<?xml version="1.0" encoding="UTF-8"?>
<bom serialNumber="urn:uuid:cdcf6f74-b1a8-4cc8-8d23-46c03c49267d" version="1" xmlns="http://cyclonedx.org/schema/bom/1.4">
  <metadata>
    <timestamp>2024-07-04T09:09:34Z</timestamp>
    <tools>
      <tool>
        <vendor>OWASP Foundation</vendor>
        <name>CycloneDX Maven plugin</name>
        <version>2.7.9</version>
        <hashes>
          <hash alg="MD5">8e595cdb67f17e4b41e046456970591d</hash>
          <hash alg="SHA-1">69e8ca804520d09ce4657e7235bae84d01cbffa6</hash>
          <hash alg="SHA-256">aa09074fe5aa403c008cd4fc7ef8ce41cd244489337f16b3e91a3914158a4db8</hash>
          <hash alg="SHA-512">1488a8112da8e675813d7585f57c5efb178aed32901118186ee12d0e4ae3d19c53774c7f860bf70d17d70f050119b69443a2637cf641675b4b5d9cdcdd69b89b</hash>
          <hash alg="SHA-384">b097295dfbf10887abc6eec58d4d0822cde5a73d1f5c1cf183a57bf569016ad5ced9d34efae3e574d82bb62837540c6c</hash>
        </hashes>
      </tool>
    </tools>
    <component type="library" bom-ref="pkg:maven/io.confluent/confluent-hub-client@7.1.13?type=jar">
      <publisher>Confluent, Inc.</publisher>
      <group>io.confluent</group>
      <name>confluent-hub-client</name>
      <version>7.1.13</version>
      <description>Common utilities, including metrics and config.</description>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/io.confluent/confluent-hub-client@7.1.13?type=jar</purl>
      <externalReferences><reference type="website"><url>https://confluent.io/common/confluent-hub-client</url></reference><reference type="distribution"><url>s3://staging-confluent-packages-maven-654654529379-us-west-2/v7.1.13-rc240704064029/maven</url></reference><reference type="vcs"><url>https://github.com/confluentinc/common/common/confluent-hub-client</url></reference></externalReferences>
    </component>
    <properties>
      <property name="maven.goal">makeAggregateBom</property>
      <property name="maven.scopes">compile,provided,runtime,system,test</property>
    </properties>
  </metadata>
  <components>
    <component type="library" bom-ref="pkg:maven/org.glassfish.jersey.core/jersey-client@2.34?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>org.glassfish.jersey.core</group>
      <name>jersey-client</name>
      <version>2.34</version>
      <description>Jersey core client implementation</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">34de8b477d5b0cc59192fb6c91a8b74f</hash>
        <hash alg="SHA-1">f9c6c7c6429a1ede8e73cf077bdca28ebff67681</hash>
        <hash alg="SHA-256">82d4c7932150d5dd215f624abd20863453933874664ae93c8e5da0a3f5c071f7</hash>
        <hash alg="SHA-512">20f08a8b6ed0a3d48c9b8a243e7ebf0e9ba5fc6c9efb228f8a8a4037ce38c599658445a8c7f0f047d3c04296a84784d389cf06bab44b18855d7cfa0101967f08</hash>
        <hash alg="SHA-384">b2fd4c9ac836db71d23c1fb62518b80c75ef7f8ae0f762fff37e4c11fbf60c9d63623cfd3da56b8895be47b8cabf0aa8</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <id>GPL-2.0-with-classpath-exception</id>
        </license>
        <license>
          <id>BSD-3-Clause</id>
        </license>
        <license>
          <id>BSD-2-Clause</id>
        </license>
        <license>
          <name>Apache License, 2.0</name>
          <url>http://www.apache.org/licenses/LICENSE-2.0.html</url>
        </license>
        <license>
          <name>Public Domain</name>
          <url>https://creativecommons.org/publicdomain/zero/1.0/</url>
        </license>
        <license>
          <name>Modified BSD</name>
          <url>http://asm.objectweb.org/license.html</url>
        </license>
        <license>
          <name>jQuery license</name>
          <url>jquery.org/license</url>
        </license>
        <license>
          <id>MIT</id>
          <url>https://opensource.org/licenses/MIT</url>
        </license>
        <license>
          <name>W3C license</name>
          <url>https://www.w3.org/Consortium/Legal/copyright-documents-19990405</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.glassfish.jersey.core/jersey-client@2.34?type=jar</purl>
      <externalReferences><reference type="website"><url>https://projects.eclipse.org/projects/ee4j.jersey/jersey-client</url></reference><reference type="build-system"><url>http://hudson.glassfish.org/job/Jersey-trunk-multiplatform/</url></reference><reference type="distribution"><url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/eclipse-ee4j/jersey/issues</url></reference><reference type="vcs"><url>https://github.com/eclipse-ee4j/jersey/jersey-client</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@2.1.6?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>jakarta.ws.rs</group>
      <name>jakarta.ws.rs-api</name>
      <version>2.1.6</version>
      <description>Jakarta RESTful Web Services API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">c3892382aeb5c54085b22b1890511d29</hash>
        <hash alg="SHA-1">1dcb770bce80a490dff49729b99c7a60e9ecb122</hash>
        <hash alg="SHA-256">4cea299c846c8a6e6470cbfc2f7c391bc29b9caa2f9264ac1064ba91691f4adf</hash>
        <hash alg="SHA-512">c1e2655269b9a32f9c0aec9edf12bf6d8b397d8cbcf60e28dd21ab13ecc2738800ebe5c2d49ed3c50d4dac6617671f0fae873daf8ec116a16ef7f7f0a3bef7fa</hash>
        <hash alg="SHA-384">3fd05e2b167d927216d3b2fc9d1c5a70aa3911d075c2159f958ce755c6a41d93bd76f0ce79ccd22e5a60182aa91fdb07</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <id>GPL-2.0-with-classpath-exception</id>
        </license>
      </licenses>
      <purl>pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@2.1.6?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/eclipse-ee4j/jaxrs-api</url></reference><reference type="distribution"><url>https://repo.eclipse.org/content/repositories/jax-rs-api-releases/</url></reference><reference type="issue-tracker"><url>https://github.com/eclipse-ee4j/jaxrs-api/issues</url></reference><reference type="mailing-list"><url>jaxrs-dev@eclipse.org</url></reference><reference type="vcs"><url>https://github.com/eclipse-ee4j/jaxrs-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.glassfish.jersey.core/jersey-common@2.34?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>org.glassfish.jersey.core</group>
      <name>jersey-common</name>
      <version>2.34</version>
      <description>Jersey core common packages</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">f94ff8cac7011588983668605c64894c</hash>
        <hash alg="SHA-1">cea85e85b1c19657ec3ea41b26351a53a40caa3c</hash>
        <hash alg="SHA-256">1c2853844525f56f1d49b3009963ec865f4eca0d353347fb7ce59c280a578647</hash>
        <hash alg="SHA-512">b1774e2efc163e73183471ecaa36e2086a75d7af9df9684224fa5116c3c2d3b63d0bbd82c65f0b33d8cee383dfdc1c17c0b27bd8dfda4e5506e71239e2a00e82</hash>
        <hash alg="SHA-384">29a0433d73a7144b23c66aa1309459cd857fcf4b7508e2104ee68d6d8d42c779f55a0d62b6941dc4424df1a0a75fe1e1</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <name>The GNU General Public License (GPL), Version 2, With Classpath Exception</name>
          <url>https://www.gnu.org/software/classpath/license.html</url>
        </license>
        <license>
          <name>Apache License, 2.0</name>
          <url>http://www.apache.org/licenses/LICENSE-2.0.html</url>
        </license>
        <license>
          <name>Public Domain</name>
          <url>https://creativecommons.org/publicdomain/zero/1.0/</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.glassfish.jersey.core/jersey-common@2.34?type=jar</purl>
      <externalReferences><reference type="website"><url>https://projects.eclipse.org/projects/ee4j.jersey/jersey-common</url></reference><reference type="build-system"><url>http://hudson.glassfish.org/job/Jersey-trunk-multiplatform/</url></reference><reference type="distribution"><url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/eclipse-ee4j/jersey/issues</url></reference><reference type="vcs"><url>https://github.com/eclipse-ee4j/jersey/jersey-common</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/jakarta.annotation/jakarta.annotation-api@1.3.5?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>jakarta.annotation</group>
      <name>jakarta.annotation-api</name>
      <version>1.3.5</version>
      <description>Jakarta Annotations API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">8b165cf58df5f8c2a222f637c0a07c97</hash>
        <hash alg="SHA-1">59eb84ee0d616332ff44aba065f3888cf002cd2d</hash>
        <hash alg="SHA-256">85fb03fc054cdf4efca8efd9b6712bbb418e1ab98241c4539c8585bbc23e1b8a</hash>
        <hash alg="SHA-512">d1acff146c0f9ea923a9325ad4c22ba2052ec474341ab8392abab7e8abd3ca010db2400ff9b5849fc4f1fa5c0a18830eb104da07a13bd26b4f0a43d167935878</hash>
        <hash alg="SHA-384">004a4bde333c0575f72df1cb9cf95ee0c6c7f738a6f0f723a5ec545aaa1664abeb82f01627708a1377e3136754fb7859</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <id>GPL-2.0-with-classpath-exception</id>
