclipse.jetty",
      "name": "jetty-server",
      "version": "12.1.14",
      "description": "Jetty Server Artifact",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "4485d7bcc984ff2043cbb1da27f16a12"
        },
        {
          "alg": "SHA-1",
          "content": "d9ee042059cc5252411baa6bd1192bd2840d503d"
        },
        {
          "alg": "SHA-256",
          "content": "62a2c691ecb3b60178e7b1a64d498261d31bcef76dd19147b89dcb2c6f784f30"
        },
        {
          "alg": "SHA-512",
          "content": "e06098c51bcfdccefcc487fdf6f624e3bdf371c10fe034f3d3bacbe62bad24034984550a7768ec26e6daaa86bd8a25b669b99730d33bb6f4d28d837ce71846cc"
        },
        {
          "alg": "SHA-384",
          "content": "2e1c7dd481c341407c0a881628cede346a0057b5b59b2b203ab5eddc027ff0d9734d8540fff11917df16bc94d0f1023d"
        },
        {
          "alg": "SHA3-384",
          "content": "cd3ce9205692a7ff5308ddb907f9abca80bc7c3f26393402c756e7a2e6be47beed6818489ec7c589256e1f1bb784d725"
        },
        {
          "alg": "SHA3-256",
          "content": "a3e4a1381fb346f896bac3ca98d2877f27da1a5ff49559dd93d9122f6d9548ec"
        },
        {
          "alg": "SHA3-512",
          "content": "1d2ca96c9effce35dd027c5abfebf6efdb78672bba593224ce8d6b1d35c7e0f24429d520addf6f28701f43a586dafd95748f606b6ccd6014c9ac4d72a3d41d0f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0",
            "url": "https://www.eclipse.org/legal/epl-2.0"
          }
        },
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.eclipse.jetty/jetty-server@12.1.14?type=jar",
      "externalReferences": [
        {
          "url": "https://jetty.org/jetty-core/jetty-server",
          "type": "website"
        },
        {
          "url": "https://repo.maven.apache.org/maven2",
          "type": "distribution"
        },
        {
          "url": "https://github.com/jetty/jetty.project/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://www.eclipse.org/lists/jetty-dev/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/jetty/jetty.project/jetty-core/jetty-server",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.eclipse.jetty/jetty-http@12.1.14?type=jar",
      "publisher": "Webtide",
      "group": "org.eclipse.jetty",
      "name": "jetty-http",
      "version": "12.1.14",
      "description": "Jetty HTTP Artifact",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "306bd38a087b8a8a69416bed3a59a598"
        },
        {
          "alg": "SHA-1",
          "content": "511ea5749bc221b4b9c6d70978bd377053ba3c44"
        },
        {
          "alg": "SHA-256",
          "content": "a898f3dad99c2505409047d849cac7f652eced5853f9dad711395a26cd681e13"
        },
        {
          "alg": "SHA-512",
          "content": "c5767503900d9716ea1fa2d91d9ecaabc724e0615032f3cdf9e9f85e0dceabf9a9e3b1965fc30bb3146e29293bbd07df5531a9052c81f2e2d23a5d1a91e9741c"
        },
        {
          "alg": "SHA-384",
          "content": "6de01dc99ad6bbc918fdd5b4506519516763655a795197c4b95f255cb20ab5a897c40f47c7d0eb36e9f5464f1fc5e5dd"
        },
        {
          "alg": "SHA3-384",
          "content": "1b6377b2bbde543dc78bd1fd8c8e5e8d4b5c237b59fe2812842d9fa11c2fafc56623a824c861023e23c9caad6c35b6a7"
        },
        {
          "alg": "SHA3-256",
          "content": "b11db271a778811c988c0530787df59ddfcae8167703dd6df28ffe6944979642"
        },
        {
          "alg": "SHA3-512",
          "content": "d6af071a6219eccf527d9a1d0d50e54cfed53d5e5b498b39b4f8c34e12f7f716ebb998c38c4c0481ba61b33293d4bd5ab05413efa22ba35bb30a73c25e0304f0"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0",
            "url": "https://www.eclipse.org/legal/epl-2.0"
          }
        },
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.eclipse.jetty/jetty-http@12.1.14?type=jar",
      "externalReferences": [
        {
          "url": "https://jetty.org/jetty-core/jetty-http",
          "type": "website"
        },
        {
          "url": "https://repo.maven.apache.org/maven2",
          "type": "distribution"
        },
        {
          "url": "https://github.com/jetty/jetty.project/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://www.eclipse.org/lists/jetty-dev/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/jetty/jetty.project/jetty-core/jetty-http",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.eclipse.jetty/jetty-util@12.1.14?type=jar",
      "publisher": "Webtide",
      "group": "org.eclipse.jetty",
      "name": "jetty-util",
      "version": "12.1.14",
      "description": "Jetty Utilities Artifact",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "a752c54f80a9be2e0ab49266abfc4f11"
        },
        {
          "alg": "SHA-1",
          "content": "b89abd671db08f3933bec0834bb6859be6ab957c"
        },
        {
          "alg": "SHA-256",
          "content": "deb2a47bb9659c69076da1020d058c0ededba61dcd1aebccf83fce4719164adc"
        },
        {
          "alg": "SHA-512",
          "content": "6eb864d33d5263af185b8a11fac4d85b2a517f89d9b2c96bfaa5a4475baa759d06d63b5576cdb02d8d40a0038e233bb08c9aeb844e55b4761e9db7ff7037493d"
        },
        {
          "alg": "SHA-384",
          "content": "7451022623cfa2c206f0e99c7f43d0fb8a016ce152581af5bc1e8c06e7946914c8fa5840f933fe925169cb3306533824"
        },
        {
          "alg": "SHA3-384",
          "content": "b32fd235c0bdc37ac417e7a3f46bfb0f588f158e87bb06236a4c65646670c0b491fb9dc445680c95d5bcd94e01e05cfd"
        },
        {
          "alg": "SHA3-256",
          "content": "08733edae28eac7284b25874559d15221ee07a02fd169dcec3019ad814cda82a"
        },
        {
          "alg": "SHA3-512",
          "content": "c849c3924c0a34478755c68d7ef147a28dec9e4cb61a4dba58965c5144acd5393b935be7327050a8d80846032652b0c226983ebe46762ff3215b7e899315634b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0",
            "url": "https://www.eclipse.org/legal/epl-2.0"
          }
        },
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.eclipse.jetty/jetty-util@12.1.14?type=jar",
      "externalReferences": [
        {
          "url": "https://jetty.org/jetty-core/jetty-util",
          "type": "website"
        },
        {
          "url": "https://repo.maven.apache.org/maven2",
          "type": "distribution"
        },
        {
          "url": "https://github.com/jetty/jetty.project/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://www.eclipse.org/lists/jetty-dev/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/jetty/jetty.project/jetty-core/jetty-util",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.eclipse.jetty/jetty-io@12.1.14?type=jar",
      "publisher": "Webtide",
      "group": "org.eclipse.jetty",
      "name": "jetty-io",
      "version": "12.1.14",
      "description": "Jetty I/O Artifact",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "151f7bf554910fe086a90325c6669f34"
        },
        {
          "alg": "SHA-1",
          "content": "c933762558ba8b795dc11b11c70f208256d22ea7"
        },
        {
          "alg": "SHA-256",
          "content": "9a41452f362f5bd96e017f16d6b66d19d2d60a5981eafd3729367c1d535eb5e9"
        },
        {
          "alg": "SHA-512",
          "content": "fe8f5d075f0cb1bfeb9b2a51de18feae24627c8f8a2a3b9c0c0b6848983222bbec71b1cc5d452bf6ec649b161fb51b5d425140419c29b2d61aed3b7894add134"
        },
        {
          "alg": "SHA-384",
          "content": "656ee477d7bb71e203df5c09c925a3c8f9da17ce3e62ece4c23e803beff7c82473ffd3af58290b8ce59a5e5344b88a57"
        },
        {
          "alg": "SHA3-384",
          "content": "6a1662b8fcfc5b5a12716df7cccafaad842fbbe1585ff9829a57034da69a10746ba60b61822f1e267a724eba7fa9ceaa"
        },
        {
          "alg": "SHA3-256",
          "content": "b1bc42813692a37926b61186c1a34b5a6f8c8b037db2504000de06382c5718a5"
        },
        {
          "alg": "SHA3-512",
          "content": "bdba500e7b0b28ff460de9ee391c12b888db1e755c9f86006f50f005b8ad2d647dd1cb1c181840298e26b9f194cb290551b3dda64163efed78ddf43f72da6e40"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0",
            "url": "https://www.eclipse.org/legal/epl-2.0"
          }
        },
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.eclipse.jetty/jetty-io@12.1.14?type=jar",
      "externalReferences": [
        {
          "url": "https://jetty.org/jetty-core/jetty-io",
          "type": "website"
        },
        {
          "url": "https://repo.maven.apache.org/maven2",
          "type": "distribution"
        },
        {
          "url": "https://github.com/jetty/jetty.project/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://www.eclipse.org/lists/jetty-dev/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/jetty/jetty.project/jetty-core/jetty-io",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.eclipse.jetty.compression/jetty-compression-gzip@12.1.14?type=jar",
      "publisher": "Webtide",
      "group": "org.eclipse.jetty.compression",
      "name": "jetty-compression-gzip",
      "version": "12.1.14",
      "description": "Jetty Compression Gzip Artifact",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "f46fd8dcbb99a65f7c7f6b5d347874a3"
        },
        {
          "alg": "SHA-1",
          "content": "ab3b06bbd09f34e98bed3dae3136f7225691b893"
        },
        {
          "alg": "SHA-256",
          "content": "d0994b3a821d2946c1d1c881be4b3997e95a05d7381328d79b7c1b7b042e9186"
        },
        {
          "alg": "SHA-512",
          "content": "c43040ad7408e0dfbb04c83ff9cfafcb705d2272a8e162851b4e0ebc5dff26d2e4cde8364580759e5e3d0bc994c75faffaf79a4a8a49933187ca58b55eb68c4b"
        },
        {
          "alg": "SHA-384",
          "content": "d9370a984957bbd656f54c07d11d614c5de921ebec173ab099c4c90382cdcfb28f6f15e284e0919435fa7dea714767cf"
        },
        {
          "alg": "SHA3-384",
          "content": "b9cbe15672d10108303f9f6bb5b7141211b500db8f8c46aa7dd572a3b5e212ea053d41dc8e8c68dfdd3ddf61425c791c"
        },
        {
          "alg": "SHA3-256",
          "content": "01fc12c4d29416fcdd3af740b57268abd0b9fae0c4a25650f46c20125fe543d0"
        },
        {
          "alg": "SHA3-512",
          "content": "3d6edad43ef7e298a6d4c896332dcd357de116b803002aa48c597dc2b1c32f47438f1a7fd51b9626c9537e20c8f7285b4e5e19c0f7a590040fa8cc8d51315615"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0",
            "url": "https://www.eclipse.org/legal/epl-2.0"
          }
        },
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.eclipse.jetty.compression/jetty-compression-gzip@12.1.14?type=jar",
      "externalReferences": [
        {
          "url": "https://jetty.org/jetty-core/jetty-compression/jetty-compression-gzip",
          "type": "website"
        },
        {
          "url": "https://repo.maven.apache.org/maven2",
          "type": "distribution"
        },
        {
          "url": "https://github.com/jetty/jetty.project/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://www.eclipse.org/lists/jetty-dev/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/jetty/jetty.project/jetty-core/jetty-compression/jetty-compression-gzip",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.eclipse.jetty.compression/jetty-compression-common@12.1.14?type=jar",
      "publisher": "Webtide",
      "group": "org.eclipse.jetty.compression",
      "name": "jetty-compression-common",
      "version": "12.1.14",
      "description": "Jetty Compression Common Artifact",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "50f412f3a5813a1ead46024d5fcfbe20"
        },
        {
          "alg": "SHA-1",
          "content": "19e7d0bc261cc061ac2e4a9ad4303cd37b0a6cc2"
        },
        {
          "alg": "SHA-256",
          "content": "121a28a3aad2a036c9f97073ddc37f11cb3e9f3da13425f2c08c380ead93a6db"
        },
        {
          "alg": "SHA-512",
          "content": "7d7649928522290dbba9537d45b285cfc46c584871eb159580e24431736f7906f699bbb3385f6d70b8ad5d5577656195ed6b0575ffc13ca5a5ba8348a6c4a5bd"
        },
        {
          "alg": "SHA-384",
          "content": "a20be50cf6f60f1cc0f74c94d4c543db6f76f8c43034ea4d91f063bed55bcac3f1181207057c85148f5ed384c94fa1c0"
        },
        {
          "alg": "SHA3-384",
          "content": "c1bb5aaac1b6b6555956e00d8da9a78765c3c489229a8c7fa7c2d1e54c012ebec3084f36223d26b224f3f29b0c330ba6"
        },
        {
          "alg": "SHA3-256",
          "content": "80ec655fa1f129eb5867e8efe3df8536bbc42603c8de2fd74df5f70744f36a08"
        },
        {
          "alg": "SHA3-512",
          "content": "f32c9d7caf0b2419210ea6cf67f039669abb41137e137777103358c246f02680050087d51950e0e0ae9a514b55d5476bb41bd2f47a1bc9abffd381815eb0e1ba"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0",
            "url": "https://www.eclipse.org/legal/epl-2.0"
          }
        },
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.eclipse.jetty.compression/jetty-compression-common@12.1.14?type=jar",
      "externalReferences": [
        {
          "url": "https://jetty.org/jetty-core/jetty-compression/jetty-compression-common",
          "type": "website"
        },
        {
          "url": "https://repo.maven.apache.org/maven2",
          "type": "distribution"
        },
        {
          "url": "https://github.com/jetty/jetty.project/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://www.eclipse.org/lists/jetty-dev/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/jetty/jetty.project/jetty-core/jetty-compression/jetty-compression-common",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.eclipse.jetty.compression/jetty-compression-zstandard@12.1.14?type=jar",
      "publisher": "Webtide",
      "group": "org.eclipse.jetty.compression",
      "name": "jetty-compression-zstandard",
      "version": "12.1.14",
      "description": "Jetty Compression Zstandard Artifact",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "6f1bbc551fb97e288f83b293b4be4887"
        },
        {
          "alg": "SHA-1",
          "content": "253d339638afa7f3c8f0aff1e8f58c2591c7bbf6"
        },
        {
          "alg": "SHA-256",
          "content": "f4bf3f6c13c442c4456c3dc7cf4adccfcec3a44e4843fc1a67d1a5c46e468e17"
        },
        {
          "alg": "SHA-512",
          "content": "f055ce5e7cf92e775691f8940b58859beec89fba0f7de7e57ec4b554f3a197e0bd96bddf7264f64d274e56c62123944146b83f2a1cbe70b9ef3d9fad4033f724"
        },
        {
          "alg": "SHA-384",
          "content": "a720831ef52c55f1c11b981fe0d216b2f8b573eb55091db90c2bc59301d5c6ddf70f609e2aeb3198b4a4cfa1fac6f195"
        },
        {
          "alg": "SHA3-384",
          "content": "6acb5d1b3ad95f8786f80954aa0934074b781af91b8c7d6ce3bf5e9e29f4f05067a9671be640a0af3b8f940e16ec8c29"
        },
        {
          "alg": "SHA3-256",
          "content": "5367af77468a4adfc82e1aa6b69bd19076b29501d64afabc0c84ef8d2a236c64"
        },
        {
          "alg": "SHA3-512",
          "content": "04c542ba81a4f82fbb1c1dbb88653e3166a7219fa87d902f06b7425d4707925922a97f9913a2904db9510e109ac46559113acdd20e19b768c32df555aceb0f25"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0",
            "url": "https://www.eclipse.org/legal/epl-2.0"
          }
        },
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.eclipse.jetty.compression/jetty-compression-zstandard@12.1.14?type=jar",
      "externalReferences": [
        {
          "url": "https://jetty.org/jetty-core/jetty-compression/jetty-compression-zstandard",
          "type": "website"
        },
        {
          "url": "https://repo.maven.apache.org/maven2",
          "type": "distribution"
        },
        {
          "url": "https://github.com/jetty/jetty.project/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://www.eclipse.org/lists/jetty-dev/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/jetty/jetty.project/jetty-core/jetty-compression/jetty-compression-zstandard",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.eclipse.jetty.compression/jetty-compression-server@12.1.14?type=jar",
      "publisher": "Webtide",
      "group": "org.eclipse.jetty.compression",
      "name": "jetty-compression-server",
      "version": "12.1.14",
      "description": "Jetty Compression Server Artifact",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "9ec52971cf60e3df6556c7b28bb4e5dc"
        },
        {
          "alg": "SHA-1",
          "content": "6adb2d0631263963c3c967307bfe08b5601cb5d3"
        },
        {
          "alg": "SHA-256",
          "content": "91c6078fe3aa46b8777cca8da923bae42623cceaa3415f9a80f7d7b6a713233f"
        },
        {
          "alg": "SHA-512",
          "content": "d2a5bddafeb378dce1800f1c4dee2753b4a2c761ee8fbf47fe9894754d431cc528ea9bbd01d294c51bc1b7eceeadced71280e6510144661ab63d6c061a7d82ff"
        },
        {
          "alg": "SHA-384",
          "content": "3b16167d4bf98dd355425c64f3130cf380339db351012acbfc552d9e88a9f473928b42ccf1376be92a9f04a312756b85"
        },
        {
          "alg": "SHA3-384",
          "content": "2101e89bf2ac1b38f1187c4c87e5de8593a7066932b19c23787cbd652609c44115a821c7f9d756b0c9b433d3b5903093"
        },
        {
          "alg": "SHA3-256",
          "content": "c1be3a2a2dc26070309c290a274cc465fb6109cf166a607a1537503cf87bc4eb"
        },
        {
          "alg": "SHA3-512",
          "content": "15aa20cfe50919978cd7e3bca7fd3bd5f0b578c4cf7f753f930b33496f5da82b0e2e579755fcb004ab9cdc493647da929390ec4feec1ed5c839756a52fef206c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0",
            "url": "https://www.eclipse.org/legal/epl-2.0"
          }
        },
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.eclipse.jetty.compression/jetty-compression-server@12.1.14?type=jar",
      "externalReferences": [
        {
          "url": "https://jetty.org/jetty-core/jetty-compression/jetty-compression-server",
          "type": "website"
        },
        {
          "url": "https://repo.maven.apache.org/maven2",
          "type": "distribution"
        },
        {
          "url": "https://github.com/jetty/jetty.project/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://www.eclipse.org/lists/jetty-dev/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/jetty/jetty.project/jetty-core/jetty-compression/jetty-compression-server",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.eclipse.jetty.ee11/jetty-ee11-servlet@12.1.14?type=jar",
      "publisher": "Webtide",
      "group": "org.eclipse.jetty.ee11",
      "name": "jetty-ee11-servlet",
      "version": "12.1.14",
      "description": "Jetty Servlet Container",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "3b412f3a8d85871c9b18658ab1fb27ce"
        },
        {
          "alg": "SHA-1",
          "content": "ff149925f551de116ccadc0cceb62729bb3f0ec3"
        },
        {
          "alg": "SHA-256",
          "content": "a4875bcf0d1a2273f91c1fff7c5acec90b36093c79cf7b4056d838e6b51b3592"
        },
        {
          "alg": "SHA-512",
          "content": "b2964cffd0f6d822172e7c3766406e78c6a5ba994b0be20e3fd495cf37cb4e58dcf3bf8a6911aa413c1e205361f12965fab4630735790fba216861848c40be4f"
        },
        {
          "alg": "SHA-384",
          "content": "224e58b740742c9bf9b4f542e0de240f4afa060f82786f6b1bfbffea63d7e82601e99babdf8ca1ec86bb987708e5046b"
        },
        {
          "alg": "SHA3-384",
          "content": "e4a5aa5b8321287b6f2e986452d4bb34f8a1ae47b1001cfa3310315afa4aa84666e9b299ac40d8976c3617b261d0ead5"
        },
        {
          "alg": "SHA3-256",
          "content": "12c934f7e1bcd958c267fcab6cec5ec91f4b7c15b75cdc9ee1d67e8d1c808ec3"
        },
        {
          "alg": "SHA3-512",
          "content": "c37c3e8926b375395184fb9e3e06733dba2977c67a305677f34e87eb81cab2a2b93733d67d278194f3803130fae7667b3d57e65bcf4221a3bed46a3850f7b69e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0",
            "url": "https://www.eclipse.org/legal/epl-2.0"
          }
        },
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.eclipse.jetty.ee11/jetty-ee11-servlet@12.1.14?type=jar",
      "externalReferences": [
        {
          "url": "https://jetty.org/jetty-ee11/jetty-ee11-servlet",
          "type": "website"
        },
        {
          "url": "https://repo.maven.apache.org/maven2",
          "type": "distribution"
        },
        {
          "url": "https://github.com/jetty/jetty.project/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://www.eclipse.org/lists/jetty-dev/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/jetty/jetty.project/jetty-ee11/jetty-ee11-servlet",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.eclipse.jetty/jetty-security@12.1.14?type=jar",
      "publisher": "Webtide",
      "group": "org.eclipse.jetty",
      "name": "jetty-security",
      "version": "12.1.14",
      "description": "Jetty Server Security Artifact",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "434ede67b43d56796e51c91d6400ace7"
        },
        {
          "alg": "SHA-1",
          "content": "3c20ea87010a5b0f92fa825a79fa70753fce8979"
        },
        {
          "alg": "SHA-256",
          "content": "62d4a246b978adee64d081025546466a05ee7b57b1dd6293d93953a80ba4cbe7"
        },
        {
          "alg": "SHA-512",
          "content": "1a028eb5914b2be7026a3577c8aaad710ae9dc0ec668a7a2d1481b76098b87bdf8d136e96e1cecc8a1169c64f161b0566cda3f6b7f71c3da7f03214828387290"
        },
        {
          "alg": "SHA-384",
          "content": "97dfbf83cdafa1568d9b2bea156c1fbe77852f7fcb468e4c092c624e506e21d1de62df20b744e118865b87bc0fc253a1"
        },
        {
          "alg": "SHA3-384",
          "content": "3ab5bcbd1c836f97bc5cd2147b6b038fbe492e037618ec123765d2c4b28ab06744b5cc5a87b8f5d1c9b15bf861496960"
        },
        {
          "alg": "SHA3-256",
          "content": "50ef8d0621434af7ce979ae458e6b4502a7065ac0e2967dcee56da5cb050fd11"
        },
        {
          "alg": "SHA3-512",
          "content": "5358b4a77e07cd23032e8fb134709af73814912f8b0f8fcd343e199e7413188d0a803e5dbc77e8648300fed501d2c43fd9945d2d4313ed350190da182f6f6e96"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0",
            "url": "https://www.eclipse.org/legal/epl-2.0"
          }
        },
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.eclipse.jetty/jetty-security@12.1.14?type=jar",
      "externalReferences": [
        {
