{
  "bomFormat" : "CycloneDX",
  "specVersion" : "1.4",
  "version" : 1,
  "metadata" : {
    "tools" : [
      {
        "vendor" : "OWASP Foundation",
        "name" : "CycloneDX Maven plugin",
        "version" : "2.7.9",
        "hashes" : [
          {
            "alg" : "MD5",
            "content" : "8e595cdb67f17e4b41e046456970591d"
          },
          {
            "alg" : "SHA-1",
            "content" : "69e8ca804520d09ce4657e7235bae84d01cbffa6"
          },
          {
            "alg" : "SHA-256",
            "content" : "aa09074fe5aa403c008cd4fc7ef8ce41cd244489337f16b3e91a3914158a4db8"
          },
          {
            "alg" : "SHA-512",
            "content" : "1488a8112da8e675813d7585f57c5efb178aed32901118186ee12d0e4ae3d19c53774c7f860bf70d17d70f050119b69443a2637cf641675b4b5d9cdcdd69b89b"
          },
          {
            "alg" : "SHA-384",
            "content" : "b097295dfbf10887abc6eec58d4d0822cde5a73d1f5c1cf183a57bf569016ad5ced9d34efae3e574d82bb62837540c6c"
          }
        ]
      }
    ],
    "component" : {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.plugins",
      "name" : "maven-dependency-plugin",
      "version" : "3.6.1",
      "description" : "Provides utility goals to work with dependencies like copying, unpacking, analyzing, resolving and many more.",
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.plugins/maven-dependency-plugin@3.6.1?type=maven-plugin",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/plugins/maven-dependency-plugin/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-dependency-plugin/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MDEP"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-dependency-plugin/tree/maven-dependency-plugin-3.6.1"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.plugins/maven-dependency-plugin@3.6.1?type=maven-plugin"
    },
    "properties" : [
      {
        "name" : "maven.goal",
        "value" : "makeAggregateBom"
      },
      {
        "name" : "maven.scopes",
        "value" : "compile,provided,runtime,system"
      },
      {
        "name" : "maven.reproducible",
        "value" : "enabled"
      }
    ]
  },
  "components" : [
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-artifact",
      "version" : "3.2.5",
      "description" : "Maven is a software build management and comprehension tool. Based on the concept of a project object model: builds, dependency management, documentation creation, site publication, and distribution publication are all controlled from the declarative file. Maven can be extended by plugins to utilise a number of other development tools for reporting or the build process.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6ca73ba6de24218f238a45d8a06e519b"
        },
        {
          "alg" : "SHA-1",
          "content" : "bf5ce89d5f7ff57f2a33e78067ba97e62bae007d"
        },
        {
          "alg" : "SHA-256",
          "content" : "270385907ecfbcb256fe5afb883869fd57a5c021b5242693743ef787605c6335"
        },
        {
          "alg" : "SHA-512",
          "content" : "7be445c021ac2438a9f37d37db159ba5875b32d74ee901a07462f266f1847c97e69cffd3f51058e468539bfa322c270f6bb50852cbb38e39806011386fb08ed8"
        },
        {
          "alg" : "SHA-384",
          "content" : "c918bb72c186b84a6990db3749fdf0dbf819f815fde27242276cac59d9da826f00433794f53987ebc844ff6df3768616"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-artifact@3.2.5?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://maven.apache.org/ref/3.2.5/maven-artifact"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/job/maven-3.x/"
        },
        {
          "type" : "distribution",
          "url" : "http://maven.apache.org/download.html"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://jira.codehaus.org/browse/MNG"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/maven-users"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven/tree/maven-3.2.5/maven-artifact"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-artifact@3.2.5?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-plugin-api",
      "version" : "3.2.5",
      "description" : "The API for plugins - Mojos - development.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "11a402fb287811b6a249a553e9af5383"
        },
        {
          "alg" : "SHA-1",
          "content" : "5c6893f4ac5425d07c4053f3c4e27b2a3b37c516"
        },
        {
          "alg" : "SHA-256",
          "content" : "194a6f0ce889ed3b0d8a9bc4d3c79541e878098b7e303e4ac76c1031850772c3"
        },
        {
          "alg" : "SHA-512",
          "content" : "ace85ef74fb6a582afe6edb8282d4f09e2e4d5899e7471a0169cb8ccae9bc93d664b9c3e7f7be753434e1b30290447d87a3226969045cfb4e3e15b3ca2a596fa"
        },
        {
          "alg" : "SHA-384",
          "content" : "0e796a4fe15828a8b8fc7f642c8cf7932c7b15de868b72eb222f95b91d55fd5281fd679f8a1cfaebfc3d1eeaca794edd"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-plugin-api@3.2.5?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://maven.apache.org/ref/3.2.5/maven-plugin-api"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/job/maven-3.x/"
        },
        {
          "type" : "distribution",
          "url" : "http://maven.apache.org/download.html"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://jira.codehaus.org/browse/MNG"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/maven-users"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven/tree/maven-3.2.5/maven-plugin-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-plugin-api@3.2.5?type=jar"
    },
    {
      "publisher" : "The Eclipse Foundation",
      "group" : "org.eclipse.sisu",
      "name" : "org.eclipse.sisu.plexus",
      "version" : "0.3.0.M1",
      "description" : "Plexus-JSR330 adapter; adds Plexus support to the Sisu-Inject container",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "9e78927be6eb0437c2c9e805e7dc7a79"
        },
        {
          "alg" : "SHA-1",
          "content" : "5dd889c7c3fa83f24ab7435d94da2cfe0a16dedd"
        },
        {
          "alg" : "SHA-256",
          "content" : "35b545ead7e5513ec8c4974a984659ec68738e6761bb7c08a9876a2e901d38ae"
        },
        {
          "alg" : "SHA-512",
          "content" : "8829a3b06a0dff9377099d5f9e2f9cc9dd8471b443d43e59d1c57dc8ea39db273b0a6b87de2163f25b304c8292e4c3d16649f428964a3a9238dd61cb2fd7b1bb"
        },
        {
          "alg" : "SHA-384",
          "content" : "6a4172720dd4221c8c759df8035defc5b11da50928e3d1e968d77dbf7ffcebd4bdff320a57bcb5e45c111157461aa779"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-1.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.3.0.M1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.eclipse.org/sisu/org.eclipse.sisu.plexus/"
        },
        {
          "type" : "build-system",
          "url" : "https://hudson.eclipse.org/sisu/job/sisu-plexus-nightly/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://bugs.eclipse.org/bugs/enter_bug.cgi?product=Sisu&component=Plexus&format=guided"
        },
        {
          "type" : "mailing-list",
          "url" : "http://dev.eclipse.org/mhonarc/lists/sisu-dev/"
        },
        {
          "type" : "vcs",
          "url" : "http://git.eclipse.org/c/sisu/org.eclipse.sisu.plexus.git/tree/org.eclipse.sisu.plexus/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.3.0.M1?type=jar"
    },
    {
      "publisher" : "Seam Framework",
      "group" : "javax.enterprise",
      "name" : "cdi-api",
      "version" : "1.0",
      "description" : "APIs for JSR-299: Contexts and Dependency Injection for Java EE",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "462c0959f0322016495f4598243bc0f2"
        },
        {
          "alg" : "SHA-1",
          "content" : "44c453f60909dfc223552ace63e05c694215156b"
        },
        {
          "alg" : "SHA-256",
          "content" : "1f10b2204cc77c919301f20ff90461c3df1b6e6cb148be1c2d22107f4851d423"
        },
        {
          "alg" : "SHA-512",
          "content" : "3e326196a2cbf19375803ce37d743a9818c4fa2292914439e748060d6889c997fe33077f52e52d4dd61b60e7342aa31b446d7571a92ec864f44cead45ebd612b"
        },
        {
          "alg" : "SHA-384",
          "content" : "cff1b12eddd9d7c4e075ea91edf063bf22308dc1857e1ba19914baa5db0921828a8605c37a2a672af8a6e76116cbaf08"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/javax.enterprise/cdi-api@1.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.seamframework.org/Weld/cdi-api"
        },
        {
          "type" : "build-system",
          "url" : "http://hudson.jboss.org"
        },
        {
          "type" : "distribution",
          "url" : "http://oss.sonatype.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://jira.jboss.org/browse/WELD"
        },
        {
          "type" : "vcs",
          "url" : "http://fisheye.jboss.org/browse/Weld/api/tags/1.0/build/tags/weld-parent-6/weld-api-bom/weld-api-parent/cdi-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/javax.enterprise/cdi-api@1.0?type=jar"
    },
    {
      "group" : "javax.annotation",
      "name" : "jsr250-api",
      "version" : "1.0",
      "description" : "JSR-250 Reference Implementation by Glassfish",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4cd56b2e4977e541186de69f5126b4a6"
        },
        {
          "alg" : "SHA-1",
          "content" : "5025422767732a1ab45d93abfea846513d742dcf"
        },
        {
          "alg" : "SHA-256",
          "content" : "a1a922d0d9b6d183ed3800dfac01d1e1eb159f0e8c6f94736931c1def54a941f"
        },
        {
          "alg" : "SHA-512",
          "content" : "8b5dd24460e42763f3645205be4b4f80691e217d36bee5fc5b5df6ebc8782ed0f641fb9e2fe918a2d0eede32556656f6b61fe65d2cbec5086e61ef3d91e4d871"
        },
        {
          "alg" : "SHA-384",
          "content" : "33e45a556c20dfd05b0af34e58a651bcb3c79275694bf14b68a1e7a1116b722d5a5d3399f4bb304fef7fc296da61dd5d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "CDDL-1.0"
          }
        }
      ],
      "purl" : "pkg:maven/javax.annotation/jsr250-api@1.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://jcp.org/aboutJava/communityprocess/final/jsr250/index.html"
        },
        {
          "type" : "distribution",
          "url" : "http://jcp.org/aboutJava/communityprocess/final/jsr250/index.html"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/javax.annotation/jsr250-api@1.0?type=jar"
    },
    {
      "publisher" : "The Eclipse Foundation",
      "group" : "org.eclipse.sisu",
      "name" : "org.eclipse.sisu.inject",
      "version" : "0.3.0.M1",
      "description" : "JSR330-based container; supports classpath scanning, auto-binding, and dynamic auto-wiring",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "d88b78f38061925165409f2af670142e"
        },
        {
          "alg" : "SHA-1",
          "content" : "702dd8cdca70b89f16073e3de062035d8ce2486c"
        },
        {
          "alg" : "SHA-256",
          "content" : "3a878482877e66337ab8461e7f55ab9d701f8090f889ad8938cceefa33193fe4"
        },
        {
          "alg" : "SHA-512",
          "content" : "6e0d920b245d2439d1d452ebeed03f1321d588122de956b5089d6a511e3ae0d7dfb75b09b9da2d84226e5dca4c138265b6869e45365b714e030f9b7d5b45f668"
        },
        {
          "alg" : "SHA-384",
          "content" : "48150a354934e70c9e17562e03d9013419697adb4280294c60b72c93b9d157ecf92d96a434d18ab71b5dfc67a678bee1"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-1.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.3.0.M1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.eclipse.org/sisu/org.eclipse.sisu.inject/"
        },
        {
          "type" : "build-system",
          "url" : "https://hudson.eclipse.org/sisu/job/sisu-inject-nightly/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://bugs.eclipse.org/bugs/enter_bug.cgi?product=Sisu&component=Inject&format=guided"
        },
        {
          "type" : "mailing-list",
          "url" : "http://dev.eclipse.org/mhonarc/lists/sisu-dev/"
        },
        {
          "type" : "vcs",
          "url" : "http://git.eclipse.org/c/sisu/org.eclipse.sisu.inject.git/tree/org.eclipse.sisu.inject/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.3.0.M1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-model",
      "version" : "3.2.5",
      "description" : "Model for Maven POM (Project Object Model)",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "16ceccebac412654c427dcd66df4f6f9"
        },
        {
          "alg" : "SHA-1",
          "content" : "ced305476a43e8a042a59e94ef38b3291d9ce1e7"
        },
        {
          "alg" : "SHA-256",
          "content" : "8d439cc1661349dab1c69eed0f831336d187e162cc6d68aa4deefcff57ee0624"
        },
        {
          "alg" : "SHA-512",
          "content" : "5f67231329c4d1fceec84684f69b3e2a840c4acac8a3af927036e6cc05fe35562fc6a17b104ddc52d8d863fdf70160aeda99259cbc3b08d63b217f52cb8a7658"
        },
        {
          "alg" : "SHA-384",
          "content" : "b341f59c5756a7ad161dda15c114ee027d111b2fc5982ed1e9af1882cad87acb6628b08a971f04a5c5716c094416fda2"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-model@3.2.5?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://maven.apache.org/ref/3.2.5/maven-model"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/job/maven-3.x/"
        },
        {
          "type" : "distribution",
          "url" : "http://maven.apache.org/download.html"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://jira.codehaus.org/browse/MNG"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/maven-users"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven/tree/maven-3.2.5/maven-model"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-model@3.2.5?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-core",
      "version" : "3.2.5",
      "description" : "Maven Core classes.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0988ce2795bb72277a0199179154d398"
        },
        {
          "alg" : "SHA-1",
          "content" : "fbec7cf0df4fbc2896a6768ae59053877c05c241"
        },
        {
          "alg" : "SHA-256",
          "content" : "4f1a0af8997e1daf778b91c5ae9e973f92df699439d909fdec7fc6055c09de12"
        },
        {
          "alg" : "SHA-512",
          "content" : "0173f2ad5720466164832da561b8558a1e75786457548ce3d51c5b15c9a08b5c797b1964e1b4398dc31c747917da604fb50a24a747ad1bab16de714002de60a9"
        },
        {
          "alg" : "SHA-384",
          "content" : "a680dfb67da5b1e63f0acfe9bcf3fa123e8b164c92735a4537d74c802bc4ce27a6b95865b536f375f054be6b1f7da0ac"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-core@3.2.5?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://maven.apache.org/ref/3.2.5/maven-core"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/job/maven-3.x/"
        },
        {
          "type" : "distribution",
          "url" : "http://maven.apache.org/download.html"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://jira.codehaus.org/browse/MNG"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/maven-users"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven/tree/maven-3.2.5/maven-core"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-core@3.2.5?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-settings-builder",
      "version" : "3.2.5",
      "description" : "The effective settings builder, with inheritance and password decryption.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "c48b8a83cd03a5672f07b559ca1a5307"
        },
        {
          "alg" : "SHA-1",
          "content" : "7fd98de76398a3ff5c1d9a7b85f26cb65a862578"
        },
        {
          "alg" : "SHA-256",
          "content" : "9c5a014ceb8abb55e997dcc41d17bbe0ae145db574be6b7186e75950c241269f"
        },
        {
          "alg" : "SHA-512",
          "content" : "f2015ad44aaa0b217e5e0d1e22c366136cd44588961cdca2104c4d9bf7d5067e4952880c537a86a669f1ca0169344012a4ca896a3ea3fed2fd7615ff3a12a208"
        },
        {
          "alg" : "SHA-384",