        </license>
      </licenses>
      <purl>pkg:maven/jakarta.annotation/jakarta.annotation-api@1.3.5?type=jar</purl>
      <externalReferences><reference type="website"><url>https://projects.eclipse.org/projects/ee4j.ca</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/eclipse-ee4j/common-annotations-api/issues</url></reference><reference type="mailing-list"><url>https://dev.eclipse.org/mhonarc/lists/ca-dev</url></reference><reference type="vcs"><url>https://github.com/eclipse-ee4j/common-annotations-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.glassfish.hk2.external/jakarta.inject@2.6.1?type=jar">
      <publisher>Oracle Corporation</publisher>
      <group>org.glassfish.hk2.external</group>
      <name>jakarta.inject</name>
      <version>2.6.1</version>
      <description>Injection API (JSR 330) version ${javax.inject.version} repackaged as OSGi bundle</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">4d7c80a1e3cd54531af03bef4537f7af</hash>
        <hash alg="SHA-1">8096ebf722902e75fbd4f532a751e514f02e1eb7</hash>
        <hash alg="SHA-256">5e88c123b3e41bca788b2683118867d9b6dec714247ea91c588aed46a36ee24f</hash>
        <hash alg="SHA-512">7fc8196ad9ee03a831dfff85c945e416c3906071a7aa8ebf6ab8b7008dfec0adccc1f1dca53ed6768ac5676cd4b3c43471674f97ff73e1f61f5a427aaed68e05</hash>
        <hash alg="SHA-384">6b3ea9eeec5cbbc1fb3e6c89160af67b82ffbd68948dd4790e3fe3ce2fc495c063698a7d6a1998d5db51abafe3915e19</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <id>GPL-2.0-with-classpath-exception</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.glassfish.hk2.external/jakarta.inject@2.6.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/eclipse-ee4j/glassfish-hk2/external/jakarta.inject</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/eclipse-ee4j/glassfish-hk2/issues</url></reference><reference type="mailing-list"><url>https://dev.eclipse.org/mhonarc/lists/glassfish-hk2-dev/</url></reference><reference type="vcs"><url>https://github.com/eclipse-ee4j/glassfish-hk2/external/jakarta.inject</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.glassfish.jersey.inject/jersey-hk2@2.34?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>org.glassfish.jersey.inject</group>
      <name>jersey-hk2</name>
      <version>2.34</version>
      <description>HK2 InjectionManager implementation</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">b65063abb7ade83f5f38669544deaffa</hash>
        <hash alg="SHA-1">15bb093c57c0cac880ad7b474f7fd653cac840a1</hash>
        <hash alg="SHA-256">4c8141f39455ffac61271ec5045a6e10cb938dbdab99560cc4b613afcae46e10</hash>
        <hash alg="SHA-512">bd0e037717a67cc206bfaf1b91155d1f192af76b8690bbdfe796cdf5065a3d4c3c3941954e7799722b61f21c9b8ab35e4504df797bbe5a68972b24109d0011c1</hash>
        <hash alg="SHA-384">9e6c6694922663a5c9d8b75e4222c34bf535349019fb72dd01d05a5fd129e04f744d50fb993666a482897750eae3d01c</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <id>GPL-2.0-with-classpath-exception</id>
        </license>
        <license>
          <id>BSD-3-Clause</id>
        </license>
        <license>
          <id>BSD-2-Clause</id>
        </license>
        <license>
          <name>Apache License, 2.0</name>
          <url>http://www.apache.org/licenses/LICENSE-2.0.html</url>
        </license>
        <license>
          <name>Public Domain</name>
          <url>https://creativecommons.org/publicdomain/zero/1.0/</url>
        </license>
        <license>
          <name>Modified BSD</name>
          <url>http://asm.objectweb.org/license.html</url>
        </license>
        <license>
          <name>jQuery license</name>
          <url>jquery.org/license</url>
        </license>
        <license>
          <id>MIT</id>
          <url>https://opensource.org/licenses/MIT</url>
        </license>
        <license>
          <name>W3C license</name>
          <url>https://www.w3.org/Consortium/Legal/copyright-documents-19990405</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.glassfish.jersey.inject/jersey-hk2@2.34?type=jar</purl>
      <externalReferences><reference type="website"><url>https://projects.eclipse.org/projects/ee4j.jersey/project/jersey-hk2</url></reference><reference type="build-system"><url>http://hudson.glassfish.org/job/Jersey-trunk-multiplatform/</url></reference><reference type="distribution"><url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/eclipse-ee4j/jersey/issues</url></reference><reference type="vcs"><url>https://github.com/eclipse-ee4j/jersey/project/jersey-hk2</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.glassfish.hk2/hk2-locator@2.6.1?type=jar">
      <publisher>Oracle Corporation</publisher>
      <group>org.glassfish.hk2</group>
      <name>hk2-locator</name>
      <version>2.6.1</version>
      <description>ServiceLocator Default Implementation</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">dfd358720393d83b01747928db6e3912</hash>
        <hash alg="SHA-1">9dedf9d2022e38ec0743ed44c1ac94ad6149acdd</hash>
        <hash alg="SHA-256">febc668deb9f2000c76bd4918d8086c0a4c74d07bd0c60486b72c6bd38b62874</hash>
        <hash alg="SHA-512">e2c87a265f114042f4c04397db4adca7291fd68e08e97129576ceb603287b57ccf5b03d0c285727ebb8cd7f88009280bdeab4254475d59da1ac41ba57b7cdecb</hash>
        <hash alg="SHA-384">05afff9ebfdbdaed71770a58fe334751b9ac7476eb4114e08fc376bf4e16226b5016784c99c3dd8cb04c79d954068402</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <id>GPL-2.0-with-classpath-exception</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.glassfish.hk2/hk2-locator@2.6.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/eclipse-ee4j/glassfish-hk2/hk2-locator</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/eclipse-ee4j/glassfish-hk2/issues</url></reference><reference type="mailing-list"><url>https://dev.eclipse.org/mhonarc/lists/glassfish-hk2-dev/</url></reference><reference type="vcs"><url>https://github.com/eclipse-ee4j/glassfish-hk2/hk2-locator</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.glassfish.hk2.external/aopalliance-repackaged@2.6.1?type=jar">
      <publisher>Oracle Corporation</publisher>
      <group>org.glassfish.hk2.external</group>
      <name>aopalliance-repackaged</name>
      <version>2.6.1</version>
      <description>Dependency Injection Kernel</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">0237846ebdaa7db36b356044a373ffba</hash>
        <hash alg="SHA-1">b2eb0a83bcbb44cc5d25f8b18f23be116313a638</hash>
        <hash alg="SHA-256">bad77f9278d753406360af9e4747bd9b3161554ea9cd3d62411a0ae1f2c141fd</hash>
        <hash alg="SHA-512">2d9e5395ba887fa5bb6a8209b731292d440f5c1db2fccaf56c41b1f1d9f774733da28aa8b9b769e765fe62f3640d7bcb2cf6140f0044a8b576e9e45144038c46</hash>
        <hash alg="SHA-384">f481e2a4e18308a1a0bd85e79f95711434436fa69a504fe98a3d7ea899eaed505a5cb2bfe08f41d1b2af56e150ec0741</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <id>GPL-2.0-with-classpath-exception</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.glassfish.hk2.external/aopalliance-repackaged@2.6.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/eclipse-ee4j/glassfish-hk2/external/aopalliance-repackaged</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/eclipse-ee4j/glassfish-hk2/issues</url></reference><reference type="mailing-list"><url>https://dev.eclipse.org/mhonarc/lists/glassfish-hk2-dev/</url></reference><reference type="vcs"><url>https://github.com/eclipse-ee4j/glassfish-hk2/external/aopalliance-repackaged</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.glassfish.hk2/hk2-api@2.6.1?type=jar">
      <publisher>Oracle Corporation</publisher>
      <group>org.glassfish.hk2</group>
      <name>hk2-api</name>
      <version>2.6.1</version>
      <description>HK2 API module</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">23e8c18dae0c7b776bed756763d5153f</hash>
        <hash alg="SHA-1">114bd7afb4a1bd9993527f52a08a252b5d2acac5</hash>
        <hash alg="SHA-256">c2cb80a01e58440ae57d5ee59af4d4d94e5180e04aff112b0cb611c07d61e773</hash>
        <hash alg="SHA-512">9abe9f78d7f6c805b6c7b515579230e5fa573abbcd818bed56068080d6458608e2e99d5937eb959cf1e4f4cfdc4f790059dfc1231313cd8f30aaefbf518eb1c7</hash>
        <hash alg="SHA-384">2236ca10af39c4f4f6f1ac63c3652eaa4124bce8f557f8ebaa78576e00c25b986ee9d7e417db6edb9a06aa46b36f4d24</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <id>GPL-2.0-with-classpath-exception</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.glassfish.hk2/hk2-api@2.6.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/eclipse-ee4j/glassfish-hk2/hk2-api</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/eclipse-ee4j/glassfish-hk2/issues</url></reference><reference type="mailing-list"><url>https://dev.eclipse.org/mhonarc/lists/glassfish-hk2-dev/</url></reference><reference type="vcs"><url>https://github.com/eclipse-ee4j/glassfish-hk2/hk2-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.glassfish.hk2/hk2-utils@2.6.1?type=jar">