          "url": "https://jetty.org/jetty-core/jetty-security",
          "type": "website"
        },
        {
          "url": "https://repo.maven.apache.org/maven2",
          "type": "distribution"
        },
        {
          "url": "https://github.com/jetty/jetty.project/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://www.eclipse.org/lists/jetty-dev/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/jetty/jetty.project/jetty-core/jetty-security",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.eclipse.jetty/jetty-session@12.1.14?type=jar",
      "publisher": "Webtide",
      "group": "org.eclipse.jetty",
      "name": "jetty-session",
      "version": "12.1.14",
      "description": "Jetty Session Artifact",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "688107dbff405083bcd80a8f5cf9938e"
        },
        {
          "alg": "SHA-1",
          "content": "387fd27c404b2ba9ebf69688c477a8dbb6604676"
        },
        {
          "alg": "SHA-256",
          "content": "5b091e6132ba30a56ce872e07cdc0de263163e46f88d5dea99310d3a6d00899a"
        },
        {
          "alg": "SHA-512",
          "content": "90294284d221b2d8cb4b7077d4b2adbe9bcde942e42fe55872064490ff234860db926c84c6bc94c3c1e6e7b04eab91a7aff28a0af5d396f75961adb808250aab"
        },
        {
          "alg": "SHA-384",
          "content": "d74e9746bc6f09b0a46b6f66a41bfd74abcd812aab4fd49c8943f7bcf587068e4042c8ca44469b236ec9b54a41a42357"
        },
        {
          "alg": "SHA3-384",
          "content": "38fa30c8ed7225de25b0be562fdf59a1ee5d6d0948137aeda17ad3da289b05a97b01c4c208bd7cb38aafe3342b35a4d8"
        },
        {
          "alg": "SHA3-256",
          "content": "7c1317cd691abe51866ab4ff61a317365ca99c65f29e36733adc7bab04f01922"
        },
        {
          "alg": "SHA3-512",
          "content": "4b786a3914132def3d52c8b90d2f740f368b46b8ff2bca5e69264926d3e066b51549b12b31a6e64aa18f206ca26dc43307f7d5434a071537f3d295ca23915737"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0",
            "url": "https://www.eclipse.org/legal/epl-2.0"
          }
        },
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.eclipse.jetty/jetty-session@12.1.14?type=jar",
      "externalReferences": [
        {
          "url": "https://jetty.org/jetty-core/jetty-session",
          "type": "website"
        },
        {
          "url": "https://repo.maven.apache.org/maven2",
          "type": "distribution"
        },
        {
          "url": "https://github.com/jetty/jetty.project/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://www.eclipse.org/lists/jetty-dev/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/jetty/jetty.project/jetty-core/jetty-session",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.slf4j/jul-to-slf4j@2.0.20?type=jar",
      "publisher": "QOS.ch",
      "group": "org.slf4j",
      "name": "jul-to-slf4j",
      "version": "2.0.20",
      "description": "JUL to SLF4J bridge",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "f853422b1400b2631e79edcee8067833"
        },
        {
          "alg": "SHA-1",
          "content": "f227b76739ea6a0e014478659d72bdc455fd7fd2"
        },
        {
          "alg": "SHA-256",
          "content": "062249d0677a0e08039120a2292a8db064c69d04282bf562af2e54c53ff06976"
        },
        {
          "alg": "SHA-512",
          "content": "2e3ba76efcd6c900cc8a744ff653784fcb5db265fe34cef1b9740d48be54a9f137e3dab94e62c4db7f88c4ae138d6ab1d1263176e2274e269ff645489805c18d"
        },
        {
          "alg": "SHA-384",
          "content": "b10cde599a2da147fecff6a699d5183cc7dd53ac6f41f56b4c01e2bc7a5b7e24a5979de95fa99968486729774bc06fe9"
        },
        {
          "alg": "SHA3-384",
          "content": "aa0fd23f7baaa2fe59749b94e8b8adc41b45b6b1c19f6d09da7778a20b32ae99bff87384f44905c0884ef83f03e71051"
        },
        {
          "alg": "SHA3-256",
          "content": "0bafb3338d402071c6c2e83824fd0dadbd93e207b70049a317bb75e311e20fb0"
        },
        {
          "alg": "SHA3-512",
          "content": "74b1f68435111ed30b8dd6a5c6513c4ab28d09e3eb37d8d2ae9dac9294ad9fb4065e6458021fad54f86c4f2e5766e6e4439a5b940026cd58d732e7a4a8e665e2"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/license/mit/"
          }
        }
      ],
      "purl": "pkg:maven/org.slf4j/jul-to-slf4j@2.0.20?type=jar",
      "externalReferences": [
        {
          "url": "http://www.slf4j.org",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/qos-ch/slf4j/slf4j-parent/jul-to-slf4j",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.swagger.core.v3/swagger-annotations-jakarta@2.2.55?type=jar",
      "group": "io.swagger.core.v3",
      "name": "swagger-annotations-jakarta",
      "version": "2.2.55",
      "description": "swagger-annotations-jakarta",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "576a29f3692ccc16ec3161faf1af6b47"
        },
        {
          "alg": "SHA-1",
          "content": "a8af2e7fdca945d8871316e84a9b3154694e26ba"
        },
        {
          "alg": "SHA-256",
          "content": "d464521aac0e9ae2cfead9d2f56e9e8c110ef4b15ad9c046408a087a4c58952b"
        },
        {
          "alg": "SHA-512",
          "content": "bde4be280bc11a982555b907ad3eb94c92eec22352607cea936db7da77eba8b693a2a1b34a560946cb16501012e022295cdaf0225cb873b39b00eaabeaf6e62a"
        },
        {
          "alg": "SHA-384",
          "content": "82e6121fc4c5a51e04b22da5051e296ad7d380ad5362ace077bac0214d2bd13d2fe41708ccd0f6adeb3273e27a6cc8e6"
        },
        {
          "alg": "SHA3-384",
          "content": "5b6112434edb044cc0971f905fdecb168d9e6f3f166cfc7d73d062d88c8c0a3e897bf1936217590e0cae286e3dc6a0fd"
        },
        {
          "alg": "SHA3-256",
          "content": "2ca762aefe4eb8a7396f7299116249866ed539b3751c6124246deebe7bee5af9"
        },
        {
          "alg": "SHA3-512",
          "content": "47213a991d5cc9ac3f0e1ed1bf10266238035b5b275f14fcf1b03f0233764ca353fa0a40641d655d9bb48e275e4fd03d4ddf6516aec7eb5c996d4ab88387e6f9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.swagger.core.v3/swagger-annotations-jakarta@2.2.55?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/swagger-api/swagger-core/modules/swagger-annotations-jakarta",
          "type": "website"
        },
        {
          "url": "https://github.com/swagger-api/swagger-core/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://groups.google.com/forum/#!forum/swagger-swaggersocket",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/swagger-api/swagger-core/modules/swagger-annotations-jakarta",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.22.3?type=jar",
      "publisher": "FasterXML",
      "group": "com.fasterxml.jackson.datatype",
      "name": "jackson-datatype-jsr310",
      "version": "2.22.3",
      "description": "Add-on module to support JSR-310 (Java 8 Date \u0026 Time API) data types.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "1f14fa9b9779d0545287bba2bfb927df"
        },
        {
          "alg": "SHA-1",
          "content": "8d54f48cfe4865bdfa245b8a90fb15b56c8a4a3c"
        },
        {
          "alg": "SHA-256",
          "content": "ec7052ee48c9d873bb8148338a643f02cf89c01d035dd219411473030d6d2b22"
        },
        {
          "alg": "SHA-512",
          "content": "3a711d091436497aa84ea83316f948bbc73644c9a0a8ed478cf76d34b28340d3e596025bf5c8a61ca8ab1806c35f3db5e45d499340d091e224b75270a730b2d2"
        },
        {
          "alg": "SHA-384",
          "content": "38782f7a5b6f857e98362212cb953bfe4fb9f11fed935a6621145fe35c4a2f5afc034c048849d96f490b86bf9c1b69ee"
        },
        {
          "alg": "SHA3-384",
          "content": "bf40dfc2bccb29fc9eca32455203e7d9d26b18c54ba9fa1f47ce60b45036479d07fcfda880fadc61270d52f9a7d2150d"
        },
        {
          "alg": "SHA3-256",
          "content": "0d17f4e5f1b237905a3b1d63992a01908250e7a98cd6dff099d59c1e8e202dc0"
        },
        {
          "alg": "SHA3-512",
          "content": "2153206c85167b6737e4f2cd3dd1e93ed213ebc049bdc8d099b61934301c4c9bc738c5fc19b7f3a778a918d92fbdbfe19df8ccfdc088ed8ee22648417dc99ffe"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.22.3?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/FasterXML/jackson-modules-java8/jackson-datatype-jsr310",
          "type": "website"
        },
        {
          "url": "https://central.sonatype.com/api/v1/publisher",
          "type": "distribution"
        },
        {
          "url": "https://github.com/FasterXML/jackson-modules-java8/issues",
          "type": "issue-tracker"
        },
        {
          "url": "http://github.com/FasterXML/jackson-modules-java8/jackson-datatype-jsr310",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.github.package-url/packageurl-java@1.5.0?type=jar",
      "group": "com.github.package-url",
      "name": "packageurl-java",
      "version": "1.5.0",
      "description": "The official Java implementation of the PackageURL specification. PackageURL (purl) is a minimal specification for describing a package via a \u0022mostly universal\u0022 URL.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "90856d8bb5b17e08fdf03b6a2f93b81c"
        },
        {
          "alg": "SHA-1",
          "content": "e6bf530f52feab911f4032604ca0b8216f7ff337"
        },
        {
          "alg": "SHA-256",
          "content": "e45551727707acc0c56ac62d56964332ea0f138d6cc3656d988b9369150f5247"
        },
        {
          "alg": "SHA-512",
          "content": "8064df400154caa110b8845bd17e6cea2683307e575ce88e40d7c0c8965ea0af6c150a376d8b9ba7354676c41b52c94535f30c6e830447613299ccf5fc7aa959"
        },
        {
          "alg": "SHA-384",
          "content": "0597100022f72e020c9d929bf57ecef91af7574610fb03b4019feba4b25f491a076f03577be2009e66d9001c4c0f8ab0"
        },
        {
          "alg": "SHA3-384",
          "content": "bbdd55a31a4755ef589bcb176283fe03e3c9089d315eab577fef3a9c2d02e632c6ac3fdebbc90a2f0f8ed7974b9f397c"
        },
        {
          "alg": "SHA3-256",
          "content": "c9881b69bde35ea6ff4006877b9fbf91462f911b5b142aa699a45a00867d413a"
        },
        {
          "alg": "SHA3-512",
          "content": "2b9caf58deef687a9bf01abd61a7af4abdb61247a8a966683a18157ee948f1ea424602598dc8f665bf24f7e1e516866298ef0507e9d697cb20dcf60eff2095ca"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/license/mit/"
          }
        }
      ],
      "purl": "pkg:maven/com.github.package-url/packageurl-java@1.5.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/package-url/packageurl-java",
          "type": "website"
        },
        {
          "url": "https://travis-ci.com/package-url/packageurl-java",
          "type": "build-system"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/package-url/packageurl-java/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/package-url/packageurl-java.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.asahaf.javacron/javacron@1.4.0?type=jar",
      "group": "com.asahaf.javacron",
      "name": "javacron",
      "version": "1.4.0",
      "description": "A java library for parsing crontab expressions and calculating the next run time",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "5129700c6b2af8e972d52829faae173c"
        },
        {
          "alg": "SHA-1",
          "content": "2291bf1f0996c6ba0dbe6783aa8a473f09cec3d9"
        },
        {
          "alg": "SHA-256",
          "content": "c1866f1c6dc28cec113c3388101d4d0a3816cb3a9025c07d2e71f668a2845538"
        },
        {
          "alg": "SHA-512",
          "content": "b64c450770445f349f2e76f696ed5599ea87c32d5006818122e59b412792a4d71b19a7c13ecbee3b5dbf86dfb0b7350cb1e32615bd5d910e2839e165dcd9b5ca"
        },
        {
          "alg": "SHA-384",
          "content": "0f66c5ddf22ebc720cd2b765c45c639843a00a882e2d19c89e562c564878a5d40a374d491cdff275187156c2dd464724"
        },
        {
          "alg": "SHA3-384",
          "content": "a854ed19a5cf790abd511f309a1674d1050c94567fce257da250de541a63215f78aa7629d6fe53ec1291c59011f3922e"
        },
        {
          "alg": "SHA3-256",
          "content": "a9b1643fdf1d81eab85d8cdc51d02f77dd36860c04f2d0ff717ebddb9cee5b3e"
        },
        {
          "alg": "SHA3-512",
          "content": "8f860b34f901cb5b3feb74037cbe852f5723256c8f5c44c25bb34cda5148fc511a240b9c0f34cd934d3843d55960a3600dd95ba7b0ae0fde5af569ce232ae645"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/license/mit/"
          }
        }
      ],
      "purl": "pkg:maven/com.asahaf.javacron/javacron@1.4.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/asahaf/javacron",
          "type": "website"
        },
        {
          "url": "https://github.com/asahaf/javacron",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.micrometer/micrometer-java11@1.17.1?type=jar",
      "group": "io.micrometer",
      "name": "micrometer-java11",
      "version": "1.17.1",
      "description": "Micrometer core classes that require Java 11",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "62e9c59246483579b9d2ea3fac4683ad"
        },
        {
          "alg": "SHA-1",
          "content": "e55e340e33052ee15fe7d63cc9e8d14c4f43c589"
        },
        {
          "alg": "SHA-256",
          "content": "e0160adc3a3f9768d6ac9b46097df52c2058670c419780c7379c24bb8e72241d"
        },
        {
          "alg": "SHA-512",
          "content": "684dff5f566bfb6990006a71da1d4ac96aef6b1f4cf95c5f31a6bec00e768280ee844e33615d7f2135a4b79f17a9c8b8bf60c170b5d3578627db49653dab4164"
        },
        {
          "alg": "SHA-384",
          "content": "ebd72a4a36d25e5fcb99825647f7d99c76b187c4b5de71a1b5688ee00dd5f26e7a756a27be79609b173b798627b3f1dd"
        },
        {
          "alg": "SHA3-384",
          "content": "0ae8b9bc2c02b871e30191e974cf8c41d5a6dc5374ce09ae73b9e3bb64a632554399cd6ae9f8c69067fb8ddd6f110055"
        },
        {
          "alg": "SHA3-256",
          "content": "9bbb5d1362cc2e08ba1938f896e8101e2bbfda05e778fabc3a2026645b047b6e"
        },
        {
          "alg": "SHA3-512",
          "content": "07b1b61767471f634a065d8de501c71d5374b665764534d4848cff729f184e66f61a8a505842e38c3dbd59db780e081997d7e07dea2a57c436332da26cabcfa9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.micrometer/micrometer-java11@1.17.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/micrometer-metrics/micrometer-commercial",
          "type": "website"
        },
        {
          "url": "https://github.com/micrometer-metrics/micrometer-commercial.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.micrometer/micrometer-registry-prometheus@1.17.1?type=jar",
      "group": "io.micrometer",
      "name": "micrometer-registry-prometheus",
      "version": "1.17.1",
      "description": "MeterRegistry implementation for Prometheus using io.prometheus:prometheus-metrics-core. If you have compatibility issues with this module, you can go back to io.micrometer:micrometer-registry-prometheus-simpleclient that uses io.prometheus:simpleclient_common.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "2d25d73f9a8755694cbf01323649870e"
        },
        {
          "alg": "SHA-1",
          "content": "fa0a245ad6fee4763264dc76d2b3e0166a5f5e47"
        },
        {
          "alg": "SHA-256",
          "content": "ac24d43f123e103828a23a86f092a8709d87d309ad3212e798305654e951a8ce"
        },
        {
          "alg": "SHA-512",
          "content": "74f9c0e1d89011f670f96b2204cab473fb5fc79c8ef828d2a0da86c4ebf36a65b1504b94b59ead25829a7925d4ec0fdcd9b3b3fd33414e644e9dd4d878b3b103"
        },
        {
          "alg": "SHA-384",
          "content": "3823683f4208578b895ad4f88cfbcebe36077cd8e1d271b7fee82c7e9973e007c5f16b16f10269e578b4abac1e29fcd2"
        },
        {
          "alg": "SHA3-384",
          "content": "cb1a06337430b95f2dc21d907e95184d57056f62d50a5d8c147f6a449158a23bf6e4d957a6e95c12137b75b445e7878a"
        },
        {
          "alg": "SHA3-256",
          "content": "698cefcec693354d8c719ead3a8d8b9e5397be71ad0eb79752824fa58e84fcfb"
        },
        {
          "alg": "SHA3-512",
          "content": "047aa1181564f223471e69879257f17112584d3a3f99835542184b30d1cae8478b89f47f3b2b709521e9714104b4897a519be7deb5d71ed04aeb0c674a0e5584"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.micrometer/micrometer-registry-prometheus@1.17.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/micrometer-metrics/micrometer-commercial",
          "type": "website"
        },
        {
          "url": "https://github.com/micrometer-metrics/micrometer-commercial.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.prometheus/prometheus-metrics-core@1.10.0?type=jar",
      "group": "io.prometheus",
      "name": "prometheus-metrics-core",
      "version": "1.10.0",
      "description": "Core Prometheus metric types",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "3b8406f319f21286143d8453e7d1325e"
        },
        {
          "alg": "SHA-1",
          "content": "6274137d7d5f7073384e256c01ec7dfcd915d590"
        },
        {
          "alg": "SHA-256",
          "content": "a83cb5935bf71c3c0595929d82a321f0c6fbd7dcfb963d9d6d2ef37407ecc470"
        },
        {
          "alg": "SHA-512",
          "content": "f97f513336d701a31743701301d4dd2f908e87e1c7a19fd90fac4868a5b74086dff04656dc42c57b24a3b3b0170452f28090239c8893a0bd40f40490d1e23cc4"
        },
        {
          "alg": "SHA-384",
          "content": "a6bde895dea9019fc92b5263ab38bbbf9c3a62dc57f45e3fe6fa4e3cadb1abc4b0c2e9c9caa89c4e69bb7dc0f73b64a5"
        },
        {
          "alg": "SHA3-384",
          "content": "a80651c9c212eb19bd59931ffeb07c2f48200dc02ec4b0732fdb5fe55bff30662a776653a56d9a4b20f267b456b7daec"
        },
        {
          "alg": "SHA3-256",
          "content": "d822079751578b2b571c42d88ca82d50c17ea7668095e22beb4f59c374f4ec97"
        },
        {
          "alg": "SHA3-512",
          "content": "743f76f29d5e431cd5d68b3ffe8a07e17f2a37df6b94a7d81d4917ef82912770f8e333702bffe639f306a7691fb7eeba448edbe58e401e33f668825a5a5b9150"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.prometheus/prometheus-metrics-core@1.10.0?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/prometheus/client_java/client_java/prometheus-metrics-core",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.prometheus/prometheus-metrics-tracer-common@1.10.0?type=jar",
      "group": "io.prometheus",
      "name": "prometheus-metrics-tracer-common",
      "version": "1.10.0",
      "description": "Common Module for Prometheus integrations with distributed tracing libraries.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "7104d81356bf1d95e005b72151fccd11"
        },
        {
          "alg": "SHA-1",
          "content": "eb245b8fdabbe1ff1e50795e631a313ef67955aa"
        },
        {
          "alg": "SHA-256",
          "content": "e017948cdb791ec042cb65dcd02634532304ef2facdfe661c7c8afa2ce1a5c6c"
        },
        {
          "alg": "SHA-512",
          "content": "2dc91c7b708edc228457e9e299592671e8e4b51059263927f5bed7df14027996435cfc97a284cc62d1f05640be99498908dc8ca82ec7c8651e91170f80f512be"
        },
        {
          "alg": "SHA-384",
          "content": "3b6e5903dee765b09ac45dee7feb261a8f8bc020ed7db80df20beede48002de283fcf6eb75758862c6474b4df8f9673e"
        },
        {
          "alg": "SHA3-384",
          "content": "77dbd92be3a0239fe4040b52df6f03c7b095d642c168b90fb82d20dcfbc236a37573cfc151259d4ba10e0ae54ad7cf1f"
        },
        {
          "alg": "SHA3-256",
          "content": "bdc8c560c3293e4f677078d32f1cdba82d39fa119f24085ebca8d38d9435cb9f"
        },
        {
          "alg": "SHA3-512",
          "content": "c7a06b3645c7407bf28062cc782adb337f15ba71f9560942588e2a2266465988a8253614952f2fa65ffeb7ccdc32da6c6705595c73e2cd3965ba2691e9fc8fae"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.prometheus/prometheus-metrics-tracer-common@1.10.0?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/prometheus/client_java/client_java/prometheus-metrics-tracer/prometheus-metrics-tracer-common",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.prometheus/prometheus-metrics-exposition-formats@1.10.0?type=jar",
      "group": "io.prometheus",
      "name": "prometheus-metrics-exposition-formats",
      "version": "1.10.0",
      "description": "Prometheus exposition formats.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "5953b429ffd90ff0c31ed6999103effc"
        },
        {
          "alg": "SHA-1",
          "content": "7a0fce3450004643755af1e34147fa6bc90956f2"
        },
        {
          "alg": "SHA-256",
          "content": "ed1bd1a06eeb48edce026118740f8bfc9929c390b51b8317c07e22d0ff326504"
        },
        {
          "alg": "SHA-512",
          "content": "e01862b22336b1771d785a757223fb54d18a3f3c604e8ad0ed6a5d94b42da187ffd1337233d927624954b23e53109a414c311c87640d31e4f4d774dbba3a8d48"
        },
        {
          "alg": "SHA-384",
          "content": "456951b5d24f624b8099645dbc5eef4f4a9dd7dac25e300ac2a07d694b7b3314e3b648826b29efa7b49e0358320a573f"
        },
        {
          "alg": "SHA3-384",
          "content": "0fc106b571b46e8fe89376bc43772dcaa98b053980a2d7de5f52db66f802b14e19458f75a8d4587585fa2d5c51744d4f"
        },
        {
          "alg": "SHA3-256",
          "content": "6bd5d3a7febe328f5c13fc614d72be01ce9f68b4651fc94d9e674cfabd4b2ae7"
        },
        {
          "alg": "SHA3-512",
          "content": "3cdd920930d505bf6c2773ed590e14864421d2cd38f03b21af8868ebd1aa7a85a027977ebd55a7da467106efe71074576e058363b74e6da09677153217ec5187"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.prometheus/prometheus-metrics-exposition-formats@1.10.0?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/prometheus/client_java/client_java/prometheus-metrics-exposition-formats",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.prometheus/prometheus-metrics-exposition-textformats@1.10.0?type=jar",
      "group": "io.prometheus",
      "name": "prometheus-metrics-exposition-textformats",
      "version": "1.10.0",
      "description": "Prometheus exposition text formats.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "7d0b9b153ea10229c9ffa85496b35781"
        },
        {
          "alg": "SHA-1",
          "content": "f9086029914365aff352abbcb25cf323d5c1fd08"
        },
        {
          "alg": "SHA-256",
          "content": "3feb08530c19c961d358d0379bb40beb4b1a7bc42d32164188524306ce5ffb70"