          "content" : "28eb1569383d19df9a7c0568193b733c60ce22ff2bed3eff79bd1773178d65fe237045ffe1423b5bf31fd8fd7395619d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-settings-builder@3.2.5?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://maven.apache.org/ref/3.2.5/maven-settings-builder"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/job/maven-3.x/"
        },
        {
          "type" : "distribution",
          "url" : "http://maven.apache.org/download.html"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://jira.codehaus.org/browse/MNG"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/maven-users"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven/tree/maven-3.2.5/maven-settings-builder"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-settings-builder@3.2.5?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-model-builder",
      "version" : "3.2.5",
      "description" : "The effective model builder, with inheritance, profile activation, interpolation, ...",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a216c67dae851a4cedb4b431a674eba2"
        },
        {
          "alg" : "SHA-1",
          "content" : "7a32f3966fab463df9cdae95fd6df8c2e561e3ae"
        },
        {
          "alg" : "SHA-256",
          "content" : "cc5321269d080ad6694458f53186be5391a21c488ab3a7d6dd73123c7681879d"
        },
        {
          "alg" : "SHA-512",
          "content" : "a25a612d607e301e3041a0c6edd708a096d23ec6e2e1fc1bc092e1f6b9a6974ba9f5b256007ca2b9a9d23a45b84b2d7b49f38e31ebe42844ad438ad4da92b922"
        },
        {
          "alg" : "SHA-384",
          "content" : "36a95790b1b09f903ad1f245318d1874ca2f6a5f8d592f5b9a1c1a182f8f5ed0923f7d1c672ec117b503c33f10107f4e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-model-builder@3.2.5?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://maven.apache.org/ref/3.2.5/maven-model-builder"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/job/maven-3.x/"
        },
        {
          "type" : "distribution",
          "url" : "http://maven.apache.org/download.html"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://jira.codehaus.org/browse/MNG"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/maven-users"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven/tree/maven-3.2.5/maven-model-builder"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-model-builder@3.2.5?type=jar"
    },
    {
      "publisher" : "The Eclipse Foundation",
      "group" : "org.eclipse.aether",
      "name" : "aether-impl",
      "version" : "1.0.0.v20140518",
      "description" : "An implementation of the repository system.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "819d1c095629b2bd9ed0980395c91b7d"
        },
        {
          "alg" : "SHA-1",
          "content" : "a5ee67be2c99dfb95ad61235d749c92ae09c926e"
        },
        {
          "alg" : "SHA-256",
          "content" : "9a9b60e685385225f08e662cb9f60d96610b0987f0f47bbf3f0c92df8a897d00"
        },
        {
          "alg" : "SHA-512",
          "content" : "594b84397a652e481e1ed14a7b53b554bf3e851410b99189f78d9aa4dfa872f02e9e536255357799d934d1171607a36d38e7e9ff6409d04f4e88aded914f215b"
        },
        {
          "alg" : "SHA-384",
          "content" : "5b38a890f624b378fc5e4e067aee2273f24b6f1dd3ef72ae0dd450bdfdfa873e7f814beab8150b9e0c6957275d81b29e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-1.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.aether/aether-impl@1.0.0.v20140518?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.eclipse.org/aether/aether-impl/"
        },
        {
          "type" : "build-system",
          "url" : "https://hudson.eclipse.org/aether/job/aether-core/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://bugs.eclipse.org/bugs/buglist.cgi?query_format=specific&bug_status=__open__&product=Aether"
        },
        {
          "type" : "mailing-list",
          "url" : "http://dev.eclipse.org/mhonarc/lists/aether-dev/"
        },
        {
          "type" : "vcs",
          "url" : "http://git.eclipse.org/c/aether/aether-core.git/tree/aether-impl/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.aether/aether-impl@1.0.0.v20140518?type=jar"
    },
    {
      "publisher" : "Google, Inc.",
      "group" : "org.sonatype.sisu",
      "name" : "sisu-guice",
      "version" : "3.2.3",
      "description" : "Patched build of Guice: a lightweight dependency injection framework for Java 6 and above",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "733be430711a32f2b9ba72da565cab2f"
        },
        {
          "alg" : "SHA-1",
          "content" : "6b8262f32ff7b60881aed3e7aa9d81fdb48330e9"
        },
        {
          "alg" : "SHA-256",
          "content" : "004af7012b6d11ab585ae841130ff091dcad6531d7bf13db4d7deac91589eef4"
        },
        {
          "alg" : "SHA-512",
          "content" : "6cbd0095a564aa76423a835c08ee3c12f61eecae241f1c19fb4909f6b5355143e901766e9c7ae97953f70adbec79b8561cbc1e02af51c23552599ed5cb2b5ce2"
        },
        {
          "alg" : "SHA-384",
          "content" : "1af7c634c87fc8ec7245c0ada7031f43c54df00072fc637604d3043f43e319368e65e234457b53313364ecfb0c03b6fc"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.sonatype.sisu/sisu-guice@3.2.3?classifier=no_aop&type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/google/guice/sisu-guice"
        },
        {
          "type" : "build-system",
          "url" : "https://travis-ci.org/google/guice"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.sonatype.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/google/guice/issues/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://groups.google.com/group/google-guice/topics"
        },
        {
          "type" : "vcs",
          "url" : "http://github.com/sonatype/sisu-guice/sisu-guice"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.sonatype.sisu/sisu-guice@3.2.3?classifier=no_aop&type=jar"
    },
    {
      "group" : "aopalliance",
      "name" : "aopalliance",
      "version" : "1.0",
      "description" : "AOP Alliance",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "04177054e180d09e3998808efa0401c7"
        },
        {
          "alg" : "SHA-1",
          "content" : "0235ba8b489512805ac13a8f9ea77a1ca5ebe3e8"
        },
        {
          "alg" : "SHA-256",
          "content" : "0addec670fedcd3f113c5c8091d783280d23f75e3acb841b61a9cdb079376a08"
        },
        {
          "alg" : "SHA-512",
          "content" : "3f44a932d8c00cfeee2eb057bcd7c301a2d029063e0a916e1e20b3aec4877d19d67a2fd8aaf58fa2d5a00133d1602128a7f50912ffb6cabc7b0fdc7fbda3f8a1"
        },
        {
          "alg" : "SHA-384",
          "content" : "4dddf44338b5aff9580da2532b81c0ac3e1d09e1f28c6db871a55cad442b705dd7791eb07f9d4577d49d0be3673ba783"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "Public Domain"
          }
        }
      ],
      "purl" : "pkg:maven/aopalliance/aopalliance@1.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://aopalliance.sourceforge.net"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/aopalliance/aopalliance@1.0?type=jar"
    },
    {
      "group" : "com.google.guava",
      "name" : "guava",
      "version" : "16.0.1",
      "description" : "Guava is a suite of core and expanded libraries that include utility classes, google's collections, io classes, and much much more. Guava has only one code dependency - javax.annotation, per the JSR-305 spec.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a68693df58191585d9af914cfbe6067a"
        },
        {
          "alg" : "SHA-1",
          "content" : "5fa98cd1a63c99a44dd8d3b77e4762b066a5d0c5"
        },
        {
          "alg" : "SHA-256",
          "content" : "a896857d07845d38c7dc5bbc0457b6d9b0f62ecffda010e5e9ec12d561f676d3"
        },
        {
          "alg" : "SHA-512",
          "content" : "a9df202229a7955b70f35f33c9662bb0e7fec9e972c1fbac95fcf77ebacf18fea7e834dd60dcec1c8b6894393c75c480e08067e661cc234dea4829b952b7a2c4"
        },
        {
          "alg" : "SHA-384",
          "content" : "acc4ff89db23b3e6711f2be79f7c0d430f59327a3f1c9b3dd542e5618c6fec0d74357cf18c4c98c5915c587d4bcd9cbf"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.guava/guava@16.0.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://code.google.com/p/guava-libraries/guava"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://code.google.com/p/guava-libraries/issues"
        },
        {
          "type" : "vcs",
          "url" : "http://code.google.com/p/guava-libraries/source/browse/guava"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.guava/guava@16.0.1?type=jar"
    },
    {
      "publisher" : "Codehaus",
      "group" : "org.codehaus.plexus",
      "name" : "plexus-interpolation",
      "version" : "1.21",
      "description" : "The Plexus project provides a full software stack for creating and executing software projects.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6629656495f4e5eac4f244fe3b252ea1"
        },
        {
          "alg" : "SHA-1",
          "content" : "f92de59d295f16868001644acc21720f3ec9eb15"
        },
        {
          "alg" : "SHA-256",
          "content" : "aba7980581027ad5fc74a27ee4d64aad74932fdb32694967242d03fc50290d1f"
        },
        {
          "alg" : "SHA-512",
          "content" : "073168d32e16e4e67598558ebbb68778740185e6dcb87d68ab2a68ab867c2acbf2af5c1e8fc82dcb8b2062e46ddc36b6024c00cd5c2fffe794b4610d5f13a66d"
        },
        {
          "alg" : "SHA-384",
          "content" : "2ce80945419fddaf00d2d7110d8b0c61975dde40d6b8b643262eff84263974c5551391f5028a995d84c46c65a0ab954e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.plexus/plexus-interpolation@1.21?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://plexus.codehaus.org/plexus-components/plexus-interpolation"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://jira.codehaus.org/browse/PLXCOMP"
        },
        {
          "type" : "mailing-list",
          "url" : "http://archive.plexus.codehaus.org/user"
        },
        {
          "type" : "vcs",
          "url" : "http://github.com/sonatype/plexus-interpolation"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.plexus/plexus-interpolation@1.21?type=jar"
    },
    {
      "publisher" : "Codehaus",
      "group" : "org.codehaus.plexus",
      "name" : "plexus-classworlds",
      "version" : "2.5.2",
      "description" : "A class loader framework",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "53b54feee8cef6b843bd6748bda4bfa7"
        },
        {
          "alg" : "SHA-1",
          "content" : "4abb111bfdace5b8167db4c0ef74644f3f88f142"
        },
        {
          "alg" : "SHA-256",
          "content" : "b2931d41740490a8d931cbe0cfe9ac20deb66cca606e679f52522f7f534c9fd7"
        },
        {
          "alg" : "SHA-512",
          "content" : "5bbbce8880a8513ba1314c202005de96fe263b48f45d5cd6a3a3577fdfe7ccd88c2b908093eec237e6624f5dbba664dfb8aa82939cc540bb6652c0f4eea7b333"
        },
        {
          "alg" : "SHA-384",
          "content" : "27df83d9e2eb2730f1b0480aead44e0ed8c5243c0e3d96642e564917ee621f3c8b3217a4f3ae4f640fe9f8a0b67a43da"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.plexus/plexus-classworlds@2.5.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://plexus.codehaus.org/plexus-classworlds/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://jira.codehaus.org/browse/PLX"
        },
        {
          "type" : "mailing-list",
          "url" : "http://archive.plexus.codehaus.org/user"
        },
        {
          "type" : "vcs",
          "url" : "http://github.com/sonatype/plexus-classworlds"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.plexus/plexus-classworlds@2.5.2?type=jar"
    },
    {
      "publisher" : "Codehaus",
      "group" : "org.codehaus.plexus",
      "name" : "plexus-component-annotations",
      "version" : "1.5.5",
      "description" : "Plexus Component \"Java 5\" Annotations, to describe plexus components properties in java sources with standard annotations instead of javadoc annotations.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "ef37dcdb84030422db428b63c4354e5b"
        },
        {
          "alg" : "SHA-1",
          "content" : "c72f2660d0cbed24246ddb55d7fdc4f7374d2078"
        },
        {
          "alg" : "SHA-256",
          "content" : "4df7a6a7be64b35bbccf60b5c115697f9ea3421d22674ae67135dde375fcca1f"
        },
        {
          "alg" : "SHA-512",
          "content" : "2ea4afb8888f157483c6a8e99852fa8a80e90a3cf0756b3b22c73a8bc59a4aa3d7b50b975a1d810f28a090023b268dab49af14e8f8e33c7553fa61315afe06b2"
        },
        {
          "alg" : "SHA-384",
          "content" : "94193ec354f65fa8427b4b5115d1f47cb3bd70b0589c612cb5c604d8a2ddf0cce1d8683bf70c5576c27fc3dad33f0ac0"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.plexus/plexus-component-annotations@1.5.5?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://plexus.codehaus.org/plexus-containers/plexus-component-annotations/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://jira.codehaus.org/browse/PLX"
        },
        {
          "type" : "mailing-list",
          "url" : "http://archive.plexus.codehaus.org/user"
        },
        {
          "type" : "vcs",
          "url" : "http://fisheye.codehaus.org/browse/plexus/plexus-containers/tags/plexus-containers-1.5.5/plexus-component-annotations"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.plexus/plexus-component-annotations@1.5.5?type=jar"
    },
    {
      "group" : "org.sonatype.plexus",
      "name" : "plexus-sec-dispatcher",
      "version" : "1.3",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "53160199f5667de3fca69b723173639b"
        },
        {
          "alg" : "SHA-1",
          "content" : "dedc02034fb8fcd7615d66593228cb71709134b4"
        },
        {
          "alg" : "SHA-256",
          "content" : "3b0559bb8432f28937efe6ca193ef54a8506d0075d73fd7406b9b116c6a11063"
        },
        {
          "alg" : "SHA-512",
          "content" : "8b609608e4ce1346fdd3a0793d66dbdb893d6af046594ccc456eaceabca3f7a251cc8a6f1cad22fc17688911d0842cc84fa2303027fdf241c77f4078905aaacd"
        },
        {
          "alg" : "SHA-384",
          "content" : "539392b84ed3dfeeaa97c42a4befa559a05d18baabcadda2537b18fe8f340e11823ce0646e8931b92a4cfb24cd39d981"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.sonatype.plexus/plexus-sec-dispatcher@1.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://spice.sonatype.org/plexus-sec-dispatcher"
        },
        {
          "type" : "build-system",
          "url" : "https://grid.sonatype.org/ci/view/Spice/"
        },
        {
          "type" : "distribution",
          "url" : "http://repository.sonatype.org/content/repositories/releases"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.sonatype.org/browse/SPICE"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.sonatype.org/spice/tags/plexus-sec-dispatcher-1.3"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.sonatype.plexus/plexus-sec-dispatcher@1.3?type=jar"
    },
    {
      "group" : "org.sonatype.plexus",
      "name" : "plexus-cipher",
      "version" : "1.4",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "7b2d6fcf0d5800d5b1ce09d98d98dcaf"
        },
        {
          "alg" : "SHA-1",
          "content" : "50ade46f23bb38cd984b4ec560c46223432aac38"
        },
        {
          "alg" : "SHA-256",
          "content" : "5a15fdba22669e0fdd06e10dcce6320879e1f7398fbc910cd0677b50672a78c4"
        },
        {
          "alg" : "SHA-512",
          "content" : "deb948be3a9f6a2fa74adca17e54b1074948267b3a35dd4000d92c559d0387650770ccee096ad8f01dd51c36caf63878dc0bcf57dfb1f2e3e1a9d51204096617"
        },
        {
          "alg" : "SHA-384",
          "content" : "29d6722d6d4c412a98ed95f1fd6620047b22ce8d7e3160bcc49ca616a016b57be0c4d35daa8896ef93a80bcff77725ec"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.sonatype.plexus/plexus-cipher@1.4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://spice.sonatype.org/plexus-cipher"
        },
        {
          "type" : "build-system",
          "url" : "https://grid.sonatype.org/ci/view/Spice/"
