{
  "bomFormat" : "CycloneDX",
  "specVersion" : "1.6",
  "serialNumber" : "urn:uuid:7ceac913-aae5-3cc8-93ad-80c2049db868",
  "version" : 1,
  "metadata" : {
    "lifecycles" : [
      {
        "phase" : "build"
      }
    ],
    "tools" : {
      "components" : [
        {
          "type" : "library",
          "author" : "OWASP Foundation",
          "group" : "org.cyclonedx",
          "name" : "cyclonedx-maven-plugin",
          "version" : "2.9.3",
          "description" : "CycloneDX Maven plugin",
          "hashes" : [
            {
              "alg" : "MD5",
              "content" : "e7c87ab327b65b23c681fc9dc8bb620b"
            },
            {
              "alg" : "SHA-1",
              "content" : "fa3f0f04f4d5077b5e085d4d09aa2e68aeba5260"
            },
            {
              "alg" : "SHA-256",
              "content" : "c452d5eebe28bc86bef2e7c72d129f04f60877bef843eac8120f01fb655be293"
            },
            {
              "alg" : "SHA-512",
              "content" : "ec0344ed2ffe62d565aaf936a37140d04c7fffa8669a666be0366cd44eec3195232d79841cdec47030b79068216ac7e1a8c805255758e3d418dae32a4b9b9beb"
            },
            {
              "alg" : "SHA-384",
              "content" : "3df26b2a00d87fe090851975ebcc30217f98634e7c47d07128e148f325ebfe3bc0790b2f52ad4591734b7b0de738f003"
            },
            {
              "alg" : "SHA3-384",
              "content" : "470c1b4962379b5b6494c75bd1475da3519bbe2543999c95f26b4021164d3d05419b0c3f704443162fe5433a204250e9"
            },
            {
              "alg" : "SHA3-256",
              "content" : "900e9c4edb18940ed3c4a4ba6946957fa613ef0d4b0c380551638f229206373c"
            },
            {
              "alg" : "SHA3-512",
              "content" : "5e36433e18ae24f7460902da27818874df5d1d73df1a97e49e7369335f7cc61ca595466a2d37789fba7eaa7f7f251b29216c3d7a78910b2ec38e2ed68ea84876"
            }
          ]
        }
      ]
    },
    "component" : {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.rat/apache-rat-core-tests@0.19-SNAPSHOT?type=jar",
      "publisher" : "Apache Software Foundation",
      "group" : "org.apache.rat",
      "name" : "apache-rat-core-tests",
      "version" : "0.19-SNAPSHOT",
      "description" : "The test code for the core functionality of RAT that is used by all clients.",
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.rat/apache-rat-core-tests@0.19-SNAPSHOT?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://creadur.apache.org/rat/apache-rat-core-tests/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-builds.apache.org/job/Creadur/job/Creadur-Rat/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/RAT"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/creadur-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=creadur-rat.git/apache-rat-core-tests"
        }
      ]
    },
    "properties" : [
      {
        "name" : "maven.goal",
        "value" : "makeBom"
      },
      {
        "name" : "maven.scopes",
        "value" : "compile,provided,runtime,system"
      },
      {
        "name" : "cdx:reproducible",
        "value" : "enabled"
      }
    ]
  },
  "components" : [
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.reflections/reflections@0.10.2?type=jar",
      "group" : "org.reflections",
      "name" : "reflections",
      "version" : "0.10.2",
      "description" : "Reflections - Java runtime metadata analysis",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1d0070839d825f57fe6f4d8e2a82989b"
        },
        {
          "alg" : "SHA-1",
          "content" : "b638d7ca0e0fe0146b60a0e7ba232ad852a73b31"
        },
        {
          "alg" : "SHA-256",
          "content" : "938a2d08fe54050d7610b944d8ddc3a09355710d9e6be0aac838dbc04e9a2825"
        },
        {
          "alg" : "SHA-512",
          "content" : "d04700d4b6d3f28faa611e10ce863df1d6c82dfc6dd1b27cb910e44c19089ca08bef939e2bca7bc79274836f8e9d8801c4326232d24a38dba0a4893a20c7c42c"
        },
        {
          "alg" : "SHA-384",
          "content" : "2604ea7e2330b2c60dbc4177076b50b28a056083fe34cca9005b63f7efbba4d8513d1f21b56c296a73292b2003ce1722"
        },
        {
          "alg" : "SHA3-384",
          "content" : "7b5b12126cc3efb23335cdf73e01b19d714c17072038dc03534f1f596f2cdbe4b8d224e806326b1e7bd82a1eaf221a54"
        },
        {
          "alg" : "SHA3-256",
          "content" : "b1c978e8eb1bc3826d310deba7adfd02f0a90978dcd67867aa3f373a196e4caf"
        },
        {
          "alg" : "SHA3-512",
          "content" : "023c9a40f84b7f822f6d62f6a6ea3fc09ebcd489916085cb501818cd2c6af69e2561b2217c6d5d2cb8d99d87399343df2f863aa919e80d0a49502a5362f8744c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "WTFPL",
            "url" : "http://www.wtfpl.net/about/"
          }
        },
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.reflections/reflections@0.10.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://github.com/ronmamo/reflections"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/ronmamo/reflections/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/ronmamo/reflections/issues"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.javassist/javassist@3.28.0-GA?type=jar",
      "publisher" : "Shigeru Chiba, www.javassist.org",
      "group" : "org.javassist",
      "name" : "javassist",
      "version" : "3.28.0-GA",
      "description" : "Javassist (JAVA programming ASSISTant) makes Java bytecode manipulation simple. It is a class library for editing bytecodes in Java.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1a2dd8c76321cef26cc2669fe70a2557"
        },
        {
          "alg" : "SHA-1",
          "content" : "9a958811a88381bb159cc2f5ed79c34a45c4af7a"
        },
        {
          "alg" : "SHA-256",
          "content" : "57d0a9e9286f82f4eaa851125186997f811befce0e2060ff0a15a77f5a9dd9a7"
        },
        {
          "alg" : "SHA-512",
          "content" : "49d3109104f01efda1ae8a6145fdb91d1b1331587e2981f6cc1a1b991c50af97e8febfea5d9d224a106cab877c1e4850d183eb3c7316b82e62e51b6ca3fc29e8"
        },
        {
          "alg" : "SHA-384",
          "content" : "b71fc9564c478edebbf19b4044bb9cfb80996f779685d79f6a779d98ce3823b5aa234b91b9da35317ebf4534e1e65a31"
        },
        {
          "alg" : "SHA3-384",
          "content" : "bd7f7f52a05aebf17286e7101cafdcb19eb52f14731ce9ad287c07a14f676a8bbba78238e636d2ff5585a90f02f57b82"
        },
        {
          "alg" : "SHA3-256",
          "content" : "bf8cbfa03a6c53bb8aad510a7c6623d5e28f8189295f0dc2a0998993ca8df0d7"
        },
        {
          "alg" : "SHA3-512",
          "content" : "30a7c36e4b4089a5586dd0cb0f8cba1260fbed95e221bd623a66b1d07ff9565227d31c0fd0d131cda9d97483441f08e619aa8bbc758c0df66f3345da7b5adf68"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MPL-1.1"
          }
        },
        {
          "license" : {
            "id" : "LGPL-2.1-only"
          }
        },
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.javassist/javassist@3.28.0-GA?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.javassist.org/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.jboss.org/nexus/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://jira.jboss.org/jira/browse/JASSIST/"
        },
        {
          "type" : "vcs",
          "url" : "scm:git:git@github.com:jboss-javassist/javassist.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
      "group" : "com.google.code.findbugs",
      "name" : "jsr305",
      "version" : "3.0.2",
      "description" : "JSR305 Annotations for Findbugs",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "dd83accb899363c32b07d7a1b2e4ce40"
        },
        {
          "alg" : "SHA-1",
          "content" : "25ea2e8b0c338a877313bd4672d3fe056ea78f0d"
        },
        {
          "alg" : "SHA-256",
          "content" : "766ad2a0783f2687962c8ad74ceecc38a28b9f72a2d085ee438b7813e928d0c7"
        },
        {
          "alg" : "SHA-512",
          "content" : "bb09db62919a50fa5b55906013be6ca4fc7acb2e87455fac5eaf9ede2e41ce8bbafc0e5a385a561264ea4cd71bbbd3ef5a45e02d63277a201d06a0ae1636f804"
        },
        {
          "alg" : "SHA-384",
          "content" : "ca0b169d3eb2d0922dc031133a021f861a043bb3e405a88728215fd6ff00fa52fdc7347842dcc2031472e3726164bdc4"
        },
        {
          "alg" : "SHA3-384",
          "content" : "9903fd7505218999f8262efedb3d935d64bcef84aae781064ab5e1b24755466b269517cada562fa140cd1d417ede57a1"
        },
        {
          "alg" : "SHA3-256",
          "content" : "223fda9a89a461afaae73b177a2dc20ed4a90f2f8757f5c65f3241b0510f00ff"
        },
        {
          "alg" : "SHA3-512",
          "content" : "3996b5af57a5d5c6a0cd62b11773360fb051dd86a2ba968476806a2a5d32049b82d69a24a3c694e8fe4d735be6a28e41000cc500cc2a9fb577e058045855d2d6"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://findbugs.sourceforge.net/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://code.google.com/p/jsr-305/"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.32?type=jar",
      "publisher" : "QOS.ch",
      "group" : "org.slf4j",
      "name" : "slf4j-api",
      "version" : "1.7.32",
      "description" : "The slf4j API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "fbcf58513bc25b80f075d812aad3e3cf"
        },
        {
          "alg" : "SHA-1",
          "content" : "cdcff33940d9f2de763bc41ea05a0be5941176c3"
        },
        {
          "alg" : "SHA-256",
          "content" : "3624f8474c1af46d75f98bc097d7864a323c81b3808aa43689a6e1c601c027be"
        },
        {
          "alg" : "SHA-512",
          "content" : "4ca4045775a879c3ce3021908db7b4778235a322fd8e2567da960156f24b9da86e6812a4956c8dc19920cd83e4c61141168c580829f43f10bbac925d465c3fd1"
        },
        {
          "alg" : "SHA-384",
          "content" : "c95aa5a652533b3b54e721b7f20c4ef19a022ac6c8cd353b032bfd65f636b1adc3eb2e5ca0b409f19456e265cbfd3cb0"
        },
        {
          "alg" : "SHA3-384",
          "content" : "b08f2d668d9233a3380c37c028486014db65000e918aa1c59e2db35fb5661b3a40183e51677b73a5d96a308f9c2346c0"
        },
        {
          "alg" : "SHA3-256",
          "content" : "f6a3b253b2c5a06a9559fd9f21e36d04198e660d4e9437ddeb78245969f03fe4"
        },
        {
          "alg" : "SHA3-512",
          "content" : "0a45c046c106cf88a510bde208b1ac92d7b3dc547b2516583afdbb829219ec31b0bba9fc4b7fd240d2ef859abb722ce307f9572d87409d261887130a5df6827d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/license/mit/"
          }
        }
      ],
      "purl" : "pkg:maven/org.slf4j/slf4j-api@1.7.32?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.slf4j.org"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/qos-ch/slf4j/slf4j-api"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.rat/apache-rat-core@0.19-SNAPSHOT?type=jar",
      "publisher" : "Apache Software Foundation",
      "group" : "org.apache.rat",
      "name" : "apache-rat-core",
      "version" : "0.19-SNAPSHOT",
      "description" : "The core functionality of RAT that is used by all clients.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e671fae9904c8bd07552507659f2e554"
        },
        {
          "alg" : "SHA-1",
          "content" : "acf7eae2e30bb50d6cfe59415038bbe8a8506b65"
        },
        {
          "alg" : "SHA-256",
          "content" : "208ba5b331d11c2e6da1172950ccccd602e3d42a7216fe0fb0d650926eb40f1b"
        },
        {
          "alg" : "SHA-512",
          "content" : "45a92484845524963ee78f67a99bd7a9da9232ba00dd39c5ad91d941efb62e0f10ff048e3bb92132cfc09caf9c67994f6055c7f9c8983ff382bff51b5a2f8f79"
        },
        {
          "alg" : "SHA-384",
          "content" : "aecead90bfd39aeeee90adb8cff7f53dcf42c98e7d549ed98432015604745321946d5cf176b02f32f9a6e4d2863bfedd"
        },
        {
          "alg" : "SHA3-384",
          "content" : "87ee343407263c02a55dad3e07f659d3af505aef732d662624d7f889083bb2439b764744d10dfeba10330a60d42265cc"
        },
        {
          "alg" : "SHA3-256",
          "content" : "523372fd279936f87d1e36def2f76448f6057ebfe1aac4ac370fe081e44d7a90"
        },
        {
          "alg" : "SHA3-512",
          "content" : "3c47cc87b71fc7003ff540876880ca53a5d11654f2f1124a4fafa3d881bf934895ebeea3e87313b721d17469a198f499f39216a4a91e618ad2dcd5ea9725727b"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.rat/apache-rat-core@0.19-SNAPSHOT?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://creadur.apache.org/rat/apache-rat-core/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-builds.apache.org/job/Creadur/job/Creadur-Rat/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/RAT"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/creadur-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=creadur-rat.git/apache-rat-core"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.github.spotbugs/spotbugs-annotations@4.10.5?type=jar",
      "group" : "com.github.spotbugs",
      "name" : "spotbugs-annotations",
      "version" : "4.10.5",
      "description" : "Annotations the SpotBugs tool supports",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1252eef45ba52209b89fe0203bf9a633"
        },
        {
          "alg" : "SHA-1",
          "content" : "5cf6042318b3d7c43fa159dd86796fc8cc31bb3c"
        },
        {
          "alg" : "SHA-256",
          "content" : "2f28af17ad61a7daad0f3df070198c4a5807d3ffd98a5408f670cd19fc2dce84"
        },
        {
          "alg" : "SHA-512",
          "content" : "b8f5e25f0285960fc801d38436843f4501f81ffa1ce78df72c9849f41dc281c5dda8911c3355d15aae633a3209b5d79a6d5286f76f58a58c1e25397cf242c653"
        },
        {
          "alg" : "SHA-384",
          "content" : "2ab9965b71ae78b596153700b8c8b3662242299cbb9a6a6ba08eaa5612747a4381362a0676050cff0da89bb72c498758"
        },
        {
          "alg" : "SHA3-384",
          "content" : "80a83059e6667fd6bcab0b50b5671565d18290f2886dee0b1c95d8cc77bbccbcd43643bcec038f50a0c7b2101f976b20"
