{
  "bomFormat" : "CycloneDX",
  "specVersion" : "1.6",
  "serialNumber" : "urn:uuid:5f5954b5-2814-385b-9789-8715c9872562",
  "version" : 1,
  "metadata" : {
    "timestamp" : "2026-07-14T11:15:57Z",
    "lifecycles" : [
      {
        "phase" : "build"
      }
    ],
    "tools" : {
      "components" : [
        {
          "type" : "library",
          "author" : "OWASP Foundation",
          "group" : "org.cyclonedx",
          "name" : "cyclonedx-maven-plugin",
          "version" : "2.9.1",
          "description" : "CycloneDX Maven plugin",
          "hashes" : [
            {
              "alg" : "MD5",
              "content" : "9c7a565cf28cce58557d0c621c5ea4b1"
            },
            {
              "alg" : "SHA-1",
              "content" : "be882d5a22050bfa9d19090b1420c188617d0e1c"
            },
            {
              "alg" : "SHA-256",
              "content" : "698e0f37184a5b28c245c4065fd036dfce253b52f82fbb7113d81d36326cc249"
            },
            {
              "alg" : "SHA-512",
              "content" : "c0f0b11026858166f872a2eb54719492e5cecaa0bc9cd6b30b3ecb4a174eed220f4a1b5829d18d6734128e778d3cb3db7ffed177c92866133129cb29081814a0"
            },
            {
              "alg" : "SHA-384",
              "content" : "d80964707dfe5caca8c70521d5066f57589304c0a657e6fbc7c0614ea0fc7b3b3dbe7778361eee0f54ba111e9cb0ffcb"
            },
            {
              "alg" : "SHA3-384",
              "content" : "80bc3a275d9514bc457461ff52a72add8c7ecbbc01d8912efce57139016c544ee776981851be0a58fa977ab4221f703f"
            },
            {
              "alg" : "SHA3-256",
              "content" : "142317d6f245390f4fd2d0c100b16281b8dfc5c0c2cff86943bdcc97039cb699"
            },
            {
              "alg" : "SHA3-512",
              "content" : "af0fb9137c90b65d1a07f72e4d51ae509956cdb8800f35c961b037cdda1fe4a14ce3b496cef71ba85f1621affcfe29cd42704ae4191ff0b090a9602087c8997b"
            }
          ]
        }
      ]
    },
    "component" : {
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.flink/flink-parquet@2.2.0-cp1?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "io.confluent.flink",
      "name" : "flink-parquet",
      "version" : "2.2.0-cp1",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent.flink/flink-parquet@2.2.0-cp1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://flink.apache.org/flink-formats/flink-parquet"
        },
        {
          "type" : "distribution-intake",
          "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/7de016b1a7b050b8de79919cd83a131f8aa00b0c"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink/flink-formats/flink-parquet"
        }
      ]
    },
    "properties" : [
      {
        "name" : "maven.goal",
        "value" : "makeBom"
      },
      {
        "name" : "maven.scopes",
        "value" : "compile,provided,runtime,system"
      }
    ]
  },
  "components" : [
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.flink/flink-core@2.2.0-cp1?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "io.confluent.flink",
      "name" : "flink-core",
      "version" : "2.2.0-cp1",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "237a9ba000b9a7368f1e6aeec839db33"
        },
        {
          "alg" : "SHA-1",
          "content" : "61c72d8668ccd00c328aa9f26ca4e55189c0ab86"
        },
        {
          "alg" : "SHA-256",
          "content" : "994566f89e0dd140ea07de2ed09714aca3678e25a220e0d09ed0077713a9c6e7"
        },
        {
          "alg" : "SHA-512",
          "content" : "6f12189c6e37cbf2120882b1b755cdbb33e6aff0ecbbadbd6eaea2f440d0cd8c59fce7a762edf6033313a39c7d77383342d7917409f00e5ec03b9ab3cacb3fdf"
        },
        {
          "alg" : "SHA-384",
          "content" : "181bf9ca2ccf7d36542c5792d5c454d9717a974a41c255302746c883f3a9356f816e5aa4098a89fd31b2b20fe8eed329"
        },
        {
          "alg" : "SHA3-384",
          "content" : "e43624ba9cfe764524542d1764f09cd3e0637f1c18459ad2a09f37d281c56e2a1badb80814b67907483a19b9758accc0"
        },
        {
          "alg" : "SHA3-256",
          "content" : "aa9796b78172640fe6d37ca1d5f0ae4b968dc6e72a5d95379303e5ade09532cc"
        },
        {
          "alg" : "SHA3-512",
          "content" : "4525f3ac9ce87ad4bf5400c880b186f60621002ffcb315b8ac373e093f79125cc412f804aa16c15918cb8e0da6051c6cc28032ca5acd79323d884d38b467ddea"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent.flink/flink-core@2.2.0-cp1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://flink.apache.org/flink-core"
        },
        {
          "type" : "distribution-intake",
          "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/7de016b1a7b050b8de79919cd83a131f8aa00b0c"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink/flink-core"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.flink/flink-core-api@2.2.0-cp1?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "io.confluent.flink",
      "name" : "flink-core-api",
      "version" : "2.2.0-cp1",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "22277077ddc1ce17332616a438988fe5"
        },
        {
          "alg" : "SHA-1",
          "content" : "51782f1166fa292f53554e795c3e7996d270c1ce"
        },
        {
          "alg" : "SHA-256",
          "content" : "32241f2c83bf474a7dccedb367b57db74166c226d4b93abbb3206b098493c937"
        },
        {
          "alg" : "SHA-512",
          "content" : "1e6dff1fb3149b80ee77d583ecbfea95526fda51257c6db7cfa7aeee5b35787729737ae744229c3b3757eb3221ce10ea0c7eb802776913ff86e1f37232ec7630"
        },
        {
          "alg" : "SHA-384",
          "content" : "6af0cefcea4d82cfbb94e69bba6a801160572886b99c2178ced2c3b608cbc0873a941a6a164e317422aef2384c3b26e9"
        },
        {
          "alg" : "SHA3-384",
          "content" : "ca4086c678abbc4ceb24b109d2fea0be8f05a30eef196058870528a5a8c79697484cba54f115b1fa414e1df8333c1e5d"
        },
        {
          "alg" : "SHA3-256",
          "content" : "b1471505908604c41e5dcaeb1eae3eca93c85886b32ef205e100f3542026eadc"
        },
        {
          "alg" : "SHA3-512",
          "content" : "08431cd48ded5e54f55d9963e89036718400cdbf855b27c9e66142a3e6a4eca1cbe6641976c405b7b55c92a59fdf3819c1ca223e1252acfdd03fb8e1f5f32572"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent.flink/flink-core-api@2.2.0-cp1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://flink.apache.org/flink-core-api"
        },
        {
          "type" : "distribution-intake",
          "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/7de016b1a7b050b8de79919cd83a131f8aa00b0c"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink/flink-core-api"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.flink/flink-metrics-core@2.2.0-cp1?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "io.confluent.flink",
      "name" : "flink-metrics-core",
      "version" : "2.2.0-cp1",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "3d9cd65535290c980cdf4eedb3594c99"
        },
        {
          "alg" : "SHA-1",
          "content" : "818775e80914ba54c9524b3088876d55157ef2cf"
        },
        {
          "alg" : "SHA-256",
          "content" : "37bd4eb4585d942c37493f5b665b1791852885c09783223560b9910d41de9f42"
        },
        {
          "alg" : "SHA-512",
          "content" : "f4212df66494f6df7299d70d7c3a35847b1e8c20c0ad4cde67c8477f5b033114ccefebf94812464b257188be4311e9cb41d8c62adf9141477aef35a43ba6b720"
        },
        {
          "alg" : "SHA-384",
          "content" : "1587bf8c5883fe1ec8e6f4a2284ff49711f6fd98cba1a58a52da14880f55aeacb0042c85a67bd112d4cd01f3d9cf1396"
        },
        {
          "alg" : "SHA3-384",
          "content" : "52c25ad4fa34aa8b0e50505c004000913c971eaf430fb34b5b47b4bc8b8033b2b1c26715da681f26b0d459eb93df6b3a"
        },
        {
          "alg" : "SHA3-256",
          "content" : "753f4a65e8d226b39c561207eee670124e0bcfe3bdcfe92dab3139c91acb16b7"
        },
        {
          "alg" : "SHA3-512",
          "content" : "017aeaf3024de4c54a6dd93d329df2b833c621f8b5a0a785c8a7186841b44f50d1f71190b2fc8ae43a02323d6f89b548dcc1f80eb3311d5405aacfa386f28606"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent.flink/flink-metrics-core@2.2.0-cp1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://flink.apache.org/flink-metrics/flink-metrics-core"
        },
        {
          "type" : "distribution-intake",
          "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/7de016b1a7b050b8de79919cd83a131f8aa00b0c"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink/flink-metrics/flink-metrics-core"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.flink/flink-annotations@2.2.0-cp1?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "io.confluent.flink",
      "name" : "flink-annotations",
      "version" : "2.2.0-cp1",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "5a516cd14e5b1aac27d700ebf4d39381"
        },
        {
          "alg" : "SHA-1",
          "content" : "ab2d8f4dde3fe45e3b13cd48b5240c6b08ec8cf8"
        },
        {
          "alg" : "SHA-256",
          "content" : "b57fc1a3216dff5a663a4ee8adc9c56d12327bfcac325ac1dd2d1a5cb825720a"
        },
        {
          "alg" : "SHA-512",
          "content" : "c16302ba1d7acacd8022a10226dae51b2903cf31c101755aa05873ef8f332e73100cecffb4dd0dc23b8a143f93c14eceb6380b37552745e9b882e428e7a28991"
        },
        {
          "alg" : "SHA-384",
          "content" : "19a166303fdb2bb3d23a6346a96cf27b16269059f93a9c5183378852680651298744ff041e940a40aba0f27c90e19998"
        },
        {
          "alg" : "SHA3-384",
          "content" : "81d86edb176491ca044685ecc3185a333d2320a3f7c2fabd73a1ea1c583eb73620988b0652e9f06586eee32fa15f2aec"
        },
        {
          "alg" : "SHA3-256",
          "content" : "8d4cf1a28c5907efcada47428766d8e53117d7d49cf7cf63154e95487e104531"
        },
        {
          "alg" : "SHA3-512",
          "content" : "3416335f2e289c350dec7016c4ee1e5b94ac699ad1c50d8f3c83e488732fe619587a62d1408b2f4b410f5e2a2e492e355d54c58373dd4306e5924b93c4ab2391"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent.flink/flink-annotations@2.2.0-cp1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://flink.apache.org/flink-annotations"
        },
        {
          "type" : "distribution-intake",
          "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/7de016b1a7b050b8de79919cd83a131f8aa00b0c"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink/flink-annotations"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.flink/flink-shaded-asm-9@9.6-20.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.flink",
      "name" : "flink-shaded-asm-9",
      "version" : "9.6-20.0",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a4a5c6b334d66e9da09de1898229fa87"
        },
        {
          "alg" : "SHA-1",
          "content" : "a525b5d84cd529973633605dee9452512d5d3299"
        },
        {
          "alg" : "SHA-256",
          "content" : "d2cd34487ee0e67e2a4ccd4d30b73f8ffc09e33b43dcad10a8797815c2ebcca0"
        },
        {
          "alg" : "SHA-512",
          "content" : "1d99a84254fcc5631bc90575d2da3dc6b3471c6d3be3c4bf4d95e053f04e230425fd4a4ef4a2c9c9f23633f7c1a8893e63e7b3960cb32ead5820997e02e13ebf"
        },
        {
          "alg" : "SHA-384",
          "content" : "15e383b500f480560b0a7e543be678014868937bab6624125360e63242a6fe8a13dd51e1d5a7ece5ab33a729714cc30f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "bf558740e47de9f6a88876428db7306e272901ec420950ca494451bae2f5c99a38247a7c856df996a60d016f7aa1ad9d"
        },
        {
          "alg" : "SHA3-256",
          "content" : "804c5c1de76a4d49b5fac3383196729db86367405a287e02127c21e5d185ce7a"
        },
        {
          "alg" : "SHA3-512",
          "content" : "a4aae40c0aa2b6b097fb41feba6a3b248cbdf7d03cf25cc47454395fdc39b28b76c774fcb7b55f51a5b8de875496168f7f1d8a1ad961166a8523a3771f2418d2"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.flink/flink-shaded-asm-9@9.6-20.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://flink.apache.org/flink-shaded-asm-9"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink-shaded/flink-shaded-asm-9"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.flink/flink-shaded-jackson@2.18.2-20.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.flink",
      "name" : "flink-shaded-jackson",
      "version" : "2.18.2-20.0",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "5dd27e2ce3b833428a8073fb65841543"
        },
        {
          "alg" : "SHA-1",
          "content" : "6fbdfd65d8b31a97bee087cff2bde14936a6ef8a"
        },
        {
          "alg" : "SHA-256",
          "content" : "0097d25dd95604e660b6df3b96255661c53e98e3d14e6a88c09b1e63e5603297"
        },
        {
          "alg" : "SHA-512",
          "content" : "4ab372182e050e5b2ea9c7b3053fb46c788d5bcc378bc7174de4e34783af6dda2c8b15ea195ac6a1ca0ffc032a36e7b69c24bf4ab94ab1ba09d4e6ef6a6cd8d4"
        },
        {
          "alg" : "SHA-384",
          "content" : "59f2d0daedfcb5e128cfd46da9b256e226cd9a90eddc8787410d6a71333b6b974a1f4f468af0a210a580cc3147fe4370"
        },
        {
          "alg" : "SHA3-384",
          "content" : "aff04078014631fd7eba89d20beee5ff4df3f1c4d77f69aa22c6619ab2bc2fdfe051fa9900805fde1e8d33cb76d20982"
        },
        {
          "alg" : "SHA3-256",
          "content" : "c87e27d3d15f5116edc24405b8e4a07b77ee4f029c1d6303f242700b9014c1e0"
        },
        {
          "alg" : "SHA3-512",
          "content" : "8c6a1d32a32e29f7e8265fa673877477e3182c010fe955da3b79fd7cdac6f007f67bd9bfb7985560daefeb475021a8825909ca83ce175463be995cdbeab0fb48"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.flink/flink-shaded-jackson@2.18.2-20.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://flink.apache.org/flink-shaded-jackson-parent/flink-shaded-jackson"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink-shaded/flink-shaded-jackson-parent/flink-shaded-jackson"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-lang3",
      "version" : "3.18.0",
      "description" : "Apache Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang. The code is tested using the latest revision of the JDK for supported LTS releases: 8, 11, 17 and 21 currently. See https://github.com/apache/commons-lang/blob/master/.github/workflows/maven.yml Please ensure your build environment is up-to-date and kindly report any build issues.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "48b9886957920a4cdb602780ca345087"
        },
        {
          "alg" : "SHA-1",
          "content" : "fb14946f0e39748a6571de0635acbe44e7885491"
        },
        {
          "alg" : "SHA-256",
          "content" : "4eeeae8d20c078abb64b015ec158add383ac581571cddc45c68f0c9ae0230720"
        },
        {
          "alg" : "SHA-512",
          "content" : "c2c9d497fc1be411050f4011b2407764b78aa098eb42925af8a197eabdbc25b507f09fb898805e9bed4815f35236a508ee5b096e36f363df4d407232d50fc832"
        },
        {
          "alg" : "SHA-384",
          "content" : "4fb3f101106e4ce3666d5c15d276ba86f7683a0ef35f0384edfcd579ea454275edbb7400795d265ec3a38e39997e79b8"
        },
        {
          "alg" : "SHA3-384",
          "content" : "aada7e3612cf3f6190a19fa7c3db74df1e13ec56b300be9bb4317d261d5877c84ab59ba9a09168becdbd82cd41961395"
        },
        {
          "alg" : "SHA3-256",
          "content" : "306d286d0bd7549c203cc802fd755d354c4f7926fa023f4e83623ba1a6261250"
        },
        {
          "alg" : "SHA3-512",
          "content" : "f6f1ecc684e309d7b9fc5c343792508fee935cd2119d962721662c5af88e4864ba6f47a863e083714f315f926c156de1970cd2fb577449bdfdc7bf98a4a451fa"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-lang/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-lang/actions"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/LANG"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf/commons-lang.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.snakeyaml/snakeyaml-engine@2.6?type=jar",
      "group" : "org.snakeyaml",
      "name" : "snakeyaml-engine",
      "version" : "2.6",
      "description" : "Core YAML 1.2 parser and emitter for Java",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "719bcfb9f917992d0a99a6f7106d8466"
        },
        {
          "alg" : "SHA-1",
          "content" : "235a7e571b33eda1a81e0f73a3173ef95dd020e5"
        },
        {
          "alg" : "SHA-256",
          "content" : "2652199af40c9aa2f1782400d2dfbbf4e5226208c4e05ddd4059c3d6d9cd1505"
        },
        {
          "alg" : "SHA-512",
          "content" : "c3b5e87ce323b37bcd9e65d060157ebb26d116b5dac30c6eaa185b30aa24c0be8dfd0ad604a9a12ce7010acadee54a9cea9f065cd2f434eeaed7bccce2e14a7d"
        },
        {
          "alg" : "SHA-384",
          "content" : "edfc3c9a95cc2fa524a322f20ec034ec16b3fad950a58bfd1ed774eaaab946304cddc5e9ea4e117a899ec568ba7fa620"
        },
        {
          "alg" : "SHA3-384",
          "content" : "63b9e0ed448431a1d4b34a4b0b97b65c2c7be6ef46f1ce3b10191373e3339422f9c06bc846ae861a982c3c3618abd9c6"
        },
        {
          "alg" : "SHA3-256",
          "content" : "19ce75167267903be79122e149ede2916c3e07bab0658db21ab40864e8c920cd"
        },
        {
          "alg" : "SHA3-512",
          "content" : "7777f37097a6951dafe18fb038d087e7fe0924bfb2a10c66a76a57d95aa65341d4b674c6ff1d9d453c436ffcb50e281c2bedc854ce687fefc30c9595b7352c8a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.snakeyaml/snakeyaml-engine@2.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://bitbucket.org/snakeyaml/snakeyaml-engine"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://bitbucket.org/snakeyaml/snakeyaml-engine/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://bitbucket.org/snakeyaml/snakeyaml-engine/src"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-text",
      "version" : "1.10.0",
      "description" : "Apache Commons Text is a library focused on algorithms working on strings.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4afc9bfa2d31dbf7330c98fcc954b892"
        },
        {
          "alg" : "SHA-1",
          "content" : "3363381aef8cef2dbc1023b3e3a9433b08b64e01"
        },
        {
          "alg" : "SHA-256",
          "content" : "770cd903fa7b604d1f7ef7ba17f84108667294b2b478be8ed1af3bffb4ae0018"
        },
        {
          "alg" : "SHA-512",
          "content" : "afd836a1094449e0a791fee67363666c47b6d24acff353a5089b837b332c0f4af89565c354682521e37062d20e6b52d70c77bb4f24cca9b9532c274fc708a831"
        },
        {
          "alg" : "SHA-384",
          "content" : "06c56e6e513dd77cf10d0da46cdea08c34e220e81fa024735b668c6650df4234e564fe865ff5cafea963f56b1e8ffd4a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "f09065ed066c25debf8c78cbb0bcc738e1ea283302ec992dcfb649acb90091cff879465c65a162e94534d454e3b4e9bb"
        },
        {
          "alg" : "SHA3-256",
          "content" : "0b59c567164bb755f2353b78ba66744000a8c4b35e1df05255b080a21c3a3dd5"
        },
        {
          "alg" : "SHA3-512",
          "content" : "f0fbce02a862b70f472a27d0722c54ac111ca2eb94584b8b0b73d1926aec26047cd92542ad0b3cf980a6825077587f41b194aa93d6f6350d1b87e59e8df1be7c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-text"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-parent/actions"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/TEXT"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-text.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.esotericsoftware/kryo@5.6.2?type=jar",
      "group" : "com.esotericsoftware",
      "name" : "kryo",
      "version" : "5.6.2",
      "description" : "Fast, efficient Java serialization. This is the main Kryo artifact.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "972ea0c598accd90d33ed5c31bd004b3"
        },
        {
          "alg" : "SHA-1",
          "content" : "c20a8ba517e93cb78001fd64da796f1ac5cd8214"
        },
        {
          "alg" : "SHA-256",
          "content" : "4e8b1d2f4977187af8a51a957329722dc1cdc56a7c94fbb5a791e82897629cff"
        },
        {
          "alg" : "SHA-512",
          "content" : "0095bf5998f1b45c1e2dd25f22af11b619277d544cd9f4a3a355de7f118b5a9312d261c2f70e9b0691f3bec4212dea60dae191c3f1cab939ce7802472ef9f906"
        },
        {
          "alg" : "SHA-384",
          "content" : "b3dc68596ff6341a7cc285fa5db7237c90d46baa2425c20cc1a23686140152c6d0a245881032762e813d70cfdc007364"
        },
        {
          "alg" : "SHA3-384",
          "content" : "80dde34c5740a4a0fa3c2886b289eb3f9e34d2c54ad2e4aa3b025c308f2c35a75e3e3ff8a5e0700f9a7732aa89c12f6a"
        },
        {
          "alg" : "SHA3-256",
          "content" : "b1e7e4ef6c1aa0f4d4aad9cd3434ad003b4b1b0612417538f8da01c87ce81cb8"
        },
        {
          "alg" : "SHA3-512",
          "content" : "cebfb63a44efaadae598d615cd21b8bf67216b3c7b6b5e97a7027026366c8750ce8bd69d39062a5dcc609461896d44def05e8a8e227044951b0d04927b54a966"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/com.esotericsoftware/kryo@5.6.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/EsotericSoftware/kryo/kryo"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/EsotericSoftware/kryo/kryo"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.esotericsoftware/reflectasm@1.11.9?type=jar",
      "group" : "com.esotericsoftware",
      "name" : "reflectasm",
      "version" : "1.11.9",
      "description" : "High performance Java reflection using code generation",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "602377b51e9843ef87ed48b790945c3e"
        },
        {
          "alg" : "SHA-1",
          "content" : "fd51ad1705d5e27d8785550172a4ab0cb9b8ad23"
        },
        {
          "alg" : "SHA-256",
          "content" : "712b44da79a5b7f47a28cbfcb3d8ecfc872fae349c48aa4d3e38a5d69956afce"
        },
        {
          "alg" : "SHA-512",
          "content" : "c9386a11540853c965b5821771a0e99e97a5701c27e47c39b23c32fd9dd05af8231bf680541195625839eafb3471b835613a7cc734c616e571ef2f62aef84fc0"
        },
        {
          "alg" : "SHA-384",
          "content" : "f0461aaaa75079737a10ae9f3fcf24e74828715bd4f334140c0a9d68395a84c37c6df81d4d7392ac9e51f8ac253367ec"
        },
        {
          "alg" : "SHA3-384",
          "content" : "9115f84613808dbf555e36ea18f9ca84ddabb76e5f030b6c02132ecc3cc0a529fe501d0548cf768b041a2af5833073fd"
        },
        {
          "alg" : "SHA3-256",
          "content" : "e3a5cea0f269206b22975f9b4d459da5a3d2d903b075ffbedecd307ccaa2cfb5"
        },
        {
          "alg" : "SHA3-512",
          "content" : "8d7e00302607e264e0199db0508771106a291023139307012ee0a7d5a380195494832b6e0087c8892ef70bba290b5a1398194f7ef8e378c8cec8fc385097c870"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/com.esotericsoftware/reflectasm@1.11.9?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/EsotericSoftware/reflectasm"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/EsotericSoftware/reflectasm"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.esotericsoftware/minlog@1.3.1?type=jar",
      "group" : "com.esotericsoftware",
      "name" : "minlog",
      "version" : "1.3.1",
      "description" : "Minimal overhead Java logging",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "46908e11b408080d53246e4be44e66db"
        },
        {
          "alg" : "SHA-1",
          "content" : "a406e29d3a44d5f020d7b3218aee6d0952db4f73"
        },
        {
          "alg" : "SHA-256",
          "content" : "5d4d632cfbebfe0a7644501cc303570b691406181bee65e9916b921c767d7c72"
        },
        {
          "alg" : "SHA-512",
          "content" : "9a817f66222f9c612ef863b63ad7c1ccd38f2591d80ab9116e675ec52dfc5bba6989b3499c0c95afa42df762584cf0524dbc5a960b3c5dfb126068e446df0eeb"
        },
        {
          "alg" : "SHA-384",
          "content" : "d0bc3e4b93edc1519e89d7ac4dcb78fd5240c1b3e61cd5f2ba19ad0133bc0e79298da54a7f5011e64be6f12a26a487dd"
        },
        {
          "alg" : "SHA3-384",
          "content" : "995751217162b866f1e69c10607e777a4f5b571fa6c9098bc63933df5754e13e2328b149820c88a30a103fc9d938432b"
        },
        {
          "alg" : "SHA3-256",
          "content" : "a799557343159261e72d72f5762262981c16d0e5aa08b16cbf4b989a912bfe81"
        },
        {
          "alg" : "SHA3-512",
          "content" : "b333a0eab8cbdce12ab2d9163ccb8b8d3c8138b35bcf4ff1c69f79844272a9666771ae5017519d3301b8d98aaff6a6bc8655e4b636d2949d285a0d386f64d1d7"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/com.esotericsoftware/minlog@1.3.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/EsotericSoftware/minlog"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/EsotericSoftware/minlog"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-collections",
      "name" : "commons-collections",
      "version" : "3.2.2",
      "description" : "Types that extend and augment the Java Collections Framework.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f54a8510f834a1a57166970bfc982e94"
        },
        {
          "alg" : "SHA-1",
          "content" : "8ad72fe39fa8c91eaaf12aadb21e0c3661fe26d5"
        },
        {
          "alg" : "SHA-256",
          "content" : "eeeae917917144a68a741d4c0dff66aa5c5c5fd85593ff217bced3fc8ca783b8"
        },
        {
          "alg" : "SHA-512",
          "content" : "51c72f9aca7726f3c387095e66be85a6df97c74b00a25434b89188c1b8eab6e2b55accf7b9bd412430d22bd09324dec076e300b3d1fa39fccad471f0f2a3da16"
        },
        {
          "alg" : "SHA-384",
          "content" : "dd4e99b3314bd3c1a1ee26296615d9e44dadf7a1f8a7bbba44fb95121803d331e36d4cca4260e7609af78a47ba3e4073"
        },
        {
          "alg" : "SHA3-384",
          "content" : "8ce03528e4a6e95c44283b56eca87e6a6d3bf1363411a55b538f4f9110cf7470581ea5c73925e877ddab08dba0603f40"
        },
        {
          "alg" : "SHA3-256",
          "content" : "fd3d6134b5f07077b82ccf93d148dacf7c4ce5c971209510edd0e77e3e38c19e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c2a523916fb7c7d55a05d5e3d9e9b33000733f4b20a71be174e4e093e3f06ea78ad831edd1505527da7388105f8647efb7d5666ba852c90b4e2d5bb74256efbc"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://commons.apache.org/collections/"
        },
        {
          "type" : "build-system",
          "url" : "https://continuum-ci.apache.org/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/COLLECTIONS"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/commons/proper/collections/trunk"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-compress@1.26.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-compress",
      "version" : "1.26.0",
      "description" : "Apache Commons Compress defines an API for working with compression and archive formats. These include bzip2, gzip, pack200, LZMA, XZ, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4, Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "cbc0bb8eca12b747ca21bf998d736e60"
        },
        {
          "alg" : "SHA-1",
          "content" : "659feffdd12280201c8aacb8f7be94f9a883c824"
        },
        {
          "alg" : "SHA-256",
          "content" : "051aceb8bbcc62d0f5b2b8ac72c53767f9c59bfbd050151e65bef6f51c8ed9c9"
        },
        {
          "alg" : "SHA-512",
          "content" : "acbeaa2909b809cd561e7156df18340d96abacb179325622d73bdd6b82cb9b387d6fcb1a44d8195aad4e786da299289e17598a1d337b7c7d1c0bc610cc128714"
        },
        {
          "alg" : "SHA-384",
          "content" : "052d4d0cd1929c4299dd9d37dd36eaea6ed2be6b04d6d83a94f8608a6d1138aa81f7a34f25113ac267e7ba25ce948c9a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "8b0bf441e8ce793fb6513bc07551cc48ab4507696c18e6037b0fcf35bc4e1eb3e44ed962e2d3765c86d4d912770aa53e"
        },
        {
          "alg" : "SHA3-256",
          "content" : "e441768e06092053f4703844ec0c8f2b437e06e7c190d48fec9d7682beb94c40"
        },
        {
          "alg" : "SHA3-512",
          "content" : "5984f9f08f83789555677f6800f25fa8e80a9eb2e4d46b5fb117b8efc24753644fa103a2f6b619827661a41677991bc827965172ef25f1313d8a59154e615e8d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-compress@1.26.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-compress/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-parent/actions"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/COMPRESS"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-compress.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.flink/flink-shaded-guava@33.4.0-jre-20.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.flink",
      "name" : "flink-shaded-guava",
      "version" : "33.4.0-jre-20.0",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b96c87d90072d083a2909c4c03cfab36"
        },
        {
          "alg" : "SHA-1",
          "content" : "470ecb733c2f6dbd89585a255f348957cf46421b"
        },
        {
          "alg" : "SHA-256",
          "content" : "eb7161b07cd21a0a0cf40f26914fe0601c06f4bbb65e9560d78b2463d97b0c34"
        },
        {
          "alg" : "SHA-512",
          "content" : "78359308db382fa96af50dd5d50322eaeeef96e88807c77d0d62d5df892bfc026e050ecc4cc8b9c30c270551f797d6d6f31e25ec5076767282bf949980378530"
        },
        {
          "alg" : "SHA-384",
          "content" : "982cd6bc823bb9be9e03513bee13027ee5615787bbdbce4a26642917fe64f73081d5aabe3ffbc6941a9f367701bab993"
        },
        {
          "alg" : "SHA3-384",
          "content" : "e2b81e5d09916f4024423b81ed570ce83146269b6936b2a6fea8bc5f014c81deec70cecd8a978845cf2a4781aebbcc0e"
        },
        {
          "alg" : "SHA3-256",
          "content" : "a9c31cf8335b25ad7a76c1a1bb340f4809624fdce3a00ab77857658218ad7707"
        },
        {
          "alg" : "SHA3-512",
          "content" : "9d1b646067ae8172b72be8be0bdcadd1487a1b51fae089dc5cdd2c2759dc9ec314c5fae34a2a918b1edba30b1b196f22f2d39d3e6b40fe12b2824e541b2f9545"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.flink/flink-shaded-guava@33.4.0-jre-20.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://flink.apache.org/flink-shaded-guava"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink-shaded/flink-shaded-guava"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.flink/flink-table-common@2.2.0-cp1?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "io.confluent.flink",
      "name" : "flink-table-common",
      "version" : "2.2.0-cp1",
      "description" : "This module contains extension points of the Table/SQL API. It allows for implementing user-defined functions, custom formats, etc. with minimal dependencies.",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "fced539e045469097208901c2a63cff1"
        },
        {
          "alg" : "SHA-1",
          "content" : "4fbe062b81d5b530b679a600c03e137b5f09d41a"
        },
        {
          "alg" : "SHA-256",
          "content" : "c551f598b6f5dde6743983d22caf68c828e534c90dd0a9aaa55e54c9bda3000d"
        },
        {
          "alg" : "SHA-512",
          "content" : "d0c83b975193c9eea9902352417d646f22b2281280fbb3b832e502f59b6e450b3c0bf7084965ce6ef1571b9d9e69e2a03f03ad089f3d44669a21e510a4dff133"
        },
        {
          "alg" : "SHA-384",
          "content" : "4d4e6530789f03b236b72b3d02829407c61dd95c9c5fb89a0ca689d1e1f1a9fa6c018e432163555c284eac5d6a525023"
        },
        {
          "alg" : "SHA3-384",
          "content" : "72ac312c90b5d8cc2fa4e25f8b7fab414706c5d06117c3668ef8f168012f9fa174888d27c9039128e48cff4f63a15549"
        },
        {
          "alg" : "SHA3-256",
          "content" : "4a07659922fc94fa5faee457dbb2407302fe1084401d5c2412094ee69bb8f9d2"
        },
        {
          "alg" : "SHA3-512",
          "content" : "2d7b3c280d4e00e43cd0e5d2625b19b05172be1acab31acca480f965049f52886c638345c0d60fe335bbce4f84c6466d706daa098786989d59f19c006e637808"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent.flink/flink-table-common@2.2.0-cp1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://flink.apache.org/flink-table/flink-table-common"
        },
        {
          "type" : "distribution-intake",
          "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/7de016b1a7b050b8de79919cd83a131f8aa00b0c"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink/flink-table/flink-table-common"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.ibm.icu/icu4j@67.1?type=jar",
      "group" : "com.ibm.icu",
      "name" : "icu4j",
      "version" : "67.1",
      "description" : "International Component for Unicode for Java (ICU4J) is a mature, widely used Java library providing Unicode and Globalization support",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "046a5f59abf6b67a464dea584d11e59d"
        },
        {
          "alg" : "SHA-1",
          "content" : "2e159807158095566726600534034030dddab6d0"
        },
        {
          "alg" : "SHA-256",
          "content" : "c4eb904caf5fba968a2f1a3b8aef14df801e9329b21697209ca30bfcf153867d"
        },
        {
          "alg" : "SHA-512",
          "content" : "b3036b162356a0a5dad39eee611dae27c6fbe53f9e5ec1f3529ab02d49d97093b58602f43dd855433a0bbe02f6253e46a9d1899911c8e2e73001ab2c9a79d68d"
        },
        {
          "alg" : "SHA-384",
          "content" : "c2b28649d0ef9bf68f258a9f432c627a553ead79670f0a7ada3d986091a0001c5ab9eca372f792734bff733370a61fb1"
        },
        {
          "alg" : "SHA3-384",
          "content" : "3726bfa8b77bd0cdd66564944044d82dca3ee1fcf2594ebf1a7acc6752faf4c11892a1744af27e5528dc4b991e4cd0c0"
        },
        {
          "alg" : "SHA3-256",
          "content" : "cb19cec2baad1dc610267b2c98325f5c742230caf2247ef6297dfe8d9be9f11d"
        },
        {
          "alg" : "SHA3-512",
          "content" : "f46e4ead1cc1c05c3825716485ce79c890500a5356f8e7ca578f3080c09fb2460fb1aed81d65d345c402706906ea4e96afc0ff03c50fb0ac5bbacd351a8f11ec"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "Unicode/ICU License",
            "url" : "https://raw.githubusercontent.com/unicode-org/icu/master/icu4c/LICENSE"
          }
        }
      ],
      "purl" : "pkg:maven/com.ibm.icu/icu4j@67.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://icu-project.org/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://unicode-org.atlassian.net/projects/ICU"
        },
        {
          "type" : "mailing-list",
          "url" : "http://sourceforge.net/mailarchive/forum.php?forum_name=icu-support"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/unicode-org/icu"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.flink/flink-avro@2.2.0-cp1?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "io.confluent.flink",
      "name" : "flink-avro",
      "version" : "2.2.0-cp1",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f2417f93713226d09d173052bb176079"
        },
        {
          "alg" : "SHA-1",
          "content" : "aaf0df2f8a6b604455cbd7c9f895352d8f9b8a87"
        },
        {
          "alg" : "SHA-256",
          "content" : "6a3e473ca8a8caa0feecb8eb9abff923b50ea551ecec14c0901da5b993ea9aba"
        },
        {
          "alg" : "SHA-512",
          "content" : "772c644f93cb8927fcc9a96778fddf3bbfbc1ab92fe68e24cef5ef76e469aa0aea71318be49251adf27eae688df955c008e9c3b45b2058eed9eb8a1d9f3c2f87"
        },
        {
          "alg" : "SHA-384",
          "content" : "afa72554b5c61464129bf0fb5ee3f5abfaeb3c6dc6d76f57d5f16c8f1fe67cfb82c5c991630ee98b5dfc67d8b43db954"
        },
        {
          "alg" : "SHA3-384",
          "content" : "380a7acb576a1d6ac1d68e5ffd07303cdc7779117d6e798bc5937a25e0ee3a37b42c7190b07fb82200d13bc5cb24ff70"
        },
        {
          "alg" : "SHA3-256",
          "content" : "ea9b2095aeeb020b612c75c2396fc294b3cb64679afb4000f91da347f73b8fc6"
        },
        {
          "alg" : "SHA3-512",
          "content" : "cbcd5fb56177e9a3c9ede204c739e40e05623871b29bfe159e46a11b428e755ef711065d7ee72fab9e1b2f72276cc00d5556c0ad8d14c7b107fe5b6a5cec8a71"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent.flink/flink-avro@2.2.0-cp1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://flink.apache.org/flink-formats/flink-avro"
        },
        {
          "type" : "distribution-intake",
          "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/7de016b1a7b050b8de79919cd83a131f8aa00b0c"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink/flink-formats/flink-avro"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.avro/avro@1.11.5?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.avro",
      "name" : "avro",
      "version" : "1.11.5",
      "description" : "Avro core components",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b4e9758699f388a661d564c5d26a83a1"
        },
        {
          "alg" : "SHA-1",
          "content" : "39b03945fc96f8e6146849aa49b516cf3657b151"
        },
        {
          "alg" : "SHA-256",
          "content" : "b3c55da4c58304f823f4a2161a308888b9e7b8bc1c7387a4fa3ca1cd48617f93"
        },
        {
          "alg" : "SHA-512",
          "content" : "c3f8b87cd0caf4064b039d2a66273a5f5c22f38d71ef9ffebbe25953bc0fcb2f48d5e4fbac0777630ad410d3506255d6d74a3a1ef961a02f7d4d7a17c9c4c17e"
        },
        {
          "alg" : "SHA-384",
          "content" : "37357433b72e3fa4d9db3616018922d0299c8e0edd2df244b2d591909c40f0308999de02513e71ec113a4f81576cf3c3"
        },
        {
          "alg" : "SHA3-384",
          "content" : "c13b67dc40b66c667901dc4216c1833d740f7685f1783217447b799738c38366f08947323b8bc72399b0d9e553da5754"
        },
        {
          "alg" : "SHA3-256",
          "content" : "65a72c91db569bff8a68f52a22b619938768537eaf587cdd22b8013ad241e9e8"
        },
        {
          "alg" : "SHA3-512",
          "content" : "30f5d464efb68d9653db56dabe5e6625c89e87392c0b666558572c04bb3f54721e68e16fc06999fcecf88ec823088d71221b2cb4eebd0c97bed635b5f337c8fd"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.avro/avro@1.11.5?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://avro.apache.org"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/AVRO"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/avro-dev/"
        },
        {
          "type" : "vcs",
          "url" : "scm:git:https://github.com/apache/avro/avro-parent/avro"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.18.6?type=jar",
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.jackson.core",
