Added: release/camel/apache-camel/4.0.4/apache-camel-4.0.4-sbom.xml ============================================================================== --- release/camel/apache-camel/4.0.4/apache-camel-4.0.4-sbom.xml (added) +++ release/camel/apache-camel/4.0.4/apache-camel-4.0.4-sbom.xml Thu Feb 1 15:28:22 2024 @@ -0,0 +1,69906 @@ +<?xml version="1.0" encoding="UTF-8"?> +<bom version="1" xmlns="http://cyclonedx.org/schema/bom/1.4";> + <metadata> + <tools> + <tool> + <vendor>OWASP Foundation</vendor> + <name>CycloneDX Maven plugin</name> + <version>2.7.10</version> + <hashes> + <hash alg="MD5">1cc7f6a0382f8bb2f758d6a6ea401d1b</hash> + <hash alg="SHA-1">a4297947a1f2d7d453105db542651614bbd37f38</hash> + <hash alg="SHA-256">bd0fdd8f2f2116eee5e715aeac1580f19eb7a10ec2b6f805b53567067658e872</hash> + <hash alg="SHA-512">9cde8352a427e10b96cae01348fc7cfe5d4aa9cd0a5e5dd93b414ce3bb7d112993c3b3004e53af52567fbfa16de0704ec59a5556a635ad70571fd124ae389f39</hash> + <hash alg="SHA-384">93d7bf5b5c735347edfbfbd66810273ca840f9a322b816d22d44c3d8e8255c09e86570bb23712aeb0cade0f478be5aeb</hash> + <hash alg="SHA3-384">4467f16e9ca32190a6e49c65339eb28ee5e8c78f4e918fcf95128a4b7648898de56ccb43eacfad0c9391ef8cdb7d629a</hash> + <hash alg="SHA3-256">ed2996c99b483e969221d5e9a40f562ea2ab85442d361d72a90e85266a3ed781</hash> + <hash alg="SHA3-512">c8e6ea9ddc38edc77e284b3bf541663e84752bdc59ed1935799847a48a14ea2fa531b61008fefcba37d732a56702a11ac112437b9b80d18f4ecc8ef0ecfb32cf</hash> + </hashes> + </tool> + </tools> + <component type="library" bom-ref="pkg:maven/org.apache.camel/camel@4.0.4?type=pom"> + <publisher>The Apache Software Foundation</publisher> + <group>org.apache.camel</group> + <name>camel</name> + <version>4.0.4</version> + <description>Camel Root POM</description> + <licenses> + <license> + <id>Apache-2.0</id> + <url>https://www.apache.org/licenses/LICENSE-2.0</url> + </license> + </licenses> + <purl>pkg:maven/org.apache.camel/camel@4.0.4?type=pom</purl> + <externalReferences><reference type="website"><url>https://camel.apache.org</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/CAMEL</url></reference><reference type="mailing-list"><url>dev-subscr...@camel.apache.org</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=camel.git;a=summary</url></reference></externalReferences> + </component> + <properties> + <property name="maven.goal">makeAggregateBom</property> + <property name="maven.scopes">compile,provided,runtime,system</property> + <property name="cdx:reproducible">enabled</property> + </properties> + </metadata> + <components> + <component type="library" bom-ref="pkg:maven/org.apache.camel/camel-buildtools@4.0.4?type=jar"> + <publisher>The Apache Software Foundation</publisher> + <group>org.apache.camel</group> + <name>camel-buildtools</name> + <version>4.0.4</version> + <description>The build tools for the Apache Camel project</description> + <licenses> + <license> + <id>Apache-2.0</id> + <url>https://www.apache.org/licenses/LICENSE-2.0</url> + </license> + </licenses> + <purl>pkg:maven/org.apache.camel/camel-buildtools@4.0.4?type=jar</purl> + <externalReferences><reference type="website"><url>https://camel.apache.org/camel-buildtools</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/CAMEL</url></reference><reference type="mailing-list"><url>dev-subscr...@camel.apache.org</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=camel.git;a=summary/camel-buildtools</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.apache.camel/camel-parent@4.0.4?type=pom"> + <group>org.apache.camel</group> + <name>camel-parent</name> + <version>4.0.4</version> + <purl>pkg:maven/org.apache.camel/camel-parent@4.0.4?type=pom</purl> + </component> + <component type="library" bom-ref="pkg:maven/org.apache.camel/camel-etc@4.0.4?type=pom"> + <group>org.apache.camel</group> + <name>camel-etc</name> + <version>4.0.4</version> + <purl>pkg:maven/org.apache.camel/camel-etc@4.0.4?type=pom</purl> + </component> + <component type="library" bom-ref="pkg:maven/org.apache.camel/tooling@4.0.4?type=pom"> + <group>org.apache.camel</group> + <name>tooling</name> + <version>4.0.4</version> + <purl>pkg:maven/org.apache.camel/tooling@4.0.4?type=pom</purl> + </component> + <component type="library" bom-ref="pkg:maven/org.apache.camel/camel-tooling-util@4.0.4?type=jar"> + <publisher>The Apache Software Foundation</publisher> + <group>org.apache.camel</group> + <name>camel-tooling-util</name> + <version>4.0.4</version> + <description>Tooling utilities</description> + <licenses> + <license> + <id>Apache-2.0</id> + <url>https://www.apache.org/licenses/LICENSE-2.0</url> + </license> + </licenses> + <purl>pkg:maven/org.apache.camel/camel-tooling-util@4.0.4?type=jar</purl> + <externalReferences><reference type="website"><url>https://camel.apache.org/camel-parent/tooling/camel-tooling-util</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/CAMEL</url></reference><reference type="mailing-list"><url>dev-subscr...@camel.apache.org</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=camel.git;a=summary/camel-parent/tooling/camel-tooling-util</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.junit.jupiter/junit-jupiter-api@5.9.3?type=jar"> + <group>org.junit.jupiter</group> + <name>junit-jupiter-api</name> + <version>5.9.3</version> + <description>Module "junit-jupiter-api" of JUnit 5.</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">13eb9bfb15588e85c1fb76587f8f5d1e</hash> + <hash alg="SHA-1">815818ad6ffcc8d320d8fbdf3d748c753cf83201</hash> + <hash alg="SHA-256">d895e3eedf4fa1b10de31a91be55a301bb307bf18ef325b3fa5db3f80ee92d1c</hash> + <hash alg="SHA-512">05ef01d2f065145524a75b17a8ecc8cf46d21987d85b2d1e30bd06514ee7425bacf9a8b6a467a6e95b49bcfe27f5e5a2fe3da210fb09113cee1f14be4b686aa5</hash> + <hash alg="SHA-384">45192e2231490b92fef28fc22c6c9399fb17d78f75ef473dcc37efd8b6350eaf1831eec9b0c6909bd849714f2d2fc49b</hash> + <hash alg="SHA3-384">befa0de7038d014eb7d9581654c6d10e601b36f079f82ecfad12e6a05e8a15f82f7b47786372eb46fe6eb7ebf92343c1</hash> + <hash alg="SHA3-256">c41b11de68a605d2a5cb213f461f887d4d0b4cbdc46a2e239d9aab77cdb3827f</hash> + <hash alg="SHA3-512">73de4a6a0c1677531b832bbb315fbb7bd04083ac4b9d7ad36d3eb651d9832940b462dde0dccf887a23253735b1ed9099dca6d06c26dd830c844babc75292dc48</hash> + </hashes> + <licenses> + <license> + <id>EPL-2.0</id> + </license> + </licenses> + <purl>pkg:maven/org.junit.jupiter/junit-jupiter-api@5.9.3?type=jar</purl> + <externalReferences><reference type="website"><url>https://junit.org/junit5/</url></reference><reference type="vcs"><url>https://github.com/junit-team/junit5</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.opentest4j/opentest4j@1.2.0?type=jar"> + <group>org.opentest4j</group> + <name>opentest4j</name> + <version>1.2.0</version> + <description>Open Test Alliance for the JVM</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">45c9a837c21f68e8c93e85b121e2fb90</hash> + <hash alg="SHA-1">28c11eb91f9b6d8e200631d46e20a7f407f2a046</hash> + <hash alg="SHA-256">58812de60898d976fb81ef3b62da05c6604c18fd4a249f5044282479fc286af2</hash> + <hash alg="SHA-512">17f77797a260eb2bd1666a90e25efc79a5413afa9df1c1cb6c4cd1949d61c38b241e3bb20956396b5f54d144720303d72a2ac00bc5bf245a260a3c3099e01c74</hash> + <hash alg="SHA-384">ef25f5dd948c9ab7256e896da994871c1645b22a8d2d83f1e9ff7c6562b62acb70fcf0bb976a9580fb955a8e8b9c43dd</hash> + <hash alg="SHA3-384">c8ae5d803f34d54150681490afaa595a607e31c15c82765fb24eb7035f3310a4db71832d4ea1840d5281c4fb15e25a91</hash> + <hash alg="SHA3-256">874b139216e546b33623c53452aea25f36d6c5ec64446aa27be1e60c6838e5c3</hash> + <hash alg="SHA3-512">58368f990cb11d2965129b32986edd007f909b1187f8fe6842306aa5179fa74d7593bca2042776f6deb68921069719ee4f2bc54e609f87b974a885d7aa7fc05f</hash> + </hashes> + <licenses> + <license> + <id>Apache-2.0</id> + </license> + </licenses> + <purl>pkg:maven/org.opentest4j/opentest4j@1.2.0?type=jar</purl> + <externalReferences><reference type="website"><url>https://github.com/ota4j-team/opentest4j</url></reference><reference type="vcs"><url>https://github.com/ota4j-team/opentest4j</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.junit.platform/junit-platform-commons@1.9.3?type=jar"> + <group>org.junit.platform</group> + <name>junit-platform-commons</name> + <version>1.9.3</version> + <description>Module "junit-platform-commons" of JUnit 5.