        },
        {
          "alg" : "SHA3-256",
          "content" : "3d3de7e7f08ab3caada7974c120802eef194ae604e6b4546d9dfc903e44b5d05"
        },
        {
          "alg" : "SHA3-512",
          "content" : "d599143fe1d336d54edeab244dd6ddf69a9a8a73eb752301f1ce4b8f455c3592359b2d023ded860812d6639380cb838293bb10f489ffd2617b2bcdef160ed35b"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "LGPL-2.1-only"
          }
        }
      ],
      "purl" : "pkg:maven/com.github.spotbugs/spotbugs-annotations@4.10.5?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://spotbugs.github.io/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/spotbugs/spotbugs/"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.velocity/velocity-engine-core@2.4.1?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.velocity",
      "name" : "velocity-engine-core",
      "version" : "2.4.1",
      "description" : "Apache Velocity is a general purpose template engine.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "41a3757dc9d701590be703d1f2bd2462"
        },
        {
          "alg" : "SHA-1",
          "content" : "0b662837e8006d5c383bd128503ea86ef5b4d361"
        },
        {
          "alg" : "SHA-256",
          "content" : "1c19157d1171d560088e485be97c93a7a2f7e9f56e517f0a30273c5c39df6231"
        },
        {
          "alg" : "SHA-512",
          "content" : "77150ed775e644be44d9f1ead19a880c8a02cba18dae97aec4ea8f14db04ee795bce35bd2e5314f2e95d40c01441da954327348f91addc9bb8d0cc9f7c00f561"
        },
        {
          "alg" : "SHA-384",
          "content" : "87cb5f02de5e137db4426938d783233d274b41786de2f27719e8469e188822911acce66992ae074b22a9ff47c0997c38"
        },
        {
          "alg" : "SHA3-384",
          "content" : "a6671daa3dc0091fbca6fdcb7d8799adee1c1c5c68de7da0a0f07870bb22ed94fe9a705223bf23e90b7f7f5a4d12a5c4"
        },
        {
          "alg" : "SHA3-256",
          "content" : "71c8123c1c4bb5fb839e70d229545139b2da58fa3e3d9b09355d355b6f56c595"
        },
        {
          "alg" : "SHA3-512",
          "content" : "381c65e4a7026fc680fd37ffe53616f93b4dba2dc9cbd98f76c56e3e5a4ea2dbd5fa82e6b10da7df1dd3b1b4017d7a583a2777cef421f04412893b27e6202a22"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.velocity/velocity-engine-core@2.4.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://velocity.apache.org/engine/devel/velocity-engine-core/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/VELOCITY"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?general@velocity.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=velocity-engine.git/velocity-engine-core"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.velocity.tools/velocity-tools-generic@3.1?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.velocity.tools",
      "name" : "velocity-tools-generic",
      "version" : "3.1",
      "description" : "Generic tools that can be used in any context.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "76f13879ead8693fd4d5751a8a236089"
        },
        {
          "alg" : "SHA-1",
          "content" : "07aaa49086a64cd9dab967a8437cc03abbfad655"
        },
        {
          "alg" : "SHA-256",
          "content" : "8258cfdcaa16127f35ffe610a3fa4f76b7ebe51b88922c73c4ee39ce8f378ce5"
        },
        {
          "alg" : "SHA-512",
          "content" : "51e7249e92d516f9e8a92a1068856d920edee512563131cca2dede45ed6de0e8667dfe0f54cd59712f255f9019d92ea521b8182622ba303af3a45b9740a6d54b"
        },
        {
          "alg" : "SHA-384",
          "content" : "7aadd12f098af99f43a390b4620ffba74008dd3308fbdd18ca0c012929b80196f3977b8748c967312e12546f8e065ce1"
        },
        {
          "alg" : "SHA3-384",
          "content" : "221fa964a36d4ee566a50164569df5f905082f2c94cf95bb763e1611f77806bb63000bade25fa3d205d16eea576d7781"
        },
        {
          "alg" : "SHA3-256",
          "content" : "3aa26883c32b31553ba468cd678ae0b6aa70272a683aea0d0cb8149afe404dc9"
        },
        {
          "alg" : "SHA3-512",
          "content" : "5d32822a5d3c913dacdece7c1415016b6f7f1320589397509c4ea689ae3a585e289acdaed7df14e2fe64be466956179b3260211bca013c11f71fa0542d28336d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.velocity.tools/velocity-tools-generic@3.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://velocity.apache.org/tools/devel/velocity-tools-generic/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/VELTOOLS"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?general@velocity.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=velocity-tools.git/velocity-tools-generic"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-beanutils/commons-beanutils@1.9.4?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-beanutils",
      "name" : "commons-beanutils",
      "version" : "1.9.4",
      "description" : "Apache Commons BeanUtils provides an easy-to-use but flexible wrapper around reflection and introspection.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "07dc532ee316fe1f2f0323e9bd2f8df4"
        },
        {
          "alg" : "SHA-1",
          "content" : "d52b9abcd97f38c81342bb7e7ae1eee9b73cba51"
        },
        {
          "alg" : "SHA-256",
          "content" : "7d938c81789028045c08c065e94be75fc280527620d5bd62b519d5838532368a"
        },
        {
          "alg" : "SHA-512",
          "content" : "7762b348caecead49038a38a89754ff7d9be6199324315495ba47cf24f52c06faadf9306d925c8fe47c587589a939c82e491e1c730267fdf354243a68c0f96ff"
        },
        {
          "alg" : "SHA-384",
          "content" : "dcd3845917b8fb189cf4034b0d7c6d266ec7110f85ffbd2711cdea9eb94b4fa3e1cee9120b484c6a120b82769230ed3a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "dfdb8845989be083de807184910124ad7e7e372959b34686cd5f5020f193a2997831ead497b0a5a0233f031aecdf55f6"
        },
        {
          "alg" : "SHA3-256",
          "content" : "127a81068335d6ca47f5f5e12d849dc1bc5300b2ad8d3f9b64ca30ff2a76d479"
        },
        {
          "alg" : "SHA3-512",
          "content" : "f67405d0a7667adf7cd35cd7416c54e1759380cdb9c8f179a10175058e40292808e17e69d48df4d4d6b5e268c314127cf3ab87af6920a271bb2e6e0df963940d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-beanutils/commons-beanutils@1.9.4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-beanutils/"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/BEANUTILS"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/commons/proper/beanutils/tags/BEANUTILS_1_9_3_RC3"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-logging/commons-logging@1.2?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-logging",
      "name" : "commons-logging",
      "version" : "1.2",
      "description" : "Apache Commons Logging is a thin adapter allowing configurable bridging to other, well known logging systems.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "040b4b4d8eac886f6b4a2a3bd2f31b00"
        },
        {
          "alg" : "SHA-1",
          "content" : "4bfc12adfe4842bf07b657f0369c4cb522955686"
        },
        {
          "alg" : "SHA-256",
          "content" : "daddea1ea0be0f56978ab3006b8ac92834afeefbd9b7e4e6316fca57df0fa636"
        },
        {
          "alg" : "SHA-512",
          "content" : "ed00dbfabd9ae00efa26dd400983601d076fe36408b7d6520084b447e5d1fa527ce65bd6afdcb58506c3a808323d28e88f26cb99c6f5db9ff64f6525ecdfa557"
        },
        {
          "alg" : "SHA-384",
          "content" : "ac20720d7156131478205f1b454395abf84cfc8da2f163301af32f63bd3c4764bd26cb54ed53800f33193ae591f3ce9c"
        },
        {
          "alg" : "SHA3-384",
          "content" : "628eb4407e95dca84da1a06b08a6d9b832a49de8472b1b217e8607f08efeeed18b996232d64dd07f03e78e0e3bb4b078"
        },
        {
          "alg" : "SHA3-256",
          "content" : "9aab62deccf156ee6e324c925dfc30ecb53e8465802863a551901a461424e807"
        },
        {
          "alg" : "SHA3-512",
          "content" : "3fd76857f6d20c03799537cc961c1c4ddf1c375c6c192fb982363e3b9397ba138b77f24ef38b4202f44e37586789c0320e4de18fdadd2772304fd14a9b26d552"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-logging/commons-logging@1.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://commons.apache.org/proper/commons-logging/"
        },
        {
          "type" : "build-system",
          "url" : "https://continuum-ci.apache.org/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/LOGGING"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/repos/asf/commons/proper/logging/trunk"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-collections",
      "name" : "commons-collections",
      "version" : "3.2.2",
      "description" : "Types that extend and augment the Java Collections Framework.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f54a8510f834a1a57166970bfc982e94"
        },
        {
          "alg" : "SHA-1",
          "content" : "8ad72fe39fa8c91eaaf12aadb21e0c3661fe26d5"
        },
        {
          "alg" : "SHA-256",
          "content" : "eeeae917917144a68a741d4c0dff66aa5c5c5fd85593ff217bced3fc8ca783b8"
        },
        {
          "alg" : "SHA-512",
          "content" : "51c72f9aca7726f3c387095e66be85a6df97c74b00a25434b89188c1b8eab6e2b55accf7b9bd412430d22bd09324dec076e300b3d1fa39fccad471f0f2a3da16"
        },
        {
          "alg" : "SHA-384",
          "content" : "dd4e99b3314bd3c1a1ee26296615d9e44dadf7a1f8a7bbba44fb95121803d331e36d4cca4260e7609af78a47ba3e4073"
        },
        {
          "alg" : "SHA3-384",
          "content" : "8ce03528e4a6e95c44283b56eca87e6a6d3bf1363411a55b538f4f9110cf7470581ea5c73925e877ddab08dba0603f40"
        },
        {
          "alg" : "SHA3-256",
          "content" : "fd3d6134b5f07077b82ccf93d148dacf7c4ce5c971209510edd0e77e3e38c19e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c2a523916fb7c7d55a05d5e3d9e9b33000733f4b20a71be174e4e093e3f06ea78ad831edd1505527da7388105f8647efb7d5666ba852c90b4e2d5bb74256efbc"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://commons.apache.org/collections/"
        },
        {
          "type" : "build-system",
          "url" : "https://continuum-ci.apache.org/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/COLLECTIONS"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/commons/proper/collections/trunk"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-digester3@3.2?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-digester3",
      "version" : "3.2",
      "description" : "The Apache Commons Digester package lets you configure an XML to Java object mapping module which triggers certain actions called rules whenever a particular pattern of nested XML elements is recognized.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "41d2c62c7aedafa7a3627794abc83f71"
        },
        {
          "alg" : "SHA-1",
          "content" : "c3f68c5ff25ec5204470fd8fdf4cb8feff5e8a79"
        },
        {
          "alg" : "SHA-256",
          "content" : "1c150e3d2df4b4237b47e28fea2079fb0da324578d5cca6a5fed2e37a62082ec"
        },
        {
          "alg" : "SHA-512",
          "content" : "a2063f01fd50f96cfd8765c49935249a77df47965ff0ae375bb1f1e47e3cdeb5e82eaf0b0e32183e581c01821499f9d4c57419e90352a7aa96b97850950e8652"
        },
        {
          "alg" : "SHA-384",
          "content" : "1691e34753c8ce3bb16729de8901f65def9362a989887e7b5d3cb05ded854e5b25b01b7725201228a97d17c4d68eb5f1"
        },
        {
          "alg" : "SHA3-384",
          "content" : "aaf22fbe0faa7303fc7b3c96ece73ae0e980ebd01454e344f612f7ccb10059c89d29cd579fbf2d211967708a7884a5c2"
        },
        {
          "alg" : "SHA3-256",
          "content" : "0c06a70800e0baf107e23e79a2eb7087694e06565fb9a27dc1ec920420b25fb1"
        },
        {
          "alg" : "SHA3-512",
          "content" : "2ed528a469c368296f63b6c1bc0ffe0eb01208cf8adf4127c350d38223c47550409e572c33ac2ed567792cb44b46cc002c5a0ec52019beccdedcc5dcc84a7155"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-digester3@3.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://commons.apache.org/digester/"
        },
        {
          "type" : "build-system",
          "url" : "http://vmbuild.apache.org/continuum/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/DIGESTER"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/commons/proper/digester/tags/DIGESTER3_3_2_RC2"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.github.cliftonlabs/json-simple@3.0.2?type=jar",
      "group" : "com.github.cliftonlabs",
      "name" : "json-simple",
      "version" : "3.0.2",
      "description" : "Java 7+ toolkit to quickly develop RFC 4627 JSON compatible applications.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "148c0d1bdc1bcb24394627d6930ee9ad"
        },
        {
          "alg" : "SHA-1",
          "content" : "2337afdb06134a12fc0239299c3ceb2e9c209516"
        },
        {
          "alg" : "SHA-256",
          "content" : "fda65a9ad0e1ac0c88987106e89aa4d8b2a2495e7e042371efa83813f65b7295"
        },
        {
          "alg" : "SHA-512",
          "content" : "c77f7423fd96b5b6159236536e4e4b509032cea94368186b86c99f4ec72cf40ecfb26821cc7124077363902ce2b91644e32e53fa7de3fce9885b400b0424ecd0"
        },
        {
          "alg" : "SHA-384",
          "content" : "805dced7fef08b98489ff09ffedda93998369ed6a024674f09ae8d4e62e8ffab5da235d64e5f91eabc1840f6695a7e43"
        },
        {
          "alg" : "SHA3-384",
          "content" : "d0a6dc8d23efc7dd2bd19036d8550a7ea1125528872765ab3094c72b9d76d287e7909abec239d4d8bae2a1d55c8621f6"
        },
        {
          "alg" : "SHA3-256",
          "content" : "d4239bd87f94a37ab4eeb653d9789a5a53899e5074d93ba66bea26f80b1ea2ca"
        },
        {
          "alg" : "SHA3-512",
