<?xml version="1.0" encoding="UTF-8"?>
<bom serialNumber="urn:uuid:7ceac913-aae5-3cc8-93ad-80c2049db868" version="1" xmlns="http://cyclonedx.org/schema/bom/1.6">
  <metadata>
    <lifecycles>
      <lifecycle>
        <phase>build</phase>
      </lifecycle>
    </lifecycles>
    <tools>
      <components>
        <component type="library">
          <author>OWASP Foundation</author>
          <group>org.cyclonedx</group>
          <name>cyclonedx-maven-plugin</name>
          <version>2.9.3</version>
          <description>CycloneDX Maven plugin</description>
          <hashes>
            <hash alg="MD5">e7c87ab327b65b23c681fc9dc8bb620b</hash>
            <hash alg="SHA-1">fa3f0f04f4d5077b5e085d4d09aa2e68aeba5260</hash>
            <hash alg="SHA-256">c452d5eebe28bc86bef2e7c72d129f04f60877bef843eac8120f01fb655be293</hash>
            <hash alg="SHA-512">ec0344ed2ffe62d565aaf936a37140d04c7fffa8669a666be0366cd44eec3195232d79841cdec47030b79068216ac7e1a8c805255758e3d418dae32a4b9b9beb</hash>
            <hash alg="SHA-384">3df26b2a00d87fe090851975ebcc30217f98634e7c47d07128e148f325ebfe3bc0790b2f52ad4591734b7b0de738f003</hash>
            <hash alg="SHA3-384">470c1b4962379b5b6494c75bd1475da3519bbe2543999c95f26b4021164d3d05419b0c3f704443162fe5433a204250e9</hash>
            <hash alg="SHA3-256">900e9c4edb18940ed3c4a4ba6946957fa613ef0d4b0c380551638f229206373c</hash>
            <hash alg="SHA3-512">5e36433e18ae24f7460902da27818874df5d1d73df1a97e49e7369335f7cc61ca595466a2d37789fba7eaa7f7f251b29216c3d7a78910b2ec38e2ed68ea84876</hash>
          </hashes>
        </component>
      </components>
    </tools>
    <component type="library" bom-ref="pkg:maven/org.apache.rat/apache-rat-core-tests@0.19-SNAPSHOT?type=jar">
      <publisher>Apache Software Foundation</publisher>
      <group>org.apache.rat</group>
      <name>apache-rat-core-tests</name>
      <version>0.19-SNAPSHOT</version>
      <description>The test code for the core functionality of RAT that is used by all clients.</description>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.rat/apache-rat-core-tests@0.19-SNAPSHOT?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://creadur.apache.org/rat/apache-rat-core-tests/</url>
        </reference>
        <reference type="build-system">
          <url>https://ci-builds.apache.org/job/Creadur/job/Creadur-Rat/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/RAT</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/creadur-dev/</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=creadur-rat.git/apache-rat-core-tests</url>
        </reference>
      </externalReferences>
    </component>
    <properties>
      <property name="maven.goal">makeBom</property>
      <property name="maven.scopes">compile,provided,runtime,system</property>
      <property name="cdx:reproducible">enabled</property>
    </properties>
  </metadata>
  <components>
    <component type="library" bom-ref="pkg:maven/org.reflections/reflections@0.10.2?type=jar">
      <group>org.reflections</group>
      <name>reflections</name>
      <version>0.10.2</version>
      <description>Reflections - Java runtime metadata analysis</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">1d0070839d825f57fe6f4d8e2a82989b</hash>
        <hash alg="SHA-1">b638d7ca0e0fe0146b60a0e7ba232ad852a73b31</hash>
        <hash alg="SHA-256">938a2d08fe54050d7610b944d8ddc3a09355710d9e6be0aac838dbc04e9a2825</hash>
        <hash alg="SHA-512">d04700d4b6d3f28faa611e10ce863df1d6c82dfc6dd1b27cb910e44c19089ca08bef939e2bca7bc79274836f8e9d8801c4326232d24a38dba0a4893a20c7c42c</hash>
        <hash alg="SHA-384">2604ea7e2330b2c60dbc4177076b50b28a056083fe34cca9005b63f7efbba4d8513d1f21b56c296a73292b2003ce1722</hash>
        <hash alg="SHA3-384">7b5b12126cc3efb23335cdf73e01b19d714c17072038dc03534f1f596f2cdbe4b8d224e806326b1e7bd82a1eaf221a54</hash>
        <hash alg="SHA3-256">b1c978e8eb1bc3826d310deba7adfd02f0a90978dcd67867aa3f373a196e4caf</hash>
        <hash alg="SHA3-512">023c9a40f84b7f822f6d62f6a6ea3fc09ebcd489916085cb501818cd2c6af69e2561b2217c6d5d2cb8d99d87399343df2f863aa919e80d0a49502a5362f8744c</hash>
      </hashes>
      <licenses>
        <license>
          <id>WTFPL</id>
          <url>http://www.wtfpl.net/about/</url>
        </license>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.reflections/reflections@0.10.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://github.com/ronmamo/reflections</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/ronmamo/reflections/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/ronmamo/reflections/issues</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.javassist/javassist@3.28.0-GA?type=jar">
      <publisher>Shigeru Chiba, www.javassist.org</publisher>
      <group>org.javassist</group>
      <name>javassist</name>
      <version>3.28.0-GA</version>
      <description>Javassist (JAVA programming ASSISTant) makes Java bytecode manipulation
    simple.  It is a class library for editing bytecodes in Java.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">1a2dd8c76321cef26cc2669fe70a2557</hash>
        <hash alg="SHA-1">9a958811a88381bb159cc2f5ed79c34a45c4af7a</hash>
        <hash alg="SHA-256">57d0a9e9286f82f4eaa851125186997f811befce0e2060ff0a15a77f5a9dd9a7</hash>
        <hash alg="SHA-512">49d3109104f01efda1ae8a6145fdb91d1b1331587e2981f6cc1a1b991c50af97e8febfea5d9d224a106cab877c1e4850d183eb3c7316b82e62e51b6ca3fc29e8</hash>
        <hash alg="SHA-384">b71fc9564c478edebbf19b4044bb9cfb80996f779685d79f6a779d98ce3823b5aa234b91b9da35317ebf4534e1e65a31</hash>
        <hash alg="SHA3-384">bd7f7f52a05aebf17286e7101cafdcb19eb52f14731ce9ad287c07a14f676a8bbba78238e636d2ff5585a90f02f57b82</hash>
        <hash alg="SHA3-256">bf8cbfa03a6c53bb8aad510a7c6623d5e28f8189295f0dc2a0998993ca8df0d7</hash>
        <hash alg="SHA3-512">30a7c36e4b4089a5586dd0cb0f8cba1260fbed95e221bd623a66b1d07ff9565227d31c0fd0d131cda9d97483441f08e619aa8bbc758c0df66f3345da7b5adf68</hash>
      </hashes>
      <licenses>
        <license>
          <id>MPL-1.1</id>
        </license>
        <license>
          <id>LGPL-2.1-only</id>
        </license>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.javassist/javassist@3.28.0-GA?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://www.javassist.org/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.jboss.org/nexus/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://jira.jboss.org/jira/browse/JASSIST/</url>
        </reference>
        <reference type="vcs">
          <url>scm:git:git@github.com:jboss-javassist/javassist.git</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar">
      <group>com.google.code.findbugs</group>
      <name>jsr305</name>
      <version>3.0.2</version>
      <description>JSR305 Annotations for Findbugs</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">dd83accb899363c32b07d7a1b2e4ce40</hash>
        <hash alg="SHA-1">25ea2e8b0c338a877313bd4672d3fe056ea78f0d</hash>
        <hash alg="SHA-256">766ad2a0783f2687962c8ad74ceecc38a28b9f72a2d085ee438b7813e928d0c7</hash>
        <hash alg="SHA-512">bb09db62919a50fa5b55906013be6ca4fc7acb2e87455fac5eaf9ede2e41ce8bbafc0e5a385a561264ea4cd71bbbd3ef5a45e02d63277a201d06a0ae1636f804</hash>
        <hash alg="SHA-384">ca0b169d3eb2d0922dc031133a021f861a043bb3e405a88728215fd6ff00fa52fdc7347842dcc2031472e3726164bdc4</hash>
        <hash alg="SHA3-384">9903fd7505218999f8262efedb3d935d64bcef84aae781064ab5e1b24755466b269517cada562fa140cd1d417ede57a1</hash>
        <hash alg="SHA3-256">223fda9a89a461afaae73b177a2dc20ed4a90f2f8757f5c65f3241b0510f00ff</hash>
        <hash alg="SHA3-512">3996b5af57a5d5c6a0cd62b11773360fb051dd86a2ba968476806a2a5d32049b82d69a24a3c694e8fe4d735be6a28e41000cc500cc2a9fb577e058045855d2d6</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://findbugs.sourceforge.net/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="vcs">
          <url>https://code.google.com/p/jsr-305/</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.slf4j/slf4j-api@1.7.32?type=jar">
      <publisher>QOS.ch</publisher>
      <group>org.slf4j</group>
      <name>slf4j-api</name>
      <version>1.7.32</version>
      <description>The slf4j API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">fbcf58513bc25b80f075d812aad3e3cf</hash>
        <hash alg="SHA-1">cdcff33940d9f2de763bc41ea05a0be5941176c3</hash>
        <hash alg="SHA-256">3624f8474c1af46d75f98bc097d7864a323c81b3808aa43689a6e1c601c027be</hash>
        <hash alg="SHA-512">4ca4045775a879c3ce3021908db7b4778235a322fd8e2567da960156f24b9da86e6812a4956c8dc19920cd83e4c61141168c580829f43f10bbac925d465c3fd1</hash>
        <hash alg="SHA-384">c95aa5a652533b3b54e721b7f20c4ef19a022ac6c8cd353b032bfd65f636b1adc3eb2e5ca0b409f19456e265cbfd3cb0</hash>
        <hash alg="SHA3-384">b08f2d668d9233a3380c37c028486014db65000e918aa1c59e2db35fb5661b3a40183e51677b73a5d96a308f9c2346c0</hash>
        <hash alg="SHA3-256">f6a3b253b2c5a06a9559fd9f21e36d04198e660d4e9437ddeb78245969f03fe4</hash>
        <hash alg="SHA3-512">0a45c046c106cf88a510bde208b1ac92d7b3dc547b2516583afdbb829219ec31b0bba9fc4b7fd240d2ef859abb722ce307f9572d87409d261887130a5df6827d</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
          <url>https://opensource.org/license/mit/</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.slf4j/slf4j-api@1.7.32?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://www.slf4j.org</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/qos-ch/slf4j/slf4j-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.rat/apache-rat-core@0.19-SNAPSHOT?type=jar">
      <publisher>Apache Software Foundation</publisher>
      <group>org.apache.rat</group>
      <name>apache-rat-core</name>
      <version>0.19-SNAPSHOT</version>
      <description>The core functionality of RAT that is used by all clients.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">e671fae9904c8bd07552507659f2e554</hash>
        <hash alg="SHA-1">acf7eae2e30bb50d6cfe59415038bbe8a8506b65</hash>
        <hash alg="SHA-256">208ba5b331d11c2e6da1172950ccccd602e3d42a7216fe0fb0d650926eb40f1b</hash>
        <hash alg="SHA-512">45a92484845524963ee78f67a99bd7a9da9232ba00dd39c5ad91d941efb62e0f10ff048e3bb92132cfc09caf9c67994f6055c7f9c8983ff382bff51b5a2f8f79</hash>
        <hash alg="SHA-384">aecead90bfd39aeeee90adb8cff7f53dcf42c98e7d549ed98432015604745321946d5cf176b02f32f9a6e4d2863bfedd</hash>
        <hash alg="SHA3-384">87ee343407263c02a55dad3e07f659d3af505aef732d662624d7f889083bb2439b764744d10dfeba10330a60d42265cc</hash>
        <hash alg="SHA3-256">523372fd279936f87d1e36def2f76448f6057ebfe1aac4ac370fe081e44d7a90</hash>
        <hash alg="SHA3-512">3c47cc87b71fc7003ff540876880ca53a5d11654f2f1124a4fafa3d881bf934895ebeea3e87313b721d17469a198f499f39216a4a91e618ad2dcd5ea9725727b</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.rat/apache-rat-core@0.19-SNAPSHOT?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://creadur.apache.org/rat/apache-rat-core/</url>
        </reference>
        <reference type="build-system">
          <url>https://ci-builds.apache.org/job/Creadur/job/Creadur-Rat/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/RAT</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/creadur-dev/</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=creadur-rat.git/apache-rat-core</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.github.spotbugs/spotbugs-annotations@4.10.5?type=jar">
      <group>com.github.spotbugs</group>
      <name>spotbugs-annotations</name>
      <version>4.10.5</version>
      <description>Annotations the SpotBugs tool supports</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">1252eef45ba52209b89fe0203bf9a633</hash>
        <hash alg="SHA-1">5cf6042318b3d7c43fa159dd86796fc8cc31bb3c</hash>
        <hash alg="SHA-256">2f28af17ad61a7daad0f3df070198c4a5807d3ffd98a5408f670cd19fc2dce84</hash>
        <hash alg="SHA-512">b8f5e25f0285960fc801d38436843f4501f81ffa1ce78df72c9849f41dc281c5dda8911c3355d15aae633a3209b5d79a6d5286f76f58a58c1e25397cf242c653</hash>
        <hash alg="SHA-384">2ab9965b71ae78b596153700b8c8b3662242299cbb9a6a6ba08eaa5612747a4381362a0676050cff0da89bb72c498758</hash>
        <hash alg="SHA3-384">80a83059e6667fd6bcab0b50b5671565d18290f2886dee0b1c95d8cc77bbccbcd43643bcec038f50a0c7b2101f976b20</hash>
