Added: release/camel/apache-camel/4.4.0/apache-camel-4.4.0-sbom.xml ============================================================================== --- release/camel/apache-camel/4.4.0/apache-camel-4.4.0-sbom.xml (added) +++ release/camel/apache-camel/4.4.0/apache-camel-4.4.0-sbom.xml Sat Feb 17 16:59:40 2024 @@ -0,0 +1,70788 @@ +<?xml version="1.0" encoding="UTF-8"?> +<bom serialNumber="urn:uuid:8e8402b5-cd0f-39d8-b1f1-4f300d71c7af" version="1" xmlns="http://cyclonedx.org/schema/bom/1.4";> + <metadata> + <tools> + <tool> + <vendor>OWASP Foundation</vendor> + <name>CycloneDX Maven plugin</name> + <version>2.7.11</version> + <hashes> + <hash alg="MD5">a70e8b649ab4a2bb7922d360173c8237</hash> + <hash alg="SHA-1">4c3c0878c15561639076e5be7a48ffcd6111c5ee</hash> + <hash alg="SHA-256">70997d52dbffd4e797c467b2062c6ba9b8b5a7380ff2884779f2743b6172ebb5</hash> + <hash alg="SHA-512">bc1ce91190c642f68fd3571939d7668def3b879ec8e5a87a213a9710a106e0290f60f9e0414593d19cca958c4fcb5d4450bd2793bcd609948419c8a2a6a7f5c8</hash> + <hash alg="SHA-384">3c8421bdafd1754fb424f16dccc83bfe0827648c1cadfffc98bdf1c7da65475dfe48d2f4b16d233bb8819e155ba6a4f3</hash> + <hash alg="SHA3-384">ad88cf6a0e0a5d51df49a4dab5530a28de9df7eec8460c045dff3e1f9316b82a244a125d52b937fe9d4ee72e44f5d01a</hash> + <hash alg="SHA3-256">b4d9c3ef07c34517fd9f33178ba95ffc9618eb84a3671e71b0c82991ec3717e5</hash> + <hash alg="SHA3-512">935b43aba8999dc7d95d93288a251c97b6b32852841b7bef31516c27c8d65c8de7f8411f1829f765ee760f25930c766db6a49df68e5994e18721c0a71f606f1e</hash> + </hashes> + </tool> + </tools> + <component type="library" bom-ref="pkg:maven/org.apache.camel/camel@4.4.0?type=pom"> + <publisher>The Apache Software Foundation</publisher> + <group>org.apache.camel</group> + <name>camel</name> + <version>4.4.0</version> + <description>Camel Root POM</description> + <licenses> + <license> + <id>Apache-2.0</id> + <url>https://www.apache.org/licenses/LICENSE-2.0</url> + </license> + </licenses> + <purl>pkg:maven/org.apache.camel/camel@4.4.0?type=pom</purl> + <externalReferences><reference type="website"><url>https://camel.apache.org</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/CAMEL</url></reference><reference type="mailing-list"><url>dev-subscr...@camel.apache.org</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=camel.git;a=summary</url></reference></externalReferences> + </component> + <properties> + <property name="maven.goal">makeAggregateBom</property> + <property name="maven.scopes">compile,provided,runtime,system</property> + <property name="cdx:reproducible">enabled</property> + </properties> + </metadata> + <components> + <component type="library" bom-ref="pkg:maven/org.apache.camel/camel-buildtools@4.4.0?type=jar"> + <publisher>The Apache Software Foundation</publisher> + <group>org.apache.camel</group> + <name>camel-buildtools</name> + <version>4.4.0</version> + <description>The build tools for the Apache Camel project</description> + <licenses> + <license> + <id>Apache-2.0</id> + <url>https://www.apache.org/licenses/LICENSE-2.0</url> + </license> + </licenses> + <purl>pkg:maven/org.apache.camel/camel-buildtools@4.4.0?type=jar</purl> + <externalReferences><reference type="website"><url>https://camel.apache.org/camel-buildtools</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/CAMEL</url></reference><reference type="mailing-list"><url>dev-subscr...@camel.apache.org</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=camel.git;a=summary/camel-buildtools</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.apache.camel/camel-parent@4.4.0?type=pom"> + <publisher>The Apache Software Foundation</publisher> + <group>org.apache.camel</group> + <name>camel-parent</name> + <version>4.4.0</version> + <description>Camel Parent POM</description> + <licenses> + <license> + <id>Apache-2.0</id> + <url>https://www.apache.org/licenses/LICENSE-2.0</url> + </license> + </licenses> + <purl>pkg:maven/org.apache.camel/camel-parent@4.4.0?type=pom</purl> + <externalReferences><reference type="website"><url>https://camel.apache.org/camel-parent</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/CAMEL</url></reference><reference type="mailing-list"><url>dev-subscr...@camel.apache.org</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=camel.git;a=summary/camel-parent</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.apache.camel/camel-etc@4.4.0?type=pom"> + <publisher>The Apache Software Foundation</publisher> + <group>org.apache.camel</group> + <name>camel-etc</name> + <version>4.4.0</version> + <description>Misc stuff</description> + <licenses> + <license> + <id>Apache-2.0</id> + <url>https://www.apache.org/licenses/LICENSE-2.0</url> + </license> + </licenses> + <purl>pkg:maven/org.apache.camel/camel-etc@4.4.0?type=pom</purl> + <externalReferences><reference type="website"><url>https://camel.apache.org/camel-parent/camel-etc</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/CAMEL</url></reference><reference type="mailing-list"><url>dev-subscr...@camel.apache.org</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=camel.git;a=summary/camel-parent/camel-etc</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.apache.camel/tooling@4.4.0?type=pom"> + <publisher>The Apache Software Foundation</publisher> + <group>org.apache.camel</group> + <name>tooling</name> + <version>4.4.0</version> + <description>Camel Tooling</description> + <licenses> + <license> + <id>Apache-2.0</id> + <url>https://www.apache.org/licenses/LICENSE-2.0</url> + </license> + </licenses> + <purl>pkg:maven/org.apache.camel/tooling@4.4.0?type=pom</purl> + <externalReferences><reference type="website"><url>https://camel.apache.org/camel-parent/tooling</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/CAMEL</url></reference><reference type="mailing-list"><url>dev-subscr...@camel.apache.org</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=camel.git;a=summary/camel-parent/tooling</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.apache.camel/camel-tooling-util@4.4.0?type=jar"> + <publisher>The Apache Software Foundation</publisher> + <group>org.apache.camel</group> + <name>camel-tooling-util</name> + <version>4.4.0</version> + <description>Tooling utilities</description> + <licenses> + <license> + <id>Apache-2.0</id> + <url>https://www.apache.org/licenses/LICENSE-2.0</url> + </license> + </licenses> + <purl>pkg:maven/org.apache.camel/camel-tooling-util@4.4.0?type=jar</purl> + <externalReferences><reference type="website"><url>https://camel.apache.org/camel-parent/tooling/camel-tooling-util</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/CAMEL</url></reference><reference type="mailing-list"><url>dev-subscr...@camel.apache.org</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=camel.git;a=summary/camel-parent/tooling/camel-tooling-util</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.junit.jupiter/junit-jupiter@5.10.2?type=jar"> + <group>org.junit.jupiter</group> + <name>junit-jupiter</name> + <version>5.10.2</version> + <description>Module "junit-jupiter" of JUnit 5.</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">74440a4d6c038ccfe822debfa779a9fd</hash> + <hash alg="SHA-1">831c0b86ddc2ce38391c5b81ea662b0cfdc02cce</hash> + <hash alg="SHA-256">263e43447f4b40f126ad6b1dcbd7df379448413bdedb8e0d240c5bcbba7c7a4f</hash> + <hash alg="SHA-512">d10edf43b62c5947b50c506e84d65829138970acd6a85c066d7c6ca192477bed197af77866f6b18ea7b8ebc8a1a16666dc7982a967533079e8927a65aa3b484d</hash> + <hash alg="SHA-384">95f57bca7cd4a7aac1f61512fecfe589a11899b6dfd078799199d49f67c8e4994ed535c8cfec5926a1d268f07131934a</hash> + <hash alg="SHA3-384">7bbb2cbfa394b688c7114f0e2b48d3fb691fadd815058ad4ab5f014610a803088e737e32115715d54f12c9817eba7e20</hash> + <hash alg="SHA3-256">80db7332d1d4c805df1731295415eeb78efd69b6ac716108c058c4c58c918d11</hash> + <hash alg="SHA3-512">489f5f58ab03be0b2841370e12c361487798fce1414f12cebbab736ae22b9cb191ac36ee22c1bb4eac4b6405b3e38defef1efa7020dfe2c92a42afe4b9c3b9f4</hash> + </hashes> + <licenses> + <license> + <id>EPL-2.0</id> + </license> + </licenses> + <purl>pkg:maven/org.junit.jupiter/junit-jupiter@5.10.2?type=jar</purl> + <externalReferences><reference type="website"><url>https://junit.org/junit5/</url></reference><reference type="vcs"><url>https://github.com/junit-team/junit5</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.junit.jupiter/junit-jupiter-api@5.10.2?type=jar"> + <group>org.junit.jupiter</group> + <name>junit-jupiter-api</name> + <version>5.10.2</version> + <description>Module "junit-jupiter-api" of JUnit 5.