          "content" : "448912379c297b72afad74ab6f7c9ef796046476dcaa8a2b4f1905ace248c4f52558c4683b3887e1aeddb03029b9b41ef8a90841cfd088734061c35489eb69b5"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.github.cliftonlabs/json-simple@3.0.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://cliftonlabs.github.io/json-simple/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/cliftonlabs/json-simple.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-collections4@4.6.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-collections4",
      "version" : "4.6.0",
      "description" : "The Apache Commons Collections package contains types that extend and augment the Java Collections Framework.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a5eb5df0e00b5bd4141ae277a4a79335"
        },
        {
          "alg" : "SHA-1",
          "content" : "e3f46a0753e01b8397363ba0edbfb6ec38dedf0a"
        },
        {
          "alg" : "SHA-256",
          "content" : "4e0d0896bac5356cead277bac0283f09813e14417e3e84e0c86b573b54d218a3"
        },
        {
          "alg" : "SHA-512",
          "content" : "76fc3fe1e6926d25f73493595bca77441cf725843c394ed0783c117c4cb9d6d843ca48c60ca1298fcc70c3f0561ea8c2a190749b75ed6b56b286c33f7b2e68a2"
        },
        {
          "alg" : "SHA-384",
          "content" : "86410414852843ecc833d5c9621465934275a07de2d655531915db6fda60324570f93e693d805bd9253b91455dc4559b"
        },
        {
          "alg" : "SHA3-384",
          "content" : "73567085cbd5b9358bbfd945ea53496a83db008d6591dcf62afa9b958b2c6f49d3df65910ec034566f6ac9f85203e708"
        },
        {
          "alg" : "SHA3-256",
          "content" : "06b33d314b2939264a6d315af71c916e00f17bde6412c533cccb7ccf6e5cb94e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "8b3d996784c2978bfc9e5b61340ca0505817514abe54676b22ebd7e36b191ff96ec6978108b8757395fc5d348d36bec45ad24f2e6a9d35ad725299b606dbe24e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-collections4@4.6.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-collections/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-collections/actions"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/COLLECTIONS"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-collections.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-compress@1.28.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-compress",
      "version" : "1.28.0",
      "description" : "Apache Commons Compress defines an API for working with compression and archive formats. These include bzip2, gzip, pack200, LZMA, XZ, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4, Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f33efe616d561f8281ef7bf9f2576ad0"
        },
        {
          "alg" : "SHA-1",
          "content" : "e482f2c7a88dac3c497e96aa420b6a769f59c8d7"
        },
        {
          "alg" : "SHA-256",
          "content" : "e1522945218456f3649a39bc4afd70ce4bd466221519dba7d378f2141a4642ca"
        },
        {
          "alg" : "SHA-512",
          "content" : "f1f140f4f40ab3cf3265919db9dbb95a631a29aa784e305f291de4e68876bb711d9217d62d7937cddddd393982decdf71a608b4b3ab7f4e6375cf28af2893d7f"
        },
        {
          "alg" : "SHA-384",
          "content" : "afe6a8fc8e7486c4ecce95276bb1467763d7ff7d941c7bcff8661bbbd4bff442fd0899ff7a11bc540cda86818ee4a8f0"
        },
        {
          "alg" : "SHA3-384",
          "content" : "6afb636ad0805e522913cfd91c8293c485b7f4eff5e45dd3a17a716c3f4b8ab8969e9c00927559a5fb762cba1fdb3d3f"
        },
        {
          "alg" : "SHA3-256",
          "content" : "4420e0b462b5dcc45077e95e012a82a5ae17659e5abe8a685fa086dab6995298"
        },
        {
          "alg" : "SHA3-512",
          "content" : "23e37d13c8ee6c7369e407c29d1f9ee1bb44eca9f09a6f9742f6b4cf3d38dd7a0509fe0142536cd8087b68a76e71d819105af2c23f2aeed08acc58eb93cf7e61"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-compress@1.28.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-compress/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-compress/actions"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/COMPRESS"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-compress.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-codec/commons-codec@1.19.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-codec",
      "name" : "commons-codec",
      "version" : "1.19.0",
      "description" : "The Apache Commons Codec component contains encoders and decoders for formats such as Base16, Base32, Base64, digest, and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a collection of phonetic encoding utilities.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e46fa78c69544eb6239c4e8447e72544"
        },
        {
          "alg" : "SHA-1",
          "content" : "8c0dbe3ae883fceda9b50a6c76e745e548073388"
        },
        {
          "alg" : "SHA-256",
          "content" : "5c3881e4f556855e9c532927ee0c9dfde94cc66760d5805c031a59887070af5f"
        },
        {
          "alg" : "SHA-512",
          "content" : "d98a7a1cfcc08aa9cce4f7778e3f37ecb99da7b1da01944e5fa8faf06fbf9f969f2efb0b416832f419d53085250f711c071f1dac9fa0968483c37034198367fb"
        },
        {
          "alg" : "SHA-384",
          "content" : "f0edec3cd84b2320e6930380d3fe13335d33f041470d27fb93789db0c696ec01dda21b471f0015bf70bffffcbfdb67c0"
        },
        {
          "alg" : "SHA3-384",
          "content" : "ce771ef9f0df326a34ab37e70f710801bb18d545aca0ee492db62770db323ab8a0b5082123ca4826f3d3182748537cfc"
        },
        {
          "alg" : "SHA3-256",
          "content" : "8296db95bb2fac86a0eb68e61e9730084f4272ad6a4a4327a5259c631840e98e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "05da2f8674a257c5d8a1137cadbda71d2635f22237450bf2cbc980380a56905247bea38049c8cd80e60077be2be73b1eae6b466c228e4277763a54979cf856fb"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-codec/commons-codec@1.19.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-codec/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-cli/actions"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CODEC"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/commons-codec"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-secure-xml@1.1.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-secure-xml",
      "version" : "1.1.0",
      "description" : "Apache Commons Secure XML provides secure-by-default JAXP factory creation, abstracting over implementation-specific XXE securing differences between the stock JDK and external JAXP implementations (Android, Apache Xalan, Apache Xerces, Woodstox, Saxon-HE).",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "5710b4a81385d66dc09a692387a57432"
        },
        {
          "alg" : "SHA-1",
          "content" : "4b8d6a78eb5ba294841aa74d5f1b733956640733"
        },
        {
          "alg" : "SHA-256",
          "content" : "5fc54f0d153bb9c42379a434a05177e79bbfddec7791c383370da1f592789513"
        },
        {
          "alg" : "SHA-512",
          "content" : "680350b0cdb3bd336db4ca0d4d76e0239db33d8d0f66496dd6aa478d2ceca6c68a5623546d2ea25ce6edd1a6a35f83e274605424d77cdc1e8e69a8908236d600"
        },
        {
          "alg" : "SHA-384",
          "content" : "1dea5a6f3d69b71a397e6f2d7d9623dfd41b76a4741488dda13cefdfcc9a315822d8de81b3366df0fe38a3181062b2ea"
        },
        {
          "alg" : "SHA3-384",
          "content" : "a3cfefb1fd588d3130c2a035dc4f34e2c9eca0874ee858cd4d8e3dbdf0ca015961a0ad0794bce4384b685dd5d50461bb"
        },
        {
          "alg" : "SHA3-256",
          "content" : "04ec27f49983e4ee07091b2ce01b5c93f2880cb0d7972e5c5d2251531df85ac2"
        },
        {
          "alg" : "SHA3-512",
          "content" : "302f0ef4d84708440d8d7a0460d0d548440fe0cc78cec958b338ad30617679a4d4054f5b86ddf4449ac201dfb40e1cea843854510d13547f335ec1bc32f5ca3f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-secure-xml@1.1.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-secure-xml/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-secure-xml/actions"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/COMMONSXML"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-secure-xml.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.tika/tika-parser-text-module@4.2.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.tika",
      "name" : "tika-parser-text-module",
      "version" : "4.2.0",
      "description" : "Apache Tika is a toolkit for detecting and extracting metadata and structured text content from various documents using existing parser libraries.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f12c0dd46ed32dd9589204b4445b2cd4"
        },
        {
          "alg" : "SHA-1",
          "content" : "8863098fb20929817a40a058ebe1a184b4caa41e"
        },
        {
          "alg" : "SHA-256",
          "content" : "c44d20e31d2de25a0878d8b61b871abffd9ce01caa7e2c46436687b8e7df54a8"
        },
        {
          "alg" : "SHA-512",
          "content" : "3f9c6094fff40cba03d4eb2379a055295edd2e67a1fde3f318de36681e0ee573742cbb8a4b94aa22fe68cdb54c37e9dbb2383109daf9711bf5e184489eb544c2"
        },
        {
          "alg" : "SHA-384",
          "content" : "93e7f50c0b4034dd61c260c9d9c389749a5a2258b17ca000a866d8ec9f8ab448aa7f1073e102bf228607704ff32e7b7e"
        },
        {
          "alg" : "SHA3-384",
          "content" : "c97915188164a67e4b376c64622a6bb0a859487bfe8bb3ce20bdbf6829ee70496eb7e4b0fad77339e650b8bf88c1e62c"
        },
        {
          "alg" : "SHA3-256",
          "content" : "8ee2b931a655e11234680ddffbea40c3cb4024a0aa5503b076b1d94051a35a25"
        },
        {
          "alg" : "SHA3-512",
          "content" : "44ec2e5e138a63347d4cfe5a5f49cbee41d0133abc5a0b708f82920b1c6fef54c722da2dc7552141ae5f2e85c0aeda35e6beb790b11d9f2ca069782c3d2801a6"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.tika/tika-parser-text-module@4.2.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://tika.apache.org/tika-parser-text-module/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-builds.apache.org/job/Tika/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/TIKA"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?dev@tika.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/tika"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.tika/tika-encoding-detector-mojibuster@4.2.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.tika",
      "name" : "tika-encoding-detector-mojibuster",
      "version" : "4.2.0",
      "description" : "ML-based charset encoding detector. MojibusterEncodingDetector runs structural detectors for UTF-32 / UTF-16 / UTF-8 and then a 33-class byte-bigram Naive Bayes classifier covering CJK multi-byte, EBCDIC, DOS OEM, Cyrillic, Windows single-byte, ISO-8859, and Mac encodings. This detector replaces ICU4J and juniversalchardet as the default statistical encoding detector in Tika.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1efc30b7eeb99dbe87951b65486885dc"
        },
        {
          "alg" : "SHA-1",
          "content" : "4db7559f7556d5b4f87aee64750b93de4a6d4cec"
        },
        {
          "alg" : "SHA-256",
          "content" : "0f0eefddf577ea2bb713efa74d832451276141d84ad137237b7d270a7e1e2633"
        },
        {
          "alg" : "SHA-512",
          "content" : "89fdae8f23d1f0adb184d4464086b5a7528b2bc9832e57ec63c4c25741a3c81176461b303ac4ac9e98ffffd64b12f1ee1a4fd5d8f692855935182ba272ee66e9"
        },
        {
          "alg" : "SHA-384",
          "content" : "ccb1060b77357b1a7caf864779b96bc84414b4e280bf5ccf5e8d30f94d934b309ef860e766a344f28826eae336bb1b38"
        },
        {
          "alg" : "SHA3-384",
          "content" : "7c02f9a2eba282a00c41f09efce3de63db002e7f78bb149317cc844a6851d4b1bfe99fe186deb8eda789ca4d8ed94855"
        },
        {
          "alg" : "SHA3-256",
          "content" : "dddff720c1182eedba200d54b4c093cb2eca4ff35158f16d3bc305a2f0010214"
        },
        {
          "alg" : "SHA3-512",
          "content" : "3c49dd709471a7e9c93d1458c24fa4491b97007785493e00470bdee891283af84bb6fdc6041277557440f32ae581c9e4a88b1e55d9bc2fb76a447f5b95a9e163"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.tika/tika-encoding-detector-mojibuster@4.2.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://tika.apache.org/tika-encoding-detectors/tika-encoding-detector-mojibuster/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-builds.apache.org/job/Tika/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/TIKA"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?dev@tika.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/tika"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.tika/tika-ml-core@4.2.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.tika",
      "name" : "tika-ml-core",
      "version" : "4.2.0",
      "description" : "Apache Tika is a toolkit for detecting and extracting metadata and structured text content from various documents using existing parser libraries.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "60a519d4f1659090835011b51a632981"
        },
        {
          "alg" : "SHA-1",
          "content" : "27e7a6b552b428b317ba88ded6172031d1358981"
        },
        {
          "alg" : "SHA-256",
          "content" : "e5b2b78e426902d7bf51cdee62f7b08f1043803e04c98317d7ff721005edea6e"
        },
        {
          "alg" : "SHA-512",
          "content" : "baddd02b1331d0a3e1b59ca2f3d62a2b463286feb5011890015a1146eaad4cbbfc4bb28cc7a22f40e2b1ef75f63c3d62119d2566f3275a3a5392788141853100"
        },
        {
          "alg" : "SHA-384",
          "content" : "a7f60bb6bc56245c006aa1c7f99acaad5684a14628b859f634f7140981886383c62d21afdc15b25b5573af84fc1f5c19"
        },
        {
          "alg" : "SHA3-384",
          "content" : "80ab79dcf74babc7c7c4a5b71e14cfc562a654464b5fac55580b35cea990c93ea3925ab5883ceaf4787c9cb5bd4a5fc3"
        },
        {
          "alg" : "SHA3-256",
          "content" : "2a0ed081fd49d791d39d8ed72eefa1c7acfd54c71a6b08d2cd52e56b5da59c21"
        },
        {
          "alg" : "SHA3-512",