        },
        {
          "type" : "distribution",
          "url" : "http://repository.sonatype.org/content/repositories/releases"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.sonatype.org/browse/SPICE"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.sonatype.org/spice/tags/plexus-cipher-1.4"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.sonatype.plexus/plexus-cipher@1.4?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-repository-metadata",
      "version" : "3.2.5",
      "description" : "Per-directory local and remote repository metadata.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "bda12e2d6070d417a6118c6ba769fd4f"
        },
        {
          "alg" : "SHA-1",
          "content" : "17049c63ce63654c112eeb82797edee49f8a4601"
        },
        {
          "alg" : "SHA-256",
          "content" : "62b517b77f24edebdee0e382ecddb44bb6632b7c08c528d625aed7d2980df12b"
        },
        {
          "alg" : "SHA-512",
          "content" : "487f49f1a2da4c39d92d2460864c7cff8efb2fdbe05ac89346a675b5964c4dc4c4551c43a28a423c55e7184f5fe0e517258c5427b2611f171e601794e8e00c55"
        },
        {
          "alg" : "SHA-384",
          "content" : "b49837b04166dac3e7667a0a006c889c7c39b8efb41ff6e1ddd9fbeb0c14ca426f8be4bd62813a92c93020ebdd61bc48"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-repository-metadata@3.2.5?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://maven.apache.org/ref/3.2.5/maven-repository-metadata"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/job/maven-3.x/"
        },
        {
          "type" : "distribution",
          "url" : "http://maven.apache.org/download.html"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://jira.codehaus.org/browse/MNG"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/maven-users"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven/tree/maven-3.2.5/maven-repository-metadata"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-repository-metadata@3.2.5?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-settings",
      "version" : "3.2.5",
      "description" : "Maven Settings model.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "9f78e75d76e2f92c08cbbc859bf6e272"
        },
        {
          "alg" : "SHA-1",
          "content" : "52179da78893ed7afea98d980c55e658fb04d9b4"
        },
        {
          "alg" : "SHA-256",
          "content" : "1874d4ee660b935675a60bdb2ef63e0ff5a81769f4fc04a035fa9d4c4e238224"
        },
        {
          "alg" : "SHA-512",
          "content" : "8e2e132534781f316060fe02eecde47dac20c50fbdc30a9e98efc74a1df58e22601319d779fb6d1fa121fab3860ffa61842ab34c04b4e733bf3a6daab5cd1b36"
        },
        {
          "alg" : "SHA-384",
          "content" : "f38f547bf3eaedf9f224fd7635ac2b227a381846e80e802a7b664f0652a28487e87710236f016ea3dc4888df9cdb05b3"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-settings@3.2.5?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://maven.apache.org/ref/3.2.5/maven-settings"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/job/maven-3.x/"
        },
        {
          "type" : "distribution",
          "url" : "http://maven.apache.org/download.html"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://jira.codehaus.org/browse/MNG"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/maven-users"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven/tree/maven-3.2.5/maven-settings"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-settings@3.2.5?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-aether-provider",
      "version" : "3.2.5",
      "description" : "Extensions to Aether for utilizing Maven POM and repository metadata.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "5b6cc79c8c8abc3c92ae7d57c4cbb078"
        },
        {
          "alg" : "SHA-1",
          "content" : "dfddf469d20b877b184dda5d6e60f0c75f558a72"
        },
        {
          "alg" : "SHA-256",
          "content" : "703944b922d5351aad53b842f7dd38439b7213425f13c6c7f034b8b699b7d578"
        },
        {
          "alg" : "SHA-512",
          "content" : "8ce9984b76364e162f8f31c99222c9b996813f2e12e6a8406d6a438d857855f8255e2f0403af281b081e6bc6e95374cb9faa9cff3f35214de1005c477f408299"
        },
        {
          "alg" : "SHA-384",
          "content" : "619bcb4fcf830a43b75b5bb3545173aa302102ead74ac3addee28f278d906841292130c4f515a15319893a3617fdd5ea"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-aether-provider@3.2.5?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://maven.apache.org/ref/3.2.5/maven-aether-provider"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/job/maven-3.x/"
        },
        {
          "type" : "distribution",
          "url" : "http://maven.apache.org/download.html"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://jira.codehaus.org/browse/MNG"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/maven-users"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven/tree/maven-3.2.5/maven-aether-provider"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-aether-provider@3.2.5?type=jar"
    },
    {
      "publisher" : "The Eclipse Foundation",
      "group" : "org.eclipse.aether",
      "name" : "aether-spi",
      "version" : "1.0.0.v20140518",
      "description" : "The service provider interface for repository system implementations and repository connectors.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "51c5870c01f48af3231ce6499464827a"
        },
        {
          "alg" : "SHA-1",
          "content" : "985a9a12b904fb3bafd4dc6b49f6a084845703a1"
        },
        {
          "alg" : "SHA-256",
          "content" : "a3266d127a4e9f4aa9c4fa0986e31eec784e866f79112e1840d1667e17c10fb2"
        },
        {
          "alg" : "SHA-512",
          "content" : "8074048d24d05c20da7adda6b8de93249e9e22b7fb62612b74c9f5623b093a7f23ba2cc2e77808542ee5dca6352b0e40e4f755dbd2a63f83a16d24b180bc19fc"
        },
        {
          "alg" : "SHA-384",
          "content" : "fa6d14091ab9b0ff63337e31cd0270640e1a84675733963c2d186ad1a6d2f8f64360431b81124e9c5f3d700ef8269374"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-1.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.aether/aether-spi@1.0.0.v20140518?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.eclipse.org/aether/aether-spi/"
        },
        {
          "type" : "build-system",
          "url" : "https://hudson.eclipse.org/aether/job/aether-core/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://bugs.eclipse.org/bugs/buglist.cgi?query_format=specific&bug_status=__open__&product=Aether"
        },
        {
          "type" : "mailing-list",
          "url" : "http://dev.eclipse.org/mhonarc/lists/aether-dev/"
        },
        {
          "type" : "vcs",
          "url" : "http://git.eclipse.org/c/aether/aether-core.git/tree/aether-spi/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.aether/aether-spi@1.0.0.v20140518?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.doxia",
      "name" : "doxia-sink-api",
      "version" : "1.11.1",
      "description" : "Doxia Sink API.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b1bd5c9efde9f14969fa881b87fe709b"
        },
        {
          "alg" : "SHA-1",
          "content" : "59c2255f58c78fbbcb7e638e82bd2914e78aec8b"
        },
        {
          "alg" : "SHA-256",
          "content" : "39ac38bb7d752ea003be17a0065522e4e1b076a4f7e374bea55259f3e133f28f"
        },
        {
          "alg" : "SHA-512",
          "content" : "2be3a3859737732cc7d5f6bed028d5f0ffbadd90c4e79a1dc7aaede258496c7c4017b49c606d2f4fc2c56f8df327befe21766a483147840b122f0606192555ea"
        },
        {
          "alg" : "SHA-384",
          "content" : "710aa1003a7d35c7e66efbfcfda24ba3c2c0f19e55f6be6e67d61aaa92469d55f786c078ede479a394caf7b3466f840f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.doxia/doxia-sink-api@1.11.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/doxia/doxia/doxia-sink-api/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-builds.apache.org/job/Maven/job/maven-box/job/maven-doxia/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/DOXIA"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-doxia/tree/doxia-1.11.1/doxia-sink-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.doxia/doxia-sink-api@1.11.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.doxia",
      "name" : "doxia-logging-api",
      "version" : "1.11.1",
      "description" : "Doxia Logging API.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6452e33a36b87939630e0b18f8ffcff0"
        },
        {
          "alg" : "SHA-1",
          "content" : "ee28757cce6ee0215bac550dead25074c97c532d"
        },
        {
          "alg" : "SHA-256",
          "content" : "243c66f842cd2b3ded7c6d2c36b177a65c3f5d94800cef988ba3e29ec8cf60c9"
        },
        {
          "alg" : "SHA-512",
          "content" : "a09084b6973c059654c8ff171d1eeff236f9d9737149ccdeb83ae6a6104df41a5400aafe708ef3412835622a6385bbbb9342bcf775050a859544c005866c66a8"
        },
        {
          "alg" : "SHA-384",
          "content" : "88d49fe6721215cf896afdb0e99baf54a4d48c8dcc610b4e1afd160f92ac19ac3798f3c83e0bb71bd33c960e12108c0c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.doxia/doxia-logging-api@1.11.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/doxia/doxia/doxia-logging-api/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-builds.apache.org/job/Maven/job/maven-box/job/maven-doxia/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/DOXIA"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-doxia/tree/doxia-1.11.1/doxia-logging-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.doxia/doxia-logging-api@1.11.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.reporting",
      "name" : "maven-reporting-api",
      "version" : "3.1.1",
      "description" : "API to manage report generation.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1e1e0b2f189c861995e33a2a746501bb"
        },
        {
          "alg" : "SHA-1",
          "content" : "74ca00a13e46d065071cdf6376d7d231e0208916"
        },
        {
          "alg" : "SHA-256",
          "content" : "25be6603c97d28fa3dcd122073054271c8fcaf667d220dce7a26a61a6f3cffd1"
        },
        {
          "alg" : "SHA-512",
          "content" : "a129606b163aab3cbbea22c8157a4349952739211b878aea8f75d4f0f756b44c3f0d40bbeeb682af35f5538d25dad3c02fc67fcb6eeb8a4235eb93e9200e7ed1"
        },
        {
          "alg" : "SHA-384",
          "content" : "fa1c5cf8c8069176c3c35577a58a0e9f5bf03bf387282a63fb11f4886dbd788aee7c651efe4dfe35b5665c5ccaad10cd"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.reporting/maven-reporting-api@3.1.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/shared/maven-reporting-api/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-reporting-api/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/issues/?jql=project%20%3D%20MSHARED%20AND%20component%20%3D%20maven-reporting-api"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-reporting-api/tree/maven-reporting-api-3.1.1"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.reporting/maven-reporting-api@3.1.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.reporting",
      "name" : "maven-reporting-impl",
      "version" : "3.2.0",
      "description" : "Abstract classes to manage report generation.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "468bb08c4330fd7647405b33edf769be"
        },
        {
          "alg" : "SHA-1",
          "content" : "97ffee6a6c3f81e341f42f641651a37f077759c6"
        },
        {
          "alg" : "SHA-256",
          "content" : "28f42c2f49f11dcba6d14ab3e365375442a9ed78ca2ec588e3e1f43455a4a14d"
        },
        {
          "alg" : "SHA-512",
          "content" : "a7d5c230961847d36ca13604c19b7bcc914faa2a1e1927d9864e08f5f563c77c2371393062c62fccf002a3897ea559b7741488a6f36fadfff5c488dae44224cd"
        },
        {
          "alg" : "SHA-384",
          "content" : "e1f17741c94b46d44888e9f2422b277566cbca150db21cc749b964511a4a11f02c5c16fa291bdcbd809945ae52667e94"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.reporting/maven-reporting-impl@3.2.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/shared/maven-reporting-impl/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-reporting-impl/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/issues/?jql=project%20%3D%20MSHARED%20AND%20component%20in%20(maven-reporting-impl)"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-reporting-impl/tree/maven-reporting-impl-3.2.0"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.reporting/maven-reporting-impl@3.2.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.doxia",
      "name" : "doxia-decoration-model",
      "version" : "1.11.1",
      "description" : "The Decoration Model handles the decoration descriptor for sites, also known as site.xml.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "927ed3e7c39b6fed77875ed385b63447"
        },
        {
          "alg" : "SHA-1",
          "content" : "1e10f4e9268b49edf40bca721eef07271bc91de5"
        },
        {
          "alg" : "SHA-256",
          "content" : "411fc167774f2e3573f280c57a278fbe7bae677ee596a8ad24bd6c6bb2c5bbce"
        },
        {
          "alg" : "SHA-512",
          "content" : "0fb497a4b5b57e2f6c08e479334cd76931feca66f07420ccf3ec79212405227edc4eb426a3f94418eaf3aa77e53952de614f7de3784f9604ebb439391eebfcf7"
        },
        {
          "alg" : "SHA-384",
          "content" : "d040436164726842d3331bb0c4fdc66a673029f3d97ac2687eb9c71203464ff94d40ad9d8d15df8bfa0948f2cf460292"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.doxia/doxia-decoration-model@1.11.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/doxia/doxia-sitetools/doxia-decoration-model/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-builds.apache.org/job/Maven/job/maven-box/job/doxia-sitetools/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/DOXIASITETOOLS"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-doxia-sitetools/tree/doxia-sitetools-1.11.1/doxia-decoration-model"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.doxia/doxia-decoration-model@1.11.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.doxia",
      "name" : "doxia-core",
      "version" : "1.11.1",
      "description" : "Doxia core classes and interfaces.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a5f49cc5f7dadd2fa104974dfa3a6766"
        },
        {
          "alg" : "SHA-1",
          "content" : "0b0438a61c2c1208b4d2e2b38241478383dd758b"
        },
        {
          "alg" : "SHA-256",
          "content" : "d79801594566bdd7168b1adf927c3cc40cf17a95dd4480b4151e45eb30128cd7"
        },
        {
          "alg" : "SHA-512",
          "content" : "3d5ffeb4638ae177c5ca958b540549f195416065bdbcbb6bbd80d815fa96d9b60467add41c46130b3bd7463f46be605fa13325cd5d783b786d60d4c929503337"
        },
        {
          "alg" : "SHA-384",
          "content" : "c157a1591035feab2dd92f785c128774a7251c6d97215e0d7930c3c27ce3b0e42b9196de0a44a0ba7c8982674bf7651c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.doxia/doxia-core@1.11.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/doxia/doxia/doxia-core/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-builds.apache.org/job/Maven/job/maven-box/job/maven-doxia/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/DOXIA"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-doxia/tree/doxia-1.11.1/doxia-core"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.doxia/doxia-core@1.11.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-lang3",
      "version" : "3.8.1",
      "description" : "Apache Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "540b1256d887a6993ecbef23371a3302"
        },
        {
          "alg" : "SHA-1",
          "content" : "6505a72a097d9270f7a9e7bf42c4238283247755"
        },
        {
          "alg" : "SHA-256",
          "content" : "dac807f65b07698ff39b1b07bfef3d87ae3fd46d91bbf8a2bc02b2a831616f68"
        },
        {
          "alg" : "SHA-512",