</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">6e691e23a36de8cbda5cbcc9f31461e3</hash> + <hash alg="SHA-1">fb55d6e2bce173f35fd28422e7975539621055ef</hash> + <hash alg="SHA-256">afff77c186cd317275803872fa5133aa801fd6ac40bd91c78a6cf8009b4b17cc</hash> + <hash alg="SHA-512">7dfb74405cc011bf0b9176f2093686680225ef32658ec82b55bad9857eb38999b8ac25c23f920127b426120bfc20938f2d9dc8df111a509d9858d350e5ff7685</hash> + <hash alg="SHA-384">5ef5590ce923e0e5b33e821e1ef650ff30be70433fdd03ab0986ad68f71e18a804c43a8736e5ee619b676218de4d6142</hash> + <hash alg="SHA3-384">dfe5609aa1e95c4156fe2f0143ffb9d327d734a372ccccaca1d2d307b370fb79c5eacc8f228f90d5382f64cd0508447e</hash> + <hash alg="SHA3-256">db3d74ba82ebe3eed0779121c694d3f40932c8c6f1f5985ec0187ebc6af6cfde</hash> + <hash alg="SHA3-512">43cf8157d2de72a4fbbd6c0f92adb32d9454e3b1e32667d11b98916a3310f0835a0a38766ac0e56387e87e916fc4d18cd6b953150e404bc05a743605be90250c</hash> + </hashes> + <licenses> + <license> + <id>EPL-2.0</id> + </license> + </licenses> + <purl>pkg:maven/org.junit.jupiter/junit-jupiter-api@5.10.2?type=jar</purl> + <externalReferences><reference type="website"><url>https://junit.org/junit5/</url></reference><reference type="vcs"><url>https://github.com/junit-team/junit5</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.opentest4j/opentest4j@1.3.0?type=jar"> + <group>org.opentest4j</group> + <name>opentest4j</name> + <version>1.3.0</version> + <description>Open Test Alliance for the JVM</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">03c404f727531f3fd3b4c73997899327</hash> + <hash alg="SHA-1">152ea56b3a72f655d4fd677fc0ef2596c3dd5e6e</hash> + <hash alg="SHA-256">48e2df636cab6563ced64dcdff8abb2355627cb236ef0bf37598682ddf742f1b</hash> + <hash alg="SHA-512">78fc698a7871bb50305e3657893c10500595f043348d875f57bc39ca4a6a51eda3967b7c8c8a7ec3e8f85f2171bca4aa98823e912e416e87e81c6ba5b70a37c3</hash> + <hash alg="SHA-384">10398b6998c9202a0731e2e19ae1c3f9d8a83582c2663fe7bdda15794ee6fa816727dbd8f7c7164bd5395ee1cfe7c97e</hash> + <hash alg="SHA3-384">3abe706fd78509c25a402c7bbf6f9ddf71ffb5b35054864ba0fdf7902207115f888a0ba728fd71d2e87a9360d2498121</hash> + <hash alg="SHA3-256">d961907a1bfa1dcda329dca494ffbc251b31fabcaca5ab7095661a8ce3c1d654</hash> + <hash alg="SHA3-512">0ad661617bcac51bcd26f7ad4611c69b1fd9811b50dbf734e041a3243ab1f845e7796620e8a7c40c4a2df3946864598b1251396c7d9bd813203d82710788cce0</hash> + </hashes> + <licenses> + <license> + <id>Apache-2.0</id> + </license> + </licenses> + <purl>pkg:maven/org.opentest4j/opentest4j@1.3.0?type=jar</purl> + <externalReferences><reference type="website"><url>https://github.com/ota4j-team/opentest4j</url></reference><reference type="vcs"><url>https://github.com/ota4j-team/opentest4j</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.junit.platform/junit-platform-commons@1.10.2?type=jar"> + <group>org.junit.platform</group> + <name>junit-platform-commons</name> + <version>1.10.2</version> + <description>Module "junit-platform-commons" of JUnit 5.</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">ae199049daca42c359e64974009025c5</hash> + <hash alg="SHA-1">3197154a1f0c88da46c47a9ca27611ac7ec5d797</hash> + <hash alg="SHA-256">b56a5ec000a479df4973b18bba24c98fe0db8faa14c8907d3ef451d8c71fd8ae</hash> + <hash alg="SHA-512">aa739ee21b91fd4476aa5f9ad975f83cd440b6fbac71c8cc15816e3924710c0d70838465ee22a1b7390c2bae42ef1809868fa7ae0169b75f437cd95baac539d1</hash> + <hash alg="SHA-384">0963ac9cf11f6312a807b4068dacd66cab7f6378445b4dc2cfd62b62dd7afe609fe389aff4fd2006cdcc564670e849af</hash> + <hash alg="SHA3-384">64688f7803aff2ac8d536c5f9e11891f6b5bfae23580b2513ff4fde3c1f28509a27c483e91fd974e1fbca4a7cbaf3f87</hash> + <hash alg="SHA3-256">83d491a6808587990e165c5065a7c938760065248083d9d05e81d9e4802d7764</hash> + <hash alg="SHA3-512">1d54bed73766715b245012bce223e440703ff2fb8c7d5cfd208393060c2d63178e69e21aa739e5196599dcd1a79decf595cf142abc34ade6bd45a2b1d269f724</hash> + </hashes> + <licenses> + <license> + <id>EPL-2.0</id> + </license> + </licenses> + <purl>pkg:maven/org.junit.platform/junit-platform-commons@1.10.2?type=jar</purl> + <externalReferences><reference type="website"><url>https://junit.org/junit5/</url></reference><reference type="vcs"><url>https://github.com/junit-team/junit5</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.apiguardian/apiguardian-api@1.1.2?type=jar"> + <group>org.apiguardian</group> + <name>apiguardian-api</name> + <version>1.1.2</version> + <description>@API Guardian</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">8c7de3f82037fa4a2e8be2a2f13092af</hash> + <hash alg="SHA-1">a231e0d844d2721b0fa1b238006d15c6ded6842a</hash> + <hash alg="SHA-256">b509448ac506d607319f182537f0b35d71007582ec741832a1f111e5b5b70b38</hash> + <hash alg="SHA-512">d7ccd0e7019f1a997de39d66dc0ad4efe150428fdd7f4c743c93884f1602a3e90135ad34baea96d5b6d925ad6c0c8487c8e78304f0a089a12383d4a62e2c9a61</hash> + <hash alg="SHA-384">5ae11cfedcee7da43a506a67946ddc8a7a2622284a924ba78f74541e9a22db6868a15f5d84edb91a541e38afded734ea</hash> + <hash alg="SHA3-384">c146116b3dfd969200b2ce52d96b92dd02d6f5a45a86e7e85edf35600ddbc2f3c6e8a1ad7e2db4dcd2c398c09fad0927</hash> + <hash alg="SHA3-256">b4b436d7f615fc0b820204e69f83c517d1c1ccc5f6b99e459209ede4482268de</hash> + <hash alg="SHA3-512">7b95b7ac68a6891b8901b5507acd2c24a0c1e20effa63cd513764f513eab4eb55f8de5178edbe0a400c11f3a18d3f56243569d6d663100f06dd98288504c09c5</hash> + </hashes> + <licenses> + <license> + <id>Apache-2.0</id> + </license> + </licenses> + <purl>pkg:maven/org.apiguardian/apiguardian-api@1.1.2?type=jar</purl> + <externalReferences><reference type="website"><url>https://github.com/apiguardian-team/apiguardian</url></reference><reference type="vcs"><url>https://github.com/apiguardian-team/apiguardian</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.junit.jupiter/junit-jupiter-params@5.10.2?type=jar"> + <group>org.junit.jupiter</group> + <name>junit-jupiter-params</name> + <version>5.10.2</version> + <description>Module "junit-jupiter-params" of JUnit 5.</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">2f33df4bff7fbfb15352803fa575b88d</hash> + <hash alg="SHA-1">359132c82a9d3fa87a325db6edd33b5fdc67a3d8</hash> + <hash alg="SHA-256">edb1e43ff0b8067626ffb55e5e9eeca1d9ab2478141a7c7f253d115b29cc7cf2</hash> + <hash alg="SHA-512">002b2010769413f1bc86cf95a48f679eeb7a372379e8f401f892d03bd1089483937a77f08c095579f81b8f0a27896fac6bebdc4c09a2dff9f5459e09207ac0d8</hash> + <hash alg="SHA-384">f026f977c21b4d19611ea2ac8a18cb7c6110787241fd47f650557e427db0289aadd12a1069b46e73cb807bf45bb69455</hash> + <hash alg="SHA3-384">210369e1ccd3a70a0b4fd785777367994414163361ed9d9c449b0b2364dd43122579d48ebb8feb923548c8f43eb74067</hash> + <hash alg="SHA3-256">3714beec66c923801a378969a1d370a43761a5f18e86e26c8161763ad19adb69</hash> + <hash alg="SHA3-512">edcd46e165d048ad49e023c1a71d14b9046c8dd1be20f908b63bde859dad2c76e6b84e8c100ca0e17008f22c3cddd1b4d427b7c4041e6cceea559ef707cfd024</hash> + </hashes> + <licenses> + <license> + <id>EPL-2.0</id> + </license> + </licenses> + <purl>pkg:maven/org.junit.jupiter/junit-jupiter-params@5.10.2?type=jar</purl> + <externalReferences><reference type="website"><url>https://junit.org/junit5/</url></reference><reference type="vcs"><url>https://github.com/junit-team/junit5</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.junit.jupiter/junit-jupiter-engine@5.10.2?type=jar"> + <group>org.junit.jupiter</group> + <name>junit-jupiter-engine</name> + <version>5.10.2</version> + <description>Module "junit-jupiter-engine" of JUnit 5.</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">830301d576c574fbf82320f93f8abacd</hash> + <hash alg="SHA-1">f1f8fe97bd58e85569205f071274d459c2c4f8cd</hash> + <hash alg="SHA-256">b6df35da750a546ae932376f11b3c0df841f0c90c7cb2944cd39adb432886e4b</hash> + <hash alg="SHA-512">0a95745a7d7b7d1cc4974e946cb0ab2696d7739ec1cee8545a34d6f14e63f065d06ab1363e4fc1b588d5197107f9ffc42537bebcd7b10a945fae316e5fdbc103</hash> + <hash alg="SHA-384">e25eda0e686e407053368c09ae28fb95a229d88cedcfa674b74397979f0c7ff36cb410b64c71aef2dda037a5fde2bfcc</hash> + <hash alg="SHA3-384">ac6c8e106d16838f365f701a9fd768f30cd312c903ff117d060383a04043daa92645fb0544917aacd5f116d6272b7e64</hash> + <hash alg="SHA3-256">70d7684eb70992e6a66da5df9bbf23c938f49ec2883320ae57d69930d26a03a3</hash> + <hash alg="SHA3-512">090afd1efec0951d4b8dd870afedf5967281e3e9adad0cb0974d9b06a1c2d9740e102d47f2a0d46013ae65515ba97fbed29083ab4aac84d47b2d0b36fa6204b1</hash> + </hashes> + <licenses> + <license> + <id>EPL-2.0</id> + </license> + </licenses> + <purl>pkg:maven/org.junit.jupiter/junit-jupiter-engine@5.10.2?type=jar</purl> + <externalReferences><reference type="website"><url>https://junit.org/junit5/</url></reference><reference type="vcs"><url>https://github.com/junit-team/junit5</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.junit.platform/junit-platform-engine@1.10.2?type=jar"> + <group>org.junit.platform</group> + <name>junit-platform-engine</name> + <version>1.10.2</version> + <description>Module "junit-platform-engine" of JUnit 5.</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">0bab6a13692441a957234370baae15f0</hash> + <hash alg="SHA-1">d53bb4e0ce7f211a498705783440614bfaf0df2e</hash> + <hash alg="SHA-256">905cba9b4998ccc29d1239085a7fb1fe0e28024d7526152356d810edec0a49a3</hash> + <hash alg="SHA-512">5ca468aff73099673266e4e1431189023b0a660292f4f6c101dc4b03b8ab3643392731aa55455bf3a5079331a563dacda0c6b3cf3df64563ca6e0201af609e27</hash> + <hash alg="SHA-384">7e883fc0a9cd5f3d6a792f26a43eddbe1e8e6583cedfba48690679ca43bf46482967c6e5a91c9b32f8904eaa54b7b759</hash> + <hash alg="SHA3-384">25d922124644f344ec96487622c34c0e853c7a6a70858a3fae3572b0c03d7b7fec4f297f66d37311f87dcdf7c3c58f18</hash> + <hash alg="SHA3-256">90615525738990e5226ec73729c052cb9ee2a8212b263c3214d71fcb28c41118</hash> + <hash alg="SHA3-512">3cbd7d8afa9f1953fef49c010f04f47b286f0cc40ddc3766928801202cf08539919f4018ece569c251d198a1a6e3258bc48d4b2facd2bb7f2d5d675fc34c7dff</hash> + </hashes> + <licenses> + <license> + <id>EPL-2.0</id> + </license> + </licenses> + <purl>pkg:maven/org.junit.platform/junit-platform-engine@1.10.2?type=jar</purl> + <externalReferences><reference type="website"><url>https://junit.org/junit5/</url></reference><reference type="vcs"><url>https://github.com/junit-team/junit5</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.apache.camel/tooling-parent@4.4.0?type=pom"> + <publisher>The Apache Software Foundation</publisher> + <group>org.apache.camel</group> + <name>tooling-parent</name> + <version>4.4.0</version> + <description>Camel Tooling Parent POM</description> + <licenses> + <license> + <id>Apache-2.0</id> + <url>https://www.apache.org/licenses/LICENSE-2.0</url> + </license> + </licenses> + <purl>pkg:maven/org.apache.camel/tooling-parent@4.4.0?type=pom</purl> + <externalReferences><reference type="website"><url>https://camel.apache.org/camel-parent/tooling/tooling-parent</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/CAMEL</url></reference><reference type="mailing-list"><url>dev-subscr...