        },
        {
          "alg": "SHA-512",
          "content": "c05dd9db9aeeda458ac75d6f543c8533cb45a3d94f11eeefe8774a063fc60e7f4e75b505d7fe8426274fcc0e6ef5749b4443cccfec3b7840b692548784b5f415"
        },
        {
          "alg": "SHA-384",
          "content": "bcc5d719754e490e29040972382f9f5e6956da92fde20bdcaa1067762541cb8b4bfcf5c48b85076c1e71127f8119cf89"
        },
        {
          "alg": "SHA3-384",
          "content": "aa0fff40dd6055fed5c6017cd3f03fae5d406e87c4ad78fd66c1501c644bddcf74fea395c5d125340d9f5ccb4dacee9b"
        },
        {
          "alg": "SHA3-256",
          "content": "e3f370bcca662811923597ced1a0fbc5f35929c0244a3e0dbad099a2b0295c24"
        },
        {
          "alg": "SHA3-512",
          "content": "4901617ab9d0d435e1946793fb895f8dee06673675b99ffbc2a5d2065f87ac5fc1917ee8a1e364b14dc9398361583402ea3637a28d8d0191555be1a492322d86"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.prometheus/prometheus-metrics-exposition-textformats@1.10.0?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/prometheus/client_java/client_java/prometheus-metrics-exposition-textformats",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.prometheus/prometheus-metrics-model@1.10.0?type=jar",
      "group": "io.prometheus",
      "name": "prometheus-metrics-model",
      "version": "1.10.0",
      "description": "Data model for read-only immutable Prometheus metrics snapshots.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "2c780e720f2bd51891bb0d0f85481d1d"
        },
        {
          "alg": "SHA-1",
          "content": "192e9f5a29272f0a20624fd8717ffa14c2bf6f44"
        },
        {
          "alg": "SHA-256",
          "content": "7f3aefbe01052f993e4b7fdee2e4c11770c347a48385d7cfd13c36b7c475d34f"
        },
        {
          "alg": "SHA-512",
          "content": "5954c4f64658f6fb85c25482b74147c7da6f54fced4712dd2a3d91315f4d4a375f3ca96ea2b1f422a3b45b07b0608ec9f977d6664c6129744019fc7fcb04e399"
        },
        {
          "alg": "SHA-384",
          "content": "985e2929dfd2a5faf55cd7eb6b6b5617fb3cf1795937d1cc71085fb6fc76c9d5c6431700b715280aa58810930a0ba7f0"
        },
        {
          "alg": "SHA3-384",
          "content": "10b20655bf39ac36f1728659d08482b9031f3563a5e78bc7bc41d5fcc4b0c3aa75d5c7b113017fbdbbd70242b75fc1c3"
        },
        {
          "alg": "SHA3-256",
          "content": "6461f9a50a4253a1560f58b6c0daa17097c6bc93a449e8709b1ee6a0924c635e"
        },
        {
          "alg": "SHA3-512",
          "content": "41081ca6102e5bcf1af579105bd35ebfac1f7a1eb5001b694d720c116dd1b14fdf046f75bff624ffce5c9ca52574530e3133283de2e1b2bab876773c77566590"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.prometheus/prometheus-metrics-model@1.10.0?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/prometheus/client_java/client_java/prometheus-metrics-model",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.prometheus/prometheus-metrics-config@1.10.0?type=jar",
      "group": "io.prometheus",
      "name": "prometheus-metrics-config",
      "version": "1.10.0",
      "description": "Configuration for Prometheus metrics and exposition formats.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "5d45bc5d89fce11c0bf7a72bbdcb2549"
        },
        {
          "alg": "SHA-1",
          "content": "2e59b67a2935ea4288771437bd182b25aefa9bf0"
        },
        {
          "alg": "SHA-256",
          "content": "c934d7b26cbd21a03f0a60c94b813272de261673c5a0b6ca053d6bf54f35ee96"
        },
        {
          "alg": "SHA-512",
          "content": "79067d053a62dd7bdd1e93836463d0f2c2a294f21ba74e206896a106a28dccb3cc666120018c219724bd9ffc6a00db00dd2c1b1d5badcbc44f59cf7ef5abfb13"
        },
        {
          "alg": "SHA-384",
          "content": "81f9cbcc0d83d5db526ba85cd43579b93e612c38577454f2139ca3dae1685bd77bcbc624de5e79c3d1d63c810b0202f6"
        },
        {
          "alg": "SHA3-384",
          "content": "16f2e80121879dfc738d6133c219bdc3db6276c49bdec0dad0ceb22aacc99a1cae142d2a1ac239afb874de2950097309"
        },
        {
          "alg": "SHA3-256",
          "content": "4e2812403e6bb44320eb75a8e88cefa8228d8dba34a55f96b1a11a9e009719ec"
        },
        {
          "alg": "SHA3-512",
          "content": "21aa44266371fcbbd66203fd75b71eb4652b385fbc92d06477a910f8bd32a0659a859fe9a9159e911921537986c9063a7d841423a307a273db207714fa6fb3e9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.prometheus/prometheus-metrics-config@1.10.0?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/prometheus/client_java/client_java/prometheus-metrics-config",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.github.mweirauch/micrometer-jvm-extras@0.3.0?type=jar",
      "group": "io.github.mweirauch",
      "name": "micrometer-jvm-extras",
      "version": "0.3.0",
      "description": "A set of additional JVM process metrics for micrometer.io.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "c63df9d0f3a3f2297052741dfd275e94"
        },
        {
          "alg": "SHA-1",
          "content": "86fce8e8a3bffaa50f87e5d67427419b7b5c72d3"
        },
        {
          "alg": "SHA-256",
          "content": "9e9699ddddf1d1be033eb99ac2b7b4a2f2213b7ce2ad946b13e943990e8bf223"
        },
        {
          "alg": "SHA-512",
          "content": "d71d7ea0868c7d55ab0c0f668d5461ff4b27e36ebe60c12036a652690ca12d701f941fa44f075c8ad3bf0e10a7706c90fa42db378b99df6a2594f050fbe8f054"
        },
        {
          "alg": "SHA-384",
          "content": "36353c016cb1be7637eb202b60bfa2a2eb2044506e8f5855eedae96c1e1f610dcdf1ca0539b81e99d39844b6c4b2b2d5"
        },
        {
          "alg": "SHA3-384",
          "content": "2067d2f63917f8cfde473c081ccf8b5d0ff7428ad0904d2649b65822e6d3de1e96c29b4956f445c34319de522af8a87a"
        },
        {
          "alg": "SHA3-256",
          "content": "c7131c9c0dcc8fc90e60e5ea5b9ca94844c391fb9afc83ac9cce2f0296caf3b9"
        },
        {
          "alg": "SHA3-512",
          "content": "bc5e6b0ee1c4ab411114585b8bd26fc19a9c14861811bdea97b83c02bc4ae17498cbbd9d7198e9b3c23040d566a41f1500a0980d63847fe85b5cf0bdd357f1b5"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.github.mweirauch/micrometer-jvm-extras@0.3.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/mweirauch/micrometer-jvm-extras",
          "type": "website"
        },
        {
          "url": "https://github.com/mweirauch/micrometer-jvm-extras",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.pebbletemplates/pebble@4.1.2?type=jar",
      "group": "io.pebbletemplates",
      "name": "pebble",
      "version": "4.1.2",
      "description": "Templating engine for Java.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "6d20632243292dadc46ab7d02084c8b9"
        },
        {
          "alg": "SHA-1",
          "content": "a29bdfb56da29d41fac5a34f953082f5bee883ff"
        },
        {
          "alg": "SHA-256",
          "content": "bd4021cebeb3d34ca80dc1e406b6ec23baa3ead4b9b82d5282fdacc64f655cd7"
        },
        {
          "alg": "SHA-512",
          "content": "784924f3e2c257bc8aada40114213440bffb1c14d68fd7cdf8849a6f7783358348ad52245555b635e7043a854d9f433866caaf78f002190f2545617b202959d0"
        },
        {
          "alg": "SHA-384",
          "content": "93fb5aaffa80adee0aa2e7d0bcd2e28180559a0ef4d8517307951340f3d7476111253e17b98590ca80960cbb6eec556c"
        },
        {
          "alg": "SHA3-384",
          "content": "d12e78bf915681f5c2d99867b02ba8b3d3b90704c7df221b86a7984154724e089d6866ddaa8b2864181bbff75315d688"
        },
        {
          "alg": "SHA3-256",
          "content": "37b7c73535d329214f3fe4ff224555b10e6d72f7226dc5a02465229266babf74"
        },
        {
          "alg": "SHA3-512",
          "content": "17a9c905267453131adcf03f774790afcffdb064231184967b79fd392339c2f12a10cdd60bad5dc25697fbf1a6271ef78ccb27afdf145138aa344cec22f79bce"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/io.pebbletemplates/pebble@4.1.2?type=jar",
      "externalReferences": [
        {
          "url": "http://pebbletemplates.io",
          "type": "website"
        },
        {
          "url": "https://github.com/PebbleTemplates/pebble.git/pebble",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.unbescape/unbescape@1.1.6.RELEASE?type=jar",
      "publisher": "The UNBESCAPE team",
      "group": "org.unbescape",
      "name": "unbescape",
      "version": "1.1.6.RELEASE",
      "description": "Advanced yet easy-to-use escape/unescape library for Java",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "d95ed94e1624e307a1958ee105ccbf39"
        },
        {
          "alg": "SHA-1",
          "content": "7b90360afb2b860e09e8347112800d12c12b2a13"
        },
        {
          "alg": "SHA-256",
          "content": "597cf87d5b1a4f385b9d1cec974b7b483abb3ee85fc5b3f8b62af8e4bec95c2c"
        },
        {
          "alg": "SHA-512",
          "content": "6918e9579b06721942fdcd91e401f5b996fb4eac13056dbafdf594661f355a34874eb5266784bc2c4f82df9fdd9e219d71a96f52945a354f01665f85f8166bb3"
        },
        {
          "alg": "SHA-384",
          "content": "1b808b67c784b69afea64364ba4c0d433c7f042c512f5c18f07d5388fe7ac4741913f696424bd8fbde147383cfb3d8f9"
        },
        {
          "alg": "SHA3-384",
          "content": "6525bd20a12ff43a0089c0d59369574ae6c01e2b4b1aacf466847d4433ae403db08404a9b59be397c3034f972bcd6b06"
        },
        {
          "alg": "SHA3-256",
          "content": "a190c9bedccff959d08db12fe7080437fb4e98f05516b39d6540be718e151cc6"
        },
        {
          "alg": "SHA3-512",
          "content": "5d7b5edc0c2a0d47c9625936c14b4122330b96cdf54260fe2a6468289c2f4cbc4ee19770c1144acfa702f2f058a81544b4aea9258fe0e15166a1a331736d7b77"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.unbescape/unbescape@1.1.6.RELEASE?type=jar",
      "externalReferences": [
        {
          "url": "http://www.unbescape.org",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2",
          "type": "distribution"
        },
        {
          "url": "scm:git:git@github.com:unbescape/unbescape.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.protobuf/protobuf-java-util@4.36.2?type=jar",
      "group": "com.google.protobuf",
      "name": "protobuf-java-util",
      "version": "4.36.2",
      "description": "Utilities for Protocol Buffers",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "19bd9c1e391a97014eebba6451bd2bae"
        },
        {
          "alg": "SHA-1",
          "content": "6c476510c485fcca280cd4ae8104003404adbd26"
        },
        {
          "alg": "SHA-256",
          "content": "b67a109066cf06f60bb447a6cbcc6709b94d1a5a41ced84330d68e8023e8e0c5"
        },
        {
          "alg": "SHA-512",
          "content": "2a388506aaefc39533dcb879bdca424ea6f4d8cf1706a24d39bb7a1fc13b9b73ba36980c6d7b434dc555358cabb180df74ddcfe2893f7891be881fa42e94256d"
        },
        {
          "alg": "SHA-384",
          "content": "5ec0a3f34e29ace57a25f804bda6911a81a31d12c03d93677d36426f3cd9b7bd0f62f2dcb8c8c9b0f1e54682413fc590"
        },
        {
          "alg": "SHA3-384",
          "content": "ed5d20f701f46fd2c460d3b3b032a72220d003cc4393f8d86237fed7d8441a072f8c42bb876db4c75db7f1607a28bdaa"
        },
        {
          "alg": "SHA3-256",
          "content": "676b0e0552110a6a317c9711292f2d30b7ebf4f29390bd62f020b766d4465562"
        },
        {
          "alg": "SHA3-512",
          "content": "630481a3ba6911ca4c8777f249573b3124169b30003e0178ec93d55d2b89da7ad3c2445f66f6c95d15ff32b7220e706ceedd0bf6830f5caa38543de77ff777a1"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/com.google.protobuf/protobuf-java-util@4.36.2?type=jar",
      "externalReferences": [
        {
          "url": "https://developers.google.com/protocol-buffers/protobuf-java-util/",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/protocolbuffers/protobuf/protobuf-java-util",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
      "group": "com.google.code.findbugs",
      "name": "jsr305",
      "version": "3.0.2",
      "description": "JSR305 Annotations for Findbugs",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "dd83accb899363c32b07d7a1b2e4ce40"
        },
        {
          "alg": "SHA-1",
          "content": "25ea2e8b0c338a877313bd4672d3fe056ea78f0d"
        },
        {
          "alg": "SHA-256",
          "content": "766ad2a0783f2687962c8ad74ceecc38a28b9f72a2d085ee438b7813e928d0c7"
        },
        {
          "alg": "SHA-512",
          "content": "bb09db62919a50fa5b55906013be6ca4fc7acb2e87455fac5eaf9ede2e41ce8bbafc0e5a385a561264ea4cd71bbbd3ef5a45e02d63277a201d06a0ae1636f804"
        },
        {
          "alg": "SHA-384",
          "content": "ca0b169d3eb2d0922dc031133a021f861a043bb3e405a88728215fd6ff00fa52fdc7347842dcc2031472e3726164bdc4"
        },
        {
          "alg": "SHA3-384",
          "content": "9903fd7505218999f8262efedb3d935d64bcef84aae781064ab5e1b24755466b269517cada562fa140cd1d417ede57a1"
        },
        {
          "alg": "SHA3-256",
          "content": "223fda9a89a461afaae73b177a2dc20ed4a90f2f8757f5c65f3241b0510f00ff"
        },
        {
          "alg": "SHA3-512",
          "content": "3996b5af57a5d5c6a0cd62b11773360fb051dd86a2ba968476806a2a5d32049b82d69a24a3c694e8fe4d735be6a28e41000cc500cc2a9fb577e058045855d2d6"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
      "externalReferences": [
        {
          "url": "http://findbugs.sourceforge.net/",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://code.google.com/p/jsr-305/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.code.gson/gson@2.14.0?type=jar",
      "group": "com.google.code.gson",
      "name": "gson",
      "version": "2.14.0",
      "description": "Gson JSON library",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "43b20830936ec97d8df6b174e3509d9e"
        },
        {
          "alg": "SHA-1",
          "content": "efc0e34ede4e3204eaefb84a00e55e8c86634382"
        },
        {
          "alg": "SHA-256",
          "content": "2cbd119bf1961c28788310963dc80ba65f58cdeec1dd139c8bdb1240faa2c36f"
        },
        {
          "alg": "SHA-512",
          "content": "d040d19a47ca2df33365493f9813a1d0a40b91685f7d87ca445b98d37b4c1b801314aef87940dc8b43dd1b0b96f6d5e6e4296778bf1af8dbfb1091425b37da21"
        },
        {
          "alg": "SHA-384",
          "content": "fb3f4db322b691e37e48df3eda60b8a216d1136619f9e354aa5e3ee7aa0b4afab985ae9510c16a6fe05ea674417b4cd6"
        },
        {
          "alg": "SHA3-384",
          "content": "7943b642d76b35f1e322ec7753c4de85cecc233d4cbd79582e93cf3551896c436f3bcc1166f51789470dec715f515312"
        },
        {
          "alg": "SHA3-256",
          "content": "46eafa830748a2fde4dc595d2aaf94417bc2956570f8406dc000b323738f8764"
        },
        {
          "alg": "SHA3-512",
          "content": "ba3abdb15073b5159782f05dbc440b76139d1d129d80a5cf98b035c399a405dec39b9c7fa7e6d8e5a2676f10fda63ed8b817538a8504ef381992a91fa1832b68"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.code.gson/gson@2.14.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/google/gson",
          "type": "website"
        },
        {
          "url": "https://github.com/google/gson/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/google/gson/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml.woodstox/woodstox-core@7.3.0?type=jar",
      "publisher": "FasterXML",
      "group": "com.fasterxml.woodstox",
      "name": "woodstox-core",
      "version": "7.3.0",
      "description": "Woodstox is a high-performance XML processor that implements Stax (JSR-173), SAX2 and Stax2 APIs",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "31ebeda4cf08aa9010cc454c2b828b30"
        },
        {
          "alg": "SHA-1",
          "content": "350970ea0a235e613f6c109d4dbc4415acb100f5"
        },
        {
          "alg": "SHA-256",
          "content": "246cb4845991ab52196ef90ee8a361164512b5cc7ec0547c9fab8f3db75f2679"
        },
        {
          "alg": "SHA-512",
          "content": "8dbd0545d328a7b6072b841915b3bc810f893bfb3ccabf9e54d0d0d4112b936c08ae7a6840d386615a3180082e7fe452d64f13820fca9e2a8924806277753c36"
        },
        {
          "alg": "SHA-384",
          "content": "7903c579be2fba514c3c0772aaf351aac08e56d367f5c767ad5eeaef41c336d68fc2b3500a6aac003c6ea563504c0cbe"
        },
        {
          "alg": "SHA3-384",
          "content": "68ddad3d905ae52e3ea8ce1b95a597ab93d9c0dc35ae4c7c333639ae5ffb91576858a8458f8178412d52334fcb6f1a4d"
        },
        {
          "alg": "SHA3-256",
          "content": "0b98675fb17639165119017150c2f9cf87a6cff108fd98bd6241aed1ddbf2cde"
        },
        {
          "alg": "SHA3-512",
          "content": "d15447a7d10c17d9eb75badd62d42143aa008f49c84b5a7ad68f147abbfe3ba7a9333d4e0705c4b1c99fdf4504febb7d4a2c833c52a8f5e4f6f17917f9d955e2"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.fasterxml.woodstox/woodstox-core@7.3.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/FasterXML/woodstox",
          "type": "website"
        },
        {
          "url": "https://central.sonatype.com/api/v1/publisher",
          "type": "distribution"
        },
        {
          "url": "https://github.com/FasterXML/woodstox/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/FasterXML/woodstox",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.codehaus.woodstox/stax2-api@4.3.1?type=jar",
      "publisher": "fasterxml.com",
      "group": "org.codehaus.woodstox",
      "name": "stax2-api",
      "version": "4.3.1",
      "description": "Stax2 API is an extension to basic Stax 1.0 API that adds significant new functionality, such as full-featured bi-direction validation interface and high-performance Typed Access API.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "2a48eb99a954950283e5cfad0103445b"
        },
        {
          "alg": "SHA-1",
          "content": "c2a6c7802434e7693d0cef0e7ab8cd4aa76e19be"
        },
        {
          "alg": "SHA-256",
          "content": "1953d9d443149769c8418fd4fb69284ba2f98adbbed304e9a050c360e28541c6"
        },
        {
          "alg": "SHA-512",
          "content": "4147cc35d69f29b800050d3e9ba4e23e167ee7437554769cbd317e920b934181369567b99da4692c3ba7c65bf033ee0fdd1e89c4e49929c0211d5e0a0650517d"
        },
        {
          "alg": "SHA-384",
          "content": "415bc5d8faaa39c44ab24a8947f60da1e11bf978ca16811850e5118b93289cc4cdd531f9da69a5658b279be3fc79d186"
        },
        {
          "alg": "SHA3-384",
          "content": "754670ec56c0a0e7dc6a774808027dd3f2f37d282642b8a1905e7e15e9a01dc988210cd99380c767f6dfe54fc5d1c81f"
        },
        {
          "alg": "SHA3-256",
          "content": "904c311acbed72a12d6a4e33bcae50b623424b97f6f28141af234d03214fddb0"
        },
        {
          "alg": "SHA3-512",
          "content": "01b32a332f50b0d53730d0db68e1f3b1aa2a49df50f2ee325445c6bfc732ed3d8314f46af158d7cf950a487ecc0ad2e7f3c6c046eff6e3dfaf3f9f9b537a1484"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause"
          }
        }
      ],
      "purl": "pkg:maven/org.codehaus.woodstox/stax2-api@4.3.1?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/FasterXML/stax2-api",
          "type": "website"
        },
        {
          "url": "https://central.sonatype.com/api/v1/publisher",
          "type": "distribution"
        },
        {
          "url": "https://github.com/FasterXML/stax2-api/issues",
          "type": "issue-tracker"
        },
        {
          "url": "http://github.com/FasterXML/stax2-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.github.nscuro/versatile-core@0.26.1?type=jar",
      "group": "io.github.nscuro",
      "name": "versatile-core",
      "version": "0.26.1",
      "description": "Java implementation of vers, a mostly universal version range specifier",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "e57f4897385675b835eb09284623bd7e"
        },
        {
          "alg": "SHA-1",
          "content": "ae530abb3cffa934cd046a32e62a0fae0efa440b"
        },
        {
          "alg": "SHA-256",
          "content": "fca00d5fc600157a68d55b8611e5f0253b959fa21fbc427a1f58256437d1f0c8"
        },
        {
          "alg": "SHA-512",
          "content": "ae1a263da22b1cff5d76d3403268816db24d2f99c8dea413b9ab4e027fcfb9dcd3de20d6474f999b087e447b31d36fa1cf6b26e5e1affaa95fd03e47035146c7"
        },
        {
          "alg": "SHA-384",
          "content": "3f95321d2a967992cce817e14514ba3c4da50b0742bffeb59b1b837c318025ba6194a3dddcbe4136f26aff3dc0e9652e"
        },
        {
          "alg": "SHA3-384",
          "content": "ea58166fa88dd29d1e78d6ff978ae3bbe43b26c05218991ddccf25c1036416b47ac523b3ac4b43433ebc66e9f215f64c"
        },
        {
          "alg": "SHA3-256",
          "content": "7ee35a1821cea6a9b8c6eb4ec13f827c502f90e32422b7d756e0faa3cbb31839"
        },
        {
          "alg": "SHA3-512",
          "content": "9bb550af9901e2fe790138d2a60b4ea8f91f8700e9fb2de1ab4ada1e01ee1a090ec7068ade20f4ef92432b90991c65aaa3713ff14afbf676a52b050d7d5612d5"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.github.nscuro/versatile-core@0.26.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/nscuro/versatile/versatile-core",
          "type": "website"
        },
        {
          "url": "https://github.com/nscuro/versatile/issues",
          "type": "issue-tracker"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.maven/maven-artifact@3.10.0?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.maven",
      "name": "maven-artifact",
      "version": "3.10.0",
      "description": "Maven is a software build management and comprehension tool. Based on the concept of a project object model: builds, dependency management, documentation creation, site publication, and distribution publication are all controlled from the declarative file. Maven can be extended by plugins to utilise a number of other development tools for reporting or the build process.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "820950ff56838b2bfc1f02d7c4981d0d"
        },
        {
          "alg": "SHA-1",
          "content": "27e1f01911be3be075ea108d4fe8fd59ae717c5c"
        },
        {
          "alg": "SHA-256",
          "content": "5f97d58b507cd49887ce5f50e41832573ea204e9cf6705c9187a51b8ade9b543"
        },
        {
          "alg": "SHA-512",
