{
  "bomFormat" : "CycloneDX",
  "specVersion" : "1.6",
  "serialNumber" : "urn:uuid:874c1d14-1fde-3055-a87d-0143c4ee564e",
  "version" : 1,
  "metadata" : {
    "timestamp" : "2026-09-10T15:49:05Z",
    "lifecycles" : [
      {
        "phase" : "build"
      }
    ],
    "tools" : {
      "components" : [
        {
          "type" : "library",
          "author" : "OWASP Foundation",
          "group" : "org.cyclonedx",
          "name" : "cyclonedx-maven-plugin",
          "version" : "2.9.1",
          "description" : "CycloneDX Maven plugin",
          "hashes" : [
            {
              "alg" : "MD5",
              "content" : "9c7a565cf28cce58557d0c621c5ea4b1"
            },
            {
              "alg" : "SHA-1",
              "content" : "be882d5a22050bfa9d19090b1420c188617d0e1c"
            },
            {
              "alg" : "SHA-256",
              "content" : "698e0f37184a5b28c245c4065fd036dfce253b52f82fbb7113d81d36326cc249"
            },
            {
              "alg" : "SHA-512",
              "content" : "c0f0b11026858166f872a2eb54719492e5cecaa0bc9cd6b30b3ecb4a174eed220f4a1b5829d18d6734128e778d3cb3db7ffed177c92866133129cb29081814a0"
            },
            {
              "alg" : "SHA-384",
              "content" : "d80964707dfe5caca8c70521d5066f57589304c0a657e6fbc7c0614ea0fc7b3b3dbe7778361eee0f54ba111e9cb0ffcb"
            },
            {
              "alg" : "SHA3-384",
              "content" : "80bc3a275d9514bc457461ff52a72add8c7ecbbc01d8912efce57139016c544ee776981851be0a58fa977ab4221f703f"
            },
            {
              "alg" : "SHA3-256",
              "content" : "142317d6f245390f4fd2d0c100b16281b8dfc5c0c2cff86943bdcc97039cb699"
            },
            {
              "alg" : "SHA3-512",
              "content" : "af0fb9137c90b65d1a07f72e4d51ae509956cdb8800f35c961b037cdda1fe4a14ce3b496cef71ba85f1621affcfe29cd42704ae4191ff0b090a9602087c8997b"
            }
          ]
        }
      ]
    },
    "component" : {
      "type" : "application",
      "bom-ref" : "pkg:maven/ch.section11/TRSuiteFX_jdk8@26.02.0.1?type=jar",
      "group" : "ch.section11",
      "name" : "TRSuiteFX_jdk8",
      "version" : "26.02.0.1",
      "purl" : "pkg:maven/ch.section11/TRSuiteFX_jdk8@26.02.0.1?type=jar"
    },
    "properties" : [
      {
        "name" : "maven.goal",
        "value" : "makeAggregateBom"
      },
      {
        "name" : "maven.scopes",
        "value" : "compile,runtime,system"
      }
    ]
  },
  "components" : [
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/ch.section11/validators@26.02.0.1?type=jar",
      "group" : "ch.section11",
      "name" : "validators",
      "version" : "26.02.0.1",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "fb4c92c787a9ee69f86757236383e3fb"
        },
        {
          "alg" : "SHA-1",
          "content" : "1bed6fdd5162681b5a093dfb574bf56fb8cd4aba"
        },
        {
          "alg" : "SHA-256",
          "content" : "02750f0d4327b37a3737335efad5395cda8e7e96744b55bb29629e8c519a4fee"
        },
        {
          "alg" : "SHA-512",
          "content" : "f61925d4779455e535682129163ee5e2d1d94ba4c07fe6cf7a4e4d4979b083f3755968caa7948919143d60b66ddaf1b07683255ed23eb8178bbbe082df4b63d3"
        },
        {
          "alg" : "SHA-384",
          "content" : "24d9209ea12e43ccde2db3b583c8b1adb962ccc181331b8e8e3cb787e688b7bf4cd8932d75da80d5227390ec32565096"
        },
        {
          "alg" : "SHA3-384",
          "content" : "84785c8fc0c1a67e0e88537570a56e42362fce02b4c3ba8f3e8c9b4554107aff0eafc411232d710b99f8ed14b57eba10"
        },
        {
          "alg" : "SHA3-256",
          "content" : "954518564432415a4bdbf11011a7b03a4dfdcc3923379ea99ff25d61e657c39e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "e9122d4646dad022cabe257507a72eb9fa3730f82677e3d02eaa7c5da305ecbf58ec684a3c7a139529d68370c61b5438591ee1b23e7c233d174d5afb22204f98"
        }
      ],
      "purl" : "pkg:maven/ch.section11/validators@26.02.0.1?type=jar"
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/ch.section11/trsuite-lib@26.02.0.1?type=jar",
      "group" : "ch.section11",
      "name" : "trsuite-lib",
      "version" : "26.02.0.1",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "abc5146b3a9a29821af92fb014714a04"
        },
        {
          "alg" : "SHA-1",
          "content" : "015dfab12ef2a54152835376eb4351bde88d9dbe"
        },
        {
          "alg" : "SHA-256",
          "content" : "08c0d0debbf18b5a51f9870bc47b2a98b6e98b232a16e423022b4cd25301bdb3"
        },
        {
          "alg" : "SHA-512",
          "content" : "29b34e866206c27f5ab08227410aecaa10d04aa7b9e2ed1279bb03bb95fa7f3b3fca7e82d5d1d4d9b9439547c27f9233aceac3e5f076b6378411d3349be49c04"
        },
        {
          "alg" : "SHA-384",
          "content" : "ea0a2aa2e7a08e9077c4d89d53c9dbc9bab2193504c9d6adabe660cd768ede1c8125ed3722b2f92dcf6788c54c88eb3a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "75c2ad3525d1006c68dcb5ec0e969c7f53d3412f2410152a5cd2b425260f3581ec103754d3147f8e72761d91f61eaab6"
        },
        {
          "alg" : "SHA3-256",
          "content" : "5c2ada7a46f6dbec0a4c4d4ba5234f18f10bdbb4d828795bfcec0c51acee0f16"
        },
        {
          "alg" : "SHA3-512",
          "content" : "8d95b154fdbef15a7e85f8f4cb6ec98e27ad530138bb0828dc058b71f4113669d8dcb2e2dde8438f1b5fe2859652d91371efd8a63f3178978e537f9a60dee9df"
        }
      ],
      "purl" : "pkg:maven/ch.section11/trsuite-lib@26.02.0.1?type=jar"
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/ch.section11/xsd-generated@26.02.0.1?type=jar",
      "group" : "ch.section11",
      "name" : "xsd-generated",
      "version" : "26.02.0.1",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "23f59398b2a062b7a4c6fb5624a23232"
        },
        {
          "alg" : "SHA-1",
          "content" : "3d5410e4b93c799d43e0b694c3440264096b6015"
        },
        {
          "alg" : "SHA-256",
          "content" : "b3f90c1a469e9dea32cd2ea9945558c910ad33fa7fd5678a4c8e5c57be9ea70b"
        },
        {
          "alg" : "SHA-512",
          "content" : "c2408f7d724cab04cf055a10c399243f27278f19613c082b2ff65c67eeceae9a6123b8b91aa3f31053c53dbaf831b8df11809588bbf0bd982b947a0de1f1ed2d"
        },
        {
          "alg" : "SHA-384",
          "content" : "027c042b838b8e5d6d5da43553618c3d840b9eec2421ce7a2a258cb575e57fa8b542d819532a7fc361316a2ab735d5aa"
        },
        {
          "alg" : "SHA3-384",
          "content" : "5f946faa685a24961d6f828b7dab2ca648c6a7d676904f42176ae51e72e0a1b677f8bd3289d7bca2f0a949a8138ef01d"
        },
        {
          "alg" : "SHA3-256",
          "content" : "1dbaf37a6700727dfe0326121103b27a1469eb142d080d67e38873fd51cafeab"
        },
        {
          "alg" : "SHA3-512",
          "content" : "4e54e9f76a7c1c97cdeae5d5473270a8234bd4bfe7cea68b3587a4a2ba424c1267377bfa306305ff2976a89ac3c4c9265dc2c383e94198510e640776bb5e33a3"
        }
      ],
      "purl" : "pkg:maven/ch.section11/xsd-generated@26.02.0.1?type=jar"
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/ch.section11/trsuite-utils@26.02.0.1?type=jar",
      "group" : "ch.section11",
      "name" : "trsuite-utils",
      "version" : "26.02.0.1",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "2241cb36aa2ad5c666a877bfb3009926"
        },
        {
          "alg" : "SHA-1",
          "content" : "6b5ffa83d2ac68dafcd9861bfce5b7d4dc8061c6"
        },
        {
          "alg" : "SHA-256",
          "content" : "2e3bdefbe3ffcf6a15a5224f7be23d59db0189956c3ef5443dd39900e97fb952"
        },
        {
          "alg" : "SHA-512",
          "content" : "cdd5223c90131d752aaa59abe30bd62daebec12b3729c4bc09e381a2d475427004a2d59fd0b15a286233369dc0d59f4045eaa5f81896122e807f1d65689ef886"
        },
        {
          "alg" : "SHA-384",
          "content" : "807001b90fc60b9e444785326905954904b202643e0d34e01fa7f5d55fbe3575cebd74f017e0b24b62e5fe360e5764ec"
        },
        {
          "alg" : "SHA3-384",
          "content" : "7df2e411e6fc570ceca9d1499a39fb0471dbb3f8747ad588be67b81870b00d4f687c5eea7dfdf4c860b6edf39d817321"
        },
        {
          "alg" : "SHA3-256",
          "content" : "9de5c8a93cb8cb4581f398b3bf25805a9bec37e1b0b14fd620a5e5423903f5f7"
        },
        {
          "alg" : "SHA3-512",
          "content" : "05fe6a6b8ac125f57bce28a5f101b6a030ecaf0196730a767f2e7e79ec2eed21eb3b16c5f8576c8e7b109f6dbdb4374746cfd262481cee694d5de6cdd1bdfdb1"
        }
      ],
      "purl" : "pkg:maven/ch.section11/trsuite-utils@26.02.0.1?type=jar"
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.bouncycastle/bcprov-jdk18on@1.85?type=jar",
      "group" : "org.bouncycastle",
      "name" : "bcprov-jdk18on",
      "version" : "1.85",
      "description" : "The Bouncy Castle Crypto package is a Java implementation of cryptographic algorithms. This jar contains the JCA/JCE provider and low-level API for the BC Java version 1.85 for Java 1.8 and later.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e564b4f846cd76cca8253c7c9febb44e"
        },
        {
          "alg" : "SHA-1",
          "content" : "2320b854dffe134687f7266bb22021b779e576d3"
        },
        {
          "alg" : "SHA-256",
          "content" : "20af26bf6060bb8005cc2389916812c1e0e998dc48d2ced7131b89461b54cff7"
        },
        {
          "alg" : "SHA-512",
          "content" : "33bbcbc3ad823898bda1fec8cea270fffa4688886b1c351afd93e713f41d29afd71aae9982cbe896d510aa98fece8b9a66c132536625801fe2c1af283a76e2b5"
        },
        {
          "alg" : "SHA-384",
          "content" : "50a64acda277531b4aa2faa476eae6842c8505224b560c05f8a8fe4f5e4a9a245aed4622a4a1ad57da197b93fa2eafd6"
        },
        {
          "alg" : "SHA3-384",
          "content" : "d753d24ac69ee4f167d4d11c6094b2671e7990fa73471b6c34a7eb89c04f3c3f7b96756505e776a22c55acbdd32d2637"
        },
        {
          "alg" : "SHA3-256",
          "content" : "bcc230dbf643d7d4f758c31ba0762b2eb2f6bc0f565f4336eeb013e75b05a1ff"
        },
        {
          "alg" : "SHA3-512",
          "content" : "ebd7c353f357fbca7a7e596c79c9023dc37cbc48a0eacf6fd1644932214131eb02f164969f5b429e3bbc7f5bdff519833a5ed0ca934a2c172d9b49af2e7df7d7"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "Bouncy Castle Licence",
            "url" : "https://www.bouncycastle.org/licence.html"
          }
        }
      ],
      "purl" : "pkg:maven/org.bouncycastle/bcprov-jdk18on@1.85?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.bouncycastle.org/download/bouncy-castle-java/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/bcgit/bc-java/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/bcgit/bc-java"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.bouncycastle/bcpkix-jdk18on@1.85?type=jar",
      "group" : "org.bouncycastle",
      "name" : "bcpkix-jdk18on",
      "version" : "1.85",
      "description" : "The Bouncy Castle Java APIs for CMS, PKCS, EAC, TSP, CMP, CRMF, OCSP, and certificate generation. This jar contains APIs for Java 1.8 and later. The APIs are designed primarily to be used in conjunction with the BC Java provider but may also be used with other providers providing cryptographic services.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "8247f481c8eeef03925277ca33f72255"
        },
        {
          "alg" : "SHA-1",
          "content" : "b33d047adc6801a1cfc8ffe1634b23b306a670c1"
        },
        {
          "alg" : "SHA-256",
          "content" : "c9f82b2d4e99c4bbdfccf684e52cc06ea06a0b567bfd0d08f9c5a3f417055996"
        },
        {
          "alg" : "SHA-512",
          "content" : "142ce817145f7348dc97f62872eac931280c578bc61ff4cfcff927d4247ab2bf15e858edf74f2549074c4685ebe8de1d815c42637eacdb65b344b741c2bf1415"
        },
        {
          "alg" : "SHA-384",
          "content" : "1bb7f6d3c0e83cbefcd27828575a9554a087c19b5230817291fe979cf54890fbe7ccbd8134563011b4d409d7729c1ea5"
        },
        {
          "alg" : "SHA3-384",
          "content" : "fba8a68f6b52298e7634fc8f6363134ccd32f4c549bfbe9c3696aa74e6a41289ee6f09095f7c66f9df8736f83ec88cc7"
        },
        {
          "alg" : "SHA3-256",
          "content" : "b1d11ec6466b1789e093bb21a59eb51c83c7f7e1edc5e1aaaf407c36efb90e04"
        },
        {
          "alg" : "SHA3-512",
          "content" : "93b46f93a07037b8c774f337dc83f0652191fedfe1d66342360174c29c0030b7dbfc7b3d9b23de54f482697b274f2c36c8ce6139eb82df62eb7d7d7d96ea642e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "Bouncy Castle Licence",
            "url" : "https://www.bouncycastle.org/licence.html"
          }
        }
      ],
      "purl" : "pkg:maven/org.bouncycastle/bcpkix-jdk18on@1.85?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.bouncycastle.org/download/bouncy-castle-java/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/bcgit/bc-java/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/bcgit/bc-java"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.bouncycastle/bcutil-jdk18on@1.85?type=jar",
      "group" : "org.bouncycastle",
      "name" : "bcutil-jdk18on",
      "version" : "1.85",
      "description" : "The Bouncy Castle Java APIs for ASN.1 extension and utility APIs used to support bcpkix and bctls. This jar contains APIs for Java 1.8 and later.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "7c90e18e7e709e7ceb14b2682e5ddcca"
        },
        {
          "alg" : "SHA-1",
          "content" : "c41082d6f61628919b675970563f5615e4427c9f"
        },
        {
          "alg" : "SHA-256",
          "content" : "590f55ed5d68529239898a4a5c4f730b6e37f45d1cfa3fbe51f8485abe32c42d"
        },
        {
          "alg" : "SHA-512",
          "content" : "1cf5011448dfaed7daea587807b9513961bdfd7b41ee5ce42444254dfa3677fdba78fe5191bca4ecf2a51eb3883be59f0374affc1efae3fd1728a64fa094027d"
        },
        {
          "alg" : "SHA-384",
          "content" : "fdab70a9a0fc9011214c1d484f315077bb68ef586669a2922e261df7e8ac8eae290fa90d411fbad04cc8642a9b7596d0"
        },
        {
          "alg" : "SHA3-384",
          "content" : "811f67ad491483f79e93827556db2cbe5c66eea384638259429617ed3ea06a42b0cf5e6bbb2d7ca13dd6a2c094164b93"
        },
        {
          "alg" : "SHA3-256",
          "content" : "990e116a1143574594f0ae6d134d4541d22e9551d48a3347f73c7bcef278b6cc"
        },
        {
          "alg" : "SHA3-512",
          "content" : "a969f3ae17dd9a6141572ae2da2eb3b6414abea4d6dc6e1139959475ba3e9ed3b5a4696832e7382bc1e256b839fe0bf30ba54fb2e8490dae36c046b374e78c89"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "Bouncy Castle Licence",
            "url" : "https://www.bouncycastle.org/licence.html"
          }
        }
      ],
      "purl" : "pkg:maven/org.bouncycastle/bcutil-jdk18on@1.85?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.bouncycastle.org/download/bouncy-castle-java/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/bcgit/bc-java/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/bcgit/bc-java"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-compress@1.27.1?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-compress",
      "version" : "1.27.1",
      "description" : "Apache Commons Compress defines an API for working with compression and archive formats. These include bzip2, gzip, pack200, LZMA, XZ, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4, Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1db4bd87b0082044c6e7a6af0b977a3e"
        },
        {
          "alg" : "SHA-1",
          "content" : "a19151084758e2fbb6b41eddaa88e7b8ff4e6599"
        },
        {
          "alg" : "SHA-256",
          "content" : "293d80f54b536b74095dcd7ea3cf0a29bbfc3402519281332495f4420d370d16"
        },
        {
          "alg" : "SHA-512",
          "content" : "5e1fcf9f552ab86beceef6743609e97d700dcbaa5b5ee58858e765c1238cd4dbca2852e1eb415bc2a09dad478d31197ddf09b2ba148dd30be8c9ecd565775226"
        },
        {
          "alg" : "SHA-384",
          "content" : "307707c885a45c1725e940b9e42d75871d47442fcc31ec9d8fa56af2e1a2372eed178ebf86c61b5a577465a2674c0f1f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "b87d7b7f6f0db51fcfb4bf0adf31795dc0083564dcc524df345fbbe3546c8357b61ebef793654003a5bcc2e7368bc3a4"
        },
        {
          "alg" : "SHA3-256",
          "content" : "39b8fb032df8934793dddf257ec49d0d7cd16a75e45bea716a21aa0278901621"
        },
        {
          "alg" : "SHA3-512",
          "content" : "40f6d1a9074546b05b42b3841c95b23e21df6f3e2bbe8bbe2905e9676ae51da768df315819cdffaa4f703ea3aec7aeb89f8f3b07c82ea2df3a936d425d606634"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-compress@1.27.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-compress/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-parent/actions"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/COMPRESS"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-compress.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-lang3",
      "version" : "3.18.0",
      "description" : "Apache Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang. The code is tested using the latest revision of the JDK for supported LTS releases: 8, 11, 17 and 21 currently. See https://github.com/apache/commons-lang/blob/master/.github/workflows/maven.yml Please ensure your build environment is up-to-date and kindly report any build issues.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "48b9886957920a4cdb602780ca345087"
        },
        {
          "alg" : "SHA-1",
          "content" : "fb14946f0e39748a6571de0635acbe44e7885491"
        },
        {
          "alg" : "SHA-256",
          "content" : "4eeeae8d20c078abb64b015ec158add383ac581571cddc45c68f0c9ae0230720"
        },
        {
          "alg" : "SHA-512",
          "content" : "c2c9d497fc1be411050f4011b2407764b78aa098eb42925af8a197eabdbc25b507f09fb898805e9bed4815f35236a508ee5b096e36f363df4d407232d50fc832"
        },
        {
          "alg" : "SHA-384",
          "content" : "4fb3f101106e4ce3666d5c15d276ba86f7683a0ef35f0384edfcd579ea454275edbb7400795d265ec3a38e39997e79b8"
        },
        {
          "alg" : "SHA3-384",
          "content" : "aada7e3612cf3f6190a19fa7c3db74df1e13ec56b300be9bb4317d261d5877c84ab59ba9a09168becdbd82cd41961395"
        },
        {
          "alg" : "SHA3-256",
          "content" : "306d286d0bd7549c203cc802fd755d354c4f7926fa023f4e83623ba1a6261250"
        },
        {
          "alg" : "SHA3-512",
          "content" : "f6f1ecc684e309d7b9fc5c343792508fee935cd2119d962721662c5af88e4864ba6f47a863e083714f315f926c156de1970cd2fb577449bdfdc7bf98a4a451fa"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-lang/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-lang/actions"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/LANG"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf/commons-lang.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-beanutils/commons-beanutils@1.11.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-beanutils",
      "name" : "commons-beanutils",
      "version" : "1.11.0",
      "description" : "Apache Commons BeanUtils provides an easy-to-use but flexible wrapper around reflection and introspection.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "32ed51f196dfda19e0dc1ce53eeed29e"
        },
        {
          "alg" : "SHA-1",
          "content" : "ac03ea606d13de04c2e4508227680faff151f491"
        },
        {
          "alg" : "SHA-256",
          "content" : "9e44ba68ec9a3f21286fa2a8bbb003b735c0f69101bb43144b79f4f8aaa74709"
        },
        {
          "alg" : "SHA-512",
          "content" : "4348670579601bc1151de2f27414635c4ea0b4b53061d116c09ba319e2c4f8e91d0cb0713a964668bd5189105ac1e2b6590881850880bf5ff23cc6409f270420"