          "content" : "fb0fe98385496a565678a000c26a3245082abfbf879cc29a35112b4bf18c966697a7a63bb1fd2fae4a42512cd3de5a2e6dc9d1df4a4058332a6ddeae06cdf667"
        },
        {
          "alg" : "SHA-384",
          "content" : "72c6fd199936f06db886eba9dccd188e26afabf7b9e6744cea18f27e414abfe04d3d3f609f8505311a01f43e885bec1a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-lang3@3.8.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://commons.apache.org/proper/commons-lang/"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/LANG"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://git-wip-us.apache.org/repos/asf?p=commons-lang.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-lang3@3.8.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-text",
      "version" : "1.10.0",
      "description" : "Apache Commons Text is a library focused on algorithms working on strings.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4afc9bfa2d31dbf7330c98fcc954b892"
        },
        {
          "alg" : "SHA-1",
          "content" : "3363381aef8cef2dbc1023b3e3a9433b08b64e01"
        },
        {
          "alg" : "SHA-256",
          "content" : "770cd903fa7b604d1f7ef7ba17f84108667294b2b478be8ed1af3bffb4ae0018"
        },
        {
          "alg" : "SHA-512",
          "content" : "afd836a1094449e0a791fee67363666c47b6d24acff353a5089b837b332c0f4af89565c354682521e37062d20e6b52d70c77bb4f24cca9b9532c274fc708a831"
        },
        {
          "alg" : "SHA-384",
          "content" : "06c56e6e513dd77cf10d0da46cdea08c34e220e81fa024735b668c6650df4234e564fe865ff5cafea963f56b1e8ffd4a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-text"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-parent/actions"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/TEXT"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-text.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.httpcomponents",
      "name" : "httpcore",
      "version" : "4.4.14",
      "description" : "Apache HttpComponents Core (blocking I/O)",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "2b3991eda121042765a5ee299556c200"
        },
        {
          "alg" : "SHA-1",
          "content" : "9dd1a631c082d92ecd4bd8fd4cf55026c720a8c1"
        },
        {
          "alg" : "SHA-256",
          "content" : "f956209e450cb1d0c51776dfbd23e53e9dd8db9a1298ed62b70bf0944ba63b28"
        },
        {
          "alg" : "SHA-512",
          "content" : "f16a652f4a7b87dbf7cb16f8590d54a3f719c4c7b2f8883ce59db2d73be4701b64f2ca8a2c45aca6a5dbeaddeedff0c280a03722f70c076e239b645faa54eff9"
        },
        {
          "alg" : "SHA-384",
          "content" : "1cd0a3c120cfb4974573b0f499b2ac8a200aa43506777ed09f9806c6899541605fd355a3b5f44977517dd1cb463e808b"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.httpcomponents/httpcore@4.4.14?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://hc.apache.org/httpcomponents-core-ga"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/HTTPCORE"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/hc-httpclient-users/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/httpcomponents-core/tree/4.4.14/httpcore"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.httpcomponents/httpcore@4.4.14?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.doxia",
      "name" : "doxia-integration-tools",
      "version" : "1.11.1",
      "description" : "A collection of tools to help the integration of Doxia Sitetools in Maven plugins.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1f3abb6a2c7c65b6f68f3ad45a76b3f5"
        },
        {
          "alg" : "SHA-1",
          "content" : "fdc4c4f29d10b0e2b5b9d7f9eea16812d496e478"
        },
        {
          "alg" : "SHA-256",
          "content" : "eee789dcb86f37f290c6c22198ea56bf529edf21590294e549a77a490ed21dbe"
        },
        {
          "alg" : "SHA-512",
          "content" : "b26f5ebec0931ea0e4fd8bb769f9417bad6bc007570aecabfa449350fda00e511e8ad1d083afc796bb9065e9c7728aadc153389ae90c73243ab8ec5688ea4ac4"
        },
        {
          "alg" : "SHA-384",
          "content" : "f9afb7dfffdcbac7889388b6dd76402246c190b4fad069c379d5b6546446f34816de0ba605251b5ffe204dad25377367"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.doxia/doxia-integration-tools@1.11.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/doxia/doxia-sitetools/doxia-integration-tools/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-builds.apache.org/job/Maven/job/maven-box/job/doxia-sitetools/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/DOXIASITETOOLS"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-doxia-sitetools/tree/doxia-sitetools-1.11.1/doxia-integration-tools"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.doxia/doxia-integration-tools@1.11.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.doxia",
      "name" : "doxia-site-renderer",
      "version" : "1.11.1",
      "description" : "The Site Renderer handles the rendering of sites, merging site decoration with document content.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "871abead02f713fb9c02d5ba36f65bf7"
        },
        {
          "alg" : "SHA-1",
          "content" : "414e3b2049aa6f6710ecca4fa905d9d2ce318773"
        },
        {
          "alg" : "SHA-256",
          "content" : "f279a087910d3e0728daad9114da8f3211cfb49b5e8457d05ee9ee5f04284527"
        },
        {
          "alg" : "SHA-512",
          "content" : "fb5368bd1283ed42dc9b629cccc728217f80b386054bd4da2ddd5e57f4705a1832ca724dc4d89f13aed1897998e233eee417df6ccb3c50b3fa3575739ae21834"
        },
        {
          "alg" : "SHA-384",
          "content" : "5d00a93b0300be8dfa7a59428662ac73f04f7de823e863b2dfec99d46ca3a3ad4419028134b8194e563473066ce25fa7"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.doxia/doxia-site-renderer@1.11.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/doxia/doxia-sitetools/doxia-site-renderer/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-builds.apache.org/job/Maven/job/maven-box/job/doxia-sitetools/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/DOXIASITETOOLS"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-doxia-sitetools/tree/doxia-sitetools-1.11.1/doxia-site-renderer"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.doxia/doxia-site-renderer@1.11.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.doxia",
      "name" : "doxia-skin-model",
      "version" : "1.11.1",
      "description" : "The Skin Model defines metadata for Doxia Sitetools skins.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6fa7b3005dad9f4b285a889b3b68d8aa"
        },
        {
          "alg" : "SHA-1",
          "content" : "b6994a60da09eb429c01362e9a6a510e0f83d24e"
        },
        {
          "alg" : "SHA-256",
          "content" : "5337efbe45413d24b71422d145062f84bde96271dab9f3a5caa3fab461974bf4"
        },
        {
          "alg" : "SHA-512",
          "content" : "484d6efa064a5c332ab4b94f4ab445773fb7573a4e5b845769fd32e04673343fee6b87a8d8a46ddabf495d6e016a6e03a3ca92638c3ea0c0a8414b525fe1a7f6"
        },
        {
          "alg" : "SHA-384",
          "content" : "874b350a935c268350fc4009169781662a459c4ce992df79168eaba9831e4162b5da88601299255f2b874fbc380dde11"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.doxia/doxia-skin-model@1.11.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/doxia/doxia-sitetools/doxia-skin-model/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-builds.apache.org/job/Maven/job/maven-box/job/doxia-sitetools/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/DOXIASITETOOLS"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-doxia-sitetools/tree/doxia-sitetools-1.11.1/doxia-skin-model"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.doxia/doxia-skin-model@1.11.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.doxia",
      "name" : "doxia-module-xhtml",
      "version" : "1.11.1",
      "description" : "A Doxia module for Xhtml source documents. Xhtml format is supported both as source and target formats.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "82c4cfb79b666b922e1a8cf7b919df22"
        },
        {
          "alg" : "SHA-1",
          "content" : "f1b755a09934cd9c51d87b606c8e8ddf07719ebf"
        },
        {
          "alg" : "SHA-256",
          "content" : "3d298e2da1e11dba952cf4e5d750fafc41713470767b57c4f6969123c0892a23"
        },
        {
          "alg" : "SHA-512",
          "content" : "881824ec074e109d7f8641738e15750fbe33e4e47749a601c84ff83e8c97fb9e0c5c07b59a0534b73ccdb7e9a6fe4f785aa17b980c9c16625404b8e8e468aab6"
        },
        {
          "alg" : "SHA-384",
          "content" : "578e13414d19cc08dedee9f33ff205b2b8db4c02c6c952e80b13514f45ca48506b5206e3c0fc12229334462f3afdbeab"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.doxia/doxia-module-xhtml@1.11.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/doxia/doxia/doxia-modules/doxia-module-xhtml/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-builds.apache.org/job/Maven/job/maven-box/job/maven-doxia/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/DOXIA"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-doxia/tree/doxia-1.11.1/doxia-modules/doxia-module-xhtml"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.doxia/doxia-module-xhtml@1.11.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.doxia",
      "name" : "doxia-module-xhtml5",
      "version" : "1.11.1",
      "description" : "A Doxia module for Xhtml5 source documents. Xhtml5 format is supported both as source and target formats.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "37208526e7ed1051bc8c7f8dc076e5c9"
        },
        {
          "alg" : "SHA-1",
          "content" : "e4ee721555ff063d7ef9042d6b9237386c6b33e0"
        },
        {
          "alg" : "SHA-256",
          "content" : "3583ae17f9ae97db41da038dc67552a386e7a9f850f45fa6fdb0d2b9ef36a31c"
        },
        {
          "alg" : "SHA-512",
          "content" : "0b0ea0e4c80235256aad6e3d5f1cb97756367b753ff46040a5afff598ff1e4eccf872f6b4bcb70e3f84f770a45c6fcb517726927ea52b87ae8dc572348378b01"
        },
        {
          "alg" : "SHA-384",
          "content" : "8dfab16d650a9b4e6aa68e54c4d7a54978e7b20c66f3e92408a98cde6dd7d2ccfce076e9e782e0e860865785fdadfd8b"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.doxia/doxia-module-xhtml5@1.11.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/doxia/doxia/doxia-modules/doxia-module-xhtml5/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-builds.apache.org/job/Maven/job/maven-box/job/maven-doxia/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/DOXIA"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-doxia/tree/doxia-1.11.1/doxia-modules/doxia-module-xhtml5"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.doxia/doxia-module-xhtml5@1.11.1?type=jar"
    },
    {
      "publisher" : "Codehaus Plexus",
      "group" : "org.codehaus.plexus",
      "name" : "plexus-velocity",
      "version" : "1.2",
      "description" : "The Plexus project provides a full software stack for creating and executing software projects.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "7d7805136e8165f53c944612a809f1a6"
        },
        {
          "alg" : "SHA-1",
          "content" : "1331b9d6bbf99ead362c68c2f318ebe5fedda598"
        },
        {
          "alg" : "SHA-256",
          "content" : "b4c4a0dbeacad54306a1ae230eff5ab45d58e3ab88c86ab7245d3a0772be57ab"
        },
        {
          "alg" : "SHA-512",
          "content" : "421e51c12343c5537b2e52b1fea89e9ade7db095b9c71ef47c019e1cb586ec94e24b48b18a851669c1d6fc9c0ca1456683fa1a020f4ca34084ab2c3a54600df4"
        },
        {
          "alg" : "SHA-384",
          "content" : "844f82a7b5f116afbcd5e24f7d1cbb6491ba4fca20d8bb1da6351dababddcec90ae2d76667a0bb873213e9892eedc900"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.plexus/plexus-velocity@1.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://codehaus-plexus.github.io/plexus-components/plexus-velocity/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://github.com/codehaus-plexus/plexus-velocity/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "http://archive.plexus.codehaus.org/user"
        },
        {
          "type" : "vcs",
          "url" : "http://github.com/codehaus-plexus/plexus-velocity"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.plexus/plexus-velocity@1.2?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.velocity",
      "name" : "velocity",
      "version" : "1.7",
      "description" : "Apache Velocity is a general purpose template engine.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "3692dd72f8367cb35fb6280dc2916725"
        },
        {
          "alg" : "SHA-1",
          "content" : "2ceb567b8f3f21118ecdec129fe1271dbc09aa7a"
        },
        {
          "alg" : "SHA-256",
          "content" : "ec92dae810034f4b46dbb16ef4364a4013b0efb24a8c5dd67435cae46a290d8e"
        },
        {
          "alg" : "SHA-512",
          "content" : "e521785d947cae1a02070b26a43d235b6319439a6364c58266d3f9c458f9a099406c10aab5f51c5db5ba541e88322cb35203c6758b4b8bb65f9539a345da9a04"
        },
        {
          "alg" : "SHA-384",
          "content" : "94eb2247eb326dfc5f39a6d5bb71f6402531dad128281db32cad84d5571fb5fd4d07bdcdddb6fde91576021fe5faaa2d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.velocity/velocity@1.7?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://velocity.apache.org/engine/devel/"
        },
        {
          "type" : "distribution",
          "url" : "scp://people.apache.org/www/people.apache.org/repo/m2-ibiblio-rsync-repository"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/VELOCITY"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/velocity/engine/trunk"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.velocity/velocity@1.7?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-lang",
      "name" : "commons-lang",
      "version" : "2.4",
      "description" : "Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "237a8e845441bad2e535c57d985c8204"
        },
        {
          "alg" : "SHA-1",
          "content" : "16313e02a793435009f1e458fa4af5d879f6fb11"
        },
        {
          "alg" : "SHA-256",
          "content" : "2c73b940c91250bc98346926270f13a6a10bb6e29d2c9316a70d134e382c873e"
        },
        {
          "alg" : "SHA-512",
          "content" : "ae35b761d16f4327cdb6fda16789166fc67020efd71fd2cc3395b97444f439dfcc7eee948a3efd3b02440416caeb873417d95db6a2b16f4ef198de9d1afbc045"
        },
        {
          "alg" : "SHA-384",
          "content" : "aef894734c328ec53b22c4efa33759c6ddb888093498411a439eb9a5494a8529beaa71cde0fd1d9ca526812d748c3a88"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-lang/commons-lang@2.4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://commons.apache.org/lang/"
        },
        {
          "type" : "build-system",
          "url" : "http://vmbuild.apache.org/continuum/"
        },
        {
          "type" : "distribution",
          "url" : ""
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/LANG"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/commons/proper/lang/trunk"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-lang/commons-lang@2.4?type=jar"
    },
    {
      "publisher" : "Apache Software Foundation",
      "group" : "org.apache.velocity",
      "name" : "velocity-tools",
      "version" : "2.0",
      "description" : "VelocityTools is an integrated collection of Velocity subprojects with the common goal of creating tools and infrastructure to speed and ease development of both web and non-web applications using the Velocity template engine.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "51ed2c6c0103cf3fdbeb9aa5170f5288"
        },
        {
          "alg" : "SHA-1",
          "content" : "69936384de86857018b023a8c56ae0635c56b6a0"
        },
        {
          "alg" : "SHA-256",
          "content" : "b174eb36bc48c25dce10571c7d3d5dca4e4c1b3e2e31a92b9ed68fe9dea688d9"
        },
        {
          "alg" : "SHA-512",