</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">b604474c7be847bca1589ba61a8434e0</hash> + <hash alg="SHA-1">36b2e26a90c41603be7f0094bee80e3f8a2cd4d4</hash> + <hash alg="SHA-256">8519157df813c210e85fc1414b74109e3d85f43d7092563ed704c43c48f0d5e6</hash> + <hash alg="SHA-512">695bb0febda20f6cad5687ef681daa4078a2d665425f7b2b81d89173d53dc0bb7f71b8206785c244a7f3d1d7eb41b0ed0bd16086f15816e3f048e35bdfe3b5b3</hash> + <hash alg="SHA-384">59f68c236ad2d696a5b681e441141365f19fe66702a749a9d65744d5552d93a019a206e7d4ece57b85ed578d3fe7d662</hash> + <hash alg="SHA3-384">785e95e7fb31dc5115d1ef33b1efff30b1e981b76df9c74d90e530d629a35442e98199adcdae8bcda8d83d4804b119e4</hash> + <hash alg="SHA3-256">ef28227b638818920d753da5bfac85655742f1cd1e6d51e0f0eed55264480da4</hash> + <hash alg="SHA3-512">240c0a6b60169e7816af344a0ca33c77cc722e17edd80d4953236c54cd337db1d98f335da0b7848127b5dbd0fbb16945207bc488cb9c9d4ba11dd8620797169a</hash> + </hashes> + <licenses> + <license> + <id>EPL-2.0</id> + </license> + </licenses> + <purl>pkg:maven/org.junit.platform/junit-platform-commons@1.9.3?type=jar</purl> + <externalReferences><reference type="website"><url>https://junit.org/junit5/</url></reference><reference type="vcs"><url>https://github.com/junit-team/junit5</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.apiguardian/apiguardian-api@1.1.2?type=jar"> + <group>org.apiguardian</group> + <name>apiguardian-api</name> + <version>1.1.2</version> + <description>@API Guardian</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">8c7de3f82037fa4a2e8be2a2f13092af</hash> + <hash alg="SHA-1">a231e0d844d2721b0fa1b238006d15c6ded6842a</hash> + <hash alg="SHA-256">b509448ac506d607319f182537f0b35d71007582ec741832a1f111e5b5b70b38</hash> + <hash alg="SHA-512">d7ccd0e7019f1a997de39d66dc0ad4efe150428fdd7f4c743c93884f1602a3e90135ad34baea96d5b6d925ad6c0c8487c8e78304f0a089a12383d4a62e2c9a61</hash> + <hash alg="SHA-384">5ae11cfedcee7da43a506a67946ddc8a7a2622284a924ba78f74541e9a22db6868a15f5d84edb91a541e38afded734ea</hash> + <hash alg="SHA3-384">c146116b3dfd969200b2ce52d96b92dd02d6f5a45a86e7e85edf35600ddbc2f3c6e8a1ad7e2db4dcd2c398c09fad0927</hash> + <hash alg="SHA3-256">b4b436d7f615fc0b820204e69f83c517d1c1ccc5f6b99e459209ede4482268de</hash> + <hash alg="SHA3-512">7b95b7ac68a6891b8901b5507acd2c24a0c1e20effa63cd513764f513eab4eb55f8de5178edbe0a400c11f3a18d3f56243569d6d663100f06dd98288504c09c5</hash> + </hashes> + <licenses> + <license> + <id>Apache-2.0</id> + </license> + </licenses> + <purl>pkg:maven/org.apiguardian/apiguardian-api@1.1.2?type=jar</purl> + <externalReferences><reference type="website"><url>https://github.com/apiguardian-team/apiguardian</url></reference><reference type="vcs"><url>https://github.com/apiguardian-team/apiguardian</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.junit.jupiter/junit-jupiter-params@5.9.3?type=jar"> + <group>org.junit.jupiter</group> + <name>junit-jupiter-params</name> + <version>5.9.3</version> + <description>Module "junit-jupiter-params" of JUnit 5.</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">53dc423c0755d3aa3472274de9a72e44</hash> + <hash alg="SHA-1">9e2a4bf6016a1975f408a73523392875cff7c26f</hash> + <hash alg="SHA-256">2af282fe91e56495c03b84e9cae702eaa212fc2f6a31fd9d79e31ccb64cd81fd</hash> + <hash alg="SHA-512">6051ae707c1dfc443ad3b3920e2045dc9e630c7c9bf3a4f4e99709d35471ae6c490e4262bdb69ad5d0ff0512805d0aee742ad1966d8a5805d4835d1270d6f8c5</hash> + <hash alg="SHA-384">b55981f198ce7a140aef86669dbfce55428e09a304beb2f4b6ebb3edbad7d601883bb9b365f17a84a304c03a865114cf</hash> + <hash alg="SHA3-384">74cf903e72dcd02eec18be027e3394ee15f3813cc0d9a89a387dd18b5f6432e16a5020e0359619870bf04f065dfe3e16</hash> + <hash alg="SHA3-256">128c2f3ed2d715d4b9ad51c85e538e83d945f0ccab31dcc6df24e9b2b44aba59</hash> + <hash alg="SHA3-512">4281f58528e7c5f756eb015866fe9a47e0aef7edc07e4058b8b4d8a9dc0f95efa31719c0d4695422cfda485018c341053b04587b2f17e5b36385b7b1ab8e7e68</hash> + </hashes> + <licenses> + <license> + <id>EPL-2.0</id> + </license> + </licenses> + <purl>pkg:maven/org.junit.jupiter/junit-jupiter-params@5.9.3?type=jar</purl> + <externalReferences><reference type="website"><url>https://junit.org/junit5/</url></reference><reference type="vcs"><url>https://github.com/junit-team/junit5</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.junit.jupiter/junit-jupiter-engine@5.9.3?type=jar"> + <group>org.junit.jupiter</group> + <name>junit-jupiter-engine</name> + <version>5.9.3</version> + <description>Module "junit-jupiter-engine" of JUnit 5.</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">c6c63ee8268ac30c5e6b6e201e703f14</hash> + <hash alg="SHA-1">355322b03bf39306a183162cd06626c206f0286b</hash> + <hash alg="SHA-256">b55e304b1cd2e8f116c1ab77a5dc3eca8c4d9b46a69e084b63aca51cdeb55f0f</hash> + <hash alg="SHA-512">ecf22507c2e9e25d2d71952ed955e50ce7ed592a40ab87d436be341f45291bf0d5d2e25f97c6440f067e35b1c3f626a4a561f47922b670cd68a48365ef9c647b</hash> + <hash alg="SHA-384">5dcfb48e72ab5a1c9f996be29e4e454dfe55d2d930395aeffc2dc30bc07984b09bcef980e2a1ace2d2a47143ed1daec9</hash> + <hash alg="SHA3-384">c045c7f88669b358259900ec9c0fc809bdd47246bdcc036daf3d3fbaee4caf2085a753cc9ee99b461d16ca449c9490f8</hash> + <hash alg="SHA3-256">dcc39226a6b34bac23f59cf493b4c154b19840f768aae6addd5d802a750818c3</hash> + <hash alg="SHA3-512">3313b5dc0c9ce32fe604fd7b385256e41d8943934062d74809822d1413201a8d626fb3be850b9b03c2359454b47e8f9742a984dd930b8d3b7bdf0850b5884cde</hash> + </hashes> + <licenses> + <license> + <id>EPL-2.0</id> + </license> + </licenses> + <purl>pkg:maven/org.junit.jupiter/junit-jupiter-engine@5.9.3?type=jar</purl> + <externalReferences><reference type="website"><url>https://junit.org/junit5/</url></reference><reference type="vcs"><url>https://github.com/junit-team/junit5</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.junit.platform/junit-platform-engine@1.9.3?type=jar"> + <group>org.junit.platform</group> + <name>junit-platform-engine</name> + <version>1.9.3</version> + <description>Module "junit-platform-engine" of JUnit 5.</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">97839fdbdebfeabba70719f4d81d88c4</hash> + <hash alg="SHA-1">8616734a190f8d307376aeb7353dba0a2c037a09</hash> + <hash alg="SHA-256">0c39553d9a03510757227f5a1c6cc6530287b1a321ed6258450664874aa2a16a</hash> + <hash alg="SHA-512">632c1a46671add4acadcf89f8da4f2040ff71de7fa72fad98d8b607b22a48c0a402009ece25f9a82fdb3a9cd123e04b0d6143d109a58c191e3c0f2ffd003a33b</hash> + <hash alg="SHA-384">20c7ba517cea6f549fdb5964749457bd3791a082e6c570e463b04360e835233e68aae76704b9e118206f5fc1dcb4b253</hash> + <hash alg="SHA3-384">116ebe837028c187a2274e8ec36d23678bfa9c0c90a552be3fb93915efdc18ff7f718eed580faae270bb6c12d2b58e7d</hash> + <hash alg="SHA3-256">b85c33974de041626fec07469adeaf0978d076108e34d662ac66af050296f526</hash> + <hash alg="SHA3-512">0bb5e93add319fea006707dfde831d090ffe45ca1d4c800e8c1d27c15cd3ba95a2406a73c396f71efbee34ee21895f94eede3997560d3ebe10138b405d20b23a</hash> + </hashes> + <licenses> + <license> + <id>EPL-2.0</id> + </license> + </licenses> + <purl>pkg:maven/org.junit.platform/junit-platform-engine@1.9.3?type=jar</purl> + <externalReferences><reference type="website"><url>https://junit.org/junit5/</url></reference><reference type="vcs"><url>https://github.com/junit-team/junit5</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.apache.camel/tooling-parent@4.0.4?type=pom"> + <group>org.apache.camel</group> + <name>tooling-parent</name> + <version>4.0.4</version> + <purl>pkg:maven/org.apache.camel/tooling-parent@4.0.4?type=pom</purl> + </component> + <component type="library" bom-ref="pkg:maven/org.apache.camel/maven-plugins@4.0.4?type=pom"> + <group>org.apache.camel</group> + <name>maven-plugins</name> + <version>4.0.4</version> + <purl>pkg:maven/org.apache.camel/maven-plugins@4.0.4?type=pom</purl> + </component> + <component type="library" bom-ref="pkg:maven/org.apache.camel/bom-generator-maven-plugin@4.0.4?type=maven-plugin"> + <group>org.apache.camel</group> + <name>bom-generator-maven-plugin</name> + <version>4.0.4</version> + <purl>pkg:maven/org.apache.camel/bom-generator-maven-plugin@4.0.4?type=maven-plugin</purl> + </component> + <component type="library" bom-ref="pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.9.14?type=jar"> + <publisher>The Apache Software Foundation</publisher> + <group>org.apache.maven.resolver</group> + <name>maven-resolver-api</name> + <version>1.9.14</version> + <description>The application programming interface for the repository system.</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">9b62bbab27891883ed6e31ffb7f47227</hash> + <hash alg="SHA-1">bd5b7cd9d15c2efcab4d8c8215e769523e8843e4</hash> + <hash alg="SHA-256">2b8939ebb46a760deca82faae356145105d27a01748aac30d202ce9d4494edf4</hash> + <hash alg="SHA-512">3bbe6f86bd74cad22d58742f98f382b712f01e349fe88811e558e76302d1e00f532a81f5e18c1ddda8dbd55395e88c311b90e7825b65836a1aaeeabfe0a2839b</hash> + <hash alg="SHA-384">1302ee7e2dff4f119e87970b11d01a98fbee0b9bd222da7877ff0204bbe3307a56cf47f0e2e983a85be2d165725e6009</hash> + <hash alg="SHA3-384">bb2251a94e04a88cd8017b4859aab2a391a5aa13ac8eac3c683a480e6822228da0cdd29179813d969fabea0cfd8af118</hash> + <hash alg="SHA3-256">261c7593c3703ad1b93e803c2df090b5142ab8292be6f551712a09c7610d01aa</hash> + <hash alg="SHA3-512">6a6a83f6df90f882af1d5f0af2df4e8ce898eac59bdc3b9e599e85aa8aa060662cae277d23f47510a3abf5e4032893cf196cb32d61805fe0c7243649a2a09456</hash> + </hashes> + <licenses> + <license> + <id>Apache-2.0</id> + <url>https://www.apache.org/licenses/LICENSE-2.0</url> + </license> + </licenses> + <purl>pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.9.14?type=jar</purl> + <externalReferences><reference type="website"><url>https://maven.apache.org/resolver/maven-resolver-api/</url></reference><reference type="build-system"><url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-resolver/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/MRESOLVER</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?us...@maven.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/maven-resolver/tree/maven-resolver-1.9.14/maven-resolver-api</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.apache.maven.resolver/maven-resolver-util@1.9.14?type=jar"> + <publisher>The Apache Software Foundation</publisher> + <group>org.apache.maven.resolver</group> + <name>maven-resolver-util</name> + <version>1.9.14</version> + <description>A collection of utility classes to ease usage of the repository system.