        },
        {
          "alg" : "SHA-384",
          "content" : "a349c6a1e0a48cbf8d3528e4a39257db1b912c2ef060853837aa14d941154e9adc43248309ab6db7e8ac7730db7b081b"
        },
        {
          "alg" : "SHA3-384",
          "content" : "f3afdd778bb54bc6a9e41b5c31cf98078f005542b87cd0a3713d8e5152ff7eb6d9e2ed3206ce453a3af6f869fa714cbf"
        },
        {
          "alg" : "SHA3-256",
          "content" : "6dd4ec6d993b5792c51b5d6c4ea3b56f35b1c1f0ea65b182cb55c2432315aa68"
        },
        {
          "alg" : "SHA3-512",
          "content" : "fdcaa942f7377fdb36c7977273c1e2177d23e7b13162db1a0e5d3958d87a8c77d08cd6797a7c30cf755d492fa75d0642de5678dfe1d5a936569dccde5549e512"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-beanutils/commons-beanutils@1.11.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-beanutils"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-parent/actions"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/BEANUTILS"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-beanutils.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-collections",
      "name" : "commons-collections",
      "version" : "3.2.2",
      "description" : "Types that extend and augment the Java Collections Framework.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f54a8510f834a1a57166970bfc982e94"
        },
        {
          "alg" : "SHA-1",
          "content" : "8ad72fe39fa8c91eaaf12aadb21e0c3661fe26d5"
        },
        {
          "alg" : "SHA-256",
          "content" : "eeeae917917144a68a741d4c0dff66aa5c5c5fd85593ff217bced3fc8ca783b8"
        },
        {
          "alg" : "SHA-512",
          "content" : "51c72f9aca7726f3c387095e66be85a6df97c74b00a25434b89188c1b8eab6e2b55accf7b9bd412430d22bd09324dec076e300b3d1fa39fccad471f0f2a3da16"
        },
        {
          "alg" : "SHA-384",
          "content" : "dd4e99b3314bd3c1a1ee26296615d9e44dadf7a1f8a7bbba44fb95121803d331e36d4cca4260e7609af78a47ba3e4073"
        },
        {
          "alg" : "SHA3-384",
          "content" : "8ce03528e4a6e95c44283b56eca87e6a6d3bf1363411a55b538f4f9110cf7470581ea5c73925e877ddab08dba0603f40"
        },
        {
          "alg" : "SHA3-256",
          "content" : "fd3d6134b5f07077b82ccf93d148dacf7c4ce5c971209510edd0e77e3e38c19e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c2a523916fb7c7d55a05d5e3d9e9b33000733f4b20a71be174e4e093e3f06ea78ad831edd1505527da7388105f8647efb7d5666ba852c90b4e2d5bb74256efbc"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://commons.apache.org/collections/"
        },
        {
          "type" : "build-system",
          "url" : "https://continuum-ci.apache.org/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/COLLECTIONS"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/commons/proper/collections/trunk"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-validator/commons-validator@1.10.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-validator",
      "name" : "commons-validator",
      "version" : "1.10.0",
      "description" : "Apache Commons Validator provides the building blocks for both client-side and server-side data validation. It may be used standalone or with a framework like Struts.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0df2e89ebc974b8f463a945aa117c0af"
        },
        {
          "alg" : "SHA-1",
          "content" : "67d0118c86cb4cea02a3bda1ffe0baeecdfc8e37"
        },
        {
          "alg" : "SHA-256",
          "content" : "0d1600cddc24af7f49b5eb01e31adda3ce3b25f236c8c75eaecdf78428469eb9"
        },
        {
          "alg" : "SHA-512",
          "content" : "36dde275afb04875f13568a3d816e973d4578ec2c51488a6e937e17f91c782ae802e10a5f404541fe5e2f1fa4a4c8456d9a6509f0536a335c54c8099eb128646"
        },
        {
          "alg" : "SHA-384",
          "content" : "6fe459a30532873b7fc6a6c1d208769d36b354b632331133314d6dce6a0085b329bbc0f8128c9ea29da84f8529224c1c"
        },
        {
          "alg" : "SHA3-384",
          "content" : "7233d73cb54fdfa37bfa83ed1544844148227a20fa93b134918c80536e354df8cf38f4bdbecfdddfc72196e86f144758"
        },
        {
          "alg" : "SHA3-256",
          "content" : "f95b6829740005b2b324affdb764640e78e185d1b04da84aafa522e75721785f"
        },
        {
          "alg" : "SHA3-512",
          "content" : "ee585fa7e5139b04ab25ff2df000e1af68cb3b1de65d81240fc375ef2d110704a6dd11b14de26c181c2808d71207f2c7f03e7710033f093b6f2e7a88ff8d0f28"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-validator/commons-validator@1.10.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://commons.apache.org/proper/commons-validator/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-parent/actions"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/VALIDATOR"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf/commons-validator"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-digester/commons-digester@2.1?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-digester",
      "name" : "commons-digester",
      "version" : "2.1",
      "description" : "The Digester package lets you configure an XML to Java object mapping module which triggers certain actions called rules whenever a particular pattern of nested XML elements is recognized.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "528445033f22da28f5047b6abcd1c7c9"
        },
        {
          "alg" : "SHA-1",
          "content" : "73a8001e7a54a255eef0f03521ec1805dc738ca0"
        },
        {
          "alg" : "SHA-256",
          "content" : "e0b2b980a84fc6533c5ce291f1917b32c507f62bcad64198fff44368c2196a3d"
        },
        {
          "alg" : "SHA-512",
          "content" : "a2c822690786b41e0a02506c7aaf7e8a4b8251ea71d6978ee03e82b11ca242e49386d6da84dbc7182d5a6fb167822aed200da2d97e2f264d63ccf8f1b9681ac8"
        },
        {
          "alg" : "SHA-384",
          "content" : "2aaaa152e6e5fa4c632065e18bb17f8a223de0713be0610b62939b179fccdd37645f2e3073896f455ea95566274e14c1"
        },
        {
          "alg" : "SHA3-384",
          "content" : "68f842c1a87a2fae303d1662a2b9d9d63b358c11c7b26ec468ef64f5e677b44e3db3d30a7f4b74aa73bda0ecf9f4858a"
        },
        {
          "alg" : "SHA3-256",
          "content" : "dafa3bae04d0eb180e384caf6a86be5387537992b2b7c4998cc341d56f0ac4d7"
        },
        {
          "alg" : "SHA3-512",
          "content" : "7a3f2991476cd5f2f8e645fe9820a9820b720b19fc6451be09a3be35bab7d51fe28f094c0f9735aa5f6fb9dc432c8513b7d15ae44d66b0836e97abcf06d74ce4"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-digester/commons-digester@2.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://commons.apache.org/digester/"
        },
        {
          "type" : "build-system",
          "url" : "http://vmbuild.apache.org/continuum/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/DIGESTER"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/commons/proper/digester/tags/DIGESTER_2_1_RC2"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.santuario/xmlsec@2.3.4?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.santuario",
      "name" : "xmlsec",
      "version" : "2.3.4",
      "description" : "Apache XML Security for Java supports XML-Signature Syntax and Processing, W3C Recommendation 12 February 2002, and XML Encryption Syntax and Processing, W3C Recommendation 10 December 2002. As of version 1.4, the library supports the standard Java API JSR-105: XML Digital Signature APIs.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "bad235ebfca40a0514fba17fd742df51"
        },
        {
          "alg" : "SHA-1",
          "content" : "7f2baecd896ae8e8b02b6090220537bd950eccbc"
        },
        {
          "alg" : "SHA-256",
          "content" : "5513e7417edc1eb7188adc4de0312e93156bd7ca6d6c1e6072d3e0006defff23"
        },
        {
          "alg" : "SHA-512",
          "content" : "a948e1988f5bbacf7df1734d4779e3dd6022ded212eda83c784b295371ad2b89b5e7e476cc1673e592abe7a3f0fc153255251467ae7b023ff98ac22f476b1e2e"
        },
        {
          "alg" : "SHA-384",
          "content" : "d2f2631261d48530edf19d9a04ecec293d15ffa75e56912e705ccf7b08ae63a560e5bc49a1b24ad912be920316e4e216"
        },
        {
          "alg" : "SHA3-384",
          "content" : "0ff82e0fcdb6a9b891a24160e19ca5db8558b41bf32f5eda45581a7982d903b81121a385f0030b90cb4a280b861217c1"
        },
        {
          "alg" : "SHA3-256",
          "content" : "355c1921dff3f01ece0170e63e55b599eec335dac51fdb055f9e46c1c15b105d"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c158de9564db780b0f04b482d3d155c55119e94fd1887cc9abcc54a0ef9f44455b3e29b08596c3834928c2f15b6493ba73c957693484a3bd42f817597ad050fb"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.santuario/xmlsec@2.3.4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://santuario.apache.org/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/SANTUARIO"
        },
        {
          "type" : "mailing-list",
          "url" : "http://news.gmane.org/gmane.text.xml.security.devel"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=santuario-xml-security-java.git;a=summary"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-cli/commons-cli@1.11.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-cli",
      "name" : "commons-cli",
      "version" : "1.11.0",
      "description" : "Apache Commons CLI provides a simple API for presenting, processing, and validating a Command Line Interface.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e689f5e4947368dd0233fc28f613f561"
        },
        {
          "alg" : "SHA-1",
          "content" : "a461452d3e31bebf2706323f8738ec44b19c96e1"
        },
        {
          "alg" : "SHA-256",
          "content" : "8f7f8605d68e15bf32db61ec94eac6fdafc51b1bdbe1e0e0802b57d23f387792"
        },
        {
          "alg" : "SHA-512",
          "content" : "79bad27f1ae2affde9a303850b23ea76278437cf13b309addaf06d77d1f9fc1866d1e5f94f90ff82c82ed096dcb65ca187268d95e1695893b3802366fa2c987b"
        },
        {
          "alg" : "SHA-384",
          "content" : "b7a052c0daafb74209956ceebc7f6d52b68bfd8ad0899bae9013cd2ac46a5fe4a7db93d27b376a724940f955408fae07"
        },
        {
          "alg" : "SHA3-384",
          "content" : "fc4d6f277ebaac8c3637086433ecf03354453ced9ffd1ee25e32e6d4095e5d9c322613b21c23356a1df2133b1b7297a9"
        },
        {
          "alg" : "SHA3-256",
          "content" : "8b06a17d223164bf4e16970380ee9ef51e0677956bf2a36c0ca0ff45b4dcfb5c"
        },
        {
          "alg" : "SHA3-512",
          "content" : "0a98b0f7f6e72303f17d720974e353479e40b434258fdcfe7b0b40a6a630eca92f7fbaec4f6e4cd1090945d75a214dd088e4b7314b1e0a15debbed37ef49ceb4"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-cli/commons-cli@1.11.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-cli/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-cli/actions"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CLI"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-cli.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.zxing/core@3.4.1?type=jar",
      "group" : "com.google.zxing",
      "name" : "core",
      "version" : "3.4.1",
      "description" : "Core barcode encoding/decoding library",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "fbad9e0bca18ae75897e0b748788ceda"
        },
        {
          "alg" : "SHA-1",
          "content" : "1869da97e9b2b60b5ff2fcaf55899174b93ae25d"
        },
        {
          "alg" : "SHA-256",
          "content" : "acfa30338c26267b6cab665509c2251bb96e8350bfcad89d59b949ba77011f8d"
        },
        {
          "alg" : "SHA-512",
          "content" : "b7e76fc6dfdde9669da7dff22a5920cece1e7c8d2a24d0088c8591ec32b98216c8f3a9f16b33f0113bc6386b8988a91fd671420d25a57959787acefd794f3829"
        },
        {
          "alg" : "SHA-384",
          "content" : "c20e6799c04ad8d41bc09c28058ccf977b7adf81661502ee1f66aadeefdb724cb6b56f5ab1ea2bf5fc47d983c0e51fac"
        },
        {
          "alg" : "SHA3-384",
          "content" : "6beeac7b38fc9499a6156b08ba5440ff5049eecef5ae642427fe3925b3f76840c80c75d29d26b6a3a7e838ab96b09fb5"
        },
        {
          "alg" : "SHA3-256",
          "content" : "09f3e60cd4815ce7c6e170f85803d7dd43425f937dfe3e81e9fb13b5c6d86811"
        },
        {
          "alg" : "SHA3-512",
          "content" : "a3ae150641736380b659692de988a2e1cc250393096c2d71f86a5aa5d1e6b073a570fd5cd0e9070a7a66ba5ec53f95e53a868bad615d0c46a05a2d40767fd382"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.zxing/core@3.4.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/zxing/zxing/core"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/zxing/zxing/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://groups.google.com/forum/?fromgroups#!forum/zxing"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/zxing/zxing/core"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.zxing/javase@3.4.1?type=jar",
      "group" : "com.google.zxing",
      "name" : "javase",
      "version" : "3.4.1",
      "description" : "Java SE-specific extensions to core ZXing library",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e3d0549e8501fe160fa792498bafc84e"
        },
        {
          "alg" : "SHA-1",
          "content" : "4eddd2ff030c0d4f368d3cc00131ff6a58bc88e0"
        },
        {
          "alg" : "SHA-256",
          "content" : "d7ee1a035cb26b7fd525981c33da947b4b39ccca15e4a92b0bae3e322bfcdc20"
        },
        {
          "alg" : "SHA-512",
          "content" : "92972fd9b3eb97c82ceff7e4451b9d7278d411c15ed5188dec6e38be7d05fedf9dd674cb2d8f02acdcc7949b9de486c9b09dee784eca71f651f08484dde8e2eb"
        },
        {
          "alg" : "SHA-384",
          "content" : "8d6e9fd87e8261c84db92d390da89fdd2f42528bee3b026a6179260043c9af4fa4cdfe9a81b405480f52c985293f5036"
        },
        {
          "alg" : "SHA3-384",
          "content" : "eafb7fddf142b037a96e3d5ed8d4f6ba1906dd28472fff2a62e147519aa11921a99c80b88452d7c48b6a342cbf239c07"
        },
        {
          "alg" : "SHA3-256",
          "content" : "f925a70c0914a6f06d7904352b6b00e32f596ddb763b2458016697557d2466ef"
        },
        {
          "alg" : "SHA3-512",
          "content" : "00cad977cc88ea27c03929fcff2fec4055dc2144972d80a021503afd852d2fd29fbee5c42029e08fde5d446ddce253d0d00bc212a19ae00883fc18069e85f491"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.zxing/javase@3.4.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/zxing/zxing/javase"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/zxing/zxing/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://groups.google.com/forum/?fromgroups#!forum/zxing"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/zxing/zxing/javase"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.beust/jcommander@1.78?type=jar",
      "group" : "com.beust",
      "name" : "jcommander",
      "version" : "1.78",
      "description" : "Command line parser library for Java",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "50552e69ce8115d80b9a31ec93c87bc3"
        },
        {
          "alg" : "SHA-1",
          "content" : "a3927de9bd6f351429bcf763712c9890629d8f51"
        },
        {
          "alg" : "SHA-256",
          "content" : "7891debb84b5f83e9bd57593ebece3399abbe0fd938cf306b3534c57913b9615"
        },
        {
          "alg" : "SHA-512",
          "content" : "5ee2ef4c12888a48d7c830189d06ee8a653c7664a53c9b6fa935d4e7866b0454111f8092d7ece086ec80c61edab2856187a1e247873e5c8e4724efb02c37504b"
        },
        {
          "alg" : "SHA-384",
          "content" : "cfd68158d572057bb9114e066e44c5bfba57e549b90c547686fe97454c3c35a244f65e59384dc956396b65246cd193ae"
        },
        {
          "alg" : "SHA3-384",
          "content" : "f9596612f0d60b690ff12fd234de94fc5913aa097f2933859554328681fd6ea565d678dcd973353428b7f1786967e71f"
        },
        {
          "alg" : "SHA3-256",
          "content" : "a45b153a70c7e3c0fc9dfedc5421b3914a74f1ad7c98fba1f139bc5d763fadc7"
        },
        {
          "alg" : "SHA3-512",
          "content" : "97ae33e2d7665060ace246d0152af1d10d1d0eb64f2ada805eeee158ba21a3873a9a792f23476a99a322c5e8786f40ef2ae98186c592a1a5b8a1b0eb8028009e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.beust/jcommander@1.78?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://jcommander.org"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/cbeust/jcommander/issues"
        },
        {
          "type" : "vcs",
          "url" : "http://example.com/my-library/"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.github.jai-imageio/jai-imageio-core@1.4.0?type=jar",
      "publisher" : "jai-imageio GitHub group",
      "group" : "com.github.jai-imageio",
      "name" : "jai-imageio-core",
      "version" : "1.4.0",
      "description" : "Java Advanced Imaging Image I/O Tools API core, but without the classes involved with javax.media.jai dependencies, JPEG2000 or codecLibJIIO, meaning that this library can be distributed under the modified BSD license and should be GPL compatible.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6978d733bfb55c0a82639f724fe5f3bb"
        },
        {
          "alg" : "SHA-1",
          "content" : "fb6d79b929556362a241b2f65a04e538062f0077"
        },
        {
          "alg" : "SHA-256",
          "content" : "8ad3c68e9efffb10ac87ff8bc589adf64b04a729c5194c079efd0643607fd72a"
        },
        {
          "alg" : "SHA-512",
          "content" : "5fb01617717fdc6db514fe6da2b253c3d925326190a8ba101941f29bff6e3c147e6216c501ca66b4d4051d213b1c05fadb3707563782bfcc5674357338786c01"
        },
        {
          "alg" : "SHA-384",
          "content" : "abfb07fec06128894a0b8f59f9c98acde24721d776c82609c587f3ae1a4a124a0ac88e532244241edacd6fc7fc44b4e4"
        },
        {
          "alg" : "SHA3-384",
          "content" : "d1f54a3a9c259dfc8d724365bc7a26a03512b8585dfce02d3a3c8d47a1b23e9c495862846c896eb1202fe2611a3cb989"
        },
        {
          "alg" : "SHA3-256",
          "content" : "bfa5a77a8af9e45843dff421e3fba2b433966675ad00fed54958bc3abdfef1d8"
        },
        {
          "alg" : "SHA3-512",
          "content" : "b7a52696c362e73dba1aa0e82437f1b15a5463b887e18866d0925b0360a56a0980fc4b538e5c85767bc3bd4afc3d642c5355b6d681aaccea5837d5b726409d3f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "BSD 3-clause License w/nuclear disclaimer",
            "url" : "LICENSE.txt"
          }
        }
      ],
      "purl" : "pkg:maven/com.github.jai-imageio/jai-imageio-core@1.4.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/jai-imageio/jai-imageio-core"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://api.bintray.com/maven/jai-imageio/maven/jai-imageio-core-standalone"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/jai-imageio/jai-imageio-core/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/jai-imageio/jai-imageio-core/"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-csv@1.14.1?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-csv",
      "version" : "1.14.1",
      "description" : "The Apache Commons CSV library provides a simple interface for reading and writing CSV files of various types.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b8119900179992cf139005db63481103"
        },
        {
          "alg" : "SHA-1",
          "content" : "467354980fade8528b6a9f9bdf7f4f19ab9b3373"
        },
        {
          "alg" : "SHA-256",
          "content" : "32be0e1e76673092f5d12cb790bd2acb6c2ab04c4ea6efc69ea5ee17911c24fe"
        },
        {
          "alg" : "SHA-512",
          "content" : "f64fb9c4895532dd9f6cd448dfb4b35bfe9c4a81afc61e5bb13121f5142330ae97447200022b03988967a7cb89d3f48ce76e253238eb9f0bea57c09b352ac27b"