      <publisher>Oracle Corporation</publisher>
      <group>org.glassfish.hk2</group>
      <name>hk2-utils</name>
      <version>2.6.1</version>
      <description>HK2 Implementation Utilities</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">75ccb55538a77bf878996497ffeb86f3</hash>
        <hash alg="SHA-1">396513aa96c1d5a10aa4f75c4dcbf259a698d62d</hash>
        <hash alg="SHA-256">30727f79086452fdefdab08451d982c2082aa239d9f75cdeb1ba271e3c887036</hash>
        <hash alg="SHA-512">8da7cd88de45270b1fcfd2c471ae092b3972af78a6e0ecc76ed4ac10b6bd6712d2a538bd163a457f21cea4e7e5c52f547108f44aaa791ed0fd069f697f1282c1</hash>
        <hash alg="SHA-384">94fb55c1f57b96fd84e717fbf3c254f16e2308bc33976addb71d26bf367b7c2ec63e657a953f30f55d7046dd07510e50</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <id>GPL-2.0-with-classpath-exception</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.glassfish.hk2/hk2-utils@2.6.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/eclipse-ee4j/glassfish-hk2/hk2-utils</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/eclipse-ee4j/glassfish-hk2/issues</url></reference><reference type="mailing-list"><url>https://dev.eclipse.org/mhonarc/lists/glassfish-hk2-dev/</url></reference><reference type="vcs"><url>https://github.com/eclipse-ee4j/glassfish-hk2/hk2-utils</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.javassist/javassist@3.25.0-GA?type=jar">
      <publisher>Shigeru Chiba, www.javassist.org</publisher>
      <group>org.javassist</group>
      <name>javassist</name>
      <version>3.25.0-GA</version>
      <description>Javassist (JAVA programming ASSISTant) makes Java bytecode manipulation
    simple.  It is a class library for editing bytecodes in Java.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">3a4267e01989478be188d127b7a39425</hash>
        <hash alg="SHA-1">442dc1f9fd520130bd18da938622f4f9b2e5fba3</hash>
        <hash alg="SHA-256">5d49abd02997134f80041645e9668e1ff97afd69d2c2c55ae9fbd40dc073f97b</hash>
        <hash alg="SHA-512">638d2ed77ae1f34dd57f6aa653635a77d8477b3e99f64343ea5eafcec49ebac13250639924c47c83246890bd8988d92c30785ed8854c8a101138c410657cb944</hash>
        <hash alg="SHA-384">183a243f52aaea67057564cf0d18f0c32681907aa24eb65bbfd453016911cb42230a73271a0da20e3f1aabf4b0412e4e</hash>
      </hashes>
      <licenses>
        <license>
          <id>MPL-1.1</id>
        </license>
        <license>
          <id>LGPL-2.1-only</id>
        </license>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.javassist/javassist@3.25.0-GA?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.javassist.org/</url></reference><reference type="distribution"><url>https://repository.jboss.org/nexus/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://jira.jboss.org/jira/browse/JASSIST/</url></reference><reference type="vcs"><url>scm:git:git@github.com:jboss-javassist/javassist.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.github.rvesse/airline-help-bash@2.6.0?type=jar">
      <group>com.github.rvesse</group>
      <name>airline-help-bash</name>
      <version>2.6.0</version>
      <description>Provides Bash related help generators</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">aceedfbd9ee048c88713de9f6cd54d0f</hash>
        <hash alg="SHA-1">1667260c6c74ee94561bb1fa949d1e54fbaeeae1</hash>
        <hash alg="SHA-256">b45c28cdb6ba478fc711d31ec663c6fda27d0adc4f03dea6a986dae0e5f214c0</hash>
        <hash alg="SHA-512">beebbb407b511afde7bcd6f4549d1453a0223968278f0d17e8d3fc8908bc255e644a5816e916ed984d71b50f717d5fad6f8254a34be554f4b8c68f91f478924e</hash>
        <hash alg="SHA-384">838035a42f1205a2a59269679c08d49f9d182253441c146c931663bb43acfc9a6515254d57cf742efebbbfbe6363ff66</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.github.rvesse/airline-help-bash@2.6.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/rvesse/airline/airline-help/airline-help-bash</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>git:git@github.com:rvesse/airline.git/airline-help/airline-help-bash</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.github.rvesse/airline@2.6.0?type=jar">
      <group>com.github.rvesse</group>
      <name>airline</name>
      <version>2.6.0</version>
      <description>Java library provided an annotation-based framework for parsing Git like command line structures</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">736e65af72565512f97ea623cda00947</hash>
        <hash alg="SHA-1">c42393339809777e668d0b25b41e931eeda23fa0</hash>
        <hash alg="SHA-256">0f24d91ef96571b10f45ecebde58a26c4f8af4e0baf90a61b67fa6d8d0936930</hash>
        <hash alg="SHA-512">f161f2445d496b544a593837551c4d1967dcf2ca8575309ae510f3693436401bbdce57da9f130171da619b49f2765620b166337bbdf388b1f204497f7e43c42b</hash>
        <hash alg="SHA-384">2fdd22e399c41d6d5b10bb9369c500cc02f874fd7908efa6c18254e12ea9a2ff333359b57e4a730f64a5482616667ee6</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.github.rvesse/airline@2.6.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/rvesse/airline/airline</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>git:git@github.com:rvesse/airline.git/airline</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.github.rvesse/airline-io@2.6.0?type=jar">
      <group>com.github.rvesse</group>
      <name>airline-io</name>
      <version>2.6.0</version>
      <description>Provides additional IO support for CLIs such as colorization and text formatting</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">ba7db23f228662d8cc531305a7ae4cd6</hash>
        <hash alg="SHA-1">80d7a544045bfe12878bd066db073c932a55afea</hash>
        <hash alg="SHA-256">68f4851b2159e638efca21346c21422b761b56f8334d45b18fa2760e40729be3</hash>
        <hash alg="SHA-512">f29339c192c1c59a5087ef8d8daddd6031bced5ad41b922f36801ba30cbcc6ca2f78eda44d29a2b547e151da8a7f38bb99dce6c71a0c9d33a05ce7d5f7403c52</hash>
        <hash alg="SHA-384">3b0b491cd53c662484157833fdf95581e00dbd08f545a6a03ec79e6d610c5fae5596e62e48e2e7a6b5c12f161bbba913</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.github.rvesse/airline-io@2.6.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/rvesse/airline/airline-io</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>git:git@github.com:rvesse/airline.git/airline-io</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-lang3@3.7?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-lang3</name>
      <version>3.7</version>
      <description>Apache Commons Lang, a package of Java utility classes for the
  classes that are in java.lang's hierarchy, or are considered to be so
  standard as to justify existence in java.lang.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">f1df5623d78c432b7c3d58ff491e1801</hash>
        <hash alg="SHA-1">557edd918fd41f9260963583ebf5a61a43a6b423</hash>
        <hash alg="SHA-256">6e8dc31e046508d9953c96534edf0c2e0bfe6f468966b5b842b3f87e43b6a847</hash>
        <hash alg="SHA-512">bfd3b6b849f7af97a337b5884bf4d0f610753dad6ca0d95e84457cd47b0b1f2a614219632ef2283ec7da0725c49ae653c8c1c1f24186cb97db31313889b0ab08</hash>
        <hash alg="SHA-384">328d948baea86d2d5d25003572fab503824ddf54ba7fc597e63950b7d69d890f53dbd7c0a2e040a5b9f632dd6a02793c</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-lang3@3.7?type=jar</purl>
      <externalReferences><reference type="website"><url>http://commons.apache.org/proper/commons-lang/</url></reference><reference type="build-system"><url>https://builds.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/LANG</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://git-wip-us.apache.org/repos/asf?p=commons-lang.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/javax.inject/javax.inject@1?type=jar">
      <group>javax.inject</group>
      <name>javax.inject</name>
      <version>1</version>
      <description>The javax.inject API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">289075e48b909e9e74e6c915b3631d2e</hash>
        <hash alg="SHA-1">6975da39a7040257bd51d21a231b76c915872d38</hash>
        <hash alg="SHA-256">91c77044a50c481636c32d916fd89c9118a72195390452c81065080f957de7ff</hash>
        <hash alg="SHA-512">e126b7ccf3e42fd1984a0beef1004a7269a337c202e59e04e8e2af714280d2f2d8d2ba5e6f59481b8dcd34aaf35c966a688d0b48ec7e96f102c274dc0d3b381e</hash>
        <hash alg="SHA-384">ac04c9f03ccbe35a25deb8b50280a0ca01dbe6aff0dd795d55af6112bfe3cd5817eb82f32fb18378d86cd64b07597190</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/javax.inject/javax.inject@1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://code.google.com/p/atinject/</url></reference><reference type="vcs"><url>http://code.google.com/p/atinject/source/checkout</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-collections4@4.2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-collections4</name>