          "content" : "c10486f112bb7119a557fe9a138878eae980eb57027a5bddfa249e171eb2589fa8d3d36cb77e825cc336245d7f8455e106daa04c54c6eae9741875a332af15ba"
        },
        {
          "alg" : "SHA-384",
          "content" : "9f784eaa6eb5e947339d74780730c6bb311bf697029d3e4e1d1531ae4a1c7339f80f5e4a68d5e01da480b9afaefb2769"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.velocity/velocity-tools@2.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://velocity.apache.org/tools/devel/"
        },
        {
          "type" : "distribution",
          "url" : "scp://people.apache.org/www/people.apache.org/repo/m2-ibiblio-rsync-repository"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/VELTOOLS"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/velocity-user/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/repos/asf/velocity/tools/trunk"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.velocity/velocity-tools@2.0?type=jar"
    },
    {
      "group" : "commons-beanutils",
      "name" : "commons-beanutils",
      "version" : "1.7.0",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0f18acf5fa857f9959675e14d901a7ce"
        },
        {
          "alg" : "SHA-1",
          "content" : "5675fd96b29656504b86029551973d60fb41339b"
        },
        {
          "alg" : "SHA-256",
          "content" : "24bcaa20ccbdc7c856ce0c0aea144566943403e2e9f27bd9779cda1d76823ef4"
        },
        {
          "alg" : "SHA-512",
          "content" : "0b29d78fd71aa4d4989f78518b1aeab1152a0ffcaa1b75460c689b7c7dc1559447be32bf938a230e29240bfff278bfc914589162cca1e6ba980bfb58edaf5b06"
        },
        {
          "alg" : "SHA-384",
          "content" : "afecec496c387c5d566ae5f21acdc0094209d93d54013616cfdf606f653330d6f7f18e37cb7bf50583bfefce7c2dd374"
        }
      ],
      "licenses" : [ ],
      "purl" : "pkg:maven/commons-beanutils/commons-beanutils@1.7.0?type=jar",
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-beanutils/commons-beanutils@1.7.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-digester",
      "name" : "commons-digester",
      "version" : "1.8",
      "description" : "The Digester package lets you configure an XML->Java object mapping module which triggers certain actions called rules whenever a particular pattern of nested XML elements is recognized.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "cf89c593f0378e9509a06fce7030aeba"
        },
        {
          "alg" : "SHA-1",
          "content" : "dc6a73fdbd1fa3f0944e8497c6c872fa21dca37e"
        },
        {
          "alg" : "SHA-256",
          "content" : "05662373044f3dff112567b7bb5dfa1174e91e074c0c727b4412788013f49d56"
        },
        {
          "alg" : "SHA-512",
          "content" : "138aaadde6b134eeb39574fde80f8eed1dee4a7049fccdd8c462c0a0dfab5419bafd259e77b99d85094b4e7c864673f07249c39c3b18aff87ef39b3663f537a2"
        },
        {
          "alg" : "SHA-384",
          "content" : "9dcfb1988fb8de4fb7482ce419bd99ea780795403228cc51454e9dd7fec3cb3af889178fbc6b906ec6f991aa77124cb5"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-digester/commons-digester@1.8?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://jakarta.apache.org/commons/digester/"
        },
        {
          "type" : "distribution",
          "url" : "file:///www/jakarta.apache.org/builds/jakarta-commons/digester/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/jakarta-commons-dev/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/repos/asf/jakarta/commons/proper/digester/trunk"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-digester/commons-digester@1.8?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-chain",
      "name" : "commons-chain",
      "version" : "1.1",
      "description" : "An implmentation of the GoF Chain of Responsibility pattern",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "d4ce482153073855e7c6453dc3c725cb"
        },
        {
          "alg" : "SHA-1",
          "content" : "3038bd41dcdb2b63b8c6dcc8c15f0fdf3f389012"
        },
        {
          "alg" : "SHA-256",
          "content" : "e408f72da5ed4c5db6ae19e8c3b7ee36259c36c05f7a77f15509a014bfe7bcaa"
        },
        {
          "alg" : "SHA-512",
          "content" : "46c8e1a61064be662bfce7a802389f511f9dfeaf80e46864eff3b1d02cc65c54c83e4639c20ac33d428e1e55dfd62d4414c3568af68fcb57998849dbc61c8e2d"
        },
        {
          "alg" : "SHA-384",
          "content" : "7a213578b92bacae76b184074bc4f14ddddde9631c4ef4573d1c7632ac6b0fbfac242cd9d0beef0a8bcbad9f9bb6ef5f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-chain/commons-chain@1.1?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/eyebrowse/SummarizeList?listName=commons-dev@jakarta.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewcvs.cgi"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-chain/commons-chain@1.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-logging",
      "name" : "commons-logging",
      "version" : "1.1",
      "description" : "Commons Logging is a thin adapter allowing configurable bridging to other, well known logging systems.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6b62417e77b000a87de66ee3935edbf5"
        },
        {
          "alg" : "SHA-1",
          "content" : "ba24d5de831911b684c92cd289ed5ff826271824"
        },
        {
          "alg" : "SHA-256",
          "content" : "9e8d01f172301b966f1f404aa6fc0bdbec478ae9197256ad95bfcad1ef927601"
        },
        {
          "alg" : "SHA-512",
          "content" : "5e8b069406c05148555760681417a9edabf40b0c807a286262bc449bd5ad976e3715c0a05ff941680f73f83962321ad0663cc8cd414537a1326658d00d5b6630"
        },
        {
          "alg" : "SHA-384",
          "content" : "2e5b81be573afeb4665b2c861674953816df9e2e3ff8426a358348f8301594e0b15f1f9e62229bc51a6541b4c547ca6f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-logging/commons-logging@1.1?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/bugzilla/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/jakarta-commons-dev/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-logging/commons-logging@1.1?type=jar"
    },
    {
      "group" : "dom4j",
      "name" : "dom4j",
      "version" : "1.1",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f1c39d0d2b2c6f5ffb0046841a34b5c9"
        },
        {
          "alg" : "SHA-1",
          "content" : "0690b3108a502c8f033ea87e7278aec309ffa668"
        },
        {
          "alg" : "SHA-256",
          "content" : "50bd5c21b5fbd27b8bbb5f8050544b53f49a4480fd347ce9c46d55c706015156"
        },
        {
          "alg" : "SHA-512",
          "content" : "26e6971e5015159671a0bc81b8d40236b116d417198d7d0282f7527e4d25946e0a859af0ca091e41e97bf57af6c53b7eb77d6e2eb66d24f81263642313e111bf"
        },
        {
          "alg" : "SHA-384",
          "content" : "264399890df6489b369bab85a53f3ec00b26742ac8335900412aa6c07071e2df795478a2437d24cc212cfaf70df792a7"
        }
      ],
      "licenses" : [ ],
      "purl" : "pkg:maven/dom4j/dom4j@1.1?type=jar",
      "type" : "library",
      "bom-ref" : "pkg:maven/dom4j/dom4j@1.1?type=jar"
    },
    {
      "group" : "oro",
      "name" : "oro",
      "version" : "2.0.8",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "42e940d5d2d822f4dc04c65053e630ab"
        },
        {
          "alg" : "SHA-1",
          "content" : "5592374f834645c4ae250f4c9fbb314c9369d698"
        },
        {
          "alg" : "SHA-256",
          "content" : "e00ccdad5df7eb43fdee44232ef64602bf63807c2d133a7be83ba09fd49af26e"
        },
        {
          "alg" : "SHA-512",
          "content" : "9a98e493c4d771322b1331ec05ab0e363a83d8ac2af8018d96a44df2bf5bfc97d33ebe6f6f93e46ab10bf1536f0c29e9d9569318ed49bc18b4e96b1a8b476d37"
        },
        {
          "alg" : "SHA-384",
          "content" : "f542e92b7a86bcb20cc21f0c4b29778428944391344ca11df432f9ce36a96ce8e8f65da67e450e52c0e8ba441d2a7332"
        }
      ],
      "licenses" : [ ],
      "purl" : "pkg:maven/oro/oro@2.0.8?type=jar",
      "type" : "library",
      "bom-ref" : "pkg:maven/oro/oro@2.0.8?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-collections",
      "name" : "commons-collections",
      "version" : "3.2.2",
      "description" : "Types that extend and augment the Java Collections Framework.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f54a8510f834a1a57166970bfc982e94"
        },
        {
          "alg" : "SHA-1",
          "content" : "8ad72fe39fa8c91eaaf12aadb21e0c3661fe26d5"
        },
        {
          "alg" : "SHA-256",
          "content" : "eeeae917917144a68a741d4c0dff66aa5c5c5fd85593ff217bced3fc8ca783b8"
        },
        {
          "alg" : "SHA-512",
          "content" : "51c72f9aca7726f3c387095e66be85a6df97c74b00a25434b89188c1b8eab6e2b55accf7b9bd412430d22bd09324dec076e300b3d1fa39fccad471f0f2a3da16"
        },
        {
          "alg" : "SHA-384",
          "content" : "dd4e99b3314bd3c1a1ee26296615d9e44dadf7a1f8a7bbba44fb95121803d331e36d4cca4260e7609af78a47ba3e4073"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://commons.apache.org/collections/"
        },
        {
          "type" : "build-system",
          "url" : "https://continuum-ci.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/COLLECTIONS"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/commons/proper/collections/trunk"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-io",
      "name" : "commons-io",
      "version" : "2.13.0",
      "description" : "The Apache Commons IO library contains utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "8d000fa8939b71b8894637f0ef6ea28c"
        },
        {
          "alg" : "SHA-1",
          "content" : "8bb2bc9b4df17e2411533a0708a69f983bf5e83b"
        },
        {
          "alg" : "SHA-256",
          "content" : "671eaa39688dac2ffaa4645b3c9980ae2d0ea2471e4ae6a5da199cd15ae23666"
        },
        {
          "alg" : "SHA-512",
          "content" : "3a5698d0c995c395cf44180073615f087af42fd78e71f224eb38908d823da41f0d04f18e6a14df67b3b02830fbf542f35b9f43aafe39437f17fe18655fbcac07"
        },
        {
          "alg" : "SHA-384",
          "content" : "51ce4e22195684565d9a93aebcf93bf9aed13e76e429601bdaf5e348430effb5d1276d848a98690040a4182706c731f4"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-io/commons-io@2.13.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-io/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-parent/actions"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/IO"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-io.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-io/commons-io@2.13.0?type=jar"
    },
    {
      "publisher" : "Codehaus Plexus",
      "group" : "org.codehaus.plexus",
      "name" : "plexus-archiver",
      "version" : "4.8.0",
      "description" : "The Plexus project provides a full software stack for creating and executing software projects.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "d2ec7fb02b77712dc9d95250f0c759f8"
        },
        {
          "alg" : "SHA-1",
          "content" : "3083832db67d19f03b5a8d50754a2c295ddcb504"
        },
        {
          "alg" : "SHA-256",
          "content" : "24513c9bc6d52716f5a22f7ef03e26c310f62ebcde309de9833deac6a4ac32e3"
        },
        {
          "alg" : "SHA-512",
          "content" : "4932381bf32646ac73bffc3104b57cac5a07357ecfa0ed9da369cbb92ad70b709b4fa06873aac4b6514cccdd387ed6e2d56a73258ab5cd35f6837656fbbd46bf"
        },
        {
          "alg" : "SHA-384",
          "content" : "c0784c380992d17c30cf11f156ed1450806f2828cc9acae91262118b705a062585e606368d0c315b4041e16eba721efc"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.plexus/plexus-archiver@4.8.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://codehaus-plexus.github.io/plexus-archiver/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/codehaus-plexus/plexus-archiver/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://groups.google.com/forum/#!forum/mojohaus-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/codehaus-plexus/plexus-archiver/tree/plexus-archiver-4.8.0/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.plexus/plexus-archiver@4.8.0?type=jar"
    },
    {
      "group" : "javax.inject",
      "name" : "javax.inject",
      "version" : "1",
      "description" : "The javax.inject API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "289075e48b909e9e74e6c915b3631d2e"
        },
        {
          "alg" : "SHA-1",
          "content" : "6975da39a7040257bd51d21a231b76c915872d38"
        },
        {
          "alg" : "SHA-256",
          "content" : "91c77044a50c481636c32d916fd89c9118a72195390452c81065080f957de7ff"
        },
        {
          "alg" : "SHA-512",
          "content" : "e126b7ccf3e42fd1984a0beef1004a7269a337c202e59e04e8e2af714280d2f2d8d2ba5e6f59481b8dcd34aaf35c966a688d0b48ec7e96f102c274dc0d3b381e"
        },
        {
          "alg" : "SHA-384",
          "content" : "ac04c9f03ccbe35a25deb8b50280a0ca01dbe6aff0dd795d55af6112bfe3cd5817eb82f32fb18378d86cd64b07597190"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/javax.inject/javax.inject@1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://code.google.com/p/atinject/"
        },
        {
          "type" : "vcs",
          "url" : "http://code.google.com/p/atinject/source/checkout"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/javax.inject/javax.inject@1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-compress",
      "version" : "1.23.0",
      "description" : "Apache Commons Compress software defines an API for working with compression and archive formats. These include: bzip2, gzip, pack200, lzma, xz, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4, Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "96b88349958aeaa15cdf6e5e877bdced"
        },
        {
          "alg" : "SHA-1",
          "content" : "4af2060ea9b0c8b74f1854c6cafe4d43cfc161fc"
        },
        {
          "alg" : "SHA-256",
          "content" : "c267f17160e9ef662b4d78b7f29dca7c82b15c5cff2cb6a9865ef4ab3dd5b787"
        },
        {
          "alg" : "SHA-512",
          "content" : "e1ee5b7526ca1b6b67b3a6671d13899048f078bf0e73c1e9c601d947dcc9fd5c78cec9592b2a7a586faf4a7fba1c6885f679375cc2f06680a13ecfdad1ed41dd"
        },
        {
          "alg" : "SHA-384",
          "content" : "10e49e696c18750c37eee7807aca1ef28fadf2c9da6eabb3b5443bb0e1fa8ebd6638addb2042f27e9a9874495eb10d1c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-compress@1.23.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-compress/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-parent/actions"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/COMPRESS"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-compress.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-compress@1.23.0?type=jar"
    },
    {
      "publisher" : "QOS.ch",
      "group" : "org.slf4j",
      "name" : "slf4j-api",
      "version" : "1.7.36",
      "description" : "The slf4j API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "872da51f5de7f3923da4de871d57fd85"
        },
        {
          "alg" : "SHA-1",
          "content" : "6c62681a2f655b49963a5983b8b0950a6120ae14"
        },
        {
          "alg" : "SHA-256",
          "content" : "d3ef575e3e4979678dc01bf1dcce51021493b4d11fb7f1be8ad982877c16a1c0"
        },
        {
          "alg" : "SHA-512",
          "content" : "f9b033fc019a44f98b16048da7e2b59edd4a6a527ba60e358f65ab88e0afae03a9340f1b3e8a543d49fa542290f499c5594259affa1ff3e6e7bf3b428d4c610b"
        },
        {
          "alg" : "SHA-384",
          "content" : "2b14ad035877087157e379d3277dcdcd79e58d6bdb147c47d29e377d75ce53ad42cafbf22f5fb7827c7e946ff4876b9a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.slf4j.org"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/qos-ch/slf4j/slf4j-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
    },
    {
      "group" : "org.iq80.snappy",
      "name" : "snappy",
      "version" : "0.4",
      "description" : "Port of Snappy to Java",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f0792d1dbe7f90d8b34c7c19961e0073"
        },
        {
          "alg" : "SHA-1",