        },
        {
          "alg" : "SHA-384",
          "content" : "a20dfbaaedf8e08e13969761e456ed6caa2e4c513c4c1662654fd4348a40a57416675e8e2802b1f1d0ce2bf3353bed75"
        },
        {
          "alg" : "SHA3-384",
          "content" : "577f3ee1b77ff740d2c894f8dfff6e662f1329030d04a7b27cfcef910b711decc7b26654bb259067a11ce3ba923edb16"
        },
        {
          "alg" : "SHA3-256",
          "content" : "e645fdbb0c85c775adf273502ea361b6b432a9fcf0e32d9946226c4a28b0b959"
        },
        {
          "alg" : "SHA3-512",
          "content" : "f9e5e2e9ba824e86ea5b2c9cdab1edde6a253b5ca557ea6e6e6669e318c35ad17ee1162cb0cc90febf5b60ad3535e5a93bfa2e3b83191bf4cb462662b24cce74"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-csv@1.14.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-csv/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-csv/actions"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CSV"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-csv.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.reflections/reflections@0.9.11?type=jar",
      "group" : "org.reflections",
      "name" : "reflections",
      "version" : "0.9.11",
      "description" : "Reflections - a Java runtime metadata analysis",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "aca303b243a6c2225685b992ceea1cb3"
        },
        {
          "alg" : "SHA-1",
          "content" : "4c686033d918ec1727e329b7222fcb020152e32b"
        },
        {
          "alg" : "SHA-256",
          "content" : "cca88428f8a8919df885105833d45ff07bd26f985f96ee55690551216b58b4a1"
        },
        {
          "alg" : "SHA-512",
          "content" : "2bf16b69319ef2a3374f4170629fe7652bafb83971a81a55f16e15735c688f6942dc82be5a2da9debbd1316a05f6192a020d1097571275bf7a0d266ee5c063d8"
        },
        {
          "alg" : "SHA-384",
          "content" : "a1abf286e701b99c877d4904031f5954e7c2ec314615b7fefec4763e404b9c5364fe0f972f9e2d609fcd761898711ff2"
        },
        {
          "alg" : "SHA3-384",
          "content" : "13704be7f40599e4dfa56d9e1368b8df98f09e157203b5d83e11c676755313f68ae95e565f15d5adf3775c7fcbaf76ba"
        },
        {
          "alg" : "SHA3-256",
          "content" : "bb3bfe0d12dcfe428e88b13cadfb9954b9f3327e84bffd6a856efb3f8aec8473"
        },
        {
          "alg" : "SHA3-512",
          "content" : "448c13aa105204ba1f41246c81457a6d8e78c6a14355a384e6c2fa114dde64fa717b317c6cedae8afe5a9bd8d0b77309121a7f3233df90f8f9f32d82ddcfdb97"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "WTFPL",
            "url" : "http://www.wtfpl.net/about/"
          }
        },
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.reflections/reflections@0.9.11?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://github.com/ronmamo/reflections"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/ronmamo/reflections/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "http://groups.google.com/group/google-code-reflections"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/ronmamo/reflections/issues"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.javassist/javassist@3.21.0-GA?type=jar",
      "publisher" : "Shigeru Chiba, www.javassist.org",
      "group" : "org.javassist",
      "name" : "javassist",
      "version" : "3.21.0-GA",
      "description" : "Javassist (JAVA programming ASSISTant) makes Java bytecode manipulation simple. It is a class library for editing bytecodes in Java.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "3dba2305f842c2891df0a0926e18bcfa"
        },
        {
          "alg" : "SHA-1",
          "content" : "598244f595db5c5fb713731eddbb1c91a58d959b"
        },
        {
          "alg" : "SHA-256",
          "content" : "7aa59e031f941984af07dacc6ca85e6dc9bd3a485e9aa2494cbc034efa1225d0"
        },
        {
          "alg" : "SHA-512",
          "content" : "28b0c1ab9d5e74d0b5045f152e7ef6fc29bf6c27c085f6b874dadddacb7e68f49c1d9a5e97cf5002ee5076a63ce55a5c297f0427345728244efe0c8971155bd0"
        },
        {
          "alg" : "SHA-384",
          "content" : "0dbc4a6fafe6dcbbb8914cb27460af9fed505ebb8b7a1a2b403fd82f580ff6d58d8b7f3f94b3b1ec8e3b755c093ca5e4"
        },
        {
          "alg" : "SHA3-384",
          "content" : "adb47d3e75fff97972e79b867fdf4848517231c19b4cb95796e94bae06e4b29901b691daf1a47a8fb2a6a35abda9b9f1"
        },
        {
          "alg" : "SHA3-256",
          "content" : "30705a98ba9704764ddf58f0235b654a08108087fa4aab249077318d3b4863c6"
        },
        {
          "alg" : "SHA3-512",
          "content" : "88759fcf8a306a85bd95973b30abbbee6a0a4b40943d308b9218ff8c435bf872b9207ae5d50a11e1ea197c9d9787242569f5541e3714c848093535ec0c6dde3d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MPL-1.1"
          }
        },
        {
          "license" : {
            "id" : "LGPL-2.1-only"
          }
        },
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.javassist/javassist@3.21.0-GA?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.javassist.org/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.jboss.org/nexus/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://jira.jboss.org/jira/browse/JASSIST/"
        },
        {
          "type" : "vcs",
          "url" : "scm:git:git@github.com:jboss-javassist/javassist.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.jdom/jdom2@2.0.6.1?type=jar",
      "publisher" : "JDOM",
      "group" : "org.jdom",
      "name" : "jdom2",
      "version" : "2.0.6.1",
      "description" : "A complete, Java-based solution for accessing, manipulating, and outputting XML data",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "5be72710c66f3c9ba71f8009e92597d1"
        },
        {
          "alg" : "SHA-1",
          "content" : "dc15dff8f701b227ee523eeb7a17f77c10eafe2f"
        },
        {
          "alg" : "SHA-256",
          "content" : "0b20f45e3a0fd8f0d12cdc5316b06776e902b1365db00118876f9175c60f302c"
        },
        {
          "alg" : "SHA-512",
          "content" : "81642db76358fbf131dfe9c2f1d9c280fc23b6bfde6a16a2d36dacc490a1a2af4e0fb4abb5cd78005718bb1d158a42fd6834cd2bfe616ec59625df01951f2478"
        },
        {
          "alg" : "SHA-384",
          "content" : "b50c9b35d4b884a4f6174febd926533d1a23d1779a5b757b2ec95fbf8560771379b1abf138b150b170c3ed7bfbea5fa1"
        },
        {
          "alg" : "SHA3-384",
          "content" : "2987085748db12fa958ccf2deca4d9307ef4a96730ace701afb39f828b1f513190497f474f26b5b56c8076135f56f088"
        },
        {
          "alg" : "SHA3-256",
          "content" : "a33b1e2a9308fe86fe514356807efd152c7be0fdae8e77b28de8c392c34ddcc8"
        },
        {
          "alg" : "SHA3-512",
          "content" : "08eafd9535e52f04650bc841b1f92bf2752938d11fab955c631cc448d6e615b281841c8290f102448927d6d29bcd6a8223eafe9e6f36a20ec94b92fe91aabdf2"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "Similar to Apache License but with the acknowledgment clause removed",
            "url" : "https://raw.github.com/hunterhacker/jdom/master/LICENSE.txt"
          }
        }
      ],
      "purl" : "pkg:maven/org.jdom/jdom2@2.0.6.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.jdom.org"
        },
        {
          "type" : "mailing-list",
          "url" : "http://jdom.markmail.org/"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.zeroturnaround/zt-zip@1.13?type=jar",
      "publisher" : "ZeroTurnaround",
      "group" : "org.zeroturnaround",
      "name" : "zt-zip",
      "version" : "1.13",
      "description" : "The project is intended to have a small, easy and fast library to process ZIP archives. Either create, modify or explode them. On disk or in memory.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "cfbc25dd7fafb4d9eced7ab0e8b02715"
        },
        {
          "alg" : "SHA-1",
          "content" : "3167064ecff25549375645d0afdd5c7ebbc232db"
        },
        {
          "alg" : "SHA-256",
          "content" : "d0ed92c019633916c7393afa3adcdd6aa116bbb0f047420e0f1ed8df85cdc47b"
        },
        {
          "alg" : "SHA-512",
          "content" : "a9ed716673f3297bb4c791d3abff58dbc811b81c4528af374957690cb4e8d3bb9b84e729b65f4efe59eb54be98144f10294bb04670e95c2b4cbf5c84f42a7fb1"
        },
        {
          "alg" : "SHA-384",
          "content" : "8908c81cf601d7e6bcd72a47f069a033fdf1dfbbe0134d5bbb7c953ee6ff63c10e3a7a2bf0ecd19686188672a1e4dafa"
        },
        {
          "alg" : "SHA3-384",
          "content" : "85fccb839fde22501b587327adbabfb80d80a6c88bf5cd0a53d249fc59bae1f6901a78feae85e61a4c4f0d244e78da1d"
        },
        {
          "alg" : "SHA3-256",
          "content" : "94f0b9ba20801d5cb73895df44945c3546f4a3f291668210e4dcd710ec925c96"
        },
        {
          "alg" : "SHA3-512",
          "content" : "417c81d8d530fce575c266b47a3a84cc238d4b787c90066d7200605258a1abdc64a924fc0eec48be5af932306d998fb79af759aa32a3e7a3c644a08bb4fb7207"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.zeroturnaround/zt-zip@1.13?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/zeroturnaround/zt-zip"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "vcs",
          "url" : "scm:git:git@github.com:zeroturnaround/zt-zip.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.poi/poi@5.2.5?type=jar",
      "publisher" : "Apache Software Foundation",
      "group" : "org.apache.poi",
      "name" : "poi",
      "version" : "5.2.5",
      "description" : "Apache POI - Java API To Access Microsoft Format Files",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "c7725f44e62223d1f37e7a4883f01425"
        },
        {
          "alg" : "SHA-1",
          "content" : "7e00f6b2f76375fe89022d5a7db8acb71cbd55f5"
        },
        {
          "alg" : "SHA-256",
          "content" : "352e1b44a5777af2df3d7dc408cda9f75f932d0e0125fa1a7d336a13c0a663a7"
        },
        {
          "alg" : "SHA-512",
          "content" : "32eeaff6e8fcd587bcf5b2e1a7d10745bad66d3def9f228c4df124dd401193dc5df34c1304448ac8d9b019adb8ee321f09bf5d00e14c7665ddf0c33de5570c85"
        },
        {
          "alg" : "SHA-384",
          "content" : "c886f4c610f06eb39b85ce2636a47f8f26fffba19766704715682704ed80b762553b46e87bc5b4018d82a203176b0778"
        },
        {
          "alg" : "SHA3-384",
          "content" : "72eb448c9f16ca240b042b995993511ec46326f583bcc1d3b8cbe92073688b787ac5d3942fc48d84526555f51ea37a1e"
        },
        {
          "alg" : "SHA3-256",
          "content" : "c92f71cfd416fd0db31ae3b0dd86c4375b16bc6a8e019ac2429bb930d1c8c84b"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c7f63fc46d89eed6042125c551d4fa97f03f088bbe220694a19bd846655331fa8f0e620d63d5ae7e48248dfa61b9851980bb54bf2f7bc145b9f52239a41fd564"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.poi/poi@5.2.5?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://poi.apache.org/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/poi-user/"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-collections4@4.4?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-collections4",
      "version" : "4.4",
      "description" : "The Apache Commons Collections package contains types that extend and augment the Java Collections Framework.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4a37023740719b391f10030362c86be6"
        },
        {
          "alg" : "SHA-1",
          "content" : "62ebe7544cb7164d87e0637a2a6a2bdc981395e8"
        },
        {
          "alg" : "SHA-256",
          "content" : "1df8b9430b5c8ed143d7815e403e33ef5371b2400aadbe9bda0883762e0846d1"
        },
        {
          "alg" : "SHA-512",
          "content" : "5939c9931eb9557caee3b45fe1dd9ce54cabdc4e6182ed7faac77e1a866dd0cb602bfa4ece2f3316d769913366106bd2b61bf3bb5faad1fa7d808124c06dec0f"
        },
        {
          "alg" : "SHA-384",
          "content" : "74059fd8f61c366ed448e102256fdbd1db0d690501c2c296c80f3657a2c0d8ade3dd9533b1431cc29786bbb624195f46"
        },
        {
          "alg" : "SHA3-384",
          "content" : "15034fb39842620bf3b152cd90bce252644ebc6a29fafd6dcf5e1f3925f09ccea2ae4e195817450f996b25a7081a9a3f"
        },
        {
          "alg" : "SHA3-256",
          "content" : "1716630a207a8f4a83bf9ef19245f46c87d62bfebbcfa1227101e6dd51da8fa5"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c290c98c7b5825d024644ec1162804a1f9ad4da3bb5324d147ddffee6cc79e3c0ecc3825d6116502f2ca292ec80c4e7f8d49a03542dda8f4d58b0dc8228923c5"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-collections4@4.4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-collections/"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/COLLECTIONS"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://git-wip-us.apache.org/repos/asf?p=commons-collections.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-math3@3.6.1?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-math3",
      "version" : "3.6.1",
      "description" : "The Apache Commons Math project is a library of lightweight, self-contained mathematics and statistics components addressing the most common practical problems not immediately available in the Java programming language or commons-lang.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "5b730d97e4e6368069de1983937c508e"
        },
        {
          "alg" : "SHA-1",
          "content" : "e4ba98f1d4b3c80ec46392f25e094a6a2e58fcbf"
        },
        {
          "alg" : "SHA-256",
          "content" : "1e56d7b058d28b65abd256b8458e3885b674c1d588fa43cd7d1cbb9c7ef2b308"
        },
        {
          "alg" : "SHA-512",
          "content" : "8bc2438b3b4d9a6be4a47a58410b2d4d0e56e05787ab24badab8cbc9075d61857e8d2f0bffedad33f18f8a356541d00f80a8597b5dedb995be8480d693d03226"
        },
        {
          "alg" : "SHA-384",
          "content" : "95d1186d9ca06a3ea2e6437ddec3a55698e2493d3e72f6f554746b74fa929892bd71a2ab501a4e7b1ce56b7cd64e7ab4"
        },
        {
          "alg" : "SHA3-384",
          "content" : "f85bb3e46a00fc4940a3be1331301302b0eb728e2d1fe2c1842d4761e5a0bc7a420c0c705ae60250ca1c7b03d3694b9e"
        },
        {
          "alg" : "SHA3-256",
          "content" : "919c15ae4b1aef2a58aa6ea4b700bc5562e78dbc382f3393169425ca91ad368c"
        },
        {
          "alg" : "SHA3-512",
          "content" : "dbe54d586c898cdbd7df6c31c131ca3525db17fcea5c7f5da8cbfe617e2afc667289290c76771ec5c9567a56fb2b177b0a31d67abcc656410c90287da4d88999"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-math3@3.6.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://commons.apache.org/proper/commons-math/"
        },
        {
          "type" : "build-system",
          "url" : "https://continuum-ci.apache.org/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/MATH"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://git-wip-us.apache.org/repos/asf?p=commons-math.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.zaxxer/SparseBitSet@1.3?type=jar",
      "publisher" : "Zaxxer.com",
      "group" : "com.zaxxer",
      "name" : "SparseBitSet",
      "version" : "1.3",
      "description" : "An efficient sparse bitset implementation for Java",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "fbe27bb4c05e8719b7fff5aa71a57364"
        },
        {
          "alg" : "SHA-1",
          "content" : "533eac055afe3d5f614ea95e333afd6c2bde8f26"
        },
        {
          "alg" : "SHA-256",
          "content" : "f76b85adb0c00721ae267b7cfde4da7f71d3121cc2160c9fc00c0c89f8c53c8a"
        },
        {
          "alg" : "SHA-512",
          "content" : "c5609f2fdd72ab2e7461a03c85004a47941b883926f84665302bfff35aba5fa48d4ce47ac24314a3bc2dd7c70e1f8d824567e5026fd17485b06c44999942af5f"
        },
        {
          "alg" : "SHA-384",
          "content" : "bb6204a7383b1ad02f5f314c65ad50e264d4f7818e1aeaf7b45b28124dc740eebee3ff74fb07f09787dcd3985fe6de17"
        },
        {
          "alg" : "SHA3-384",
          "content" : "ea39ffd286957150adcc1fd5aa392a8f02a5a7b7efd95d0dbbaa6d359f3a376f0adb4b953f9c54087670bbab6625d653"
        },
        {
          "alg" : "SHA3-256",
          "content" : "361ed8bdf596a2f4ea61b0ed452ceabddbf3ff581f8dafa203e27e537c558f75"
        },
        {
          "alg" : "SHA3-512",
          "content" : "5ea52aee7b1f6e44996cff11fcb11c72c63c1558fd90824eb65e758cd375d038c9c441f7e52a8b234d8dbac26d9891146de2c5d6008c71bae7566c771abae418"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.zaxxer/SparseBitSet@1.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/brettwooldridge/SparseBitSet"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/brettwooldridge/SparseBitSet.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.poi/poi-ooxml@5.2.5?type=jar",
      "publisher" : "Apache Software Foundation",
      "group" : "org.apache.poi",
      "name" : "poi-ooxml",
      "version" : "5.2.5",
      "description" : "Apache POI - Java API To Access Microsoft Format Files",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "53651e835a9dbb5c2eafcb540ed76fd6"
        },
        {
          "alg" : "SHA-1",
          "content" : "df9f2c52371eeba24db8ea8cafa77285c3cc0742"
        },
        {
          "alg" : "SHA-256",
          "content" : "c6ad01a10cefa1d2a9c1b552bd4293a3eca29b513353f1ec814041d38da9ec5b"
        },
        {
          "alg" : "SHA-512",
          "content" : "212c26c3e4c30b9b6a66d9e1f26170eb52068831b0c7ce1d0e46ef18eb98a52753158343ec203d927cdfd4822a214b752c8e60de20c343956996100cf3812785"
        },
        {
          "alg" : "SHA-384",
          "content" : "4ba7e7c54536228ce043e67e3d25cd6bb7b06827e5147f39f8fcd011a7159e83212a203826bfc4f1055531a388c1a37c"
        },
        {
          "alg" : "SHA3-384",
          "content" : "9a72843e8220ab8edc1902bf415fafebdef3e1172f9c3bc80bc5730dbfc8dd7045d18c253baa53bada831098431c1c54"
        },
        {
          "alg" : "SHA3-256",
          "content" : "2c0a9346cc2aa74cc5fc8dd80dd00937cd60bcd467a3402f011b4691dff038d8"
        },
        {
          "alg" : "SHA3-512",
          "content" : "8f11f1d7c53dab552cbf5760a1b2faf2e63e9912ea6f09f942ba3a6600cfafa2d508b38c11afcf9f6489063a6826a9f2cf110ff5f9c8dff2eff8832e14a561ce"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.poi/poi-ooxml@5.2.5?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://poi.apache.org/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/poi-user/"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.github.virtuald/curvesapi@1.08?type=jar",
      "group" : "com.github.virtuald",
      "name" : "curvesapi",
      "version" : "1.08",
      "description" : "Implementation of various mathematical curves that define themselves over a set of control points. The API is written in Java. The curves supported are: Bezier, B-Spline, Cardinal Spline, Catmull-Rom Spline, Lagrange, Natural Cubic Spline, and NURBS.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "fc3aed90346691e7c79da06bb6606beb"
        },
        {
          "alg" : "SHA-1",
          "content" : "3d3d36568154059825089b289dcfca481fe44e2c"
        },
        {
          "alg" : "SHA-256",
          "content" : "ad95b08b8bbf9d7d17e5e00814898fa23324f32bc5b62f1a37801e6a56ce0079"
        },
        {
          "alg" : "SHA-512",
          "content" : "772b06dbd310a8a06a0c2d3639ad2d16c54a78bcb845274b303d140699ebb15c641d4e078f28a75467fc05b5b3d35bc2c05f7fc44324dcb1c96f76f90378822e"
        },
        {
          "alg" : "SHA-384",
          "content" : "48d790121d66e144173b87ae4c91158157b1bc93e6a36ffe4f97d42bf669e26c27b6604de1ecda2e52c8b03dcf2910fb"
        },
        {
          "alg" : "SHA3-384",
          "content" : "4a3836dfde7ac4f58e3a6b19f85a4ba7278d1283f50bb77e13459065b78ddf6935ecdfb4d7fba4ce480f684db588fbc9"
        },
        {