      <version>4.2</version>
      <description>The Apache Commons Collections package contains types that extend and augment the Java Collections Framework.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">b290524be8a0dbb6521df95f4ce80c8d</hash>
        <hash alg="SHA-1">54ebea0a5b653d3c680131e73fe807bb8f78c4ed</hash>
        <hash alg="SHA-256">6a594721d51444fd97b3eaefc998a77f606dedb03def494f74755aead3c9df3e</hash>
        <hash alg="SHA-512">e1ba369ffe4e0d8fb1c432ffb2171aaf4435ae2a88f6c91ebf8e7aea28791dc3035685f34a93a5b1370745374ea4bf3b9ca7a99bf73a0017811d29c13afa9a1e</hash>
        <hash alg="SHA-384">5f7cf10ef89925ae0c4ad076ff93079157ce11f69608d8c37e9d6a9cc3a0fa5e65f1b5cd1b2dc7c45cb3886511354710</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-collections4@4.2?type=jar</purl>
      <externalReferences><reference type="website"><url>http://commons.apache.org/proper/commons-collections/</url></reference><reference type="build-system"><url>https://builds.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/COLLECTIONS</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://git-wip-us.apache.org/repos/asf?p=commons-collections.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.14.2?type=jar">
      <publisher>FasterXML</publisher>
      <group>com.fasterxml.jackson.datatype</group>
      <name>jackson-datatype-jsr310</name>
      <version>2.14.2</version>
      <description>Add-on module to support JSR-310 (Java 8 Date &amp; Time API) data types.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">1d3433114ab756cc902462b04bc37501</hash>
        <hash alg="SHA-1">796518148a385b2728d44886cc0f8852eb8eeb53</hash>
        <hash alg="SHA-256">75651b65733ed94e4e28e4ba0817218d93e71e8a7f06f6ab3662752974d2bcae</hash>
        <hash alg="SHA-512">5ea76e302154fdde769622a6891c45cb56ea06277c25cd36b1cc52cbffbeb59e7b4a25d824d2e33d1473c7ba1044ce2141573564457f649ab2a59e6b1086d17e</hash>
        <hash alg="SHA-384">a3d778f5d3f6338df0d702c2274bb1c7ff5d2dedc4f1006bef21494e12d9524f6f6305ff24b8df4593d271ad0d0f693f</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.14.2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/FasterXML/jackson-modules-java8/jackson-datatype-jsr310</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/FasterXML/jackson-modules-java8/issues</url></reference><reference type="vcs"><url>http://github.com/FasterXML/jackson-modules-java8/jackson-datatype-jsr310</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.14.2?type=jar">
      <publisher>FasterXML</publisher>
      <group>com.fasterxml.jackson.core</group>
      <name>jackson-core</name>
      <version>2.14.2</version>
      <description>Core Jackson processing abstractions (aka Streaming API), implementation for JSON</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">6ee422ee4c481b2d5aacb2b5e36a7dc0</hash>
        <hash alg="SHA-1">f804090e6399ce0cf78242db086017512dd71fcc</hash>
        <hash alg="SHA-256">b5d37a77c88277b97e3593c8740925216c06df8e4172bbde058528df04ad3e7a</hash>
        <hash alg="SHA-512">208953cf72691b3bab1ca2f9a045cccd3d75c46c90099ba884fbf16bc3e45045e5cd014d2c68c96e8a8826f87a5f0e18cb34b35e7ef03348953869c21e197367</hash>
        <hash alg="SHA-384">e806595862c5fcdae801d9845befc1d12c97e6036ee839d34590dbd785a422d5832cf4fc5c7ee6e1a5ee7a59f37740f0</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.fasterxml.jackson.core/jackson-core@2.14.2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/FasterXML/jackson-core</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/FasterXML/jackson-core/issues</url></reference><reference type="vcs"><url>https://github.com/FasterXML/jackson-core</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.2?type=jar">
      <publisher>FasterXML</publisher>
      <group>com.fasterxml.jackson.core</group>
      <name>jackson-databind</name>
      <version>2.14.2</version>
      <description>General data-binding functionality for Jackson: works on core streaming API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">c1b12dd14734cd1986132bf55042dd7e</hash>
        <hash alg="SHA-1">01e71fddbc80bb86f71a6345ac1e8ab8a00e7134</hash>
        <hash alg="SHA-256">501d3abce4d18dcc381058ec593c5b94477906bba6efbac14dae40a642f77424</hash>
        <hash alg="SHA-512">85473a29d23292f49092af9e7a7a63993206847c53b3e71f3c67245d68f7b19cc7c341e0ece409eb5e96602df98a848e957d8691fdd2c5fcddd807df9078255e</hash>
        <hash alg="SHA-384">5c54d6c497cb329c3424a30319bf657ea222349eadc5ae74c30e8dc1525d7b60b7785f4d20370267b03343dd738cc13e</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/FasterXML/jackson</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/FasterXML/jackson-databind/issues</url></reference><reference type="vcs"><url>https://github.com/FasterXML/jackson-databind</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.14.2?type=jar">
      <publisher>FasterXML</publisher>
      <group>com.fasterxml.jackson.core</group>
      <name>jackson-annotations</name>
      <version>2.14.2</version>
      <description>Core annotations used for value types, used by Jackson data binding package.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">10d19982a8890f6eb37557af2f58e272</hash>
        <hash alg="SHA-1">a7aae9525864930723e3453ab799521fdfd9d873</hash>
        <hash alg="SHA-256">2c6869d505cf60dc066734b7d50339f975bd3adc635e26a78abb71acb4473c0d</hash>
        <hash alg="SHA-512">a978384791bdc074df8039ffc95bb93f0f60d14d476861ee2a0ce208b33a991c486a07345cb80559252c3ff1dea14d3efb818c19bdc18435946dc8754d8e6ee3</hash>
        <hash alg="SHA-384">d5111c69020666689414921ae4a8950f9fbdf86dec1360f6827beeee9ebd3f78db74e69c76e0becaba47eb34fdaaeb5a</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.14.2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/FasterXML/jackson</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/FasterXML/jackson-annotations/issues</url></reference><reference type="vcs"><url>https://github.com/FasterXML/jackson-annotations</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.hamcrest/hamcrest-all@1.3?type=jar">
      <group>org.hamcrest</group>
      <name>hamcrest-all</name>
      <version>1.3</version>
      <description>A self-contained hamcrest jar containing all of the sub-modules in a single artifact.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">ae5102286b5720dd286d6b606cb891e2</hash>
        <hash alg="SHA-1">63a21ebc981131004ad02e0434e799fd7f3a8d5a</hash>
        <hash alg="SHA-256">4877670629ab96f34f5f90ab283125fcd9acb7e683e66319a68be6eb2cca60de</hash>
        <hash alg="SHA-512">686d7a180f40748572f3cf405719d4804138095ed9343c4f46941d6d2f8fa9034e0e9c9edf32899eb787ae5eba8a784be38d0f55d0311f72b32d3287300558ef</hash>
        <hash alg="SHA-384">9beb14de061d2a9a879845dd4645faa3deaac4dc8d0b15ed07779df722cacdcf436ebe4801020d9a8ad66fd9c091c4c3</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.hamcrest/hamcrest-all@1.3?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/hamcrest/JavaHamcrest/hamcrest-all</url></reference><reference type="vcs"><url>https://github.com/hamcrest/JavaHamcrest/hamcrest-all</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.mockito/mockito-core@2.18.3?type=jar">
      <group>org.mockito</group>
      <name>mockito-core</name>
      <version>2.18.3</version>
      <description>Mockito mock objects library core API and implementation</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">fdab3204f850f8d9930a4c4442ac6ad0</hash>
        <hash alg="SHA-1">98aa130476c5d1915dac35b5ad053a7ffcd675bc</hash>
        <hash alg="SHA-256">c05b2e4fe13a0dfeda8f2bb6eb1871f02076118982fdac2cfcda40d66cda0910</hash>
        <hash alg="SHA-512">360e445df4a35229d8ac319e867dc0e51ce0807122b590b3dbe256d0bae677035da3368e9cf6edb9576c43735f63cd48720137d1117ebf379223a2c51c0211dd</hash>
        <hash alg="SHA-384">e6f7e16108651208fffcf44a1ee970c6117c3fd324eec39eccd3084bb4e0168925b99d37c7c98caae372b893ba4c1ff6</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.mockito/mockito-core@2.18.3?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/mockito/mockito</url></reference><reference type="build-system"><url>https://travis-ci.org/mockito/mockito</url></reference><reference type="issue-tracker"><url>https://github.com/mockito/mockito/issues</url></reference><reference type="vcs"><url>https://github.com/mockito/mockito.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/net.bytebuddy/byte-buddy@1.8.5?type=jar">
      <group>net.bytebuddy</group>
      <name>byte-buddy</name>
      <version>1.8.5</version>
      <description>Byte Buddy is a Java library for creating Java classes at run time.