          "content" : "f759f598bd5881d42ac21775e2dbb6055c93c312ff95ee0e60b5dba57c8241c5815ba5b96d320e2afb2e6a22dbd6280df7cfabfdad63996b9197fa304763bac3"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.tika/tika-ml-core@4.2.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://tika.apache.org/tika-ml-core/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-builds.apache.org/job/Tika/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/TIKA"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?dev@tika.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/tika"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.tika/tika-parser-datauri-commons@4.2.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.tika",
      "name" : "tika-parser-datauri-commons",
      "version" : "4.2.0",
      "description" : "Apache Tika is a toolkit for detecting and extracting metadata and structured text content from various documents using existing parser libraries.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "73fb226cc73ffb53dfb0c7406c9677e1"
        },
        {
          "alg" : "SHA-1",
          "content" : "4742f741b2cae67f65eafe30526ca52dddd7257d"
        },
        {
          "alg" : "SHA-256",
          "content" : "1a782e76e1afc430b587965ee5a545b53470934ccf5ac9a1e1fbbd9b5ce0a0de"
        },
        {
          "alg" : "SHA-512",
          "content" : "1633f653ba6b91d6a42b633fe63e4e3ffa03dd2c90ec35da1bc5a8a5d4b87f27fd79593894e9f22d4a3b27c084701e6c13b3b5227c34ef9d32f893635f399f23"
        },
        {
          "alg" : "SHA-384",
          "content" : "4418fc262cba13bb647372e34551e39939fa6d2e710cc2f3106b70f2f26ade1338baf373b24ce3903cb03c64c753440c"
        },
        {
          "alg" : "SHA3-384",
          "content" : "79799c69e38b134981159d490972b034c5b832fbc0ee3e5d45379442a90379dff1b111ce768b1cba8170fbe917e81bd4"
        },
        {
          "alg" : "SHA3-256",
          "content" : "348ba9fd1024055b103343834df61c9e1768c228e7d02194a827813cd3fb9667"
        },
        {
          "alg" : "SHA3-512",
          "content" : "2897b9948497599703efec4bc68265465851efbd169eb469aaefc5387579c256e04ed85941bf909030e1e0245d1aa5a3b2c2b90cc0330df05c75320b673238b2"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.tika/tika-parser-datauri-commons@4.2.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://tika.apache.org/tika-parser-datauri-commons/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-builds.apache.org/job/Tika/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/TIKA"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?dev@tika.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/tika"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-csv@1.14.1?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-csv",
      "version" : "1.14.1",
      "description" : "The Apache Commons CSV library provides a simple interface for reading and writing CSV files of various types.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b8119900179992cf139005db63481103"
        },
        {
          "alg" : "SHA-1",
          "content" : "467354980fade8528b6a9f9bdf7f4f19ab9b3373"
        },
        {
          "alg" : "SHA-256",
          "content" : "32be0e1e76673092f5d12cb790bd2acb6c2ab04c4ea6efc69ea5ee17911c24fe"
        },
        {
          "alg" : "SHA-512",
          "content" : "f64fb9c4895532dd9f6cd448dfb4b35bfe9c4a81afc61e5bb13121f5142330ae97447200022b03988967a7cb89d3f48ce76e253238eb9f0bea57c09b352ac27b"
        },
        {
          "alg" : "SHA-384",
          "content" : "a20dfbaaedf8e08e13969761e456ed6caa2e4c513c4c1662654fd4348a40a57416675e8e2802b1f1d0ce2bf3353bed75"
        },
        {
          "alg" : "SHA3-384",
          "content" : "577f3ee1b77ff740d2c894f8dfff6e662f1329030d04a7b27cfcef910b711decc7b26654bb259067a11ce3ba923edb16"
        },
        {
          "alg" : "SHA3-256",
          "content" : "e645fdbb0c85c775adf273502ea361b6b432a9fcf0e32d9946226c4a28b0b959"
        },
        {
          "alg" : "SHA3-512",
          "content" : "f9e5e2e9ba824e86ea5b2c9cdab1edde6a253b5ca557ea6e6e6669e318c35ad17ee1162cb0cc90febf5b60ad3535e5a93bfa2e3b83191bf4cb462662b24cce74"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-csv@1.14.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-csv/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-csv/actions"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CSV"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-csv.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-cli/commons-cli@1.8.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-cli",
      "name" : "commons-cli",
      "version" : "1.8.0",
      "description" : "Apache Commons CLI provides a simple API for presenting, processing and validating a Command Line Interface.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "631937816bd22302ae49828e9b764313"
        },
        {
          "alg" : "SHA-1",
          "content" : "41a4bff12057eecb6daaf9c7f36c237815be3da1"
        },
        {
          "alg" : "SHA-256",
          "content" : "f94c98bbcfa1c1dac6956d6c3f494ec40265c67bf54ddefc95df4ffdd73ae6d5"
        },
        {
          "alg" : "SHA-512",
          "content" : "2e5e547709e8ad35be44927382a0862467dcacc87e0351d092fd128fa7097a3b4c900fe452be50ace2e80c198d38f48e94fdb2da86e1480096de4a5580c28534"
        },
        {
          "alg" : "SHA-384",
          "content" : "f979529b54592eaa479b4a0f7dd73d87127dc19254dc2a6da628ec17a9ed25cdfea4b9e3cda66b5b819b0cc3540eb0b1"
        },
        {
          "alg" : "SHA3-384",
          "content" : "d1eee9c0d18566c81a93e1652145a7aabd0abaf17c06aeb734df74c949479b0c93396fbf622341b1ce61118d1ec2a5bc"
        },
        {
          "alg" : "SHA3-256",
          "content" : "d74c8b30995668a5f69f05922396b5641f1e4023d8cecabc0aabd9dc6fa533db"
        },
        {
          "alg" : "SHA3-512",
          "content" : "b6b3f493756e8a7d17633018354e7050f0d8344008cc0ff92f642132836ac7a0d92a6c7044d023ce95ed3479e1affd29d1eb8b58f1fb8b7410ceb3bd9cc38e6f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-cli/commons-cli@1.8.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-cli/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-parent/actions"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CLI"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-cli.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-lang3@3.22.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-lang3",
      "version" : "3.22.0",
      "description" : "Apache Commons Lang is a package of Java utility classes for the Java lang packages, classes that could be considered standard to justify their existence in java.lang. The code is tested using the latest revision of the JDK for supported LTS releases: 8, 11, 17, 21, and 25. See https://github.com/apache/commons-lang/blob/master/.github/workflows/maven.yml Please ensure your build environment is up-to-date and kindly report any build issues. Starting with Commons Lang 3.9, we target Java 8 and use those features. For advice on upgrading from 2.x to 3.x, see https://commons.apache.org/lang/article3_0.html",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "7e31774c9e2adfe616856c0be006b288"
        },
        {
          "alg" : "SHA-1",
          "content" : "fda38d1637719132fa12b5b96ea99958fc7150e7"
        },
        {
          "alg" : "SHA-256",
          "content" : "2ea88052c8662bf51874f4159467ba24b040b22dfd54d2596e11936896c76192"
        },
        {
          "alg" : "SHA-512",
          "content" : "cb464ed16c44587100bcbd801f77612376c5cd079463357d9add8b2e70314be4c4691537f8f888e040e0f0c96153063aca3b0645e70b26b68b40f32a40ca289b"
        },
        {
          "alg" : "SHA-384",
          "content" : "193844995941ff3564b537b2f4454945ca06f40d8a87b4250d4db4f9f010ac70878f94d6ee702e32a8553adac4629221"
        },
        {
          "alg" : "SHA3-384",
          "content" : "f52f2107e59fb9b1ccadb0997d863c8c859d5bedb8b61ac6d6c007ababf00ea1e21ae6c1a8319aa69687919ea248a9ee"
        },
        {
          "alg" : "SHA3-256",
          "content" : "718728988627e098aa81054c55c50d0d0e25ae21ec83838ff4fd79cc4bb802d9"
        },
        {
          "alg" : "SHA3-512",
          "content" : "3cb4017d7622e21e8d7df83ea28e040446bea418c757c2b462b86a65f7683e48efb5326c3e0c8a35ba2033d710b3582b4f1414cd0b3b294c6ce700f6ef40303c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-lang3@3.22.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-lang/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-lang/actions"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/LANG"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf/commons-lang.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-io/commons-io@2.22.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-io",
      "name" : "commons-io",
      "version" : "2.22.0",
      "description" : "The Apache Commons IO library contains utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f91d54bd47c42456b4a5ae62eed85565"
        },
        {
          "alg" : "SHA-1",
          "content" : "5b1e18bc0ad651ed878029d83f88d9c8189fd51e"
        },
        {
          "alg" : "SHA-256",
          "content" : "2b9a7b1f726fb86216dbd2c8321eabe0221dbd5b1be81c18e1cb53811b104758"
        },
        {
          "alg" : "SHA-512",
          "content" : "fca0b4ae70e531bee74413e0b865981aa8b60a9390f789b63997203dae67be65362e95a0c35b9d4b072fbb0810114783415dd22b92fb42e5594b10992f632bc5"
        },
        {
          "alg" : "SHA-384",
          "content" : "e1fbf3729c4d2d77b036d90234d9e2ed3fe0c2f5379d333a695c1cb0037f63d288c8b62de05022da0f612da65835fee0"
        },
        {
          "alg" : "SHA3-384",
          "content" : "02acc6e7f614d8684e7104a52123573152a2e1b651bc6a5be12d4b58861c757d6c56f51105bb97c92309d126059232ea"
        },
        {
          "alg" : "SHA3-256",
          "content" : "134157813629f4d9b97044602e1fa2f61c14c3be1f641490b3e06ac941ff3315"
        },
        {
          "alg" : "SHA3-512",
          "content" : "47832f3b7abe375f3b0ed169996d9776b2a0007b073ab3f06438dce67be9bda45e8aac84737cc639ada4424b13c7614d8c9fcb23779868f7421414777cc0946a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-io/commons-io@2.22.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-io/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-io/actions"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/IO"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-io.git/commons-io"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-text@1.15.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-text",
      "version" : "1.15.0",
      "description" : "Apache Commons Text is a set of utility functions and reusable components for processing and manipulating text in a Java environment.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "756b7c5438d89a0c311d811c1a06d19a"
        },
        {
          "alg" : "SHA-1",
          "content" : "9899093aa40f0199d6c39b131b8f087cdb37e399"
        },
        {
          "alg" : "SHA-256",
          "content" : "58d2da30f058512a1e7f914e39241deca4dff5c27a085b4ed2faa9e7208067f6"
        },
        {
          "alg" : "SHA-512",
          "content" : "be41b2c3a347bfd6eea3a957fb9a8d631c32b973fbbbe3e097d544d893ab4e587c3dfc38e89b4039b815b17d268cc7940e1ffb464050c7924acb56cc422613fb"
        },
        {
          "alg" : "SHA-384",
          "content" : "d3df5a4656967277d738e9d981d7b065dcda91f25553f8fc5c3d26edf07079cc5526508b0951da45ef614663ee9d471d"
        },
        {
          "alg" : "SHA3-384",
          "content" : "bedce93fea6c4aaaf7feb52f75d4265c41b3b0d39976248b4d9d5b879d18403335364b3f845585ce5fceb80a34c592df"
        },
        {
          "alg" : "SHA3-256",
          "content" : "48fd7a8921eca0e1dc185a0ad5f8e89ab3399f0327bc57cd9e09988fce75d1ef"
        },
        {
          "alg" : "SHA3-512",
          "content" : "f996b808d5f7bff8ac7aa79a2f73b93a4edb687cace7b54089246b6b4005ebbaab00f752a79205479023c802a56e42605806113d6af36e28469fa6a63ae710d2"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-text@1.15.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-text"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-text/actions"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/TEXT"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-text.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.tika/tika-core@4.2.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.tika",
      "name" : "tika-core",
      "version" : "4.2.0",
      "description" : "This is the core Apache Tika™ toolkit library from which all other modules inherit functionality. It also includes the core facades for the Tika API.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e9c5fbd7c11edbaa1afaec3274716ca9"
        },
        {
          "alg" : "SHA-1",
          "content" : "c8b60b00e363d804afba9e2a89251a5fdcd9447c"
        },
        {
          "alg" : "SHA-256",
          "content" : "44f95d98ec7f6b48f3fa3fc816897ee822918dae32a9a944f9179c28dd678c86"
        },
        {
          "alg" : "SHA-512",
          "content" : "a1a96cbb7a47959ff650890812835a32a3c233e9b737cb04d0d1abe2fbbe1d42e11687fa96d8f59ad09b100b1520e48709c5ab96f478fbeb734675b2b87f506b"
        },
        {
          "alg" : "SHA-384",
          "content" : "0edd4e6c129cf6fbd3e4898e87cf8acc1d8a3bfa71fd23b472ebd46d74bd7d760b7b7fa291dde96b09b26100f4c13ad8"
        },
        {
          "alg" : "SHA3-384",
          "content" : "9dd867171750dfe05bbf5e0f5a36453aafbf3614fb9f4d14d046ab93ca2320fb53f54b6621d99726cece1b11a83dd5ba"
        },
        {
          "alg" : "SHA3-256",
          "content" : "36e24cc8f11a2678d8585becd87a1312069f6b5746f97b700487552b3811b0ed"
        },
        {
          "alg" : "SHA3-512",