          "alg" : "SHA3-256",
          "content" : "f60e3def4ffb7d6cd36ab667ae9339ca21b4459c88999c906b0afd0090fb5eab"
        },
        {
          "alg" : "SHA3-512",
          "content" : "fafdbb6f260d9934fd3b9344c409dde3b59ca887e80a60f0146c18684816a093ca9cf79bda87a412cbdc1a9e36eabe8619673e28b3a946881a8eccc46568596e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/com.github.virtuald/curvesapi@1.08?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/virtuald/curvesapi"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/virtuald/curvesapi"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.poi/poi-ooxml-lite@5.2.5?type=jar",
      "publisher" : "Apache Software Foundation",
      "group" : "org.apache.poi",
      "name" : "poi-ooxml-lite",
      "version" : "5.2.5",
      "description" : "Apache POI - Java API To Access Microsoft Format Files",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "5cfc5c5f7132a00ad580e899dc71e7a4"
        },
        {
          "alg" : "SHA-1",
          "content" : "eaa61452d8f0d13080fbb4757a392f09f90e4c49"
        },
        {
          "alg" : "SHA-256",
          "content" : "6d4ce6736c422c52e47ffbfa08c784e1b8c188efb69583ac001a0ab16022d774"
        },
        {
          "alg" : "SHA-512",
          "content" : "b27dc9632eabbb17f92b877049af06e03a0423bfe66605601ef7998ac60d9c3569745e82123cc1c2492081e280860f9c1eb987b51095edd95a822c635ec73e5f"
        },
        {
          "alg" : "SHA-384",
          "content" : "3779718d67b3fdcdb8099aa04fda3967bbb88aafc69833fa1a28363bb89a56566d7765b4a7bff9e05cf16944d7bbf156"
        },
        {
          "alg" : "SHA3-384",
          "content" : "90f8b56efd464bf813f09465e94aafe84a516f5d810abf392bbb1f077dc78b9d255feeb83ec9dd682ea586f7299dda5c"
        },
        {
          "alg" : "SHA3-256",
          "content" : "971eb07ed43d2f997cea912792917454228d8f383fed2c3ee7b58e1d1e50e8a2"
        },
        {
          "alg" : "SHA3-512",
          "content" : "6cbe68a24112fef6b78de7d896ab8a9d1a93402e93cdede029e242dfba14cab51fc79c2eebff19bf8a261373133921db485cbb288ea09bfc7d7aeea9a3d3691b"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.poi/poi-ooxml-lite@5.2.5?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://poi.apache.org/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/poi-user/"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.xmlbeans/xmlbeans@5.2.2?type=jar",
      "publisher" : "XmlBeans",
      "group" : "org.apache.xmlbeans",
      "name" : "xmlbeans",
      "version" : "5.2.2",
      "description" : "XmlBeans main jar",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b9eefb69e4ec1ffb67d15a477a48a2ea"
        },
        {
          "alg" : "SHA-1",
          "content" : "586ffe10ae9864e19e85c24bd060790a70586f72"
        },
        {
          "alg" : "SHA-256",
          "content" : "0fb2fa9e43800f0411c1363c606cc1355e7e3592d97400b4f6e80db53d2e66a4"
        },
        {
          "alg" : "SHA-512",
          "content" : "bd51eb5e918e1d83e93ff4bd02934d311ead906ffbe0b7bb93fa01172e081e8e6e0120eac77210397ac6c5bf372157fd61d9bbd557ff970bf3ad6dbca63fc059"
        },
        {
          "alg" : "SHA-384",
          "content" : "e18e44fe6b339be3b513f3ebce1b6ea14fb4cd3b183253cd7f7e7314bdd6145f485b149219fd189554c5f5f8af794c20"
        },
        {
          "alg" : "SHA3-384",
          "content" : "c9d5a19aa06407a40543955cd4360b1862f24e594def6eb16039109fa9df97cdaf0e84eb246bf6080a9977c9546683ea"
        },
        {
          "alg" : "SHA3-256",
          "content" : "31a68e46ed1a471616f26e7c217556991b9d332ce2afa46d7eae8710e29e7c3b"
        },
        {
          "alg" : "SHA3-512",
          "content" : "36955da68bd1f804b75ea34844d2fa45aee25d531c47e7941ecb6df221a5eed42a595803b5f9658fed1f3bc434871efe5655b90fd83ef84dd2ddb5f1d16645a1"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.xmlbeans/xmlbeans@5.2.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://xmlbeans.apache.org/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/XMLBEANS"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?user@poi.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://svn.apache.org/repos/asf/xmlbeans/"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.github.mifmif/generex@1.0.2?type=jar",
      "group" : "com.github.mifmif",
      "name" : "generex",
      "version" : "1.0.2",
      "description" : "Generex A Java Library for regex to Strings generation",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a832db42f9e1c4f76930f547f6f80998"
        },
        {
          "alg" : "SHA-1",
          "content" : "b378f873b4e8d7616c3d920e2132cb1c87679600"
        },
        {
          "alg" : "SHA-256",
          "content" : "8f8ce233c335e08e113a3f9579de1046fb19927e82468b1bbebcd6cba8760b81"
        },
        {
          "alg" : "SHA-512",
          "content" : "a0993c16f82bd0ce6072f4bea6d001a49e9203b35290f10c6a3f2b2dd385f08302b4531a0a825ad5c000826369aba828ab8fad49fcefca4d7351a8e0d825b9a8"
        },
        {
          "alg" : "SHA-384",
          "content" : "9cc05f3e6a2d802d5b39cadd0b4ca0bc94726f1b4e0f619b10d53f5e2f8b8663f620b0618ea499e152b431cd055dbd44"
        },
        {
          "alg" : "SHA3-384",
          "content" : "03e450ea034f2c92b21af2956676cae06b50f9c6eb7def0267da8806595fc4486e493369a31602640fd286cb563a7b89"
        },
        {
          "alg" : "SHA3-256",
          "content" : "960afdbf525f54fc30f33e8e1d18cce761692fced186dccf79fbdd5a13efefb5"
        },
        {
          "alg" : "SHA3-512",
          "content" : "5de6504499682fffc0a49cbece02341a045e05f04da880a8ca185931ab792771a4b3b9a96887bd9e2889c1213c7b7e547b019c26b7169903ee96b774de61b68f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.github.mifmif/generex@1.0.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/mifmif/Generex/tree/master"
        },
        {
          "type" : "build-system",
          "url" : "https://travis-ci.org/mifmif/Generex/builds"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/mifmif/Generex.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/dk.brics.automaton/automaton@1.11-8?type=jar",
      "group" : "dk.brics.automaton",
      "name" : "automaton",
      "version" : "1.11-8",
      "description" : "A DFA/NFA (finite-state automata) implementation with Unicode alphabet (UTF16) and support for the standard regular expression operations (concatenation, union, Kleene star) and a number of non-standard ones (intersection, complement, etc.)",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "3467dcbbba2fe68a4e07a5826988e034"
        },
        {
          "alg" : "SHA-1",
          "content" : "6ebfa65eb431ff4b715a23be7a750cbc4cc96d0f"
        },
        {
          "alg" : "SHA-256",
          "content" : "a24475f6ccfe1cc7a4fe9e34e05ce687b0ce0c6e8cb781e0eced3b186482c61e"
        },
        {
          "alg" : "SHA-512",
          "content" : "e00b4ddf558275509f263850b1ff04097315000baeda5cab469b555083412922317e92dcacadf70179851e4068f3f574fdab9ef36b1612d352d072e57d49046d"
        },
        {
          "alg" : "SHA-384",
          "content" : "9c107955c2502954864a484a0f23c741231a9e5b61c376ee45df5fd816c31308ca8a9380b1b4b1e07aefb3bf24edab34"
        },
        {
          "alg" : "SHA3-384",
          "content" : "20301590b7ef4af5e1f025220f4f4ff759942fecb016d81e160853ec6d32ee227b07976ddaa8aad503976cbb39f15f07"
        },
        {
          "alg" : "SHA3-256",
          "content" : "42e6f6cdfa5b71a2c985a9dedde83f828955e640598937b7fb6ca4fc8a62e702"
        },
        {
          "alg" : "SHA3-512",
          "content" : "51e80070179c7bc3fdafa31b6da3555a36c7c749bb11ed22f49cb9a9454db1b987d92238b6d5fdea5e08ed6c87f797ac38cb796675e56e2aa1ced82ceb9358e9"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-4-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/dk.brics.automaton/automaton@1.11-8?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.brics.dk/automaton/"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/net.java.dev.jna/jna@5.4.0?type=jar",
      "group" : "net.java.dev.jna",
      "name" : "jna",
      "version" : "5.4.0",
      "description" : "Java Native Access",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "25ba0e5d99b222d6fab22300d0c4e79f"
        },
        {
          "alg" : "SHA-1",
          "content" : "3e25bc70dd7750a3f0fea5bd1467708280bea04e"
        },
        {
          "alg" : "SHA-256",
          "content" : "7939b06f62747d2615416479c739fc8ebdcf48bdd1d554bf7409e686fa1ff0ea"
        },
        {
          "alg" : "SHA-512",
          "content" : "26f2b4fb6a45ce7de47525d3e350183e11476bff858040b524a92cbcd85c59aa6041a34ea71c83edf68b18d6db59268e40393e5b9e5f0589c32c453fe51c1b8d"
        },
        {
          "alg" : "SHA-384",
          "content" : "ab86723cd141644648c761b340d3806682d6836da794c16f3084d9780c738158f31abab1348daf6c1f7f7cf5aa176766"
        },
        {
          "alg" : "SHA3-384",
          "content" : "087a94d2ad9ff092602cf864ef78a09963cf34ff6f0a2024f33173ddecb472d2b7638c7dd235c6f2678911e1cc04e669"
        },
        {
          "alg" : "SHA3-256",
          "content" : "aa84c323053664020168569af2e69f7e74408e0e58d64b3619d9f6d34e88edf2"
        },
        {
          "alg" : "SHA3-512",
          "content" : "a30885ad92cb0f5b08817109f91e5c88aad35a545667aabd15d5a3380c276006aab7747153a221999976a626b27d694ae2ed6c346d0b54b7d2e3e35c1702fc27"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "LGPL, version 2.1",
            "url" : "http://www.gnu.org/licenses/licenses.html"
          }
        },
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/net.java.dev.jna/jna@5.4.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/java-native-access/jna"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/java-native-access/jna"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/net.java.dev.jna/jna-platform@5.4.0?type=jar",
      "group" : "net.java.dev.jna",
      "name" : "jna-platform",
      "version" : "5.4.0",
      "description" : "Java Native Access Platform",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "dcbf2bc1191394cc91e877637fdab520"
        },
        {
          "alg" : "SHA-1",
          "content" : "a8267193887c38418af986adae090ee5d2593f48"
        },
        {
          "alg" : "SHA-256",
          "content" : "890391047a225a7a599f33e665f9bedaee2037d9fe6f1b23d9d2369d69f0f28f"
        },
        {
          "alg" : "SHA-512",
          "content" : "7a860543dc1a47de8968cee0ff5f8642026863d771b64f2d88469099b1d66f4b8badbbaa95e426be0ba77fd85e17b389b2243f479c8a93ed3f340ebe03c59865"
        },
        {
          "alg" : "SHA-384",
          "content" : "34d2f599f396025d79ed9d2ceb24f51b0ade679054aa79f45d53b96475df8aa9ce957983bc96c8444b954c13d3c0643c"
        },
        {
          "alg" : "SHA3-384",
          "content" : "5cbd830786a1278a5399366a353a8b93f7cbdafcceeda03fe934b9d076dba8bf26dbbeccb9e2b5d0082416aca59aca03"
        },
        {
          "alg" : "SHA3-256",
          "content" : "9329305f580f009985667cc5eb559788f1aa3a310703c17ef60e2ce0df1dde31"
        },
        {
          "alg" : "SHA3-512",
          "content" : "ab7bdfd58f99184ee70e788769d1bcf1304ed3bfb560910f76c9156c2bb6cf75660c1ae2a40168e37f3a98accc9fe8badec3a5fc84d4835ec6f76c9766cadeb7"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "LGPL, version 2.1",
            "url" : "http://www.gnu.org/licenses/licenses.html"
          }
        },
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/net.java.dev.jna/jna-platform@5.4.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/java-native-access/jna"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/java-native-access/jna"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.pdfbox/pdfbox@2.0.35?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.pdfbox",
      "name" : "pdfbox",
      "version" : "2.0.35",
      "description" : "The Apache PDFBox library is an open source Java tool for working with PDF documents.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6c8e7e6ba84beca3235463ba40b81470"
        },
        {
          "alg" : "SHA-1",
          "content" : "3004054ba842f257fe3adbcfd43b1b1f0b1dbb83"
        },
        {
          "alg" : "SHA-256",
          "content" : "76c38618da608ef947538c60e0214f5adbf8b047973d6e32da23fcb82cbab11b"
        },
        {
          "alg" : "SHA-512",
          "content" : "9c6abfabdc78172210ef37f3dad44367fd3bfe08ae863e16193fe1e66be8c216368b426bf86f4740621c6f605447baae282f5538606dfcf9b0e8ca4a3c4dee65"
        },
        {
          "alg" : "SHA-384",
          "content" : "3916b9762f09d30815bc60a3287f9009e3ed2063f23198a165f825329fd37c774e580d2af01b5b55418c1a0aa2879ae1"
        },
        {
          "alg" : "SHA3-384",
          "content" : "854130f95f7bd7f55bbbaf91043e351c5342a95d20c322aa39ad523fe7ca9d07a2172e410c67a3c35e9bb6ca1dffc2a6"
        },
        {
          "alg" : "SHA3-256",
          "content" : "8e2a5a315aafdfeb173f636d3b8521a15065758ffc71325e53ddf74b541b9dc6"
        },
        {
          "alg" : "SHA3-512",
          "content" : "fe2410ecdba95722f3367fa8d705781a04181112d366d134afe64706f6949caa6aeffbc95eb8f4fdf83607968acc7a9ab0ab44679991dab0bdb1d8759277c832"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.pdfbox/pdfbox@2.0.35?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.apache.org/pdfbox-parent/pdfbox/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/PDFBOX"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://svn.apache.org/viewvc/pdfbox/tags/2.0.35/pdfbox"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.pdfbox/fontbox@2.0.35?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.pdfbox",
      "name" : "fontbox",
      "version" : "2.0.35",
      "description" : "The Apache FontBox library is an open source Java tool to obtain low level information from font files. FontBox is a subproject of Apache PDFBox.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "fd466b243aa4dcabfdd8ead8f4c1a368"
        },
        {
          "alg" : "SHA-1",
          "content" : "2abe1c274f31aa48931558d5b55d489b8c6f7da4"
        },
        {
          "alg" : "SHA-256",
          "content" : "4d4acdba1aab77bebe3105b47168c2d54a1dc0df85b76c5ee0ada1ad9863a47f"
        },
        {
          "alg" : "SHA-512",
          "content" : "58222c26f5b4d70ea4b205ba7a9e8f980f25144867d27e9a10b0c3ce527b17bae6fde7ffe5dbfad88af9bd22bebbee68cb00b482d5386a2c27c1a913714c3eec"
        },
        {
          "alg" : "SHA-384",
          "content" : "bd80d585db270d079c98fa1dffc0381f759ff585aea5a9697c25c130b7b458a3fbebc84ce8b5afae5738a8112e00b5ee"
        },
        {
          "alg" : "SHA3-384",
          "content" : "cd3f36acfd6cc990a33dccc29e6db762145f09bcb7992dfb2b504a2ae1b54cd6ce761606a80709daacafef2d29e7a88c"
        },
        {
          "alg" : "SHA3-256",
          "content" : "c1d5bd9854d7f939079ea97216f08a785a88a4ff4081558728cd6ff6d41df47d"
        },
        {
          "alg" : "SHA3-512",
          "content" : "ae6f6cebeac9cedafe2a46c2f7124cb8e99bc437bf5b9ad4f58b8703321ab9d12e48b21880863f1a9d1987175993e76360b8410cdf4498af6e965614c5cd5a7a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.pdfbox/fontbox@2.0.35?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://pdfbox.apache.org/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/PDFBOX"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://svn.apache.org/viewvc/pdfbox/tags/2.0.35/fontbox"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.pdfbox/preflight@2.0.35?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.pdfbox",
      "name" : "preflight",
      "version" : "2.0.35",
      "description" : "The Apache Preflight library is an open source Java tool that implements a parser compliant with the ISO-19005 (PDF/A) specification. Preflight is a subproject of Apache PDFBox.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4ea22c36f43a956705303c9f0c852c09"
        },
        {
          "alg" : "SHA-1",
          "content" : "0278aba008b385e9a6b66f0d6126623ed8a5a26a"
        },
        {
          "alg" : "SHA-256",
          "content" : "63e5ad195cd4d139bd7df5adbfea762c98b32caa6eb1a20520b2f75e3d2ae9d5"
        },
        {
          "alg" : "SHA-512",
          "content" : "91075491c4bea63b73312d4b8d723f8124a5c59604228c541f361b14ff70f31807564117e6e25056a4e53e699f9ee8d2619917c4b3842b552c6896639341c735"
        },
        {
          "alg" : "SHA-384",
          "content" : "7f2581fa772886a77168ef17888f2e7e814f549d7c428a4f57810aa8a9a91996c761df5e169bbbc8d5a39492236bc2fd"
        },
        {
          "alg" : "SHA3-384",
          "content" : "2d9d13eb43ee894aeaafb95a737e9de02a969e44baca7bb53b05ef2b1563b316252484416cc87db564faefd2a398b97d"
        },
        {
          "alg" : "SHA3-256",
          "content" : "0606bfda0f654539f97df649920c49ee64f1829a7642baedd5651f7d926b9afe"
        },
        {
          "alg" : "SHA3-512",
          "content" : "8f68cc989aabb3af877b7bce40784f25bdb26c97ba1ba5cb1daae9a5859c1b5b2dcb0a8a37828c1096cb9ddd20533e9fcfe5c47646441d0d9e6549481d4d09b5"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.pdfbox/preflight@2.0.35?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.apache.org/pdfbox-parent/preflight/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/PDFBOX"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://svn.apache.org/viewvc/pdfbox/tags/2.0.35/preflight"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.pdfbox/xmpbox@2.0.35?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.pdfbox",
      "name" : "xmpbox",
      "version" : "2.0.35",
      "description" : "The Apache XmpBox library is an open source Java tool that implements Adobe's XMP(TM) specification. It can be used to parse, validate and create xmp contents. It is mainly used by subproject preflight of Apache PDFBox. XmpBox is a subproject of Apache PDFBox.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "ce8d69373b01936f9abe6b9de8aa9b81"
        },
        {
          "alg" : "SHA-1",
          "content" : "1cb5db99f625fe6bbdf53c15b561eb096b20d400"
        },
        {
          "alg" : "SHA-256",
          "content" : "7278e0f4a51c71a421962db851490eda8c627b3d303cf6bf50affbcbf1ae79cf"
        },
        {
          "alg" : "SHA-512",
          "content" : "3129757d6eec92a251b5c89fd9001aa96ff661bd8072eadb4dc61328988298c1ab9b4bab2c2f980b79fc0a02bb79f5e4711da37f6797f352e1b90b863e183ad1"
        },
        {
          "alg" : "SHA-384",
          "content" : "06e23001a00c7d674c19fdc5eb767f1a3bbe0385dc8f379b5958a84dd444afc38cf2498a8270fcae4faba91fd47e18f4"
        },
        {
          "alg" : "SHA3-384",
          "content" : "e839bfb8158084c452c3240531a9c1a8ce5a86192e88ea4eab3061f9330e994881c4d57fd3146957adee95e2c685056c"
        },
        {
          "alg" : "SHA3-256",
          "content" : "e5b9fc6824df73d9d04645601fe2de54dd7b22b18f7979f4f1e647c7d8c76435"
        },
        {
          "alg" : "SHA3-512",
          "content" : "d06a45c69c8e4dbe055857ebb47842ec5e0977ad4d7d1e583cc168e2a430360e38b8be98857d97a0c512370173ee04c9d1757412f835acffaee72a49126fc72d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.pdfbox/xmpbox@2.0.35?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.apache.org/pdfbox-parent/xmpbox/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/PDFBOX"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://svn.apache.org/viewvc/pdfbox/tags/2.0.35/xmpbox"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.guava/guava@32.1.3-jre?type=jar",
      "group" : "com.google.guava",
      "name" : "guava",
      "version" : "32.1.3-jre",