      "name" : "jackson-core",
      "version" : "2.18.6",
      "description" : "Core Jackson processing abstractions (aka Streaming API), implementation for JSON",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "95746cd6a85d0296d6986b14787a6bee"
        },
        {
          "alg" : "SHA-1",
          "content" : "f7171732c04c97ff373bed60d2eba22ec4bab8e0"
        },
        {
          "alg" : "SHA-256",
          "content" : "e7e1bfa50f0a79db37e6aa37db111cf03aebf4a484b359d21127ab43ab2398c6"
        },
        {
          "alg" : "SHA-512",
          "content" : "56ad5272272418a3864335b7cc9323bee496993bb317a35ad7c7f6bc001376feaecfa357ed2b737e36ae9ea738433906c2db05b4cda471463329e6909712f377"
        },
        {
          "alg" : "SHA-384",
          "content" : "f7d8f2175068c0b3f79d300672059502f14be699fb6ca3979b256ff53a0a9c8fa797a288990278db49d8b566e9635b6c"
        },
        {
          "alg" : "SHA3-384",
          "content" : "7c899c0bad1755db144cee72ec96961e186b47ba2229a2aac893091ddb338c6e4b7dbbec61f5998a1a9becf06b973bff"
        },
        {
          "alg" : "SHA3-256",
          "content" : "33f6bd5f2b9f80f758851629eab6425c2a3dee7bee62bc5113a7073242b49d2a"
        },
        {
          "alg" : "SHA3-512",
          "content" : "a301262a6c54d5e905715a27588836df86ce2945d447dcd4bcd17e36315d62a50d1a33ae1e379c35f837ee5decb9ac29419b8abec65cebe54d8d14fbcf714e86"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.18.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/FasterXML/jackson-core"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://central.sonatype.com/api/v1/publisher"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/FasterXML/jackson-core/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/FasterXML/jackson-core"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.flink/flink-connector-files@2.2.0-cp1?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "io.confluent.flink",
      "name" : "flink-connector-files",
      "version" : "2.2.0-cp1",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "755be0340f1b3b749694abb473a221d0"
        },
        {
          "alg" : "SHA-1",
          "content" : "b1bbb521a992c0df1e342e61c44c6ffd0cf340e6"
        },
        {
          "alg" : "SHA-256",
          "content" : "33dd3928d610b012f37bfe65c89671831af3f3203c86465c8025d0fbc062bc77"
        },
        {
          "alg" : "SHA-512",
          "content" : "0ff2e3df2734b0ad3cbf6a2f3372181b2176f03c9b5684a81675bff8b6a7af412fb9693a8b906b006a6d63ae687bc385a2d4ed52661284572de2a90b19818a45"
        },
        {
          "alg" : "SHA-384",
          "content" : "01616d3713c7eb887d139e09a4614c32fbf6f850cd1b0f26bf3bc553744ab1a125c827d98179dea30e8450a8020f2b6d"
        },
        {
          "alg" : "SHA3-384",
          "content" : "010bd8e8c76d38789424067a4dc33b85c02cfc0451181c24165850a6e8a5e1cb12d8863f21e35170432ef39a87b76699"
        },
        {
          "alg" : "SHA3-256",
          "content" : "d3d34b7dc108de150d641937d9412adbc2adad0362c928ee8b37ebb275fd0dcd"
        },
        {
          "alg" : "SHA3-512",
          "content" : "43a34f122d07c0b9e194447e9d6cff291f67e2d82d66ae7d0cef0bef4a166e67c4211c586d59e341867a92d249800ea3bc372eccbeb7e4e183536fe076a66a89"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent.flink/flink-connector-files@2.2.0-cp1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://flink.apache.org/flink-connectors/flink-connector-files"
        },
        {
          "type" : "distribution-intake",
          "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/7de016b1a7b050b8de79919cd83a131f8aa00b0c"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink/flink-connectors/flink-connector-files"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.flink/flink-file-sink-common@2.2.0-cp1?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "io.confluent.flink",
      "name" : "flink-file-sink-common",
      "version" : "2.2.0-cp1",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "73b2589a8bfb5efb79c4995a80aa4329"
        },
        {
          "alg" : "SHA-1",
          "content" : "fda17f5faca64ed97313698b6d995c03e12a6d03"
        },
        {
          "alg" : "SHA-256",
          "content" : "149caa2489ecd4f5c4fcdc84022e77f95a38f8f253b3827e6afc28d74d74ac71"
        },
        {
          "alg" : "SHA-512",
          "content" : "47c1513ce708f2cbab4c6f836c2c22b7f83fd2ec2e93564a169f3098fa12296d5d8a58860275b10decff0fba445b85d11ad50c3c3ef128feb62bf97db65d9110"
        },
        {
          "alg" : "SHA-384",
          "content" : "0eaf9eea20e1525d69faecf4c1d0b95080190a7f228e9c08472dfc7d9cef7e3b661fe49b94ae0dc5145529015be5762d"
        },
        {
          "alg" : "SHA3-384",
          "content" : "5e0cf3371e15333324337d52e63efde0a1c1bcf1d0b40c98b7a44261e87b3d853b81c9391321b0802c94d022239c944c"
        },
        {
          "alg" : "SHA3-256",
          "content" : "5c1b896278202e5372a933f6d311d2cebb86170a349c104affd147c44f9660fe"
        },
        {
          "alg" : "SHA3-512",
          "content" : "987c0b931d38589ecba59fe0f488db2a7506ab75d4026e8b5be29993a8c8e63b6607af1d410132be74c10c18180d6f805562c4dec7bc7dd21dfd57fae7270d32"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent.flink/flink-file-sink-common@2.2.0-cp1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://flink.apache.org/flink-connectors/flink-file-sink-common"
        },
        {
          "type" : "distribution-intake",
          "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/7de016b1a7b050b8de79919cd83a131f8aa00b0c"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink/flink-connectors/flink-file-sink-common"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.flink/flink-hadoop-fs@2.2.0-cp1?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "io.confluent.flink",
      "name" : "flink-hadoop-fs",
      "version" : "2.2.0-cp1",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "84ab10dffe0dfd749ce7cd160321682e"
        },
        {
          "alg" : "SHA-1",
          "content" : "7d243851c7a588620aec518f4307c0c82a1bbf4c"
        },
        {
          "alg" : "SHA-256",
          "content" : "d180194dc9a949c14fda8e0a281a9c29f2ad3cb7e87c52903f77b7433c42c2f3"
        },
        {
          "alg" : "SHA-512",
          "content" : "ac253cf682b727e1e5b6f9f79741f220dc45d5b94f896830a706b62ce1ad5f44c36bfd691ee6a4278d2842d27b2cc49a793db6467878e9051a855b020029d149"
        },
        {
          "alg" : "SHA-384",
          "content" : "00a676a711191e5c7b49892c9f33a3dbd11cee0348dc3a698dd09b46b4d9384eb9b4df61d8334a2855033d45a80e0657"
        },
        {
          "alg" : "SHA3-384",
          "content" : "6a4866b7826cb69a5edd7f650853c657ccf597d948096b0df1a73094b0d68048b1b71bf6283a0228427ff1e0a12f8369"
        },
        {
          "alg" : "SHA3-256",
          "content" : "aefc90c4bc69758f63cd1e20152875d26f05c20fa0c7137925f4bdfbf13eb248"
        },
        {
          "alg" : "SHA3-512",
          "content" : "b0c6870176149f82956e3929db0af4043c2d1ae7dc4112789d3c2c80a7687e9049144c3dd467d7535d8f33e66db86b0f7733bf313d8dc909c3f013e24a967059"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent.flink/flink-hadoop-fs@2.2.0-cp1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://flink.apache.org/flink-filesystems/flink-hadoop-fs"
        },
        {
          "type" : "distribution-intake",
          "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/7de016b1a7b050b8de79919cd83a131f8aa00b0c"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink/flink-filesystems/flink-hadoop-fs"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.flink/flink-runtime@2.2.0-cp1?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "io.confluent.flink",
      "name" : "flink-runtime",
      "version" : "2.2.0-cp1",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "5e875206c9955ae5bb2712277346cff8"
        },
        {
          "alg" : "SHA-1",
          "content" : "9f9032f57c55d7ceb7dbf327056b9700eafb7881"
        },
        {
          "alg" : "SHA-256",
          "content" : "fc04158b779a1a9b1a1d329da819bdd48510d8753a0ddd3ac9188cfa2a65fb05"
        },
        {
          "alg" : "SHA-512",
          "content" : "4d4d97aa3ec484cdb9b220f9c0016beb2992d749ff10f898772fb12c332af062ce42ec7298359753cec84983bfab9adcb061725f8bdf0dbe1a1729fd34f4c619"
        },
        {
          "alg" : "SHA-384",
          "content" : "1065384759532572218de331bcc249eb12f21f407053dc49922a729c685572767ad3d171524d7de86d33e969f0d3329e"
        },
        {
          "alg" : "SHA3-384",
          "content" : "6dc839e4b561caf334b2557ff0f99d73b8b2855a413d9934a7fbdb43aa6bdfafd3bc9c74471cb90da2897f028601eb71"
        },
        {
          "alg" : "SHA3-256",
          "content" : "04ed5875310e5b9d3322dee363c1b80393411e05406b12870a714697f99cefe8"
        },
        {
          "alg" : "SHA3-512",
          "content" : "6cdf29d45169ac9fcc8daf7afc47c5103f8559443acf502c57fad7cfd7608e7eaadc5d6d0e6b0a42a0f3564fd21b3e11f78f229ffda5d93d05b8a0e02ba07237"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent.flink/flink-runtime@2.2.0-cp1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://flink.apache.org/flink-runtime"
        },
        {
          "type" : "distribution-intake",
          "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/7de016b1a7b050b8de79919cd83a131f8aa00b0c"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink/flink-runtime"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.flink/flink-datastream-api@2.2.0-cp1?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "io.confluent.flink",
      "name" : "flink-datastream-api",
      "version" : "2.2.0-cp1",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "327262e8096657da6271b5c8ac863980"
        },
        {
          "alg" : "SHA-1",
          "content" : "8185ba05d4e5d963ca25a43bda9fac44d2d36e4d"
        },
        {
          "alg" : "SHA-256",
          "content" : "9be33260f3e1de925e331da3afbc41aa454012d3cd64faef12df0e28e1348886"
        },
        {
          "alg" : "SHA-512",
          "content" : "7f8bc3c8e739f58d5b707498432bd6c7ad76751d9fb309861671b71d6ecb7513e53fdeb5666925001bffef0614a68a4dbe31329c36d26ab0bbc83286b3633e28"
        },
        {
          "alg" : "SHA-384",
          "content" : "4ce3afa62127f9dcf6ad112606723c6173983eb1f71513b837fca4aa250fda847c9928116be0517776f663ddbe220f5b"
        },
        {
          "alg" : "SHA3-384",
          "content" : "e9a6bec2f1a111594d4044538f716d5bd5e1a4909dff7431e346c4120482c1618f656d8bcfedb9cccc95cabd9f95dacf"
        },
        {
          "alg" : "SHA3-256",
          "content" : "448de577128919fbd787f6d6b44c17f61f6ffde6f2ebea88adb4ba805e85fb7d"
        },
        {
          "alg" : "SHA3-512",
          "content" : "d67e88199ebd6b6018a8adddc564fe1493d8b15af475107a6cd9ca2fa526d64e9939764d615346981a0a6cb8c28baf9aff14dda3a222dadc32668d0fa768aa9e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent.flink/flink-datastream-api@2.2.0-cp1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://flink.apache.org/flink-datastream-api"
        },
        {
          "type" : "distribution-intake",
          "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/7de016b1a7b050b8de79919cd83a131f8aa00b0c"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink/flink-datastream-api"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.flink/flink-rpc-core@2.2.0-cp1?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "io.confluent.flink",
      "name" : "flink-rpc-core",
      "version" : "2.2.0-cp1",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "de893739ad7ba4d37380a51dcbae14a8"
        },
        {
          "alg" : "SHA-1",
          "content" : "b0a60e3828d831c9b93ed10477ba1aaebafefea6"
        },
        {
          "alg" : "SHA-256",
          "content" : "bc72436cb428e7eb704c5faaa9e1453e0b33be90f14bae5e3217073e0d5fad71"
        },
        {
          "alg" : "SHA-512",
          "content" : "a96678ff2f35f585f707ec2919b52cc178aa5d8a8a239f0d30fcf3c2149a3502e1250cb0dff22e729050789537a54ea04143905da6ecb456aa7c6f1a8cf0cd83"
        },
        {
          "alg" : "SHA-384",
          "content" : "2da1c15197738855f54074dd067093c6008d99e52c51154ba082ffee498e1f88d47f215dceaf161645016e8b50970e2d"
        },
        {
          "alg" : "SHA3-384",
          "content" : "1444d4645a000b982e9966ce5a3b5113a73737694490066f7d82a802a2eaa45e4fdd6f12e3c92651a811366fb5efc5f5"
        },
        {
          "alg" : "SHA3-256",
          "content" : "96ad03d75fcdbb1a0fe6032d121215b473cd6ca58618f1e5b6e6c4ba8f1f1bff"
        },
        {
          "alg" : "SHA3-512",
          "content" : "222dfd6d131b5aabcf03b46095658401677bbd0327eabb8d505047c9bbc73f768345c51725143a5b1e082e28db1fc75d1cd29fd5fb4428b53b0a2ecbee272487"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent.flink/flink-rpc-core@2.2.0-cp1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://flink.apache.org/flink-rpc/flink-rpc-core"
        },
        {
          "type" : "distribution-intake",
          "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/7de016b1a7b050b8de79919cd83a131f8aa00b0c"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink/flink-rpc/flink-rpc-core"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.flink/flink-rpc-akka-loader@2.2.0-cp1?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "io.confluent.flink",
      "name" : "flink-rpc-akka-loader",
      "version" : "2.2.0-cp1",
      "description" : "This module contains the mechanism for loading flink-rpc-akka through a separate classloader.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "821fc172e42040400b3b09296e7ffb8e"
        },
        {
          "alg" : "SHA-1",
          "content" : "ba295cb6bb8a29c51f22a6fe61f359654128ed62"
        },
        {
          "alg" : "SHA-256",
          "content" : "336b26a6c376d071c438e2e294102ec92916cdef49fac970d9fc0fdfab4d8ac8"
        },
        {
          "alg" : "SHA-512",
          "content" : "08db98f278b66a6ab4838e3d9f7ce6b449fe12def571ae120881f0aadf09ad452336e301f95ec2eb1f8dbdc2698263fa2e6c65566cbc6dd8a2681b0a26f9de33"
        },
        {
          "alg" : "SHA-384",
          "content" : "3153c55af2fb64d3e5a936b914da1ae07a35f2c3aed5bfb1307f3cb731a304b2b5b429a35e708baa0f584217edd8ac1d"
        },
        {
          "alg" : "SHA3-384",
          "content" : "c6c182133d2a14fda81fdf5ffdc8760f4100df97fc5e1e8a123e35069085aab0d604ae3334604860ecb71693fed40772"
        },
        {
          "alg" : "SHA3-256",
          "content" : "d318af70b006846a88db5a1d85a12aa59a04a6792a08daccb4140238758a30fb"
        },
        {
          "alg" : "SHA3-512",
          "content" : "2942eb25a3e1e3f35d23ae2eb76715a64d7169fc522a8964cf383d14587784674bc33477fdb3f5530e5c81250b97a5c885a3237e4a0dc0311ab7d92797811666"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent.flink/flink-rpc-akka-loader@2.2.0-cp1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://flink.apache.org/flink-rpc/flink-rpc-akka-loader"
        },
        {
          "type" : "distribution-intake",
          "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/7de016b1a7b050b8de79919cd83a131f8aa00b0c"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink/flink-rpc/flink-rpc-akka-loader"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.flink/flink-queryable-state-client-java@2.2.0-cp1?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "io.confluent.flink",
      "name" : "flink-queryable-state-client-java",
      "version" : "2.2.0-cp1",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "39751339f3f24baaae40cca9bfa560ea"
        },
        {
          "alg" : "SHA-1",
          "content" : "8ccf16686af1df893f073449c5f66d0db5e1d0c0"
        },
        {
          "alg" : "SHA-256",
          "content" : "3dd0d7161a250f68cd24bc522a6c4923b62fc75331e5707914eaaf5b918ada21"
        },
        {
          "alg" : "SHA-512",
          "content" : "51be3b3773824d2ccf2b5dd1714a91dacc8fe7204836ff3e7d419c51faf1212b315348bce03e6b284cb4c78390d117a6b79d477fb06d66f31bdf8c31ae5a3b67"
        },
        {
          "alg" : "SHA-384",
          "content" : "c89197f50fec38967e0401d941e7c90e3b818b9e4b2222b6c373b84c22d948788952d04b4f9f2e1f8ca99d584babb8f3"
        },
        {
          "alg" : "SHA3-384",
          "content" : "3674a1b4a834b045bd15200a7de30e49e8a37080a1330467648e047ee26db143d236ac83aa8d6bafb8bdd6b8b8a6e9fd"
        },
        {
          "alg" : "SHA3-256",
          "content" : "eb9295b50fba251c4b001441df6db4b3a9feb8c008dcec73f1c204fcde104270"
        },
        {
          "alg" : "SHA3-512",
          "content" : "7f67de20ee235c36193fcd2dbdc13e7d632adb27497152ffb2f4718ffa7fbdc03f45b18d1117c9f77e2d6661fd3754c587a94ac4ed6cb201c802fe3ea6b180fa"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent.flink/flink-queryable-state-client-java@2.2.0-cp1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://flink.apache.org/flink-queryable-state/flink-queryable-state-client-java"
        },
        {
          "type" : "distribution-intake",
          "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/7de016b1a7b050b8de79919cd83a131f8aa00b0c"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink/flink-queryable-state/flink-queryable-state-client-java"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-io/commons-io@2.15.1?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-io",
      "name" : "commons-io",
      "version" : "2.15.1",
      "description" : "The Apache Commons IO library contains utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "84351f7991a0e6722f00e96a4ccc376f"
        },
        {
          "alg" : "SHA-1",
          "content" : "f11560da189ab563a5c8e351941415430e9304ea"
        },
        {
          "alg" : "SHA-256",
          "content" : "a58af12ee1b68cfd2ebb0c27caef164f084381a00ec81a48cc275fd7ea54e154"
        },
        {
          "alg" : "SHA-512",
          "content" : "e9adaeed2d715ac0ae44de056ba165a743a92acbeb9871b535f7e58e0b3bc4fba276495b50429be195098a559f3adb7294048479754a0ee4d397da2efda5f81c"
        },
        {
          "alg" : "SHA-384",
          "content" : "028c72b59373d3894da22f9eb2c731aabd00f670993973f71a354d722670c12ca659686b83bbf8db32d060ca180f50b2"
        },
        {
          "alg" : "SHA3-384",
          "content" : "73cd585ab3736b4be50ec0f10dfe5ebfc3390eea8d56f07f29055f1fddb2dff8084310eaa6fb9f97ea639ed1abd7bc33"
        },
        {
          "alg" : "SHA3-256",
          "content" : "daf39bc99f1a3dc0075714a4a342a58d69a4cd62c25bc39a581f657ca72b1044"
        },
        {
          "alg" : "SHA3-512",
          "content" : "b003f8971d1536ea0fc4320dbfe17d7259d49e59314739f9fc83134e511facbff048b0ef4f86a9d0893781ca09c95cebc3b181a6c89a2d41e851870b96e76839"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-io/commons-io@2.15.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-io/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-parent/actions"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/IO"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-io.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.flink/flink-shaded-netty@4.1.100.Final-20.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.flink",
      "name" : "flink-shaded-netty",
      "version" : "4.1.100.Final-20.0",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6a86015758a9e48ecc6ca96620a2ba0b"
        },
        {
          "alg" : "SHA-1",
          "content" : "5880d365f7577f96bdbf29b8bca9cc645a5bd3e5"
        },
        {
          "alg" : "SHA-256",
          "content" : "dfe49f4e089640d8527814d85cd441d4f90b564996d81e5c905b0d282d5f1a21"
        },
        {
          "alg" : "SHA-512",
          "content" : "99914cf4ffc9804d41431d483521fdf054667e64c0d9f541a26e1fa48fd754fd3124c0e94063b09a3b4bb79de1d2e1ac0fa0dbaff66a9cfd681a2171d3d08518"
        },
        {
          "alg" : "SHA-384",
          "content" : "3105c95b13e444f2119d583ec3ed314f779016be39c30782000f1efafe8a43e5fd598a07235576a8db27dd34ee6ef158"
        },
        {
          "alg" : "SHA3-384",
          "content" : "06d8ee7b6da1cc62812c3ac7a5cbe0c6ca3e7db90e889ba7420c4c53ec42dddc60a652267f46c7d6fd2b192174a475eb"
        },
        {
          "alg" : "SHA3-256",
          "content" : "1e47d716f7d480bae32f9306725568c0dea2a70a690732c63d294c191ce5f693"
        },
        {
          "alg" : "SHA3-512",
          "content" : "5c9daa7dc98338fc5b6203f05264c114fc062fdca36d58cdf7588aaa20a51f230402fd66a5b607ffe1bc00d42d45613ebf23a66456787cfb33da31f5c15efe09"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.flink/flink-shaded-netty@4.1.100.Final-20.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://flink.apache.org/flink-shaded-netty"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink-shaded/flink-shaded-netty"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.flink/flink-shaded-zookeeper-3@3.8.4-20.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.flink",
      "name" : "flink-shaded-zookeeper-3",
      "version" : "3.8.4-20.0",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "2effd13ae46b0a720a8e65f88ee984c3"
        },
        {
          "alg" : "SHA-1",
          "content" : "38fe34fb05e74111482482aca6d42b490918d005"
        },
        {
          "alg" : "SHA-256",
          "content" : "a3f0c509bf4211ea30aaf284164eaeb55e8572c87aa219c11795de4c9d1aba23"
        },
        {
          "alg" : "SHA-512",
          "content" : "0052f59dfe9fc222047436c0c7986bd05694a8af27ce62ed1738836bf20fb0609d5d61b032f42429e3c2ed38ed0ac3929f791354311c1cc6e3314914b019a4f2"
        },
        {
          "alg" : "SHA-384",
          "content" : "f787b7e66e4e60191bb1f8c948e2392322da0c0b08ce2187e2a63030f43deb22b2bc12bf7ba80620d8eb8cb3fb315464"
        },
        {
          "alg" : "SHA3-384",
          "content" : "fbb7fa468f057844909a157ffc3d91d30ebe4a575df290e55ac96894f02ff1a40c2870a3d10d9519808570450b3767a4"
        },
        {
          "alg" : "SHA3-256",
          "content" : "b956b9912c46a03562596992f04bd6c9d81aa48ca14f59a786ee01164c46881d"
        },
        {
          "alg" : "SHA3-512",
          "content" : "912a364387b9524bdf2fd63ae887a4b4647493410b5d78542258ee67e95d149127d44923c23aa3a8aacb2bd285642314d348cefda6105d5086179f06d5ac6b87"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.flink/flink-shaded-zookeeper-3@3.8.4-20.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://flink.apache.org/flink-shaded-zookeeper-parent/flink-shaded-zookeeper-3"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink-shaded/flink-shaded-zookeeper-parent/flink-shaded-zookeeper-3"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.flink/flink-connector-datagen@2.2.0-cp1?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "io.confluent.flink",
      "name" : "flink-connector-datagen",
      "version" : "2.2.0-cp1",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "387d6fb408bff9f81829e9a0fdd7cb5b"
        },
        {
          "alg" : "SHA-1",
          "content" : "7cdf13e91201f1920f6032b71aa1f980fb423bf3"
        },
        {
          "alg" : "SHA-256",
          "content" : "e5cd5d5f082f89ca9112657084595c1f03b4e0e3503137bf49b734800c41bef2"
        },
        {
          "alg" : "SHA-512",
          "content" : "08507004483db9c9998217c856e8ec742db196d508182c38168e4c66136954146beb0ea836bdaeefd4ffff89cd777d09b8cfd0145c1850df04eafe4b5a5e0cc8"
        },
        {
          "alg" : "SHA-384",
          "content" : "508ec0670f98b4e068140e84c960e46728724459063e64a1139ac625169f8b774face28606390bdff2f4dc488ce1b757"
        },
        {
          "alg" : "SHA3-384",
          "content" : "58ba7a8c14888436d49738bfa461cd85ec9eb71c7c48ddfbd0729f59f4c2555c69d9eb78af29a4b1d65075dd5a797025"
        },
        {
          "alg" : "SHA3-256",
          "content" : "5e3ff70138803a558fe3083a10c4df31bf2005e77c9d659590fc0aad1f3836c3"
        },
        {
          "alg" : "SHA3-512",
          "content" : "cb064a1ce13c18cf394182f2f6dd3d4686a19f69263e002ee3cf9d169d8d033ec06cc601b6569b2787c6b5ac7fff86d7c72d10c399f01fc52b7183c3aa79a456"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent.flink/flink-connector-datagen@2.2.0-cp1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://flink.apache.org/flink-connectors/flink-connector-datagen"
        },
        {
          "type" : "distribution-intake",
          "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/7de016b1a7b050b8de79919cd83a131f8aa00b0c"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink/flink-connectors/flink-connector-datagen"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-cli/commons-cli@1.5.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-cli",
      "name" : "commons-cli",
      "version" : "1.5.0",
      "description" : "Apache Commons CLI provides a simple API for presenting, processing and validating a Command Line Interface.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6c3b2052160144196118b1f019504388"
        },
        {
          "alg" : "SHA-1",
          "content" : "dc98be5d5390230684a092589d70ea76a147925c"
        },
        {
          "alg" : "SHA-256",
          "content" : "bc8bb01fc0fad250385706e20f927ddcff6173f6339b387dc879237752567ac6"
        },
        {
          "alg" : "SHA-512",
          "content" : "b78ac2b418e9e9e7d0bc866664577199d320408a6f03151b3789bac365c986dd526df853599e633d7e50fe136cbf3eb9ce50c9cfa0ad38c3cc8d8ee416f61c40"
        },
        {
          "alg" : "SHA-384",
          "content" : "a7a2daa807c4007c506b5100f0a9b526c0052c4e1f6b699904ef9d2aba8195b6003dc4d47ca133b15e2f3e830bdbe6c4"
        },
        {
          "alg" : "SHA3-384",
          "content" : "44ca97514a2e34b5bf3de9b5d45c8e871f6eee517db7f3c4b4476eb3e8dfe9a9d8760f3181114708288c373727b42475"
        },
        {
          "alg" : "SHA3-256",
          "content" : "a0a47001d3a293f129ffc21f17f575a9d23ce5b88b440e651e4cd01edd0cc421"
        },
        {
          "alg" : "SHA3-512",
          "content" : "483dae23d6827a105d17847c8c813527f19042b65c4d09635dfc4bfd25990fe3ba2a997540460fd5b1d72ca3add9a38ca8b32004680764db972a9bb62f7f68d8"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-cli/commons-cli@1.5.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-cli/"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CLI"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-cli.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.javassist/javassist@3.24.0-GA?type=jar",
      "publisher" : "Shigeru Chiba, www.javassist.org",
      "group" : "org.javassist",
      "name" : "javassist",
      "version" : "3.24.0-GA",
      "description" : "Javassist (JAVA programming ASSISTant) makes Java bytecode manipulation simple. It is a class library for editing bytecodes in Java.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "23fd22d0d089ddfac567a39ce0cb1a91"
        },
        {
          "alg" : "SHA-1",
          "content" : "d7466fc2e3af7c023e95c510f06448ad29b225b3"
        },
        {
          "alg" : "SHA-256",
          "content" : "aba81efa678b621203fb89aeff81d6f126f7a9dd709401e5609c42976684ae23"
        },
        {
          "alg" : "SHA-512",
          "content" : "e57dad74a3edef837ece841d06e4a7c96ffecab8fbcba56fe5f7eccd662f0c0d757880a6073793a8c75ad7a0a1d146346b75cdbfe4fd8a271048a54446e5d1a2"
        },
        {
          "alg" : "SHA-384",
          "content" : "4867afdb7522b3dbfa10a51264ac6c15a2a8083d16c8dbef318275d24687768f35130b1c17d8407ca8ecf855abd83dff"
        },
        {
          "alg" : "SHA3-384",
          "content" : "a52be891987d4fc7d319e6417e0cd9a28f189d8623b803d72b5429e118da73b9937899231825e793d37b434d7522d283"
        },
        {
          "alg" : "SHA3-256",
          "content" : "0cf8db7d2a5f7e1a70827538cb4b0b446fcc239f05ca55d9bf8f2a50f1e08af3"
        },
        {
          "alg" : "SHA3-512",
          "content" : "ed9675f9f070203801eb762092ac99636d376b7ef563f99508283006a65a0d2dfce38e1ba7ff2ccfebcede0376ba0724b76b459ca112477234aed8208807f785"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MPL-1.1"
          }
        },
        {
          "license" : {
            "id" : "LGPL-2.1-only"
          }
        },
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.javassist/javassist@3.24.0-GA?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.javassist.org/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.jboss.org/nexus/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://jira.jboss.org/jira/browse/JASSIST/"
        },
        {
          "type" : "vcs",
          "url" : "scm:git:git@github.com:jboss-javassist/javassist.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.xerial.snappy/snappy-java@1.1.10.7?type=jar",
      "publisher" : "xerial.org",
      "group" : "org.xerial.snappy",
      "name" : "snappy-java",
      "version" : "1.1.10.7",
      "description" : "snappy-java: A fast compression/decompression library",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "d74bb2e2857f965683c9de931b71fc86"
        },
        {
          "alg" : "SHA-1",
          "content" : "3049f95640f4625a945cfab85715f603fa4c8f80"
        },
        {
          "alg" : "SHA-256",
          "content" : "4c766cb3f855415ee734b2392949a0b6f12a60879334a74518deaf6270d32e36"
        },
        {
          "alg" : "SHA-512",
          "content" : "22a6ebb8e8ad4d8a149b0c67d8658ac1535d7014857064c4f7ed4999e29c6186de8a80b50dd9b59f631fa1c24970524fdbbb84083c80c59eb0c72d4efb041fef"
        },
        {
          "alg" : "SHA-384",
          "content" : "b7ea971de5e286b4bdb8b96063f0ffe611ef82f5887fa6845fc2721bf0e71a88b0c754ba010816596f0b6c178160c0c5"
        },
        {
          "alg" : "SHA3-384",
          "content" : "9ef6c5ad194027c8b4be0f756dfeb958ae3daa5ad942b34c4e9e570ce7516ba91fad298929e4d716f6a091d0b274bbc9"
        },
        {
          "alg" : "SHA3-256",
          "content" : "83f4ede80f49271566745463652e3cdebbe4e2112174400ddf082bf9b39d09cd"
        },
        {
          "alg" : "SHA3-512",
          "content" : "3c1ffb884ac57e812f997357f9501afbffec3aaac2aa2bb87b0dd8ec2e7e43d922c250dfc658920ade2014aa138440d2d9cdfce8e453812d089898d10390a6db"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.xerial.snappy/snappy-java@1.1.10.7?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/xerial/snappy-java"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/xerial/snappy-java"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/tools.profiler/async-profiler@2.9?type=jar",
      "group" : "tools.profiler",
      "name" : "async-profiler",
      "version" : "2.9",
      "description" : "Low overhead sampling profiler for Java",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4df6477a255b88e99f2ed4daa3c713cc"
        },
        {
          "alg" : "SHA-1",
          "content" : "4ed20e2a4640ee672e7cf23b1512dbdeb9a4b7e6"
        },
        {
          "alg" : "SHA-256",
          "content" : "6c4e993c28cf2882964cac82a0f96e81a325840043884526565017b2f62c5ba4"
        },
        {
          "alg" : "SHA-512",
          "content" : "60ba593a0cf529397e73e38ef71bc2e5def44f1111a60f40a724ac3472ef7afe92e02a61b0ad18c373122cd92216f49268d335e1150dc3a99ff2431c598aeb5c"
        },
        {
          "alg" : "SHA-384",
          "content" : "65107ddcd2a06b69ac4cdb9bd93452045c4e08b843826666a890816abe0486966599cf6a4b07ff87c5d95e86551bb115"
        },
        {
          "alg" : "SHA3-384",
          "content" : "4989b467a4791464d50c51782ccc60547bfc8105aebc0764656c67405bbd7d023a9d405a1fd864f86dbd186af8624928"
        },
        {
          "alg" : "SHA3-256",
          "content" : "225998977421a87839be6c09f49f9ebd972b063a65f53d374e61fc3d68416ca4"
        },
        {
          "alg" : "SHA3-512",
          "content" : "723c0651f61ae6a119624b11bc9d3959ae44de0bcef51f0a341c5d7ebdc6a0e677f3c43399db9a4a657334f46a1092ee55d45f92344b7e31e6e26669ffe41823"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/tools.profiler/async-profiler@2.9?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://profiler.tools"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/jvm-profiling-tools/async-profiler"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.lz4/lz4-java@1.8.0?type=jar",
      "group" : "org.lz4",
      "name" : "lz4-java",
      "version" : "1.8.0",
      "description" : "Java ports and bindings of the LZ4 compression algorithm and the xxHash hashing algorithm",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "936a927700aa8fc3b75d21d7571171f6"
        },
        {
          "alg" : "SHA-1",
          "content" : "4b986a99445e49ea5fbf5d149c4b63f6ed6c6780"
        },
        {
          "alg" : "SHA-256",
          "content" : "d74a3334fb35195009b338a951f918203d6bbca3d1d359033dc33edd1cadc9ef"
        },
        {
          "alg" : "SHA-512",
          "content" : "98d59086a6021ca571d9c1d64b715e43044c730e1ac563f514c40cf44302615d30378b6d5cc69990446522de6260dc8e7b303e3990a3139dc326d058dfb6dbd9"
        },
        {
          "alg" : "SHA-384",
          "content" : "8e3f2acdbb41a00c4d9cc5f328e63fb626ac7c6c84e1bf9502e2fcc76a591b2b819b2d27b29925ff986b95c297b30e2c"
        },
        {
          "alg" : "SHA3-384",
          "content" : "ec0d6a00760d0a4ecba13a41785d6ae57a64552b1687eaa3e292b3054bb1348e49ab8a938197ff126f9218c6cb96ee1c"
        },
        {
          "alg" : "SHA3-256",
          "content" : "7be684c102891105f66d378b61ea1297a392c1618b5aebf7e0b281f55217c206"
        },
        {
          "alg" : "SHA3-512",
          "content" : "0b2294570ea2bfbb50ced21dfa4bad956467ca447e9ab2dd602a3478371bcd0e9f13d2dff74d06827a28882409612cdde00bd91267be05bd3510c68268bf3166"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.lz4/lz4-java@1.8.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/lz4/lz4-java"
        },
        {
          "type" : "vcs",
          "url" : "git://github.com/lz4/lz4-java.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.parquet/parquet-hadoop@1.15.2?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.parquet",
      "name" : "parquet-hadoop",
      "version" : "1.15.2",
      "description" : "Parquet is a columnar storage format that supports nested data. This provides the java implementation.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "96eee89cf6f14943ccaf773827607f7c"
        },
        {
          "alg" : "SHA-1",
          "content" : "b68b561099a3c18eb47618cfd1b070afb254f34f"
        },
        {
          "alg" : "SHA-256",
          "content" : "a9015cbd8548a43bed459d1ee5cbc2748110f1cf484fdab785e5171e515d810f"
        },
        {
          "alg" : "SHA-512",
          "content" : "d7f4293d5f266d2cd9555dfadb52895bd894787d2fdeb476077d85dab7cad784abf7418d9748a51118be91b2cb72c8775710e0938c7e0995041755dddd9f7855"
        },
        {
          "alg" : "SHA-384",
          "content" : "41a220da2a407cdf7eef9d5213aeb1d9999cad5a0745948928e45d13cda3402ed5c57c23ec1a1a225e66085dd7fc8cd7"
        },
        {
          "alg" : "SHA3-384",
          "content" : "c17c72d79fe5b8599b9a6b0ded4b0273973effa3ae827cf5583fb957659196a4382b5907d4701b1669c14c9852af631f"
        },
        {
          "alg" : "SHA3-256",
          "content" : "082fb07cc17264c8f4f9a6b63a1377b5674b613c2fb66d316093a04ae7a6f66b"
        },
        {
          "alg" : "SHA3-512",
          "content" : "3d9661ffb7a0e29396b65199db4f26b35572bcecbfd03cfe873095b532cebf2bf7d780e8f6785d38c7f51afa1a37e580f36917ddbdce115503bad54d4dadce32"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.parquet/parquet-hadoop@1.15.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://parquet.apache.org"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/apache/parquet-java/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "dev-subscribe@parquet.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "scm:git:git@github.com:apache/parquet-mr.git/parquet-hadoop"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.parquet/parquet-column@1.15.2?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.parquet",
      "name" : "parquet-column",
      "version" : "1.15.2",
      "description" : "Parquet is a columnar storage format that supports nested data. This provides the java implementation.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "ae419f99f43cf37f8b25fedf31b10a6a"
        },
        {
          "alg" : "SHA-1",
          "content" : "db7b1b50eb4bb5345bb175605e1ef7a339d9e837"
        },
        {
          "alg" : "SHA-256",
          "content" : "856e759164450d1373e98f761968bd19a6a26899c2f93720770501a1b0e59e4c"
        },
        {
          "alg" : "SHA-512",
          "content" : "85892e350f087e46fd8c8f470af280ee727c229fbce08223b8bc46549cd8fb4d2d94cdc55b81c24b07992ac100f4e7b80adaab760d3550582adb30bab69fbdb0"
        },
        {
          "alg" : "SHA-384",
          "content" : "13409c8450db766004d6a1433a2541b75886b9c933d56a21e2e7bcfe5e2242c3668447e4e0a05c6771e3452636df4fa9"
        },
        {
          "alg" : "SHA3-384",
          "content" : "e17de078a4ca9acdddf4dcbc9ee47d89d421cf603e1338ae71d7a0f5d96934b6ba54f97644f3200b86dd44db9ed10220"
        },
        {
          "alg" : "SHA3-256",
          "content" : "e896913149e07db243065a90fbe9c58e8519bd91acfcc7de4758277c9d82b245"
        },
        {
          "alg" : "SHA3-512",
          "content" : "a1d7b6ac43865b6b55a54cd155257712590a2e148f5430a728335e045c35561fcce1f623c5fc5a3d0e9a51767caa9b94906d4a6057945e5b424daac75d020f08"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.parquet/parquet-column@1.15.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://parquet.apache.org"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/apache/parquet-java/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "dev-subscribe@parquet.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "scm:git:git@github.com:apache/parquet-mr.git/parquet-column"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.parquet/parquet-encoding@1.15.2?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.parquet",
      "name" : "parquet-encoding",
      "version" : "1.15.2",
      "description" : "Parquet is a columnar storage format that supports nested data. This provides the java implementation.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "ab4f588e4f676b9e8223931387046041"
