{
  "bomFormat" : "CycloneDX",
  "specVersion" : "1.4",
  "serialNumber" : "urn:uuid:99b374d4-f52f-43a8-ac0b-777eb315ae50",
  "version" : 1,
  "metadata" : {
    "timestamp" : "2025-12-09T11:58:09Z",
    "tools" : [
      {
        "vendor" : "OWASP Foundation",
        "name" : "CycloneDX Maven plugin",
        "version" : "2.7.7",
        "hashes" : [
          {
            "alg" : "MD5",
            "content" : "436dfb24c63a322708e4a5143d8543af"
          },
          {
            "alg" : "SHA-1",
            "content" : "3ef2e8728dc9eff2f129c34057e46e9d2b10629a"
          },
          {
            "alg" : "SHA-256",
            "content" : "c185b79bf0f9264f43bc8c222c44db67bea275bb727e3327cf9aea6bf45292c9"
          },
          {
            "alg" : "SHA-512",
            "content" : "41488733e31e6c5315327dcc86187c2b9a6b96cd08f7e2157ce130688afde29c313fc6a73edb8a76333a930c78874aa2eac874448920030c0f7af0ac05e65ced"
          },
          {
            "alg" : "SHA-384",
            "content" : "f9462f86240fd9fc0942f34981e6d2371f252aa1a4e5e8c3c14e7f0f1a4e4de69ef972e51cf09a749afb6d97c13e67ed"
          },
          {
            "alg" : "SHA3-384",
            "content" : "c755af6239348bc7dd1e1e6b5f14f7cf7e1560d689b252d9610cd865fa4b419d0b8e26260731dfc5da2176b6e706b414"
          },
          {
            "alg" : "SHA3-256",
            "content" : "309aac91005470c9c834354ab918759e2ae7ec52fc1676002621a5bbdf3b7827"
          },
          {
            "alg" : "SHA3-512",
            "content" : "c634570dcf8302e61005e5fa91a9a0d9b81542f731967b3c9f6d3ef89e3b945bd36d7ab69e2ebad8124b9c05da504361c8b36a8ce528d844409eeb7df4eea6ce"
          }
        ]
      }
    ],
    "component" : {
      "publisher" : "The Apache Software Foundation",
      "group" : "io.confluent.flink",
      "name" : "flink-orc",
      "version" : "2.1.1-cp1",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent.flink/flink-orc@2.1.1-cp1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://flink.apache.org/flink-formats/flink-orc"
        },
        {
          "type" : "distribution",
          "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/6eaf7284b1dd84057957aba21b9037030085a3fe"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink/flink-formats/flink-orc"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.flink/flink-orc@2.1.1-cp1?type=jar"
    },
    "properties" : [
      {
        "name" : "maven.goal",
        "value" : "makeBom"
      },
      {
        "name" : "maven.scopes",
        "value" : "compile,provided,runtime,system"
      }
    ]
  },
  "components" : [
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "io.confluent.flink",
      "name" : "flink-streaming-java",
      "version" : "2.1.1-cp1",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "5b474e60a808213d08479a416354a908"
        },
        {
          "alg" : "SHA-1",
          "content" : "9ed23ff63db1d395205039fa28539835b6d47460"
        },
        {
          "alg" : "SHA-256",
          "content" : "602f6b8b38399bdcdefd11c80f56f2bdf03aed6b80c27494cdab8d6c7f89ffc2"
        },
        {
          "alg" : "SHA-512",
          "content" : "016e73887211aaf9e9215b715c3495d7fa1b3af8ebc6643c29f1a35b519b23055318f8a22332cdf19f4bb9873199ecb7a8c920de466e1f5ba5aa0946bc001214"
        },
        {
          "alg" : "SHA-384",
          "content" : "9c8c7939923348ec0a0f7e048ca80f3ad1a6161b7631de108ef2d439a1bb30ebaae8ad7ac5fa35c369ea80385542d0cc"
        },
        {
          "alg" : "SHA3-384",
          "content" : "b40730ece9407dbcd321fa0863aaea06afac4b55d10589e465d137d1da2f289df01eca304d05fb16f3d8abcca269cbe6"
        },
        {
          "alg" : "SHA3-256",
          "content" : "a08ad3675f114262157f539ab36b2508b7d78dc162b05935e0abd1dd8a856909"
        },
        {
          "alg" : "SHA3-512",
          "content" : "ab6c9ea2a37f0b510b0e934d84038bcbdd1d681476fc890ec5bfbb9638114ed397f11f7b055fbdf5883d55e37b0d30689c3094d401bf4e6e4728aecaf380d6a6"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent.flink/flink-streaming-java@2.1.1-cp1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://flink.apache.org/flink-streaming-java"
        },
        {
          "type" : "distribution",
          "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/6eaf7284b1dd84057957aba21b9037030085a3fe"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink/flink-streaming-java"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.flink/flink-streaming-java@2.1.1-cp1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "io.confluent.flink",
      "name" : "flink-core",
      "version" : "2.1.1-cp1",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6911b11c2c9fab3a7f4cd27abc98cf67"
        },
        {
          "alg" : "SHA-1",
          "content" : "95533bfbed38c68f09e6807e39e21e28823aaffd"
        },
        {
          "alg" : "SHA-256",
          "content" : "a3a096d41ec3f0f4ce368edfb1abc96a7761c7245db432d0d5030f093adbedb5"
        },
        {
          "alg" : "SHA-512",
          "content" : "f63bc8800e3725556a7fe4fe7ea88c5f65d2fb1e305dadd00a8a3c0e0972a650cf96c1b11f9d0ffb8c6cd746614597501dcc9e4cb3406458df8023c6154825bb"
        },
        {
          "alg" : "SHA-384",
          "content" : "22db865acb3ac5d9e66ecb3fadfb4864a4219059f28d59399426f8c77126dfc686b6ab151fd5b666f65aae75288ce301"
        },
        {
          "alg" : "SHA3-384",
          "content" : "bef44a735c8c226a825b4b69337b37d75dfba606fcfac5a0aeb85a8a819893dc27a3906bd7376fd04a751cc69f58ae92"
        },
        {
          "alg" : "SHA3-256",
          "content" : "d584ab5a31fdccd4ec16c2284c6e12ae070caaa7b4a48bff2f1d140b312b1ac5"
        },
        {
          "alg" : "SHA3-512",
          "content" : "e19de94be6eb1865f52e34d80bfe5c546771f527fe098a4338ed381568bdc90c9df68d1a4208cf1f6f06b5c0eec8320a01c277d681894ae83ba1852f867eb3a1"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent.flink/flink-core@2.1.1-cp1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://flink.apache.org/flink-core"
        },
        {
          "type" : "distribution",
          "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/6eaf7284b1dd84057957aba21b9037030085a3fe"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink/flink-core"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.flink/flink-core@2.1.1-cp1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "io.confluent.flink",
      "name" : "flink-core-api",
      "version" : "2.1.1-cp1",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "d356752d7165d54a84a86d59c935701b"
        },
        {
          "alg" : "SHA-1",
          "content" : "28abed7c4b4dd726903b0be2bcb57d9d254874e3"
        },
        {
          "alg" : "SHA-256",
          "content" : "2624dc7a6ec5e080791014fef8628ca89cc2d03d64ef895b8e0c13ce270dcc69"
        },
        {
          "alg" : "SHA-512",
          "content" : "7b74b1493fd5bfff37ff2416427b5655159ce59bb3710b9eb6106ee8f3cb60076be4be326cbaa23dd5017c80aaa126234998c7f7ab8039e3f3ba127c96992352"
        },
        {
          "alg" : "SHA-384",
          "content" : "f97f8da72e3ddf655296b307cc060a1d90f56bf963a54cd31b9e5744dc485f682ebdf5351af78ea24fdcc99961a6d20e"
        },
        {
          "alg" : "SHA3-384",
          "content" : "644de8de1e071a37c84764e2ecc98888c50384a82b6a653f8d5ec637c8716a08855c6fbcf075578a779e921329f564f4"
        },
        {
          "alg" : "SHA3-256",
          "content" : "4e0657388c330382d07b80a8e6697e8ebe721e9b00e346b2d5268ee67caa0c3e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "2cc393023c4a5ac9f5d6ea054091a759aa0fdb373f275161a54817d00906b8709cf9d5cd77cc303cdb30efc0ff7c11f5d76ea0076565f41ab6d9d6228288c6c2"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent.flink/flink-core-api@2.1.1-cp1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://flink.apache.org/flink-core-api"
        },
        {
          "type" : "distribution",
          "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/6eaf7284b1dd84057957aba21b9037030085a3fe"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink/flink-core-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.flink/flink-core-api@2.1.1-cp1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "io.confluent.flink",
      "name" : "flink-metrics-core",
      "version" : "2.1.1-cp1",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f76d822353086965f48dd0803ba526e7"
        },
        {
          "alg" : "SHA-1",
          "content" : "1df9e17df8eee43ff500b78ac71bcfd23e748e89"
        },
        {
          "alg" : "SHA-256",
          "content" : "4dc60349e982243d1dd3b1a0b177aa3ad426094212a1326bec41c3c96847fba6"
        },
        {
          "alg" : "SHA-512",
          "content" : "3fb02c1351e060b2a5acd34a531e1fe02d4120904f2d9ac2168dd95d10ed011359a7db9f13cffb1736a9b85b1f3cc055a9cbc16c9a4e91c58b84ef1b68c40ce0"
        },
        {
          "alg" : "SHA-384",
          "content" : "c14eef8f5023e93f0e56e5c468548f001fbed47098abccf6aad5df297b05fcfc9166ed1c4fac304e7e56641d3414ec1a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "a9a6cbd79d52da71a1ca0c853664a08d58a57d6ec4add4b3dda26bf92965f82cabe9f6fc54903a7a319715b0f3a04a04"
        },
        {
          "alg" : "SHA3-256",
          "content" : "9389753890c90bab234968c3fc73809c64a2aa61f4fe9750702acae3f7d43c87"
        },
        {
          "alg" : "SHA3-512",
          "content" : "3da15d25f9e06ca495675fdd9ef9554f92d4351bda537daea93c70cb92943a94fc858050a71821feb285a0a59dff28c10f0a43bca15b5579952409c5487147fc"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent.flink/flink-metrics-core@2.1.1-cp1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://flink.apache.org/flink-metrics/flink-metrics-core"
        },
        {
          "type" : "distribution",
          "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/6eaf7284b1dd84057957aba21b9037030085a3fe"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink/flink-metrics/flink-metrics-core"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.flink/flink-metrics-core@2.1.1-cp1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "io.confluent.flink",
      "name" : "flink-annotations",
      "version" : "2.1.1-cp1",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e249e0e509a4047548141d168a96b69b"
        },
        {
          "alg" : "SHA-1",
          "content" : "541676de6295d0f6c44f63cebadf66dc439ebc22"
        },
        {
          "alg" : "SHA-256",
          "content" : "ab241a8d2ac6cc00b0609afb379e4ed15e710e3810f2966defdd29438d8e8dfa"
        },
        {
          "alg" : "SHA-512",
          "content" : "7536d7e0a6666650ba12dc54555bbe79f6d50372865bf816cb1e2cdccb6219b93159332dbd25bbef50bc8b98842f5a12a911621bdc24f1806c113d0c3a2ee1e7"
        },
        {
          "alg" : "SHA-384",
          "content" : "24cc83e1a9a138b885b63b764f0c424590ad3e7b08afb88b4625f61335b27597ce6164ff6196010436a11f90fc8dd26d"
        },
        {
          "alg" : "SHA3-384",
          "content" : "41bbb6b8608ac48f3ba056af23b63303e67cbb1658282e981511deae8d3f034d5f9dbda0f4885609785f5eccf9802e3f"
        },
        {
          "alg" : "SHA3-256",
          "content" : "fd3e49e54e1c23ab29d2b9d22d63d38b56dc43cd9dcbc5e2bde5e6545d603d29"
        },
        {
          "alg" : "SHA3-512",
          "content" : "0ea7cf292fcf7f168626e9705765e5ef9b74263a98cff7feaaa9f423621c4e3ce9496c0e731b9c1dc2bd99fec6b5d01ccce2ffb352664018d00dc7a816ebb819"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent.flink/flink-annotations@2.1.1-cp1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://flink.apache.org/flink-annotations"
        },
        {
          "type" : "distribution",
          "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/6eaf7284b1dd84057957aba21b9037030085a3fe"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink/flink-annotations"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.flink/flink-annotations@2.1.1-cp1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.flink",
      "name" : "flink-shaded-jackson",
      "version" : "2.18.2-20.0",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "5dd27e2ce3b833428a8073fb65841543"
        },
        {
          "alg" : "SHA-1",
          "content" : "6fbdfd65d8b31a97bee087cff2bde14936a6ef8a"
        },
        {
          "alg" : "SHA-256",
          "content" : "0097d25dd95604e660b6df3b96255661c53e98e3d14e6a88c09b1e63e5603297"
        },
        {
          "alg" : "SHA-512",
          "content" : "4ab372182e050e5b2ea9c7b3053fb46c788d5bcc378bc7174de4e34783af6dda2c8b15ea195ac6a1ca0ffc032a36e7b69c24bf4ab94ab1ba09d4e6ef6a6cd8d4"
        },
        {
          "alg" : "SHA-384",
          "content" : "59f2d0daedfcb5e128cfd46da9b256e226cd9a90eddc8787410d6a71333b6b974a1f4f468af0a210a580cc3147fe4370"
        },
        {
          "alg" : "SHA3-384",
          "content" : "aff04078014631fd7eba89d20beee5ff4df3f1c4d77f69aa22c6619ab2bc2fdfe051fa9900805fde1e8d33cb76d20982"
        },
        {
          "alg" : "SHA3-256",
          "content" : "c87e27d3d15f5116edc24405b8e4a07b77ee4f029c1d6303f242700b9014c1e0"
        },
        {
          "alg" : "SHA3-512",
          "content" : "8c6a1d32a32e29f7e8265fa673877477e3182c010fe955da3b79fd7cdac6f007f67bd9bfb7985560daefeb475021a8825909ca83ce175463be995cdbeab0fb48"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.flink/flink-shaded-jackson@2.18.2-20.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://flink.apache.org/flink-shaded-jackson-parent/flink-shaded-jackson"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink-shaded/flink-shaded-jackson-parent/flink-shaded-jackson"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.flink/flink-shaded-jackson@2.18.2-20.0?type=jar"
    },
    {
      "group" : "org.snakeyaml",
      "name" : "snakeyaml-engine",
      "version" : "2.6",
      "description" : "Core YAML 1.2 parser and emitter for Java",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "719bcfb9f917992d0a99a6f7106d8466"
        },
        {
          "alg" : "SHA-1",
          "content" : "235a7e571b33eda1a81e0f73a3173ef95dd020e5"
        },
        {
          "alg" : "SHA-256",
          "content" : "2652199af40c9aa2f1782400d2dfbbf4e5226208c4e05ddd4059c3d6d9cd1505"
        },
        {
          "alg" : "SHA-512",
          "content" : "c3b5e87ce323b37bcd9e65d060157ebb26d116b5dac30c6eaa185b30aa24c0be8dfd0ad604a9a12ce7010acadee54a9cea9f065cd2f434eeaed7bccce2e14a7d"
        },
        {
          "alg" : "SHA-384",
          "content" : "edfc3c9a95cc2fa524a322f20ec034ec16b3fad950a58bfd1ed774eaaab946304cddc5e9ea4e117a899ec568ba7fa620"
        },
        {
          "alg" : "SHA3-384",
          "content" : "63b9e0ed448431a1d4b34a4b0b97b65c2c7be6ef46f1ce3b10191373e3339422f9c06bc846ae861a982c3c3618abd9c6"
        },
        {
          "alg" : "SHA3-256",
          "content" : "19ce75167267903be79122e149ede2916c3e07bab0658db21ab40864e8c920cd"
        },
        {
          "alg" : "SHA3-512",
          "content" : "7777f37097a6951dafe18fb038d087e7fe0924bfb2a10c66a76a57d95aa65341d4b674c6ff1d9d453c436ffcb50e281c2bedc854ce687fefc30c9595b7352c8a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.snakeyaml/snakeyaml-engine@2.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://bitbucket.org/snakeyaml/snakeyaml-engine"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://bitbucket.org/snakeyaml/snakeyaml-engine/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://bitbucket.org/snakeyaml/snakeyaml-engine/src"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.snakeyaml/snakeyaml-engine@2.6?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-text",
      "version" : "1.10.0",
      "description" : "Apache Commons Text is a library focused on algorithms working on strings.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4afc9bfa2d31dbf7330c98fcc954b892"
        },
        {
          "alg" : "SHA-1",
          "content" : "3363381aef8cef2dbc1023b3e3a9433b08b64e01"
        },
        {
          "alg" : "SHA-256",
          "content" : "770cd903fa7b604d1f7ef7ba17f84108667294b2b478be8ed1af3bffb4ae0018"
        },
        {
          "alg" : "SHA-512",
          "content" : "afd836a1094449e0a791fee67363666c47b6d24acff353a5089b837b332c0f4af89565c354682521e37062d20e6b52d70c77bb4f24cca9b9532c274fc708a831"
        },
        {
          "alg" : "SHA-384",
          "content" : "06c56e6e513dd77cf10d0da46cdea08c34e220e81fa024735b668c6650df4234e564fe865ff5cafea963f56b1e8ffd4a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "f09065ed066c25debf8c78cbb0bcc738e1ea283302ec992dcfb649acb90091cff879465c65a162e94534d454e3b4e9bb"
        },
        {
          "alg" : "SHA3-256",
          "content" : "0b59c567164bb755f2353b78ba66744000a8c4b35e1df05255b080a21c3a3dd5"
        },
        {
          "alg" : "SHA3-512",
          "content" : "f0fbce02a862b70f472a27d0722c54ac111ca2eb94584b8b0b73d1926aec26047cd92542ad0b3cf980a6825077587f41b194aa93d6f6350d1b87e59e8df1be7c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-text"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-parent/actions"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/TEXT"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-text.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar"
    },
    {
      "group" : "com.esotericsoftware",
      "name" : "kryo",
      "version" : "5.6.2",
      "description" : "Fast, efficient Java serialization. This is the main Kryo artifact.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "972ea0c598accd90d33ed5c31bd004b3"
        },
        {
          "alg" : "SHA-1",
          "content" : "c20a8ba517e93cb78001fd64da796f1ac5cd8214"
        },
        {
          "alg" : "SHA-256",
          "content" : "4e8b1d2f4977187af8a51a957329722dc1cdc56a7c94fbb5a791e82897629cff"
        },
        {
          "alg" : "SHA-512",
          "content" : "0095bf5998f1b45c1e2dd25f22af11b619277d544cd9f4a3a355de7f118b5a9312d261c2f70e9b0691f3bec4212dea60dae191c3f1cab939ce7802472ef9f906"
        },
        {
          "alg" : "SHA-384",
          "content" : "b3dc68596ff6341a7cc285fa5db7237c90d46baa2425c20cc1a23686140152c6d0a245881032762e813d70cfdc007364"
        },
        {
          "alg" : "SHA3-384",
          "content" : "80dde34c5740a4a0fa3c2886b289eb3f9e34d2c54ad2e4aa3b025c308f2c35a75e3e3ff8a5e0700f9a7732aa89c12f6a"
        },
        {
          "alg" : "SHA3-256",
          "content" : "b1e7e4ef6c1aa0f4d4aad9cd3434ad003b4b1b0612417538f8da01c87ce81cb8"
        },
        {
          "alg" : "SHA3-512",
          "content" : "cebfb63a44efaadae598d615cd21b8bf67216b3c7b6b5e97a7027026366c8750ce8bd69d39062a5dcc609461896d44def05e8a8e227044951b0d04927b54a966"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/com.esotericsoftware/kryo@5.6.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/EsotericSoftware/kryo/kryo"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/EsotericSoftware/kryo/kryo"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.esotericsoftware/kryo@5.6.2?type=jar"
    },
    {
      "group" : "com.esotericsoftware",
      "name" : "reflectasm",
      "version" : "1.11.9",
      "description" : "High performance Java reflection using code generation",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "602377b51e9843ef87ed48b790945c3e"
        },
        {
          "alg" : "SHA-1",
          "content" : "fd51ad1705d5e27d8785550172a4ab0cb9b8ad23"
        },
        {
          "alg" : "SHA-256",
          "content" : "712b44da79a5b7f47a28cbfcb3d8ecfc872fae349c48aa4d3e38a5d69956afce"
        },
        {
          "alg" : "SHA-512",
          "content" : "c9386a11540853c965b5821771a0e99e97a5701c27e47c39b23c32fd9dd05af8231bf680541195625839eafb3471b835613a7cc734c616e571ef2f62aef84fc0"
        },
        {
          "alg" : "SHA-384",
          "content" : "f0461aaaa75079737a10ae9f3fcf24e74828715bd4f334140c0a9d68395a84c37c6df81d4d7392ac9e51f8ac253367ec"
        },
        {
          "alg" : "SHA3-384",
          "content" : "9115f84613808dbf555e36ea18f9ca84ddabb76e5f030b6c02132ecc3cc0a529fe501d0548cf768b041a2af5833073fd"
        },
        {
          "alg" : "SHA3-256",
          "content" : "e3a5cea0f269206b22975f9b4d459da5a3d2d903b075ffbedecd307ccaa2cfb5"
        },
        {
          "alg" : "SHA3-512",
          "content" : "8d7e00302607e264e0199db0508771106a291023139307012ee0a7d5a380195494832b6e0087c8892ef70bba290b5a1398194f7ef8e378c8cec8fc385097c870"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/com.esotericsoftware/reflectasm@1.11.9?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/EsotericSoftware/reflectasm"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/EsotericSoftware/reflectasm"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.esotericsoftware/reflectasm@1.11.9?type=jar"
    },
    {
      "group" : "com.esotericsoftware",
      "name" : "minlog",
      "version" : "1.3.1",
      "description" : "Minimal overhead Java logging",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "46908e11b408080d53246e4be44e66db"
        },
        {
          "alg" : "SHA-1",
          "content" : "a406e29d3a44d5f020d7b3218aee6d0952db4f73"
        },
        {
          "alg" : "SHA-256",
          "content" : "5d4d632cfbebfe0a7644501cc303570b691406181bee65e9916b921c767d7c72"
        },
        {
          "alg" : "SHA-512",
          "content" : "9a817f66222f9c612ef863b63ad7c1ccd38f2591d80ab9116e675ec52dfc5bba6989b3499c0c95afa42df762584cf0524dbc5a960b3c5dfb126068e446df0eeb"
        },
        {
          "alg" : "SHA-384",
          "content" : "d0bc3e4b93edc1519e89d7ac4dcb78fd5240c1b3e61cd5f2ba19ad0133bc0e79298da54a7f5011e64be6f12a26a487dd"
        },
        {
          "alg" : "SHA3-384",
          "content" : "995751217162b866f1e69c10607e777a4f5b571fa6c9098bc63933df5754e13e2328b149820c88a30a103fc9d938432b"
        },
        {
          "alg" : "SHA3-256",
          "content" : "a799557343159261e72d72f5762262981c16d0e5aa08b16cbf4b989a912bfe81"
        },
        {
          "alg" : "SHA3-512",
          "content" : "b333a0eab8cbdce12ab2d9163ccb8b8d3c8138b35bcf4ff1c69f79844272a9666771ae5017519d3301b8d98aaff6a6bc8655e4b636d2949d285a0d386f64d1d7"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/com.esotericsoftware/minlog@1.3.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/EsotericSoftware/minlog"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/EsotericSoftware/minlog"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.esotericsoftware/minlog@1.3.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "io.confluent.flink",
      "name" : "flink-file-sink-common",
      "version" : "2.1.1-cp1",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0f3ddd09e2f8acffeb6775bb45504024"
        },
        {
          "alg" : "SHA-1",
          "content" : "19234e56e8de97f64d1e74bc343486cf282b7c9a"
        },
        {
          "alg" : "SHA-256",
          "content" : "8107b7c223ff5828228a8c8e5a8d5210f32a953ccd01cb3a2d86c6892fbfda9a"
        },
        {
          "alg" : "SHA-512",
          "content" : "912ca3331af9a358a08aa1b18bc4c130db31727f0a9441b9988b7de2c3605363162698d31af87155edb7fcaba8fb23c14e219c4fc55d4d3ab8ac86289e73cdca"
        },
        {
          "alg" : "SHA-384",
          "content" : "239fc3b156b3854a3466d23cbabd32bd5afc0971db0bbf3afa4607e897be310e7242266f74179ada80bbe182bc02e5fd"
        },
        {
          "alg" : "SHA3-384",
          "content" : "3608f92c2cff63036b918c6ef9c54b1eaf6cebbb7450b0e48a0245903b44352f4d3194e8ffee77ad87729fe1c8d003e1"
        },
        {
          "alg" : "SHA3-256",
          "content" : "2e3c2987f985dde35915edf98dd34c520bbb5dd735aacdcd64cd5a867d0143b1"
        },
        {
          "alg" : "SHA3-512",
          "content" : "e8d1f8bdf84a33cac2ae6046a902a868a527a0249523ff6ba3caa868db6fbaf5b21a00a3b1392127b7f66d21987881964c655690b16fc6e4d8607c9452b6fa17"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent.flink/flink-file-sink-common@2.1.1-cp1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://flink.apache.org/flink-connectors/flink-file-sink-common"
        },
        {
          "type" : "distribution",
          "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/6eaf7284b1dd84057957aba21b9037030085a3fe"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink/flink-connectors/flink-file-sink-common"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.flink/flink-file-sink-common@2.1.1-cp1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "io.confluent.flink",
      "name" : "flink-runtime",
      "version" : "2.1.1-cp1",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0e0c6b370f7a7205522d5d8d3105abd3"
        },
        {
          "alg" : "SHA-1",
          "content" : "d7a4f21947cb0fa749eb1c32def2e12ebb2fca97"
        },
        {
          "alg" : "SHA-256",
          "content" : "9a06858b3c608310fe4f92e4cfb3def56f7c075a7013996e9240c9059d1d080f"
        },
        {
          "alg" : "SHA-512",
          "content" : "3860cb6940719d8bde05814652ec9faadff83d2c04ceda0c36647272c7a3f08715112bf10bd900d4887aed9f5df4240a7e7d9dc75adebe076bdac07539379ef8"
        },
        {
          "alg" : "SHA-384",
          "content" : "ec097b95e85a4b19b20fc6f22e578fdf1538a98a7c6a9c4b77c3d15c83de1d793d9c874447d7ce20e29366a4f3bc8aa2"
        },
        {
          "alg" : "SHA3-384",
          "content" : "ae12d55c902b7e385c7100f6af113405fb8ee01754efb422986a3f0ded198c7f841b4ea5ea56e5e8f5098c29cb97f767"
        },
        {
          "alg" : "SHA3-256",
          "content" : "62edef505bb9cd9cf58ea69834386200e651cebfb21c3c730045e95b4c545a55"
        },
        {
          "alg" : "SHA3-512",
          "content" : "960904187320cb0b821023210887215765c3cd9b24e8d885a0a033e1135436a83a89ee94489a308c905ac9d0c91c600b16c30a58861d35e11aa2a0902a864e75"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent.flink/flink-runtime@2.1.1-cp1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://flink.apache.org/flink-runtime"
        },
        {
          "type" : "distribution",
          "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/6eaf7284b1dd84057957aba21b9037030085a3fe"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink/flink-runtime"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.flink/flink-runtime@2.1.1-cp1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "io.confluent.flink",
      "name" : "flink-datastream-api",
      "version" : "2.1.1-cp1",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "bae682c6c5345362b0437b609438c7f3"
        },
        {
          "alg" : "SHA-1",
          "content" : "eb83c150bf1fee462e8acfdfad5337cd00a6f37a"
        },
        {
          "alg" : "SHA-256",
          "content" : "cd6bcc12057e82831cd18afb004f58694581e8a07372457ca70ccda55978f830"
        },
        {
          "alg" : "SHA-512",
          "content" : "3d696e70b911444e7e9d38b2b3e846f6a792d569d618d68e95afa0d375ad9513a1f86607d0b748b6825ccede820b9e7a931b37b6d75ec5b07632c7a6259d50ba"
        },
        {
          "alg" : "SHA-384",
          "content" : "4c91e14857c7002cadc91f01491964fc9f6512691cb4c88e0f160b265f47813f1cc1feb24884a677cd3e15cace8ca4b0"
        },
        {
          "alg" : "SHA3-384",
          "content" : "c8b8d706c396f47481d11fa36c2803683e891ec859f5c98fcd23d69fa385424fbda10686bc83f7799fc776a9a14b3216"
        },
        {
          "alg" : "SHA3-256",
          "content" : "88202b7d7a91885b81f2c60dca60da0571973d4825d8fd779915551c35432ecc"
        },
        {
          "alg" : "SHA3-512",
          "content" : "df8c0270ef99ae27810ce11302e7f82efc07ad9467db79f45be272126f9bc5d44ec281295482bc3b2d3db91b3c1550c7911aaed921b15a2970534cc1d5ea72e8"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent.flink/flink-datastream-api@2.1.1-cp1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://flink.apache.org/flink-datastream-api"
        },
        {
          "type" : "distribution",
          "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/6eaf7284b1dd84057957aba21b9037030085a3fe"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink/flink-datastream-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.flink/flink-datastream-api@2.1.1-cp1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "io.confluent.flink",
      "name" : "flink-rpc-core",
      "version" : "2.1.1-cp1",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "60b0fb7898a30e3d54563e9e1f809d62"
        },
        {
          "alg" : "SHA-1",
          "content" : "35cbae5b970b11f415fb0efb043dd97161c4556d"
        },
        {
          "alg" : "SHA-256",
          "content" : "364161eab4cc0bd527f19e5e8b465caa46289cb34c21481322894d5113fbe376"
        },
        {
          "alg" : "SHA-512",
          "content" : "edeb5c7cfe853bae7469968cfe113cc1c26a790d4ba0ab0f4d2a5435aecd36319c99ab890166bd502517aca4413feb37a70dcbc457a197c3c01e44e69bb2051b"
        },
        {
          "alg" : "SHA-384",
          "content" : "12c3af86d142a7b356664d70cf93da3bf34c3e40433c56bcfbf408736a32168f2efbf95a050ce1d1c268c3a95320e745"
        },
        {
          "alg" : "SHA3-384",
          "content" : "9ccd029ccaaa293ba618dbfbf08443a1234dac77ee435362d981cfda3edf52a765830451e77a7633eb5884a33ec5ba6e"
        },
        {
          "alg" : "SHA3-256",
          "content" : "68bfca4908285011c1036254004d1a6f5a06a13d17e313038fc8520aa913f238"
        },
        {
          "alg" : "SHA3-512",
          "content" : "bc03a7ff5ef52a11c0ae36cc7a317cfbadce710446b657ad7c3b128bed70637d0af83944196172f469f858a76dac3661897af31be697035694277934c3fe15e0"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent.flink/flink-rpc-core@2.1.1-cp1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://flink.apache.org/flink-rpc/flink-rpc-core"
        },
        {
          "type" : "distribution",
          "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/6eaf7284b1dd84057957aba21b9037030085a3fe"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink/flink-rpc/flink-rpc-core"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.flink/flink-rpc-core@2.1.1-cp1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "io.confluent.flink",
      "name" : "flink-rpc-akka-loader",
      "version" : "2.1.1-cp1",
      "description" : "This module contains the mechanism for loading flink-rpc-akka through a separate classloader.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "ef357b0daf019adf5cbf1c2015d43fc1"
        },
        {
          "alg" : "SHA-1",
          "content" : "108a781e5215152aa944def5a95a8c211551dc72"
        },
        {
          "alg" : "SHA-256",
          "content" : "b7fa00e75d6381a8fb5ef5d3613df49cbf9ea2158e4c5ae1bae7f804eeb243e4"
        },
        {
          "alg" : "SHA-512",
          "content" : "fb575c952a113f4698fa188f45ec372a636c1e081a00d5ad2ca3e2e9f7047702b4f077a68395d3570405e3843b19ee684d0854e734e2c0df4d7dd75408180d8c"
        },
        {
          "alg" : "SHA-384",
          "content" : "7d706cc58ca3955bf044b9c8fe240cd037f15a343ac997e6ed424172b33717e247b7bc51b2bc53f30848538ea4753161"
        },
        {
          "alg" : "SHA3-384",
          "content" : "0627eeb19bfb0bfae3de8dff088ca25fd497226906363cfbb1685d38e3346e32856d6562adacac7688e74acec2cffce0"
        },
        {
          "alg" : "SHA3-256",
          "content" : "ccfa4285724b0eb9108d995e4ad8fe19e61f1893db3f62e24d05c1b395276156"
        },
        {
          "alg" : "SHA3-512",
          "content" : "0cf88b5e3e4228bc8bd90c93cacc44ed65f66b2821803fbd5dcb160bc06560fab71f8836c0474abd4b58373e742e50727a0c7f4d3427c21f474df7a9eb3d5c94"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent.flink/flink-rpc-akka-loader@2.1.1-cp1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://flink.apache.org/flink-rpc/flink-rpc-akka-loader"
        },
        {
          "type" : "distribution",
          "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/6eaf7284b1dd84057957aba21b9037030085a3fe"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink/flink-rpc/flink-rpc-akka-loader"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.flink/flink-rpc-akka-loader@2.1.1-cp1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "io.confluent.flink",
      "name" : "flink-queryable-state-client-java",
      "version" : "2.1.1-cp1",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "c8136e30e9301fa12561e3aa28c3440c"
        },
        {
          "alg" : "SHA-1",
          "content" : "9b58c922d8a5d682f7bdac31438a5f916f2a946f"
        },
        {
          "alg" : "SHA-256",
          "content" : "e34636724717d04401c28d448f417fa653349609c4b27a59f9db22ac0b51e063"
        },
        {
          "alg" : "SHA-512",
          "content" : "fb4399ae554ebdd467bc6624bafbbb7791137411e15d9e46ec01a9eb47c07fa6b6145ba165f0d91291aba24aa5ac9135dae78744dd318abd354681b39957abbf"
        },
        {
          "alg" : "SHA-384",
          "content" : "b63e000e8cb835591d3c800ca2b3adb4649f21c3d1eeef11cfc4d143be24274048cf4dd2e5ba4e015dc0498198de2202"
        },
        {
          "alg" : "SHA3-384",
          "content" : "03740b2315688f92a83cf6d383f94ba337cef302c73d79b14b45604b33f7fa3266cc91b26ba910eb08e7553616ed3150"
        },
        {
          "alg" : "SHA3-256",
          "content" : "201b4a8b753d75401b1b4c86a3d81c83755a46e277f331b1a73b0bb4980645a2"
        },
        {
          "alg" : "SHA3-512",
          "content" : "41e37ebce286d4081af85adeadce5c9b509536d1a980e0e913df8ef1fa168c718753d38ef8a0a253492156994f4524f0cd53d8d0e824d9d15bd400b5b297671a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent.flink/flink-queryable-state-client-java@2.1.1-cp1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://flink.apache.org/flink-queryable-state/flink-queryable-state-client-java"
        },
        {
          "type" : "distribution",
          "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/6eaf7284b1dd84057957aba21b9037030085a3fe"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink/flink-queryable-state/flink-queryable-state-client-java"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.flink/flink-queryable-state-client-java@2.1.1-cp1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "io.confluent.flink",
      "name" : "flink-hadoop-fs",
      "version" : "2.1.1-cp1",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "3b578879d8b67b2c8d9d3692f8b49d6f"
        },
        {
          "alg" : "SHA-1",
          "content" : "aa5d8382aae9b13742f6db5228eef79352451291"
        },
        {
          "alg" : "SHA-256",
          "content" : "60e43711f48f96aba59e6ea16e105ae64240d88bf7496cdf7dc7b69b9236d220"
        },
        {
          "alg" : "SHA-512",
          "content" : "9880ee379c171a3806f3c347ee225cb59cd0fca9c3d51d2841bbe5c37a87219709a6ef19ecfd655d2f2690cff24f6ca5d4a06a0d8c7c7cbedcaa3424b573ee32"
        },
        {
          "alg" : "SHA-384",
          "content" : "7e3533c79d8599c7292dfddf9e78ca28eeba0f8e33c84497abf08e40befa1d2a98b30968b4a4a8d2f6b4688e6787d414"
        },
        {
          "alg" : "SHA3-384",
          "content" : "da9ea88ad388dbf0d13c95a1d76bcd85988c7b77bedfa168b8263262a80ec3223197f3ec1636e695c75cbd5db12703d1"
        },
        {
          "alg" : "SHA3-256",
          "content" : "038498c11b66af3e4c6af5b2a44a8b74f85792ad51b211481de79f1276c571b6"
        },
        {
          "alg" : "SHA3-512",
          "content" : "2305a578996fe98392ab73d501573b1c8b5719655b60100f409469ba988a1df3a368cdd5ae5fb3d423b850e20ae0f81d6ffd5859169c26c7c8a7a713a720025e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent.flink/flink-hadoop-fs@2.1.1-cp1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://flink.apache.org/flink-filesystems/flink-hadoop-fs"
        },
        {
          "type" : "distribution",
          "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/6eaf7284b1dd84057957aba21b9037030085a3fe"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink/flink-filesystems/flink-hadoop-fs"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.flink/flink-hadoop-fs@2.1.1-cp1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.flink",
      "name" : "flink-shaded-netty",
      "version" : "4.1.100.Final-20.0",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6a86015758a9e48ecc6ca96620a2ba0b"
        },
        {
          "alg" : "SHA-1",
          "content" : "5880d365f7577f96bdbf29b8bca9cc645a5bd3e5"
        },
        {
          "alg" : "SHA-256",
          "content" : "dfe49f4e089640d8527814d85cd441d4f90b564996d81e5c905b0d282d5f1a21"
        },
        {
          "alg" : "SHA-512",
          "content" : "99914cf4ffc9804d41431d483521fdf054667e64c0d9f541a26e1fa48fd754fd3124c0e94063b09a3b4bb79de1d2e1ac0fa0dbaff66a9cfd681a2171d3d08518"
        },
        {
          "alg" : "SHA-384",
          "content" : "3105c95b13e444f2119d583ec3ed314f779016be39c30782000f1efafe8a43e5fd598a07235576a8db27dd34ee6ef158"
        },
        {
          "alg" : "SHA3-384",
          "content" : "06d8ee7b6da1cc62812c3ac7a5cbe0c6ca3e7db90e889ba7420c4c53ec42dddc60a652267f46c7d6fd2b192174a475eb"
        },
        {
          "alg" : "SHA3-256",
          "content" : "1e47d716f7d480bae32f9306725568c0dea2a70a690732c63d294c191ce5f693"
        },
        {
          "alg" : "SHA3-512",
          "content" : "5c9daa7dc98338fc5b6203f05264c114fc062fdca36d58cdf7588aaa20a51f230402fd66a5b607ffe1bc00d42d45613ebf23a66456787cfb33da31f5c15efe09"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.flink/flink-shaded-netty@4.1.100.Final-20.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://flink.apache.org/flink-shaded-netty"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink-shaded/flink-shaded-netty"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.flink/flink-shaded-netty@4.1.100.Final-20.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.flink",
      "name" : "flink-shaded-zookeeper-3",
      "version" : "3.7.2-20.0",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b8673fa6ea6ce217e3855ca9a32b7c9f"
        },
        {
          "alg" : "SHA-1",
          "content" : "b474fe27c9304c5cfc949cd0eb24d043a8cd6b26"
        },
        {
          "alg" : "SHA-256",
          "content" : "61dfd759767cc16a6ef78a1e52f6b821e7d6215cfd119a8cd7bc03cfd8c78fef"
        },
        {
          "alg" : "SHA-512",
          "content" : "7ec16eadd7045b7d23823132b8dd74d11eacc41d718ea83253a4e7e851a728ac97808a3ed180ed8096d5fd9e9cf1524959747104970d9460afd799c631681c2d"
        },
        {
          "alg" : "SHA-384",
          "content" : "8e5644159c4a558b1b3632d33ff5fc809196f56467437e73d1e20b53672a3f81ec44d0e6bb8552f40ef2fa97dd9e148f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "bc83b24ee13565961b5b6d6a691b5328bd0190cc7a6e229670fc676a7955bad00ddc04a46e8e34cd705e0177c3feecbc"
        },
        {
          "alg" : "SHA3-256",
          "content" : "70efea4398eb000699b84d917956ba0820f97ad862f5f9c19a5c7da2e3c2c26b"
        },
        {
          "alg" : "SHA3-512",
          "content" : "4e002463cd82ada7136dbe0a3f83c754d361540c29bef54c78edd105ad18cc05fc89cd3fe795664dc9cc35b8eb07728b9a27b943b275dc6c866677f1c93d5570"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.flink/flink-shaded-zookeeper-3@3.7.2-20.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://flink.apache.org/flink-shaded-zookeeper-parent/flink-shaded-zookeeper-3"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink-shaded/flink-shaded-zookeeper-parent/flink-shaded-zookeeper-3"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.flink/flink-shaded-zookeeper-3@3.7.2-20.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "io.confluent.flink",