@camel.apache.org</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=camel.git;a=summary/camel-parent/tooling/tooling-parent</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.apache.camel/maven-plugins@4.4.0?type=pom"> + <publisher>The Apache Software Foundation</publisher> + <group>org.apache.camel</group> + <name>maven-plugins</name> + <version>4.4.0</version> + <description>Camel Maven Plugins</description> + <licenses> + <license> + <id>Apache-2.0</id> + <url>https://www.apache.org/licenses/LICENSE-2.0</url> + </license> + </licenses> + <purl>pkg:maven/org.apache.camel/maven-plugins@4.4.0?type=pom</purl> + <externalReferences><reference type="website"><url>https://camel.apache.org/camel-parent/tooling/tooling-parent/maven-plugins</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/CAMEL</url></reference><reference type="mailing-list"><url>dev-subscr...@camel.apache.org</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=camel.git;a=summary/camel-parent/tooling/tooling-parent/maven-plugins</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.apache.camel/bom-generator-maven-plugin@4.4.0?type=maven-plugin"> + <publisher>The Apache Software Foundation</publisher> + <group>org.apache.camel</group> + <name>bom-generator-maven-plugin</name> + <version>4.4.0</version> + <description>Maven plugin to help generating BOM projects</description> + <licenses> + <license> + <id>Apache-2.0</id> + <url>https://www.apache.org/licenses/LICENSE-2.0</url> + </license> + </licenses> + <purl>pkg:maven/org.apache.camel/bom-generator-maven-plugin@4.4.0?type=maven-plugin</purl> + <externalReferences><reference type="website"><url>https://camel.apache.org/camel-parent/tooling/tooling-parent/maven-plugins/bom-generator-maven-plugin</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/CAMEL</url></reference><reference type="mailing-list"><url>dev-subscr...@camel.apache.org</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=camel.git;a=summary/camel-parent/tooling/tooling-parent/maven-plugins/bom-generator-maven-plugin</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.9.18?type=jar"> + <publisher>The Apache Software Foundation</publisher> + <group>org.apache.maven.resolver</group> + <name>maven-resolver-api</name> + <version>1.9.18</version> + <description>The application programming interface for the repository system.</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">43a87208b9585a61f268843f6a0931ec</hash> + <hash alg="SHA-1">0cd5174d6e80175398debe4869d484169c0abbf8</hash> + <hash alg="SHA-256">ebfb9e1dfeea3c2017905184581e007874b4eaac9d28bfffcfe5133d70ac6339</hash> + <hash alg="SHA-512">80f98b487b89dddf8b4891e3260fa1c7e95a282513fa332a2145d35eb8c14c16e05b5ca1f1347076480ecb5eeaa1cf084d38c92200f7c5a13255b5a76d7920be</hash> + <hash alg="SHA-384">a3b3c671a51bee5255af6e9a80714bd1ecac6e52c81cfeff1ead5027b9ae186f352e7518b1bd87008a5c5964c549785a</hash> + <hash alg="SHA3-384">b48ac201434b82e3ae7dee828ccb66b62b6eb49528eb2687fb9b20e64f8f59de0b7cdb851a0e74a9ebda0733ac43e5f6</hash> + <hash alg="SHA3-256">540c5f918984e603cd911053ebaf3be99b6bf3b2448fca12f1e851dd92303469</hash> + <hash alg="SHA3-512">f02e5e1e083151effcc4b1617de334cb410fa43d371a437fa2f4edf3f0e09767068b1ef297360de68d1f480f07e6f1e615c73154b8da290863c4556d10cf627e</hash> + </hashes> + <licenses> + <license> + <id>Apache-2.0</id> + <url>https://www.apache.org/licenses/LICENSE-2.0</url> + </license> + </licenses> + <purl>pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.9.18?type=jar</purl> + <externalReferences><reference type="website"><url>https://maven.apache.org/resolver/maven-resolver-api/</url></reference><reference type="build-system"><url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-resolver/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/MRESOLVER</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?us...@maven.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/maven-resolver/tree/maven-resolver-1.9.18/maven-resolver-api</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.apache.maven.resolver/maven-resolver-util@1.9.18?type=jar"> + <publisher>The Apache Software Foundation</publisher> + <group>org.apache.maven.resolver</group> + <name>maven-resolver-util</name> + <version>1.9.18</version> + <description>A collection of utility classes to ease usage of the repository system.</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">0e6aa5f372550f4239361df35a53b4a1</hash> + <hash alg="SHA-1">5ae9406f188ae4a999c353fce3fd77273797a216</hash> + <hash alg="SHA-256">2eb0ea667bc489384478231dda7516407d4b5b22a138077229871de9362a7ae2</hash> + <hash alg="SHA-512">b084984ea96448bfc70d26091553df0f798957c736c4b0f21874a3844e2ea656f64f253968fa49ed572c80920ede5883c0563cab8961c5bda5e869eda3e2e57a</hash> + <hash alg="SHA-384">ea25e9d331ffab938cc72306f536ac42b3af53f0c683c624e1a2751b12d503d1f8f9b6f948c361543938096ee7768049</hash> + <hash alg="SHA3-384">7886276d15c071d03fbfcf3b4e2d4043417ff725583362123711da116fd24a027456c8835b9a3a1b29a339a1a559103f</hash> + <hash alg="SHA3-256">650154a642fbb6069408aa452312f1abcad0656c6da7f9eb83ea8d683e5ce582</hash> + <hash alg="SHA3-512">fc1726dd19a05060846cd14635b2076f703e5e832139bdd4285e77c0939667dfbdf4c90dc3021250dfc08de63dc346c9bf8bd00a80e31e5adecb305410c3e80f</hash> + </hashes> + <licenses> + <license> + <id>Apache-2.0</id> + <url>https://www.apache.org/licenses/LICENSE-2.0</url> + </license> + </licenses> + <purl>pkg:maven/org.apache.maven.resolver/maven-resolver-util@1.9.18?type=jar</purl> + <externalReferences><reference type="website"><url>https://maven.apache.org/resolver/maven-resolver-util/</url></reference><reference type="build-system"><url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-resolver/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/MRESOLVER</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?us...@maven.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/maven-resolver/tree/maven-resolver-1.9.18/maven-resolver-util</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-core@3.9.6?type=jar"> + <publisher>The Apache Software Foundation</publisher> + <group>org.apache.maven</group> + <name>maven-core</name> + <version>3.9.6</version> + <description>Maven Core classes.</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">0d872ce50d16e02ca72e348b9f7b3487</hash> + <hash alg="SHA-1">674ab3337566d493df8f95eddfda90e41002d214</hash> + <hash alg="SHA-256">c1327590398759da1918dbf356eb6d63f8fce7192a805cb3c8e336fbb1155dc0</hash> + <hash alg="SHA-512">1b3ffd0acebd8b786aa5c30768e44b0246f7f91c8e7443e2143e015ab297e532b3f8acd38cd3acc4435d00f843266e36757b78e6464f81ea3f647fe6adfb63fd</hash> + <hash alg="SHA-384">ff4d155ab40a86405c6a77036ddbf3a1c2aad9d25e66873a2394cae426120089e885337a55d66d751c55ca9f846821a9</hash> + <hash alg="SHA3-384">62b56af02e16b8c3c136b420077162e5ccd5d2ab5e642045b6cff2b1011c1f20d11f5d7d72147ad13b816b5f7eb356ed</hash> + <hash alg="SHA3-256">2a26fe9b6dd5d21071fdb58a7d329472f1f3d80239762e18584d589516c54903</hash> + <hash alg="SHA3-512">ca17f7a1a3280898bba077d9b3a7f573fd766f2eb7ecf79d5dfc9bcfa278dac2bebe92b86a29ff357889681d70fb6f849222ee376b7d3d0efe6b96552e6f0e37</hash> + </hashes> + <licenses> + <license> + <id>Apache-2.0</id> + <url>https://www.apache.org/licenses/LICENSE-2.0</url> + </license> + </licenses> + <purl>pkg:maven/org.apache.maven/maven-core@3.9.6?type=jar</purl> + <externalReferences><reference type="website"><url>https://maven.apache.org/ref/3.9.6/maven-core/</url></reference><reference type="build-system"><url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/</url></reference><reference type="distribution"><url>https://maven.apache.org/download.html</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/MNG</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?us...@maven.