      "description" : "Guava is a suite of core and expanded libraries that include utility classes, Google's collections, I/O classes, and much more.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "adc3cf557a48d15cb71be90948558923"
        },
        {
          "alg" : "SHA-1",
          "content" : "0f306708742ce2bf0fb0901216183bc14073feae"
        },
        {
          "alg" : "SHA-256",
          "content" : "6d4e2b5a118aab62e6e5e29d185a0224eed82c85c40ac3d33cf04a270c3b3744"
        },
        {
          "alg" : "SHA-512",
          "content" : "f575321aa79046f2c12bdf9895db7e235cbaaa8e913389ae48ec4bb5f387d6bf066ed98c5f2c7854bf0c56bb38b59b005ca3c16d68e314743491a223a18cee47"
        },
        {
          "alg" : "SHA-384",
          "content" : "efd979f8c807eb973c7bb2edcede11c2881db4232147bb94069701fc002b1c336651aa3347858e3ba25cb89f3df69428"
        },
        {
          "alg" : "SHA3-384",
          "content" : "83429ce32c8a20a7314175c053ba0a0e57c20486e6f8abcf7bf1e19c64148db70ae8e6b4437ec168f53b37a653e8bb24"
        },
        {
          "alg" : "SHA3-256",
          "content" : "52974020b1d930e646d2fe26b13841275fb9c51e81c28140993c228adda71e78"
        },
        {
          "alg" : "SHA3-512",
          "content" : "b9bd05ca990c5b76c43248493bb29cbbaad5aa667f394714f35765a8ec04c302a19c4f53f610485c933281211cd6bf4a11a14aaf754ffaed33e02c8b1b78289e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.guava/guava@32.1.3-jre?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/google/guava"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/google/guava/actions"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/google/guava/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/google/guava/guava"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar",
      "group" : "com.google.guava",
      "name" : "failureaccess",
      "version" : "1.0.1",
      "description" : "Contains com.google.common.util.concurrent.internal.InternalFutureFailureAccess and InternalFutures. Most users will never need to use this artifact. Its classes is conceptually a part of Guava, but they're in this separate artifact so that Android libraries can use them without pulling in all of Guava (just as they can use ListenableFuture by depending on the listenablefuture artifact).",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "091883993ef5bfa91da01dcc8fc52236"
        },
        {
          "alg" : "SHA-1",
          "content" : "1dcf1de382a0bf95a3d8b0849546c88bac1292c9"
        },
        {
          "alg" : "SHA-256",
          "content" : "a171ee4c734dd2da837e4b16be9df4661afab72a41adaf31eb84dfdaf936ca26"
        },
        {
          "alg" : "SHA-512",
          "content" : "f8d59b808d6ba617252305b66d5590937da9b2b843d492d06b8d0b1b1f397e39f360d5817707797b979a5bf20bf21987b35333e7a15c44ed7401fea2d2119cae"
        },
        {
          "alg" : "SHA-384",
          "content" : "67659dbd9647ec303d7f15128dc9dba19b98fd8d74758ee3b602451e32c855e236ccaafe08edf4bbfa245f981268440f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "1460875f0331c5fa3791772a6a322a7db180261bc2adacf7271df1fbf3b088a587a755a604c039982cb593c5cfc1f101"
        },
        {
          "alg" : "SHA3-256",
          "content" : "ea86406e75fcd93eafe3cde1b3135ba485f1bb9b75fed98894a0bf1f0aee04f0"
        },
        {
          "alg" : "SHA3-512",
          "content" : "52ac0f487ab5dd27c9f2e54fd1d84c7a620cae9d49be4072aa2b11501787bf4391ddaa13d02eccdf19e8eea46aecbea5f6064b26777c1b836108a280652e04ac"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/google/guava/failureaccess"
        },
        {
          "type" : "build-system",
          "url" : "https://travis-ci.org/google/guava"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/google/guava/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/google/guava/failureaccess"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar",
      "group" : "com.google.guava",
      "name" : "listenablefuture",
      "version" : "9999.0-empty-to-avoid-conflict-with-guava",
      "description" : "An empty artifact that Guava depends on to signal that it is providing ListenableFuture -- but is also available in a second \"version\" that contains com.google.common.util.concurrent.ListenableFuture class, without any other Guava classes. The idea is: - If users want only ListenableFuture, they depend on listenablefuture-1.0. - If users want all of Guava, they depend on guava, which, as of Guava 27.0, depends on listenablefuture-9999.0-empty-to-avoid-conflict-with-guava. The 9999.0-... version number is enough for some build systems (notably, Gradle) to select that empty artifact over the \"real\" listenablefuture-1.0 -- avoiding a conflict with the copy of ListenableFuture in guava itself. If users are using an older version of Guava or a build system other than Gradle, they may see class conflicts. If so, they can solve them by manually excluding the listenablefuture artifact or manually forcing their build systems to use 9999.0-....",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "d094c22570d65e132c19cea5d352e381"
        },
        {
          "alg" : "SHA-1",
          "content" : "b421526c5f297295adef1c886e5246c39d4ac629"
        },
        {
          "alg" : "SHA-256",
          "content" : "b372a037d4230aa57fbeffdef30fd6123f9c0c2db85d0aced00c91b974f33f99"
        },
        {
          "alg" : "SHA-512",
          "content" : "c5987a979174cbacae2e78b319f080420cc71bcdbcf7893745731eeb93c23ed13bff8d4599441f373f3a246023d33df03e882de3015ee932a74a774afdd0782f"
        },
        {
          "alg" : "SHA-384",
          "content" : "caff9b74079f95832ca7f6029346b34b606051cc8c5a4389fac263511d277ada0c55f28b0d43011055b268c6eb7184d5"
        },
        {
          "alg" : "SHA3-384",
          "content" : "e939f08df0545847ea0d3e4b04a114b08499ad069ba8ec9461d1779f87a56e0c37273630a0f4c14e78c348d3ac7eb97f"
        },
        {
          "alg" : "SHA3-256",
          "content" : "1f0a8b1177773b3a8ace839df5eed63cbf56b24a38714898a6e4ed065c42559f"
        },
        {
          "alg" : "SHA3-512",
          "content" : "6b495ecc2a18b17365cb08d124a0da47f04bcdde81927b5245edf3edd8e498c3c3fb92ce6a4127f660bac851bb1d3e4510e5c20d03be47ce99dc296d360db285"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/google/guava/listenablefuture"
        },
        {
          "type" : "build-system",
          "url" : "https://travis-ci.org/google/guava"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/google/guava/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/google/guava/listenablefuture"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
      "group" : "com.google.code.findbugs",
      "name" : "jsr305",
      "version" : "3.0.2",
      "description" : "JSR305 Annotations for Findbugs",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "dd83accb899363c32b07d7a1b2e4ce40"
        },
        {
          "alg" : "SHA-1",
          "content" : "25ea2e8b0c338a877313bd4672d3fe056ea78f0d"
        },
        {
          "alg" : "SHA-256",
          "content" : "766ad2a0783f2687962c8ad74ceecc38a28b9f72a2d085ee438b7813e928d0c7"
        },
        {
          "alg" : "SHA-512",
          "content" : "bb09db62919a50fa5b55906013be6ca4fc7acb2e87455fac5eaf9ede2e41ce8bbafc0e5a385a561264ea4cd71bbbd3ef5a45e02d63277a201d06a0ae1636f804"
        },
        {
          "alg" : "SHA-384",
          "content" : "ca0b169d3eb2d0922dc031133a021f861a043bb3e405a88728215fd6ff00fa52fdc7347842dcc2031472e3726164bdc4"
        },
        {
          "alg" : "SHA3-384",
          "content" : "9903fd7505218999f8262efedb3d935d64bcef84aae781064ab5e1b24755466b269517cada562fa140cd1d417ede57a1"
        },
        {
          "alg" : "SHA3-256",
          "content" : "223fda9a89a461afaae73b177a2dc20ed4a90f2f8757f5c65f3241b0510f00ff"
        },
        {
          "alg" : "SHA3-512",
          "content" : "3996b5af57a5d5c6a0cd62b11773360fb051dd86a2ba968476806a2a5d32049b82d69a24a3c694e8fe4d735be6a28e41000cc500cc2a9fb577e058045855d2d6"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://findbugs.sourceforge.net/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://code.google.com/p/jsr-305/"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.checkerframework/checker-qual@3.37.0?type=jar",
      "group" : "org.checkerframework",
      "name" : "checker-qual",
      "version" : "3.37.0",
      "description" : "checker-qual contains annotations (type qualifiers) that a programmer writes to specify Java code for type-checking by the Checker Framework.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1ff1eed173ff9d6f208d0a5be8f5623d"
        },
        {
          "alg" : "SHA-1",
          "content" : "ba74746d38026581c12166e164bb3c15e90cc4ea"
        },
        {
          "alg" : "SHA-256",
          "content" : "e4ce1376cc2735e1dde220b62ad0913f51297704daad155a33f386bc5db0d9f7"
        },
        {
          "alg" : "SHA-512",
          "content" : "98f92a4d14b77f2946de34bc64bc0068505ba8893a734e52f6458e3061fc7471bd5a60c073c938302b7b78d51205929134207abc24f0edadd3db1e1f57755de5"
        },
        {
          "alg" : "SHA-384",
          "content" : "6a586fa9ead4d6edeb5e73a98af109dca2bf95e950c3c4862773f40e2eed5ea80208021f187fe717963027f7ea2bb489"
        },
        {
          "alg" : "SHA3-384",
          "content" : "0baafa897a7a5b9095680b5534841c537518c67a5ae9bf5923aceeb5aa3283551159c614b7fcfc205f2b5f77c144934c"
        },
        {
          "alg" : "SHA3-256",
          "content" : "68056437b32f1a878d9b38ca2d4c6d88e9ca76b6eb705e7a946bc044010b722d"
        },
        {
          "alg" : "SHA3-512",
          "content" : "66ec2f2416d564035e78295e7094ec1c23b76870d0095adbb9ec7e2d00b94684dc3c4ac08640b7ba14465ddc305382e5b20240d5eff31875d2ffe4682088a2f7"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT"
          }
        }
      ],
      "purl" : "pkg:maven/org.checkerframework/checker-qual@3.37.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://checkerframework.org/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/typetools/checker-framework.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.21.1?type=jar",
      "publisher" : "Google LLC",
      "group" : "com.google.errorprone",
      "name" : "error_prone_annotations",
      "version" : "2.21.1",
      "description" : "Error Prone is a static analysis tool for Java that catches common programming mistakes at compile-time.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "75fe4fe33d308dd6cee3b601de902d27"
        },
        {
          "alg" : "SHA-1",
          "content" : "6d9b10773b5237df178a7b3c1b4208df7d0e7f94"
        },
        {
          "alg" : "SHA-256",
          "content" : "d1f3c66aa91ac52549e00ae3b208ba4b9af7d72d68f230643553beb38e6118ac"
        },
        {
          "alg" : "SHA-512",
          "content" : "530318bcdf1ed8eeee408fc5a0775f1792cbf012b4ec55217a4498c8d2983b230a4d071b9e115565b0411faa51dd938823d9b619beb6786212c375ad3d1ebd8a"
        },
        {
          "alg" : "SHA-384",
          "content" : "88e628431966a9b5cc19f96159874cefde1558e51d2ce233a0c2d47914eb9c6256f95882605a87cc6629a21ff70b72b4"
        },
        {
          "alg" : "SHA3-384",
          "content" : "ebc750b211532fef9a84c3682d47f00b877e4082716ead1f4f883f02ab35bda8d5acfc475722215c4fe6ed9cfd54f43a"
        },
        {
          "alg" : "SHA3-256",
          "content" : "9b4f193bf2f541844c6b1b5cf2d1c7f6e9465b97804d155f34530b203184e1ae"
        },
        {
          "alg" : "SHA3-512",
          "content" : "1d76781cef387a185fd4fb69960394556062969bbbe0be74d0fb11f7c73758e5d35ff546ab04f6382c21c63705a1ffb975a549bf4d846fde54e412ecd4641485"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.21.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://errorprone.info/error_prone_annotations"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/google/error-prone/error_prone_annotations"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.j2objc/j2objc-annotations@2.8?type=jar",
      "group" : "com.google.j2objc",
      "name" : "j2objc-annotations",
      "version" : "2.8",
      "description" : "A set of annotations that provide additional information to the J2ObjC translator to modify the result of translation.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "c50af69b704dc91050efb98e0dff66d1"
        },
        {
          "alg" : "SHA-1",
          "content" : "c85270e307e7b822f1086b93689124b89768e273"
        },
        {
          "alg" : "SHA-256",
          "content" : "f02a95fa1a5e95edb3ed859fd0fb7df709d121a35290eff8b74dce2ab7f4d6ed"
        },
        {
          "alg" : "SHA-512",
          "content" : "f8263868a792b41707c9e7fe6fa5650a14cd93fbeafad20efe3772a3058fc933eb59782ec59e6eb9b9c569aa96da80134ae9fdf7547b69c44a97087efddceeff"
        },
        {
          "alg" : "SHA-384",
          "content" : "e6087ec31fec8289158496ad2ed6ce8472d5d513808a312e0782cedac3b86c37a62a63c0b5ea3839491d109fe9e148a1"
        },
        {
          "alg" : "SHA3-384",
          "content" : "10add34bfeb8612283eef89ac96747a3c9b755acd80ad526e1addaeb7efd6323c52b9bfa1a3d34adb40e1ccb963ee65d"
        },
        {
          "alg" : "SHA3-256",
          "content" : "b3336f8abd6b1f73b9f06d306974557000a000073bfbae6b54fda26d17dbb072"
        },
        {
          "alg" : "SHA3-512",
          "content" : "d376c184a6df071c4e93b913d175b5c2e63deac37105dc20342c19bdda62e4e9598ca1e8bfb4f4fd5cdee6dd5ac3b8af49e2c5193e324d59a59ce1f7adeab627"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.j2objc/j2objc-annotations@2.8?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/google/j2objc/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.sonatype.org/spice/trunk/oss/oss-parent-9/j2objc-annotations"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.ini4j/ini4j@0.5.4?type=jar",
      "group" : "org.ini4j",
      "name" : "ini4j",
      "version" : "0.5.4",
      "description" : "Java API for handling configuration files in Windows .ini format. The library includes its own Map based API, Java Preferences API and Java Beans API for handling .ini files. Additionally, the library includes a feature rich (variable/macro substitution, multiply property values, etc) java.util.Properties replacement.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b117a54eef58b4511aae3bb5882e0d8b"
        },
        {
          "alg" : "SHA-1",
          "content" : "4a3ee4146a90c619b20977d65951825f5675b560"
        },
        {
          "alg" : "SHA-256",
          "content" : "aad60635eee567254ed29f18fb18c0f9e4c4dacf51c8229128203183bb35e2dd"
        },
        {
          "alg" : "SHA-512",
          "content" : "bd4aaf68be5ddb2d6ae1a1a1a51c239fc99d172b573f32af25e6e26ac5b2eef4e0c5841b5b9b6ebfe1517aaa6f62bbe5f1a8d3bab9de784179ef6f450561906e"
        },
        {
          "alg" : "SHA-384",
          "content" : "fd8cda16f50b3f2b504a8fd289dde69dc76d9f3b2b1f2a5d28db2e2a0f91fe2552ea2743ea067a891fc1c8ab688937d9"
        },
        {
          "alg" : "SHA3-384",
          "content" : "a8ef49792a04bacad9928cf6a56f1ab72f6646a356b9f1fc242a29104ead4b1b8320d5c104c73d6dfcefc050333846ee"
        },
        {
          "alg" : "SHA3-256",
          "content" : "0d92a8c2fffece9436702cc687df78383cac4cb57307be7ea09de0efa61410c4"
        },
        {
          "alg" : "SHA3-512",
          "content" : "1f45799c9caa2efa0b2092f4e615faee09d25ecba621d08d9f22d36a60835b65acc7b33282b37868e45deace2c8dd2db46ce375b367d28cbca865c6283e41f68"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.ini4j/ini4j@0.5.4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.ini4j.org"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://sourceforge.net/tracker2/?group_id=129580"
        },
        {
          "type" : "vcs",
          "url" : "https://svn.code.sf.net/p/ini4j/code/tags/ini4j-0.5.4/"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/javax.inject/javax.inject@1?type=jar",
      "group" : "javax.inject",
      "name" : "javax.inject",
      "version" : "1",
      "description" : "The javax.inject API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "289075e48b909e9e74e6c915b3631d2e"
        },
        {
          "alg" : "SHA-1",
          "content" : "6975da39a7040257bd51d21a231b76c915872d38"
        },
        {
          "alg" : "SHA-256",
          "content" : "91c77044a50c481636c32d916fd89c9118a72195390452c81065080f957de7ff"
        },
        {
          "alg" : "SHA-512",
          "content" : "e126b7ccf3e42fd1984a0beef1004a7269a337c202e59e04e8e2af714280d2f2d8d2ba5e6f59481b8dcd34aaf35c966a688d0b48ec7e96f102c274dc0d3b381e"
        },
        {
          "alg" : "SHA-384",
          "content" : "ac04c9f03ccbe35a25deb8b50280a0ca01dbe6aff0dd795d55af6112bfe3cd5817eb82f32fb18378d86cd64b07597190"
        },
        {
          "alg" : "SHA3-384",
          "content" : "fca090ecb1edeacb9fe865dc515cd1d109b323cd742d4a9733ff199a96ee96e0db4f924079520b9c189ef750f255475d"
        },
        {
          "alg" : "SHA3-256",
          "content" : "5b0054e39e522de0e0ffc4034d12f72270291fb24d94d5ffc9c4d69c25035fc6"
        },
        {
          "alg" : "SHA3-512",
          "content" : "fb290f5a70b1efc1dff12f40a0b2d7b94019f66da42e78010c0b8e61f222c4f267b67e356a9e9c346eb801e5515e36243888f280c5cb95c2dd69016a30cadeb9"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/javax.inject/javax.inject@1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://code.google.com/p/atinject/"
        },
        {
          "type" : "vcs",
          "url" : "http://code.google.com/p/atinject/source/checkout"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.18.10?type=jar",
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.jackson.core",
      "name" : "jackson-databind",
      "version" : "2.18.10",
      "description" : "General data-binding functionality for Jackson: works on core streaming API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e087544a016b692ea1c7d723c8929db3"
        },
        {
          "alg" : "SHA-1",
          "content" : "53801af72780b10fd552ee6cd8f8f7572a78d88e"
        },
        {
          "alg" : "SHA-256",
          "content" : "ead55a0c649b11af6148a0c097323f5438afc5f563e7139681ad8277fff520bf"
        },
        {
          "alg" : "SHA-512",
          "content" : "43bbd8ec44ed631743cdd71dce922e634f06c772ecbdc8bf10fe506cdf7df16f75fce8023e46a5a0cb867ac3ff1b42f07323520c5502bf399a8f8abf5372bfda"
        },
        {
          "alg" : "SHA-384",
          "content" : "6c229f19c205d23abfe78193879b7a85859107036df0fa1bea4e4e754b6fc45afed66efb0a741751a3ac1c21dadeb45b"
        },
        {
          "alg" : "SHA3-384",
          "content" : "29dcc774905bba4a1ad6dd539ebaf046b24918d40e2f3cd92afb23632069aaa47f647b13a3c2703b36021f6a2370b47d"
        },
        {
          "alg" : "SHA3-256",
          "content" : "a9b61ecb0f91b955e12ac35b6eaef0255d500eed32f956d6393e8370a51b5564"
        },
        {
          "alg" : "SHA3-512",
          "content" : "58ac565cdc71ff8db27925c87ba67c057f118a2e017b0d6b0f7e6aef350af5a923d91a497382cf2665efa08dcc1276b9709ab861a884877b11598079b378dbd6"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.18.10?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/FasterXML/jackson"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://central.sonatype.com/api/v1/publisher"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/FasterXML/jackson-databind/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/FasterXML/jackson-databind"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.18.10?type=jar",
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.jackson.core",
      "name" : "jackson-annotations",
      "version" : "2.18.10",