        <hash alg="SHA3-256">3d3de7e7f08ab3caada7974c120802eef194ae604e6b4546d9dfc903e44b5d05</hash>
        <hash alg="SHA3-512">d599143fe1d336d54edeab244dd6ddf69a9a8a73eb752301f1ce4b8f455c3592359b2d023ded860812d6639380cb838293bb10f489ffd2617b2bcdef160ed35b</hash>
      </hashes>
      <licenses>
        <license>
          <id>LGPL-2.1-only</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.github.spotbugs/spotbugs-annotations@4.10.5?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://spotbugs.github.io/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/spotbugs/spotbugs/</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.velocity/velocity-engine-core@2.4.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.velocity</group>
      <name>velocity-engine-core</name>
      <version>2.4.1</version>
      <description>Apache Velocity is a general purpose template engine.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">41a3757dc9d701590be703d1f2bd2462</hash>
        <hash alg="SHA-1">0b662837e8006d5c383bd128503ea86ef5b4d361</hash>
        <hash alg="SHA-256">1c19157d1171d560088e485be97c93a7a2f7e9f56e517f0a30273c5c39df6231</hash>
        <hash alg="SHA-512">77150ed775e644be44d9f1ead19a880c8a02cba18dae97aec4ea8f14db04ee795bce35bd2e5314f2e95d40c01441da954327348f91addc9bb8d0cc9f7c00f561</hash>
        <hash alg="SHA-384">87cb5f02de5e137db4426938d783233d274b41786de2f27719e8469e188822911acce66992ae074b22a9ff47c0997c38</hash>
        <hash alg="SHA3-384">a6671daa3dc0091fbca6fdcb7d8799adee1c1c5c68de7da0a0f07870bb22ed94fe9a705223bf23e90b7f7f5a4d12a5c4</hash>
        <hash alg="SHA3-256">71c8123c1c4bb5fb839e70d229545139b2da58fa3e3d9b09355d355b6f56c595</hash>
        <hash alg="SHA3-512">381c65e4a7026fc680fd37ffe53616f93b4dba2dc9cbd98f76c56e3e5a4ea2dbd5fa82e6b10da7df1dd3b1b4017d7a583a2777cef421f04412893b27e6202a22</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.velocity/velocity-engine-core@2.4.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://velocity.apache.org/engine/devel/velocity-engine-core/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/VELOCITY</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?general@velocity.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=velocity-engine.git/velocity-engine-core</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.velocity.tools/velocity-tools-generic@3.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.velocity.tools</group>
      <name>velocity-tools-generic</name>
      <version>3.1</version>
      <description>Generic tools that can be used in any context.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">76f13879ead8693fd4d5751a8a236089</hash>
        <hash alg="SHA-1">07aaa49086a64cd9dab967a8437cc03abbfad655</hash>
        <hash alg="SHA-256">8258cfdcaa16127f35ffe610a3fa4f76b7ebe51b88922c73c4ee39ce8f378ce5</hash>
        <hash alg="SHA-512">51e7249e92d516f9e8a92a1068856d920edee512563131cca2dede45ed6de0e8667dfe0f54cd59712f255f9019d92ea521b8182622ba303af3a45b9740a6d54b</hash>
        <hash alg="SHA-384">7aadd12f098af99f43a390b4620ffba74008dd3308fbdd18ca0c012929b80196f3977b8748c967312e12546f8e065ce1</hash>
        <hash alg="SHA3-384">221fa964a36d4ee566a50164569df5f905082f2c94cf95bb763e1611f77806bb63000bade25fa3d205d16eea576d7781</hash>
        <hash alg="SHA3-256">3aa26883c32b31553ba468cd678ae0b6aa70272a683aea0d0cb8149afe404dc9</hash>
        <hash alg="SHA3-512">5d32822a5d3c913dacdece7c1415016b6f7f1320589397509c4ea689ae3a585e289acdaed7df14e2fe64be466956179b3260211bca013c11f71fa0542d28336d</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.velocity.tools/velocity-tools-generic@3.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://velocity.apache.org/tools/devel/velocity-tools-generic/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/VELTOOLS</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?general@velocity.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=velocity-tools.git/velocity-tools-generic</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-beanutils/commons-beanutils@1.9.4?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-beanutils</group>
      <name>commons-beanutils</name>
      <version>1.9.4</version>
      <description>Apache Commons BeanUtils provides an easy-to-use but flexible wrapper around reflection and introspection.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">07dc532ee316fe1f2f0323e9bd2f8df4</hash>
        <hash alg="SHA-1">d52b9abcd97f38c81342bb7e7ae1eee9b73cba51</hash>
        <hash alg="SHA-256">7d938c81789028045c08c065e94be75fc280527620d5bd62b519d5838532368a</hash>
        <hash alg="SHA-512">7762b348caecead49038a38a89754ff7d9be6199324315495ba47cf24f52c06faadf9306d925c8fe47c587589a939c82e491e1c730267fdf354243a68c0f96ff</hash>
        <hash alg="SHA-384">dcd3845917b8fb189cf4034b0d7c6d266ec7110f85ffbd2711cdea9eb94b4fa3e1cee9120b484c6a120b82769230ed3a</hash>
        <hash alg="SHA3-384">dfdb8845989be083de807184910124ad7e7e372959b34686cd5f5020f193a2997831ead497b0a5a0233f031aecdf55f6</hash>
        <hash alg="SHA3-256">127a81068335d6ca47f5f5e12d849dc1bc5300b2ad8d3f9b64ca30ff2a76d479</hash>
        <hash alg="SHA3-512">f67405d0a7667adf7cd35cd7416c54e1759380cdb9c8f179a10175058e40292808e17e69d48df4d4d6b5e268c314127cf3ab87af6920a271bb2e6e0df963940d</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/commons-beanutils/commons-beanutils@1.9.4?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://commons.apache.org/proper/commons-beanutils/</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/BEANUTILS</url>
        </reference>
        <reference type="mailing-list">
          <url>http://mail-archives.apache.org/mod_mbox/commons-user/</url>
        </reference>
        <reference type="vcs">
          <url>http://svn.apache.org/viewvc/commons/proper/beanutils/tags/BEANUTILS_1_9_3_RC3</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-logging/commons-logging@1.2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-logging</group>
      <name>commons-logging</name>
      <version>1.2</version>
      <description>Apache Commons Logging is a thin adapter allowing configurable bridging to other,
    well known logging systems.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">040b4b4d8eac886f6b4a2a3bd2f31b00</hash>
        <hash alg="SHA-1">4bfc12adfe4842bf07b657f0369c4cb522955686</hash>
        <hash alg="SHA-256">daddea1ea0be0f56978ab3006b8ac92834afeefbd9b7e4e6316fca57df0fa636</hash>
        <hash alg="SHA-512">ed00dbfabd9ae00efa26dd400983601d076fe36408b7d6520084b447e5d1fa527ce65bd6afdcb58506c3a808323d28e88f26cb99c6f5db9ff64f6525ecdfa557</hash>
        <hash alg="SHA-384">ac20720d7156131478205f1b454395abf84cfc8da2f163301af32f63bd3c4764bd26cb54ed53800f33193ae591f3ce9c</hash>
        <hash alg="SHA3-384">628eb4407e95dca84da1a06b08a6d9b832a49de8472b1b217e8607f08efeeed18b996232d64dd07f03e78e0e3bb4b078</hash>
        <hash alg="SHA3-256">9aab62deccf156ee6e324c925dfc30ecb53e8465802863a551901a461424e807</hash>
        <hash alg="SHA3-512">3fd76857f6d20c03799537cc961c1c4ddf1c375c6c192fb982363e3b9397ba138b77f24ef38b4202f44e37586789c0320e4de18fdadd2772304fd14a9b26d552</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/commons-logging/commons-logging@1.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://commons.apache.org/proper/commons-logging/</url>
        </reference>
        <reference type="build-system">
          <url>https://continuum-ci.apache.org/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>http://issues.apache.org/jira/browse/LOGGING</url>
        </reference>
        <reference type="mailing-list">
          <url>http://mail-archives.apache.org/mod_mbox/commons-user/</url>
        </reference>
        <reference type="vcs">
          <url>http://svn.apache.org/repos/asf/commons/proper/logging/trunk</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-collections/commons-collections@3.2.2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-collections</group>
      <name>commons-collections</name>
      <version>3.2.2</version>
      <description>Types that extend and augment the Java Collections Framework.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">f54a8510f834a1a57166970bfc982e94</hash>
        <hash alg="SHA-1">8ad72fe39fa8c91eaaf12aadb21e0c3661fe26d5</hash>
        <hash alg="SHA-256">eeeae917917144a68a741d4c0dff66aa5c5c5fd85593ff217bced3fc8ca783b8</hash>
        <hash alg="SHA-512">51c72f9aca7726f3c387095e66be85a6df97c74b00a25434b89188c1b8eab6e2b55accf7b9bd412430d22bd09324dec076e300b3d1fa39fccad471f0f2a3da16</hash>
        <hash alg="SHA-384">dd4e99b3314bd3c1a1ee26296615d9e44dadf7a1f8a7bbba44fb95121803d331e36d4cca4260e7609af78a47ba3e4073</hash>
        <hash alg="SHA3-384">8ce03528e4a6e95c44283b56eca87e6a6d3bf1363411a55b538f4f9110cf7470581ea5c73925e877ddab08dba0603f40</hash>
        <hash alg="SHA3-256">fd3d6134b5f07077b82ccf93d148dacf7c4ce5c971209510edd0e77e3e38c19e</hash>
        <hash alg="SHA3-512">c2a523916fb7c7d55a05d5e3d9e9b33000733f4b20a71be174e4e093e3f06ea78ad831edd1505527da7388105f8647efb7d5666ba852c90b4e2d5bb74256efbc</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/commons-collections/commons-collections@3.2.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://commons.apache.org/collections/</url>
        </reference>
        <reference type="build-system">
          <url>https://continuum-ci.apache.org/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>http://issues.apache.org/jira/browse/COLLECTIONS</url>
        </reference>
        <reference type="mailing-list">
          <url>http://mail-archives.apache.org/mod_mbox/commons-user/</url>
        </reference>
        <reference type="vcs">
          <url>http://svn.apache.org/viewvc/commons/proper/collections/trunk</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-digester3@3.2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-digester3</name>
      <version>3.2</version>
      <description>The Apache Commons Digester package lets you configure an XML to Java
    object mapping module which triggers certain actions called rules whenever
    a particular pattern of nested XML elements is recognized.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">41d2c62c7aedafa7a3627794abc83f71</hash>
        <hash alg="SHA-1">c3f68c5ff25ec5204470fd8fdf4cb8feff5e8a79</hash>
        <hash alg="SHA-256">1c150e3d2df4b4237b47e28fea2079fb0da324578d5cca6a5fed2e37a62082ec</hash>
        <hash alg="SHA-512">a2063f01fd50f96cfd8765c49935249a77df47965ff0ae375bb1f1e47e3cdeb5e82eaf0b0e32183e581c01821499f9d4c57419e90352a7aa96b97850950e8652</hash>
        <hash alg="SHA-384">1691e34753c8ce3bb16729de8901f65def9362a989887e7b5d3cb05ded854e5b25b01b7725201228a97d17c4d68eb5f1</hash>
        <hash alg="SHA3-384">aaf22fbe0faa7303fc7b3c96ece73ae0e980ebd01454e344f612f7ccb10059c89d29cd579fbf2d211967708a7884a5c2</hash>
        <hash alg="SHA3-256">0c06a70800e0baf107e23e79a2eb7087694e06565fb9a27dc1ec920420b25fb1</hash>
        <hash alg="SHA3-512">2ed528a469c368296f63b6c1bc0ffe0eb01208cf8adf4127c350d38223c47550409e572c33ac2ed567792cb44b46cc002c5a0ec52019beccdedcc5dcc84a7155</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-digester3@3.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://commons.apache.org/digester/</url>
        </reference>
        <reference type="build-system">
          <url>http://vmbuild.apache.org/continuum/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>http://issues.apache.org/jira/browse/DIGESTER</url>
        </reference>
        <reference type="mailing-list">
          <url>http://mail-archives.apache.org/mod_mbox/commons-user/</url>
        </reference>
        <reference type="vcs">
          <url>http://svn.apache.org/viewvc/commons/proper/digester/tags/DIGESTER3_3_2_RC2</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.github.cliftonlabs/json-simple@3.0.2?type=jar">
      <group>com.github.cliftonlabs</group>
      <name>json-simple</name>
      <version>3.0.2</version>
      <description>Java 7+ toolkit to quickly develop RFC 4627 JSON compatible applications.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">148c0d1bdc1bcb24394627d6930ee9ad</hash>
        <hash alg="SHA-1">2337afdb06134a12fc0239299c3ceb2e9c209516</hash>
        <hash alg="SHA-256">fda65a9ad0e1ac0c88987106e89aa4d8b2a2495e7e042371efa83813f65b7295</hash>