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/maven/tree/maven-3.9.6/maven-core</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-model@3.9.6?type=jar"> + <publisher>The Apache Software Foundation</publisher> + <group>org.apache.maven</group> + <name>maven-model</name> + <version>3.9.6</version> + <description>Model for Maven POM (Project Object Model)</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">ac8747986567850914e2c7f0e85599b3</hash> + <hash alg="SHA-1">ac9a1c8a8cfa36f3a5489837e653ec0cd530d576</hash> + <hash alg="SHA-256">4f8f07fdb6b8701fa89a23a2edf830808fd65892d90cce40c0e6df7c8f2fcb62</hash> + <hash alg="SHA-512">234eaac0bf4b9453321b5a140b2d26ec6ff7cacc02158c8cebe33f470ac66380ffbe088cb3281e371bf41c4f364a00c068971d163691c106077be575b95b89d5</hash> + <hash alg="SHA-384">96c8c0bac3905579974974076fbbae7e59f3728c32cac73d122bf1fe0449ce36dabedcd39f0bb04f5d8a6d622c60200d</hash> + <hash alg="SHA3-384">bec8198468b4be72ddc3d420b941ab48407d4915ec6eb4d7c7ab0012c7aaf920d03d0144e32f8894f162e01c48b7ed95</hash> + <hash alg="SHA3-256">39efb719973a7dbd9fd57485eea2fdeed43477fb73dc91b0cbeca6bf01ee5458</hash> + <hash alg="SHA3-512">7ac18a53d7b2e93514a0b76024223e33df0377279eb6cf20d1eddeed21c1486c3cd7a3e399c11bfe32a9269e1d53a5713f864527242c620e9f3d7a2335e46964</hash> + </hashes> + <licenses> + <license> + <id>Apache-2.0</id> + <url>https://www.apache.org/licenses/LICENSE-2.0</url> + </license> + </licenses> + <purl>pkg:maven/org.apache.maven/maven-model@3.9.6?type=jar</purl> + <externalReferences><reference type="website"><url>https://maven.apache.org/ref/3.9.6/maven-model/</url></reference><reference type="build-system"><url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/</url></reference><reference type="distribution"><url>https://maven.apache.org/download.html</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/MNG</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?us...@maven.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/maven/tree/maven-3.9.6/maven-model</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-settings@3.9.6?type=jar"> + <publisher>The Apache Software Foundation</publisher> + <group>org.apache.maven</group> + <name>maven-settings</name> + <version>3.9.6</version> + <description>Maven Settings model.</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">144dfb04d530da655c5f96d80adb4ef4</hash> + <hash alg="SHA-1">7687311690b68c935753c55dd3f016d8c4a7820f</hash> + <hash alg="SHA-256">0d200fd3b354d653d2a02cdba6a39b6dc2744a8539ff36ea423fe62cac736799</hash> + <hash alg="SHA-512">169cd7f3ef1933bca97c8b05022a1537695c20d7205333775375353249913e343ed7d48651ef23278a5942f2751ffd6968812a02e23a53af7adfd2cc22dac709</hash> + <hash alg="SHA-384">ff0eacfafb403c71c7b571101d44792e2c809b7e6c308e4906eb09af8520413579d4be31625059eb7547b2b875bf8ffd</hash> + <hash alg="SHA3-384">598fc70e1fa4885f2f31287d825fa169243b10ec1b87f9bf1a45026ee6e0d41eb5c164958ccb2995cf22f88738700801</hash> + <hash alg="SHA3-256">d6b2525a09ad10ca6d70f4fc2fbd92d1f8ff0c5bf15b30ff33d6df84fab9c316</hash> + <hash alg="SHA3-512">87a7ed26f07ab9f29ecc033fe4c40c99f5365f9ccd31bfa4be6f02fa02ba98a4cebaed7436037e264ca4c2b1173bd423e0ea3aee465535a7d9f721783ec70c17</hash> + </hashes> + <licenses> + <license> + <id>Apache-2.0</id> + <url>https://www.apache.org/licenses/LICENSE-2.0</url> + </license> + </licenses> + <purl>pkg:maven/org.apache.maven/maven-settings@3.9.6?type=jar</purl> + <externalReferences><reference type="website"><url>https://maven.apache.org/ref/3.9.6/maven-settings/</url></reference><reference type="build-system"><url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/</url></reference><reference type="distribution"><url>https://maven.apache.org/download.html</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/MNG</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?us...@maven.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/maven/tree/maven-3.9.6/maven-settings</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-settings-builder@3.9.6?type=jar"> + <publisher>The Apache Software Foundation</publisher> + <group>org.apache.maven</group> + <name>maven-settings-builder</name> + <version>3.9.6</version> + <description>The effective settings builder, with inheritance and password decryption.</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">5480ba40c9ae1cac6931abf16f7e8b81</hash> + <hash alg="SHA-1">2b75954b6f0c7eef38f388d97b91ce1ae3229f21</hash> + <hash alg="SHA-256">e97cc245e4ef833c589fce0b5a8a4d77e3a0e01e619c57b5342c5e16d37a791d</hash> + <hash alg="SHA-512">da5f18b6d6959805cedf659bf3086576014ba48c9c8b6216b26995431c2c0b407c130869bab981123cc897371efa66d8e08515a18021614372bce46157f36534</hash> + <hash alg="SHA-384">ab60bc65e312ea41ed6fdcb08900941d0c63bf06c8ad8f31632a5ecd5cc9fcba6bc09c64be2b7f5d42dae048d2cccb4b</hash> + <hash alg="SHA3-384">09d98ef4cb7141b931cd9c4e54011cdaaef1d104146f4b5f7c9e3dbbdd479b616eb020b22ee0b8be864b81a8e38b265d</hash> + <hash alg="SHA3-256">8343aa4e31b4190e5ea6f4b09ebb490eba0c4e2ffde82861a65d641b636f5909</hash> + <hash alg="SHA3-512">bcc1344c9cab3adf47863f024ee5f682c617bc2279a2d4d2705313d486c3bcc8878d4b05a0405ff9b101d0393dfda63498ed65400eda8cd342e98e4a3bcc6cc7</hash> + </hashes> + <licenses> + <license> + <id>Apache-2.0</id> + <url>https://www.apache.org/licenses/LICENSE-2.0</url> + </license> + </licenses> + <purl>pkg:maven/org.apache.maven/maven-settings-builder@3.9.6?type=jar</purl> + <externalReferences><reference type="website"><url>https://maven.apache.org/ref/3.9.6/maven-settings-builder/</url></reference><reference type="build-system"><url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/</url></reference><reference type="distribution"><url>https://maven.apache.org/download.html</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/MNG</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?us...@maven.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/maven/tree/maven-3.9.6/maven-settings-builder</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.codehaus.plexus/plexus-sec-dispatcher@2.0?type=jar"> + <publisher>Codehaus Plexus</publisher> + <group>org.codehaus.plexus</group> + <name>plexus-sec-dispatcher</name> + <version>2.0</version> + <description>The Plexus project provides a full software stack for creating and executing software projects.</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">e68635a721630177ac70173e441336b6</hash> + <hash alg="SHA-1">f89c5080614ffd0764e49861895dbedde1b47237</hash> + <hash alg="SHA-256">873139960c4c780176dda580b003a2c4bf82188bdce5bb99234e224ef7acfceb</hash> + <hash alg="SHA-512">ad4e814c8baff780a4eee064903e52b09ae00420a59fb075ef72dbb8d64d12d3d5009b03d56c15f93587d931c3a7f06cad6351ab2dc9415ccc6eeab0daebeb07</hash> + <hash alg="SHA-384">4af3426b6409cce7d5fcda4e2af407fc2dbae9873e06d98332bcd032c0039d9080a291e42223ea2bbef9825d3d63493f</hash> + <hash alg="SHA3-384">41720858dd5804f9cb26a8878c16dbdf0372a90e99c037809fe76c3de2c5517ba252af8f8cdf534c1a09900702e6a917</hash> + <hash alg="SHA3-256">50fa723aefb551a3fd5888375d01f1d776c534cdf833baea392818e9bfa8166e</hash> + <hash alg="SHA3-512">a43f823d31b377c0c7ec8d36ace69e5dbcdaf4dc4ebb45ff0561fea9e12d74c06090ee24b29b06769d4031693faf5d7e3146583d3a64bfaef6b7c79773a8831f</hash> + </hashes> + <licenses> + <license> + <id>Apache-2.0</id> + </license> + </licenses> + <purl>pkg:maven/org.codehaus.plexus/plexus-sec-dispatcher@2.0?type=jar</purl> + <externalReferences><reference type="website"><url>https://codehaus-plexus.github.io/plexus-sec-dispatcher/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/codehaus-plexus/plexus-sec-dispatcher/issues</url></reference><reference type="mailing-list"><url>http://archive.plexus.codehaus.org/user</url></reference><reference type="vcs"><url>https://github.com/codehaus-plexus/plexus-sec-dispatcher.git</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.codehaus.plexus/plexus-cipher@2.0?type=jar"> + <publisher>Codehaus Plexus</publisher> + <group>org.codehaus.plexus</group> + <name>plexus-cipher</name> + <version>2.0</version> + <description>The Plexus project provides a full software stack for creating and executing software projects.</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">55d612839faf248cbe3e273969c002c2</hash> + <hash alg="SHA-1">425ea8e534716b4bff1ea90f39bd76be951d651b</hash> + <hash alg="SHA-256">9a7f1b5c5a9effd61eadfd8731452a2f76a8e79111fac391ef75ea801bea203a</hash> + <hash alg="SHA-512">8f187b07867a7c29d77454aae4b76479300238d9c4e777c1afa2aebe33b88dab916e29111dd55acac1341849f4579fe91a5470fdd45ccba0e05709c2ce3a1d65</hash> + <hash alg="SHA-384">6973eefe06a8992aa8db1775c0f43a84cbef54eeea9122a5a30c362af3e4fb13b6cbd6fba229142e2a4495f97d71f409</hash> + <hash alg="SHA3-384">ea780d218f96e61005c5582bf3785ddbb33b53ccb4efbffd76ab58166cf261d3c256d52fea28759380684b7e9b0db8eb</hash> + <hash alg="SHA3-256">e2e51d5350ffdce341464ddcdf9ae60108bff40bf5174dc6be43e33ffcd84af9</hash> + <hash alg="SHA3-512">f3e17ea31bdefc8094ba3495b8231ec7f90c7175839b009d9fd230110b66ac4c68c912fda1a6e644d93dbce639d738e2535f1ade5841e072a604f5f8ac536729</hash> + </hashes> + <licenses> + <license> + <id>Apache-2.0</id> + </license> + </licenses> + <purl>pkg:maven/org.codehaus.plexus/plexus-cipher@2.0?type=jar</purl> + <externalReferences><reference type="website"><url>https://codehaus-plexus.github.io/plexus-cipher/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/codehaus-plexus/plexus-cipher/issues</url></reference><reference type="mailing-list"><url>http://archive.plexus.codehaus.org/user</url></reference><reference type="vcs"><url>http://github.com/codehaus-plexus/plexus-cipher</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-builder-support@3.9.6?type=jar"> + <publisher>The Apache Software Foundation</publisher> + <group>org.apache.maven</group> + <name>maven-builder-support</name> + <version>3.9.6</version> + <description>Support for descriptor builders (model, setting, toolchains)</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">e004677a88ec086ba79a6a646b120f06</hash> + <hash alg="SHA-1">bcfc9d8175eaba21111edf21e0355a8523461abc</hash> + <hash alg="SHA-256">e1f4d2784459ce8a34b9dae1829a1999b569e483e21ee9faa7368691e729296e</hash> + <hash alg="SHA-512">8c7e1dfec3285d0b834b76e815af3a41fabe20399a5144676b523cf5e1f7f4a35595b8de0e587c43e357b279114d43ac93449280a93634da934ca91911fe4817</hash> + <hash alg="SHA-384">fcbe5b83ce778902e2734a693861bec86656ce027cb794fc7f3306e1e3b01d0057f8eb2d4cc67cad7664c4d3b026e704</hash> + <hash alg="SHA3-384">e80adc67e2aab27122b520609a00fa15a8fe3b94a4602fbd5bb23bb3dc5d0a01cd95f6fba5f1889ede89bbb303d41896</hash> + <hash alg="SHA3-256">ffa18d4f03cb557eb51b204a8a7ae8f5be6d4a818e065a42497d006ce580f535</hash> + <hash alg="SHA3-512">d75a0f7038a1065ff6c9a52ece1b8d3830b5e52ad79abd0aa7c6a75fc110010e2277113c2662ba5b2322b4f15daa6549510303344dc1059f84bbafa48d9402c4</hash> + </hashes> + <licenses> + <license> + <id>Apache-2.0</id> + <url>https://www.apache.org/licenses/LICENSE-2.0</url> + </license> + </licenses> + <purl>pkg:maven/org.apache.maven/maven-builder-support@3.9.6?type=jar</purl> + <externalReferences><reference type="website"><url>https://maven.apache.org/ref/3.9.6/maven-builder-support/</url></reference><reference type="build-system"><url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/</url></reference><reference type="distribution"><url>https://maven.apache.org/download.html</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/MNG</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?us...