          "content": "cbedc7ebb108de3e8e22a622e9c544842302af788b99690e2d18efd07d341eef5b726451357009ab9db4d6764a00c3e7d62d56bdfdb6200b6ed5b606a71bff42"
        },
        {
          "alg": "SHA-384",
          "content": "fe6d625ce88c41c3bb3225dea48765f83d7dfffcc9f42e3e415814750bb7a75445beea2438c481923f1136db8946d156"
        },
        {
          "alg": "SHA3-384",
          "content": "d41bf90a2add06cd40cbe048a21aef6d152f463b7ddc57782056879160bb8361df4c1ec4da04a30992a18285e1b789d4"
        },
        {
          "alg": "SHA3-256",
          "content": "df7440320e8d6d21139febaca18991f5bfc856b8c781926932eff4cceeef6e1f"
        },
        {
          "alg": "SHA3-512",
          "content": "71db479c7e7bfd8381945222d515e113702b19445bd6213c63a5bc54feee09d2da497cd9080b578fb136cb305c4d1121646bb3b4fc288fe73969901d8879c715"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.maven/maven-artifact@3.10.0?type=jar",
      "externalReferences": [
        {
          "url": "https://maven.apache.org/ref/3.10.0/maven-artifact/",
          "type": "website"
        },
        {
          "url": "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/",
          "type": "build-system"
        },
        {
          "url": "https://maven.apache.org/download.html",
          "type": "distribution"
        },
        {
          "url": "https://github.com/apache/maven/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://lists.apache.org/list.html?users@maven.apache.org",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/apache/maven/tree/maven-3.10.0/maven-artifact",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.codehaus.plexus/plexus-utils@3.6.2?type=jar",
      "publisher": "Codehaus Plexus",
      "group": "org.codehaus.plexus",
      "name": "plexus-utils",
      "version": "3.6.2",
      "description": "A collection of various utility classes to ease working with strings, files, command lines, XML and more.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "190ea44a7bac111f5e2c6bf97f71ff85"
        },
        {
          "alg": "SHA-1",
          "content": "c8e32e2f08fb3a0e6caf34f1448cc69f077f4282"
        },
        {
          "alg": "SHA-256",
          "content": "7c2cdf8b4a02a2ee3f0514b8d74ad5eb6e2365eeb073a5cabd6f2d61d8f871df"
        },
        {
          "alg": "SHA-512",
          "content": "bd45c0d82e8a5f246081b1465e2b1b1a87de3f6013d189437f743203b1fb4c3850eb416fab46979476765f716b312b4c871c1ac89ad76bba8a4cbff78431ebe3"
        },
        {
          "alg": "SHA-384",
          "content": "46d944a10edcb90ecbf517d7ca24db6907c893baecf61013fd7d9a472a02f629a9d30104c5d6898b5c0c86266f9ab19b"
        },
        {
          "alg": "SHA3-384",
          "content": "f81787484cacbfb35917ae9baba6baf5765046ad260fa1867a72695cff12ecb4b91e8200c2f430dc72cb5acc291265a0"
        },
        {
          "alg": "SHA3-256",
          "content": "d91abbf9e6ba7c31635095c6857a7ec5101dcbce6cb22203a5763576e73e469a"
        },
        {
          "alg": "SHA3-512",
          "content": "9b400d118536a94fdc90b166b8960f39417e5079df1d0cc3c71bbd6be45a5c7f853f87d0d77c5bc6fa6f292a9a38230df26d9fd68e16dd2d902a71b0328718eb"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.codehaus.plexus/plexus-utils@3.6.2?type=jar",
      "externalReferences": [
        {
          "url": "https://codehaus-plexus.github.io/plexus-utils/",
          "type": "website"
        },
        {
          "url": "https://github.com/codehaus-plexus/plexus-pom/actions",
          "type": "build-system"
        },
        {
          "url": "https://repo.maven.apache.org/maven2",
          "type": "distribution"
        },
        {
          "url": "https://github.com/codehaus-plexus/plexus-utils/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://groups.google.com/forum/#!forum/mojohaus-dev",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/codehaus-plexus/plexus-utils/tree/plexus-utils-3.6.2/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.postgresql/postgresql@42.7.14?type=jar",
      "publisher": "PostgreSQL Global Development Group",
      "group": "org.postgresql",
      "name": "postgresql",
      "version": "42.7.14",
      "description": "PostgreSQL JDBC Driver Postgresql",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "16f26b00415e27db94b3da7ff77c045d"
        },
        {
          "alg": "SHA-1",
          "content": "0e7c94ce80cb1dd9875ff44ffe6a40a8aaa3eefd"
        },
        {
          "alg": "SHA-256",
          "content": "73914527305a40cce504b0d3d90b23caf565136912d607ae8ae7c5895512332c"
        },
        {
          "alg": "SHA-512",
          "content": "2a7c94c3f86f7ad6cfa16a964fe79dec8b122449679c8bbdb18f7052593349c2d11dd07992034de88d6effd840e2edf5ea8542e947de19905c75677d0dd44abc"
        },
        {
          "alg": "SHA-384",
          "content": "cf06ef6c1c3ef7e7b2d44e8bbbc8285443f72af505ca4a5622a149e012eaefdad781feacd15ab06a97cfe7e0314d353f"
        },
        {
          "alg": "SHA3-384",
          "content": "1fe621a928c0825b2d5934329e868a9b067f505395494c11c626882ae904a0b168bba8a159e8f6256173362798e3facf"
        },
        {
          "alg": "SHA3-256",
          "content": "03e9c42ea0edd507ed196aacf07f37a12234d6cad370c32aca8dc575d85f9e72"
        },
        {
          "alg": "SHA3-512",
          "content": "3f816b473762f284863fdd4a9d255ade2e3e9e938c40d737d0819026c064d2b2ebe5a80c0cd24485f0e507b2dba12aa2ade1ccffdc339f6415a3b2986b4d9424"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause",
            "url": "https://opensource.org/licenses/BSD-2-Clause"
          }
        }
      ],
      "purl": "pkg:maven/org.postgresql/postgresql@42.7.14?type=jar",
      "externalReferences": [
        {
          "url": "https://jdbc.postgresql.org",
          "type": "website"
        },
        {
          "url": "https://github.com/pgjdbc/pgjdbc/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://www.postgresql.org/list/pgsql-jdbc/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/pgjdbc/pgjdbc",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.checkerframework/checker-qual@3.55.1?type=jar",
      "group": "org.checkerframework",
      "name": "checker-qual",
      "version": "3.55.1",
      "description": "checker-qual contains annotations (type qualifiers) that a programmerwrites to specify Java code for type-checking by the Checker Framework.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "05361199dc29af8334d1405f28b83109"
        },
        {
          "alg": "SHA-1",
          "content": "3d40699936a66b2d4c1f759f2f1a0446c8cf64fc"
        },
        {
          "alg": "SHA-256",
          "content": "857658c8bdcbff794949a8d9922f88d63ee3751c203c7cd7d21ea97f9e745288"
        },
        {
          "alg": "SHA-512",
          "content": "564b78a1a0e76c756b74c60f9441a43cc5232b5d887bf7a701fdf8ff9e646f2900a10a56254534fa69499dff864338037edfb6d05f59ba52351e1013a522f316"
        },
        {
          "alg": "SHA-384",
          "content": "cd20464a20b4f93e85f5e1917f747696b28803d171fa8d34762b3eac6b4541a0472772c21585fa5f43c1ae188a6dab48"
        },
        {
          "alg": "SHA3-384",
          "content": "1c7d8fe4a8922ef5a739ff7cf52c1a93f3aec79c7024a0e6f827ec865e6c63ee2818ce1d9412d9768bb2f45eb441bc0b"
        },
        {
          "alg": "SHA3-256",
          "content": "9eae4832715938932bbaf8846e4f8d24daf664bc2f368f65a6847644faab7329"
        },
        {
          "alg": "SHA3-512",
          "content": "5be2781a61e995e9cf1b284a9439f32391fc280b41d5b5c34c75539e055be9fd519564caef2f4a96672ad4946fd83ee391126c45d74f30c1ef606e5338dd842e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:maven/org.checkerframework/checker-qual@3.55.1?type=jar",
      "externalReferences": [
        {
          "url": "https://checkerframework.org/",
          "type": "website"
        },
        {
          "url": "https://github.com/typetools/checker-framework.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.github.resilience4j/resilience4j-core@2.4.0?type=jar",
      "group": "io.github.resilience4j",
      "name": "resilience4j-core",
      "version": "2.4.0",
      "description": "Resilience4j is a lightweight, easy-to-use fault tolerance library designed for Java8 and functional programming",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "876d87ec308d8636105e17577dc32ec0"
        },
        {
          "alg": "SHA-1",
          "content": "917315545f2ae0221ef3d6c27337b9ba6cba2702"
        },
        {
          "alg": "SHA-256",
          "content": "a15d25c4709a4c12432cd0a4f620e37a00a82dbe112f5d1a7a68b31325ffc978"
        },
        {
          "alg": "SHA-512",
          "content": "0b297e68f9e4542a724d507697c5476568dc8459156e70dc2e4b3fa812be7a6d070c603a58ba9eb1e2331df78479da71a44ada6a4d303f6f0ab224cb24bb2f07"
        },
        {
          "alg": "SHA-384",
          "content": "73498053467091de64ba6cdb62948e268afba62386a03fabcee6aafcfde6ed152bcec726c1f7d78d5b9ee7a1c34008fe"
        },
        {
          "alg": "SHA3-384",
          "content": "d1adb2a7e58982ff23beafd2aebfd2b3769d37caa965a1542d8d1c6d3cc1499117d874fa2e95c8e4b1c98033ecc37656"
        },
        {
          "alg": "SHA3-256",
          "content": "db568c467b698f1e695e75982105fbce261f91ba528539cc3ff10c67e81562b5"
        },
        {
          "alg": "SHA3-512",
          "content": "635fd7c97582d1deaf7b3fc74ff38d796656fd110e881d3cf793aafd30d73e649a25e58f7575bf8ce54e85291061871c21bbf31c19db937902b31a5de27f0054"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.github.resilience4j/resilience4j-core@2.4.0?type=jar",
      "externalReferences": [
        {
          "url": "https://resilience4j.readme.io",
          "type": "website"
        },
        {
          "url": "https://github.com/resilience4j/resilience4j.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.22.3?type=jar",
      "publisher": "FasterXML",
      "group": "com.fasterxml.jackson.dataformat",
      "name": "jackson-dataformat-yaml",
      "version": "2.22.3",
      "description": "Support for reading and writing YAML-encoded data via Jackson abstractions.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "ba1c8448785cea71b8cc68275d0e542b"
        },
        {
          "alg": "SHA-1",
          "content": "520097fe76cde11c7448c622e8cb6e07714c8c7c"
        },
        {
          "alg": "SHA-256",
          "content": "2bcbc3b9abaefbeba11409b9e30ec35ed7071a61a47c8c2a9c688e40e45b90f9"
        },
        {
          "alg": "SHA-512",
          "content": "ee48047fd585539f236161c37160992d448ae88d25d846eb108e05c7b44611b70cf2b9d69f9eccf269cc6ba7c2009c00aace274571b8b8c71cc0ccc247ae0821"
        },
        {
          "alg": "SHA-384",
          "content": "8241d6e22dc366a674e84ad5f0f8f93e47bb8172d4f093892a97236f1b312e88c3a40c3e561d3cb79d6acfbf1b849c66"
        },
        {
          "alg": "SHA3-384",
          "content": "515619c8e8dd4d6c2f254d8e80d15dae097449ace9639a4ed2ebc6689efcf433008e1c8a9e4ceb29586a97bd13a6415b"
        },
        {
          "alg": "SHA3-256",
          "content": "f3897d47a0284457413c652eea70b93eb09dff8733eace11c269b6a5c144d44a"
        },
        {
          "alg": "SHA3-512",
          "content": "878d4ec298b983906135a9ea09100c4c2b1f27b854a3da9d871d4012db9e2399abac73942605257b482cf698b77224462537d8f33cb1882cb688578956b3cee0"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.22.3?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/FasterXML/jackson-dataformats-text",
          "type": "website"
        },
        {
          "url": "https://central.sonatype.com/api/v1/publisher",
          "type": "distribution"
        },
        {
          "url": "https://github.com/FasterXML/jackson-dataformats-text/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/FasterXML/jackson-dataformats-text/jackson-dataformat-yaml",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.minio/minio@9.0.3?type=jar",
      "group": "io.minio",
      "name": "minio",
      "version": "9.0.3",
      "description": "MinIO Java SDK for Amazon S3 Compatible Cloud Storage",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "63fca58827ec65d71930f31d04832460"
        },
        {
          "alg": "SHA-1",
          "content": "f44ec333c12a1a3773c92d8d48e9f5d52942d4e6"
        },
        {
          "alg": "SHA-256",
          "content": "db827b8ede16cfa33196b1249ecc7f7df0391c6d2a82e841499d09f84df7b11c"
        },
        {
          "alg": "SHA-512",
          "content": "5c3dc1c2a75f6b0f8ad3a7b30fc87236fd8545d516dac54372fdd5f2ecce6fac6a6bcce0fd29fe2c6c3ef9fcd433618624484262fa543f5b6002b72dc3d5ccbf"
        },
        {
          "alg": "SHA-384",
          "content": "924a5fbb47d05c2d54d33c9553bd60c22368d8b03eaa1ebde0219292ace0eb83fbc51a5c7f9d166e891e65b62e2c9a09"
        },
        {
          "alg": "SHA3-384",
          "content": "3be4b9555bd3267d1406986da5674188205ad4ea21bd0a033115921a15ee3677e718682b5c032f73e824f33bf81b6330"
        },
        {
          "alg": "SHA3-256",
          "content": "8793cb0022f8230c6affb7f3afc152ea34aa63d36d507bca83d534f09b595b9d"
        },
        {
          "alg": "SHA3-512",
          "content": "a1c50384ed0c280f36105a3b717f194dacefc4b3021b55994802635f48cc50361f4249b87c71e385636a677633419e9beaf2e011e97090e6a743065773574bcd"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.minio/minio@9.0.3?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/minio/minio-java",
          "type": "website"
        },
        {
          "url": "http://github.com/minio/minio-java",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.carrotsearch.thirdparty/simple-xml-safe@2.7.1?type=jar",
      "publisher": "Carrot Search s.c.",
      "group": "com.carrotsearch.thirdparty",
      "name": "simple-xml-safe",
      "version": "2.7.1",
      "description": "A fork of Niall Gallagher\u0027s simple-xml library with web-safe defaults",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "150936ed745f2c207db42931d7d5839b"
        },
        {
          "alg": "SHA-1",
          "content": "045fda5ac6087bc82a209d8cdb73f8d0dbdcfc7b"
        },
        {
          "alg": "SHA-256",
          "content": "4506e4bb57d41481936f0ac684468ca4b2cc9e002ca8466ee19e23228d455957"
        },
        {
          "alg": "SHA-512",
          "content": "d13c25a9c4b7ce07e6b096e37591b37e415332d3e1adcb65c753238f1c3d968a98293223a720101b0af0d76c4bd9f8a0d487de9b0122172187b59e923877592a"
        },
        {
          "alg": "SHA-384",
          "content": "a96086b4fe29a470978638f14d5508daa1f1f2a629de4cc424964e8c05a7d0d6960650b5536aee098fda03c6b5a8acae"
        },
        {
          "alg": "SHA3-384",
          "content": "3975d435b3f32c32dfdebc88625c7226d5052275269f4b0533f0d2cca05fd7d91c9a7ca58eb9559a6f4855166d3fd4bc"
        },
        {
          "alg": "SHA3-256",
          "content": "ed6f680d21c9fc1cd9606dc0dfcbbbed7baa71d41c51654b32159fef896d8806"
        },
        {
          "alg": "SHA3-512",
          "content": "d35d823731ce1d4bd9dbfca093f59ab91346b2b7f901c43c5aabe36fdc6ad5e1af130129da75dc9d731c3d9597e53afe888efefd752891b4f09f3eb2a8a6a5f5"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.carrotsearch.thirdparty/simple-xml-safe@2.7.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/dweiss/simplexml",
          "type": "website"
        },
        {
          "url": "https://github.com/dweiss/simplexml",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.squareup.okhttp3/okhttp@5.3.2?type=jar",
      "group": "com.squareup.okhttp3",
      "name": "okhttp",
      "version": "5.3.2",
      "description": "Square\u2019s meticulous HTTP client for Java and Kotlin.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "7cefaebda364337f3770168187124f31"
        },
        {
          "alg": "SHA-1",
          "content": "6891a4fd19bcab6f69fe091c2bc6077edec5258e"
        },
        {
          "alg": "SHA-256",
          "content": "e720a383fdc3eb1df4aac77a085e61b7730837364151de867093fdbcafcb44aa"
        },
        {
          "alg": "SHA-512",
          "content": "165c65503bded11490b09c46935864aa71ee8b9fc4ea1c01e1cb91b209a64af97e92d5d8fd9b4bc78209a8949a79f37ff49edd992171d25ba6f7e0d968cee87c"
        },
        {
          "alg": "SHA-384",
          "content": "c17bcf23262c3979a72e2c1746757b0f67ddad0b060c95d655a3d912136654b2468c96bd1921b316f4f05f43ce86c872"
        },
        {
          "alg": "SHA3-384",
          "content": "2bde1832a1b0bb7bb1a0eac22a2af8c4c25059dc98584667247c6efd3e8de3c4350b5ba9d378d689b285d05604601d81"
        },
        {
          "alg": "SHA3-256",
          "content": "07a360a76512ec19d3220d3ed9b594638ff63f8be6fb0bca1eee93057cd23861"
        },
        {
          "alg": "SHA3-512",
          "content": "fbb062b8370d6b9547edc1c3bf9a0a3bedf65b33e644cdc05e8c8101482757c8371f98616c13391cad7dfab3a01dac8a174ffcd99ebcc515a384aa8f022de8c3"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.squareup.okhttp3/okhttp@5.3.2?type=jar",
      "externalReferences": [
        {
          "url": "https://square.github.io/okhttp/",
          "type": "website"
        },
        {
          "url": "https://github.com/square/okhttp",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.squareup.okio/okio@3.16.4?type=jar",
      "group": "com.squareup.okio",
      "name": "okio",
      "version": "3.16.4",
      "description": "A modern I/O library for Android, Java, and Kotlin Multiplatform.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "ca878d553dd4cdae891d16df87cdae7d"
        },
        {
          "alg": "SHA-1",
          "content": "dbd63ccb67502e388975c9b5e4fb029638aecc78"
        },
        {
          "alg": "SHA-256",
          "content": "c9964f394c4cd32b79bf338afbfa2f2297221eee08311787061cea55f87dd60e"
        },
        {
          "alg": "SHA-512",
          "content": "d848277d1da157f22b4ba2dd42bea11c7569aab1107181b886e97943dbb6058851e78d6582eb13bdfc05350b1f82c8d4b681a42435eee0f631d126dd8f3b39ee"
        },
        {
          "alg": "SHA-384",
          "content": "edad8c48669ffbb1b079bc8f7f4ee5d3671dc4563df0598cc0e27b5d50ced49a90f2f510ea963051a2ffbfc95eb91159"
        },
        {
          "alg": "SHA3-384",
          "content": "68a3fe67b2e285fbb352e262dfea29c03151dbfa934c1ac900cd7ab2ad8a1a9c0e7cac4aa718a7677fe7ee391ac65027"
        },
        {
          "alg": "SHA3-256",
          "content": "8544496fbf4ead4fc95b999eb2bf5f7af01dab0809a806c080a226ddee50011b"
        },
        {
          "alg": "SHA3-512",
          "content": "2a39fe798a87a2b89f73b2c3b9143003dbc93434bce334d0cb55f422bb048e4cd39a05c9ab2c53411cab9138b84cb72510dd08f516e9c46438a8644cc7c974f6"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.squareup.okio/okio@3.16.4?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/square/okio/",
          "type": "website"
        },
        {
          "url": "https://github.com/square/okio/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.commons/commons-compress@1.28.0?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.commons",
      "name": "commons-compress",
      "version": "1.28.0",
      "description": "Apache Commons Compress defines an API for working with compression and archive formats. These include bzip2, gzip, pack200, LZMA, XZ, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4, Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "f33efe616d561f8281ef7bf9f2576ad0"
        },
        {
          "alg": "SHA-1",
          "content": "e482f2c7a88dac3c497e96aa420b6a769f59c8d7"
        },
        {
          "alg": "SHA-256",
          "content": "e1522945218456f3649a39bc4afd70ce4bd466221519dba7d378f2141a4642ca"
        },
        {
          "alg": "SHA-512",
          "content": "f1f140f4f40ab3cf3265919db9dbb95a631a29aa784e305f291de4e68876bb711d9217d62d7937cddddd393982decdf71a608b4b3ab7f4e6375cf28af2893d7f"
        },
        {
          "alg": "SHA-384",
          "content": "afe6a8fc8e7486c4ecce95276bb1467763d7ff7d941c7bcff8661bbbd4bff442fd0899ff7a11bc540cda86818ee4a8f0"
        },
        {
          "alg": "SHA3-384",
          "content": "6afb636ad0805e522913cfd91c8293c485b7f4eff5e45dd3a17a716c3f4b8ab8969e9c00927559a5fb762cba1fdb3d3f"
        },
        {
          "alg": "SHA3-256",
          "content": "4420e0b462b5dcc45077e95e012a82a5ae17659e5abe8a685fa086dab6995298"
        },
        {
          "alg": "SHA3-512",
          "content": "23e37d13c8ee6c7369e407c29d1f9ee1bb44eca9f09a6f9742f6b4cf3d38dd7a0509fe0142536cd8087b68a76e71d819105af2c23f2aeed08acc58eb93cf7e61"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.commons/commons-compress@1.28.0?type=jar",
      "externalReferences": [
        {
          "url": "https://commons.apache.org/proper/commons-compress/",
          "type": "website"
        },
        {
          "url": "https://github.com/apache/commons-compress/actions",
          "type": "build-system"
        },
        {
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2",
          "type": "distribution"
        },
        {
          "url": "https://issues.apache.org/jira/browse/COMPRESS",
          "type": "issue-tracker"
        },
        {
          "url": "https://mail-archives.apache.org/mod_mbox/commons-user/",
          "type": "mailing-list"
        },
        {
          "url": "https://gitbox.apache.org/repos/asf?p=commons-compress.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/commons-codec/commons-codec@1.23.0?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "commons-codec",
      "name": "commons-codec",
      "version": "1.23.0",
      "description": "The Apache Commons Codec component contains encoders and decoders for formats such as Base16, Base32, Base64, digest, and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a collection of phonetic encoding utilities.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "dc0c1fa739a6cfc59d948ebe371af90a"
        },
        {
          "alg": "SHA-1",
          "content": "11adf2daaeb941e80599a3e8010d63aed995f509"
        },
        {
          "alg": "SHA-256",
          "content": "47504a3ce71d73a1b0af07675546b8d8c5af87f82ef12b6381f9eb3c17dd5a5b"
        },
        {
          "alg": "SHA-512",
          "content": "fdbda49825afd3eef86987155865f74f71b51f88c9145df12a473b209f52a70d4e84a5f3c19648f42c9b8a5989bcdf4a0976df0a42b85fa3dbb5b52841a350ff"
        },