        },
        {
          "alg" : "SHA-1",
          "content" : "1f0566b33202fc5562e3c6de01a164898d26be25"
        },
        {
          "alg" : "SHA-256",
          "content" : "da2b2df9749cce2eee3205a6f4ec07612f985d51aebbd8f5861d8ec344824dc1"
        },
        {
          "alg" : "SHA-512",
          "content" : "61e336d60917b2e8319b66cadcdb1c862bce715ab32c7efac99786ef1217afc0eaa845b36975b1ac0ef6a05d96a4b2e8755892e1220c17261a76fd67489798f1"
        },
        {
          "alg" : "SHA-384",
          "content" : "25a896f02ef75c4e7ff3d818f109c304ecdcd71baaf4bde1c721af18b6b2ce77b9145a14efba136bc70a8f408d912751"
        },
        {
          "alg" : "SHA3-384",
          "content" : "d2fb6b7a13a382a9021e5e836545f4b63f5ee532f10e616f76fd9ec53a4ccd40b7a0831269c918337351841168457dbc"
        },
        {
          "alg" : "SHA3-256",
          "content" : "87d79dedebbc7384fa8a4577831c8651a16c0320d0330703dfd47d46075f7d6b"
        },
        {
          "alg" : "SHA3-512",
          "content" : "ab7ff2ea25a037e86d406d4d299d49f630d81b3ebd223970a6f5d6568ed99e78b3c900fc49068ad0fb5359424d31689029f3f660de3f30f96d169c292c82f2e8"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.parquet/parquet-encoding@1.15.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://parquet.apache.org"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/apache/parquet-java/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "dev-subscribe@parquet.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "scm:git:git@github.com:apache/parquet-mr.git/parquet-encoding"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.parquet/parquet-format-structures@1.15.2?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.parquet",
      "name" : "parquet-format-structures",
      "version" : "1.15.2",
      "description" : "Parquet-mr related java classes to use the parquet-format thrift structures.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "d80e52c29b76d2bd0eed96fd3e958c5e"
        },
        {
          "alg" : "SHA-1",
          "content" : "235614fcd44b7e0f348744fcc914d82d73607970"
        },
        {
          "alg" : "SHA-256",
          "content" : "417175f24f18e50f82873d604f36532c6b1c924611c4357dff5851c631d87a45"
        },
        {
          "alg" : "SHA-512",
          "content" : "837da2ca1a85dad0cad29040a15f51f2cf0ba953e9e2fc1e9a4279e06af7f8d9966adc733d3ab4092359f836b315be0f04d9925498fc73b00e7e91e776c5aeda"
        },
        {
          "alg" : "SHA-384",
          "content" : "208f01dd7f813dc1b8f48e71194d9c5fa870d0379f2389d88265392b1ccfd954460cc58165fe170c125257356cd73b0a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "4cce054c951bf353935aa1b68cf046de3a2a1ee8dfa08b70b8ede9bc5c95b7733148c2b7d37589ce811df470cf32ecbc"
        },
        {
          "alg" : "SHA3-256",
          "content" : "7bb806c4fbd3578af0af3e7666af404a19207373c2e3fe0e2767cd9508257994"
        },
        {
          "alg" : "SHA3-512",
          "content" : "6bec16f1ed552ba58cc677ba0ff25cd4a1fc5adef085b982bd562d31a3d0d687ae653a727e483ff79f09664fd511cfec02ba6e9f862dd954b198f3a614dd0ab7"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.parquet/parquet-format-structures@1.15.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://parquet.apache.org/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/apache/parquet-java/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "dev-subscribe@parquet.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "scm:git:git@github.com:apache/parquet-mr.git/parquet-format-structures"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/javax.annotation/javax.annotation-api@1.3.2?type=jar",
      "publisher" : "GlassFish Community",
      "group" : "javax.annotation",
      "name" : "javax.annotation-api",
      "version" : "1.3.2",
      "description" : "Common Annotations for the JavaTM Platform API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "2ab1973eefffaa2aeec47d50b9e40b9d"
        },
        {
          "alg" : "SHA-1",
          "content" : "934c04d3cfef185a8008e7bf34331b79730a9d43"
        },
        {
          "alg" : "SHA-256",
          "content" : "e04ba5195bcd555dc95650f7cc614d151e4bcd52d29a10b8aa2197f3ab89ab9b"
        },
        {
          "alg" : "SHA-512",
          "content" : "679cf44c3b9d635b43ed122a555d570292c3f0937c33871c40438a1a53e2058c80578694ec9466eac9e280e19bfb7a95b261594cc4c1161c85dc97df6235e553"
        },
        {
          "alg" : "SHA-384",
          "content" : "fc0058495e54efb6e05a34e3ff422e7c8347bcc77d6d9b87e9253424968dee6ef6a215c318d7e54f8705276be81f0682"
        },
        {
          "alg" : "SHA3-384",
          "content" : "ed6464b715de6ced0d9981a3f28140824946a4b7a02ffaff6116c833bb36e8f77a6282ce63c0d82cfe841d4fd6916891"
        },
        {
          "alg" : "SHA3-256",
          "content" : "ecfc9bef24ae28cf94c6775ecf6e2086d90a25d8d5476a4f6bb24001601b6cd0"
        },
        {
          "alg" : "SHA3-512",
          "content" : "f2b333527faedf504f60aa70a3d491972fa76f7e61e6351027f74613f41001157656824fe312b6e1df6dc4979704fe2a745b618d5368a97fe0bf8749739de9e2"
        }
      ],
      "licenses" : [
        {
          "expression" : "(CDDL-1.0 OR GPL-2.0-with-classpath-exception)"
        }
      ],
      "purl" : "pkg:maven/javax.annotation/javax.annotation-api@1.3.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://jcp.org/en/jsr/detail?id=250"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://maven.java.net/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/javaee/javax.annotation/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "javaee-spec@javaee.groups.io"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/javaee/javax.annotation"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.parquet/parquet-common@1.15.2?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.parquet",
      "name" : "parquet-common",
      "version" : "1.15.2",
      "description" : "Parquet is a columnar storage format that supports nested data. This provides the java implementation.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4678a7a3e055e19308ef31ba38f1fc70"
        },
        {
          "alg" : "SHA-1",
          "content" : "5078b2fe961156896a6d07a3894a6f8ff0bb706e"
        },
        {
          "alg" : "SHA-256",
          "content" : "a1e57537661f18f259d342a93123db10b5796e30a0585d0652af987ea7c33596"
        },
        {
          "alg" : "SHA-512",
          "content" : "7dc871bc96a97e9232622882ff4c6affbcf18691f77f3845c135e1d348dda85f8b06ed5719d1b0ed0da78c842282744f3d0babc5e22b24c184fe55c8a8d4331a"
        },
        {
          "alg" : "SHA-384",
          "content" : "0e827475289fe7d3f4475957f037f73bfbd88a6c05058f7ce9fefa7d47e04bb23cfaedba342e4749e6dcdf47df11d3b4"
        },
        {
          "alg" : "SHA3-384",
          "content" : "fc5530fb3aac43b01f97295e8067d3a68bfbbd5260d8b2dcf8fe3c1ec38414d3b02d9fcd6dfd5c623bab958212940467"
        },
        {
          "alg" : "SHA3-256",
          "content" : "abed4d4bdad889184795f1ae7a876d0a3388f66f4a4d2f4439288cda121a5a74"
        },
        {
          "alg" : "SHA3-512",
          "content" : "409b879d66047fe93a9e4ed75b354966f891072bfbc10e4b8233a6f5587435cca6631e067ccbb9a9777e7582fdda6954d641c617c77975e33166835baef9b77e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.parquet/parquet-common@1.15.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://parquet.apache.org"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/apache/parquet-java/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "dev-subscribe@parquet.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "scm:git:git@github.com:apache/parquet-mr.git/parquet-common"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.parquet/parquet-jackson@1.15.2?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.parquet",
      "name" : "parquet-jackson",
      "version" : "1.15.2",
      "description" : "Parquet is a columnar storage format that supports nested data. This provides the java implementation.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "70ecbb7e2c21e4c82e920f4d35ba062f"
        },
        {
          "alg" : "SHA-1",
          "content" : "554c04e1c5ab964288cc47aa1747a82abca945e2"
        },
        {
          "alg" : "SHA-256",
          "content" : "0df26fcc7958e155da758676cdcc1028702d1876e62e4f87c406cee42cffcfe4"
        },
        {
          "alg" : "SHA-512",
          "content" : "4622d76bae26e1a3e390eefa2bf43274f227342432ac81f91deff209425ef6935d7e3e7e5886a09f7827c50e23859e8d9fa878ad0388b4289a623c40047711f0"
        },
        {
          "alg" : "SHA-384",
          "content" : "705c2cee5b8f1455642b96b68244005d22a233bb56f7e3bb0c0737b92c78b86baef1724696e19a3dc4cb15d1c3b4eae3"
        },
        {
          "alg" : "SHA3-384",
          "content" : "8d38fc4cd15e6ef5accb43d5d284f0b11339c7a7864a46fb57322eb902ed9ef8099b804f91165e59f7886cc0ef6dd255"
        },
        {
          "alg" : "SHA3-256",
          "content" : "37166adf9d2ca24bac38b878f5df9844aa2201cefd5e1721b61fa8447b2c9ff3"
        },
        {
          "alg" : "SHA3-512",
          "content" : "2e4f49ed86cc95f661bb39d76a3d5481ecd1dca74809911f6fd3412bb089ef485044cc9f80192f798cda5ba7263f6d842a9d30865fa45b833890e0337e09ea18"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.parquet/parquet-jackson@1.15.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://parquet.apache.org"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/apache/parquet-java/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "dev-subscribe@parquet.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "scm:git:git@github.com:apache/parquet-mr.git/parquet-jackson"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/io.airlift/aircompressor@2.0.2?type=jar",
      "group" : "io.airlift",
      "name" : "aircompressor",
      "version" : "2.0.2",
      "description" : "Compression algorithms",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "86ebd034828b5af24292c985370c360a"
        },
        {
          "alg" : "SHA-1",
          "content" : "527952aa21839e8664618e1fe73c5648173607ac"
        },
        {
          "alg" : "SHA-256",
          "content" : "0c2a96bf86d5fb24ff7f20c92483c61391cb10d440a4bd278c77365a2b165698"
        },
        {
          "alg" : "SHA-512",
          "content" : "db5379867ff66f5570f48f42093f9172df23ef75f124fae4ec2dec74ee977ad081139f9dc0a663aae261439cb435a5c545edb7122d1bac40223401fe93fb431d"
        },
        {
          "alg" : "SHA-384",
          "content" : "117c41b463396e88a025f4bf3f1904dbe2f111dcb86e8e99b3960705bd92b205982df031b68d046bc65c3cab2d503fed"
        },
        {
          "alg" : "SHA3-384",
          "content" : "0558592618b70715c5308f6d3e5d2ba64126a9d521f2ed6f7dc1183dc0039ce88f3298a4462d3c3cfe3bf34f517db7c5"
        },
        {
          "alg" : "SHA3-256",
          "content" : "ab3d5a6f88eb30b9c32e90c7bb829774a5efe201fae82a5ebbf66f2c32267276"
        },
        {
          "alg" : "SHA3-512",
          "content" : "764f153c20a2ae0a3ddc90ca6a5b660709854171fe96cc2b5ab423de3da447b85b4329bab5054df41705becb2cb5da006585bdb64cc780a86f220bcce87621c8"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.airlift/aircompressor@2.0.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/airlift/aircompressor"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/airlift/aircompressor/tree/master"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-pool/commons-pool@1.6?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-pool",
      "name" : "commons-pool",
      "version" : "1.6",
      "description" : "Commons Object Pooling Library",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "5ca02245c829422176d23fa530e919cc"
        },
        {
          "alg" : "SHA-1",
          "content" : "4572d589699f09d866a226a14b7f4323c6d8f040"
        },
        {
          "alg" : "SHA-256",
          "content" : "46c42b4a38dc6b2db53a9ee5c92c63db103665d56694e2cfce2c95d51a6860cc"
        },
        {
          "alg" : "SHA-512",
          "content" : "3bf5bcdbd7342e794f95747421c510778d8656d7ca901eb9b0fd15b9edb5b470e799c76abce9fe5958355d0d6067565ab71897d02462232176a0145a7d546e69"
        },
        {
          "alg" : "SHA-384",
          "content" : "9dd327008604be77bad6fcf249f2806c9b6b6b9858ff35ceff74d6954ea5f66c162c92ba7a24f5da3ad9694b445a644a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "c3295ce0994916658580fc046aa12e48559f43cde61a95aeb3ffe87d71b8b797ac9a2537825cc338ced5c09e37fe5285"
        },
        {
          "alg" : "SHA3-256",
          "content" : "5c20f6777fbb2221e461f2855a99d7761635a0eaaf0fd992f9aeb8042a185c95"
        },
        {
          "alg" : "SHA3-512",
          "content" : "a5294db60c04c0603d982af2c2b46f0052c5ff73f8a4298a01c378050f3476199e5c678b754604a76d68eb537ba4d4f30edddb16a8447b76b5b947922a00f5f2"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-pool/commons-pool@1.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://commons.apache.org/pool/"
        },
        {
          "type" : "build-system",
          "url" : "http://vmbuild.apache.org/continuum/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/POOL"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/commons/proper/pool/trunk"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.github.luben/zstd-jni@1.5.6-6?type=jar",
      "publisher" : "com.github.luben",
      "group" : "com.github.luben",
      "name" : "zstd-jni",
      "version" : "1.5.6-6",
      "description" : "JNI bindings for Zstd native library that provides fast and high compression lossless algorithm for Java and all JVM languages.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a90336bc443a08521cbf6b8853c82921"
        },
        {
          "alg" : "SHA-1",
          "content" : "2fbdb6597ff51efa4a5bf12df18f27b5aa4f2625"
        },
        {
          "alg" : "SHA-256",
          "content" : "1f85db623bf653860d10e13e7b1ca6609301f66994dc93784c92a66019516bb9"
        },
        {
          "alg" : "SHA-512",
          "content" : "e78b0dd951cdb8eb2d506d80e894df520c8c241192e2ab7a2db45d5bef6185fae1cf74bc0da5f074f93c0893f77192e55fc9258e83d24527fb18764286c1bc3e"
        },
        {
          "alg" : "SHA-384",
          "content" : "e7912607a4c98da551433a2a1a0ffb84cf024dd97d36625d937ab0eb0fc14b98bcf29adaaadfe44eddfd7f889ba6004f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "05bee204911011f16001b96f435ab22e54074948ce80cf466e857641991cbc7527f44fbb7eae0c5291aedf27635da5df"
        },
        {
          "alg" : "SHA3-256",
          "content" : "0830dc76be96ac3fcd2cdbe886884cacef6cb2ae25bc47140a42b13f3fcf12f5"
        },
        {
          "alg" : "SHA3-512",
          "content" : "145678086eadff805f2b695ab9464ebb1aa3fe0094ddab558ac03c0bff3cd9604a6f9f62fa884e3446dc9ac6eec016f50bc5fbe4425b962d2e16f152b64f4a79"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-2-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/com.github.luben/zstd-jni@1.5.6-6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/luben/zstd-jni"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.hadoop/hadoop-common@2.10.2?type=jar",
      "publisher" : "Apache Software Foundation",
      "group" : "org.apache.hadoop",
      "name" : "hadoop-common",
      "version" : "2.10.2",
      "description" : "Apache Hadoop Common",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0e701d9a254fa21128f4a5a33aff13de"
        },
        {
          "alg" : "SHA-1",
          "content" : "fd5786fcd0228073e7c9c4ba5739519eceb55ddb"
        },
        {
          "alg" : "SHA-256",
          "content" : "fe93812dc299e17ebcfc12921bd3162c79ecfab84d120d51d4ddc275c7414ff9"
        },
        {
          "alg" : "SHA-512",
          "content" : "abce060bc87b2ed21b8b19c16db1dc5927c35e810189109bff58eaa5adfd048892af809ebd78913bf5c6b01d28f6809bade08f3b2042e1beb247b9eedeae64ea"
        },
        {
          "alg" : "SHA-384",
          "content" : "54ad68c163b4383bf10b88e7aee2e9bba5c36d42416812a675679eb5f030a22a5f651b8d2a5e9b8923833d88861be9f3"
        },
        {
          "alg" : "SHA3-384",
          "content" : "6f75759ad4a8d5816ab7eae09ce076e29b1ed34283f1369e68a2d042e6f68216246cfd9b1e019ed3467058ffd7e94a3c"
        },
        {
          "alg" : "SHA3-256",
          "content" : "ec5b93b393baa94f120a8518eb050e7e0f4138fea29cd12f31695a3220fa465c"
        },
        {
          "alg" : "SHA3-512",
          "content" : "da68a37c26b8a2bd47531b77b67412b12b98a657540512e9d31f4f78a91297b0694be5183bb82441b248cc71302682dcf6385ff352585e11355f95ccb57e6638"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.hadoop/hadoop-common@2.10.2?type=jar",
      "externalReferences" : [
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.hadoop/hadoop-annotations@2.10.2?type=jar",
      "publisher" : "Apache Software Foundation",
      "group" : "org.apache.hadoop",
      "name" : "hadoop-annotations",
      "version" : "2.10.2",
      "description" : "Apache Hadoop Annotations",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a3ff551c2ea8a5e17c3042ee46f1f763"
        },
        {
          "alg" : "SHA-1",
          "content" : "5b406750215dcbd8d322d57696cd52fdb796e528"
        },
        {
          "alg" : "SHA-256",
          "content" : "c47d615be08cb6631985188489ba17d376577b67e3690d6de1eb9d0d611f35e3"
        },
        {
          "alg" : "SHA-512",
          "content" : "a139640e5f7077610e72b939494825ff95c3d6d18c7c121d5d198bd0ba99bb399116633ee25149d915c3474d0afb9ebe101b48cce28d6f5903a233ceebd7cc6b"
        },
        {
          "alg" : "SHA-384",
          "content" : "6dbe2290de667a3f3dab7e3f4a4327010329bd36e0c50a709f01a41b2c9252475237255318f8b174a625cea17f860d7a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "d92bbeb8a79018ca44309cd45b57a0e92933c95eb4de6ed58522d8bd74a4c5232e8c2366d27094c06c83d3551486e6d3"
        },
        {
          "alg" : "SHA3-256",
          "content" : "66deb54a0b53acbecfe453b97699a527dd4378a69ed0112e2e0ed18c60d4a927"
        },
        {
          "alg" : "SHA3-512",
          "content" : "b0f0bbb9e90a8e22947ccb706525314b3a13e6115b0e3b10785f55289b7e80f5bb14e167be0b62d74de365ea01d3a5ec09b6b3615718acb5dea486d664c761b7"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.hadoop/hadoop-annotations@2.10.2?type=jar",
      "externalReferences" : [
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.guava/guava@32.0.0-jre?type=jar",
      "group" : "com.google.guava",
      "name" : "guava",
      "version" : "32.0.0-jre",
      "description" : "Guava is a suite of core and expanded libraries that include utility classes, Google's collections, I/O classes, and much more.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "677b5dfdedfbdbc13bc00478878de7aa"
        },
        {
          "alg" : "SHA-1",
          "content" : "25d6662e20fc04c7b38f8ca3ab5d2f4a19272f80"
        },
        {
          "alg" : "SHA-256",
          "content" : "39f3550b0343d8d19dd4e83bd165b58ea3389d2ddb9f2148e63903f79ecdb114"
        },
        {
          "alg" : "SHA-512",
          "content" : "2dd7aa934e3ac7993ed3e73fece19eee973def97028cfa27dba26ea3c2c8b87fa408894002c19eb48400fb57ed69b2219381984b628b4b063ca7a34e45088575"
        },
        {
          "alg" : "SHA-384",
          "content" : "4a3cd7a8f8bd0206872185b03a3323633f63f0d091e55673c1dac51e47a36f04bef7af31e4259ac45b615c5d5c7932cd"
        },
        {
          "alg" : "SHA3-384",
          "content" : "f52f3f51b6def97b103bf2145310cedd09947fa25223815ffbcf767d6fd94adcade3794201c66fdf4bbf2977f3c0d954"
        },
        {
          "alg" : "SHA3-256",
          "content" : "dd3ae7afcbedd5ba2e076b04f1add8ba91da987d6d28b200e976b3755dc5b039"
        },
        {
          "alg" : "SHA3-512",
          "content" : "93275f02999a5f43d2f142efd01fa145087c3cee8dd3781a230a5b3bc2905bc308f64425dda0ec83f40e1ceb7464cdcf69289eb30caca5aa03ae6510191da89b"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.guava/guava@32.0.0-jre?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/google/guava"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/google/guava/actions"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/google/guava/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/google/guava/guava"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar",
      "group" : "com.google.guava",
      "name" : "failureaccess",
      "version" : "1.0.1",
      "description" : "Contains com.google.common.util.concurrent.internal.InternalFutureFailureAccess and InternalFutures. Most users will never need to use this artifact. Its classes is conceptually a part of Guava, but they're in this separate artifact so that Android libraries can use them without pulling in all of Guava (just as they can use ListenableFuture by depending on the listenablefuture artifact).",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "091883993ef5bfa91da01dcc8fc52236"
        },
        {
          "alg" : "SHA-1",
          "content" : "1dcf1de382a0bf95a3d8b0849546c88bac1292c9"
        },
        {
          "alg" : "SHA-256",
          "content" : "a171ee4c734dd2da837e4b16be9df4661afab72a41adaf31eb84dfdaf936ca26"
        },
        {
          "alg" : "SHA-512",
          "content" : "f8d59b808d6ba617252305b66d5590937da9b2b843d492d06b8d0b1b1f397e39f360d5817707797b979a5bf20bf21987b35333e7a15c44ed7401fea2d2119cae"
        },
        {
          "alg" : "SHA-384",
          "content" : "67659dbd9647ec303d7f15128dc9dba19b98fd8d74758ee3b602451e32c855e236ccaafe08edf4bbfa245f981268440f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "1460875f0331c5fa3791772a6a322a7db180261bc2adacf7271df1fbf3b088a587a755a604c039982cb593c5cfc1f101"
        },
        {
          "alg" : "SHA3-256",
          "content" : "ea86406e75fcd93eafe3cde1b3135ba485f1bb9b75fed98894a0bf1f0aee04f0"
        },
        {
          "alg" : "SHA3-512",
          "content" : "52ac0f487ab5dd27c9f2e54fd1d84c7a620cae9d49be4072aa2b11501787bf4391ddaa13d02eccdf19e8eea46aecbea5f6064b26777c1b836108a280652e04ac"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/google/guava/failureaccess"
        },
        {
          "type" : "build-system",
          "url" : "https://travis-ci.org/google/guava"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/google/guava/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/google/guava/failureaccess"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar",
      "group" : "com.google.guava",
      "name" : "listenablefuture",
      "version" : "9999.0-empty-to-avoid-conflict-with-guava",
      "description" : "An empty artifact that Guava depends on to signal that it is providing ListenableFuture -- but is also available in a second \"version\" that contains com.google.common.util.concurrent.ListenableFuture class, without any other Guava classes. The idea is: - If users want only ListenableFuture, they depend on listenablefuture-1.0. - If users want all of Guava, they depend on guava, which, as of Guava 27.0, depends on listenablefuture-9999.0-empty-to-avoid-conflict-with-guava. The 9999.0-... version number is enough for some build systems (notably, Gradle) to select that empty artifact over the \"real\" listenablefuture-1.0 -- avoiding a conflict with the copy of ListenableFuture in guava itself. If users are using an older version of Guava or a build system other than Gradle, they may see class conflicts. If so, they can solve them by manually excluding the listenablefuture artifact or manually forcing their build systems to use 9999.0-....",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "d094c22570d65e132c19cea5d352e381"
        },
        {
          "alg" : "SHA-1",
          "content" : "b421526c5f297295adef1c886e5246c39d4ac629"
        },
        {
          "alg" : "SHA-256",
          "content" : "b372a037d4230aa57fbeffdef30fd6123f9c0c2db85d0aced00c91b974f33f99"
        },
        {
          "alg" : "SHA-512",
          "content" : "c5987a979174cbacae2e78b319f080420cc71bcdbcf7893745731eeb93c23ed13bff8d4599441f373f3a246023d33df03e882de3015ee932a74a774afdd0782f"
        },
        {
          "alg" : "SHA-384",
          "content" : "caff9b74079f95832ca7f6029346b34b606051cc8c5a4389fac263511d277ada0c55f28b0d43011055b268c6eb7184d5"
        },
        {
          "alg" : "SHA3-384",
          "content" : "e939f08df0545847ea0d3e4b04a114b08499ad069ba8ec9461d1779f87a56e0c37273630a0f4c14e78c348d3ac7eb97f"
        },
        {
          "alg" : "SHA3-256",
          "content" : "1f0a8b1177773b3a8ace839df5eed63cbf56b24a38714898a6e4ed065c42559f"
        },
        {
          "alg" : "SHA3-512",
          "content" : "6b495ecc2a18b17365cb08d124a0da47f04bcdde81927b5245edf3edd8e498c3c3fb92ce6a4127f660bac851bb1d3e4510e5c20d03be47ce99dc296d360db285"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/google/guava/listenablefuture"
        },
        {
          "type" : "build-system",
          "url" : "https://travis-ci.org/google/guava"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/google/guava/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/google/guava/listenablefuture"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.checkerframework/checker-qual@3.33.0?type=jar",
      "group" : "org.checkerframework",
      "name" : "checker-qual",
      "version" : "3.33.0",
      "description" : "checker-qual contains annotations (type qualifiers) that a programmer writes to specify Java code for type-checking by the Checker Framework.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "fc9418b779d9d57dcd52197006cbdb9b"
        },
        {
          "alg" : "SHA-1",
          "content" : "de2b60b62da487644fc11f734e73c8b0b431238f"
        },
        {
          "alg" : "SHA-256",
          "content" : "e316255bbfcd9fe50d165314b85abb2b33cb2a66a93c491db648e498a82c2de1"
        },
        {
          "alg" : "SHA-512",
          "content" : "049c446677b7b386f3fb501bf65e032bdf2b1b29a3f545848035fff2b683cd275380cf302e30eea641af7f0801f779bcda3d82a71d928e4176f564f796640a64"
        },
        {
          "alg" : "SHA-384",
          "content" : "ddf7a0f70421d1ed75e93c0a30434a4862c3905e433223e19861323cf0994e843392b746003040f10a7db6fc960b8aa6"
        },
        {
          "alg" : "SHA3-384",
          "content" : "edf079834fdd23317851318504b2fcc10b055cdb5cc4ada9c773d1b6c815ed6dd193c433d2b83103f070fd521021ff33"
        },
        {
          "alg" : "SHA3-256",
          "content" : "56244f45b03fc2a472b35489324e392e6001fac088d19f33629a87adb74a0575"
        },
        {
          "alg" : "SHA3-512",
          "content" : "e0516c11fe613f258bf9ad39358a8d9fb7c8df57ff9aaca5d6d16055c196fac4ed3b4185f2501a3bdf7aeb1fe142693b1d788bdaa73366be1af15762bb3591a4"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT"
          }
        }
      ],
      "purl" : "pkg:maven/org.checkerframework/checker-qual@3.33.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://checkerframework.org/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/typetools/checker-framework.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0?type=jar",
      "publisher" : "Google LLC",
      "group" : "com.google.errorprone",
      "name" : "error_prone_annotations",
      "version" : "2.18.0",
      "description" : "Error Prone is a static analysis tool for Java that catches common programming mistakes at compile-time.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "64145d0e7fee5a69ed7b84cf402de998"
        },
        {
          "alg" : "SHA-1",
          "content" : "89b684257096f548fa39a7df9fdaa409d4d4df91"
        },
        {
          "alg" : "SHA-256",
          "content" : "9e6814cb71816988a4fd1b07a993a8f21bb7058d522c162b1de849e19bea54ae"
        },
        {
          "alg" : "SHA-512",
          "content" : "3cea86be94bb8ae40d21ad4bf7d7f6b2233e89593b7b741ad84c78840cd3837bb5136f52e62fe9ae0953d7b190c46ad3edc102dfa97b4c7ea472a80206bf5db7"
        },
        {
          "alg" : "SHA-384",
          "content" : "7622eb33f83f03ab32b710b36c2fe836e24c5318f65fb8c0631a99507ca3ae65c2df8e33b63a5ce853b9cab6d9cb32e5"
        },
        {
          "alg" : "SHA3-384",
          "content" : "1ea52a5ce2a9ee1a960dc2a1bbe4b009d4d6a4448498e4cd76401605fa877662911e8c93b2b8bfda57bedc56c83f10a0"
        },
        {
          "alg" : "SHA3-256",
          "content" : "ed53f4295da75753267f241315352c4a39e60796f04e1c0c12d29c3a38be48ed"
        },
        {
          "alg" : "SHA3-512",
          "content" : "8266b313bd4e1170daf60642e838841370d99bc24b2a1f91825ca22037a6a30ff15cc76069f8e8770f1dc12772c277ee1320de67e815041697d93d6d7ba884fb"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://errorprone.info/error_prone_annotations"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/google/error-prone/error_prone_annotations"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.j2objc/j2objc-annotations@2.8?type=jar",
      "group" : "com.google.j2objc",
      "name" : "j2objc-annotations",
      "version" : "2.8",
      "description" : "A set of annotations that provide additional information to the J2ObjC translator to modify the result of translation.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "c50af69b704dc91050efb98e0dff66d1"
        },
        {
          "alg" : "SHA-1",
          "content" : "c85270e307e7b822f1086b93689124b89768e273"
        },
        {
          "alg" : "SHA-256",
          "content" : "f02a95fa1a5e95edb3ed859fd0fb7df709d121a35290eff8b74dce2ab7f4d6ed"
        },
        {
          "alg" : "SHA-512",
          "content" : "f8263868a792b41707c9e7fe6fa5650a14cd93fbeafad20efe3772a3058fc933eb59782ec59e6eb9b9c569aa96da80134ae9fdf7547b69c44a97087efddceeff"
        },
        {
          "alg" : "SHA-384",
          "content" : "e6087ec31fec8289158496ad2ed6ce8472d5d513808a312e0782cedac3b86c37a62a63c0b5ea3839491d109fe9e148a1"
        },
        {
          "alg" : "SHA3-384",
          "content" : "10add34bfeb8612283eef89ac96747a3c9b755acd80ad526e1addaeb7efd6323c52b9bfa1a3d34adb40e1ccb963ee65d"
        },
        {
          "alg" : "SHA3-256",
          "content" : "b3336f8abd6b1f73b9f06d306974557000a000073bfbae6b54fda26d17dbb072"
        },
        {
          "alg" : "SHA3-512",
          "content" : "d376c184a6df071c4e93b913d175b5c2e63deac37105dc20342c19bdda62e4e9598ca1e8bfb4f4fd5cdee6dd5ac3b8af49e2c5193e324d59a59ce1f7adeab627"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.j2objc/j2objc-annotations@2.8?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/google/j2objc/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.sonatype.org/spice/trunk/oss/oss-parent-9/j2objc-annotations"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-math3@3.6.1?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-math3",
      "version" : "3.6.1",
      "description" : "The Apache Commons Math project is a library of lightweight, self-contained mathematics and statistics components addressing the most common practical problems not immediately available in the Java programming language or commons-lang.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "5b730d97e4e6368069de1983937c508e"
        },
        {
          "alg" : "SHA-1",
          "content" : "e4ba98f1d4b3c80ec46392f25e094a6a2e58fcbf"
        },
        {
          "alg" : "SHA-256",
          "content" : "1e56d7b058d28b65abd256b8458e3885b674c1d588fa43cd7d1cbb9c7ef2b308"
        },
        {
          "alg" : "SHA-512",
          "content" : "8bc2438b3b4d9a6be4a47a58410b2d4d0e56e05787ab24badab8cbc9075d61857e8d2f0bffedad33f18f8a356541d00f80a8597b5dedb995be8480d693d03226"
        },
        {
          "alg" : "SHA-384",
          "content" : "95d1186d9ca06a3ea2e6437ddec3a55698e2493d3e72f6f554746b74fa929892bd71a2ab501a4e7b1ce56b7cd64e7ab4"
        },
        {
          "alg" : "SHA3-384",
          "content" : "f85bb3e46a00fc4940a3be1331301302b0eb728e2d1fe2c1842d4761e5a0bc7a420c0c705ae60250ca1c7b03d3694b9e"
        },
        {
          "alg" : "SHA3-256",
          "content" : "919c15ae4b1aef2a58aa6ea4b700bc5562e78dbc382f3393169425ca91ad368c"
        },
        {
          "alg" : "SHA3-512",
          "content" : "dbe54d586c898cdbd7df6c31c131ca3525db17fcea5c7f5da8cbfe617e2afc667289290c76771ec5c9567a56fb2b177b0a31d67abcc656410c90287da4d88999"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-math3@3.6.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://commons.apache.org/proper/commons-math/"
        },
        {
          "type" : "build-system",
          "url" : "https://continuum-ci.apache.org/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/MATH"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://git-wip-us.apache.org/repos/asf?p=commons-math.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/xmlenc/xmlenc@0.52?type=jar",
      "group" : "xmlenc",
      "name" : "xmlenc",
      "version" : "0.52",
      "description" : "xmlenc Library",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "c962b6bc3c8de46795b0ed94851fa9c7"
        },
        {
          "alg" : "SHA-1",
          "content" : "d82554efbe65906d83b3d97bd7509289e9db561a"
        },
        {
          "alg" : "SHA-256",
          "content" : "282ae185fc2ff27da7714af9962897c09cfefafb88072219c4a2f9c73616c026"
        },
        {
          "alg" : "SHA-512",
          "content" : "3a1f30f2bcebca32fce505185cfda1cd90fc2dc8c60fe41584f764fc2b4004422462b32ec88b70c93165ecc45201f8834fc16feb067812daa0759d2096b4a63f"
        },
        {
          "alg" : "SHA-384",
          "content" : "3ed1606ddd4995ffb15ef504195fa4ee73f536b1a232d18532cb53f10f9f8e418fc5e91bf47834bc98a4331981301755"
        },
        {
          "alg" : "SHA3-384",
          "content" : "3fd4abcd6d7a65dec35629144d7205789144cad016b398d96eb972982736bc5926fd28b4ad1d8edea4c55f573469d4cc"
        },
        {
          "alg" : "SHA3-256",
          "content" : "0afd3a376b7817f752a3c85db94337ec3f8249aa09a8dfddb72862c39642ce9a"
        },
        {
          "alg" : "SHA3-512",
          "content" : "562a1d61fdddaf4121c2af27ab065bd558429d307af2c51c8b813ca028cff8edc63b641d2998fc9e2b530b64652533faccb5c4544f0f76dfa254dd4e209155cf"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-4-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/xmlenc/xmlenc@0.52?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://xmlenc.sourceforge.net"
        },
        {
          "type" : "vcs",
          "url" : "http://xmlenc.cvs.sourceforge.net/xmlenc/"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.httpcomponents/httpclient@4.5.13?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.httpcomponents",
      "name" : "httpclient",
      "version" : "4.5.13",
      "description" : "Apache HttpComponents Client",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "40d6b9075fbd28fa10292a45a0db9457"
        },
        {
          "alg" : "SHA-1",
          "content" : "e5f6cae5ca7ecaac1ec2827a9e2d65ae2869cada"
        },
        {
          "alg" : "SHA-256",
          "content" : "6fe9026a566c6a5001608cf3fc32196641f6c1e5e1986d1037ccdbd5f31ef743"
        },
        {
          "alg" : "SHA-512",
          "content" : "3567739186e551f84cad3e4b6b270c5b8b19aba297675a96bcdff3663ff7d20d188611d21f675fe5ff1bfd7d8ca31362070910d7b92ab1b699872a120aa6f089"
        },
        {
          "alg" : "SHA-384",
          "content" : "093ac3e2dde58e34aa70309c7305eb3c9b5be2509a9293f1672494da55479a86bd112e83326746dc7a32855472952b99"
        },
        {
          "alg" : "SHA3-384",
          "content" : "cd6882e7868624164e460f2f3ea01466f863c0dcb902b031c656b57356f563be83b29530df41d88d634ed3d01fc9964d"
        },
        {
          "alg" : "SHA3-256",
          "content" : "710b1d8d7dae0b8e4270756694ca9c83d64965f42d3b4170c609b14d47c2762c"
        },
        {
          "alg" : "SHA3-512",
          "content" : "276fa6a6599dc89382d658115695cf4da6b0d39b34e9c349c17a5dbd64122eaee553bb9ed75c0378ec4a83be157c8aa39370662de3c9b8fd55ebc1dd608383e6"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.httpcomponents/httpclient@4.5.13?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://hc.apache.org/httpcomponents-client"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/HTTPCLIENT"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/hc-httpclient-users/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/httpcomponents-client/tree/4.5.13/httpclient"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.httpcomponents/httpcore@4.4.14?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.httpcomponents",
      "name" : "httpcore",
      "version" : "4.4.14",
      "description" : "Apache HttpComponents Core (blocking I/O)",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "2b3991eda121042765a5ee299556c200"
        },
        {
          "alg" : "SHA-1",
          "content" : "9dd1a631c082d92ecd4bd8fd4cf55026c720a8c1"
        },
        {
          "alg" : "SHA-256",
          "content" : "f956209e450cb1d0c51776dfbd23e53e9dd8db9a1298ed62b70bf0944ba63b28"
        },
        {
          "alg" : "SHA-512",
          "content" : "f16a652f4a7b87dbf7cb16f8590d54a3f719c4c7b2f8883ce59db2d73be4701b64f2ca8a2c45aca6a5dbeaddeedff0c280a03722f70c076e239b645faa54eff9"
        },
        {
          "alg" : "SHA-384",
          "content" : "1cd0a3c120cfb4974573b0f499b2ac8a200aa43506777ed09f9806c6899541605fd355a3b5f44977517dd1cb463e808b"
        },
        {
          "alg" : "SHA3-384",
          "content" : "c771301cda89b2c102b76ba7b46222e0ee1898fa1e53fd4d43a7994e4a234a9804f7221feafe0259f0e9db164a5d4576"
        },
        {
          "alg" : "SHA3-256",
          "content" : "97a9e2fcd1946204dd8643e504c0ff73904957da5df605d703734f95345d5816"
        },
        {
          "alg" : "SHA3-512",