@maven.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/maven/tree/maven-3.9.6/maven-builder-support</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-repository-metadata@3.9.6?type=jar"> + <publisher>The Apache Software Foundation</publisher> + <group>org.apache.maven</group> + <name>maven-repository-metadata</name> + <version>3.9.6</version> + <description>Per-directory local and remote repository metadata.</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">58a684bcc774fb44e4f73fa7466dc44d</hash> + <hash alg="SHA-1">497cda3149f3c661113f9a663e0270ce2566cc95</hash> + <hash alg="SHA-256">e047a67b204c434994253e2ab5bdff5fe8cb7ada9316ac3e754c39f900ea847b</hash> + <hash alg="SHA-512">6020ef7361dd3a1c30227c80521b0233d99c61365b9e936968bc7421e771ec995b08cffe0dd1a94495e41208c6f2fe5f61b19162a59c8e5afb18569347ae6646</hash> + <hash alg="SHA-384">8a56f8bbcbe303e87c0397c17456df1c14c2e9a10b899b26b30c905152fed1ca12863aed01641d1e3e2dc0b2b6355285</hash> + <hash alg="SHA3-384">39a4aa4493977feb0d1772b660191c0ad029ff2ad498752fa02fec74610eac50f5f7a00a91bd128eca71c72a305dc055</hash> + <hash alg="SHA3-256">e5a4e09609b2472233b395fbb31842f4d6f2ec1cebd65236cd93d2c34e910114</hash> + <hash alg="SHA3-512">7d50337b8b9d9bea846b86cc25210e9ebda941f098bb415172a80748609a022e56057d7873dafe068f5fa7e3cd1591b7613d7c9fc479f36e4688e95a31a29d20</hash> + </hashes> + <licenses> + <license> + <id>Apache-2.0</id> + <url>https://www.apache.org/licenses/LICENSE-2.0</url> + </license> + </licenses> + <purl>pkg:maven/org.apache.maven/maven-repository-metadata@3.9.6?type=jar</purl> + <externalReferences><reference type="website"><url>https://maven.apache.org/ref/3.9.6/maven-repository-metadata/</url></reference><reference type="build-system"><url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/</url></reference><reference type="distribution"><url>https://maven.apache.org/download.html</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/MNG</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?us...@maven.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/maven/tree/maven-3.9.6/maven-repository-metadata</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-model-builder@3.9.6?type=jar"> + <publisher>The Apache Software Foundation</publisher> + <group>org.apache.maven</group> + <name>maven-model-builder</name> + <version>3.9.6</version> + <description>The effective model builder, with inheritance, profile activation, interpolation, ...</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">8b1aa0b78ffdb501dd4a6cbc0cbeff68</hash> + <hash alg="SHA-1">983ce00d50a9f78ad1b805e21e4fd71807fa6ebf</hash> + <hash alg="SHA-256">5f96dafbc411ee4b1e8426368d0d31d05ab5a4dace69808143142a0017598721</hash> + <hash alg="SHA-512">a4fb4c65d2decd27583e67872d677a5be764f46aa718fccf5b28e00a3da0897b123981d813419362bdb0f2f4be18fbc2a9a4af705382b930f63353e6c605718f</hash> + <hash alg="SHA-384">e3339d859f7f0596eb9f70df32c7fd2e49831adbd6ff1ee15d720c480b7bc6b888e9a9296981cf638d5800cbfb7ef730</hash> + <hash alg="SHA3-384">658944e788511a9d838bcbc0152ee56341c251d1b767b9f1cfaced0c6dd71a091247184e6c62e2443f6f8139a3268882</hash> + <hash alg="SHA3-256">012de6c311ffead1cdebf70b8cde874ae21112411701a4ba139a95414f762e76</hash> + <hash alg="SHA3-512">f2908d9ae1d01b28352f72acbb9c545ac1b88687b917b7e31bdd8f83e5d2a0736d59b01230d0cbfa20b133ff306c1693f8bf7881588e60f8e9ca6a8cb64c5916</hash> + </hashes> + <licenses> + <license> + <id>Apache-2.0</id> + <url>https://www.apache.org/licenses/LICENSE-2.0</url> + </license> + </licenses> + <purl>pkg:maven/org.apache.maven/maven-model-builder@3.9.6?type=jar</purl> + <externalReferences><reference type="website"><url>https://maven.apache.org/ref/3.9.6/maven-model-builder/</url></reference><reference type="build-system"><url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/</url></reference><reference type="distribution"><url>https://maven.apache.org/download.html</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/MNG</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?us...@maven.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/maven/tree/maven-3.9.6/maven-model-builder</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-resolver-provider@3.9.6?type=jar"> + <publisher>The Apache Software Foundation</publisher> + <group>org.apache.maven</group> + <name>maven-resolver-provider</name> + <version>3.9.6</version> + <description>Extensions to Maven Resolver for utilizing Maven POM and repository metadata.</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">74c2e9695842a46c2c2c1cd5179266c4</hash> + <hash alg="SHA-1">848c45d334f6cc5c8dd602b0e58fd4482964eddc</hash> + <hash alg="SHA-256">73b00b244b7b9e285654a45e765892bf5d369da77d42b5b4b5429122ed198a33</hash> + <hash alg="SHA-512">94d795274f8c78c55b7d041a5f8abea14ec151a4c287c17f517cbe1cfe32413a835aee2d1585b5a43a6c58f4d87e0638166c1f1d360adb4495ce3379877883a7</hash> + <hash alg="SHA-384">a35dd490ec044890cc0a1cf663c2683d9117513742fe2dc3584e2b79de5dcf3db4ddd60338729afae8cbfbcbbfb0dd6a</hash> + <hash alg="SHA3-384">7d3930d3d2d5f4f0afd00cb4239c2963f24ba39d5653f4169d83e71f282470c8f312bf7088b1760a4f51cd2904f13e44</hash> + <hash alg="SHA3-256">b4ba4e0317de799723660a5ad284012f2ccf4b7fe0bdb5645a13655b7f5f5e8b</hash> + <hash alg="SHA3-512">1eac6b376405d776ebc9226eddfea1dd94b3a0587d6df0c4ab843ca3e90808be649f3c1a9d985d77eac43d588a7c85743f73a8855b7f4dff8c58f008b1d1d08d</hash> + </hashes> + <licenses> + <license> + <id>Apache-2.0</id> + <url>https://www.apache.org/licenses/LICENSE-2.0</url> + </license> + </licenses> + <purl>pkg:maven/org.apache.maven/maven-resolver-provider@3.9.6?type=jar</purl> + <externalReferences><reference type="website"><url>https://maven.apache.org/ref/3.9.6/maven-resolver-provider/</url></reference><reference type="build-system"><url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/</url></reference><reference type="distribution"><url>https://maven.apache.org/download.html</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/MNG</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?us...@maven.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/maven/tree/maven-3.9.6/maven-resolver-provider</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.apache.maven.resolver/maven-resolver-impl@1.9.18?type=jar"> + <publisher>The Apache Software Foundation</publisher> + <group>org.apache.maven.resolver</group> + <name>maven-resolver-impl</name> + <version>1.9.18</version> + <description>An implementation of the repository system.</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">0204f7788eb26200ff419d4abe21072b</hash> + <hash alg="SHA-1">e928b128d1e52e6299f94431ce3df74647bc8c26</hash> + <hash alg="SHA-256">6bb9c90d007098004749c867da2eaf5785fc1139907718749c1097bdb2929bf8</hash> + <hash alg="SHA-512">64126f7045f32088e0ea7589cb0bbdc2142774d04b482bedd4c8fa6eecabdeb7f8166e652b8b56c78ea1e1e87319494846e119b86972d0998f4b2b3387e2f9a0</hash> + <hash alg="SHA-384">bd7562286f2b65e32344e6090b15cac641e48e494d4c39faade90665e20f23657fcde8721ca9893edc6d2a23d6d078bf</hash> + <hash alg="SHA3-384">57d1c84a8194ce4f2156a02b62facc9f929a0da25541c6f8b73191890252afe0b83928e8e5041d88d67d4799248b39d7</hash> + <hash alg="SHA3-256">7d1b46b5b6697753b20f46c58ab48298cace29ce6ee9f9bcb6c8dcdc59221beb</hash> + <hash alg="SHA3-512">d50a156eed57cc5d3ba0a73f8743e1fb68da2877957527db7cff213b904270ce5f2ece9b3cb7fb4db9ba1abaefa5e23652b666ca8e30f13536728fb1e73ee480</hash> + </hashes> + <licenses> + <license> + <id>Apache-2.0</id> + <url>https://www.apache.org/licenses/LICENSE-2.0</url> + </license> + </licenses> + <purl>pkg:maven/org.apache.maven.resolver/maven-resolver-impl@1.9.18?type=jar</purl> + <externalReferences><reference type="website"><url>https://maven.apache.org/resolver/maven-resolver-impl/</url></reference><reference type="build-system"><url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-resolver/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/MRESOLVER</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?us...@maven.