        {
          "alg": "SHA-384",
          "content": "de1caffb821f8bfa44fe0570bf8dbf308e07d23f254c9c4f15825a167f70a6e22fc9f5c9df03f2e56d261f94b3cb3859"
        },
        {
          "alg": "SHA3-384",
          "content": "7abb2ae4ad494c6732fea2d9c4eabc267223f70a8a3164b10297437809b82f4e2d90383f282b5c4999c5e0acaf9c9594"
        },
        {
          "alg": "SHA3-256",
          "content": "fe24f5492b702edf2dae5b3cb5ebb7a2661e5a4c02fd15dd95dd22bcea8373e7"
        },
        {
          "alg": "SHA3-512",
          "content": "e5395d37af0ec14b84f8e122d89b0276e74a32389c1c88f3a3b69753eab2d5051b7236fc230396105b06faa0af7406d10392e7f6ab8a15d0586cdd45b0a872c9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/commons-codec/commons-codec@1.23.0?type=jar",
      "externalReferences": [
        {
          "url": "https://commons.apache.org/proper/commons-codec/",
          "type": "website"
        },
        {
          "url": "https://github.com/apache/commons-codec/actions",
          "type": "build-system"
        },
        {
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2",
          "type": "distribution"
        },
        {
          "url": "https://issues.apache.org/jira/browse/CODEC",
          "type": "issue-tracker"
        },
        {
          "url": "https://mail-archives.apache.org/mod_mbox/commons-user/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/apache/commons-codec",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.xerial.snappy/snappy-java@1.1.10.8?type=jar",
      "publisher": "xerial.org",
      "group": "org.xerial.snappy",
      "name": "snappy-java",
      "version": "1.1.10.8",
      "description": "snappy-java: A fast compression/decompression library",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "a25bd213d1ca2f3c605c5f03050db070"
        },
        {
          "alg": "SHA-1",
          "content": "ccbaa2b5ea6a023a27c44daf2d6cdec0e138592d"
        },
        {
          "alg": "SHA-256",
          "content": "50485d06037fea3d6e40c968386feeca6338cc9872e25549593ff3eb352cefcc"
        },
        {
          "alg": "SHA-512",
          "content": "c7133f726f366b9f06df98d94b4dd7c91c7702c543e1a318055a886af5e625d8231b0a6728250596181bc20a6c4147855eeb02ed55c447fe13ff2156e29985a9"
        },
        {
          "alg": "SHA-384",
          "content": "aeb78b3f4c56ce769f5fda9cfabe00be77d21b93637f70601c28b16eef41405e1291001c3a6e45001b356543e33b664b"
        },
        {
          "alg": "SHA3-384",
          "content": "6137f6354b574d8decb579ad9147dd9463e3a9f62d1e929266bee1adc020f57382973d0a1abf9daeb2007bb32671fed8"
        },
        {
          "alg": "SHA3-256",
          "content": "f44a4a8cffe82ce6c99b401e9d822e71cdfc63c1b279b278282eda07243b2a94"
        },
        {
          "alg": "SHA3-512",
          "content": "655731ef3b20a2cec213138c170f7dc7182c2a09536d74c1d8a13224bb204dd706a35749bf99b51c4b945b75784a0a26c60931a158d27e1378ccd1c8ac7a0783"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.xerial.snappy/snappy-java@1.1.10.8?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/xerial/snappy-java",
          "type": "website"
        },
        {
          "url": "https://github.com/xerial/snappy-java",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.squareup.okhttp3/okhttp-jvm@5.5.0?type=jar",
      "group": "com.squareup.okhttp3",
      "name": "okhttp-jvm",
      "version": "5.5.0",
      "description": "Square\u2019s meticulous HTTP client for Java and Kotlin.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "a9506ae9545544d219c6775bce435349"
        },
        {
          "alg": "SHA-1",
          "content": "cefe1eb26408176d30511420b7e36b065e38bca0"
        },
        {
          "alg": "SHA-256",
          "content": "234194a04aac54858df0a750d243af7b2e39df5e4eb86e9912043ad33a9f9a52"
        },
        {
          "alg": "SHA-512",
          "content": "f05cc85dc48556c120b69497722d1ed5db08007445b30ba1901c24cc3496a913b34cc0b3b0866c41206624e90f230ec23bbacfcac532590321bcb2ff261333ac"
        },
        {
          "alg": "SHA-384",
          "content": "9c97973f9e4bcf5fb0777f3b0977d5e8907609d45962df9b091f53fcda9e68199a85cdf1c6bf7a2df28d71a45ca23b48"
        },
        {
          "alg": "SHA3-384",
          "content": "3371409f0357b640ca68c63f06c8c16a09d2e2de85fc11516ee04d348b5745758752c39905a21320ca0ad422cdeb8a88"
        },
        {
          "alg": "SHA3-256",
          "content": "eeb80a1af674f4066f9640a6399aa4e869deaa35369444cdb311684c557ee2c6"
        },
        {
          "alg": "SHA3-512",
          "content": "0341c39261a731a4d4aac03557ad4d3235d68cebed2462f5d450e432018382407ba10a5afe23fc9ca4071419accc3630bf0d61ed2dc552b829c0378668651c7b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.squareup.okhttp3/okhttp-jvm@5.5.0?type=jar",
      "externalReferences": [
        {
          "url": "https://lysine.dev/okhttp/",
          "type": "website"
        },
        {
          "url": "https://github.com/lysine-dev/okhttp",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.jetbrains.kotlin/kotlin-stdlib@2.4.21?type=jar",
      "group": "org.jetbrains.kotlin",
      "name": "kotlin-stdlib",
      "version": "2.4.21",
      "description": "Kotlin Standard Library",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "16295f9a230d9d5828a2ac2385e0ded0"
        },
        {
          "alg": "SHA-1",
          "content": "c343e135bd1e7dd94b7ed76b4159068d888d09db"
        },
        {
          "alg": "SHA-256",
          "content": "bd8250210584cb659847dce9cda660f8e9906e5def7fbebcea93dc6dcb6a88a3"
        },
        {
          "alg": "SHA-512",
          "content": "ddb4bd429a33d7a007f71c0f82e420bab314ee86367df1bd9c2399ccc22a2d2f820b8f0934fb39cfc6477d1d23c68e3edda3c7613fe3aa0b62372e4ee97f85b5"
        },
        {
          "alg": "SHA-384",
          "content": "dd7ad749f9f2f4ec3a5c3e65b02421793f1debb5b69db81161e97608e2b6daca430e33ff86fdd7baf54bbba18e0381b5"
        },
        {
          "alg": "SHA3-384",
          "content": "a8f55b3939d26afe4eff2a6e108cc8ff757b30f01fec03023ce94cbdf9e2c38a3a6b20813a40afd0c7fbb5d2bb2ab1e4"
        },
        {
          "alg": "SHA3-256",
          "content": "a4f0d610a89bfb7264d38b7ddf4c4acd8755f4934fcc5096c5fd56f31844f109"
        },
        {
          "alg": "SHA3-512",
          "content": "eca976b691a60614dc7ab953f5750626d40ff00b633d7eaabde2649aebb78bb6d780187c07beffebb37fa970d09c845d6c529675313981f492c56451135c1e8f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.jetbrains.kotlin/kotlin-stdlib@2.4.21?type=jar",
      "externalReferences": [
        {
          "url": "https://kotlinlang.org/",
          "type": "website"
        },
        {
          "url": "https://github.com/JetBrains/kotlin",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.jetbrains/annotations@13.0?type=jar",
      "group": "org.jetbrains",
      "name": "annotations",
      "version": "13.0",
      "description": "A set of annotations used for code inspection support and code documentation.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "f4fb462172517b46b6cd90003508515a"
        },
        {
          "alg": "SHA-1",
          "content": "919f0dfe192fb4e063e7dacadee7f8bb9a2672a9"
        },
        {
          "alg": "SHA-256",
          "content": "ace2a10dc8e2d5fd34925ecac03e4988b2c0f851650c94b8cef49ba1bd111478"
        },
        {
          "alg": "SHA-512",
          "content": "5622d0ffe410e7272e2bb9fae1006caedeb86d0c62d2d9f3929a3b3cdcdef1963218fcf0cede82e95ef9f4da3ed4a173fa055ee6e4038886376181e0423e02ff"
        },
        {
          "alg": "SHA-384",
          "content": "6bcde3a6e471d416522e6288474bc4f9115e2e8abf8ce5d300829bee4aa98dff73be7d8c6f0607f3d6d423c7f5abbf90"
        },
        {
          "alg": "SHA3-384",
          "content": "f4d5a5d5a76b24c4751c8c52f2879b097d2430c3571c59b4630e8c871c9bdb08e24e803a14c24fc8d3378417f29b7244"
        },
        {
          "alg": "SHA3-256",
          "content": "b4a80ea81c4bc7e364e07981465f547e8ed83031806eaf3b97dfb38f894f5b6f"
        },
        {
          "alg": "SHA3-512",
          "content": "15b23bce818b4399b334dd632eb85de5a1b70c47fb9260561e70b1f726211c83bddbc957f3b4c32a1d8c687f9bc6c38d0a638c731cb5daf5b619aa725d6050c2"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.jetbrains/annotations@13.0?type=jar",
      "externalReferences": [
        {
          "url": "http://www.jetbrains.org",
          "type": "website"
        },
        {
          "url": "http://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/JetBrains/intellij-community",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.squareup.okio/okio-jvm@3.18.1?type=jar",
      "group": "com.squareup.okio",
      "name": "okio-jvm",
      "version": "3.18.1",
      "description": "A modern I/O library for Android, Java, and Kotlin Multiplatform.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "582df8b383508e316081006d1fbd73d9"
        },
        {
          "alg": "SHA-1",
          "content": "a3a8128bb3a0157d23ecc18c17e8330d9c0ac96c"
        },
        {
          "alg": "SHA-256",
          "content": "b97b640557a650d15411f2be29aef558c4e422a83653cb18ba494311dbed18be"
        },
        {
          "alg": "SHA-512",
          "content": "a4b9db7bc68876aefbbd57e1e232aadcd9666fffb1ead59f7a9f4dfcc22f2f90a50b29524380548d08dd040379b5dad4737513ed4a78d6f5fc99ae1b5665ef1f"
        },
        {
          "alg": "SHA-384",
          "content": "155fcef96eaaa87db8ce1e4cb19d9997e956d1d072fec1e69ccfc11ff6bd8d5bd242acb6b9567dad67a6675a39db6337"
        },
        {
          "alg": "SHA3-384",
          "content": "85cee2efa2df46ebc75ef24d56f732409dae15702b8a15cd4ab614f8e86627d6b52b3496a774015a9383088842f1cb63"
        },
        {
          "alg": "SHA3-256",
          "content": "d884e246b47b314a0e2b67287223aaea1798b4c19065acb78b8bf8ba7724ad5d"
        },
        {
          "alg": "SHA3-512",
          "content": "e1e27fe4a7fe21aefc092d541ac745bad3c28f77482ed52a818a98f371a276c37d4617f71e64ef4f0354f2b7fee82fbc5642a00e6d2d5414f3043c90eaa46ba7"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.squareup.okio/okio-jvm@3.18.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/lysine-dev/okio/",
          "type": "website"
        },
        {
          "url": "https://github.com/lysine-dev/okio/",
          "type": "vcs"
        }
      ]
    }
  ],
  "services": [
    {
      "bom-ref": "service:gov.nist.nvd",
      "provider": {
        "name": "National Institute of Standards and Technology (NIST)",
        "url": [
          "https://nist.gov"
        ],
        "contact": [
          {
            "email": "nvd@nist.gov"
          }
        ]
      },
      "group": "gov.nist.nvd",
      "name": "National Vulnerability Database (NVD)",
      "description": "Used as a vulnerability data source. CVE feeds are mirrored to Dependency-Track.",
      "endpoints": [
        "https://nvd.nist.gov/feeds"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "Public domain"
          }
        }
      ]
    },
    {
      "bom-ref": "service:org.sonatype.ossindex",
      "provider": {
        "name": "Sonatype",
        "url": [
          "https://sonatype.com"
        ],
        "contact": [
          {
            "email": "ossindex@sonatype.org"
          }
        ]
      },
      "group": "org.sonatype.ossindex",
      "name": "OSS Index",
      "description": "Optional vulnerability analyzer. Queried by component package URL to retrieve known vulnerabilities.",
      "endpoints": [
        "https://ossindex.sonatype.org/api/v3/component-report",
        "https://ossindex.sonatype.org/api/v3/version"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:com.cyberriskanalytics.vulndb",
      "provider": {
        "name": "Risk Based Security",
        "url": [
          "https://riskbasedsecurity.com/"
        ],
        "contact": [
          {
            "email": "support@riskbasedsecurity.com"
          },
          {
            "email": "sales@riskbasedsecurity.com",
            "phone": "1-855-RBS-RISK"
          }
        ]
      },
      "group": "com.cyberriskanalytics.vulndb",
      "name": "VulnDB",
      "description": "Optional commercial vulnerability analyzer. Queried for component vulnerabilities. Requires a paid subscription.",
      "endpoints": [
        "https://vulndb.cyberriskanalytics.com/api/v1/account_status",
        "https://vulndb.cyberriskanalytics.com/api/v1/vendors/",
        "https://vulndb.cyberriskanalytics.com/api/v1/products/",
        "https://vulndb.cyberriskanalytics.com/api/v1/versions/by_product_id",
        "https://vulndb.cyberriskanalytics.com/api/v1/vulnerabilities/",
        "https://vulndb.cyberriskanalytics.com/api/v1/vulnerabilities/find_by_cpe"
      ],
      "authenticated": true,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:com.github.api",
      "provider": {
        "name": "GitHub",
        "url": [
          "https://github.com/"
        ]
      },
      "group": "com.github.api",
      "name": "GitHub Advisories",
      "description": "Used as a vulnerability data source. GitHub Security Advisories are mirrored to Dependency-Track via GraphQL. Also queried for repository metadata of packages hosted on GitHub.",
      "endpoints": [
        "https://api.github.com/graphql",
        "https://api.github.com/repos/"
      ],
      "authenticated": true,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:io.crates",
      "provider": {
        "name": "Crates.io",
        "url": [
          "https://crates.io"
        ]
      },
      "group": "io.crates",
      "name": "Crates.io",
      "description": "Queried for package metadata and latest version information of Rust crates.",
      "endpoints": [
        "https://index.crates.io"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:org.packagist.repo",
      "provider": {
        "name": "Packagist",
        "url": [
          "https://packagist.org"
        ]
      },
      "group": "org.packagist.repo",
      "name": "Packagist",
      "description": "Queried for latest version information of PHP Composer packages.",
      "endpoints": [
        "https://repo.packagist.org/p/"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:org.rubygems",
      "provider": {
        "name": "RubyGems",
        "url": [
          "https://rubygems.org"
        ]
      },
      "group": "org.rubygems",
      "name": "RubyGems",
      "description": "Queried for package metadata and latest version information of Ruby gems.",
      "endpoints": [
        "https://rubygems.org/api/v1/versions"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:org.golang.proxy",
      "provider": {
        "name": "Google",
        "url": [
          "https://go.dev/"
        ]
      },
      "group": "org.golang.proxy",
      "name": "Go Module Mirror, Index, and Checksum Database",
      "description": "Queried for package metadata and latest version information of Go modules.",
      "endpoints": [
        "https://proxy.golang.org/"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:pm.hex",
      "provider": {
        "name": "Six Colors AB.",
        "url": [
          "https://hex.pm"
        ],
        "contact": [
          {
            "name": "Eric Meadows-J\u00F6nsson",
            "phone": "\u002B46 070-893 94 01"
          }
        ]
      },
      "group": "pm.hex",
      "name": "hex",
      "description": "Queried for package metadata and latest version information of Erlang and Elixir packages.",
      "endpoints": [
        "https://hex.pm/api/packages"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:org.maven.repo1",
      "provider": {
        "name": "Sonatype",
        "url": [
          "https://sonatype.com"
        ]
      },
      "group": "org.maven.repo1",
      "name": "Maven Central",
      "description": "Queried for package metadata and latest version information of Java artifacts.",
      "endpoints": [
        "https://repo1.maven.org/maven2"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:com.atlassian.maven",
      "provider": {
        "name": "Atlassian",
        "url": [
          "https://atlassian.com"
        ]
      },
      "group": "com.atlassian.maven",
      "name": "Atlassian Public",
      "description": "Queried for latest version information of Atlassian-published Maven artifacts.",
      "endpoints": [
        "https://packages.atlassian.com/content/repositories/atlassian-public/"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:org.jboss.repository",
      "provider": {
        "name": "RedHat",
        "url": [
          "https://redhat.com"
        ]
      },
      "group": "org.jboss.repository",
      "name": "JBoss Releases",
      "description": "Queried for latest version information of JBoss-published Maven artifacts.",
      "endpoints": [
        "https://repository.jboss.org/nexus/content/repositories/releases/"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:org.clojars.repo",
      "provider": {
        "name": "Clojars",
        "url": [
          "https://clojars.org/"
        ]
      },
      "group": "org.clojars.repo",
      "name": "Clojars",
      "description": "Queried for latest version information of Clojure libraries.",
      "endpoints": [
        "https://repo.clojars.org/"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:com.google.maven",
      "provider": {
        "name": "Google",
        "url": [
          "https://google.com"
        ]
      },
      "group": "com.google.maven",
      "name": "Google\u0027s Maven Repository",
      "description": "Queried for latest version information of Google and Android Maven artifacts.",
      "endpoints": [
        "https://maven.google.com/"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:org.npmjs.registry",
      "provider": {
        "name": "npm",
        "url": [
          "https://www.npmjs.com/"
        ]
      },
      "group": "org.npmjs.registry",
      "name": "NPM Registry",
      "description": "Queried for package metadata and latest version information of npm packages.",
      "endpoints": [
        "https://registry.npmjs.org/-/package/"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:org.nuget.api",
      "provider": {
        "name": "Microsoft",
        "url": [
          "https://www.microsoft.com/"
        ],
        "contact": [
          {
            "email": "support@nuget.org"
          }
        ]
      },
      "group": "org.nuget.api",
      "name": "NuGet Registry",
      "description": "Queried for package metadata and latest version information of NuGet packages.",
      "endpoints": [
        "https://api.nuget.org/v3-flatcontainer/",
        "https://api.nuget.org/v3/registration3/"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:dev.osv",
      "provider": {
        "name": "Google",
        "url": [
          "https://google.com"
        ]
      },
      "group": "dev.osv",
      "name": "OSV",
      "description": "Used as a vulnerability data source. Per-ecosystem OSV feeds are mirrored to Dependency-Track.",
      "endpoints": [
        "https://osv-vulnerabilities.storage.googleapis.com"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:org.pypi",
      "provider": {
        "name": "Python Software Foundation",
        "url": [
          "https://www.python.org/psf/"
        ],
        "contact": [
          {
            "email": "psf@python.org"
          }
        ]
      },
      "group": "org.pypi",
      "name": "PyPI",
      "description": "Queried for package metadata and latest version information of Python packages.",
      "endpoints": [
        "https://pypi.org/pypi/"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:org.dependencytrack.metrics",
      "provider": {
        "name": "OWASP",
        "url": [
          "https://owasp.org"
        ]
      },
      "group": "org.dependencytrack.metrics",
      "name": "Dependency-Track Telemetry",
      "description": "Receives anonymous usage telemetry submitted by this Dependency-Track instance. Optional.",
      "endpoints": [
        "https://metrics.dependencytrack.org"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "outbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:io.snyk",
      "provider": {
        "name": "Snyk",
        "url": [
          "https://snyk.io"
        ]
      },
      "group": "io.snyk",
      "name": "Snyk",
      "description": "Optional commercial vulnerability analyzer. Queried for component vulnerabilities. Requires a paid subscription.",
      "endpoints": [
        "https://api.snyk.io"
      ],
      "authenticated": true,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:com.empiricalsecurity.epss",
      "provider": {
        "name": "Empirical Security",
        "url": [
          "https://www.first.org/epss/"
        ]
      },
      "group": "com.empiricalsecurity.epss",
      "name": "EPSS",
      "description": "Used as a source of EPSS exploit prediction scores for CVEs. Feeds are mirrored to Dependency-Track.",
      "endpoints": [
        "https://epss.empiricalsecurity.com/epss_scores-current.csv.gz"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:org.metacpan",
      "provider": {
        "name": "The Perl Foundation",
        "url": [
          "https://metacpan.org"
        ]
      },
      "group": "org.metacpan",
      "name": "MetaCPAN",
      "description": "Queried for latest version information of Perl modules on CPAN.",
      "endpoints": [
        "https://fastapi.metacpan.org/v1/"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:org.haskell.hackage",
      "provider": {
        "name": "Haskell.org",
        "url": [
          "https://www.haskell.org"
        ]
      },
      "group": "org.haskell.hackage",
      "name": "Hackage",
      "description": "Queried for latest version information of Haskell packages.",
      "endpoints": [
        "https://hackage.haskell.org/"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:org.nixos.channels",
      "provider": {
        "name": "NixOS Foundation",
        "url": [
          "https://nixos.org"
        ]
      },
      "group": "org.nixos.channels",
      "name": "Nixpkgs",
      "description": "Queried for latest version information of Nixpkgs packages.",