        This artifact is a build of Byte Buddy with all ASM dependencies repackaged into its own name space.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">8fb7b05e6db9ec5f2c7611b2633a9f49</hash>
        <hash alg="SHA-1">f16b6f8bf487d06e9f83da3033958a694f57c8a4</hash>
        <hash alg="SHA-256">5cdf38df41d2224e668382dde9d8698b443769d8d20f4a3377b029c6719d681e</hash>
        <hash alg="SHA-512">95103d7e63fa5822088c174a7890f3a04311f363bd7535c8f2f11bedec011c4f28f6e283303a3f1c865439a6742473455605ee088f9a321498ac89db66f63cdc</hash>
        <hash alg="SHA-384">95dc09e416732c83e087c7edd0442b562be48cb7c9f2dfe258089f6eda6c89655bb4504ee7aa04d0e34393e82f224521</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/net.bytebuddy/byte-buddy@1.8.5?type=jar</purl>
      <externalReferences><reference type="website"><url>http://bytebuddy.net/byte-buddy</url></reference><reference type="distribution"><url>https://api.bintray.com/maven/raphw/maven/ByteBuddy</url></reference><reference type="issue-tracker"><url>https://github.com/raphw/byte-buddy/issues</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/net.bytebuddy/byte-buddy-agent@1.8.5?type=jar">
      <group>net.bytebuddy</group>
      <name>byte-buddy-agent</name>
      <version>1.8.5</version>
      <description>The Byte Buddy Java agent allows to access the JVM's HotSwap feature.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">fa8ed6046f7a12708db2c3d9c38b4aa0</hash>
        <hash alg="SHA-1">7bb88bffec91556155629ad4ff6a0e0013d4bf10</hash>
        <hash alg="SHA-256">804e0d85bff9f34110564318bfb34ec62604c4704dbcc734668abd68d58cbb7a</hash>
        <hash alg="SHA-512">d711e5c9a55f75f141300d49fca515756484fc37bebd7facca987ac8c51a1ccedcae64c2ff00a8f5ad61585cff0377d0238429fbe150900b6aa46fb2d991e01b</hash>
        <hash alg="SHA-384">c7db26d3558030d214804b6fc9f76b6c0cb1fa29a5ef00482ca8a536f2b7e720d60731238413525918a1297d81abd4e8</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/net.bytebuddy/byte-buddy-agent@1.8.5?type=jar</purl>
      <externalReferences><reference type="website"><url>http://bytebuddy.net/byte-buddy-agent</url></reference><reference type="distribution"><url>https://api.bintray.com/maven/raphw/maven/ByteBuddy</url></reference><reference type="issue-tracker"><url>https://github.com/raphw/byte-buddy/issues</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.objenesis/objenesis@2.6?type=jar">
      <publisher>Joe Walnes, Henri Tremblay, Leonardo Mesquita</publisher>
      <group>org.objenesis</group>
      <name>objenesis</name>
      <version>2.6</version>
      <description>A library for instantiating Java objects</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">5ffac3f51405ca9b2915970a224b3e8f</hash>
        <hash alg="SHA-1">639033469776fd37c08358c6b92a4761feb2af4b</hash>
        <hash alg="SHA-256">5e168368fbc250af3c79aa5fef0c3467a2d64e5a7bd74005f25d8399aeb0708d</hash>
        <hash alg="SHA-512">23a593bded8cb43236faad2018b008da47bf4e29cc60c2e98fd4f2ed578fe2baddd3a98547dc14273017c82cb19ce8eaaab71d49273411856a2ba1a5d51015fc</hash>
        <hash alg="SHA-384">502057722913adcad184e16a4be7a65dea54b53c5d035d53ee182226b19c90ce024f5bf78d0d5458eb1e0f2710976405</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.objenesis/objenesis@2.6?type=jar</purl>
      <externalReferences><reference type="website"><url>http://objenesis.org</url></reference><reference type="distribution"><url>https://api.bintray.com/maven/easymock/maven/objenesis/;publish=1</url></reference><reference type="vcs"><url>https://github.com/easymock/objenesis/objenesis</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.slf4j/slf4j-reload4j@1.7.36?type=jar">
      <publisher>QOS.ch</publisher>
      <group>org.slf4j</group>
      <name>slf4j-reload4j</name>
      <version>1.7.36</version>
      <description>SLF4J Reload4j Binding</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">ebfedc67cca7891e9c535e5899930f07</hash>
        <hash alg="SHA-1">db708f7d959dee1857ac524636e85ecf2e1781c1</hash>
        <hash alg="SHA-256">ae6fdd5c9547896114d5ec7fa7503733b7d2890573d3886fb548b3119c4d3f67</hash>
        <hash alg="SHA-512">595a00905b67886376adb45d6964b6d35a7e7fe90cfe0e26ed3b852c755ac4de96894974aac5fc590df689d3a28fa7198d899b544f30e83c320a2befe88fcb24</hash>
        <hash alg="SHA-384">700e92389464261381690cee669d9446bf912b58fd94be50837e1456c8f42a4586960036c097b7e08c2b32eab190adc1</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
          <url>https://opensource.org/licenses/MIT</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.slf4j/slf4j-reload4j@1.7.36?type=jar</purl>
      <externalReferences><reference type="website"><url>http://reload4j.qos.ch</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/qos-ch/slf4j/slf4j-reload4j</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar">
      <publisher>QOS.ch</publisher>
      <group>org.slf4j</group>
      <name>slf4j-api</name>
      <version>1.7.36</version>
      <description>The slf4j API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">872da51f5de7f3923da4de871d57fd85</hash>
        <hash alg="SHA-1">6c62681a2f655b49963a5983b8b0950a6120ae14</hash>
        <hash alg="SHA-256">d3ef575e3e4979678dc01bf1dcce51021493b4d11fb7f1be8ad982877c16a1c0</hash>
        <hash alg="SHA-512">f9b033fc019a44f98b16048da7e2b59edd4a6a527ba60e358f65ab88e0afae03a9340f1b3e8a543d49fa542290f499c5594259affa1ff3e6e7bf3b428d4c610b</hash>
        <hash alg="SHA-384">2b14ad035877087157e379d3277dcdcd79e58d6bdb147c47d29e377d75ce53ad42cafbf22f5fb7827c7e946ff4876b9a</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
          <url>https://opensource.org/licenses/MIT</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.slf4j.org</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/qos-ch/slf4j/slf4j-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/ch.qos.reload4j/reload4j@1.2.25?type=jar">
      <publisher>QOS.CH Sarl (Switzerland)</publisher>
      <group>ch.qos.reload4j</group>
      <name>reload4j</name>
      <version>1.2.25</version>
      <description>Reload4j revives EOLed log4j 1.x</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">ca989b9d69c90159dde3b1594e99d58c</hash>
        <hash alg="SHA-1">45921e383a1001c2a599fc4c6cf59af80cdd1cf1</hash>
        <hash alg="SHA-256">e71115175c4b080cf51dd72097165ea001ff9fafdc4f79d88049d0b1ecca979c</hash>
        <hash alg="SHA-512">a81e53780dccb36677471b9e6fbf25fdad49f68105a36b9a6708b1419ca9adb2957187ee1f8213add8c17a8a8bed1e744414fcf2833710990596fb780731bf5e</hash>
        <hash alg="SHA-384">4202e04f302bdd94fa3bfc39361794cff964749b5fbb825fc4ff4a749f85cd373f0dd2d807911e81b4bcff86165a33cf</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/ch.qos.reload4j/reload4j@1.2.25?type=jar</purl>
      <externalReferences><reference type="website"><url>https://reload4j.qos.ch</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/qos-ch/reload4j</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.confluent/logredactor@1.0.12?type=jar">
      <publisher>Confluent, Inc.</publisher>
      <group>io.confluent</group>
      <name>logredactor</name>
      <version>1.0.12</version>
      <description>Log Redactor</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">a88bfeacc83968a1adb159ebd86081d1</hash>
        <hash alg="SHA-1">89b8fb61626de8ca579069880507a1626fb3de92</hash>
        <hash alg="SHA-256">891dc9f52a2d92237101323ca6c01361e37730a68e290449acf8c1f7ec5ddb94</hash>
        <hash alg="SHA-512">c585ebe9cc7fbd04686c160a630d13c43ddfecc31f4bf3bbc97ae872a02a0d5da437e6f2fe168977af2c163faeb9550cc96d3d605adb4097cc52fbe0458a4c53</hash>
        <hash alg="SHA-384">9f5a13cad1a3ac20669c9ea40ed721426845c9000aa2ff97b1e7011251f3e0bf5ba7b6e1d7a122bb17f68106b9c220da</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.confluent/logredactor@1.0.12?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/confluentinc/logredactor</url></reference><reference type="vcs"><url>https://github.com/confluentinc/logredactor.git/logredactor</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.re2j/re2j@1.6?type=jar">
      <group>com.google.re2j</group>
      <name>re2j</name>
      <version>1.6</version>
      <description>Linear time regular expressions for Java</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">5f4aed37b6b18b402b2790160a50cd13</hash>