        <hash alg="SHA-512">c77f7423fd96b5b6159236536e4e4b509032cea94368186b86c99f4ec72cf40ecfb26821cc7124077363902ce2b91644e32e53fa7de3fce9885b400b0424ecd0</hash>
        <hash alg="SHA-384">805dced7fef08b98489ff09ffedda93998369ed6a024674f09ae8d4e62e8ffab5da235d64e5f91eabc1840f6695a7e43</hash>
        <hash alg="SHA3-384">d0a6dc8d23efc7dd2bd19036d8550a7ea1125528872765ab3094c72b9d76d287e7909abec239d4d8bae2a1d55c8621f6</hash>
        <hash alg="SHA3-256">d4239bd87f94a37ab4eeb653d9789a5a53899e5074d93ba66bea26f80b1ea2ca</hash>
        <hash alg="SHA3-512">448912379c297b72afad74ab6f7c9ef796046476dcaa8a2b4f1905ace248c4f52558c4683b3887e1aeddb03029b9b41ef8a90841cfd088734061c35489eb69b5</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.github.cliftonlabs/json-simple@3.0.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://cliftonlabs.github.io/json-simple/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/cliftonlabs/json-simple.git</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-collections4@4.6.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-collections4</name>
      <version>4.6.0</version>
      <description>The Apache Commons Collections package contains types that extend and augment the Java Collections Framework.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">a5eb5df0e00b5bd4141ae277a4a79335</hash>
        <hash alg="SHA-1">e3f46a0753e01b8397363ba0edbfb6ec38dedf0a</hash>
        <hash alg="SHA-256">4e0d0896bac5356cead277bac0283f09813e14417e3e84e0c86b573b54d218a3</hash>
        <hash alg="SHA-512">76fc3fe1e6926d25f73493595bca77441cf725843c394ed0783c117c4cb9d6d843ca48c60ca1298fcc70c3f0561ea8c2a190749b75ed6b56b286c33f7b2e68a2</hash>
        <hash alg="SHA-384">86410414852843ecc833d5c9621465934275a07de2d655531915db6fda60324570f93e693d805bd9253b91455dc4559b</hash>
        <hash alg="SHA3-384">73567085cbd5b9358bbfd945ea53496a83db008d6591dcf62afa9b958b2c6f49d3df65910ec034566f6ac9f85203e708</hash>
        <hash alg="SHA3-256">06b33d314b2939264a6d315af71c916e00f17bde6412c533cccb7ccf6e5cb94e</hash>
        <hash alg="SHA3-512">8b3d996784c2978bfc9e5b61340ca0505817514abe54676b22ebd7e36b191ff96ec6978108b8757395fc5d348d36bec45ad24f2e6a9d35ad725299b606dbe24e</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-collections4@4.6.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://commons.apache.org/proper/commons-collections/</url>
        </reference>
        <reference type="build-system">
          <url>https://github.com/apache/commons-collections/actions</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/COLLECTIONS</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/commons-user/</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=commons-collections.git</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-compress@1.28.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-compress</name>
      <version>1.28.0</version>
      <description>Apache Commons Compress defines an API for working with
compression and archive formats. These include bzip2, gzip, pack200,
LZMA, XZ, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4,
Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">f33efe616d561f8281ef7bf9f2576ad0</hash>
        <hash alg="SHA-1">e482f2c7a88dac3c497e96aa420b6a769f59c8d7</hash>
        <hash alg="SHA-256">e1522945218456f3649a39bc4afd70ce4bd466221519dba7d378f2141a4642ca</hash>
        <hash alg="SHA-512">f1f140f4f40ab3cf3265919db9dbb95a631a29aa784e305f291de4e68876bb711d9217d62d7937cddddd393982decdf71a608b4b3ab7f4e6375cf28af2893d7f</hash>
        <hash alg="SHA-384">afe6a8fc8e7486c4ecce95276bb1467763d7ff7d941c7bcff8661bbbd4bff442fd0899ff7a11bc540cda86818ee4a8f0</hash>
        <hash alg="SHA3-384">6afb636ad0805e522913cfd91c8293c485b7f4eff5e45dd3a17a716c3f4b8ab8969e9c00927559a5fb762cba1fdb3d3f</hash>
        <hash alg="SHA3-256">4420e0b462b5dcc45077e95e012a82a5ae17659e5abe8a685fa086dab6995298</hash>
        <hash alg="SHA3-512">23e37d13c8ee6c7369e407c29d1f9ee1bb44eca9f09a6f9742f6b4cf3d38dd7a0509fe0142536cd8087b68a76e71d819105af2c23f2aeed08acc58eb93cf7e61</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-compress@1.28.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://commons.apache.org/proper/commons-compress/</url>
        </reference>
        <reference type="build-system">
          <url>https://github.com/apache/commons-compress/actions</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/COMPRESS</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/commons-user/</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=commons-compress.git</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-codec/commons-codec@1.19.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-codec</group>
      <name>commons-codec</name>
      <version>1.19.0</version>
      <description>The Apache Commons Codec component contains encoders and decoders for
     formats such as Base16, Base32, Base64, digest, and Hexadecimal. In addition to these
     widely used encoders and decoders, the codec package also maintains a
     collection of phonetic encoding utilities.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">e46fa78c69544eb6239c4e8447e72544</hash>
        <hash alg="SHA-1">8c0dbe3ae883fceda9b50a6c76e745e548073388</hash>
        <hash alg="SHA-256">5c3881e4f556855e9c532927ee0c9dfde94cc66760d5805c031a59887070af5f</hash>
        <hash alg="SHA-512">d98a7a1cfcc08aa9cce4f7778e3f37ecb99da7b1da01944e5fa8faf06fbf9f969f2efb0b416832f419d53085250f711c071f1dac9fa0968483c37034198367fb</hash>
        <hash alg="SHA-384">f0edec3cd84b2320e6930380d3fe13335d33f041470d27fb93789db0c696ec01dda21b471f0015bf70bffffcbfdb67c0</hash>
        <hash alg="SHA3-384">ce771ef9f0df326a34ab37e70f710801bb18d545aca0ee492db62770db323ab8a0b5082123ca4826f3d3182748537cfc</hash>
        <hash alg="SHA3-256">8296db95bb2fac86a0eb68e61e9730084f4272ad6a4a4327a5259c631840e98e</hash>
        <hash alg="SHA3-512">05da2f8674a257c5d8a1137cadbda71d2635f22237450bf2cbc980380a56905247bea38049c8cd80e60077be2be73b1eae6b466c228e4277763a54979cf856fb</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/commons-codec/commons-codec@1.19.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://commons.apache.org/proper/commons-codec/</url>
        </reference>
        <reference type="build-system">
          <url>https://github.com/apache/commons-cli/actions</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/CODEC</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/commons-user/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/commons-codec</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-secure-xml@1.1.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-secure-xml</name>
      <version>1.1.0</version>
      <description>Apache Commons Secure XML provides secure-by-default JAXP factory creation, abstracting over
    implementation-specific XXE securing differences between the stock JDK and external JAXP implementations
    (Android, Apache Xalan, Apache Xerces, Woodstox, Saxon-HE).</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">5710b4a81385d66dc09a692387a57432</hash>
        <hash alg="SHA-1">4b8d6a78eb5ba294841aa74d5f1b733956640733</hash>
        <hash alg="SHA-256">5fc54f0d153bb9c42379a434a05177e79bbfddec7791c383370da1f592789513</hash>
        <hash alg="SHA-512">680350b0cdb3bd336db4ca0d4d76e0239db33d8d0f66496dd6aa478d2ceca6c68a5623546d2ea25ce6edd1a6a35f83e274605424d77cdc1e8e69a8908236d600</hash>
        <hash alg="SHA-384">1dea5a6f3d69b71a397e6f2d7d9623dfd41b76a4741488dda13cefdfcc9a315822d8de81b3366df0fe38a3181062b2ea</hash>
        <hash alg="SHA3-384">a3cfefb1fd588d3130c2a035dc4f34e2c9eca0874ee858cd4d8e3dbdf0ca015961a0ad0794bce4384b685dd5d50461bb</hash>
        <hash alg="SHA3-256">04ec27f49983e4ee07091b2ce01b5c93f2880cb0d7972e5c5d2251531df85ac2</hash>
        <hash alg="SHA3-512">302f0ef4d84708440d8d7a0460d0d548440fe0cc78cec958b338ad30617679a4d4054f5b86ddf4449ac201dfb40e1cea843854510d13547f335ec1bc32f5ca3f</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-secure-xml@1.1.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://commons.apache.org/proper/commons-secure-xml/</url>
        </reference>
        <reference type="build-system">
          <url>https://github.com/apache/commons-secure-xml/actions</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/COMMONSXML</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/commons-user/</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=commons-secure-xml.git</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.tika/tika-parser-text-module@4.2.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.tika</group>
      <name>tika-parser-text-module</name>
      <version>4.2.0</version>
      <description>Apache Tika is a toolkit for detecting and extracting metadata and
    structured text content from various documents using existing parser
    libraries.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">f12c0dd46ed32dd9589204b4445b2cd4</hash>
        <hash alg="SHA-1">8863098fb20929817a40a058ebe1a184b4caa41e</hash>
        <hash alg="SHA-256">c44d20e31d2de25a0878d8b61b871abffd9ce01caa7e2c46436687b8e7df54a8</hash>
        <hash alg="SHA-512">3f9c6094fff40cba03d4eb2379a055295edd2e67a1fde3f318de36681e0ee573742cbb8a4b94aa22fe68cdb54c37e9dbb2383109daf9711bf5e184489eb544c2</hash>
        <hash alg="SHA-384">93e7f50c0b4034dd61c260c9d9c389749a5a2258b17ca000a866d8ec9f8ab448aa7f1073e102bf228607704ff32e7b7e</hash>
        <hash alg="SHA3-384">c97915188164a67e4b376c64622a6bb0a859487bfe8bb3ce20bdbf6829ee70496eb7e4b0fad77339e650b8bf88c1e62c</hash>
        <hash alg="SHA3-256">8ee2b931a655e11234680ddffbea40c3cb4024a0aa5503b076b1d94051a35a25</hash>
        <hash alg="SHA3-512">44ec2e5e138a63347d4cfe5a5f49cbee41d0133abc5a0b708f82920b1c6fef54c722da2dc7552141ae5f2e85c0aeda35e6beb790b11d9f2ca069782c3d2801a6</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.tika/tika-parser-text-module@4.2.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://tika.apache.org/tika-parser-text-module/</url>
        </reference>
        <reference type="build-system">
          <url>https://ci-builds.apache.org/job/Tika/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/TIKA</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?dev@tika.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/tika</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.tika/tika-encoding-detector-mojibuster@4.2.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.tika</group>
      <name>tika-encoding-detector-mojibuster</name>
      <version>4.2.0</version>
      <description>ML-based charset encoding detector.  MojibusterEncodingDetector
    runs structural detectors for UTF-32 / UTF-16 / UTF-8 and then a
    33-class byte-bigram Naive Bayes classifier covering CJK multi-byte,
    EBCDIC, DOS OEM, Cyrillic, Windows single-byte, ISO-8859, and Mac
    encodings.  This detector replaces ICU4J and juniversalchardet as the
    default statistical encoding detector in Tika.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">1efc30b7eeb99dbe87951b65486885dc</hash>
        <hash alg="SHA-1">4db7559f7556d5b4f87aee64750b93de4a6d4cec</hash>
        <hash alg="SHA-256">0f0eefddf577ea2bb713efa74d832451276141d84ad137237b7d270a7e1e2633</hash>
        <hash alg="SHA-512">89fdae8f23d1f0adb184d4464086b5a7528b2bc9832e57ec63c4c25741a3c81176461b303ac4ac9e98ffffd64b12f1ee1a4fd5d8f692855935182ba272ee66e9</hash>
        <hash alg="SHA-384">ccb1060b77357b1a7caf864779b96bc84414b4e280bf5ccf5e8d30f94d934b309ef860e766a344f28826eae336bb1b38</hash>
        <hash alg="SHA3-384">7c02f9a2eba282a00c41f09efce3de63db002e7f78bb149317cc844a6851d4b1bfe99fe186deb8eda789ca4d8ed94855</hash>
        <hash alg="SHA3-256">dddff720c1182eedba200d54b4c093cb2eca4ff35158f16d3bc305a2f0010214</hash>
        <hash alg="SHA3-512">3c49dd709471a7e9c93d1458c24fa4491b97007785493e00470bdee891283af84bb6fdc6041277557440f32ae581c9e4a88b1e55d9bc2fb76a447f5b95a9e163</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.tika/tika-encoding-detector-mojibuster@4.2.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://tika.apache.org/tika-encoding-detectors/tika-encoding-detector-mojibuster/</url>
        </reference>
        <reference type="build-system">