      "name" : "flink-connector-datagen",
      "version" : "2.1.1-cp1",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "608dd7e83ffb02dafedc3b46323c1304"
        },
        {
          "alg" : "SHA-1",
          "content" : "b5c66a05d0a9c4a213817e5228f812e8f24f7966"
        },
        {
          "alg" : "SHA-256",
          "content" : "febc435bc3cea03341b929e5c777731c3395c6d0af27d90cb2595ce0dd0f0478"
        },
        {
          "alg" : "SHA-512",
          "content" : "cce1eb03871a8c95c296e7c14ea3e11c8a0463a94deba37d6db8e46e10138f1187cc8f9f6403a729e078ada2a098069ac49c6c0ec7ec2281995bdafad0677f12"
        },
        {
          "alg" : "SHA-384",
          "content" : "498323f493bd665ddd2b378d49d78cf25e74e052b4f170b384509a39acaea59a97b57e2004585fc5f282824a5b959320"
        },
        {
          "alg" : "SHA3-384",
          "content" : "1b3109ac124017604b61c51d06dece1f9df6bd8ce22b6f099b2ed111c05b76129f8f3a5d219208630edb5e434582b220"
        },
        {
          "alg" : "SHA3-256",
          "content" : "d4cbbf5dd89a1ca298566e8ca219d6210b91a01294cf3fe1595dfc2e4796f34c"
        },
        {
          "alg" : "SHA3-512",
          "content" : "0513175b1f84052a15b77fbf8b61296d21d2e9b248480329ac0364d8b948c00f57f8c0161eda5bd10d1300f22f50043734b9e953fba9c099c61834381e8cd4dd"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent.flink/flink-connector-datagen@2.1.1-cp1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://flink.apache.org/flink-connectors/flink-connector-datagen"
        },
        {
          "type" : "distribution",
          "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/6eaf7284b1dd84057957aba21b9037030085a3fe"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink/flink-connectors/flink-connector-datagen"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.flink/flink-connector-datagen@2.1.1-cp1?type=jar"
    },
    {
      "publisher" : "Shigeru Chiba, www.javassist.org",
      "group" : "org.javassist",
      "name" : "javassist",
      "version" : "3.24.0-GA",
      "description" : "Javassist (JAVA programming ASSISTant) makes Java bytecode manipulation simple. It is a class library for editing bytecodes in Java.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "23fd22d0d089ddfac567a39ce0cb1a91"
        },
        {
          "alg" : "SHA-1",
          "content" : "d7466fc2e3af7c023e95c510f06448ad29b225b3"
        },
        {
          "alg" : "SHA-256",
          "content" : "aba81efa678b621203fb89aeff81d6f126f7a9dd709401e5609c42976684ae23"
        },
        {
          "alg" : "SHA-512",
          "content" : "e57dad74a3edef837ece841d06e4a7c96ffecab8fbcba56fe5f7eccd662f0c0d757880a6073793a8c75ad7a0a1d146346b75cdbfe4fd8a271048a54446e5d1a2"
        },
        {
          "alg" : "SHA-384",
          "content" : "4867afdb7522b3dbfa10a51264ac6c15a2a8083d16c8dbef318275d24687768f35130b1c17d8407ca8ecf855abd83dff"
        },
        {
          "alg" : "SHA3-384",
          "content" : "a52be891987d4fc7d319e6417e0cd9a28f189d8623b803d72b5429e118da73b9937899231825e793d37b434d7522d283"
        },
        {
          "alg" : "SHA3-256",
          "content" : "0cf8db7d2a5f7e1a70827538cb4b0b446fcc239f05ca55d9bf8f2a50f1e08af3"
        },
        {
          "alg" : "SHA3-512",
          "content" : "ed9675f9f070203801eb762092ac99636d376b7ef563f99508283006a65a0d2dfce38e1ba7ff2ccfebcede0376ba0724b76b459ca112477234aed8208807f785"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MPL-1.1"
          }
        },
        {
          "license" : {
            "id" : "LGPL-2.1-only"
          }
        },
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.javassist/javassist@3.24.0-GA?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.javassist.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.jboss.org/nexus/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://jira.jboss.org/jira/browse/JASSIST/"
        },
        {
          "type" : "vcs",
          "url" : "scm:git:git@github.com:jboss-javassist/javassist.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.javassist/javassist@3.24.0-GA?type=jar"
    },
    {
      "publisher" : "xerial.org",
      "group" : "org.xerial.snappy",
      "name" : "snappy-java",
      "version" : "1.1.10.7",
      "description" : "snappy-java: A fast compression/decompression library",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "d74bb2e2857f965683c9de931b71fc86"
        },
        {
          "alg" : "SHA-1",
          "content" : "3049f95640f4625a945cfab85715f603fa4c8f80"
        },
        {
          "alg" : "SHA-256",
          "content" : "4c766cb3f855415ee734b2392949a0b6f12a60879334a74518deaf6270d32e36"
        },
        {
          "alg" : "SHA-512",
          "content" : "22a6ebb8e8ad4d8a149b0c67d8658ac1535d7014857064c4f7ed4999e29c6186de8a80b50dd9b59f631fa1c24970524fdbbb84083c80c59eb0c72d4efb041fef"
        },
        {
          "alg" : "SHA-384",
          "content" : "b7ea971de5e286b4bdb8b96063f0ffe611ef82f5887fa6845fc2721bf0e71a88b0c754ba010816596f0b6c178160c0c5"
        },
        {
          "alg" : "SHA3-384",
          "content" : "9ef6c5ad194027c8b4be0f756dfeb958ae3daa5ad942b34c4e9e570ce7516ba91fad298929e4d716f6a091d0b274bbc9"
        },
        {
          "alg" : "SHA3-256",
          "content" : "83f4ede80f49271566745463652e3cdebbe4e2112174400ddf082bf9b39d09cd"
        },
        {
          "alg" : "SHA3-512",
          "content" : "3c1ffb884ac57e812f997357f9501afbffec3aaac2aa2bb87b0dd8ec2e7e43d922c250dfc658920ade2014aa138440d2d9cdfce8e453812d089898d10390a6db"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.xerial.snappy/snappy-java@1.1.10.7?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/xerial/snappy-java"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/xerial/snappy-java"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.xerial.snappy/snappy-java@1.1.10.7?type=jar"
    },
    {
      "group" : "tools.profiler",
      "name" : "async-profiler",
      "version" : "2.9",
      "description" : "Low overhead sampling profiler for Java",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4df6477a255b88e99f2ed4daa3c713cc"
        },
        {
          "alg" : "SHA-1",
          "content" : "4ed20e2a4640ee672e7cf23b1512dbdeb9a4b7e6"
        },
        {
          "alg" : "SHA-256",
          "content" : "6c4e993c28cf2882964cac82a0f96e81a325840043884526565017b2f62c5ba4"
        },
        {
          "alg" : "SHA-512",
          "content" : "60ba593a0cf529397e73e38ef71bc2e5def44f1111a60f40a724ac3472ef7afe92e02a61b0ad18c373122cd92216f49268d335e1150dc3a99ff2431c598aeb5c"
        },
        {
          "alg" : "SHA-384",
          "content" : "65107ddcd2a06b69ac4cdb9bd93452045c4e08b843826666a890816abe0486966599cf6a4b07ff87c5d95e86551bb115"
        },
        {
          "alg" : "SHA3-384",
          "content" : "4989b467a4791464d50c51782ccc60547bfc8105aebc0764656c67405bbd7d023a9d405a1fd864f86dbd186af8624928"
        },
        {
          "alg" : "SHA3-256",
          "content" : "225998977421a87839be6c09f49f9ebd972b063a65f53d374e61fc3d68416ca4"
        },
        {
          "alg" : "SHA3-512",
          "content" : "723c0651f61ae6a119624b11bc9d3959ae44de0bcef51f0a341c5d7ebdc6a0e677f3c43399db9a4a657334f46a1092ee55d45f92344b7e31e6e26669ffe41823"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/tools.profiler/async-profiler@2.9?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://profiler.tools"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/jvm-profiling-tools/async-profiler"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/tools.profiler/async-profiler@2.9?type=jar"
    },
    {
      "group" : "org.lz4",
      "name" : "lz4-java",
      "version" : "1.8.0",
      "description" : "Java ports and bindings of the LZ4 compression algorithm and the xxHash hashing algorithm",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "936a927700aa8fc3b75d21d7571171f6"
        },
        {
          "alg" : "SHA-1",
          "content" : "4b986a99445e49ea5fbf5d149c4b63f6ed6c6780"
        },
        {
          "alg" : "SHA-256",
          "content" : "d74a3334fb35195009b338a951f918203d6bbca3d1d359033dc33edd1cadc9ef"
        },
        {
          "alg" : "SHA-512",
          "content" : "98d59086a6021ca571d9c1d64b715e43044c730e1ac563f514c40cf44302615d30378b6d5cc69990446522de6260dc8e7b303e3990a3139dc326d058dfb6dbd9"
        },
        {
          "alg" : "SHA-384",
          "content" : "8e3f2acdbb41a00c4d9cc5f328e63fb626ac7c6c84e1bf9502e2fcc76a591b2b819b2d27b29925ff986b95c297b30e2c"
        },
        {
          "alg" : "SHA3-384",
          "content" : "ec0d6a00760d0a4ecba13a41785d6ae57a64552b1687eaa3e292b3054bb1348e49ab8a938197ff126f9218c6cb96ee1c"
        },
        {
          "alg" : "SHA3-256",
          "content" : "7be684c102891105f66d378b61ea1297a392c1618b5aebf7e0b281f55217c206"
        },
        {
          "alg" : "SHA3-512",
          "content" : "0b2294570ea2bfbb50ced21dfa4bad956467ca447e9ab2dd602a3478371bcd0e9f13d2dff74d06827a28882409612cdde00bd91267be05bd3510c68268bf3166"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.lz4/lz4-java@1.8.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/lz4/lz4-java"
        },
        {
          "type" : "vcs",
          "url" : "git://github.com/lz4/lz4-java.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.lz4/lz4-java@1.8.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.flink",
      "name" : "flink-shaded-guava",
      "version" : "33.4.0-jre-20.0",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b96c87d90072d083a2909c4c03cfab36"
        },
        {
          "alg" : "SHA-1",
          "content" : "470ecb733c2f6dbd89585a255f348957cf46421b"
        },
        {
          "alg" : "SHA-256",
          "content" : "eb7161b07cd21a0a0cf40f26914fe0601c06f4bbb65e9560d78b2463d97b0c34"
        },
        {
          "alg" : "SHA-512",
          "content" : "78359308db382fa96af50dd5d50322eaeeef96e88807c77d0d62d5df892bfc026e050ecc4cc8b9c30c270551f797d6d6f31e25ec5076767282bf949980378530"
        },
        {
          "alg" : "SHA-384",
          "content" : "982cd6bc823bb9be9e03513bee13027ee5615787bbdbce4a26642917fe64f73081d5aabe3ffbc6941a9f367701bab993"
        },
        {
          "alg" : "SHA3-384",
          "content" : "e2b81e5d09916f4024423b81ed570ce83146269b6936b2a6fea8bc5f014c81deec70cecd8a978845cf2a4781aebbcc0e"
        },
        {
          "alg" : "SHA3-256",
          "content" : "a9c31cf8335b25ad7a76c1a1bb340f4809624fdce3a00ab77857658218ad7707"
        },
        {
          "alg" : "SHA3-512",
          "content" : "9d1b646067ae8172b72be8be0bdcadd1487a1b51fae089dc5cdd2c2759dc9ec314c5fae34a2a918b1edba30b1b196f22f2d39d3e6b40fe12b2824e541b2f9545"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.flink/flink-shaded-guava@33.4.0-jre-20.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://flink.apache.org/flink-shaded-guava"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink-shaded/flink-shaded-guava"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.flink/flink-shaded-guava@33.4.0-jre-20.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-math3",
      "version" : "3.6.1",
      "description" : "The Apache Commons Math project is a library of lightweight, self-contained mathematics and statistics components addressing the most common practical problems not immediately available in the Java programming language or commons-lang.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "5b730d97e4e6368069de1983937c508e"
        },
        {
          "alg" : "SHA-1",
          "content" : "e4ba98f1d4b3c80ec46392f25e094a6a2e58fcbf"
        },
        {
          "alg" : "SHA-256",
          "content" : "1e56d7b058d28b65abd256b8458e3885b674c1d588fa43cd7d1cbb9c7ef2b308"
        },
        {
          "alg" : "SHA-512",
          "content" : "8bc2438b3b4d9a6be4a47a58410b2d4d0e56e05787ab24badab8cbc9075d61857e8d2f0bffedad33f18f8a356541d00f80a8597b5dedb995be8480d693d03226"
        },
        {
          "alg" : "SHA-384",
          "content" : "95d1186d9ca06a3ea2e6437ddec3a55698e2493d3e72f6f554746b74fa929892bd71a2ab501a4e7b1ce56b7cd64e7ab4"
        },
        {
          "alg" : "SHA3-384",
          "content" : "f85bb3e46a00fc4940a3be1331301302b0eb728e2d1fe2c1842d4761e5a0bc7a420c0c705ae60250ca1c7b03d3694b9e"
        },
        {
          "alg" : "SHA3-256",
          "content" : "919c15ae4b1aef2a58aa6ea4b700bc5562e78dbc382f3393169425ca91ad368c"
        },
        {
          "alg" : "SHA3-512",
          "content" : "dbe54d586c898cdbd7df6c31c131ca3525db17fcea5c7f5da8cbfe617e2afc667289290c76771ec5c9567a56fb2b177b0a31d67abcc656410c90287da4d88999"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-math3@3.6.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://commons.apache.org/proper/commons-math/"
        },
        {
          "type" : "build-system",
          "url" : "https://continuum-ci.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/MATH"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://git-wip-us.apache.org/repos/asf?p=commons-math.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-math3@3.6.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "io.confluent.flink",
      "name" : "flink-table-common",
      "version" : "2.1.1-cp1",
      "description" : "This module contains extension points of the Table/SQL API. It allows for implementing user-defined functions, custom formats, etc. with minimal dependencies.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "3867bb0345fb08cbe23b9324e0583a79"
        },
        {
          "alg" : "SHA-1",
          "content" : "eaa00b29f6dd2b93bde5502b894623719b368717"
        },
        {
          "alg" : "SHA-256",
          "content" : "3084e95325e08bb9d6a9f9ad8e0dc2ddc0fbca4a72a17de4a18990a2f7da464c"
        },
        {
          "alg" : "SHA-512",
          "content" : "701ae96eac0fcc8bf17bab7fb6a5945c31fcae65e5a30e843d23ddca7bf61c569ce01097e51f88a69b0c8f8a31cf59f0f49282270ac1b49fee02b6076cfbc9a0"
        },
        {
          "alg" : "SHA-384",
          "content" : "5d0db01e79b3ae981f990820d2605bfffd90b5e7fd0761981e88e35b30b76e727ca371f8bc07ad807bc5b7d46d9fbb81"
        },
        {
          "alg" : "SHA3-384",
          "content" : "7b1425fbf909c445796725643eb85a72e984898350e94bda968cea5e3fc55b37f138c9b395e7fb2403b6c032c770126c"
        },
        {
          "alg" : "SHA3-256",
          "content" : "2aa1e5c2089fc5da6f1503e7f514bf41c8507b7d75f10590562bf314fd886c6f"
        },
        {
          "alg" : "SHA3-512",
          "content" : "8064a65bb5db36a2c37186f8f0861a90900aecbb6be715becdc96055982f80a55bd673a9b69c61aa1eb93fc2f98a0f4510b7ac5f2ad00611d2dee2994403763a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent.flink/flink-table-common@2.1.1-cp1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://flink.apache.org/flink-table/flink-table-common"
        },
        {
          "type" : "distribution",
          "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/6eaf7284b1dd84057957aba21b9037030085a3fe"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink/flink-table/flink-table-common"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.flink/flink-table-common@2.1.1-cp1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.flink",
      "name" : "flink-shaded-asm-9",
      "version" : "9.6-20.0",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a4a5c6b334d66e9da09de1898229fa87"
        },
        {
          "alg" : "SHA-1",
          "content" : "a525b5d84cd529973633605dee9452512d5d3299"
        },
        {
          "alg" : "SHA-256",
          "content" : "d2cd34487ee0e67e2a4ccd4d30b73f8ffc09e33b43dcad10a8797815c2ebcca0"
        },
        {
          "alg" : "SHA-512",
          "content" : "1d99a84254fcc5631bc90575d2da3dc6b3471c6d3be3c4bf4d95e053f04e230425fd4a4ef4a2c9c9f23633f7c1a8893e63e7b3960cb32ead5820997e02e13ebf"
        },
        {
          "alg" : "SHA-384",
          "content" : "15e383b500f480560b0a7e543be678014868937bab6624125360e63242a6fe8a13dd51e1d5a7ece5ab33a729714cc30f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "bf558740e47de9f6a88876428db7306e272901ec420950ca494451bae2f5c99a38247a7c856df996a60d016f7aa1ad9d"
        },
        {
          "alg" : "SHA3-256",
          "content" : "804c5c1de76a4d49b5fac3383196729db86367405a287e02127c21e5d185ce7a"
        },
        {
          "alg" : "SHA3-512",
          "content" : "a4aae40c0aa2b6b097fb41feba6a3b248cbdf7d03cf25cc47454395fdc39b28b76c774fcb7b55f51a5b8de875496168f7f1d8a1ad961166a8523a3771f2418d2"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.flink/flink-shaded-asm-9@9.6-20.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://flink.apache.org/flink-shaded-asm-9"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink-shaded/flink-shaded-asm-9"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.flink/flink-shaded-asm-9@9.6-20.0?type=jar"
    },
    {
      "group" : "com.ibm.icu",
      "name" : "icu4j",
      "version" : "67.1",
      "description" : "International Component for Unicode for Java (ICU4J) is a mature, widely used Java library providing Unicode and Globalization support",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "046a5f59abf6b67a464dea584d11e59d"
        },
        {
          "alg" : "SHA-1",
          "content" : "2e159807158095566726600534034030dddab6d0"
        },
        {
          "alg" : "SHA-256",
          "content" : "c4eb904caf5fba968a2f1a3b8aef14df801e9329b21697209ca30bfcf153867d"
        },
        {
          "alg" : "SHA-512",
          "content" : "b3036b162356a0a5dad39eee611dae27c6fbe53f9e5ec1f3529ab02d49d97093b58602f43dd855433a0bbe02f6253e46a9d1899911c8e2e73001ab2c9a79d68d"
        },
        {
          "alg" : "SHA-384",
          "content" : "c2b28649d0ef9bf68f258a9f432c627a553ead79670f0a7ada3d986091a0001c5ab9eca372f792734bff733370a61fb1"
        },
        {
          "alg" : "SHA3-384",
          "content" : "3726bfa8b77bd0cdd66564944044d82dca3ee1fcf2594ebf1a7acc6752faf4c11892a1744af27e5528dc4b991e4cd0c0"
        },
        {
          "alg" : "SHA3-256",
          "content" : "cb19cec2baad1dc610267b2c98325f5c742230caf2247ef6297dfe8d9be9f11d"
        },
        {
          "alg" : "SHA3-512",
          "content" : "f46e4ead1cc1c05c3825716485ce79c890500a5356f8e7ca578f3080c09fb2460fb1aed81d65d345c402706906ea4e96afc0ff03c50fb0ac5bbacd351a8f11ec"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "Unicode/ICU License",
            "url" : "https://raw.githubusercontent.com/unicode-org/icu/master/icu4c/LICENSE"
          }
        }
      ],
      "purl" : "pkg:maven/com.ibm.icu/icu4j@67.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://icu-project.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://unicode-org.atlassian.net/projects/ICU"
        },
        {
          "type" : "mailing-list",
          "url" : "http://sourceforge.net/mailarchive/forum.php?forum_name=icu-support"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/unicode-org/icu"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.ibm.icu/icu4j@67.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "io.confluent.flink",
      "name" : "flink-connector-files",
      "version" : "2.1.1-cp1",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "72bc9acad16c5aa356b722c7d72a41a8"
        },
        {
          "alg" : "SHA-1",
          "content" : "101cb6aa87097889fbf8d88e4ee1e582026cc454"
        },
        {
          "alg" : "SHA-256",
          "content" : "2a219c5c442ed9097f07bef2960ebd6ca3e5121c9de3d128cd0c0277bde252b0"
        },
        {
          "alg" : "SHA-512",
          "content" : "585591fa8583048be3c2aab4df1b20fede739bc4e417fcf7dcfe704d4ee1e2ce13ca94b2a88754933b1e0d7e3601f37cb23c64db08fb3dccfb902127db02d11a"
        },
        {
          "alg" : "SHA-384",
          "content" : "7475fd074fb7d333881599f9d4ad2ccfb3103a5a6965bebd28bc580ec9e9dbef1cca0a4b877b10a762554ee74d22fad8"
        },
        {
          "alg" : "SHA3-384",
          "content" : "873b91436665210504cc06b50f0df166bfa9d02ecb467077a216aba92b38b159ae0d148600525c401b69e8c2de32e283"
        },
        {
          "alg" : "SHA3-256",
          "content" : "3b4fb27bfe37161c99b00719c4b0d6c6ef41506833a7ccd0a92d7fa4d5deb491"
        },
        {
          "alg" : "SHA3-512",
          "content" : "fcd82533c7abd82e6e01f4700de123a1228f770a4563e0b36567c37e4c79409a15a105fb682e1b3afb50c454c15a1b542c32f75ab9d275635677e2153de76031"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent.flink/flink-connector-files@2.1.1-cp1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://flink.apache.org/flink-connectors/flink-connector-files"
        },
        {
          "type" : "distribution",
          "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/6eaf7284b1dd84057957aba21b9037030085a3fe"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink/flink-connectors/flink-connector-files"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.flink/flink-connector-files@2.1.1-cp1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.orc",
      "name" : "orc-core",
      "version" : "1.5.6",
      "description" : "The core reader and writer for ORC files. Uses the vectorized column batch for the in memory representation.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "252e39ceb4b752a88e34eec3b96f6c68"
        },
        {
          "alg" : "SHA-1",
          "content" : "f9ccd73bb7fc3c69c8f0af59942d9b7df09a569f"
        },
        {
          "alg" : "SHA-256",
          "content" : "abc6efb4e33583ffc11c7e9938c2f4b48190e3b0bea9a2c82465aa25eff903ed"
        },
        {
          "alg" : "SHA-512",
          "content" : "b610205e34e8876d8bbe6c37e1b9d5a8446b90cfe6d85ea6ea09cc4eede18676a2b3c7f14921765f975f85470a8d56d1e58e268eaf04ea0f940afebd3d18bdcd"
        },
        {
          "alg" : "SHA-384",
          "content" : "7e5ee63aad151c157a7ad66bbfc2e1166092b88f2dad94cafecb54d3ebef6167891bba348376199f43385fd1b66bcb65"
        },
        {
          "alg" : "SHA3-384",
          "content" : "57016fa871e6b391f627f0f257cbacab804fc3eb5df766009b4088f2c7c3d9653ba7fffc3b7a2ab06884ec3fe66ed774"
        },
        {
          "alg" : "SHA3-256",
          "content" : "6e744cc8d7ff848876c1b29f1171f49c4fa2742ac0358220fe7d7afd755aaaea"
        },
        {
          "alg" : "SHA3-512",
          "content" : "fa03520f59fc3ba33bc2bcdbac4595f4019369dbe3dc9c373638def5516d35304777f5fe9244657c8eeac71a4ad71173abe3f6a11374294b01d793d5047882fa"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.orc/orc-core@1.5.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://orc.apache.org/orc-core"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/orc-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://svn.apache.org/viewvc/maven/pom/tags/apache-18/orc/orc-core"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.orc/orc-core@1.5.6?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.orc",
      "name" : "orc-shims",
      "version" : "1.5.6",
      "description" : "A shim layer for supporting various versions of Hadoop dynamically. This module uses a higher version of Hadoop so that we can create shims that let us use new features of Hadoop without having a hard dependency on the latest version.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "2b8507183e5eac1cb7bdb1ebeae20a28"
        },
        {
          "alg" : "SHA-1",
          "content" : "03e86861e74e80d1f5dcb55182e2466da86369d4"
        },
        {
          "alg" : "SHA-256",
          "content" : "c85e474f3a3a388c467e5056ed23de5c8a23e6e353bbc132ac9e3c5b84e82370"
        },
        {
          "alg" : "SHA-512",
          "content" : "c4c57aedd6a51b346fca6730e1f36c9ae61f847c060e70862ba1267136a3d47676998c7e62bf6f891a13c5ac9b695f5095cd27bc3608fe17b9f5cb14670f766f"
        },
        {
          "alg" : "SHA-384",
          "content" : "294d23be9b554505ccbb637459614b513b8a2b57caded1cea7e4833cf165e95e17b968b9e52b73d75a63a421f718089c"
        },
        {
          "alg" : "SHA3-384",
          "content" : "51cafa20e5124ab3893a7e934416feb5b0ed5644bdf512179a355a279f49a8180b396491431152fb367eeae0213273dc"
        },
        {
          "alg" : "SHA3-256",
          "content" : "f5ebf59da929538c04b729a6c2f170c70b27a712a38ea7d4a7c09d30cfa2efaa"
        },
        {
          "alg" : "SHA3-512",
          "content" : "5cd669de11fd190c5d00363249b9ca2233704f9dc9d4366d9da1c105c0bcd2490bfe8bb719837d947ae57491cf040db1fa0996e5e53e58ebe13b9dff2bf9013e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.orc/orc-shims@1.5.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://orc.apache.org/orc-shims"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/orc-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://svn.apache.org/viewvc/maven/pom/tags/apache-18/orc/orc-shims"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.orc/orc-shims@1.5.6?type=jar"
    },
    {
      "publisher" : "Google",
      "group" : "com.google.protobuf",
      "name" : "protobuf-java",
      "version" : "2.5.0",
      "description" : "Protocol Buffers are a way of encoding structured data in an efficient yet extensible format.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a44473b98947e2a54c54e0db1387d137"
        },
        {
          "alg" : "SHA-1",
          "content" : "a10732c76bfacdbd633a7eb0f7968b1059a65dfa"
        },
        {
          "alg" : "SHA-256",
          "content" : "e0c1c64575c005601725e7c6a02cebf9e1285e888f756b2a1d73ffa8d725cc74"
        },
        {
          "alg" : "SHA-512",
          "content" : "10ea0baf440c78598eee2bff3742bc2f41b7e67847f8bb43a1f154d7649853ebd9eb86288aab65f4d1a196f4586bab16b656ec7940ec92a57b1c117b8f59abac"
        },
        {
          "alg" : "SHA-384",
          "content" : "33ad6e25b942b4076c8b9dfcc0aae8ca802b9028aa9939f86e4752b4847b35fb486f6d3efa81d38ad1edcbec6e614494"
        },
        {
          "alg" : "SHA3-384",
          "content" : "168deff9cc400e301fb783ec5f483237edf9b62eacb11df4e36c2660b1fc42f639df6f5fa155f468873fb899197c9fe8"
        },
        {
          "alg" : "SHA3-256",
          "content" : "73ec3c6d31eea7e1e5e4cc214b822c14887dcf908b5e700e206906a7555c571b"
        },
        {
          "alg" : "SHA3-512",
          "content" : "a394427ca09c2807a376f982176984cfc2c4610e752ddee50d878091291cf4ef37de90c945c6b13e3c8c4db3397c296696ca68d3a7323388c863b8b69272bc8c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.protobuf/protobuf-java@2.5.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://code.google.com/p/protobuf"
        },
        {
          "type" : "distribution",
          "url" : "dav:https://google-maven-repository.googlecode.com/svn/repository/"
        },
        {
          "type" : "vcs",
          "url" : "http://code.google.com/p/protobuf/source/browse"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.protobuf/protobuf-java@2.5.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-lang",
      "name" : "commons-lang",
      "version" : "2.6",
      "description" : "Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4d5c1693079575b362edf41500630bbd"
        },
        {
          "alg" : "SHA-1",
          "content" : "0ce1edb914c94ebc388f086c6827e8bdeec71ac2"
        },
        {
          "alg" : "SHA-256",
          "content" : "50f11b09f877c294d56f24463f47d28f929cf5044f648661c0f0cfbae9a2f49c"
        },
        {
          "alg" : "SHA-512",
          "content" : "4a5a3dbe4941c645e2cca068cca5c1882cfe988b02e7cd981d1e51784900767d1deab0e0e0566f559c9fcabb4a180e436d5bb948902d4f4106f37360466afb42"
        },
        {
          "alg" : "SHA-384",
          "content" : "9725bc421adc1dbcd6f937eca0f3075d186a2b353ece4cef66b0fe81bb8d3f7d7641c43e86d657ef526c719f0c2a8c90"
        },
        {
          "alg" : "SHA3-384",
          "content" : "4bc4eaaf2580ded6d552b96ae5261c936de95f69a1d137c47279c51bf2aa1406ae44f69ccc94486267b8441e53c4bd74"
        },
        {
          "alg" : "SHA3-256",
          "content" : "b68d49ef037d428ea0c3e67a7a20f3d68a134bef30a1639ec08d28886b9f5629"
        },
        {
          "alg" : "SHA3-512",
          "content" : "2e9ffc0608827cffc0b48b7a0f35d371c66586c99fea2910f7c2a237c7c57d9ae4d65de7c8e018362c2e4f963c2f70a9196cebf35457f1dd0cea6c65c256f673"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-lang/commons-lang@2.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://commons.apache.org/lang/"
        },
        {
          "type" : "build-system",
          "url" : "http://vmbuild.apache.org/continuum/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/LANG"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/commons/proper/lang/branches/LANG_2_X"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-lang/commons-lang@2.6?type=jar"
    },
    {
      "group" : "io.airlift",
      "name" : "aircompressor",
      "version" : "0.10",
      "description" : "Compression algorithms",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f7530afc9741d3594cb9f86a2ab875c2"
        },
        {
          "alg" : "SHA-1",
          "content" : "bf8305930ec675964bd68599c702ffb32df4d1e6"
        },
        {
          "alg" : "SHA-256",
          "content" : "a5471abddc99a95939abfc0405cddb2213c4fba561de94f888d6e625566e826c"
        },
        {
          "alg" : "SHA-512",
          "content" : "ee562bfbccad7ff78c49dbc3a3d32675214a9d00133f57b249f2e6417a4bb77015e98a91c5fcf965a6427c1959836405bbacf8a29ffd9f91ce825feb74bc43aa"
        },
        {
          "alg" : "SHA-384",
          "content" : "89bd15d77c0e4aedcdebb1ac87fd61c908becd12ef8d376be5e876a22984ac332ff9e47c9b327fa542bd2617ca613ff8"
        },
        {
          "alg" : "SHA3-384",
          "content" : "f0a50b2002536a1e4785396f0767ac5145e1fd5871274d1aa863179f29136435af3c42b03f616e4b64cc2a3195e0411e"
        },
        {
          "alg" : "SHA3-256",
          "content" : "d2f1a724b93d336ceb2f2fbac5d538f3601251875695302d4e9f6daff7ed4c6b"
        },
        {
          "alg" : "SHA3-512",
          "content" : "58cf399abc8db8e0da7c5944aba59d930eb90e7f27c0641fe509080cbc5b37c43c3051c4b713b04a1b3c16ce65f1366561f197a86d5bc6e2cb7a887a448d93a8"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.airlift/aircompressor@0.10?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://github.com/airlift/aircompressor"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "http://github.com/airlift/aircompressor/tree/master"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.airlift/aircompressor@0.10?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.hive",
      "name" : "hive-storage-api",
      "version" : "2.6.0",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "fd5484f4b2a5607c145224aa8fd0283f"
        },
        {
          "alg" : "SHA-1",
          "content" : "0f278d89710827312db75d7c87315a917cbd0349"
        },
        {
          "alg" : "SHA-256",
          "content" : "7221fc528bfee6385396b4ca05b1faedb658ef54253cd11f34a500883868c82e"
        },
        {
          "alg" : "SHA-512",
          "content" : "b3e7c3417d21335cd3a292b0c677d73b7d6462fcf3e11209fbda3b3bb2655b6608c792d8d8a6c0940413ccacd9d8486ff6467f35ab105b75c7271e2252a5a39a"
        },
        {
          "alg" : "SHA-384",
          "content" : "7aaeddedf7cb29159976b42950bf5b1addc79bd11990432ee82897d59439961c7dbf9c668dad324d463ed6b9032c3d58"
        },
        {
          "alg" : "SHA3-384",
          "content" : "5b4157299297c3d7456f594300c6d241729261137ca647a7d6c79815769c37ed63ad818cfa686a695993a8aba02540b4"
        },
        {
          "alg" : "SHA3-256",
          "content" : "a14e7d90013293794ee4631544e8414819c1bf127e09b03d6e2fb28cd8a5788e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "66cef86291edc48377d32184c6eeb601dd3e864163bfc07d53ab1b1e6c27281872e5a5292ea91b39bc781fcccd7adbcffde603a4a35e14a01d721454fe66b738"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.hive/hive-storage-api@2.6.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.apache.org/hive-storage-api/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://svn.apache.org/viewvc/maven/pom/tags/apache-18/hive-storage-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.hive/hive-storage-api@2.6.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-lang3",
      "version" : "3.18.0",
      "description" : "Apache Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang. The code is tested using the latest revision of the JDK for supported LTS releases: 8, 11, 17 and 21 currently. See https://github.com/apache/commons-lang/blob/master/.github/workflows/maven.yml Please ensure your build environment is up-to-date and kindly report any build issues.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "48b9886957920a4cdb602780ca345087"
        },
        {
          "alg" : "SHA-1",
          "content" : "fb14946f0e39748a6571de0635acbe44e7885491"
        },
        {
          "alg" : "SHA-256",
          "content" : "4eeeae8d20c078abb64b015ec158add383ac581571cddc45c68f0c9ae0230720"
        },
        {
          "alg" : "SHA-512",
          "content" : "c2c9d497fc1be411050f4011b2407764b78aa098eb42925af8a197eabdbc25b507f09fb898805e9bed4815f35236a508ee5b096e36f363df4d407232d50fc832"
        },
        {
          "alg" : "SHA-384",
          "content" : "4fb3f101106e4ce3666d5c15d276ba86f7683a0ef35f0384edfcd579ea454275edbb7400795d265ec3a38e39997e79b8"
        },
        {
          "alg" : "SHA3-384",
          "content" : "aada7e3612cf3f6190a19fa7c3db74df1e13ec56b300be9bb4317d261d5877c84ab59ba9a09168becdbd82cd41961395"
        },
        {
          "alg" : "SHA3-256",
          "content" : "306d286d0bd7549c203cc802fd755d354c4f7926fa023f4e83623ba1a6261250"
        },
        {
          "alg" : "SHA3-512",
          "content" : "f6f1ecc684e309d7b9fc5c343792508fee935cd2119d962721662c5af88e4864ba6f47a863e083714f315f926c156de1970cd2fb577449bdfdc7bf98a4a451fa"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-lang/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-lang/actions"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/LANG"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf/commons-lang.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar"
    },
    {
      "publisher" : "Apache Software Foundation",
      "group" : "org.apache.hadoop",
      "name" : "hadoop-common",
      "version" : "2.10.2",
      "description" : "Apache Hadoop Common",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0e701d9a254fa21128f4a5a33aff13de"
        },
        {
          "alg" : "SHA-1",
          "content" : "fd5786fcd0228073e7c9c4ba5739519eceb55ddb"
        },
        {
          "alg" : "SHA-256",
          "content" : "fe93812dc299e17ebcfc12921bd3162c79ecfab84d120d51d4ddc275c7414ff9"
        },
        {
          "alg" : "SHA-512",
          "content" : "abce060bc87b2ed21b8b19c16db1dc5927c35e810189109bff58eaa5adfd048892af809ebd78913bf5c6b01d28f6809bade08f3b2042e1beb247b9eedeae64ea"
        },
        {
          "alg" : "SHA-384",
          "content" : "54ad68c163b4383bf10b88e7aee2e9bba5c36d42416812a675679eb5f030a22a5f651b8d2a5e9b8923833d88861be9f3"
        },
        {
          "alg" : "SHA3-384",
          "content" : "6f75759ad4a8d5816ab7eae09ce076e29b1ed34283f1369e68a2d042e6f68216246cfd9b1e019ed3467058ffd7e94a3c"
        },
        {
          "alg" : "SHA3-256",
          "content" : "ec5b93b393baa94f120a8518eb050e7e0f4138fea29cd12f31695a3220fa465c"
        },
        {
          "alg" : "SHA3-512",
          "content" : "da68a37c26b8a2bd47531b77b67412b12b98a657540512e9d31f4f78a91297b0694be5183bb82441b248cc71302682dcf6385ff352585e11355f95ccb57e6638"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.hadoop/hadoop-common@2.10.2?type=jar",
      "externalReferences" : [
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.hadoop/hadoop-common@2.10.2?type=jar"
    },
    {
      "publisher" : "Apache Software Foundation",
      "group" : "org.apache.hadoop",
      "name" : "hadoop-annotations",
      "version" : "2.10.2",
      "description" : "Apache Hadoop Annotations",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a3ff551c2ea8a5e17c3042ee46f1f763"
        },
        {
          "alg" : "SHA-1",
          "content" : "5b406750215dcbd8d322d57696cd52fdb796e528"
        },
        {
          "alg" : "SHA-256",
          "content" : "c47d615be08cb6631985188489ba17d376577b67e3690d6de1eb9d0d611f35e3"
        },
        {
          "alg" : "SHA-512",
          "content" : "a139640e5f7077610e72b939494825ff95c3d6d18c7c121d5d198bd0ba99bb399116633ee25149d915c3474d0afb9ebe101b48cce28d6f5903a233ceebd7cc6b"
        },
        {
          "alg" : "SHA-384",
          "content" : "6dbe2290de667a3f3dab7e3f4a4327010329bd36e0c50a709f01a41b2c9252475237255318f8b174a625cea17f860d7a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "d92bbeb8a79018ca44309cd45b57a0e92933c95eb4de6ed58522d8bd74a4c5232e8c2366d27094c06c83d3551486e6d3"
        },
        {
          "alg" : "SHA3-256",
          "content" : "66deb54a0b53acbecfe453b97699a527dd4378a69ed0112e2e0ed18c60d4a927"
        },
        {
          "alg" : "SHA3-512",
          "content" : "b0f0bbb9e90a8e22947ccb706525314b3a13e6115b0e3b10785f55289b7e80f5bb14e167be0b62d74de365ea01d3a5ec09b6b3615718acb5dea486d664c761b7"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.hadoop/hadoop-annotations@2.10.2?type=jar",
      "externalReferences" : [
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.hadoop/hadoop-annotations@2.10.2?type=jar"
    },
    {
      "group" : "com.google.guava",
      "name" : "guava",
      "version" : "32.0.0-jre",
      "description" : "Guava is a suite of core and expanded libraries that include utility classes, Google's collections, I/O classes, and much more.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "677b5dfdedfbdbc13bc00478878de7aa"
        },
        {
          "alg" : "SHA-1",
          "content" : "25d6662e20fc04c7b38f8ca3ab5d2f4a19272f80"
        },
        {
          "alg" : "SHA-256",
          "content" : "39f3550b0343d8d19dd4e83bd165b58ea3389d2ddb9f2148e63903f79ecdb114"
        },
        {
          "alg" : "SHA-512",
          "content" : "2dd7aa934e3ac7993ed3e73fece19eee973def97028cfa27dba26ea3c2c8b87fa408894002c19eb48400fb57ed69b2219381984b628b4b063ca7a34e45088575"
        },
        {
          "alg" : "SHA-384",
          "content" : "4a3cd7a8f8bd0206872185b03a3323633f63f0d091e55673c1dac51e47a36f04bef7af31e4259ac45b615c5d5c7932cd"
        },
        {
          "alg" : "SHA3-384",
          "content" : "f52f3f51b6def97b103bf2145310cedd09947fa25223815ffbcf767d6fd94adcade3794201c66fdf4bbf2977f3c0d954"
        },
        {
          "alg" : "SHA3-256",
          "content" : "dd3ae7afcbedd5ba2e076b04f1add8ba91da987d6d28b200e976b3755dc5b039"
        },
        {
          "alg" : "SHA3-512",