          "content" : "ee6045c3724c2a4983330cf9bc57a46c0fcfc252be455a864953ef5c538ea4aab399c4315f7e5b1a315a48bb8f11cc7492e0735615fd68aa3981fa3ddb4d0a98"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.httpcomponents/httpcore@4.4.14?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://hc.apache.org/httpcomponents-core-ga"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/HTTPCORE"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/hc-httpclient-users/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/httpcomponents-core/tree/4.4.14/httpcore"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-codec/commons-codec@1.15?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-codec",
      "name" : "commons-codec",
      "version" : "1.15",
      "description" : "The Apache Commons Codec package contains simple encoder and decoders for various formats such as Base64 and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a collection of phonetic encoding utilities.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "303baf002ce6d382198090aedd9d79a2"
        },
        {
          "alg" : "SHA-1",
          "content" : "49d94806b6e3dc933dacbd8acb0fdbab8ebd1e5d"
        },
        {
          "alg" : "SHA-256",
          "content" : "b3e9f6d63a790109bf0d056611fbed1cf69055826defeb9894a71369d246ed63"
        },
        {
          "alg" : "SHA-512",
          "content" : "da30a716770795fce390e4dd340a8b728f220c6572383ffef55bd5839655d5611fcc06128b2144f6cdcb36f53072a12ec80b04afee787665e7ad0b6e888a6787"
        },
        {
          "alg" : "SHA-384",
          "content" : "05d0506283716472175d44c2a4766523397bf8a007c18848f9c9a61718cc8aa437f9cb4b91771037ab29a960860b62a0"
        },
        {
          "alg" : "SHA3-384",
          "content" : "12fad4ef78274b06f97b1243cea6f970088abde082d2de9377d915a34b44f7d7d67807c03e59c849b69f1544e2a9a1be"
        },
        {
          "alg" : "SHA3-256",
          "content" : "87be248f33f241121f54aad61a9a460a79eabefbf1b5b0dd22aeb95b581f727e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "8c992c9c569ebaa0bf956a4c5b34fbf5e1ed1c212c2dd896fa216183ee0bcd341e96698af4b9cec7e8880762faa081a3d3a27f51349aa457cb8e373e4f57c788"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-codec/commons-codec@1.15?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-codec/"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CODEC"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/commons-codec"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-net/commons-net@3.1?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-net",
      "name" : "commons-net",
      "version" : "3.1",
      "description" : "Apache Commons Net library contains a collection of network utilities and protocol implementations. Supported protocols include: Echo, Finger, FTP, NNTP, NTP, POP3(S), SMTP(S), Telnet, Whois",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "23c94d51e72f341fb412d6a015e16313"
        },
        {
          "alg" : "SHA-1",
          "content" : "2298164a7c2484406f2aa5ac85b205d39019896f"
        },
        {
          "alg" : "SHA-256",
          "content" : "34a58d6d80a50748307e674ec27b4411e6536fd12e78bec428eb2ee49a123007"
        },
        {
          "alg" : "SHA-512",
          "content" : "66887e7c5077dc6aed5dc85c172e7d80ae13503ab1e000dd76e87626cddb0427f3f9251941af94744d53f6b771e031785ce1362b01595d9723330554213bdfe8"
        },
        {
          "alg" : "SHA-384",
          "content" : "444a0ffddba21cb56369700b5b89641a453adfaffb948e22329011c8eb02ee40b70f57f88c3d10239d49eaf4069c1e25"
        },
        {
          "alg" : "SHA3-384",
          "content" : "c1a19ff6d35406b9363473484f847e995d995d9b6df03fa6e6e6f37b1cb3129baf58975037674c7bdbab79e1d2776246"
        },
        {
          "alg" : "SHA3-256",
          "content" : "2b750264c332b902556ff672997f23c56500eb815c41fc067f1773ba2aecdbd9"
        },
        {
          "alg" : "SHA3-512",
          "content" : "d798769ab7d6950ad16c9d4855de89414b10d8e53356c1c857dc06c408a8fab91c8db1f0529909aa7fa1bca76c38128d9b0b0734dc5f55e0ed6bfaf069ab3e42"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-net/commons-net@3.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://commons.apache.org/net/"
        },
        {
          "type" : "build-system",
          "url" : "http://vmbuild.apache.org/continuum/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/NET"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/commons/proper/net/trunk"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/javax.servlet/servlet-api@2.5?type=jar",
      "group" : "javax.servlet",
      "name" : "servlet-api",
      "version" : "2.5",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "69ca51af4e9a67a1027a7f95b52c3e8f"
        },
        {
          "alg" : "SHA-1",
          "content" : "5959582d97d8b61f4d154ca9e495aafd16726e34"
        },
        {
          "alg" : "SHA-256",
          "content" : "c658ea360a70faeeadb66fb3c90a702e4142a0ab7768f9ae9828678e0d9ad4dc"
        },
        {
          "alg" : "SHA-512",
          "content" : "363ba5590436ab82067b7a2e14b481aeb2b12ca4048d7a1519a2e549b2d3c09ddf718ac64dc2be6c2fc24c51fdc9c8160261329403113369588ce27d87771db6"
        },
        {
          "alg" : "SHA-384",
          "content" : "1d8b8aa3ad4edb7611a43e4e5b0f9538aa70df1d6ecf09cb977f6fb963797850d4350778530f2082aac9bedf09a27824"
        },
        {
          "alg" : "SHA3-384",
          "content" : "2c62a7bf3f321aaa2ccd80e9fa633eb36a672a208c79e117a91e9812e3abfd7df3934930191d109be65441deed2cbd20"
        },
        {
          "alg" : "SHA3-256",
          "content" : "319bcec5b7eb366f63655cdf3cbdaa385e160f61edf3cbd94938e53b59905995"
        },
        {
          "alg" : "SHA3-512",
          "content" : "dd44fc227d6e790255376ef0473746725fa7703d38ae3805715910d1846f41ac789acdc2d2ba1ebde874f7ee32d906608966612c90c618872aed3fca8e28e952"
        }
      ],
      "purl" : "pkg:maven/javax.servlet/servlet-api@2.5?type=jar"
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.mortbay.jetty/jetty@6.1.26?type=jar",
      "publisher" : "Mort Bay Consulting",
      "group" : "org.mortbay.jetty",
      "name" : "jetty",
      "version" : "6.1.26",
      "description" : "Jetty server core",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "12b65438bbaf225102d0396c21236052"
        },
        {
          "alg" : "SHA-1",
          "content" : "2f546e289fddd5b1fab1d4199fbb6e9ef43ee4b0"
        },
        {
          "alg" : "SHA-256",
          "content" : "21091d3a9c1349f640fdc421504a604c040ed89087ecc12afbe32353326ed4e5"
        },
        {
          "alg" : "SHA-512",
          "content" : "4646b044a05424f1df113c5fddfc066c1fef47933b631efe63701170acc197e531330e583ae0e5000cf8ad38151c91a9e61b2864876de05cfd3ba710481ed484"
        },
        {
          "alg" : "SHA-384",
          "content" : "670285f35903def2e22a3e2430f36d47599e22d8cd96f8aad6c67704076d3648f1b4b790ef13cb0a5bbfbb3cc02e0d3e"
        },
        {
          "alg" : "SHA3-384",
          "content" : "edd96ee76c3821720879c8b8e2ee4a8174fa6b75b54413a9bccbf05223cddfedbbf0693ef6d1e9831e1b3fc44dfb17f8"
        },
        {
          "alg" : "SHA3-256",
          "content" : "9b7c499beb391e8b09b9b24097638ca1f347a0a65b6624899bb8c0272ac59342"
        },
        {
          "alg" : "SHA3-512",
          "content" : "0e3dd9a54c0a37bb9e9eb52d0c9de3b957c8fb7649394d8c547e2fe2099ac892b6145bf630165358a2b83d6ba2f25802a9395615b7c519ff0b84a7cbfa36d3f8"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        },
        {
          "license" : {
            "id" : "EPL-1.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.mortbay.jetty/jetty@6.1.26?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.eclipse.org/jetty/jetty-parent/project/modules/jetty"
        },
        {
          "type" : "distribution-intake",
          "url" : "http://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://jira.codehaus.org/browse/JETTY"
        },
        {
          "type" : "mailing-list",
          "url" : "http://dev.eclipse.org/mhonarc/lists/jetty-dev/maillist.html"
        },
        {
          "type" : "vcs",
          "url" : "http://fisheye.codehaus.org/viewrep/jetty/modules/jetty/"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.mortbay.jetty/jetty-util@6.1.26?type=jar",
      "publisher" : "Mort Bay Consulting",
      "group" : "org.mortbay.jetty",
      "name" : "jetty-util",
      "version" : "6.1.26",
      "description" : "Utility classes for Jetty",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "450fedce4f7f8ad3761577b10a664200"
        },
        {
          "alg" : "SHA-1",
          "content" : "e5642fe0399814e1687d55a3862aa5a3417226a9"
        },
        {
          "alg" : "SHA-256",
          "content" : "9b974ce2b99f48254b76126337dc45b21226f383aaed616f59780adaf167c047"
        },
        {
          "alg" : "SHA-512",
          "content" : "695bfbfc0ecd8f410fea7c44451f1765a610ccfe427d91e2cf900cab18068e89ad98b75dc37d0fec9b83255e698fb7e26d7089c91dd1d85085e99ca7a9af0ec5"
        },
        {
          "alg" : "SHA-384",
          "content" : "056ad2d0482a77607ed1b135a745ad443eb2a66b0b0bd9786f648a620e40712cdca6dbf3db503bb7e9974269a48f0113"
        },
        {
          "alg" : "SHA3-384",
          "content" : "3d7f0ba19c8439b0357bc1e3101c607ea9a04d91dc3388c26da096ded31edbc4450ab738a76a5fab5025079a2df61ae0"
        },
        {
          "alg" : "SHA3-256",
          "content" : "3f39d7eca8fc8984ec5136b8bbb5dbf120191cd4a42ea4ee17da0a73f73db9a4"
        },
        {
          "alg" : "SHA3-512",
          "content" : "15d9bbf0ea9dc9e6d3aee5c0ad2aed75b436a4dd15f6a8726d8b7a6d4e9a935b109981d4ea284fc098a843553716fbbf9531c94d8f411f69b74853a6300b2a0e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        },
        {
          "license" : {
            "id" : "EPL-1.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.mortbay.jetty/jetty-util@6.1.26?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.eclipse.org/jetty/jetty-parent/project/jetty-util"
        },
        {
          "type" : "distribution-intake",
          "url" : "http://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://jira.codehaus.org/browse/JETTY"
        },
        {
          "type" : "mailing-list",
          "url" : "http://dev.eclipse.org/mhonarc/lists/jetty-dev/maillist.html"
        },
        {
          "type" : "vcs",
          "url" : "http://fisheye.codehaus.org/viewrep/jetty/jetty-util/"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.mortbay.jetty/jetty-sslengine@6.1.26?type=jar",
      "publisher" : "Mort Bay Consulting",
      "group" : "org.mortbay.jetty",
      "name" : "jetty-sslengine",
      "version" : "6.1.26",
      "description" : "Parent pom for Jetty at Codehaus",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "d3bea45d6939e57fccf450a914fe4e1a"
        },
        {
          "alg" : "SHA-1",
          "content" : "60367999cee49a3b09fa86bdcb52310b6c896014"
        },
        {
          "alg" : "SHA-256",
          "content" : "9c5f6bb168ba01b95d250b57f061c8094e1ce9c89ae4e773492bacb17192ea87"
        },
        {
          "alg" : "SHA-512",
          "content" : "799b56fabb7f1dd299efe33be881a1253fd38f24764d2c478f08d00771f8176b3fe0839b71da7e67d5d6e32bfe10378284dd8701ec57233eb354cca88639ce44"
        },
        {
          "alg" : "SHA-384",
          "content" : "9c2a3838948b3d10eb6f9b72d2dd0b58ab52b3c392d4f0bdf76397c643112bc7a6a35571167d3b6de05df90e9120a6d7"
        },
        {
          "alg" : "SHA3-384",
          "content" : "a332e74cad375e90dfdece5e3fdd919d44c9992423a37bd30ae2c38d3acb9d3ec622fa2a2c51f63635ab5ebe13723ecf"
        },
        {
          "alg" : "SHA3-256",
          "content" : "4f9e1f9ef626efbcf1f8b17ead92a003b0f693905dd8ca39ed43cd2e6ac53d5e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "9522df250bb97b51d5051f72ee0d676febfe3512a3b6919d2e1a08242ef25d0cd6aa89a9f608df29bd185e9a2d93880ce42f3be51ad18a184cc461d359a3c6e1"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.mortbay.jetty/jetty-sslengine@6.1.26?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://jetty.mortbay.org"
        },
        {
          "type" : "distribution-intake",
          "url" : "http://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://jira.codehaus.org/browse/JETTY"
        },
        {
          "type" : "mailing-list",
          "url" : "http://dev.eclipse.org/mhonarc/lists/jetty-dev/maillist.html"
        },
        {
          "type" : "vcs",
          "url" : "http://fisheye.codehaus.org/viewrep/jetty/jetty-sslengine/"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/javax.servlet.jsp/jsp-api@2.1?type=jar",
      "group" : "javax.servlet.jsp",
      "name" : "jsp-api",
      "version" : "2.1",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b8a34113a3a1ce29c8c60d7141f5a704"
        },
        {
          "alg" : "SHA-1",
          "content" : "63f943103f250ef1f3a4d5e94d145a0f961f5316"
        },
        {
          "alg" : "SHA-256",
          "content" : "545f4e7dc678ffb4cf8bd0fd40b4a4470a409a787c0ea7d0ad2f08d56112987b"
        },
        {
          "alg" : "SHA-512",
          "content" : "f320915bf27b05f5f93a69572ff0dad6e68f030b6f0fcb1832f80f7ffe56dba9e0575dd8e6b0425b3704ac75ea2b4a7656bdad64b8cc8610bfdcd5bc1989dcc5"
        },
        {
          "alg" : "SHA-384",
          "content" : "d4017a6b2b171512c97a00a9d84dbe60dd48b233964f1d4c1baa260ff65a7e901c896d38b81a57c98de977b49f0273f4"
        },
        {
          "alg" : "SHA3-384",
          "content" : "1189f5774712edc77ac37ae5aa9570156f78050003da49c182e1a84651f1149bbdf13e1d752dbd16fe637a9869ec5660"
        },
        {
          "alg" : "SHA3-256",
          "content" : "68d8a993b6f6c8615f62800c33ad6aecb836bda091da097c640129472f262340"
        },
        {
          "alg" : "SHA3-512",
          "content" : "09175d9a46ef53e85cf68a779ad515f69f4643d3cef6b96a8f147283d8a61e533ab2cca1f217365180dcbcbd67f8d969ebcae085307ba4579f1f6a73cb657fe6"
        }
      ],
      "purl" : "pkg:maven/javax.servlet.jsp/jsp-api@2.1?type=jar"
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.sun.jersey/jersey-core@1.9?type=jar",
      "publisher" : "Oracle Corporation",
      "group" : "com.sun.jersey",
      "name" : "jersey-core",
      "version" : "1.9",
      "description" : "Jersey is the open source (under dual CDDL+GPL license) JAX-RS (JSR 311) production quality Reference Implementation for building RESTful Web services.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "73d196595f5e410a37c0a4337350ceb7"
        },
        {
          "alg" : "SHA-1",
          "content" : "8341846f18187013bb9e27e46b7ee00a6395daf4"
        },
        {
          "alg" : "SHA-256",
          "content" : "2c6d0ec88fc8c36cb41637d9c00d0698c22cb6b6a137fa526ef782e00d2265bc"
        },
        {
          "alg" : "SHA-512",
          "content" : "9009037551b1a472ebfdf21697b22927028420607764fe91b9283488b54dbb5012e947328fbb0bfcd5393adde76ad1823baf52edd4e8b5a3bf479730c32f1dbb"
        },
        {
          "alg" : "SHA-384",
          "content" : "99509d6dfe02dd7131cbbb3b5b95d44ba3cc1b55acee760685d8616bcaad63fa2ec3cc432285799511a0838957326267"
        },
        {
          "alg" : "SHA3-384",
          "content" : "ec891d4dbbc2ecca1dc2eade1ee7db476683ac09db9c2f2e33142e58c85ebb77215ff98ffbe32d12cac5d1d01a5c442e"
        },
        {
          "alg" : "SHA3-256",
          "content" : "0217456004fa2a6e71c54630f4c8937130aa3fda026b84817a59f3d3fe3d7eab"
        },
        {
          "alg" : "SHA3-512",
          "content" : "f086bf1917aee7d14d76cb5897a657b203dc5d6a221388e2045ebd6dcb90ca1af466bd5b9bb6c6a894865818d2f9f6744d13247350d43afdb150d9c8cf5499f3"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "CDDL-1.1"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl" : "pkg:maven/com.sun.jersey/jersey-core@1.9?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://jersey.java.net/jersey-core/"
        },
        {
          "type" : "build-system",
          "url" : "http://hudson.glassfish.org/job/Jersey-trunk-multiplatform/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://maven.java.net/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://java.net/jira/browse/JERSEY/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://java.net/projects/jersey/lists/users/archive"
        },
        {
          "type" : "vcs",
          "url" : "http://java.net/projects/jersey/sources/svn/show/trunk/jersey/jersey-core"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.sun.jersey/jersey-json@1.9?type=jar",
      "publisher" : "Oracle Corporation",
      "group" : "com.sun.jersey",
      "name" : "jersey-json",
      "version" : "1.9",
      "description" : "Jersey is the open source (under dual CDDL+GPL license) JAX-RS (JSR 311) production quality Reference Implementation for building RESTful Web services.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "17ca6b0d49ed8db159b7827b6defa6b6"
        },
        {
          "alg" : "SHA-1",
          "content" : "1aa73e1896bcc7013fed247157d7f676226eb432"
        },
        {
          "alg" : "SHA-256",
          "content" : "cc5d535f43cef0d1c467240961aae35801a837ab010319e741b2c7a6658f3fd6"
        },
        {
          "alg" : "SHA-512",
          "content" : "266e6ed47218316f4dd3bb9122d291d077fb5af0f0b649340c9e3724e0b8bc02e6410207a154c8dffac891ad817a241caaf80ff66604200993dbbe5ca9a79b9a"
        },
        {
          "alg" : "SHA-384",
          "content" : "6f05b0ce1da3122567a9c468e3720d54eade2860c61c0793928ec83850ffc1129093e5d6ce97e5804d2b8246045f5b71"
        },
        {
          "alg" : "SHA3-384",
          "content" : "5edc6c6ebd5d2376e6be0623c76a7bf86991b7e862fecb7deb0b6807756e5af2605fe8c4d06fc0ef10dc6465ae5b8b7a"
        },
        {
          "alg" : "SHA3-256",
          "content" : "146f85e2c521aec2a5ba77bc011475ae6693c5238ecf8d090d05f4706417fde5"
        },
        {
          "alg" : "SHA3-512",
          "content" : "1a0bb9d2678ef74c30859cc2b1a9197770fbd5904a0186619b3916f01d539c8dbab887f4d4a9ef8b049a8d84922e53696ea523b9e6c921ee4f847199d07a563f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "CDDL-1.1"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl" : "pkg:maven/com.sun.jersey/jersey-json@1.9?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://jersey.java.net/jersey-json/"
        },
        {
          "type" : "build-system",
          "url" : "http://hudson.glassfish.org/job/Jersey-trunk-multiplatform/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://maven.java.net/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://java.net/jira/browse/JERSEY/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://java.net/projects/jersey/lists/users/archive"
        },
        {
          "type" : "vcs",
          "url" : "http://java.net/projects/jersey/sources/svn/show/trunk/jersey/jersey-json"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.jettison/jettison@1.1?type=jar",
      "group" : "org.codehaus.jettison",
      "name" : "jettison",
      "version" : "1.1",
      "description" : "A StAX implementation for JSON.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "fc80e0aabd516c54739262c3d618303a"
        },
        {
          "alg" : "SHA-1",
          "content" : "1a01a2a1218fcf9faa2cc2a6ced025bdea687262"
        },
        {
          "alg" : "SHA-256",
          "content" : "377940288b0643c48780137f6f68578937e1ea5ca2b73830a820c50a7b7ed801"
        },
        {
          "alg" : "SHA-512",
          "content" : "075137cc1acbcdc4f07ac421d0f8fef7af5ac015520580aa3b908f22463b2ba86ba6be3b7511561d0459f1f14fac94617653c3777342ee0c857016baa7120ee9"
        },
        {
          "alg" : "SHA-384",
          "content" : "6fade925eed045ef42898f7e5cf72ac71e782ac802a9610aba57c78a39e16c7422eea88fd614e26ebe9e3e2e52bb4d2f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "ed287c5346fc063603377b96bfad292cbe28c5604c120acb0405de2e3def3a42da6deafa6d070fbb106482786a791768"
        },
        {
          "alg" : "SHA3-256",
          "content" : "7ab16df7e0316871e5650ca1884fb4ac8b8acdfcdb0bda834729d83b44f8c993"
        },
        {
          "alg" : "SHA3-512",
          "content" : "f96810a0475fdb589211d57ed374b3d4d1b897f8b8b715088d0973fc29eb11f6797eed065de86c9acda29529ef1785c8c8f1d2b3d194148a18e9e1f3488d0ac4"
        }
      ],
      "purl" : "pkg:maven/org.codehaus.jettison/jettison@1.1?type=jar",
      "externalReferences" : [
        {
          "type" : "distribution-intake",
          "url" : "dav:https://dav.codehaus.org/repository/jettison/"
        },
        {
          "type" : "vcs",
          "url" : "https://svn.codehaus.org/jettison/tags/jettison-1.1"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.sun.xml.bind/jaxb-impl@2.2.3-1?type=jar",
      "publisher" : "Oracle Corporation",
      "group" : "com.sun.xml.bind",
      "name" : "jaxb-impl",
      "version" : "2.2.3-1",
      "description" : "JAXB (JSR 222) reference implementation",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1b689e7f87caf2615c0f6a47831d0342"
        },
        {
          "alg" : "SHA-1",
          "content" : "56baae106392040a45a06d4a41099173425da1e6"
        },
        {
          "alg" : "SHA-256",
          "content" : "fa3e1499b192c310312bf02881274b68394aaea4c9563e6c554cc406ae644ff8"
        },
        {
          "alg" : "SHA-512",
          "content" : "6f08a9d34bd66ceb0e4cc6cdd782423a8a7ab775808e90b6c872977c653cd3e2c539a78554a5c8ef9402092ac4fdceac56b77e76b3c2d800d5ee97db0301a683"
        },
        {
          "alg" : "SHA-384",
          "content" : "223367a9c31cfbd1a407718ad30b176e32874cb6cd6a63e1c4df78ac74ccf027179f0e98639dc595a4ae408b40db99e4"
        },
        {
          "alg" : "SHA3-384",
          "content" : "1c0e7be9683e61b8626065910045eedcffa85439545a2d73c0c53c5c80ddff0d5b56f6ed569c64db25d6817c8804d7ca"
        },
        {
          "alg" : "SHA3-256",
          "content" : "c9896a8b3078515bfa5cec60e9bd90ad6fb5c39678353bd31d9e6055b1241943"
        },
        {
          "alg" : "SHA3-512",
          "content" : "5d44345d5ffb7be42f0785accf35f20fcf3fe09277bb0b2ea5dd27f1d7da2590d0df53286043f40343cf098544d5592c4acf875de703c66fe4dfb7815bddfd62"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "CDDL-1.1"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl" : "pkg:maven/com.sun.xml.bind/jaxb-impl@2.2.3-1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://jaxb.java.net/"
        },
        {
          "type" : "distribution-intake",
          "url" : "svn:https://svn.java.net/svn/maven2-repository~svn/trunk/repository"
        },
        {
          "type" : "vcs",
          "url" : "https://svn.java.net/svn/jaxb~version2/jaxb-ri"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.jackson/jackson-jaxrs@1.8.3?type=jar",
      "publisher" : "FasterXML",
      "group" : "org.codehaus.jackson",
      "name" : "jackson-jaxrs",
      "version" : "1.8.3",
      "description" : "Jax-RS provider for JSON content type, based on Jackson JSON processor's data binding functionality.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "7634227657d2414a0c65e0818b30d5ed"
        },
        {
          "alg" : "SHA-1",
          "content" : "3604ca9f572170e2ef5813141ec1f0e0100efd19"
        },
        {
          "alg" : "SHA-256",
          "content" : "cadd12137aaf121722630d00117df63e34afc5b3dab5be68c921740114a05fba"
        },
        {
          "alg" : "SHA-512",
          "content" : "2b18eb8573a6f4e2e790aaf169f5b7529d13d0d9bdd0a93335fffde52cd968ec3bda471d6fdde5b8eb41a72640b13fa0765bc20908868e7cf920d461b7645249"
        },
        {
          "alg" : "SHA-384",
          "content" : "d4da3574d6b397dd75d3374aae9efb1af630430a764fbfd164013907c4e46d4ea01e4c0ed14638fb5a74b78349870103"
        },
        {
          "alg" : "SHA3-384",
          "content" : "ac83b503db651627684555f54fa78160f2c94849743f52a84f741dc5513807fb2ad88c0d323cc5a5b22143587f5ec3b1"
        },
        {
          "alg" : "SHA3-256",
          "content" : "6bb47093b3fc0b48503710afb8932852aa603a7295b19979f58423939c8664a5"
        },
        {
          "alg" : "SHA3-512",
          "content" : "a2580bdb993c3e44a1fc8e3e5a95ac19f814149b3dec13d23515b2794489837132377eae9cc794075108bab250e3db1e77033ffb54ef7a2e5957a0e75a84c128"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        },
        {
          "license" : {
            "name" : "GNU Lesser General Public License (LGPL), Version 2.1",
            "url" : "http://www.fsf.org/licensing/licenses/lgpl.txt"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.jackson/jackson-jaxrs@1.8.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://jackson.codehaus.org"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://jira.codehaus.org/browse/JACKSON"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.jackson/jackson-xc@1.8.3?type=jar",
      "publisher" : "FasterXML",
      "group" : "org.codehaus.jackson",
      "name" : "jackson-xc",
      "version" : "1.8.3",
      "description" : "Extensions that provide interoperability support for Jackson JSON processor's data binding functionality.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0ee32b08580654d69147ecfab0321270"
        },
        {
          "alg" : "SHA-1",
          "content" : "1226667dcdb7c259b3ee07e112ed83446554516e"
        },
        {
          "alg" : "SHA-256",
          "content" : "e25789f6d6e0c60c0f46f89d33586190bef23626d9efd3b5d41fe42b45afec96"
        },
        {
          "alg" : "SHA-512",
          "content" : "5b23009a505ab04a43025e01d5905d57c03ef61417165fb08a67280a23ed15a8fc34a4b91fb50b26c75af8cb22bbbdb4917d39bd99af1806d2fe610453c137fb"
        },
        {
          "alg" : "SHA-384",
          "content" : "148dc3970f2219e527d316aeeb55cdeb8497ba04e2181ad928709805cf13394a60f4d5913637d0e9a3e32c7f5e55b043"
        },
        {
          "alg" : "SHA3-384",
          "content" : "3f40ade27620ce97b249bcffda2dfd2d713151a535bceb11b0fcc6be3be50d3df2b2e03a0a4124dc3ca1805cf3f37ce1"
        },
        {
          "alg" : "SHA3-256",
          "content" : "5fbf6a33eeb70bd79208d7ce4609f242d2a08fced37c21db9e8d15c342ebb126"
        },
        {
          "alg" : "SHA3-512",
          "content" : "e842d332c204831f646cf7ac1ec227640e8ab470ca8dfc46aad2ca5d550444d521acf56861343f4a6fbd1aff99eabb3880ba863377a74df4029cdde4b1238008"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        },
        {
          "license" : {
            "name" : "GNU Lesser General Public License (LGPL), Version 2.1",
            "url" : "http://www.fsf.org/licensing/licenses/lgpl.txt"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.jackson/jackson-xc@1.8.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://jackson.codehaus.org"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://jira.codehaus.org/browse/JACKSON"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.sun.jersey/jersey-server@1.9?type=jar",
      "publisher" : "Oracle Corporation",
      "group" : "com.sun.jersey",
      "name" : "jersey-server",
      "version" : "1.9",
      "description" : "Jersey is the open source (under dual CDDL+GPL license) JAX-RS (JSR 311) production quality Reference Implementation for building RESTful Web services.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0c98f6cca5df8197b310a0d1d89bb34a"
        },
        {
          "alg" : "SHA-1",
          "content" : "3a6ea7cc5e15c824953f9f3ece2201b634d90d18"
        },
        {
          "alg" : "SHA-256",
          "content" : "3ded91b198077561bd51f6c0442c9cd70b754d8b31b61afaf448bda9d01848f0"
        },
        {
          "alg" : "SHA-512",
          "content" : "9354a94b5044519e6f8f08c89c5d7c57e1041555bc333f401dc18ea51c21c0db03838a55bdb43bbbc0e37a8c3f1f0bcaf4164c5284a5f096af61b549dfe3eec8"
        },
        {
          "alg" : "SHA-384",
          "content" : "231ac671ba61b142d940a3d88919650c701c9cf0cacf91d2f29c450349f486d8e0eab76dbdc73baa98ccda3acaa77101"
        },
        {
          "alg" : "SHA3-384",
          "content" : "d5792bafb84a124b86625cae09072ef0958da59a4ea418ddd57e24dfb91d08d6a1b43ec29ab5586ae437284bf3c85447"
        },
        {
          "alg" : "SHA3-256",
          "content" : "495463f7c0874f77b54bd492889e2c2df0476fec28eb2e9d3b31c8d6619857a5"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c065a652d816f93d5c8fa8eebae4298574898e7f31ae889ca024e8a284df6d630f64ec2313fc73db3b017946ce5fff271a0e0a802e900b71bcf15614521d2315"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "CDDL-1.1"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl" : "pkg:maven/com.sun.jersey/jersey-server@1.9?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://jersey.java.net/jersey-server/"
        },
        {
          "type" : "build-system",
          "url" : "http://hudson.glassfish.org/job/Jersey-trunk-multiplatform/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://maven.java.net/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://java.net/jira/browse/JERSEY/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://java.net/projects/jersey/lists/users/archive"
        },
        {
          "type" : "vcs",
          "url" : "http://java.net/projects/jersey/sources/svn/show/trunk/jersey/jersey-server"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/asm/asm@3.1?type=jar",
      "publisher" : "ObjectWeb",
      "group" : "asm",
      "name" : "asm",
      "version" : "3.1",
      "description" : "A very small and fast Java bytecode manipulation framework",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b9b8d2d556f9458aac8c463fd511f86d"
        },
        {
          "alg" : "SHA-1",
          "content" : "c157def142714c544bdea2e6144645702adf7097"
        },
        {
          "alg" : "SHA-256",
          "content" : "333ff5369043975b7e031b8b27206937441854738e038c1f47f98d072a20437a"
        },
        {
          "alg" : "SHA-512",
          "content" : "074612f145765d33c449887a29dd0791205881ba42d613e52b360ca53bd47c5f9835049de8fc6a384041de2e73bd271b6177c2225e2f72853a88359f6c10b14d"
        },
        {
          "alg" : "SHA-384",
          "content" : "c4ae90a52b7a23cbca12a01777e140e3f3f7943634611c23166a60d69a90f1edfeac8b210979f055fab6d1526d287ba4"
        },
        {
          "alg" : "SHA3-384",
          "content" : "04cc814a6d1d69266aba09985cd6ac04c5bc99964b099c88d89690ab656d53044a6a6bea6b79a37dc41c3202364888b6"
        },
        {
          "alg" : "SHA3-256",
          "content" : "0d52b7d9c8c5e047e79df73f4a4883e84eb324739748f1aac584e2e76b3968e6"
        },
        {
          "alg" : "SHA3-512",
          "content" : "5e0956cb7cd39ac3d6dd773d64a1a40f8a5b83c95306c627214572b996fd37188d9382e2b7c6579c3b93d04a9179ea3b479664de3d54ae9f0bf254de808d8c9c"
        }
      ],
      "purl" : "pkg:maven/asm/asm@3.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://asm.objectweb.org/asm/"
        },
        {
          "type" : "distribution",
          "url" : "http://mojo.codehaus.org/my-project"
        },
        {
          "type" : "distribution-intake",
          "url" : "dav:https://maven.forge.objectweb.org:8002/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://forge.objectweb.org/tracker/?group_id=23"
        },
        {
          "type" : "mailing-list",
          "url" : "http://www.ow2.org/wws/arc/asm"
        },
        {
          "type" : "vcs",
          "url" : "http://cvs.forge.objectweb.org/cgi-bin/viewcvs.cgi/asm/asm/asm/"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-logging/commons-logging@1.1.3?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-logging",
      "name" : "commons-logging",
      "version" : "1.1.3",
      "description" : "Commons Logging is a thin adapter allowing configurable bridging to other, well known logging systems.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "92eb5aabc1b47287de53d45c086a435c"
        },
        {
          "alg" : "SHA-1",
          "content" : "f6f66e966c70a83ffbdb6f17a0919eaf7c8aca7f"
        },
        {
          "alg" : "SHA-256",
          "content" : "70903f6fc82e9908c8da9f20443f61d90f0870a312642991fe8462a0b9391784"
        },
        {
          "alg" : "SHA-512",
          "content" : "e5d1fc8ec4544e1fa0f7c4aae8dbcca466c4987bc92fbbc430b054b10d646b745add4a754b1be9d50edd64330c798c53173a97289db57a966312e16f934e9d1f"
        },
        {
          "alg" : "SHA-384",
          "content" : "00dc41783f4081585e20adcfe83fd4dbb6b5a27236ee633d7e53dedcbca83ba5e5f0ca68d31f95e9c724b365e4c67499"
        },
        {
          "alg" : "SHA3-384",
          "content" : "6915e597821aa2fed7f4b05f4de3476364074ab5cee7e13b4eb5b94a9d297b58cb391c6b730e6ea0d4e81e323a90d002"
        },
        {
          "alg" : "SHA3-256",
          "content" : "c49c80e2576bf037fc871e70df8708f5e35c0977a907e966c0334e9fac17b297"
        },
        {
          "alg" : "SHA3-512",
          "content" : "b74b6e6d771005014614774d059a4e1ceab929c0678839846d143e56e4724455242ffa3d5d411c6554a41e1f66fe1f94c51472d80c07d44c02a2f9a6715d8c7d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-logging/commons-logging@1.1.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://commons.apache.org/proper/commons-logging/"
        },
        {
          "type" : "build-system",
          "url" : "http://vmbuild.apache.org/continuum/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/LOGGING"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/repos/asf/commons/proper/logging/trunk"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/net.java.dev.jets3t/jets3t@0.9.0?type=jar",
      "group" : "net.java.dev.jets3t",
      "name" : "jets3t",
      "version" : "0.9.0",
      "description" : "JetS3t is a free, open-source Java toolkit and application suite for Amazon Simple Storage Service (Amazon S3), Amazon CloudFront content delivery network, and Google Storage for Developers.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "22559a7c686b19534707228decc3c6d7"
        },
        {
          "alg" : "SHA-1",
          "content" : "792bc96ee7e57b89f472aa0cb5a31015b9f59c96"
        },
        {
          "alg" : "SHA-256",
          "content" : "e89893fc754b252af717d7d14accda946f7dfcfc1e293fd3e04725163d661bd7"
        },
        {
          "alg" : "SHA-512",
          "content" : "79fcaa8be8980b2fc9d8463854130eb7a7d6110fa795e73ac01d9abad23ec1588178e9d557d84f05b8e0b4ac909ae65eed1ff92e35c889208af003e195ff23c4"
        },
        {
          "alg" : "SHA-384",
          "content" : "c6e4516169d4d1c2241c3df7dd57e159cbe603cd746a125fff201cd097a351d82d6ca30e93aeee19a73bca0a009e94e0"
        },
        {
          "alg" : "SHA3-384",
          "content" : "6f5c6938b1c058addb30e83f29d2fd5caa1c85fa388a6e973fb323a769d409865fca658bd5e5657c2c5c12391165e59f"
        },
        {
          "alg" : "SHA3-256",
          "content" : "a796b73cd29be0501cd93cd9aa4472fd1636fec60373648b958d48393ddf5b82"
        },
        {
          "alg" : "SHA3-512",
          "content" : "6aacb4e00e35fe9891313287be52a0d490a22726508ad1e539e01868f2b5f730020301c9cee77386851854ee5adc4c2568f7fe15056ba5a8911f2f6c3d84d744"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/net.java.dev.jets3t/jets3t@0.9.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.jets3t.org"
        },
        {
          "type" : "vcs",
          "url" : "http://bitbucket.org/jmurty/jets3t/src"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.jamesmurty.utils/java-xmlbuilder@1.2?type=jar",
      "group" : "com.jamesmurty.utils",
      "name" : "java-xmlbuilder",
      "version" : "1.2",
      "description" : "XML Builder is a utility that creates simple XML documents using relatively sparse Java code",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "da26c3029d677da3f1f281e55ab82c23"
        },
        {
          "alg" : "SHA-1",
          "content" : "fef5136a82e7ca7305f95255f12cc8cc5036375d"
        },
        {
          "alg" : "SHA-256",
          "content" : "cc582a0fa5b803ee9d4987eb9407054c275fb98a6d57c2712c83becbd4ee0e47"
        },
        {
          "alg" : "SHA-512",
          "content" : "6cd49b8b570ed92d5d7be6bf3faa9b56b5b8d3a86c9ccd04669c48f11fbd61324eea03944220b22ad3041923a5195e3dd4e5fb72785d6d812b956999a6eeb104"
        },
        {
          "alg" : "SHA-384",
          "content" : "af2108536ddce7c72b216cff9cc5d49a1388ab53c155366a4ef2615f2f03dd35a0bc84d536b71acaec5c5e3db027f272"
        },
        {
          "alg" : "SHA3-384",
          "content" : "ff4247d0075c546bfaaf036ec5a9cfbce946ce23dbf38a168c8812092939dda611c2c5ae080b87ef61f90694b876b2ff"
        },
        {
          "alg" : "SHA3-256",
          "content" : "0feb56979ad689aa99741b133f031e49085f2f70f5a8b29a6129577910957bc5"
        },
        {
          "alg" : "SHA3-512",
          "content" : "2edc0f7db286f7e7a955806688dfbcc0b087ab719251f1e5b4e3758986f2b4ef44f48ea3a3bf223cd0d4ba5029a661b2b6ce99c6e1729658f867978f8f5f1a4f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.jamesmurty.utils/java-xmlbuilder@1.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/jmurty/java-xmlbuilder"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/jmurty/java-xmlbuilder"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/net.iharder/base64@2.3.8?type=jar",
      "group" : "net.iharder",
      "name" : "base64",
      "version" : "2.3.8",
      "description" : "A Java class providing very fast Base64 encoding and decoding in the form of convenience methods and input/output streams.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "9a9828f0caa016a2f3e0c90fe3af771b"
        },
        {
          "alg" : "SHA-1",
          "content" : "7d2e2cea90cc51169fd02a35888820ab07f6d02f"
        },
        {
          "alg" : "SHA-256",
          "content" : "bbf41fda22877a538f6bc2d5ad0aa372a7ddf4a756af3386aa09d3d4eea84f7f"
        },
        {
          "alg" : "SHA-512",
          "content" : "5d19172215284c6099cecfe8cfbf1b7d429085aee0e65f0fb3be2ab7a9d0777e0a1e8fe118a4a610e2fc81391fca503af8c04b3cceb544b9d4520baf456705ea"
        },
        {
          "alg" : "SHA-384",
          "content" : "621ba488c8b89e3e3dc640fc01fb7cf4b69d1180fe7f3956439e2c9b7a3f4e90fd070232be8c80472af8e040192cc110"
        },
        {
          "alg" : "SHA3-384",
          "content" : "41156fd4fc8badb167a3cc00dc6df86afbbc245e2ea3b8201b71fcdf061e98fc437814305b34dff8e1933f2a28f1fb19"
        },
        {
          "alg" : "SHA3-256",
          "content" : "5ac4e9811129ed306e00ea7ebffb853abddaccf180753d3c8d67a0e2097d850d"