          "content" : "a42b2d92a89efd35bb14738000dabcac6bd07a8d"
        },
        {
          "alg" : "SHA-256",
          "content" : "46a0c87d504ce9d6063e1ff6e4d20738feb49d8abf85b5071a7d18df4f11bac9"
        },
        {
          "alg" : "SHA-512",
          "content" : "dfd2559bf0388c6f1987d1393497a423203b2a72febbe648b3429e4d07b47a504797228e6e4e39a94c6800c5d3df8d3792863a3b841e6e8f65cfdcda91b6f0ab"
        },
        {
          "alg" : "SHA-384",
          "content" : "7b5feeb0f1ee3fd3f5cd17c5ea31a75cdd060e7beaa1773474727711c308d2cf5b900b5717965afe8c14912e33c41538"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.iq80.snappy/snappy@0.4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://github.com/dain/snappy"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "http://github.com/dain/snapy/tree/master"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.iq80.snappy/snappy@0.4?type=jar"
    },
    {
      "group" : "org.tukaani",
      "name" : "xz",
      "version" : "1.9",
      "description" : "XZ data compression",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "57c2fbfeb55e307ccae52e5322082e02"
        },
        {
          "alg" : "SHA-1",
          "content" : "1ea4bec1a921180164852c65006d928617bd2caf"
        },
        {
          "alg" : "SHA-256",
          "content" : "211b306cfc44f8f96df3a0a3ddaf75ba8c5289eed77d60d72f889bb855f535e5"
        },
        {
          "alg" : "SHA-512",
          "content" : "a4362db234d4e83683e90f5baf90c82107450cc4404acab96e3fab14b8a3d4588a19722171d32f27d18463682a6994cad9af0b1065c954e3a77ea7bdcf586bac"
        },
        {
          "alg" : "SHA-384",
          "content" : "aa30349b094723369908369a18e2cb5beb5b7ca0b24b4d56c2f5725fae152220f6526466672b22bfec939e2e0622a01d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "Public Domain"
          }
        }
      ],
      "purl" : "pkg:maven/org.tukaani/xz@1.9?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://tukaani.org/xz/java.html"
        },
        {
          "type" : "vcs",
          "url" : "https://git.tukaani.org/?p=xz-java.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.tukaani/xz@1.9?type=jar"
    },
    {
      "publisher" : "com.github.luben",
      "group" : "com.github.luben",
      "name" : "zstd-jni",
      "version" : "1.5.5-5",
      "description" : "JNI bindings for Zstd native library that provides fast and high compression lossless algorithm for Java and all JVM languages.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0e164757192c4dcf3c524f6cabeb8494"
        },
        {
          "alg" : "SHA-1",
          "content" : "74ffdc5f140080adacf5278287aadd950179f848"
        },
        {
          "alg" : "SHA-256",
          "content" : "c78d4e139894f555d956d12fbfcf3d45af751d4b2f183880ed5f99b69b284416"
        },
        {
          "alg" : "SHA-512",
          "content" : "00e9e20c68e74a890be0089b6f10a677876a2ecfc6b1b98f449bcf13d0fa91d4c68c7cc3dc7fec5fc575053d778517af52e0a7ffcb1c26d8e7bc02ed304edda5"
        },
        {
          "alg" : "SHA-384",
          "content" : "fec680d74af046105be755c727f04cc753872820405fee71e1c7c27cd0ef18c77f629925e379f8b54f6daafada85b809"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-2-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/com.github.luben/zstd-jni@1.5.5-5?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/luben/zstd-jni"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.github.luben/zstd-jni@1.5.5-5?type=jar"
    },
    {
      "publisher" : "Codehaus Plexus",
      "group" : "org.codehaus.plexus",
      "name" : "plexus-utils",
      "version" : "3.5.1",
      "description" : "A collection of various utility classes to ease working with strings, files, command lines, XML and more.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "cdec471a77f52e687d0df4c43f392a71"
        },
        {
          "alg" : "SHA-1",
          "content" : "c6bfb17c97ecc8863e88778ea301be742c62b06d"
        },
        {
          "alg" : "SHA-256",
          "content" : "86e0255d4c879c61b4833ed7f13124e8bb679df47debb127326e7db7dd49a07b"
        },
        {
          "alg" : "SHA-512",
          "content" : "e2d4e7bc919deb022d0fcc428da066d62c34a02d248b184ffc3edcea08ffbdc354cd018240b21a0495eafcd01723a692e583803ccb10d99fbfa97f58a49f967f"
        },
        {
          "alg" : "SHA-384",
          "content" : "ace26d0a31c11f312f1f6c1300d35fa6d9ed173d1f2718639e7f0b68d987d0d8fb57ec95eb187c250a8656cac3252711"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.plexus/plexus-utils@3.5.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://codehaus-plexus.github.io/plexus-utils/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://github.com/codehaus-plexus/plexus-utils/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "http://archive.plexus.codehaus.org/user"
        },
        {
          "type" : "vcs",
          "url" : "http://github.com/codehaus-plexus/plexus-utils"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.plexus/plexus-utils@3.5.1?type=jar"
    },
    {
      "publisher" : "Codehaus Plexus",
      "group" : "org.codehaus.plexus",
      "name" : "plexus-io",
      "version" : "3.4.1",
      "description" : "The Plexus project provides a full software stack for creating and executing software projects.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "7921fc78e18b1dc3dabe8ca5e3558657"
        },
        {
          "alg" : "SHA-1",
          "content" : "e9dc0280372501917a124af943dcb709f73577a2"
        },
        {
          "alg" : "SHA-256",
          "content" : "ac3be07c2968f98656604ddb8fdf08f1cfc560bc7b329fd17847f151510dc2c4"
        },
        {
          "alg" : "SHA-512",
          "content" : "c1555c9c23b61cd9fa1ee39c4015652eedf7e593e0515188d60ce66d1e33852e3570db7c6a471c3d128cbb0cb3bad1aaa526d2db532b0ed73b85678fb5436a5c"
        },
        {
          "alg" : "SHA-384",
          "content" : "96a7ad4a6ace76b43a3188e621431b316b671b416f1fb894db73ab8c57729234c2ae4b4f0680045df7a3f54e1699107b"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.plexus/plexus-io@3.4.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://codehaus-plexus.github.io/plexus-io/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/codehaus-plexus/plexus-io/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "http://archive.plexus.codehaus.org/user"
        },
        {
          "type" : "vcs",
          "url" : "http://github.com/codehaus-plexus/plexus-io"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.plexus/plexus-io@3.4.1?type=jar"
    },
    {
      "publisher" : "Codehaus",
      "group" : "org.codehaus.plexus",
      "name" : "plexus-i18n",
      "version" : "1.0-beta-10",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "7f36c0459c853750c627f682ec7bcf52"
        },
        {
          "alg" : "SHA-1",
          "content" : "27506f59e54cc80b8c28b977c2bcd0478094e0cc"
        },
        {
          "alg" : "SHA-256",
          "content" : "b87f25b512ffafcafbf4a05ab943812e9c6915291370c6b46016eb3836886c41"
        },
        {
          "alg" : "SHA-512",
          "content" : "c06555d10b1f1e66ddb93f3f5045de305b3e7b04f761a9d1956e2aba32d9d7541affc2f2281eae2be48b32d233da08da9f905153c6a0804de98d55b2d3025fae"
        },
        {
          "alg" : "SHA-384",
          "content" : "5e2a8327bb2d682e2e8aa69526006d831bda94eaee64b20174b7de88bd476b461be35564f274b4255546609578ecf0f8"
        }
      ],
      "licenses" : [ ],
      "purl" : "pkg:maven/org.codehaus.plexus/plexus-i18n@1.0-beta-10?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://plexus.codehaus.org/plexus-components/plexus-i18n"
        },
        {
          "type" : "distribution",
          "url" : "dav:https://dav.codehaus.org/repository/plexus"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://jira.codehaus.org/browse/PLX"
        },
        {
          "type" : "mailing-list",
          "url" : "http://archive.plexus.codehaus.org/user"
        },
        {
          "type" : "vcs",
          "url" : "http://fisheye.codehaus.org/browse/plexus/plexus-components/tags/plexus-i18n-1.0-beta-10"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.plexus/plexus-i18n@1.0-beta-10?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.shared",
      "name" : "maven-dependency-analyzer",
      "version" : "1.13.2",
      "description" : "Analyzes the dependencies of a project for undeclared or unused artifacts.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a4ba91c0a27782fa267debbc22a9ed30"
        },
        {
          "alg" : "SHA-1",
          "content" : "562eb92209d655ddb2e3bad2d397adaae17b6e66"
        },
        {
          "alg" : "SHA-256",
          "content" : "9689277dc3a353b683773d400e0fad6057ccb3b30eee61a3c6d15e82ad18d9a7"
        },
        {
          "alg" : "SHA-512",
          "content" : "ba3b7af2f91aafc0fe7f085dca0b14b02ae88fbfbadd8237f21a4df983cfded5d164323c24baf7ff214088967cbfb2abfe92fe2e8ab20084225811ee9fb706b3"
        },
        {
          "alg" : "SHA-384",
          "content" : "b66cfb047aebd75ecfb21aa93df55c322d5c5ff5b866bf2a906a115bce3668a735fdfd6d7fd4564163627c7a7c5b987a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.shared/maven-dependency-analyzer@1.13.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/shared/maven-dependency-analyzer/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-dependency-analyzer/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/issues/?jql=project%20%3D%20MSHARED%20AND%20component%20%3D%20maven-dependency-analyzer"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-dependency-analyzer/tree/maven-dependency-analyzer-1.13.2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.shared/maven-dependency-analyzer@1.13.2?type=jar"
    },
    {
      "publisher" : "OW2",
      "group" : "org.ow2.asm",
      "name" : "asm",
      "version" : "9.5",
      "description" : "ASM, a very small and fast Java bytecode manipulation framework",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "29721ee4b5eacf0a34b204c345c8bc69"
        },
        {
          "alg" : "SHA-1",
          "content" : "dc6ea1875f4d64fbc85e1691c95b96a3d8569c90"
        },
        {
          "alg" : "SHA-256",
          "content" : "b62e84b5980729751b0458c534cf1366f727542bb8d158621335682a460f0353"
        },
        {
          "alg" : "SHA-512",
          "content" : "9e65f2983783725bae196ca939b45246958731246df1c495089c8ea5ce646de77c4e01a5a9ba10642016bb3258e1727e9ebcece6e74d9e3c32f528025d76b955"
        },
        {
          "alg" : "SHA-384",
          "content" : "db0c70803b0fd3ef17b29d90d0540ca6f7589012281035f1a21cd3c70c4658f95e82190d7670b15130e88e8c704e0781"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause",
            "url" : "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.ow2.asm/asm@9.5?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://asm.ow2.io/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.ow2.org/nexus/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://gitlab.ow2.org/asm/asm/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail.ow2.org/wws/arc/asm/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitlab.ow2.org/asm/asm/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.ow2.asm/asm@9.5?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.shared",
      "name" : "maven-dependency-tree",
      "version" : "3.2.1",
      "description" : "A tree-based API for resolution of Maven project dependencies",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "2e01f1c5625ee40761f01c50c521f90d"
        },
        {
          "alg" : "SHA-1",
          "content" : "864b4c49c862b95946fafe9338bbbbcde6e4b692"
        },
        {
          "alg" : "SHA-256",
          "content" : "482811ea38f339d2b0867a7852a195b56e329fdb37066b2f3035a209c111a2bc"
        },
        {
          "alg" : "SHA-512",
          "content" : "212b02334fac4f84a29f19c8b52de94a80014c34440daacd590239afef87aa808677cf180fa2533f40e5cb14980f041123a1b2ad9ed8281c8b89422fad81da50"
        },
        {
          "alg" : "SHA-384",
          "content" : "02b8d7a271cdec0d2305c80586e0c807481aada03b90dd554d4e3c3ea28a2c691630188c2f5cccf0b9aa8e2c7ede2a8f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.shared/maven-dependency-tree@3.2.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/shared/maven-dependency-tree/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-dependency-tree/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/issues/?jql=project+%3D+MSHARED+AND+component+%3D+maven-dependency-tree"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-dependency-tree/tree/maven-dependency-tree-3.2.1"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.shared/maven-dependency-tree@3.2.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.shared",
      "name" : "maven-common-artifact-filters",
      "version" : "3.3.2",
      "description" : "A collection of ready-made filters to control inclusion/exclusion of artifacts during dependency resolution.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "5b8bd8a1933dbfa8f9a00029255cf99b"
        },
        {
          "alg" : "SHA-1",
          "content" : "c1cb1bc78ae8c6a6e64da833d4a9afbda5e0834a"
        },
        {
          "alg" : "SHA-256",
          "content" : "2be8b810cf0937ff4bb7bef8ce78a8faad17ca2182751055ac7df54d5510b908"
        },
        {
          "alg" : "SHA-512",
          "content" : "d5bc869fb294941abaab4d282038ab6255d230a0015229e5bdd008125a873ced6f48ff7b2557435a95423bbf0b37f645d6aa38e17561a514fa6d25b3e177c201"
        },
        {
          "alg" : "SHA-384",
          "content" : "50d5f9c56bbfaa5ae94e6ebd492426244d6f80fe8356f059f1f7d19849219651c6fec0b734e28b7cd112ab578e976a6e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.shared/maven-common-artifact-filters@3.3.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/shared/maven-common-artifact-filters/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-common-artifact-filters/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/issues/?jql=project%20%3D%20MSHARED%20AND%20component%20%3D%20maven-common-artifact-filters"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-common-artifact-filters/tree/maven-common-artifact-filters-3.3.2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.shared/maven-common-artifact-filters@3.3.2?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.shared",
      "name" : "maven-artifact-transfer",
      "version" : "0.13.1",
      "description" : "An API to install, deploy and resolving artifacts with Maven 3",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "5a73136d65cfc2dd8af0fd365dbda4fb"
        },
        {
          "alg" : "SHA-1",
          "content" : "9f6d2088ae64dd926b8ec445afdb7e148eb08060"
        },
        {
          "alg" : "SHA-256",
          "content" : "1ac88accde99ed71e65253bd130868c0e654f940f01ade073b895eb2f817cf06"
        },
        {
          "alg" : "SHA-512",
          "content" : "122bf211295a1f94cca62f50cc3ee51cdd01c0dde47db4a236c60aa0a68165be30902719fd5093f1280d875c9635737383bfe92090daef03a5dca24481a50595"
        },
        {
          "alg" : "SHA-384",
          "content" : "20a7ed7096a2938f7f17b585bea0ee80705f787a54c19650ba9f7f6df75200f7c1d5d28832715af5c336197e90a4342b"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.shared/maven-artifact-transfer@0.13.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/shared/maven-artifact-transfer/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-builds.apache.org/job/Maven/job/maven-box/job/maven-artifact-transfer/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MSHARED"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-artifact-transfer/tree/maven-artifact-transfer-0.13.1"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.shared/maven-artifact-transfer@0.13.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.shared",
      "name" : "maven-shared-utils",
      "version" : "3.4.2",
      "description" : "Shared utilities for use by Maven core and plugins",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "53a038f77a81cb5816ad2b1c7daa8711"