      "endpoints": [
        "https://channels.nixos.org/nixpkgs-unstable/packages.json.br"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.dependencytrack/apiserver@5.2.1?type=jar",
      "dependsOn": [
        "pkg:maven/org.dependencytrack/api@5.2.1?type=jar",
        "pkg:maven/org.dependencytrack/cache-api@5.2.1?type=jar",
        "pkg:maven/org.dependencytrack/cache-provider-database@5.2.1?type=jar",
        "pkg:maven/org.dependencytrack/common-init@5.2.1?type=jar",
        "pkg:maven/org.dependencytrack/common-pagination@5.2.1?type=jar",
        "pkg:maven/org.dependencytrack/datanucleus-plugin@5.2.1?type=jar",
        "pkg:maven/org.dependencytrack/migration@5.2.1?type=jar",
        "pkg:maven/org.dependencytrack/notification-api@5.2.1?type=jar",
        "pkg:maven/org.dependencytrack/notification-publishing@5.2.1?type=jar",
        "pkg:maven/org.dependencytrack/notification-templating@5.2.1?type=jar",
        "pkg:maven/org.dependencytrack/plugin-api@5.2.1?type=jar",
        "pkg:maven/org.dependencytrack/plugin-config@5.2.1?type=jar",
        "pkg:maven/org.dependencytrack/plugin-runtime@5.2.1?type=jar",
        "pkg:maven/org.dependencytrack/proto@5.2.1?type=jar",
        "pkg:maven/org.dependencytrack/secret-management@5.2.1?type=jar",
        "pkg:maven/org.dependencytrack/vuln-analysis-api@5.2.1?type=jar",
        "pkg:maven/org.dependencytrack/vuln-analyzer-internal@5.2.1?type=jar",
        "pkg:maven/org.dependencytrack/vuln-analyzer-checkmarx@5.2.1?type=jar",
        "pkg:maven/org.dependencytrack/package-metadata-api@5.2.1?type=jar",
        "pkg:maven/org.dependencytrack/package-metadata-resolution@5.2.1?type=jar",
        "pkg:maven/org.dependencytrack/vuln-analyzer-oss-index@5.2.1?type=jar",
        "pkg:maven/org.dependencytrack/vuln-analyzer-snyk@5.2.1?type=jar",
        "pkg:maven/org.dependencytrack/vuln-analyzer-trivy@5.2.1?type=jar",
        "pkg:maven/org.dependencytrack/vuln-analyzer-vuln-db@5.2.1?type=jar",
        "pkg:maven/org.dependencytrack/dex-engine@5.2.1?type=jar",
        "pkg:maven/org.dependencytrack/file-storage-api@5.2.1?type=jar",
        "pkg:maven/org.dependencytrack/file-storage-provider-local@5.2.1?type=jar",
        "pkg:maven/org.dependencytrack/file-storage-provider-memory@5.2.1?type=jar",
        "pkg:maven/org.dependencytrack/file-storage-provider-s3@5.2.1?type=jar",
        "pkg:maven/org.dependencytrack/kev-data-source-api@5.2.1?type=jar",
        "pkg:maven/org.dependencytrack/kev-data-source-builtin@5.2.1?type=jar",
        "pkg:maven/org.dependencytrack/vuln-data-source-api@5.2.1?type=jar",
        "pkg:maven/org.dependencytrack/vuln-data-source-github@5.2.1?type=jar",
        "pkg:maven/org.dependencytrack/vuln-data-source-jvn@5.2.1?type=jar",
        "pkg:maven/org.dependencytrack/vuln-data-source-nvd@5.2.1?type=jar",
        "pkg:maven/org.dependencytrack/vuln-data-source-osv@5.2.1?type=jar",
        "pkg:maven/org.dependencytrack/alpine-common@5.2.1?type=jar",
        "pkg:maven/org.dependencytrack/alpine-model@5.2.1?type=jar",
        "pkg:maven/org.dependencytrack/alpine-infra@5.2.1?type=jar",
        "pkg:maven/org.dependencytrack/alpine-server@5.2.1?type=jar",
        "pkg:maven/dev.cel/cel@0.14.0?type=jar",
        "pkg:maven/com.google.errorprone/error_prone_annotations@2.50.0?type=jar",
        "pkg:maven/org.metaeffekt.core/ae-security@0.159.0?type=jar",
        "pkg:maven/com.nimbusds/oauth2-oidc-sdk@11.38.2?type=jar",
        "pkg:maven/com.github.kagkarlsson/db-scheduler@16.12.0?type=jar",
        "pkg:maven/org.dependencytrack/jdbi-support@5.2.1?type=jar",
        "pkg:maven/org.jdbi/jdbi3-core@3.55.0?type=jar",
        "pkg:maven/org.jdbi/jdbi3-jackson2@3.55.0?type=jar",
        "pkg:maven/org.jdbi/jdbi3-sqlobject@3.55.0?type=jar",
        "pkg:maven/org.jdbi/jdbi3-postgres@3.55.0?type=jar",
        "pkg:maven/org.jdbi/jdbi3-freemarker@3.55.0?type=jar",
        "pkg:maven/org.glassfish.jersey.ext/jersey-micrometer@4.0.3?type=jar",
        "pkg:maven/us.springett/owasp-risk-rating-calculator@1.0.1?type=jar",
        "pkg:maven/us.springett/cpe-parser@3.0.1?type=jar",
        "pkg:maven/org.cyclonedx/cyclonedx-core-java@13.4.0?type=jar",
        "pkg:maven/jakarta.servlet/jakarta.servlet-api@6.1.0?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-server@12.1.14?type=jar",
        "pkg:maven/org.eclipse.jetty.compression/jetty-compression-gzip@12.1.14?type=jar",
        "pkg:maven/org.eclipse.jetty.compression/jetty-compression-zstandard@12.1.14?type=jar",
        "pkg:maven/org.eclipse.jetty.compression/jetty-compression-server@12.1.14?type=jar",
        "pkg:maven/org.eclipse.jetty.ee11/jetty-ee11-servlet@12.1.14?type=jar",
        "pkg:maven/org.slf4j/jul-to-slf4j@2.0.20?type=jar",
        "pkg:maven/io.swagger.core.v3/swagger-annotations-jakarta@2.2.55?type=jar",
        "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.22.3?type=jar",
        "pkg:maven/com.github.package-url/packageurl-java@1.5.0?type=jar",
        "pkg:maven/com.asahaf.javacron/javacron@1.4.0?type=jar",
        "pkg:maven/io.micrometer/micrometer-java11@1.17.1?type=jar",
        "pkg:maven/io.micrometer/micrometer-registry-prometheus@1.17.1?type=jar",
        "pkg:maven/io.prometheus/prometheus-metrics-exposition-textformats@1.10.0?type=jar",
        "pkg:maven/io.github.mweirauch/micrometer-jvm-extras@0.3.0?type=jar",
        "pkg:maven/io.pebbletemplates/pebble@4.1.2?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java-util@4.36.2?type=jar",
        "pkg:maven/com.fasterxml.woodstox/woodstox-core@7.3.0?type=jar",
        "pkg:maven/io.github.nscuro/versatile-core@0.26.1?type=jar",
        "pkg:maven/org.postgresql/postgresql@42.7.14?type=jar",
        "pkg:maven/io.github.resilience4j/resilience4j-core@2.4.0?type=jar",
        "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.22.3?type=jar",
        "pkg:maven/io.minio/minio@9.0.3?type=jar",
        "pkg:maven/com.squareup.okhttp3/okhttp-jvm@5.5.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/api@5.2.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.dependencytrack/cache-api@5.2.1?type=jar",
      "dependsOn": [
        "pkg:maven/org.jspecify/jspecify@1.0.1?type=jar",
        "pkg:maven/org.eclipse.microprofile.config/microprofile-config-api@3.1.2?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.jspecify/jspecify@1.0.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.eclipse.microprofile.config/microprofile-config-api@3.1.2?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.dependencytrack/cache-provider-database@5.2.1?type=jar",
      "dependsOn": [
        "pkg:maven/org.dependencytrack/common-datasource@5.2.1?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.1?type=jar",
        "pkg:maven/io.micrometer/micrometer-core@1.17.1?type=jar",
        "pkg:maven/org.eclipse.microprofile.config/microprofile-config-api@3.1.2?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.20?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/common-datasource@5.2.1?type=jar",
      "dependsOn": [
        "pkg:maven/org.dependencytrack/common-health@5.2.1?type=jar",
        "pkg:maven/com.zaxxer/HikariCP@7.1.0?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.1?type=jar",
        "pkg:maven/io.micrometer/micrometer-core@1.17.1?type=jar",
        "pkg:maven/org.postgresql/postgresql@42.7.14?type=jar",
        "pkg:maven/io.smallrye.config/smallrye-config-core@4.0.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/common-health@5.2.1?type=jar",
      "dependsOn": [
        "pkg:maven/org.jspecify/jspecify@1.0.1?type=jar",
        "pkg:maven/org.eclipse.microprofile.health/microprofile-health-api@4.0.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.eclipse.microprofile.health/microprofile-health-api@4.0.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.zaxxer/HikariCP@7.1.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.slf4j/slf4j-api@2.0.20?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.slf4j/slf4j-api@2.0.20?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/io.micrometer/micrometer-core@1.17.1?type=jar",
      "dependsOn": [
        "pkg:maven/org.jspecify/jspecify@1.0.1?type=jar",
        "pkg:maven/io.micrometer/micrometer-commons@1.17.1?type=jar",
        "pkg:maven/io.micrometer/micrometer-observation@1.17.1?type=jar",
        "pkg:maven/org.hdrhistogram/HdrHistogram@2.2.2?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.micrometer/micrometer-commons@1.17.1?type=jar",
      "dependsOn": [
        "pkg:maven/org.jspecify/jspecify@1.0.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.micrometer/micrometer-observation@1.17.1?type=jar",
      "dependsOn": [
        "pkg:maven/org.jspecify/jspecify@1.0.1?type=jar",
        "pkg:maven/io.micrometer/micrometer-commons@1.17.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.hdrhistogram/HdrHistogram@2.2.2?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.postgresql/postgresql@42.7.14?type=jar",
      "dependsOn": [
        "pkg:maven/org.checkerframework/checker-qual@3.55.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.checkerframework/checker-qual@3.55.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/io.smallrye.config/smallrye-config-core@4.0.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.eclipse.microprofile.config/microprofile-config-api@3.1.2?type=jar",
        "pkg:maven/jakarta.annotation/jakarta.annotation-api@3.0.0?type=jar",
        "pkg:maven/io.smallrye.common/smallrye-common-annotation@2.20.0?type=jar",
        "pkg:maven/io.smallrye.common/smallrye-common-expression@2.20.0?type=jar",
        "pkg:maven/io.smallrye.common/smallrye-common-constraint@2.20.0?type=jar",
        "pkg:maven/io.smallrye.common/smallrye-common-classloader@2.20.0?type=jar",
        "pkg:maven/org.jboss.logging/jboss-logging@3.6.3.Final?type=jar",
        "pkg:maven/org.ow2.asm/asm@9.10.1?type=jar",
        "pkg:maven/io.smallrye.config/smallrye-config-common@4.0.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/jakarta.annotation/jakarta.annotation-api@3.0.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/io.smallrye.common/smallrye-common-annotation@2.20.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/io.smallrye.common/smallrye-common-expression@2.20.0?type=jar",
      "dependsOn": [
        "pkg:maven/io.smallrye.common/smallrye-common-function@2.20.0?type=jar",
        "pkg:maven/org.jboss.logging/jboss-logging@3.6.3.Final?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.smallrye.common/smallrye-common-function@2.20.0?type=jar",
      "dependsOn": [
        "pkg:maven/io.smallrye.common/smallrye-common-constraint@2.20.0?type=jar",
        "pkg:maven/org.jboss.logging/jboss-logging@3.6.3.Final?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.smallrye.common/smallrye-common-constraint@2.20.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.jboss.logging/jboss-logging@3.6.3.Final?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.jboss.logging/jboss-logging@3.6.3.Final?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/io.smallrye.common/smallrye-common-classloader@2.20.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.ow2.asm/asm@9.10.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/io.smallrye.config/smallrye-config-common@4.0.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.eclipse.microprofile.config/microprofile-config-api@3.1.2?type=jar",
        "pkg:maven/io.smallrye.common/smallrye-common-classloader@2.20.0?type=jar",
        "pkg:maven/org.jboss.logging/jboss-logging@3.6.3.Final?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/common-init@5.2.1?type=jar",
      "dependsOn": [
        "pkg:maven/org.jspecify/jspecify@1.0.1?type=jar",
        "pkg:maven/org.eclipse.microprofile.config/microprofile-config-api@3.1.2?type=jar",
        "pkg:maven/org.eclipse.microprofile.health/microprofile-health-api@4.0.1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.20?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/common-pagination@5.2.1?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-cbor@2.22.3?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-cbor@2.22.3?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.22.3?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.22.3?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.22.3?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.22.3?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.22?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.22.3?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.22?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.dependencytrack/datanucleus-plugin@5.2.1?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml.uuid/java-uuid-generator@5.2.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.fasterxml.uuid/java-uuid-generator@5.2.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.slf4j/slf4j-api@2.0.20?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/migration@5.2.1?type=jar",
      "dependsOn": [
        "pkg:maven/org.dependencytrack/flyway-support@5.2.1?type=jar",
        "pkg:maven/org.flywaydb/flyway-database-postgresql@13.9.0?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.20?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/flyway-support@5.2.1?type=jar",
      "dependsOn": [
        "pkg:maven/org.flywaydb/flyway-core@13.9.0?type=jar",
        "pkg:maven/org.flywaydb/flyway-database-postgresql@13.9.0?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.flywaydb/flyway-core@13.9.0?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.22?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.flywaydb/flyway-database-postgresql@13.9.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.flywaydb/flyway-core@13.9.0?type=jar",
        "pkg:maven/org.flywaydb/flyway-database-cockroachdb@13.9.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.flywaydb/flyway-database-cockroachdb@13.9.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.flywaydb/flyway-core@13.9.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/notification-api@5.2.1?type=jar",
      "dependsOn": [
        "pkg:maven/org.dependencytrack/net-support@5.2.1?type=jar",
        "pkg:maven/com.fasterxml.uuid/java-uuid-generator@5.2.0?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.1?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java@4.36.2?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java-util@4.36.2?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/net-support@5.2.1?type=jar",
      "dependsOn": [
        "pkg:maven/org.jspecify/jspecify@1.0.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.google.protobuf/protobuf-java@4.36.2?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.google.protobuf/protobuf-java-util@4.36.2?type=jar",
      "dependsOn": [
        "pkg:maven/com.google.protobuf/protobuf-java@4.36.2?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
        "pkg:maven/com.google.code.gson/gson@2.14.0?type=jar",
        "pkg:maven/com.google.errorprone/error_prone_annotations@2.50.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.google.code.gson/gson@2.14.0?type=jar",
      "dependsOn": [
        "pkg:maven/com.google.errorprone/error_prone_annotations@2.50.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.google.errorprone/error_prone_annotations@2.50.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.dependencytrack/notification-publishing@5.2.1?type=jar",
      "dependsOn": [
        "pkg:maven/org.eclipse.angus/angus-mail@2.0.5?type=jar",
        "pkg:maven/com.github.ben-manes.caffeine/caffeine@3.3.1?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.22.3?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.1?type=jar",
        "pkg:maven/org.apache.kafka/kafka-clients@4.4.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.eclipse.angus/angus-mail@2.0.5?type=jar",
      "dependsOn": [
        "pkg:maven/jakarta.activation/jakarta.activation-api@2.1.4?type=jar",
        "pkg:maven/jakarta.mail/jakarta.mail-api@2.1.5?type=jar",
        "pkg:maven/org.eclipse.angus/angus-activation@2.0.3?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/jakarta.activation/jakarta.activation-api@2.1.4?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/jakarta.mail/jakarta.mail-api@2.1.5?type=jar",
      "dependsOn": [
        "pkg:maven/jakarta.activation/jakarta.activation-api@2.1.4?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.eclipse.angus/angus-activation@2.0.3?type=jar",
      "dependsOn": [
        "pkg:maven/jakarta.activation/jakarta.activation-api@2.1.4?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.github.ben-manes.caffeine/caffeine@3.3.1?type=jar",
      "dependsOn": [
        "pkg:maven/org.jspecify/jspecify@1.0.1?type=jar",
        "pkg:maven/com.google.errorprone/error_prone_annotations@2.50.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.apache.kafka/kafka-clients@4.4.0?type=jar",
      "dependsOn": [
        "pkg:maven/com.github.luben/zstd-jni@1.5.7-23?type=jar",
        "pkg:maven/org.xerial.snappy/snappy-java@1.1.10.8?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.20?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.github.luben/zstd-jni@1.5.7-23?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.xerial.snappy/snappy-java@1.1.10.8?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.dependencytrack/notification-templating@5.2.1?type=jar",
      "dependsOn": [
        "pkg:maven/com.github.ben-manes.caffeine/caffeine@3.3.1?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.1?type=jar",
        "pkg:maven/io.pebbletemplates/pebble@4.1.2?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java-util@4.36.2?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.pebbletemplates/pebble@4.1.2?type=jar",
      "dependsOn": [
        "pkg:maven/org.unbescape/unbescape@1.1.6.RELEASE?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.20?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.unbescape/unbescape@1.1.6.RELEASE?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.dependencytrack/plugin-api@5.2.1?type=jar",
      "dependsOn": [
        "pkg:maven/org.dependencytrack/cache-api@5.2.1?type=jar",
        "pkg:maven/org.dependencytrack/net-support@5.2.1?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/plugin-config@5.2.1?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.22.3?type=jar",
        "pkg:maven/com.networknt/json-schema-validator@2.0.8?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.20?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.networknt/json-schema-validator@2.0.8?type=jar",
      "dependsOn": [
        "pkg:maven/com.ethlo.time/itu@1.14.0?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.22.3?type=jar",
        "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.22.3?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.20?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.ethlo.time/itu@1.14.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.22.3?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.22.3?type=jar",
        "pkg:maven/org.yaml/snakeyaml@2.6?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.22.3?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.yaml/snakeyaml@2.6?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.dependencytrack/plugin-runtime@5.2.1?type=jar",
      "dependsOn": [
        "pkg:maven/org.dependencytrack/cache-api@5.2.1?type=jar",
        "pkg:maven/org.dependencytrack/common-config@5.2.1?type=jar",
        "pkg:maven/org.dependencytrack/plugin-config@5.2.1?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.22.3?type=jar",
        "pkg:maven/org.jdbi/jdbi3-core@3.55.0?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.1?type=jar",
        "pkg:maven/org.eclipse.microprofile.config/microprofile-config-api@3.1.2?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.20?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/common-config@5.2.1?type=jar",
      "dependsOn": [
        "pkg:maven/org.jspecify/jspecify@1.0.1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.20?type=jar",
        "pkg:maven/io.smallrye.config/smallrye-config-core@4.0.0?type=jar",
        "pkg:maven/org.dependencytrack/smallrye-config-secret-handler-file@5.2.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/smallrye-config-secret-handler-file@5.2.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.jdbi/jdbi3-core@3.55.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.slf4j/slf4j-api@2.0.20?type=jar",
        "pkg:maven/io.leangen.geantyref/geantyref@2.0.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.leangen.geantyref/geantyref@2.0.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.dependencytrack/proto@5.2.1?type=jar",
      "dependsOn": [
        "pkg:maven/org.dependencytrack/cyclonedx-proto@5.2.1?type=jar",
        "pkg:maven/org.dependencytrack/file-storage-api@5.2.1?type=jar",
        "pkg:maven/org.dependencytrack/notification-api@5.2.1?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java@4.36.2?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/cyclonedx-proto@5.2.1?type=jar",
      "dependsOn": [
        "pkg:maven/com.google.protobuf/protobuf-java@4.36.2?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/file-storage-api@5.2.1?type=jar",
      "dependsOn": [
        "pkg:maven/org.jspecify/jspecify@1.0.1?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java@4.36.2?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/secret-management@5.2.1?type=jar",
      "dependsOn": [
        "pkg:maven/org.dependencytrack/common-datasource@5.2.1?type=jar",
        "pkg:maven/org.dependencytrack/common-pagination@5.2.1?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.1?type=jar",
        "pkg:maven/org.postgresql/postgresql@42.7.14?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.20?type=jar",
        "pkg:maven/com.google.crypto.tink/tink@1.24.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.google.crypto.tink/tink@1.24.0?type=jar",
      "dependsOn": [
        "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
        "pkg:maven/com.google.code.gson/gson@2.14.0?type=jar",