        },
        {
          "alg" : "SHA3-512",
          "content" : "78b830308dd6a7b16923f6669b85aa19a6710d813658ab1c253e5934f627f16ee2492cb8a504fd61af2461f291862ce52e618334257592dc581eb12eab26c68d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "Public domain"
          }
        }
      ],
      "purl" : "pkg:maven/net.iharder/base64@2.3.8?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://iharder.net/base64/"
        },
        {
          "type" : "distribution-intake",
          "url" : "http://oss.sonatype.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "vcs",
          "url" : "http://github.com/omalley/base64"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-lang/commons-lang@2.6?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-lang",
      "name" : "commons-lang",
      "version" : "2.6",
      "description" : "Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4d5c1693079575b362edf41500630bbd"
        },
        {
          "alg" : "SHA-1",
          "content" : "0ce1edb914c94ebc388f086c6827e8bdeec71ac2"
        },
        {
          "alg" : "SHA-256",
          "content" : "50f11b09f877c294d56f24463f47d28f929cf5044f648661c0f0cfbae9a2f49c"
        },
        {
          "alg" : "SHA-512",
          "content" : "4a5a3dbe4941c645e2cca068cca5c1882cfe988b02e7cd981d1e51784900767d1deab0e0e0566f559c9fcabb4a180e436d5bb948902d4f4106f37360466afb42"
        },
        {
          "alg" : "SHA-384",
          "content" : "9725bc421adc1dbcd6f937eca0f3075d186a2b353ece4cef66b0fe81bb8d3f7d7641c43e86d657ef526c719f0c2a8c90"
        },
        {
          "alg" : "SHA3-384",
          "content" : "4bc4eaaf2580ded6d552b96ae5261c936de95f69a1d137c47279c51bf2aa1406ae44f69ccc94486267b8441e53c4bd74"
        },
        {
          "alg" : "SHA3-256",
          "content" : "b68d49ef037d428ea0c3e67a7a20f3d68a134bef30a1639ec08d28886b9f5629"
        },
        {
          "alg" : "SHA3-512",
          "content" : "2e9ffc0608827cffc0b48b7a0f35d371c66586c99fea2910f7c2a237c7c57d9ae4d65de7c8e018362c2e4f963c2f70a9196cebf35457f1dd0cea6c65c256f673"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-lang/commons-lang@2.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://commons.apache.org/lang/"
        },
        {
          "type" : "build-system",
          "url" : "http://vmbuild.apache.org/continuum/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/LANG"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/commons/proper/lang/branches/LANG_2_X"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-configuration/commons-configuration@1.7?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-configuration",
      "name" : "commons-configuration",
      "version" : "1.7",
      "description" : "Tools to assist in the reading of configuration/preferences files in various formats",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0005907480f12ee461cb4cec25af61ea"
        },
        {
          "alg" : "SHA-1",
          "content" : "3559d47ea9e5f46d8cdc6503f08344b67b255dfd"
        },
        {
          "alg" : "SHA-256",
          "content" : "cdc6a3bf74d47965b8e011ae9a28ae30a2d62c229c25e67e0edae2479d599be3"
        },
        {
          "alg" : "SHA-512",
          "content" : "cc6a6075099f2edb228b6eb7424b9769a34f8bf66aa29ab5fd0e5422024fd23bb02fdbfd7d08d9557b12379114c9c5f0649c88700518a5f0b39df237955fd2c2"
        },
        {
          "alg" : "SHA-384",
          "content" : "f7083178493604784a2aa713658c11d56963cc815a99e63af344c1dc1cbac55a87836177a0d145e0e325ecf7d84681eb"
        },
        {
          "alg" : "SHA3-384",
          "content" : "38245710c219cf0b64675a26d9e464214841fd9922897930eb75a8f708f86b074f814949b7be2ce33cdf6a28fc25cb8f"
        },
        {
          "alg" : "SHA3-256",
          "content" : "4c2ee770ab622ce52712713821f144c307035ae9d17aae11c6cfa9dc8832765e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "4220f838810e5855069749829fcf7750a9f320dcfdb9dfa3447b6d8a529a4b60eb8a72b4140c66bc62c4a49c3bd16b25b6a6426297731ea60d1f36ff4e778b28"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-configuration/commons-configuration@1.7?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://commons.apache.org/configuration/"
        },
        {
          "type" : "build-system",
          "url" : "http://vmbuild.apache.org/continuum/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/CONFIGURATION"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/commons/proper/configuration/trunk"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-digester/commons-digester@1.8?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-digester",
      "name" : "commons-digester",
      "version" : "1.8",
      "description" : "The Digester package lets you configure an XML->Java object mapping module which triggers certain actions called rules whenever a particular pattern of nested XML elements is recognized.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "cf89c593f0378e9509a06fce7030aeba"
        },
        {
          "alg" : "SHA-1",
          "content" : "dc6a73fdbd1fa3f0944e8497c6c872fa21dca37e"
        },
        {
          "alg" : "SHA-256",
          "content" : "05662373044f3dff112567b7bb5dfa1174e91e074c0c727b4412788013f49d56"
        },
        {
          "alg" : "SHA-512",
          "content" : "138aaadde6b134eeb39574fde80f8eed1dee4a7049fccdd8c462c0a0dfab5419bafd259e77b99d85094b4e7c864673f07249c39c3b18aff87ef39b3663f537a2"
        },
        {
          "alg" : "SHA-384",
          "content" : "9dcfb1988fb8de4fb7482ce419bd99ea780795403228cc51454e9dd7fec3cb3af889178fbc6b906ec6f991aa77124cb5"
        },
        {
          "alg" : "SHA3-384",
          "content" : "40f4faa08d895e7aed56f62b5e793cb99c91819629ed1f6a82a8decfe12fd08077dfa6d61f7974bf1069a1684dcca273"
        },
        {
          "alg" : "SHA3-256",
          "content" : "473187f8a52324feaf965f6ea1a8d578c15e57b68f1336799ff432521ab2df27"
        },
        {
          "alg" : "SHA3-512",
          "content" : "e7a95ea8e864301db31754797d164f37cbc53f61598fdfac9cfdce04f4538f56a10a638a193c60ee176f2cf24e9785c682ccde3b6c13562638b4d5a3a81a0389"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-digester/commons-digester@1.8?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://jakarta.apache.org/commons/digester/"
        },
        {
          "type" : "distribution-intake",
          "url" : "file:///www/jakarta.apache.org/builds/jakarta-commons/digester/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/jakarta-commons-dev/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/repos/asf/jakarta/commons/proper/digester/trunk"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-beanutils/commons-beanutils@1.11.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-beanutils",
      "name" : "commons-beanutils",
      "version" : "1.11.0",
      "description" : "Apache Commons BeanUtils provides an easy-to-use but flexible wrapper around reflection and introspection.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "32ed51f196dfda19e0dc1ce53eeed29e"
        },
        {
          "alg" : "SHA-1",
          "content" : "ac03ea606d13de04c2e4508227680faff151f491"
        },
        {
          "alg" : "SHA-256",
          "content" : "9e44ba68ec9a3f21286fa2a8bbb003b735c0f69101bb43144b79f4f8aaa74709"
        },
        {
          "alg" : "SHA-512",
          "content" : "4348670579601bc1151de2f27414635c4ea0b4b53061d116c09ba319e2c4f8e91d0cb0713a964668bd5189105ac1e2b6590881850880bf5ff23cc6409f270420"
        },
        {
          "alg" : "SHA-384",
          "content" : "a349c6a1e0a48cbf8d3528e4a39257db1b912c2ef060853837aa14d941154e9adc43248309ab6db7e8ac7730db7b081b"
        },
        {
          "alg" : "SHA3-384",
          "content" : "f3afdd778bb54bc6a9e41b5c31cf98078f005542b87cd0a3713d8e5152ff7eb6d9e2ed3206ce453a3af6f869fa714cbf"
        },
        {
          "alg" : "SHA3-256",
          "content" : "6dd4ec6d993b5792c51b5d6c4ea3b56f35b1c1f0ea65b182cb55c2432315aa68"
        },
        {
          "alg" : "SHA3-512",
          "content" : "fdcaa942f7377fdb36c7977273c1e2177d23e7b13162db1a0e5d3958d87a8c77d08cd6797a7c30cf755d492fa75d0642de5678dfe1d5a936569dccde5549e512"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-beanutils/commons-beanutils@1.11.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-beanutils"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-parent/actions"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/BEANUTILS"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-beanutils.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.jackson/jackson-core-asl@1.9.13?type=jar",
      "publisher" : "FasterXML",
      "group" : "org.codehaus.jackson",
      "name" : "jackson-core-asl",
      "version" : "1.9.13",
      "description" : "Jackson is a high-performance JSON processor (parser, generator)",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "319c49a4304e3fa9fe3cd8dcfc009d37"
        },
        {
          "alg" : "SHA-1",
          "content" : "3c304d70f42f832e0a86d45bd437f692129299a4"
        },
        {
          "alg" : "SHA-256",
          "content" : "440a9cb5ca95b215f953d3a20a6b1a10da1f09b529a9ddea5f8a4905ddab4f5a"
        },
        {
          "alg" : "SHA-512",
          "content" : "11725da54c7c18af0b50967a9317866ce9d11eb94d3b52ff7a54c6550070e143b5a582de9a8ebb6d61a8104f4dcd7ddb9c2e6f5c3605b6900d48f5241fe38d89"
        },
        {
          "alg" : "SHA-384",
          "content" : "26bff8b72770f734bac78e1ef2f575b26b7676895a4f022f402c99e38b567905ace700f553771606603f508b749bfb4f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "27be7948772c3680134e42ca889dc3f42954394fff4b6f7157d73a9f32886795c6d56b80283d2d762409ad56b753a811"
        },
        {
          "alg" : "SHA3-256",
          "content" : "a0ea1eb75ad00b7c61b96cd71b40b6a0f558c7e1089d42b6d3cd635b1f62b0b1"
        },
        {
          "alg" : "SHA3-512",
          "content" : "67bb970e761b9dc171ba1e88e5ca2079de26b046f773f89400ccef901d1c0ce7f9f6d0d4a0af5c18ac54c1fbcdce035809584b6514167bd8cb6730294947b13f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.jackson/jackson-core-asl@1.9.13?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://jackson.codehaus.org"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://jira.codehaus.org/browse/JACKSON"
        },
        {
          "type" : "vcs",
          "url" : "http://xircles.codehaus.org/projects/jackson/repos/primary/repo"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.jackson/jackson-mapper-asl@1.9.14.jdk17-redhat-00001?type=jar",
      "publisher" : "FasterXML",
      "group" : "org.codehaus.jackson",
      "name" : "jackson-mapper-asl",
      "version" : "1.9.14.jdk17-redhat-00001",
      "description" : "Data Mapper package is a high-performance data binding package built on Jackson JSON processor",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "49eb643fc2793d5e1902a949e382a7d1"
        },
        {
          "alg" : "SHA-1",
          "content" : "e7c333bf4a9784e9d40f67b5ca1a9ffd4958ac38"
        },
        {
          "alg" : "SHA-256",
          "content" : "d83e364a0dda7345bef76c3f17b7cf6eff6ac6bbbe31fc6ef24c05a940a0de79"
        },
        {
          "alg" : "SHA-512",
          "content" : "fb6f470b541c7d05ccb6b83762a5dab4f5018f4ff0b182ce41ac21afe5df7a3b4d19819814130cec59908fbc493b65793daf4256e6078ced58cab3c744916643"
        },
        {
          "alg" : "SHA-384",
          "content" : "92ea61b35b1457abc3df279b707a723db70942de58cc57b3f78ed17dab5b94757fb79d6682b484e2c86dec6c8c0f0852"
        },
        {
          "alg" : "SHA3-384",
          "content" : "42c1dabe89d1eeb4314adc64d1995a52482879ac4eb742f853dc0eace6bc508dceb20fe3bb9bc29ccc825dd05d954e8f"
        },
        {
          "alg" : "SHA3-256",
          "content" : "e4286ee1e577554195b5d5ed087611874bb6f8510d63d037f535ca50101b2a65"
        },
        {
          "alg" : "SHA3-512",
          "content" : "d302c42200cf8132fc4be9f6ed1b4b3baa98504c9a3ad981e1d7564af284a8a09b8b905ecad14ce03155bebdd9645b59b01439f23eae97fb55915784864d7255"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.jackson/jackson-mapper-asl@1.9.14.jdk17-redhat-00001?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://jackson.codehaus.org"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://jira.codehaus.org/browse/JACKSON"
        },
        {
          "type" : "vcs",
          "url" : "http://xircles.codehaus.org/projects/jackson/repos/primary/repo"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.code.gson/gson@2.10.1?type=jar",
      "group" : "com.google.code.gson",
      "name" : "gson",
      "version" : "2.10.1",
      "description" : "Gson JSON library",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "df6097815738cb31fc56391553210843"
        },
        {
          "alg" : "SHA-1",
          "content" : "b3add478d4382b78ea20b1671390a858002feb6c"
        },
        {
          "alg" : "SHA-256",
          "content" : "4241c14a7727c34feea6507ec801318a3d4a90f070e4525681079fb94ee4c593"
        },
        {
          "alg" : "SHA-512",
          "content" : "7503e4b8d05c6cc0ecb3a94c5a2e070e049083a441003a79a0cdf474f4286699b4ba1d2a655ddabb8ba10c50e7c36a7045cccdaee465166d4630db647aba2727"
        },
        {
          "alg" : "SHA-384",
          "content" : "48a4786bd6e1867f058ee4fb676fc82d9d9f64a6d7420d4a47ae2398504c9de73222636614aeb4a9fbf10ee143d72226"
        },
        {
          "alg" : "SHA3-384",
          "content" : "3df9a0332c2766124fe7c915cfea665d2e318ccaa7212415fabd9e93e6eb77de538725fd2ef313cde46f6d814c9566ea"
        },
        {
          "alg" : "SHA3-256",
          "content" : "d3374006d76d4f9acdf3d3a1a4f47899570f52442b2188f80c09a74f22139ecb"
        },
        {
          "alg" : "SHA3-512",
          "content" : "2b10c2f4fe39d8712b430ff171823d7172c0a06685c1eb7de511e90159cec0e094fb2a9b50b747c5b039cb10f1fce9edf82ecbf9c47f76a6f31c4e3cb7586cce"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.code.gson/gson@2.10.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/google/gson/gson"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/google/gson/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/google/gson/gson/"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.hadoop/hadoop-auth@2.10.2?type=jar",
      "publisher" : "Apache Software Foundation",
      "group" : "org.apache.hadoop",
      "name" : "hadoop-auth",
      "version" : "2.10.2",
      "description" : "Apache Hadoop Auth - Java HTTP SPNEGO",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "befc7be7bc7aa4dc9b6324626913cda8"
        },
        {
          "alg" : "SHA-1",
          "content" : "29ab697d6b925ed3a52b782554d59e3312c94572"
        },
        {
          "alg" : "SHA-256",
          "content" : "0acffe01db6dbbdce9e6d46aa758f956af60cc8ef0fa405ca7f5b8747a53687b"
        },
        {
          "alg" : "SHA-512",
          "content" : "b3aac5229209dc11ef20c1125c186fc4ae77e85679725c6a8364538e6026c35439f85ae37579130c6089ab899ba1da180f65a7cfdd0a9c3120fe1c7b0f2157cf"
        },
        {
          "alg" : "SHA-384",
          "content" : "25e6927a991abef2a6c6b75859c6b23a7cbdc90dd9fec7b18ebc0a0d594911a27b2b35ddd5f618b5cc0dca2fd1807d34"
        },
        {
          "alg" : "SHA3-384",
          "content" : "45fcb77fd0d7b54983b74f51b479fcc8cab9f0112b4a7b099e32ec362d0682119d3608e1211e6943ec8eb641bbc64659"
        },
        {
          "alg" : "SHA3-256",
          "content" : "038f1a7d376ac8b57b6c4cd7cedb401217545057a27b100ce84cabbc79d77510"
        },
        {
          "alg" : "SHA3-512",
          "content" : "350d010fdaf42e07fb472735957b3a70038bb05409aaffae7782b6d0f58d7bab4297a3fd3ae73968544f6d6fc0c1f5a1e7a6990ab557ed4521fa26dfadc8d64e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.hadoop/hadoop-auth@2.10.2?type=jar",
      "externalReferences" : [
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.nimbusds/nimbus-jose-jwt@9.37.4?type=jar",
      "publisher" : "Connect2id Ltd.",
      "group" : "com.nimbusds",
      "name" : "nimbus-jose-jwt",
      "version" : "9.37.4",
      "description" : "Java library for Javascript Object Signing and Encryption (JOSE) and JSON Web Tokens (JWT)",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "c5d322effe54b20543fff3cb4afa74e1"
        },
        {
          "alg" : "SHA-1",
          "content" : "3d680c5ea93472186fda6d0d920d7975d3f4e15c"
        },
        {
          "alg" : "SHA-256",
          "content" : "8fcf4a978bbee7548e8dee6e0528bc85b0ffa84c0f8517c94dd29e590e459449"
        },
        {
          "alg" : "SHA-512",
          "content" : "2501b40311a74b489a511f090b903c3b64599abee05ab03e1be4082cfd07680d2fb3ddaafff35005dbe172a2cdf170761b1a622335b8782a8c76874c69c9d97a"
        },
        {
          "alg" : "SHA-384",
          "content" : "f240726037448c0b46508ac9b7bff642630fb0a1bf8b4e59c723576eb62ae79723452f9a4c859bdc90439a10848d8416"
        },
        {
          "alg" : "SHA3-384",
          "content" : "29ef5a81796db265ce762af47bd32c0dd09bf15fa6ee661c25c580943d8385b4edc73a84f28ed2cdb1632c665af76c1e"
        },
        {
          "alg" : "SHA3-256",
          "content" : "b896fc14e6eef08bb99308deeead56d7b22bc2db120dfeac22ec3df6a78ff889"
        },
        {
          "alg" : "SHA3-512",
          "content" : "85bdb53d899a8e28d13466064e41911922c9aaac4ef005589bdfbb4001f04224c5f11b52a24f7f1d56a1514bc6aa2bcc01eb901ae466ac93d6cabd6c90e7edbb"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.nimbusds/nimbus-jose-jwt@9.37.4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://bitbucket.org/connect2id/nimbus-jose-jwt"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://bitbucket.org/connect2id/nimbus-jose-jwt"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.github.stephenc.jcip/jcip-annotations@1.0-1?type=jar",
      "group" : "com.github.stephenc.jcip",
      "name" : "jcip-annotations",
      "version" : "1.0-1",
      "description" : "A clean room implementation of the JCIP Annotations based entirely on the specification provided by the javadocs.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "d62dbfa8789378457ada685e2f614846"
        },
        {
          "alg" : "SHA-1",
          "content" : "ef31541dd28ae2cefdd17c7ebf352d93e9058c63"
        },
        {
          "alg" : "SHA-256",
          "content" : "4fccff8382aafc589962c4edb262f6aa595e34f1e11e61057d1c6a96e8fc7323"
        },
        {
          "alg" : "SHA-512",
          "content" : "02fcd16a30d0e68b3e9e4899731181c6abb7117baa15c096ca940e01dde08bb86101cbeae552c497f8a90d923b5fa2f2b6f3850baf8dc94dbd399887924a9069"
        },
        {
          "alg" : "SHA-384",
          "content" : "88b0ecfde391a3d8468349c70e1539569768dfac3233dfe0b4660904df04e6c6bf26ed9c0784b9b22c122c3448e2a6b6"
        },
        {
          "alg" : "SHA3-384",
          "content" : "487b53f48b55b98a61ae60abedc43543887944867aa6bcb78d5ed46e2d0d7c19510c5fcadc362d939313feafdcfc55e1"
        },
        {
          "alg" : "SHA3-256",
          "content" : "3e79c8f58865d2d58a5311a8bb45772007f07e7f3ed2780784d1e4382dc934d0"
        },
        {
          "alg" : "SHA3-512",
          "content" : "ff32665e1b6d8176ccc7e8c836ca7343c2603dab053e42d79b4258d51a14ff63933c67d24034169ac91e11ebda21cc2c84a2a540072e656d2a8e6fcea7808421"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.github.stephenc.jcip/jcip-annotations@1.0-1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://stephenc.github.com/jcip-annotations"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://github.com/stephenc/jcip-annotations/issues"
        },
        {
          "type" : "vcs",
          "url" : "http://github.com/stephenc/jcip-annotations/tree/master/"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.directory.server/apacheds-kerberos-codec@2.0.0-M15?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.directory.server",
      "name" : "apacheds-kerberos-codec",
      "version" : "2.0.0-M15",
      "description" : "The Kerberos protocol encoder/decoder module",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "3118e22eac44e150c383df1d417772f4"
        },
        {
          "alg" : "SHA-1",
          "content" : "1c16e4e477183641c5f0dd5cdecd27ec331bacb5"
        },
        {
          "alg" : "SHA-256",
          "content" : "4996f5b72497e94dd86d64a370158c4fb0049eea9b17ff8b27a4671d6c136ded"
        },
        {
          "alg" : "SHA-512",
          "content" : "9e2ecd4f5d08af238ab32852fdf86f8165701b745ad93f3bc96eb3c0aff95a083773039adc3722123e8504971cd379929f9c4ad6d5c1ca3d112fa3d04e4a83f0"
        },
        {
          "alg" : "SHA-384",
          "content" : "c2e02333581bf5fef1a73c681afbefa13a03451e91bb36adeca90380679ecfa5a687e42073b9a7e6d60d71060d7e586d"
        },
        {
          "alg" : "SHA3-384",
          "content" : "b8f61173cbdbe09e53bca5e2cca5bce141083455b72ba4d6ad624be4da81ce27afecc8c36c7058a36e0291b6672d29da"
        },
        {
          "alg" : "SHA3-256",
          "content" : "161f828310334719481640ce1a82e6004c4b445ad090f6e18622be16042f71e4"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c94fce03575ce82631a361f945c8dbe48332c632f4d2b9386792064a8315fdc7ad7b1b17e63fbb4b6b9f638403be4b7e6255698852195a20e3d241b020a14119"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.directory.server/apacheds-kerberos-codec@2.0.0-M15?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://directory.apache.org/apacheds/1.5/apacheds-kerberos-codec"
        },
        {
          "type" : "build-system",
          "url" : "https://hudson.apache.org/hudson/view/A-F/view/Directory"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/DIRSERVER"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/directory-dev"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/directory/apacheds/tags/2.0.0-M15/apacheds-kerberos-codec"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.directory.server/apacheds-i18n@2.0.0-M15?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.directory.server",
      "name" : "apacheds-i18n",
      "version" : "2.0.0-M15",
      "description" : "Internationalization of errors and other messages",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f5877c02fd56ade67713560e589c81b9"
        },
        {
          "alg" : "SHA-1",
          "content" : "71c61c84683152ec2a6a65f3f96fe534e304fa22"
        },
        {
          "alg" : "SHA-256",
          "content" : "bd3b7cece7fc6364cbce32b9edd0e9628a3e889c6a93cdeff1b5e2131e2a007c"
        },
        {
          "alg" : "SHA-512",
          "content" : "2ca2e5e475168e97c3e25d52dfd8fd342e5be2f1689842bed03db568538f8f9fd1cee28cde6e815c4706123716a266db6130ceaaac4eddbe9d597de7459d6632"
        },
        {
          "alg" : "SHA-384",
          "content" : "fda3e7e1e80becb69fe5997c75b8f89ecaa7004bfebc20e230dfb3580a3fd9c526757e775c35a53e5681da1c2a7edb3b"
        },
        {
          "alg" : "SHA3-384",
          "content" : "0fc218a9b93501998ab35252262373b7eda92a33d3688bc87694421e847bd4b4a11c3f79ad27a8c93fc000e085b6b28c"
        },
        {
          "alg" : "SHA3-256",
          "content" : "d9bda1adf202334aebea73021e3bbe180096e8165ecf6876b589c8bc58ec7fd0"
        },
        {
          "alg" : "SHA3-512",
          "content" : "b1272d97252156e84b10b85ffa9f43837338ba381e392c3662e96ffaaaee8a1bf82b3b77553cbd7bb0183a969ad3967bc7198cbeffbbe028266aaee90cda4f1d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.directory.server/apacheds-i18n@2.0.0-M15?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://directory.apache.org/apacheds/1.5/apacheds-i18n"
        },
        {
          "type" : "build-system",
          "url" : "https://hudson.apache.org/hudson/view/A-F/view/Directory"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/DIRSERVER"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/directory-dev"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/directory/apacheds/tags/2.0.0-M15/apacheds-i18n"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.directory.api/api-asn1-api@1.0.0-M20?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.directory.api",
      "name" : "api-asn1-api",
      "version" : "1.0.0-M20",
      "description" : "ASN.1 API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "cf4561832dab76e9f37461342ec18d17"
        },
        {
          "alg" : "SHA-1",
          "content" : "5e6486ffa3125ba44dc410ead166e1d6ba8ac76d"
        },
        {
          "alg" : "SHA-256",
          "content" : "484aaf4b888b0eb699d95bea265c2d5b6ebec951d70e5c5f7691cd52dd4c8298"
        },
        {
          "alg" : "SHA-512",
          "content" : "10b84880f0b866addba5137d7afd1fc35b6c5e3577a3c8d9d122fc91201f21381173aca49881465ced33fc34680da55ea6bc47e2f8848fb5dd0d988bc0cace97"
        },
        {
          "alg" : "SHA-384",
          "content" : "f0924bad02e083567f2c08fc565484c55e2f9de59abaa7a1fcafa36bc65a451cde6d1b2e78386e04dafba46e85c5e3d2"
        },
        {
          "alg" : "SHA3-384",
          "content" : "7ae5c73827f5ffdc09c7117cbfb7ee9efcf6daf7f8ea5377a96aa1e0ec245846d34d237ca35a57dbf4ab36a5f11c46c3"
        },
        {
          "alg" : "SHA3-256",
          "content" : "58dba2f147b58b85925b06ae53dced0025242998f215aafdbca5a6f24d01463a"
        },
        {
          "alg" : "SHA3-512",
          "content" : "a35ef1eb9ebdc088c64adb05c7fc213185c15363f0c00afb96d2f19f25462052d30f8bad23aa466f173f06b51218c7c1a30ed2f50177a2b9830358a143fca1ba"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.directory.api/api-asn1-api@1.0.0-M20?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://directory.apache.org/api-parent/api-asn1-parent/api-asn1-api/"
        },
        {
          "type" : "build-system",
          "url" : "https://hudson.apache.org/hudson/view/A-F/view/Directory"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/DIRAPI"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/directory-dev"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/directory/shared/tags/1.0.0-M20/api-asn1-parent/api-asn1-api"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.directory.api/api-util@1.0.0-M20?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.directory.api",
      "name" : "api-util",
      "version" : "1.0.0-M20",
      "description" : "Utilities shared across this top level project",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "2c5a6722666882024becdd64301be492"
        },
        {
          "alg" : "SHA-1",
          "content" : "a871abf060b3cf83fc6dc4d7e3d151fce50ac3cb"
        },
        {
          "alg" : "SHA-256",
          "content" : "fd32fd047ccf143c58d093b58811aa81e539f8cf83c1187809f1a241a1df12d1"
        },
        {
          "alg" : "SHA-512",
          "content" : "b1c206a420d5dc455f22a1f22980573101b9c74abac044e1b02b2925eaf7c8b188481797d9261cfbe1e2800e684ce88ed8cd18db1ef5909929bec33539a4c5f3"
        },
        {
          "alg" : "SHA-384",
          "content" : "1fed2deab6fe2e3d357bdeee48046861e53582f2404c34bc2bc35992e771e27e8d28b8df65a994f700159e5ca5311316"
        },
        {
          "alg" : "SHA3-384",
          "content" : "0451ed59fec5907fed4e5b9688c0d0b4a682fbb56eecb38ac963670ec0bfbd04790325ce1e2f79022976f0344f9cdc74"
        },
        {
          "alg" : "SHA3-256",
          "content" : "aa8acd1abed952436313c6988941e63e0f33473f8df6e9ae39c8bdee334ae4b7"
        },
        {
          "alg" : "SHA3-512",
          "content" : "b6a0c7780bb76334438af34d098b15c9fdf1627a927f7c451ffb468acde7916e5ddf7fb4942d0800c53fda02f8d788f5c75999e546f1aac9439b9e524efd70fd"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.directory.api/api-util@1.0.0-M20?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://directory.apache.org/api-parent/api-util/"
        },
        {
          "type" : "build-system",
          "url" : "https://hudson.apache.org/hudson/view/A-F/view/Directory"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/DIRAPI"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/directory-dev"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/directory/shared/tags/1.0.0-M20/api-util"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.curator/curator-framework@2.13.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.curator",
      "name" : "curator-framework",
      "version" : "2.13.0",
      "description" : "High-level API that greatly simplifies using ZooKeeper.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "91e34b86afb44ef5c728f69ed9790f1d"
        },
        {
          "alg" : "SHA-1",
          "content" : "d45229aee7d3f1f628a34fcac9b66ed5ba52c31f"
        },
        {
          "alg" : "SHA-256",
          "content" : "db084e5e0fed0548a8128f12a3e7a15c875c9595e75316c9578d64e77375c4a9"
        },
        {
          "alg" : "SHA-512",
          "content" : "7a9d520b5668ada07d05435f5632ab24d11bb079338388f43668960a3181d665568a2ef4a73222870362a84e1eeb59ef9ebf171bbcfdd7216735821328287798"
        },
        {
          "alg" : "SHA-384",
          "content" : "bf989371e089766e2bc00589c4ce3419382cfe5da67f1c815604653d59a6429642a6e9008c64a2d09d6398816c527d32"
        },
        {
          "alg" : "SHA3-384",
          "content" : "db0f4c1dd75189db2ec7e5b0fdc6610f49528c1e58929c2135daca3393e87d1c7c72a8524161708587e3f6738186a9c3"
        },
        {
          "alg" : "SHA3-256",
          "content" : "622fdc0fa9f31ff5a109c0bf003921ec5868eff678e4978d3864821257f07144"
        },
        {
          "alg" : "SHA3-512",
          "content" : "ab5960999e0ed951d676618b6d04f81f0ec288a7f6d7410eae41061cfc847c79b3650cf484f567070fa40fb71ed575f523dbc2b9d85d1f1b58f91d19a9b19bb5"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.curator/curator-framework@2.13.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://curator.apache.org/curator-framework"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/job/Curator/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/CURATOR"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/curator-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/curator.git/curator-framework"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.jcraft/jsch@0.1.55?type=jar",
      "publisher" : "JCraft,Inc.",
      "group" : "com.jcraft",
      "name" : "jsch",
      "version" : "0.1.55",
      "description" : "JSch is a pure Java implementation of SSH2",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "c395ada0fc012d66f11bd30246f6c84d"
        },
        {
          "alg" : "SHA-1",
          "content" : "bbd40e5aa7aa3cfad5db34965456cee738a42a50"
        },
        {
          "alg" : "SHA-256",
          "content" : "d492b15a6d2ea3f1cc39c422c953c40c12289073dbe8360d98c0f6f9ec74fc44"
        },
        {
          "alg" : "SHA-512",
          "content" : "b6827d8de471682fd11744080663aea77612a03774e2ebcc3357c7c493d5df50d4ec9c8d52c4fcc928bdfdd75b62b40d3c60f184da8a7b8aba44c92afecee7a5"
        },
        {
          "alg" : "SHA-384",
          "content" : "6da3c9e2d72bd25991936dfe918ae7f235d03f386a8f797b65a154ae71b36292f873338ccbf5dd4fd3bc63619c806dbe"
        },
        {
          "alg" : "SHA3-384",
          "content" : "92676d161f4ebe078df11f9cda6dc0bed4c828830bb98340ac34fdb89dc76b019d4320f6fdd3db13cdd6e33582cb9272"
        },
        {
          "alg" : "SHA3-256",
          "content" : "99c7de83022da8f85fcef262e29051b8c33c81d492cf344a5d123b83b5a459f7"
        },
        {
          "alg" : "SHA3-512",
          "content" : "33344b4ee79f0e7c8901b828f2bea13d25727361deeaa37d85dbaf3c44a31e8d0b4f3966ce2e4c3705bebd046cb7adba0486d02babdbc68e9819d059b5981559"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/com.jcraft/jsch@0.1.55?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.jcraft.com/jsch/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "http://git.jcraft.com/jsch.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.curator/curator-client@2.13.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.curator",
      "name" : "curator-client",
      "version" : "2.13.0",
      "description" : "Low-level API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "ca2c6ca2277e78d1f6b865ee82e10357"
        },
        {
          "alg" : "SHA-1",
          "content" : "a1974d9b3251c055408059b2f408d19d7db07224"
        },
        {
          "alg" : "SHA-256",
          "content" : "62ab2201b5b9af63b215a4e6829dbe7d553a0805cfb0b1a665f9b49da8270c51"
        },
        {
          "alg" : "SHA-512",
          "content" : "72909bbf56f63fb7afba996336e7270ae08010976b4bb3b8bb90269d53fde78c63f8131a941ebb7cc554981a522f15e2b2a9ec63387d77f7117e5a1ed0b8c028"
        },
        {
          "alg" : "SHA-384",
          "content" : "57d338248aa56fa86aab71303a2746c7e4f061a18029a096f99bdadb7a87152f5067e1955aa2acb928edbcac0631b613"
        },
        {
          "alg" : "SHA3-384",
          "content" : "db824b68c9aa7d06f2843eca902fe7ee04f1f246db6161dd1fc61fb3bfc482e700b10b3694944a9d67e1e18fe0effdff"
        },
        {
          "alg" : "SHA3-256",
          "content" : "93e8027c890377b5d72d2b45062cdb1cc528e39f483ec693222d66cf418d9299"
        },
        {
          "alg" : "SHA3-512",
          "content" : "9ce7bedb13ffc89cd96e5974b420a0c543d8c14324b36291644f4064c27736b8316a3d174c0d285c464596a9cf29e2acccbb3b5e52c3db743d37e2f77c545930"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.curator/curator-client@2.13.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://curator.apache.org/curator-client"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/job/Curator/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/CURATOR"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/curator-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/curator.git/curator-client"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.curator/curator-recipes@2.13.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.curator",
      "name" : "curator-recipes",
      "version" : "2.13.0",
      "description" : "All of the recipes listed on the ZooKeeper recipes doc (except two phase commit).",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "02685a8f2e44faa1941e953ac426a8d7"
        },
        {
          "alg" : "SHA-1",
          "content" : "1e6d5cf7b18a402f5d52785877010711538d68a0"
        },
        {
          "alg" : "SHA-256",
          "content" : "22be05c1a3e6c5ede22e77372b08dc631a3b93b64acb7f682537ea65a6ddba06"
        },
        {
          "alg" : "SHA-512",
          "content" : "498ce3631ef135b96b467cd3c4fa8ac1797538047589b1454911ec77a5205773346a367492db0771167e8f612c911bac44c8c7c651be00e206eb60e2f0bba2f7"
        },
        {
          "alg" : "SHA-384",
          "content" : "08a4134a208a2c59b0354e5d4e88b29f0f2f4f0bd0b83a6ccd54da70602499a8dedd5711d5481c23ba8782049cdb546c"
        },
        {
          "alg" : "SHA3-384",
          "content" : "756a7a95c028122a46cbde814d179cb4e57629c3bce9dd05f88b2f8ed9f5120b43732dedb0cec8251d10a0aa5e872cce"
        },
        {
          "alg" : "SHA3-256",
          "content" : "5cb92cfe13d5089c6419a9a1979c7a141e0ba062d6a3aca2f9102ac89051c3a8"
        },
        {
          "alg" : "SHA3-512",
          "content" : "de66d759ededd490e6bb55fa6ee697a632dd14918c7fa1d567cf4ab2281ef8921e91b5684a8d4baf2ea92242b942c96a29fcc3a35f89842005e8f8c3cbec0c69"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.curator/curator-recipes@2.13.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://curator.apache.org/curator-recipes"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/job/Curator/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/CURATOR"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/curator-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/curator.git/curator-recipes"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.htrace/htrace-core4@4.1.0-incubating?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.htrace",
      "name" : "htrace-core4",
      "version" : "4.1.0-incubating",
      "description" : "A distributed tracing framework.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "34f428e68910ea6555c79e733d433f1a"
        },
        {
          "alg" : "SHA-1",
          "content" : "12b3e2adda95e8c41d9d45d33db075137871d2e2"
        },
        {
          "alg" : "SHA-256",
          "content" : "5d45b7904857c3e4ad36b3bcc57be2d2c5f308c69b5f6a58bd86aa7d48a25ef6"
        },
        {
          "alg" : "SHA-512",
          "content" : "1d61c8cc145a6e43ef99221032abd2e6e519b00ec159bb8f1ecd94cc475dc35097639b35d476a746103dccd04f88c49c52c7d72a43f6c59501ef7cd02f637d85"
        },
        {
          "alg" : "SHA-384",
          "content" : "07a10701d902d6e1f606d977272f6fc9f946cc9f50a1b3efe30d132beb32a00b7b962344d6f76e217012fd61a6f9f996"
        },
        {
          "alg" : "SHA3-384",
          "content" : "7344591e452d480c51380be5dcb7e5efd5bcfaaf3c7f8a27b504d83737aa2e036377cd260242fa5d48ba2fdddd039911"
        },
        {
          "alg" : "SHA3-256",
          "content" : "a7e997922ff4e70bfe61e75b555f93a032aeae813c3eca36db5d606f4cb64db1"
        },
        {
          "alg" : "SHA3-512",
          "content" : "3d9abf6ff9c0a73b5484bf0710294bc083574aca96b13611ada5460170e8170022383a3f6ae1c4f2fa687251f0a8cb7dc6f3fc9510962b5f00edce0e67ea8409"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.htrace/htrace-core4@4.1.0-incubating?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://incubator.apache.org/projects/htrace.html"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/view/H-L/view/HTrace/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/HTRACE"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/incubator-htrace-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://git-wip-us.apache.org/repos/asf?p=incubator-htrace.git/htrace-core4"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.zookeeper/zookeeper@3.8.4?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.zookeeper",
      "name" : "zookeeper",
      "version" : "3.8.4",
      "description" : "ZooKeeper server",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "fdab82f33726e38a7f8e5069d9fb0fc9"
        },
        {