</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">788720c302899b63e4bba45ea396c88a</hash> + <hash alg="SHA-1">ea6fd2997903700191711dee4448746ed30fe4b9</hash> + <hash alg="SHA-256">04d47ff236f63ddd61cb2d6e537d2ffd4d326370d5d73fb480ba47b08760ffef</hash> + <hash alg="SHA-512">bc5d81dd818f452e2c0d2c868d70a2a6cdf722dd1483d8a16c54cdd8ec34bce75453958616fce02f889e8218e96368ee12f7d597a807b65c1bc3ae32c00bad07</hash> + <hash alg="SHA-384">e7e202b3366eac08bdaaa845594c3fd005aa8995342ce578f4db6a670667bc7b59dd413bdc0150d05dfaf5b7fd1c9961</hash> + <hash alg="SHA3-384">ba158bfb6d776410f892043d7d937200b9fd263625e91c9992f66f551cca4b392f4513122e6fdce27b325984e51495b0</hash> + <hash alg="SHA3-256">b89fbca122a8f0fe9591f2f5b6b63770982f3e40f5f5d3abf3f12a4b5939b697</hash> + <hash alg="SHA3-512">414e5345573c272c57b9773ea7224146d1549f82fade8209580d4d134ca68cf01428767009791b08ec467e38b150a7570b71eda4fe8cea0d83b539a7f1de0aad</hash> + </hashes> + <licenses> + <license> + <id>Apache-2.0</id> + <url>https://www.apache.org/licenses/LICENSE-2.0</url> + </license> + </licenses> + <purl>pkg:maven/org.apache.maven.resolver/maven-resolver-util@1.9.14?type=jar</purl> + <externalReferences><reference type="website"><url>https://maven.apache.org/resolver/maven-resolver-util/</url></reference><reference type="build-system"><url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-resolver/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/MRESOLVER</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?us...@maven.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/maven-resolver/tree/maven-resolver-1.9.14/maven-resolver-util</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-core@3.9.4?type=jar"> + <publisher>The Apache Software Foundation</publisher> + <group>org.apache.maven</group> + <name>maven-core</name> + <version>3.9.4</version> + <description>Maven Core classes.</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">b591d97ebf06b4983645a3e9943f204b</hash> + <hash alg="SHA-1">c1585ee55fca8573e81f5affcf8d31578218cac8</hash> + <hash alg="SHA-256">f0c040ddd9d26ed36ac5d4ba9b090a7bc73ce66331cc41938bce8eb2b039fd9d</hash> + <hash alg="SHA-512">d317adf705b8baa8b56d8482e2aac89ba458c6ce97f6cfbc4a072837e555283c517d8bf8419ba91504fc8be50bbca5e68f2827297a76881d5908197227c9b8e7</hash> + <hash alg="SHA-384">0d5d5979ad08e1de4cd379a58abd5398edcbe762213f4673d4b10682d463c344002847fa4b3d53f5dde25200c36d3dca</hash> + <hash alg="SHA3-384">1f128f4813c4acc0c6ea7ec111d447c318aa1acfee49fbbf0177ed6313a2f908d75c5ec809dabbeaedf21808b628d0d3</hash> + <hash alg="SHA3-256">e0aed3eda5b3f2fae1c0be86dccf60cb1db4e8da64fdaa63d2b6d6b8bac0e5cb</hash> + <hash alg="SHA3-512">62033d8ce607b1749d840563b67aecbc874a06537876d35ce3103465b500d9496c8ce774833fc4b73d6bc075484929714649ad934bd894403dbde87a0a8a24d8</hash> + </hashes> + <licenses> + <license> + <id>Apache-2.0</id> + <url>https://www.apache.org/licenses/LICENSE-2.0</url> + </license> + </licenses> + <purl>pkg:maven/org.apache.maven/maven-core@3.9.4?type=jar</purl> + <externalReferences><reference type="website"><url>https://maven.apache.org/ref/3.9.4/maven-core/</url></reference><reference type="build-system"><url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/</url></reference><reference type="distribution"><url>https://maven.apache.org/download.html</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/MNG</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?us...@maven.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/maven/tree/maven-3.9.4/maven-core</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-model@3.9.4?type=jar"> + <publisher>The Apache Software Foundation</publisher> + <group>org.apache.maven</group> + <name>maven-model</name> + <version>3.9.4</version> + <description>Model for Maven POM (Project Object Model)</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">d507b64e6608681ce809307a9e669316</hash> + <hash alg="SHA-1">5b79d873cf6d13b3fc4020eac04e2a62ebbfa0aa</hash> + <hash alg="SHA-256">7931dc8dda878eef46988d9fd07c4ade3c91892d7fb3208c742cb9457135bb15</hash> + <hash alg="SHA-512">34b1d9876ef8690be61aa5a42fe6336ac22b415d1aaa8b97fc547be1728c1e7e39202ead15e90cd1d887aa69a2610a04431f41a7192c861f14d9f0be982a2cbc</hash> + <hash alg="SHA-384">7b42359688bfb7766b56dc1d55fe81a6ac987961044bea8846e07098e4bba61f340f28d0a4018337478ffde40964ab32</hash> + <hash alg="SHA3-384">86403fdacf49a5586c5a901416550501aa05d94621dc604f8cb3698bd7e8820d8bba0cc98b2aff676b6acbacc0b9994a</hash> + <hash alg="SHA3-256">3e879b82c772f5c84fe14cd5add22ad8ce095315825ea6a69a6b6d90d177b722</hash> + <hash alg="SHA3-512">70fdbdb20d8106f73b72bab4d7aaec2c15510c0a0f08310f990411b465f9830acca634897778fb51dca005e655487c8d59eeceba6dbac433ff779c91ae700e93</hash> + </hashes> + <licenses> + <license> + <id>Apache-2.0</id> + <url>https://www.apache.org/licenses/LICENSE-2.0</url> + </license> + </licenses> + <purl>pkg:maven/org.apache.maven/maven-model@3.9.4?type=jar</purl> + <externalReferences><reference type="website"><url>https://maven.apache.org/ref/3.9.4/maven-model/</url></reference><reference type="build-system"><url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/</url></reference><reference type="distribution"><url>https://maven.apache.org/download.html</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/MNG</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?us...@maven.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/maven/tree/maven-3.9.4/maven-model</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-settings@3.9.4?type=jar"> + <publisher>The Apache Software Foundation</publisher> + <group>org.apache.maven</group> + <name>maven-settings</name> + <version>3.9.4</version> + <description>Maven Settings model.</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">cd895d92fc4833b56e80ab6760952cd8</hash> + <hash alg="SHA-1">f0553a72454ed3160cca729b75166077d8f3d499</hash> + <hash alg="SHA-256">43cc79ca3ab2f7f0dfedaceacffcc89676410ce2e52f6f08712d7c2b3e580991</hash> + <hash alg="SHA-512">37a522e55a609a11837672df144a684455095bd1fb384c352fd78444f76ad90dad2604e5afca7399119d42bc32069bf8d636ca42130f8d275ce9c0564c82feaa</hash> + <hash alg="SHA-384">ae5e6165d09f00f287908bfe144970686642e3a042e1a32536c2106aeb0c93b7a8b87cc0df7e871f274cf05a8c3e09f9</hash> + <hash alg="SHA3-384">b61b16637e8c43501b463a8663ac0430d470077f317d382ee997f162113a48ddbda85614ff4208399188213c044041f4</hash> + <hash alg="SHA3-256">1d90f563d3ec9fae50f3b882108c5d532ab5850c3accc65173ea29a84ce9b5b2</hash> + <hash alg="SHA3-512">b4b7d3bc984e1650f91efc81ad55839b990dfe2655270712b0d73f2cf0725f2a4830f5256c2a25bec0eac659c30deb2d3e60b716c6d43a62e18cff285a3168c9</hash> + </hashes> + <licenses> + <license> + <id>Apache-2.0</id> + <url>https://www.apache.org/licenses/LICENSE-2.0</url> + </license> + </licenses> + <purl>pkg:maven/org.apache.maven/maven-settings@3.9.4?type=jar</purl> + <externalReferences><reference type="website"><url>https://maven.apache.org/ref/3.9.4/maven-settings/</url></reference><reference type="build-system"><url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/</url></reference><reference type="distribution"><url>https://maven.apache.org/download.html</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/MNG</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?us...@maven.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/maven/tree/maven-3.9.4/maven-settings</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-settings-builder@3.9.4?type=jar"> + <publisher>The Apache Software Foundation</publisher> + <group>org.apache.maven</group> + <name>maven-settings-builder</name> + <version>3.9.4</version> + <description>The effective settings builder, with inheritance and password decryption.</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">cb57a867ee9703f9b18a378b9288abba</hash> + <hash alg="SHA-1">b3f6479c00e9182b9b731caf69ac6f4f6f2a373f</hash> + <hash alg="SHA-256">4aa957181b6c398d0b4f6756a1a99c93f37abb748f8d0767f04cdad1355fe297</hash> + <hash alg="SHA-512">342472afb8efc8c2bebe0347f9ceb8b88e7fd72934928ce8ece026b0c46bfadade56f858af8dd5b19682a988010c83865f3f8b0a3a3c7cf1737c63fd46e7be5d</hash> + <hash alg="SHA-384">ce35d6ce378a94b433cb98ce5ec0576e590206dcf362e58a833b0e82d8ab5b8f0f60cac6a3a1c8bcf7bbc330f556ef06</hash> + <hash alg="SHA3-384">ae2fee7c3474d2d078bfed79314d84d105bf952e78cd5f7abbc43f0509cc1ed1dd363234cf67ede970ae0acb12896255</hash> + <hash alg="SHA3-256">301a5c290c416ffbb9f2a8bd264ab20ccd9370e7a1551567e163295dfab09975</hash> + <hash alg="SHA3-512">e0202cc749dbdd213ee104fb16daae2981f0e85eb7555d0da4eabd413e35d07c953090822553bc2483e5016a210cac05a42411cd0c39710c0868cad7059ce063</hash> + </hashes> + <licenses> + <license> + <id>Apache-2.0</id> + <url>https://www.apache.org/licenses/LICENSE-2.0</url> + </license> + </licenses> + <purl>pkg:maven/org.apache.maven/maven-settings-builder@3.9.4?type=jar</purl> + <externalReferences><reference type="website"><url>https://maven.apache.org/ref/3.9.4/maven-settings-builder/</url></reference><reference type="build-system"><url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/</url></reference><reference type="distribution"><url>https://maven.apache.org/download.html</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/MNG</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?us...@maven.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/maven/tree/maven-3.9.4/maven-settings-builder</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.codehaus.plexus/plexus-sec-dispatcher@2.0?type=jar"> + <publisher>Codehaus Plexus</publisher> + <group>org.codehaus.plexus</group> + <name>plexus-sec-dispatcher</name> + <version>2.0</version> + <description>The Plexus project provides a full software stack for creating and executing software projects.