          <url>https://ci-builds.apache.org/job/Tika/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/TIKA</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?dev@tika.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/tika</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.tika/tika-ml-core@4.2.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.tika</group>
      <name>tika-ml-core</name>
      <version>4.2.0</version>
      <description>Apache Tika is a toolkit for detecting and extracting metadata and
    structured text content from various documents using existing parser
    libraries.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">60a519d4f1659090835011b51a632981</hash>
        <hash alg="SHA-1">27e7a6b552b428b317ba88ded6172031d1358981</hash>
        <hash alg="SHA-256">e5b2b78e426902d7bf51cdee62f7b08f1043803e04c98317d7ff721005edea6e</hash>
        <hash alg="SHA-512">baddd02b1331d0a3e1b59ca2f3d62a2b463286feb5011890015a1146eaad4cbbfc4bb28cc7a22f40e2b1ef75f63c3d62119d2566f3275a3a5392788141853100</hash>
        <hash alg="SHA-384">a7f60bb6bc56245c006aa1c7f99acaad5684a14628b859f634f7140981886383c62d21afdc15b25b5573af84fc1f5c19</hash>
        <hash alg="SHA3-384">80ab79dcf74babc7c7c4a5b71e14cfc562a654464b5fac55580b35cea990c93ea3925ab5883ceaf4787c9cb5bd4a5fc3</hash>
        <hash alg="SHA3-256">2a0ed081fd49d791d39d8ed72eefa1c7acfd54c71a6b08d2cd52e56b5da59c21</hash>
        <hash alg="SHA3-512">f759f598bd5881d42ac21775e2dbb6055c93c312ff95ee0e60b5dba57c8241c5815ba5b96d320e2afb2e6a22dbd6280df7cfabfdad63996b9197fa304763bac3</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.tika/tika-ml-core@4.2.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://tika.apache.org/tika-ml-core/</url>
        </reference>
        <reference type="build-system">
          <url>https://ci-builds.apache.org/job/Tika/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/TIKA</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?dev@tika.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/tika</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.tika/tika-parser-datauri-commons@4.2.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.tika</group>
      <name>tika-parser-datauri-commons</name>
      <version>4.2.0</version>
      <description>Apache Tika is a toolkit for detecting and extracting metadata and
    structured text content from various documents using existing parser
    libraries.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">73fb226cc73ffb53dfb0c7406c9677e1</hash>
        <hash alg="SHA-1">4742f741b2cae67f65eafe30526ca52dddd7257d</hash>
        <hash alg="SHA-256">1a782e76e1afc430b587965ee5a545b53470934ccf5ac9a1e1fbbd9b5ce0a0de</hash>
        <hash alg="SHA-512">1633f653ba6b91d6a42b633fe63e4e3ffa03dd2c90ec35da1bc5a8a5d4b87f27fd79593894e9f22d4a3b27c084701e6c13b3b5227c34ef9d32f893635f399f23</hash>
        <hash alg="SHA-384">4418fc262cba13bb647372e34551e39939fa6d2e710cc2f3106b70f2f26ade1338baf373b24ce3903cb03c64c753440c</hash>
        <hash alg="SHA3-384">79799c69e38b134981159d490972b034c5b832fbc0ee3e5d45379442a90379dff1b111ce768b1cba8170fbe917e81bd4</hash>
        <hash alg="SHA3-256">348ba9fd1024055b103343834df61c9e1768c228e7d02194a827813cd3fb9667</hash>
        <hash alg="SHA3-512">2897b9948497599703efec4bc68265465851efbd169eb469aaefc5387579c256e04ed85941bf909030e1e0245d1aa5a3b2c2b90cc0330df05c75320b673238b2</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.tika/tika-parser-datauri-commons@4.2.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://tika.apache.org/tika-parser-datauri-commons/</url>
        </reference>
        <reference type="build-system">
          <url>https://ci-builds.apache.org/job/Tika/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/TIKA</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?dev@tika.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/tika</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-csv@1.14.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-csv</name>
      <version>1.14.1</version>
      <description>The Apache Commons CSV library provides a simple interface for reading and writing CSV files of various types.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">b8119900179992cf139005db63481103</hash>
        <hash alg="SHA-1">467354980fade8528b6a9f9bdf7f4f19ab9b3373</hash>
        <hash alg="SHA-256">32be0e1e76673092f5d12cb790bd2acb6c2ab04c4ea6efc69ea5ee17911c24fe</hash>
        <hash alg="SHA-512">f64fb9c4895532dd9f6cd448dfb4b35bfe9c4a81afc61e5bb13121f5142330ae97447200022b03988967a7cb89d3f48ce76e253238eb9f0bea57c09b352ac27b</hash>
        <hash alg="SHA-384">a20dfbaaedf8e08e13969761e456ed6caa2e4c513c4c1662654fd4348a40a57416675e8e2802b1f1d0ce2bf3353bed75</hash>
        <hash alg="SHA3-384">577f3ee1b77ff740d2c894f8dfff6e662f1329030d04a7b27cfcef910b711decc7b26654bb259067a11ce3ba923edb16</hash>
        <hash alg="SHA3-256">e645fdbb0c85c775adf273502ea361b6b432a9fcf0e32d9946226c4a28b0b959</hash>
        <hash alg="SHA3-512">f9e5e2e9ba824e86ea5b2c9cdab1edde6a253b5ca557ea6e6e6669e318c35ad17ee1162cb0cc90febf5b60ad3535e5a93bfa2e3b83191bf4cb462662b24cce74</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-csv@1.14.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://commons.apache.org/proper/commons-csv/</url>
        </reference>
        <reference type="build-system">
          <url>https://github.com/apache/commons-csv/actions</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/CSV</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/commons-user/</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=commons-csv.git</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-cli/commons-cli@1.8.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-cli</group>
      <name>commons-cli</name>
      <version>1.8.0</version>
      <description>Apache Commons CLI provides a simple API for presenting, processing and validating a Command Line Interface.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">631937816bd22302ae49828e9b764313</hash>
        <hash alg="SHA-1">41a4bff12057eecb6daaf9c7f36c237815be3da1</hash>
        <hash alg="SHA-256">f94c98bbcfa1c1dac6956d6c3f494ec40265c67bf54ddefc95df4ffdd73ae6d5</hash>
        <hash alg="SHA-512">2e5e547709e8ad35be44927382a0862467dcacc87e0351d092fd128fa7097a3b4c900fe452be50ace2e80c198d38f48e94fdb2da86e1480096de4a5580c28534</hash>
        <hash alg="SHA-384">f979529b54592eaa479b4a0f7dd73d87127dc19254dc2a6da628ec17a9ed25cdfea4b9e3cda66b5b819b0cc3540eb0b1</hash>
        <hash alg="SHA3-384">d1eee9c0d18566c81a93e1652145a7aabd0abaf17c06aeb734df74c949479b0c93396fbf622341b1ce61118d1ec2a5bc</hash>
        <hash alg="SHA3-256">d74c8b30995668a5f69f05922396b5641f1e4023d8cecabc0aabd9dc6fa533db</hash>
        <hash alg="SHA3-512">b6b3f493756e8a7d17633018354e7050f0d8344008cc0ff92f642132836ac7a0d92a6c7044d023ce95ed3479e1affd29d1eb8b58f1fb8b7410ceb3bd9cc38e6f</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/commons-cli/commons-cli@1.8.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://commons.apache.org/proper/commons-cli/</url>
        </reference>
        <reference type="build-system">
          <url>https://github.com/apache/commons-parent/actions</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/CLI</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/commons-user/</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=commons-cli.git</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-lang3@3.22.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-lang3</name>
      <version>3.22.0</version>
      <description>Apache Commons Lang is a package of Java utility classes for the Java lang packages,
  classes that could be considered standard to justify their existence in java.lang.

  The code is tested using the latest revision of the JDK for supported LTS releases: 8, 11, 17, 21, and 25.
  See https://github.com/apache/commons-lang/blob/master/.github/workflows/maven.yml

  Please ensure your build environment is up-to-date and kindly report any build issues.

  Starting with Commons Lang 3.9, we target Java 8 and use those features.

  For advice on upgrading from 2.x to 3.x, see https://commons.apache.org/lang/article3_0.html</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">7e31774c9e2adfe616856c0be006b288</hash>
        <hash alg="SHA-1">fda38d1637719132fa12b5b96ea99958fc7150e7</hash>
        <hash alg="SHA-256">2ea88052c8662bf51874f4159467ba24b040b22dfd54d2596e11936896c76192</hash>
        <hash alg="SHA-512">cb464ed16c44587100bcbd801f77612376c5cd079463357d9add8b2e70314be4c4691537f8f888e040e0f0c96153063aca3b0645e70b26b68b40f32a40ca289b</hash>
        <hash alg="SHA-384">193844995941ff3564b537b2f4454945ca06f40d8a87b4250d4db4f9f010ac70878f94d6ee702e32a8553adac4629221</hash>
        <hash alg="SHA3-384">f52f2107e59fb9b1ccadb0997d863c8c859d5bedb8b61ac6d6c007ababf00ea1e21ae6c1a8319aa69687919ea248a9ee</hash>
        <hash alg="SHA3-256">718728988627e098aa81054c55c50d0d0e25ae21ec83838ff4fd79cc4bb802d9</hash>
        <hash alg="SHA3-512">3cb4017d7622e21e8d7df83ea28e040446bea418c757c2b462b86a65f7683e48efb5326c3e0c8a35ba2033d710b3582b4f1414cd0b3b294c6ce700f6ef40303c</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-lang3@3.22.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://commons.apache.org/proper/commons-lang/</url>
        </reference>
        <reference type="build-system">
          <url>https://github.com/apache/commons-lang/actions</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/LANG</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/commons-user/</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf/commons-lang.git</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-io/commons-io@2.22.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-io</group>
      <name>commons-io</name>
      <version>2.22.0</version>
      <description>The Apache Commons IO library contains utility classes, stream implementations, file filters,
file comparators, endian transformation classes, and much more.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">f91d54bd47c42456b4a5ae62eed85565</hash>
        <hash alg="SHA-1">5b1e18bc0ad651ed878029d83f88d9c8189fd51e</hash>
        <hash alg="SHA-256">2b9a7b1f726fb86216dbd2c8321eabe0221dbd5b1be81c18e1cb53811b104758</hash>
        <hash alg="SHA-512">fca0b4ae70e531bee74413e0b865981aa8b60a9390f789b63997203dae67be65362e95a0c35b9d4b072fbb0810114783415dd22b92fb42e5594b10992f632bc5</hash>
        <hash alg="SHA-384">e1fbf3729c4d2d77b036d90234d9e2ed3fe0c2f5379d333a695c1cb0037f63d288c8b62de05022da0f612da65835fee0</hash>
        <hash alg="SHA3-384">02acc6e7f614d8684e7104a52123573152a2e1b651bc6a5be12d4b58861c757d6c56f51105bb97c92309d126059232ea</hash>
        <hash alg="SHA3-256">134157813629f4d9b97044602e1fa2f61c14c3be1f641490b3e06ac941ff3315</hash>
        <hash alg="SHA3-512">47832f3b7abe375f3b0ed169996d9776b2a0007b073ab3f06438dce67be9bda45e8aac84737cc639ada4424b13c7614d8c9fcb23779868f7421414777cc0946a</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/commons-io/commons-io@2.22.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://commons.apache.org/proper/commons-io/</url>
        </reference>
        <reference type="build-system">
          <url>https://github.com/apache/commons-io/actions</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/IO</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/commons-user/</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=commons-io.git/commons-io</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-text@1.15.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-text</name>
      <version>1.15.0</version>
      <description>Apache Commons Text is a set of utility functions and reusable components for processing
    and manipulating text in a Java environment.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">756b7c5438d89a0c311d811c1a06d19a</hash>
        <hash alg="SHA-1">9899093aa40f0199d6c39b131b8f087cdb37e399</hash>
        <hash alg="SHA-256">58d2da30f058512a1e7f914e39241deca4dff5c27a085b4ed2faa9e7208067f6</hash>
        <hash alg="SHA-512">be41b2c3a347bfd6eea3a957fb9a8d631c32b973fbbbe3e097d544d893ab4e587c3dfc38e89b4039b815b17d268cc7940e1ffb464050c7924acb56cc422613fb</hash>
        <hash alg="SHA-384">d3df5a4656967277d738e9d981d7b065dcda91f25553f8fc5c3d26edf07079cc5526508b0951da45ef614663ee9d471d</hash>