        },
        {
          "alg" : "SHA-1",
          "content" : "bfa28296272a5915b08de9f11f34a94b0a818fd0"
        },
        {
          "alg" : "SHA-256",
          "content" : "b613357e1bad4dfc1dead801691c9460f9585fe7c6b466bc25186212d7d18487"
        },
        {
          "alg" : "SHA-512",
          "content" : "71db8a485a6436cb305276ea9d748f578e1a8ffa1346c8570f7038684ce53d320584174634aeffa1b51629af0171a2d6572854eb07236a83236ad1d9949988e9"
        },
        {
          "alg" : "SHA-384",
          "content" : "8f7e2c449282244fea3151ac0c956b42bb7ae6cb2397ca8b18952aea802d33cccad6e08a5f515fc34e52bacfece18862"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.shared/maven-shared-utils@3.4.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/shared/maven-shared-utils/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-shared-utils/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/issues/?jql=project%20%3D%20MSHARED%20AND%20component%20%3D%20maven-shared-utils"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-shared-utils/tree/maven-shared-utils-3.4.2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.shared/maven-shared-utils@3.4.2?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-collections4",
      "version" : "4.4",
      "description" : "The Apache Commons Collections package contains types that extend and augment the Java Collections Framework.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4a37023740719b391f10030362c86be6"
        },
        {
          "alg" : "SHA-1",
          "content" : "62ebe7544cb7164d87e0637a2a6a2bdc981395e8"
        },
        {
          "alg" : "SHA-256",
          "content" : "1df8b9430b5c8ed143d7815e403e33ef5371b2400aadbe9bda0883762e0846d1"
        },
        {
          "alg" : "SHA-512",
          "content" : "5939c9931eb9557caee3b45fe1dd9ce54cabdc4e6182ed7faac77e1a866dd0cb602bfa4ece2f3316d769913366106bd2b61bf3bb5faad1fa7d808124c06dec0f"
        },
        {
          "alg" : "SHA-384",
          "content" : "74059fd8f61c366ed448e102256fdbd1db0d690501c2c296c80f3657a2c0d8ade3dd9533b1431cc29786bbb624195f46"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-collections4@4.4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-collections/"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/COLLECTIONS"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://git-wip-us.apache.org/repos/asf?p=commons-collections.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-collections4@4.4?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.plugin-tools",
      "name" : "maven-plugin-annotations",
      "version" : "3.9.0",
      "description" : "Java annotations to use in Mojos",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "43a9454b4318c740c27a5c2f2d8079b3"
        },
        {
          "alg" : "SHA-1",
          "content" : "0a24f7830b2f8811e4bfd5c4c569f13198db261f"
        },
        {
          "alg" : "SHA-256",
          "content" : "6518bbac60808e1b74927bdc15a9f2a58073d23fa525d24032c229b426431585"
        },
        {
          "alg" : "SHA-512",
          "content" : "a118b09e6f8adfb4ea2b3af0e965ee2ae41c46c119fd95ea7df80f0b03f8e99b2534ebebfafd06fa0d913a927efca000134ff016d0f77b53f9761dcef926e144"
        },
        {
          "alg" : "SHA-384",
          "content" : "fbcb9201be423b409a72ee0287ee5a1a1a1dd159c51ec0ae8f4c9ef7795637b02253ab58f856cd589ab6f5930c8f9e59"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.plugin-tools/maven-plugin-annotations@3.9.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/plugin-tools/maven-plugin-annotations"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-plugin-tools/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MPLUGIN"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-plugin-tools/tree/maven-plugin-tools-3.9.0/maven-plugin-annotations"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.plugin-tools/maven-plugin-annotations@3.9.0?type=jar"
    },
    {
      "publisher" : "The Eclipse Foundation",
      "group" : "org.eclipse.aether",
      "name" : "aether-api",
      "version" : "1.0.0.v20140518",
      "description" : "The application programming interface for the repository system.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b05ef5410dad83a4e9ba50e08e0dbbf4"
        },
        {
          "alg" : "SHA-1",
          "content" : "be68e917f454dcd841865ad7cf9b7615b26a51f7"
        },
        {
          "alg" : "SHA-256",
          "content" : "84b98521684ab22f9528470fa6d8ab68a230e1b211623c989ba7016c306eb773"
        },
        {
          "alg" : "SHA-512",
          "content" : "41addf7be0094decb6b4d6c11811b7a7edcc280d60f8a5cb3346d963422cacea84b6dcba7a00fa4a93c69a44b7dc5afd0960b8f56e60ae36f6c8e97ab52ffb5e"
        },
        {
          "alg" : "SHA-384",
          "content" : "44e821c90b238407402910a378e17ff3d845f26252bc74ad4b62c4f04bec6aa0a68ecc068eb8ed98ecd11d1b3b628d1f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-1.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.aether/aether-api@1.0.0.v20140518?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.eclipse.org/aether/aether-api/"
        },
        {
          "type" : "build-system",
          "url" : "https://hudson.eclipse.org/aether/job/aether-core/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://bugs.eclipse.org/bugs/buglist.cgi?query_format=specific&bug_status=__open__&product=Aether"
        },
        {
          "type" : "mailing-list",
          "url" : "http://dev.eclipse.org/mhonarc/lists/aether-dev/"
        },
        {
          "type" : "vcs",
          "url" : "http://git.eclipse.org/c/aether/aether-core.git/tree/aether-api/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.aether/aether-api@1.0.0.v20140518?type=jar"
    },
    {
      "publisher" : "The Eclipse Foundation",
      "group" : "org.eclipse.aether",
      "name" : "aether-util",
      "version" : "1.0.0.v20140518",
      "description" : "A collection of utility classes to ease usage of the repository system.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "08495ee7ecf90f0b528e7d65471532af"
        },
        {
          "alg" : "SHA-1",
          "content" : "7df5ba98ce8b78985d75fdd8c2981fe69234ef85"
        },
        {
          "alg" : "SHA-256",
          "content" : "aff0951639837c4e3a4699a421fa79f410032f603f5c6a5bba435e98531f3984"
        },
        {
          "alg" : "SHA-512",
          "content" : "ec43fd01a81d7f8e027603c4627d50eff58eb53e970b6888b0fe07d2963876075d05fc9a5e39f957904b4bc9bd6d729b9d17a15852064939b7a59f322830747e"
        },
        {
          "alg" : "SHA-384",
          "content" : "f6cb988a67a2d93ddcae222408b43d92fe6ede0bbc3646115a246a9a088a418ec50be729efd9eed4cada828eaa171946"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-1.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.aether/aether-util@1.0.0.v20140518?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.eclipse.org/aether/aether-util/"
        },
        {
          "type" : "build-system",
          "url" : "https://hudson.eclipse.org/aether/job/aether-core/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://bugs.eclipse.org/bugs/buglist.cgi?query_format=specific&bug_status=__open__&product=Aether"
        },
        {
          "type" : "mailing-list",
          "url" : "http://dev.eclipse.org/mhonarc/lists/aether-dev/"
        },
        {
          "type" : "vcs",
          "url" : "http://git.eclipse.org/c/aether/aether-core.git/tree/aether-util/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.aether/aether-util@1.0.0.v20140518?type=jar"
    },
    {
      "group" : "org.sonatype.plexus",
      "name" : "plexus-build-api",
      "version" : "0.0.7",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "49f0f8c6bdf2687e358870a4fc1559c6"
        },
        {
          "alg" : "SHA-1",
          "content" : "e6ba5cd4bfd8de00235af936e7f63eb24ed436e6"
        },
        {
          "alg" : "SHA-256",
          "content" : "934171640fbd3d2495c50b79b0d9adb11e2c83e65bad157df8fe34bcac0ff798"
        },
        {
          "alg" : "SHA-512",
          "content" : "e073d367ce5edaf6dfcbf6d1ec9f544082d4536aec8a84b060d24625c0d8ff1facf90529843f9bf4383ef43aa5cd3d0e143f473dffa6da7fd910f1d2e3872ec7"
        },
        {
          "alg" : "SHA-384",
          "content" : "2e6c177e34d0bb3fd05ea8f635f01a6b01afd28113f214392cae8f6bdc73715ee1dbfa4d1525f42321f8a8dd05db9191"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.sonatype.plexus/plexus-build-api@0.0.7?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://forge.sonatype.com/spice-parent/plexus-build-api/"
        },
        {
          "type" : "build-system",
          "url" : "https://grid.sonatype.org/ci/view/Spice/"
        },
        {
          "type" : "distribution",
          "url" : "http://repository.sonatype.org:8081/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.sonatype.org/browse/SPICE"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.sonatype.org/spice/tags/plexus-build-api-0.0.7"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.sonatype.plexus/plexus-build-api@0.0.7?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.httpcomponents",
      "name" : "httpclient",
      "version" : "4.2.6",
      "description" : "HttpComponents Client",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "7bae53a30550dd3eb62db72ab08fcd94"
        },
        {
          "alg" : "SHA-1",
          "content" : "e4ca30a6a3a075053a61c6fc850d2432dc012ba7"
        },
        {
          "alg" : "SHA-256",
          "content" : "362e9324ee7c697e21279e20077b52737ddef3f1b2c1a7abe5ad34b465145550"
        },
        {
          "alg" : "SHA-512",
          "content" : "a64f787a5310e417adc4aca33a9ccdfa2610c53ea0a58306aca2eee73bc53784c3389dba07b3d033050cbef04afe1a2000f920afd563fdfb4d574ae3f70eaddb"
        },
        {
          "alg" : "SHA-384",
          "content" : "da18275d35faa496f4ea35223c9227e1cf69dbffc973bcf08bdf448534bf3d6f77a6638760c9457c1e32410b87c20901"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-1.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.httpcomponents/httpclient@4.2.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://hc.apache.org/httpcomponents-client"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/HTTPCLIENT"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/hc-httpclient-users/"
        },
        {
          "type" : "vcs",
          "url" : "https://svn.apache.org/repos/asf/httpcomponents/httpclient/tags/4.2.6/httpclient"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.httpcomponents/httpclient@4.2.6?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-codec",
      "name" : "commons-codec",
      "version" : "1.6",
      "description" : "The codec package contains simple encoder and decoders for various formats such as Base64 and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a collection of phonetic encoding utilities.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "5970f54883b4831b24b97f1125ba27e6"
        },
        {
          "alg" : "SHA-1",
          "content" : "b7f0fc8f61ecadeb3695f0b9464755eee44374d4"
        },
        {
          "alg" : "SHA-256",
          "content" : "54b34e941b8e1414bd3e40d736efd3481772dc26db3296f6aa45cec9f6203d86"
        },
        {
          "alg" : "SHA-512",
          "content" : "752fca09371e0e228432155533a9b84f0442cafd7f25ebf0c6c2024d541fbba80882e71aee047ec94cd22c0d8114942e967652913412f5cbcf9b816c0e1fc1ad"
        },
        {
          "alg" : "SHA-384",
          "content" : "69530856e712c83ea92056ad23fa14424e83507ff4935ce74b7595ad71f53b56a6b049b4a6f1fc6408541da1095097b9"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-codec/commons-codec@1.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://commons.apache.org/codec/"
        },
        {
          "type" : "build-system",
          "url" : "http://vmbuild.apache.org/continuum/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/CODEC"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/commons/proper/codec/trunk"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-codec/commons-codec@1.6?type=jar"
    }
  ],
  "dependencies" : [
    {
      "ref" : "pkg:maven/org.apache.maven.plugins/maven-dependency-plugin@3.6.1?type=maven-plugin",
      "dependsOn" : [
        "pkg:maven/org.apache.maven/maven-artifact@3.2.5?type=jar",
        "pkg:maven/org.apache.maven/maven-plugin-api@3.2.5?type=jar",
        "pkg:maven/org.apache.maven/maven-model@3.2.5?type=jar",
        "pkg:maven/org.apache.maven/maven-core@3.2.5?type=jar",
        "pkg:maven/org.apache.maven/maven-repository-metadata@3.2.5?type=jar",
        "pkg:maven/org.apache.maven/maven-settings@3.2.5?type=jar",
        "pkg:maven/org.apache.maven/maven-aether-provider@3.2.5?type=jar",
        "pkg:maven/org.apache.maven.doxia/doxia-sink-api@1.11.1?type=jar",
        "pkg:maven/org.apache.maven.reporting/maven-reporting-api@3.1.1?type=jar",
        "pkg:maven/org.apache.maven.reporting/maven-reporting-impl@3.2.0?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-archiver@4.8.0?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-utils@3.5.1?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-io@3.4.1?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-i18n@1.0-beta-10?type=jar",
        "pkg:maven/org.apache.maven.shared/maven-dependency-analyzer@1.13.2?type=jar",
        "pkg:maven/org.apache.maven.shared/maven-dependency-tree@3.2.1?type=jar",
        "pkg:maven/org.apache.maven.shared/maven-common-artifact-filters@3.3.2?type=jar",
        "pkg:maven/org.apache.maven.shared/maven-artifact-transfer@0.13.1?type=jar",
        "pkg:maven/org.apache.maven.shared/maven-shared-utils@3.4.2?type=jar",
        "pkg:maven/org.apache.commons/commons-collections4@4.4?type=jar",
        "pkg:maven/org.apache.maven.plugin-tools/maven-plugin-annotations@3.9.0?type=jar",
        "pkg:maven/org.eclipse.aether/aether-api@1.0.0.v20140518?type=jar",
        "pkg:maven/org.eclipse.aether/aether-util@1.0.0.v20140518?type=jar",
        "pkg:maven/org.sonatype.plexus/plexus-build-api@0.0.7?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-artifact@3.2.5?type=jar",
      "dependsOn" : [
        "pkg:maven/org.codehaus.plexus/plexus-utils@3.5.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.plexus/plexus-utils@3.5.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-plugin-api@3.2.5?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.maven/maven-model@3.2.5?type=jar",
        "pkg:maven/org.apache.maven/maven-artifact@3.2.5?type=jar",
        "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.3.0.M1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-model@3.2.5?type=jar",
      "dependsOn" : [
        "pkg:maven/org.codehaus.plexus/plexus-utils@3.5.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.3.0.M1?type=jar",
      "dependsOn" : [
        "pkg:maven/javax.enterprise/cdi-api@1.0?type=jar",
        "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.3.0.M1?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-component-annotations@1.5.5?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-classworlds@2.5.2?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-utils@3.5.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/javax.enterprise/cdi-api@1.0?type=jar",
      "dependsOn" : [
        "pkg:maven/javax.annotation/jsr250-api@1.0?type=jar",
        "pkg:maven/javax.inject/javax.inject@1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/javax.annotation/jsr250-api@1.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/javax.inject/javax.inject@1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.3.0.M1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.plexus/plexus-component-annotations@1.5.5?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.plexus/plexus-classworlds@2.5.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-core@3.2.5?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.maven/maven-model@3.2.5?type=jar",
        "pkg:maven/org.apache.maven/maven-settings@3.2.5?type=jar",