          "content" : "5a7d0f9171199c6cad40ae75d537cdbf5385f7c0857421168890c165184484fd48fd98799db5056c3161261978f1cf6468bc8a9307dc86aee1a648a4076489c6"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.tika/tika-core@4.2.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://tika.apache.org/"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/job/Tika-trunk/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/TIKA"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?dev@tika.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/tika"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.commonmark/commonmark@0.31.0?type=jar",
      "group" : "org.commonmark",
      "name" : "commonmark",
      "version" : "0.31.0",
      "description" : "Core of commonmark-java (a library for parsing Markdown to an AST, modifying the AST and rendering it to HTML or Markdown)",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e0c52034489e85957d3e2c93512e0eed"
        },
        {
          "alg" : "SHA-1",
          "content" : "cfbbd6942749ed63e6595dad27818f10f989018c"
        },
        {
          "alg" : "SHA-256",
          "content" : "11d5996813f4d6525a134b906844d87112c6acb6fdd306ad5755ef5df9b26281"
        },
        {
          "alg" : "SHA-512",
          "content" : "3a11760037450328a47458f587cf7ffc0fa9fc900334aac2234d63730773578cb19855230a4e16880496b41fe825ad0539f115e55f163da511b244aedd2c0c0a"
        },
        {
          "alg" : "SHA-384",
          "content" : "79c35a4dd53132e66a239b38ec36eeb70195589e47e92c2ab072eadd02e71678a80873c6e18e92b50421e330b502ad61"
        },
        {
          "alg" : "SHA3-384",
          "content" : "439b5d91b2725f72b3bf50add298c3f02cc019f3415969002e2a5c17d9076d10d57ebb0a317882e26b573ae558f49c76"
        },
        {
          "alg" : "SHA3-256",
          "content" : "01435b6ea69d1b42ec6c326298792a5c710f0c9f61e062aacad6ef5839131266"
        },
        {
          "alg" : "SHA3-512",
          "content" : "8902967b557b219e1922aa548e1139c8d59d9c7993f4079677c3889c90da105c526cedfe5512a769ba1e1aeb8c9e38378228addeccb5cd77f319d897bd855c21"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-2-Clause",
            "url" : "https://opensource.org/licenses/BSD-2-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.commonmark/commonmark@0.31.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/commonmark/commonmark-java/commonmark"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/commonmark/commonmark-java/commonmark"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.commonmark/commonmark-ext-gfm-tables@0.31.0?type=jar",
      "group" : "org.commonmark",
      "name" : "commonmark-ext-gfm-tables",
      "version" : "0.31.0",
      "description" : "commonmark-java extension for GFM tables using \"|\" pipes (GitHub Flavored Markdown)",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "d1a0161577379b740b9c8b9b446a5d98"
        },
        {
          "alg" : "SHA-1",
          "content" : "5120fa43776ca66dadf8193237d9a6bbfd9b9fc7"
        },
        {
          "alg" : "SHA-256",
          "content" : "d2b3e19fc2a55ca1274ef067c583b85abf8635f6dccd1f935cd36ffe8a186706"
        },
        {
          "alg" : "SHA-512",
          "content" : "a80c7299c0dfd9dbefe2b13ca02d3992934941df1530b16aa760a189c608c163d4ddf02aa8b7223d8f71647893626279b63963cf74222ce93a54ba95b014d484"
        },
        {
          "alg" : "SHA-384",
          "content" : "9394d1c90207b69e50bbd8535efdf0625c258bc6388cf37d196bbb668075187d9d1a3c5cba1c3ba4104315c02aed8822"
        },
        {
          "alg" : "SHA3-384",
          "content" : "eb7f5a67a89cae75637cc47466c5512ddd7fb7d5a6b9c77d6e00c7824c9deaeffadb22a1475c848688837c1d89ec8e2f"
        },
        {
          "alg" : "SHA3-256",
          "content" : "1e42e14b923ac98c66cf922069eb8c9002de06d183c4bf62df222afe277d4a76"
        },
        {
          "alg" : "SHA3-512",
          "content" : "41c93d7cf4db9fc9fbf8ce82e248b310de9a72ee82959518f24455b9e2cdda0f08f8632e295c265f99fe40e8c9a7e4f9cf0b00f1fb1365b2c64e4b26d83e1fd2"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-2-Clause",
            "url" : "https://opensource.org/licenses/BSD-2-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.commonmark/commonmark-ext-gfm-tables@0.31.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/commonmark/commonmark-java/commonmark-ext-gfm-tables"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/commonmark/commonmark-java/commonmark-ext-gfm-tables"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.commonmark/commonmark-ext-gfm-strikethrough@0.31.0?type=jar",
      "group" : "org.commonmark",
      "name" : "commonmark-ext-gfm-strikethrough",
      "version" : "0.31.0",
      "description" : "commonmark-java extension for GFM strikethrough using ~~ (GitHub Flavored Markdown)",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "9a622892f788886fe715a03dc5e7d094"
        },
        {
          "alg" : "SHA-1",
          "content" : "a3053f4bb5207f3e6876db0a5a3cb75a82784eab"
        },
        {
          "alg" : "SHA-256",
          "content" : "6236e6605072708d0a172a9c57802529ab71958e71c72a5e0f90a4fbf62aa9aa"
        },
        {
          "alg" : "SHA-512",
          "content" : "a1e8299329c3a8d539ede2bb9bbbce47c39102a67140e85e9f33116d9f7f1c6f389b6e16a1de89bb7cbac4fd645201f74bbf86b224777713f21019fafa7413cd"
        },
        {
          "alg" : "SHA-384",
          "content" : "3545938e3445af80bb2cd7fcff1ac9934f8895d398a4b7d314cf81894112a48beaf97d34cb5aaa4e13a5aaba9570d959"
        },
        {
          "alg" : "SHA3-384",
          "content" : "80a38f5f4f438b617ff9bf647d565a4d62cfafeb279bc19b28c7f94ca451297411b9fff1f61a9843440eacef65990734"
        },
        {
          "alg" : "SHA3-256",
          "content" : "66080ffcb5f47f282176175bfeb2826c21e5c5bb1ba2207816d94f96a15d0371"
        },
        {
          "alg" : "SHA3-512",
          "content" : "07047d44d57c66bcf635a68a04c01e09011294226696c8ae6d804f408abfc26b4a75399cc5fef2b3bb84abc2f549965d3383bd08163b4315b2ac968234568c60"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-2-Clause",
            "url" : "https://opensource.org/licenses/BSD-2-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.commonmark/commonmark-ext-gfm-strikethrough@0.31.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/commonmark/commonmark-java/commonmark-ext-gfm-strikethrough"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/commonmark/commonmark-java/commonmark-ext-gfm-strikethrough"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.junit.jupiter/junit-jupiter-api@6.1.3?type=jar",
      "group" : "org.junit.jupiter",
      "name" : "junit-jupiter-api",
      "version" : "6.1.3",
      "description" : "Module \"junit-jupiter-api\" of JUnit",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "662a5b10a1bbb2e3192790351d67d269"
        },
        {
          "alg" : "SHA-1",
          "content" : "6a57f0ce4d6bfe9784d103077055ba39f3e6f638"
        },
        {
          "alg" : "SHA-256",
          "content" : "555d6cf20fa1710884dd01b86cc5785397ba73e21ada2d4b784f5f1a14dcafc4"
        },
        {
          "alg" : "SHA-512",
          "content" : "05a880fd689fd5b3f3102948e51b5b3ad76785cd8ed42601e6151754b3bd3bd8812658d8f7d98b883263ac61c65eb3e061215e414b3e191c3c756c7908ecf82f"
        },
        {
          "alg" : "SHA-384",
          "content" : "af420ed08f2ee6eb8204ed2352045e5f494c3d18e58206a17e43f70af3cd7c7523b2c0946b36f32d8081f6c07d82ff1c"
        },
        {
          "alg" : "SHA3-384",
          "content" : "5f1e809cd26520979b937121b3e24536793939e4c68c535bac3597f6582c5daf63a9215c5ebe6af4044a60ab143c8e24"
        },
        {
          "alg" : "SHA3-256",
          "content" : "bd6d2672f88f5e55de1ae29087698bfa1a09e2658cc5959dc8a9b43d92f7d362"
        },
        {
          "alg" : "SHA3-512",
          "content" : "18c74f29f5f622d9d06bbc5d7b670f20af3e0f2c97551e6a54264730942bd906977ea527b51d67192c216d61f103db2bc07e62d35862f01c8753761d186eb657"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.junit.jupiter/junit-jupiter-api@6.1.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://junit.org/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/junit-team/junit-framework"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.opentest4j/opentest4j@1.3.0?type=jar",
      "group" : "org.opentest4j",
      "name" : "opentest4j",
      "version" : "1.3.0",
      "description" : "Open Test Alliance for the JVM",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "03c404f727531f3fd3b4c73997899327"
        },
        {
          "alg" : "SHA-1",
          "content" : "152ea56b3a72f655d4fd677fc0ef2596c3dd5e6e"
        },
        {
          "alg" : "SHA-256",
          "content" : "48e2df636cab6563ced64dcdff8abb2355627cb236ef0bf37598682ddf742f1b"
        },
        {
          "alg" : "SHA-512",
          "content" : "78fc698a7871bb50305e3657893c10500595f043348d875f57bc39ca4a6a51eda3967b7c8c8a7ec3e8f85f2171bca4aa98823e912e416e87e81c6ba5b70a37c3"
        },
        {
          "alg" : "SHA-384",
          "content" : "10398b6998c9202a0731e2e19ae1c3f9d8a83582c2663fe7bdda15794ee6fa816727dbd8f7c7164bd5395ee1cfe7c97e"
        },
        {
          "alg" : "SHA3-384",
          "content" : "3abe706fd78509c25a402c7bbf6f9ddf71ffb5b35054864ba0fdf7902207115f888a0ba728fd71d2e87a9360d2498121"
        },
        {
          "alg" : "SHA3-256",
          "content" : "d961907a1bfa1dcda329dca494ffbc251b31fabcaca5ab7095661a8ce3c1d654"
        },
        {
          "alg" : "SHA3-512",
          "content" : "0ad661617bcac51bcd26f7ad4611c69b1fd9811b50dbf734e041a3243ab1f845e7796620e8a7c40c4a2df3946864598b1251396c7d9bd813203d82710788cce0"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.opentest4j/opentest4j@1.3.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/ota4j-team/opentest4j"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/ota4j-team/opentest4j"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.junit.platform/junit-platform-commons@6.1.3?type=jar",
      "group" : "org.junit.platform",
      "name" : "junit-platform-commons",
      "version" : "6.1.3",
      "description" : "Module \"junit-platform-commons\" of JUnit",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "481a56275fe36dc163df005113a39f44"
        },
        {
          "alg" : "SHA-1",
          "content" : "acb99d3482ea51fcbcc4f6ea8672761e2b3d5bb7"
        },
        {
          "alg" : "SHA-256",
          "content" : "a4774ae923c109544034aeae7c762cf017fbcdd1342403ba90e0921984b608c3"
        },
        {
          "alg" : "SHA-512",
          "content" : "f117027fa7ffe2cd5d24962d115ba500bee2f748f3dafc51e0bc988aa1349fb5b62f4031135056eb26b5fbb2a95c5460a12fa54037aefbfcefff498590b33e6e"
        },
        {
          "alg" : "SHA-384",
          "content" : "2ab3a17575086bee2937a7e604c997e3c418ab611cc8ca56fe33bfe5c87ab5c2a80fb7e9141426f755475fc601ec248c"
        },
        {
          "alg" : "SHA3-384",
          "content" : "5a376926c73b2c95be31ffe7277a6b221d69441f9a20b74d8d21bfeebc189c7dc0ad54f47fbebbc4e0a07f08c5db403d"
        },
        {
          "alg" : "SHA3-256",
          "content" : "8711b866ce5377ea6660caaea7dd863ec97a0fd97e2ed409fa64b660da956d7d"
        },
        {
          "alg" : "SHA3-512",
          "content" : "1013b1262ee2cb04c2d62a022497f6fc9ba1d6d52ac9247fa0bd1050a0cdde786e1a727e79c3ebfbcdd830aeea8699ef58a71aef1e07e94d2bea5dea39569850"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.junit.platform/junit-platform-commons@6.1.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://junit.org/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/junit-team/junit-framework"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apiguardian/apiguardian-api@1.1.2?type=jar",
      "group" : "org.apiguardian",
      "name" : "apiguardian-api",
      "version" : "1.1.2",
      "description" : "@API Guardian",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "8c7de3f82037fa4a2e8be2a2f13092af"
        },
        {
          "alg" : "SHA-1",
          "content" : "a231e0d844d2721b0fa1b238006d15c6ded6842a"
        },
        {
          "alg" : "SHA-256",
          "content" : "b509448ac506d607319f182537f0b35d71007582ec741832a1f111e5b5b70b38"
        },
        {
          "alg" : "SHA-512",
          "content" : "d7ccd0e7019f1a997de39d66dc0ad4efe150428fdd7f4c743c93884f1602a3e90135ad34baea96d5b6d925ad6c0c8487c8e78304f0a089a12383d4a62e2c9a61"
        },
        {
          "alg" : "SHA-384",
          "content" : "5ae11cfedcee7da43a506a67946ddc8a7a2622284a924ba78f74541e9a22db6868a15f5d84edb91a541e38afded734ea"
        },
        {
          "alg" : "SHA3-384",
          "content" : "c146116b3dfd969200b2ce52d96b92dd02d6f5a45a86e7e85edf35600ddbc2f3c6e8a1ad7e2db4dcd2c398c09fad0927"
        },
        {
          "alg" : "SHA3-256",
          "content" : "b4b436d7f615fc0b820204e69f83c517d1c1ccc5f6b99e459209ede4482268de"
        },
        {
          "alg" : "SHA3-512",
          "content" : "7b95b7ac68a6891b8901b5507acd2c24a0c1e20effa63cd513764f513eab4eb55f8de5178edbe0a400c11f3a18d3f56243569d6d663100f06dd98288504c09c5"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apiguardian/apiguardian-api@1.1.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/apiguardian-team/apiguardian"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apiguardian-team/apiguardian"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
      "group" : "org.jspecify",
      "name" : "jspecify",
      "version" : "1.0.0",
      "description" : "An artifact of well-named and well-specified annotations to power static analysis checks",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "9133aba420d0ca3b001dbb6ae9992cf6"
        },
        {
          "alg" : "SHA-1",
          "content" : "7425a601c1c7ec76645a78d22b8c6a627edee507"
        },
        {
          "alg" : "SHA-256",
          "content" : "1fad6e6be7557781e4d33729d49ae1cdc8fdda6fe477bb0cc68ce351eafdfbab"