</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">e68635a721630177ac70173e441336b6</hash> + <hash alg="SHA-1">f89c5080614ffd0764e49861895dbedde1b47237</hash> + <hash alg="SHA-256">873139960c4c780176dda580b003a2c4bf82188bdce5bb99234e224ef7acfceb</hash> + <hash alg="SHA-512">ad4e814c8baff780a4eee064903e52b09ae00420a59fb075ef72dbb8d64d12d3d5009b03d56c15f93587d931c3a7f06cad6351ab2dc9415ccc6eeab0daebeb07</hash> + <hash alg="SHA-384">4af3426b6409cce7d5fcda4e2af407fc2dbae9873e06d98332bcd032c0039d9080a291e42223ea2bbef9825d3d63493f</hash> + <hash alg="SHA3-384">41720858dd5804f9cb26a8878c16dbdf0372a90e99c037809fe76c3de2c5517ba252af8f8cdf534c1a09900702e6a917</hash> + <hash alg="SHA3-256">50fa723aefb551a3fd5888375d01f1d776c534cdf833baea392818e9bfa8166e</hash> + <hash alg="SHA3-512">a43f823d31b377c0c7ec8d36ace69e5dbcdaf4dc4ebb45ff0561fea9e12d74c06090ee24b29b06769d4031693faf5d7e3146583d3a64bfaef6b7c79773a8831f</hash> + </hashes> + <licenses> + <license> + <id>Apache-2.0</id> + </license> + </licenses> + <purl>pkg:maven/org.codehaus.plexus/plexus-sec-dispatcher@2.0?type=jar</purl> + <externalReferences><reference type="website"><url>https://codehaus-plexus.github.io/plexus-sec-dispatcher/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/codehaus-plexus/plexus-sec-dispatcher/issues</url></reference><reference type="mailing-list"><url>http://archive.plexus.codehaus.org/user</url></reference><reference type="vcs"><url>https://github.com/codehaus-plexus/plexus-sec-dispatcher.git</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.codehaus.plexus/plexus-cipher@2.0?type=jar"> + <publisher>Codehaus Plexus</publisher> + <group>org.codehaus.plexus</group> + <name>plexus-cipher</name> + <version>2.0</version> + <description>The Plexus project provides a full software stack for creating and executing software projects.</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">55d612839faf248cbe3e273969c002c2</hash> + <hash alg="SHA-1">425ea8e534716b4bff1ea90f39bd76be951d651b</hash> + <hash alg="SHA-256">9a7f1b5c5a9effd61eadfd8731452a2f76a8e79111fac391ef75ea801bea203a</hash> + <hash alg="SHA-512">8f187b07867a7c29d77454aae4b76479300238d9c4e777c1afa2aebe33b88dab916e29111dd55acac1341849f4579fe91a5470fdd45ccba0e05709c2ce3a1d65</hash> + <hash alg="SHA-384">6973eefe06a8992aa8db1775c0f43a84cbef54eeea9122a5a30c362af3e4fb13b6cbd6fba229142e2a4495f97d71f409</hash> + <hash alg="SHA3-384">ea780d218f96e61005c5582bf3785ddbb33b53ccb4efbffd76ab58166cf261d3c256d52fea28759380684b7e9b0db8eb</hash> + <hash alg="SHA3-256">e2e51d5350ffdce341464ddcdf9ae60108bff40bf5174dc6be43e33ffcd84af9</hash> + <hash alg="SHA3-512">f3e17ea31bdefc8094ba3495b8231ec7f90c7175839b009d9fd230110b66ac4c68c912fda1a6e644d93dbce639d738e2535f1ade5841e072a604f5f8ac536729</hash> + </hashes> + <licenses> + <license> + <id>Apache-2.0</id> + </license> + </licenses> + <purl>pkg:maven/org.codehaus.plexus/plexus-cipher@2.0?type=jar</purl> + <externalReferences><reference type="website"><url>https://codehaus-plexus.github.io/plexus-cipher/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/codehaus-plexus/plexus-cipher/issues</url></reference><reference type="mailing-list"><url>http://archive.plexus.codehaus.org/user</url></reference><reference type="vcs"><url>http://github.com/codehaus-plexus/plexus-cipher</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-builder-support@3.9.4?type=jar"> + <publisher>The Apache Software Foundation</publisher> + <group>org.apache.maven</group> + <name>maven-builder-support</name> + <version>3.9.4</version> + <description>Support for descriptor builders (model, setting, toolchains)</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">daa20793bc753f5a2918602f213491ab</hash> + <hash alg="SHA-1">671110e56110d5c89eda904f198719a2b5fa4a21</hash> + <hash alg="SHA-256">86946fb06cb205515539b93b005c3bb928ba3d0d140af68079cc4cc815125096</hash> + <hash alg="SHA-512">d90a89f2a883b38074eb65af58ffe4f98560f5d08978507e6ffcb3f4e5ee30c61b93b05f0dbc3137189676325c6a5e4139abc66c452abfd429f4e230c25f155b</hash> + <hash alg="SHA-384">349546e66ac3d15fc8c76992f8d0abc1d6db9740ec6e3859e0f03a7de03684ddea9b5fec078ec027a903b0b2eb47e3a1</hash> + <hash alg="SHA3-384">7032604330149d4fa066d470c0bc52cd96f9a9131d0c66f87a24d0c8fd43c6bb9e5c9af57fe8141a38c5df9a8a6ecfba</hash> + <hash alg="SHA3-256">7c9da42e0a1c339758fa0259f10a7c439bd2ac992fa722c5ebe4e5a6635c2211</hash> + <hash alg="SHA3-512">ee4dfbe4bd6990ec02be3f925c04a75e22ea6fbb39b8dffd6bb244af62080629385462e878776e2dd91f49958d615b8f46df1f2bb54a9f2e8ab6b9dcee1095ff</hash> + </hashes> + <licenses> + <license> + <id>Apache-2.0</id> + <url>https://www.apache.org/licenses/LICENSE-2.0</url> + </license> + </licenses> + <purl>pkg:maven/org.apache.maven/maven-builder-support@3.9.4?type=jar</purl> + <externalReferences><reference type="website"><url>https://maven.apache.org/ref/3.9.4/maven-builder-support/</url></reference><reference type="build-system"><url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/</url></reference><reference type="distribution"><url>https://maven.apache.org/download.html</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/MNG</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?us...@maven.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/maven/tree/maven-3.9.4/maven-builder-support</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-repository-metadata@3.9.4?type=jar"> + <publisher>The Apache Software Foundation</publisher> + <group>org.apache.maven</group> + <name>maven-repository-metadata</name> + <version>3.9.4</version> + <description>Per-directory local and remote repository metadata.</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">616cc4c5599c422865e2ceffb1c18fa6</hash> + <hash alg="SHA-1">ef368d45a2caa54634de221540994ca2d810c4c9</hash> + <hash alg="SHA-256">1d5c3393aa39f807837fb058d78ac8d0a287adf19f4ba6ad5070353acf61b081</hash> + <hash alg="SHA-512">3ddccf7500f2f2432a83595ddba808fc2ca014f850c785065cbd7c8df69e2e4816d313a270bf2df624ea1a91364abde632a3f1249942e52c365bd09d2c8b81bc</hash> + <hash alg="SHA-384">8e200f5974026bca01873726c5a9646f3fd608ea315fd32f0e7c0e71934bd443c812a075d99443a409431cd4668dfb06</hash> + <hash alg="SHA3-384">5b242c83c430eabc5e40bb96224e243394008dbf29d27275b324dc67fa42e412ae3771401549d018f81430c0abf0c0e5</hash> + <hash alg="SHA3-256">4f2591ed79d3e7e0fcf72bce8887da51bc9b7dfa3619e3e4d7d3cfe5c22064a9</hash> + <hash alg="SHA3-512">63b74fc8fe112bea1a4e687bb99fd1fccfb2285c2dd9b7a7b6f04ec001268b58312afb495b72ca56783d87857a81ba849d8bfe2cc126103ac25cd2ad9ef0c705</hash> + </hashes> + <licenses> + <license> + <id>Apache-2.0</id> + <url>https://www.apache.org/licenses/LICENSE-2.0</url> + </license> + </licenses> + <purl>pkg:maven/org.apache.maven/maven-repository-metadata@3.9.4?type=jar</purl> + <externalReferences><reference type="website"><url>https://maven.apache.org/ref/3.9.4/maven-repository-metadata/</url></reference><reference type="build-system"><url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/</url></reference><reference type="distribution"><url>https://maven.apache.org/download.html</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/MNG</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?us...@maven.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/maven/tree/maven-3.9.4/maven-repository-metadata</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-model-builder@3.9.4?type=jar"> + <publisher>The Apache Software Foundation</publisher> + <group>org.apache.maven</group> + <name>maven-model-builder</name> + <version>3.9.4</version> + <description>The effective model builder, with inheritance, profile activation, interpolation, ...</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">202c74d835d87daff3bb53b5c9f152a9</hash> + <hash alg="SHA-1">b12e45736ddfb51f648e1579877a293659e5a96e</hash> + <hash alg="SHA-256">815b1886d1ec8e1d8b57b61e6ac83235be3f6a60159c8ee5a6f4e91f513f497f</hash> + <hash alg="SHA-512">125c93f46bb9bef9a49db69b6356bd8c6d8dfc859ddee3d8202b556cefaf2de6dbe9129df99037fb78a57106c2dcf49406a32635060414f458ab133392a24349</hash> + <hash alg="SHA-384">e541072d0af949fc1d6d91a5da6aa373979c4d5e6703272bab77f13ac883ad681a2997541ae081d3653c856f78ea932a</hash> + <hash alg="SHA3-384">c6b9e266fffb428ba56a23846c510ee0f1d95d5a6bab5d09aa303ce99e1c5c606c8ba2d580924d9313c39f968fe79ddb</hash> + <hash alg="SHA3-256">6a6d11060a7f4a5aef6a4118f1611c1f9b720f16ddc06f0d15c918ab55d6a771</hash> + <hash alg="SHA3-512">ca0d85ca6777a98eacccfe319168b1b410bc7c1998ec86ab42e9bd9b829605e7c7be00138d0747be8e2b2b8bf141131442dfa583c3f4148da5a3d3393b127267</hash> + </hashes> + <licenses> + <license> + <id>Apache-2.0</id> + <url>https://www.apache.org/licenses/LICENSE-2.0</url> + </license> + </licenses> + <purl>pkg:maven/org.apache.maven/maven-model-builder@3.9.4?type=jar</purl> + <externalReferences><reference type="website"><url>https://maven.apache.org/ref/3.9.4/maven-model-builder/</url></reference><reference type="build-system"><url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/</url></reference><reference type="distribution"><url>https://maven.apache.org/download.html</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/MNG</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?us...@maven.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/maven/tree/maven-3.9.4/maven-model-builder</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-resolver-provider@3.9.4?type=jar"> + <publisher>The Apache Software Foundation</publisher> + <group>org.apache.maven</group> + <name>maven-resolver-provider</name> + <version>3.9.4</version> + <description>Extensions to Maven Resolver for utilizing Maven POM and repository metadata.