        <hash alg="SHA3-384">bedce93fea6c4aaaf7feb52f75d4265c41b3b0d39976248b4d9d5b879d18403335364b3f845585ce5fceb80a34c592df</hash>
        <hash alg="SHA3-256">48fd7a8921eca0e1dc185a0ad5f8e89ab3399f0327bc57cd9e09988fce75d1ef</hash>
        <hash alg="SHA3-512">f996b808d5f7bff8ac7aa79a2f73b93a4edb687cace7b54089246b6b4005ebbaab00f752a79205479023c802a56e42605806113d6af36e28469fa6a63ae710d2</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-text@1.15.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://commons.apache.org/proper/commons-text</url>
        </reference>
        <reference type="build-system">
          <url>https://github.com/apache/commons-text/actions</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/TEXT</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/commons-user/</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=commons-text.git</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.tika/tika-core@4.2.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.tika</group>
      <name>tika-core</name>
      <version>4.2.0</version>
      <description>This is the core Apache Tika™ toolkit library from which all other modules inherit functionality. It
    also
    includes the core facades for the Tika API.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">e9c5fbd7c11edbaa1afaec3274716ca9</hash>
        <hash alg="SHA-1">c8b60b00e363d804afba9e2a89251a5fdcd9447c</hash>
        <hash alg="SHA-256">44f95d98ec7f6b48f3fa3fc816897ee822918dae32a9a944f9179c28dd678c86</hash>
        <hash alg="SHA-512">a1a96cbb7a47959ff650890812835a32a3c233e9b737cb04d0d1abe2fbbe1d42e11687fa96d8f59ad09b100b1520e48709c5ab96f478fbeb734675b2b87f506b</hash>
        <hash alg="SHA-384">0edd4e6c129cf6fbd3e4898e87cf8acc1d8a3bfa71fd23b472ebd46d74bd7d760b7b7fa291dde96b09b26100f4c13ad8</hash>
        <hash alg="SHA3-384">9dd867171750dfe05bbf5e0f5a36453aafbf3614fb9f4d14d046ab93ca2320fb53f54b6621d99726cece1b11a83dd5ba</hash>
        <hash alg="SHA3-256">36e24cc8f11a2678d8585becd87a1312069f6b5746f97b700487552b3811b0ed</hash>
        <hash alg="SHA3-512">5a7d0f9171199c6cad40ae75d537cdbf5385f7c0857421168890c165184484fd48fd98799db5056c3161261978f1cf6468bc8a9307dc86aee1a648a4076489c6</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.tika/tika-core@4.2.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://tika.apache.org/</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/job/Tika-trunk/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/TIKA</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?dev@tika.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/tika</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.commonmark/commonmark@0.31.0?type=jar">
      <group>org.commonmark</group>
      <name>commonmark</name>
      <version>0.31.0</version>
      <description>Core of commonmark-java (a library for parsing Markdown to an AST, modifying the AST and rendering it to HTML or Markdown)</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">e0c52034489e85957d3e2c93512e0eed</hash>
        <hash alg="SHA-1">cfbbd6942749ed63e6595dad27818f10f989018c</hash>
        <hash alg="SHA-256">11d5996813f4d6525a134b906844d87112c6acb6fdd306ad5755ef5df9b26281</hash>
        <hash alg="SHA-512">3a11760037450328a47458f587cf7ffc0fa9fc900334aac2234d63730773578cb19855230a4e16880496b41fe825ad0539f115e55f163da511b244aedd2c0c0a</hash>
        <hash alg="SHA-384">79c35a4dd53132e66a239b38ec36eeb70195589e47e92c2ab072eadd02e71678a80873c6e18e92b50421e330b502ad61</hash>
        <hash alg="SHA3-384">439b5d91b2725f72b3bf50add298c3f02cc019f3415969002e2a5c17d9076d10d57ebb0a317882e26b573ae558f49c76</hash>
        <hash alg="SHA3-256">01435b6ea69d1b42ec6c326298792a5c710f0c9f61e062aacad6ef5839131266</hash>
        <hash alg="SHA3-512">8902967b557b219e1922aa548e1139c8d59d9c7993f4079677c3889c90da105c526cedfe5512a769ba1e1aeb8c9e38378228addeccb5cd77f319d897bd855c21</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-2-Clause</id>
          <url>https://opensource.org/licenses/BSD-2-Clause</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.commonmark/commonmark@0.31.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/commonmark/commonmark-java/commonmark</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/commonmark/commonmark-java/commonmark</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.commonmark/commonmark-ext-gfm-tables@0.31.0?type=jar">
      <group>org.commonmark</group>
      <name>commonmark-ext-gfm-tables</name>
      <version>0.31.0</version>
      <description>commonmark-java extension for GFM tables using "|" pipes (GitHub Flavored Markdown)</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">d1a0161577379b740b9c8b9b446a5d98</hash>
        <hash alg="SHA-1">5120fa43776ca66dadf8193237d9a6bbfd9b9fc7</hash>
        <hash alg="SHA-256">d2b3e19fc2a55ca1274ef067c583b85abf8635f6dccd1f935cd36ffe8a186706</hash>
        <hash alg="SHA-512">a80c7299c0dfd9dbefe2b13ca02d3992934941df1530b16aa760a189c608c163d4ddf02aa8b7223d8f71647893626279b63963cf74222ce93a54ba95b014d484</hash>
        <hash alg="SHA-384">9394d1c90207b69e50bbd8535efdf0625c258bc6388cf37d196bbb668075187d9d1a3c5cba1c3ba4104315c02aed8822</hash>
        <hash alg="SHA3-384">eb7f5a67a89cae75637cc47466c5512ddd7fb7d5a6b9c77d6e00c7824c9deaeffadb22a1475c848688837c1d89ec8e2f</hash>
        <hash alg="SHA3-256">1e42e14b923ac98c66cf922069eb8c9002de06d183c4bf62df222afe277d4a76</hash>
        <hash alg="SHA3-512">41c93d7cf4db9fc9fbf8ce82e248b310de9a72ee82959518f24455b9e2cdda0f08f8632e295c265f99fe40e8c9a7e4f9cf0b00f1fb1365b2c64e4b26d83e1fd2</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-2-Clause</id>
          <url>https://opensource.org/licenses/BSD-2-Clause</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.commonmark/commonmark-ext-gfm-tables@0.31.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/commonmark/commonmark-java/commonmark-ext-gfm-tables</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/commonmark/commonmark-java/commonmark-ext-gfm-tables</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.commonmark/commonmark-ext-gfm-strikethrough@0.31.0?type=jar">
      <group>org.commonmark</group>
      <name>commonmark-ext-gfm-strikethrough</name>
      <version>0.31.0</version>
      <description>commonmark-java extension for GFM strikethrough using ~~ (GitHub Flavored Markdown)</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">9a622892f788886fe715a03dc5e7d094</hash>
        <hash alg="SHA-1">a3053f4bb5207f3e6876db0a5a3cb75a82784eab</hash>
        <hash alg="SHA-256">6236e6605072708d0a172a9c57802529ab71958e71c72a5e0f90a4fbf62aa9aa</hash>
        <hash alg="SHA-512">a1e8299329c3a8d539ede2bb9bbbce47c39102a67140e85e9f33116d9f7f1c6f389b6e16a1de89bb7cbac4fd645201f74bbf86b224777713f21019fafa7413cd</hash>
        <hash alg="SHA-384">3545938e3445af80bb2cd7fcff1ac9934f8895d398a4b7d314cf81894112a48beaf97d34cb5aaa4e13a5aaba9570d959</hash>
        <hash alg="SHA3-384">80a38f5f4f438b617ff9bf647d565a4d62cfafeb279bc19b28c7f94ca451297411b9fff1f61a9843440eacef65990734</hash>
        <hash alg="SHA3-256">66080ffcb5f47f282176175bfeb2826c21e5c5bb1ba2207816d94f96a15d0371</hash>
        <hash alg="SHA3-512">07047d44d57c66bcf635a68a04c01e09011294226696c8ae6d804f408abfc26b4a75399cc5fef2b3bb84abc2f549965d3383bd08163b4315b2ac968234568c60</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-2-Clause</id>
          <url>https://opensource.org/licenses/BSD-2-Clause</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.commonmark/commonmark-ext-gfm-strikethrough@0.31.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/commonmark/commonmark-java/commonmark-ext-gfm-strikethrough</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/commonmark/commonmark-java/commonmark-ext-gfm-strikethrough</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.junit.jupiter/junit-jupiter-api@6.1.3?type=jar">
      <group>org.junit.jupiter</group>
      <name>junit-jupiter-api</name>
      <version>6.1.3</version>
      <description>Module "junit-jupiter-api" of JUnit</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">662a5b10a1bbb2e3192790351d67d269</hash>
        <hash alg="SHA-1">6a57f0ce4d6bfe9784d103077055ba39f3e6f638</hash>
        <hash alg="SHA-256">555d6cf20fa1710884dd01b86cc5785397ba73e21ada2d4b784f5f1a14dcafc4</hash>
        <hash alg="SHA-512">05a880fd689fd5b3f3102948e51b5b3ad76785cd8ed42601e6151754b3bd3bd8812658d8f7d98b883263ac61c65eb3e061215e414b3e191c3c756c7908ecf82f</hash>
        <hash alg="SHA-384">af420ed08f2ee6eb8204ed2352045e5f494c3d18e58206a17e43f70af3cd7c7523b2c0946b36f32d8081f6c07d82ff1c</hash>
        <hash alg="SHA3-384">5f1e809cd26520979b937121b3e24536793939e4c68c535bac3597f6582c5daf63a9215c5ebe6af4044a60ab143c8e24</hash>
        <hash alg="SHA3-256">bd6d2672f88f5e55de1ae29087698bfa1a09e2658cc5959dc8a9b43d92f7d362</hash>
        <hash alg="SHA3-512">18c74f29f5f622d9d06bbc5d7b670f20af3e0f2c97551e6a54264730942bd906977ea527b51d67192c216d61f103db2bc07e62d35862f01c8753761d186eb657</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.junit.jupiter/junit-jupiter-api@6.1.3?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://junit.org/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/junit-team/junit-framework</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.opentest4j/opentest4j@1.3.0?type=jar">
      <group>org.opentest4j</group>
      <name>opentest4j</name>
      <version>1.3.0</version>
      <description>Open Test Alliance for the JVM</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">03c404f727531f3fd3b4c73997899327</hash>
        <hash alg="SHA-1">152ea56b3a72f655d4fd677fc0ef2596c3dd5e6e</hash>
        <hash alg="SHA-256">48e2df636cab6563ced64dcdff8abb2355627cb236ef0bf37598682ddf742f1b</hash>
        <hash alg="SHA-512">78fc698a7871bb50305e3657893c10500595f043348d875f57bc39ca4a6a51eda3967b7c8c8a7ec3e8f85f2171bca4aa98823e912e416e87e81c6ba5b70a37c3</hash>
        <hash alg="SHA-384">10398b6998c9202a0731e2e19ae1c3f9d8a83582c2663fe7bdda15794ee6fa816727dbd8f7c7164bd5395ee1cfe7c97e</hash>
        <hash alg="SHA3-384">3abe706fd78509c25a402c7bbf6f9ddf71ffb5b35054864ba0fdf7902207115f888a0ba728fd71d2e87a9360d2498121</hash>
        <hash alg="SHA3-256">d961907a1bfa1dcda329dca494ffbc251b31fabcaca5ab7095661a8ce3c1d654</hash>
        <hash alg="SHA3-512">0ad661617bcac51bcd26f7ad4611c69b1fd9811b50dbf734e041a3243ab1f845e7796620e8a7c40c4a2df3946864598b1251396c7d9bd813203d82710788cce0</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.opentest4j/opentest4j@1.3.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/ota4j-team/opentest4j</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/ota4j-team/opentest4j</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.junit.platform/junit-platform-commons@6.1.3?type=jar">
      <group>org.junit.platform</group>
      <name>junit-platform-commons</name>
      <version>6.1.3</version>
      <description>Module "junit-platform-commons" of JUnit</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">481a56275fe36dc163df005113a39f44</hash>
        <hash alg="SHA-1">acb99d3482ea51fcbcc4f6ea8672761e2b3d5bb7</hash>
        <hash alg="SHA-256">a4774ae923c109544034aeae7c762cf017fbcdd1342403ba90e0921984b608c3</hash>
        <hash alg="SHA-512">f117027fa7ffe2cd5d24962d115ba500bee2f748f3dafc51e0bc988aa1349fb5b62f4031135056eb26b5fbb2a95c5460a12fa54037aefbfcefff498590b33e6e</hash>
        <hash alg="SHA-384">2ab3a17575086bee2937a7e604c997e3c418ab611cc8ca56fe33bfe5c87ab5c2a80fb7e9141426f755475fc601ec248c</hash>
        <hash alg="SHA3-384">5a376926c73b2c95be31ffe7277a6b221d69441f9a20b74d8d21bfeebc189c7dc0ad54f47fbebbc4e0a07f08c5db403d</hash>
        <hash alg="SHA3-256">8711b866ce5377ea6660caaea7dd863ec97a0fd97e2ed409fa64b660da956d7d</hash>
        <hash alg="SHA3-512">1013b1262ee2cb04c2d62a022497f6fc9ba1d6d52ac9247fa0bd1050a0cdde786e1a727e79c3ebfbcdd830aeea8699ef58a71aef1e07e94d2bea5dea39569850</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.junit.platform/junit-platform-commons@6.1.3?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://junit.org/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/junit-team/junit-framework</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apiguardian/apiguardian-api@1.1.2?type=jar">
      <group>org.apiguardian</group>