          "alg" : "SHA-1",
          "content" : "6638e37b887b5a279044afbdc9928e19f678eb2e"
        },
        {
          "alg" : "SHA-256",
          "content" : "2d77b152039e7f85dc5438a9304febff86a2f3e55c88976a8be309af39028e97"
        },
        {
          "alg" : "SHA-512",
          "content" : "d66260fc4b3a890adda33486507ca100a8721c33d3371cb9be672c84fa0703d905e12f5c29f213b44e88454a7dbaf2b2b2a57ef63164ab69dbaf3aef6a2d70c8"
        },
        {
          "alg" : "SHA-384",
          "content" : "b8889da29747bf6ca7617b2f3117786d4a9da6584a7de0345df01c4c976326452388e1c4f9cc6efaf9e1489eb2c5fa29"
        },
        {
          "alg" : "SHA3-384",
          "content" : "d29ea0667c34d5203de4c35896fd33aa2e978374d003c8cfcec6f0485e24783b8469ec6fb8fb7894c239f6e05e8dc3d3"
        },
        {
          "alg" : "SHA3-256",
          "content" : "a3f72526ed8b14be139c46126fc78e868e142e84f31e1175fc600c2ae19e1d31"
        },
        {
          "alg" : "SHA3-512",
          "content" : "f372078cc8368014c50c0e8babdb06ab9f97b04dc43a4b045c67dfa4d999fabdc8aabb6032d639ffed305a66452d1d197a4d8afc0061607055096d28c9ea4936"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.zookeeper/zookeeper@3.8.4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://zookeeper.apache.org/zookeeper"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-hadoop.apache.org/view/ZooKeeper/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/ZOOKEEPER"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/zookeeper-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf/zookeeper.git/zookeeper"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.zookeeper/zookeeper-jute@3.8.4?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.zookeeper",
      "name" : "zookeeper-jute",
      "version" : "3.8.4",
      "description" : "ZooKeeper jute",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "399b189d4540f15d78fb2663a1da3450"
        },
        {
          "alg" : "SHA-1",
          "content" : "de7b8a41bbe1ccdfc009de51fa6d160db3ca8025"
        },
        {
          "alg" : "SHA-256",
          "content" : "93e854b55d731e745bafec187e2e7bf3389fd2a88e2fc8d1a3c1b9110284b284"
        },
        {
          "alg" : "SHA-512",
          "content" : "498b031ca7cb4c3dbd39d69488d6295e12e25ef924f20f9699e39a9ed32a7a079a82c2c8c68eb6dafd6428b1edd10e79cd356200b50c52c93a6d129b56422106"
        },
        {
          "alg" : "SHA-384",
          "content" : "e98c36f58dc062fa8fddcf62d1a3e42fc947e49a979097b1b6bdc7a005d50e838927ff03a30d49763d35b55f33d93022"
        },
        {
          "alg" : "SHA3-384",
          "content" : "d7f6c56a68ce58b902a175736e1d93b82f4cb4ccc2241f08f3614017bb88f7968a83ff873aa3adb9f94576acd3c889f1"
        },
        {
          "alg" : "SHA3-256",
          "content" : "058b07cefb1f098f3f097d877198941ad0b1d1d3351db267ae3fa6ef7669c318"
        },
        {
          "alg" : "SHA3-512",
          "content" : "74b3faffd49226423ddd934f30af73ffcc79e8c596d7b1e3b382d8bab696c1efad65025df6e4cf399f4ff635025cd0d3d79f0448a0a88c21564f220df392ab02"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.zookeeper/zookeeper-jute@3.8.4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://zookeeper.apache.org/zookeeper-jute"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-hadoop.apache.org/view/ZooKeeper/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/ZOOKEEPER"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/zookeeper-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf/zookeeper.git/zookeeper-jute"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.yetus/audience-annotations@0.12.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.yetus",
      "name" : "audience-annotations",
      "version" : "0.12.0",
      "description" : "Annotations for defining API boundaries and tools for managing javadocs",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "76ba71bbe18c4724d96bec68bbe12ff1"
        },
        {
          "alg" : "SHA-1",
          "content" : "e0efa60318229590103e31c69ebdaae56d903644"
        },
        {
          "alg" : "SHA-256",
          "content" : "ffb101fc066360ff3c77457c927fd7967fb096a6ee9e046ab7071447d8208efc"
        },
        {
          "alg" : "SHA-512",
          "content" : "264a5251272ec55eca1fae5a8fb9336d1eca1ee3bfb586d1ebc382fcfd37077c21cbfa9e198daf4e1eebe9f6fa90487bec2f85bc1c55cf5666cbbfc4d18b1715"
        },
        {
          "alg" : "SHA-384",
          "content" : "f936d92b5c3b3c88428fc7452871e4df112935dd25356396d15deb73dd39790f45909a3d14f038e9f585cee79622ad47"
        },
        {
          "alg" : "SHA3-384",
          "content" : "67ca97a525d98c3dab9ffda40e11d6c683f6f4208ae4a5b28dbd3e2b8b37187dfdcd1d9b89222dc69e5b84ac212f4428"
        },
        {
          "alg" : "SHA3-256",
          "content" : "fd99b55afe40884b5f6cfd9ffbdcd07fa32833443dead288390ca8e737dd3337"
        },
        {
          "alg" : "SHA3-512",
          "content" : "4aaece7bdadc2c2d9660b16345218cfc68a2ea344374d0ffbcdcc3722ff6be5f06c92231ae68ec3884f1aa9b99956cb5135b4060c5457f463251f3767003ad20"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.yetus/audience-annotations@0.12.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://yetus.apache.org/audience-annotations"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/YETUS"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/yetus-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/yetus.git/audience-annotations"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1?type=jar",
      "publisher" : "fasterxml.com",
      "group" : "org.codehaus.woodstox",
      "name" : "stax2-api",
      "version" : "4.2.1",
      "description" : "tax2 API is an extension to basic Stax 1.0 API that adds significant new functionality, such as full-featured bi-direction validation interface and high-performance Typed Access API.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "af8377bc7882332e22456616a9f164f6"
        },
        {
          "alg" : "SHA-1",
          "content" : "a3f7325c52240418c2ba257b103c3c550e140c83"
        },
        {
          "alg" : "SHA-256",
          "content" : "678567e48b51a42c65c699f266539ad3d676d4b1a5b0ad7d89ece8b9d5772579"
        },
        {
          "alg" : "SHA-512",
          "content" : "00efc5d4d17540fb180c5b20d456630a8b3262dff46676689ae916ba16f0fbd9b1a71c7badfb254faad6597f94fed1edb96f77c15f40178eaf4d8cd35cea5e8d"
        },
        {
          "alg" : "SHA-384",
          "content" : "97a6a9f0cc666776e4a4f08729c303d2a602ce5c25ee633cd6c54c72f12d11e9d43634ca6ca4ef7da5973a52030384da"
        },
        {
          "alg" : "SHA3-384",
          "content" : "683a1f110ab84333e7517dabe175b91d7ea2fbead2f9d02acf798c588a7508bc67580642afa8d57441bc56ce610d5b0f"
        },
        {
          "alg" : "SHA3-256",
          "content" : "5e8e54209fb6b580e928e703ef11645aff1a21dfd47cca2dc0e53d0befaef09c"
        },
        {
          "alg" : "SHA3-512",
          "content" : "d79338a481605c94e144c967cb7adbc6cfd06ee6a1182b5ebc8cd8ad3deedd707931e404aa197bc94d3b5a5d82a2e6dd6a2f6cc9dafc42ce3ad5061076b05199"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-4-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://github.com/FasterXML/stax2-api"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/FasterXML/stax2-api/issues"
        },
        {
          "type" : "vcs",
          "url" : "http://github.com/FasterXML/stax2-api"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.woodstox/woodstox-core@5.4.0?type=jar",
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.woodstox",
      "name" : "woodstox-core",
      "version" : "5.4.0",
      "description" : "Woodstox is a high-performance XML processor that implements Stax (JSR-173), SAX2 and Stax2 APIs",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "89882f2098e9318ac3c5275b0ee82443"
        },
        {
          "alg" : "SHA-1",
          "content" : "3e05dcce371d3f672feba29f086ad78a93ae3996"
        },
        {
          "alg" : "SHA-256",
          "content" : "dbb958cb89f1d45238b061e146249494ff887f5f42b671a3956e98956e0d5c53"
        },
        {
          "alg" : "SHA-512",
          "content" : "b400731b6c32a1d56bf3f55a6fb5340acaf70ed2343807de8c48e9a10045db668eeee0fbaaa22d523cd6ef3b8e376cb6ccd58f05ec0310217ee36d87c340ec81"
        },
        {
          "alg" : "SHA-384",
          "content" : "fca2440f3e2e1251bc1eeef20e4cbe09882ac39241865be0c1387be5a74ddd8fb17b293eb6608f53786a62e0cfb9661b"
        },
        {
          "alg" : "SHA3-384",
          "content" : "ea9531841bb849fd3af4522a4ced686dfe1f4c2cf193bb4eaaebca50bffbc951e9c7581d40050c528d2c41f1ed792bc8"
        },
        {
          "alg" : "SHA3-256",
          "content" : "d1dc27db11970fdff1fc2c17a8b0c74c9f2878baa5357a26a568b4a5df9e5434"
        },
        {
          "alg" : "SHA3-512",
          "content" : "b7b488cdd34ae383b9bc0cc92433d239577fe3cc30ef6e2cb20d2b8825eaecb890e8e504ff6b457890a9cd4500968c387729667e882cd1304648fef1d9d96da2"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.woodstox/woodstox-core@5.4.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/FasterXML/woodstox"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/FasterXML/woodstox/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/FasterXML/woodstox"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.hadoop/hadoop-hdfs@2.10.2?type=jar",
      "publisher" : "Apache Software Foundation",
      "group" : "org.apache.hadoop",
      "name" : "hadoop-hdfs",
      "version" : "2.10.2",
      "description" : "Apache Hadoop HDFS",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "9547e0752c40a69c67164b3dc32e56aa"
        },
        {
          "alg" : "SHA-1",
          "content" : "4ab1cd9842af25a7b2877d1f8d6a4c40fcc87877"
        },
        {
          "alg" : "SHA-256",
          "content" : "b0ad642fff13157a7cb83d5cabe0320c4f5628243f844f2b1f82738417c4f675"
        },
        {
          "alg" : "SHA-512",
          "content" : "b55dc2988a3191013fcc6e519e3fd88199ad2a307af2e4d72bc308d8c1981d19be620a71aae260833cde2726e8ec57a58dda7e4a25490fdfb5ee46e97b4e2b64"
        },
        {
          "alg" : "SHA-384",
          "content" : "6873236b3ffc4e68e42ace799a353067f239b8dbd61917cf693617a171b81b55cdd284960293bd16138d42a4141849aa"
        },
        {
          "alg" : "SHA3-384",
          "content" : "cf2e0dda8669d0f438156513855906b19d5eb168b80586c084ad63213119bdec5371b6f55f09f7711bef2a24760b6d8d"
        },
        {
          "alg" : "SHA3-256",
          "content" : "0ecf3ca01b19b6dc8ba911957f5a95e8b732a88a366fc3c1f73a94e88214c914"
        },
        {
          "alg" : "SHA3-512",
          "content" : "34efeba9ba720f3783b811eda308a9f98078d80bf07308376a4897e58eeecccfd24b05b1119700305a86ade458538d81495be31ce1ed231ee7baabf2a9f126ea"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.hadoop/hadoop-hdfs@2.10.2?type=jar",
      "externalReferences" : [
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.hadoop/hadoop-hdfs-client@2.10.2?type=jar",
      "publisher" : "Apache Software Foundation",
      "group" : "org.apache.hadoop",
      "name" : "hadoop-hdfs-client",
      "version" : "2.10.2",
      "description" : "Apache Hadoop HDFS Client",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "9b66562e0212a9216d924f7168836a27"
        },
        {
          "alg" : "SHA-1",
          "content" : "c26d4c3c34fb5e651483144a6c9a3d100cfa3645"
        },
        {
          "alg" : "SHA-256",
          "content" : "e29022b3d2d11ac9247f6158ea40cfe8a0c048804a5593b22c04a24a7871b5dc"
        },
        {
          "alg" : "SHA-512",
          "content" : "1990c12c588044498faf3beafddf0e0fb0c6d1c44ae69cc98aee377c4576ed4600d292f8ac2185a6f2f8d953e6f1d51b027b8cc50191b9807ea6cc24d805afd0"
        },
        {
          "alg" : "SHA-384",
          "content" : "f79d9e389610a5fa1c52eb66100d0cd153a303bd0de904bf16bf32b227b7395531f390dcb4438f0760db972b9d523c4c"
        },
        {
          "alg" : "SHA3-384",
          "content" : "2e56835ca7704b57578a4eac14edc0803f19cb9966b9a106c88db4e0269a5fb9ff8345af2cf4e0cb27e24ffbed57c392"
        },
        {
          "alg" : "SHA3-256",
          "content" : "5acb08cb43a711d89c32ed869d6ce951d80bdcf890fa07565fc97f004d5d36f2"
        },
        {
          "alg" : "SHA3-512",
          "content" : "f02c04ad1bd02759772243677e6ee81e92a656c9afb4a719b965991bf81744b2c70dc44f7d4d7d9f87a44caf131137e440a0331ea3531fbfdcf414b204be2dce"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.hadoop/hadoop-hdfs-client@2.10.2?type=jar",
      "externalReferences" : [
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.squareup.okhttp/okhttp@2.7.5?type=jar",
      "group" : "com.squareup.okhttp",
      "name" : "okhttp",
      "version" : "2.7.5",
      "description" : "An HTTP+SPDY client for Android and Java applications",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1943a0ecbb1c503874c8c483284377e4"
        },
        {
          "alg" : "SHA-1",
          "content" : "7a15a7db50f86c4b64aa3367424a60e3a325b8f1"
        },
        {
          "alg" : "SHA-256",
          "content" : "88ac9fd1bb51f82bcc664cc1eb9c225c90dc4389d660231b4cc737bebfe7d0aa"
        },
        {
          "alg" : "SHA-512",
          "content" : "4cd162e8e54127fec029f82aee8797ad4eb87ae976973b0148d7c405255870e5cb4e2ef52791116a5bf52b87a0d0d7ab47688b921eba01272616368a5cf145d8"
        },
        {
          "alg" : "SHA-384",
          "content" : "f7513f7d5728d29ac93ea533078c6ec61b3407671b0fa7a0384669c7869a69f1d2e98268c9e5a62ab3410dbd4c9fcea3"
        },
        {
          "alg" : "SHA3-384",
          "content" : "ff2e156a63cbe975c1eb43149ae975fe67aa763750487ebc0c42e33b91076b251a341c820b967cbaf3780327c894723c"
        },
        {
          "alg" : "SHA3-256",
          "content" : "a673cff4dff28000634360d74eee71a0f9095018b9a3da1dd844ad5f7c95ba93"
        },
        {
          "alg" : "SHA3-512",
          "content" : "ddb64671877c7267b0288449632733c806ebfb81c039d74e22cc771e8942f78a63de029e201c01921a2b70b635350aa49b008558d0bbc3af57dadc31adb7cad5"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.squareup.okhttp/okhttp@2.7.5?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/square/okhttp/okhttp"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/square/okhttp/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/square/okhttp/okhttp/"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.squareup.okio/okio@1.6.0?type=jar",
      "group" : "com.squareup.okio",
      "name" : "okio",
      "version" : "1.6.0",
      "description" : "A modern I/O API for Java",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "164d1c28c323cf6e2a917d60374c5718"
        },
        {
          "alg" : "SHA-1",
          "content" : "98476622f10715998eacf9240d6b479f12c66143"
        },
        {
          "alg" : "SHA-256",
          "content" : "114bdc1f47338a68bcbc95abf2f5cdc72beeec91812f2fcd7b521c1937876266"
        },
        {
          "alg" : "SHA-512",
          "content" : "17bab3c4fde83d0865d2c3ef61b403059e44b83f38b3c42ca352be4faa28afa08416d2525f2941baaa864c7a4730672228928373ba2e2179d9d8b4976d6747ba"
        },
        {
          "alg" : "SHA-384",
          "content" : "a00830a0a6b3f435e852a7eb181b057ab11e6563cff8f1359503f498d204b9f327ed78b31e5ed902f8e154ce65cf7dad"
        },
        {
          "alg" : "SHA3-384",
          "content" : "9ab3e8c6e047006aef7f33b3cc50fb2603efc4a641c098e8ccaf4ac2d9764defb5a9739b5bc7615be1a6b2fab02342bd"
        },
        {
          "alg" : "SHA3-256",
          "content" : "150d6944c7c3176db6815bd343a47ff9c6a81091faf1280118fbed002aab0789"
        },
        {
          "alg" : "SHA3-512",
          "content" : "9f726097dacf3d9965d4334945f4ec807d186d5f80369303da75740d5d05f071838961f088543425c59123357d768a2065b620c94bb9705b3ce1312ce6d52f71"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.squareup.okio/okio@1.6.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/square/okio/okio"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/square/okio/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/square/okio/okio/"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-daemon/commons-daemon@1.0.13?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-daemon",
      "name" : "commons-daemon",
      "version" : "1.0.13",
      "description" : "Apache Commons Daemon software provides an alternative invocation mechanism for unix-daemon-like Java code.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "686f1a2cc85f8f4e939bd3cd28c9720b"
        },
        {
          "alg" : "SHA-1",
          "content" : "750856a1fdb3ddf721ccf73c3518e4211cffc3a3"
        },
        {
          "alg" : "SHA-256",
          "content" : "fd63b583fd3e8baeae22efacbd5a4f91c1fd97f56248e62e2615efa7b81daeaa"
        },
        {
          "alg" : "SHA-512",
          "content" : "80cc396ac505e01bc864ff8c244351601102c463f87b5b75e781be5866932d6a568baf0b995c4b5f9750a4fb3c2c4a5c00aea1b22fa9a7a1b43e11987add2587"
        },
        {
          "alg" : "SHA-384",
          "content" : "6be749e20f1942bc30ad8c2564460076c2de632fcd357164b29ed44487a9be461ae20a5662041c78b2372203e6411a6e"
        },
        {
          "alg" : "SHA3-384",
          "content" : "40605565bc22442226f86e8ca7eca372f6f7f558932149cf051167c2c96ca3a017c9f9cb151ad6408b52423457052f71"
        },
        {
          "alg" : "SHA3-256",
          "content" : "e416a5afb7ce017440f851d9d374643a9a5f50a9715d2951600688ec978fd916"
        },
        {
          "alg" : "SHA3-512",
          "content" : "e48894b2267eca0a1ef5ab19ff3902f8fdf9e90f11c01c59eeaed998864fd8e838ee3b2950a9b428f1749c7435b294060ffe9a9a13b723f03e2370ee7bc38ce0"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-daemon/commons-daemon@1.0.13?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://commons.apache.org/daemon/"
        },
        {
          "type" : "build-system",
          "url" : "http://vmbuild.apache.org/continuum/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/DAEMON"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/commons/proper/daemon/trunk"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty@3.10.6.Final?type=jar",
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty",
      "version" : "3.10.6.Final",
      "description" : "The Netty project is an effort to provide an asynchronous event-driven network application framework and tools for rapid development of maintainable high performance and high scalability protocol servers and clients. In other words, Netty is a NIO client server framework which enables quick and easy development of network applications such as protocol servers and clients. It greatly simplifies and streamlines network programming such as TCP and UDP socket server.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e9cdf01138257f48d796fb2cf67af53e"
        },
        {
          "alg" : "SHA-1",
          "content" : "18ed04a0e502896552854926e908509db2987a00"
        },
        {
          "alg" : "SHA-256",
          "content" : "8768a50fbe3d93a88d8e6000ea5d68e30f50dc915b3764c3c5870f70c4fb3b49"
        },
        {
          "alg" : "SHA-512",
          "content" : "37cdb98e11b42006fbb26a1c6871261d8e8cb3254183116a550d4971171f576417392395fa0168c68751078148d177af9374ee0f542af527f57531773c62cbc5"
        },
        {
          "alg" : "SHA-384",
          "content" : "7c445aae5d4dd35c2fc8e236589f5711496a4a7ca2a8a4eb47f9359d39db7789f20b0c67f1c28bacf75c2680ba7cbc1e"
        },
        {
          "alg" : "SHA3-384",
          "content" : "65e735913d97979be0c9364ca9c29501aeef15d582ab6bc523f3400ca38350b82b03177c85d918a20bb455711279299d"
        },
        {
          "alg" : "SHA3-256",
          "content" : "d15c13c07be1612c9ca6d8664be842bd67b48f91ddfb6e3a585f51c2042a499f"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c4a6f985c7e55831a047a26ceeb3b78e7d1207854ab81733ecc11ae2e8da7fb7e7c23008b4dc6bd64658f881c457ef9aecde037b57ad108fc7bd5a521cc1af6b"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty@3.10.6.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://netty.io/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-all@4.1.135.Final?type=jar",
      "group" : "io.netty",
      "name" : "netty-all",
      "version" : "4.1.135.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6a9834809df139d02bc1ef7c21c45d2e"
        },
        {
          "alg" : "SHA-1",
          "content" : "016e1ad23aee1165ca1972e2d66c856f21d8d515"
        },
        {
          "alg" : "SHA-256",
          "content" : "00d8db09beb96a6e556f56960edb3ebe558eb764f15a394d621f470c77e1114c"
        },
        {
          "alg" : "SHA-512",
          "content" : "d6678b75c787dd94ca4b792fee7852ec7ae5c30a1773eac0306da4dec7dc85d7f3649e69826c07817dde52e8c9e710e38c058f6e05e0536b698ff15db04f88f7"
        },
        {
          "alg" : "SHA-384",
          "content" : "d02a9f85b739ba1fbed2cb54312e596a185d888b46c1cbecfc06a970afc8330c2120ce0973ab0a49ca8c3beae326ccd3"
        },
        {
          "alg" : "SHA3-384",
          "content" : "9db60b0c855f24a0aa98baea7cecdb477242b6e68061600d00a302e14782643722a6db7b429249f604f409c71d5be334"
        },
        {
          "alg" : "SHA3-256",
          "content" : "dc62f21795a352197e15aababe72045a91be337ee8561f6ffe5ead65041650cc"
        },
        {
          "alg" : "SHA3-512",
          "content" : "123c60450f3cac65d7f9f13fc2e198328106fcf2f1a43ec066231e353c824db176b056be10d62c3eb9ec0b29715f5b4cb2d0431b30a3fa85e35ba75b3662c3b2"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-all@4.1.135.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/netty-all/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty/netty-all"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-buffer@4.1.135.Final?type=jar",
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-buffer",
      "version" : "4.1.135.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "fcd9f423d78592d1ca785b68ee9b16ee"
        },
        {
          "alg" : "SHA-1",
          "content" : "6e60e222c27d3534e63e519fb1a9d66c485f62bd"
        },
        {
          "alg" : "SHA-256",
          "content" : "2a194f99fc93d07c4d442d04ac71bd2dc56d3188cd0e4270cdc2a953d1956bf9"
        },
        {
          "alg" : "SHA-512",
          "content" : "a839731d75317f515256c8340d73ea4344c9f488ce2cc31c99c2788d2a33a055482ebc438ebca63a27c0d49728fe778e7d0b06a031a0244728d0b0ccddfe6407"
        },
        {
          "alg" : "SHA-384",
          "content" : "ed107c69a75793161a6e3ade436cb564224b7bd58ea551b42c5b7d10dd6384fa25538a0064dba4521beb3ca69857c455"
        },
        {
          "alg" : "SHA3-384",
          "content" : "6f1c0b2b2c428e9fdbda3aa37558fa91330be87a7fda93eb2ba66d3b224feef63120216a06e3de2388bdf8648c549f28"
        },
        {
          "alg" : "SHA3-256",
          "content" : "bb6f4ce57de81fb991b78f4e6861088e46a3e8de176a84757d48d14a2ac1ce74"
        },
        {
          "alg" : "SHA3-512",
          "content" : "13f9bafd0b5534316b77170719aab58a46daf9d7303b5541887b9171522501fff7b1fbbe6ab887a2a94b2d8455aa42fa059fce9dc21db98309d02e6539e32835"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-buffer@4.1.135.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/netty-buffer/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty/netty-buffer"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-codec@4.1.135.Final?type=jar",
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-codec",
      "version" : "4.1.135.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "d4c7467d989f3fce353fde66eb1b4bdf"
        },
        {
          "alg" : "SHA-1",
          "content" : "cf36e54dc81aa160a93780478727bdb3c3fa4600"
        },
        {
          "alg" : "SHA-256",
          "content" : "7252171264dbb5bb8ed38e77f89643b31e3cabc96144ec27b6882435d718a61e"
        },
        {
          "alg" : "SHA-512",
          "content" : "663db82a0b3a83a4417b647b0b08620c915c9f476033d241bd57790fb3e024972a2ac421a66bba49451439c101e04915828d109a76316b8533c87848b7e95453"
        },
        {
          "alg" : "SHA-384",
          "content" : "4d66221bfb9846a4abaf037c91acc3b50831210933f4d352559b075a118704eba58024e5bbaea33f1b96e38ff459030e"
        },
        {
          "alg" : "SHA3-384",
          "content" : "db590cd2eaa49fe7f49473af1dc4d55bea45c68c56caa6794455182d5fd6a0792b9aa4a614912fd57859803d437138fa"
        },
        {
          "alg" : "SHA3-256",
          "content" : "2e87051eec597bbdea9b1c6b621cc1a08c3737ad5d80abbb9dcfa7f5b6412932"
        },
        {
          "alg" : "SHA3-512",
          "content" : "6a7f5b8b01c8cd272ac0f4936867a896489854856f3b65ee7ba6dd3ecfda5bfad9e1e9150cd76d1421a6e6ef04f90847d1180c1a81b29496cf1424c0f2d39d75"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-codec@4.1.135.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/netty-codec/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty/netty-codec"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-codec-dns@4.1.135.Final?type=jar",
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-codec-dns",
      "version" : "4.1.135.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a424ef4d2ebfea699f9d1218c41f8662"
        },
        {
          "alg" : "SHA-1",
          "content" : "0814e353f6c5f9383f2b93d941961f89565f4161"
        },
        {
          "alg" : "SHA-256",
          "content" : "5e996d7ac7597f368ab114fbb91d16788918c7e5bf166345c51e56db54d50fd1"
        },
        {
          "alg" : "SHA-512",
          "content" : "6776da183ffbdef92da487c1ff071cb77f1f020c2f9730183a1959226d3bb4f8a592fa8118ea78f3f8938d35129c1bcfd60176d0802803b8897ead66a6e92846"
        },
        {
          "alg" : "SHA-384",
          "content" : "8cf961cacb0ca2ad8edc654105d746078c76a8922780ca209babf65037cdbe1f9cdbbaa9cf6a4d602e88877032867c38"
        },
        {
          "alg" : "SHA3-384",
          "content" : "cb6d88cdc3ccf23c20d89322ffb35c6172746bb8b9a785599245fc72c645aee44cad19c69a5305e0559158a7fc62b562"
        },
        {
          "alg" : "SHA3-256",
          "content" : "d396287ecffdf697be77ea8bdb43da2f9ce91e13e5abc07ee931a889c5406e99"
        },
        {
          "alg" : "SHA3-512",
          "content" : "d9cb1b743e95eed44fd9fe40db6638e6f0f870b536c240ac23364acc3be06b86e49421bc38d138c6bc30f272a90ccc9ba7cf9d0017acf03d3664cc69a40aa6e0"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-codec-dns@4.1.135.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/netty-codec-dns/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty/netty-codec-dns"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-codec-haproxy@4.1.135.Final?type=jar",
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-codec-haproxy",
      "version" : "4.1.135.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a55f85ad9d690351b6d3039b29d63447"
        },
        {
          "alg" : "SHA-1",
          "content" : "87528e179603e656da6ef57a6a3370ab675a2c86"
        },
        {
          "alg" : "SHA-256",
          "content" : "b8d83e5da03a215ac5b534ca993d8bab68b61905dec0986976cbf27226bd572f"
        },
        {
          "alg" : "SHA-512",
          "content" : "9fa52a0c577818273dc2403a5590383e02fde451fe390408e5dab881cd1b09c1ba26ec81ce25da95d13460580710238175cf5bb814a023238cf72bd382820392"
        },
        {
          "alg" : "SHA-384",
          "content" : "94213c4b1c1f8bfdec9b7556cb24e4e0cd98f900d171f6128280dc9aa278fc1619b583d1856d29384cc9566fcfac0ba8"
        },
        {
          "alg" : "SHA3-384",
          "content" : "f3eba869337e9d599e9c411c50bb6c1e8e1f5c843b3610dd824fea634939a0a5f1e9d4bc558e2b4cd43e4351b4235e1d"
        },
        {
          "alg" : "SHA3-256",
          "content" : "01d802ddcb3743ac1fc92cd33ce9a0a8bf71ff58d5913ddd442db5350564f1ab"
        },
        {
          "alg" : "SHA3-512",
          "content" : "0510c6c3b6dddae1f9b495c65eff4cc5d53b82b91f277c9f40123dd35393ed6576e3dba0e0a2badf52bfceb47878a429f3c8a3918708efddfdb86bcd14c39e9a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-codec-haproxy@4.1.135.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/netty-codec-haproxy/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty/netty-codec-haproxy"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-codec-http@4.1.135.Final?type=jar",
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-codec-http",
      "version" : "4.1.135.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "17647f3dcda67916dac602de8c8f2ca5"
        },
        {
          "alg" : "SHA-1",
          "content" : "69d785784208bae296fa74d802772687c6947754"
        },
        {
          "alg" : "SHA-256",
          "content" : "4018529d3d6aecf4044b98c75d9a90c91839ddf49c7aa484c5ac81c90a15da02"
        },
        {
          "alg" : "SHA-512",
          "content" : "47d41c724aa9763ba2b36618d4905f02546e83ea0b498f0022a9a9483c158ce88794c657a679a6cf4495680f18d2a7d2f9c70038d5d0cb27d97f36cf4b36f423"
        },
        {
          "alg" : "SHA-384",
          "content" : "a986969aaa528a168981b4b70031a3ec9adc482a78224a96ee7110840acce8d4c8c5ce0b39d330821c993f1a6483a94b"
        },
        {
          "alg" : "SHA3-384",
          "content" : "ec7423bd39906638bfd36a127f18f9fc9c8d51431aa7daa4981bc7361a1851e6afbd939f9d5c56e24ab94ada08c6ff52"
        },
        {
          "alg" : "SHA3-256",
          "content" : "c108c82107511a4d96a6dd7613f2f7a7887e6c79c2f2c0256abfbd7fa93bba54"
        },
        {
          "alg" : "SHA3-512",
          "content" : "05d36acb34894cbfb3160bf2ec19950a0a1fdd15772c9e11a7006b8357b8a9c3b0111673b2fd1ac44f3d3a9cff7f37f56671baeec290428d0df008c086ebfb03"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-codec-http@4.1.135.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/netty-codec-http/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty/netty-codec-http"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-codec-http2@4.1.135.Final?type=jar",
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-codec-http2",
      "version" : "4.1.135.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6449e3a486f2ed3a3c3d2e55eee93cd9"
        },
        {
          "alg" : "SHA-1",
          "content" : "56375e341f0ca44079b1bfb62030285b9de5d713"
        },
        {
          "alg" : "SHA-256",
          "content" : "aa4e81ab5fa3b7b243eb3e814aa582ab26c073d31b0abffdbb58ee150fa49c16"
        },
        {
          "alg" : "SHA-512",
          "content" : "aac3e7c20a1af95b8adf69b08cc09c0045f2ca4ec25516d57f8a4d5f05973369005b8b117e0c18e3741a77ffb0f50d9624bb64c81f9ddf33fe572e4607d79f29"
        },
        {
          "alg" : "SHA-384",
          "content" : "a38dd44f5cb48587f0fb42c41a64d3d4d677ecfad681c4c4bee404d79294d9b5f099458648ab7047f3846eb9e15f85cf"
        },
        {
          "alg" : "SHA3-384",
          "content" : "3d3bf5ee22ddf455393ee7ab15d888640e86618ddce6f4649fbfd06323105113376c1f7c665c76e6d2d5d9f3e34a57cd"
        },
        {
          "alg" : "SHA3-256",
          "content" : "612686c5b416a81f2bc9c8a4b553d59e6d218c83c4204b58df56f9109d2f82bb"
        },
        {
          "alg" : "SHA3-512",
          "content" : "85d4272bf01de6b1f64725dc168fb2ac00d83b2f2dd0c63f341967554f15b5dd0b902028448e7a24c9d5948f1d25b7163810c3a612b5056e212203635e5fc797"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-codec-http2@4.1.135.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/netty-codec-http2/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty/netty-codec-http2"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-codec-memcache@4.1.135.Final?type=jar",
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-codec-memcache",
      "version" : "4.1.135.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "48577e05bcb28432c8c6b960073e1da5"
        },
        {
          "alg" : "SHA-1",
          "content" : "01e47da21b44d47a416d1aa31916448bf959d311"
        },
        {
          "alg" : "SHA-256",
          "content" : "0fd42aa3e31b2ed731abd15e92c0b0ee63bd4bb7e3fa3f81270e275381c90045"
        },
        {
          "alg" : "SHA-512",
          "content" : "387d060508d1201430cc8fa5457f5c2adfa71390001695c54a2418d8200355a86dcbb56c4349955dd19a671ddcbeb711c0f78925e8ec439849db3dd1ad79ce04"
        },
        {
          "alg" : "SHA-384",
          "content" : "663f9fb53c30225acb78b31662352e8f54610fe1c62c93ef37986e2d06b4c5c5cd66b055a1b3d7ba1cbd4218e777ce5b"
        },
        {
          "alg" : "SHA3-384",
          "content" : "d264b838ef31a2d49b3e857bb0fe959a9307fa031a4e0527f2b5e2acbb7c5968ff0179e0f1d3f7baa454b897f1927c10"
        },
        {
          "alg" : "SHA3-256",
          "content" : "6a5fec9353358c7be14102550b2c9c2c28edb3b6baa13b19c994b2014853000e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "bca6c7ff8765324506f27dad0709f13ff4766eed56918b7cc096d5626710abbc2ffe3227f4b6011e8f644f6609f7fb36520f5762c0ff563b4312ca304b52c646"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-codec-memcache@4.1.135.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/netty-codec-memcache/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty/netty-codec-memcache"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-codec-mqtt@4.1.135.Final?type=jar",
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-codec-mqtt",
      "version" : "4.1.135.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "87268759cde656630d76786cd91855ee"
        },
        {
          "alg" : "SHA-1",
          "content" : "603e4cee1f3ba278c33a7ab85a6e45f701e8b203"
        },
        {
          "alg" : "SHA-256",
          "content" : "0764b53d491e95180968396cd44e072a5943f2121b54c4abaa1bf501b40af905"
        },
        {
          "alg" : "SHA-512",
          "content" : "2abff047f51f0bc872dda270efdc135c282a26c54e21caa17a7a3c07e9eb580030e0756620d6078e1e54df21ebb915be49dcba052b01d4768e22b2fac0dce0c8"
        },
        {
          "alg" : "SHA-384",
          "content" : "9713d4a118be73820541cc83b6c2b6d894b716d9abe340c79126918106011107d4b71bb8056d509efb993c01267aef2e"
        },
        {
          "alg" : "SHA3-384",
          "content" : "d3546bc4fc0035dde300b0a2f1bb27fdadfb8f36bf9171f5b060b03517f68ce28406b71579a14d3a1e58a8aa33a017bc"
        },
        {
          "alg" : "SHA3-256",
          "content" : "dcb8442116b0fd0bfee06323dbea75cc2ff44099aeec7026c554ad7509d8386a"
        },
        {
          "alg" : "SHA3-512",
          "content" : "a84755c9871866872f23ae04ca17c16b48625194ffd425f2e87e6f11360adf8edcf797d2431c1abd5391493fc5ee1a9b9cd876ffe6233b5bbdfc85905db2781e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-codec-mqtt@4.1.135.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/netty-codec-mqtt/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty/netty-codec-mqtt"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-codec-redis@4.1.135.Final?type=jar",
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-codec-redis",
      "version" : "4.1.135.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "d5083c873ff3b12b7798008eea4cab63"
        },
        {
          "alg" : "SHA-1",
          "content" : "cc49d6870a1ac62ba104c15f6a5b45ab6de8abb8"
        },
        {
          "alg" : "SHA-256",
          "content" : "627376261b231bbd912bfca7ca4ede8f5cc0b17db95fba1f250845ebadd84ae9"
        },
        {
          "alg" : "SHA-512",
          "content" : "d0fea9ff21d17478cda1cda92388b148df692ff88c0beb755ee48519aed9725a19c83f8e117a6f3a7b9ede65ea7a9ec79fad8e3484d7928df2d38467969018c3"
        },
        {
          "alg" : "SHA-384",
          "content" : "608535317b7a2fc39d7f2feec24ce4cb99df038fde4157da38d7459ef2f2e09223dc14d6f9fadfb6f62350a8bdb4d68a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "8ffc561a7db8382b6f68db4efa984a2eaff383fa1dcb7906c7143a2dc4907a1b2c0f481b7a1531554003af259833a9c3"
        },
        {
          "alg" : "SHA3-256",
          "content" : "8de4b89f8a379e3f08f6efe61e8592e6212b051b3981eeaab53b8a556c9e5a15"
        },
        {
          "alg" : "SHA3-512",
          "content" : "be8d9a713d14d89e0924aed001d2c9da5e538a971de95345ba63d44b33b0df050eda1b3ee6c21913f0c3cca59a63fccd9e152adf1b35a72372c763ab434c2227"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-codec-redis@4.1.135.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/netty-codec-redis/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty/netty-codec-redis"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-codec-smtp@4.1.135.Final?type=jar",
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-codec-smtp",
      "version" : "4.1.135.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "c67d0c7fedc0378f8ae0ce19c90d5417"
        },
        {
          "alg" : "SHA-1",
          "content" : "c6b6081c19eaf50e98c1cab6cf18ba2bb55ed3e0"
        },
        {
          "alg" : "SHA-256",
          "content" : "ef2f924bca0991926c3cc7aafba4f607e4941b1f206bf1af56c86d8a2c606e0b"
        },
        {
          "alg" : "SHA-512",
          "content" : "f1ef6027afef3a1294487dfbb6d44fbbe38a2384d34cd740db48dda92bda5648ad79e41a76f98a9bae12015c679877f3a64329593c114d5e9f45c7a6b2492ba5"
        },
        {
          "alg" : "SHA-384",
          "content" : "c8b5e16d0a025bfa532876f31b35cfc234fd84fc40f4ac34a36cb3bd8573b8251e921a1d035c04836ffb09c2325ea966"
        },
        {
          "alg" : "SHA3-384",
          "content" : "a2ea9daa213d094c738a3bfa74dbd4809ed7fd707e42f6fd45b5bd07300f119510494e9731b762e8ed1ead19657cd2ec"
        },
        {
          "alg" : "SHA3-256",
          "content" : "d8dd5bb7efdbc02a01860a3fc5bbc50ddf719eaae335807b11441390abced483"
        },
        {
          "alg" : "SHA3-512",
          "content" : "68426a1b0a494311fa1c6ed0bdc942c3d76ad822131a5d94a74f40e6f43a5ffbbdb0a20d8b1a48df38a99f467f2f82bc82892996031ea893e23d4b8c5922d637"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-codec-smtp@4.1.135.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/netty-codec-smtp/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty/netty-codec-smtp"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-codec-socks@4.1.135.Final?type=jar",
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-codec-socks",