      "description" : "Core annotations used for value types, used by Jackson data binding package.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "fb60883c57e404bc4372562888c816df"
        },
        {
          "alg" : "SHA-1",
          "content" : "1feace2cf8058442b77acb91ee30b9b164dbd810"
        },
        {
          "alg" : "SHA-256",
          "content" : "67634a683cfb1695e55c78e351c5f38f4de0d8c64ed567419b8fe2d1dc354ada"
        },
        {
          "alg" : "SHA-512",
          "content" : "d2c5f9718e79f1223f2957844ba72db9d167bd8b8c22ec1b5bd8be4f162c936749062a23e38046d45128a641a29da4188616f45bfcd2bf730342ecb50be4ad29"
        },
        {
          "alg" : "SHA-384",
          "content" : "05cabd2b2d77789ea249c3bc8d936707650b022eced07d578ffece4eb0da742d6b6144d5a55abfa324c0a8f588f53f52"
        },
        {
          "alg" : "SHA3-384",
          "content" : "6c07720bf116edde1bbb325fc6c3ba212fcdeda292c9eeb7054b81283a2b5dbed1c079b56340a8ca04a60b4b86efbcf2"
        },
        {
          "alg" : "SHA3-256",
          "content" : "3843827ed2c515ab45c52766f123294d139a76c9735d6899984e2ab839b7d6b7"
        },
        {
          "alg" : "SHA3-512",
          "content" : "32117f3e228125712f96404f7f25361570f74711e5f3688524be0ac2e7eda31912359d0834894761ef22839864598206c679a78767c639229dd69d7fc42c6daa"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.18.10?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/FasterXML/jackson"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://central.sonatype.com/api/v1/publisher"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/FasterXML/jackson-annotations/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/FasterXML/jackson-annotations"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.18.10?type=jar",
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.jackson.core",
      "name" : "jackson-core",
      "version" : "2.18.10",
      "description" : "Core Jackson processing abstractions (aka Streaming API), implementation for JSON",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "02851c0a1653cc7fcbf7ffe4a1859682"
        },
        {
          "alg" : "SHA-1",
          "content" : "1672b43237bf3ebb63aee2c3cfa316fa7665a316"
        },
        {
          "alg" : "SHA-256",
          "content" : "e4544eec5754d2dd06c6b16cfc9d2883a523f7177c2429ab04b29ab5fab445c9"
        },
        {
          "alg" : "SHA-512",
          "content" : "104dc913316dfd398198c4e52139e6b3ff83c5d9b9a678fab4bd9b3ccf314afac902717b24b93ea2827de417f31e6f0dbb53a10d0cabd681fd05b43b8065dc8b"
        },
        {
          "alg" : "SHA-384",
          "content" : "81d2008cc08e479c5fb8d3a1684694b5ad44adda2f790d96b78391155fe72027ce54051699ea1d165fe98e63a43ac851"
        },
        {
          "alg" : "SHA3-384",
          "content" : "9d536444f2bdcc5871fa25934b3ae194d1fdb5119dc435041a5b9a6a6f1f3a3e5145f90b26f4bcd2d2a6b5f263b8b783"
        },
        {
          "alg" : "SHA3-256",
          "content" : "ccd21bd2fe37637f0e2bd61efc92ce023200946f9e0bf3eb7dc2de433282cf76"
        },
        {
          "alg" : "SHA3-512",
          "content" : "88f9ac8364a206cfe946dde6298f2f330de14b15ee7e97c148a40ffbb9d51c44418bd96ff3852150d1f90bee20637f6acc50939a64c05f2b9dc3cfa51ef1ad3b"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.18.10?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/FasterXML/jackson-core"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://central.sonatype.com/api/v1/publisher"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/FasterXML/jackson-core/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/FasterXML/jackson-core"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-io/commons-io@2.18.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-io",
      "name" : "commons-io",
      "version" : "2.18.0",
      "description" : "The Apache Commons IO library contains utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "8cce74ccf461cd6502ae04c908eca917"
        },
        {
          "alg" : "SHA-1",
          "content" : "44084ef756763795b31c578403dd028ff4a22950"
        },
        {
          "alg" : "SHA-256",
          "content" : "f3ca0f8d63c40e23a56d54101c60d5edee136b42d84bfb85bc7963093109cf8b"
        },
        {
          "alg" : "SHA-512",
          "content" : "786778529435d8a14ab6ce2176cdf2b9ee6585a71893b785f26257122166dcefc7c4af3f612eda3974b06c16d06fc357178bf28b9b74010e9bc04c33221adc2f"
        },
        {
          "alg" : "SHA-384",
          "content" : "4be7ad9b352412ddad3eb00f2e44f1236216d3e713546d34d71f3aa8e589b06636abf22dad0c28e11a0cd7b54ea0496a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "d003d33c2cd37806d9d8f0576b65fd51fc1f02bfed7716279474556ef98abfaaddb5b5622762b64458bec6b57f77ceca"
        },
        {
          "alg" : "SHA3-256",
          "content" : "89019fd824ce65aa33554a848dce2ca47f09c3a261fd22c699342d99579e91d9"
        },
        {
          "alg" : "SHA3-512",
          "content" : "6edaba8f76bd3e96421ae3611fb32414b064c5ef2fdefd7402f3052c5849e06aa6dfdd218a6df97b25cdd7997df0c9d643af960c4294f2e89dffb052b4b9d8cd"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-io/commons-io@2.18.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-io/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-parent/actions"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/IO"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-io.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.github.mwiede/jsch@0.2.26?type=jar",
      "group" : "com.github.mwiede",
      "name" : "jsch",
      "version" : "0.2.26",
      "description" : "JSch is a pure Java implementation of SSH2",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "632921ba4893eee93f3efd3b9a53c00b"
        },
        {
          "alg" : "SHA-1",
          "content" : "55225f67814475ef0a0095850500eedf70710385"
        },
        {
          "alg" : "SHA-256",
          "content" : "5ad82d1a9534404d0a519c525e796c8ef69f4fe47b19bc4d16bbd296686ac9f2"
        },
        {
          "alg" : "SHA-512",
          "content" : "e43b60f387347655688224c42874536641b893702bb60d1f69ab721486a16899bc04efad77beb0d979b1e3426c74d76ad54ed07b05d9ba182b4995b76dd713e1"
        },
        {
          "alg" : "SHA-384",
          "content" : "f4eb9007a2544995563ec9861636c67d13a97296fd80f06dab6aa3fe2409e1bb4eb5f14981030c57eaffa24ee772f8fb"
        },
        {
          "alg" : "SHA3-384",
          "content" : "c56329ad2d0b117b6bcdb9b7018226ea510f79fa749728ffdaa6ffc3d493724bc45a0644dd5bcbd33b5a2fcf5f50e805"
        },
        {
          "alg" : "SHA3-256",
          "content" : "62fd6359033699ad0fad9fef93c7b357bedf5b6ae6ead2e8bb9d1679c922f14b"
        },
        {
          "alg" : "SHA3-512",
          "content" : "d2309a22f09e1029a51aca9d0284c16ae0aaae64b4c860b154d78b20f47bd2fb5b9fd133233a33fbfa13058eaf474b7cae5f55591c9708a6d3e95174451539f8"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        },
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        },
        {
          "license" : {
            "id" : "ISC",
            "url" : "https://www.isc.org/licenses/"
          }
        }
      ],
      "purl" : "pkg:maven/com.github.mwiede/jsch@0.2.26?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/mwiede/jsch"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/mwiede/jsch"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.hierynomus/sshj@0.40.0?type=jar",
      "group" : "com.hierynomus",
      "name" : "sshj",
      "version" : "0.40.0",
      "description" : "SSHv2 library for Java",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "15b476d1e1705afe8ebeb1dd40a8f29b"
        },
        {
          "alg" : "SHA-1",
          "content" : "755b2aef8b3e50ab86cfaff29bcb3804639b5862"
        },
        {
          "alg" : "SHA-256",
          "content" : "a6a5533f6580e0418dfcacbb5396680186698585c325fa950c788e749f24d1e2"
        },
        {
          "alg" : "SHA-512",
          "content" : "8ffdbc3e5c807ef1ed40ac126ea394ed65369f51824408380005c94a794af1e7720560a52ee4d87a7d7103ae75d8ab3e8e6bea33dafbb51c4717ba78265feafa"
        },
        {
          "alg" : "SHA-384",
          "content" : "9f7512c3cd447341b458cbbabe7c0ca6af66e028dda156684943e4ccdaef80ae7398237697c7793f512722d9c2be959e"
        },
        {
          "alg" : "SHA3-384",
          "content" : "f10364ba4a81281a9e4e7fa7c96aa1f990078966d080d06966e0dcb3b08e1d654d4736aa32b11582d1e68c5b37f13ee0"
        },
        {
          "alg" : "SHA3-256",
          "content" : "a1b3ee24ec39cddee8d9e390f415bc9bdde6ecf8ae2b7d09b34e7dbe2fca5297"
        },
        {
          "alg" : "SHA3-512",
          "content" : "876132a6d668c075ecbb9ff8b08cbb65f15fb5ab2884a39641354717ab17c09a900a02846782d852591996527944e44b6acbc5a679a317660110e747191110d9"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.hierynomus/sshj@0.40.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/hierynomus/sshj"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/hierynomus/sshj/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/hierynomus/sshj"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.hierynomus/asn-one@0.6.0?type=jar",
      "group" : "com.hierynomus",
      "name" : "asn-one",
      "version" : "0.6.0",
      "description" : "ASN.1 serialization and parsing library",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "5012b14a62f3369439ee0eb62c7d34f9"
        },
        {
          "alg" : "SHA-1",
          "content" : "7f6141541e0a4d3ae0b02c901c2c1e9a772eb3d7"
        },
        {
          "alg" : "SHA-256",
          "content" : "e4f70fd92849b52240048b8ebace0c9a17d3bb7b9c882b3c7778cec3458495f5"
        },
        {
          "alg" : "SHA-512",
          "content" : "475e4b7d9ccdb347039e1cd06aba7e4ae8c009e85781eefcc5ca00f692084c7f1bbff51f2d8f8ba6e00bc6d9dba3d0cf6c22a9df03c42e3f29722b69de1d2101"
        },
        {
          "alg" : "SHA-384",
          "content" : "6dc0626cd44a83e7ff85064bd53e359530ffd97267deedc8071d78961a86855c1af3c64de33f8f694487376d3f34e8f9"
        },
        {
          "alg" : "SHA3-384",
          "content" : "fd7dd266ed905efc29ffd3a60324ecf4ae7ff84ad2e7a610a844702630f414de760a76664f1e6d4c02f39beb6dea9169"
        },
        {
          "alg" : "SHA3-256",
          "content" : "9dc9200a17356b8631862a1a6f16b164bc0678e2f3f5b3bd7b5d9c9a2242a0cf"
        },
        {
          "alg" : "SHA3-512",
          "content" : "e47d0d8ff9c6bb77654e3ca694c6f221d343a8f16ff75da7fbd22d5437693df182339ed1ca01b178e2a16d58567388249278eba8bd8678662ef92397307ef3cf"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.hierynomus/asn-one@0.6.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/hierynomus/asn-one"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/hierynomus/asn-one/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/hierynomus/asn-one"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-vfs2@2.10.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-vfs2",
      "version" : "2.10.0",
      "description" : "Apache Commons VFS is a Virtual File System library.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "df535626616b23cdb5555c40e556155e"
        },
        {
          "alg" : "SHA-1",
          "content" : "a306167fdb88152403c8b00595b1502ffacd5b76"
        },
        {
          "alg" : "SHA-256",
          "content" : "adf9dfb77a44f7b6e2dba3779cfa7142ab8a1f618eb7a9741083822e8d14be13"
        },
        {
          "alg" : "SHA-512",
          "content" : "c8302e679e0d0f0d9467f263dc37e792f35802e9762f78a7fb5a59108668d3751bc63f415c61e46a4eca409f306091abb6ef8bc95c2bc72807a0f91553195c7a"
        },
        {
          "alg" : "SHA-384",
          "content" : "c135ca13ef64d1eaa4bae40f4d5cb44ff028b15fffc68d69d281fb2758fbff1c0731d2438beb9145641b4660b98a0b84"
        },
        {
          "alg" : "SHA3-384",
          "content" : "8e3d55557ac1f220bdef567f65723cb1131b34c6c585090a08f83af0f75906e1cd6420da361093bd345e3f11a12a6dd5"
        },
        {
          "alg" : "SHA3-256",
          "content" : "78b4553aaf3cb58558d0a6739b3f6e7bd50911509169eb35d41ed77c151592e5"
        },
        {
          "alg" : "SHA3-512",
          "content" : "7a53485b995eed3c3f446ba1ddbc599f83bec62a950cb9e870c999e05fa39f8fac514493cfafc910af633cc5d6ab29ec218ac301af70c51475c4bd45bd8a232b"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-vfs2@2.10.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-vfs/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-parent/actions"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/VFS"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-vfs.git/commons-vfs2"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.2?type=jar",
      "publisher" : "fasterxml.com",
      "group" : "org.codehaus.woodstox",
      "name" : "stax2-api",
      "version" : "4.2.2",
      "description" : "Stax2 API is an extension to basic Stax 1.0 API that adds significant new functionality, such as full-featured bi-direction validation interface and high-performance Typed Access API.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6949cace015c0f408f0b846e3735d301"
        },
        {
          "alg" : "SHA-1",
          "content" : "b0d746cadea928e5264f2ea294ea9a1bf815bbde"
        },
        {
          "alg" : "SHA-256",
          "content" : "a61c48d553efad78bc01fffc4ac528bebbae64cbaec170b2a5e39cf61eb51abe"
        },
        {
          "alg" : "SHA-512",
          "content" : "1c0587ecb4c5a659ce2ae1fe36ffc12636a8ecba549a29f2cf91cb4d1d36a335c05f35776f480488d40d894230389f76aeeb363887026c6ef5c565995c17b7c6"
        },
        {
          "alg" : "SHA-384",
          "content" : "3b617db8307a081df858a4110f5b8fec51c06355762506cbc4be5557fb06959f0499f7e672103d46f71c66bae472a7bd"
        },
        {
          "alg" : "SHA3-384",
          "content" : "22a3150713f7072962e26c286a1ef97d849b10d7f1251c56ae34252f247127b56dd189daa758c64776b4196ee0060517"
        },
        {
          "alg" : "SHA3-256",
          "content" : "174868c81672068b42ccde35310d4dad60f457b795101e99588c28b0eebdefc2"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c88de5a2137e3b63b632ef24799a677c998b76e736407f1e8c6af85d1b6a94c76bc20d26e6cac847d8383ab6760f1b5c2ae7574fba21e1e6a96de7cdd38f0e39"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-2-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://github.com/FasterXML/stax2-api"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/FasterXML/stax2-api/issues"
        },
        {
          "type" : "vcs",
          "url" : "http://github.com/FasterXML/stax2-api"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.woodstox/woodstox-core@6.5.1?type=jar",
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.woodstox",
      "name" : "woodstox-core",
      "version" : "6.5.1",
      "description" : "Woodstox is a high-performance XML processor that implements Stax (JSR-173), SAX2 and Stax2 APIs",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "961dd4b2afedf95293dfdd8adfc8f211"
        },
        {
          "alg" : "SHA-1",
          "content" : "c6e52e84fe959e69a243c83ec7d24cd889444ddf"
        },
        {
          "alg" : "SHA-256",
          "content" : "c928d60665c6415fb1c39775cf95cfc44f7f4580cf5ab01b1c380ebffd76887f"
        },
        {
          "alg" : "SHA-512",
          "content" : "d9b3cf6aaac85d8c349e7a24ad30f7e23b7765f1b7ce2fdf301bf2240b9c7ee184bdd938e58be6df9ac90e97e3b8c7b34f8fa9da27d1ed8de78765a8345b18f2"
        },
        {
          "alg" : "SHA-384",
          "content" : "d51e67aae26449a2cdffa90a08b09cc805b85da3e758011a0945fc8b0ee8c18e98c6f94f0c0cf46b7a49e7370073068c"
        },
        {
          "alg" : "SHA3-384",
          "content" : "2e731b74e4814647b1a320cd2f1b9f9914db1cb07510e69fb4dda33c6b1586fb2ee9e3f5af027c98dd0d33e2ed4b19de"
        },
        {
          "alg" : "SHA3-256",
          "content" : "f84ca4c9bb77abb6e61930c7debee48497b2febc30d48329c6b15546dd00371b"
        },
        {
          "alg" : "SHA3-512",
          "content" : "257aea7a23c4631eaaa942763e639d239660f29cfb7190f0b112abf6301a214fcc8e84b118ba73d92861a5f441bee479908a4831352ce2278d3d40ef51067894"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.woodstox/woodstox-core@6.5.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/FasterXML/woodstox"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/FasterXML/woodstox/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/FasterXML/woodstox"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.dom4j/dom4j@2.1.4?type=jar",
      "group" : "org.dom4j",
      "name" : "dom4j",
      "version" : "2.1.4",
      "description" : "flexible XML framework for Java",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "8246840e53db2781ca941e4d3f9ad715"
        },
        {
          "alg" : "SHA-1",
          "content" : "35c16721b88cf17b8279fcb134c0abb161cc0e9b"
        },
        {
          "alg" : "SHA-256",
          "content" : "235a9167a8a199be04b5326d92927ca0adeb90d11f69fe2e821b34ce8433b591"
        },
        {
          "alg" : "SHA-512",
          "content" : "b647a1c9cbd8e8e0a855160b8522fff8e1d4df95e54e116a1cfe66d17083ff8b8ca6fe706d6aeea6e7d3e0116212af9a5f6c7fade642869a33fc7a971d116af9"
        },
        {
          "alg" : "SHA-384",
          "content" : "b85b6c9a7a89af8f44a3373a92e3b231932fb7ee6860b387ad2e383ad266cc6b613cc8128eeb324487ab44cbc99a5d22"
        },
        {
          "alg" : "SHA3-384",
          "content" : "5ac0aadfb93b247423464d54007a8c37de263240c398c7e4b356c7e99383aedb83ac80e04686568dd9927555321824c3"
        },
        {
          "alg" : "SHA3-256",
          "content" : "be92d913fea05e53a54cd2133f1ad5a75dea73a8a779b0b2288c9ccf149e455f"
        },
        {
          "alg" : "SHA3-512",
          "content" : "9a6605c6fd729562ae376713bd0792ba38b81ad4827d207ba055007b15ad6021bc05cf3d816b274826efdbb8aa640bfd93a22eb049d783672c7004d80b337b26"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Plexus",
            "url" : "https://fedoraproject.org/wiki/Licensing/Plexus_Classworlds_License"
          }
        }
      ],
      "purl" : "pkg:maven/org.dom4j/dom4j@2.1.4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://dom4j.github.io/"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.controlsfx/controlsfx@8.40.16?type=jar",
      "group" : "org.controlsfx",
      "name" : "controlsfx",
      "version" : "8.40.16",
      "description" : "High quality UI controls and other tools to complement the core JavaFX distribution",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6bb92cec830335cdc0d16a536a26f0e4"
        },
        {
          "alg" : "SHA-1",
          "content" : "da9403b1029c3fdba4e61730d822859bf0d8b9f7"
        },
        {
          "alg" : "SHA-256",
          "content" : "a4c644e0fbf6d9efb458be37444ba8b73e563ddb9c93200464d184e958cb5858"
        },
        {
          "alg" : "SHA-512",
          "content" : "68d38178ffd9526e5fe0f25255084d7dffd97867e0c144a9316de5704365c7cf4c083078ee67802444004cf4988336471884279f331b3dd37b47b7c071ef1ef4"
        },
        {
          "alg" : "SHA-384",
          "content" : "10a954a7bc755ab691f93f5ab7c6f87891c6f65b83fc73c4cf9ef9d2654e22768bbef36f3d9513f5199b0393795cf3f9"
        },
        {
          "alg" : "SHA3-384",
          "content" : "4aca3874db0f61bf6d2c560e08baeb65c9cfa4ccc4c167b74029c320ec74370aaf26689d38ad96eced0e5c47f741e49a"
        },
        {
          "alg" : "SHA3-256",
          "content" : "1c5c434ebb3c5a6fff54a0291cd0aac284a64dbf621a212fc813014e1182c196"
        },
        {
          "alg" : "SHA3-512",