          "content" : "93275f02999a5f43d2f142efd01fa145087c3cee8dd3781a230a5b3bc2905bc308f64425dda0ec83f40e1ceb7464cdcf69289eb30caca5aa03ae6510191da89b"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.guava/guava@32.0.0-jre?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/google/guava"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/google/guava/actions"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/google/guava/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/google/guava/guava"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.guava/guava@32.0.0-jre?type=jar"
    },
    {
      "group" : "com.google.guava",
      "name" : "failureaccess",
      "version" : "1.0.1",
      "description" : "Contains com.google.common.util.concurrent.internal.InternalFutureFailureAccess and InternalFutures. Most users will never need to use this artifact. Its classes is conceptually a part of Guava, but they're in this separate artifact so that Android libraries can use them without pulling in all of Guava (just as they can use ListenableFuture by depending on the listenablefuture artifact).",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "091883993ef5bfa91da01dcc8fc52236"
        },
        {
          "alg" : "SHA-1",
          "content" : "1dcf1de382a0bf95a3d8b0849546c88bac1292c9"
        },
        {
          "alg" : "SHA-256",
          "content" : "a171ee4c734dd2da837e4b16be9df4661afab72a41adaf31eb84dfdaf936ca26"
        },
        {
          "alg" : "SHA-512",
          "content" : "f8d59b808d6ba617252305b66d5590937da9b2b843d492d06b8d0b1b1f397e39f360d5817707797b979a5bf20bf21987b35333e7a15c44ed7401fea2d2119cae"
        },
        {
          "alg" : "SHA-384",
          "content" : "67659dbd9647ec303d7f15128dc9dba19b98fd8d74758ee3b602451e32c855e236ccaafe08edf4bbfa245f981268440f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "1460875f0331c5fa3791772a6a322a7db180261bc2adacf7271df1fbf3b088a587a755a604c039982cb593c5cfc1f101"
        },
        {
          "alg" : "SHA3-256",
          "content" : "ea86406e75fcd93eafe3cde1b3135ba485f1bb9b75fed98894a0bf1f0aee04f0"
        },
        {
          "alg" : "SHA3-512",
          "content" : "52ac0f487ab5dd27c9f2e54fd1d84c7a620cae9d49be4072aa2b11501787bf4391ddaa13d02eccdf19e8eea46aecbea5f6064b26777c1b836108a280652e04ac"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/google/guava/failureaccess"
        },
        {
          "type" : "build-system",
          "url" : "https://travis-ci.org/google/guava"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/google/guava/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/google/guava/failureaccess"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar"
    },
    {
      "group" : "com.google.guava",
      "name" : "listenablefuture",
      "version" : "9999.0-empty-to-avoid-conflict-with-guava",
      "description" : "An empty artifact that Guava depends on to signal that it is providing ListenableFuture -- but is also available in a second \"version\" that contains com.google.common.util.concurrent.ListenableFuture class, without any other Guava classes. The idea is: - If users want only ListenableFuture, they depend on listenablefuture-1.0. - If users want all of Guava, they depend on guava, which, as of Guava 27.0, depends on listenablefuture-9999.0-empty-to-avoid-conflict-with-guava. The 9999.0-... version number is enough for some build systems (notably, Gradle) to select that empty artifact over the \"real\" listenablefuture-1.0 -- avoiding a conflict with the copy of ListenableFuture in guava itself. If users are using an older version of Guava or a build system other than Gradle, they may see class conflicts. If so, they can solve them by manually excluding the listenablefuture artifact or manually forcing their build systems to use 9999.0-....",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "d094c22570d65e132c19cea5d352e381"
        },
        {
          "alg" : "SHA-1",
          "content" : "b421526c5f297295adef1c886e5246c39d4ac629"
        },
        {
          "alg" : "SHA-256",
          "content" : "b372a037d4230aa57fbeffdef30fd6123f9c0c2db85d0aced00c91b974f33f99"
        },
        {
          "alg" : "SHA-512",
          "content" : "c5987a979174cbacae2e78b319f080420cc71bcdbcf7893745731eeb93c23ed13bff8d4599441f373f3a246023d33df03e882de3015ee932a74a774afdd0782f"
        },
        {
          "alg" : "SHA-384",
          "content" : "caff9b74079f95832ca7f6029346b34b606051cc8c5a4389fac263511d277ada0c55f28b0d43011055b268c6eb7184d5"
        },
        {
          "alg" : "SHA3-384",
          "content" : "e939f08df0545847ea0d3e4b04a114b08499ad069ba8ec9461d1779f87a56e0c37273630a0f4c14e78c348d3ac7eb97f"
        },
        {
          "alg" : "SHA3-256",
          "content" : "1f0a8b1177773b3a8ace839df5eed63cbf56b24a38714898a6e4ed065c42559f"
        },
        {
          "alg" : "SHA3-512",
          "content" : "6b495ecc2a18b17365cb08d124a0da47f04bcdde81927b5245edf3edd8e498c3c3fb92ce6a4127f660bac851bb1d3e4510e5c20d03be47ce99dc296d360db285"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/google/guava/listenablefuture"
        },
        {
          "type" : "build-system",
          "url" : "https://travis-ci.org/google/guava"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/google/guava/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/google/guava/listenablefuture"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar"
    },
    {
      "group" : "org.checkerframework",
      "name" : "checker-qual",
      "version" : "3.33.0",
      "description" : "checker-qual contains annotations (type qualifiers) that a programmer writes to specify Java code for type-checking by the Checker Framework.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "fc9418b779d9d57dcd52197006cbdb9b"
        },
        {
          "alg" : "SHA-1",
          "content" : "de2b60b62da487644fc11f734e73c8b0b431238f"
        },
        {
          "alg" : "SHA-256",
          "content" : "e316255bbfcd9fe50d165314b85abb2b33cb2a66a93c491db648e498a82c2de1"
        },
        {
          "alg" : "SHA-512",
          "content" : "049c446677b7b386f3fb501bf65e032bdf2b1b29a3f545848035fff2b683cd275380cf302e30eea641af7f0801f779bcda3d82a71d928e4176f564f796640a64"
        },
        {
          "alg" : "SHA-384",
          "content" : "ddf7a0f70421d1ed75e93c0a30434a4862c3905e433223e19861323cf0994e843392b746003040f10a7db6fc960b8aa6"
        },
        {
          "alg" : "SHA3-384",
          "content" : "edf079834fdd23317851318504b2fcc10b055cdb5cc4ada9c773d1b6c815ed6dd193c433d2b83103f070fd521021ff33"
        },
        {
          "alg" : "SHA3-256",
          "content" : "56244f45b03fc2a472b35489324e392e6001fac088d19f33629a87adb74a0575"
        },
        {
          "alg" : "SHA3-512",
          "content" : "e0516c11fe613f258bf9ad39358a8d9fb7c8df57ff9aaca5d6d16055c196fac4ed3b4185f2501a3bdf7aeb1fe142693b1d788bdaa73366be1af15762bb3591a4"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT"
          }
        }
      ],
      "purl" : "pkg:maven/org.checkerframework/checker-qual@3.33.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://checkerframework.org/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/typetools/checker-framework.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.checkerframework/checker-qual@3.33.0?type=jar"
    },
    {
      "publisher" : "Google LLC",
      "group" : "com.google.errorprone",
      "name" : "error_prone_annotations",
      "version" : "2.18.0",
      "description" : "Error Prone is a static analysis tool for Java that catches common programming mistakes at compile-time.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "64145d0e7fee5a69ed7b84cf402de998"
        },
        {
          "alg" : "SHA-1",
          "content" : "89b684257096f548fa39a7df9fdaa409d4d4df91"
        },
        {
          "alg" : "SHA-256",
          "content" : "9e6814cb71816988a4fd1b07a993a8f21bb7058d522c162b1de849e19bea54ae"
        },
        {
          "alg" : "SHA-512",
          "content" : "3cea86be94bb8ae40d21ad4bf7d7f6b2233e89593b7b741ad84c78840cd3837bb5136f52e62fe9ae0953d7b190c46ad3edc102dfa97b4c7ea472a80206bf5db7"
        },
        {
          "alg" : "SHA-384",
          "content" : "7622eb33f83f03ab32b710b36c2fe836e24c5318f65fb8c0631a99507ca3ae65c2df8e33b63a5ce853b9cab6d9cb32e5"
        },
        {
          "alg" : "SHA3-384",
          "content" : "1ea52a5ce2a9ee1a960dc2a1bbe4b009d4d6a4448498e4cd76401605fa877662911e8c93b2b8bfda57bedc56c83f10a0"
        },
        {
          "alg" : "SHA3-256",
          "content" : "ed53f4295da75753267f241315352c4a39e60796f04e1c0c12d29c3a38be48ed"
        },
        {
          "alg" : "SHA3-512",
          "content" : "8266b313bd4e1170daf60642e838841370d99bc24b2a1f91825ca22037a6a30ff15cc76069f8e8770f1dc12772c277ee1320de67e815041697d93d6d7ba884fb"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://errorprone.info/error_prone_annotations"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/google/error-prone/error_prone_annotations"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0?type=jar"
    },
    {
      "group" : "com.google.j2objc",
      "name" : "j2objc-annotations",
      "version" : "2.8",
      "description" : "A set of annotations that provide additional information to the J2ObjC translator to modify the result of translation.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "c50af69b704dc91050efb98e0dff66d1"
        },
        {
          "alg" : "SHA-1",
          "content" : "c85270e307e7b822f1086b93689124b89768e273"
        },
        {
          "alg" : "SHA-256",
          "content" : "f02a95fa1a5e95edb3ed859fd0fb7df709d121a35290eff8b74dce2ab7f4d6ed"
        },
        {
          "alg" : "SHA-512",
          "content" : "f8263868a792b41707c9e7fe6fa5650a14cd93fbeafad20efe3772a3058fc933eb59782ec59e6eb9b9c569aa96da80134ae9fdf7547b69c44a97087efddceeff"
        },
        {
          "alg" : "SHA-384",
          "content" : "e6087ec31fec8289158496ad2ed6ce8472d5d513808a312e0782cedac3b86c37a62a63c0b5ea3839491d109fe9e148a1"
        },
        {
          "alg" : "SHA3-384",
          "content" : "10add34bfeb8612283eef89ac96747a3c9b755acd80ad526e1addaeb7efd6323c52b9bfa1a3d34adb40e1ccb963ee65d"
        },
        {
          "alg" : "SHA3-256",
          "content" : "b3336f8abd6b1f73b9f06d306974557000a000073bfbae6b54fda26d17dbb072"
        },
        {
          "alg" : "SHA3-512",
          "content" : "d376c184a6df071c4e93b913d175b5c2e63deac37105dc20342c19bdda62e4e9598ca1e8bfb4f4fd5cdee6dd5ac3b8af49e2c5193e324d59a59ce1f7adeab627"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.j2objc/j2objc-annotations@2.8?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/google/j2objc/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.sonatype.org/spice/trunk/oss/oss-parent-9/j2objc-annotations"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.j2objc/j2objc-annotations@2.8?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-cli",
      "name" : "commons-cli",
      "version" : "1.5.0",
      "description" : "Apache Commons CLI provides a simple API for presenting, processing and validating a Command Line Interface.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6c3b2052160144196118b1f019504388"
        },
        {
          "alg" : "SHA-1",
          "content" : "dc98be5d5390230684a092589d70ea76a147925c"
        },
        {
          "alg" : "SHA-256",
          "content" : "bc8bb01fc0fad250385706e20f927ddcff6173f6339b387dc879237752567ac6"
        },
        {
          "alg" : "SHA-512",
          "content" : "b78ac2b418e9e9e7d0bc866664577199d320408a6f03151b3789bac365c986dd526df853599e633d7e50fe136cbf3eb9ce50c9cfa0ad38c3cc8d8ee416f61c40"
        },
        {
          "alg" : "SHA-384",
          "content" : "a7a2daa807c4007c506b5100f0a9b526c0052c4e1f6b699904ef9d2aba8195b6003dc4d47ca133b15e2f3e830bdbe6c4"
        },
        {
          "alg" : "SHA3-384",
          "content" : "44ca97514a2e34b5bf3de9b5d45c8e871f6eee517db7f3c4b4476eb3e8dfe9a9d8760f3181114708288c373727b42475"
        },
        {
          "alg" : "SHA3-256",
          "content" : "a0a47001d3a293f129ffc21f17f575a9d23ce5b88b440e651e4cd01edd0cc421"
        },
        {
          "alg" : "SHA3-512",
          "content" : "483dae23d6827a105d17847c8c813527f19042b65c4d09635dfc4bfd25990fe3ba2a997540460fd5b1d72ca3add9a38ca8b32004680764db972a9bb62f7f68d8"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-cli/commons-cli@1.5.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-cli/"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CLI"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-cli.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-cli/commons-cli@1.5.0?type=jar"
    },
    {
      "group" : "xmlenc",
      "name" : "xmlenc",
      "version" : "0.52",
      "description" : "xmlenc Library",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "c962b6bc3c8de46795b0ed94851fa9c7"
        },
        {
          "alg" : "SHA-1",
          "content" : "d82554efbe65906d83b3d97bd7509289e9db561a"
        },
        {
          "alg" : "SHA-256",
          "content" : "282ae185fc2ff27da7714af9962897c09cfefafb88072219c4a2f9c73616c026"
        },
        {
          "alg" : "SHA-512",
          "content" : "3a1f30f2bcebca32fce505185cfda1cd90fc2dc8c60fe41584f764fc2b4004422462b32ec88b70c93165ecc45201f8834fc16feb067812daa0759d2096b4a63f"
        },
        {
          "alg" : "SHA-384",
          "content" : "3ed1606ddd4995ffb15ef504195fa4ee73f536b1a232d18532cb53f10f9f8e418fc5e91bf47834bc98a4331981301755"
        },
        {
          "alg" : "SHA3-384",
          "content" : "3fd4abcd6d7a65dec35629144d7205789144cad016b398d96eb972982736bc5926fd28b4ad1d8edea4c55f573469d4cc"
        },
        {
          "alg" : "SHA3-256",
          "content" : "0afd3a376b7817f752a3c85db94337ec3f8249aa09a8dfddb72862c39642ce9a"
        },
        {
          "alg" : "SHA3-512",
          "content" : "562a1d61fdddaf4121c2af27ab065bd558429d307af2c51c8b813ca028cff8edc63b641d2998fc9e2b530b64652533faccb5c4544f0f76dfa254dd4e209155cf"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-4-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/xmlenc/xmlenc@0.52?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://xmlenc.sourceforge.net"
        },
        {
          "type" : "vcs",
          "url" : "http://xmlenc.cvs.sourceforge.net/xmlenc/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/xmlenc/xmlenc@0.52?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.httpcomponents",
      "name" : "httpclient",
      "version" : "4.5.13",
      "description" : "Apache HttpComponents Client",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "40d6b9075fbd28fa10292a45a0db9457"
        },
        {
          "alg" : "SHA-1",
          "content" : "e5f6cae5ca7ecaac1ec2827a9e2d65ae2869cada"
        },
        {
          "alg" : "SHA-256",
          "content" : "6fe9026a566c6a5001608cf3fc32196641f6c1e5e1986d1037ccdbd5f31ef743"
        },
        {
          "alg" : "SHA-512",
          "content" : "3567739186e551f84cad3e4b6b270c5b8b19aba297675a96bcdff3663ff7d20d188611d21f675fe5ff1bfd7d8ca31362070910d7b92ab1b699872a120aa6f089"
        },
        {
          "alg" : "SHA-384",
          "content" : "093ac3e2dde58e34aa70309c7305eb3c9b5be2509a9293f1672494da55479a86bd112e83326746dc7a32855472952b99"
        },
        {
          "alg" : "SHA3-384",
          "content" : "cd6882e7868624164e460f2f3ea01466f863c0dcb902b031c656b57356f563be83b29530df41d88d634ed3d01fc9964d"
        },
        {
          "alg" : "SHA3-256",
          "content" : "710b1d8d7dae0b8e4270756694ca9c83d64965f42d3b4170c609b14d47c2762c"
        },
        {
          "alg" : "SHA3-512",
          "content" : "276fa6a6599dc89382d658115695cf4da6b0d39b34e9c349c17a5dbd64122eaee553bb9ed75c0378ec4a83be157c8aa39370662de3c9b8fd55ebc1dd608383e6"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.httpcomponents/httpclient@4.5.13?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://hc.apache.org/httpcomponents-client"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/HTTPCLIENT"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/hc-httpclient-users/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/httpcomponents-client/tree/4.5.13/httpclient"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.httpcomponents/httpclient@4.5.13?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.httpcomponents",
      "name" : "httpcore",
      "version" : "4.4.14",
      "description" : "Apache HttpComponents Core (blocking I/O)",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "2b3991eda121042765a5ee299556c200"
        },
        {
          "alg" : "SHA-1",
          "content" : "9dd1a631c082d92ecd4bd8fd4cf55026c720a8c1"
        },
        {
          "alg" : "SHA-256",
          "content" : "f956209e450cb1d0c51776dfbd23e53e9dd8db9a1298ed62b70bf0944ba63b28"
        },
        {
          "alg" : "SHA-512",
          "content" : "f16a652f4a7b87dbf7cb16f8590d54a3f719c4c7b2f8883ce59db2d73be4701b64f2ca8a2c45aca6a5dbeaddeedff0c280a03722f70c076e239b645faa54eff9"
        },
        {
          "alg" : "SHA-384",
          "content" : "1cd0a3c120cfb4974573b0f499b2ac8a200aa43506777ed09f9806c6899541605fd355a3b5f44977517dd1cb463e808b"
        },
        {
          "alg" : "SHA3-384",
          "content" : "c771301cda89b2c102b76ba7b46222e0ee1898fa1e53fd4d43a7994e4a234a9804f7221feafe0259f0e9db164a5d4576"
        },
        {
          "alg" : "SHA3-256",
          "content" : "97a9e2fcd1946204dd8643e504c0ff73904957da5df605d703734f95345d5816"
        },
        {
          "alg" : "SHA3-512",
          "content" : "ee6045c3724c2a4983330cf9bc57a46c0fcfc252be455a864953ef5c538ea4aab399c4315f7e5b1a315a48bb8f11cc7492e0735615fd68aa3981fa3ddb4d0a98"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.httpcomponents/httpcore@4.4.14?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://hc.apache.org/httpcomponents-core-ga"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/HTTPCORE"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/hc-httpclient-users/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/httpcomponents-core/tree/4.4.14/httpcore"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.httpcomponents/httpcore@4.4.14?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-codec",
      "name" : "commons-codec",
      "version" : "1.15",
      "description" : "The Apache Commons Codec package contains simple encoder and decoders for various formats such as Base64 and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a collection of phonetic encoding utilities.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "303baf002ce6d382198090aedd9d79a2"
        },
        {
          "alg" : "SHA-1",
          "content" : "49d94806b6e3dc933dacbd8acb0fdbab8ebd1e5d"
        },
        {
          "alg" : "SHA-256",
          "content" : "b3e9f6d63a790109bf0d056611fbed1cf69055826defeb9894a71369d246ed63"
        },
        {
          "alg" : "SHA-512",
          "content" : "da30a716770795fce390e4dd340a8b728f220c6572383ffef55bd5839655d5611fcc06128b2144f6cdcb36f53072a12ec80b04afee787665e7ad0b6e888a6787"
        },
        {
          "alg" : "SHA-384",
          "content" : "05d0506283716472175d44c2a4766523397bf8a007c18848f9c9a61718cc8aa437f9cb4b91771037ab29a960860b62a0"
        },
        {
          "alg" : "SHA3-384",
          "content" : "12fad4ef78274b06f97b1243cea6f970088abde082d2de9377d915a34b44f7d7d67807c03e59c849b69f1544e2a9a1be"
        },
        {
          "alg" : "SHA3-256",
          "content" : "87be248f33f241121f54aad61a9a460a79eabefbf1b5b0dd22aeb95b581f727e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "8c992c9c569ebaa0bf956a4c5b34fbf5e1ed1c212c2dd896fa216183ee0bcd341e96698af4b9cec7e8880762faa081a3d3a27f51349aa457cb8e373e4f57c788"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-codec/commons-codec@1.15?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-codec/"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CODEC"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/commons-codec"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-codec/commons-codec@1.15?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-io",
      "name" : "commons-io",
      "version" : "2.15.1",
      "description" : "The Apache Commons IO library contains utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "84351f7991a0e6722f00e96a4ccc376f"
        },
        {
          "alg" : "SHA-1",
          "content" : "f11560da189ab563a5c8e351941415430e9304ea"
        },
        {
          "alg" : "SHA-256",
          "content" : "a58af12ee1b68cfd2ebb0c27caef164f084381a00ec81a48cc275fd7ea54e154"
        },
        {
          "alg" : "SHA-512",
          "content" : "e9adaeed2d715ac0ae44de056ba165a743a92acbeb9871b535f7e58e0b3bc4fba276495b50429be195098a559f3adb7294048479754a0ee4d397da2efda5f81c"
        },
        {
          "alg" : "SHA-384",
          "content" : "028c72b59373d3894da22f9eb2c731aabd00f670993973f71a354d722670c12ca659686b83bbf8db32d060ca180f50b2"
        },
        {
          "alg" : "SHA3-384",
          "content" : "73cd585ab3736b4be50ec0f10dfe5ebfc3390eea8d56f07f29055f1fddb2dff8084310eaa6fb9f97ea639ed1abd7bc33"
        },
        {
          "alg" : "SHA3-256",
          "content" : "daf39bc99f1a3dc0075714a4a342a58d69a4cd62c25bc39a581f657ca72b1044"
        },
        {
          "alg" : "SHA3-512",
          "content" : "b003f8971d1536ea0fc4320dbfe17d7259d49e59314739f9fc83134e511facbff048b0ef4f86a9d0893781ca09c95cebc3b181a6c89a2d41e851870b96e76839"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-io/commons-io@2.15.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-io/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-parent/actions"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/IO"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-io.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-io/commons-io@2.15.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-net",
      "name" : "commons-net",
      "version" : "3.1",
      "description" : "Apache Commons Net library contains a collection of network utilities and protocol implementations. Supported protocols include: Echo, Finger, FTP, NNTP, NTP, POP3(S), SMTP(S), Telnet, Whois",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "23c94d51e72f341fb412d6a015e16313"
        },
        {
          "alg" : "SHA-1",
          "content" : "2298164a7c2484406f2aa5ac85b205d39019896f"
        },
        {
          "alg" : "SHA-256",
          "content" : "34a58d6d80a50748307e674ec27b4411e6536fd12e78bec428eb2ee49a123007"
        },
        {
          "alg" : "SHA-512",
          "content" : "66887e7c5077dc6aed5dc85c172e7d80ae13503ab1e000dd76e87626cddb0427f3f9251941af94744d53f6b771e031785ce1362b01595d9723330554213bdfe8"
        },
        {
          "alg" : "SHA-384",
          "content" : "444a0ffddba21cb56369700b5b89641a453adfaffb948e22329011c8eb02ee40b70f57f88c3d10239d49eaf4069c1e25"
        },
        {
          "alg" : "SHA3-384",
          "content" : "c1a19ff6d35406b9363473484f847e995d995d9b6df03fa6e6e6f37b1cb3129baf58975037674c7bdbab79e1d2776246"
        },
        {
          "alg" : "SHA3-256",
          "content" : "2b750264c332b902556ff672997f23c56500eb815c41fc067f1773ba2aecdbd9"
        },
        {
          "alg" : "SHA3-512",
          "content" : "d798769ab7d6950ad16c9d4855de89414b10d8e53356c1c857dc06c408a8fab91c8db1f0529909aa7fa1bca76c38128d9b0b0734dc5f55e0ed6bfaf069ab3e42"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-net/commons-net@3.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://commons.apache.org/net/"
        },
        {
          "type" : "build-system",
          "url" : "http://vmbuild.apache.org/continuum/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/NET"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/commons/proper/net/trunk"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-net/commons-net@3.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-collections",
      "name" : "commons-collections",
      "version" : "3.2.2",
      "description" : "Types that extend and augment the Java Collections Framework.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f54a8510f834a1a57166970bfc982e94"
        },
        {
          "alg" : "SHA-1",
          "content" : "8ad72fe39fa8c91eaaf12aadb21e0c3661fe26d5"
        },
        {
          "alg" : "SHA-256",
          "content" : "eeeae917917144a68a741d4c0dff66aa5c5c5fd85593ff217bced3fc8ca783b8"
        },
        {
          "alg" : "SHA-512",
          "content" : "51c72f9aca7726f3c387095e66be85a6df97c74b00a25434b89188c1b8eab6e2b55accf7b9bd412430d22bd09324dec076e300b3d1fa39fccad471f0f2a3da16"
        },
        {
          "alg" : "SHA-384",
          "content" : "dd4e99b3314bd3c1a1ee26296615d9e44dadf7a1f8a7bbba44fb95121803d331e36d4cca4260e7609af78a47ba3e4073"
        },
        {
          "alg" : "SHA3-384",
          "content" : "8ce03528e4a6e95c44283b56eca87e6a6d3bf1363411a55b538f4f9110cf7470581ea5c73925e877ddab08dba0603f40"
        },
        {
          "alg" : "SHA3-256",
          "content" : "fd3d6134b5f07077b82ccf93d148dacf7c4ce5c971209510edd0e77e3e38c19e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c2a523916fb7c7d55a05d5e3d9e9b33000733f4b20a71be174e4e093e3f06ea78ad831edd1505527da7388105f8647efb7d5666ba852c90b4e2d5bb74256efbc"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://commons.apache.org/collections/"
        },
        {
          "type" : "build-system",
          "url" : "https://continuum-ci.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/COLLECTIONS"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/commons/proper/collections/trunk"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar"
    },
    {
      "group" : "javax.servlet",
      "name" : "servlet-api",
      "version" : "2.5",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "69ca51af4e9a67a1027a7f95b52c3e8f"
        },
        {
          "alg" : "SHA-1",
          "content" : "5959582d97d8b61f4d154ca9e495aafd16726e34"
        },
        {
          "alg" : "SHA-256",
          "content" : "c658ea360a70faeeadb66fb3c90a702e4142a0ab7768f9ae9828678e0d9ad4dc"
        },
        {
          "alg" : "SHA-512",
          "content" : "363ba5590436ab82067b7a2e14b481aeb2b12ca4048d7a1519a2e549b2d3c09ddf718ac64dc2be6c2fc24c51fdc9c8160261329403113369588ce27d87771db6"
        },
        {
          "alg" : "SHA-384",
          "content" : "1d8b8aa3ad4edb7611a43e4e5b0f9538aa70df1d6ecf09cb977f6fb963797850d4350778530f2082aac9bedf09a27824"
        },
        {
          "alg" : "SHA3-384",
          "content" : "2c62a7bf3f321aaa2ccd80e9fa633eb36a672a208c79e117a91e9812e3abfd7df3934930191d109be65441deed2cbd20"
        },
        {
          "alg" : "SHA3-256",
          "content" : "319bcec5b7eb366f63655cdf3cbdaa385e160f61edf3cbd94938e53b59905995"
        },
        {
          "alg" : "SHA3-512",
          "content" : "dd44fc227d6e790255376ef0473746725fa7703d38ae3805715910d1846f41ac789acdc2d2ba1ebde874f7ee32d906608966612c90c618872aed3fca8e28e952"
        }
      ],
      "licenses" : [ ],
      "purl" : "pkg:maven/javax.servlet/servlet-api@2.5?type=jar",
      "type" : "library",
      "bom-ref" : "pkg:maven/javax.servlet/servlet-api@2.5?type=jar"
    },
    {
      "publisher" : "Mort Bay Consulting",
      "group" : "org.mortbay.jetty",
      "name" : "jetty",
      "version" : "6.1.26",
      "description" : "Jetty server core",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "12b65438bbaf225102d0396c21236052"
        },
        {
          "alg" : "SHA-1",
          "content" : "2f546e289fddd5b1fab1d4199fbb6e9ef43ee4b0"
        },
        {
          "alg" : "SHA-256",
          "content" : "21091d3a9c1349f640fdc421504a604c040ed89087ecc12afbe32353326ed4e5"
        },
        {
          "alg" : "SHA-512",
          "content" : "4646b044a05424f1df113c5fddfc066c1fef47933b631efe63701170acc197e531330e583ae0e5000cf8ad38151c91a9e61b2864876de05cfd3ba710481ed484"
        },
        {
          "alg" : "SHA-384",
          "content" : "670285f35903def2e22a3e2430f36d47599e22d8cd96f8aad6c67704076d3648f1b4b790ef13cb0a5bbfbb3cc02e0d3e"
        },
        {
          "alg" : "SHA3-384",
          "content" : "edd96ee76c3821720879c8b8e2ee4a8174fa6b75b54413a9bccbf05223cddfedbbf0693ef6d1e9831e1b3fc44dfb17f8"
        },
        {
          "alg" : "SHA3-256",
          "content" : "9b7c499beb391e8b09b9b24097638ca1f347a0a65b6624899bb8c0272ac59342"
        },
        {
          "alg" : "SHA3-512",
          "content" : "0e3dd9a54c0a37bb9e9eb52d0c9de3b957c8fb7649394d8c547e2fe2099ac892b6145bf630165358a2b83d6ba2f25802a9395615b7c519ff0b84a7cbfa36d3f8"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        },
        {
          "license" : {
            "id" : "EPL-1.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.mortbay.jetty/jetty@6.1.26?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.eclipse.org/jetty/jetty-parent/project/modules/jetty"
        },
        {
          "type" : "distribution",
          "url" : "http://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://jira.codehaus.org/browse/JETTY"
        },
        {
          "type" : "mailing-list",
          "url" : "http://dev.eclipse.org/mhonarc/lists/jetty-dev/maillist.html"
        },
        {
          "type" : "vcs",
          "url" : "http://fisheye.codehaus.org/viewrep/jetty/modules/jetty/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.mortbay.jetty/jetty@6.1.26?type=jar"
    },
    {
      "publisher" : "Mort Bay Consulting",
      "group" : "org.mortbay.jetty",
      "name" : "jetty-util",
      "version" : "6.1.26",
      "description" : "Utility classes for Jetty",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "450fedce4f7f8ad3761577b10a664200"
        },
        {
          "alg" : "SHA-1",
          "content" : "e5642fe0399814e1687d55a3862aa5a3417226a9"
        },
        {
          "alg" : "SHA-256",
          "content" : "9b974ce2b99f48254b76126337dc45b21226f383aaed616f59780adaf167c047"
        },
        {
          "alg" : "SHA-512",
          "content" : "695bfbfc0ecd8f410fea7c44451f1765a610ccfe427d91e2cf900cab18068e89ad98b75dc37d0fec9b83255e698fb7e26d7089c91dd1d85085e99ca7a9af0ec5"
        },
        {
          "alg" : "SHA-384",
          "content" : "056ad2d0482a77607ed1b135a745ad443eb2a66b0b0bd9786f648a620e40712cdca6dbf3db503bb7e9974269a48f0113"
        },
        {
          "alg" : "SHA3-384",
          "content" : "3d7f0ba19c8439b0357bc1e3101c607ea9a04d91dc3388c26da096ded31edbc4450ab738a76a5fab5025079a2df61ae0"
        },
        {
          "alg" : "SHA3-256",
          "content" : "3f39d7eca8fc8984ec5136b8bbb5dbf120191cd4a42ea4ee17da0a73f73db9a4"
        },
        {
          "alg" : "SHA3-512",
          "content" : "15d9bbf0ea9dc9e6d3aee5c0ad2aed75b436a4dd15f6a8726d8b7a6d4e9a935b109981d4ea284fc098a843553716fbbf9531c94d8f411f69b74853a6300b2a0e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        },
        {
          "license" : {
            "id" : "EPL-1.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.mortbay.jetty/jetty-util@6.1.26?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.eclipse.org/jetty/jetty-parent/project/jetty-util"
        },
        {
          "type" : "distribution",
          "url" : "http://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://jira.codehaus.org/browse/JETTY"
        },
        {
          "type" : "mailing-list",
          "url" : "http://dev.eclipse.org/mhonarc/lists/jetty-dev/maillist.html"
        },
        {
          "type" : "vcs",
          "url" : "http://fisheye.codehaus.org/viewrep/jetty/jetty-util/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.mortbay.jetty/jetty-util@6.1.26?type=jar"
    },
    {
      "publisher" : "Mort Bay Consulting",
      "group" : "org.mortbay.jetty",
      "name" : "jetty-sslengine",
      "version" : "6.1.26",
      "description" : "Parent pom for Jetty at Codehaus",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "d3bea45d6939e57fccf450a914fe4e1a"
        },
        {
          "alg" : "SHA-1",
          "content" : "60367999cee49a3b09fa86bdcb52310b6c896014"
        },
        {
          "alg" : "SHA-256",
          "content" : "9c5f6bb168ba01b95d250b57f061c8094e1ce9c89ae4e773492bacb17192ea87"
        },
        {
          "alg" : "SHA-512",
          "content" : "799b56fabb7f1dd299efe33be881a1253fd38f24764d2c478f08d00771f8176b3fe0839b71da7e67d5d6e32bfe10378284dd8701ec57233eb354cca88639ce44"
        },
        {
          "alg" : "SHA-384",
          "content" : "9c2a3838948b3d10eb6f9b72d2dd0b58ab52b3c392d4f0bdf76397c643112bc7a6a35571167d3b6de05df90e9120a6d7"
        },
        {
          "alg" : "SHA3-384",
          "content" : "a332e74cad375e90dfdece5e3fdd919d44c9992423a37bd30ae2c38d3acb9d3ec622fa2a2c51f63635ab5ebe13723ecf"
        },
        {
          "alg" : "SHA3-256",
          "content" : "4f9e1f9ef626efbcf1f8b17ead92a003b0f693905dd8ca39ed43cd2e6ac53d5e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "9522df250bb97b51d5051f72ee0d676febfe3512a3b6919d2e1a08242ef25d0cd6aa89a9f608df29bd185e9a2d93880ce42f3be51ad18a184cc461d359a3c6e1"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.mortbay.jetty/jetty-sslengine@6.1.26?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://jetty.mortbay.org"
        },
        {
          "type" : "distribution",
          "url" : "http://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://jira.codehaus.org/browse/JETTY"
        },
        {
          "type" : "mailing-list",
          "url" : "http://dev.eclipse.org/mhonarc/lists/jetty-dev/maillist.html"
        },
        {
          "type" : "vcs",
          "url" : "http://fisheye.codehaus.org/viewrep/jetty/jetty-sslengine/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.mortbay.jetty/jetty-sslengine@6.1.26?type=jar"
    },
    {
      "group" : "javax.servlet.jsp",
      "name" : "jsp-api",
      "version" : "2.1",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b8a34113a3a1ce29c8c60d7141f5a704"
        },
        {
          "alg" : "SHA-1",
          "content" : "63f943103f250ef1f3a4d5e94d145a0f961f5316"
        },
        {
          "alg" : "SHA-256",
          "content" : "545f4e7dc678ffb4cf8bd0fd40b4a4470a409a787c0ea7d0ad2f08d56112987b"
        },
        {
          "alg" : "SHA-512",
          "content" : "f320915bf27b05f5f93a69572ff0dad6e68f030b6f0fcb1832f80f7ffe56dba9e0575dd8e6b0425b3704ac75ea2b4a7656bdad64b8cc8610bfdcd5bc1989dcc5"
        },
        {
          "alg" : "SHA-384",
          "content" : "d4017a6b2b171512c97a00a9d84dbe60dd48b233964f1d4c1baa260ff65a7e901c896d38b81a57c98de977b49f0273f4"
        },
        {
          "alg" : "SHA3-384",
          "content" : "1189f5774712edc77ac37ae5aa9570156f78050003da49c182e1a84651f1149bbdf13e1d752dbd16fe637a9869ec5660"
        },
        {
          "alg" : "SHA3-256",
          "content" : "68d8a993b6f6c8615f62800c33ad6aecb836bda091da097c640129472f262340"
        },
        {
          "alg" : "SHA3-512",
          "content" : "09175d9a46ef53e85cf68a779ad515f69f4643d3cef6b96a8f147283d8a61e533ab2cca1f217365180dcbcbd67f8d969ebcae085307ba4579f1f6a73cb657fe6"
        }
      ],
      "licenses" : [ ],
      "purl" : "pkg:maven/javax.servlet.jsp/jsp-api@2.1?type=jar",
      "type" : "library",
      "bom-ref" : "pkg:maven/javax.servlet.jsp/jsp-api@2.1?type=jar"
    },
    {
      "publisher" : "Oracle Corporation",
      "group" : "com.sun.jersey",
      "name" : "jersey-core",
      "version" : "1.9",
      "description" : "Jersey is the open source (under dual CDDL+GPL license) JAX-RS (JSR 311) production quality Reference Implementation for building RESTful Web services.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "73d196595f5e410a37c0a4337350ceb7"
        },
        {
          "alg" : "SHA-1",
          "content" : "8341846f18187013bb9e27e46b7ee00a6395daf4"
        },
        {
          "alg" : "SHA-256",
          "content" : "2c6d0ec88fc8c36cb41637d9c00d0698c22cb6b6a137fa526ef782e00d2265bc"
        },
        {
          "alg" : "SHA-512",
          "content" : "9009037551b1a472ebfdf21697b22927028420607764fe91b9283488b54dbb5012e947328fbb0bfcd5393adde76ad1823baf52edd4e8b5a3bf479730c32f1dbb"
        },
        {
          "alg" : "SHA-384",
          "content" : "99509d6dfe02dd7131cbbb3b5b95d44ba3cc1b55acee760685d8616bcaad63fa2ec3cc432285799511a0838957326267"
        },
        {
          "alg" : "SHA3-384",
          "content" : "ec891d4dbbc2ecca1dc2eade1ee7db476683ac09db9c2f2e33142e58c85ebb77215ff98ffbe32d12cac5d1d01a5c442e"
        },
        {
          "alg" : "SHA3-256",
          "content" : "0217456004fa2a6e71c54630f4c8937130aa3fda026b84817a59f3d3fe3d7eab"
        },
        {
          "alg" : "SHA3-512",
          "content" : "f086bf1917aee7d14d76cb5897a657b203dc5d6a221388e2045ebd6dcb90ca1af466bd5b9bb6c6a894865818d2f9f6744d13247350d43afdb150d9c8cf5499f3"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "CDDL-1.1"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl" : "pkg:maven/com.sun.jersey/jersey-core@1.9?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://jersey.java.net/jersey-core/"
        },
        {
          "type" : "build-system",
          "url" : "http://hudson.glassfish.org/job/Jersey-trunk-multiplatform/"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.java.net/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://java.net/jira/browse/JERSEY/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://java.net/projects/jersey/lists/users/archive"
        },
        {
          "type" : "vcs",
          "url" : "http://java.net/projects/jersey/sources/svn/show/trunk/jersey/jersey-core"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.sun.jersey/jersey-core@1.9?type=jar"
    },
    {
      "publisher" : "Oracle Corporation",
      "group" : "com.sun.jersey",
      "name" : "jersey-json",
      "version" : "1.9",
      "description" : "Jersey is the open source (under dual CDDL+GPL license) JAX-RS (JSR 311) production quality Reference Implementation for building RESTful Web services.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "17ca6b0d49ed8db159b7827b6defa6b6"
        },
        {
          "alg" : "SHA-1",
          "content" : "1aa73e1896bcc7013fed247157d7f676226eb432"
        },
        {
          "alg" : "SHA-256",
          "content" : "cc5d535f43cef0d1c467240961aae35801a837ab010319e741b2c7a6658f3fd6"
        },
        {
          "alg" : "SHA-512",
          "content" : "266e6ed47218316f4dd3bb9122d291d077fb5af0f0b649340c9e3724e0b8bc02e6410207a154c8dffac891ad817a241caaf80ff66604200993dbbe5ca9a79b9a"
        },
        {
          "alg" : "SHA-384",
          "content" : "6f05b0ce1da3122567a9c468e3720d54eade2860c61c0793928ec83850ffc1129093e5d6ce97e5804d2b8246045f5b71"
        },
        {
          "alg" : "SHA3-384",
          "content" : "5edc6c6ebd5d2376e6be0623c76a7bf86991b7e862fecb7deb0b6807756e5af2605fe8c4d06fc0ef10dc6465ae5b8b7a"
        },
        {
          "alg" : "SHA3-256",
          "content" : "146f85e2c521aec2a5ba77bc011475ae6693c5238ecf8d090d05f4706417fde5"