      "version" : "4.1.135.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f022acaa2b77f55e286168e22a868932"
        },
        {
          "alg" : "SHA-1",
          "content" : "65675a46d40f11b27dce2593d05be327d083f5f2"
        },
        {
          "alg" : "SHA-256",
          "content" : "ec7a39e8d7d7e223014115a021273f011c3cb1e8fb187cbfb90a74e76d68c25c"
        },
        {
          "alg" : "SHA-512",
          "content" : "ab55a58bb253d2ad63adaef77e642f009902efa8749746798ad598e219ed487445ccc5f5c4dfaeb8a0616122b5b12257ef709c3ca834786152d7b887a674ec51"
        },
        {
          "alg" : "SHA-384",
          "content" : "68d1053454ae05519e6092ec23c1b11986dac155e128dc6f3f249653bcf8c90e71e31c8db6c88b5691efe5cc26530dd0"
        },
        {
          "alg" : "SHA3-384",
          "content" : "bd2903d5efe990b81cfc9844cbfbfc2cf36d9f73a7d137bd89eda2590d507a622d0e89ff7d5f08d52be5d2944e71d360"
        },
        {
          "alg" : "SHA3-256",
          "content" : "5d6ebec22d5ae3695aea50fff14777bc1b1452477b593ad3d44127149bf9b883"
        },
        {
          "alg" : "SHA3-512",
          "content" : "06686081615d84611543363cdb0398e9411fd7d7c47765b9cf4ee6a2599095c8d55aed91c21759b50e9507eb535b825623a4b5be39caa60444bec00b5cb22805"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-codec-socks@4.1.135.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/netty-codec-socks/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty/netty-codec-socks"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-codec-stomp@4.1.135.Final?type=jar",
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-codec-stomp",
      "version" : "4.1.135.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "7056d4fbdebd4c3f2ffde7bcd8f3ad63"
        },
        {
          "alg" : "SHA-1",
          "content" : "bc3dcd5d7a6b726571342cc6f33b7509a571783e"
        },
        {
          "alg" : "SHA-256",
          "content" : "36d7e9c6cfb4ab2e686ef64c8c06a795ff73972c89cace85473a02b1894e46fd"
        },
        {
          "alg" : "SHA-512",
          "content" : "b21a91d4896d20f71baa709305395d5725fad1d6bf8ec88075b56e8dd9051afc6f5c4fbf05650e403a42de1ab4ad58dc16eef81ca03bd8c24711376d3379a42c"
        },
        {
          "alg" : "SHA-384",
          "content" : "9cb651c529c96d4d47bf8bae0fb85c7dde5a9813cfd0078588d613331c3146524215bbb2fed756d06ed07e47892cd07c"
        },
        {
          "alg" : "SHA3-384",
          "content" : "377a6166736f732abafeb5c6b5aa3367f0c259604c2d63e8571b62a428087a636f49dd6e216a054a500ed23bdc4ec8c2"
        },
        {
          "alg" : "SHA3-256",
          "content" : "33bf07c363962368bcb73e6cae42c1fadb66a059f720aba0ab1b437cde2afa6b"
        },
        {
          "alg" : "SHA3-512",
          "content" : "d9ab8692593d5f745dba88df066a5461bf92c0695ce67ab7736dba63e8b17c47831a7838d3e35f8ebe87dbd13b35f82de661dc41ff57394e6a45d90ef0ef4575"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-codec-stomp@4.1.135.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/netty-codec-stomp/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty/netty-codec-stomp"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-codec-xml@4.1.135.Final?type=jar",
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-codec-xml",
      "version" : "4.1.135.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "5c20f298ac93c527cb76e32f0ba66b1d"
        },
        {
          "alg" : "SHA-1",
          "content" : "5ddab9109062e01d99cc696d2db72f3431249502"
        },
        {
          "alg" : "SHA-256",
          "content" : "03be935785e7729c6de021ee3b4e285b28ee654c6ed402ca6d3ed9c689c1a61f"
        },
        {
          "alg" : "SHA-512",
          "content" : "a8d161f434b5e3c0bc3a5c328d8dbe0c21d261b20fe3f4103128f6054ba44cd8f6a871c0298726cce2dda481b136dbfe65f5b5abd8ee320bc7c8d1b268d0344f"
        },
        {
          "alg" : "SHA-384",
          "content" : "8cb2309f34775017e8813fffe2e70e99b34d04132a9e66a3d6bca29221bb09fce186c4e56f304738d83dd9c531866026"
        },
        {
          "alg" : "SHA3-384",
          "content" : "c4b2e9997621c810059182a739c03eaa37a78512a2f9125eb25eb8ec4513731aebfa421b0252d85c15818e75e106768d"
        },
        {
          "alg" : "SHA3-256",
          "content" : "472fb106c765f89187def03705def9d4ff2728dc6ac1dd84063c9b475e8841e9"
        },
        {
          "alg" : "SHA3-512",
          "content" : "07efc3a670c571458be137dbbb6eeaf7f2e72e4bdc2dd894c08e33be64f25a275f9a3311e9d16ebbde141c37c65770ab4d9807b10c156b9bd361e1f84faa5294"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-codec-xml@4.1.135.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/netty-codec-xml/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty/netty-codec-xml"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-common@4.1.135.Final?type=jar",
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-common",
      "version" : "4.1.135.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "bfa2258e927ec224143136eda472297c"
        },
        {
          "alg" : "SHA-1",
          "content" : "3f1fd5004102cd1146a53d29127804569b63c90f"
        },
        {
          "alg" : "SHA-256",
          "content" : "26775ca95820711403cf065fa2ec0134a0a04ff5417c688c0237aee68b55838d"
        },
        {
          "alg" : "SHA-512",
          "content" : "a4317485b0b1434b552c98bcb69a1e1fffdffcdee22c84e61c107dfa9752faff7f5799617c81ba80861f929fe7dcf4436d7bf2af95c4eddd550ebfb75df12cc6"
        },
        {
          "alg" : "SHA-384",
          "content" : "f6dbd09db24ddfbe0b0c7c4480eddbbfc29c9db89ecd38b56e4c9f0ca49907ea45a88479ec6d95ae83c98d490159ab58"
        },
        {
          "alg" : "SHA3-384",
          "content" : "151dc11ed193e806580144e00260c6e98f82e7716fe81d7181b923fb1f2656a07acf6e324c90c35cf066e90c023462ba"
        },
        {
          "alg" : "SHA3-256",
          "content" : "5c0286ab9cd98756e203f38d8172577ed184c8236478532bbd78f85d4a583ea2"
        },
        {
          "alg" : "SHA3-512",
          "content" : "d2f40345230b7f1d5b04b78fd82de5cb94134ca12510d0e53a22245f9c24dcb420c30e8a2cffb26b474782d09cf986c57f9f99df856a481c2fc7f8d066839c10"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-common@4.1.135.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/netty-common/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty/netty-common"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-handler@4.1.135.Final?type=jar",
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-handler",
      "version" : "4.1.135.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "3ac32114d15dc2b284571f5d35c6b790"
        },
        {
          "alg" : "SHA-1",
          "content" : "567f8742a3d7a0a8be0401dada8fbdbaa7bf02b6"
        },
        {
          "alg" : "SHA-256",
          "content" : "245e74e04b6f4e8ef98853152412e3bf1499ce6fcf15329b798c8ce36c3537e2"
        },
        {
          "alg" : "SHA-512",
          "content" : "33542ba61fa2ae931d06d6e4c1df904331e0c02dee912a06793959982481df15cc284ebb105cd7de9f31b5beb140a9cd31a609f4fd71182c317a82ead35a4299"
        },
        {
          "alg" : "SHA-384",
          "content" : "9d80cf4a3d8d402b453e7ce34a4d885a2924b6a56c9ffd9fb26100e123b5ca5397deb70c46085e8714c76db792d658ed"
        },
        {
          "alg" : "SHA3-384",
          "content" : "0bcbf90f65c5333a60b15e46ac69f0b669f5a8932c3042dc3bbd4dcd0f6186a21155911148ae2f19a58394d9dddb6cb7"
        },
        {
          "alg" : "SHA3-256",
          "content" : "2844a349d6c7446874174272167217bb70287ae50244fe9f6c9159e23d804dad"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c668303216efc23b45f9efd6c02d8b7814941bcdceb63facb165334f1119a7cb76bfc042a6ca982a852f38a753da71515a02839ab325e230d1a362ce38e88760"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-handler@4.1.135.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/netty-handler/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty/netty-handler"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-transport-native-unix-common@4.1.135.Final?type=jar",
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-transport-native-unix-common",
      "version" : "4.1.135.Final",
      "description" : "Static library which contains common unix utilities.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1e2845ca46311605e0a5e1623bc22e47"
        },
        {
          "alg" : "SHA-1",
          "content" : "9ceeb22325232e9998e3f0ae396e5e4cb462672f"
        },
        {
          "alg" : "SHA-256",
          "content" : "a7895075f112611d1640a596c2678a28aab92d5681c1c14755b109b8998f995e"
        },
        {
          "alg" : "SHA-512",
          "content" : "e6be72757a08d1389ec5f78c2cb4ab099ed1dc4f1d1003ca892641a07b2fbe248bf2fb5f0b23a67999b98f2feb0e6fa9d897dae4fb6413c912a8b8945986bc11"
        },
        {
          "alg" : "SHA-384",
          "content" : "fcb44d8789ce69fa7e3245ee13d01754a3a85c6fe9a6a9ecb0ef6c904ea8833525001cfb817db8afa6e412f670f93fcd"
        },
        {
          "alg" : "SHA3-384",
          "content" : "c8ae6de42edbfe2cff295a4b808beae783eacdfa9b431b090a59340548e03f138bb50dfca3e83ea6365b96fb4a86ee7d"
        },
        {
          "alg" : "SHA3-256",
          "content" : "111d714be16afedf991598213fd8cab5f0b8ccaa6596ac6cb635b8bda62c61a0"
        },
        {
          "alg" : "SHA3-512",
          "content" : "b6bc5cbb82b3cbcb250bbc1d1548084ca6d92bf3ced1bced111f4aa3bbfe6f77f87208d781165f49045262e4fc502d5a2349257046b08a6b8432ec2e6afc3819"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-transport-native-unix-common@4.1.135.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/netty-transport-native-unix-common/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty/netty-transport-native-unix-common"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-handler-proxy@4.1.135.Final?type=jar",
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-handler-proxy",
      "version" : "4.1.135.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e981f38ac2e481c77e0685e5bcb0e284"
        },
        {
          "alg" : "SHA-1",
          "content" : "df2a683563e8ca8442a49ddc9c2da9110dcc3cef"
        },
        {
          "alg" : "SHA-256",
          "content" : "75661010630a44468f0e85d7ed8be7779c0cb1369fe85d30799cedc52e9ed3b7"
        },
        {
          "alg" : "SHA-512",
          "content" : "367aff1b592e168775d8de14f5256a714a2bbbf85deb19a2b1c5d21f85d5bd067356dc028466080b6086301bf0a9df16be98286f0b4ddae6e1a679e3f68a58a5"
        },
        {
          "alg" : "SHA-384",
          "content" : "fcd074ad72eea319a8c479f91a2ccf352199d32ea608dad8ec8f243e19e4cdbaeca3c3cdf9fdf568e73c77804b050f34"
        },
        {
          "alg" : "SHA3-384",
          "content" : "bfd4c4c8f7a4f57239a824b442cf1ad5d11e70d7abf26794342b296bc8c1e59f510f6f7c082fca349e2cc1aa9c0d5fb8"
        },
        {
          "alg" : "SHA3-256",
          "content" : "2bbd040bd29192dca98f50c9f28a711613d2bc72e1b38e20aaf91d7c8e6e0a7c"
        },
        {
          "alg" : "SHA3-512",
          "content" : "b815dc49bfc7bccae35905aae97546c9156673f7c524ec1a0f505c8e7fc0e462710e611bc212c8b5ae803c2a77d458701ae02c54d127d18a0aeaa64ead762232"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-handler-proxy@4.1.135.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/netty-handler-proxy/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty/netty-handler-proxy"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.135.Final?type=jar",
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-handler-ssl-ocsp",
      "version" : "4.1.135.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a6423af9d1c9ffc65042768a93727f84"
        },
        {
          "alg" : "SHA-1",
          "content" : "75a1692648fd24e6e56f19462d18a73885d211c2"
        },
        {
          "alg" : "SHA-256",
          "content" : "003faa1a7720fe3481e46ba5266df23e65ebe5ca4678abb1ab9ce77afb9fc4d5"
        },
        {
          "alg" : "SHA-512",
          "content" : "1643cd9de8a1a006e577e9d1ba325ac6e1d3c97a71c55915a19de4b1c15ad2953300bf59f92b075b9a01a41648b714c65fd32f41423ceaf0b859c3e25b5211ac"
        },
        {
          "alg" : "SHA-384",
          "content" : "9f8116e7122a678dee9b4901bd2e99ec02b2902aad5ff8ec6481e3836d448741042a8e85454bc052a5c2ce3c3843d50c"
        },
        {
          "alg" : "SHA3-384",
          "content" : "e51f2fe1f1eccb66620bed15105efc04e1aa6d888b313558976823ce664fd5f22853bfc96268454b5e11199229f7a81a"
        },
        {
          "alg" : "SHA3-256",
          "content" : "b7248f480af11bb455c35cde99b277fe52804ec4cd37cc9f9e4d3e3b0cdc9fa3"
        },
        {
          "alg" : "SHA3-512",
          "content" : "d4d364db6ae87d2f3770319a44e82d6ef0bacddfab42c3c48d266e2cc3cfd093823db5800a0b78ef26c474aad713ac5f03eaec2807e11f44eff7048a0830b1ea"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.135.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/netty-handler-ssl-ocsp/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty/netty-handler-ssl-ocsp"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-resolver@4.1.135.Final?type=jar",
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-resolver",
      "version" : "4.1.135.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "129c1aa96462490d58a358aceaba0553"
        },
        {
          "alg" : "SHA-1",
          "content" : "d43b00856050cfd4445a063d5816a4782ae422f9"
        },
        {
          "alg" : "SHA-256",
          "content" : "77dd03865965b6c12b9e521bddec82f035caeb33156e09c158289c5094318481"
        },
        {
          "alg" : "SHA-512",
          "content" : "f4f6d22bd7805e631780d660dfec268960780f9c73da4aa5c2835c89719cb738f457d6a833473c621ccf578cbeacfbf83764360bc50ae3d95b72fe7b5cf3a6c5"
        },
        {
          "alg" : "SHA-384",
          "content" : "efa50893602f0bbd54e7cf6e0066192882fb77b0f7271ccb8ba2f5efad3365fe0c5257dab21873300019113376ae9bcf"
        },
        {
          "alg" : "SHA3-384",
          "content" : "edd91ab9326b41343c7030bef8d897e0ba861ee9e40898ed4b7a38512c31c76b34a8e085f6f96886686b4732e7d3d7a2"
        },
        {
          "alg" : "SHA3-256",
          "content" : "316ea500ee5b62175051f725693669a4909c046e4b009164a23584a0169d6b35"
        },
        {
          "alg" : "SHA3-512",
          "content" : "3b44e554de6c1aee42d2087eb04e8b9096a5a1ed85ebdd5f8d8e2254dc4b1b3d0a3cf3daad4dfc3d9486de88c70b0b03d75f3e055e6880343d821f147f36e0bd"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-resolver@4.1.135.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/netty-resolver/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty/netty-resolver"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-resolver-dns@4.1.135.Final?type=jar",
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-resolver-dns",
      "version" : "4.1.135.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "2099aaf4771a939f4720897331acacaf"
        },
        {
          "alg" : "SHA-1",
          "content" : "0d092a2851ecef2a07722da7da80a843f7e936ae"
        },
        {
          "alg" : "SHA-256",
          "content" : "ca25581e4cebd55797ef3b4d0953b75df32c1af77fe771b96bfaa9e701cdb7c3"
        },
        {
          "alg" : "SHA-512",
          "content" : "6fc7130da77cfef4510fe9ae2bacd985980cb357d993242605e956c8c4f51bbbdfa9caf1950adaf524793ae0caa520277c0c036be9b5ae2a03447f836fe30256"
        },
        {
          "alg" : "SHA-384",
          "content" : "d858b05204f75696016ad813e8fdfd18a87d8f403bb32154fabcf1c5a08df2f97f8821142c07e08871575fb61093963a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "7d098aad0661a71b9575c9cd6752ce08f4abb3a9fe786c949aa06cf3895f6afaad4debc800565fa710f6ad26bdd97330"
        },
        {
          "alg" : "SHA3-256",
          "content" : "197fbd0361d6136445d478ebf488a050f3ce3ac6f81a95656d13a2c67490b5c4"
        },
        {
          "alg" : "SHA3-512",
          "content" : "d561f016fc0be5fddf0b45d3b84fdfd482f5fa3b8a9373778e2183a4ab3e7ca3a9e0ac66626e75763d374911358ee3e74d249037c6d2cbd1b9de416b466b5779"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-resolver-dns@4.1.135.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/netty-resolver-dns/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty/netty-resolver-dns"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-transport@4.1.135.Final?type=jar",
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-transport",
      "version" : "4.1.135.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "06b22eaac4fad8e22753969b96b2c36a"
        },
        {
          "alg" : "SHA-1",
          "content" : "cbc238f1f9707f3652252fdc48568cce0e9a01d9"
        },
        {
          "alg" : "SHA-256",
          "content" : "6bde734d1ec073142eed31b1e68cd5d68fbf241e060b37f07a164e5ecb15631c"
        },
        {
          "alg" : "SHA-512",
          "content" : "ff06cf5971ed28f46f73ecc6f5cbcb2b7dc7f54b9c046678737616fde57ec8e7ca215c63cecd5d2f09c174c1483ec7538a63781009955539be782183fba6558f"
        },
        {
          "alg" : "SHA-384",
          "content" : "043d7346fd771eba584d272ab0160aa9c10c011c3f3e7006d02191af6fdd33f73eac4d6fc5e727cba4544dea670cf4a6"
        },
        {
          "alg" : "SHA3-384",
          "content" : "599fe6ed7bfc5f22614b8bb82d57467e18c45328d6714d5055d6b2d8cd5286fb014f90672f6b51c52759d1b64222717a"
        },
        {
          "alg" : "SHA3-256",
          "content" : "bb0022cdfa7c304bda6aeb620815ca795973cec8ee1f4d5a6e10225bac004f67"
        },
        {
          "alg" : "SHA3-512",
          "content" : "92a7fee52ff206f36d150aeacab70169b3e89bb5c8c7878c2932cb8cf98738c7122584336e183cfeb132721f8f22a55b44bca1a724336cadece6ccc4d4621946"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-transport@4.1.135.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/netty-transport/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty/netty-transport"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-transport-rxtx@4.1.135.Final?type=jar",
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-transport-rxtx",
      "version" : "4.1.135.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "2e7d17d6a75315cd22ba47c8b406bd2f"
        },
        {
          "alg" : "SHA-1",
          "content" : "b4a728b28f0930e816d6b7e6ae86c3802a8426ba"
        },
        {
          "alg" : "SHA-256",
          "content" : "3966c16058cc6a5f603ff5e5dd65f970f71c52277c5a24c58eb300d95651e357"
        },
        {
          "alg" : "SHA-512",
          "content" : "b23d0c00ac87a42a79fd1899ffa1d6f60bc117c089852cb522e515a7200bd295d6c703489f7bc77527d7522c305c58632025b44a8838ddf6d60c592de41a735f"
        },
        {
          "alg" : "SHA-384",
          "content" : "b5f667c72b5cb7fed08da043afe27b2b62ae12375257983010be85426cfef923f92f0c9cb43a6655c07b6c02334558fa"
        },
        {
          "alg" : "SHA3-384",
          "content" : "5ba8c33a014eb9ca02809a7aabdfd0cc198ad1e203675f498b866b8e0e262c46be4b6c8f97a7a1a42aa249db2681fc56"
        },
        {
          "alg" : "SHA3-256",
          "content" : "323535fcd560a214d76134d7e26c2d27c4f9d3640a9b90377a8cad03c7f4a374"
        },
        {
          "alg" : "SHA3-512",
          "content" : "82b40bf7b0e409c549d61d99e3afc7a2718d428c72f215ae872a50faeb283cc5d11637354dae3ec0cab203afe48eed6e531d60515ac86995890de691a02382d9"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-transport-rxtx@4.1.135.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/netty-transport-rxtx/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty/netty-transport-rxtx"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-transport-sctp@4.1.135.Final?type=jar",
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-transport-sctp",
      "version" : "4.1.135.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "32bee1fd80ddee6a9683bcb11308a283"
        },
        {
          "alg" : "SHA-1",
          "content" : "4b052ef8863f4c25935f809ca7da11b81a07d494"
        },
        {
          "alg" : "SHA-256",
          "content" : "c41d092ed5a33fd29f52692f6bbe7dcb900bc1e4a605f982d8ded2f52307c313"
        },
        {
          "alg" : "SHA-512",
          "content" : "e6b25075e77ecb9ca6d9e0d1c76ec81814fe248c6453275aab0999e10adc8eab324537c37124e5546c0f9b6c0d92b5dc60458bd3ef4d3e128083d82b278f8390"
        },
        {
          "alg" : "SHA-384",
          "content" : "f2239424a262299fbfcd728bee1f9cb05fd19be5751d9e533fef8a2d6b4d79b9fda6b4c0411439318e91d9cab797ea33"
        },
        {
          "alg" : "SHA3-384",
          "content" : "d5e57e1442e56fdf345738e578e15bb0ad773c019b99fede50eca6139ec480eb090dbe942b7dc9ff4005d78df4e48a83"
        },
        {
          "alg" : "SHA3-256",
          "content" : "0f7820d746933ec21bb871339d3a0f9fcc6986c6a5f0f6d56ddd04668a173f51"
        },
        {
          "alg" : "SHA3-512",
          "content" : "7e6805a75e20553210bea0bfbf0f7814dedb8c0ceca42ec958788b30bfc284436e436c97209db18310d800842913bd459f87945d500d30057543d4c49118e86d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-transport-sctp@4.1.135.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/netty-transport-sctp/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty/netty-transport-sctp"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-transport-udt@4.1.135.Final?type=jar",
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-transport-udt",
      "version" : "4.1.135.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "443b7b0ec5b694db2dcb7fd66e364073"
        },
        {
          "alg" : "SHA-1",
          "content" : "12072ea50a2313acf4573bb71c0fe3154443bce0"
        },
        {
          "alg" : "SHA-256",
          "content" : "5769afeab5911ad07026922991018124ae1897d0570b0f15faa624ab8ab2fe68"
        },
        {
          "alg" : "SHA-512",
          "content" : "c2e905818c1ea46f581f351dc71cedccbe07f1b3b10855423e11ec5091cf53adec9785c5363ac734b6f17863586add805625abf3dd4431891c7d8fa283101ff7"
        },
        {
          "alg" : "SHA-384",
          "content" : "10c9a149c88c925e41bb80497bd5bd1488e7d9e32f06fe313b4d5eb5ddf507eaf5c3f01606cc93974b1eea49fdb649e0"
        },
        {
          "alg" : "SHA3-384",
          "content" : "5171cce3a9156c686747900aca4b68b699f741185e7457dcf30d9a1aba71a75e363315c79d822fb1fe1e3ae8c14ffad7"
        },
        {
          "alg" : "SHA3-256",
          "content" : "43aba081d97c88887cb455ce1cb6f26147a77f74dd061356b825aa45e1e995fd"
        },
        {
          "alg" : "SHA3-512",
          "content" : "ccda3cc348cf5a02c6fb85dbf9e57aeef0b6ae3823683718342bfc88f1245871a6d10439c21ef31b965e38e6701de203f2d2c62edbc1ad18997e89b9b7f95ee0"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-transport-udt@4.1.135.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/netty-transport-udt/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty/netty-transport-udt"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.135.Final?type=jar",
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-transport-classes-epoll",
      "version" : "4.1.135.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "5494b16595a173bc4353eb1fbc4b8033"
        },
        {
          "alg" : "SHA-1",
          "content" : "4f2bd9bcd7c91768c1f9aca8e62870ece18527bd"
        },
        {
          "alg" : "SHA-256",
          "content" : "9d9537ab9e15164c9f0dc0748884c148814a18d78ac6dfa65cf4b3d06068ce01"
        },
        {
          "alg" : "SHA-512",
          "content" : "1fb2bd89e154d771580ad2a14f954f3b0325bdf949c1cfe4102a62ff9eb53fd8b1c45373206262a64b644016302cf13f8ae8dfc8a757350402212f82b1dc4e8a"
        },
        {
          "alg" : "SHA-384",
          "content" : "d676506b94103de1b1adc82083eb84e4132c4419ee838a0cdbadef251a835d61bb427e3b4a258fd5d02493615ef67107"
        },
        {
          "alg" : "SHA3-384",
          "content" : "f71e38b5f318a186c0f405fa27a88f35a6029a64226730094db93f8714331d023775f84317d5bf4c6c9e40727f520e87"
        },
        {
          "alg" : "SHA3-256",
          "content" : "bc4e704f8a354fe07524d7eebe2852b8bcc7b61ef5dc285176f8c1d0867d9d08"
        },
        {
          "alg" : "SHA3-512",
          "content" : "1e2f5e1c527812bcda9830eac830242614842b2e0d1292f53bc0e7bddd9b6ab5816dfd0350c29cb2699b736f4e5319cce743bf3890ea117073cb350cda622e81"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.135.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/netty-transport-classes-epoll/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty/netty-transport-classes-epoll"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-transport-classes-kqueue@4.1.135.Final?type=jar",
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-transport-classes-kqueue",
      "version" : "4.1.135.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "5977675cad78c5bc5551f45afa3718f4"
        },
        {
          "alg" : "SHA-1",
          "content" : "aba0f338ca23d2c31eab9dde1b91e0bc7264fd9f"
        },
        {
          "alg" : "SHA-256",
          "content" : "b1f2c39d9bf7af4ecd1eb40b6bb92c5741460623aabf351de166beecbd06827d"
        },
        {
          "alg" : "SHA-512",
          "content" : "cbbfb7e2abdf55527fd642b3f4a66dd743a99f0e1dce2414314b7243c98e222e9e23ee0074a4e7fd84d98e3611f9d85c5a35ae52c00849666caae24d7ad1fb57"
        },
        {
          "alg" : "SHA-384",
          "content" : "736b4121c404bb494db4a794c667467f1145d1d1e0d2c526c7b78ba6bde6c46a307343d78f75f3e8f4388f5a59c261cf"
        },
        {
          "alg" : "SHA3-384",
          "content" : "bef6b1c7db38c8e5d8cc766210896c80bf82903a75e39978da8b00f31f44b9a6baff38c2457db754d895cda3a58aacf2"
        },
        {
          "alg" : "SHA3-256",
          "content" : "c470c7c8f6670b2bc50f78f821672e45cbb6ed8fd12200bef29e6ced85bdeca3"
        },
        {
          "alg" : "SHA3-512",
          "content" : "89d8406e7dec14401c6bf6649ecf8fe4cb7d89432d0a36577c68461cc1a4522d7a3eca6f2aa9827ccf6ea4d4191607e8d7e1c480099d2029beb50a99d4e15c50"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-transport-classes-kqueue@4.1.135.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/netty-transport-classes-kqueue/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty/netty-transport-classes-kqueue"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-resolver-dns-classes-macos@4.1.135.Final?type=jar",
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-resolver-dns-classes-macos",
      "version" : "4.1.135.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1cc229f2acf3ac7ea3331021f38a684f"
        },
        {
          "alg" : "SHA-1",
          "content" : "508fc43de462e60c814e76d7e23dea59b0cc4fe8"
        },
        {
          "alg" : "SHA-256",
          "content" : "4aab49a507dbbe446ad2c6a7587fe69c511defa6c273ce1a559e3458a3378a5b"
        },
        {
          "alg" : "SHA-512",
          "content" : "47d2792a6c257b22d4f61a3dbbc3150d8cada4f89343869c67af5d04282af9f53d3ae1f55b20b173d425725a8e41bb98747a37f8652428a39f0ed02cd801a326"
        },
        {
          "alg" : "SHA-384",
          "content" : "6cce60f35b59287ca061318411681bba557e046580065d326baaa9097593935b28904d10303cf6cad7b75e71648301cd"
        },
        {
          "alg" : "SHA3-384",
          "content" : "ea645153e34d957274f4c98d1796976abe8bbf11655f77f6534143a24c003f1c26a6b70ac1449a5c64058c9be157e682"
        },
        {
          "alg" : "SHA3-256",
          "content" : "de57d13e362c759ec02c183ff526b130deff23b4c376084ed8dd36f760311159"
        },
        {
          "alg" : "SHA3-512",
          "content" : "b9dd08e2ea0d488f3943027d8a92837697f4687ab3e8fbe54af9ce64c04423740e8a392042e28e81902bc4c1efc5afe7731eaf4553b546ff1900868a70ed1c20"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-resolver-dns-classes-macos@4.1.135.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/netty-resolver-dns-classes-macos/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty/netty-resolver-dns-classes-macos"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-transport-native-epoll@4.1.135.Final?classifier=linux-x86_64&type=jar",
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-transport-native-epoll",
      "version" : "4.1.135.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "97756f389188954811a6dacbfe0005ab"
        },
        {
          "alg" : "SHA-1",
          "content" : "9321b17feb084585c9286208ad2c438cc9abed30"
        },
        {
          "alg" : "SHA-256",
          "content" : "18a40063da3364cffff81c6c2097fb6ebcb45c62264dabcce45aade4fdac3125"
        },
        {
          "alg" : "SHA-512",
          "content" : "89e0517d5aded7a91dab4560ff65b7dd8ec30d8a0acadff8fd708dda843df7648cbed22225724376b699c221758a02c674b443a7d18dd707bae7c1985380cc0a"
        },
        {
          "alg" : "SHA-384",
          "content" : "a87d40e90002dac61eff262131570623bac1d6a40ceb576601c8e68f5aa791539ac1c5983b6cfc783804fcbe7b2fa51f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "015a7d8c67bd0354c13ceabc183ed717b4977d54e2b2c19602d75f439fef81e5e6618ea3222781d6bd7eecb865d5118b"
        },
        {
          "alg" : "SHA3-256",
          "content" : "48ba69067259e8ca33aecf4fa5849089ad078a309338e2f2a89a3fcb3aabc2a4"
        },
        {
          "alg" : "SHA3-512",
          "content" : "102fdaf685a08dcf3e57101b3470b967a1aa84373b1a874c3e253a66b611daade82faf6954958f018d6e4ed82c612a250bec806d0c7a60966703054fa1ac328b"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-transport-native-epoll@4.1.135.Final?classifier=linux-x86_64&type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/netty-transport-native-epoll/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty/netty-transport-native-epoll"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-transport-native-epoll@4.1.135.Final?classifier=linux-aarch_64&type=jar",
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-transport-native-epoll",
      "version" : "4.1.135.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "ffe1a2e08b3d228559111a109e1616c0"
        },
        {
          "alg" : "SHA-1",
          "content" : "9bdce15602cfe0c54e068a87b559ac998575b122"
        },
        {
          "alg" : "SHA-256",
          "content" : "6f92c8e6c63fa4af4e0f2d2428a1975005c136837c69ddd60e5b5346e57d5db8"
        },
        {
          "alg" : "SHA-512",
          "content" : "9f1d124fc1a8f287c78d3ffddc5fc36ec749a4bdb22e2296fe74cd0f317deb63d8b4c2c1edf02160b00436d82a34f738671673fe3f87dc44bdf35e01e9ed9186"
        },
        {
          "alg" : "SHA-384",
          "content" : "f819c1ee84834c9f51b2cc68023d53eae3a2df983f52a6f2914615239af301f062ec1d98a290b3a61095a4189849bbe8"
        },
        {
          "alg" : "SHA3-384",
          "content" : "796f0dca09d9dd98241292f9d6ba78c8a9574c1aca45b0a1c11dea9ec1ccb7759b7fd95038254d4c55df97ad80004a6e"
        },
        {
          "alg" : "SHA3-256",
          "content" : "f92e74a47bd1ef268b95cf4d634809ccc5ed2b1371674c032b7074c3270a42fd"
        },
        {
          "alg" : "SHA3-512",
          "content" : "14f153cb79d0f6502fd658ce557d7c4d72fc7f91f29e6c497a38dee74775a243e99f89c6f809950a2527b83fa0450ba0cc821198cd50ef24e70427621f0c8fa9"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-transport-native-epoll@4.1.135.Final?classifier=linux-aarch_64&type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/netty-transport-native-epoll/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty/netty-transport-native-epoll"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-transport-native-epoll@4.1.135.Final?classifier=linux-riscv64&type=jar",
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-transport-native-epoll",
      "version" : "4.1.135.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "80b21cb0b1bb76e20bdf70692eb42910"
        },
        {
          "alg" : "SHA-1",
          "content" : "7230d2a597c7d79b21cd2cef33fc71349b180e57"
        },
        {
          "alg" : "SHA-256",
          "content" : "d1a6d563237534fbf8b7cdb3768b0db868c3c792e50257b4de3c40a222ea7738"
        },
        {
          "alg" : "SHA-512",
          "content" : "c2cad38cd013f4324c3e437ccfc8fc1352a2239a42b75df61c4a82bdb826f68c32e11921808105cb28aab2bb25a60140620421c3afa371eb3ebbcbac8ccb0279"
        },
        {
          "alg" : "SHA-384",
          "content" : "27f11b8930fb5c9e68ce93750352f1daec29c377ce2d53f9b1c992c705bb7255e1420964489e503633623541a8402173"
        },
        {
          "alg" : "SHA3-384",
          "content" : "1c83a51a4d7091f0e4c513bc56de26c635f8cab3c5d2f05f5f118cc7c1bbecbdafad585a1076028c2ef2ceaa237d9ab2"
        },
        {
          "alg" : "SHA3-256",
          "content" : "c33dfcdf64530625ce7197782023c415e444edd3c22a455abcc6ac1af0cb6827"
        },
        {
          "alg" : "SHA3-512",
          "content" : "be584b6062e86ea1f12b3100e2f1ec1b2ff83c9adbb460f6b3806aa2d73be262360900f67fbc847459d4df1b4cc6b3994da6deb6fd9bffd6763ad682d7d77aca"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-transport-native-epoll@4.1.135.Final?classifier=linux-riscv64&type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/netty-transport-native-epoll/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty/netty-transport-native-epoll"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.135.Final?classifier=osx-x86_64&type=jar",
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-transport-native-kqueue",
      "version" : "4.1.135.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f090e4a788540c5d89ff16b91b6b878f"
        },
        {
          "alg" : "SHA-1",
          "content" : "1dc515b067ac241d44b5569e030cb81c069b86c2"
        },
        {
          "alg" : "SHA-256",
          "content" : "412e10daef5aa4647984397fa6728acf88dffd0d4c53ad91f486ea6492f8f08f"
        },
        {
          "alg" : "SHA-512",
          "content" : "aadd416c6ca179227ef3e4d2bc00d1fa86cea25199e89a2803df3341a0203a6485063319bebd9511e5a5eda154731ed05a4bc27b7d7c5affb126e62895b8d236"
        },
        {
          "alg" : "SHA-384",
          "content" : "f86a0a98cb43cd77b1cf859b42b65aa637ed1f48aeaa1acd97588023e2d6a227e6862e64c4963c765000d7173aa510ef"
        },
        {
          "alg" : "SHA3-384",
          "content" : "ceeecf0540baeea0a41e10162bef04fbe5dc366a323dfcbe1cbcba41f8d561a3d17cf633823577ba5cf380aa4a6bf09d"
        },
        {
          "alg" : "SHA3-256",
          "content" : "08953007c5276e5faa509ab09ee7e3cd6fa5a1d95ffc64e4c7620e1502c83e65"
        },
        {
          "alg" : "SHA3-512",
          "content" : "da339b712178df4d30558418f3c1d70e97c591eb5e34e2205498c9929d7abd5e2a4cfee985bfcc36098bf958a9d86d6568cdf9a3c563874568e907f6e3e4ded7"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.135.Final?classifier=osx-x86_64&type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/netty-transport-native-kqueue/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty/netty-transport-native-kqueue"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.135.Final?classifier=osx-aarch_64&type=jar",
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-transport-native-kqueue",
      "version" : "4.1.135.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "430c57c5749b8d2535b02dea36a1e919"
        },
        {
          "alg" : "SHA-1",
          "content" : "db39ef441efa9f0a264c86d7e311975813505bd6"
        },
        {
          "alg" : "SHA-256",
          "content" : "4e56dc4f9db95373218223c406d3e917d1b6f03062252be46ac9936d71b7e48c"
        },
        {
          "alg" : "SHA-512",
          "content" : "3ce04db92687e69102fb34e1f10ee1fe239e77dc73611b9009354ec0a1c4f78803554c12a18796d5a907ba2edef45507789e4758afc97fffc8a5fe1e70e5d168"
        },
        {
          "alg" : "SHA-384",
          "content" : "836f53e19bd96dbdbfec37f971a53667b8dda585b2b417e5bbac06b75fd7fb622f2ddbeff1fffbf78bce6cf7fb0c6512"
        },
        {
          "alg" : "SHA3-384",
          "content" : "fd950f750f4848e103b1c06ead6c99f24170d7fa489e3574a87ecd29fec7fb6a5f46c658115196b329d214eb51b58ed2"
        },
        {
          "alg" : "SHA3-256",
          "content" : "4d3d4a4463168cdf299adda18a5aa67013ced78f814cf5b74ebc73e88c5bd70b"
        },
        {
          "alg" : "SHA3-512",
          "content" : "f9ddb8534682a1c7c6256bf36c8eefbae483980da203b25ca7deec6a1f02f36b51efc4bfe8afa801e013a3254de9e04d32edd02a153cab04e305c9c57e4bd26c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.135.Final?classifier=osx-aarch_64&type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/netty-transport-native-kqueue/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty/netty-transport-native-kqueue"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-resolver-dns-native-macos@4.1.135.Final?classifier=osx-x86_64&type=jar",
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-resolver-dns-native-macos",
      "version" : "4.1.135.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "9aff4b62bef6c3e4cccb8fc5e72db35c"
        },
        {
          "alg" : "SHA-1",
          "content" : "160036ecf20002bf9b7b563ea2101f26c3ee64d8"
        },
        {
          "alg" : "SHA-256",
          "content" : "0c86fa27317c4172fff03a0c20286e2c62ef9d60ad78f389a83ede48a5bb54cd"
        },
        {
          "alg" : "SHA-512",
          "content" : "74ce3f47ea26a890d51e8fcbc2e25fba034b12a067b4df61734d5c7ac7d44971e8f55c3360e031f7e867e30b43ba4b8ca8d22e57ae78ed6a0cd769869feec128"
        },
        {
          "alg" : "SHA-384",
          "content" : "849b343d9e7ef7ad09756ac9e347c0c08315ee60eab116f236eacec23af1ecf4d7a8329f2a0f8699faaf5e8888e135ac"
        },
        {
          "alg" : "SHA3-384",
          "content" : "9f64f63e61b7c8b7d57d196bb6067e8842643321e32afc7ad62362c8915fdc0f92f3efa639c80173715024cf5916c41d"
        },
        {
          "alg" : "SHA3-256",
          "content" : "907a413fb830590379df951cfe91051df322ac640e5d8a4f4c4306d6217b0737"
        },
        {
          "alg" : "SHA3-512",
          "content" : "932585e4251601a5d6a6a482ae45a924fae7452e19609bc446d74c584977b6264e60bcc58761cf74b89912dad834520ec1dae16600978528a34a99488cec0b4f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-resolver-dns-native-macos@4.1.135.Final?classifier=osx-x86_64&type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/netty-resolver-dns-native-macos/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty/netty-resolver-dns-native-macos"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-resolver-dns-native-macos@4.1.135.Final?classifier=osx-aarch_64&type=jar",