      <name>apiguardian-api</name>
      <version>1.1.2</version>
      <description>@API Guardian</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">8c7de3f82037fa4a2e8be2a2f13092af</hash>
        <hash alg="SHA-1">a231e0d844d2721b0fa1b238006d15c6ded6842a</hash>
        <hash alg="SHA-256">b509448ac506d607319f182537f0b35d71007582ec741832a1f111e5b5b70b38</hash>
        <hash alg="SHA-512">d7ccd0e7019f1a997de39d66dc0ad4efe150428fdd7f4c743c93884f1602a3e90135ad34baea96d5b6d925ad6c0c8487c8e78304f0a089a12383d4a62e2c9a61</hash>
        <hash alg="SHA-384">5ae11cfedcee7da43a506a67946ddc8a7a2622284a924ba78f74541e9a22db6868a15f5d84edb91a541e38afded734ea</hash>
        <hash alg="SHA3-384">c146116b3dfd969200b2ce52d96b92dd02d6f5a45a86e7e85edf35600ddbc2f3c6e8a1ad7e2db4dcd2c398c09fad0927</hash>
        <hash alg="SHA3-256">b4b436d7f615fc0b820204e69f83c517d1c1ccc5f6b99e459209ede4482268de</hash>
        <hash alg="SHA3-512">7b95b7ac68a6891b8901b5507acd2c24a0c1e20effa63cd513764f513eab4eb55f8de5178edbe0a400c11f3a18d3f56243569d6d663100f06dd98288504c09c5</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apiguardian/apiguardian-api@1.1.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/apiguardian-team/apiguardian</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apiguardian-team/apiguardian</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.jspecify/jspecify@1.0.0?type=jar">
      <group>org.jspecify</group>
      <name>jspecify</name>
      <version>1.0.0</version>
      <description>An artifact of well-named and well-specified annotations to power static analysis checks</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">9133aba420d0ca3b001dbb6ae9992cf6</hash>
        <hash alg="SHA-1">7425a601c1c7ec76645a78d22b8c6a627edee507</hash>
        <hash alg="SHA-256">1fad6e6be7557781e4d33729d49ae1cdc8fdda6fe477bb0cc68ce351eafdfbab</hash>
        <hash alg="SHA-512">efded31ef5b342f09422935076e599789076431e93a746685c0607e7de5592719ba6aacde0be670b3f064d1e85630d58d5bce6b34aed2a288fdb34f745efb7bc</hash>
        <hash alg="SHA-384">814f860e5a44ead6c457676841eef471a8b87be31b84c60a8a4477a18a9cbcb6e3c2ae700969d5c5e52309d961e0537a</hash>
        <hash alg="SHA3-384">c8844e5b71e5ecfbb7366097ce34af2f5863d86d5ccc3f9ec384d8ade4b60ccc8124c7fc88664f1afd2b0962fc8775bf</hash>
        <hash alg="SHA3-256">4b4f08ad7606a3ac62997779484919a302267b26d26ee19125f8a7eea60e8a71</hash>
        <hash alg="SHA3-512">65c6845ebae981cb81b61107707ced39f5b377dae970b47606ef482aaf10e3729def0da40d9377c43abbfb483a5ceae039b0d51c129c50a6d36ad351a5d6b01e</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.jspecify/jspecify@1.0.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://jspecify.org/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/jspecify/jspecify/</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.junit.jupiter/junit-jupiter-params@6.1.3?type=jar">
      <group>org.junit.jupiter</group>
      <name>junit-jupiter-params</name>
      <version>6.1.3</version>
      <description>Module "junit-jupiter-params" of JUnit</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">e0b4bd2b6ae43ccb74acccc2b007cf6e</hash>
        <hash alg="SHA-1">435fa4ec654c11fb82e666a47d9baefcee3f8df6</hash>
        <hash alg="SHA-256">05c51cedba2c06a9770707391e006cee825876937dea580b94a265ce145d4939</hash>
        <hash alg="SHA-512">7838db6e7ae0e6976779cda502349b611e26361ec0f8711eea377fa1c6f161c719c40ffe1f197e572b99fb17da95252c18dd5bd028a19d5dbcae802ad6a06d8e</hash>
        <hash alg="SHA-384">bb87a76c267ef0fd021aefdaa44c277bb8ebc66356bc0d71a3add325d597b67628de273d76518043c65d71a800958f85</hash>
        <hash alg="SHA3-384">ff327def4965abaa2fae15496a3f1c9546318aa85b4ccc93e25aa19d868921f63fd986b56bb1dcf86d2f111188e50fc1</hash>
        <hash alg="SHA3-256">2dabe09fbb306b715f936b3a9aa2110d4dfd4e65bcc12f8fd2a3a1bbc747a557</hash>
        <hash alg="SHA3-512">3a42bff4e1509093d8ca58f3966af3713984262f6423767bbb2501de64a8d87096a71bf36eded14170da3992849c9b4cdd55eb6edbb21035de76051248c0981c</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.junit.jupiter/junit-jupiter-params@6.1.3?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://junit.org/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/junit-team/junit-framework</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.mockito/mockito-core@5.24.0?type=jar">
      <group>org.mockito</group>
      <name>mockito-core</name>
      <version>5.24.0</version>
      <description>Mockito mock objects library core API and implementation</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">4d21469bade80b235c77a618f8b5ea69</hash>
        <hash alg="SHA-1">277dd2f725dd344fba6216f0bc611fae7fc4c1d8</hash>
        <hash alg="SHA-256">97a1f835ad84075255aa37809e4379eff541273c02c6201cbad49bd5950932cd</hash>
        <hash alg="SHA-512">5ee96160f44f62fa659079c7ed2c84c647ce97b7c5f57d63b164b4eae8c99140b6759cd3995e4dcd50a7f35963094a35578ba36bd6bc5771e6bf397ac80ebc47</hash>
        <hash alg="SHA-384">10e3c750b4907922f44471cf0d4e3a86bda519435f12c602fb95b28e66fb3bfe03c1df042799e407e0c4601e9f041a6b</hash>
        <hash alg="SHA3-384">cd8db811ddf5992007407e43fec264fa60e52bcb082933fb237edc984b6fbf061186d6dfb80fb55031e7273891016c3f</hash>
        <hash alg="SHA3-256">eb48ea301e4cfaba41e42d7e86c7c3a092f4f3ff324324fc86aeecb0efb75429</hash>
        <hash alg="SHA3-512">34120b305adcf47ad9a66d9cdd248104d07c2ee603fbb960e7662560d2dc610054363b45f8b9116212206cf631a3174b94db40b0206164067bf30ba9a00518fb</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
          <url>https://opensource.org/license/mit/</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.mockito/mockito-core@5.24.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/mockito/mockito</url>
        </reference>
        <reference type="build-system">
          <url>https://github.com/mockito/mockito/actions</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/mockito/mockito/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/mockito/mockito.git</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/net.bytebuddy/byte-buddy@1.17.7?type=jar">
      <group>net.bytebuddy</group>
      <name>byte-buddy</name>
      <version>1.17.7</version>
      <description>Byte Buddy is a Java library for creating Java classes at run time.
        This artifact is a build of Byte Buddy with all ASM dependencies repackaged into its own name space.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">209b2faed508ed6804df6982f8fd2c16</hash>
        <hash alg="SHA-1">3856bfab61beb23e099a0d6629f2ba8de4b98ace</hash>
        <hash alg="SHA-256">3575dcb8a98faf943d3c1595c47a16047c4fce8a83ebbb26262f1a2f67546357</hash>
        <hash alg="SHA-512">9c10e50598e139fe7099ff8c5f13adebeacb12df07c6ae23129a462e87e085c66a763900eaa5fabaf9cb7bb0a8410fc3af1ce7eadd4f40983bf9a0c4be7c42d1</hash>
        <hash alg="SHA-384">9a0fa7b56376e698dbb3d5c01c41a2f661c124dda329869a64be9881b668620342252e75c9515fd13080206f4c296482</hash>
        <hash alg="SHA3-384">d13061ca0f3f2d9ef9cc2defe75b6f79963ec2c790de213e39bacbf5f24a6427eb16cdca1a2172f8a6a3c12b16bb8ff3</hash>
        <hash alg="SHA3-256">5b2f57522ac40c94ad918fe62f7bba5a3fbfe47d1037da1e5b3d8ed31fd8854e</hash>
        <hash alg="SHA3-512">1dfb214208f0afb4e086b82923d6e0a3ff6cc92ad047b65af41fc937fee961c3822f7e0088d707feba279f52acc3e220583e0fdd7191e56ef9a06aa97d677ffd</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/net.bytebuddy/byte-buddy@1.17.7?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://bytebuddy.net/byte-buddy</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/raphw/byte-buddy/issues</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/net.bytebuddy/byte-buddy-agent@1.17.7?type=jar">
      <group>net.bytebuddy</group>
      <name>byte-buddy-agent</name>
      <version>1.17.7</version>
      <description>The Byte Buddy agent offers convenience for attaching an agent to the local or a remote VM.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">d805e73391e6fc6d3de5af86e31ae0f7</hash>
        <hash alg="SHA-1">fbf3d6d649ed37fc9e9c59480a05be0a26e3c2da</hash>
        <hash alg="SHA-256">a9ba887dca252ad61b7d5153294f34e6f3bdf4b2736b04373d13615a695fc0ff</hash>
        <hash alg="SHA-512">c349b190e773447a155db48c90d976056daed8c9d52b6026d42f3c283fc984430430a53b27218ebb9ad980cb166cbe8cc796306a7c8368fde91ecc241cf662d5</hash>
        <hash alg="SHA-384">fb83bf605391aee16e9d58bffa88fc0fd672e0d045b542984cb87dead80a4517305e18dd8a532443d0be7f3ceec8d711</hash>
        <hash alg="SHA3-384">ab9dc3f1b6dcd26a49915de9950430f7501937573825cbc165f3b29bc14c6ceffdb464b9f6115bd9c4c4325a0b88115e</hash>
        <hash alg="SHA3-256">adfb6efa6ee05a2306b21d569ca62a1e4e44e22f8136a5c52c0be98f8fd74353</hash>
        <hash alg="SHA3-512">eeb1d18fcb24949daad327b3bf83cbb7f633d21b57b1358c3ffe03f137542b88c4c60d7c14fdfc35176a86012e6929ee49dbcd5c83998cd01648de79c9ac35b2</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/net.bytebuddy/byte-buddy-agent@1.17.7?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://bytebuddy.net/byte-buddy-agent</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/raphw/byte-buddy/issues</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.objenesis/objenesis@3.3?type=jar">
      <publisher>Joe Walnes, Henri Tremblay, Leonardo Mesquita</publisher>
      <group>org.objenesis</group>
      <name>objenesis</name>
      <version>3.3</version>
      <description>A library for instantiating Java objects</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">ab0e0b2ab81affdd7f38bcc60fd85571</hash>
        <hash alg="SHA-1">1049c09f1de4331e8193e579448d0916d75b7631</hash>
        <hash alg="SHA-256">02dfd0b0439a5591e35b708ed2f5474eb0948f53abf74637e959b8e4ef69bfeb</hash>
        <hash alg="SHA-512">1fa990d15bd179f07ffbc460d580a6fd0562e45dee8bd4a9405917536b78f45c0d6f644b67f85d781c758aa56eff90aef23eedcc9bd7f5ff887a67b716083e61</hash>
        <hash alg="SHA-384">2f6878f91a12db32c244afcee619d57c3ad6ff0297f4e41c2247e737c1ccc5fcc1ce03256b479b0f9b87900410bc4502</hash>
        <hash alg="SHA3-384">a3dd9f6908fe732900d50eb209988183ffcf511afb4e401ef95b75c51777709d2d10e1dc9ee386b7357c5c2cbcf8c00e</hash>
        <hash alg="SHA3-256">fd2b66d174ed68cbfcda41d5cbd29db766c5676866d6b2324b446a87afab3a9f</hash>
        <hash alg="SHA3-512">ef509e8bcea73bc282287205ffc7625508080be44c16948137274f189459624891dcf109118c9feff109e1aa99becf176f8db837ac4fd586201510c3ae2ea30a</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.objenesis/objenesis@3.3?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://objenesis.org/objenesis</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/easymock/objenesis/objenesis</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.assertj/assertj-core@4.0.0-M1?type=jar">
      <group>org.assertj</group>
      <name>assertj-core</name>
      <version>4.0.0-M1</version>
      <description>Rich and fluent assertions for testing in Java</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">3d48f2f00c79af8df0c0310d66d0ac55</hash>
        <hash alg="SHA-1">fb1a111417e6893354881b6a78bcb47f7ce7cda2</hash>
        <hash alg="SHA-256">03852ab5b4419c1b0b3689930cdc1ac4f0c437a0c8094a900370dcb170cfbb46</hash>
        <hash alg="SHA-512">c821849da7544a09b029060aa7d76989ecaea0563c3a6f1b68bb5e390ac967b7283bf2aa26c1336bd4d8c3b2d999869355845ac23abbc47f186ea754aef94a95</hash>
        <hash alg="SHA-384">ac6d5504b9ac8a23ed0ea8dad2079dd1a2017d09db4658e865d2f0c0ddf0c2c2f4f2945c1e89d705df35f3faf986e22f</hash>
        <hash alg="SHA3-384">1e2146cf18aca2ecbb499ef527f0b2fff45d1a157610a91360b46afaed4681b079877b1f00a719eec5d7ac7aad52da81</hash>
        <hash alg="SHA3-256">15ce2f01d3e97a1f8eab6f4f3a4e94add724a9a5e54f63fe6684cb643fc1fb59</hash>
        <hash alg="SHA3-512">2ecbb4c7032a426c1ab36322c5dccd051bbb09bcccf208d5180b7d03c7548cae560305ac8e8cedd8f0027631508545cf040d242d72643b3511bee456d3d966c4</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.assertj/assertj-core@4.0.0-M1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://assertj.github.io/doc/#assertj-core</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/assertj/assertj/assertj-parent/assertj-core</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.xmlunit/xmlunit-assertj3@2.14.0?type=jar">
      <publisher>XMLUnit</publisher>
      <group>org.xmlunit</group>
      <name>xmlunit-assertj3</name>