        },
        {
          "alg" : "SHA3-512",
          "content" : "1a0bb9d2678ef74c30859cc2b1a9197770fbd5904a0186619b3916f01d539c8dbab887f4d4a9ef8b049a8d84922e53696ea523b9e6c921ee4f847199d07a563f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "CDDL-1.1"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl" : "pkg:maven/com.sun.jersey/jersey-json@1.9?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://jersey.java.net/jersey-json/"
        },
        {
          "type" : "build-system",
          "url" : "http://hudson.glassfish.org/job/Jersey-trunk-multiplatform/"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.java.net/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://java.net/jira/browse/JERSEY/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://java.net/projects/jersey/lists/users/archive"
        },
        {
          "type" : "vcs",
          "url" : "http://java.net/projects/jersey/sources/svn/show/trunk/jersey/jersey-json"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.sun.jersey/jersey-json@1.9?type=jar"
    },
    {
      "group" : "org.codehaus.jettison",
      "name" : "jettison",
      "version" : "1.1",
      "description" : "A StAX implementation for JSON.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "fc80e0aabd516c54739262c3d618303a"
        },
        {
          "alg" : "SHA-1",
          "content" : "1a01a2a1218fcf9faa2cc2a6ced025bdea687262"
        },
        {
          "alg" : "SHA-256",
          "content" : "377940288b0643c48780137f6f68578937e1ea5ca2b73830a820c50a7b7ed801"
        },
        {
          "alg" : "SHA-512",
          "content" : "075137cc1acbcdc4f07ac421d0f8fef7af5ac015520580aa3b908f22463b2ba86ba6be3b7511561d0459f1f14fac94617653c3777342ee0c857016baa7120ee9"
        },
        {
          "alg" : "SHA-384",
          "content" : "6fade925eed045ef42898f7e5cf72ac71e782ac802a9610aba57c78a39e16c7422eea88fd614e26ebe9e3e2e52bb4d2f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "ed287c5346fc063603377b96bfad292cbe28c5604c120acb0405de2e3def3a42da6deafa6d070fbb106482786a791768"
        },
        {
          "alg" : "SHA3-256",
          "content" : "7ab16df7e0316871e5650ca1884fb4ac8b8acdfcdb0bda834729d83b44f8c993"
        },
        {
          "alg" : "SHA3-512",
          "content" : "f96810a0475fdb589211d57ed374b3d4d1b897f8b8b715088d0973fc29eb11f6797eed065de86c9acda29529ef1785c8c8f1d2b3d194148a18e9e1f3488d0ac4"
        }
      ],
      "licenses" : [ ],
      "purl" : "pkg:maven/org.codehaus.jettison/jettison@1.1?type=jar",
      "externalReferences" : [
        {
          "type" : "distribution",
          "url" : "dav:https://dav.codehaus.org/repository/jettison/"
        },
        {
          "type" : "vcs",
          "url" : "https://svn.codehaus.org/jettison/tags/jettison-1.1"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.jettison/jettison@1.1?type=jar"
    },
    {
      "publisher" : "Oracle Corporation",
      "group" : "com.sun.xml.bind",
      "name" : "jaxb-impl",
      "version" : "2.2.3-1",
      "description" : "JAXB (JSR 222) reference implementation",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1b689e7f87caf2615c0f6a47831d0342"
        },
        {
          "alg" : "SHA-1",
          "content" : "56baae106392040a45a06d4a41099173425da1e6"
        },
        {
          "alg" : "SHA-256",
          "content" : "fa3e1499b192c310312bf02881274b68394aaea4c9563e6c554cc406ae644ff8"
        },
        {
          "alg" : "SHA-512",
          "content" : "6f08a9d34bd66ceb0e4cc6cdd782423a8a7ab775808e90b6c872977c653cd3e2c539a78554a5c8ef9402092ac4fdceac56b77e76b3c2d800d5ee97db0301a683"
        },
        {
          "alg" : "SHA-384",
          "content" : "223367a9c31cfbd1a407718ad30b176e32874cb6cd6a63e1c4df78ac74ccf027179f0e98639dc595a4ae408b40db99e4"
        },
        {
          "alg" : "SHA3-384",
          "content" : "1c0e7be9683e61b8626065910045eedcffa85439545a2d73c0c53c5c80ddff0d5b56f6ed569c64db25d6817c8804d7ca"
        },
        {
          "alg" : "SHA3-256",
          "content" : "c9896a8b3078515bfa5cec60e9bd90ad6fb5c39678353bd31d9e6055b1241943"
        },
        {
          "alg" : "SHA3-512",
          "content" : "5d44345d5ffb7be42f0785accf35f20fcf3fe09277bb0b2ea5dd27f1d7da2590d0df53286043f40343cf098544d5592c4acf875de703c66fe4dfb7815bddfd62"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "CDDL-1.1"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl" : "pkg:maven/com.sun.xml.bind/jaxb-impl@2.2.3-1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://jaxb.java.net/"
        },
        {
          "type" : "distribution",
          "url" : "svn:https://svn.java.net/svn/maven2-repository~svn/trunk/repository"
        },
        {
          "type" : "vcs",
          "url" : "https://svn.java.net/svn/jaxb~version2/jaxb-ri"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.sun.xml.bind/jaxb-impl@2.2.3-1?type=jar"
    },
    {
      "publisher" : "Oracle Corporation",
      "group" : "javax.xml.bind",
      "name" : "jaxb-api",
      "version" : "2.3.1",
      "description" : "JAXB (JSR 222) API",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "bcf270d320f645ad19f5edb60091e87f"
        },
        {
          "alg" : "SHA-1",
          "content" : "8531ad5ac454cc2deb9d4d32c40c4d7451939b5d"
        },
        {
          "alg" : "SHA-256",
          "content" : "88b955a0df57880a26a74708bc34f74dcaf8ebf4e78843a28b50eae945732b06"
        },
        {
          "alg" : "SHA-512",
          "content" : "93a47b245ab830d664a48c9d14e86198a38809ce94f72ca66b3d68746ae1d7b902f6fef2d1ac1a92c01701549ae80a07db69bd822ffd831a95d8dbffad435790"
        },
        {
          "alg" : "SHA-384",
          "content" : "1eb2d7f307bda8cbf6a4ab5b2b97d830d33ca48ad94eb4bb1cbce860c54fca96285dbcb1ce9b164dbf37d4475f9a198f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "8df7409d3f60888f3a80f4d49af66c2cab6dc9f00e79c87c17703faad19d8ba6c8fc96ad897434170ce2686952921cdd"
        },
        {
          "alg" : "SHA3-256",
          "content" : "41338683257d5ecead579ccc137bdef7bc4fea685d039a3d894e1d6730425e1d"
        },
        {
          "alg" : "SHA3-512",
          "content" : "3371a96171f69876b0e6b8354674d252680e6d52c509a2645b1a0b0d7f9e176274bde6c89edb40986264733ffb6794cb7b2cba417666b1e82075bd4fd51197b6"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "CDDL-1.1"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl" : "pkg:maven/javax.xml.bind/jaxb-api@2.3.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/javaee/jaxb-spec/jaxb-api"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.java.net/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/javaee/jaxb-spec/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/javaee/jaxb-spec.git/jaxb-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/javax.xml.bind/jaxb-api@2.3.1?type=jar"
    },
    {
      "publisher" : "Oracle",
      "group" : "javax.activation",
      "name" : "javax.activation-api",
      "version" : "1.2.0",
      "description" : "JavaBeans Activation Framework API jar",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "5e50e56bcf4a3ef3bc758f69f7643c3b"
        },
        {
          "alg" : "SHA-1",
          "content" : "85262acf3ca9816f9537ca47d5adeabaead7cb16"
        },
        {
          "alg" : "SHA-256",
          "content" : "43fdef0b5b6ceb31b0424b208b930c74ab58fac2ceeb7b3f6fd3aeb8b5ca4393"
        },
        {
          "alg" : "SHA-512",
          "content" : "8ee0db43ae402f0079a836ef2bff5d15160e3ff9d585c3283f4cf474be4edd2fcc8714d8f032efd72cae77ec5f6d304fc24fa094d9cdba5cf72966cc964af6c9"
        },
        {
          "alg" : "SHA-384",
          "content" : "d38a6af7ed00f13de8b46d49b9592af9b67adf3df47ddae5e4672f989f3f39101d446a77d1c11319acf8ff0a5b4feedf"
        },
        {
          "alg" : "SHA3-384",
          "content" : "cfee76de5976d5994758a06113368092f09b0729d753b99969d6a5ec32919428bd7c270c98cbbc682ff8ebcf2b93fd8d"
        },
        {
          "alg" : "SHA3-256",
          "content" : "aff48d0f28d8a99690c5a84c3fffdb3775452d5387e5698f4c9028c92a3b4888"
        },
        {
          "alg" : "SHA3-512",
          "content" : "0507ece74b3147de60a830071bd434569c82e03f414a2b7f0d8a225dda36720d2e2194799cdc04def1909fdec21059b67c518bb9162f7f605764d542194e721d"
        }
      ],
      "licenses" : [
        {
          "expression" : "(CDDL-1.0 OR GPL-2.0-with-classpath-exception)"
        }
      ],
      "purl" : "pkg:maven/javax.activation/javax.activation-api@1.2.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://java.net/all/javax.activation-api/"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.java.net/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/javaee/activation/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/javaee/activation/javax.activation-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/javax.activation/javax.activation-api@1.2.0?type=jar"
    },
    {
      "publisher" : "FasterXML",
      "group" : "org.codehaus.jackson",
      "name" : "jackson-jaxrs",
      "version" : "1.8.3",
      "description" : "Jax-RS provider for JSON content type, based on Jackson JSON processor's data binding functionality.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "7634227657d2414a0c65e0818b30d5ed"
        },
        {
          "alg" : "SHA-1",
          "content" : "3604ca9f572170e2ef5813141ec1f0e0100efd19"
        },
        {
          "alg" : "SHA-256",
          "content" : "cadd12137aaf121722630d00117df63e34afc5b3dab5be68c921740114a05fba"
        },
        {
          "alg" : "SHA-512",
          "content" : "2b18eb8573a6f4e2e790aaf169f5b7529d13d0d9bdd0a93335fffde52cd968ec3bda471d6fdde5b8eb41a72640b13fa0765bc20908868e7cf920d461b7645249"
        },
        {
          "alg" : "SHA-384",
          "content" : "d4da3574d6b397dd75d3374aae9efb1af630430a764fbfd164013907c4e46d4ea01e4c0ed14638fb5a74b78349870103"
        },
        {
          "alg" : "SHA3-384",
          "content" : "ac83b503db651627684555f54fa78160f2c94849743f52a84f741dc5513807fb2ad88c0d323cc5a5b22143587f5ec3b1"
        },
        {
          "alg" : "SHA3-256",
          "content" : "6bb47093b3fc0b48503710afb8932852aa603a7295b19979f58423939c8664a5"
        },
        {
          "alg" : "SHA3-512",
          "content" : "a2580bdb993c3e44a1fc8e3e5a95ac19f814149b3dec13d23515b2794489837132377eae9cc794075108bab250e3db1e77033ffb54ef7a2e5957a0e75a84c128"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        },
        {
          "license" : {
            "name" : "GNU Lesser General Public License (LGPL), Version 2.1",
            "url" : "http://www.fsf.org/licensing/licenses/lgpl.txt"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.jackson/jackson-jaxrs@1.8.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://jackson.codehaus.org"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://jira.codehaus.org/browse/JACKSON"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.jackson/jackson-jaxrs@1.8.3?type=jar"
    },
    {
      "publisher" : "FasterXML",
      "group" : "org.codehaus.jackson",
      "name" : "jackson-xc",
      "version" : "1.8.3",
      "description" : "Extensions that provide interoperability support for Jackson JSON processor's data binding functionality.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0ee32b08580654d69147ecfab0321270"
        },
        {
          "alg" : "SHA-1",
          "content" : "1226667dcdb7c259b3ee07e112ed83446554516e"
        },
        {
          "alg" : "SHA-256",
          "content" : "e25789f6d6e0c60c0f46f89d33586190bef23626d9efd3b5d41fe42b45afec96"
        },
        {
          "alg" : "SHA-512",
          "content" : "5b23009a505ab04a43025e01d5905d57c03ef61417165fb08a67280a23ed15a8fc34a4b91fb50b26c75af8cb22bbbdb4917d39bd99af1806d2fe610453c137fb"
        },
        {
          "alg" : "SHA-384",
          "content" : "148dc3970f2219e527d316aeeb55cdeb8497ba04e2181ad928709805cf13394a60f4d5913637d0e9a3e32c7f5e55b043"
        },
        {
          "alg" : "SHA3-384",
          "content" : "3f40ade27620ce97b249bcffda2dfd2d713151a535bceb11b0fcc6be3be50d3df2b2e03a0a4124dc3ca1805cf3f37ce1"
        },
        {
          "alg" : "SHA3-256",
          "content" : "5fbf6a33eeb70bd79208d7ce4609f242d2a08fced37c21db9e8d15c342ebb126"
        },
        {
          "alg" : "SHA3-512",
          "content" : "e842d332c204831f646cf7ac1ec227640e8ab470ca8dfc46aad2ca5d550444d521acf56861343f4a6fbd1aff99eabb3880ba863377a74df4029cdde4b1238008"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        },
        {
          "license" : {
            "name" : "GNU Lesser General Public License (LGPL), Version 2.1",
            "url" : "http://www.fsf.org/licensing/licenses/lgpl.txt"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.jackson/jackson-xc@1.8.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://jackson.codehaus.org"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://jira.codehaus.org/browse/JACKSON"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.jackson/jackson-xc@1.8.3?type=jar"
    },
    {
      "publisher" : "Oracle Corporation",
      "group" : "com.sun.jersey",
      "name" : "jersey-server",
      "version" : "1.9",
      "description" : "Jersey is the open source (under dual CDDL+GPL license) JAX-RS (JSR 311) production quality Reference Implementation for building RESTful Web services.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0c98f6cca5df8197b310a0d1d89bb34a"
        },
        {
          "alg" : "SHA-1",
          "content" : "3a6ea7cc5e15c824953f9f3ece2201b634d90d18"
        },
        {
          "alg" : "SHA-256",
          "content" : "3ded91b198077561bd51f6c0442c9cd70b754d8b31b61afaf448bda9d01848f0"
        },
        {
          "alg" : "SHA-512",
          "content" : "9354a94b5044519e6f8f08c89c5d7c57e1041555bc333f401dc18ea51c21c0db03838a55bdb43bbbc0e37a8c3f1f0bcaf4164c5284a5f096af61b549dfe3eec8"
        },
        {
          "alg" : "SHA-384",
          "content" : "231ac671ba61b142d940a3d88919650c701c9cf0cacf91d2f29c450349f486d8e0eab76dbdc73baa98ccda3acaa77101"
        },
        {
          "alg" : "SHA3-384",
          "content" : "d5792bafb84a124b86625cae09072ef0958da59a4ea418ddd57e24dfb91d08d6a1b43ec29ab5586ae437284bf3c85447"
        },
        {
          "alg" : "SHA3-256",
          "content" : "495463f7c0874f77b54bd492889e2c2df0476fec28eb2e9d3b31c8d6619857a5"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c065a652d816f93d5c8fa8eebae4298574898e7f31ae889ca024e8a284df6d630f64ec2313fc73db3b017946ce5fff271a0e0a802e900b71bcf15614521d2315"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "CDDL-1.1"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl" : "pkg:maven/com.sun.jersey/jersey-server@1.9?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://jersey.java.net/jersey-server/"
        },
        {
          "type" : "build-system",
          "url" : "http://hudson.glassfish.org/job/Jersey-trunk-multiplatform/"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.java.net/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://java.net/jira/browse/JERSEY/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://java.net/projects/jersey/lists/users/archive"
        },
        {
          "type" : "vcs",
          "url" : "http://java.net/projects/jersey/sources/svn/show/trunk/jersey/jersey-server"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.sun.jersey/jersey-server@1.9?type=jar"
    },
    {
      "publisher" : "ObjectWeb",
      "group" : "asm",
      "name" : "asm",
      "version" : "3.1",
      "description" : "A very small and fast Java bytecode manipulation framework",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b9b8d2d556f9458aac8c463fd511f86d"
        },
        {
          "alg" : "SHA-1",
          "content" : "c157def142714c544bdea2e6144645702adf7097"
        },
        {
          "alg" : "SHA-256",
          "content" : "333ff5369043975b7e031b8b27206937441854738e038c1f47f98d072a20437a"
        },
        {
          "alg" : "SHA-512",
          "content" : "074612f145765d33c449887a29dd0791205881ba42d613e52b360ca53bd47c5f9835049de8fc6a384041de2e73bd271b6177c2225e2f72853a88359f6c10b14d"
        },
        {
          "alg" : "SHA-384",
          "content" : "c4ae90a52b7a23cbca12a01777e140e3f3f7943634611c23166a60d69a90f1edfeac8b210979f055fab6d1526d287ba4"
        },
        {
          "alg" : "SHA3-384",
          "content" : "04cc814a6d1d69266aba09985cd6ac04c5bc99964b099c88d89690ab656d53044a6a6bea6b79a37dc41c3202364888b6"
        },
        {
          "alg" : "SHA3-256",
          "content" : "0d52b7d9c8c5e047e79df73f4a4883e84eb324739748f1aac584e2e76b3968e6"
        },
        {
          "alg" : "SHA3-512",
          "content" : "5e0956cb7cd39ac3d6dd773d64a1a40f8a5b83c95306c627214572b996fd37188d9382e2b7c6579c3b93d04a9179ea3b479664de3d54ae9f0bf254de808d8c9c"
        }
      ],
      "licenses" : [ ],
      "purl" : "pkg:maven/asm/asm@3.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://asm.objectweb.org/asm/"
        },
        {
          "type" : "distribution",
          "url" : "http://mojo.codehaus.org/my-project"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://forge.objectweb.org/tracker/?group_id=23"
        },
        {
          "type" : "mailing-list",
          "url" : "http://www.ow2.org/wws/arc/asm"
        },
        {
          "type" : "vcs",
          "url" : "http://cvs.forge.objectweb.org/cgi-bin/viewcvs.cgi/asm/asm/asm/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/asm/asm@3.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-logging",
      "name" : "commons-logging",
      "version" : "1.1.3",
      "description" : "Commons Logging is a thin adapter allowing configurable bridging to other, well known logging systems.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "92eb5aabc1b47287de53d45c086a435c"
        },
        {
          "alg" : "SHA-1",
          "content" : "f6f66e966c70a83ffbdb6f17a0919eaf7c8aca7f"
        },
        {
          "alg" : "SHA-256",
          "content" : "70903f6fc82e9908c8da9f20443f61d90f0870a312642991fe8462a0b9391784"
        },
        {
          "alg" : "SHA-512",
          "content" : "e5d1fc8ec4544e1fa0f7c4aae8dbcca466c4987bc92fbbc430b054b10d646b745add4a754b1be9d50edd64330c798c53173a97289db57a966312e16f934e9d1f"
        },
        {
          "alg" : "SHA-384",
          "content" : "00dc41783f4081585e20adcfe83fd4dbb6b5a27236ee633d7e53dedcbca83ba5e5f0ca68d31f95e9c724b365e4c67499"
        },
        {
          "alg" : "SHA3-384",
          "content" : "6915e597821aa2fed7f4b05f4de3476364074ab5cee7e13b4eb5b94a9d297b58cb391c6b730e6ea0d4e81e323a90d002"
        },
        {
          "alg" : "SHA3-256",
          "content" : "c49c80e2576bf037fc871e70df8708f5e35c0977a907e966c0334e9fac17b297"
        },
        {
          "alg" : "SHA3-512",
          "content" : "b74b6e6d771005014614774d059a4e1ceab929c0678839846d143e56e4724455242ffa3d5d411c6554a41e1f66fe1f94c51472d80c07d44c02a2f9a6715d8c7d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-logging/commons-logging@1.1.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://commons.apache.org/proper/commons-logging/"
        },
        {
          "type" : "build-system",
          "url" : "http://vmbuild.apache.org/continuum/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/LOGGING"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/repos/asf/commons/proper/logging/trunk"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-logging/commons-logging@1.1.3?type=jar"
    },
    {
      "group" : "net.java.dev.jets3t",
      "name" : "jets3t",
      "version" : "0.9.0",
      "description" : "JetS3t is a free, open-source Java toolkit and application suite for Amazon Simple Storage Service (Amazon S3), Amazon CloudFront content delivery network, and Google Storage for Developers.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "22559a7c686b19534707228decc3c6d7"
        },
        {
          "alg" : "SHA-1",
          "content" : "792bc96ee7e57b89f472aa0cb5a31015b9f59c96"
        },
        {
          "alg" : "SHA-256",
          "content" : "e89893fc754b252af717d7d14accda946f7dfcfc1e293fd3e04725163d661bd7"
        },
        {
          "alg" : "SHA-512",
          "content" : "79fcaa8be8980b2fc9d8463854130eb7a7d6110fa795e73ac01d9abad23ec1588178e9d557d84f05b8e0b4ac909ae65eed1ff92e35c889208af003e195ff23c4"
        },
        {
          "alg" : "SHA-384",
          "content" : "c6e4516169d4d1c2241c3df7dd57e159cbe603cd746a125fff201cd097a351d82d6ca30e93aeee19a73bca0a009e94e0"
        },
        {
          "alg" : "SHA3-384",
          "content" : "6f5c6938b1c058addb30e83f29d2fd5caa1c85fa388a6e973fb323a769d409865fca658bd5e5657c2c5c12391165e59f"
        },
        {
          "alg" : "SHA3-256",
          "content" : "a796b73cd29be0501cd93cd9aa4472fd1636fec60373648b958d48393ddf5b82"
        },
        {
          "alg" : "SHA3-512",
          "content" : "6aacb4e00e35fe9891313287be52a0d490a22726508ad1e539e01868f2b5f730020301c9cee77386851854ee5adc4c2568f7fe15056ba5a8911f2f6c3d84d744"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/net.java.dev.jets3t/jets3t@0.9.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.jets3t.org"
        },
        {
          "type" : "vcs",
          "url" : "http://bitbucket.org/jmurty/jets3t/src"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/net.java.dev.jets3t/jets3t@0.9.0?type=jar"
    },
    {
      "group" : "com.jamesmurty.utils",
      "name" : "java-xmlbuilder",
      "version" : "0.4",
      "description" : "XML Builder is a utility that creates simple XML documents using relatively sparse Java code",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0fa474213a6a0282cd9264f6e0dd3658"
        },
        {
          "alg" : "SHA-1",
          "content" : "ac5962e48cdee3a0a6e1f8e00fcb594747ac5aaf"
        },
        {
          "alg" : "SHA-256",
          "content" : "681e53c4ffd59fa12068803b259e3a83d43f07a47c112e748a187dee179eb31f"
        },
        {
          "alg" : "SHA-512",
          "content" : "4cbbf37807c05f714f554d0b340ebe78007c619a233ad243825e37e89403f550bd272e19733ad94bdfc48707cf8b5dd20d3e8552da9d40faa4cf549fdf0cddf5"
        },
        {
          "alg" : "SHA-384",
          "content" : "a9760f16e6bbe7155184e115f641a30341d6021a9f89e63c1d920403d1285059f10246df23a91e2749bf3cda3727a335"
        },
        {
          "alg" : "SHA3-384",
          "content" : "9cf23c5cc08d2e5afc69efceff8d633cc8cb53d5360909c4247b783374ef44d99ecbfd61652f13472a5e12bc4a1a76a6"
        },
        {
          "alg" : "SHA3-256",
          "content" : "3631ca9b35188d611c32d0117fd2caca530f139d9417aa74cd15b2195e4c56fa"
        },
        {
          "alg" : "SHA3-512",
          "content" : "7a3de577e20c4ef1de04c4be9bfb2bd273e2c7b221decd285c631b8dca475084d2d498834e258853de6fd0e5049acdfe5e8058a3e342e128fd17803e188c95aa"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.jamesmurty.utils/java-xmlbuilder@0.4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://code.google.com/p/java-xmlbuilder/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "http://java-xmlbuilder.googlecode.com/svn/tags/java-xmlbuilder-0.4"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.jamesmurty.utils/java-xmlbuilder@0.4?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-configuration",
      "name" : "commons-configuration",
      "version" : "1.7",
      "description" : "Tools to assist in the reading of configuration/preferences files in various formats",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0005907480f12ee461cb4cec25af61ea"
        },
        {
          "alg" : "SHA-1",
          "content" : "3559d47ea9e5f46d8cdc6503f08344b67b255dfd"
        },
        {
          "alg" : "SHA-256",
          "content" : "cdc6a3bf74d47965b8e011ae9a28ae30a2d62c229c25e67e0edae2479d599be3"
        },
        {
          "alg" : "SHA-512",
          "content" : "cc6a6075099f2edb228b6eb7424b9769a34f8bf66aa29ab5fd0e5422024fd23bb02fdbfd7d08d9557b12379114c9c5f0649c88700518a5f0b39df237955fd2c2"
        },
        {
          "alg" : "SHA-384",
          "content" : "f7083178493604784a2aa713658c11d56963cc815a99e63af344c1dc1cbac55a87836177a0d145e0e325ecf7d84681eb"
        },
        {
          "alg" : "SHA3-384",
          "content" : "38245710c219cf0b64675a26d9e464214841fd9922897930eb75a8f708f86b074f814949b7be2ce33cdf6a28fc25cb8f"
        },
        {
          "alg" : "SHA3-256",
          "content" : "4c2ee770ab622ce52712713821f144c307035ae9d17aae11c6cfa9dc8832765e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "4220f838810e5855069749829fcf7750a9f320dcfdb9dfa3447b6d8a529a4b60eb8a72b4140c66bc62c4a49c3bd16b25b6a6426297731ea60d1f36ff4e778b28"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-configuration/commons-configuration@1.7?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://commons.apache.org/configuration/"
        },
        {
          "type" : "build-system",
          "url" : "http://vmbuild.apache.org/continuum/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/CONFIGURATION"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/commons/proper/configuration/trunk"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-configuration/commons-configuration@1.7?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-digester",
      "name" : "commons-digester",
      "version" : "1.8",
      "description" : "The Digester package lets you configure an XML->Java object mapping module which triggers certain actions called rules whenever a particular pattern of nested XML elements is recognized.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "cf89c593f0378e9509a06fce7030aeba"
        },
        {
          "alg" : "SHA-1",
          "content" : "dc6a73fdbd1fa3f0944e8497c6c872fa21dca37e"
        },
        {
          "alg" : "SHA-256",
          "content" : "05662373044f3dff112567b7bb5dfa1174e91e074c0c727b4412788013f49d56"
        },
        {
          "alg" : "SHA-512",
          "content" : "138aaadde6b134eeb39574fde80f8eed1dee4a7049fccdd8c462c0a0dfab5419bafd259e77b99d85094b4e7c864673f07249c39c3b18aff87ef39b3663f537a2"
        },
        {
          "alg" : "SHA-384",
          "content" : "9dcfb1988fb8de4fb7482ce419bd99ea780795403228cc51454e9dd7fec3cb3af889178fbc6b906ec6f991aa77124cb5"
        },
        {
          "alg" : "SHA3-384",
          "content" : "40f4faa08d895e7aed56f62b5e793cb99c91819629ed1f6a82a8decfe12fd08077dfa6d61f7974bf1069a1684dcca273"
        },
        {
          "alg" : "SHA3-256",
          "content" : "473187f8a52324feaf965f6ea1a8d578c15e57b68f1336799ff432521ab2df27"
        },
        {
          "alg" : "SHA3-512",
          "content" : "e7a95ea8e864301db31754797d164f37cbc53f61598fdfac9cfdce04f4538f56a10a638a193c60ee176f2cf24e9785c682ccde3b6c13562638b4d5a3a81a0389"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-digester/commons-digester@1.8?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://jakarta.apache.org/commons/digester/"
        },
        {
          "type" : "distribution",
          "url" : "file:///www/jakarta.apache.org/builds/jakarta-commons/digester/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/jakarta-commons-dev/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/repos/asf/jakarta/commons/proper/digester/trunk"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-digester/commons-digester@1.8?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-beanutils",
      "name" : "commons-beanutils",
      "version" : "1.9.4",
      "description" : "Apache Commons BeanUtils provides an easy-to-use but flexible wrapper around reflection and introspection.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "07dc532ee316fe1f2f0323e9bd2f8df4"
        },
        {
          "alg" : "SHA-1",
          "content" : "d52b9abcd97f38c81342bb7e7ae1eee9b73cba51"
        },
        {
          "alg" : "SHA-256",
          "content" : "7d938c81789028045c08c065e94be75fc280527620d5bd62b519d5838532368a"
        },
        {
          "alg" : "SHA-512",
          "content" : "7762b348caecead49038a38a89754ff7d9be6199324315495ba47cf24f52c06faadf9306d925c8fe47c587589a939c82e491e1c730267fdf354243a68c0f96ff"
        },
        {
          "alg" : "SHA-384",
          "content" : "dcd3845917b8fb189cf4034b0d7c6d266ec7110f85ffbd2711cdea9eb94b4fa3e1cee9120b484c6a120b82769230ed3a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "dfdb8845989be083de807184910124ad7e7e372959b34686cd5f5020f193a2997831ead497b0a5a0233f031aecdf55f6"
        },
        {
          "alg" : "SHA3-256",
          "content" : "127a81068335d6ca47f5f5e12d849dc1bc5300b2ad8d3f9b64ca30ff2a76d479"
        },
        {
          "alg" : "SHA3-512",
          "content" : "f67405d0a7667adf7cd35cd7416c54e1759380cdb9c8f179a10175058e40292808e17e69d48df4d4d6b5e268c314127cf3ab87af6920a271bb2e6e0df963940d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-beanutils/commons-beanutils@1.9.4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-beanutils/"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/BEANUTILS"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/commons/proper/beanutils/tags/BEANUTILS_1_9_3_RC3"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-beanutils/commons-beanutils@1.9.4?type=jar"
    },
    {
      "publisher" : "FasterXML",
      "group" : "org.codehaus.jackson",
      "name" : "jackson-core-asl",
      "version" : "1.9.13",
      "description" : "Jackson is a high-performance JSON processor (parser, generator)",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "319c49a4304e3fa9fe3cd8dcfc009d37"
        },
        {
          "alg" : "SHA-1",
          "content" : "3c304d70f42f832e0a86d45bd437f692129299a4"
        },
        {
          "alg" : "SHA-256",
          "content" : "440a9cb5ca95b215f953d3a20a6b1a10da1f09b529a9ddea5f8a4905ddab4f5a"
        },
        {
          "alg" : "SHA-512",
          "content" : "11725da54c7c18af0b50967a9317866ce9d11eb94d3b52ff7a54c6550070e143b5a582de9a8ebb6d61a8104f4dcd7ddb9c2e6f5c3605b6900d48f5241fe38d89"
        },
        {
          "alg" : "SHA-384",
          "content" : "26bff8b72770f734bac78e1ef2f575b26b7676895a4f022f402c99e38b567905ace700f553771606603f508b749bfb4f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "27be7948772c3680134e42ca889dc3f42954394fff4b6f7157d73a9f32886795c6d56b80283d2d762409ad56b753a811"
        },
        {
          "alg" : "SHA3-256",
          "content" : "a0ea1eb75ad00b7c61b96cd71b40b6a0f558c7e1089d42b6d3cd635b1f62b0b1"
        },
        {
          "alg" : "SHA3-512",
          "content" : "67bb970e761b9dc171ba1e88e5ca2079de26b046f773f89400ccef901d1c0ce7f9f6d0d4a0af5c18ac54c1fbcdce035809584b6514167bd8cb6730294947b13f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.jackson/jackson-core-asl@1.9.13?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://jackson.codehaus.org"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://jira.codehaus.org/browse/JACKSON"
        },
        {
          "type" : "vcs",
          "url" : "http://xircles.codehaus.org/projects/jackson/repos/primary/repo"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.jackson/jackson-core-asl@1.9.13?type=jar"
    },
    {
      "publisher" : "FasterXML",
      "group" : "org.codehaus.jackson",
      "name" : "jackson-mapper-asl",
      "version" : "1.9.14.jdk17-redhat-00001",
      "description" : "Data Mapper package is a high-performance data binding package built on Jackson JSON processor",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "49eb643fc2793d5e1902a949e382a7d1"
        },
        {
          "alg" : "SHA-1",
          "content" : "e7c333bf4a9784e9d40f67b5ca1a9ffd4958ac38"
        },
        {
          "alg" : "SHA-256",
          "content" : "d83e364a0dda7345bef76c3f17b7cf6eff6ac6bbbe31fc6ef24c05a940a0de79"
        },
        {
          "alg" : "SHA-512",
          "content" : "fb6f470b541c7d05ccb6b83762a5dab4f5018f4ff0b182ce41ac21afe5df7a3b4d19819814130cec59908fbc493b65793daf4256e6078ced58cab3c744916643"
        },
        {
          "alg" : "SHA-384",
          "content" : "92ea61b35b1457abc3df279b707a723db70942de58cc57b3f78ed17dab5b94757fb79d6682b484e2c86dec6c8c0f0852"
        },
        {
          "alg" : "SHA3-384",
          "content" : "42c1dabe89d1eeb4314adc64d1995a52482879ac4eb742f853dc0eace6bc508dceb20fe3bb9bc29ccc825dd05d954e8f"
        },
        {
          "alg" : "SHA3-256",
          "content" : "e4286ee1e577554195b5d5ed087611874bb6f8510d63d037f535ca50101b2a65"
        },
        {
          "alg" : "SHA3-512",
          "content" : "d302c42200cf8132fc4be9f6ed1b4b3baa98504c9a3ad981e1d7564af284a8a09b8b905ecad14ce03155bebdd9645b59b01439f23eae97fb55915784864d7255"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.jackson/jackson-mapper-asl@1.9.14.jdk17-redhat-00001?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://jackson.codehaus.org"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://jira.codehaus.org/browse/JACKSON"
        },
        {
          "type" : "vcs",
          "url" : "http://xircles.codehaus.org/projects/jackson/repos/primary/repo"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.jackson/jackson-mapper-asl@1.9.14.jdk17-redhat-00001?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.avro",
      "name" : "avro",
      "version" : "1.11.4",
      "description" : "Avro core components",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "915002011d651686f94b4e20d25234a6"
        },
        {
          "alg" : "SHA-1",
          "content" : "25d54640c4a17aa342490c4c63c172759361bf56"
        },
        {
          "alg" : "SHA-256",
          "content" : "eeba11b77070b9aa6337d886fdf778f6695f6c4c3dcfd2a02389925c885079fa"
        },
        {
          "alg" : "SHA-512",
          "content" : "2133473bcafb3997f70dd0dc44e76872beed30910dc88522d898e639df0c58f8fefec4c734e46bf0244cf2ca1b49e90b0fdf5c9d7ccd06b41f8f9ad98da1cca5"
        },
        {
          "alg" : "SHA-384",
          "content" : "701113d1e68c4582aad203692567bff7538d6ac2707195b413e9f831215e0c8622e83383adcc822a353524c28aba5dda"
        },
        {
          "alg" : "SHA3-384",
          "content" : "017e0363dfdf0019a2e75785c1f7a8aebe1a61f2c96393bacea3238d8f010d3d82ddcf3466d474ebb113ef67e9ecf192"
        },
        {
          "alg" : "SHA3-256",
          "content" : "135d7a5a6e9723e77cee8ede0687f459f8fbb828f4111dc351f747b2b72eb0dd"
        },
        {
          "alg" : "SHA3-512",
          "content" : "04d0041f4d215b51a446ec9c2b2998042285f81d85dd316f046b46420b71d459e3f66530ddbc2b98772ee5ced0d8788cb21c46b09d2139d311930ce5424ac3b9"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.avro/avro@1.11.4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://avro.apache.org"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/AVRO"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/avro-dev/"
        },
        {
          "type" : "vcs",
          "url" : "scm:git:https://github.com/apache/avro/avro-parent/avro"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.avro/avro@1.11.4?type=jar"
    },
    {
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.jackson.core",
      "name" : "jackson-core",
      "version" : "2.18.2",
      "description" : "Core Jackson processing abstractions (aka Streaming API), implementation for JSON",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "bf935e6eca3a57defa13918661905cb0"
        },
        {
          "alg" : "SHA-1",
          "content" : "fb64ccac5c27dca8819418eb4e443a9f496d9ee7"
        },
        {
          "alg" : "SHA-256",
          "content" : "d8054ae7c0d1c2d2f55d28e46026ebe5892881f3fab5f439233184381c3b4a1f"
        },
        {
          "alg" : "SHA-512",
          "content" : "2223f6d8235c6831b488dd2723a4569e4dab6c2371f0e39f867b57a3a443e093d1fce05dc070a350fa306d7e952888cb09c7c816254147b01083d122964fc3a5"
        },
        {
          "alg" : "SHA-384",
          "content" : "7c5183b4e0ceb3d9dd089e29253832fdbe5f126a7b8c08fa66ab46f5050eb3b8fd792e00bd914f49000719e547586e23"
        },
        {
          "alg" : "SHA3-384",
          "content" : "2a973e2dcd1b65eb63f783878c542fa804254c880d47180717cd5ab239670b529c61ca4de647d4683cf4b459b6a7f5df"
        },
        {
          "alg" : "SHA3-256",
          "content" : "c99bd2cc1f13748357bf002d92d83f9f2d14d777c5e3fb7ed38c6891c76dbcb8"
        },
        {
          "alg" : "SHA3-512",
          "content" : "10b0328f2cd2a347f8c3eb8ed1967036b8940fe9b444ac27ffdb66bd373686a13fe7ec7498de5b81af1a301ed4afeb85aece0afb782aa6cadcf78362fa7ea5ae"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.18.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/FasterXML/jackson-core"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/FasterXML/jackson-core/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/FasterXML/jackson-core"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.18.2?type=jar"
    },
    {
      "publisher" : "Google, Inc.",
      "group" : "com.google.code.gson",
      "name" : "gson",
      "version" : "2.2.4",
      "description" : "Google Gson library",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "2f54fc24807a4cad7297012dd8cebf3d"
        },
        {
          "alg" : "SHA-1",
          "content" : "a60a5e993c98c864010053cb901b7eab25306568"
        },
        {
          "alg" : "SHA-256",
          "content" : "c0328cd07ca9e363a5acd00c1cf4afe8cf554bd6d373834981ba05cebec687fb"
        },
        {
          "alg" : "SHA-512",
          "content" : "d7aa9214cefb99b2f39bab6bf5718dafcb43742f8a881e5fb6cbc3a757491c0082a536ed1fef6c7168412b6e5bdec28e68a40b4d4d0b57b63a7bbc9a55f820cd"
        },
        {
          "alg" : "SHA-384",
          "content" : "2c5d7ed5310c1a1b45b7b46479361debd5e2e49737f167bff9c11dd989fa38b973ccd7b4655dbb5e34b0ff4ff1a8d755"
        },
        {
          "alg" : "SHA3-384",
          "content" : "3cc62c086a1d97a2485921e3dd1c3cb5c91be299932b3a04a419b329b2491d2a405d62246249eb8ce20890f12dfdbca0"
        },
        {
          "alg" : "SHA3-256",
          "content" : "6bfd9ab58c5b5cde8cd1747690b02d4c2bdfeaa157f5f1c0421ee77c8c739f98"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c532e25f58ccc289d0c8233bbc9dc77dacdb92dbe6092fdc1f48a17288299a29352d12299517f61217ecd4793d218d025edecf396a326e11942bdda3a8e01610"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.code.gson/gson@2.2.4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://code.google.com/p/google-gson/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://code.google.com/p/google-gson/issues/list"
        },
        {
          "type" : "vcs",
          "url" : "http://google-gson.googlecode.com/svn/trunk/gson"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.code.gson/gson@2.2.4?type=jar"
    },
    {
      "publisher" : "Apache Software Foundation",
      "group" : "org.apache.hadoop",
      "name" : "hadoop-auth",
      "version" : "2.10.2",
      "description" : "Apache Hadoop Auth - Java HTTP SPNEGO",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "befc7be7bc7aa4dc9b6324626913cda8"
        },
        {
          "alg" : "SHA-1",
          "content" : "29ab697d6b925ed3a52b782554d59e3312c94572"