        <hash alg="SHA-1">a13e879fd7971738d06020fefeb108cc14e14169</hash>
        <hash alg="SHA-256">c8b5c3472d4db594a865b2e47f835d07fb8b1415eeba559dccfb0a6945f033cd</hash>
        <hash alg="SHA-512">faaecdb5443ac7c05dcc4e8ea290d5d96768b12f6c3370a988bc43da08b8bac6b306acedd378a3ff9f8f6ad2b77758d277e88b1d13f967f512e36e0910134b3c</hash>
        <hash alg="SHA-384">75e84250cbaf9af4f8444b60bf1ddf89a8ae63cf9664111f690262253786e9fa878e460c03689caa9faf8449f4dda8bf</hash>
      </hashes>
      <licenses>
        <license>
          <name>Go License</name>
          <url>https://golang.org/LICENSE</url>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.re2j/re2j@1.6?type=jar</purl>
      <externalReferences><reference type="website"><url>http://github.com/google/re2j</url></reference><reference type="vcs"><url>https://github.com/google/re2j.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.confluent/logredactor-metrics@1.0.12?type=jar">
      <publisher>Confluent, Inc.</publisher>
      <group>io.confluent</group>
      <name>logredactor-metrics</name>
      <version>1.0.12</version>
      <description>Log Redactor Metrics</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">0ccf0c2c7e4a5027400427a159e28374</hash>
        <hash alg="SHA-1">7123728b9c428e26151e767ee65869c62373a6f6</hash>
        <hash alg="SHA-256">dc7ef029732392abe5310c4c170d223f298bd29000249eb7ad3a94568c2e289f</hash>
        <hash alg="SHA-512">4f33de2697f6b1cdc5ce582de9d28a730708ffb0d4c4455b274ca68bcba0c937debf49f951db86f9552823d88333103de0f60f3ce26441861868ef6e6d2b14bf</hash>
        <hash alg="SHA-384">144b0281c76f6aac34db2ad6370f523b4a091f4e3f5d8014fe9c875416573d6bcf3ff53cd85afb9ea97137da52419298</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.confluent/logredactor-metrics@1.0.12?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/confluentinc/logredactor</url></reference><reference type="vcs"><url>https://github.com/confluentinc/logredactor.git/logredactor-metrics</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.eclipsesource.minimal-json/minimal-json@0.9.5?type=jar">
      <group>com.eclipsesource.minimal-json</group>
      <name>minimal-json</name>
      <version>0.9.5</version>
      <description>A Minimal JSON Parser and Writer</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">b654083f16dfe1856a42bf356c399f79</hash>
        <hash alg="SHA-1">8134f8babbfbb18373110ea0b5871fd34b9c77bf</hash>
        <hash alg="SHA-256">69ff84463d1d7cc5cfdb8baf2b6e5f7af153d351bf0dbee3bbc8916247afac74</hash>
        <hash alg="SHA-512">24071638243974625957955b799696f9514ab35218652c493db6a4acbacbfa8ef2b2265a096cdab14b476cf7a76b34e50f2d999c45ee1c884972a193214fdf31</hash>
        <hash alg="SHA-384">54df09e2c3ef7704cb962f428791e713c987c19749964c003ac0c10c58ea95e53ee312d200fef42e8ea0652bccdebcfb</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
          <url>https://opensource.org/licenses/MIT</url>
        </license>
      </licenses>
      <purl>pkg:maven/com.eclipsesource.minimal-json/minimal-json@0.9.5?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/ralfstx/minimal-json</url></reference><reference type="vcs"><url>https://github.com/ralfstx/minimal-json</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/junit/junit@4.13.1?type=jar">
      <publisher>JUnit</publisher>
      <group>junit</group>
      <name>junit</name>
      <version>4.13.1</version>
      <description>JUnit is a unit testing framework for Java, created by Erich Gamma and Kent Beck.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">83d91f209ddcb104776fa41c448c7ee2</hash>
        <hash alg="SHA-1">cdd00374f1fee76b11e2a9d127405aa3f6be5b6a</hash>
        <hash alg="SHA-256">c30719db974d6452793fe191b3638a5777005485bae145924044530ffa5f6122</hash>
        <hash alg="SHA-512">29769fb462c7db2fcca6de3a24b445ae252a7570950f9a2163e14c478f854e47056444d90b2d40f4cf4e3f37c03faacf694c2db12763e173c44362af50176b1f</hash>
        <hash alg="SHA-384">f98da9852bdc5fc022399a85c1fa234ba80d3bf8f492034971175f70464cd9f2d08d65954f92f33ae250050d9f5ae160</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-1.0</id>
          <url>http://www.eclipse.org/legal/epl-v10.html</url>
        </license>
      </licenses>
      <purl>pkg:maven/junit/junit@4.13.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://junit.org</url></reference><reference type="build-system"><url>https://travis-ci.org/junit-team/junit4</url></reference><reference type="distribution"><url>https://github.com/junit-team/junit4/wiki/Download-and-Install</url></reference><reference type="issue-tracker"><url>https://github.com/junit-team/junit4/issues</url></reference><reference type="vcs"><url>https://github.com/junit-team/junit4</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-artifact@3.3.3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven</group>
      <name>maven-artifact</name>
      <version>3.3.3</version>
      <description>Maven is a software build management and
    comprehension tool. Based on the concept of a project object model:
    builds, dependency management, documentation creation, site
    publication, and distribution publication are all controlled from
    the declarative file. Maven can be extended by plugins to utilise a
    number of other development tools for reporting or the build
    process.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">3f011c366a0f097e10ef3349394ebacb</hash>
        <hash alg="SHA-1">d9f439dfef726e54eebb390ff38dd27356901528</hash>
        <hash alg="SHA-256">c5d2db20550a3de4e796493876114c3b7717fe560c414135e2508c57b80e9a02</hash>
        <hash alg="SHA-512">4363f8877e96f830b9cfa9c848d621eac547b08d68e19d6dfff913efe45fa0dbf4fde964bb9fefd98aa40ed3115a693f492739c2432d32aa2fa77e1262be1dac</hash>
        <hash alg="SHA-384">1b232229ae160f9b18a8dc6788ee312e14fe946ceea2d5db382362e94ae25f2db8facfa33ec4a0e977f0e753d3ad8418</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven/maven-artifact@3.3.3?type=jar</purl>
      <externalReferences><reference type="website"><url>http://maven.apache.org/ref/3.3.3/maven-artifact</url></reference><reference type="build-system"><url>https://builds.apache.org/job/maven-3.x/</url></reference><reference type="distribution"><url>http://maven.apache.org/download.html</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/MNG</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/maven-users</url></reference><reference type="vcs"><url>https://github.com/apache/maven/tree/maven-3.3.3/maven-artifact</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-io/commons-io@2.11.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-io</group>
      <name>commons-io</name>
      <version>2.11.0</version>
      <description>The Apache Commons IO library contains utility classes, stream implementations, file filters,
file comparators, endian transformation classes, and much more.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">3b4b7ccfaeceeac240b804839ee1a1ca</hash>
        <hash alg="SHA-1">a2503f302b11ebde7ebc3df41daebe0e4eea3689</hash>
        <hash alg="SHA-256">961b2f6d87dbacc5d54abf45ab7a6e2495f89b75598962d8c723cea9bc210908</hash>
        <hash alg="SHA-512">5bd78eed456ede30119319c5bed8e3e4c443b6fd7bdb3a7a5686647bd83094d0c3e2832a7575cfb60e4ef25f08106b93476939d3adcfecf5533cc030b3039e10</hash>
        <hash alg="SHA-384">114f1e324d90ad887c177876d410f5787a8e8da6c48d4b2862d365802c0efded3a88cb24046976bf6276cadad3712f0f</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/commons-io/commons-io@2.11.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://commons.apache.org/proper/commons-io/</url></reference><reference type="build-system"><url>https://builds.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/IO</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-io.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-configuration/commons-configuration@1.10?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-configuration</group>
      <name>commons-configuration</name>
      <version>1.10</version>
      <description>Tools to assist in the reading of configuration/preferences files in various formats.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">b16511ce540fefd53981245f5f21c5f8</hash>