</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">931178acd19a5ce4eba2836871999955</hash> + <hash alg="SHA-1">d5e38634c1251e000f7718437973a730346bc336</hash> + <hash alg="SHA-256">ba9bf12fd2fa45780235bb61bbf7e4593c60d741f008e089b99929e8c6b58aa9</hash> + <hash alg="SHA-512">54f6a58a03f29b77064e5ae03724f49eb8a62e91fb10dcb7631842b0e21fd5945782d97385bbc1b9b8fd7880f6c673e0463643ce4907e550760a01e41ce1c1e0</hash> + <hash alg="SHA-384">757663f5abf4517e9dd76d059d774d6dd1699b4ef99de65e55dfcbbd7344e36ac2d538f806d44a752c15e564a79e3438</hash> + <hash alg="SHA3-384">b78789a4ca2a08730adc78e8a229962f638138278fce72aed1c3bacd1582452080887016e62929f2dce7c07baf5f2789</hash> + <hash alg="SHA3-256">55341c5a229c5f657751763c56ac7500b207eeba516987fa30a1f02e10661667</hash> + <hash alg="SHA3-512">a9b3992b6b6df2d1aa3919d40fdb76cf373f32d9f29dfece1332951a65626422b96d68369ff5d79e50c1a5997f254d097ebb56b762ae59cc3ad4755852ff8677</hash> + </hashes> + <licenses> + <license> + <id>Apache-2.0</id> + <url>https://www.apache.org/licenses/LICENSE-2.0</url> + </license> + </licenses> + <purl>pkg:maven/org.apache.maven/maven-resolver-provider@3.9.4?type=jar</purl> + <externalReferences><reference type="website"><url>https://maven.apache.org/ref/3.9.4/maven-resolver-provider/</url></reference><reference type="build-system"><url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/</url></reference><reference type="distribution"><url>https://maven.apache.org/download.html</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/MNG</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?us...@maven.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/maven/tree/maven-3.9.4/maven-resolver-provider</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.apache.maven.resolver/maven-resolver-impl@1.9.14?type=jar"> + <publisher>The Apache Software Foundation</publisher> + <group>org.apache.maven.resolver</group> + <name>maven-resolver-impl</name> + <version>1.9.14</version> + <description>An implementation of the repository system.</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">2c60698f6b15b93964e082915b6728e7</hash> + <hash alg="SHA-1">2aa090aca572f7061e5c57f714ef0445bbb4555f</hash> + <hash alg="SHA-256">80903754456410ae4c8eb5db2a773b2cbcc3e2eb3f9cffed414cb516d13ff7a0</hash> + <hash alg="SHA-512">659ad1fc7d9efeb241ac5be87f268c8f196c40383e24e06b4509bf8fab336e32df9d9d31080e63f99e6597bcc9e46e08bac6a5acf616b2ff37834334368e7807</hash> + <hash alg="SHA-384">570edc3ac76b04a560d116dd6a83c7a9e5a343dcb06233e52bdd9da2a794ebc4807f8cd5946227dee72b5b13ee2900f8</hash> + <hash alg="SHA3-384">414a7406935d725939b4d651706cf8d020d9b74bc03053dbe781c137e830341282f8100525b2790514b26c2cc21face8</hash> + <hash alg="SHA3-256">2fffcc7d69d1235fd7c8d91ff24516ebac104d8e25ecd265957be6dc9e713a46</hash> + <hash alg="SHA3-512">19da6411fb842bfd2c7679a2a11710d634e6bbadf6f0fa7a7585d583a9e3254a1f7c7c9d64bc0208ab20e75f14474a7b9d916cd01d68e48de6ddb76183029b15</hash> + </hashes> + <licenses> + <license> + <id>Apache-2.0</id> + <url>https://www.apache.org/licenses/LICENSE-2.0</url> + </license> + </licenses> + <purl>pkg:maven/org.apache.maven.resolver/maven-resolver-impl@1.9.14?type=jar</purl> + <externalReferences><reference type="website"><url>https://maven.apache.org/resolver/maven-resolver-impl/</url></reference><reference type="build-system"><url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-resolver/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/MRESOLVER</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?us...@maven.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/maven-resolver/tree/maven-resolver-1.9.14/maven-resolver-impl</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.apache.maven.resolver/maven-resolver-named-locks@1.9.14?type=jar"> + <publisher>The Apache Software Foundation</publisher> + <group>org.apache.maven.resolver</group> + <name>maven-resolver-named-locks</name> + <version>1.9.14</version> + <description>A synchronization utility implementation using Named locks.</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">67f4d90ca5816559a29a6b4f7893732c</hash> + <hash alg="SHA-1">71cf74d91b4f6de1bff8fc1fafb401d9ac42b1b8</hash> + <hash alg="SHA-256">a5b11158da6c26a09bf894b90df12d11a6a6293790f25c96a4a7e509b6ac59f2</hash> + <hash alg="SHA-512">b74d9178753019e90c845a7e5c32c4bb17002421dd263e45456bbfdc7ef4946c45d16e48a1a26a1003991ea75189b3b4db95d17f07a010908126d07a73d34bbc</hash> + <hash alg="SHA-384">76dd1b6b48e7ac75f7a3d6960ee5b3aa71bdb1d7dacc6a6cb3950e8ae850bd88ddac326ac2c3138b82d1a5a0f3c8f751</hash> + <hash alg="SHA3-384">38f981bfb02a6ff36117d7d86ba4118ea3e8f371f94e1f05e6d0951b31df8b694f73aecf3618b3a982ad2c6cd71f8573</hash> + <hash alg="SHA3-256">9be111042299c17eddfbddaf174bb8d9be52bd56c3205714c0b75076d1defe29</hash> + <hash alg="SHA3-512">c76f66a5621b5d1d5f51db0757623e20affc1332a5b2a1d736e165cadc68819ccc11fd2baf46aa26d378c1456f067e17366445e1e2bb5df36f122f33592ca141</hash> + </hashes> + <licenses> + <license> + <id>Apache-2.0</id> + <url>https://www.apache.org/licenses/LICENSE-2.0</url> + </license> + </licenses> + <purl>pkg:maven/org.apache.maven.resolver/maven-resolver-named-locks@1.9.14?type=jar</purl> + <externalReferences><reference type="website"><url>https://maven.apache.org/resolver/maven-resolver-named-locks/</url></reference><reference type="build-system"><url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-resolver/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/MRESOLVER</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?us...@maven.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/maven-resolver/tree/maven-resolver-1.9.14/maven-resolver-named-locks</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.apache.maven.resolver/maven-resolver-spi@1.9.14?type=jar"> + <publisher>The Apache Software Foundation</publisher> + <group>org.apache.maven.resolver</group> + <name>maven-resolver-spi</name> + <version>1.9.14</version> + <description>The service provider interface for repository system implementations and repository connectors.</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">3ad05647134a754d1d21e54dd2c27ec9</hash> + <hash alg="SHA-1">a190c3d49791240c87799f29848505fc9fd8be11</hash> + <hash alg="SHA-256">5989f5060b163230b2c3f99d93f68622d6c33cce1a24f0077059dc69d2f7375b</hash> + <hash alg="SHA-512">c80b280492e96417085d2188c07cee100142fb8c670f254f29b36b16a099f33e3bcb6185b10832d1332f6df3e6de79db215b6f0952c7b1b5eb99234c4a0a33d1</hash> + <hash alg="SHA-384">bec96883a1c9cd254609bd6b3d249a8e85828d58599a886251bceaedf1cae664fa654b0528b9c61b6afe97a97992231d</hash> + <hash alg="SHA3-384">2c5cd2925078c88dc0f60dd2b6d78408246f11315befbc8b632906cad8e61d442ae469e90aff110eb90f147a1f6670a5</hash> + <hash alg="SHA3-256">0803373ea2510a906842f2d327072b60181edb5e77d311e2ca85be8a9d8ce83c</hash> + <hash alg="SHA3-512">e3e7699f90842f423328b8a4f783c4a68b8cbc3182901c8da1ef3a5b33c2d5871180d4fba5090c82b71a35e43dd4f771bbb5a440cc5c54413239e9b0f4468345</hash> + </hashes> + <licenses> + <license> + <id>Apache-2.0</id> + <url>https://www.apache.org/licenses/LICENSE-2.0</url> + </license> + </licenses> + <purl>pkg:maven/org.apache.maven.resolver/maven-resolver-spi@1.9.14?type=jar</purl> + <externalReferences><reference type="website"><url>https://maven.apache.org/resolver/maven-resolver-spi/</url></reference><reference type="build-system"><url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-resolver/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/MRESOLVER</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?us...@maven.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/maven-resolver/tree/maven-resolver-1.9.14/maven-resolver-spi</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.apache.maven.shared/maven-shared-utils@3.3.4?type=jar"> + <publisher>The Apache Software Foundation</publisher> + <group>org.apache.maven.shared</group> + <name>maven-shared-utils</name> + <version>3.3.4</version> + <description>Shared utilities for use by Maven core and plugins</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">908f2a0107ff330ac9b856356a0acaef</hash> + <hash alg="SHA-1">f87a61adb1e12a00dcc6cc6005a51e693aa7c4ac</hash> + <hash alg="SHA-256">7925d9c5a0e2040d24b8fae3f612eb399cbffe5838b33ba368777dc7bddf6dda</hash> + <hash alg="SHA-512">c6693f8a061de74ac59c61d185f5b130cb574405cfc37febb8e73806ea64eea822a4a75c24098fb49b7871373091543a6f4c526c0842589e528cacad40e5554a</hash> + <hash alg="SHA-384">bc5b42831ff598f42dda54738be004a619d60201a009b04cb3aaa0dc343d0e4fbc423b19739391eb7c33efcac3c08dd5</hash> + <hash alg="SHA3-384">385bebb35d7ea13d92ae6a5afa9257b184a1fcf40cba077a103c7a91d39a4d3e0180a475febdba73ac75949968e77186</hash> + <hash alg="SHA3-256">888fde30d4f9a9e1b7c4c5e4d61f9cf0499192e5bc1212538e2e3320688e44da</hash> + <hash alg="SHA3-512">40b55bb907452777443b8162d456bf1d48e02bfd9124062faed9c9bf51e0f522d40b02f4c24eb39f760469ad226570876f0de6afecd74903112ec794f0aa9a78</hash> + </hashes> + <licenses> + <license> + <id>Apache-2.0</id> + </license> + </licenses> + <purl>pkg:maven/org.apache.maven.shared/maven-shared-utils@3.3.4?type=jar</purl> + <externalReferences><reference type="website"><url>https://maven.apache.org/shared/maven-shared-utils/</url></reference><reference type="build-system"><url>https://ci-builds.apache.org/job/Maven/job/maven-box/job/maven-shared-utils/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/issues/?jql=project%20%3D%20MSHARED%20AND%20component%20%3D%20maven-shared-utils</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?us...