        },
        {
          "alg" : "SHA-512",
          "content" : "efded31ef5b342f09422935076e599789076431e93a746685c0607e7de5592719ba6aacde0be670b3f064d1e85630d58d5bce6b34aed2a288fdb34f745efb7bc"
        },
        {
          "alg" : "SHA-384",
          "content" : "814f860e5a44ead6c457676841eef471a8b87be31b84c60a8a4477a18a9cbcb6e3c2ae700969d5c5e52309d961e0537a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "c8844e5b71e5ecfbb7366097ce34af2f5863d86d5ccc3f9ec384d8ade4b60ccc8124c7fc88664f1afd2b0962fc8775bf"
        },
        {
          "alg" : "SHA3-256",
          "content" : "4b4f08ad7606a3ac62997779484919a302267b26d26ee19125f8a7eea60e8a71"
        },
        {
          "alg" : "SHA3-512",
          "content" : "65c6845ebae981cb81b61107707ced39f5b377dae970b47606ef482aaf10e3729def0da40d9377c43abbfb483a5ceae039b0d51c129c50a6d36ad351a5d6b01e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://jspecify.org/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/jspecify/jspecify/"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.junit.jupiter/junit-jupiter-params@6.1.3?type=jar",
      "group" : "org.junit.jupiter",
      "name" : "junit-jupiter-params",
      "version" : "6.1.3",
      "description" : "Module \"junit-jupiter-params\" of JUnit",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e0b4bd2b6ae43ccb74acccc2b007cf6e"
        },
        {
          "alg" : "SHA-1",
          "content" : "435fa4ec654c11fb82e666a47d9baefcee3f8df6"
        },
        {
          "alg" : "SHA-256",
          "content" : "05c51cedba2c06a9770707391e006cee825876937dea580b94a265ce145d4939"
        },
        {
          "alg" : "SHA-512",
          "content" : "7838db6e7ae0e6976779cda502349b611e26361ec0f8711eea377fa1c6f161c719c40ffe1f197e572b99fb17da95252c18dd5bd028a19d5dbcae802ad6a06d8e"
        },
        {
          "alg" : "SHA-384",
          "content" : "bb87a76c267ef0fd021aefdaa44c277bb8ebc66356bc0d71a3add325d597b67628de273d76518043c65d71a800958f85"
        },
        {
          "alg" : "SHA3-384",
          "content" : "ff327def4965abaa2fae15496a3f1c9546318aa85b4ccc93e25aa19d868921f63fd986b56bb1dcf86d2f111188e50fc1"
        },
        {
          "alg" : "SHA3-256",
          "content" : "2dabe09fbb306b715f936b3a9aa2110d4dfd4e65bcc12f8fd2a3a1bbc747a557"
        },
        {
          "alg" : "SHA3-512",
          "content" : "3a42bff4e1509093d8ca58f3966af3713984262f6423767bbb2501de64a8d87096a71bf36eded14170da3992849c9b4cdd55eb6edbb21035de76051248c0981c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.junit.jupiter/junit-jupiter-params@6.1.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://junit.org/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/junit-team/junit-framework"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.mockito/mockito-core@5.24.0?type=jar",
      "group" : "org.mockito",
      "name" : "mockito-core",
      "version" : "5.24.0",
      "description" : "Mockito mock objects library core API and implementation",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4d21469bade80b235c77a618f8b5ea69"
        },
        {
          "alg" : "SHA-1",
          "content" : "277dd2f725dd344fba6216f0bc611fae7fc4c1d8"
        },
        {
          "alg" : "SHA-256",
          "content" : "97a1f835ad84075255aa37809e4379eff541273c02c6201cbad49bd5950932cd"
        },
        {
          "alg" : "SHA-512",
          "content" : "5ee96160f44f62fa659079c7ed2c84c647ce97b7c5f57d63b164b4eae8c99140b6759cd3995e4dcd50a7f35963094a35578ba36bd6bc5771e6bf397ac80ebc47"
        },
        {
          "alg" : "SHA-384",
          "content" : "10e3c750b4907922f44471cf0d4e3a86bda519435f12c602fb95b28e66fb3bfe03c1df042799e407e0c4601e9f041a6b"
        },
        {
          "alg" : "SHA3-384",
          "content" : "cd8db811ddf5992007407e43fec264fa60e52bcb082933fb237edc984b6fbf061186d6dfb80fb55031e7273891016c3f"
        },
        {
          "alg" : "SHA3-256",
          "content" : "eb48ea301e4cfaba41e42d7e86c7c3a092f4f3ff324324fc86aeecb0efb75429"
        },
        {
          "alg" : "SHA3-512",
          "content" : "34120b305adcf47ad9a66d9cdd248104d07c2ee603fbb960e7662560d2dc610054363b45f8b9116212206cf631a3174b94db40b0206164067bf30ba9a00518fb"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/license/mit/"
          }
        }
      ],
      "purl" : "pkg:maven/org.mockito/mockito-core@5.24.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/mockito/mockito"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/mockito/mockito/actions"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/mockito/mockito/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/mockito/mockito.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/net.bytebuddy/byte-buddy@1.17.7?type=jar",
      "group" : "net.bytebuddy",
      "name" : "byte-buddy",
      "version" : "1.17.7",
      "description" : "Byte Buddy is a Java library for creating Java classes at run time. This artifact is a build of Byte Buddy with all ASM dependencies repackaged into its own name space.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "209b2faed508ed6804df6982f8fd2c16"
        },
        {
          "alg" : "SHA-1",
          "content" : "3856bfab61beb23e099a0d6629f2ba8de4b98ace"
        },
        {
          "alg" : "SHA-256",
          "content" : "3575dcb8a98faf943d3c1595c47a16047c4fce8a83ebbb26262f1a2f67546357"
        },
        {
          "alg" : "SHA-512",
          "content" : "9c10e50598e139fe7099ff8c5f13adebeacb12df07c6ae23129a462e87e085c66a763900eaa5fabaf9cb7bb0a8410fc3af1ce7eadd4f40983bf9a0c4be7c42d1"
        },
        {
          "alg" : "SHA-384",
          "content" : "9a0fa7b56376e698dbb3d5c01c41a2f661c124dda329869a64be9881b668620342252e75c9515fd13080206f4c296482"
        },
        {
          "alg" : "SHA3-384",
          "content" : "d13061ca0f3f2d9ef9cc2defe75b6f79963ec2c790de213e39bacbf5f24a6427eb16cdca1a2172f8a6a3c12b16bb8ff3"
        },
        {
          "alg" : "SHA3-256",
          "content" : "5b2f57522ac40c94ad918fe62f7bba5a3fbfe47d1037da1e5b3d8ed31fd8854e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "1dfb214208f0afb4e086b82923d6e0a3ff6cc92ad047b65af41fc937fee961c3822f7e0088d707feba279f52acc3e220583e0fdd7191e56ef9a06aa97d677ffd"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/net.bytebuddy/byte-buddy@1.17.7?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://bytebuddy.net/byte-buddy"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/raphw/byte-buddy/issues"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/net.bytebuddy/byte-buddy-agent@1.17.7?type=jar",
      "group" : "net.bytebuddy",
      "name" : "byte-buddy-agent",
      "version" : "1.17.7",
      "description" : "The Byte Buddy agent offers convenience for attaching an agent to the local or a remote VM.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "d805e73391e6fc6d3de5af86e31ae0f7"
        },
        {
          "alg" : "SHA-1",
          "content" : "fbf3d6d649ed37fc9e9c59480a05be0a26e3c2da"
        },
        {
          "alg" : "SHA-256",
          "content" : "a9ba887dca252ad61b7d5153294f34e6f3bdf4b2736b04373d13615a695fc0ff"
        },
        {
          "alg" : "SHA-512",
          "content" : "c349b190e773447a155db48c90d976056daed8c9d52b6026d42f3c283fc984430430a53b27218ebb9ad980cb166cbe8cc796306a7c8368fde91ecc241cf662d5"
        },
        {
          "alg" : "SHA-384",
          "content" : "fb83bf605391aee16e9d58bffa88fc0fd672e0d045b542984cb87dead80a4517305e18dd8a532443d0be7f3ceec8d711"
        },
        {
          "alg" : "SHA3-384",
          "content" : "ab9dc3f1b6dcd26a49915de9950430f7501937573825cbc165f3b29bc14c6ceffdb464b9f6115bd9c4c4325a0b88115e"
        },
        {
          "alg" : "SHA3-256",
          "content" : "adfb6efa6ee05a2306b21d569ca62a1e4e44e22f8136a5c52c0be98f8fd74353"
        },
        {
          "alg" : "SHA3-512",
          "content" : "eeb1d18fcb24949daad327b3bf83cbb7f633d21b57b1358c3ffe03f137542b88c4c60d7c14fdfc35176a86012e6929ee49dbcd5c83998cd01648de79c9ac35b2"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/net.bytebuddy/byte-buddy-agent@1.17.7?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://bytebuddy.net/byte-buddy-agent"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/raphw/byte-buddy/issues"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.objenesis/objenesis@3.3?type=jar",
      "publisher" : "Joe Walnes, Henri Tremblay, Leonardo Mesquita",
      "group" : "org.objenesis",
      "name" : "objenesis",
      "version" : "3.3",
      "description" : "A library for instantiating Java objects",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "ab0e0b2ab81affdd7f38bcc60fd85571"
        },
        {
          "alg" : "SHA-1",
          "content" : "1049c09f1de4331e8193e579448d0916d75b7631"
        },
        {
          "alg" : "SHA-256",
          "content" : "02dfd0b0439a5591e35b708ed2f5474eb0948f53abf74637e959b8e4ef69bfeb"
        },
        {
          "alg" : "SHA-512",
          "content" : "1fa990d15bd179f07ffbc460d580a6fd0562e45dee8bd4a9405917536b78f45c0d6f644b67f85d781c758aa56eff90aef23eedcc9bd7f5ff887a67b716083e61"
        },
        {
          "alg" : "SHA-384",
          "content" : "2f6878f91a12db32c244afcee619d57c3ad6ff0297f4e41c2247e737c1ccc5fcc1ce03256b479b0f9b87900410bc4502"
        },
        {
          "alg" : "SHA3-384",
          "content" : "a3dd9f6908fe732900d50eb209988183ffcf511afb4e401ef95b75c51777709d2d10e1dc9ee386b7357c5c2cbcf8c00e"
        },
        {
          "alg" : "SHA3-256",
          "content" : "fd2b66d174ed68cbfcda41d5cbd29db766c5676866d6b2324b446a87afab3a9f"
        },
        {
          "alg" : "SHA3-512",
          "content" : "ef509e8bcea73bc282287205ffc7625508080be44c16948137274f189459624891dcf109118c9feff109e1aa99becf176f8db837ac4fd586201510c3ae2ea30a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.objenesis/objenesis@3.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://objenesis.org/objenesis"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/easymock/objenesis/objenesis"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.assertj/assertj-core@4.0.0-M1?type=jar",
      "group" : "org.assertj",
      "name" : "assertj-core",
      "version" : "4.0.0-M1",
      "description" : "Rich and fluent assertions for testing in Java",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "3d48f2f00c79af8df0c0310d66d0ac55"
        },
        {
          "alg" : "SHA-1",
          "content" : "fb1a111417e6893354881b6a78bcb47f7ce7cda2"
        },
        {
          "alg" : "SHA-256",
          "content" : "03852ab5b4419c1b0b3689930cdc1ac4f0c437a0c8094a900370dcb170cfbb46"
        },
        {
          "alg" : "SHA-512",
          "content" : "c821849da7544a09b029060aa7d76989ecaea0563c3a6f1b68bb5e390ac967b7283bf2aa26c1336bd4d8c3b2d999869355845ac23abbc47f186ea754aef94a95"
        },
        {
          "alg" : "SHA-384",
          "content" : "ac6d5504b9ac8a23ed0ea8dad2079dd1a2017d09db4658e865d2f0c0ddf0c2c2f4f2945c1e89d705df35f3faf986e22f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "1e2146cf18aca2ecbb499ef527f0b2fff45d1a157610a91360b46afaed4681b079877b1f00a719eec5d7ac7aad52da81"
        },
        {
          "alg" : "SHA3-256",
          "content" : "15ce2f01d3e97a1f8eab6f4f3a4e94add724a9a5e54f63fe6684cb643fc1fb59"
        },
        {
          "alg" : "SHA3-512",
          "content" : "2ecbb4c7032a426c1ab36322c5dccd051bbb09bcccf208d5180b7d03c7548cae560305ac8e8cedd8f0027631508545cf040d242d72643b3511bee456d3d966c4"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.assertj/assertj-core@4.0.0-M1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://assertj.github.io/doc/#assertj-core"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/assertj/assertj/assertj-parent/assertj-core"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.xmlunit/xmlunit-assertj3@2.14.0?type=jar",
      "publisher" : "XMLUnit",
      "group" : "org.xmlunit",
      "name" : "xmlunit-assertj3",
      "version" : "2.14.0",
      "description" : "XMLUnit with AssertJ 3.x fluent API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "98ab3b80e622da668fcdb22627b18174"
        },
        {
          "alg" : "SHA-1",
          "content" : "3410648a8fe6534230e18d850efdbd48644010df"
        },
        {
          "alg" : "SHA-256",
          "content" : "c33513f85d702e8576cf589269b85e9b5b7f8e3732fb0bdb9d87a933a05d5550"
        },
        {
          "alg" : "SHA-512",
          "content" : "0a38d218a48b3b52b442ddc57af3c6b267c8131de8778e8d7a21c55a1582aaaf15487f86760b130d946a64c8723519bfcb708f7527b8879291dbb0a32c157681"
        },
        {
          "alg" : "SHA-384",
          "content" : "7391d0d5d18533745487acc5294a9f2b97cac06552b59fa2956a6af858c74a76c266fd681fd0e8ab3299fcb5bd45782f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "8259e4f871204e7c4dd61cfb39f36dbe6e7a50f95d65fe447ed0515dc0d9f81cb95ec1290cb2b6f97e72574f5a23e59b"
        },
        {
          "alg" : "SHA3-256",
          "content" : "7f2a177e1fc93651ae72ebe253e3048bcd93186cba1b9417dd1494a58712c140"
        },
        {
          "alg" : "SHA3-512",
          "content" : "3337ad19cf59e03fd2abd989bd0ecfcbbc093433657b7264dc4961283d36701e56f7cb51589532fc82d1919aa05b46df6eb079ee5769f2e5a9f5d0690d50710e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.xmlunit/xmlunit-assertj3@2.14.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.xmlunit.org/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/xmlunit/xmlunit/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://sourceforge.net/p/xmlunit/mailman/xmlunit-general/"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.xmlunit/xmlunit-core@2.14.0?type=jar",
      "publisher" : "XMLUnit",
      "group" : "org.xmlunit",
      "name" : "xmlunit-core",
      "version" : "2.14.0",