      <version>2.14.0</version>
      <description>XMLUnit with AssertJ 3.x fluent API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">98ab3b80e622da668fcdb22627b18174</hash>
        <hash alg="SHA-1">3410648a8fe6534230e18d850efdbd48644010df</hash>
        <hash alg="SHA-256">c33513f85d702e8576cf589269b85e9b5b7f8e3732fb0bdb9d87a933a05d5550</hash>
        <hash alg="SHA-512">0a38d218a48b3b52b442ddc57af3c6b267c8131de8778e8d7a21c55a1582aaaf15487f86760b130d946a64c8723519bfcb708f7527b8879291dbb0a32c157681</hash>
        <hash alg="SHA-384">7391d0d5d18533745487acc5294a9f2b97cac06552b59fa2956a6af858c74a76c266fd681fd0e8ab3299fcb5bd45782f</hash>
        <hash alg="SHA3-384">8259e4f871204e7c4dd61cfb39f36dbe6e7a50f95d65fe447ed0515dc0d9f81cb95ec1290cb2b6f97e72574f5a23e59b</hash>
        <hash alg="SHA3-256">7f2a177e1fc93651ae72ebe253e3048bcd93186cba1b9417dd1494a58712c140</hash>
        <hash alg="SHA3-512">3337ad19cf59e03fd2abd989bd0ecfcbbc093433657b7264dc4961283d36701e56f7cb51589532fc82d1919aa05b46df6eb079ee5769f2e5a9f5d0690d50710e</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.xmlunit/xmlunit-assertj3@2.14.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://www.xmlunit.org/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/xmlunit/xmlunit/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://sourceforge.net/p/xmlunit/mailman/xmlunit-general/</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.xmlunit/xmlunit-core@2.14.0?type=jar">
      <publisher>XMLUnit</publisher>
      <group>org.xmlunit</group>
      <name>xmlunit-core</name>
      <version>2.14.0</version>
      <description>XMLUnit for Java</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">53388c4aab38013043cb9219bf26fc03</hash>
        <hash alg="SHA-1">21974e90bafb229ce9d0f23aaa86ed1c22b93fb9</hash>
        <hash alg="SHA-256">93f975e2bb1e35db5a88c687e7899fd850e7c6d883a2afa011adcd7a671eb724</hash>
        <hash alg="SHA-512">59fc0427f4a66c599c056df987e79139d0efea0885dc7ed12bef369f76b753e803e61c9d735388ed1b3e63a28c5ed2345c940bf19c0bc77e4d576b1d3411c8bf</hash>
        <hash alg="SHA-384">850aa7aca829afe8ac18ab386ffcea23f78a6f6cf9e99fdbed7f7115186d1efdf7e8944c448da5b4ee8dc44adcc16a0b</hash>
        <hash alg="SHA3-384">1267f958ea1cc90e9320816bc202917e783ae49d8613d4710eb58b12ece75b11d2350ecee6ca73c6e6d4a7345a1a5234</hash>
        <hash alg="SHA3-256">31250e11b0184a9629d22459e5f2decd90104800d70ee9a7f10260e4b7a1b12c</hash>
        <hash alg="SHA3-512">fb1a5e2251f0edc1ae5112ec53d198524f554eed64a2853d7e137df8c97c4e43feadf8f88b38e7dbe25843f9af49f9e2d0ca251056c366eeb2d606a650971b74</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.xmlunit/xmlunit-core@2.14.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://www.xmlunit.org/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/xmlunit/xmlunit/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://sourceforge.net/p/xmlunit/mailman/xmlunit-general/</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.mockito/mockito-junit-jupiter@5.24.0?type=jar">
      <group>org.mockito</group>
      <name>mockito-junit-jupiter</name>
      <version>5.24.0</version>
      <description>Mockito JUnit 5 support</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">acdd3bf4eea79cd23910ca04cdabd171</hash>
        <hash alg="SHA-1">961dc4a97bb33b749c287aa44f780cfa2fa6af38</hash>
        <hash alg="SHA-256">904d4ba9769284739dd720eceffe3792a67e9c0e78d8a50ad46925283386e048</hash>
        <hash alg="SHA-512">c0278b122db655041913fc2fdb582066f2e0f1b8fb64b0c94bc02310df087ef5f956da1c3e890279e405e5a4f8f634f7a89f33d964657dea63a4a229e0b2a7d6</hash>
        <hash alg="SHA-384">17844c04aaf752594cb8b60eaa5b049015232d64a50d90e5ba237ca3f6289e799ac6e4f53447fde5bb26984d44e920ef</hash>
        <hash alg="SHA3-384">040d83d379da23fc695e5000cd3d1d34102c1561af46487ea2114c335656a7cf1752da90fea6d7da0b0edabed2c0514c</hash>
        <hash alg="SHA3-256">d8035d068bab4f19e6009f52e4138fab2858f13b9d5fc8f4c499d6d2e9ba458b</hash>
        <hash alg="SHA3-512">59b6bd92495652b492a3837f165200fd3737526271fd4cd6f1365c7ffe20eab2ccef4bac5f5ac7202563b5151a7a615d4760b744233a4b80d5d2726bfb23629e</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
          <url>https://opensource.org/license/mit/</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.mockito/mockito-junit-jupiter@5.24.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/mockito/mockito</url>
        </reference>
        <reference type="build-system">
          <url>https://github.com/mockito/mockito/actions</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/mockito/mockito/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/mockito/mockito.git</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.groovy/groovy@6.0.0?type=jar">
      <publisher>Apache Software Foundation</publisher>
      <group>org.apache.groovy</group>
      <name>groovy</name>
      <version>6.0.0</version>
      <description>Groovy: A powerful multi-faceted language for the JVM</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">71c88ed101e77adfecbe17eeaf9d4d42</hash>
        <hash alg="SHA-1">e831f8223f514284e4ba8a2352a8e733af67450d</hash>
        <hash alg="SHA-256">6bcbec490ac1ade0dca6566dca9d02897cbb8fc31ee4008e950451aa83b1ac76</hash>
        <hash alg="SHA-512">8f441780924809056a51daf66d60c0f93ebf25d1c71f966c452a65a1c0de8110b03eb07b7a7e4567024e1276e961091a7a29e04e419e1a5b686e70897b176ad0</hash>
        <hash alg="SHA-384">3a63d47b5b9d3e0457ed1c39311ed3133851b28dc514c2ed38e9538af93fcc0c290ec09632a215d8458e567f19f388bc</hash>
        <hash alg="SHA3-384">0eff7ee25ddc5c167fde9f88548ad14a48f0668acec5bbd2b1846877200dfcfb767daf2ab806628e6577a0c11a37052b</hash>
        <hash alg="SHA3-256">5db79b39fc7590958989975504b818c06db39c88e620a29bd5b568fcec462fcf</hash>
        <hash alg="SHA3-512">cc640bdd5a7fa9096b7c70d0d46c72c0f44d54ea791c88236e4ca686969a8f8bb98f997700bde1acec2f01a7de6ab8aed406e9be967dff623bcd06936b5afbe2</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.groovy/groovy@6.0.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://groovy-lang.org</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/GROOVY</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/groovy-dev/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/groovy.git</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.jimfs/jimfs@1.3.2?type=jar">
      <publisher>Google Inc.</publisher>
      <group>com.google.jimfs</group>
      <name>jimfs</name>
      <version>1.3.2</version>
      <description>Jimfs is an in-memory implementation of Java 7's java.nio.file abstract file system API.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">84acc2053fe3e17c13befae61254dd9c</hash>
        <hash alg="SHA-1">e7fa569e3edce524844738dbaff82f62c5c87b55</hash>
        <hash alg="SHA-256">30f4c0d36508d794b0107286eae7a43e9ad8ad593148002acac941196f619c59</hash>
        <hash alg="SHA-512">0e82159a16c8dada77ee979be310f8205ee1e795e50f7bb5f9f38ae0b42670c1c9864407ef3784b88bcd56eff4dca8f6bfcef520d6174055e122c20f48d61da3</hash>
        <hash alg="SHA-384">b3cc686e201c2ba818a0c57c1abbf6340a22e9fadafc37bf6a91551fab6c73752e8bfac64463d7efb3fb0a1169c5c2c2</hash>
        <hash alg="SHA3-384">2cab3efe208eb7ad47a711414f0f3856bcb5f3e14f079927b80fadf0747a15420ad9af1f3d6c5ee5fdc5e0c581bb13ac</hash>
        <hash alg="SHA3-256">04fe32a40bdb5c552a36c2b4453a571ca613591da0e7a744deb99e8865feffa8</hash>
        <hash alg="SHA3-512">7e923e5779160c450ef62672ba49c55902c9736578f95e97fda3429508195d65ef588a0efe0224f1bfebe811620c368249f06c29bc1d337e1f1e9c86a8111cf4</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.jimfs/jimfs@1.3.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/google/jimfs/jimfs</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/google/jimfs/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/google/jimfs/jimfs/</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.guava/guava@33.7.1-jre?type=jar">
      <group>com.google.guava</group>
      <name>guava</name>
      <version>33.7.1-jre</version>
      <description>Guava is a suite of core and expanded libraries that include
    utility classes, Google's collections, I/O classes, and
    much more.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">1a86f411821e4ba79f2747f301b7e2ba</hash>
        <hash alg="SHA-1">77e37866fb969b4ff6710faaefd3a86067730ada</hash>
        <hash alg="SHA-256">796d8e28ac64e83a47c4c5935a8fecc4682650a04bbdead738ef0f5a3a0e6c46</hash>
        <hash alg="SHA-512">b4f274ef89218b5d541e194024431a8ddbebf476f3b7537e9095d78876b51dafa1ed567c4c26822cd3f4062fa443ec1abaca1cbb3126e5128f03084c3814912b</hash>
        <hash alg="SHA-384">0ae5c300f00abfedec54675cbac048bf02580b3a26cb14377d1eb1cefac27556ceb802b704597feefbaf9e145d253be9</hash>
        <hash alg="SHA3-384">ed98f4aea3f491328105c0f33a30ba0801a365519de4776ae7708b9013b273fc5aa523fc044b1d22585b5987041f21c7</hash>
        <hash alg="SHA3-256">2ea89f7ecc8ee4945fee9161d54d0c1952f34fd2a15d1f18eeb5997b69b73a21</hash>
        <hash alg="SHA3-512">5ba21822a88e541a0b941ca525aac9dd836b2fb7255073937c6df6c49dbb3992e614b502405756dc1cbac505cc5dde98101628b608eadd491e36f3ca910a8d15</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.guava/guava@33.7.1-jre?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/google/guava</url>
        </reference>
        <reference type="build-system">
          <url>https://github.com/google/guava/actions</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/google/guava/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/google/guava/guava</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.guava/failureaccess@1.0.3?type=jar">
      <group>com.google.guava</group>
      <name>failureaccess</name>
      <version>1.0.3</version>
      <description>Contains
    com.google.common.util.concurrent.internal.InternalFutureFailureAccess and
    InternalFutures. Most users will never need to use this artifact. Its
    classes are conceptually a part of Guava, but they're in this separate
    artifact so that Android libraries can use them without pulling in all of
    Guava (just as they can use ListenableFuture by depending on the
    listenablefuture artifact).</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">29a782e90f6b37218b18bb880d2a8f4a</hash>
        <hash alg="SHA-1">aeaffd00d57023a2c947393ed251f0354f0985fc</hash>
        <hash alg="SHA-256">cbfc3906b19b8f55dd7cfd6dfe0aa4532e834250d7f080bd8d211a3e246b59cb</hash>
        <hash alg="SHA-512">72be228e7805da5623e42bf024ded7d9147023c66b22f4dbd04ac6898201af46ee82e1f92ea51eb0595f1b49151c4b8ecb862653d4906c17609c42544ee97abf</hash>
        <hash alg="SHA-384">9dd1a2a08efda311604992d3e7cee64873bc8c64de3b423b1b3a3dcc1f7f0810bb03901fbfe39a5f835accb0646f4ad8</hash>
        <hash alg="SHA3-384">ffd67766c165ee77e96824e06de2c19864a6e61f785b2085eb825f308f173d71f2555559d90d910f33f3367378ace0e3</hash>
        <hash alg="SHA3-256">08a77b528a72ca412b36e4004692705ebfd75cfb4897c88632d367d08a34b09f</hash>
        <hash alg="SHA3-512">7cba6c266babbe8272f029eea6e2cbddadee96eb1a16916a6eb2441a55837867ce717385d4388735fd83f2f6555931077c0ebda011a1ee9a37ac38c8c0c43a65</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.guava/failureaccess@1.0.3?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/google/guava/failureaccess</url>
        </reference>
        <reference type="build-system">
          <url>https://github.com/google/guava/actions</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/google/guava/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/google/guava/failureaccess</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar">
      <group>com.google.guava</group>
      <name>listenablefuture</name>
      <version>9999.0-empty-to-avoid-conflict-with-guava</version>
      <description>An empty artifact that Guava depends on to signal that it is providing
    ListenableFuture -- but is also available in a second "version" that
    contains com.google.common.util.concurrent.ListenableFuture class, without
    any other Guava classes. The idea is:

    - If users want only ListenableFuture, they depend on listenablefuture-1.0.

    - If users want all of Guava, they depend on guava, which, as of Guava
    27.0, depends on
    listenablefuture-9999.0-empty-to-avoid-conflict-with-guava. The 9999.0-...