        "pkg:maven/org.apache.maven/maven-settings-builder@3.2.5?type=jar",
        "pkg:maven/org.apache.maven/maven-repository-metadata@3.2.5?type=jar",
        "pkg:maven/org.apache.maven/maven-artifact@3.2.5?type=jar",
        "pkg:maven/org.apache.maven/maven-plugin-api@3.2.5?type=jar",
        "pkg:maven/org.apache.maven/maven-model-builder@3.2.5?type=jar",
        "pkg:maven/org.apache.maven/maven-aether-provider@3.2.5?type=jar",
        "pkg:maven/org.eclipse.aether/aether-impl@1.0.0.v20140518?type=jar",
        "pkg:maven/org.eclipse.aether/aether-api@1.0.0.v20140518?type=jar",
        "pkg:maven/org.eclipse.aether/aether-util@1.0.0.v20140518?type=jar",
        "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.3.0.M1?type=jar",
        "pkg:maven/org.sonatype.sisu/sisu-guice@3.2.3?classifier=no_aop&type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-interpolation@1.21?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-utils@3.5.1?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-classworlds@2.5.2?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-component-annotations@1.5.5?type=jar",
        "pkg:maven/org.sonatype.plexus/plexus-sec-dispatcher@1.3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-settings@3.2.5?type=jar",
      "dependsOn" : [
        "pkg:maven/org.codehaus.plexus/plexus-utils@3.5.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-settings-builder@3.2.5?type=jar",
      "dependsOn" : [
        "pkg:maven/org.codehaus.plexus/plexus-utils@3.5.1?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-interpolation@1.21?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-component-annotations@1.5.5?type=jar",
        "pkg:maven/org.apache.maven/maven-settings@3.2.5?type=jar",
        "pkg:maven/org.sonatype.plexus/plexus-sec-dispatcher@1.3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.plexus/plexus-interpolation@1.21?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.sonatype.plexus/plexus-sec-dispatcher@1.3?type=jar",
      "dependsOn" : [
        "pkg:maven/org.codehaus.plexus/plexus-utils@3.5.1?type=jar",
        "pkg:maven/org.sonatype.plexus/plexus-cipher@1.4?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.sonatype.plexus/plexus-cipher@1.4?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-repository-metadata@3.2.5?type=jar",
      "dependsOn" : [
        "pkg:maven/org.codehaus.plexus/plexus-utils@3.5.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-model-builder@3.2.5?type=jar",
      "dependsOn" : [
        "pkg:maven/org.codehaus.plexus/plexus-utils@3.5.1?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-interpolation@1.21?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-component-annotations@1.5.5?type=jar",
        "pkg:maven/org.apache.maven/maven-model@3.2.5?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-aether-provider@3.2.5?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.maven/maven-model@3.2.5?type=jar",
        "pkg:maven/org.apache.maven/maven-model-builder@3.2.5?type=jar",
        "pkg:maven/org.apache.maven/maven-repository-metadata@3.2.5?type=jar",
        "pkg:maven/org.eclipse.aether/aether-api@1.0.0.v20140518?type=jar",
        "pkg:maven/org.eclipse.aether/aether-spi@1.0.0.v20140518?type=jar",
        "pkg:maven/org.eclipse.aether/aether-util@1.0.0.v20140518?type=jar",
        "pkg:maven/org.eclipse.aether/aether-impl@1.0.0.v20140518?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-component-annotations@1.5.5?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-utils@3.5.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.aether/aether-api@1.0.0.v20140518?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.aether/aether-spi@1.0.0.v20140518?type=jar",
      "dependsOn" : [
        "pkg:maven/org.eclipse.aether/aether-api@1.0.0.v20140518?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.aether/aether-util@1.0.0.v20140518?type=jar",
      "dependsOn" : [
        "pkg:maven/org.eclipse.aether/aether-api@1.0.0.v20140518?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.aether/aether-impl@1.0.0.v20140518?type=jar",
      "dependsOn" : [
        "pkg:maven/org.eclipse.aether/aether-api@1.0.0.v20140518?type=jar",
        "pkg:maven/org.eclipse.aether/aether-spi@1.0.0.v20140518?type=jar",
        "pkg:maven/org.eclipse.aether/aether-util@1.0.0.v20140518?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.sonatype.sisu/sisu-guice@3.2.3?classifier=no_aop&type=jar",
      "dependsOn" : [
        "pkg:maven/javax.inject/javax.inject@1?type=jar",
        "pkg:maven/aopalliance/aopalliance@1.0?type=jar",
        "pkg:maven/com.google.guava/guava@16.0.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/aopalliance/aopalliance@1.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.guava/guava@16.0.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.doxia/doxia-sink-api@1.11.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.maven.doxia/doxia-logging-api@1.11.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.doxia/doxia-logging-api@1.11.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.reporting/maven-reporting-api@3.1.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.maven.doxia/doxia-sink-api@1.11.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.reporting/maven-reporting-impl@3.2.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.maven.reporting/maven-reporting-api@3.1.1?type=jar",
        "pkg:maven/org.apache.maven/maven-core@3.2.5?type=jar",
        "pkg:maven/org.apache.maven/maven-artifact@3.2.5?type=jar",
        "pkg:maven/org.apache.maven/maven-plugin-api@3.2.5?type=jar",
        "pkg:maven/org.apache.maven.shared/maven-shared-utils@3.4.2?type=jar",
        "pkg:maven/org.apache.maven.doxia/doxia-sink-api@1.11.1?type=jar",
        "pkg:maven/org.apache.maven.doxia/doxia-decoration-model@1.11.1?type=jar",
        "pkg:maven/org.apache.maven.doxia/doxia-core@1.11.1?type=jar",
        "pkg:maven/org.apache.maven.doxia/doxia-integration-tools@1.11.1?type=jar",
        "pkg:maven/org.apache.maven.doxia/doxia-site-renderer@1.11.1?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-utils@3.5.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.shared/maven-shared-utils@3.4.2?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/commons-io/commons-io@2.13.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-io/commons-io@2.13.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.doxia/doxia-decoration-model@1.11.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.codehaus.plexus/plexus-component-annotations@1.5.5?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-utils@3.5.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.doxia/doxia-core@1.11.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.maven.doxia/doxia-sink-api@1.11.1?type=jar",
        "pkg:maven/org.apache.maven.doxia/doxia-logging-api@1.11.1?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-utils@3.5.1?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-component-annotations@1.5.5?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.8.1?type=jar",
        "pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar",
        "pkg:maven/org.apache.httpcomponents/httpclient@4.2.6?type=jar",
        "pkg:maven/org.apache.httpcomponents/httpcore@4.4.14?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-lang3@3.8.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.commons/commons-lang3@3.8.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.httpcomponents/httpclient@4.2.6?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.httpcomponents/httpcore@4.4.14?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.6?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.httpcomponents/httpcore@4.4.14?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-codec/commons-codec@1.6?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.doxia/doxia-integration-tools@1.11.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.maven.reporting/maven-reporting-api@3.1.1?type=jar",
        "pkg:maven/commons-io/commons-io@2.13.0?type=jar",
        "pkg:maven/org.apache.maven/maven-artifact@3.2.5?type=jar",
        "pkg:maven/org.apache.maven/maven-model@3.2.5?type=jar",
        "pkg:maven/org.apache.maven/maven-plugin-api@3.2.5?type=jar",
        "pkg:maven/org.apache.maven.doxia/doxia-logging-api@1.11.1?type=jar",
        "pkg:maven/org.apache.maven.doxia/doxia-decoration-model@1.11.1?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-i18n@1.0-beta-10?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-utils@3.5.1?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-component-annotations@1.5.5?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-interpolation@1.21?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.plexus/plexus-i18n@1.0-beta-10?type=jar",
      "dependsOn" : [
        "pkg:maven/org.codehaus.plexus/plexus-utils@3.5.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.doxia/doxia-site-renderer@1.11.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.maven/maven-artifact@3.2.5?type=jar",
        "pkg:maven/org.apache.maven.doxia/doxia-core@1.11.1?type=jar",
        "pkg:maven/org.apache.maven.doxia/doxia-logging-api@1.11.1?type=jar",
        "pkg:maven/org.apache.maven.doxia/doxia-sink-api@1.11.1?type=jar",
        "pkg:maven/org.apache.maven.doxia/doxia-decoration-model@1.11.1?type=jar",
        "pkg:maven/org.apache.maven.doxia/doxia-skin-model@1.11.1?type=jar",
        "pkg:maven/org.apache.maven.doxia/doxia-module-xhtml@1.11.1?type=jar",
        "pkg:maven/org.apache.maven.doxia/doxia-module-xhtml5@1.11.1?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-component-annotations@1.5.5?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-i18n@1.0-beta-10?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-velocity@1.2?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-utils@3.5.1?type=jar",
        "pkg:maven/org.apache.velocity/velocity@1.7?type=jar",
        "pkg:maven/org.apache.velocity/velocity-tools@2.0?type=jar",
        "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.8.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.doxia/doxia-skin-model@1.11.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.codehaus.plexus/plexus-utils@3.5.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.doxia/doxia-module-xhtml@1.11.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.codehaus.plexus/plexus-utils@3.5.1?type=jar",
        "pkg:maven/org.apache.maven.doxia/doxia-core@1.11.1?type=jar",
        "pkg:maven/org.apache.maven.doxia/doxia-sink-api@1.11.1?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-component-annotations@1.5.5?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.doxia/doxia-module-xhtml5@1.11.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.codehaus.plexus/plexus-utils@3.5.1?type=jar",
        "pkg:maven/org.apache.maven.doxia/doxia-core@1.11.1?type=jar",
        "pkg:maven/org.apache.maven.doxia/doxia-sink-api@1.11.1?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-component-annotations@1.5.5?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.plexus/plexus-velocity@1.2?type=jar",
      "dependsOn" : [
        "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar",
        "pkg:maven/org.apache.velocity/velocity@1.7?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.velocity/velocity@1.7?type=jar",
      "dependsOn" : [
        "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar",
        "pkg:maven/commons-lang/commons-lang@2.4?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/commons-lang/commons-lang@2.4?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.velocity/velocity-tools@2.0?type=jar",
      "dependsOn" : [
        "pkg:maven/commons-beanutils/commons-beanutils@1.7.0?type=jar",
        "pkg:maven/commons-digester/commons-digester@1.8?type=jar",
        "pkg:maven/commons-chain/commons-chain@1.1?type=jar",
        "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar",
        "pkg:maven/commons-logging/commons-logging@1.1?type=jar",
        "pkg:maven/dom4j/dom4j@1.1?type=jar",
        "pkg:maven/oro/oro@2.0.8?type=jar",
        "pkg:maven/org.apache.velocity/velocity@1.7?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/commons-beanutils/commons-beanutils@1.7.0?type=jar",
      "dependsOn" : [
        "pkg:maven/commons-logging/commons-logging@1.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/commons-logging/commons-logging@1.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-digester/commons-digester@1.8?type=jar",
      "dependsOn" : [
        "pkg:maven/commons-beanutils/commons-beanutils@1.7.0?type=jar",
        "pkg:maven/commons-logging/commons-logging@1.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/commons-chain/commons-chain@1.1?type=jar",
      "dependsOn" : [
        "pkg:maven/commons-beanutils/commons-beanutils@1.7.0?type=jar",
        "pkg:maven/commons-digester/commons-digester@1.8?type=jar",
        "pkg:maven/commons-logging/commons-logging@1.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/dom4j/dom4j@1.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/oro/oro@2.0.8?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.plexus/plexus-archiver@4.8.0?type=jar",
      "dependsOn" : [
        "pkg:maven/javax.inject/javax.inject@1?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-utils@3.5.1?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-io@3.4.1?type=jar",
        "pkg:maven/commons-io/commons-io@2.13.0?type=jar",
        "pkg:maven/org.apache.commons/commons-compress@1.23.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/org.iq80.snappy/snappy@0.4?type=jar",
        "pkg:maven/org.tukaani/xz@1.9?type=jar",
        "pkg:maven/com.github.luben/zstd-jni@1.5.5-5?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.plexus/plexus-io@3.4.1?type=jar",
      "dependsOn" : [
        "pkg:maven/javax.inject/javax.inject@1?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-utils@3.5.1?type=jar",
        "pkg:maven/commons-io/commons-io@2.13.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-compress@1.23.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.iq80.snappy/snappy@0.4?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.tukaani/xz@1.9?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.github.luben/zstd-jni@1.5.5-5?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.shared/maven-dependency-analyzer@1.13.2?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.maven/maven-core@3.2.5?type=jar",
        "pkg:maven/org.apache.maven/maven-artifact@3.2.5?type=jar",
        "pkg:maven/org.apache.maven/maven-model@3.2.5?type=jar",
        "pkg:maven/javax.inject/javax.inject@1?type=jar",
        "pkg:maven/org.ow2.asm/asm@9.5?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/commons-io/commons-io@2.13.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.ow2.asm/asm@9.5?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.shared/maven-dependency-tree@3.2.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.eclipse.aether/aether-util@1.0.0.v20140518?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.shared/maven-common-artifact-filters@3.3.2?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.shared/maven-artifact-transfer@0.13.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.maven/maven-core@3.2.5?type=jar",
        "pkg:maven/org.apache.maven/maven-artifact@3.2.5?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-component-annotations@1.5.5?type=jar",
        "pkg:maven/org.apache.maven.shared/maven-common-artifact-filters@3.3.2?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-utils@3.5.1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-collections4@4.4?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.plugin-tools/maven-plugin-annotations@3.9.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.sonatype.plexus/plexus-build-api@0.0.7?type=jar",
      "dependsOn" : [
        "pkg:maven/org.codehaus.plexus/plexus-utils@3.5.1?type=jar"
      ]
    }
  ]
}