      "description" : "XMLUnit for Java",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "53388c4aab38013043cb9219bf26fc03"
        },
        {
          "alg" : "SHA-1",
          "content" : "21974e90bafb229ce9d0f23aaa86ed1c22b93fb9"
        },
        {
          "alg" : "SHA-256",
          "content" : "93f975e2bb1e35db5a88c687e7899fd850e7c6d883a2afa011adcd7a671eb724"
        },
        {
          "alg" : "SHA-512",
          "content" : "59fc0427f4a66c599c056df987e79139d0efea0885dc7ed12bef369f76b753e803e61c9d735388ed1b3e63a28c5ed2345c940bf19c0bc77e4d576b1d3411c8bf"
        },
        {
          "alg" : "SHA-384",
          "content" : "850aa7aca829afe8ac18ab386ffcea23f78a6f6cf9e99fdbed7f7115186d1efdf7e8944c448da5b4ee8dc44adcc16a0b"
        },
        {
          "alg" : "SHA3-384",
          "content" : "1267f958ea1cc90e9320816bc202917e783ae49d8613d4710eb58b12ece75b11d2350ecee6ca73c6e6d4a7345a1a5234"
        },
        {
          "alg" : "SHA3-256",
          "content" : "31250e11b0184a9629d22459e5f2decd90104800d70ee9a7f10260e4b7a1b12c"
        },
        {
          "alg" : "SHA3-512",
          "content" : "fb1a5e2251f0edc1ae5112ec53d198524f554eed64a2853d7e137df8c97c4e43feadf8f88b38e7dbe25843f9af49f9e2d0ca251056c366eeb2d606a650971b74"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.xmlunit/xmlunit-core@2.14.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.xmlunit.org/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/xmlunit/xmlunit/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://sourceforge.net/p/xmlunit/mailman/xmlunit-general/"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.mockito/mockito-junit-jupiter@5.24.0?type=jar",
      "group" : "org.mockito",
      "name" : "mockito-junit-jupiter",
      "version" : "5.24.0",
      "description" : "Mockito JUnit 5 support",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "acdd3bf4eea79cd23910ca04cdabd171"
        },
        {
          "alg" : "SHA-1",
          "content" : "961dc4a97bb33b749c287aa44f780cfa2fa6af38"
        },
        {
          "alg" : "SHA-256",
          "content" : "904d4ba9769284739dd720eceffe3792a67e9c0e78d8a50ad46925283386e048"
        },
        {
          "alg" : "SHA-512",
          "content" : "c0278b122db655041913fc2fdb582066f2e0f1b8fb64b0c94bc02310df087ef5f956da1c3e890279e405e5a4f8f634f7a89f33d964657dea63a4a229e0b2a7d6"
        },
        {
          "alg" : "SHA-384",
          "content" : "17844c04aaf752594cb8b60eaa5b049015232d64a50d90e5ba237ca3f6289e799ac6e4f53447fde5bb26984d44e920ef"
        },
        {
          "alg" : "SHA3-384",
          "content" : "040d83d379da23fc695e5000cd3d1d34102c1561af46487ea2114c335656a7cf1752da90fea6d7da0b0edabed2c0514c"
        },
        {
          "alg" : "SHA3-256",
          "content" : "d8035d068bab4f19e6009f52e4138fab2858f13b9d5fc8f4c499d6d2e9ba458b"
        },
        {
          "alg" : "SHA3-512",
          "content" : "59b6bd92495652b492a3837f165200fd3737526271fd4cd6f1365c7ffe20eab2ccef4bac5f5ac7202563b5151a7a615d4760b744233a4b80d5d2726bfb23629e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/license/mit/"
          }
        }
      ],
      "purl" : "pkg:maven/org.mockito/mockito-junit-jupiter@5.24.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/mockito/mockito"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/mockito/mockito/actions"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/mockito/mockito/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/mockito/mockito.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.groovy/groovy@6.0.0?type=jar",
      "publisher" : "Apache Software Foundation",
      "group" : "org.apache.groovy",
      "name" : "groovy",
      "version" : "6.0.0",
      "description" : "Groovy: A powerful multi-faceted language for the JVM",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "71c88ed101e77adfecbe17eeaf9d4d42"
        },
        {
          "alg" : "SHA-1",
          "content" : "e831f8223f514284e4ba8a2352a8e733af67450d"
        },
        {
          "alg" : "SHA-256",
          "content" : "6bcbec490ac1ade0dca6566dca9d02897cbb8fc31ee4008e950451aa83b1ac76"
        },
        {
          "alg" : "SHA-512",
          "content" : "8f441780924809056a51daf66d60c0f93ebf25d1c71f966c452a65a1c0de8110b03eb07b7a7e4567024e1276e961091a7a29e04e419e1a5b686e70897b176ad0"
        },
        {
          "alg" : "SHA-384",
          "content" : "3a63d47b5b9d3e0457ed1c39311ed3133851b28dc514c2ed38e9538af93fcc0c290ec09632a215d8458e567f19f388bc"
        },
        {
          "alg" : "SHA3-384",
          "content" : "0eff7ee25ddc5c167fde9f88548ad14a48f0668acec5bbd2b1846877200dfcfb767daf2ab806628e6577a0c11a37052b"
        },
        {
          "alg" : "SHA3-256",
          "content" : "5db79b39fc7590958989975504b818c06db39c88e620a29bd5b568fcec462fcf"
        },
        {
          "alg" : "SHA3-512",
          "content" : "cc640bdd5a7fa9096b7c70d0d46c72c0f44d54ea791c88236e4ca686969a8f8bb98f997700bde1acec2f01a7de6ab8aed406e9be967dff623bcd06936b5afbe2"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.groovy/groovy@6.0.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://groovy-lang.org"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/GROOVY"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/groovy-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/groovy.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.jimfs/jimfs@1.3.2?type=jar",
      "publisher" : "Google Inc.",
      "group" : "com.google.jimfs",
      "name" : "jimfs",
      "version" : "1.3.2",
      "description" : "Jimfs is an in-memory implementation of Java 7's java.nio.file abstract file system API.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "84acc2053fe3e17c13befae61254dd9c"
        },
        {
          "alg" : "SHA-1",
          "content" : "e7fa569e3edce524844738dbaff82f62c5c87b55"
        },
        {
          "alg" : "SHA-256",
          "content" : "30f4c0d36508d794b0107286eae7a43e9ad8ad593148002acac941196f619c59"
        },
        {
          "alg" : "SHA-512",
          "content" : "0e82159a16c8dada77ee979be310f8205ee1e795e50f7bb5f9f38ae0b42670c1c9864407ef3784b88bcd56eff4dca8f6bfcef520d6174055e122c20f48d61da3"
        },
        {
          "alg" : "SHA-384",
          "content" : "b3cc686e201c2ba818a0c57c1abbf6340a22e9fadafc37bf6a91551fab6c73752e8bfac64463d7efb3fb0a1169c5c2c2"
        },
        {
          "alg" : "SHA3-384",
          "content" : "2cab3efe208eb7ad47a711414f0f3856bcb5f3e14f079927b80fadf0747a15420ad9af1f3d6c5ee5fdc5e0c581bb13ac"
        },
        {
          "alg" : "SHA3-256",
          "content" : "04fe32a40bdb5c552a36c2b4453a571ca613591da0e7a744deb99e8865feffa8"
        },
        {
          "alg" : "SHA3-512",
          "content" : "7e923e5779160c450ef62672ba49c55902c9736578f95e97fda3429508195d65ef588a0efe0224f1bfebe811620c368249f06c29bc1d337e1f1e9c86a8111cf4"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.jimfs/jimfs@1.3.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/google/jimfs/jimfs"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/google/jimfs/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/google/jimfs/jimfs/"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.guava/guava@33.7.1-jre?type=jar",
      "group" : "com.google.guava",
      "name" : "guava",
      "version" : "33.7.1-jre",
      "description" : "Guava is a suite of core and expanded libraries that include utility classes, Google's collections, I/O classes, and much more.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1a86f411821e4ba79f2747f301b7e2ba"
        },
        {
          "alg" : "SHA-1",
          "content" : "77e37866fb969b4ff6710faaefd3a86067730ada"
        },
        {
          "alg" : "SHA-256",
          "content" : "796d8e28ac64e83a47c4c5935a8fecc4682650a04bbdead738ef0f5a3a0e6c46"
        },
        {
          "alg" : "SHA-512",
          "content" : "b4f274ef89218b5d541e194024431a8ddbebf476f3b7537e9095d78876b51dafa1ed567c4c26822cd3f4062fa443ec1abaca1cbb3126e5128f03084c3814912b"
        },
        {
          "alg" : "SHA-384",
          "content" : "0ae5c300f00abfedec54675cbac048bf02580b3a26cb14377d1eb1cefac27556ceb802b704597feefbaf9e145d253be9"
        },
        {
          "alg" : "SHA3-384",
          "content" : "ed98f4aea3f491328105c0f33a30ba0801a365519de4776ae7708b9013b273fc5aa523fc044b1d22585b5987041f21c7"
        },
        {
          "alg" : "SHA3-256",
          "content" : "2ea89f7ecc8ee4945fee9161d54d0c1952f34fd2a15d1f18eeb5997b69b73a21"
        },
        {
          "alg" : "SHA3-512",
          "content" : "5ba21822a88e541a0b941ca525aac9dd836b2fb7255073937c6df6c49dbb3992e614b502405756dc1cbac505cc5dde98101628b608eadd491e36f3ca910a8d15"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.guava/guava@33.7.1-jre?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/google/guava"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/google/guava/actions"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/google/guava/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/google/guava/guava"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.guava/failureaccess@1.0.3?type=jar",
      "group" : "com.google.guava",
      "name" : "failureaccess",
      "version" : "1.0.3",
      "description" : "Contains com.google.common.util.concurrent.internal.InternalFutureFailureAccess and InternalFutures. Most users will never need to use this artifact. Its classes are conceptually a part of Guava, but they're in this separate artifact so that Android libraries can use them without pulling in all of Guava (just as they can use ListenableFuture by depending on the listenablefuture artifact).",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "29a782e90f6b37218b18bb880d2a8f4a"
        },
        {
          "alg" : "SHA-1",
          "content" : "aeaffd00d57023a2c947393ed251f0354f0985fc"
        },
        {
          "alg" : "SHA-256",
          "content" : "cbfc3906b19b8f55dd7cfd6dfe0aa4532e834250d7f080bd8d211a3e246b59cb"
        },
        {
          "alg" : "SHA-512",
          "content" : "72be228e7805da5623e42bf024ded7d9147023c66b22f4dbd04ac6898201af46ee82e1f92ea51eb0595f1b49151c4b8ecb862653d4906c17609c42544ee97abf"
        },
        {
          "alg" : "SHA-384",
          "content" : "9dd1a2a08efda311604992d3e7cee64873bc8c64de3b423b1b3a3dcc1f7f0810bb03901fbfe39a5f835accb0646f4ad8"
        },
        {
          "alg" : "SHA3-384",
          "content" : "ffd67766c165ee77e96824e06de2c19864a6e61f785b2085eb825f308f173d71f2555559d90d910f33f3367378ace0e3"
        },
        {
          "alg" : "SHA3-256",
          "content" : "08a77b528a72ca412b36e4004692705ebfd75cfb4897c88632d367d08a34b09f"
        },
        {
          "alg" : "SHA3-512",
          "content" : "7cba6c266babbe8272f029eea6e2cbddadee96eb1a16916a6eb2441a55837867ce717385d4388735fd83f2f6555931077c0ebda011a1ee9a37ac38c8c0c43a65"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.guava/failureaccess@1.0.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/google/guava/failureaccess"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/google/guava/actions"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/google/guava/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/google/guava/failureaccess"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar",
      "group" : "com.google.guava",
      "name" : "listenablefuture",
      "version" : "9999.0-empty-to-avoid-conflict-with-guava",
      "description" : "An empty artifact that Guava depends on to signal that it is providing ListenableFuture -- but is also available in a second \"version\" that contains com.google.common.util.concurrent.ListenableFuture class, without any other Guava classes. The idea is: - If users want only ListenableFuture, they depend on listenablefuture-1.0. - If users want all of Guava, they depend on guava, which, as of Guava 27.0, depends on listenablefuture-9999.0-empty-to-avoid-conflict-with-guava. The 9999.0-... version number is enough for some build systems (notably, Gradle) to select that empty artifact over the \"real\" listenablefuture-1.0 -- avoiding a conflict with the copy of ListenableFuture in guava itself. If users are using an older version of Guava or a build system other than Gradle, they may see class conflicts. If so, they can solve them by manually excluding the listenablefuture artifact or manually forcing their build systems to use 9999.0-....",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "d094c22570d65e132c19cea5d352e381"
        },
        {
          "alg" : "SHA-1",
          "content" : "b421526c5f297295adef1c886e5246c39d4ac629"
        },
        {
          "alg" : "SHA-256",
          "content" : "b372a037d4230aa57fbeffdef30fd6123f9c0c2db85d0aced00c91b974f33f99"
        },
        {
          "alg" : "SHA-512",
          "content" : "c5987a979174cbacae2e78b319f080420cc71bcdbcf7893745731eeb93c23ed13bff8d4599441f373f3a246023d33df03e882de3015ee932a74a774afdd0782f"
        },
        {
          "alg" : "SHA-384",
          "content" : "caff9b74079f95832ca7f6029346b34b606051cc8c5a4389fac263511d277ada0c55f28b0d43011055b268c6eb7184d5"
        },
        {
          "alg" : "SHA3-384",
          "content" : "e939f08df0545847ea0d3e4b04a114b08499ad069ba8ec9461d1779f87a56e0c37273630a0f4c14e78c348d3ac7eb97f"
        },
        {
          "alg" : "SHA3-256",
          "content" : "1f0a8b1177773b3a8ace839df5eed63cbf56b24a38714898a6e4ed065c42559f"
        },
        {
          "alg" : "SHA3-512",
          "content" : "6b495ecc2a18b17365cb08d124a0da47f04bcdde81927b5245edf3edd8e498c3c3fb92ce6a4127f660bac851bb1d3e4510e5c20d03be47ce99dc296d360db285"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/google/guava/listenablefuture"
        },
        {
          "type" : "build-system",