          "content" : "84bd9e402dd04c3b78ffd6cea97faa5c2fca7d38592dd9fefc7246b06aa9d5959eb855a29181beac0c59274ba1fe40e6a49249f8693804556fbaee547dd4a131"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "The 3-Clause BSD License",
            "url" : "http://www.opensource.org/licenses/bsd-license.php"
          }
        }
      ],
      "purl" : "pkg:maven/org.controlsfx/controlsfx@8.40.16?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.controlsfx.org/"
        },
        {
          "type" : "vcs",
          "url" : "https://bitbucket.org/controlsfx/controlsfx"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/eu.hansolo/Medusa@8.3?type=jar",
      "group" : "eu.hansolo",
      "name" : "Medusa",
      "version" : "8.3",
      "description" : "Medusa is a JavaFX 8 library containing gauges and clocks",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "18add57cc55e3a03189b93d36f1c30fe"
        },
        {
          "alg" : "SHA-1",
          "content" : "c2896a1aa8707c97abbdf7f0ecb664ce7ffad8aa"
        },
        {
          "alg" : "SHA-256",
          "content" : "1c8e42fc9c458de2f37dfe892baad5ebbdd04d09e860d9a3e1fd9b17923ef60d"
        },
        {
          "alg" : "SHA-512",
          "content" : "a2dfb4fe2f00ac4130eba2e9e9370d6e7c11c12479823ce0e1a586f1cdf5521d960b743f149a3123c38c9eac9fd61d180f91605e4ea20499c7e42aac4f610744"
        },
        {
          "alg" : "SHA-384",
          "content" : "270b4582e8fa50b83137f76f9812a2e3b8720c6c596f7a1a435ef22c44b1c258085c902bd7c37522fa02bc5cf50184bc"
        },
        {
          "alg" : "SHA3-384",
          "content" : "6d38ec56b018fbf696fffea791f0560808eceb23b98347d3cc8a126e7ad99d3c924f03939cabad76d64e39edba8dafb1"
        },
        {
          "alg" : "SHA3-256",
          "content" : "6ab59033a9aa2d1bee76292df792a854bdb8ec463d18defea61ee4c0acbf00d7"
        },
        {
          "alg" : "SHA3-512",
          "content" : "ac9c44f223919cfcc8b0450abdec46e68eea0e97812e52a311730c56fe83ab540bd269097d00968448b6449613917a363037f7e6c098a2b31054e83c0f8224a4"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/eu.hansolo/Medusa@8.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/HanSolo/Medusa/wiki"
        },
        {
          "type" : "vcs",
          "url" : "scm:git@github.com:HanSolo/Medusa.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.jfxtras/jfxtras-fxml@8.0-r6?type=jar",
      "group" : "org.jfxtras",
      "name" : "jfxtras-fxml",
      "version" : "8.0-r6",
      "description" : "Miscellaneous components for JavaFX",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a37d1fcd7050fc9e52323e025207a2bb"
        },
        {
          "alg" : "SHA-1",
          "content" : "8203b61398c130caa46dc90f8ea13f54b981d145"
        },
        {
          "alg" : "SHA-256",
          "content" : "e173a7006ea1bc1e054a0c583c6aa729b0340520d2f221c71c44a1856bb4e73e"
        },
        {
          "alg" : "SHA-512",
          "content" : "6c8569ee58ddbf210dbb1f0ef367d70b4dbda78f7b792df6eda34d2ac7e43c24258547434d7ab4536d6344c9bd04b5960cf89c17895a1f4549007fcffee94a94"
        },
        {
          "alg" : "SHA-384",
          "content" : "b7c87b9055dcdfc18dae046b5ce2a2889c7140404160e219382f6cb1059c97a86721abb9313ebb325dd6845c0a2f3706"
        },
        {
          "alg" : "SHA3-384",
          "content" : "d341238b7f4a91fb6469c85b1ec368158e1b16cd9fd80997680ad442b3b5e32fc483cdbdf523f08c9f99b1aa7b694fbc"
        },
        {
          "alg" : "SHA3-256",
          "content" : "0f181ff74a2ea5acaa20d428dc3000eac8203d46ae0316239fc5ed7c18560808"
        },
        {
          "alg" : "SHA3-512",
          "content" : "5a758622c1a56980704890c1f3e8af423f7e3e4f36180b3e055a873fa8270c9daafc76800faa0517a8e24dad5a5feb7ca15d829372310fb933d0401bed2b964b"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-4-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.jfxtras/jfxtras-fxml@8.0-r6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://jfxtras.org"
        },
        {
          "type" : "vcs",
          "url" : "scm:git@github.com:jfxtras/jfxtras.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.jfxtras/jfxtras-common@8.0-r6?type=jar",
      "group" : "org.jfxtras",
      "name" : "jfxtras-common",
      "version" : "8.0-r6",
      "description" : "Miscellaneous components for JavaFX",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b017fbfc75f7772d6114d8c9995955ad"
        },
        {
          "alg" : "SHA-1",
          "content" : "59a95a239c07a911b17d7bbdaef22eb0ec804a3d"
        },
        {
          "alg" : "SHA-256",
          "content" : "442a34a602c6eb97700e8964fefc3750b56a8beb48678a5ad77bbb6e7af26d49"
        },
        {
          "alg" : "SHA-512",
          "content" : "94cd97aaec7713f0876567645315667bd2286d693e97980d64e8117af1c5d375aacb79e35cfdf47bf9aec6bae0685d888ce8aa2909ff26f54e606d1a026b6473"
        },
        {
          "alg" : "SHA-384",
          "content" : "86025e9f85a90ac5f3056d1acfbace6465edeadd2293c13af95e53cffa95d193a8173065a82c732dfa0f62cf89c35b2f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "ef67f3821dbdb267f508205a57523b45c1030f31a1dfc6649c91e5f560cad953dca7420ff4879442c69204e3d90cbfa7"
        },
        {
          "alg" : "SHA3-256",
          "content" : "8da0d371990de6ebcb5fab8b04adc224259f4c37631c50e6a60a0bd20fa8023d"
        },
        {
          "alg" : "SHA3-512",
          "content" : "f79a9af0b80983fc95e4fe5a9e231f2267bfbbbe41e42ecb0888aeb1333209e94c2bfc4cb0541abbeb47f1b3ddd2dd4bc6b4c0c3a8a656ea2ad6f5a83ea1a7a8"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-4-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.jfxtras/jfxtras-common@8.0-r6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://jfxtras.org"
        },
        {
          "type" : "vcs",
          "url" : "scm:git@github.com:jfxtras/jfxtras.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.jfxtras/jfxtras-controls@8.0-r6?type=jar",
      "group" : "org.jfxtras",
      "name" : "jfxtras-controls",
      "version" : "8.0-r6",
      "description" : "Miscellaneous components for JavaFX",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "526415be11aacc447fee5397826508d9"
        },
        {
          "alg" : "SHA-1",
          "content" : "06c753fd7e5e45c65570118082d3ee9eb1db4645"
        },
        {
          "alg" : "SHA-256",
          "content" : "0cbfce6723683c8beb6896e7b37d0a8eaa0bb9aa089977eec009ff8dad33fdaf"
        },
        {
          "alg" : "SHA-512",
          "content" : "18fd0746e7e1874e78cd4241e0781689e6aa2c520ee988f17ecd4c3868ab0ae20b7ad1af1d707ff40e6f18bc9b063d74f66281d18f32d62cdc034fea6c092436"
        },
        {
          "alg" : "SHA-384",
          "content" : "ab09e089e4ba89d09367a8f68913a35b0c54758d3f2d474d56e36938244dc6e075a86feed965a90365e200e462b5cb45"
        },
        {
          "alg" : "SHA3-384",
          "content" : "9da465de370ccb0d166689f26d9f15d962cec92d67cf7339c339913b9bf110a6bf6bac7d8dc517458458b7e9d7e28a4f"
        },
        {
          "alg" : "SHA3-256",
          "content" : "cdac8c9f57ff9157990f96d72f6bc6ded8ff7a4782848ba96bf04b457ff729be"
        },
        {
          "alg" : "SHA3-512",
          "content" : "04f19c0e834be4dd5304e5eb522c5055b38392d24ddeceafe7fd2e8e5a9c3251b343661ec3f7c3137ecde52ca686146b053dfc3749e85edc317a67912a1e6167"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-4-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.jfxtras/jfxtras-controls@8.0-r6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://jfxtras.org"
        },
        {
          "type" : "vcs",
          "url" : "scm:git@github.com:jfxtras/jfxtras.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.jfxtras/jfxtras-font-roboto@8.0-r6?type=jar",
      "group" : "org.jfxtras",
      "name" : "jfxtras-font-roboto",
      "version" : "8.0-r6",
      "description" : "Miscellaneous components for JavaFX",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "610dd7e0733ae5e221db82e92e65aaa8"
        },
        {
          "alg" : "SHA-1",
          "content" : "91271c10a3aa2de44213794e68c0073b5550c379"
        },
        {
          "alg" : "SHA-256",
          "content" : "db5791ff8ed7eba91b3b9aea16979714bcbcfd4cb36f16be8aea8e9acc063b23"
        },
        {
          "alg" : "SHA-512",
          "content" : "3dc5814a8d23be61cfc480e29a5973ba19a9ae5a2347bfab92e07c021c78facb739db18e1c8d1d48756b4b0865e0d5beb9254552de1ed7ef9631edae00adb5fc"
        },
        {
          "alg" : "SHA-384",
          "content" : "d0353f47a939d24b18e08289e51438b57fef7ac91dcffc290d6bc34a7732db2c97eb96db7e25595f1e46f6c42e97db29"
        },
        {
          "alg" : "SHA3-384",
          "content" : "a2467914e124323a6217ce9fb210483fbee18818f93e8e6bfe4b969f7eb2d0d36c74ce122230419a9c4c7ade3f522c91"
        },
        {
          "alg" : "SHA3-256",
          "content" : "6e01387b3f8e4a5f4e3d05c53b6b1b5f1a811dbe7cdbe03dddab67aa09c4cc13"
        },
        {
          "alg" : "SHA3-512",
          "content" : "277c3d2a4d8166fc55d8f970ec1d13b16087a48e1e7cbf86c33b2e3d92f1cbb826bae97129f8e076a5bfe030506d79ca418928f078a233dc230f0b4bbe07ec01"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-4-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.jfxtras/jfxtras-font-roboto@8.0-r6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://jfxtras.org"
        },
        {
          "type" : "vcs",
          "url" : "scm:git@github.com:jfxtras/jfxtras.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.httpcomponents/httpclient@4.5.14?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.httpcomponents",
      "name" : "httpclient",
      "version" : "4.5.14",
      "description" : "Apache HttpComponents Client",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "2cb357c4b763f47e58af6cad47df6ba3"
        },
        {
          "alg" : "SHA-1",
          "content" : "1194890e6f56ec29177673f2f12d0b8e627dec98"
        },
        {
          "alg" : "SHA-256",
          "content" : "c8bc7e1c51a6d4ce72f40d2ebbabf1c4b68bfe76e732104b04381b493478e9d6"
        },
        {
          "alg" : "SHA-512",
          "content" : "a084ef30fb0a2a25397d8fab439fe68f67e294bf53153e2e1355b8df92886d40fe6abe35dc84f014245f7158e92641bcbd98019b4fbbd9e5a0db495b160b4ced"
        },
        {
          "alg" : "SHA-384",
          "content" : "c8ccaa1fa8ba7c421413e3c30375bd9c31284e837c476fd831e18043ad4187e92166f49554123108891241bed674b95d"
        },
        {
          "alg" : "SHA3-384",
          "content" : "9a17dfcf12b2af3a9b006ec369f9bc78ba322348bf1a01146e0d4f3fec2bed6cbe8b2193fac5b4d5a0c3036c06477510"
        },
        {
          "alg" : "SHA3-256",
          "content" : "48f0a61b691e22dec9d6db8e0b58be4ca17a42a2846c82f0875de21f72bb0faa"
        },
        {
          "alg" : "SHA3-512",
          "content" : "4ad2c9adc761b7e813330f0dcad3f9978702896c7d0cbf81f60a472d550e320b1527be425ba597c8c9352d587e32e1d46ceb4c73e99c70a6190df4c699a7c2a9"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.httpcomponents/httpclient@4.5.14?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://hc.apache.org/httpcomponents-client-ga"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/HTTPCLIENT"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/hc-httpclient-users/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/httpcomponents-client/tree/4.5.14/httpclient"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.httpcomponents",
      "name" : "httpcore",
      "version" : "4.4.16",
      "description" : "Apache HttpComponents Core (blocking I/O)",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "28d2cd9bf8789fd2ec774fb88436ebd1"
        },
        {
          "alg" : "SHA-1",
          "content" : "51cf043c87253c9f58b539c9f7e44c8894223850"
        },
        {
          "alg" : "SHA-256",
          "content" : "6c9b3dd142a09dc468e23ad39aad6f75a0f2b85125104469f026e52a474e464f"
        },
        {
          "alg" : "SHA-512",
          "content" : "168026436a6bcf5e96c0c59606638abbdc30de4b405ae55afde70fdf2895e267a3d48bba6bdadc5a89f38e31da3d9a9dc91e1cab7ea76f5e04322cf1ec63b838"
        },
        {
          "alg" : "SHA-384",
          "content" : "ba9ceaee1a37ca3201d6a1315ecb0327b495489efd0baa155c219c475df8d3eb69fe77ab0026563db406497626da6562"
        },
        {
          "alg" : "SHA3-384",
          "content" : "b9dc44dcc7cc86d5036f26d54c4003a2d72808ae7b07a0808bb53505c6d4281b5ad213eb1f3d0fef1113dec57cb0dfe1"
        },
        {
          "alg" : "SHA3-256",
          "content" : "fd8ab51846476c6c18822151c9ec07b39a9633010b5d20ea937fc6910407bc64"
        },
        {
          "alg" : "SHA3-512",
          "content" : "b42fa528242981a9d70e4f68ab75a24292df5112c44c21b6f18cb9201ce747885ba1d4dc69bc3d14d0da46a6c2638f937c11bc45749abeb55dc89ddada90cdda"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://hc.apache.org/httpcomponents-core-ga"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/HTTPCORE"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/hc-httpclient-users/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/httpcomponents-core/tree/4.4.16/httpcore"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-logging/commons-logging@1.2?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-logging",
      "name" : "commons-logging",
      "version" : "1.2",
      "description" : "Apache Commons Logging is a thin adapter allowing configurable bridging to other, well known logging systems.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "040b4b4d8eac886f6b4a2a3bd2f31b00"
        },
        {
          "alg" : "SHA-1",
          "content" : "4bfc12adfe4842bf07b657f0369c4cb522955686"
        },
        {
          "alg" : "SHA-256",
          "content" : "daddea1ea0be0f56978ab3006b8ac92834afeefbd9b7e4e6316fca57df0fa636"
        },
        {
          "alg" : "SHA-512",
          "content" : "ed00dbfabd9ae00efa26dd400983601d076fe36408b7d6520084b447e5d1fa527ce65bd6afdcb58506c3a808323d28e88f26cb99c6f5db9ff64f6525ecdfa557"
        },
        {
          "alg" : "SHA-384",
          "content" : "ac20720d7156131478205f1b454395abf84cfc8da2f163301af32f63bd3c4764bd26cb54ed53800f33193ae591f3ce9c"
        },
        {
          "alg" : "SHA3-384",
          "content" : "628eb4407e95dca84da1a06b08a6d9b832a49de8472b1b217e8607f08efeeed18b996232d64dd07f03e78e0e3bb4b078"
        },
        {
          "alg" : "SHA3-256",
          "content" : "9aab62deccf156ee6e324c925dfc30ecb53e8465802863a551901a461424e807"
        },
        {
          "alg" : "SHA3-512",
          "content" : "3fd76857f6d20c03799537cc961c1c4ddf1c375c6c192fb982363e3b9397ba138b77f24ef38b4202f44e37586789c0320e4de18fdadd2772304fd14a9b26d552"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-logging/commons-logging@1.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://commons.apache.org/proper/commons-logging/"
        },
        {
          "type" : "build-system",
          "url" : "https://continuum-ci.apache.org/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/LOGGING"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/repos/asf/commons/proper/logging/trunk"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-codec/commons-codec@1.11?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-codec",
      "name" : "commons-codec",
      "version" : "1.11",
      "description" : "The Apache Commons Codec package contains simple encoder and decoders for various formats such as Base64 and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a collection of phonetic encoding utilities.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "567159b1ae257a43e1391a8f59d24cfe"
        },
        {
          "alg" : "SHA-1",
          "content" : "3acb4705652e16236558f0f4f2192cc33c3bd189"
        },
        {
          "alg" : "SHA-256",
          "content" : "e599d5318e97aa48f42136a2927e6dfa4e8881dff0e6c8e3109ddbbff51d7b7d"
        },
        {
          "alg" : "SHA-512",
          "content" : "d9586162b257386b5871e7e9ae255a38014a9efaeef5148de5e40a3b0200364dad8516bddd554352aa2e5337bec2cc11df88c76c4fdde96a40f3421aa60650d7"
        },
        {
          "alg" : "SHA-384",
          "content" : "9ae3d8fd4c38f3af52c76c5f98039109901cb0f70700e6d9999b27cc4b30b188e2688aa4adcf6b846376bc3ca125907a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "bd272e22540371e7d834cd897bce9be657293ba9c5584e0d47a4073711dacb524cc59e294e942ffc01613d17ac7d6ac1"
        },
        {
          "alg" : "SHA3-256",
          "content" : "90ec34f9701a8b212c65e6167c505ea6417289f910deedcac8517075b8349728"
        },
        {
          "alg" : "SHA3-512",
          "content" : "101bc04efae2bd16d7923e61bca922c4a006b0e4b34909e0f8865196cb4df4f4f6269737c17880b4dfd0309cb487b806e88d09c6e1a7dc70237563b3f4312f7f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-codec/commons-codec@1.11?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://commons.apache.org/proper/commons-codec/"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/CODEC"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/commons/proper/codec/trunk"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.logging.log4j/log4j-api@2.25.5?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.logging.log4j",
      "name" : "log4j-api",
      "version" : "2.25.5",
      "description" : "The logging API of the Log4j project. Library and application code can log through this API. It contains a simple built-in implementation (`SimpleLogger`) for trivial use cases. Production applications are recommended to use Log4j API in combination with a fully-fledged implementation, such as Log4j Core.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6da507c0ef11c49576534c1db69e1b99"
        },
        {
          "alg" : "SHA-1",
          "content" : "6c80ea65e41f7858f7e15cb390c98c36167c7b3a"
        },
        {
          "alg" : "SHA-256",
          "content" : "64777f73ea0b3104c04eb82befbdccc30a425a19e83ad06cb2f93aa303511863"
        },
        {
          "alg" : "SHA-512",
          "content" : "68c21b4af4770f18c27794448c335a236eb906326ffe51b7a2634c988d443da760a6057cd94ff5e44363f4b209489091225a48916f327d11ce690bb45d334318"
        },
        {
          "alg" : "SHA-384",
          "content" : "822c01f1bab171f9e8d8738ea565affb0a3d7a0469d2aca239bc3f05073d7f7a7f6e9cc621c6407cd60e7a5fbb301df4"
        },
        {
          "alg" : "SHA3-384",
          "content" : "c0ec07e06db924837ee4a55211d6a2a1f53dc60b7dbcfca01a13636e8af25201fd99d5010c9ab9484be7308078e98125"
        },
        {
          "alg" : "SHA3-256",
          "content" : "73418d86d441a821fd8abc6658058e0cf47bd289d31facc7c52fe4c85f00a258"
        },
        {
          "alg" : "SHA3-512",
          "content" : "69d1ef7061426e264f475c47a72b4d4962e4dfca0a21db8df751ac9423b1227fd9352da4627509aa3e01e2df9c7b2cc2257c21e1f83d3dec9e14ec6466946312"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.logging.log4j/log4j-api@2.25.5?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://logging.apache.org/log4j/2.x/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/logging-log4j2/actions"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/apache/logging-log4j2/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?log4j-user@logging.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/logging-log4j2"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.logging.log4j/log4j-core@2.25.5?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.logging.log4j",
      "name" : "log4j-core",
      "version" : "2.25.5",