        <hash alg="SHA-1">2b36e4adfb66d966c5aef2d73deb6be716389dc9</hash>
        <hash alg="SHA-256">95d4e6711e88ce78992c82c25bc03c8df9ecf5a357f0de0bec72a26db3399374</hash>
        <hash alg="SHA-512">cc7fdd7d7bd1851b48d10883766fac9d72b0407714b3c653369130e3224bdd19a4cb941fb813dde1e8c7d29bb07a5b1a44d611240ead1717e51a15a31c9630f8</hash>
        <hash alg="SHA-384">71c60449129b1543aea7b4b85d6f16c41dd71468590f49b4420eef8a3ad2a2e82ad097f08cb0c03decc3c69a7ada6e1e</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/commons-configuration/commons-configuration@1.10?type=jar</purl>
      <externalReferences><reference type="website"><url>http://commons.apache.org/configuration/</url></reference><reference type="build-system"><url>http://vmbuild.apache.org/continuum/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/CONFIGURATION</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>http://svn.apache.org/viewvc/commons/proper/configuration/tags/CONFIGURATION_1_10RC2</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-lang/commons-lang@2.6?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-lang</group>
      <name>commons-lang</name>
      <version>2.6</version>
      <description>Commons Lang, a package of Java utility classes for the
        classes that are in java.lang's hierarchy, or are considered to be so
        standard as to justify existence in java.lang.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">4d5c1693079575b362edf41500630bbd</hash>
        <hash alg="SHA-1">0ce1edb914c94ebc388f086c6827e8bdeec71ac2</hash>
        <hash alg="SHA-256">50f11b09f877c294d56f24463f47d28f929cf5044f648661c0f0cfbae9a2f49c</hash>
        <hash alg="SHA-512">4a5a3dbe4941c645e2cca068cca5c1882cfe988b02e7cd981d1e51784900767d1deab0e0e0566f559c9fcabb4a180e436d5bb948902d4f4106f37360466afb42</hash>
        <hash alg="SHA-384">9725bc421adc1dbcd6f937eca0f3075d186a2b353ece4cef66b0fe81bb8d3f7d7641c43e86d657ef526c719f0c2a8c90</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/commons-lang/commons-lang@2.6?type=jar</purl>
      <externalReferences><reference type="website"><url>http://commons.apache.org/lang/</url></reference><reference type="build-system"><url>http://vmbuild.apache.org/continuum/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/LANG</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>http://svn.apache.org/viewvc/commons/proper/lang/branches/LANG_2_X</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-logging/commons-logging@1.1.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-logging</group>
      <name>commons-logging</name>
      <version>1.1.1</version>
      <description>Commons Logging is a thin adapter allowing configurable bridging to other,
    well known logging systems.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">ed448347fc0104034aa14c8189bf37de</hash>
        <hash alg="SHA-1">5043bfebc3db072ed80fbd362e7caf00e885d8ae</hash>
        <hash alg="SHA-256">ce6f913cad1f0db3aad70186d65c5bc7ffcc9a99e3fe8e0b137312819f7c362f</hash>
        <hash alg="SHA-512">470323a2ee38be1b7ff8c84f1f5a5f8c4ec2ceb6b0649faa7b961f111865877dbe125409f72b1c52c7f18aa89e3469635c49ff4b83f86cc2f2eb2cc5562f9bff</hash>
        <hash alg="SHA-384">264a511a601a07558911ccc5f49ef579aa1b1760bb4091bcbe1a0017c7be64d86f1d0b28ef560819614b252907cdd44a</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/commons-logging/commons-logging@1.1.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://commons.apache.org/logging</url></reference><reference type="build-system"><url>http://vmbuild.apache.org/continuum/</url></reference><reference type="distribution"><url></url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/LOGGING</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/commons-commits/</url></reference><reference type="vcs"><url>http://svn.apache.org/repos/asf/commons/proper/logging/tags/commons-logging-1.1.1</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.confluent/common-utils@7.1.13?type=jar">
      <publisher>Confluent, Inc.</publisher>
      <group>io.confluent</group>
      <name>common-utils</name>
      <version>7.1.13</version>
      <description>Common utilities, including metrics and config.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">465010329641e77bddc5a163b6aa11bf</hash>
        <hash alg="SHA-1">3640d2a77e39b5caf1ec3af09f88090cfd1894bb</hash>
        <hash alg="SHA-256">bd8b8933f8ef49f73eab75efe80e35bfe770d941089acf6a4ceb240fc46e7837</hash>
        <hash alg="SHA-512">5cbb9e251c4dd5326328cb1970102d14999021b7b760e3bf0f9e1f059210c2f02c7492dd58ff11619f9bdff6a84aa6d467a020b7debe0b45e0783178c08cec5f</hash>
        <hash alg="SHA-384">f35e85e0d05fc0fc7992d6953af9f8744680553b315560375ec510859115809e4ad259c556dc1afbb8cd12d9f313c959</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/io.confluent/common-utils@7.1.13?type=jar</purl>
      <externalReferences><reference type="website"><url>https://confluent.io/common-utils</url></reference><reference type="distribution"><url>s3://staging-confluent-packages-maven-654654529379-us-west-2/v7.1.13-rc240704064029/maven</url></reference><reference type="vcs"><url>https://github.com/confluentinc/common/common-utils</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.github.stefanbirkner/system-rules@1.18.0?type=jar">
      <group>com.github.stefanbirkner</group>
      <name>system-rules</name>
      <version>1.18.0</version>
      <description>A collection of JUnit rules for testing code which uses java.lang.System.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">360da675432aef7036bbbf9e4c7be52b</hash>
        <hash alg="SHA-1">04d95a6c83a298c60195c74b8cce3cc094e56dbb</hash>
        <hash alg="SHA-256">4184377d67553de20d3f07317189b17d8bd979d3fa2fcdc26d07e271dcdd0f6c</hash>
        <hash alg="SHA-512">2f16298dba8f26ecc2502f8bfa35b1c6626c76bcf69c31e60c62ec3c5abcee3d6474dc6226bc89e9328c7076aa2921398cc1d23743965bba5672ba9b273e258c</hash>
        <hash alg="SHA-384">289db812897a3739b6a5d7564c3ad79b095a8f1f5c442cee418ed8a2f7ba4e9c9df8dd5e426fdbdb20d07769eb27666f</hash>
      </hashes>
      <licenses>
        <license>
          <name>Common Public License Version 1.0</name>
          <url>http://www.opensource.org/licenses/cpl1.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/com.github.stefanbirkner/system-rules@1.18.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://stefanbirkner.github.io/system-rules/</url></reference><reference type="vcs"><url>https://github.com/stefanbirkner/system-rules/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/javax.activation/activation@1.1.1?type=jar">
      <group>javax.activation</group>
      <name>activation</name>
      <version>1.1.1</version>
      <description>The JavaBeans(TM) Activation Framework is used by the JavaMail(TM) API to manage MIME data</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">46a37512971d8eca81c3fcf245bf07d2</hash>
        <hash alg="SHA-1">485de3a253e23f645037828c07f1d7f1af40763a</hash>
        <hash alg="SHA-256">ae475120e9fcd99b4b00b38329bd61cdc5eb754eee03fe66c01f50e137724f99</hash>
        <hash alg="SHA-512">49119b0cc3af02700685a55c6f15e6d40643f81640e642b9ea39a59e18d542f8837d30b43b5be006ce1a98c8ec9729bb2165c0442978168f64caa2fc6e3cb93d</hash>
        <hash alg="SHA-384">021f29ab14a1db9b27e31778fd5b6ead2ed46fef534cfab6b34b1b839547c78fc39cfb1568f0b2206bb46a98c4b9e1d4</hash>
      </hashes>
      <licenses>
        <license>
          <id>CDDL-1.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/javax.activation/activation@1.1.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://java.sun.com/javase/technologies/desktop/javabeans/jaf/index.jsp</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.confluent/assembly-plugin-boilerplate@7.1.13?classifier=resources&amp;type=zip">
      <group>io.confluent</group>
      <name>assembly-plugin-boilerplate</name>
      <version>7.1.13</version>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">ec4516a2195bb436347593d61b77a5b9</hash>
        <hash alg="SHA-1">73b135d760859fa63834b7926b920eb02471c1d8</hash>
        <hash alg="SHA-256">290e26ca5cd9455ab4605dae83b705cb97b55572c4c3f42bb7ff22da8159bcb4</hash>