        },
        {
          "alg" : "SHA-256",
          "content" : "0acffe01db6dbbdce9e6d46aa758f956af60cc8ef0fa405ca7f5b8747a53687b"
        },
        {
          "alg" : "SHA-512",
          "content" : "b3aac5229209dc11ef20c1125c186fc4ae77e85679725c6a8364538e6026c35439f85ae37579130c6089ab899ba1da180f65a7cfdd0a9c3120fe1c7b0f2157cf"
        },
        {
          "alg" : "SHA-384",
          "content" : "25e6927a991abef2a6c6b75859c6b23a7cbdc90dd9fec7b18ebc0a0d594911a27b2b35ddd5f618b5cc0dca2fd1807d34"
        },
        {
          "alg" : "SHA3-384",
          "content" : "45fcb77fd0d7b54983b74f51b479fcc8cab9f0112b4a7b099e32ec362d0682119d3608e1211e6943ec8eb641bbc64659"
        },
        {
          "alg" : "SHA3-256",
          "content" : "038f1a7d376ac8b57b6c4cd7cedb401217545057a27b100ce84cabbc79d77510"
        },
        {
          "alg" : "SHA3-512",
          "content" : "350d010fdaf42e07fb472735957b3a70038bb05409aaffae7782b6d0f58d7bab4297a3fd3ae73968544f6d6fc0c1f5a1e7a6990ab557ed4521fa26dfadc8d64e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.hadoop/hadoop-auth@2.10.2?type=jar",
      "externalReferences" : [
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.hadoop/hadoop-auth@2.10.2?type=jar"
    },
    {
      "publisher" : "Connect2id Ltd.",
      "group" : "com.nimbusds",
      "name" : "nimbus-jose-jwt",
      "version" : "7.9",
      "description" : "Java library for Javascript Object Signing and Encryption (JOSE) and JSON Web Tokens (JWT)",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "cf76d6f5280e5bb138b23076719f7d80"
        },
        {
          "alg" : "SHA-1",
          "content" : "b608cd5e306d67bb58fe5bd687387aa0671687a6"
        },
        {
          "alg" : "SHA-256",
          "content" : "b4f58453e180a981eb744a19b4d56afb12f10c3dd35e7531cc58ee6cbf5bf286"
        },
        {
          "alg" : "SHA-512",
          "content" : "2126e64143a0c30b42051bfd710fa47e76208bde44498a25de734401870c8b55b8c992067b865c93092adefccd09ba4650918b8ab250dcf9a8f3176c481f13a0"
        },
        {
          "alg" : "SHA-384",
          "content" : "3ce7bb4f4bc9c4ec4a73f0e41c976cd739e441a60f669f29df1402c69837cd1db1e705d5c6b1af4151172f666a99c2fc"
        },
        {
          "alg" : "SHA3-384",
          "content" : "a4b005ac939e68bd26fbd90d99be5f9ad27a3fd2769227db1b0bea975ce0dc82ae41e2fba2209a3e02e6f6717d310371"
        },
        {
          "alg" : "SHA3-256",
          "content" : "d727949d08d27541e7e6dcd97d166b3aa1e6f616a1d87bd873bcba105cf8924e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "28496f79727e3370fbe72d17b1a5274b5f5b78e310a4b60ac05ebf3658a3dd17db0cdfc2fdf7bd1397d8db245101699c39c068cc46ae027bb5afa5e881cb63a7"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.nimbusds/nimbus-jose-jwt@7.9?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://bitbucket.org/connect2id/nimbus-jose-jwt"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://bitbucket.org/connect2id/nimbus-jose-jwt"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.nimbusds/nimbus-jose-jwt@7.9?type=jar"
    },
    {
      "group" : "com.github.stephenc.jcip",
      "name" : "jcip-annotations",
      "version" : "1.0-1",
      "description" : "A clean room implementation of the JCIP Annotations based entirely on the specification provided by the javadocs.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "d62dbfa8789378457ada685e2f614846"
        },
        {
          "alg" : "SHA-1",
          "content" : "ef31541dd28ae2cefdd17c7ebf352d93e9058c63"
        },
        {
          "alg" : "SHA-256",
          "content" : "4fccff8382aafc589962c4edb262f6aa595e34f1e11e61057d1c6a96e8fc7323"
        },
        {
          "alg" : "SHA-512",
          "content" : "02fcd16a30d0e68b3e9e4899731181c6abb7117baa15c096ca940e01dde08bb86101cbeae552c497f8a90d923b5fa2f2b6f3850baf8dc94dbd399887924a9069"
        },
        {
          "alg" : "SHA-384",
          "content" : "88b0ecfde391a3d8468349c70e1539569768dfac3233dfe0b4660904df04e6c6bf26ed9c0784b9b22c122c3448e2a6b6"
        },
        {
          "alg" : "SHA3-384",
          "content" : "487b53f48b55b98a61ae60abedc43543887944867aa6bcb78d5ed46e2d0d7c19510c5fcadc362d939313feafdcfc55e1"
        },
        {
          "alg" : "SHA3-256",
          "content" : "3e79c8f58865d2d58a5311a8bb45772007f07e7f3ed2780784d1e4382dc934d0"
        },
        {
          "alg" : "SHA3-512",
          "content" : "ff32665e1b6d8176ccc7e8c836ca7343c2603dab053e42d79b4258d51a14ff63933c67d24034169ac91e11ebda21cc2c84a2a540072e656d2a8e6fcea7808421"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.github.stephenc.jcip/jcip-annotations@1.0-1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://stephenc.github.com/jcip-annotations"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://github.com/stephenc/jcip-annotations/issues"
        },
        {
          "type" : "vcs",
          "url" : "http://github.com/stephenc/jcip-annotations/tree/master/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.github.stephenc.jcip/jcip-annotations@1.0-1?type=jar"
    },
    {
      "publisher" : "Chemouni Uriel",
      "group" : "net.minidev",
      "name" : "json-smart",
      "version" : "2.3",
      "description" : "JSON (JavaScript Object Notation) is a lightweight data-interchange format. It is easy for humans to read and write. It is easy for machines to parse and generate. It is based on a subset of the JavaScript Programming Language, Standard ECMA-262 3rd Edition - December 1999. JSON is a text format that is completely language independent but uses conventions that are familiar to programmers of the C-family of languages, including C, C++, C#, Java, JavaScript, Perl, Python, and many others. These properties make JSON an ideal data-interchange language.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f2a921d4baaa7308de04eed4d8d72715"
        },
        {
          "alg" : "SHA-1",
          "content" : "007396407491352ce4fa30de92efb158adb76b5b"
        },
        {
          "alg" : "SHA-256",
          "content" : "903f48c8aa4c3f6426440b8d32de89fa1dc23b1169abde25e4e1d068aa67708b"
        },
        {
          "alg" : "SHA-512",
          "content" : "977ffe05c17965b403a60471eb6c160103263bbe454e942d67d4d725e1826b504de6c15038ff01ea90632bf9ad8a31b47c6662613bb905f020effa68c44d6f9a"
        },
        {
          "alg" : "SHA-384",
          "content" : "d3d68802a0379f45570af1028ae1c9532c399a8fa9956328f59d305b62add017c77835b139d135c7719efa73725bce83"
        },
        {
          "alg" : "SHA3-384",
          "content" : "df77b3e0be05434220b670bc22654172a2c3e16255df25e6155201ed034509bdf6c1e2558f5289a83222f12958f48ba9"
        },
        {
          "alg" : "SHA3-256",
          "content" : "060cd75a81db1a152da28f9594c9efb5389ac624865a6a55c95d2a95b9bcd300"
        },
        {
          "alg" : "SHA3-512",
          "content" : "342532fc4634437855e8feb8a202e1112f179e38dd90cb07332e750db36d3fcbf5d7cbef48814a59de0cbf0ab07fa4b3489215022fd33036256effd4e0e7cc48"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/net.minidev/json-smart@2.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.minidev.net/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netplex/json-smart-v2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/net.minidev/json-smart@2.3?type=jar"
    },
    {
      "publisher" : "Chemouni Uriel",
      "group" : "net.minidev",
      "name" : "accessors-smart",
      "version" : "1.2",
      "description" : "Java reflect give poor performance on getter setter an constructor calls, accessors-smart use ASM to speed up those calls.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "c28b871d258b4d347559d2eb7ecec4a3"
        },
        {
          "alg" : "SHA-1",
          "content" : "c592b500269bfde36096641b01238a8350f8aa31"
        },
        {
          "alg" : "SHA-256",
          "content" : "0c7c265d62fc007124dc32b91336e9c4272651d629bc5fa1a4e4e3bc758eb2e4"
        },
        {
          "alg" : "SHA-512",
          "content" : "39fe6a5ebd2ae2d33d8737c8407a8caa4f6a62ce2057d726bb82496d35104b76f230bbb9721e1db5f535fefa3d70ee88c0a5a5e4a3f1266d7317cae897ad0882"
        },
        {
          "alg" : "SHA-384",
          "content" : "fd66aeb9655bbac142a595d90457497b8fdd908c8d0f35c9b331ccc111e89ba863ebb4d9463b768426d6445b59f35f75"
        },
        {
          "alg" : "SHA3-384",
          "content" : "4059f02102576b7e8f2be849cb35ec77daf992d07d08642699c1ab9b84a51756edca181be90e84ae31eac83c9372da9e"
        },
        {
          "alg" : "SHA3-256",
          "content" : "e8f203c6aed8ca994ea94c8ae236e833e7af1b76e582b52dc726f8a86373b6aa"
        },
        {
          "alg" : "SHA3-512",
          "content" : "2ef69cdd1e807cd2ec1cb3b1af9a5a6ad6eec7e1c87270f971b0d69a1865f173412d3932ebc187397cdce767d4b0f2cc64660080461b93dacbf4209e43bf84c4"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/net.minidev/accessors-smart@1.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.minidev.net/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netplex/json-smart-v2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/net.minidev/accessors-smart@1.2?type=jar"
    },
    {
      "publisher" : "ObjectWeb",
      "group" : "org.ow2.asm",
      "name" : "asm",
      "version" : "5.0.4",
      "description" : "A very small and fast Java bytecode manipulation framework",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "c8a73cdfdf802ab0220c860d590d0f84"
        },
        {
          "alg" : "SHA-1",
          "content" : "0da08b8cce7bbf903602a25a3a163ae252435795"
        },
        {
          "alg" : "SHA-256",
          "content" : "896618ed8ae62702521a78bc7be42b7c491a08e6920a15f89a3ecdec31e9a220"
        },
        {
          "alg" : "SHA-512",
          "content" : "afee8f98ee21771f104318d95b839d9ea6ea083157bd62d8bc3462d9302dc20ea939d1b4ae2222f92f09b92bc9ab1317aff02734007f716cc805fe49b92a8a5a"
        },
        {
          "alg" : "SHA-384",
          "content" : "84f68859e74fc5a1bbb32bad682b3554ba0b4177f1e152991defe37151bdc31c1378da2876fe995c19445ca793260170"
        },
        {
          "alg" : "SHA3-384",
          "content" : "e2208311fb6a0807a535d18f7053c66b006bad3ff47c0937b675131d667b243402f8a4ed79028f24482f4c2d542685a2"
        },
        {
          "alg" : "SHA3-256",
          "content" : "ad3bf09396094a4522742f61155d40953b7c0ff806942e827797a1bcab62a8cd"
        },
        {
          "alg" : "SHA3-512",
          "content" : "37ac38d0cbaf89113e53845fc73da643fec6a2a6a4a0c03106b7c3bf2c645744095762d9b20bcaf5b691c3d91175983ad8e915d40ce71cdb8feae0c2bce17fc8"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-4-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.ow2.asm/asm@5.0.4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://asm.objectweb.org/asm/"
        },
        {
          "type" : "distribution",
          "url" : "http://repository.ow2.org/nexus/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://forge.objectweb.org/tracker/?group_id=23"
        },
        {
          "type" : "mailing-list",
          "url" : "http://www.objectweb.org/wws/arc/asm"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.forge.objectweb.org/cgi-bin/viewcvs.cgi/asm/trunk/asm/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.ow2.asm/asm@5.0.4?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.directory.server",
      "name" : "apacheds-kerberos-codec",
      "version" : "2.0.0-M15",
      "description" : "The Kerberos protocol encoder/decoder module",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "3118e22eac44e150c383df1d417772f4"
        },
        {
          "alg" : "SHA-1",
          "content" : "1c16e4e477183641c5f0dd5cdecd27ec331bacb5"
        },
        {
          "alg" : "SHA-256",
          "content" : "4996f5b72497e94dd86d64a370158c4fb0049eea9b17ff8b27a4671d6c136ded"
        },
        {
          "alg" : "SHA-512",
          "content" : "9e2ecd4f5d08af238ab32852fdf86f8165701b745ad93f3bc96eb3c0aff95a083773039adc3722123e8504971cd379929f9c4ad6d5c1ca3d112fa3d04e4a83f0"
        },
        {
          "alg" : "SHA-384",
          "content" : "c2e02333581bf5fef1a73c681afbefa13a03451e91bb36adeca90380679ecfa5a687e42073b9a7e6d60d71060d7e586d"
        },
        {
          "alg" : "SHA3-384",
          "content" : "b8f61173cbdbe09e53bca5e2cca5bce141083455b72ba4d6ad624be4da81ce27afecc8c36c7058a36e0291b6672d29da"
        },
        {
          "alg" : "SHA3-256",
          "content" : "161f828310334719481640ce1a82e6004c4b445ad090f6e18622be16042f71e4"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c94fce03575ce82631a361f945c8dbe48332c632f4d2b9386792064a8315fdc7ad7b1b17e63fbb4b6b9f638403be4b7e6255698852195a20e3d241b020a14119"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.directory.server/apacheds-kerberos-codec@2.0.0-M15?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://directory.apache.org/apacheds/1.5/apacheds-kerberos-codec"
        },
        {
          "type" : "build-system",
          "url" : "https://hudson.apache.org/hudson/view/A-F/view/Directory"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/DIRSERVER"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/directory-dev"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/directory/apacheds/tags/2.0.0-M15/apacheds-kerberos-codec"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.directory.server/apacheds-kerberos-codec@2.0.0-M15?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.directory.server",
      "name" : "apacheds-i18n",
      "version" : "2.0.0-M15",
      "description" : "Internationalization of errors and other messages",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f5877c02fd56ade67713560e589c81b9"
        },
        {
          "alg" : "SHA-1",
          "content" : "71c61c84683152ec2a6a65f3f96fe534e304fa22"
        },
        {
          "alg" : "SHA-256",
          "content" : "bd3b7cece7fc6364cbce32b9edd0e9628a3e889c6a93cdeff1b5e2131e2a007c"
        },
        {
          "alg" : "SHA-512",
          "content" : "2ca2e5e475168e97c3e25d52dfd8fd342e5be2f1689842bed03db568538f8f9fd1cee28cde6e815c4706123716a266db6130ceaaac4eddbe9d597de7459d6632"
        },
        {
          "alg" : "SHA-384",
          "content" : "fda3e7e1e80becb69fe5997c75b8f89ecaa7004bfebc20e230dfb3580a3fd9c526757e775c35a53e5681da1c2a7edb3b"
        },
        {
          "alg" : "SHA3-384",
          "content" : "0fc218a9b93501998ab35252262373b7eda92a33d3688bc87694421e847bd4b4a11c3f79ad27a8c93fc000e085b6b28c"
        },
        {
          "alg" : "SHA3-256",
          "content" : "d9bda1adf202334aebea73021e3bbe180096e8165ecf6876b589c8bc58ec7fd0"
        },
        {
          "alg" : "SHA3-512",
          "content" : "b1272d97252156e84b10b85ffa9f43837338ba381e392c3662e96ffaaaee8a1bf82b3b77553cbd7bb0183a969ad3967bc7198cbeffbbe028266aaee90cda4f1d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.directory.server/apacheds-i18n@2.0.0-M15?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://directory.apache.org/apacheds/1.5/apacheds-i18n"
        },
        {
          "type" : "build-system",
          "url" : "https://hudson.apache.org/hudson/view/A-F/view/Directory"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/DIRSERVER"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/directory-dev"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/directory/apacheds/tags/2.0.0-M15/apacheds-i18n"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.directory.server/apacheds-i18n@2.0.0-M15?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.directory.api",
      "name" : "api-asn1-api",
      "version" : "1.0.0-M20",
      "description" : "ASN.1 API",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "cf4561832dab76e9f37461342ec18d17"
        },
        {
          "alg" : "SHA-1",
          "content" : "5e6486ffa3125ba44dc410ead166e1d6ba8ac76d"
        },
        {
          "alg" : "SHA-256",
          "content" : "484aaf4b888b0eb699d95bea265c2d5b6ebec951d70e5c5f7691cd52dd4c8298"
        },
        {
          "alg" : "SHA-512",
          "content" : "10b84880f0b866addba5137d7afd1fc35b6c5e3577a3c8d9d122fc91201f21381173aca49881465ced33fc34680da55ea6bc47e2f8848fb5dd0d988bc0cace97"
        },
        {
          "alg" : "SHA-384",
          "content" : "f0924bad02e083567f2c08fc565484c55e2f9de59abaa7a1fcafa36bc65a451cde6d1b2e78386e04dafba46e85c5e3d2"
        },
        {
          "alg" : "SHA3-384",
          "content" : "7ae5c73827f5ffdc09c7117cbfb7ee9efcf6daf7f8ea5377a96aa1e0ec245846d34d237ca35a57dbf4ab36a5f11c46c3"
        },
        {
          "alg" : "SHA3-256",
          "content" : "58dba2f147b58b85925b06ae53dced0025242998f215aafdbca5a6f24d01463a"
        },
        {
          "alg" : "SHA3-512",
          "content" : "a35ef1eb9ebdc088c64adb05c7fc213185c15363f0c00afb96d2f19f25462052d30f8bad23aa466f173f06b51218c7c1a30ed2f50177a2b9830358a143fca1ba"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.directory.api/api-asn1-api@1.0.0-M20?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://directory.apache.org/api-parent/api-asn1-parent/api-asn1-api/"
        },
        {
          "type" : "build-system",
          "url" : "https://hudson.apache.org/hudson/view/A-F/view/Directory"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/DIRAPI"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/directory-dev"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/directory/shared/tags/1.0.0-M20/api-asn1-parent/api-asn1-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.directory.api/api-asn1-api@1.0.0-M20?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.directory.api",
      "name" : "api-util",
      "version" : "1.0.0-M20",
      "description" : "Utilities shared across this top level project",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "2c5a6722666882024becdd64301be492"
        },
        {
          "alg" : "SHA-1",
          "content" : "a871abf060b3cf83fc6dc4d7e3d151fce50ac3cb"
        },
        {
          "alg" : "SHA-256",
          "content" : "fd32fd047ccf143c58d093b58811aa81e539f8cf83c1187809f1a241a1df12d1"
        },
        {
          "alg" : "SHA-512",
          "content" : "b1c206a420d5dc455f22a1f22980573101b9c74abac044e1b02b2925eaf7c8b188481797d9261cfbe1e2800e684ce88ed8cd18db1ef5909929bec33539a4c5f3"
        },
        {
          "alg" : "SHA-384",
          "content" : "1fed2deab6fe2e3d357bdeee48046861e53582f2404c34bc2bc35992e771e27e8d28b8df65a994f700159e5ca5311316"
        },
        {
          "alg" : "SHA3-384",
          "content" : "0451ed59fec5907fed4e5b9688c0d0b4a682fbb56eecb38ac963670ec0bfbd04790325ce1e2f79022976f0344f9cdc74"
        },
        {
          "alg" : "SHA3-256",
          "content" : "aa8acd1abed952436313c6988941e63e0f33473f8df6e9ae39c8bdee334ae4b7"
        },
        {
          "alg" : "SHA3-512",
          "content" : "b6a0c7780bb76334438af34d098b15c9fdf1627a927f7c451ffb468acde7916e5ddf7fb4942d0800c53fda02f8d788f5c75999e546f1aac9439b9e524efd70fd"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.directory.api/api-util@1.0.0-M20?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://directory.apache.org/api-parent/api-util/"
        },
        {
          "type" : "build-system",
          "url" : "https://hudson.apache.org/hudson/view/A-F/view/Directory"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/DIRAPI"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/directory-dev"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/directory/shared/tags/1.0.0-M20/api-util"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.directory.api/api-util@1.0.0-M20?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.curator",
      "name" : "curator-framework",
      "version" : "2.13.0",
      "description" : "High-level API that greatly simplifies using ZooKeeper.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "91e34b86afb44ef5c728f69ed9790f1d"
        },
        {
          "alg" : "SHA-1",
          "content" : "d45229aee7d3f1f628a34fcac9b66ed5ba52c31f"
        },
        {
          "alg" : "SHA-256",
          "content" : "db084e5e0fed0548a8128f12a3e7a15c875c9595e75316c9578d64e77375c4a9"
        },
        {
          "alg" : "SHA-512",
          "content" : "7a9d520b5668ada07d05435f5632ab24d11bb079338388f43668960a3181d665568a2ef4a73222870362a84e1eeb59ef9ebf171bbcfdd7216735821328287798"
        },
        {
          "alg" : "SHA-384",
          "content" : "bf989371e089766e2bc00589c4ce3419382cfe5da67f1c815604653d59a6429642a6e9008c64a2d09d6398816c527d32"
        },
        {
          "alg" : "SHA3-384",
          "content" : "db0f4c1dd75189db2ec7e5b0fdc6610f49528c1e58929c2135daca3393e87d1c7c72a8524161708587e3f6738186a9c3"
        },
        {
          "alg" : "SHA3-256",
          "content" : "622fdc0fa9f31ff5a109c0bf003921ec5868eff678e4978d3864821257f07144"
        },
        {
          "alg" : "SHA3-512",
          "content" : "ab5960999e0ed951d676618b6d04f81f0ec288a7f6d7410eae41061cfc847c79b3650cf484f567070fa40fb71ed575f523dbc2b9d85d1f1b58f91d19a9b19bb5"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.curator/curator-framework@2.13.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://curator.apache.org/curator-framework"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/job/Curator/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/CURATOR"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/curator-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/curator.git/curator-framework"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.curator/curator-framework@2.13.0?type=jar"
    },
    {
      "publisher" : "JCraft,Inc.",
      "group" : "com.jcraft",
      "name" : "jsch",
      "version" : "0.1.55",
      "description" : "JSch is a pure Java implementation of SSH2",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "c395ada0fc012d66f11bd30246f6c84d"
        },
        {
          "alg" : "SHA-1",
          "content" : "bbd40e5aa7aa3cfad5db34965456cee738a42a50"
        },
        {
          "alg" : "SHA-256",
          "content" : "d492b15a6d2ea3f1cc39c422c953c40c12289073dbe8360d98c0f6f9ec74fc44"
        },
        {
          "alg" : "SHA-512",
          "content" : "b6827d8de471682fd11744080663aea77612a03774e2ebcc3357c7c493d5df50d4ec9c8d52c4fcc928bdfdd75b62b40d3c60f184da8a7b8aba44c92afecee7a5"
        },
        {
          "alg" : "SHA-384",
          "content" : "6da3c9e2d72bd25991936dfe918ae7f235d03f386a8f797b65a154ae71b36292f873338ccbf5dd4fd3bc63619c806dbe"
        },
        {
          "alg" : "SHA3-384",
          "content" : "92676d161f4ebe078df11f9cda6dc0bed4c828830bb98340ac34fdb89dc76b019d4320f6fdd3db13cdd6e33582cb9272"
        },
        {
          "alg" : "SHA3-256",
          "content" : "99c7de83022da8f85fcef262e29051b8c33c81d492cf344a5d123b83b5a459f7"
        },
        {
          "alg" : "SHA3-512",
          "content" : "33344b4ee79f0e7c8901b828f2bea13d25727361deeaa37d85dbaf3c44a31e8d0b4f3966ce2e4c3705bebd046cb7adba0486d02babdbc68e9819d059b5981559"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/com.jcraft/jsch@0.1.55?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.jcraft.com/jsch/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "http://git.jcraft.com/jsch.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.jcraft/jsch@0.1.55?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.curator",
      "name" : "curator-client",
      "version" : "2.13.0",
      "description" : "Low-level API",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "ca2c6ca2277e78d1f6b865ee82e10357"
        },
        {
          "alg" : "SHA-1",
          "content" : "a1974d9b3251c055408059b2f408d19d7db07224"
        },
        {
          "alg" : "SHA-256",
          "content" : "62ab2201b5b9af63b215a4e6829dbe7d553a0805cfb0b1a665f9b49da8270c51"
        },
        {
          "alg" : "SHA-512",
          "content" : "72909bbf56f63fb7afba996336e7270ae08010976b4bb3b8bb90269d53fde78c63f8131a941ebb7cc554981a522f15e2b2a9ec63387d77f7117e5a1ed0b8c028"
        },
        {
          "alg" : "SHA-384",
          "content" : "57d338248aa56fa86aab71303a2746c7e4f061a18029a096f99bdadb7a87152f5067e1955aa2acb928edbcac0631b613"
        },
        {
          "alg" : "SHA3-384",
          "content" : "db824b68c9aa7d06f2843eca902fe7ee04f1f246db6161dd1fc61fb3bfc482e700b10b3694944a9d67e1e18fe0effdff"
        },
        {
          "alg" : "SHA3-256",
          "content" : "93e8027c890377b5d72d2b45062cdb1cc528e39f483ec693222d66cf418d9299"
        },
        {
          "alg" : "SHA3-512",
          "content" : "9ce7bedb13ffc89cd96e5974b420a0c543d8c14324b36291644f4064c27736b8316a3d174c0d285c464596a9cf29e2acccbb3b5e52c3db743d37e2f77c545930"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.curator/curator-client@2.13.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://curator.apache.org/curator-client"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/job/Curator/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/CURATOR"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/curator-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/curator.git/curator-client"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.curator/curator-client@2.13.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.curator",
      "name" : "curator-recipes",
      "version" : "2.13.0",
      "description" : "All of the recipes listed on the ZooKeeper recipes doc (except two phase commit).",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "02685a8f2e44faa1941e953ac426a8d7"
        },
        {
          "alg" : "SHA-1",
          "content" : "1e6d5cf7b18a402f5d52785877010711538d68a0"
        },
        {
          "alg" : "SHA-256",
          "content" : "22be05c1a3e6c5ede22e77372b08dc631a3b93b64acb7f682537ea65a6ddba06"
        },
        {
          "alg" : "SHA-512",
          "content" : "498ce3631ef135b96b467cd3c4fa8ac1797538047589b1454911ec77a5205773346a367492db0771167e8f612c911bac44c8c7c651be00e206eb60e2f0bba2f7"
        },
        {
          "alg" : "SHA-384",
          "content" : "08a4134a208a2c59b0354e5d4e88b29f0f2f4f0bd0b83a6ccd54da70602499a8dedd5711d5481c23ba8782049cdb546c"
        },
        {
          "alg" : "SHA3-384",
          "content" : "756a7a95c028122a46cbde814d179cb4e57629c3bce9dd05f88b2f8ed9f5120b43732dedb0cec8251d10a0aa5e872cce"
        },
        {
          "alg" : "SHA3-256",
          "content" : "5cb92cfe13d5089c6419a9a1979c7a141e0ba062d6a3aca2f9102ac89051c3a8"
        },
        {
          "alg" : "SHA3-512",
          "content" : "de66d759ededd490e6bb55fa6ee697a632dd14918c7fa1d567cf4ab2281ef8921e91b5684a8d4baf2ea92242b942c96a29fcc3a35f89842005e8f8c3cbec0c69"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.curator/curator-recipes@2.13.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://curator.apache.org/curator-recipes"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/job/Curator/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/CURATOR"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/curator-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/curator.git/curator-recipes"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.curator/curator-recipes@2.13.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.htrace",
      "name" : "htrace-core4",
      "version" : "4.1.0-incubating",
      "description" : "A distributed tracing framework.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "34f428e68910ea6555c79e733d433f1a"
        },
        {
          "alg" : "SHA-1",
          "content" : "12b3e2adda95e8c41d9d45d33db075137871d2e2"
        },
        {
          "alg" : "SHA-256",
          "content" : "5d45b7904857c3e4ad36b3bcc57be2d2c5f308c69b5f6a58bd86aa7d48a25ef6"
        },
        {
          "alg" : "SHA-512",
          "content" : "1d61c8cc145a6e43ef99221032abd2e6e519b00ec159bb8f1ecd94cc475dc35097639b35d476a746103dccd04f88c49c52c7d72a43f6c59501ef7cd02f637d85"
        },
        {
          "alg" : "SHA-384",
          "content" : "07a10701d902d6e1f606d977272f6fc9f946cc9f50a1b3efe30d132beb32a00b7b962344d6f76e217012fd61a6f9f996"
        },
        {
          "alg" : "SHA3-384",
          "content" : "7344591e452d480c51380be5dcb7e5efd5bcfaaf3c7f8a27b504d83737aa2e036377cd260242fa5d48ba2fdddd039911"
        },
        {
          "alg" : "SHA3-256",
          "content" : "a7e997922ff4e70bfe61e75b555f93a032aeae813c3eca36db5d606f4cb64db1"
        },
        {
          "alg" : "SHA3-512",
          "content" : "3d9abf6ff9c0a73b5484bf0710294bc083574aca96b13611ada5460170e8170022383a3f6ae1c4f2fa687251f0a8cb7dc6f3fc9510962b5f00edce0e67ea8409"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.htrace/htrace-core4@4.1.0-incubating?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://incubator.apache.org/projects/htrace.html"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/view/H-L/view/HTrace/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/HTRACE"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/incubator-htrace-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://git-wip-us.apache.org/repos/asf?p=incubator-htrace.git/htrace-core4"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.htrace/htrace-core4@4.1.0-incubating?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.zookeeper",
      "name" : "zookeeper",
      "version" : "3.7.2",
      "description" : "ZooKeeper server",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f497e4c658010442d8411f48d325b763"
        },
        {
          "alg" : "SHA-1",
          "content" : "3b7c2c26b697094fc29e5a78a522cffa1a55b26d"
        },
        {
          "alg" : "SHA-256",
          "content" : "b12d6fb4afd7b3849d3a9a5a38b9260c23a12e1ea58ca8c8d775880249cb8eac"
        },
        {
          "alg" : "SHA-512",
          "content" : "df428433504b1245d59bf8bd6d16ee1dbdc83c0da1707ce74afaa3e4fee06e8897960880412b36a3ad8fa3ff6bcf3fcfd463676ad85df3d1a89c20a9db970a67"
        },
        {
          "alg" : "SHA-384",
          "content" : "dd0ce48774be2964a81270277491394005c9cfee6bd4793dfbf5a9078be760670eab6003b4d501cc25ec80c7eebe780c"
        },
        {
          "alg" : "SHA3-384",
          "content" : "167393f4bdd36bd8924f21b053ffbd3497aa25a897259aa7f73204c64d7ff727e82172cb90fd68d587925d8a7d3b7c6f"
        },
        {
          "alg" : "SHA3-256",
          "content" : "c2c2f4174543ad8d480a9356f8366599e15caa73f917e70d7e871d2c277cb270"
        },
        {
          "alg" : "SHA3-512",
          "content" : "2e18166e4191ff7815e791038c1102d13dd747b452dee1142c55f2e29ddb4b9a95cdfdc7ae8e5aeef9e44f5d126914ea94c4538ff2184893d862122d5c9ebfde"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.zookeeper/zookeeper@3.7.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://zookeeper.apache.org/zookeeper"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-hadoop.apache.org/view/ZooKeeper/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/ZOOKEEPER"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/zookeeper-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf/zookeeper.git/zookeeper"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.zookeeper/zookeeper@3.7.2?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.zookeeper",
      "name" : "zookeeper-jute",
      "version" : "3.7.2",
      "description" : "ZooKeeper jute",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b643e843c73eddda117611ee45c61774"
        },
        {
          "alg" : "SHA-1",
          "content" : "1ca84725b0e581c8fef7c54e5355f3b8f7e44410"
        },
        {
          "alg" : "SHA-256",
          "content" : "ad15d812b1f01f373638443adcda0e23fda549d65ced2be8c4f64bef33b5d774"
        },
        {
          "alg" : "SHA-512",
          "content" : "651974748ef2b570cefbedb438df81899931c9199f5d1d9378cfdcc6db35fc2fc900d9f9469fe1df84f145b633f2cc1411afa0a2bc2b3a8a4c7a6a5e52dcb5f5"
        },
        {
          "alg" : "SHA-384",
          "content" : "f44f9e651267abad8f84f2ea9a37527f8ffe8cb6c8bc27dcf67f801b8e8376d4516483fc2ee31bf41a3f121ce1f6c506"
        },
        {
          "alg" : "SHA3-384",
          "content" : "48ecdb6b1acda1cb21ff14e622755f2082aecef3b2c9f35a150b76ae233cd2d40a2ba4f86fc002c69f8d2595b66060c4"
        },
        {
          "alg" : "SHA3-256",
          "content" : "0300739df14f5d7a4b60a658dd36ed310196ed8e6b040a2649736e569aaaba82"
        },
        {
          "alg" : "SHA3-512",
          "content" : "18e69d81f688d1c9377eff900a303268f5ec11451adbe6a305f970182c7ce05031c6b47e02cd288306b589bd7ea9b01a206349560d11c2149ad089edd67f0149"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.zookeeper/zookeeper-jute@3.7.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://zookeeper.apache.org/zookeeper-jute"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-hadoop.apache.org/view/ZooKeeper/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/ZOOKEEPER"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/zookeeper-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf/zookeeper.git/zookeeper-jute"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.zookeeper/zookeeper-jute@3.7.2?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.yetus",
      "name" : "audience-annotations",
      "version" : "0.12.0",
      "description" : "Annotations for defining API boundaries and tools for managing javadocs",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "76ba71bbe18c4724d96bec68bbe12ff1"
        },
        {
          "alg" : "SHA-1",
          "content" : "e0efa60318229590103e31c69ebdaae56d903644"
        },
        {
          "alg" : "SHA-256",
          "content" : "ffb101fc066360ff3c77457c927fd7967fb096a6ee9e046ab7071447d8208efc"
        },
        {
          "alg" : "SHA-512",
          "content" : "264a5251272ec55eca1fae5a8fb9336d1eca1ee3bfb586d1ebc382fcfd37077c21cbfa9e198daf4e1eebe9f6fa90487bec2f85bc1c55cf5666cbbfc4d18b1715"
        },
        {
          "alg" : "SHA-384",
          "content" : "f936d92b5c3b3c88428fc7452871e4df112935dd25356396d15deb73dd39790f45909a3d14f038e9f585cee79622ad47"
        },
        {
          "alg" : "SHA3-384",
          "content" : "67ca97a525d98c3dab9ffda40e11d6c683f6f4208ae4a5b28dbd3e2b8b37187dfdcd1d9b89222dc69e5b84ac212f4428"
        },
        {
          "alg" : "SHA3-256",
          "content" : "fd99b55afe40884b5f6cfd9ffbdcd07fa32833443dead288390ca8e737dd3337"
        },
        {
          "alg" : "SHA3-512",
          "content" : "4aaece7bdadc2c2d9660b16345218cfc68a2ea344374d0ffbcdcc3722ff6be5f06c92231ae68ec3884f1aa9b99956cb5135b4060c5457f463251f3767003ad20"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.yetus/audience-annotations@0.12.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://yetus.apache.org/audience-annotations"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/YETUS"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/yetus-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/yetus.git/audience-annotations"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.yetus/audience-annotations@0.12.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-compress",
      "version" : "1.26.0",
      "description" : "Apache Commons Compress defines an API for working with compression and archive formats. These include bzip2, gzip, pack200, LZMA, XZ, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4, Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "cbc0bb8eca12b747ca21bf998d736e60"
        },
        {
          "alg" : "SHA-1",
          "content" : "659feffdd12280201c8aacb8f7be94f9a883c824"
        },
        {
          "alg" : "SHA-256",
          "content" : "051aceb8bbcc62d0f5b2b8ac72c53767f9c59bfbd050151e65bef6f51c8ed9c9"
        },
        {
          "alg" : "SHA-512",
          "content" : "acbeaa2909b809cd561e7156df18340d96abacb179325622d73bdd6b82cb9b387d6fcb1a44d8195aad4e786da299289e17598a1d337b7c7d1c0bc610cc128714"
        },
        {
          "alg" : "SHA-384",
          "content" : "052d4d0cd1929c4299dd9d37dd36eaea6ed2be6b04d6d83a94f8608a6d1138aa81f7a34f25113ac267e7ba25ce948c9a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "8b0bf441e8ce793fb6513bc07551cc48ab4507696c18e6037b0fcf35bc4e1eb3e44ed962e2d3765c86d4d912770aa53e"
        },
        {
          "alg" : "SHA3-256",
          "content" : "e441768e06092053f4703844ec0c8f2b437e06e7c190d48fec9d7682beb94c40"
        },
        {
          "alg" : "SHA3-512",
          "content" : "5984f9f08f83789555677f6800f25fa8e80a9eb2e4d46b5fb117b8efc24753644fa103a2f6b619827661a41677991bc827965172ef25f1313d8a59154e615e8d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-compress@1.26.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-compress/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-parent/actions"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/COMPRESS"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-compress.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-compress@1.26.0?type=jar"
    },
    {
      "publisher" : "fasterxml.com",
      "group" : "org.codehaus.woodstox",
      "name" : "stax2-api",
      "version" : "4.2.1",
      "description" : "tax2 API is an extension to basic Stax 1.0 API that adds significant new functionality, such as full-featured bi-direction validation interface and high-performance Typed Access API.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "af8377bc7882332e22456616a9f164f6"
        },
        {
          "alg" : "SHA-1",
          "content" : "a3f7325c52240418c2ba257b103c3c550e140c83"
        },
        {
          "alg" : "SHA-256",
          "content" : "678567e48b51a42c65c699f266539ad3d676d4b1a5b0ad7d89ece8b9d5772579"
        },
        {
          "alg" : "SHA-512",
          "content" : "00efc5d4d17540fb180c5b20d456630a8b3262dff46676689ae916ba16f0fbd9b1a71c7badfb254faad6597f94fed1edb96f77c15f40178eaf4d8cd35cea5e8d"
        },
        {
          "alg" : "SHA-384",
          "content" : "97a6a9f0cc666776e4a4f08729c303d2a602ce5c25ee633cd6c54c72f12d11e9d43634ca6ca4ef7da5973a52030384da"
        },
        {
          "alg" : "SHA3-384",
          "content" : "683a1f110ab84333e7517dabe175b91d7ea2fbead2f9d02acf798c588a7508bc67580642afa8d57441bc56ce610d5b0f"
        },
        {
          "alg" : "SHA3-256",
          "content" : "5e8e54209fb6b580e928e703ef11645aff1a21dfd47cca2dc0e53d0befaef09c"
        },
        {
          "alg" : "SHA3-512",
          "content" : "d79338a481605c94e144c967cb7adbc6cfd06ee6a1182b5ebc8cd8ad3deedd707931e404aa197bc94d3b5a5d82a2e6dd6a2f6cc9dafc42ce3ad5061076b05199"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-4-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://github.com/FasterXML/stax2-api"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/FasterXML/stax2-api/issues"
        },
        {
          "type" : "vcs",
          "url" : "http://github.com/FasterXML/stax2-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1?type=jar"
    },
    {
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.woodstox",
      "name" : "woodstox-core",
      "version" : "5.3.0",
      "description" : "Woodstox is a high-performance XML processor that implements Stax (JSR-173), SAX2 and Stax2 APIs",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "89fb07387e448325eacc9c642e3d69af"