      "description" : "A versatile, industrial-grade, and reference implementation of the Log4j API. It bundles a rich set of components to assist various use cases: Appenders targeting files, network sockets, databases, SMTP servers; Layouts that can render CSV, HTML, JSON, Syslog, etc. formatted outputs; Filters that can be configured using log event rates, regular expressions, scripts, time, etc. It contains several extension points to introduce custom components, if needed.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "ed5ce14cedc0237099aa68ccd1af0a91"
        },
        {
          "alg" : "SHA-1",
          "content" : "c194a13e18b0a36014e867d2d323b989bf212151"
        },
        {
          "alg" : "SHA-256",
          "content" : "050c4f85deb48b055e9c041ac39043fbb79ce477841a11a1eb2969c86c6a0072"
        },
        {
          "alg" : "SHA-512",
          "content" : "47b6d529527626aefbb875858289f1acc50f342069eb7f340e3305760afc0905a4ed8714ce92c0bac33af1c3a4e6dbc08f937adc5fc12b5025a4c1649a40fa8b"
        },
        {
          "alg" : "SHA-384",
          "content" : "379cf1e4bf3d05d4d82867458864e2f6c590aa24eee4c985a07fff516931ad1f7268184c4b3433c3e92c971ca063bc53"
        },
        {
          "alg" : "SHA3-384",
          "content" : "c2c6ad9f62ecc2a6d8b77eebbd1e1c3b14f33fb4068b174f6526ada4479f3c4a4b617d444e77abcd81032daeed51ebdc"
        },
        {
          "alg" : "SHA3-256",
          "content" : "393301b948ab6a123873aea0cb8c551c1870b385425b897925695f3c9748aca4"
        },
        {
          "alg" : "SHA3-512",
          "content" : "cbceadab4e0e63c77908877eada65631e604585ea7f5a3514534e2dc814bf4372ec145404b43c1444c362a528ab8dcac7444ef98f816cd315f51bfc181e2189c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.logging.log4j/log4j-core@2.25.5?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://logging.apache.org/log4j/2.x/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/logging-log4j2/actions"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/apache/logging-log4j2/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?log4j-user@logging.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/logging-log4j2"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.logging.log4j/log4j-slf4j-impl@2.25.5?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.logging.log4j",
      "name" : "log4j-slf4j-impl",
      "version" : "2.25.5",
      "description" : "SLF4J 1 binding (provider) for the Log4j API. It forwards SLF4J 1 calls to the Log4j API. (Refer to the `log4j-to-slf4j` artifact for forwarding the Log4j API to SLF4J.)",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "80e0a5675bd299036635cc931d2e4d9d"
        },
        {
          "alg" : "SHA-1",
          "content" : "542f388168432b2dfce12edde0d99c01649c4873"
        },
        {
          "alg" : "SHA-256",
          "content" : "3d25b926bc6025c47ec010459749c12aa66b9d5537ba1922d67d89a098a66607"
        },
        {
          "alg" : "SHA-512",
          "content" : "5c6a1b6e86d7a2c11e4a68daae6e91248b60b9d2c9e2a5846db78eef4d6f885c583295dc51a8e8e7f8b325313711caa165cbbb4fca1c040e6ff09ff879b454f6"
        },
        {
          "alg" : "SHA-384",
          "content" : "bc626ab67676b1ec9b86495f84f94e069c6d4670738a312a915c5782a373ca5bca9d6d0f451d1734f34daafc0922b6ef"
        },
        {
          "alg" : "SHA3-384",
          "content" : "59cbb236a43e89d8e8fdfa93e37ef149175da68e541dad3a7202182afba4b7a04defd6a08446fc7113940a4094e8d4d8"
        },
        {
          "alg" : "SHA3-256",
          "content" : "d2194f051225102a7fe84a98124316d5b707e933306d2e5f18e78c5323d1c2a7"
        },
        {
          "alg" : "SHA3-512",
          "content" : "6ce6980f341ca2f43ade2eb6d8f2f2cdb135aee6660ac9329f8ab5a60e6908650ad9c5339e2c6471b6b620eba1e2fb1e6b01878963e9ade26e1ab088ac5c7194"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.logging.log4j/log4j-slf4j-impl@2.25.5?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://logging.apache.org/log4j/2.x/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/logging-log4j2/actions"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/apache/logging-log4j2/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?log4j-user@logging.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/logging-log4j2"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
      "publisher" : "QOS.ch",
      "group" : "org.slf4j",
      "name" : "slf4j-api",
      "version" : "1.7.36",
      "description" : "The slf4j API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "872da51f5de7f3923da4de871d57fd85"
        },
        {
          "alg" : "SHA-1",
          "content" : "6c62681a2f655b49963a5983b8b0950a6120ae14"
        },
        {
          "alg" : "SHA-256",
          "content" : "d3ef575e3e4979678dc01bf1dcce51021493b4d11fb7f1be8ad982877c16a1c0"
        },
        {
          "alg" : "SHA-512",
          "content" : "f9b033fc019a44f98b16048da7e2b59edd4a6a527ba60e358f65ab88e0afae03a9340f1b3e8a543d49fa542290f499c5594259affa1ff3e6e7bf3b428d4c610b"
        },
        {
          "alg" : "SHA-384",
          "content" : "2b14ad035877087157e379d3277dcdcd79e58d6bdb147c47d29e377d75ce53ad42cafbf22f5fb7827c7e946ff4876b9a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "3bc3110dafb8d5be16a39f3b2671a466463cd99eb39610c0e4719a7bf2d928f2ea213c734887c6926a07c4cca7769e4b"
        },
        {
          "alg" : "SHA3-256",
          "content" : "ba2608179fcf46e2291a90b9cbb4aa30d718e481f59c350cc21c73b88d826881"
        },
        {
          "alg" : "SHA3-512",
          "content" : "14c4edcd19702ef607d78826839d8a6d3a39157df54b89a801d3d3cbbe1307131a77671b041c761122730fb1387888c5ec2e46bdd80e1cb07f8f144676441824"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/license/mit/"
          }
        }
      ],
      "purl" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.slf4j.org"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/qos-ch/slf4j/slf4j-api"
        }
      ]
    }
  ],
  "dependencies" : [
    {
      "ref" : "pkg:maven/ch.section11/TRSuiteFX_jdk8@26.02.0.1?type=jar",
      "dependsOn" : [
        "pkg:maven/ch.section11/validators@26.02.0.1?type=jar",
        "pkg:maven/org.dom4j/dom4j@2.1.4?type=jar",
        "pkg:maven/org.controlsfx/controlsfx@8.40.16?type=jar",
        "pkg:maven/eu.hansolo/Medusa@8.3?type=jar",
        "pkg:maven/org.jfxtras/jfxtras-fxml@8.0-r6?type=jar",
        "pkg:maven/org.jfxtras/jfxtras-common@8.0-r6?type=jar",
        "pkg:maven/org.jfxtras/jfxtras-controls@8.0-r6?type=jar",
        "pkg:maven/org.jfxtras/jfxtras-font-roboto@8.0-r6?type=jar",
        "pkg:maven/org.apache.httpcomponents/httpclient@4.5.14?type=jar",
        "pkg:maven/org.apache.logging.log4j/log4j-api@2.25.5?type=jar",
        "pkg:maven/org.apache.logging.log4j/log4j-core@2.25.5?type=jar",
        "pkg:maven/org.apache.logging.log4j/log4j-slf4j-impl@2.25.5?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/ch.section11/validators@26.02.0.1?type=jar",
      "dependsOn" : [
        "pkg:maven/ch.section11/trsuite-lib@26.02.0.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/ch.section11/trsuite-lib@26.02.0.1?type=jar",
      "dependsOn" : [
        "pkg:maven/ch.section11/xsd-generated@26.02.0.1?type=jar",
        "pkg:maven/ch.section11/trsuite-utils@26.02.0.1?type=jar",
        "pkg:maven/org.bouncycastle/bcprov-jdk18on@1.85?type=jar",
        "pkg:maven/org.bouncycastle/bcpkix-jdk18on@1.85?type=jar",
        "pkg:maven/org.bouncycastle/bcutil-jdk18on@1.85?type=jar",
        "pkg:maven/org.apache.commons/commons-compress@1.27.1?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar",
        "pkg:maven/commons-beanutils/commons-beanutils@1.11.0?type=jar",
        "pkg:maven/commons-validator/commons-validator@1.10.0?type=jar",
        "pkg:maven/org.apache.santuario/xmlsec@2.3.4?type=jar",
        "pkg:maven/commons-cli/commons-cli@1.11.0?type=jar",
        "pkg:maven/com.google.zxing/core@3.4.1?type=jar",
        "pkg:maven/com.google.zxing/javase@3.4.1?type=jar",
        "pkg:maven/org.apache.commons/commons-csv@1.14.1?type=jar",
        "pkg:maven/org.reflections/reflections@0.9.11?type=jar",
        "pkg:maven/org.jdom/jdom2@2.0.6.1?type=jar",
        "pkg:maven/org.zeroturnaround/zt-zip@1.13?type=jar",
        "pkg:maven/org.apache.poi/poi@5.2.5?type=jar",
        "pkg:maven/org.apache.poi/poi-ooxml@5.2.5?type=jar",
        "pkg:maven/org.apache.poi/poi-ooxml-lite@5.2.5?type=jar",
        "pkg:maven/org.apache.xmlbeans/xmlbeans@5.2.2?type=jar",
        "pkg:maven/com.github.mifmif/generex@1.0.2?type=jar",
        "pkg:maven/net.java.dev.jna/jna@5.4.0?type=jar",
        "pkg:maven/net.java.dev.jna/jna-platform@5.4.0?type=jar",
        "pkg:maven/org.apache.httpcomponents/httpclient@4.5.14?type=jar",
        "pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar",
        "pkg:maven/org.apache.pdfbox/pdfbox@2.0.35?type=jar",
        "pkg:maven/org.apache.pdfbox/preflight@2.0.35?type=jar",
        "pkg:maven/org.apache.pdfbox/xmpbox@2.0.35?type=jar",
        "pkg:maven/com.google.guava/guava@32.1.3-jre?type=jar",
        "pkg:maven/org.ini4j/ini4j@0.5.4?type=jar",
        "pkg:maven/javax.inject/javax.inject@1?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.18.10?type=jar",
        "pkg:maven/commons-io/commons-io@2.18.0?type=jar",
        "pkg:maven/com.github.mwiede/jsch@0.2.26?type=jar",
        "pkg:maven/com.hierynomus/sshj@0.40.0?type=jar",
        "pkg:maven/org.apache.commons/commons-vfs2@2.10.0?type=jar",
        "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.2?type=jar",
        "pkg:maven/com.fasterxml.woodstox/woodstox-core@6.5.1?type=jar",
        "pkg:maven/org.apache.logging.log4j/log4j-slf4j-impl@2.25.5?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/ch.section11/xsd-generated@26.02.0.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/ch.section11/trsuite-utils@26.02.0.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.bouncycastle/bcprov-jdk18on@1.85?type=jar",
        "pkg:maven/org.bouncycastle/bcpkix-jdk18on@1.85?type=jar",
        "pkg:maven/org.bouncycastle/bcutil-jdk18on@1.85?type=jar",
        "pkg:maven/org.apache.pdfbox/pdfbox@2.0.35?type=jar",
        "pkg:maven/org.apache.pdfbox/preflight@2.0.35?type=jar",
        "pkg:maven/org.apache.pdfbox/xmpbox@2.0.35?type=jar",
        "pkg:maven/org.apache.logging.log4j/log4j-slf4j-impl@2.25.5?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.bouncycastle/bcprov-jdk18on@1.85?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.bouncycastle/bcpkix-jdk18on@1.85?type=jar",
      "dependsOn" : [
        "pkg:maven/org.bouncycastle/bcutil-jdk18on@1.85?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.bouncycastle/bcutil-jdk18on@1.85?type=jar",
      "dependsOn" : [
        "pkg:maven/org.bouncycastle/bcprov-jdk18on@1.85?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.pdfbox/pdfbox@2.0.35?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.pdfbox/fontbox@2.0.35?type=jar",
        "pkg:maven/commons-logging/commons-logging@1.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.pdfbox/fontbox@2.0.35?type=jar",
      "dependsOn" : [
        "pkg:maven/commons-logging/commons-logging@1.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/commons-logging/commons-logging@1.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.pdfbox/preflight@2.0.35?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.pdfbox/pdfbox@2.0.35?type=jar",
        "pkg:maven/org.apache.pdfbox/xmpbox@2.0.35?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.pdfbox/xmpbox@2.0.35?type=jar",
      "dependsOn" : [
        "pkg:maven/commons-logging/commons-logging@1.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.logging.log4j/log4j-slf4j-impl@2.25.5?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.logging.log4j/log4j-api@2.25.5?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/org.apache.logging.log4j/log4j-core@2.25.5?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.logging.log4j/log4j-api@2.25.5?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.logging.log4j/log4j-core@2.25.5?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.logging.log4j/log4j-api@2.25.5?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-compress@1.27.1?type=jar",
      "dependsOn" : [
        "pkg:maven/commons-codec/commons-codec@1.11?type=jar",
        "pkg:maven/commons-io/commons-io@2.18.0?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/commons-codec/commons-codec@1.11?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-io/commons-io@2.18.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-beanutils/commons-beanutils@1.11.0?type=jar",
      "dependsOn" : [
        "pkg:maven/commons-logging/commons-logging@1.2?type=jar",
        "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-validator/commons-validator@1.10.0?type=jar",
      "dependsOn" : [
        "pkg:maven/commons-beanutils/commons-beanutils@1.11.0?type=jar",
        "pkg:maven/commons-digester/commons-digester@2.1?type=jar",
        "pkg:maven/commons-logging/commons-logging@1.2?type=jar",
        "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/commons-digester/commons-digester@2.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.santuario/xmlsec@2.3.4?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.11?type=jar",
        "pkg:maven/com.fasterxml.woodstox/woodstox-core@6.5.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.woodstox/woodstox-core@6.5.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-cli/commons-cli@1.11.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.zxing/core@3.4.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.zxing/javase@3.4.1?type=jar",
      "dependsOn" : [
        "pkg:maven/com.google.zxing/core@3.4.1?type=jar",
        "pkg:maven/com.beust/jcommander@1.78?type=jar",
        "pkg:maven/com.github.jai-imageio/jai-imageio-core@1.4.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.beust/jcommander@1.78?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.github.jai-imageio/jai-imageio-core@1.4.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-csv@1.14.1?type=jar",
      "dependsOn" : [
        "pkg:maven/commons-io/commons-io@2.18.0?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.11?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.reflections/reflections@0.9.11?type=jar",
      "dependsOn" : [
        "pkg:maven/com.google.guava/guava@32.1.3-jre?type=jar",
        "pkg:maven/org.javassist/javassist@3.21.0-GA?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.google.guava/guava@32.1.3-jre?type=jar",
      "dependsOn" : [
        "pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar",
        "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
        "pkg:maven/org.checkerframework/checker-qual@3.37.0?type=jar",
        "pkg:maven/com.google.errorprone/error_prone_annotations@2.21.1?type=jar",
        "pkg:maven/com.google.j2objc/j2objc-annotations@2.8?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.checkerframework/checker-qual@3.37.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.21.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.j2objc/j2objc-annotations@2.8?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.javassist/javassist@3.21.0-GA?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.jdom/jdom2@2.0.6.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.zeroturnaround/zt-zip@1.13?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.poi/poi@5.2.5?type=jar",
      "dependsOn" : [
        "pkg:maven/commons-codec/commons-codec@1.11?type=jar",
        "pkg:maven/org.apache.commons/commons-collections4@4.4?type=jar",
        "pkg:maven/org.apache.commons/commons-math3@3.6.1?type=jar",
        "pkg:maven/commons-io/commons-io@2.18.0?type=jar",
        "pkg:maven/com.zaxxer/SparseBitSet@1.3?type=jar",
        "pkg:maven/org.apache.logging.log4j/log4j-api@2.25.5?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-collections4@4.4?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-math3@3.6.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.zaxxer/SparseBitSet@1.3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.poi/poi-ooxml@5.2.5?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.poi/poi@5.2.5?type=jar",
        "pkg:maven/org.apache.xmlbeans/xmlbeans@5.2.2?type=jar",
        "pkg:maven/org.apache.commons/commons-compress@1.27.1?type=jar",
        "pkg:maven/commons-io/commons-io@2.18.0?type=jar",
        "pkg:maven/com.github.virtuald/curvesapi@1.08?type=jar",
        "pkg:maven/org.apache.logging.log4j/log4j-api@2.25.5?type=jar",
        "pkg:maven/org.apache.commons/commons-collections4@4.4?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.xmlbeans/xmlbeans@5.2.2?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.logging.log4j/log4j-api@2.25.5?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.github.virtuald/curvesapi@1.08?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.poi/poi-ooxml-lite@5.2.5?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.xmlbeans/xmlbeans@5.2.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.github.mifmif/generex@1.0.2?type=jar",
      "dependsOn" : [
        "pkg:maven/dk.brics.automaton/automaton@1.11-8?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/dk.brics.automaton/automaton@1.11-8?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/net.java.dev.jna/jna@5.4.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/net.java.dev.jna/jna-platform@5.4.0?type=jar",
      "dependsOn" : [
        "pkg:maven/net.java.dev.jna/jna@5.4.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.httpcomponents/httpclient@4.5.14?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar",
        "pkg:maven/commons-logging/commons-logging@1.2?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.11?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.ini4j/ini4j@0.5.4?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/javax.inject/javax.inject@1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.18.10?type=jar",
      "dependsOn" : [
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.18.10?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.18.10?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.18.10?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.18.10?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.github.mwiede/jsch@0.2.26?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.hierynomus/sshj@0.40.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/org.bouncycastle/bcprov-jdk18on@1.85?type=jar",
        "pkg:maven/org.bouncycastle/bcpkix-jdk18on@1.85?type=jar",
        "pkg:maven/com.hierynomus/asn-one@0.6.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.hierynomus/asn-one@0.6.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-vfs2@2.10.0?type=jar",
      "dependsOn" : [
        "pkg:maven/commons-logging/commons-logging@1.2?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar",
        "pkg:maven/commons-io/commons-io@2.18.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.dom4j/dom4j@2.1.4?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.controlsfx/controlsfx@8.40.16?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/eu.hansolo/Medusa@8.3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.jfxtras/jfxtras-fxml@8.0-r6?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.jfxtras/jfxtras-common@8.0-r6?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.jfxtras/jfxtras-controls@8.0-r6?type=jar",
      "dependsOn" : [
        "pkg:maven/org.jfxtras/jfxtras-common@8.0-r6?type=jar",
        "pkg:maven/org.jfxtras/jfxtras-fxml@8.0-r6?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.jfxtras/jfxtras-font-roboto@8.0-r6?type=jar",
      "dependsOn" : [ ]
    }
  ]
}