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/maven-resolver/tree/maven-resolver-1.9.18/maven-resolver-impl</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.apache.maven.resolver/maven-resolver-named-locks@1.9.18?type=jar"> + <publisher>The Apache Software Foundation</publisher> + <group>org.apache.maven.resolver</group> + <name>maven-resolver-named-locks</name> + <version>1.9.18</version> + <description>A synchronization utility implementation using Named locks.</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">e6da3cfadecd128a47814dfc661163dc</hash> + <hash alg="SHA-1">31f948d89dcb3d9739e70d5e1000ebd68eb4405d</hash> + <hash alg="SHA-256">098de7bbc5b0b26c3eff74ac30ffba6680fdab9bf4aebab95c3f5e2fe9eaeea8</hash> + <hash alg="SHA-512">2b55a35aa8aa819e9e7287791790b9ac9ba70d9a2b3a6dbe7dee40254c6515f5d1cd61b15e4c6700036125529d0a2a2d13bf1ac0230e958b5f90aa8462a8d58d</hash> + <hash alg="SHA-384">1c607e1e92b97856f6638a00e2e5f6d804450efea858c6d289575297eb071a8ced2b60f1b27694db286c0ae6ccfda786</hash> + <hash alg="SHA3-384">fe75434380ebfa2e4b0e2a3d680a5447635552386c8801926c99134d130988003ad88d53ba462963180f144b820d0731</hash> + <hash alg="SHA3-256">166cf9b1a9c4ba6cead05d6adfd7391a09d3d067187c971eb58323306428b951</hash> + <hash alg="SHA3-512">f47e7b380741460b9609047b32fac66001abff730ead00cf565d9034290c051199f0b74f535aa748e62091a539d21359b5ad16da8b847f809bd1696405d9b9ff</hash> + </hashes> + <licenses> + <license> + <id>Apache-2.0</id> + <url>https://www.apache.org/licenses/LICENSE-2.0</url> + </license> + </licenses> + <purl>pkg:maven/org.apache.maven.resolver/maven-resolver-named-locks@1.9.18?type=jar</purl> + <externalReferences><reference type="website"><url>https://maven.apache.org/resolver/maven-resolver-named-locks/</url></reference><reference type="build-system"><url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-resolver/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/MRESOLVER</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?us...@maven.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/maven-resolver/tree/maven-resolver-1.9.18/maven-resolver-named-locks</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.apache.maven.resolver/maven-resolver-spi@1.9.18?type=jar"> + <publisher>The Apache Software Foundation</publisher> + <group>org.apache.maven.resolver</group> + <name>maven-resolver-spi</name> + <version>1.9.18</version> + <description>The service provider interface for repository system implementations and repository connectors.</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">b99c631156da02290d0c95cf40c4917b</hash> + <hash alg="SHA-1">7fa176b3353ef6d78d02db39e025f3c27a983158</hash> + <hash alg="SHA-256">d364fce9a17b0e0b073c26efa92af95b29c00c42943dced4a1168a7923fd3fe1</hash> + <hash alg="SHA-512">4d5149923daa3ae532704b55abc9f553e8ae700a896df2c43467dc6be273b0458b81f7d453cf69c203d4c30a9770b41efbf4c52c1ad28038f544fafdb1a85f14</hash> + <hash alg="SHA-384">cafb154ec6c2de03737310566e8ff04e3df40614fa2b5aaa274a2d1c4ded45ccf97f4e78597271f859b684a89d6d7180</hash> + <hash alg="SHA3-384">f73a5dcce5bae6ec88a9e9bf203e520ef6a28eb38ff74156e23054e5c169d76d21f15d21f1db35e3f6f9eccd3a07edc5</hash> + <hash alg="SHA3-256">e9d0b1de73e887b97084e3bb9a533b428bdae96121e3333d012a5eabb8a22f0f</hash> + <hash alg="SHA3-512">471cf0ac9de5249bf80992d4e7fe7693a41359540d704982fa19a2be174e594ce0e18048c69404defa1fd22bf57185f51e864eac0c088baf33242cc349464170</hash> + </hashes> + <licenses> + <license> + <id>Apache-2.0</id> + <url>https://www.apache.org/licenses/LICENSE-2.0</url> + </license> + </licenses> + <purl>pkg:maven/org.apache.maven.resolver/maven-resolver-spi@1.9.18?type=jar</purl> + <externalReferences><reference type="website"><url>https://maven.apache.org/resolver/maven-resolver-spi/</url></reference><reference type="build-system"><url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-resolver/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/MRESOLVER</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?us...@maven.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/maven-resolver/tree/maven-resolver-1.9.18/maven-resolver-spi</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.apache.maven.shared/maven-shared-utils@3.3.4?type=jar"> + <publisher>The Apache Software Foundation</publisher> + <group>org.apache.maven.shared</group> + <name>maven-shared-utils</name> + <version>3.3.4</version> + <description>Shared utilities for use by Maven core and plugins</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">908f2a0107ff330ac9b856356a0acaef</hash> + <hash alg="SHA-1">f87a61adb1e12a00dcc6cc6005a51e693aa7c4ac</hash> + <hash alg="SHA-256">7925d9c5a0e2040d24b8fae3f612eb399cbffe5838b33ba368777dc7bddf6dda</hash> + <hash alg="SHA-512">c6693f8a061de74ac59c61d185f5b130cb574405cfc37febb8e73806ea64eea822a4a75c24098fb49b7871373091543a6f4c526c0842589e528cacad40e5554a</hash> + <hash alg="SHA-384">bc5b42831ff598f42dda54738be004a619d60201a009b04cb3aaa0dc343d0e4fbc423b19739391eb7c33efcac3c08dd5</hash> + <hash alg="SHA3-384">385bebb35d7ea13d92ae6a5afa9257b184a1fcf40cba077a103c7a91d39a4d3e0180a475febdba73ac75949968e77186</hash> + <hash alg="SHA3-256">888fde30d4f9a9e1b7c4c5e4d61f9cf0499192e5bc1212538e2e3320688e44da</hash> + <hash alg="SHA3-512">40b55bb907452777443b8162d456bf1d48e02bfd9124062faed9c9bf51e0f522d40b02f4c24eb39f760469ad226570876f0de6afecd74903112ec794f0aa9a78</hash> + </hashes> + <licenses> + <license> + <id>Apache-2.0</id> + </license> + </licenses> + <purl>pkg:maven/org.apache.maven.shared/maven-shared-utils@3.3.4?type=jar</purl> + <externalReferences><reference type="website"><url>https://maven.apache.org/shared/maven-shared-utils/</url></reference><reference type="build-system"><url>https://ci-builds.apache.org/job/Maven/job/maven-box/job/maven-shared-utils/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/issues/?jql=project%20%3D%20MSHARED%20AND%20component%20%3D%20maven-shared-utils</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?us...@maven.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/maven-shared-utils/tree/maven-shared-utils-3.3.4</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.9.0.M2?type=jar"> + <publisher>The Eclipse Foundation</publisher> + <group>org.eclipse.sisu</group> + <name>org.eclipse.sisu.plexus</name> + <version>0.9.0.M2</version> + <description>Plexus-JSR330 adapter; adds Plexus support to the Sisu-Inject container</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">98e320df2caac742b2ae33d938c69df8</hash> + <hash alg="SHA-1">31456dd2293197bb282c03168f6767acca3dec96</hash> + <hash alg="SHA-256">9500d303ce467e26d129dda8559c3f3a91277d41ab49d2c4b4a5779536a62fc1</hash> + <hash alg="SHA-512">907bb88258ba9d9ae465db219de803074a677193f3a5a05cc36c7fcf413123f50742bab231d3eb783395448bb487934f85b12972efe36b77a32e235524bef4ec</hash> + <hash alg="SHA-384">8eb92a65730622e93791bc4c6435113596473d69f3d8dd5348c42ea47c2a93017674fafb34f5d5a48ef210638d37640d</hash> + <hash alg="SHA3-384">e97753b0913e87a430a7e6ce8467a2903670edbc87cba4282cd401137983b15cb9c4361c7504e139bb10119d9d7ddfde</hash> + <hash alg="SHA3-256">883521331173ce90227bec1c5848ffc2f2a45e83eaa29d0376fb80e633c462c0</hash> + <hash alg="SHA3-512">3429abb8aecac539bbf04bd6f6ba339c71d7156ec0861f27de86e1664312bb30dcd076a317dad0bbdefad89dbd03fbcf56003e16551c3320e2bf223424998c16</hash> + </hashes> + <licenses> + <license> + <id>EPL-1.0</id> + </license> + </licenses> + <purl>pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.9.0.M2?type=jar</purl> + <externalReferences><reference type="website"><url>http://www.eclipse.org/sisu/org.eclipse.sisu.plexus/</url></reference><reference type="build-system"><url>https://ci.eclipse.org/sisu/job/sisu.plexus/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/eclipse/sisu.plexus/issues</url></reference><reference type="mailing-list"><url>http://dev.eclipse.org/mhonarc/lists/sisu-dev/</url></reference><reference type="vcs"><url>https://github.com/eclipse/sisu.plexus/org.eclipse.sisu.plexus</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/javax.annotation/javax.annotation-api@1.2?type=jar"> + <publisher>GlassFish Community</publisher> + <group>javax.annotation</group> + <name>javax.annotation-api</name> + <version>1.2</version> + <description>Common Annotations for the JavaTM Platform API</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">75fe320d2b3763bd6883ae1ede35e987</hash> + <hash alg="SHA-1">479c1e06db31c432330183f5cae684163f186146</hash> + <hash alg="SHA-256">5909b396ca3a2be10d0eea32c74ef78d816e1b4ead21de1d78de1f890d033e04</hash> + <hash alg="SHA-512">2453330b27a0822bba440c28b98ae1d83d60d97dfa2d040562dd5126b3548e0caa040fea3b886ac6feb0a858e6c1bc45b6c5472b180f1f14792e5ca33e355959</hash> + <hash alg="SHA-384">37a46eaa1d011969d28ff0daaecd67a560169b3ae70c40102331d85a71139ca07110169fe367f484735914ce5c6b86c0</hash> + <hash alg="SHA3-384">e2f8df1aad5867355fd1d3de2374d077e3ad885e6bddac3ce7c7bc72a34097e33bc5dfe960f839a7feb515bd5a92ffd1</hash> + <hash alg="SHA3-256">2e2acc7429faecd2e74c0c441209b1a5b0ccbc245ccd8391425c4b1e4b2fbc94</hash> + <hash alg="SHA3-512">9a28cb34c7761e695ccea04cc6df1e0f9cd18fef59bf50d5943ddc06802e616bc2bd55211e863c65f7f7661f963ba8ee9e569324642b87bc1703dc6f07cba5e3</hash> + </hashes> + <licenses> + <expression>(CDDL-1.0 OR GPL-2.0-with-classpath-exception)</expression> + </licenses> + <purl>pkg:maven/javax.annotation/javax.annotation-api@1.2?type=jar</purl> + <externalReferences><reference type="website"><url>http://jcp.org/en/jsr/detail?id=250</url></reference><reference