@maven.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/maven-shared-utils/tree/maven-shared-utils-3.3.4</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.3.5?type=jar"> + <publisher>The Eclipse Foundation</publisher> + <group>org.eclipse.sisu</group> + <name>org.eclipse.sisu.plexus</name> + <version>0.3.5</version> + <description>Plexus-JSR330 adapter; adds Plexus support to the Sisu-Inject container</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">30c4a9fa2137698ed66c8542f1be196a</hash> + <hash alg="SHA-1">d71996bb2e536f966b3b70e647067fff3b73d32f</hash> + <hash alg="SHA-256">7e4c61096d70826f20f7a7d55c59a5528e7aa5ad247ee2dfe544e4dd25f6a784</hash> + <hash alg="SHA-512">38d7dbe023f9751cb5e30bf154e31696590317dc7b7f768811fe0f5940513fcea4665670cd47d0b72ded85453b10f7d129b0b7428b155a41c903c7b56c986e8d</hash> + <hash alg="SHA-384">2e943a72f0ca201d50ba90b4cf70c3c1f7b5ffc3bbfdee45875bc2f6f2e2a3a93acbba3a2f1e7ffb32b70e041633b6de</hash> + <hash alg="SHA3-384">a7b121732001b6f225b0687e7747993f48b3fc1d9a4325b4321a4c59adae36b49677193f5e31e3b1f11a6cd266e459f3</hash> + <hash alg="SHA3-256">b879a16dd84d8d4f39c1009029b3a3a55e18049c7910f77814a32ca088b56585</hash> + <hash alg="SHA3-512">8f8fbebd2a3024bcf6f2e27e8206e3f3c2b2673217c1220743b1869bf60341490db7d1877d9eaf3c452500690df98ccda11a19bda996b74a6ebedc37bc9bc554</hash> + </hashes> + <licenses> + <license> + <id>EPL-1.0</id> + </license> + </licenses> + <purl>pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.3.5?type=jar</purl> + <externalReferences><reference type="website"><url>http://www.eclipse.org/sisu/org.eclipse.sisu.plexus/</url></reference><reference type="build-system"><url>https://hudson.eclipse.org/sisu/job/sisu-plexus-nightly/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://bugs.eclipse.org/bugs/enter_bug.cgi?product=Sisu&component=Plexus&format=guided</url></reference><reference type="mailing-list"><url>http://dev.eclipse.org/mhonarc/lists/sisu-dev/</url></reference><reference type="vcs"><url>http://git.eclipse.org/c/sisu/org.eclipse.sisu.plexus.git/tree/org.eclipse.sisu.plexus/</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/javax.annotation/javax.annotation-api@1.2?type=jar"> + <publisher>GlassFish Community</publisher> + <group>javax.annotation</group> + <name>javax.annotation-api</name> + <version>1.2</version> + <description>Common Annotations for the JavaTM Platform API</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">75fe320d2b3763bd6883ae1ede35e987</hash> + <hash alg="SHA-1">479c1e06db31c432330183f5cae684163f186146</hash> + <hash alg="SHA-256">5909b396ca3a2be10d0eea32c74ef78d816e1b4ead21de1d78de1f890d033e04</hash> + <hash alg="SHA-512">2453330b27a0822bba440c28b98ae1d83d60d97dfa2d040562dd5126b3548e0caa040fea3b886ac6feb0a858e6c1bc45b6c5472b180f1f14792e5ca33e355959</hash> + <hash alg="SHA-384">37a46eaa1d011969d28ff0daaecd67a560169b3ae70c40102331d85a71139ca07110169fe367f484735914ce5c6b86c0</hash> + <hash alg="SHA3-384">e2f8df1aad5867355fd1d3de2374d077e3ad885e6bddac3ce7c7bc72a34097e33bc5dfe960f839a7feb515bd5a92ffd1</hash> + <hash alg="SHA3-256">2e2acc7429faecd2e74c0c441209b1a5b0ccbc245ccd8391425c4b1e4b2fbc94</hash> + <hash alg="SHA3-512">9a28cb34c7761e695ccea04cc6df1e0f9cd18fef59bf50d5943ddc06802e616bc2bd55211e863c65f7f7661f963ba8ee9e569324642b87bc1703dc6f07cba5e3</hash> + </hashes> + <licenses> + <expression>(CDDL-1.0 OR GPL-2.0-with-classpath-exception)</expression> + </licenses> + <purl>pkg:maven/javax.annotation/javax.annotation-api@1.2?type=jar</purl> + <externalReferences><reference type="website"><url>http://jcp.org/en/jsr/detail?id=250</url></reference><reference type="distribution"><url>https://maven.java.net/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>http://java.net/jira/browse/GLASSFISH</url></reference><reference type="vcs"><url>http://java.net/projects/glassfish/sources/svn/show/tags/javax.annotation-api-1.2</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.3.5?type=jar"> + <publisher>The Eclipse Foundation</publisher> + <group>org.eclipse.sisu</group> + <name>org.eclipse.sisu.inject</name> + <version>0.3.5</version> + <description>JSR330-based container; supports classpath scanning, auto-binding, and dynamic auto-wiring</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">1b296b0ddd911ed3750b3df93b395cd5</hash> + <hash alg="SHA-1">d4265dd4f0f1d7a06d80df5a5f475d5ff9c17140</hash> + <hash alg="SHA-256">c5994010bcdce1d2bd603a4d50c47191ddbd7875d1157b23aaa26d33c82fda13</hash> + <hash alg="SHA-512">f4790768c0d958b3429a3241abb15f9bb6e2fd7f43a5e034dde6a3a6820e6941c00f10ad084d5c38f8edc144e7acbea7ba3dc8952f01dab41e443803db2a4efc</hash> + <hash alg="SHA-384">b76e74a0cda6d88c1c03d40e71d238fa13e2070485c026945ee8dc6da62eacb02071a65df35fa3e4d9d6b343a89fb605</hash> + <hash alg="SHA3-384">a2d3bae2f5e518c7d11e584f6b8b7368f3b927c3405f48e27d4225d4e2f4917fb5623c0071fc47f081200b7d754571d1</hash> + <hash alg="SHA3-256">b998bcdf4f8b5550a543865408e94fadcf1dd37ac19ec37269ff5307220b2775</hash> + <hash alg="SHA3-512">e9331e8a1b4281b45abec89dd9b7dd948207ebd7bed6be5978a5792d59327f7a4d4ee87c6f60392021f24f28439ab4ca4b6305ef6528e1c241c7a27c883b5931</hash> + </hashes> + <licenses> + <license> + <id>EPL-1.0</id> + </license> + </licenses> + <purl>pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.3.5?type=jar</purl> + <externalReferences><reference type="website"><url>http://www.eclipse.org/sisu/org.eclipse.sisu.inject/</url></reference><reference type="build-system"><url>https://hudson.eclipse.org/sisu/job/sisu-inject-nightly/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://bugs.eclipse.org/bugs/enter_bug.cgi?product=Sisu&component=Inject&format=guided</url></reference><reference type="mailing-list"><url>http://dev.eclipse.org/mhonarc/lists/sisu-dev/</url></reference><reference type="vcs"><url>http://git.eclipse.org/c/sisu/org.eclipse.sisu.inject.git/tree/org.eclipse.sisu.inject/</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/com.google.inject/guice@5.1.0?type=jar"> + <publisher>Google, Inc.</publisher> + <group>com.google.inject</group> + <name>guice</name> + <version>5.1.0</version> + <description>Guice is a lightweight dependency injection framework for Java 6 and above</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">2560169296aa94492af34af2115e9511</hash> + <hash alg="SHA-1">da25056c694c54ba16e78e4fc35f17fc60f0d1b4</hash> + <hash alg="SHA-256">4130e50bfac48099c860f0d903b91860c81a249c90f38245f8fed58fc817bc26</hash> + <hash alg="SHA-512">b9c7a9b815d9ce387ebf6d58a71541da1be3cb8d847358133dc1f35ca45315bb9db11c13f3238adb643670759a58fd106247039f42c10759374a9b361c62e99e</hash> + <hash alg="SHA-384">1f7e6e7555c97752e2a3a7dc07473384762467c24a0fc8f4c93c0f209ef361ecd4bf2be847281798dd84f68fc8c54b2f</hash> + <hash alg="SHA3-384">59b895108174073d9889ba3e18566eb5e0785310e90dbd918dfb06af5bdf0d72e8a54094c6109090f43e242daa4d6ebf</hash> + <hash alg="SHA3-256">5a9518cdc72dd7fb8d7848500cb8c97c7689e64a52028dabf44e61a933ffd853</hash> + <hash alg="SHA3-512">5b53b7ee09cf057f83acf86de3f35fc45c04cd95c01e78b59fc1b4d9322e17ecaec1d6c5d37cd37084b602c1a74f6457342e27c6271fd140ade3190448c9fb27</hash> + </hashes> + <licenses> + <license> + <id>Apache-2.0</id> + </license> + </licenses> + <purl>pkg:maven/com.google.inject/guice@5.1.0?type=jar</purl> + <externalReferences><reference type="website"><url>https://github.com/google/guice/guice</url></reference><reference type="build-system"><url>https://travis-ci.org/google/guice</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/google/guice/issues/</url></reference><reference type="mailing-list"><url>http://groups.google.com/group/google-guice/topics</url></reference><reference type="vcs"><url>https://github.com/google/guice/guice</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/aopalliance/aopalliance@1.0?type=jar"> + <group>aopalliance</group> + <name>aopalliance</name> + <version>1.0</version> + <description>AOP Alliance</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">04177054e180d09e3998808efa0401c7</hash> + <hash alg="SHA-1">0235ba8b489512805ac13a8f9ea77a1ca5ebe3e8</hash> + <hash alg="SHA-256">0addec670fedcd3f113c5c8091d783280d23f75e3acb841b61a9cdb079376a08</hash> + <hash alg="SHA-512">3f44a932d8c00cfeee2eb057bcd7c301a2d029063e0a916e1e20b3aec4877d19d67a2fd8aaf58fa2d5a00133d1602128a7f50912ffb6cabc7b0fdc7fbda3f8a1</hash> + <hash alg="SHA-384">4dddf44338b5aff9580da2532b81c0ac3e1d09e1f28c6db871a55cad442b705dd7791eb07f9d4577d49d0be3673ba783</hash> + <hash alg="SHA3-384">2bd64cbaf769c6e4e85e34f7a6119d89e16fbf55af3fc5d6cbd52eb214c367dec1ac7b9062ee0fb35a2e0acfc7c477e1</hash> + <hash alg="SHA3-256">d4a726b2bf8aa58197021a7d8fca674b4b2790d4c48de43a92f728866a91c2f0</hash> + <hash alg="SHA3-512">830bc3f8328be76897990e9b9fc42eef02623115e456af96ad09b20900ad615519c8c8de60155ac04fb332eaa9510110d52edd13911af76271c71d91cbd789cc</hash> + </hashes> + <licenses> + <license> + <name>Public Domain</name> + </license> + </licenses> + <purl>pkg:maven/aopalliance/aopalliance@1.0?type=jar</purl> + <externalReferences><reference type="website"><url>http://aopalliance.sourceforge.net</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/com.google.guava/guava@32.1.2-jre?type=jar"> + <group>com.google.guava</group> + <name>guava</name> + <version>32.1.2-jre</version> + <description>Guava is a suite of core and expanded libraries that include + utility classes, Google's collections, I/O classes, and + much more.