        "pkg:maven/com.google.errorprone/error_prone_annotations@2.50.0?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java@4.36.2?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/vuln-analysis-api@5.2.1?type=jar",
      "dependsOn": [
        "pkg:maven/org.dependencytrack/cyclonedx-proto@5.2.1?type=jar",
        "pkg:maven/org.dependencytrack/net-support@5.2.1?type=jar",
        "pkg:maven/org.dependencytrack/plugin-api@5.2.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/vuln-analyzer-internal@5.2.1?type=jar",
      "dependsOn": [
        "pkg:maven/org.dependencytrack/jdbi-support@5.2.1?type=jar",
        "pkg:maven/org.dependencytrack/os-distro-metadata@5.2.1?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.22.3?type=jar",
        "pkg:maven/org.jdbi/jdbi3-core@3.55.0?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.20?type=jar",
        "pkg:maven/io.github.nscuro/versatile-core@0.26.1?type=jar",
        "pkg:maven/us.springett/cpe-parser@3.0.1?type=jar",
        "pkg:maven/com.github.package-url/packageurl-java@1.5.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/jdbi-support@5.2.1?type=jar",
      "dependsOn": [
        "pkg:maven/com.github.package-url/packageurl-java@1.5.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.github.package-url/packageurl-java@1.5.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.dependencytrack/os-distro-metadata@5.2.1?type=jar",
      "dependsOn": [
        "pkg:maven/us.springett/cpe-parser@3.0.1?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.1?type=jar",
        "pkg:maven/com.github.package-url/packageurl-java@1.5.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/us.springett/cpe-parser@3.0.1?type=jar",
      "dependsOn": [
        "pkg:maven/org.slf4j/slf4j-api@2.0.20?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.github.nscuro/versatile-core@0.26.1?type=jar",
      "dependsOn": [
        "pkg:maven/org.jspecify/jspecify@1.0.1?type=jar",
        "pkg:maven/org.apache.maven/maven-artifact@3.10.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.apache.maven/maven-artifact@3.10.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.codehaus.plexus/plexus-utils@3.6.2?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.codehaus.plexus/plexus-utils@3.6.2?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.dependencytrack/vuln-analyzer-checkmarx@5.2.1?type=jar",
      "dependsOn": [
        "pkg:maven/org.metaeffekt.core/ae-security@0.159.0?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.22.3?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.1?type=jar",
        "pkg:maven/com.github.package-url/packageurl-java@1.5.0?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java-util@4.36.2?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.20?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.metaeffekt.core/ae-security@0.159.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.apache.commons/commons-lang3@3.21.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.20?type=jar",
        "pkg:maven/org.slf4j/jcl-over-slf4j@2.0.20?type=jar",
        "pkg:maven/commons-io/commons-io@2.22.0?type=jar",
        "pkg:maven/org.json/json@20231013?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.apache.commons/commons-lang3@3.21.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.slf4j/jcl-over-slf4j@2.0.20?type=jar",
      "dependsOn": [
        "pkg:maven/org.slf4j/slf4j-api@2.0.20?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/commons-io/commons-io@2.22.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.json/json@20231013?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.dependencytrack/package-metadata-api@5.2.1?type=jar",
      "dependsOn": [
        "pkg:maven/org.dependencytrack/net-support@5.2.1?type=jar",
        "pkg:maven/org.dependencytrack/plugin-api@5.2.1?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.1?type=jar",
        "pkg:maven/com.github.package-url/packageurl-java@1.5.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/package-metadata-resolution@5.2.1?type=jar",
      "dependsOn": [
        "pkg:maven/org.dependencytrack/net-support@5.2.1?type=jar",
        "pkg:maven/org.brotli/dec@0.1.2?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.22.3?type=jar",
        "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.22.3?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java@4.36.2?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.1?type=jar",
        "pkg:maven/com.github.package-url/packageurl-java@1.5.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.20?type=jar",
        "pkg:maven/io.github.nscuro/versatile-core@0.26.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.brotli/dec@0.1.2?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.22.3?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.22?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.22.3?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.22.3?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/vuln-analyzer-oss-index@5.2.1?type=jar",
      "dependsOn": [
        "pkg:maven/org.metaeffekt.core/ae-security@0.159.0?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.22.3?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.1?type=jar",
        "pkg:maven/com.github.package-url/packageurl-java@1.5.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.20?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/vuln-analyzer-snyk@5.2.1?type=jar",
      "dependsOn": [
        "pkg:maven/org.metaeffekt.core/ae-security@0.159.0?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.22.3?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.1?type=jar",
        "pkg:maven/com.github.package-url/packageurl-java@1.5.0?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java-util@4.36.2?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.20?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/vuln-analyzer-trivy@5.2.1?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.22.3?type=jar",
        "pkg:maven/com.github.package-url/packageurl-java@1.5.0?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java@4.36.2?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java-util@4.36.2?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.20?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/vuln-analyzer-vuln-db@5.2.1?type=jar",
      "dependsOn": [
        "pkg:maven/org.metaeffekt.core/ae-security@0.159.0?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.22.3?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.20?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/dex-engine@5.2.1?type=jar",
      "dependsOn": [
        "pkg:maven/org.dependencytrack/dex-api@5.2.1?type=jar",
        "pkg:maven/org.dependencytrack/dex-engine-api@5.2.1?type=jar",
        "pkg:maven/org.dependencytrack/dex-engine-migration@5.2.1?type=jar",
        "pkg:maven/com.github.ben-manes.caffeine/caffeine@3.3.1?type=jar",
        "pkg:maven/com.fasterxml.uuid/java-uuid-generator@5.2.0?type=jar",
        "pkg:maven/org.jdbi/jdbi3-core@3.55.0?type=jar",
        "pkg:maven/org.jdbi/jdbi3-freemarker@3.55.0?type=jar",
        "pkg:maven/org.jdbi/jdbi3-jackson2@3.55.0?type=jar",
        "pkg:maven/org.jdbi/jdbi3-postgres@3.55.0?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.1?type=jar",
        "pkg:maven/io.micrometer/micrometer-core@1.17.1?type=jar",
        "pkg:maven/org.postgresql/postgresql@42.7.14?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java@4.36.2?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java-util@4.36.2?type=jar",
        "pkg:maven/io.github.resilience4j/resilience4j-circuitbreaker@2.4.0?type=jar",
        "pkg:maven/io.github.resilience4j/resilience4j-core@2.4.0?type=jar",
        "pkg:maven/io.github.resilience4j/resilience4j-micrometer@2.4.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.20?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/dex-api@5.2.1?type=jar",
      "dependsOn": [
        "pkg:maven/org.jspecify/jspecify@1.0.1?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java@4.36.2?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java-util@4.36.2?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.20?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/dex-engine-api@5.2.1?type=jar",
      "dependsOn": [
        "pkg:maven/org.dependencytrack/common-pagination@5.2.1?type=jar",
        "pkg:maven/org.dependencytrack/dex-api@5.2.1?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.1?type=jar",
        "pkg:maven/io.micrometer/micrometer-core@1.17.1?type=jar",
        "pkg:maven/org.eclipse.microprofile.health/microprofile-health-api@4.0.1?type=jar",
        "pkg:maven/io.github.resilience4j/resilience4j-core@2.4.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.github.resilience4j/resilience4j-core@2.4.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.slf4j/slf4j-api@2.0.20?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/dex-engine-migration@5.2.1?type=jar",
      "dependsOn": [
        "pkg:maven/org.dependencytrack/flyway-support@5.2.1?type=jar",
        "pkg:maven/org.flywaydb/flyway-database-postgresql@13.9.0?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.jdbi/jdbi3-freemarker@3.55.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.jdbi/jdbi3-core@3.55.0?type=jar",
        "pkg:maven/org.freemarker/freemarker@2.3.34?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.freemarker/freemarker@2.3.34?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.jdbi/jdbi3-jackson2@3.55.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.jdbi/jdbi3-core@3.55.0?type=jar",
        "pkg:maven/org.jdbi/jdbi3-json@3.55.0?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.22.3?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.22.3?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.22?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.jdbi/jdbi3-json@3.55.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.jdbi/jdbi3-core@3.55.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.jdbi/jdbi3-postgres@3.55.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.jdbi/jdbi3-core@3.55.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.github.resilience4j/resilience4j-circuitbreaker@2.4.0?type=jar",
      "dependsOn": [
        "pkg:maven/io.github.resilience4j/resilience4j-core@2.4.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.20?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.github.resilience4j/resilience4j-micrometer@2.4.0?type=jar",
      "dependsOn": [
        "pkg:maven/io.micrometer/micrometer-core@1.17.1?type=jar",
        "pkg:maven/io.micrometer/micrometer-observation@1.17.1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.20?type=jar",
        "pkg:maven/io.github.resilience4j/resilience4j-bulkhead@2.4.0?type=jar",
        "pkg:maven/io.github.resilience4j/resilience4j-circuitbreaker@2.4.0?type=jar",
        "pkg:maven/io.github.resilience4j/resilience4j-retry@2.4.0?type=jar",
        "pkg:maven/io.github.resilience4j/resilience4j-ratelimiter@2.4.0?type=jar",
        "pkg:maven/io.github.resilience4j/resilience4j-timelimiter@2.4.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.github.resilience4j/resilience4j-bulkhead@2.4.0?type=jar",
      "dependsOn": [
        "pkg:maven/io.github.resilience4j/resilience4j-core@2.4.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.20?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.github.resilience4j/resilience4j-retry@2.4.0?type=jar",
      "dependsOn": [
        "pkg:maven/io.github.resilience4j/resilience4j-core@2.4.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.20?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.github.resilience4j/resilience4j-ratelimiter@2.4.0?type=jar",
      "dependsOn": [
        "pkg:maven/io.github.resilience4j/resilience4j-core@2.4.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.20?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.github.resilience4j/resilience4j-timelimiter@2.4.0?type=jar",
      "dependsOn": [
        "pkg:maven/io.github.resilience4j/resilience4j-core@2.4.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.20?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/file-storage-provider-local@5.2.1?type=jar",
      "dependsOn": [
        "pkg:maven/com.github.luben/zstd-jni@1.5.7-23?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/file-storage-provider-memory@5.2.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.dependencytrack/file-storage-provider-s3@5.2.1?type=jar",
      "dependsOn": [
        "pkg:maven/io.minio/minio@9.0.3?type=jar",
        "pkg:maven/com.squareup.okhttp3/okhttp-jvm@5.5.0?type=jar",
        "pkg:maven/com.github.luben/zstd-jni@1.5.7-23?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.minio/minio@9.0.3?type=jar",
      "dependsOn": [
        "pkg:maven/com.carrotsearch.thirdparty/simple-xml-safe@2.7.1?type=jar",
        "pkg:maven/com.google.guava/guava@33.7.2-jre?type=jar",
        "pkg:maven/com.squareup.okhttp3/okhttp@5.3.2?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.22?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.22.3?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.22.3?type=jar",
        "pkg:maven/org.apache.commons/commons-compress@1.28.0?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.23.0?type=jar",
        "pkg:maven/org.xerial.snappy/snappy-java@1.1.10.8?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.carrotsearch.thirdparty/simple-xml-safe@2.7.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.google.guava/guava@33.7.2-jre?type=jar",
      "dependsOn": [
        "pkg:maven/com.google.guava/failureaccess@1.0.3?type=jar",
        "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.1?type=jar",
        "pkg:maven/com.google.errorprone/error_prone_annotations@2.50.0?type=jar",
        "pkg:maven/com.google.j2objc/j2objc-annotations@3.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.google.guava/failureaccess@1.0.3?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.google.j2objc/j2objc-annotations@3.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.squareup.okhttp3/okhttp@5.3.2?type=jar",
      "dependsOn": [
        "pkg:maven/org.jetbrains.kotlin/kotlin-stdlib@2.4.21?type=jar",
        "pkg:maven/com.squareup.okio/okio@3.16.4?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.jetbrains.kotlin/kotlin-stdlib@2.4.21?type=jar",
      "dependsOn": [
        "pkg:maven/org.jetbrains/annotations@13.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.jetbrains/annotations@13.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.squareup.okio/okio@3.16.4?type=jar",
      "dependsOn": [
        "pkg:maven/com.squareup.okio/okio-jvm@3.18.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.squareup.okio/okio-jvm@3.18.1?type=jar",
      "dependsOn": [
        "pkg:maven/org.jetbrains.kotlin/kotlin-stdlib@2.4.21?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.apache.commons/commons-compress@1.28.0?type=jar",
      "dependsOn": [
        "pkg:maven/commons-codec/commons-codec@1.23.0?type=jar",
        "pkg:maven/commons-io/commons-io@2.22.0?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.21.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/commons-codec/commons-codec@1.23.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.squareup.okhttp3/okhttp-jvm@5.5.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.jetbrains.kotlin/kotlin-stdlib@2.4.21?type=jar",
        "pkg:maven/com.squareup.okio/okio-jvm@3.18.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/kev-data-source-api@5.2.1?type=jar",
      "dependsOn": [
        "pkg:maven/org.dependencytrack/plugin-api@5.2.1?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.22.3?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/kev-data-source-builtin@5.2.1?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.22.3?type=jar",
        "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.22.3?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/vuln-data-source-api@5.2.1?type=jar",
      "dependsOn": [
        "pkg:maven/org.dependencytrack/plugin-api@5.2.1?type=jar",
        "pkg:maven/org.dependencytrack/cyclonedx-proto@5.2.1?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/vuln-data-source-github@5.2.1?type=jar",
      "dependsOn": [
        "pkg:maven/org.apache.commons/commons-lang3@3.21.0?type=jar",
        "pkg:maven/org.metaeffekt.core/ae-security@0.159.0?type=jar",
        "pkg:maven/org.apache.httpcomponents.client5/httpclient5@5.6.5?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.22?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.22.3?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.1?type=jar",
        "pkg:maven/io.github.jeremylong/open-vulnerability-clients@9.0.7?type=jar",
        "pkg:maven/com.github.package-url/packageurl-java@1.5.0?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java-util@4.36.2?type=jar",
        "pkg:maven/io.github.nscuro/versatile-core@0.26.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.apache.httpcomponents.client5/httpclient5@5.6.5?type=jar",
      "dependsOn": [
        "pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.4.4?type=jar",
        "pkg:maven/org.apache.httpcomponents.core5/httpcore5-h2@5.4.4?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.20?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.4.4?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.apache.httpcomponents.core5/httpcore5-h2@5.4.4?type=jar",
      "dependsOn": [
        "pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.4.4?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.github.jeremylong/open-vulnerability-clients@9.0.7?type=jar",
      "dependsOn": [
        "pkg:maven/org.jspecify/jspecify@1.0.1?type=jar",
        "pkg:maven/org.apache.httpcomponents.client5/httpclient5@5.6.5?type=jar",
        "pkg:maven/org.apache.httpcomponents.client5/httpclient5-cache@5.6.4?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.22.3?type=jar",
        "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.22.3?type=jar",
        "pkg:maven/com.samskivert/jmustache@1.16?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.apache.httpcomponents.client5/httpclient5-cache@5.6.4?type=jar",
      "dependsOn": [
        "pkg:maven/org.apache.httpcomponents.client5/httpclient5@5.6.5?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.20?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.samskivert/jmustache@1.16?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.dependencytrack/vuln-data-source-jvn@5.2.1?type=jar",
      "dependsOn": [
        "pkg:maven/us.springett/cpe-parser@3.0.1?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.22?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java-util@4.36.2?type=jar",
        "pkg:maven/io.github.nscuro/versatile-core@0.26.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/vuln-data-source-nvd@5.2.1?type=jar",
      "dependsOn": [
        "pkg:maven/us.springett/cpe-parser@3.0.1?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.22.3?type=jar",
        "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.22.3?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.1?type=jar",
        "pkg:maven/io.github.jeremylong/open-vulnerability-clients@9.0.7?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java-util@4.36.2?type=jar",
        "pkg:maven/io.github.nscuro/versatile-core@0.26.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/vuln-data-source-osv@5.2.1?type=jar",
      "dependsOn": [
        "pkg:maven/org.dependencytrack/os-distro-metadata@5.2.1?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.21.0?type=jar",
        "pkg:maven/org.metaeffekt.core/ae-security@0.159.0?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.22.3?type=jar",
        "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.22.3?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.1?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java-util@4.36.2?type=jar",
        "pkg:maven/io.github.nscuro/versatile-core@0.26.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/alpine-common@5.2.1?type=jar",
      "dependsOn": [
        "pkg:maven/org.dependencytrack/common-config@5.2.1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.20?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.22?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/alpine-model@5.2.1?type=jar",
      "dependsOn": [
        "pkg:maven/org.dependencytrack/alpine-common@5.2.1?type=jar",
        "pkg:maven/org.datanucleus/datanucleus-api-jdo@6.0.5?type=jar",
        "pkg:maven/org.datanucleus/datanucleus-core@6.0.11?type=jar",
        "pkg:maven/org.datanucleus/javax.jdo@3.2.1?type=jar",
        "pkg:maven/org.glassfish.jersey.ext/jersey-bean-validation@4.0.3?type=jar",
        "pkg:maven/io.swagger.core.v3/swagger-annotations-jakarta@2.2.55?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.datanucleus/datanucleus-api-jdo@6.0.5?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.datanucleus/datanucleus-core@6.0.11?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.datanucleus/javax.jdo@3.2.1?type=jar",
      "dependsOn": [
        "pkg:maven/javax.transaction/javax.transaction-api@1.3?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/javax.transaction/javax.transaction-api@1.3?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.glassfish.jersey.ext/jersey-bean-validation@4.0.3?type=jar",
      "dependsOn": [
        "pkg:maven/jakarta.inject/jakarta.inject-api@2.0.1?type=jar",
        "pkg:maven/org.glassfish.jersey.core/jersey-common@4.0.3?type=jar",
        "pkg:maven/org.glassfish.jersey.core/jersey-server@4.0.3?type=jar",
        "pkg:maven/jakarta.validation/jakarta.validation-api@3.1.1?type=jar",
        "pkg:maven/org.hibernate.validator/hibernate-validator@8.0.5.Final?type=jar",
        "pkg:maven/org.jboss.logging/jboss-logging@3.6.3.Final?type=jar",
        "pkg:maven/jakarta.el/jakarta.el-api@6.0.1?type=jar",
        "pkg:maven/org.glassfish.expressly/expressly@5.0.0?type=jar",
        "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@4.0.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/jakarta.inject/jakarta.inject-api@2.0.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.glassfish.jersey.core/jersey-common@4.0.3?type=jar",