type="distribution"><url>https://maven.java.net/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>http://java.net/jira/browse/GLASSFISH</url></reference><reference type="vcs"><url>http://java.net/projects/glassfish/sources/svn/show/tags/javax.annotation-api-1.2</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.9.0.M2?type=jar"> + <publisher>The Eclipse Foundation</publisher> + <group>org.eclipse.sisu</group> + <name>org.eclipse.sisu.inject</name> + <version>0.9.0.M2</version> + <description>JSR330-based container; supports classpath scanning, auto-binding, and dynamic auto-wiring</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">eb805c5b2e22c8002877f0caadc6a87c</hash> + <hash alg="SHA-1">5ace70e1ea696d156f5034a42a615df13a52003a</hash> + <hash alg="SHA-256">9b62bcfc352a2ec87da8b01e37c952a54d358bbb1af3f212648aeafe7ab2dbb5</hash> + <hash alg="SHA-512">89544822c6c11a165f36e8bc29d9c69c9bcf85635234367cd9e8065273d891d1e9a8118a283502b20d00594db9c123e59901caf118b92424690fd6b3f60f2cc9</hash> + <hash alg="SHA-384">7c1331d3ac0f1908861c96a6d0d32dcd9bfaf3bf1c0a403e6b69ffa88ba2d1b1deddfa9a59c92be43d443688e1e0282d</hash> + <hash alg="SHA3-384">e9f6df518234899f3f7e82d934c4e66164ccb567f8cf232a234a93c414bf6717ad199d2c6dffd8196ccc9826d113fd34</hash> + <hash alg="SHA3-256">f1646c76c126c31fdbdf4b0833b53246f34314ed3a5480d56d579d29c8759fb7</hash> + <hash alg="SHA3-512">e4d125178fea97856067ef119d2d6864235056d8aba53b57171aefd36d14e4b54d25a417ca18af19f720efb9b32eae4a1d339e79c1687570735f359cad01f5c2</hash> + </hashes> + <licenses> + <license> + <id>EPL-1.0</id> + </license> + </licenses> + <purl>pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.9.0.M2?type=jar</purl> + <externalReferences><reference type="website"><url>http://www.eclipse.org/sisu/org.eclipse.sisu.inject/</url></reference><reference type="build-system"><url>https://ci.eclipse.org/sisu/job/sisu.inject/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/eclipse/sisu.inject/issues</url></reference><reference type="mailing-list"><url>http://dev.eclipse.org/mhonarc/lists/sisu-dev/</url></reference><reference type="vcs"><url>https://github.com/eclipse/sisu.inject/org.eclipse.sisu.inject</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/com.google.inject/guice@5.1.0?type=jar"> + <publisher>Google, Inc.</publisher> + <group>com.google.inject</group> + <name>guice</name> + <version>5.1.0</version> + <description>Guice is a lightweight dependency injection framework for Java 6 and above</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">2560169296aa94492af34af2115e9511</hash> + <hash alg="SHA-1">da25056c694c54ba16e78e4fc35f17fc60f0d1b4</hash> + <hash alg="SHA-256">4130e50bfac48099c860f0d903b91860c81a249c90f38245f8fed58fc817bc26</hash> + <hash alg="SHA-512">b9c7a9b815d9ce387ebf6d58a71541da1be3cb8d847358133dc1f35ca45315bb9db11c13f3238adb643670759a58fd106247039f42c10759374a9b361c62e99e</hash> + <hash alg="SHA-384">1f7e6e7555c97752e2a3a7dc07473384762467c24a0fc8f4c93c0f209ef361ecd4bf2be847281798dd84f68fc8c54b2f</hash> + <hash alg="SHA3-384">59b895108174073d9889ba3e18566eb5e0785310e90dbd918dfb06af5bdf0d72e8a54094c6109090f43e242daa4d6ebf</hash> + <hash alg="SHA3-256">5a9518cdc72dd7fb8d7848500cb8c97c7689e64a52028dabf44e61a933ffd853</hash> + <hash alg="SHA3-512">5b53b7ee09cf057f83acf86de3f35fc45c04cd95c01e78b59fc1b4d9322e17ecaec1d6c5d37cd37084b602c1a74f6457342e27c6271fd140ade3190448c9fb27</hash> + </hashes> + <licenses> + <license> + <id>Apache-2.0</id> + </license> + </licenses> + <purl>pkg:maven/com.google.inject/guice@5.1.0?type=jar</purl> + <externalReferences><reference type="website"><url>https://github.com/google/guice/guice</url></reference><reference type="build-system"><url>https://travis-ci.org/google/guice</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/google/guice/issues/</url></reference><reference type="mailing-list"><url>http://groups.google.com/group/google-guice/topics</url></reference><reference type="vcs"><url>https://github.com/google/guice/guice</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/aopalliance/aopalliance@1.0?type=jar"> + <group>aopalliance</group> + <name>aopalliance</name> + <version>1.0</version> + <description>AOP Alliance</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">04177054e180d09e3998808efa0401c7</hash> + <hash alg="SHA-1">0235ba8b489512805ac13a8f9ea77a1ca5ebe3e8</hash> + <hash alg="SHA-256">0addec670fedcd3f113c5c8091d783280d23f75e3acb841b61a9cdb079376a08</hash> + <hash alg="SHA-512">3f44a932d8c00cfeee2eb057bcd7c301a2d029063e0a916e1e20b3aec4877d19d67a2fd8aaf58fa2d5a00133d1602128a7f50912ffb6cabc7b0fdc7fbda3f8a1</hash> + <hash alg="SHA-384">4dddf44338b5aff9580da2532b81c0ac3e1d09e1f28c6db871a55cad442b705dd7791eb07f9d4577d49d0be3673ba783</hash> + <hash alg="SHA3-384">2bd64cbaf769c6e4e85e34f7a6119d89e16fbf55af3fc5d6cbd52eb214c367dec1ac7b9062ee0fb35a2e0acfc7c477e1</hash> + <hash alg="SHA3-256">d4a726b2bf8aa58197021a7d8fca674b4b2790d4c48de43a92f728866a91c2f0</hash> + <hash alg="SHA3-512">830bc3f8328be76897990e9b9fc42eef02623115e456af96ad09b20900ad615519c8c8de60155ac04fb332eaa9510110d52edd13911af76271c71d91cbd789cc</hash> + </hashes> + <licenses> + <license> + <name>Public Domain</name> + </license> + </licenses> + <purl>pkg:maven/aopalliance/aopalliance@1.0?type=jar</purl> + <externalReferences><reference type="website"><url>http://aopalliance.sourceforge.net</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/com.google.guava/guava@33.0.0-jre?type=jar"> + <group>com.google.guava</group> + <name>guava</name> + <version>33.0.0-jre</version> + <description>Guava is a suite of core and expanded libraries that include + utility classes, Google's collections, I/O classes, and + much more.</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">5d8aefac09131c3a74d6dab4b01bcff6</hash> + <hash alg="SHA-1">161ba27964a62f241533807a46b8711b13c1d94b</hash> + <hash alg="SHA-256">f4d85c3e4d411694337cb873abea09b242b664bb013320be6105327c45991537</hash> + <hash alg="SHA-512">bb122b4c6df2ae3282eefdf313f8d4a3d75e363cfb30ae65a5e51f744105e6fb7b5b77c8cc07a1d37fea0947aa22ac3070063174826408b57a44b2f26856ff3b</hash> + <hash alg="SHA-384">dd0d01893159e2d734b885386635024c94606d5fe6259951e1f2ce37f026f60a419fefa536aaaa6274fdd2d5505e640a</hash> + <hash alg="SHA3-384">a1b5933d73ea9881293e19fab4bbef2b301a88e480f4fcb2d1187e383dba0d5c02c8884997fd3f0d20456ab8c27e3898</hash> + <hash alg="SHA3-256">ed01cc65afe540179c8e54dbc09331b679521cc5a6617389814fe2038603c7ba</hash> + <hash alg="SHA3-512">6a422f8b319cbc21a87c7e03ff94ac4da0eedd8b9960212fb14446bd21da281afd8140ec7f3d3043e80e8c5b16ce50b5c27a235908f23ae4127e8d925a16886a</hash> + </hashes> + <licenses> + <license> + <id>Apache-2.0</id> + </license> + </licenses> + <purl>pkg:maven/com.google.guava/guava@33.0.0-jre?type=jar</purl> + <externalReferences><reference type="website"><url>https://github.com/google/guava</url></reference><reference type="build-system"><url>https://github.com/google/guava/actions</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/google/guava/issues</url></reference><reference type="vcs"><url>https://github.com/google/guava/guava</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar"> + <group>com.google.guava</group> + <name>failureaccess</name> + <version>1.0.1</version> + <description>Contains + com.google.common.util.concurrent.internal.InternalFutureFailureAccess and + InternalFutures. Most users will never need to use this artifact. Its + classes is conceptually a part of Guava, but they're in this separate + artifact so that Android libraries can use them without pulling in all of + Guava (just as they can use ListenableFuture by depending on the + listenablefuture artifact).</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">091883993ef5bfa91da01dcc8fc52236</hash> + <hash alg="SHA-1">1dcf1de382a0bf95a3d8b0849546c88bac1292c9</hash> + <hash alg="SHA-256">a171ee4c734dd2da837e4b16be9df4661afab72a41adaf31eb84dfdaf936ca26</hash> + <hash alg="SHA-512">f8d59b808d6ba617252305b66d5590937da9b2b843d492d06b8d0b1b1f397e39f360d5817707797b979a5bf20bf21987b35333e7a15c44ed7401fea2d2119cae</hash> + <hash alg="SHA-384">67659dbd9647ec303d7f15128dc9dba19b98fd8d74758ee3b602451e32c855e236ccaafe08edf4bbfa245f981268440f</hash> + <hash alg="SHA3-384">1460875f0331c5fa3791772a6a322a7db180261bc2adacf7271df1fbf3b088a587a755a604c039982cb593c5cfc1f101</hash> + <hash alg="SHA3-256">ea86406e75fcd93eafe3cde1b3135ba485f1bb9b75fed98894a0bf1f0aee04f0</hash> + <hash alg="SHA3-512">52ac0f487ab5dd27c9f2e54fd1d84c7a620cae9d49be4072aa2b11501787bf4391ddaa13d02eccdf19e8eea46aecbea5f6064b26777c1b836108a280652e04ac</hash> + </hashes> + <licenses> + <license> + <id>Apache-2.0</id> + </license> + </licenses> + <purl>pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar</purl> + <externalReferences><reference type="website"><url>https://github.com/google/guava/failureaccess</url></reference><reference type="build-system"><url>https://travis-ci.org/google/guava</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/google/guava/issues</url></reference><reference type="vcs"><url>https://github.com/google/guava/failureaccess</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/javax.inject/javax.inject@1?type=jar"> + <group>javax.inject</group> + <name>javax.inject</name> + <version>1</version> + <description>The javax.inject API</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">289075e48b909e9e74e6c915b3631d2e</hash> + <hash