</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">5fe031b3b35ed56182478811a931d617</hash> + <hash alg="SHA-1">5e64ec7e056456bef3a4bc4c6fdaef71e8ab6318</hash> + <hash alg="SHA-256">bc65dea7cfd9e4dacf8419d8af0e741655857d27885bb35d943d7187fc3a8fce</hash> + <hash alg="SHA-512">d683751034688863dc82315a75620abbeeca525cc592d5227b136c29902a0d035f306c6bfaf87d00d95bd1bd967953b00a932286ce09cfba1a0fb35efd852cd4</hash> + <hash alg="SHA-384">cdf41f5f70c467f1f0d8ec42d43eebd8e9da7e5fc60bd24d17db852ce0669a7316abb0a217f19c5cca41b20ade17a1f0</hash> + <hash alg="SHA3-384">2084f7a28971f428e1b07a659d9a2cc221654b0e31d457c1219b5526e102124207ab4b2d163d4d5ec731551da396003b</hash> + <hash alg="SHA3-256">0ccf9f22abd1ae422fd040e387adb12c31e4dd749c3e40181077e6fb9acdb51b</hash> + <hash alg="SHA3-512">e354820ed3f5da18411e6f4ba69294b2d171b2debbd51053e617178fa7a7cb64b3a6978c841a3060fd77474cf99e6aa2451aea39a5755cfe1f7eaef0d20d0e63</hash> + </hashes> + <licenses> + <license> + <id>Apache-2.0</id> + </license> + </licenses> + <purl>pkg:maven/com.google.guava/guava@32.1.2-jre?type=jar</purl> + <externalReferences><reference type="website"><url>https://github.com/google/guava</url></reference><reference type="build-system"><url>https://github.com/google/guava/actions</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/google/guava/issues</url></reference><reference type="vcs"><url>https://github.com/google/guava/guava</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar"> + <group>com.google.guava</group> + <name>failureaccess</name> + <version>1.0.1</version> + <description>Contains + com.google.common.util.concurrent.internal.InternalFutureFailureAccess and + InternalFutures. Most users will never need to use this artifact. Its + classes is conceptually a part of Guava, but they're in this separate + artifact so that Android libraries can use them without pulling in all of + Guava (just as they can use ListenableFuture by depending on the + listenablefuture artifact).</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">091883993ef5bfa91da01dcc8fc52236</hash> + <hash alg="SHA-1">1dcf1de382a0bf95a3d8b0849546c88bac1292c9</hash> + <hash alg="SHA-256">a171ee4c734dd2da837e4b16be9df4661afab72a41adaf31eb84dfdaf936ca26</hash> + <hash alg="SHA-512">f8d59b808d6ba617252305b66d5590937da9b2b843d492d06b8d0b1b1f397e39f360d5817707797b979a5bf20bf21987b35333e7a15c44ed7401fea2d2119cae</hash> + <hash alg="SHA-384">67659dbd9647ec303d7f15128dc9dba19b98fd8d74758ee3b602451e32c855e236ccaafe08edf4bbfa245f981268440f</hash> + <hash alg="SHA3-384">1460875f0331c5fa3791772a6a322a7db180261bc2adacf7271df1fbf3b088a587a755a604c039982cb593c5cfc1f101</hash> + <hash alg="SHA3-256">ea86406e75fcd93eafe3cde1b3135ba485f1bb9b75fed98894a0bf1f0aee04f0</hash> + <hash alg="SHA3-512">52ac0f487ab5dd27c9f2e54fd1d84c7a620cae9d49be4072aa2b11501787bf4391ddaa13d02eccdf19e8eea46aecbea5f6064b26777c1b836108a280652e04ac</hash> + </hashes> + <licenses> + <license> + <id>Apache-2.0</id> + </license> + </licenses> + <purl>pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar</purl> + <externalReferences><reference type="website"><url>https://github.com/google/guava/failureaccess</url></reference><reference type="build-system"><url>https://travis-ci.org/google/guava</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/google/guava/issues</url></reference><reference type="vcs"><url>https://github.com/google/guava/failureaccess</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/javax.inject/javax.inject@1?type=jar"> + <group>javax.inject</group> + <name>javax.inject</name> + <version>1</version> + <description>The javax.inject API</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">289075e48b909e9e74e6c915b3631d2e</hash> + <hash alg="SHA-1">6975da39a7040257bd51d21a231b76c915872d38</hash> + <hash alg="SHA-256">91c77044a50c481636c32d916fd89c9118a72195390452c81065080f957de7ff</hash> + <hash alg="SHA-512">e126b7ccf3e42fd1984a0beef1004a7269a337c202e59e04e8e2af714280d2f2d8d2ba5e6f59481b8dcd34aaf35c966a688d0b48ec7e96f102c274dc0d3b381e</hash> + <hash alg="SHA-384">ac04c9f03ccbe35a25deb8b50280a0ca01dbe6aff0dd795d55af6112bfe3cd5817eb82f32fb18378d86cd64b07597190</hash> + <hash alg="SHA3-384">fca090ecb1edeacb9fe865dc515cd1d109b323cd742d4a9733ff199a96ee96e0db4f924079520b9c189ef750f255475d</hash> + <hash alg="SHA3-256">5b0054e39e522de0e0ffc4034d12f72270291fb24d94d5ffc9c4d69c25035fc6</hash> + <hash alg="SHA3-512">fb290f5a70b1efc1dff12f40a0b2d7b94019f66da42e78010c0b8e61f222c4f267b67e356a9e9c346eb801e5515e36243888f280c5cb95c2dd69016a30cadeb9</hash> + </hashes> + <licenses> + <license> + <id>Apache-2.0</id> + </license> + </licenses> + <purl>pkg:maven/javax.inject/javax.inject@1?type=jar</purl> + <externalReferences><reference type="website"><url>http://code.google.com/p/atinject/</url></reference><reference type="vcs"><url>http://code.google.com/p/atinject/source/checkout</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.codehaus.plexus/plexus-classworlds@2.7.0?type=jar"> + <publisher>Codehaus Plexus</publisher> + <group>org.codehaus.plexus</group> + <name>plexus-classworlds</name> + <version>2.7.0</version> + <description>A class loader framework</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">6ed852b1a004288c44438381e6aaee1e</hash> + <hash alg="SHA-1">fe6f1acefd1a302dd4bc6d9d7f15358828d2a44d</hash> + <hash alg="SHA-256">c60ae538ba66adbc06aae205fbe2306211d3d213ab6df3239ec03cdde2458ad6</hash> + <hash alg="SHA-512">8057b6c7d52aaa61a51aba6ec613e8bd1a094d62a84d50a37bfe7776ff53780f1602b6169242c3a60b28c9d496458baaac5377575553e4af881643490ccda912</hash> + <hash alg="SHA-384">4b079cab0a5f50631ef134f6578f4772f59897977d20ddef071920c107ca13cc3ce85d7b3c2bad586fb7a29fb4a4e07d</hash> + <hash alg="SHA3-384">1e4500603fc2ac0c080f4a7b127171103295571bc7e570e50f6c479c62667cf78cf177c09b92f39702864fff83e35f9f</hash> + <hash alg="SHA3-256">ff715bac48dda5b19e29e18e47dbba9015cfcdf3a949c19154ae9ea3e5951c60</hash> + <hash alg="SHA3-512">7bb6f86ea7300d4321fb78a0cfcbd2acc2b6639abb75e68e4bf1e301622ee1d41bdeed728aa49d74578918fe5da954860a29a9a6249e651db3edae941f816bf7</hash> + </hashes> + <licenses> + <license> + <id>Apache-2.0</id> + </license> + </licenses> + <purl>pkg:maven/org.codehaus.plexus/plexus-classworlds@2.7.0?type=jar</purl> + <externalReferences><reference type="website"><url>https://codehaus-plexus.github.io/plexus-classworlds/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>http://github.com/codehaus-plexus/plexus-classworlds/issues</url></reference><reference type="mailing-list"><url>http://archive.plexus.codehaus.org/user</url></reference><reference type="vcs"><url>http://github.com/codehaus-plexus/plexus-classworlds/tree/plexus-classworlds-2.7.0/</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.codehaus.plexus/plexus-interpolation@1.26?type=jar"> + <publisher>Codehaus Plexus</publisher> + <group>org.codehaus.plexus</group> + <name>plexus-interpolation</name> + <version>1.26</version> + <description>The Plexus project provides a full software stack for creating and executing software projects.</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">1049ae9f5cd8cf618abf5bc5805e6b94</hash> + <hash alg="SHA-1">25b919c664b79795ccde0ede5cee0fd68b544197</hash> + <hash alg="SHA-256">b3b5412ce17889103ea564bcdfcf9fb3dfa540344ffeac6b538a73c9d7182662</hash> + <hash alg="SHA-512">6c3b40442adf721d325ee9cbf935d758223a04b3bd8e0f3b60fdb652175c1ca65a6010f7ea8288617ffa73cb1f19d2737c79c403d343b285e0f9afb1729caa60</hash> + <hash alg="SHA-384">93dcdffb567f4b7d24eecf9fb0733243ebfe1fd80c92fe69532fed9d1727a58ffa5ce7da4ab26b5c6aa8a6a59beb3844</hash> + <hash alg="SHA3-384">7489d45be45f74f7639db3b18ae6075d32d84adfaa9c4568f3fe2b2fc35c7de73ffce6f42e494466a8c81e78747b0f17</hash> + <hash alg="SHA3-256">62145ec219beb405063de848cb54e0d63efc8c255322998858d7df74f8d1ae18</hash> + <hash alg="SHA3-512">12fba4d2ffab1f89003e375bf74df3fc5d0f831906f9716f2ab2fc5a4ca7084c8a61500b24c5fa0ded27d1cef14b030df70b34c148c138136070e27f7cc41536</hash> + </hashes> + <licenses> + <license> + <id>Apache-2.0</id> + </license> + </licenses> + <purl>pkg:maven/org.codehaus.plexus/plexus-interpolation@1.26?type=jar</purl> + <externalReferences><reference type="website"><url>http://codehaus-plexus.github.io/plexus-interpolation/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/codehaus-plexus/plexus-interpolation/issues</url></reference><reference type="mailing-list"><url>http://archive.plexus.codehaus.org/user</url></reference><reference type="vcs"><url>http://github.com/codehaus-plexus/plexus-interpolation/tree/plexus-interpolation-1.26/</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.codehaus.plexus/plexus-component-annotations@2.1.0?type=jar"> + <publisher>Codehaus Plexus</publisher> + <group>org.codehaus.plexus</group> + <name>plexus-component-annotations</name> + <version>2.1.0</version> + <description>Plexus Component "Java 5" Annotations, to describe plexus components properties in java sources with + standard annotations instead of javadoc annotations.