        },
        {
          "alg" : "SHA-1",
          "content" : "59a3a7fb46a364ee383ea7e8c67c152a224b3d99"
        },
        {
          "alg" : "SHA-256",
          "content" : "b2bd29c31fda49a9b28a22b9e5c2b26443bcfa99c1a28eab70ab9c7d349b5002"
        },
        {
          "alg" : "SHA-512",
          "content" : "a9e981b270cef762d2077522f158287141cc47a3d2705f7d03349390bfc12e2dc33641cab6278678e7225087d8e5a9a891f396e958ea1527628d7e8edf833ae2"
        },
        {
          "alg" : "SHA-384",
          "content" : "e653d5f0a2802aeb1e98e19d453850567c77fb31a3dfff41af953d2cd198d1a3fc374fb1c82f63a92bb5dd120b9f576a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "e4608171de5487c5e33d11b46f72450f6773f650c89bead729ec0c87e34de27367b3fb739f0b8b6e476c2bfeed2bb2b9"
        },
        {
          "alg" : "SHA3-256",
          "content" : "5c95c04690fa6ea1614a08003e25a67cb184d4c983497ca9cd3171807e011515"
        },
        {
          "alg" : "SHA3-512",
          "content" : "1769c8c0efcdf1d893ba717e448b697d0c64ad1474997184f55cd65ca613b255288345dbc3e9a6dc569f07556209d6afdc2689b76d9b1b584a2d3b489767cbff"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.woodstox/woodstox-core@5.3.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/FasterXML/woodstox"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/FasterXML/woodstox/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/FasterXML/woodstox"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.woodstox/woodstox-core@5.3.0?type=jar"
    },
    {
      "publisher" : "Apache Software Foundation",
      "group" : "org.apache.hadoop",
      "name" : "hadoop-hdfs",
      "version" : "2.10.2",
      "description" : "Apache Hadoop HDFS",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "9547e0752c40a69c67164b3dc32e56aa"
        },
        {
          "alg" : "SHA-1",
          "content" : "4ab1cd9842af25a7b2877d1f8d6a4c40fcc87877"
        },
        {
          "alg" : "SHA-256",
          "content" : "b0ad642fff13157a7cb83d5cabe0320c4f5628243f844f2b1f82738417c4f675"
        },
        {
          "alg" : "SHA-512",
          "content" : "b55dc2988a3191013fcc6e519e3fd88199ad2a307af2e4d72bc308d8c1981d19be620a71aae260833cde2726e8ec57a58dda7e4a25490fdfb5ee46e97b4e2b64"
        },
        {
          "alg" : "SHA-384",
          "content" : "6873236b3ffc4e68e42ace799a353067f239b8dbd61917cf693617a171b81b55cdd284960293bd16138d42a4141849aa"
        },
        {
          "alg" : "SHA3-384",
          "content" : "cf2e0dda8669d0f438156513855906b19d5eb168b80586c084ad63213119bdec5371b6f55f09f7711bef2a24760b6d8d"
        },
        {
          "alg" : "SHA3-256",
          "content" : "0ecf3ca01b19b6dc8ba911957f5a95e8b732a88a366fc3c1f73a94e88214c914"
        },
        {
          "alg" : "SHA3-512",
          "content" : "34efeba9ba720f3783b811eda308a9f98078d80bf07308376a4897e58eeecccfd24b05b1119700305a86ade458538d81495be31ce1ed231ee7baabf2a9f126ea"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.hadoop/hadoop-hdfs@2.10.2?type=jar",
      "externalReferences" : [
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.hadoop/hadoop-hdfs@2.10.2?type=jar"
    },
    {
      "publisher" : "Apache Software Foundation",
      "group" : "org.apache.hadoop",
      "name" : "hadoop-hdfs-client",
      "version" : "2.10.2",
      "description" : "Apache Hadoop HDFS Client",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "9b66562e0212a9216d924f7168836a27"
        },
        {
          "alg" : "SHA-1",
          "content" : "c26d4c3c34fb5e651483144a6c9a3d100cfa3645"
        },
        {
          "alg" : "SHA-256",
          "content" : "e29022b3d2d11ac9247f6158ea40cfe8a0c048804a5593b22c04a24a7871b5dc"
        },
        {
          "alg" : "SHA-512",
          "content" : "1990c12c588044498faf3beafddf0e0fb0c6d1c44ae69cc98aee377c4576ed4600d292f8ac2185a6f2f8d953e6f1d51b027b8cc50191b9807ea6cc24d805afd0"
        },
        {
          "alg" : "SHA-384",
          "content" : "f79d9e389610a5fa1c52eb66100d0cd153a303bd0de904bf16bf32b227b7395531f390dcb4438f0760db972b9d523c4c"
        },
        {
          "alg" : "SHA3-384",
          "content" : "2e56835ca7704b57578a4eac14edc0803f19cb9966b9a106c88db4e0269a5fb9ff8345af2cf4e0cb27e24ffbed57c392"
        },
        {
          "alg" : "SHA3-256",
          "content" : "5acb08cb43a711d89c32ed869d6ce951d80bdcf890fa07565fc97f004d5d36f2"
        },
        {
          "alg" : "SHA3-512",
          "content" : "f02c04ad1bd02759772243677e6ee81e92a656c9afb4a719b965991bf81744b2c70dc44f7d4d7d9f87a44caf131137e440a0331ea3531fbfdcf414b204be2dce"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.hadoop/hadoop-hdfs-client@2.10.2?type=jar",
      "externalReferences" : [
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.hadoop/hadoop-hdfs-client@2.10.2?type=jar"
    },
    {
      "group" : "com.squareup.okhttp",
      "name" : "okhttp",
      "version" : "2.7.5",
      "description" : "An HTTP+SPDY client for Android and Java applications",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1943a0ecbb1c503874c8c483284377e4"
        },
        {
          "alg" : "SHA-1",
          "content" : "7a15a7db50f86c4b64aa3367424a60e3a325b8f1"
        },
        {
          "alg" : "SHA-256",
          "content" : "88ac9fd1bb51f82bcc664cc1eb9c225c90dc4389d660231b4cc737bebfe7d0aa"
        },
        {
          "alg" : "SHA-512",
          "content" : "4cd162e8e54127fec029f82aee8797ad4eb87ae976973b0148d7c405255870e5cb4e2ef52791116a5bf52b87a0d0d7ab47688b921eba01272616368a5cf145d8"
        },
        {
          "alg" : "SHA-384",
          "content" : "f7513f7d5728d29ac93ea533078c6ec61b3407671b0fa7a0384669c7869a69f1d2e98268c9e5a62ab3410dbd4c9fcea3"
        },
        {
          "alg" : "SHA3-384",
          "content" : "ff2e156a63cbe975c1eb43149ae975fe67aa763750487ebc0c42e33b91076b251a341c820b967cbaf3780327c894723c"
        },
        {
          "alg" : "SHA3-256",
          "content" : "a673cff4dff28000634360d74eee71a0f9095018b9a3da1dd844ad5f7c95ba93"
        },
        {
          "alg" : "SHA3-512",
          "content" : "ddb64671877c7267b0288449632733c806ebfb81c039d74e22cc771e8942f78a63de029e201c01921a2b70b635350aa49b008558d0bbc3af57dadc31adb7cad5"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.squareup.okhttp/okhttp@2.7.5?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/square/okhttp/okhttp"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/square/okhttp/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/square/okhttp/okhttp/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.squareup.okhttp/okhttp@2.7.5?type=jar"
    },
    {
      "group" : "com.squareup.okio",
      "name" : "okio",
      "version" : "1.6.0",
      "description" : "A modern I/O API for Java",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "164d1c28c323cf6e2a917d60374c5718"
        },
        {
          "alg" : "SHA-1",
          "content" : "98476622f10715998eacf9240d6b479f12c66143"
        },
        {
          "alg" : "SHA-256",
          "content" : "114bdc1f47338a68bcbc95abf2f5cdc72beeec91812f2fcd7b521c1937876266"
        },
        {
          "alg" : "SHA-512",
          "content" : "17bab3c4fde83d0865d2c3ef61b403059e44b83f38b3c42ca352be4faa28afa08416d2525f2941baaa864c7a4730672228928373ba2e2179d9d8b4976d6747ba"
        },
        {
          "alg" : "SHA-384",
          "content" : "a00830a0a6b3f435e852a7eb181b057ab11e6563cff8f1359503f498d204b9f327ed78b31e5ed902f8e154ce65cf7dad"
        },
        {
          "alg" : "SHA3-384",
          "content" : "9ab3e8c6e047006aef7f33b3cc50fb2603efc4a641c098e8ccaf4ac2d9764defb5a9739b5bc7615be1a6b2fab02342bd"
        },
        {
          "alg" : "SHA3-256",
          "content" : "150d6944c7c3176db6815bd343a47ff9c6a81091faf1280118fbed002aab0789"
        },
        {
          "alg" : "SHA3-512",
          "content" : "9f726097dacf3d9965d4334945f4ec807d186d5f80369303da75740d5d05f071838961f088543425c59123357d768a2065b620c94bb9705b3ce1312ce6d52f71"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.squareup.okio/okio@1.6.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/square/okio/okio"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/square/okio/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/square/okio/okio/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.squareup.okio/okio@1.6.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-daemon",
      "name" : "commons-daemon",
      "version" : "1.0.13",
      "description" : "Apache Commons Daemon software provides an alternative invocation mechanism for unix-daemon-like Java code.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "686f1a2cc85f8f4e939bd3cd28c9720b"
        },
        {
          "alg" : "SHA-1",
          "content" : "750856a1fdb3ddf721ccf73c3518e4211cffc3a3"
        },
        {
          "alg" : "SHA-256",
          "content" : "fd63b583fd3e8baeae22efacbd5a4f91c1fd97f56248e62e2615efa7b81daeaa"
        },
        {
          "alg" : "SHA-512",
          "content" : "80cc396ac505e01bc864ff8c244351601102c463f87b5b75e781be5866932d6a568baf0b995c4b5f9750a4fb3c2c4a5c00aea1b22fa9a7a1b43e11987add2587"
        },
        {
          "alg" : "SHA-384",
          "content" : "6be749e20f1942bc30ad8c2564460076c2de632fcd357164b29ed44487a9be461ae20a5662041c78b2372203e6411a6e"
        },
        {
          "alg" : "SHA3-384",
          "content" : "40605565bc22442226f86e8ca7eca372f6f7f558932149cf051167c2c96ca3a017c9f9cb151ad6408b52423457052f71"
        },
        {
          "alg" : "SHA3-256",
          "content" : "e416a5afb7ce017440f851d9d374643a9a5f50a9715d2951600688ec978fd916"
        },
        {
          "alg" : "SHA3-512",
          "content" : "e48894b2267eca0a1ef5ab19ff3902f8fdf9e90f11c01c59eeaed998864fd8e838ee3b2950a9b428f1749c7435b294060ffe9a9a13b723f03e2370ee7bc38ce0"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-daemon/commons-daemon@1.0.13?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://commons.apache.org/daemon/"
        },
        {
          "type" : "build-system",
          "url" : "http://vmbuild.apache.org/continuum/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/DAEMON"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/commons/proper/daemon/trunk"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-daemon/commons-daemon@1.0.13?type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty",
      "version" : "3.10.6.Final",
      "description" : "The Netty project is an effort to provide an asynchronous event-driven network application framework and tools for rapid development of maintainable high performance and high scalability protocol servers and clients. In other words, Netty is a NIO client server framework which enables quick and easy development of network applications such as protocol servers and clients. It greatly simplifies and streamlines network programming such as TCP and UDP socket server.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e9cdf01138257f48d796fb2cf67af53e"
        },
        {
          "alg" : "SHA-1",
          "content" : "18ed04a0e502896552854926e908509db2987a00"
        },
        {
          "alg" : "SHA-256",
          "content" : "8768a50fbe3d93a88d8e6000ea5d68e30f50dc915b3764c3c5870f70c4fb3b49"
        },
        {
          "alg" : "SHA-512",
          "content" : "37cdb98e11b42006fbb26a1c6871261d8e8cb3254183116a550d4971171f576417392395fa0168c68751078148d177af9374ee0f542af527f57531773c62cbc5"
        },
        {
          "alg" : "SHA-384",
          "content" : "7c445aae5d4dd35c2fc8e236589f5711496a4a7ca2a8a4eb47f9359d39db7789f20b0c67f1c28bacf75c2680ba7cbc1e"
        },
        {
          "alg" : "SHA3-384",
          "content" : "65e735913d97979be0c9364ca9c29501aeef15d582ab6bc523f3400ca38350b82b03177c85d918a20bb455711279299d"
        },
        {
          "alg" : "SHA3-256",
          "content" : "d15c13c07be1612c9ca6d8664be842bd67b48f91ddfb6e3a585f51c2042a499f"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c4a6f985c7e55831a047a26ceeb3b78e7d1207854ab81733ecc11ae2e8da7fb7e7c23008b4dc6bd64658f881c457ef9aecde037b57ad108fc7bd5a521cc1af6b"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty@3.10.6.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://netty.io/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty@3.10.6.Final?type=jar"
    },
    {
      "group" : "io.netty",
      "name" : "netty-all",
      "version" : "4.1.100.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "42ac1732b12348624373f63ef89103c1"
        },
        {
          "alg" : "SHA-1",
          "content" : "5ef15a3ce29a792b7ad17438e5f84c617b3f2993"
        },
        {
          "alg" : "SHA-256",
          "content" : "8f77bf1d9c962526caad18a3ae2ec64e6d553c758c35fc5519017a547f465f5e"
        },
        {
          "alg" : "SHA-512",
          "content" : "4991dfab58cb0f5f8f23de099c52cd0f48e3f173faea1be645bb154a8d92e70934350cb668a44b2677cbe89ffedb273c9252097f58a96b67af00020a1280f389"
        },
        {
          "alg" : "SHA-384",
          "content" : "49333ac3d7bef2c8d86b9c43e838755f473150b89ce4c4fe0ed8208a5be32ac737f75b8c51b951cc7dd3c052a3d123bb"
        },
        {
          "alg" : "SHA3-384",
          "content" : "24aa5f598a1c2c08b4b8f3f6d5bd9dc2fd17c405ab2e2808df9dbf6768b953f6c0aae3ae56d9b928e496630c9084534a"
        },
        {
          "alg" : "SHA3-256",
          "content" : "c1705ee3bfc63dd82c06181f8c57623779e463c16a3c13679c2b4e2dbe69a3f2"
        },
        {
          "alg" : "SHA3-512",
          "content" : "0b174985313a7a4a937c76cfeccd850317e45bfa556c1a17a256e2ed936d93e2bed5419343385fe153d08b14391895f2281fe8e53fe7014547644cad1e50e223"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-all@4.1.100.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/netty-all/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty/netty-all"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-all@4.1.100.Final?type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-buffer",
      "version" : "4.1.100.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "df124be7a8094ff5b6f3b4c056ef0515"
        },
        {
          "alg" : "SHA-1",
          "content" : "39b05d2d4027971bf99111a9be1d7035a116bb55"
        },
        {
          "alg" : "SHA-256",
          "content" : "462874b44ee782fbefec64078cda6eb8e7bf9f0e0af71a928ef4c1f2d564f7ee"
        },
        {
          "alg" : "SHA-512",
          "content" : "9f0247da21f7607da1183e642583b72c03d863c528d80bd9f5e47a1a0fec222880a7fee99a54f455a84a7d0f9758dffd7d59d0825a3695f3da4a020743316716"
        },
        {
          "alg" : "SHA-384",
          "content" : "7976e0aa676803e0e59b258648283e487e965aa0d454cdd54116d7535f8f6e3294786a034371c4a32d0eb1959e1efe01"
        },
        {
          "alg" : "SHA3-384",
          "content" : "2735abe7a765a41279e726d703bc7868f84322a0fbeb61610ccb65ff08aa16d37f581b8f92cf50a046123d12d3e32567"
        },
        {
          "alg" : "SHA3-256",
          "content" : "7358b82b84028a31145244e823e25db3191a08ce917d59f10ba97cac4d0c488c"
        },
        {
          "alg" : "SHA3-512",
          "content" : "6dc905576da9ff3b9fda4d0a19ca8c43b32f9771a37ca4a952a8511107a4c4cde80675ce122de04bfaa1009902ad0dea2ee3e4eba05d13338322d59b559e60a3"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-buffer@4.1.100.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/netty-buffer/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty/netty-buffer"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-buffer@4.1.100.Final?type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-codec",
      "version" : "4.1.100.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "341344475354a0c6ecd0132537e33900"
        },
        {
          "alg" : "SHA-1",
          "content" : "9c3c71e7cf3b8ce3bfc9fa52a524b9ca7ddf259c"
        },
        {
          "alg" : "SHA-256",
          "content" : "180a01ed67af399602e24ff1c32864e7f57f57c4a0fa5e9ab3fe9b0e5e9cf051"
        },
        {
          "alg" : "SHA-512",
          "content" : "2de4b3030b69a5ea2de01f986d8e10312926c6ef8588abe76fc8301f758a2634d2daaeb56aac68c0e7eea4afe0f2402e07fe03d1bbda03f039ea089420b5f88c"
        },
        {
          "alg" : "SHA-384",
          "content" : "5c90c37b7046a0b96296549619dd48662dcea81dd769aff82cd29decc87ee26e9277bde55f7614608cb384eaf38668c7"
        },
        {
          "alg" : "SHA3-384",
          "content" : "c508348f5c78c36da416aac69b0eee6963cc720f37f63c31b9e65e106466414eb4a53d0049a03628d387ecae2076d9f4"
        },
        {
          "alg" : "SHA3-256",
          "content" : "0166a494851b6f459865a8ac93bb0b54d3704ae4d027b598231558ce9f1d43f1"
        },
        {
          "alg" : "SHA3-512",
          "content" : "fb48b9d4d94c9f5dde6d91d788d2f91357a950badbb679b5446a1b58aa96c31c832fe81ad90bbc192ae533cc1979463c38655fc7d6b3941ef5edbb8ff6eaad88"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-codec@4.1.100.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/netty-codec/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty/netty-codec"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-codec@4.1.100.Final?type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-codec-dns",
      "version" : "4.1.100.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "5fbaae69b68b95c78ebc794bda389c46"
        },
        {
          "alg" : "SHA-1",
          "content" : "663b1b7bf3ff0f12fde4df20c72d9e94584ebffa"
        },
        {
          "alg" : "SHA-256",
          "content" : "f7f55bee95d2467e8bda6dda980a2830b351b0dd6f0f87fe5114645035ee55ca"
        },
        {
          "alg" : "SHA-512",
          "content" : "2d414e263903c442263b8d50acd1a1e006a1e194d30d2822e944f5ce6f983f1f54d93961e2027f7cc2cfc5148b7ed7171b17c16d6e76e8aca7475063c619a7bb"
        },
        {
          "alg" : "SHA-384",
          "content" : "7ab255e32fd338be10c32a815a815c0608c53736d87698b43bb03e0d7764642094ad1a01493a10265e3306ee0f616ec1"
        },
        {
          "alg" : "SHA3-384",
          "content" : "7e1f5550493e38b9b5957a8917787bc911f5bf8ba6ae4a5aeec533209a9e03ad386d3d6f1d5c2ca0ce2f90112f8cde95"
        },
        {
          "alg" : "SHA3-256",
          "content" : "b246d12dc8b7ab90ae930df924efc13bef712a19632fdb6c735f151aa91b5cca"
        },
        {
          "alg" : "SHA3-512",
          "content" : "32328b60caa53fc7cbfeb288320eaf3996ca07c86e0134dc9b9a487952cb35e0b307ce8bcfd8a88499bc5fe306b679b0d36e94e2cd91638d2787be7a2ba67186"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-codec-dns@4.1.100.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/netty-codec-dns/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty/netty-codec-dns"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-codec-dns@4.1.100.Final?type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-codec-haproxy",
      "version" : "4.1.100.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e1c47a4484550caa9500cf8f31c2650a"
        },
        {
          "alg" : "SHA-1",
          "content" : "e906264fde946c8be131408c6440e6c65774c61b"
        },
        {
          "alg" : "SHA-256",
          "content" : "5688edfb554e3fbb76d3ebabc23557e60ab4941b903e4fee1803c35546718df1"
        },
        {
          "alg" : "SHA-512",
          "content" : "a76aabd8150867ee4daf9eac46ca3f106efc2733c5ec84f354c1693774168c0195714f7863c984c5f5ff26b9ddf58ea1ed85525a339ea7502bd4da2bba8b1f57"
        },
        {
          "alg" : "SHA-384",
          "content" : "3ee3e8a882fe6b8799d56f3a447935e1c9a5b2edb1ee3fa32b1a298f56dfa39243fcf6fc58704709fabc3fedc01647ec"
        },
        {
          "alg" : "SHA3-384",
          "content" : "6faea6221f986963973c6d9783b72e5b67102e9401659fa1947203bd9736d13a83e45029b35b18009447e4fb04cdd0e7"
        },
        {
          "alg" : "SHA3-256",
          "content" : "40f87917748f5175765fff24ec6070afeb072d19dfcaf03d632e4b78d309ed8d"
        },
        {
          "alg" : "SHA3-512",
          "content" : "7003deb7dc5cb7b48a6cdbc0ad31594f151acc3a1f7f9354f5fc81197783c9b07c018e39a88fe5e463993f9df8c07484713e18d2a356a9c124ec38a70625a8b5"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-codec-haproxy@4.1.100.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/netty-codec-haproxy/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty/netty-codec-haproxy"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-codec-haproxy@4.1.100.Final?type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-codec-http",
      "version" : "4.1.100.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "c9b302e49dba0aa9805d409e56f8f88f"
        },
        {
          "alg" : "SHA-1",
          "content" : "992623e7d8f2d96e41faf1687bb963f5433e3517"
        },
        {
          "alg" : "SHA-256",
          "content" : "326811d249cb0e5555e78e026e877834e792261c38f0666d80464426695d9590"
        },
        {
          "alg" : "SHA-512",
          "content" : "4b6f7daf1a53ac4fa7f0f4f8d8d82c868e8c11cc7ed87f16b1ce112c987ae35ca711dd8165e6140c231ae354616e554455aa6a86c3c4228ce0e1da4b94a0ad2f"
        },
        {
          "alg" : "SHA-384",
          "content" : "ddb986be51af01dce91a4382cd8e5576da6b4142905fab3e05f79df5b58bafe68e6daac8c0cc1ae1ad448e21f76cf769"
        },
        {
          "alg" : "SHA3-384",
          "content" : "7a7d00cae9d0332afe1de08361d650b138223e26242cf7d5a49858d2a8410af4966e2346cc3d5f6b8f6e9676a5901847"
        },
        {
          "alg" : "SHA3-256",
          "content" : "0d3b4d873863134f9e0472504782a000a76e03c86f0c0cd603a0eded9eb416f2"
        },
        {
          "alg" : "SHA3-512",
          "content" : "2c4dca4e06452f4b684b752637265d406164fc0f482e2ca9e630a769eaa136bffb47f785745e49d2dc9f32915698023cf88bbc5d1b6af42c43c7a31ee98a8a09"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-codec-http@4.1.100.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/netty-codec-http/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty/netty-codec-http"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-codec-http@4.1.100.Final?type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-codec-http2",
      "version" : "4.1.100.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0447e715f3434b09bedb759a78150a6e"
        },
        {
          "alg" : "SHA-1",
          "content" : "cbf1a430ea44dbdedbcde16b185cbb95f28d72c7"
        },
        {
          "alg" : "SHA-256",
          "content" : "23b4a74350f4cf8d41b93fb93d52b5050667d8d53fffc385672c86eab83b8749"
        },
        {
          "alg" : "SHA-512",
          "content" : "e40fafb2da5e999479ea1da3c0c332ab7ce512aec052f40aa244bf7e9de84e94a2e60fd676fec9ffa42b8e9d9e4025b4c12b583fbbb858fc99ae84cbdb0b8912"
        },
        {
          "alg" : "SHA-384",
          "content" : "66b485db96fe64a6838ffc0e9470b5ea7d9c3732eb9d020765bceaa4fa7e5b2c535f24c46a096af388ca51648699e575"
        },
        {
          "alg" : "SHA3-384",
          "content" : "17212e65d1c9548c7fa8ec5ab270d54f509783e061d99b4b0afe01c306bb25e7ed0fb505eb1539d115738618c282aabf"
        },
        {
          "alg" : "SHA3-256",
          "content" : "dfcb63cba153841b9b8ad8a25801acdc2ab37c4733155434ae9140ac63cc1b5f"
        },
        {
          "alg" : "SHA3-512",
          "content" : "a2dff3bcbe97e2d1a404aca366b93060df66ea32758541e1b6e37a6f3dff031accb9d14acda26554bcfae8be1cfd2956e6bab5cb9a52e082beb07480f8b67f7d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-codec-http2@4.1.100.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/netty-codec-http2/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty/netty-codec-http2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-codec-http2@4.1.100.Final?type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-codec-memcache",
      "version" : "4.1.100.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "60804ff28e651e5a73d8265e0742f0d6"
        },
        {
          "alg" : "SHA-1",
          "content" : "db315888a18454b7447a937fb7073bdcad3612a1"
        },
        {
          "alg" : "SHA-256",
          "content" : "f271eb376f7865ea098c506bcdb5d7cb40b70c6a9ed06ba08f77c95164a60f4a"
        },
        {
          "alg" : "SHA-512",
          "content" : "2cfd39d7c1e8de14e8531f9b925201982b29f02274cf627d38447b976d2614c882458f6a7d09188d67782e2274dc51dbaeeec73bc052ff44df8c4d64f02c9b0f"
        },
        {
          "alg" : "SHA-384",
          "content" : "d9a547b8d6370a5deeb486f73f9d136352485868ec9e04ec081c4fa4e0858a1f488bc0f72088f4aee4b738da763369a6"
        },
        {
          "alg" : "SHA3-384",
          "content" : "b742f9473065bcfcb2491b826a6f25f8589017880557cb0706c82a9db6a837582ecc43f4dcad13fac248e45fb50daac2"
        },
        {
          "alg" : "SHA3-256",
          "content" : "167819975a45b4fcef449f290d0ee4a9cba7194a8e4d6a5ed0809a1dbffd0f3e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c45a5a9308a2e7fc20d73680492b0045cca378038872a9deb5ddf483fb6923fc85611bc7c7ebd2d62cfa3d9676bcdfb0fa92066e0e0cb803008214c1af2ab760"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-codec-memcache@4.1.100.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/netty-codec-memcache/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty/netty-codec-memcache"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-codec-memcache@4.1.100.Final?type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-codec-mqtt",
      "version" : "4.1.100.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "822ecd04a04d624140a94cf492e32ce8"
        },
        {
          "alg" : "SHA-1",
          "content" : "d4ef59a99307cb16f47843033c51f1d8ca667b3b"
        },
        {
          "alg" : "SHA-256",
          "content" : "fede2e4b42b41f01488c425fbb1a75151e1dc9320e0511f6f523273299cfcaa0"
        },
        {
          "alg" : "SHA-512",
          "content" : "2952ae344d440139e63ca96178413a35fc8709fd460a0d02cbe176cbc0a74793eb1b689ea3c6d427d7114692a241170ce5b90894d82994eaebf35982ea7280e6"
        },
        {
          "alg" : "SHA-384",
          "content" : "4358f39c2ee25f99d1b757e097a84c445fc7b2e83d9fbb877f7e1fc76359ad135b15fc132457e85e0c0d33c1ade8c142"
        },
        {
          "alg" : "SHA3-384",
          "content" : "4eb0f2169f008e3ed40784ce7252711179e67373a4d854d5ad0b767831580423ada8d027860423c67ae70ec8480d4fa1"
        },
        {
          "alg" : "SHA3-256",
          "content" : "15e13691649a1880cd4e079bf377340de8a0b4ee8db0eea95e03d7124a216cac"
        },
        {
          "alg" : "SHA3-512",
          "content" : "11e3972b4282d08c4e89c0e9ab1b41bec668e6f68251b0717c314dadbddcc2784ba413651193f33649aaea3582520ecd742df237d52e32dd54ce13c522feddde"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-codec-mqtt@4.1.100.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/netty-codec-mqtt/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty/netty-codec-mqtt"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-codec-mqtt@4.1.100.Final?type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-codec-redis",
      "version" : "4.1.100.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1767d773e3b34066f0746a1054a1b975"
        },
        {
          "alg" : "SHA-1",
          "content" : "e3009241f1eb1e3f0f0d487010d6708b327bfbd9"
        },
        {
          "alg" : "SHA-256",
          "content" : "bd152212e9c20bccf0ca6f9ccbfc5cc86643a5f16875a998583c4d32d0c5c4ab"
        },
        {
          "alg" : "SHA-512",
          "content" : "af943be874b58f69c1e8dc3fbbe083c4e82394cb37f232bb85bb12d5595b01eb10c8d9d7fc6976cc7cf245a0f262a255bf55c974002b4a5aec24d58e37bda260"
        },
        {
          "alg" : "SHA-384",
          "content" : "8fc39d2d4c80a4a04a2e10947375b309854f5a5bc6d7e0ca96fc8f0cbfbbc7470bd3a781af78ac385625c04ccd8db282"
        },
        {
          "alg" : "SHA3-384",
          "content" : "8e79bc0d4867e8930171b6a2fad10fb76a763c6e2f5d10afbb429d6653f1d5f10c3db073fa5615464553ac1daf87acd8"
        },
        {
          "alg" : "SHA3-256",
          "content" : "a279a619acf254babb9f5a76b87723b1016b66de8dd7172d7132cfba3edf3969"
        },
        {
          "alg" : "SHA3-512",
          "content" : "b440692d49ffbf8976e3fde3f0ef4955469ed853c963cde4970610fd91354668182b7648fcfee5b454724f577f175432f130f0be0248b68d22babad505ba8c8d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-codec-redis@4.1.100.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/netty-codec-redis/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty/netty-codec-redis"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-codec-redis@4.1.100.Final?type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-codec-smtp",
      "version" : "4.1.100.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "269d38a26a365cc347f0d67b5e27b764"
        },
        {
          "alg" : "SHA-1",
          "content" : "3f08d2c4e5caa16c9c1731d1600c44bc7fb50109"
        },
        {
          "alg" : "SHA-256",
          "content" : "066528ec2d0bb3152872757eaf1fd07e2812ff354d3c53af8102108707e8e20d"
        },
        {
          "alg" : "SHA-512",
          "content" : "9c990f9f7dc0299b6810f94696c118d7280440d451dd86c8eacba80294557cd1c932fd00ea4f6ee12d68521f6f95824781fd48b92b297d6105b5accf17951c9f"
        },
        {
          "alg" : "SHA-384",
          "content" : "53c5a6aa31668c172ce23c318ded4b029e648dbabb109be9bca3bdf241b5baa91545db7f3624c7aa1e8e203344bb8c45"
        },
        {
          "alg" : "SHA3-384",
          "content" : "028b54eabaeb983a4033bb670eaf6a3cffc73a87c55b7134d0548c56e530d0247b2c451b4c1b43a361351635516114bd"
        },
        {
          "alg" : "SHA3-256",
          "content" : "11e1d4a2f704632f6f7159e422430e934d87463e7ec177f789106be615e17f75"
        },
        {
          "alg" : "SHA3-512",
          "content" : "6cbe1f756829cb89ab74e386843ad56500bed823a906e0a4ccaf0dfa5e004d9ebda0b46624d98ca2a0f2051fb36f467062d6c0012908c8a5b7e10c9a0eb2a73e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-codec-smtp@4.1.100.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/netty-codec-smtp/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty/netty-codec-smtp"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-codec-smtp@4.1.100.Final?type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-codec-socks",
      "version" : "4.1.100.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "222fdcc7a13c6763dea87860559bf06d"
        },
        {
          "alg" : "SHA-1",
          "content" : "a9fbf4d64b08abed542eefd5f7aed4807edca56f"
        },
        {
          "alg" : "SHA-256",
          "content" : "608a453b90f8384ba4efcdc6db7f899a1f10b9ea1890954696e6cfac45ff1ba9"
        },
        {
          "alg" : "SHA-512",
          "content" : "e3dc12d7d9643bccc59bf4b88b006b8cf970f914bc6615ec19516dcb3d34d25bfab90081f872b3e662aced011dc36cdecca995093092f1f1a2d9f62624e2b078"
        },
        {
          "alg" : "SHA-384",
          "content" : "6dbb3b1e43745308bf6da36c68f9f8e432202ccfd500243867186d243569ab2fdaee46320c8423f5bbc6f042e19d810f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "7842f7755b062b3052476ac33764081e5833243cc3939f41e7ebbb574bf8aa0621bf2cc76235e23f49d4de3045a8556a"
        },
        {
          "alg" : "SHA3-256",
          "content" : "31900a8d0293652e69d5f786c1340be1a9410fefa439ebd97825abda312094e6"
        },
        {
          "alg" : "SHA3-512",
          "content" : "6017ced5e1859af35c30e723428fb6b5e408e0316948e56ae6308385f86fb9dba3eea27b8a34c1fe11c1953157154c4e12f9fac7f6fb733a2ef7da14b3c48e8b"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-codec-socks@4.1.100.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/netty-codec-socks/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty/netty-codec-socks"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-codec-socks@4.1.100.Final?type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-codec-stomp",
      "version" : "4.1.100.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "917c83a1a72db969368331a593ffc33d"
        },
        {
          "alg" : "SHA-1",
          "content" : "2681fe11716189f9b5f0985bef232acd2f47f13b"
        },
        {
          "alg" : "SHA-256",
          "content" : "14895b1a22db5760acf71c7cda7bc264d9e1363d29b6e1768c39e3badced61f7"
        },
        {
          "alg" : "SHA-512",
          "content" : "7f20dda9bd0d6c1350a7ef508630adf0503b87ba27f3a123b7127de85193947406d2ea0932b57de1a0ad6eb911c598a7a1e63c197823182dbcbe1f5f16e4fba6"
        },
        {
          "alg" : "SHA-384",
          "content" : "dd3fd703a7267d9192f9ab218545e5ff79aadd28dbc1f2327b3e358b6f4037e9fe65822d92d6322c6ab2201b5263236d"
        },
        {
          "alg" : "SHA3-384",
          "content" : "d6a0e774fb7146ccee0afd8bfbb5160f5b690918ae2e731a24b627aac950dc7b0acaa0a3836deb4bdadf806b7b8021a8"
        },
        {
          "alg" : "SHA3-256",
          "content" : "afb2d80e5661784cc55104abee212856b70bd25495589fdffbdb3c6b790f0028"
        },
        {
          "alg" : "SHA3-512",
          "content" : "9175dd6aca2eb9668a68458e4b2387d6ccd702c69587d7e05cbb6e5e74ebacf18bc10fb40b8ae2e378f479b139bdf00ac444286d19d13d9a4ee2cef7bb95272f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-codec-stomp@4.1.100.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/netty-codec-stomp/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty/netty-codec-stomp"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-codec-stomp@4.1.100.Final?type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-codec-xml",
      "version" : "4.1.100.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "af35af923b37412ecab72cc0ea527ba0"
        },
        {
          "alg" : "SHA-1",
          "content" : "133c53f9f331011dc9f127aa00f08131efad5398"
        },
        {
          "alg" : "SHA-256",
          "content" : "853c77c5ba6a9faa16383677d3114524db32fa4d72839b1ee00f55ecb22fe26c"
        },
        {
          "alg" : "SHA-512",
          "content" : "6b3d17d91195d116ceadf5fe33ffabb7376350eab6759aeae4d1a619cee94b833184c8eaaac3fa6d0dc38c4a9da97a7e8a0364fcf268f13e4d039816641a08ef"
        },
        {
          "alg" : "SHA-384",
          "content" : "2ddfd1f54fa1f91d20f7b2df367e26988f59b184d0563ee7f4c8e08071cfd07d19bf960b93bc8d5eee2c195003a0fbe7"
        },
        {
          "alg" : "SHA3-384",
          "content" : "e89335c424561d80809c7da2dd7752ea16ca6fc5c82b0c637da8b9efc24e5bafffd83c17331bec793478a9e0b6f630fb"
        },
        {
          "alg" : "SHA3-256",
          "content" : "5af8d070f5dd343f84486610bf68a643dd4c5b8b5f994f6ce826f4fd5e98a3ab"
        },
        {
          "alg" : "SHA3-512",
          "content" : "f9738e4b32eabc89cee5498221ef4e8b51d21b3ba5cc497568d28765a5540fa103da81bb802661a3ea1e976b0fbb2aa56077d3786cd7fb66502be8992039cf62"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-codec-xml@4.1.100.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/netty-codec-xml/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty/netty-codec-xml"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-codec-xml@4.1.100.Final?type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-common",
      "version" : "4.1.100.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "cf117aec3d80cca994b4818fb029b020"
        },
        {
          "alg" : "SHA-1",
          "content" : "847f942381145de23f21c836d05b0677474271d3"
        },
        {
          "alg" : "SHA-256",
          "content" : "d2908301f1ac6f2910900742473c15d701765d3d4467acdb1eebb9df3aa82885"
        },
        {
          "alg" : "SHA-512",
          "content" : "5bf58c87bdba2d0715b6d60280217651e5243982abbe5b3858501d6d99b4365df3f42faae1d8680ee39e27de60bacc4e299eff8320c7a04634b4a686545c35ae"
        },
        {
          "alg" : "SHA-384",
          "content" : "1683331e8ad6443e65c98bd374931fa9b40bc87dad7adb173cb0fdbd1202635095ef714edb6be3aeb44343a9b9e943a1"
        },
        {
          "alg" : "SHA3-384",
          "content" : "2597d4845ac7d4bf846fcd50cd97ebc027f52065e51b2747e7a99d74dd7542d43cefc3d51b1eaa52301a5b76964d29a7"
        },
        {
          "alg" : "SHA3-256",
          "content" : "c0086526a097ca4ed2d755c94494341826249755a0e9d454bd72d929c8548b40"
        },
        {
          "alg" : "SHA3-512",
          "content" : "5cf81c7eb3d768b835f9ce40375fe1e9dd1160a8f2a38a0a8947fe28448883379c5c06a965be17e819d1b58fe086fa563a739ad0f7ae31b0eefd301e6fa5529b"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-common@4.1.100.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/netty-common/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty/netty-common"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-common@4.1.100.Final?type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-handler",
      "version" : "4.1.100.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "71115ecf7b56ffa15469fc81c90d8fe5"
        },
        {
          "alg" : "SHA-1",
          "content" : "4c0acdb8bb73647ebb3847ac2d503d53d72c02b4"
        },
        {
          "alg" : "SHA-256",
          "content" : "0e10e584c2e7fdf7f4804e14760ed987003f1b62ab982f62eaf13a9892793d3a"
        },
        {
          "alg" : "SHA-512",
          "content" : "8a9dfc357670fbf06a5a83b90f79a9ea7dd25318a14a4f68599dd746f90f65b18ffa356ff0af01debd58f815c5ead562a5fb8eb9884422a7d751e1b12359ff0f"
        },
        {
          "alg" : "SHA-384",
          "content" : "dbcd08b5f8bcf8672a3408351e6660d766c217f11aa848cb236bfa7b26b065f3c40e97af662b31687e9bbd264405b397"
        },
        {
          "alg" : "SHA3-384",
          "content" : "052f876da511392c8ed118a5f24bdb57e66a1de55c54441081fca7294309d35e3fe6ba0356031ff695fb5036500a8780"
        },
        {
          "alg" : "SHA3-256",
          "content" : "e5ba35f6b7d284c5de16d4a21e7dc999af1fd463e2fd5f6758b3e3e3abee3bbd"
        },
        {
          "alg" : "SHA3-512",
          "content" : "6d009c74bb0122fa3ffc3829bdc37b67fce2f0ca022242f5ca8cbc0d553b83a472d2157ee870dedd9218fd4604641a65ae53113f7b0bee70fa4ee0b514fc2519"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-handler@4.1.100.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/netty-handler/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty/netty-handler"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-handler@4.1.100.Final?type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-transport-native-unix-common",
      "version" : "4.1.100.Final",
      "description" : "Static library which contains common unix utilities.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f9e7c0c25233359ce26bcd4827159ed8"
        },
        {
          "alg" : "SHA-1",
          "content" : "648ff5571022dbfa6789122e3872477bbf67fa7b"
        },
        {
          "alg" : "SHA-256",
          "content" : "5d888230a04c4a3e647c64e933cefb64fd49056f969bfb734c8a3fcedf0bea8a"
        },
        {
          "alg" : "SHA-512",
          "content" : "91a89e3c59840f816671dcfc89edaa3af66caef5423398997517afe4fc40a94658079e16bdf4772896e6537bd30397aa2651f38bdffd399f677d838073acf78a"
        },
        {
          "alg" : "SHA-384",
          "content" : "e34b37280c22d90287cd14f49e144f3c539d06ee35ad7b1ca5e2cc436e1f071fe02602d6facadb738c39fc34be1b4071"
        },
        {
          "alg" : "SHA3-384",