    version number is enough for some build systems (notably, Gradle) to select
    that empty artifact over the "real" listenablefuture-1.0 -- avoiding a
    conflict with the copy of ListenableFuture in guava itself. If users are
    using an older version of Guava or a build system other than Gradle, they
    may see class conflicts. If so, they can solve them by manually excluding
    the listenablefuture artifact or manually forcing their build systems to
    use 9999.0-....</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">d094c22570d65e132c19cea5d352e381</hash>
        <hash alg="SHA-1">b421526c5f297295adef1c886e5246c39d4ac629</hash>
        <hash alg="SHA-256">b372a037d4230aa57fbeffdef30fd6123f9c0c2db85d0aced00c91b974f33f99</hash>
        <hash alg="SHA-512">c5987a979174cbacae2e78b319f080420cc71bcdbcf7893745731eeb93c23ed13bff8d4599441f373f3a246023d33df03e882de3015ee932a74a774afdd0782f</hash>
        <hash alg="SHA-384">caff9b74079f95832ca7f6029346b34b606051cc8c5a4389fac263511d277ada0c55f28b0d43011055b268c6eb7184d5</hash>
        <hash alg="SHA3-384">e939f08df0545847ea0d3e4b04a114b08499ad069ba8ec9461d1779f87a56e0c37273630a0f4c14e78c348d3ac7eb97f</hash>
        <hash alg="SHA3-256">1f0a8b1177773b3a8ace839df5eed63cbf56b24a38714898a6e4ed065c42559f</hash>
        <hash alg="SHA3-512">6b495ecc2a18b17365cb08d124a0da47f04bcdde81927b5245edf3edd8e498c3c3fb92ce6a4127f660bac851bb1d3e4510e5c20d03be47ce99dc296d360db285</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/google/guava/listenablefuture</url>
        </reference>
        <reference type="build-system">
          <url>https://travis-ci.org/google/guava</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/google/guava/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/google/guava/listenablefuture</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.errorprone/error_prone_annotations@2.50.0?type=jar">
      <publisher>Google LLC</publisher>
      <group>com.google.errorprone</group>
      <name>error_prone_annotations</name>
      <version>2.50.0</version>
      <description>Error Prone is a static analysis tool for Java that catches common programming mistakes at compile-time.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">1ded1848cfd4f5167e00824faf9c4d3b</hash>
        <hash alg="SHA-1">74ba43e49ab1184d41634af2ef0047e82c4064b0</hash>
        <hash alg="SHA-256">4667724877f1d37a689202da191e23efa7657c62eef93ccdac406eccfe5cdd0a</hash>
        <hash alg="SHA-512">f867b1a1fbc057fcfc37c2fa86082f5965ad6a1c45373eac6cfa6ec058cedbf7b348ab4f3d4fea2d4d105ecc401c14f24d9b16f344507e126a221d50532cb8b2</hash>
        <hash alg="SHA-384">2986b161379c30e9805f3bcff197d7861b8c0690a021e2d7464707e57028b1953d24eefd1a36722f3c04665190b3cb48</hash>
        <hash alg="SHA3-384">597fe452ff7e21149da3c537b61d8e1b17df792f67bcd80fbccd6647acca571a94fa8bbcf4840826a37814bb2ef0249a</hash>
        <hash alg="SHA3-256">5447d9786f79d7dc20e8f75ac93f3a05181f3707faf6e91696dd326cdd5f5754</hash>
        <hash alg="SHA3-512">b51065218c88f5ce0b94e6607dee42d6c01aeb69a87b6e1c656dd406f2196cc999150ce87f56fbeeecbed7e1e354ed285589fa560012e9fb5858a97dc17d2129</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.errorprone/error_prone_annotations@2.50.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://errorprone.info/error_prone_annotations</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/google/error-prone/error_prone_annotations</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.j2objc/j2objc-annotations@3.1?type=jar">
      <group>com.google.j2objc</group>
      <name>j2objc-annotations</name>
      <version>3.1</version>
      <description>A set of annotations that provide additional information to the J2ObjC
    translator to modify the result of translation.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">abe8bd3abff622b9a8b15c3a737aa741</hash>
        <hash alg="SHA-1">a892ca9507839bbdb900d64310ac98256cab992f</hash>
        <hash alg="SHA-256">84d3a150518485f8140ea99b8a985656749629f6433c92b80c75b36aba3b099b</hash>
        <hash alg="SHA-512">34ee5aad57b0b507e89c897306f73043f80fa0eb02b453e54d9052feb0808a0d2ed835d888946211921d2bf733780b19ff636479ce19b9f48814ba6008733ce1</hash>
        <hash alg="SHA-384">7b760a346a586d6a3fa4477807e2f02f091e61898fc9a6ff449e43c55b6465fbbc17720663183c84c41d4d8814085e51</hash>
        <hash alg="SHA3-384">a2166c1c08f947c0e60aa7c9167602942e7bac37ba45863d34c0132a1f352e7807a382588d350b93bdbbbbe315a3573f</hash>
        <hash alg="SHA3-256">3d4d3b8bfd2ad13351a53610aa4bf1c5a69d2bde4272c281003120ed9bcddb8c</hash>
        <hash alg="SHA3-512">0a574b379a3f8022f0b88252c87d0e6b6cfa434fdb981efd1b24387025a962d7ac4e90161e8bd048df142bf52f4fc41e4a0c1d45e4eeb872c5954aad552988e9</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.j2objc/j2objc-annotations@3.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/google/j2objc/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="vcs">
          <url>http://github.com/google/j2objc</url>
        </reference>
      </externalReferences>
    </component>
  </components>
  <dependencies>
    <dependency ref="pkg:maven/org.apache.rat/apache-rat-core-tests@0.19-SNAPSHOT?type=jar">
      <dependency ref="pkg:maven/org.reflections/reflections@0.10.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.rat/apache-rat-core@0.19-SNAPSHOT?type=jar"/>
      <dependency ref="pkg:maven/commons-cli/commons-cli@1.8.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.22.0?type=jar"/>
      <dependency ref="pkg:maven/commons-io/commons-io@2.22.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-text@1.15.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.tika/tika-core@4.2.0?type=jar"/>
      <dependency ref="pkg:maven/org.junit.jupiter/junit-jupiter-api@6.1.3?type=jar"/>
      <dependency ref="pkg:maven/org.junit.jupiter/junit-jupiter-params@6.1.3?type=jar"/>
      <dependency ref="pkg:maven/org.mockito/mockito-core@5.24.0?type=jar"/>
      <dependency ref="pkg:maven/org.assertj/assertj-core@4.0.0-M1?type=jar"/>
      <dependency ref="pkg:maven/org.xmlunit/xmlunit-assertj3@2.14.0?type=jar"/>
      <dependency ref="pkg:maven/org.xmlunit/xmlunit-core@2.14.0?type=jar"/>
      <dependency ref="pkg:maven/org.mockito/mockito-junit-jupiter@5.24.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.groovy/groovy@6.0.0?type=jar"/>
      <dependency ref="pkg:maven/com.google.jimfs/jimfs@1.3.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.reflections/reflections@0.10.2?type=jar">
      <dependency ref="pkg:maven/org.javassist/javassist@3.28.0-GA?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.32?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.javassist/javassist@3.28.0-GA?type=jar"/>
    <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar"/>
    <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.32?type=jar"/>
    <dependency ref="pkg:maven/org.apache.rat/apache-rat-core@0.19-SNAPSHOT?type=jar">
      <dependency ref="pkg:maven/com.github.spotbugs/spotbugs-annotations@4.10.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.velocity/velocity-engine-core@2.4.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.velocity.tools/velocity-tools-generic@3.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-collections4@4.6.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.22.0?type=jar"/>
      <dependency ref="pkg:maven/commons-io/commons-io@2.22.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-compress@1.28.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-text@1.15.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-secure-xml@1.1.0?type=jar"/>
      <dependency ref="pkg:maven/commons-cli/commons-cli@1.8.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.tika/tika-core@4.2.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.tika/tika-parser-text-module@4.2.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.github.spotbugs/spotbugs-annotations@4.10.5?type=jar">
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.velocity/velocity-engine-core@2.4.1?type=jar">
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.22.0?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.32?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.22.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.velocity.tools/velocity-tools-generic@3.1?type=jar">
      <dependency ref="pkg:maven/org.apache.velocity/velocity-engine-core@2.4.1?type=jar"/>
      <dependency ref="pkg:maven/commons-beanutils/commons-beanutils@1.9.4?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-digester3@3.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.22.0?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.32?type=jar"/>
      <dependency ref="pkg:maven/com.github.cliftonlabs/json-simple@3.0.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/commons-beanutils/commons-beanutils@1.9.4?type=jar">
      <dependency ref="pkg:maven/commons-logging/commons-logging@1.2?type=jar"/>
      <dependency ref="pkg:maven/commons-collections/commons-collections@3.2.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/commons-logging/commons-logging@1.2?type=jar"/>
    <dependency ref="pkg:maven/commons-collections/commons-collections@3.2.2?type=jar"/>
    <dependency ref="pkg:maven/org.apache.commons/commons-digester3@3.2?type=jar">
      <dependency ref="pkg:maven/commons-beanutils/commons-beanutils@1.9.4?type=jar"/>
      <dependency ref="pkg:maven/commons-logging/commons-logging@1.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.github.cliftonlabs/json-simple@3.0.2?type=jar"/>
    <dependency ref="pkg:maven/org.apache.commons/commons-collections4@4.6.0?type=jar"/>
    <dependency ref="pkg:maven/commons-io/commons-io@2.22.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.commons/commons-compress@1.28.0?type=jar">
      <dependency ref="pkg:maven/commons-codec/commons-codec@1.19.0?type=jar"/>
      <dependency ref="pkg:maven/commons-io/commons-io@2.22.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.22.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/commons-codec/commons-codec@1.19.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.commons/commons-text@1.15.0?type=jar">
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.22.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.commons/commons-secure-xml@1.1.0?type=jar"/>
    <dependency ref="pkg:maven/commons-cli/commons-cli@1.8.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.tika/tika-core@4.2.0?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.32?type=jar"/>
      <dependency ref="pkg:maven/commons-io/commons-io@2.22.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-secure-xml@1.1.0?type=jar"/>
      <dependency ref="pkg:maven/org.commonmark/commonmark@0.31.0?type=jar"/>
      <dependency ref="pkg:maven/org.commonmark/commonmark-ext-gfm-tables@0.31.0?type=jar"/>
      <dependency ref="pkg:maven/org.commonmark/commonmark-ext-gfm-strikethrough@0.31.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.commonmark/commonmark@0.31.0?type=jar"/>
    <dependency ref="pkg:maven/org.commonmark/commonmark-ext-gfm-tables@0.31.0?type=jar">
      <dependency ref="pkg:maven/org.commonmark/commonmark@0.31.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.commonmark/commonmark-ext-gfm-strikethrough@0.31.0?type=jar">
      <dependency ref="pkg:maven/org.commonmark/commonmark@0.31.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.tika/tika-parser-text-module@4.2.0?type=jar">
      <dependency ref="pkg:maven/org.apache.tika/tika-encoding-detector-mojibuster@4.2.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.tika/tika-parser-datauri-commons@4.2.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-csv@1.14.1?type=jar"/>
      <dependency ref="pkg:maven/org.commonmark/commonmark@0.31.0?type=jar"/>
      <dependency ref="pkg:maven/org.commonmark/commonmark-ext-gfm-tables@0.31.0?type=jar"/>
      <dependency ref="pkg:maven/org.commonmark/commonmark-ext-gfm-strikethrough@0.31.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.tika/tika-encoding-detector-mojibuster@4.2.0?type=jar">
      <dependency ref="pkg:maven/org.apache.tika/tika-core@4.2.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.tika/tika-ml-core@4.2.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.tika/tika-ml-core@4.2.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.tika/tika-parser-datauri-commons@4.2.0?type=jar">
      <dependency ref="pkg:maven/commons-codec/commons-codec@1.19.0?type=jar"/>
      <dependency ref="pkg:maven/commons-io/commons-io@2.22.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.commons/commons-csv@1.14.1?type=jar">
      <dependency ref="pkg:maven/commons-io/commons-io@2.22.0?type=jar"/>
      <dependency ref="pkg:maven/commons-codec/commons-codec@1.19.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.junit.jupiter/junit-jupiter-api@6.1.3?type=jar">
      <dependency ref="pkg:maven/org.opentest4j/opentest4j@1.3.0?type=jar"/>
      <dependency ref="pkg:maven/org.junit.platform/junit-platform-commons@6.1.3?type=jar"/>
      <dependency ref="pkg:maven/org.apiguardian/apiguardian-api@1.1.2?type=jar"/>
      <dependency ref="pkg:maven/org.jspecify/jspecify@1.0.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.opentest4j/opentest4j@1.3.0?type=jar"/>
    <dependency ref="pkg:maven/org.junit.platform/junit-platform-commons@6.1.3?type=jar">
      <dependency ref="pkg:maven/org.apiguardian/apiguardian-api@1.1.2?type=jar"/>
      <dependency ref="pkg:maven/org.jspecify/jspecify@1.0.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apiguardian/apiguardian-api@1.1.2?type=jar"/>
    <dependency ref="pkg:maven/org.jspecify/jspecify@1.0.0?type=jar"/>
    <dependency ref="pkg:maven/org.junit.jupiter/junit-jupiter-params@6.1.3?type=jar">
      <dependency ref="pkg:maven/org.junit.jupiter/junit-jupiter-api@6.1.3?type=jar"/>
      <dependency ref="pkg:maven/org.apiguardian/apiguardian-api@1.1.2?type=jar"/>
      <dependency ref="pkg:maven/org.jspecify/jspecify@1.0.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.mockito/mockito-core@5.24.0?type=jar">
      <dependency ref="pkg:maven/net.bytebuddy/byte-buddy@1.17.7?type=jar"/>
      <dependency ref="pkg:maven/net.bytebuddy/byte-buddy-agent@1.17.7?type=jar"/>
      <dependency ref="pkg:maven/org.objenesis/objenesis@3.3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/net.bytebuddy/byte-buddy@1.17.7?type=jar"/>
    <dependency ref="pkg:maven/net.bytebuddy/byte-buddy-agent@1.17.7?type=jar"/>
    <dependency ref="pkg:maven/org.objenesis/objenesis@3.3?type=jar"/>
    <dependency ref="pkg:maven/org.assertj/assertj-core@4.0.0-M1?type=jar">
      <dependency ref="pkg:maven/net.bytebuddy/byte-buddy@1.17.7?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.xmlunit/xmlunit-assertj3@2.14.0?type=jar"/>
    <dependency ref="pkg:maven/org.xmlunit/xmlunit-core@2.14.0?type=jar"/>
    <dependency ref="pkg:maven/org.mockito/mockito-junit-jupiter@5.24.0?type=jar">
      <dependency ref="pkg:maven/org.mockito/mockito-core@5.24.0?type=jar"/>
      <dependency ref="pkg:maven/org.junit.jupiter/junit-jupiter-api@6.1.3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.groovy/groovy@6.0.0?type=jar"/>
    <dependency ref="pkg:maven/com.google.jimfs/jimfs@1.3.2?type=jar">
      <dependency ref="pkg:maven/com.google.guava/guava@33.7.1-jre?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.google.guava/guava@33.7.1-jre?type=jar">
      <dependency ref="pkg:maven/com.google.guava/failureaccess@1.0.3?type=jar"/>
      <dependency ref="pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar"/>
      <dependency ref="pkg:maven/org.jspecify/jspecify@1.0.0?type=jar"/>
      <dependency ref="pkg:maven/com.google.errorprone/error_prone_annotations@2.50.0?type=jar"/>
      <dependency ref="pkg:maven/com.google.j2objc/j2objc-annotations@3.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.google.guava/failureaccess@1.0.3?type=jar"/>
    <dependency ref="pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar"/>
    <dependency ref="pkg:maven/com.google.errorprone/error_prone_annotations@2.50.0?type=jar"/>
    <dependency ref="pkg:maven/com.google.j2objc/j2objc-annotations@3.1?type=jar"/>
  </dependencies>
</bom>