          "url" : "https://travis-ci.org/google/guava"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/google/guava/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/google/guava/listenablefuture"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.50.0?type=jar",
      "publisher" : "Google LLC",
      "group" : "com.google.errorprone",
      "name" : "error_prone_annotations",
      "version" : "2.50.0",
      "description" : "Error Prone is a static analysis tool for Java that catches common programming mistakes at compile-time.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1ded1848cfd4f5167e00824faf9c4d3b"
        },
        {
          "alg" : "SHA-1",
          "content" : "74ba43e49ab1184d41634af2ef0047e82c4064b0"
        },
        {
          "alg" : "SHA-256",
          "content" : "4667724877f1d37a689202da191e23efa7657c62eef93ccdac406eccfe5cdd0a"
        },
        {
          "alg" : "SHA-512",
          "content" : "f867b1a1fbc057fcfc37c2fa86082f5965ad6a1c45373eac6cfa6ec058cedbf7b348ab4f3d4fea2d4d105ecc401c14f24d9b16f344507e126a221d50532cb8b2"
        },
        {
          "alg" : "SHA-384",
          "content" : "2986b161379c30e9805f3bcff197d7861b8c0690a021e2d7464707e57028b1953d24eefd1a36722f3c04665190b3cb48"
        },
        {
          "alg" : "SHA3-384",
          "content" : "597fe452ff7e21149da3c537b61d8e1b17df792f67bcd80fbccd6647acca571a94fa8bbcf4840826a37814bb2ef0249a"
        },
        {
          "alg" : "SHA3-256",
          "content" : "5447d9786f79d7dc20e8f75ac93f3a05181f3707faf6e91696dd326cdd5f5754"
        },
        {
          "alg" : "SHA3-512",
          "content" : "b51065218c88f5ce0b94e6607dee42d6c01aeb69a87b6e1c656dd406f2196cc999150ce87f56fbeeecbed7e1e354ed285589fa560012e9fb5858a97dc17d2129"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.50.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://errorprone.info/error_prone_annotations"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/google/error-prone/error_prone_annotations"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.j2objc/j2objc-annotations@3.1?type=jar",
      "group" : "com.google.j2objc",
      "name" : "j2objc-annotations",
      "version" : "3.1",
      "description" : "A set of annotations that provide additional information to the J2ObjC translator to modify the result of translation.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "abe8bd3abff622b9a8b15c3a737aa741"
        },
        {
          "alg" : "SHA-1",
          "content" : "a892ca9507839bbdb900d64310ac98256cab992f"
        },
        {
          "alg" : "SHA-256",
          "content" : "84d3a150518485f8140ea99b8a985656749629f6433c92b80c75b36aba3b099b"
        },
        {
          "alg" : "SHA-512",
          "content" : "34ee5aad57b0b507e89c897306f73043f80fa0eb02b453e54d9052feb0808a0d2ed835d888946211921d2bf733780b19ff636479ce19b9f48814ba6008733ce1"
        },
        {
          "alg" : "SHA-384",
          "content" : "7b760a346a586d6a3fa4477807e2f02f091e61898fc9a6ff449e43c55b6465fbbc17720663183c84c41d4d8814085e51"
        },
        {
          "alg" : "SHA3-384",
          "content" : "a2166c1c08f947c0e60aa7c9167602942e7bac37ba45863d34c0132a1f352e7807a382588d350b93bdbbbbe315a3573f"
        },
        {
          "alg" : "SHA3-256",
          "content" : "3d4d3b8bfd2ad13351a53610aa4bf1c5a69d2bde4272c281003120ed9bcddb8c"
        },
        {
          "alg" : "SHA3-512",
          "content" : "0a574b379a3f8022f0b88252c87d0e6b6cfa434fdb981efd1b24387025a962d7ac4e90161e8bd048df142bf52f4fc41e4a0c1d45e4eeb872c5954aad552988e9"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.j2objc/j2objc-annotations@3.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/google/j2objc/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "http://github.com/google/j2objc"
        }
      ]
    }
  ],
  "dependencies" : [
    {
      "ref" : "pkg:maven/org.apache.rat/apache-rat-core-tests@0.19-SNAPSHOT?type=jar",
      "dependsOn" : [
        "pkg:maven/org.reflections/reflections@0.10.2?type=jar",
        "pkg:maven/org.apache.rat/apache-rat-core@0.19-SNAPSHOT?type=jar",
        "pkg:maven/commons-cli/commons-cli@1.8.0?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.22.0?type=jar",
        "pkg:maven/commons-io/commons-io@2.22.0?type=jar",
        "pkg:maven/org.apache.commons/commons-text@1.15.0?type=jar",
        "pkg:maven/org.apache.tika/tika-core@4.2.0?type=jar",
        "pkg:maven/org.junit.jupiter/junit-jupiter-api@6.1.3?type=jar",
        "pkg:maven/org.junit.jupiter/junit-jupiter-params@6.1.3?type=jar",
        "pkg:maven/org.mockito/mockito-core@5.24.0?type=jar",
        "pkg:maven/org.assertj/assertj-core@4.0.0-M1?type=jar",
        "pkg:maven/org.xmlunit/xmlunit-assertj3@2.14.0?type=jar",
        "pkg:maven/org.xmlunit/xmlunit-core@2.14.0?type=jar",
        "pkg:maven/org.mockito/mockito-junit-jupiter@5.24.0?type=jar",
        "pkg:maven/org.apache.groovy/groovy@6.0.0?type=jar",
        "pkg:maven/com.google.jimfs/jimfs@1.3.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.reflections/reflections@0.10.2?type=jar",
      "dependsOn" : [
        "pkg:maven/org.javassist/javassist@3.28.0-GA?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.32?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.javassist/javassist@3.28.0-GA?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.32?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.rat/apache-rat-core@0.19-SNAPSHOT?type=jar",
      "dependsOn" : [
        "pkg:maven/com.github.spotbugs/spotbugs-annotations@4.10.5?type=jar",
        "pkg:maven/org.apache.velocity/velocity-engine-core@2.4.1?type=jar",
        "pkg:maven/org.apache.velocity.tools/velocity-tools-generic@3.1?type=jar",
        "pkg:maven/org.apache.commons/commons-collections4@4.6.0?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.22.0?type=jar",
        "pkg:maven/commons-io/commons-io@2.22.0?type=jar",
        "pkg:maven/org.apache.commons/commons-compress@1.28.0?type=jar",
        "pkg:maven/org.apache.commons/commons-text@1.15.0?type=jar",
        "pkg:maven/org.apache.commons/commons-secure-xml@1.1.0?type=jar",
        "pkg:maven/commons-cli/commons-cli@1.8.0?type=jar",
        "pkg:maven/org.apache.tika/tika-core@4.2.0?type=jar",
        "pkg:maven/org.apache.tika/tika-parser-text-module@4.2.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.github.spotbugs/spotbugs-annotations@4.10.5?type=jar",
      "dependsOn" : [
        "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.velocity/velocity-engine-core@2.4.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.commons/commons-lang3@3.22.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.32?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-lang3@3.22.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.velocity.tools/velocity-tools-generic@3.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.velocity/velocity-engine-core@2.4.1?type=jar",
        "pkg:maven/commons-beanutils/commons-beanutils@1.9.4?type=jar",
        "pkg:maven/org.apache.commons/commons-digester3@3.2?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.22.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.32?type=jar",
        "pkg:maven/com.github.cliftonlabs/json-simple@3.0.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/commons-beanutils/commons-beanutils@1.9.4?type=jar",
      "dependsOn" : [
        "pkg:maven/commons-logging/commons-logging@1.2?type=jar",
        "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/commons-logging/commons-logging@1.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-digester3@3.2?type=jar",
      "dependsOn" : [
        "pkg:maven/commons-beanutils/commons-beanutils@1.9.4?type=jar",
        "pkg:maven/commons-logging/commons-logging@1.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.github.cliftonlabs/json-simple@3.0.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-collections4@4.6.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-io/commons-io@2.22.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-compress@1.28.0?type=jar",
      "dependsOn" : [
        "pkg:maven/commons-codec/commons-codec@1.19.0?type=jar",
        "pkg:maven/commons-io/commons-io@2.22.0?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.22.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/commons-codec/commons-codec@1.19.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-text@1.15.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.commons/commons-lang3@3.22.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-secure-xml@1.1.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-cli/commons-cli@1.8.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.tika/tika-core@4.2.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@1.7.32?type=jar",
        "pkg:maven/commons-io/commons-io@2.22.0?type=jar",
        "pkg:maven/org.apache.commons/commons-secure-xml@1.1.0?type=jar",
        "pkg:maven/org.commonmark/commonmark@0.31.0?type=jar",
        "pkg:maven/org.commonmark/commonmark-ext-gfm-tables@0.31.0?type=jar",
        "pkg:maven/org.commonmark/commonmark-ext-gfm-strikethrough@0.31.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.commonmark/commonmark@0.31.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.commonmark/commonmark-ext-gfm-tables@0.31.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.commonmark/commonmark@0.31.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.commonmark/commonmark-ext-gfm-strikethrough@0.31.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.commonmark/commonmark@0.31.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.tika/tika-parser-text-module@4.2.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.tika/tika-encoding-detector-mojibuster@4.2.0?type=jar",
        "pkg:maven/org.apache.tika/tika-parser-datauri-commons@4.2.0?type=jar",
        "pkg:maven/org.apache.commons/commons-csv@1.14.1?type=jar",
        "pkg:maven/org.commonmark/commonmark@0.31.0?type=jar",
        "pkg:maven/org.commonmark/commonmark-ext-gfm-tables@0.31.0?type=jar",
        "pkg:maven/org.commonmark/commonmark-ext-gfm-strikethrough@0.31.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.tika/tika-encoding-detector-mojibuster@4.2.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.tika/tika-core@4.2.0?type=jar",
        "pkg:maven/org.apache.tika/tika-ml-core@4.2.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.tika/tika-ml-core@4.2.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.tika/tika-parser-datauri-commons@4.2.0?type=jar",
      "dependsOn" : [
        "pkg:maven/commons-codec/commons-codec@1.19.0?type=jar",
        "pkg:maven/commons-io/commons-io@2.22.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-csv@1.14.1?type=jar",
      "dependsOn" : [
        "pkg:maven/commons-io/commons-io@2.22.0?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.19.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.junit.jupiter/junit-jupiter-api@6.1.3?type=jar",
      "dependsOn" : [
        "pkg:maven/org.opentest4j/opentest4j@1.3.0?type=jar",
        "pkg:maven/org.junit.platform/junit-platform-commons@6.1.3?type=jar",
        "pkg:maven/org.apiguardian/apiguardian-api@1.1.2?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.opentest4j/opentest4j@1.3.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.junit.platform/junit-platform-commons@6.1.3?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apiguardian/apiguardian-api@1.1.2?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apiguardian/apiguardian-api@1.1.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.junit.jupiter/junit-jupiter-params@6.1.3?type=jar",
      "dependsOn" : [
        "pkg:maven/org.junit.jupiter/junit-jupiter-api@6.1.3?type=jar",
        "pkg:maven/org.apiguardian/apiguardian-api@1.1.2?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.mockito/mockito-core@5.24.0?type=jar",
      "dependsOn" : [
        "pkg:maven/net.bytebuddy/byte-buddy@1.17.7?type=jar",
        "pkg:maven/net.bytebuddy/byte-buddy-agent@1.17.7?type=jar",
        "pkg:maven/org.objenesis/objenesis@3.3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/net.bytebuddy/byte-buddy@1.17.7?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/net.bytebuddy/byte-buddy-agent@1.17.7?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.objenesis/objenesis@3.3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.assertj/assertj-core@4.0.0-M1?type=jar",
      "dependsOn" : [
        "pkg:maven/net.bytebuddy/byte-buddy@1.17.7?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.xmlunit/xmlunit-assertj3@2.14.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.xmlunit/xmlunit-core@2.14.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.mockito/mockito-junit-jupiter@5.24.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.mockito/mockito-core@5.24.0?type=jar",
        "pkg:maven/org.junit.jupiter/junit-jupiter-api@6.1.3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.groovy/groovy@6.0.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.jimfs/jimfs@1.3.2?type=jar",
      "dependsOn" : [
        "pkg:maven/com.google.guava/guava@33.7.1-jre?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.google.guava/guava@33.7.1-jre?type=jar",
      "dependsOn" : [
        "pkg:maven/com.google.guava/failureaccess@1.0.3?type=jar",
        "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
        "pkg:maven/com.google.errorprone/error_prone_annotations@2.50.0?type=jar",
        "pkg:maven/com.google.j2objc/j2objc-annotations@3.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.google.guava/failureaccess@1.0.3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.50.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.j2objc/j2objc-annotations@3.1?type=jar",
      "dependsOn" : [ ]
    }
  ]
}