          "content" : "f900919bfb2f600d5b252b4917c2cf317a75f2a948c71d6a8f13875b8538417d5952287593ea982329f13d10d65730a3"
        },
        {
          "alg" : "SHA3-256",
          "content" : "ab5ddf4992929e79ec37f480372d22ae2cc3342e1ab2b13b192a3d85d1b3e278"
        },
        {
          "alg" : "SHA3-512",
          "content" : "108bd772384757a70ecf23b68367f6accf8e370552bfdf8950076eea5b5ff3ab18a02e4e3e8463a4cbad28f1ff754834ce758f5be08ec3973ffed228c0a2ebc0"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-transport-native-unix-common@4.1.100.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/netty-transport-native-unix-common/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty/netty-transport-native-unix-common"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-transport-native-unix-common@4.1.100.Final?type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-handler-proxy",
      "version" : "4.1.100.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "275578b90467d2d83b0b4899854c38a7"
        },
        {
          "alg" : "SHA-1",
          "content" : "af3cf676eed30184215426ecf0f0dde15555ea9c"
        },
        {
          "alg" : "SHA-256",
          "content" : "686dbc2e61407f216d6cb267dd7954896f851dd34b58be3e757c5a89f20a5e67"
        },
        {
          "alg" : "SHA-512",
          "content" : "f7e0e3897f456d5068707ea1e4eae005ae71bc5adc747d150e9d67582d8429cd1f9f0367e320e1b9138d3eaa619f4511eaab90e9f4e73d8093fdccca217bf22e"
        },
        {
          "alg" : "SHA-384",
          "content" : "eb242699fb1c7868f6b34ad927490200e74a4beeeff6e559755fde77cb2f5ac4364a875ebb036eddda12d1e51eb71fea"
        },
        {
          "alg" : "SHA3-384",
          "content" : "013950a4871be10d9c7d9039c9a93a2df47bdd325cb3ab3d8651cf6e5065bb566023e4782737964073cfdd427de7d3c0"
        },
        {
          "alg" : "SHA3-256",
          "content" : "9ad6a7bb4dcbc408c2f8f37f50ec518611728c03bbcb2199109a8455270ce17b"
        },
        {
          "alg" : "SHA3-512",
          "content" : "160c340bab73b2af7a038903d5606c7309275b7f638c7698c907c08bd1a719aee5aaf5f64f7b6a7b2a587fa6d5b2e13387efaabc1efd4d5863104b63f6345c46"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-handler-proxy@4.1.100.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/netty-handler-proxy/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty/netty-handler-proxy"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-handler-proxy@4.1.100.Final?type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-handler-ssl-ocsp",
      "version" : "4.1.100.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "54afa01e922bff4681c5d4d72fff346d"
        },
        {
          "alg" : "SHA-1",
          "content" : "1a2a1fbe9023e8ff87cc7f011ae372353b47bab2"
        },
        {
          "alg" : "SHA-256",
          "content" : "d8e064f1b589a71fa019a3d63bbe91f6994984246355b5fa88b0a994768e82ad"
        },
        {
          "alg" : "SHA-512",
          "content" : "b3377f3bccea9ec28db1087c5c2d33d19ed7fca29216379b4d5996eb522daa36806b892d9f9af5db18bbaed027b8a7223535d18c0a836e7284440d78095de333"
        },
        {
          "alg" : "SHA-384",
          "content" : "97e59ac47276a68757e7971b1220d592c2ec7265926a75cd8ee25e9cbdeb19006dfb935d248c648875735dee2dff1222"
        },
        {
          "alg" : "SHA3-384",
          "content" : "5a738dd3ca28b4fd01b29961d7a68e045398408e187dd196db6436a3763f90abd81ef178af5bc54ba9a73b23d2f08917"
        },
        {
          "alg" : "SHA3-256",
          "content" : "c13114b9203fd13454b45b7f546f6b5cb7b9350a97539e1db0a8741352ac4688"
        },
        {
          "alg" : "SHA3-512",
          "content" : "7fcb97112cc74cbd3c32fa478cbd5e1dbb072586fee3344983d81c1f53dcb164a6a03c4a7b292a12eaba16be99334eb835269b2e190ec26231ecb83a216fc36f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.100.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/netty-handler-ssl-ocsp/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty/netty-handler-ssl-ocsp"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.100.Final?type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-resolver",
      "version" : "4.1.100.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "ad29e0c4cab6b9b1d83d2dab9a260d3d"
        },
        {
          "alg" : "SHA-1",
          "content" : "fe62f9ccd41b8660d07639dbbab8ae1edd6f2720"
        },
        {
          "alg" : "SHA-256",
          "content" : "c42c481c776e9d367a45cc3a67a06f65897d280334eb30b2362b8c55b7523f4f"
        },
        {
          "alg" : "SHA-512",
          "content" : "5cb91a055b933893a37175ba052527de70d7311a0385658ae913f8b4a67f4945a3e0547def8a9751230986250ebc7876bdbd14fb5c8989aa885f4aae4cc47be5"
        },
        {
          "alg" : "SHA-384",
          "content" : "333fa2b49cc522664493dfd6e7f92304317f27c5887e33d87e6b3bc2f3d5cabe6ef88e6ebc0aa476ec23a48a982814fd"
        },
        {
          "alg" : "SHA3-384",
          "content" : "712fed0f1cc5ebc0e4efdc559b565f2ddc0cf161186834c3a1f6e75123ed7f1fe558e2f8410584ccd54056665bb40957"
        },
        {
          "alg" : "SHA3-256",
          "content" : "6b05ee599b5f915e17d8c11816a4fcac27d86dfd0d4bb750bc4905978ef8e5bd"
        },
        {
          "alg" : "SHA3-512",
          "content" : "a6ab5c3f414ef7aa13da7e30f662117b56d1a8eb5f1302b3434ccc07f9c07cc497c39c10379a781d3656269067fcadffde4884599f059ee86be40b4fd0ceb5c4"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-resolver@4.1.100.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/netty-resolver/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty/netty-resolver"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-resolver@4.1.100.Final?type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-resolver-dns",
      "version" : "4.1.100.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "de8c3264c3f107064287cd3847a2b38d"
        },
        {
          "alg" : "SHA-1",
          "content" : "62dbdf5f25eda75ea8456be1ed72b3fcb0d18774"
        },
        {
          "alg" : "SHA-256",
          "content" : "4bafbd3e571ed2d9fb3f9550f8348ba37c183eda4a253fba5354166e409624c4"
        },
        {
          "alg" : "SHA-512",
          "content" : "117907f8ba0d5ba3275fd9d78c4b4af188318bc0da4aa8b84f7afc6d1a5ad406859829ecb6e8b903cdeebf8cc372539d1e7ef12462f59183518b69d2520c3d83"
        },
        {
          "alg" : "SHA-384",
          "content" : "2cce55be69c3211d0d0120824a7c838a1e9504498e98fa1868a2adc0ec8dab635108892dfd0c458cbfaaea1023cef34f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "672b02afa41e08f6966ddf72efdb7f7eeaced3c6315ee3c2e1e8021b867155ad2697e14e566db4a2f8fff31fe06909a5"
        },
        {
          "alg" : "SHA3-256",
          "content" : "606cb0dd8447f802a2c2be71616b9f4b0c5b94c99e0de5767c326e62b6f17515"
        },
        {
          "alg" : "SHA3-512",
          "content" : "1dacdd99e895cd4eab8ce7873473853f9d7d80d36eafd2f3f5c34ed9b8698d7ce38430a3a26719ab87cf2935778c4bb7163e7c907c5f6bd851b81d4ac900d620"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-resolver-dns@4.1.100.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/netty-resolver-dns/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty/netty-resolver-dns"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-resolver-dns@4.1.100.Final?type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-transport",
      "version" : "4.1.100.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "5c5833972c90aca30023ca7118d1c6d7"
        },
        {
          "alg" : "SHA-1",
          "content" : "6620fbfb47667a5eb6050e35c7b4c88000bcd77f"
        },
        {
          "alg" : "SHA-256",
          "content" : "b1deeceedab3734cdb959c55f4be5ab4a667a8aed59121ff93763f49470f5470"
        },
        {
          "alg" : "SHA-512",
          "content" : "61dd55ac6b87ee442b3db0d172ef9bb74543d6dfda7ea15da004a84a1a16baabf5ecd967f152973f14a579ec15df48a92e8146825b153165b826feac5d4c5e93"
        },
        {
          "alg" : "SHA-384",
          "content" : "5c10cb72e028a143e7e856715b35f7b58db72bbed4536d9cb4329f6997abe95a541e6cd16162a9cd07db4a0c55a7af88"
        },
        {
          "alg" : "SHA3-384",
          "content" : "8b6d4ae07394f92add50dcd33f4bebd35206238287338441bc3caa2808275845b41562d5fe9cdc70affe9eb2433fe8fa"
        },
        {
          "alg" : "SHA3-256",
          "content" : "89941a6f28fd007c8f0592cae74b56f199853a822633a4401f09e5221068e5d9"
        },
        {
          "alg" : "SHA3-512",
          "content" : "54942221097d3d33383dba3c577e44d0c03cf5cc73c1c89e40228626afc5d569b53fba73fa4698c2b88baf72e5df78089dd6aa35dc081f2b1acdafe31d2941f9"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-transport@4.1.100.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/netty-transport/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty/netty-transport"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-transport@4.1.100.Final?type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-transport-rxtx",
      "version" : "4.1.100.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "674db99a6ed15083985ebadef921956a"
        },
        {
          "alg" : "SHA-1",
          "content" : "6269f0b343986623ffcfbe76d9fcd50dd04882ce"
        },
        {
          "alg" : "SHA-256",
          "content" : "8499f4816f6615c97b664b88bc28ab0f68b031676cfcf95218e2c3ec64c5d5bc"
        },
        {
          "alg" : "SHA-512",
          "content" : "a53cf0dc64c019b9dd6bb5a478b4f3bbe008c0be8024193d0dd2acab574e832e0b1471805290e123e224343fe8f3b16a5ad2986caa55ecfe0e9f06165dfd9030"
        },
        {
          "alg" : "SHA-384",
          "content" : "1ba0bff29939165148abc1c14e00a535938cbc681f091a41508e542969cf53b79ad41ce550c05ca2d7534a8d0100c3b7"
        },
        {
          "alg" : "SHA3-384",
          "content" : "63ba671b6dd6617171390f293e9de697f89b134c3db686d095ac38cee176a3c0dc53b6b1b396beae22f7acdcc2f3494e"
        },
        {
          "alg" : "SHA3-256",
          "content" : "039fac0533102d851c3e6e1d940c115af7473fc0e45699fee0058bada6ef771d"
        },
        {
          "alg" : "SHA3-512",
          "content" : "2861a3a68b07189474cfd52bc5e3770c5d7708fad745bf270d941c57af0341caf134fd954cd56454671fdeb3b927da907b0d862fe1fdab4e88e9615323561445"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-transport-rxtx@4.1.100.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/netty-transport-rxtx/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty/netty-transport-rxtx"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-transport-rxtx@4.1.100.Final?type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-transport-sctp",
      "version" : "4.1.100.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "2eecc8ad488549ddd7c056413ea30c2c"
        },
        {
          "alg" : "SHA-1",
          "content" : "605aab389945175470056c4c40394cfc2f019f81"
        },
        {
          "alg" : "SHA-256",
          "content" : "15d3ff37b84f7877442aa0981b81f5106f61f8bed2a09c18d5242010a8f4336f"
        },
        {
          "alg" : "SHA-512",
          "content" : "11766228507f84a6420733096a379a686ed195649395d6b33e7656be931daff2b8e03703737181092d47fcfb20b80f35bee7fa539eb63103b76e4ea032359e56"
        },
        {
          "alg" : "SHA-384",
          "content" : "71b219da445c88d0d6bbb4c14ec8596e983edda5d6341a8e432fa89aeaff2f623c5a8e7228c2a82e557826dab0f51af7"
        },
        {
          "alg" : "SHA3-384",
          "content" : "3e8d9be29c6728b87fbcb35cf5e7ad5f981182ddd7ecdefd097da9b0e28acb9fd23cb71a139b80fbbae510bfd85d60dd"
        },
        {
          "alg" : "SHA3-256",
          "content" : "4fa1b54611a4f6ae6bd7209eb25184df3987c02c26d41cce2deaecbdb74a8d1b"
        },
        {
          "alg" : "SHA3-512",
          "content" : "9cfd2885c31764bc70f4c68c50e824a16aaeb6416deb040ba428f610e6ae70ec699452ecc6ad2185b41c17aa7043c1b87ad641e5129828e99c4d65a6524b885c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-transport-sctp@4.1.100.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/netty-transport-sctp/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty/netty-transport-sctp"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-transport-sctp@4.1.100.Final?type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-transport-udt",
      "version" : "4.1.100.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "17907ac376337a102bd0386091739193"
        },
        {
          "alg" : "SHA-1",
          "content" : "9800d99ac8dd083d9a39c804ff4e8dd85a01b5d3"
        },
        {
          "alg" : "SHA-256",
          "content" : "824c5d26da6c001357ef0e8a985076a9093a613cf1f7f7cb719bffe88dde7e58"
        },
        {
          "alg" : "SHA-512",
          "content" : "6cfbb43fb6575017344ee498441cdd9d48cbc7fd63f5893b253973c3c84b181fcb7cfa9fa230f1ea297c0d7a00087ec28cb2a2f47e11cb0b77497b713c09b37c"
        },
        {
          "alg" : "SHA-384",
          "content" : "224685fe1c45c8cfbc3beb6b61e3c8450e908fbbf788ad333372befc7cb610909c36d7dce613fb6e8636ac679d4ae551"
        },
        {
          "alg" : "SHA3-384",
          "content" : "4c60212ef6efa63b6329908965e3b077a35f84b11193a4ff3870f7303a3858981092d774d60c2698b88f384366af5207"
        },
        {
          "alg" : "SHA3-256",
          "content" : "8179fb71c42f90b7bbbc75fdbac5fdbb47a26316c9707d63a8ce30a8dc4138f4"
        },
        {
          "alg" : "SHA3-512",
          "content" : "70ca9fb755aa7e2fbcc72c59f1718f503c58c0c3b5ec7bb2baf076d675db16502d6d11b883c394596215336cf47e329cbeeacb6fd4a78f80bfabe6ca042c4590"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-transport-udt@4.1.100.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/netty-transport-udt/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty/netty-transport-udt"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-transport-udt@4.1.100.Final?type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-transport-classes-epoll",
      "version" : "4.1.100.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "330b88f30039a09ea3cf96e4f27fcd95"
        },
        {
          "alg" : "SHA-1",
          "content" : "78489936ca1d91483e34a31d04a3b0812386eb39"
        },
        {
          "alg" : "SHA-256",
          "content" : "9abc4b17b1212b33666eae4e8013d0bb78a9a2bcd0a9a621b9bd06a7e5fc0050"
        },
        {
          "alg" : "SHA-512",
          "content" : "38aab4eb66341393e77f0684432d31e9af8242729290b17621e7e762ae59049bd11f35b612bf47b689392264fa40dd30c1e1a2ece43c9596c2625e3889abeb41"
        },
        {
          "alg" : "SHA-384",
          "content" : "fadabd9e9b461c11ee60cb25cddbab645640ea101fc3b4bfb44a219c5f3351ae8d6c08ffe46f6c6d4f9671884bd3ceeb"
        },
        {
          "alg" : "SHA3-384",
          "content" : "07b24c51bf49193f04a842c3f1fe63758ac4c9ebf9cdbacf5b9ca41034d9c45c90cddc8352ba0bfbcbb0becf1ef73cdf"
        },
        {
          "alg" : "SHA3-256",
          "content" : "a0d430d84a085ad57b0e2f5ec47fa87e95fb060eea67b3e9fa6971de664b0d96"
        },
        {
          "alg" : "SHA3-512",
          "content" : "f675aab53a41a2abf8a8e8f0218e61d66885b4534ec2ca83534ec462a08863e415b0a65bd6ab07b9ae8c2316b1e06b06529c088b28ca74999fa5432c2fb551d0"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.100.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/netty-transport-classes-epoll/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty/netty-transport-classes-epoll"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.100.Final?type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-transport-classes-kqueue",
      "version" : "4.1.100.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "d74cebaf30eae4ae989eda7861587e70"
        },
        {
          "alg" : "SHA-1",
          "content" : "a32c1b13b82bfd7f09d4ea4836257d48056f0fe2"
        },
        {
          "alg" : "SHA-256",
          "content" : "70b40962b01ab594bed5cd311cd8768b224155c948118af60412ab23bc55ed50"
        },
        {
          "alg" : "SHA-512",
          "content" : "572017fa545d613b1061538c1d4b0fa412d6f32e3a0193cdd570b86c93ce9f6c168611e5af68bf8cd33e14ef94337fca8d52e7189549af4d00073a88d530d901"
        },
        {
          "alg" : "SHA-384",
          "content" : "78ae1e2048f8ac211127dee802de40d42cedbdc7ac9955b19a71ad5fe982f31aff10af6b3d83f014ec0cc54ef57f6381"
        },
        {
          "alg" : "SHA3-384",
          "content" : "46b7e000cb778fc4457a7fda242c336dbad5ae6d53763c58fcd444bb20176a2a3ec3b7fe227c2d230af7573a003747c0"
        },
        {
          "alg" : "SHA3-256",
          "content" : "71e43cb9cd64da8411fa894f117419730a9eae5b06661faf8e2ff4f159e25d00"
        },
        {
          "alg" : "SHA3-512",
          "content" : "1ce48410e784e98129f06b3f021394c0e1c19035e741ae46021437d1fa454e2ae033b3f345589a106e5ef4229d5fba1ecab3679220a55f34e7bc054f9e9aeb14"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-transport-classes-kqueue@4.1.100.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/netty-transport-classes-kqueue/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty/netty-transport-classes-kqueue"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-transport-classes-kqueue@4.1.100.Final?type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-resolver-dns-classes-macos",
      "version" : "4.1.100.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "cb604e66375906bb0a09b2c8fc422194"
        },
        {
          "alg" : "SHA-1",
          "content" : "b5be42330dcf4ac6e86f37ca74d04e30a8f5513d"
        },
        {
          "alg" : "SHA-256",
          "content" : "6fca51826ca592b886e6144146318cc07a9098389e0714ec0df6fcd879600120"
        },
        {
          "alg" : "SHA-512",
          "content" : "36546acc5ad7c43d2a2c21e5ff6812f38794123e439e02498b49dca82e0d0e9d566ddec02a51f85543a1fd829f6eaf29cbb75d5480ec42d7557f2f0955851759"
        },
        {
          "alg" : "SHA-384",
          "content" : "6db2b0869d3ab8255736a53dda61515a2765db4430668b712315f16f789166523aa53465d33e183ad763fa6cae0dd3fd"
        },
        {
          "alg" : "SHA3-384",
          "content" : "c1f43106d07b2c49e328df47827139dbf316141f3f38be88ceecffb600f66b4f588335489272fc8f01ccb751566c1e8e"
        },
        {
          "alg" : "SHA3-256",
          "content" : "812946c06ebb0a7ea09b4b4fe8aae9be9cc909e61352d034c41ad217cc86b910"
        },
        {
          "alg" : "SHA3-512",
          "content" : "547b60154dcb278983af845b17baacf732c26cb1c214e641511795c4f30a6d72f60fffc648fc7efba39659e1d1474603bd2608062a74c7aa85d3804a29b6e2eb"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-resolver-dns-classes-macos@4.1.100.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/netty-resolver-dns-classes-macos/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty/netty-resolver-dns-classes-macos"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-resolver-dns-classes-macos@4.1.100.Final?type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-transport-native-epoll",
      "version" : "4.1.100.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "3bfa154e37db9c3a48a8c93823bcfe3d"
        },
        {
          "alg" : "SHA-1",
          "content" : "d83003b8eac838e4bc3f7662a22f9f2d879c0fe4"
        },
        {
          "alg" : "SHA-256",
          "content" : "a108fb47babb7678b5b2abb1fc8b34510bd2f705faa450447860647f2de4ebaa"
        },
        {
          "alg" : "SHA-512",
          "content" : "f15707e3b13f4f2bb25495fab0ed1435bd0b6e584104149e7c8df322ba86ab03de9f0f8d8dca861751639ca04a5bbfb939a1d4e4942ccdad309bfd35acab8305"
        },
        {
          "alg" : "SHA-384",
          "content" : "c8ef83d430341881934dc80ef16e6d14c20da0c375a7068b4943cd4e1b5121f23f23f8cc515cccf4a1b575a7d0076f6c"
        },
        {
          "alg" : "SHA3-384",
          "content" : "2223933f7d7cca96f98fff28e9fa776a8aac065b64f2db17b417dda0352048485760ae35107c15c6358d7a0a42c1295c"
        },
        {
          "alg" : "SHA3-256",
          "content" : "f4c7b8e46ac5de42d0e8e045af8e1cc2a4586783002c695953e05401cbc50f75"
        },
        {
          "alg" : "SHA3-512",
          "content" : "3768d972157c5427721fb19cb58462767bae5cc983c69500976bed062d0d1bb8d3795a8dedfde35b1154ae862f6e37aa4ad5a406671ccb01467be8791a0f7451"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-transport-native-epoll@4.1.100.Final?classifier=linux-x86_64&type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/netty-transport-native-epoll/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty/netty-transport-native-epoll"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-transport-native-epoll@4.1.100.Final?classifier=linux-x86_64&type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-transport-native-epoll",
      "version" : "4.1.100.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e9c12dc6f19d11247186f0db693c7510"
        },
        {
          "alg" : "SHA-1",
          "content" : "22c3fe045620e6e05002ed1999d276dc4176a7a4"
        },
        {
          "alg" : "SHA-256",
          "content" : "81993265c3fb9098c0163943e71c14fbaa6ed17e345e7bf8205c90acfdf6cef5"
        },
        {
          "alg" : "SHA-512",
          "content" : "3442dd27f7da71bba95ab53aebd18b22d2d5c9f6b43dc5d9190513694baadd0b43e75ccfbeb726228bd88df2b700b234565495e6149a860e5e2e89b2b1c55a97"
        },
        {
          "alg" : "SHA-384",
          "content" : "e5b95e970ea9000a17d8b9d5816e85113fb756378b7c7c0f74fecd08c2e767e09c6ed38d5555d1619169b4d297d15cb5"
        },
        {
          "alg" : "SHA3-384",
          "content" : "eb5cdc35b84ab4a67ab01bb442a13cf798c2b1426b319188d5d2da540991a9175462f76cff004c60ab84876ab33eb374"
        },
        {
          "alg" : "SHA3-256",
          "content" : "e90f547d7067be8c234dbd357a33a44c777b77984409e3cd1f6594d398277d9d"
        },
        {
          "alg" : "SHA3-512",
          "content" : "2dad926efe7b9ba2f864461afbf0583bb35145b606dbdb790635944fb59e36a03f799d61c40779d1bb8787041e0780f07aefb10243d2af0f202a43fa09840221"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-transport-native-epoll@4.1.100.Final?classifier=linux-aarch_64&type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/netty-transport-native-epoll/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty/netty-transport-native-epoll"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-transport-native-epoll@4.1.100.Final?classifier=linux-aarch_64&type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-transport-native-kqueue",
      "version" : "4.1.100.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "d61b7f1c8ce1e025ddf9e063ea06dbf3"
        },
        {
          "alg" : "SHA-1",
          "content" : "135c3a560a4fb84b0e2084f376610347483e2e8a"
        },
        {
          "alg" : "SHA-256",
          "content" : "9ca2ba0121e35ea25228cf27ec553279966ca0a7f9c61e33ad1d9ea50477360d"
        },
        {
          "alg" : "SHA-512",
          "content" : "f3542a196ad9b06eee2778723e62fdb16d8b3cf6490953449cd4996116ae670a97f8f32cf0e087e2dc2c1420e26f30e979e588f1859998c008dccba8124927d5"
        },
        {
          "alg" : "SHA-384",
          "content" : "879225eab065f8fc48c6ecebfbefcc931cf19edbc40bfcf5e433720a754cb8ea951682e3b133987371997260d5bff41e"
        },
        {
          "alg" : "SHA3-384",
          "content" : "872ccd7c4b58de39d384a4d66228ef4a3a26cd9b0ef1aed0a2a7fdc818a571182eab2d8580723111707c9a76b19f9b98"
        },
        {
          "alg" : "SHA3-256",
          "content" : "099f59d60baf93cc657cbe760bcf0fec09682832c369025957029e5c772a5943"
        },
        {
          "alg" : "SHA3-512",
          "content" : "96c3138ff7b1b851bcc3d5007a22915b07243a711638b3291ab7c86189d1380f667e12d881e42266fe5c54662f67849f65414ebacf00e42b11081f4ffb39abc0"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.100.Final?classifier=osx-x86_64&type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/netty-transport-native-kqueue/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty/netty-transport-native-kqueue"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.100.Final?classifier=osx-x86_64&type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-transport-native-kqueue",
      "version" : "4.1.100.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "19f49b571b8c7bf5439c7f8b756cebb9"
        },
        {
          "alg" : "SHA-1",
          "content" : "2d75a8e80a75def2b61bac1ea5f66d184f5069f0"
        },
        {
          "alg" : "SHA-256",
          "content" : "0fdc323ad2efd85343713fbce6e0c2aec27e6852659984d03a5414018e01815f"
        },
        {
          "alg" : "SHA-512",
          "content" : "a4df5e72cbf75102bde6a559387ebe8c6c53b229758975989c3b368f9a6387d4e5179b28afd9892919b55160957a9777106e72b5511ce9af70ecc8496d83bc7d"
        },
        {
          "alg" : "SHA-384",
          "content" : "8761de5e58664f90b7110169e40913d63ec62a128c01cf697a7276b91561a293b94e8808485a7ef248f514812df6e323"
        },
        {
          "alg" : "SHA3-384",
          "content" : "0ef939b7140945f08678fd2a463e0277d024a321463b575d4bd6e2cdd94ad2b6d62b80d49ab183653833d12dc13728c9"
        },
        {
          "alg" : "SHA3-256",
          "content" : "318865b02ed4f2001e901f3e56017502b9f4a68b6d151c7f84e8e2b7d84939a6"
        },
        {
          "alg" : "SHA3-512",
          "content" : "6a3d8af154030e46fe01200bb40fd44e0ffaa31692d3782a1bb98435d1cb44813f49a3949e57d6cdbae83007b9d18978fe988d4f3357aa9a3fa9b05261df22b0"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.100.Final?classifier=osx-aarch_64&type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/netty-transport-native-kqueue/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty/netty-transport-native-kqueue"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.100.Final?classifier=osx-aarch_64&type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-resolver-dns-native-macos",
      "version" : "4.1.100.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "c8ced2e06f0b916ec86da5788937dd61"
        },
        {
          "alg" : "SHA-1",
          "content" : "6db932ddf73981d1f0b023eab8fb61ae1a6ca170"
        },
        {
          "alg" : "SHA-256",
          "content" : "b47f1b6c2acc32ae53cde11600c68ff6255a9cce16a9423c487f13283d68d923"
        },
        {
          "alg" : "SHA-512",
          "content" : "35b2696879afffb60eb300fe35c12a3e67d9f274272638d939d6ae1ef0b4b68950fd2d5ff38f0878e15cbb0925f67f37014a3e7cc5e5f3999fcde180e2e23b16"
        },
        {
          "alg" : "SHA-384",
          "content" : "b47b9c948b235a8aed99e756a59f356edf88bb39278caafce7ac63b8b6d47ea13db7f677f4ea96acc21d883786a22060"
        },
        {
          "alg" : "SHA3-384",
          "content" : "f4149ca16d3dda8d881a10b3f253ed129af34bff88f106f20e2653201ebad198e6bd0a951eb8a34689f5151187a5d7f9"
        },
        {
          "alg" : "SHA3-256",
          "content" : "061c862e0121a83b8b82b43ee01b25ed6959ea2c593a9c6d7ae91b2a98ab3db5"
        },
        {
          "alg" : "SHA3-512",
          "content" : "9125675229d749444173667b9e52317857c7c508b4831465301946adf9aca962d1cc99bcd9b544c4664e68f017224ea641549c61f6eb4012fcfeb8a088e500c4"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-resolver-dns-native-macos@4.1.100.Final?classifier=osx-x86_64&type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/netty-resolver-dns-native-macos/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty/netty-resolver-dns-native-macos"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-resolver-dns-native-macos@4.1.100.Final?classifier=osx-x86_64&type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-resolver-dns-native-macos",
      "version" : "4.1.100.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a7e379002e674aab4ebf12b023b19abd"
        },
        {
          "alg" : "SHA-1",
          "content" : "1348f4a6a2ffeec5f609e405b1fa1e01417a25e1"
        },
        {
          "alg" : "SHA-256",
          "content" : "feb64c91aba931636e9b831a1f7ca553349136dda90bac19768708edf1a61be9"
        },
        {
          "alg" : "SHA-512",
          "content" : "3338621356ba446012369cee0b580be1392d8818ba927153959e6894f067cb23bec1fbebd165353eb153385ae9a1fbba5346782aa0c5bf295686aa9d9935f75c"
        },
        {
          "alg" : "SHA-384",
          "content" : "d2b5c81204267c2aae4c1db9eacf393314e5b13971d2e1601dee298a5be6a9365992849926a74b784b1eee781402b248"
        },
        {
          "alg" : "SHA3-384",
          "content" : "c6c0180678ccfec65c9dfc0cacb83999c02db0a77e5dd71bc692279a168b11d1bdbaf1ddac0273e43996f6919b4eb210"
        },
        {
          "alg" : "SHA3-256",
          "content" : "510383e68de526a69e36fd6363db5011bf0458f4c0ad8c7e0eabb485e8971434"
        },
        {
          "alg" : "SHA3-512",
          "content" : "3248c2b3dc89031c7e43f9e3d868614f5d063a8e30195fdd5b4b001fecbf62f8c8a106da62b7c36c5365c3dd163575a40745a760b1fbac1ce43eda366615d8b2"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-resolver-dns-native-macos@4.1.100.Final?classifier=osx-aarch_64&type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/netty-resolver-dns-native-macos/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty/netty-resolver-dns-native-macos"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-resolver-dns-native-macos@4.1.100.Final?classifier=osx-aarch_64&type=jar"
    },
    {
      "group" : "xerces",
      "name" : "xercesImpl",
      "version" : "2.12.0",
      "description" : "Xerces2 is the next generation of high performance, fully compliant XML parsers in the Apache Xerces family. This new version of Xerces introduces the Xerces Native Interface (XNI), a complete framework for building parser components and configurations that is extremely modular and easy to program. The Apache Xerces2 parser is the reference implementation of XNI but other parser components, configurations, and parsers can be written using the Xerces Native Interface. For complete design and implementation documents, refer to the XNI Manual. Xerces2 is a fully conforming XML Schema 1.0 processor. A partial experimental implementation of the XML Schema 1.1 Structures and Datatypes Working Drafts (December 2009) and an experimental implementation of the XML Schema Definition Language (XSD): Component Designators (SCD) Candidate Recommendation (January 2010) are provided for evaluation. For more information, refer to the XML Schema page. Xerces2 also provides a complete implementation of the Document Object Model Level 3 Core and Load/Save W3C Recommendations and provides a complete implementation of the XML Inclusions (XInclude) W3C Recommendation. It also provides support for OASIS XML Catalogs v1.1. Xerces2 is able to parse documents written according to the XML 1.1 Recommendation, except that it does not yet provide an option to enable normalization checking as described in section 2.13 of this specification. It also handles namespaces according to the XML Namespaces 1.1 Recommendation, and will correctly serialize XML 1.1 documents if the DOM level 3 load/save APIs are in use.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b89632b53c4939a2982bcb52806f6dec"
        },
        {
          "alg" : "SHA-1",
          "content" : "f02c844149fd306601f20e0b34853a670bef7fa2"
        },
        {
          "alg" : "SHA-256",
          "content" : "b50d3a4ca502faa4d1c838acb8aa9480446953421f7327e338c5dda3da5e76d0"
        },
        {
          "alg" : "SHA-512",
          "content" : "e9d62dc311df808f88ac63b427bb40567c19cec618a33d0a9c7c830b1bb7c64dae263a5ee6c824d8e51a63cd24f49fe2ef4e2563d6e6aa0400f63e9bb35dce97"
        },
        {
          "alg" : "SHA-384",
          "content" : "4638b651e5f29f0e82dfa308924859f707ba7877610688710dd77c5ae5e53e3e4a3168f962bb3d985f4e5b9236776988"
        },
        {
          "alg" : "SHA3-384",
          "content" : "bdcedc76039beedc082ca899f067b091d31dd98544bba2e79f0841dd51833ba27641eb0cb268356b1e291e7ae8a99396"
        },
        {
          "alg" : "SHA3-256",
          "content" : "0288ce50309db0b4e1801962cf13db0f3c9bda069b904710daebaa162fb37828"
        },
        {
          "alg" : "SHA3-512",
          "content" : "092f009fe5dc0238d8df05f35138017570097932183ee7b08aa039bd112877f47e0bcc73550de390a54c3a09539e8ba02404a2e9bb11148e6d45938383252dd8"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/xerces/xercesImpl@2.12.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://xerces.apache.org/xerces2-j/"
        },
        {
          "type" : "vcs",
          "url" : "https://svn.apache.org/repos/asf/xerces/java/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/xerces/xercesImpl@2.12.0?type=jar"
    },
    {
      "group" : "xml-apis",
      "name" : "xml-apis",
      "version" : "1.4.01",
      "description" : "xml-commons provides an Apache-hosted set of DOM, SAX, and JAXP interfaces for use in other xml-based projects. Our hope is that we can standardize on both a common version and packaging scheme for these critical XML standards interfaces to make the lives of both our developers and users easier. The External Components portion of xml-commons contains interfaces that are defined by external standards organizations. For DOM, that's the W3C; for SAX it's David Megginson and sax.sourceforge.net; for JAXP it's Sun.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "7eaad6fea5925cca6c36ee8b3e02ac9d"
        },
        {
          "alg" : "SHA-1",
          "content" : "3789d9fada2d3d458c4ba2de349d48780f381ee3"
        },
        {
          "alg" : "SHA-256",
          "content" : "a840968176645684bb01aed376e067ab39614885f9eee44abe35a5f20ebe7fad"
        },
        {
          "alg" : "SHA-512",
          "content" : "8db0283b6840cd6407957d296b802e3edf90653e2722f8e29f86c1c0b60996c4b43e9e065e6864dab89b2138ddb0174d9b4fdda4a93f94eeb884783db82f3268"
        },
        {
          "alg" : "SHA-384",
          "content" : "bce0ec0f0f692213a1110197c4a11c333673ae0630481255d12b441a8cba70aecfaf104c3d8d9b500ed2a0a19a2bfcce"
        },
        {
          "alg" : "SHA3-384",
          "content" : "c1d8154ef6eee57dfe6ae9a1c1a2525e9ec2aab3631911a53c064ea6480c0b3b1ce8dd079db7b3693d7ef81daba28ace"
        },
        {
          "alg" : "SHA3-256",
          "content" : "09eb76497eac5012ce1000c52f4e597c4941a44b9d960b1ac58a19beb2dd63fc"
        },
        {
          "alg" : "SHA3-512",
          "content" : "1e4eb902e50b3388da4d161ee49f4d47b61dddd2ad10e6ef6cbb67c4ebc9043e0b65ae59a4a0c8eb03dd28814ce4aedd7e0d4962a0aedc3bdcf7de37cde38f66"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        },
        {
          "license" : {
            "id" : "SAX-PD",
            "url" : "http://www.saxproject.org/copying.html"
          }
        },
        {
          "license" : {
            "name" : "The W3C License",
            "url" : "http://www.w3.org/TR/2004/REC-DOM-Level-3-Core-20040407/java-binding.zip"
          }
        }
      ],
      "purl" : "pkg:maven/xml-apis/xml-apis@1.4.01?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://xml.apache.org/commons/components/external/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/bugzilla/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/xml-commons-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://svn.apache.org/viewvc/xml/commons/tags/xml-commons-external-1_4_01/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/xml-apis/xml-apis@1.4.01?type=jar"
    },
    {
      "publisher" : "FuseSource, Corp.",
      "group" : "org.fusesource.leveldbjni",
      "name" : "leveldbjni-all",
      "version" : "1.8",
      "description" : "An uber jar which contains all the leveldbjni platform libraries and dependencies",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6944e9bc03c7938868e53c96726ae914"
        },
        {
          "alg" : "SHA-1",
          "content" : "707350a2eeb1fa2ed77a32ddb3893ed308e941db"
        },
        {
          "alg" : "SHA-256",
          "content" : "c297213b0e6f9392305952753f3099a4c02e70b3656266fe01867e7b6c160ffe"
        },
        {
          "alg" : "SHA-512",
          "content" : "2e9f806af5d89c00e345b4516ffd325893a07f30c87274fa5b8ce314aad021633750b665d8c338fbf5adc79a527e19caf96d0b12af57e56fb8d3d8f7fd845a96"
        },
        {
          "alg" : "SHA-384",
          "content" : "f10d7ce88da5a9fada67fcbf6fc02939346e67428ee5dd7b000f884d8046131391ee1ece83885d3de60532d1227a66f2"
        },
        {
          "alg" : "SHA3-384",
          "content" : "b5919e94b576b4c30017e16f0b1a983aed10ba755bda341cd3f6056b56e0d024c1c63aa9892aab3be166c8a70fc94e47"
        },
        {
          "alg" : "SHA3-256",
          "content" : "5a8e38c0619923426a8a37733a9249986e6b9b389ebe2fe04b9235e045fea406"
        },
        {
          "alg" : "SHA3-512",
          "content" : "136aed54a48e86ec78e99ff19fc40de5dacfe9f0d9975e5e5c19024b68e35cdf88f82587d09d1f4e32db6ddb96fe7cd663bf1e01098e8366547a6a1620f938fc"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.fusesource.leveldbjni/leveldbjni-all@1.8?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://leveldbjni.fusesource.org/leveldbjni-all"
        },
        {
          "type" : "distribution",
          "url" : "http://repo.fusesource.com/nexus/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/fusesource/leveldbjni/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "leveldbjni-dev-subscribe@fusesource.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/fusesource/leveldbjni/leveldbjni-all"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.fusesource.leveldbjni/leveldbjni-all@1.8?type=jar"
    },
    {
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.jackson.core",
      "name" : "jackson-databind",
      "version" : "2.18.2",
      "description" : "General data-binding functionality for Jackson: works on core streaming API",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1b56887bcd3eaea1ff710eb673e610b0"
        },
        {
          "alg" : "SHA-1",
          "content" : "deef8697b92141fb6caf7aa86966cff4eec9b04f"
        },
        {
          "alg" : "SHA-256",
          "content" : "4b364e6850dc89172fcf1d4dd26b8ff5488eda44ff4657e22dd265203dd5ab3c"
        },
        {
          "alg" : "SHA-512",
          "content" : "bbdfaaffaaab2a032a754cd9dade06552e9f79fd39ae396873315415219b37e0675fde0a02953efe0701e17be4c282b118a96fcb752f53ca37ab89624f0a52ac"
        },
        {
          "alg" : "SHA-384",
          "content" : "77607f963531b8b7a963e0691ec0196d0877f13763fcd7485fbbe14a37054a9babd343aecc96c8d29ec2480546cd1e4d"
        },
        {
          "alg" : "SHA3-384",
          "content" : "e02fdf4bba51730989da3efac6e0dfce5649215ec78c7d21713386d36874d621f65ea9881399ef80c87a9436877453a1"
        },
        {
          "alg" : "SHA3-256",
          "content" : "ced61fd9988c4418e98f5bd061a3aa099dd4e0a0074a272e87803262c2177bf8"
        },
        {
          "alg" : "SHA3-512",
          "content" : "6f6610e9bbbfd344ebd716a7709a19bdcf0180f214437473602db312a5e6d6e592bed40776ce9a445ab6b7b5c0fd9291fd11257a6b06e5dbf4b971fe996b2972"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.18.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/FasterXML/jackson"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/FasterXML/jackson-databind/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/FasterXML/jackson-databind"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.18.2?type=jar"
    },