        <hash alg="SHA-512">52ceda12470bfac8d86cf978ec49d805bddc9d50ab67d05fa0fad9327ffc73807529d8ea385a057924c0892e7d69e7f82d8f2fb534f6ed8f18f338a69620a5cd</hash>
        <hash alg="SHA-384">bf2ca436cb08c2049693355f0b1cddf32d4bedf54fdb5c79a4f786f26ac9df3391c02343b8a256c5eac3b82e06f46090</hash>
      </hashes>
      <purl>pkg:maven/io.confluent/assembly-plugin-boilerplate@7.1.13?classifier=resources&amp;type=zip</purl>
    </component>
  </components>
  <dependencies>
    <dependency ref="pkg:maven/io.confluent/confluent-hub-client@7.1.13?type=jar">
      <dependency ref="pkg:maven/org.glassfish.jersey.core/jersey-client@2.34?type=jar"/>
      <dependency ref="pkg:maven/org.glassfish.jersey.inject/jersey-hk2@2.34?type=jar"/>
      <dependency ref="pkg:maven/com.github.rvesse/airline-help-bash@2.6.0?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.14.2?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.14.2?type=jar"/>
      <dependency ref="pkg:maven/org.hamcrest/hamcrest-all@1.3?type=jar"/>
      <dependency ref="pkg:maven/org.mockito/mockito-core@2.18.3?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-reload4j@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/io.confluent/logredactor@1.0.12?type=jar"/>
      <dependency ref="pkg:maven/junit/junit@4.13.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-artifact@3.3.3?type=jar"/>
      <dependency ref="pkg:maven/commons-io/commons-io@2.11.0?type=jar"/>
      <dependency ref="pkg:maven/commons-configuration/commons-configuration@1.10?type=jar"/>
      <dependency ref="pkg:maven/io.confluent/common-utils@7.1.13?type=jar"/>
      <dependency ref="pkg:maven/com.github.stefanbirkner/system-rules@1.18.0?type=jar"/>
      <dependency ref="pkg:maven/javax.activation/activation@1.1.1?type=jar"/>
      <dependency ref="pkg:maven/io.confluent/assembly-plugin-boilerplate@7.1.13?classifier=resources&amp;type=zip"/>
    </dependency>
    <dependency ref="pkg:maven/org.glassfish.jersey.core/jersey-client@2.34?type=jar">
      <dependency ref="pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@2.1.6?type=jar"/>
      <dependency ref="pkg:maven/org.glassfish.jersey.core/jersey-common@2.34?type=jar"/>
      <dependency ref="pkg:maven/org.glassfish.hk2.external/jakarta.inject@2.6.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@2.1.6?type=jar"/>
    <dependency ref="pkg:maven/org.glassfish.jersey.core/jersey-common@2.34?type=jar">
      <dependency ref="pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@2.1.6?type=jar"/>
      <dependency ref="pkg:maven/jakarta.annotation/jakarta.annotation-api@1.3.5?type=jar"/>
      <dependency ref="pkg:maven/org.glassfish.hk2.external/jakarta.inject@2.6.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/jakarta.annotation/jakarta.annotation-api@1.3.5?type=jar"/>
    <dependency ref="pkg:maven/org.glassfish.hk2.external/jakarta.inject@2.6.1?type=jar"/>
    <dependency ref="pkg:maven/org.glassfish.jersey.inject/jersey-hk2@2.34?type=jar">
      <dependency ref="pkg:maven/org.glassfish.jersey.core/jersey-common@2.34?type=jar"/>
      <dependency ref="pkg:maven/org.glassfish.hk2/hk2-locator@2.6.1?type=jar"/>
      <dependency ref="pkg:maven/org.javassist/javassist@3.25.0-GA?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.glassfish.hk2/hk2-locator@2.6.1?type=jar">
      <dependency ref="pkg:maven/org.glassfish.hk2.external/jakarta.inject@2.6.1?type=jar"/>
      <dependency ref="pkg:maven/org.glassfish.hk2.external/aopalliance-repackaged@2.6.1?type=jar"/>
      <dependency ref="pkg:maven/org.glassfish.hk2/hk2-api@2.6.1?type=jar"/>
      <dependency ref="pkg:maven/org.glassfish.hk2/hk2-utils@2.6.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.glassfish.hk2.external/aopalliance-repackaged@2.6.1?type=jar"/>
    <dependency ref="pkg:maven/org.glassfish.hk2/hk2-api@2.6.1?type=jar">
      <dependency ref="pkg:maven/org.glassfish.hk2.external/jakarta.inject@2.6.1?type=jar"/>
      <dependency ref="pkg:maven/org.glassfish.hk2/hk2-utils@2.6.1?type=jar"/>
      <dependency ref="pkg:maven/org.glassfish.hk2.external/aopalliance-repackaged@2.6.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.glassfish.hk2/hk2-utils@2.6.1?type=jar">
      <dependency ref="pkg:maven/org.glassfish.hk2.external/jakarta.inject@2.6.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.javassist/javassist@3.25.0-GA?type=jar"/>
    <dependency ref="pkg:maven/com.github.rvesse/airline-help-bash@2.6.0?type=jar">
      <dependency ref="pkg:maven/com.github.rvesse/airline@2.6.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.github.rvesse/airline@2.6.0?type=jar">
      <dependency ref="pkg:maven/com.github.rvesse/airline-io@2.6.0?type=jar"/>
      <dependency ref="pkg:maven/javax.inject/javax.inject@1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-collections4@4.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.github.rvesse/airline-io@2.6.0?type=jar">
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.7?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.7?type=jar"/>
    <dependency ref="pkg:maven/javax.inject/javax.inject@1?type=jar"/>
    <dependency ref="pkg:maven/org.apache.commons/commons-collections4@4.2?type=jar"/>
    <dependency ref="pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.14.2?type=jar">
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.14.2?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.14.2?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.14.2?type=jar"/>
    <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.14.2?type=jar"/>
    <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.2?type=jar">
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.14.2?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.14.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.hamcrest/hamcrest-all@1.3?type=jar"/>
    <dependency ref="pkg:maven/org.mockito/mockito-core@2.18.3?type=jar">
      <dependency ref="pkg:maven/net.bytebuddy/byte-buddy@1.8.5?type=jar"/>
      <dependency ref="pkg:maven/net.bytebuddy/byte-buddy-agent@1.8.5?type=jar"/>
      <dependency ref="pkg:maven/org.objenesis/objenesis@2.6?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/net.bytebuddy/byte-buddy@1.8.5?type=jar"/>
    <dependency ref="pkg:maven/net.bytebuddy/byte-buddy-agent@1.8.5?type=jar"/>
    <dependency ref="pkg:maven/org.objenesis/objenesis@2.6?type=jar"/>
    <dependency ref="pkg:maven/org.slf4j/slf4j-reload4j@1.7.36?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/ch.qos.reload4j/reload4j@1.2.25?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    <dependency ref="pkg:maven/ch.qos.reload4j/reload4j@1.2.25?type=jar"/>
    <dependency ref="pkg:maven/io.confluent/logredactor@1.0.12?type=jar">
      <dependency ref="pkg:maven/com.google.re2j/re2j@1.6?type=jar"/>
      <dependency ref="pkg:maven/io.confluent/logredactor-metrics@1.0.12?type=jar"/>
      <dependency ref="pkg:maven/com.eclipsesource.minimal-json/minimal-json@0.9.5?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.google.re2j/re2j@1.6?type=jar"/>
    <dependency ref="pkg:maven/io.confluent/logredactor-metrics@1.0.12?type=jar"/>
    <dependency ref="pkg:maven/com.eclipsesource.minimal-json/minimal-json@0.9.5?type=jar"/>
    <dependency ref="pkg:maven/junit/junit@4.13.1?type=jar"/>
    <dependency ref="pkg:maven/org.apache.maven/maven-artifact@3.3.3?type=jar"/>
    <dependency ref="pkg:maven/commons-io/commons-io@2.11.0?type=jar"/>
    <dependency ref="pkg:maven/commons-configuration/commons-configuration@1.10?type=jar">
      <dependency ref="pkg:maven/commons-lang/commons-lang@2.6?type=jar"/>
      <dependency ref="pkg:maven/commons-logging/commons-logging@1.1.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/commons-lang/commons-lang@2.6?type=jar"/>
    <dependency ref="pkg:maven/commons-logging/commons-logging@1.1.1?type=jar"/>
    <dependency ref="pkg:maven/io.confluent/common-utils@7.1.13?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.github.stefanbirkner/system-rules@1.18.0?type=jar">
      <dependency ref="pkg:maven/junit/junit@4.13.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/javax.activation/activation@1.1.1?type=jar"/>
    <dependency ref="pkg:maven/io.confluent/assembly-plugin-boilerplate@7.1.13?classifier=resources&amp;type=zip"/>
  </dependencies>
</bom>