      "dependsOn": [
        "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@4.0.0?type=jar",
        "pkg:maven/jakarta.annotation/jakarta.annotation-api@3.0.0?type=jar",
        "pkg:maven/jakarta.inject/jakarta.inject-api@2.0.1?type=jar",
        "pkg:maven/org.glassfish.hk2/osgi-resource-locator@3.0.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@4.0.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.glassfish.hk2/osgi-resource-locator@3.0.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.glassfish.jersey.core/jersey-server@4.0.3?type=jar",
      "dependsOn": [
        "pkg:maven/org.glassfish.jersey.core/jersey-common@4.0.3?type=jar",
        "pkg:maven/org.glassfish.jersey.core/jersey-client@4.0.3?type=jar",
        "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@4.0.0?type=jar",
        "pkg:maven/jakarta.annotation/jakarta.annotation-api@3.0.0?type=jar",
        "pkg:maven/jakarta.inject/jakarta.inject-api@2.0.1?type=jar",
        "pkg:maven/jakarta.validation/jakarta.validation-api@3.1.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.glassfish.jersey.core/jersey-client@4.0.3?type=jar",
      "dependsOn": [
        "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@4.0.0?type=jar",
        "pkg:maven/org.glassfish.jersey.core/jersey-common@4.0.3?type=jar",
        "pkg:maven/jakarta.inject/jakarta.inject-api@2.0.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/jakarta.validation/jakarta.validation-api@3.1.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.hibernate.validator/hibernate-validator@8.0.5.Final?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml/classmate@1.5.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.fasterxml/classmate@1.5.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/jakarta.el/jakarta.el-api@6.0.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.glassfish.expressly/expressly@5.0.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/io.swagger.core.v3/swagger-annotations-jakarta@2.2.55?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.dependencytrack/alpine-infra@5.2.1?type=jar",
      "dependsOn": [
        "pkg:maven/org.dependencytrack/alpine-common@5.2.1?type=jar",
        "pkg:maven/org.dependencytrack/alpine-model@5.2.1?type=jar",
        "pkg:maven/org.dependencytrack/common-pagination@5.2.1?type=jar",
        "pkg:maven/io.micrometer/micrometer-core@1.17.1?type=jar",
        "pkg:maven/org.datanucleus/javax.jdo@3.2.1?type=jar",
        "pkg:maven/org.datanucleus/datanucleus-api-jdo@6.0.5?type=jar",
        "pkg:maven/org.datanucleus/datanucleus-core@6.0.11?type=jar",
        "pkg:maven/org.datanucleus/datanucleus-rdbms@6.0.11?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.datanucleus/datanucleus-rdbms@6.0.11?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.dependencytrack/alpine-server@5.2.1?type=jar",
      "dependsOn": [
        "pkg:maven/org.dependencytrack/common-datasource@5.2.1?type=jar",
        "pkg:maven/org.dependencytrack/alpine-common@5.2.1?type=jar",
        "pkg:maven/org.dependencytrack/alpine-infra@5.2.1?type=jar",
        "pkg:maven/org.dependencytrack/alpine-model@5.2.1?type=jar",
        "pkg:maven/org.glassfish.jersey.containers/jersey-container-servlet@4.0.3?type=jar",
        "pkg:maven/org.glassfish.jersey.media/jersey-media-json-jackson@4.0.3?type=jar",
        "pkg:maven/org.glassfish.jersey.media/jersey-media-multipart@4.0.3?type=jar",
        "pkg:maven/org.glassfish.jersey.ext/jersey-bean-validation@4.0.3?type=jar",
        "pkg:maven/org.glassfish.jersey.inject/jersey-hk2@4.0.3?type=jar",
        "pkg:maven/jakarta.json/jakarta.json-api@2.1.3?type=jar",
        "pkg:maven/org.eclipse.parsson/jakarta.json@1.1.9?type=jar",
        "pkg:maven/io.swagger.core.v3/swagger-annotations-jakarta@2.2.55?type=jar",
        "pkg:maven/org.datanucleus/javax.jdo@3.2.1?type=jar",
        "pkg:maven/org.datanucleus/datanucleus-api-jdo@6.0.5?type=jar",
        "pkg:maven/org.datanucleus/datanucleus-core@6.0.11?type=jar",
        "pkg:maven/org.datanucleus/datanucleus-rdbms@6.0.11?type=jar",
        "pkg:maven/com.zaxxer/HikariCP@7.1.0?type=jar",
        "pkg:maven/org.mindrot/jbcrypt@0.4?type=jar",
        "pkg:maven/com.nimbusds/oauth2-oidc-sdk@11.38.2?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.22.3?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.22?type=jar",
        "pkg:maven/com.fasterxml.jackson.jakarta.rs/jackson-jakarta-rs-base@2.22.3?type=jar",
        "pkg:maven/com.fasterxml.jackson.jakarta.rs/jackson-jakarta-rs-json-provider@2.22.3?type=jar",
        "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8@2.22.3?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.20?type=jar",
        "pkg:maven/ch.qos.logback/logback-classic@1.6.5?type=jar",
        "pkg:maven/ch.qos.logback/logback-core@1.6.5?type=jar",
        "pkg:maven/org.owasp/security-logging-common@1.1.7?type=jar",
        "pkg:maven/org.owasp/security-logging-logback@1.1.7?type=jar",
        "pkg:maven/net.logstash.logback/logstash-logback-encoder@8.1?type=jar",
        "pkg:maven/org.eclipse.microprofile.health/microprofile-health-api@4.0.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.glassfish.jersey.containers/jersey-container-servlet@4.0.3?type=jar",
      "dependsOn": [
        "pkg:maven/jakarta.inject/jakarta.inject-api@2.0.1?type=jar",
        "pkg:maven/org.glassfish.jersey.core/jersey-common@4.0.3?type=jar",
        "pkg:maven/org.glassfish.jersey.core/jersey-server@4.0.3?type=jar",
        "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@4.0.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.glassfish.jersey.media/jersey-media-json-jackson@4.0.3?type=jar",
      "dependsOn": [
        "pkg:maven/org.glassfish.jersey.core/jersey-common@4.0.3?type=jar",
        "pkg:maven/org.glassfish.jersey.ext/jersey-entity-filtering@4.0.3?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.22?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.22.3?type=jar",
        "pkg:maven/com.fasterxml.jackson.module/jackson-module-jakarta-xmlbind-annotations@2.22.3?type=jar",
        "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@4.0.5?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.glassfish.jersey.ext/jersey-entity-filtering@4.0.3?type=jar",
      "dependsOn": [
        "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@4.0.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.fasterxml.jackson.module/jackson-module-jakarta-xmlbind-annotations@2.22.3?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.22.3?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.22.3?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@4.0.5?type=jar",
      "dependsOn": [
        "pkg:maven/jakarta.activation/jakarta.activation-api@2.1.4?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.glassfish.jersey.media/jersey-media-multipart@4.0.3?type=jar",
      "dependsOn": [
        "pkg:maven/org.glassfish.jersey.core/jersey-common@4.0.3?type=jar",
        "pkg:maven/org.jvnet.mimepull/mimepull@1.11.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.jvnet.mimepull/mimepull@1.11.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.glassfish.jersey.inject/jersey-hk2@4.0.3?type=jar",
      "dependsOn": [
        "pkg:maven/org.glassfish.jersey.core/jersey-common@4.0.3?type=jar",
        "pkg:maven/org.glassfish.hk2/hk2-locator@4.0.3?type=jar",
        "pkg:maven/org.javassist/javassist@3.33.0-GA?type=jar",
        "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@4.0.5?type=jar",
        "pkg:maven/jakarta.annotation/jakarta.annotation-api@3.0.0?type=jar",
        "pkg:maven/jakarta.activation/jakarta.activation-api@2.1.4?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.glassfish.hk2/hk2-locator@4.0.3?type=jar",
      "dependsOn": [
        "pkg:maven/org.glassfish.hk2.external/aopalliance-repackaged@4.0.3?type=jar",
        "pkg:maven/org.glassfish.hk2/hk2-api@4.0.3?type=jar",
        "pkg:maven/org.glassfish.hk2/hk2-utils@4.0.3?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.glassfish.hk2.external/aopalliance-repackaged@4.0.3?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.glassfish.hk2/hk2-api@4.0.3?type=jar",
      "dependsOn": [
        "pkg:maven/org.glassfish.hk2/hk2-utils@4.0.3?type=jar",
        "pkg:maven/org.glassfish.hk2.external/aopalliance-repackaged@4.0.3?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.glassfish.hk2/hk2-utils@4.0.3?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.javassist/javassist@3.33.0-GA?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/jakarta.json/jakarta.json-api@2.1.3?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.eclipse.parsson/jakarta.json@1.1.9?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.mindrot/jbcrypt@0.4?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.nimbusds/oauth2-oidc-sdk@11.38.2?type=jar",
      "dependsOn": [
        "pkg:maven/com.github.stephenc.jcip/jcip-annotations@1.0-1?type=jar",
        "pkg:maven/com.nimbusds/content-type@2.3?type=jar",
        "pkg:maven/net.minidev/json-smart@2.6.0?type=jar",
        "pkg:maven/com.nimbusds/lang-tag@1.7?type=jar",
        "pkg:maven/com.nimbusds/nimbus-jose-jwt@10.9.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.github.stephenc.jcip/jcip-annotations@1.0-1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.nimbusds/content-type@2.3?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/net.minidev/json-smart@2.6.0?type=jar",
      "dependsOn": [
        "pkg:maven/net.minidev/accessors-smart@2.6.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/net.minidev/accessors-smart@2.6.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.ow2.asm/asm@9.10.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.nimbusds/lang-tag@1.7?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.nimbusds/nimbus-jose-jwt@10.9.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.fasterxml.jackson.jakarta.rs/jackson-jakarta-rs-base@2.22.3?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.22.3?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.22.3?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.fasterxml.jackson.jakarta.rs/jackson-jakarta-rs-json-provider@2.22.3?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml.jackson.jakarta.rs/jackson-jakarta-rs-base@2.22.3?type=jar",
        "pkg:maven/com.fasterxml.jackson.module/jackson-module-jakarta-xmlbind-annotations@2.22.3?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8@2.22.3?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.22.3?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.22.3?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/ch.qos.logback/logback-classic@1.6.5?type=jar",
      "dependsOn": [
        "pkg:maven/ch.qos.logback/logback-core@1.6.5?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.20?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/ch.qos.logback/logback-core@1.6.5?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.owasp/security-logging-common@1.1.7?type=jar",
      "dependsOn": [
        "pkg:maven/org.slf4j/slf4j-api@2.0.20?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.owasp/security-logging-logback@1.1.7?type=jar",
      "dependsOn": [
        "pkg:maven/org.owasp/security-logging-common@1.1.7?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.20?type=jar",
        "pkg:maven/ch.qos.logback/logback-classic@1.6.5?type=jar",
        "pkg:maven/ch.qos.logback/logback-core@1.6.5?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.23.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/net.logstash.logback/logstash-logback-encoder@8.1?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.22.3?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/dev.cel/cel@0.14.0?type=jar",
      "dependsOn": [
        "pkg:maven/com.google.auto.value/auto-value-annotations@1.11.1?type=jar",
        "pkg:maven/com.google.guava/guava@33.7.2-jre?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java@4.36.2?type=jar",
        "pkg:maven/com.google.re2j/re2j@1.8?type=jar",
        "pkg:maven/dev.cel/common@0.14.0?type=jar",
        "pkg:maven/dev.cel/compiler@0.14.0?type=jar",
        "pkg:maven/dev.cel/protobuf@0.14.0?type=jar",
        "pkg:maven/dev.cel/runtime@0.14.0?type=jar",
        "pkg:maven/dev.cel/v1alpha1@0.14.0?type=jar",
        "pkg:maven/org.antlr/antlr4-runtime@4.13.2?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.1?type=jar",
        "pkg:maven/org.threeten/threeten-extra@1.10.0?type=jar",
        "pkg:maven/org.yaml/snakeyaml@2.6?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.google.auto.value/auto-value-annotations@1.11.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.google.re2j/re2j@1.8?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/dev.cel/common@0.14.0?type=jar",
      "dependsOn": [
        "pkg:maven/com.google.auto.value/auto-value-annotations@1.11.1?type=jar",
        "pkg:maven/com.google.guava/guava@33.7.2-jre?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java@4.36.2?type=jar",
        "pkg:maven/com.google.re2j/re2j@1.8?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/dev.cel/compiler@0.14.0?type=jar",
      "dependsOn": [
        "pkg:maven/com.google.auto.value/auto-value-annotations@1.11.1?type=jar",
        "pkg:maven/com.google.guava/guava@33.7.2-jre?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java@4.36.2?type=jar",
        "pkg:maven/com.google.re2j/re2j@1.8?type=jar",
        "pkg:maven/dev.cel/common@0.14.0?type=jar",
        "pkg:maven/dev.cel/protobuf@0.14.0?type=jar",
        "pkg:maven/org.antlr/antlr4-runtime@4.13.2?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/dev.cel/protobuf@0.14.0?type=jar",
      "dependsOn": [
        "pkg:maven/com.google.auto.value/auto-value-annotations@1.11.1?type=jar",
        "pkg:maven/com.google.guava/guava@33.7.2-jre?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java@4.36.2?type=jar",
        "pkg:maven/dev.cel/common@0.14.0?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.antlr/antlr4-runtime@4.13.2?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/dev.cel/runtime@0.14.0?type=jar",
      "dependsOn": [
        "pkg:maven/com.google.auto.value/auto-value-annotations@1.11.1?type=jar",
        "pkg:maven/com.google.guava/guava@33.7.2-jre?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java@4.36.2?type=jar",
        "pkg:maven/com.google.re2j/re2j@1.8?type=jar",
        "pkg:maven/dev.cel/common@0.14.0?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.1?type=jar",
        "pkg:maven/org.threeten/threeten-extra@1.10.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.threeten/threeten-extra@1.10.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/dev.cel/v1alpha1@0.14.0?type=jar",
      "dependsOn": [
        "pkg:maven/com.google.auto.value/auto-value-annotations@1.11.1?type=jar",
        "pkg:maven/com.google.guava/guava@33.7.2-jre?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java@4.36.2?type=jar",
        "pkg:maven/dev.cel/common@0.14.0?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.github.kagkarlsson/db-scheduler@16.12.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.slf4j/slf4j-api@2.0.20?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.jdbi/jdbi3-sqlobject@3.55.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.jdbi/jdbi3-core@3.55.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.glassfish.jersey.ext/jersey-micrometer@4.0.3?type=jar",
      "dependsOn": [
        "pkg:maven/io.micrometer/micrometer-core@1.17.1?type=jar",
        "pkg:maven/org.glassfish.jersey.core/jersey-common@4.0.3?type=jar",
        "pkg:maven/org.glassfish.jersey.core/jersey-server@4.0.3?type=jar",
        "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@4.0.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/us.springett/owasp-risk-rating-calculator@1.0.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.cyclonedx/cyclonedx-core-java@13.4.0?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.22.3?type=jar",
        "pkg:maven/com.networknt/json-schema-validator@2.0.8?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.22.3?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.22.3?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.22?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.22.3?type=jar",
        "pkg:maven/org.codehaus.woodstox/stax2-api@4.3.1?type=jar",
        "pkg:maven/com.fasterxml.woodstox/woodstox-core@7.3.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.codehaus.woodstox/stax2-api@4.3.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.fasterxml.woodstox/woodstox-core@7.3.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.codehaus.woodstox/stax2-api@4.3.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/jakarta.servlet/jakarta.servlet-api@6.1.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.eclipse.jetty/jetty-server@12.1.14?type=jar",
      "dependsOn": [
        "pkg:maven/org.eclipse.jetty/jetty-http@12.1.14?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-io@12.1.14?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.20?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.eclipse.jetty/jetty-http@12.1.14?type=jar",
      "dependsOn": [
        "pkg:maven/org.eclipse.jetty/jetty-io@12.1.14?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-util@12.1.14?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.20?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.eclipse.jetty/jetty-io@12.1.14?type=jar",
      "dependsOn": [
        "pkg:maven/org.eclipse.jetty/jetty-util@12.1.14?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.20?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.eclipse.jetty/jetty-util@12.1.14?type=jar",
      "dependsOn": [
        "pkg:maven/org.slf4j/slf4j-api@2.0.20?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.eclipse.jetty.compression/jetty-compression-gzip@12.1.14?type=jar",
      "dependsOn": [
        "pkg:maven/org.eclipse.jetty.compression/jetty-compression-common@12.1.14?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.eclipse.jetty.compression/jetty-compression-common@12.1.14?type=jar",
      "dependsOn": [
        "pkg:maven/org.eclipse.jetty/jetty-http@12.1.14?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-io@12.1.14?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-util@12.1.14?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.eclipse.jetty.compression/jetty-compression-zstandard@12.1.14?type=jar",
      "dependsOn": [
        "pkg:maven/com.github.luben/zstd-jni@1.5.7-23?type=jar",
        "pkg:maven/org.eclipse.jetty.compression/jetty-compression-common@12.1.14?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.eclipse.jetty.compression/jetty-compression-server@12.1.14?type=jar",
      "dependsOn": [
        "pkg:maven/org.eclipse.jetty/jetty-server@12.1.14?type=jar",
        "pkg:maven/org.eclipse.jetty.compression/jetty-compression-common@12.1.14?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.eclipse.jetty.ee11/jetty-ee11-servlet@12.1.14?type=jar",
      "dependsOn": [
        "pkg:maven/jakarta.servlet/jakarta.servlet-api@6.1.0?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-security@12.1.14?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-server@12.1.14?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-session@12.1.14?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.20?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.eclipse.jetty/jetty-security@12.1.14?type=jar",
      "dependsOn": [
        "pkg:maven/org.eclipse.jetty/jetty-server@12.1.14?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.20?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.eclipse.jetty/jetty-session@12.1.14?type=jar",
      "dependsOn": [
        "pkg:maven/org.eclipse.jetty/jetty-server@12.1.14?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.20?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.slf4j/jul-to-slf4j@2.0.20?type=jar",
      "dependsOn": [
        "pkg:maven/org.slf4j/slf4j-api@2.0.20?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.asahaf.javacron/javacron@1.4.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/io.micrometer/micrometer-java11@1.17.1?type=jar",
      "dependsOn": [
        "pkg:maven/org.jspecify/jspecify@1.0.1?type=jar",
        "pkg:maven/io.micrometer/micrometer-core@1.17.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.micrometer/micrometer-registry-prometheus@1.17.1?type=jar",
      "dependsOn": [
        "pkg:maven/org.jspecify/jspecify@1.0.1?type=jar",
        "pkg:maven/io.micrometer/micrometer-core@1.17.1?type=jar",
        "pkg:maven/io.prometheus/prometheus-metrics-core@1.10.0?type=jar",
        "pkg:maven/io.prometheus/prometheus-metrics-tracer-common@1.10.0?type=jar",
        "pkg:maven/io.prometheus/prometheus-metrics-exposition-formats@1.10.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.prometheus/prometheus-metrics-core@1.10.0?type=jar",
      "dependsOn": [
        "pkg:maven/io.prometheus/prometheus-metrics-model@1.10.0?type=jar",
        "pkg:maven/io.prometheus/prometheus-metrics-config@1.10.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.prometheus/prometheus-metrics-model@1.10.0?type=jar",
      "dependsOn": [
        "pkg:maven/io.prometheus/prometheus-metrics-config@1.10.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.prometheus/prometheus-metrics-config@1.10.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/io.prometheus/prometheus-metrics-tracer-common@1.10.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/io.prometheus/prometheus-metrics-exposition-formats@1.10.0?type=jar",
      "dependsOn": [
        "pkg:maven/io.prometheus/prometheus-metrics-exposition-textformats@1.10.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.prometheus/prometheus-metrics-exposition-textformats@1.10.0?type=jar",
      "dependsOn": [
        "pkg:maven/io.prometheus/prometheus-metrics-model@1.10.0?type=jar",
        "pkg:maven/io.prometheus/prometheus-metrics-config@1.10.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.github.mweirauch/micrometer-jvm-extras@0.3.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.slf4j/slf4j-api@2.0.20?type=jar"
      ]
    }
  ]
}