    {
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.jackson.core",
      "name" : "jackson-annotations",
      "version" : "2.18.2",
      "description" : "Core annotations used for value types, used by Jackson data binding package.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "79d38d3c51068a2bbc40268d02f80763"
        },
        {
          "alg" : "SHA-1",
          "content" : "985d77751ebc7fce5db115a986bc9aa82f973f4a"
        },
        {
          "alg" : "SHA-256",
          "content" : "581bd61000ef7648943f781ca05689e56d03f6052748365a8e2b3a9b5d3fa32f"
        },
        {
          "alg" : "SHA-512",
          "content" : "d375e5761052e202e409400637cdc9ce0f45cf01a90628f36ca3c81757ac30695cc6e60146cbf14685c5c50912ad932564eb794ea76ab8461ce1786a02eab867"
        },
        {
          "alg" : "SHA-384",
          "content" : "cc68a2e188dfb8a3687542b7e6b0d2b8323536dd82716a545f73320915e5f9602cc7a3c3d67a15f5adb579c31d5ed96f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "ffcc40615a2d6f0c0382595da8601f7501dfb78f6f78718e9f05f309253379e9d9101d82bc7aaf8735746eafa190d8c9"
        },
        {
          "alg" : "SHA3-256",
          "content" : "9cb3a706d1bc0401a7bdd9c42a6ec048cd7bebce9f60f395e44c254a67ea230b"
        },
        {
          "alg" : "SHA3-512",
          "content" : "f1a5af82d49e1db5898b4caa487a4ae061cf31b5db25e2172fdba59970dab3308618f7e34f6fcf0842b7c9da958c274d69022d10d85f3e862be88a44ef8b7fc6"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.18.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/FasterXML/jackson"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/FasterXML/jackson-annotations/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/FasterXML/jackson-annotations"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.18.2?type=jar"
    },
    {
      "publisher" : "QOS.ch",
      "group" : "org.slf4j",
      "name" : "slf4j-api",
      "version" : "1.7.36",
      "description" : "The slf4j API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "872da51f5de7f3923da4de871d57fd85"
        },
        {
          "alg" : "SHA-1",
          "content" : "6c62681a2f655b49963a5983b8b0950a6120ae14"
        },
        {
          "alg" : "SHA-256",
          "content" : "d3ef575e3e4979678dc01bf1dcce51021493b4d11fb7f1be8ad982877c16a1c0"
        },
        {
          "alg" : "SHA-512",
          "content" : "f9b033fc019a44f98b16048da7e2b59edd4a6a527ba60e358f65ab88e0afae03a9340f1b3e8a543d49fa542290f499c5594259affa1ff3e6e7bf3b428d4c610b"
        },
        {
          "alg" : "SHA-384",
          "content" : "2b14ad035877087157e379d3277dcdcd79e58d6bdb147c47d29e377d75ce53ad42cafbf22f5fb7827c7e946ff4876b9a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "3bc3110dafb8d5be16a39f3b2671a466463cd99eb39610c0e4719a7bf2d928f2ea213c734887c6926a07c4cca7769e4b"
        },
        {
          "alg" : "SHA3-256",
          "content" : "ba2608179fcf46e2291a90b9cbb4aa30d718e481f59c350cc21c73b88d826881"
        },
        {
          "alg" : "SHA3-512",
          "content" : "14c4edcd19702ef607d78826839d8a6d3a39157df54b89a801d3d3cbbe1307131a77671b041c761122730fb1387888c5ec2e46bdd80e1cb07f8f144676441824"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.slf4j.org"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/qos-ch/slf4j/slf4j-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.flink",
      "name" : "flink-shaded-force-shading",
      "version" : "20.0",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "9971c3d248dd2ea79add93f77fb0f24f"
        },
        {
          "alg" : "SHA-1",
          "content" : "4c21de8cf9ca8e93777e5d1c4a7a0a2f61852401"
        },
        {
          "alg" : "SHA-256",
          "content" : "50773dc0f2ab1831754513a8861374c0e47b077dbcc33956fe3a6cd02308d0f8"
        },
        {
          "alg" : "SHA-512",
          "content" : "5b7a0bc48a25e82da9d9f8f9a01afe30bc7411b04924d8af72f4120a937b0a3f3999a51e3a55718783d71b97000d1d18568cfb48cb609d33cd201dfe10a7f0b2"
        },
        {
          "alg" : "SHA-384",
          "content" : "3b04f01b51dda20aef349e623f6c8de4713b15f095f4af220ef77c22f0b815687bb60c9def912c2e4eff3513132d7cc7"
        },
        {
          "alg" : "SHA3-384",
          "content" : "b0378ce70a9f05966229d15f8a5f6682280f63b5494040e1002a210128878799c5761bfa1b1b5d4204a0dabb8687f90e"
        },
        {
          "alg" : "SHA3-256",
          "content" : "0e0b42aa42a5be9a215f4e893efabe6773e5c8d54299daf714e36984410c4549"
        },
        {
          "alg" : "SHA3-512",
          "content" : "e8754f8fec246e8de00e9634f8a2c9821af3ebcc194ef570328dcc6e1395b0263d5ae875a702aa69e5a9602616afc3ef51a4b63e70c6df00646b495df87ebd1d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.flink/flink-shaded-force-shading@20.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://flink.apache.org/flink-shaded-force-shading"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink-shaded/flink-shaded-force-shading"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.flink/flink-shaded-force-shading@20.0?type=jar"
    },
    {
      "group" : "com.google.code.findbugs",
      "name" : "jsr305",
      "version" : "1.3.9",
      "description" : "JSR305 Annotations for Findbugs",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1d5a772e400b04bb67a7ef4a0e0996d8"
        },
        {
          "alg" : "SHA-1",
          "content" : "40719ea6961c0cb6afaeb6a921eaa1f6afd4cfdf"
        },
        {
          "alg" : "SHA-256",
          "content" : "905721a0eea90a81534abb7ee6ef4ea2e5e645fa1def0a5cd88402df1b46c9ed"
        },
        {
          "alg" : "SHA-512",
          "content" : "06da282cfd8e30d9f8cf17702b8709172b00e22b75a627a1d85f8989615b8a1a401bc25d9aee7b14aed1d9b5df73bf2ea8d66f9c8468d9577c29f0ccfa2cc70a"
        },
        {
          "alg" : "SHA-384",
          "content" : "56e6b41ef62eb5edfed0203802cefae9c2df86388148e420bb0c687abb2b80e14d5c2a82d5b35dce4badaf148f94eada"
        },
        {
          "alg" : "SHA3-384",
          "content" : "58c3bf89fa1afa75c2c5078159fd28e27b2273d437f26aaaa7391310b6f0823f3cf476a24f5631c0881f3f7e946d99be"
        },
        {
          "alg" : "SHA3-256",
          "content" : "c333ea5faedfa78e0614a2620438d5724eab093df4e960918391b6a44c2915b0"
        },
        {
          "alg" : "SHA3-512",
          "content" : "67ec31448e156cc72dd036060b460bb2667a13b1cbe500b6b7eed3235b1994b44c39f440ebd07b21ec9595b166ad61121d4f6a132b5b313c558ab21b72599425"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://findbugs.sourceforge.net/"
        },
        {
          "type" : "vcs",
          "url" : "http://findbugs.googlecode.com/svn/trunk/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"
    },
    {
      "publisher" : "Joe Walnes, Henri Tremblay, Leonardo Mesquita",
      "group" : "org.objenesis",
      "name" : "objenesis",
      "version" : "3.4",
      "description" : "A library for instantiating Java objects",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "51242320cb2bb25a3f36e2e21fa87de0"
        },
        {
          "alg" : "SHA-1",
          "content" : "675cbe121a68019235d27f6c34b4f0ac30e07418"
        },
        {
          "alg" : "SHA-256",
          "content" : "95488102feaf2e2858adf6b299353677dac6c15294006f8ed1c5556f8e3cd251"
        },
        {
          "alg" : "SHA-512",
          "content" : "951a01075a5462cc989b8d8fb1b7089848eb825ee4e563bab139f121f5f515fbb5cf2ac607a5528cbd3929e610910113346956a4448fa39bf41fd8147e5eac6f"
        },
        {
          "alg" : "SHA-384",
          "content" : "8865ca08b684b72d9dcb620f01974022d864e8e5e0e4b469287bf4720536ee51735f29c7f05da563c967e1e2f1c52589"
        },
        {
          "alg" : "SHA3-384",
          "content" : "730526cb3490fdb1770264395afdc3782fd3397617582dde8bc2807512672f624e2f5b2206d9f615524b92ccdfba191a"
        },
        {
          "alg" : "SHA3-256",
          "content" : "f22667e2f7f0f86b48015d3995e3edbec9e81929c6860e9af1063c629a114ae2"
        },
        {
          "alg" : "SHA3-512",
          "content" : "465202eb4e341003b66a38a36d676656d17adf66267dc87cfbc6bcd6ee6fd3914423160e01c38d3f505c7f358674dd9e9f08dd7df73196f04e56cae01d4fe91e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.objenesis/objenesis@3.4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://objenesis.org/objenesis"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/easymock/objenesis/objenesis"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.objenesis/objenesis@3.4?type=jar"
    }
  ],
  "dependencies" : [
    {
      "ref" : "pkg:maven/io.confluent.flink/flink-orc@2.1.1-cp1?type=jar",
      "dependsOn" : [
        "pkg:maven/io.confluent.flink/flink-streaming-java@2.1.1-cp1?type=jar",
        "pkg:maven/io.confluent.flink/flink-table-common@2.1.1-cp1?type=jar",
        "pkg:maven/io.confluent.flink/flink-connector-files@2.1.1-cp1?type=jar",
        "pkg:maven/org.apache.orc/orc-core@1.5.6?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar",
        "pkg:maven/org.apache.hadoop/hadoop-common@2.10.2?type=jar",
        "pkg:maven/org.apache.hadoop/hadoop-hdfs@2.10.2?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/org.apache.flink/flink-shaded-force-shading@20.0?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.confluent.flink/flink-streaming-java@2.1.1-cp1?type=jar",
      "dependsOn" : [
        "pkg:maven/io.confluent.flink/flink-core@2.1.1-cp1?type=jar",
        "pkg:maven/io.confluent.flink/flink-file-sink-common@2.1.1-cp1?type=jar",
        "pkg:maven/io.confluent.flink/flink-runtime@2.1.1-cp1?type=jar",
        "pkg:maven/org.apache.flink/flink-shaded-guava@33.4.0-jre-20.0?type=jar",
        "pkg:maven/org.apache.commons/commons-math3@3.6.1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.confluent.flink/flink-core@2.1.1-cp1?type=jar",
      "dependsOn" : [
        "pkg:maven/io.confluent.flink/flink-core-api@2.1.1-cp1?type=jar",
        "pkg:maven/io.confluent.flink/flink-annotations@2.1.1-cp1?type=jar",
        "pkg:maven/org.apache.flink/flink-shaded-asm-9@9.6-20.0?type=jar",
        "pkg:maven/org.apache.flink/flink-shaded-jackson@2.18.2-20.0?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar",
        "pkg:maven/org.snakeyaml/snakeyaml-engine@2.6?type=jar",
        "pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar",
        "pkg:maven/com.esotericsoftware/kryo@5.6.2?type=jar",
        "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar",
        "pkg:maven/org.apache.commons/commons-compress@1.26.0?type=jar",
        "pkg:maven/org.apache.flink/flink-shaded-guava@33.4.0-jre-20.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.confluent.flink/flink-core-api@2.1.1-cp1?type=jar",
      "dependsOn" : [
        "pkg:maven/io.confluent.flink/flink-annotations@2.1.1-cp1?type=jar",
        "pkg:maven/io.confluent.flink/flink-metrics-core@2.1.1-cp1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.confluent.flink/flink-annotations@2.1.1-cp1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.confluent.flink/flink-metrics-core@2.1.1-cp1?type=jar",
      "dependsOn" : [
        "pkg:maven/io.confluent.flink/flink-annotations@2.1.1-cp1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.flink/flink-shaded-asm-9@9.6-20.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.flink/flink-shaded-jackson@2.18.2-20.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.snakeyaml/snakeyaml-engine@2.6?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.esotericsoftware/kryo@5.6.2?type=jar",
      "dependsOn" : [
        "pkg:maven/com.esotericsoftware/reflectasm@1.11.9?type=jar",
        "pkg:maven/org.objenesis/objenesis@3.4?type=jar",
        "pkg:maven/com.esotericsoftware/minlog@1.3.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.esotericsoftware/reflectasm@1.11.9?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.objenesis/objenesis@3.4?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.esotericsoftware/minlog@1.3.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-compress@1.26.0?type=jar",
      "dependsOn" : [
        "pkg:maven/commons-io/commons-io@2.15.1?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/commons-io/commons-io@2.15.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.flink/flink-shaded-guava@33.4.0-jre-20.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.confluent.flink/flink-file-sink-common@2.1.1-cp1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.confluent.flink/flink-runtime@2.1.1-cp1?type=jar",
      "dependsOn" : [
        "pkg:maven/io.confluent.flink/flink-datastream-api@2.1.1-cp1?type=jar",
        "pkg:maven/io.confluent.flink/flink-core@2.1.1-cp1?type=jar",
        "pkg:maven/io.confluent.flink/flink-rpc-core@2.1.1-cp1?type=jar",
        "pkg:maven/io.confluent.flink/flink-rpc-akka-loader@2.1.1-cp1?type=jar",
        "pkg:maven/io.confluent.flink/flink-queryable-state-client-java@2.1.1-cp1?type=jar",
        "pkg:maven/io.confluent.flink/flink-hadoop-fs@2.1.1-cp1?type=jar",
        "pkg:maven/commons-io/commons-io@2.15.1?type=jar",
        "pkg:maven/org.apache.flink/flink-shaded-netty@4.1.100.Final-20.0?type=jar",
        "pkg:maven/org.apache.flink/flink-shaded-guava@33.4.0-jre-20.0?type=jar",
        "pkg:maven/org.apache.flink/flink-shaded-jackson@2.18.2-20.0?type=jar",
        "pkg:maven/org.apache.flink/flink-shaded-zookeeper-3@3.7.2-20.0?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar",
        "pkg:maven/io.confluent.flink/flink-connector-datagen@2.1.1-cp1?type=jar",
        "pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar",
        "pkg:maven/commons-cli/commons-cli@1.5.0?type=jar",
        "pkg:maven/org.javassist/javassist@3.24.0-GA?type=jar",
        "pkg:maven/org.xerial.snappy/snappy-java@1.1.10.7?type=jar",
        "pkg:maven/tools.profiler/async-profiler@2.9?type=jar",
        "pkg:maven/org.lz4/lz4-java@1.8.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.confluent.flink/flink-datastream-api@2.1.1-cp1?type=jar",
      "dependsOn" : [
        "pkg:maven/io.confluent.flink/flink-core-api@2.1.1-cp1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.confluent.flink/flink-rpc-core@2.1.1-cp1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.confluent.flink/flink-rpc-akka-loader@2.1.1-cp1?type=jar",
      "dependsOn" : [
        "pkg:maven/io.confluent.flink/flink-core@2.1.1-cp1?type=jar",
        "pkg:maven/io.confluent.flink/flink-rpc-core@2.1.1-cp1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.confluent.flink/flink-queryable-state-client-java@2.1.1-cp1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.flink/flink-shaded-netty@4.1.100.Final-20.0?type=jar",
        "pkg:maven/org.apache.flink/flink-shaded-guava@33.4.0-jre-20.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.flink/flink-shaded-netty@4.1.100.Final-20.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.confluent.flink/flink-hadoop-fs@2.1.1-cp1?type=jar",
      "dependsOn" : [
        "pkg:maven/io.confluent.flink/flink-core@2.1.1-cp1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.flink/flink-shaded-zookeeper-3@3.7.2-20.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.confluent.flink/flink-connector-datagen@2.1.1-cp1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-cli/commons-cli@1.5.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.javassist/javassist@3.24.0-GA?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.xerial.snappy/snappy-java@1.1.10.7?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/tools.profiler/async-profiler@2.9?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.lz4/lz4-java@1.8.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-math3@3.6.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.confluent.flink/flink-table-common@2.1.1-cp1?type=jar",
      "dependsOn" : [
        "pkg:maven/io.confluent.flink/flink-core@2.1.1-cp1?type=jar",
        "pkg:maven/org.apache.flink/flink-shaded-asm-9@9.6-20.0?type=jar",
        "pkg:maven/com.ibm.icu/icu4j@67.1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.ibm.icu/icu4j@67.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.confluent.flink/flink-connector-files@2.1.1-cp1?type=jar",
      "dependsOn" : [
        "pkg:maven/io.confluent.flink/flink-file-sink-common@2.1.1-cp1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.orc/orc-core@1.5.6?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.orc/orc-shims@1.5.6?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java@2.5.0?type=jar",
        "pkg:maven/commons-lang/commons-lang@2.6?type=jar",
        "pkg:maven/io.airlift/aircompressor@0.10?type=jar",
        "pkg:maven/org.apache.hive/hive-storage-api@2.6.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.orc/orc-shims@1.5.6?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.google.protobuf/protobuf-java@2.5.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-lang/commons-lang@2.6?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.airlift/aircompressor@0.10?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.hive/hive-storage-api@2.6.0?type=jar",
      "dependsOn" : [
        "pkg:maven/commons-lang/commons-lang@2.6?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.hadoop/hadoop-common@2.10.2?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.hadoop/hadoop-annotations@2.10.2?type=jar",
        "pkg:maven/com.google.guava/guava@32.0.0-jre?type=jar",
        "pkg:maven/commons-cli/commons-cli@1.5.0?type=jar",
        "pkg:maven/org.apache.commons/commons-math3@3.6.1?type=jar",
        "pkg:maven/xmlenc/xmlenc@0.52?type=jar",
        "pkg:maven/org.apache.httpcomponents/httpclient@4.5.13?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.15?type=jar",
        "pkg:maven/commons-io/commons-io@2.15.1?type=jar",
        "pkg:maven/commons-net/commons-net@3.1?type=jar",
        "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar",
        "pkg:maven/javax.servlet/servlet-api@2.5?type=jar",
        "pkg:maven/org.mortbay.jetty/jetty@6.1.26?type=jar",
        "pkg:maven/org.mortbay.jetty/jetty-util@6.1.26?type=jar",
        "pkg:maven/org.mortbay.jetty/jetty-sslengine@6.1.26?type=jar",
        "pkg:maven/javax.servlet.jsp/jsp-api@2.1?type=jar",
        "pkg:maven/com.sun.jersey/jersey-core@1.9?type=jar",
        "pkg:maven/com.sun.jersey/jersey-json@1.9?type=jar",
        "pkg:maven/com.sun.jersey/jersey-server@1.9?type=jar",
        "pkg:maven/commons-logging/commons-logging@1.1.3?type=jar",
        "pkg:maven/net.java.dev.jets3t/jets3t@0.9.0?type=jar",
        "pkg:maven/commons-lang/commons-lang@2.6?type=jar",
        "pkg:maven/commons-configuration/commons-configuration@1.7?type=jar",
        "pkg:maven/commons-digester/commons-digester@1.8?type=jar",
        "pkg:maven/commons-beanutils/commons-beanutils@1.9.4?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/org.codehaus.jackson/jackson-core-asl@1.9.13?type=jar",
        "pkg:maven/org.codehaus.jackson/jackson-mapper-asl@1.9.14.jdk17-redhat-00001?type=jar",
        "pkg:maven/org.apache.avro/avro@1.11.4?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java@2.5.0?type=jar",
        "pkg:maven/com.google.code.gson/gson@2.2.4?type=jar",
        "pkg:maven/org.apache.hadoop/hadoop-auth@2.10.2?type=jar",
        "pkg:maven/com.jcraft/jsch@0.1.55?type=jar",
        "pkg:maven/org.apache.curator/curator-client@2.13.0?type=jar",
        "pkg:maven/org.apache.curator/curator-recipes@2.13.0?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar",
        "pkg:maven/org.apache.htrace/htrace-core4@4.1.0-incubating?type=jar",
        "pkg:maven/org.apache.zookeeper/zookeeper@3.7.2?type=jar",
        "pkg:maven/org.apache.commons/commons-compress@1.26.0?type=jar",
        "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1?type=jar",
        "pkg:maven/com.fasterxml.woodstox/woodstox-core@5.3.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.hadoop/hadoop-annotations@2.10.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.guava/guava@32.0.0-jre?type=jar",
      "dependsOn" : [
        "pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar",
        "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar",
        "pkg:maven/org.checkerframework/checker-qual@3.33.0?type=jar",
        "pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0?type=jar",
        "pkg:maven/com.google.j2objc/j2objc-annotations@2.8?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.checkerframework/checker-qual@3.33.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.j2objc/j2objc-annotations@2.8?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/xmlenc/xmlenc@0.52?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.httpcomponents/httpclient@4.5.13?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.httpcomponents/httpcore@4.4.14?type=jar",
        "pkg:maven/commons-logging/commons-logging@1.1.3?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.15?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.httpcomponents/httpcore@4.4.14?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-logging/commons-logging@1.1.3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-codec/commons-codec@1.15?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-net/commons-net@3.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/javax.servlet/servlet-api@2.5?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.mortbay.jetty/jetty@6.1.26?type=jar",
      "dependsOn" : [
        "pkg:maven/org.mortbay.jetty/jetty-util@6.1.26?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.mortbay.jetty/jetty-util@6.1.26?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.mortbay.jetty/jetty-sslengine@6.1.26?type=jar",
      "dependsOn" : [
        "pkg:maven/org.mortbay.jetty/jetty@6.1.26?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/javax.servlet.jsp/jsp-api@2.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.sun.jersey/jersey-core@1.9?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.sun.jersey/jersey-json@1.9?type=jar",
      "dependsOn" : [
        "pkg:maven/org.codehaus.jettison/jettison@1.1?type=jar",
        "pkg:maven/com.sun.xml.bind/jaxb-impl@2.2.3-1?type=jar",
        "pkg:maven/org.codehaus.jackson/jackson-core-asl@1.9.13?type=jar",
        "pkg:maven/org.codehaus.jackson/jackson-mapper-asl@1.9.14.jdk17-redhat-00001?type=jar",
        "pkg:maven/org.codehaus.jackson/jackson-jaxrs@1.8.3?type=jar",
        "pkg:maven/org.codehaus.jackson/jackson-xc@1.8.3?type=jar",
        "pkg:maven/com.sun.jersey/jersey-core@1.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.jettison/jettison@1.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.sun.xml.bind/jaxb-impl@2.2.3-1?type=jar",
      "dependsOn" : [
        "pkg:maven/javax.xml.bind/jaxb-api@2.3.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/javax.xml.bind/jaxb-api@2.3.1?type=jar",
      "dependsOn" : [
        "pkg:maven/javax.activation/javax.activation-api@1.2.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/javax.activation/javax.activation-api@1.2.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.jackson/jackson-core-asl@1.9.13?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.jackson/jackson-mapper-asl@1.9.14.jdk17-redhat-00001?type=jar",
      "dependsOn" : [
        "pkg:maven/org.codehaus.jackson/jackson-core-asl@1.9.13?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.jackson/jackson-jaxrs@1.8.3?type=jar",
      "dependsOn" : [
        "pkg:maven/org.codehaus.jackson/jackson-core-asl@1.9.13?type=jar",
        "pkg:maven/org.codehaus.jackson/jackson-mapper-asl@1.9.14.jdk17-redhat-00001?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.jackson/jackson-xc@1.8.3?type=jar",
      "dependsOn" : [
        "pkg:maven/org.codehaus.jackson/jackson-core-asl@1.9.13?type=jar",
        "pkg:maven/org.codehaus.jackson/jackson-mapper-asl@1.9.14.jdk17-redhat-00001?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.sun.jersey/jersey-server@1.9?type=jar",
      "dependsOn" : [
        "pkg:maven/asm/asm@3.1?type=jar",
        "pkg:maven/com.sun.jersey/jersey-core@1.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/asm/asm@3.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/net.java.dev.jets3t/jets3t@0.9.0?type=jar",
      "dependsOn" : [
        "pkg:maven/commons-codec/commons-codec@1.15?type=jar",
        "pkg:maven/commons-logging/commons-logging@1.1.3?type=jar",
        "pkg:maven/org.apache.httpcomponents/httpclient@4.5.13?type=jar",
        "pkg:maven/org.apache.httpcomponents/httpcore@4.4.14?type=jar",
        "pkg:maven/com.jamesmurty.utils/java-xmlbuilder@0.4?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.jamesmurty.utils/java-xmlbuilder@0.4?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-configuration/commons-configuration@1.7?type=jar",
      "dependsOn" : [
        "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar",
        "pkg:maven/commons-lang/commons-lang@2.6?type=jar",
        "pkg:maven/commons-logging/commons-logging@1.1.3?type=jar",
        "pkg:maven/commons-beanutils/commons-beanutils@1.9.4?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/commons-beanutils/commons-beanutils@1.9.4?type=jar",
      "dependsOn" : [
        "pkg:maven/commons-logging/commons-logging@1.1.3?type=jar",
        "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/commons-digester/commons-digester@1.8?type=jar",
      "dependsOn" : [
        "pkg:maven/commons-logging/commons-logging@1.1.3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.avro/avro@1.11.4?type=jar",
      "dependsOn" : [
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.18.2?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.18.2?type=jar",
        "pkg:maven/org.apache.commons/commons-compress@1.26.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.18.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.18.2?type=jar",
      "dependsOn" : [
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.18.2?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.18.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.18.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.code.gson/gson@2.2.4?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.hadoop/hadoop-auth@2.10.2?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.15?type=jar",
        "pkg:maven/org.apache.httpcomponents/httpclient@4.5.13?type=jar",
        "pkg:maven/com.nimbusds/nimbus-jose-jwt@7.9?type=jar",
        "pkg:maven/org.apache.directory.server/apacheds-kerberos-codec@2.0.0-M15?type=jar",
        "pkg:maven/org.apache.zookeeper/zookeeper@3.7.2?type=jar",
        "pkg:maven/org.apache.curator/curator-framework@2.13.0?type=jar",
        "pkg:maven/com.google.guava/guava@32.0.0-jre?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.nimbusds/nimbus-jose-jwt@7.9?type=jar",
      "dependsOn" : [
        "pkg:maven/com.github.stephenc.jcip/jcip-annotations@1.0-1?type=jar",
        "pkg:maven/net.minidev/json-smart@2.3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.github.stephenc.jcip/jcip-annotations@1.0-1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/net.minidev/json-smart@2.3?type=jar",
      "dependsOn" : [
        "pkg:maven/net.minidev/accessors-smart@1.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/net.minidev/accessors-smart@1.2?type=jar",
      "dependsOn" : [
        "pkg:maven/org.ow2.asm/asm@5.0.4?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.ow2.asm/asm@5.0.4?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.directory.server/apacheds-kerberos-codec@2.0.0-M15?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.directory.server/apacheds-i18n@2.0.0-M15?type=jar",
        "pkg:maven/org.apache.directory.api/api-asn1-api@1.0.0-M20?type=jar",
        "pkg:maven/org.apache.directory.api/api-util@1.0.0-M20?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.directory.server/apacheds-i18n@2.0.0-M15?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.directory.api/api-asn1-api@1.0.0-M20?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.directory.api/api-util@1.0.0-M20?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.zookeeper/zookeeper@3.7.2?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.zookeeper/zookeeper-jute@3.7.2?type=jar",
        "pkg:maven/org.apache.yetus/audience-annotations@0.12.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.zookeeper/zookeeper-jute@3.7.2?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.yetus/audience-annotations@0.12.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.yetus/audience-annotations@0.12.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.curator/curator-framework@2.13.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.curator/curator-client@2.13.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.curator/curator-client@2.13.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.zookeeper/zookeeper@3.7.2?type=jar",
        "pkg:maven/com.google.guava/guava@32.0.0-jre?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.jcraft/jsch@0.1.55?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.curator/curator-recipes@2.13.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.curator/curator-framework@2.13.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.htrace/htrace-core4@4.1.0-incubating?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.woodstox/woodstox-core@5.3.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.hadoop/hadoop-hdfs@2.10.2?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.hadoop/hadoop-hdfs-client@2.10.2?type=jar",
        "pkg:maven/com.google.guava/guava@32.0.0-jre?type=jar",
        "pkg:maven/org.mortbay.jetty/jetty@6.1.26?type=jar",
        "pkg:maven/org.mortbay.jetty/jetty-util@6.1.26?type=jar",
        "pkg:maven/com.sun.jersey/jersey-core@1.9?type=jar",
        "pkg:maven/com.sun.jersey/jersey-server@1.9?type=jar",
        "pkg:maven/commons-cli/commons-cli@1.5.0?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.15?type=jar",
        "pkg:maven/commons-io/commons-io@2.15.1?type=jar",
        "pkg:maven/commons-lang/commons-lang@2.6?type=jar",
        "pkg:maven/commons-logging/commons-logging@1.1.3?type=jar",
        "pkg:maven/commons-daemon/commons-daemon@1.0.13?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java@2.5.0?type=jar",
        "pkg:maven/javax.servlet/servlet-api@2.5?type=jar",
        "pkg:maven/org.codehaus.jackson/jackson-core-asl@1.9.13?type=jar",
        "pkg:maven/org.codehaus.jackson/jackson-mapper-asl@1.9.14.jdk17-redhat-00001?type=jar",
        "pkg:maven/xmlenc/xmlenc@0.52?type=jar",
        "pkg:maven/io.netty/netty@3.10.6.Final?type=jar",
        "pkg:maven/io.netty/netty-all@4.1.100.Final?type=jar",
        "pkg:maven/xerces/xercesImpl@2.12.0?type=jar",
        "pkg:maven/org.apache.htrace/htrace-core4@4.1.0-incubating?type=jar",
        "pkg:maven/org.fusesource.leveldbjni/leveldbjni-all@1.8?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.18.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.hadoop/hadoop-hdfs-client@2.10.2?type=jar",
      "dependsOn" : [
        "pkg:maven/com.squareup.okhttp/okhttp@2.7.5?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.squareup.okhttp/okhttp@2.7.5?type=jar",
      "dependsOn" : [
        "pkg:maven/com.squareup.okio/okio@1.6.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.squareup.okio/okio@1.6.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-daemon/commons-daemon@1.0.13?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty@3.10.6.Final?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-all@4.1.100.Final?type=jar",
      "dependsOn" : [
        "pkg:maven/io.netty/netty-buffer@4.1.100.Final?type=jar",
        "pkg:maven/io.netty/netty-codec@4.1.100.Final?type=jar",
        "pkg:maven/io.netty/netty-codec-dns@4.1.100.Final?type=jar",
        "pkg:maven/io.netty/netty-codec-haproxy@4.1.100.Final?type=jar",
        "pkg:maven/io.netty/netty-codec-http@4.1.100.Final?type=jar",
        "pkg:maven/io.netty/netty-codec-http2@4.1.100.Final?type=jar",
        "pkg:maven/io.netty/netty-codec-memcache@4.1.100.Final?type=jar",
        "pkg:maven/io.netty/netty-codec-mqtt@4.1.100.Final?type=jar",
        "pkg:maven/io.netty/netty-codec-redis@4.1.100.Final?type=jar",
        "pkg:maven/io.netty/netty-codec-smtp@4.1.100.Final?type=jar",
        "pkg:maven/io.netty/netty-codec-socks@4.1.100.Final?type=jar",
        "pkg:maven/io.netty/netty-codec-stomp@4.1.100.Final?type=jar",
        "pkg:maven/io.netty/netty-codec-xml@4.1.100.Final?type=jar",
        "pkg:maven/io.netty/netty-common@4.1.100.Final?type=jar",
        "pkg:maven/io.netty/netty-handler@4.1.100.Final?type=jar",
        "pkg:maven/io.netty/netty-transport-native-unix-common@4.1.100.Final?type=jar",
        "pkg:maven/io.netty/netty-handler-proxy@4.1.100.Final?type=jar",
        "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.100.Final?type=jar",
        "pkg:maven/io.netty/netty-resolver@4.1.100.Final?type=jar",
        "pkg:maven/io.netty/netty-resolver-dns@4.1.100.Final?type=jar",
        "pkg:maven/io.netty/netty-transport@4.1.100.Final?type=jar",
        "pkg:maven/io.netty/netty-transport-rxtx@4.1.100.Final?type=jar",
        "pkg:maven/io.netty/netty-transport-sctp@4.1.100.Final?type=jar",
        "pkg:maven/io.netty/netty-transport-udt@4.1.100.Final?type=jar",
        "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.100.Final?type=jar",
        "pkg:maven/io.netty/netty-transport-classes-kqueue@4.1.100.Final?type=jar",
        "pkg:maven/io.netty/netty-resolver-dns-classes-macos@4.1.100.Final?type=jar",
        "pkg:maven/io.netty/netty-transport-native-epoll@4.1.100.Final?classifier=linux-x86_64&type=jar",
        "pkg:maven/io.netty/netty-transport-native-epoll@4.1.100.Final?classifier=linux-aarch_64&type=jar",
        "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.100.Final?classifier=osx-x86_64&type=jar",
        "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.100.Final?classifier=osx-aarch_64&type=jar",
        "pkg:maven/io.netty/netty-resolver-dns-native-macos@4.1.100.Final?classifier=osx-x86_64&type=jar",
        "pkg:maven/io.netty/netty-resolver-dns-native-macos@4.1.100.Final?classifier=osx-aarch_64&type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-buffer@4.1.100.Final?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-codec@4.1.100.Final?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-codec-dns@4.1.100.Final?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-codec-haproxy@4.1.100.Final?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-codec-http@4.1.100.Final?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-codec-http2@4.1.100.Final?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-codec-memcache@4.1.100.Final?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-codec-mqtt@4.1.100.Final?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-codec-redis@4.1.100.Final?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-codec-smtp@4.1.100.Final?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-codec-socks@4.1.100.Final?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-codec-stomp@4.1.100.Final?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-codec-xml@4.1.100.Final?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-common@4.1.100.Final?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-handler@4.1.100.Final?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-transport-native-unix-common@4.1.100.Final?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-handler-proxy@4.1.100.Final?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.100.Final?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-resolver@4.1.100.Final?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-resolver-dns@4.1.100.Final?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-transport@4.1.100.Final?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-transport-rxtx@4.1.100.Final?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-transport-sctp@4.1.100.Final?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-transport-udt@4.1.100.Final?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.100.Final?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-transport-classes-kqueue@4.1.100.Final?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-resolver-dns-classes-macos@4.1.100.Final?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-transport-native-epoll@4.1.100.Final?classifier=linux-x86_64&type=jar",
      "dependsOn" : [
        "pkg:maven/io.netty/netty-common@4.1.100.Final?type=jar",
        "pkg:maven/io.netty/netty-buffer@4.1.100.Final?type=jar",
        "pkg:maven/io.netty/netty-transport@4.1.100.Final?type=jar",
        "pkg:maven/io.netty/netty-transport-native-unix-common@4.1.100.Final?type=jar",
        "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.100.Final?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-transport-native-epoll@4.1.100.Final?classifier=linux-aarch_64&type=jar",
      "dependsOn" : [
        "pkg:maven/io.netty/netty-common@4.1.100.Final?type=jar",
        "pkg:maven/io.netty/netty-buffer@4.1.100.Final?type=jar",
        "pkg:maven/io.netty/netty-transport@4.1.100.Final?type=jar",
        "pkg:maven/io.netty/netty-transport-native-unix-common@4.1.100.Final?type=jar",
        "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.100.Final?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.100.Final?classifier=osx-x86_64&type=jar",
      "dependsOn" : [
        "pkg:maven/io.netty/netty-common@4.1.100.Final?type=jar",
        "pkg:maven/io.netty/netty-buffer@4.1.100.Final?type=jar",
        "pkg:maven/io.netty/netty-transport@4.1.100.Final?type=jar",
        "pkg:maven/io.netty/netty-transport-native-unix-common@4.1.100.Final?type=jar",
        "pkg:maven/io.netty/netty-transport-classes-kqueue@4.1.100.Final?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.100.Final?classifier=osx-aarch_64&type=jar",
      "dependsOn" : [
        "pkg:maven/io.netty/netty-common@4.1.100.Final?type=jar",
        "pkg:maven/io.netty/netty-buffer@4.1.100.Final?type=jar",
        "pkg:maven/io.netty/netty-transport@4.1.100.Final?type=jar",
        "pkg:maven/io.netty/netty-transport-native-unix-common@4.1.100.Final?type=jar",
        "pkg:maven/io.netty/netty-transport-classes-kqueue@4.1.100.Final?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-resolver-dns-native-macos@4.1.100.Final?classifier=osx-x86_64&type=jar",
      "dependsOn" : [
        "pkg:maven/io.netty/netty-resolver-dns-classes-macos@4.1.100.Final?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-resolver-dns-native-macos@4.1.100.Final?classifier=osx-aarch_64&type=jar",
      "dependsOn" : [
        "pkg:maven/io.netty/netty-resolver-dns-classes-macos@4.1.100.Final?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/xerces/xercesImpl@2.12.0?type=jar",
      "dependsOn" : [
        "pkg:maven/xml-apis/xml-apis@1.4.01?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/xml-apis/xml-apis@1.4.01?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.fusesource.leveldbjni/leveldbjni-all@1.8?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.flink/flink-shaded-force-shading@20.0?type=jar",
      "dependsOn" : [ ]
    }
  ]
}