alg="SHA-1">6975da39a7040257bd51d21a231b76c915872d38</hash> + <hash alg="SHA-256">91c77044a50c481636c32d916fd89c9118a72195390452c81065080f957de7ff</hash> + <hash alg="SHA-512">e126b7ccf3e42fd1984a0beef1004a7269a337c202e59e04e8e2af714280d2f2d8d2ba5e6f59481b8dcd34aaf35c966a688d0b48ec7e96f102c274dc0d3b381e</hash> + <hash alg="SHA-384">ac04c9f03ccbe35a25deb8b50280a0ca01dbe6aff0dd795d55af6112bfe3cd5817eb82f32fb18378d86cd64b07597190</hash> + <hash alg="SHA3-384">fca090ecb1edeacb9fe865dc515cd1d109b323cd742d4a9733ff199a96ee96e0db4f924079520b9c189ef750f255475d</hash> + <hash alg="SHA3-256">5b0054e39e522de0e0ffc4034d12f72270291fb24d94d5ffc9c4d69c25035fc6</hash> + <hash alg="SHA3-512">fb290f5a70b1efc1dff12f40a0b2d7b94019f66da42e78010c0b8e61f222c4f267b67e356a9e9c346eb801e5515e36243888f280c5cb95c2dd69016a30cadeb9</hash> + </hashes> + <licenses> + <license> + <id>Apache-2.0</id> + </license> + </licenses> + <purl>pkg:maven/javax.inject/javax.inject@1?type=jar</purl> + <externalReferences><reference type="website"><url>http://code.google.com/p/atinject/</url></reference><reference type="vcs"><url>http://code.google.com/p/atinject/source/checkout</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.codehaus.plexus/plexus-classworlds@2.7.0?type=jar"> + <publisher>Codehaus Plexus</publisher> + <group>org.codehaus.plexus</group> + <name>plexus-classworlds</name> + <version>2.7.0</version> + <description>A class loader framework</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">6ed852b1a004288c44438381e6aaee1e</hash> + <hash alg="SHA-1">fe6f1acefd1a302dd4bc6d9d7f15358828d2a44d</hash> + <hash alg="SHA-256">c60ae538ba66adbc06aae205fbe2306211d3d213ab6df3239ec03cdde2458ad6</hash> + <hash alg="SHA-512">8057b6c7d52aaa61a51aba6ec613e8bd1a094d62a84d50a37bfe7776ff53780f1602b6169242c3a60b28c9d496458baaac5377575553e4af881643490ccda912</hash> + <hash alg="SHA-384">4b079cab0a5f50631ef134f6578f4772f59897977d20ddef071920c107ca13cc3ce85d7b3c2bad586fb7a29fb4a4e07d</hash> + <hash alg="SHA3-384">1e4500603fc2ac0c080f4a7b127171103295571bc7e570e50f6c479c62667cf78cf177c09b92f39702864fff83e35f9f</hash> + <hash alg="SHA3-256">ff715bac48dda5b19e29e18e47dbba9015cfcdf3a949c19154ae9ea3e5951c60</hash> + <hash alg="SHA3-512">7bb6f86ea7300d4321fb78a0cfcbd2acc2b6639abb75e68e4bf1e301622ee1d41bdeed728aa49d74578918fe5da954860a29a9a6249e651db3edae941f816bf7</hash> + </hashes> + <licenses> + <license> + <id>Apache-2.0</id> + </license> + </licenses> + <purl>pkg:maven/org.codehaus.plexus/plexus-classworlds@2.7.0?type=jar</purl> + <externalReferences><reference type="website"><url>https://codehaus-plexus.github.io/plexus-classworlds/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>http://github.com/codehaus-plexus/plexus-classworlds/issues</url></reference><reference type="mailing-list"><url>http://archive.plexus.codehaus.org/user</url></reference><reference type="vcs"><url>http://github.com/codehaus-plexus/plexus-classworlds/tree/plexus-classworlds-2.7.0/</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.codehaus.plexus/plexus-interpolation@1.26?type=jar"> + <publisher>Codehaus Plexus</publisher> + <group>org.codehaus.plexus</group> + <name>plexus-interpolation</name> + <version>1.26</version> + <description>The Plexus project provides a full software stack for creating and executing software projects.</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">1049ae9f5cd8cf618abf5bc5805e6b94</hash> + <hash alg="SHA-1">25b919c664b79795ccde0ede5cee0fd68b544197</hash> + <hash alg="SHA-256">b3b5412ce17889103ea564bcdfcf9fb3dfa540344ffeac6b538a73c9d7182662</hash> + <hash alg="SHA-512">6c3b40442adf721d325ee9cbf935d758223a04b3bd8e0f3b60fdb652175c1ca65a6010f7ea8288617ffa73cb1f19d2737c79c403d343b285e0f9afb1729caa60</hash> + <hash alg="SHA-384">93dcdffb567f4b7d24eecf9fb0733243ebfe1fd80c92fe69532fed9d1727a58ffa5ce7da4ab26b5c6aa8a6a59beb3844</hash> + <hash alg="SHA3-384">7489d45be45f74f7639db3b18ae6075d32d84adfaa9c4568f3fe2b2fc35c7de73ffce6f42e494466a8c81e78747b0f17</hash> + <hash alg="SHA3-256">62145ec219beb405063de848cb54e0d63efc8c255322998858d7df74f8d1ae18</hash> + <hash alg="SHA3-512">12fba4d2ffab1f89003e375bf74df3fc5d0f831906f9716f2ab2fc5a4ca7084c8a61500b24c5fa0ded27d1cef14b030df70b34c148c138136070e27f7cc41536</hash> + </hashes> + <licenses> + <license> + <id>Apache-2.0</id> + </license> + </licenses> + <purl>pkg:maven/org.codehaus.plexus/plexus-interpolation@1.26?type=jar</purl> + <externalReferences><reference type="website"><url>http://codehaus-plexus.github.io/plexus-interpolation/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/codehaus-plexus/plexus-interpolation/issues</url></reference><reference type="mailing-list"><url>http://archive.plexus.codehaus.org/user</url></reference><reference type="vcs"><url>http://github.com/codehaus-plexus/plexus-interpolation/tree/plexus-interpolation-1.26/</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.codehaus.plexus/plexus-component-annotations@2.1.0?type=jar"> + <publisher>Codehaus Plexus</publisher> + <group>org.codehaus.plexus</group> + <name>plexus-component-annotations</name> + <version>2.1.0</version> + <description>Plexus Component "Java 5" Annotations, to describe plexus components properties in java sources with + standard annotations instead of javadoc annotations.</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">141fd7a2ae613cb17d25ecd54b43eb3f</hash> + <hash alg="SHA-1">2f2147a6cc6a119a1b51a96f31d45c557f6244b9</hash> + <hash alg="SHA-256">bde3617ce9b5bcf9584126046080043af6a4b3baea40a3b153f02e7bbc32acac</hash> + <hash alg="SHA-512">cc534fda54272f074fe9edd581a6c3e1ea98127340c7f852c4b4953a44dad048ace22dfa10f30d6adcdfc15efd319dac778a03ebbe20de7779fd1df640506e88</hash> + <hash alg="SHA-384">dd102351fada419b7e66f38b62868db4141cf93863b8117926564dd883b4a3960d9c9682b346f7106cdaa2a4138c794f</hash> + <hash alg="SHA3-384">2b335733d7683e8bae312b0608af7c17b1aa22a1b9cbc4cc11549faf6bacc51c7591f1073aac99e5d70fdea31c6253c4</hash> + <hash alg="SHA3-256">2e9f44d1c5df160563d3cedaf01929682fb3e0432beca7c782d8ba0324fb32b1</hash> + <hash alg="SHA3-512">5051e4210310ec60fae9f32284a93da3cff63bf43a7dda30eaf2715d24cfc7f2353a6c2731521f4d6ef32e7a3e2526b6a41c8a11b0889c8dbf7ffc7914812641</hash> + </hashes> + <licenses> + <license> + <id>Apache-2.0</id> + </license> + </licenses> + <purl>pkg:maven/org.codehaus.plexus/plexus-component-annotations@2.1.0?type=jar</purl> + <externalReferences><reference type="website"><url>http://codehaus-plexus.github.io/plexus-containers/plexus-component-annotations/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>http://github.com/codehaus-plexus/plexus-containers/issues</url></reference><reference type="mailing-list"><url>http://archive.plexus.codehaus.org/user</url></reference><reference type="vcs"><url>https://github.com/codehaus-plexus/plexus-containers/plexus-component-annotations</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar"> + <publisher>The Apache Software Foundation</publisher> + <group>org.apache.commons</group> + <name>commons-lang3</name> + <version>3.14.0</version> + <description>Apache Commons Lang, a package of Java utility classes for the + classes that are in java.lang's hierarchy, or are considered to be so + standard as to justify existence in java.lang.</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">4e5c3f5e6b0b965ef241d7d72ac8971f</hash> + <hash alg="SHA-1">1ed471194b02f2c6cb734a0cd6f6f107c673afae</hash> + <hash alg="SHA-256">7b96bf3ee68949abb5bc465559ac270e0551596fa34523fddf890ec418dde13c</hash> + <hash alg="SHA-512">0338b50767166e5746ada6d6aa2e071e7221d699323bfb629f7f204b294c1dc4cad140610a129ed751798443b43e74e0818989c7df7d33c5915aa29742be9ba8</hash> + <hash alg="SHA-384">908d0a22dc17aaa04caa5104cff7cad5b88b77eecb78dd5b3b3fefa22ff71ac50a4fb9e31c897ac243f9d841e4b3453d</hash> + <hash alg="SHA3-384">8a7f2e061b998780870eddd571620fbf3d3c70bcb54e24539d0db504f59d65bc6bda58136284498babe29fcc5eabb7a6</hash> + <hash alg="SHA3-256">022bf1f8039fcea717e9e34dd96eb80cfff05b43c9cbb76e9739b2421e2d027c</hash> + <hash alg="SHA3-512">0bcbc4edce974ea970c46e2da12ec98d9fd962c2cf64f757ac97136dec5623ca52af0c225895303c17ffabb57090e6772d7bd326d5e7438cef5454f8bbaeecfa</hash> + </hashes> + <licenses> + <license> + <id>Apache-2.0</id> + <url>https://www.apache.org/licenses/LICENSE-2.0</url> + </license> + </licenses> + <purl>pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar</purl> + <externalReferences><reference type="website"><url>https://commons.apache.org/proper/commons-lang/</url></reference><reference type="build-system"><url>https://github.com/apache/commons-parent/actions</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/LANG</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-lang.git</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.slf4j/slf4j-api@2.0.12?type=jar"> + <publisher>QOS.ch</publisher> + <group>org.slf4j</group> + <name>slf4j-api</name> + <version>2.0.12</version> + <description>The slf4j API</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">86eb051f2e2d6497a3a57810c963a9d6</hash> + <hash alg="SHA-1">48f109a2a6d8f446c794f3e3fa0d86df0cdfa312</hash> + <hash alg="SHA-256">a79502b8abdfbd722846a27691226a4088682d6d35654f9b80e2a9ccacf7ed47</hash> + <hash alg="SHA-512">5bc0a61bd32b63ab7d44e210f1dcc3e4dc7417186ab8a2297f22edfa631513cc55b7fe3bb15eb0124b9a30dcfd4d168932bf3262cf6491feb2facbdfbe661e72</hash>
[... 69704 lines stripped ...]