</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">141fd7a2ae613cb17d25ecd54b43eb3f</hash> + <hash alg="SHA-1">2f2147a6cc6a119a1b51a96f31d45c557f6244b9</hash> + <hash alg="SHA-256">bde3617ce9b5bcf9584126046080043af6a4b3baea40a3b153f02e7bbc32acac</hash> + <hash alg="SHA-512">cc534fda54272f074fe9edd581a6c3e1ea98127340c7f852c4b4953a44dad048ace22dfa10f30d6adcdfc15efd319dac778a03ebbe20de7779fd1df640506e88</hash> + <hash alg="SHA-384">dd102351fada419b7e66f38b62868db4141cf93863b8117926564dd883b4a3960d9c9682b346f7106cdaa2a4138c794f</hash> + <hash alg="SHA3-384">2b335733d7683e8bae312b0608af7c17b1aa22a1b9cbc4cc11549faf6bacc51c7591f1073aac99e5d70fdea31c6253c4</hash> + <hash alg="SHA3-256">2e9f44d1c5df160563d3cedaf01929682fb3e0432beca7c782d8ba0324fb32b1</hash> + <hash alg="SHA3-512">5051e4210310ec60fae9f32284a93da3cff63bf43a7dda30eaf2715d24cfc7f2353a6c2731521f4d6ef32e7a3e2526b6a41c8a11b0889c8dbf7ffc7914812641</hash> + </hashes> + <licenses> + <license> + <id>Apache-2.0</id> + </license> + </licenses> + <purl>pkg:maven/org.codehaus.plexus/plexus-component-annotations@2.1.0?type=jar</purl> + <externalReferences><reference type="website"><url>http://codehaus-plexus.github.io/plexus-containers/plexus-component-annotations/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>http://github.com/codehaus-plexus/plexus-containers/issues</url></reference><reference type="mailing-list"><url>http://archive.plexus.codehaus.org/user</url></reference><reference type="vcs"><url>https://github.com/codehaus-plexus/plexus-containers/plexus-component-annotations</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-lang3@3.13.0?type=jar"> + <publisher>The Apache Software Foundation</publisher> + <group>org.apache.commons</group> + <name>commons-lang3</name> + <version>3.13.0</version> + <description>Apache Commons Lang, a package of Java utility classes for the + classes that are in java.lang's hierarchy, or are considered to be so + standard as to justify existence in java.lang.</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">3435b913691a5c1b173485a49850b1a8</hash> + <hash alg="SHA-1">b7263237aa89c1f99b327197c41d0669707a462e</hash> + <hash alg="SHA-256">82f528cf718c7a3c2f30fc5bc784e3c6a0a10b17605dadb9e16c82ede11e6064</hash> + <hash alg="SHA-512">9cce41fd8bb2a24bcf8e75898190730d62b656af0d1a199202cd6cc848956b8cce4840ee616fb559c254fdff0bd09def9e65de6940a65bc7a07a386cec2bec0b</hash> + <hash alg="SHA-384">cb663314025f3c2da314c0880e6928f5567cc448ded5deabd5cece5695e6fd0d4a84349fc7ee9638c732204dc3b26519</hash> + <hash alg="SHA3-384">0642f12aef0ef38c8a6f5081f05de8bdc0e585b9556cd496c1df66b977746aefd2672a8941cdbcdaf169e5e2aba5d583</hash> + <hash alg="SHA3-256">9ea297efa12a940dc9191a352256c9f89bddb30b40af603143775330c6bdb0a0</hash> + <hash alg="SHA3-512">c08c8c538c21ab4ad7d7e5c1e5c27ef075acdf15177c777a33209ea095fb3e3be8a97d14f3dd86306e7c310a6dbe5be030a696b9f819848f6eeec045149ee091</hash> + </hashes> + <licenses> + <license> + <id>Apache-2.0</id> + <url>https://www.apache.org/licenses/LICENSE-2.0</url> + </license> + </licenses> + <purl>pkg:maven/org.apache.commons/commons-lang3@3.13.0?type=jar</purl> + <externalReferences><reference type="website"><url>https://commons.apache.org/proper/commons-lang/</url></reference><reference type="build-system"><url>https://github.com/apache/commons-parent/actions</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/LANG</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-lang.git</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar"> + <publisher>QOS.ch</publisher> + <group>org.slf4j</group> + <name>slf4j-api</name> + <version>2.0.7</version> + <description>The slf4j API</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">403dffa46cdd2e3c82da19df4f394a4c</hash> + <hash alg="SHA-1">41eb7184ea9d556f23e18b5cb99cad1f8581fc00</hash> + <hash alg="SHA-256">5d6298b93a1905c32cda6478808ac14c2d4a47e91535e53c41f7feeb85d946f4</hash> + <hash alg="SHA-512">216d2cac27d501972c888f94dfa747d700b80d60813884b6ab4b12c6a3b17ed0c21a1d27e1aa4332c97c828f20039e3913d2763d7e1a3cef36ae4389a276e7a8</hash> + <hash alg="SHA-384">c25b39f418aa726ba8405dfd9b356131f89984e2ef5a55a724a2abf3b7c78443f671105835161d2414d602cf03da9f2d</hash> + <hash alg="SHA3-384">f33abfaac21badae6f85d3ebbc6c1204fd7fda3bb15173e763fa8cee95bce6a8270eec2c8f49343c66c8d2767bc317e1</hash> + <hash alg="SHA3-256">6e00d4b264a2afc4ca4e98f716ecece66c32c626ca3f8c5d56b22092b6fe417b</hash> + <hash alg="SHA3-512">ad7b9142d370fc532a07cdd43881a129b012ff50e2bede3ac27d9bd31ec707bf2f45e82002fa59e962955cc38ab73cdd77713fca50cedc926c046f5617c1285b</hash> + </hashes> + <licenses> + <license> + <id>MIT</id> + <url>https://opensource.org/licenses/MIT</url> + </license> + </licenses> + <purl>pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar</purl> + <externalReferences><reference type="website"><url>http://www.slf4j.org</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/qos-ch/slf4j/slf4j-api</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-artifact@3.9.4?type=jar"> + <publisher>The Apache Software Foundation</publisher> + <group>org.apache.maven</group> + <name>maven-artifact</name> + <version>3.9.4</version> + <description>Maven is a software build management and + comprehension tool. Based on the concept of a project object model: + builds, dependency management, documentation creation, site + publication, and distribution publication are all controlled from + the declarative file. Maven can be extended by plugins to utilise a + number of other development tools for reporting or the build + process.</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">0ea6ff1391dea4483e920ff6b1e4398c</hash> + <hash alg="SHA-1">9738999a0459221e758ebe728449c43567d7fecc</hash> + <hash alg="SHA-256">7dd352fd9f8ff86a1d0a7d89e6289d8d3cd346ac9b214ed85868d585be05ab78</hash> + <hash alg="SHA-512">00bad66c241a7ec702762cf8bdba6759055ddc53f01f47d8a295b60f686834c31fcafdaa2dfebfb70125a37e15832805ab600f1f4a3e4a3735a1c47f5f9e5999</hash> + <hash alg="SHA-384">bbca33b6206148c4a517b0072899483dfc243d29a9c8d0a7e89f47b8532aa3bffffaef1cfabfad12900eb3dd1979bf72</hash> + <hash alg="SHA3-384">9bd20e151581c099815dc409f27fe267be2968442690f955acfa2ddea8cd72864d4152f75e321ec8fccbcfcfc211010e</hash> + <hash alg="SHA3-256">8d34d614801c0cb0d5553cd7a1e861954ee56d98db6ac93a1c95543aec8a00eb</hash> + <hash alg="SHA3-512">8214eefd6852286349f62d4c982bf3eb46f462e39c4156d62a25f0679fbd2fe15b6e114cdb7a463df9f272aefe57321b6503221bb8ac26e69cdd55986b9bf393</hash> + </hashes> + <licenses> + <license> + <id>Apache-2.0</id> + <url>https://www.apache.org/licenses/LICENSE-2.0</url> + </license> + </licenses> + <purl>pkg:maven/org.apache.maven/maven-artifact@3.9.4?type=jar</purl> + <externalReferences><reference type="website"><url>https://maven.apache.org/ref/3.9.4/maven-artifact/</url></reference><reference type="build-system"><url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/</url></reference><reference type="distribution"><url>https://maven.apache.org/download.html</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/MNG</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?us...@maven.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/maven/tree/maven-3.9.4/maven-artifact</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-plugin-api@3.9.4?type=jar"> + <publisher>The Apache Software Foundation</publisher> + <group>org.apache.maven</group> + <name>maven-plugin-api</name> + <version>3.9.4</version> + <description>The API for plugins - Mojos - development.</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">fc52c200697e09aab053d6be79b15a4c</hash> + <hash alg="SHA-1">54a5e32a3ecf77b09be683cba3067ea76e073d06</hash> + <hash alg="SHA-256">12a992dd7573c7df31a34ffa2ac2a491e584ea64d8e4ab4c5ec50a0b292cc853</hash> + <hash alg="SHA-512">ec6dede7cf7ec48d4136c8a98ebdcbe223ea632c21fac6463bd9093815a83b7651deb64a9d05393bb4f576fc3a5a2cc9c8e3004fde319403bb710310183e4606</hash> + <hash alg="SHA-384">b57bd695f739aa306430a29605590a68376c9d1fd29c2d791c76e0379f04ef27cfbe1efbebd22bbda4795591a9158bc0</hash> + <hash alg="SHA3-384">2b99bc9665932e7d6d9f0e1f4d1ed558996ce69eaa9be927328c338982aaf1f70c670c85584e63c782bb074f44f3fee2</hash> + <hash alg="SHA3-256">3e310ca14d224d35e046f73f4654018966708e5c4b6378562682d226eaf88589</hash> + <hash alg="SHA3-512">3df91a896fd592f4359a6ea8dd6222a31f99d91f9681b6a7eb0daa82642eb90213063baceb3122995df95e5f5debc0f1f7ce39745144ab065d3c8f0e54808ea0</hash> + </hashes> + <licenses> + <license> + <id>Apache-2.0</id> + <url>https://www.apache.org/licenses/LICENSE-2.0</url> + </license> + </licenses> + <purl>pkg:maven/org.apache.maven/maven-plugin-api@3.9.4?type=jar</purl> + <externalReferences><reference type="website"><url>https://maven.apache.org/ref/3.9.4/maven-plugin-api/</url></reference><reference type="build-system"><url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/</url></reference><reference type="distribution"><url>https://maven.apache.org/download.html</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/MNG</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?us...@maven.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/maven/tree/maven-3.9.4/maven-plugin-api</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.apache.maven.plugin-tools/maven-plugin-annotations@3.9.0?type=jar"> + <publisher>The Apache Software Foundation</publisher> + <group>org.apache.maven.plugin-tools</group> + <name>maven-plugin-annotations</name> + <version>3.9.0</version> + <description>Java annotations to use in Mojos</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">43a9454b4318c740c27a5c2f2d8079b3</hash> + <hash alg="SHA-1">0a24f7830b2f8811e4bfd5c4c569f13198db261f</hash> + <hash alg="SHA-256">6518bbac60808e1b74927bdc15a9f2a58073d23fa525d24032c229b426431585</hash> + <hash alg="SHA-512">a118b09e6f8adfb4ea2b3af0e965ee2ae41c46c119fd95ea7df80f0b03f8e99b2534ebebfafd06fa0d913a927efca000134ff016d0f77b53f9761dcef926e144</hash>
[... 68816 lines stripped ...]