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-resolver-dns-native-macos",
      "version" : "4.1.135.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "fc4e44e202d8f8ca56639094bdd92924"
        },
        {
          "alg" : "SHA-1",
          "content" : "acbc3568148b41390c324cd471de5726c7468c8b"
        },
        {
          "alg" : "SHA-256",
          "content" : "1c4c54ac07cb15a77616d4657fe4307e6b2ee070e5172761fb915104c75720d4"
        },
        {
          "alg" : "SHA-512",
          "content" : "51eeada73aabf0474be72b17548416cd4aed0ddd3e50ecfcc103eba4b011a3db4ee67395dcfb8e7ea24bff843a5748db81f1a910e343138ee2e463508ac4f967"
        },
        {
          "alg" : "SHA-384",
          "content" : "750c79109aae161416a07e6c262c6e0ffca637c41c6e5d6807b4f024b1f8c14947427d6091f7a6dfe09a10ac517e36ef"
        },
        {
          "alg" : "SHA3-384",
          "content" : "defdecf16a83287f538eca0ed40630a28a605e185f896bec99fc7a1f08f242a114d11b90b80170d99e276fc05ed7a2e4"
        },
        {
          "alg" : "SHA3-256",
          "content" : "0d88dff1e1f2450fe90257c22bc378990e2aaf9a0511dc9cecde3bf4e0bb6995"
        },
        {
          "alg" : "SHA3-512",
          "content" : "d87c3a417236eb7af6299f79a95ee580066473f9bfba22d351f85ff736cea03db97156ed2ea5c2f0ff9717a5f5fa3a71a796634bb09f2b8370033f9667597425"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-resolver-dns-native-macos@4.1.135.Final?classifier=osx-aarch_64&type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/netty-resolver-dns-native-macos/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty/netty-resolver-dns-native-macos"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/xerces/xercesImpl@2.12.2?type=jar",
      "group" : "xerces",
      "name" : "xercesImpl",
      "version" : "2.12.2",
      "description" : "Xerces2 provides high performance, fully compliant XML parsers in the Apache Xerces family. This new version of Xerces continues to build upon the Xerces Native Interface (XNI), a complete framework for building parser components and configurations that is extremely modular and easy to program. The Apache Xerces2 parser is the reference implementation of XNI but other parser components, configurations, and parsers can be written using the Xerces Native Interface. For complete design and implementation documents, refer to the XNI Manual. Xerces2 provides fully conforming XML Schema 1.0 and 1.1 processors. An experimental implementation of the \"XML Schema Definition Language (XSD): Component Designators (SCD) Candidate Recommendation (January 2010)\" is also provided for evaluation. For more information, refer to the XML Schema page. Xerces2 also provides a complete implementation of the Document Object Model Level 3 Core and Load/Save W3C Recommendations and provides a complete implementation of the XML Inclusions (XInclude) W3C Recommendation. It also provides support for OASIS XML Catalogs v1.1. Xerces2 is able to parse documents written according to the XML 1.1 Recommendation, except that it does not yet provide an option to enable normalization checking as described in section 2.13 of this specification. It also handles namespaces according to the XML Namespaces 1.1 Recommendation, and will correctly serialize XML 1.1 documents if the DOM level 3 load/save APIs are in use.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "40e4f2d5aacfbf51a9a1572d77a0e5e9"
        },
        {
          "alg" : "SHA-1",
          "content" : "f051f988aa2c9b4d25d05f95742ab0cc3ed789e2"
        },
        {
          "alg" : "SHA-256",
          "content" : "6fc991829af1708d15aea50c66f0beadcd2cfeb6968e0b2f55c1b0909883fe16"
        },
        {
          "alg" : "SHA-512",
          "content" : "bfd21f2350bf0bb546a68d3303f28c6a15cee1e630138c169344c3f65fe39a15e61c6ff4e5239f38f2f1f9e488eff4d5565a4a0774263064ab6a30aa9fcaaed3"
        },
        {
          "alg" : "SHA-384",
          "content" : "0a35ae0744f05973997b0710cc8d1d774867bc1c1b63ef5bf5f554d1b4c4ab42033f7819430e05ac623e7c8630aa7c52"
        },
        {
          "alg" : "SHA3-384",
          "content" : "b016ed02d907b21c90b4a2560aa4c778e8aad1b5ecb0ba62777f668166c6e7b8a0c0deef7d1e63b7a9b1092c64c8a4a6"
        },
        {
          "alg" : "SHA3-256",
          "content" : "875856aafff433840ee9933c01018cd18c0a13b46bd4472853698ef1dff83168"
        },
        {
          "alg" : "SHA3-512",
          "content" : "1587332fb01515a72b7856b1f566070dcd26fef33c5070039c28684215466a9b9d3a4625cf7181443e3c3a67a313a938cf0775f39b96daf43f5edd4772143c23"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/xerces/xercesImpl@2.12.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://xerces.apache.org/xerces2-j/"
        },
        {
          "type" : "vcs",
          "url" : "https://svn.apache.org/repos/asf/xerces/java/"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/xml-apis/xml-apis@1.4.01?type=jar",
      "group" : "xml-apis",
      "name" : "xml-apis",
      "version" : "1.4.01",
      "description" : "xml-commons provides an Apache-hosted set of DOM, SAX, and JAXP interfaces for use in other xml-based projects. Our hope is that we can standardize on both a common version and packaging scheme for these critical XML standards interfaces to make the lives of both our developers and users easier. The External Components portion of xml-commons contains interfaces that are defined by external standards organizations. For DOM, that's the W3C; for SAX it's David Megginson and sax.sourceforge.net; for JAXP it's Sun.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "7eaad6fea5925cca6c36ee8b3e02ac9d"
        },
        {
          "alg" : "SHA-1",
          "content" : "3789d9fada2d3d458c4ba2de349d48780f381ee3"
        },
        {
          "alg" : "SHA-256",
          "content" : "a840968176645684bb01aed376e067ab39614885f9eee44abe35a5f20ebe7fad"
        },
        {
          "alg" : "SHA-512",
          "content" : "8db0283b6840cd6407957d296b802e3edf90653e2722f8e29f86c1c0b60996c4b43e9e065e6864dab89b2138ddb0174d9b4fdda4a93f94eeb884783db82f3268"
        },
        {
          "alg" : "SHA-384",
          "content" : "bce0ec0f0f692213a1110197c4a11c333673ae0630481255d12b441a8cba70aecfaf104c3d8d9b500ed2a0a19a2bfcce"
        },
        {
          "alg" : "SHA3-384",
          "content" : "c1d8154ef6eee57dfe6ae9a1c1a2525e9ec2aab3631911a53c064ea6480c0b3b1ce8dd079db7b3693d7ef81daba28ace"
        },
        {
          "alg" : "SHA3-256",
          "content" : "09eb76497eac5012ce1000c52f4e597c4941a44b9d960b1ac58a19beb2dd63fc"
        },
        {
          "alg" : "SHA3-512",
          "content" : "1e4eb902e50b3388da4d161ee49f4d47b61dddd2ad10e6ef6cbb67c4ebc9043e0b65ae59a4a0c8eb03dd28814ce4aedd7e0d4962a0aedc3bdcf7de37cde38f66"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        },
        {
          "license" : {
            "id" : "SAX-PD",
            "url" : "http://www.saxproject.org/copying.html"
          }
        },
        {
          "license" : {
            "name" : "The W3C License",
            "url" : "http://www.w3.org/TR/2004/REC-DOM-Level-3-Core-20040407/java-binding.zip"
          }
        }
      ],
      "purl" : "pkg:maven/xml-apis/xml-apis@1.4.01?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://xml.apache.org/commons/components/external/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/bugzilla/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/xml-commons-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://svn.apache.org/viewvc/xml/commons/tags/xml-commons-external-1_4_01/"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.fusesource.leveldbjni/leveldbjni-all@1.8?type=jar",
      "publisher" : "FuseSource, Corp.",
      "group" : "org.fusesource.leveldbjni",
      "name" : "leveldbjni-all",
      "version" : "1.8",
      "description" : "An uber jar which contains all the leveldbjni platform libraries and dependencies",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6944e9bc03c7938868e53c96726ae914"
        },
        {
          "alg" : "SHA-1",
          "content" : "707350a2eeb1fa2ed77a32ddb3893ed308e941db"
        },
        {
          "alg" : "SHA-256",
          "content" : "c297213b0e6f9392305952753f3099a4c02e70b3656266fe01867e7b6c160ffe"
        },
        {
          "alg" : "SHA-512",
          "content" : "2e9f806af5d89c00e345b4516ffd325893a07f30c87274fa5b8ce314aad021633750b665d8c338fbf5adc79a527e19caf96d0b12af57e56fb8d3d8f7fd845a96"
        },
        {
          "alg" : "SHA-384",
          "content" : "f10d7ce88da5a9fada67fcbf6fc02939346e67428ee5dd7b000f884d8046131391ee1ece83885d3de60532d1227a66f2"
        },
        {
          "alg" : "SHA3-384",
          "content" : "b5919e94b576b4c30017e16f0b1a983aed10ba755bda341cd3f6056b56e0d024c1c63aa9892aab3be166c8a70fc94e47"
        },
        {
          "alg" : "SHA3-256",
          "content" : "5a8e38c0619923426a8a37733a9249986e6b9b389ebe2fe04b9235e045fea406"
        },
        {
          "alg" : "SHA3-512",
          "content" : "136aed54a48e86ec78e99ff19fc40de5dacfe9f0d9975e5e5c19024b68e35cdf88f82587d09d1f4e32db6ddb96fe7cd663bf1e01098e8366547a6a1620f938fc"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.fusesource.leveldbjni/leveldbjni-all@1.8?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://leveldbjni.fusesource.org/leveldbjni-all"
        },
        {
          "type" : "distribution-intake",
          "url" : "http://repo.fusesource.com/nexus/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/fusesource/leveldbjni/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "leveldbjni-dev-subscribe@fusesource.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/fusesource/leveldbjni/leveldbjni-all"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.18.6?type=jar",
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.jackson.core",
      "name" : "jackson-databind",
      "version" : "2.18.6",
      "description" : "General data-binding functionality for Jackson: works on core streaming API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0199275814d930ae615971749d009490"
        },
        {
          "alg" : "SHA-1",
          "content" : "7c2dd5a1a41c315150158557896096b484562417"
        },
        {
          "alg" : "SHA-256",
          "content" : "45d124736ea29dc374171fc1a8a9958e0f44407c1e0aae0297d8eee267fb592e"
        },
        {
          "alg" : "SHA-512",
          "content" : "c67c64f941fc916b80787b71b74dfa3c9137a3765c648266ff29dbaf427484d2ee7ab47e6080a9be1dd28d361cc987840d4415b597aa4ead69b5e23b20a533b2"
        },
        {
          "alg" : "SHA-384",
          "content" : "27515e5d81dbd113c3d9d13b62871066fc1ef829352dfcab2718c522c83b2f30eaf318d9a8ebb215286ff30fc83c2c7a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "7a312b73ac433b2c76166e537013aeed46fb81b0b1637c9dc275bfcabe14c92fe30b7a9c6903cebf803c5f313500091b"
        },
        {
          "alg" : "SHA3-256",
          "content" : "592598bffc53b3b095a0d513dffc414a25f1d73b79679527eb31c3b1a752d517"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c7be7e7e7057d6aad7e5beaab769d2ad412baaf84dc105c6c06dbff81c591b796e14fa9bddf4a2a7ead869e319a67aad0585c718502c1ae5cd47ac8abdb3caac"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.18.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/FasterXML/jackson"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://central.sonatype.com/api/v1/publisher"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/FasterXML/jackson-databind/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/FasterXML/jackson-databind"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.18.6?type=jar",
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.jackson.core",
      "name" : "jackson-annotations",
      "version" : "2.18.6",
      "description" : "Core annotations used for value types, used by Jackson data binding package.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "80f1abd97c7f0c93d6a199c92f9e870a"
        },
        {
          "alg" : "SHA-1",
          "content" : "d0d2f9e504c6fe443eb2785370c701f911fc87c6"
        },
        {
          "alg" : "SHA-256",
          "content" : "face5c37bee1f0768f5f198d077fc29d163becca95de9e0f13962c84d1047662"
        },
        {
          "alg" : "SHA-512",
          "content" : "e7671ba959d45c3943094e91d369df97af2990bdaa5ab1361c5f55dbb4171700ff9e0900f1376ba13afdbd9e24a708f7393ce01f0fef87e250de6bfa69500634"
        },
        {
          "alg" : "SHA-384",
          "content" : "8a1ee55f2b797feb1eff4f351d6ab7532ff6c6c23946cf22c7ecc7b54df71a2ab03c9aade8fbac01ee6d3be5a6015d17"
        },
        {
          "alg" : "SHA3-384",
          "content" : "0d1ce70acd038bdc95068909f579d2ed58411384e5c4438cd717e6e7cfbbe73a95d703bc9c71ae7f3031bc87758bc601"
        },
        {
          "alg" : "SHA3-256",
          "content" : "7f65b1e6e4202252cdfde7e49b141c3ab27f1dd63f3b80d44610435f4092c69d"
        },
        {
          "alg" : "SHA3-512",
          "content" : "85fd71a6a9f264f558727f9d07879fd76d6726061830e65c774a4911770a04e0a2aec41558b42094ba819b8ae0058bbe48c5dbce3d74be8729baf6d71f1aee4e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.18.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/FasterXML/jackson"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://central.sonatype.com/api/v1/publisher"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/FasterXML/jackson-annotations/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/FasterXML/jackson-annotations"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.hadoop/hadoop-mapreduce-client-core@2.10.2?type=jar",
      "publisher" : "Apache Software Foundation",
      "group" : "org.apache.hadoop",
      "name" : "hadoop-mapreduce-client-core",
      "version" : "2.10.2",
      "description" : "Apache Hadoop Project POM",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "dd27528b7eb179b35d725b11472a5421"
        },
        {
          "alg" : "SHA-1",
          "content" : "049f28d5dd3261273a407176437240f09b848729"
        },
        {
          "alg" : "SHA-256",
          "content" : "0bc0c95543d45ca5b64ecfb49ad7d9c5409ec3c922ef4a0374686e7c626c5312"
        },
        {
          "alg" : "SHA-512",
          "content" : "208b758ae8fa6fca4120e24d4ee685034847bce7c9ac9056d69835ecfafa33b576838e8cee26400615f30ea37d8dd4b82c1d9ec5f7331c49d63d38b0ffc96df1"
        },
        {
          "alg" : "SHA-384",
          "content" : "140aa4e4ed0050a38b82f59de56acd99a7219ef0a373ec5fa24c97f9905580d0a046a3874b4b3365a503597b52e51470"
        },
        {
          "alg" : "SHA3-384",
          "content" : "f2bfc34f640cc717c06b1ff062acc9987b83cc7d844cdc3df18013db856034d81e650e34e94164c7ad20613ddfa2a18f"
        },
        {
          "alg" : "SHA3-256",
          "content" : "d96ae3026b2c03f7e00e785a232dd64ad7d6172a8a24166a8562c363102f3b6e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "237b20feed9e003d0ac54950c98baa0a4a98440c7ea85c265ff9aa1612ffacc58dea45f985490eccaa225dc0f0c51744769d7a8e68565f2106eb3abc2f10168d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.hadoop/hadoop-mapreduce-client-core@2.10.2?type=jar",
      "externalReferences" : [
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.hadoop/hadoop-yarn-client@2.10.2?type=jar",
      "publisher" : "Apache Software Foundation",
      "group" : "org.apache.hadoop",
      "name" : "hadoop-yarn-client",
      "version" : "2.10.2",
      "description" : "Apache Hadoop Project POM",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e336518a208caaa4061678428a39bab6"
        },
        {
          "alg" : "SHA-1",
          "content" : "19ac5a1ef4eed5327ba92f9d6ff513f1bfa4d047"
        },
        {
          "alg" : "SHA-256",
          "content" : "2055ad9335203e68c990788d09aebd0ff047dbd03ff7ee5a0126170fda534847"
        },
        {
          "alg" : "SHA-512",
          "content" : "ed7597e9d48e3ed14e769ad8e17b259e22ef8962c63e0a57ed21f764f29051a3a6e31b28325e083d0d531e2660e9a11987b141170ee30aa165eda49484c9722f"
        },
        {
          "alg" : "SHA-384",
          "content" : "f41ca628ca42c3084087fdfc0123695e9820f0dcea75c5356a13fbd32638612d0188aefbc4aa4e9108d858f9a7e94195"
        },
        {
          "alg" : "SHA3-384",
          "content" : "13d4b856b099d38e80caaf8b228407f0b4de02c91a95469b3ce0546f2da59f5c65261f1435d019525ea1e53a0cff19c9"
        },
        {
          "alg" : "SHA3-256",
          "content" : "5431b9d8c11b9479307d4a65dfb53b6682c4440ed9b665809dd7b0d7ae06e560"
        },
        {
          "alg" : "SHA3-512",
          "content" : "4f610afe92675e3aa6a33d7fa77222516455ddda03bf440facd7c833b2cd9d32017c970c2a6eeb85b3b75dfa7888e3fc25433e960cd1334b154f3d61e1bd8468"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.hadoop/hadoop-yarn-client@2.10.2?type=jar",
      "externalReferences" : [
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.hadoop/hadoop-yarn-api@2.10.2?type=jar",
      "publisher" : "Apache Software Foundation",
      "group" : "org.apache.hadoop",
      "name" : "hadoop-yarn-api",
      "version" : "2.10.2",
      "description" : "Apache Hadoop Project POM",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "8c59fbf8a9da050f8e1b7d9cf51f38e8"
        },
        {
          "alg" : "SHA-1",
          "content" : "1094aa67b087960aefd4ff885ef057053009eb82"
        },
        {
          "alg" : "SHA-256",
          "content" : "b04b7708eeff04dfec1ce162c3cd37e1525087e7e692b3703b690d6f395e8fb6"
        },
        {
          "alg" : "SHA-512",
          "content" : "1f39c160ed764589a889cdcbced25f62c56fd1c2bbdab23b630325adf8105cce40f6a1da40f7661354aff79a517777a3bef094609e4de6d976d6704380685604"
        },
        {
          "alg" : "SHA-384",
          "content" : "bf69fb00b7e873baa86b551d1175868a8a7c3d2277fce4aaa593262d2b0f347a17768c9ef4846a733036982d7e1fd93d"
        },
        {
          "alg" : "SHA3-384",
          "content" : "e1acc0592b39ac21f528e4ded782823807aa7ca8fc32c470d214679ca301c0d47c7e8f818453b5d58d5b59e34b6a5ec1"
        },
        {
          "alg" : "SHA3-256",
          "content" : "b470523dd41e1d1b738dcec75570797d6530fe113ff4d716836fdd0868a57ef1"
        },
        {
          "alg" : "SHA3-512",
          "content" : "f2397718e82ae005e63c3388522a396f59236989c7bd0ef1274b37e9311e3723dbd7fd82bad84abe89391d0eb7f361f8fbdaf69c07bb0dab7ad19cceaf951bb3"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.hadoop/hadoop-yarn-api@2.10.2?type=jar",
      "externalReferences" : [
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.hadoop/hadoop-yarn-common@2.10.2?type=jar",
      "publisher" : "Apache Software Foundation",
      "group" : "org.apache.hadoop",
      "name" : "hadoop-yarn-common",
      "version" : "2.10.2",
      "description" : "Apache Hadoop Project POM",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "8403df1df0610e28bf038523830586e7"
        },
        {
          "alg" : "SHA-1",
          "content" : "da1720fb74f72c3f85b50c6b2f9029b913360183"
        },
        {
          "alg" : "SHA-256",
          "content" : "5b4c7c2bfeaf083a2404b114ecad84e9a3e69e68bd43945c4dedda20d762869d"
        },
        {
          "alg" : "SHA-512",
          "content" : "86482b1a95a1370cb3f3a40131a57ffc7dc439ea94e784b97e1d0e61ba24d25e3b78e75532a91caf819d94f85292a53d919c7886b7d704a52bb234919ceeb2d2"
        },
        {
          "alg" : "SHA-384",
          "content" : "4f0c0ed73c972395115eb0659dbe64a59fddcf54bee5b9f2597c4b1f900159057f67b44fe4803e230f4293ce1950ebf5"
        },
        {
          "alg" : "SHA3-384",
          "content" : "07db1f5459cda20e836abb1863bb4a49be1dfb1670258ebb0d9a297b276eb6bbe712eba8536b8ad16665b7476485cc92"
        },
        {
          "alg" : "SHA3-256",
          "content" : "0fc4c463e30680135c446e18c57a23074593a4b96d01f447033cfe4fb817cc0e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "872e2fc5ed590a28c570650437f8bf54aefb890d79f2b1b2f7b6ce16e0f37e536f07fb4cee5542478fa52e29bd374f153fe30d3df884b6c60e17ba6db1fc902b"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.hadoop/hadoop-yarn-common@2.10.2?type=jar",
      "externalReferences" : [
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/javax.xml.bind/jaxb-api@2.3.1?type=jar",
      "publisher" : "Oracle Corporation",
      "group" : "javax.xml.bind",
      "name" : "jaxb-api",
      "version" : "2.3.1",
      "description" : "JAXB (JSR 222) API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "bcf270d320f645ad19f5edb60091e87f"
        },
        {
          "alg" : "SHA-1",
          "content" : "8531ad5ac454cc2deb9d4d32c40c4d7451939b5d"
        },
        {
          "alg" : "SHA-256",
          "content" : "88b955a0df57880a26a74708bc34f74dcaf8ebf4e78843a28b50eae945732b06"
        },
        {
          "alg" : "SHA-512",
          "content" : "93a47b245ab830d664a48c9d14e86198a38809ce94f72ca66b3d68746ae1d7b902f6fef2d1ac1a92c01701549ae80a07db69bd822ffd831a95d8dbffad435790"
        },
        {
          "alg" : "SHA-384",
          "content" : "1eb2d7f307bda8cbf6a4ab5b2b97d830d33ca48ad94eb4bb1cbce860c54fca96285dbcb1ce9b164dbf37d4475f9a198f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "8df7409d3f60888f3a80f4d49af66c2cab6dc9f00e79c87c17703faad19d8ba6c8fc96ad897434170ce2686952921cdd"
        },
        {
          "alg" : "SHA3-256",
          "content" : "41338683257d5ecead579ccc137bdef7bc4fea685d039a3d894e1d6730425e1d"
        },
        {
          "alg" : "SHA3-512",
          "content" : "3371a96171f69876b0e6b8354674d252680e6d52c509a2645b1a0b0d7f9e176274bde6c89edb40986264733ffb6794cb7b2cba417666b1e82075bd4fd51197b6"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "CDDL-1.1"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl" : "pkg:maven/javax.xml.bind/jaxb-api@2.3.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/javaee/jaxb-spec/jaxb-api"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://maven.java.net/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/javaee/jaxb-spec/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/javaee/jaxb-spec.git/jaxb-api"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/javax.activation/javax.activation-api@1.2.0?type=jar",
      "publisher" : "Oracle",
      "group" : "javax.activation",
      "name" : "javax.activation-api",
      "version" : "1.2.0",
      "description" : "JavaBeans Activation Framework API jar",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "5e50e56bcf4a3ef3bc758f69f7643c3b"
        },
        {
          "alg" : "SHA-1",
          "content" : "85262acf3ca9816f9537ca47d5adeabaead7cb16"
        },
        {
          "alg" : "SHA-256",
          "content" : "43fdef0b5b6ceb31b0424b208b930c74ab58fac2ceeb7b3f6fd3aeb8b5ca4393"
        },
        {
          "alg" : "SHA-512",
          "content" : "8ee0db43ae402f0079a836ef2bff5d15160e3ff9d585c3283f4cf474be4edd2fcc8714d8f032efd72cae77ec5f6d304fc24fa094d9cdba5cf72966cc964af6c9"
        },
        {
          "alg" : "SHA-384",
          "content" : "d38a6af7ed00f13de8b46d49b9592af9b67adf3df47ddae5e4672f989f3f39101d446a77d1c11319acf8ff0a5b4feedf"
        },
        {
          "alg" : "SHA3-384",
          "content" : "cfee76de5976d5994758a06113368092f09b0729d753b99969d6a5ec32919428bd7c270c98cbbc682ff8ebcf2b93fd8d"
        },
        {
          "alg" : "SHA3-256",
          "content" : "aff48d0f28d8a99690c5a84c3fffdb3775452d5387e5698f4c9028c92a3b4888"
        },
        {
          "alg" : "SHA3-512",
          "content" : "0507ece74b3147de60a830071bd434569c82e03f414a2b7f0d8a225dda36720d2e2194799cdc04def1909fdec21059b67c518bb9162f7f605764d542194e721d"
        }
      ],
      "licenses" : [
        {
          "expression" : "(CDDL-1.0 OR GPL-2.0-with-classpath-exception)"
        }
      ],
      "purl" : "pkg:maven/javax.activation/javax.activation-api@1.2.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://java.net/all/javax.activation-api/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://maven.java.net/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/javaee/activation/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/javaee/activation/javax.activation-api"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.sun.jersey/jersey-client@1.9?type=jar",
      "publisher" : "Oracle Corporation",
      "group" : "com.sun.jersey",
      "name" : "jersey-client",
      "version" : "1.9",
      "description" : "Jersey is the open source (under dual CDDL+GPL license) JAX-RS (JSR 311) production quality Reference Implementation for building RESTful Web services.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "cdbba85f9cb7ce5e0ca51d610f0228e9"
        },
        {
          "alg" : "SHA-1",
          "content" : "d3c4b2b5f89db32c96ceddcb863684821910a7bb"
        },
        {
          "alg" : "SHA-256",
          "content" : "8ae03af0d06c46a51b65d123ec40f245da690991aa3669cef4767db8f36fbe68"
        },
        {
          "alg" : "SHA-512",
          "content" : "06e4c88de3491fabc0db7b46e17a7fb234be00dc9e05409f390da914b9362621af6d24380f24a1b9f6992808ec5af0382ea7658acc7f98437e8da8ad650899f6"
        },
        {
          "alg" : "SHA-384",
          "content" : "1927620343cf270e0afdc4187f9f8d856dc0fd3bae3a871fa267a3b3ae14b65ed4a22d813309716d496a005032f98895"
        },
        {
          "alg" : "SHA3-384",
          "content" : "6766e40eb40bdd158414d0b8f70d0bdd89d92a1a4d8eda37ef73cfde1880ca03c55d03886677727c271a901bd2250c1f"
        },
        {
          "alg" : "SHA3-256",
          "content" : "89d6e7452bfbaf2c36363eec77091d9d1f33ad57e20978d14cbed226fd97c4ba"
        },
        {
          "alg" : "SHA3-512",
          "content" : "3129128fda98767ddabfa3a45af990eb6ed0ff44a4e3acd542a8b6c510a5b3b836e53afbdc5e0939c84d9e177fbe2ff81ee5b54cca0b6e82d2ac0e249b76fb25"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "CDDL-1.1"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl" : "pkg:maven/com.sun.jersey/jersey-client@1.9?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://jersey.java.net/jersey-client/"
        },
        {
          "type" : "build-system",
          "url" : "http://hudson.glassfish.org/job/Jersey-trunk-multiplatform/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://maven.java.net/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://java.net/jira/browse/JERSEY/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://java.net/projects/jersey/lists/users/archive"
        },
        {
          "type" : "vcs",
          "url" : "http://java.net/projects/jersey/sources/svn/show/trunk/jersey/jersey-client"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.inject/guice@3.0?type=jar",
      "publisher" : "Google, Inc.",
      "group" : "com.google.inject",
      "name" : "guice",
      "version" : "3.0",
      "description" : "Guice is a lightweight dependency injection framework for Java 5 and above",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "ca1c7ba366884cfcd2cfb48d2395c400"
        },
        {
          "alg" : "SHA-1",
          "content" : "9d84f15fe35e2c716a02979fb62f50a29f38aefa"
        },
        {
          "alg" : "SHA-256",
          "content" : "1a59d0421ffd355cc0b70b42df1c2e9af744c8a2d0c92da379f5fca2f07f1d22"
        },
        {
          "alg" : "SHA-512",
          "content" : "8695045803e3d391a427c57573ebea1af880f68d312014e156b977e5b6fa73cd327fe49dbc218e62c1d1e7bd4940bae454cd78c6ff60bad7e3620f66ea0dafbf"
        },
        {
          "alg" : "SHA-384",
          "content" : "f32bd5aaa4ebcda4843bc3aaaad127740d0c810a729cef2b3e8a4d3974f1e130860de52936b97177cf55bd6267718705"
        },
        {
          "alg" : "SHA3-384",
          "content" : "53ce163405f251b5704e60e12275c9f838cd9a79c09b7416506e40831babbff2a5e0686beec75a94277a457ac7532093"
        },
        {
          "alg" : "SHA3-256",
          "content" : "25d02cb8d2f3528c778f1d76c0843d8aa1ee6d9248865a208cce035f685e4f93"
        },
        {
          "alg" : "SHA3-512",
          "content" : "2130aeb71bdc9fa74cd9bf3f4e2726443140b4284567c261897bfd458b6868a22a87a67a63da7e4039916a664d0bd32b629a609f1ce339d58cc61bfb20eb728f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.inject/guice@3.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://code.google.com/p/google-guice/guice/"
        },
        {
          "type" : "build-system",
          "url" : "https://grid.sonatype.org/ci/job/Google-Guice/"
        },
        {
          "type" : "distribution-intake",
          "url" : "http://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://code.google.com/p/google-guice/issues/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://groups.google.com/group/google-guice/topics"
        },
        {
          "type" : "vcs",
          "url" : "http://code.google.com/p/google-guice/source/browse/guice"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/javax.inject/javax.inject@1?type=jar",
      "group" : "javax.inject",
      "name" : "javax.inject",
      "version" : "1",
      "description" : "The javax.inject API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "289075e48b909e9e74e6c915b3631d2e"
        },
        {
          "alg" : "SHA-1",
          "content" : "6975da39a7040257bd51d21a231b76c915872d38"
        },
        {
          "alg" : "SHA-256",
          "content" : "91c77044a50c481636c32d916fd89c9118a72195390452c81065080f957de7ff"
        },
        {
          "alg" : "SHA-512",
          "content" : "e126b7ccf3e42fd1984a0beef1004a7269a337c202e59e04e8e2af714280d2f2d8d2ba5e6f59481b8dcd34aaf35c966a688d0b48ec7e96f102c274dc0d3b381e"
        },
        {
          "alg" : "SHA-384",
          "content" : "ac04c9f03ccbe35a25deb8b50280a0ca01dbe6aff0dd795d55af6112bfe3cd5817eb82f32fb18378d86cd64b07597190"
        },
        {
          "alg" : "SHA3-384",
          "content" : "fca090ecb1edeacb9fe865dc515cd1d109b323cd742d4a9733ff199a96ee96e0db4f924079520b9c189ef750f255475d"
        },
        {
          "alg" : "SHA3-256",
          "content" : "5b0054e39e522de0e0ffc4034d12f72270291fb24d94d5ffc9c4d69c25035fc6"
        },
        {
          "alg" : "SHA3-512",
          "content" : "fb290f5a70b1efc1dff12f40a0b2d7b94019f66da42e78010c0b8e61f222c4f267b67e356a9e9c346eb801e5515e36243888f280c5cb95c2dd69016a30cadeb9"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/javax.inject/javax.inject@1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://code.google.com/p/atinject/"
        },
        {
          "type" : "vcs",
          "url" : "http://code.google.com/p/atinject/source/checkout"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/aopalliance/aopalliance@1.0?type=jar",
      "group" : "aopalliance",
      "name" : "aopalliance",
      "version" : "1.0",
      "description" : "AOP Alliance",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "04177054e180d09e3998808efa0401c7"
        },
        {
          "alg" : "SHA-1",
          "content" : "0235ba8b489512805ac13a8f9ea77a1ca5ebe3e8"
        },
        {
          "alg" : "SHA-256",
          "content" : "0addec670fedcd3f113c5c8091d783280d23f75e3acb841b61a9cdb079376a08"
        },
        {
          "alg" : "SHA-512",
          "content" : "3f44a932d8c00cfeee2eb057bcd7c301a2d029063e0a916e1e20b3aec4877d19d67a2fd8aaf58fa2d5a00133d1602128a7f50912ffb6cabc7b0fdc7fbda3f8a1"
        },
        {
          "alg" : "SHA-384",
          "content" : "4dddf44338b5aff9580da2532b81c0ac3e1d09e1f28c6db871a55cad442b705dd7791eb07f9d4577d49d0be3673ba783"
        },
        {
          "alg" : "SHA3-384",
          "content" : "2bd64cbaf769c6e4e85e34f7a6119d89e16fbf55af3fc5d6cbd52eb214c367dec1ac7b9062ee0fb35a2e0acfc7c477e1"
        },
        {
          "alg" : "SHA3-256",
          "content" : "d4a726b2bf8aa58197021a7d8fca674b4b2790d4c48de43a92f728866a91c2f0"
        },
        {
          "alg" : "SHA3-512",
          "content" : "830bc3f8328be76897990e9b9fc42eef02623115e456af96ad09b20900ad615519c8c8de60155ac04fb332eaa9510110d52edd13911af76271c71d91cbd789cc"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "Public Domain"
          }
        }
      ],
      "purl" : "pkg:maven/aopalliance/aopalliance@1.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://aopalliance.sourceforge.net"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.sun.jersey.contribs/jersey-guice@1.9?type=jar",
      "publisher" : "Oracle Corporation",
      "group" : "com.sun.jersey.contribs",
      "name" : "jersey-guice",
      "version" : "1.9",
      "description" : "Projects that provide additional functionality to jersey, like integration with other projects/frameworks.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a81140d246f420c1e2eabe649417c5b1"
        },
        {
          "alg" : "SHA-1",
          "content" : "5963c28c47df7e5d6ad34cec80c071c368777f7b"
        },
        {
          "alg" : "SHA-256",
          "content" : "544fc92d2625332a9a8eeaa7a7274cf1af6703936a50afa80d92a78200a7de34"
        },
        {
          "alg" : "SHA-512",
          "content" : "e0378d72c15fc74bb7b575fe444ba5d0ca205ebb22868ed44f01d0f64b3bc55f8fb10491575abce0986a05b70546089f7e90d8ab399b5fd5cf70270fe6cb32c1"
        },
        {
          "alg" : "SHA-384",
          "content" : "c331b2f942b90654c1b2bef206a0b9a54f670c101aaed4e28e0411e6db1bfbe11c4ef32a0485e19ed7b5dd1e48d569dd"
        },
        {
          "alg" : "SHA3-384",
          "content" : "79c420d2150fae631700907833fd180990596d77a4bab0c0fd2380f9693cb4a60955da5a1b353ef39e15667afee513f3"
        },
        {
          "alg" : "SHA3-256",
          "content" : "eec6de76468b9e90e91c581f31992adf37723639d41ef7350dc0129eeba7cd23"
        },
        {
          "alg" : "SHA3-512",
          "content" : "5bbea5bcb9e290999733ca5fd0d18b3c4878f9c4d8052feff9414369cec9dbeb28deee2cae3336573e30657e35f3e03f3caa885fc058cae0ace890f4ddc4ff6f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "CDDL-1.1"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl" : "pkg:maven/com.sun.jersey.contribs/jersey-guice@1.9?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://jersey.java.net/jersey-contribs/jersey-guice/"
        },
        {
          "type" : "build-system",
          "url" : "http://hudson.glassfish.org/job/Jersey-trunk-multiplatform/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://maven.java.net/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://java.net/jira/browse/JERSEY/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://java.net/projects/jersey/lists/users/archive"
        },
        {
          "type" : "vcs",
          "url" : "http://java.net/projects/jersey/sources/svn/show/trunk/jersey/jersey-contribs/jersey-guice"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.inject.extensions/guice-servlet@3.0?type=jar",
      "publisher" : "Google, Inc.",
      "group" : "com.google.inject.extensions",
      "name" : "guice-servlet",
      "version" : "3.0",
      "description" : "Guice is a lightweight dependency injection framework for Java 5 and above",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "c9f66a5f6a0d840d9057b30853f25b85"
        },
        {
          "alg" : "SHA-1",
          "content" : "610cde0e8da5a8b7d8efb8f0b8987466ffebaaf9"
        },
        {
          "alg" : "SHA-256",
          "content" : "9e72a4b8582888d53c2f4297e93276a3c14c82880124490f2da7b16a9df1c618"
        },
        {
          "alg" : "SHA-512",
          "content" : "c9325bf3c317e820babb080b5e2453e8d08cd40b74528b38da2f63bdc2464c3209ed5f5af8d163a21c0424e1bf1252f28c9915b4591aaa864881e8ed452ec3fa"
        },
        {
          "alg" : "SHA-384",
          "content" : "1e9ee84a7d00b8a8d8a914242a1232104f594cab49d536ea3e053d0111013818171a37508ce4798af6cfc67e839fe67e"
        },
        {
          "alg" : "SHA3-384",
          "content" : "966fa9306972b30652d705937f231495c557db8c7d8a257604d03c8a30c1e3cf1ba47bb5e1ce16f684a34a21baad211c"
        },
        {
          "alg" : "SHA3-256",
          "content" : "1c07971a2d8e674756e12fb278eb873f99e571edbcb7481250befd603ef2ff22"
        },
        {
          "alg" : "SHA3-512",
          "content" : "030c11333f82540848416678abd8d09e6ea6e3826110c7130ed6d8f1ada1c816bf930b05eba4b3ab3cd4dc10a4068d78dae04f6ecb0ae383de2a9e7f9c131136"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.inject.extensions/guice-servlet@3.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://code.google.com/p/google-guice/extensions-parent/guice-servlet/"
        },
        {
          "type" : "build-system",
          "url" : "https://grid.sonatype.org/ci/job/Google-Guice/"
        },
        {
          "type" : "distribution-intake",
          "url" : "http://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://code.google.com/p/google-guice/issues/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://groups.google.com/group/google-guice/topics"
        },
        {
          "type" : "vcs",
          "url" : "http://code.google.com/p/google-guice/source/browse/extensions-parent/guice-servlet"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/it.unimi.dsi/fastutil@8.2.1?type=jar",
      "group" : "it.unimi.dsi",
      "name" : "fastutil",
      "version" : "8.2.1",
      "description" : "fastutil extends the Java Collections Framework by providing type-specific maps, sets, lists and priority queues with a small memory footprint and fast access and insertion; provides also big (64-bit) arrays, sets and lists, and fast, practical I/O classes for binary and text files.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "88e74520ae74725653d595c4462f2ce1"
        },
        {
          "alg" : "SHA-1",
          "content" : "5ad88f325e424f8dbc2be5459e21ea5cab3864e9"
        },
        {
          "alg" : "SHA-256",
          "content" : "7d336e2b61ddf6e4193a55627b7e606bf42b7e2f652df2fb836fc343dd51ba4a"
        },
        {
          "alg" : "SHA-512",
          "content" : "8178a31ad537ee25d5e16314c2a7b5e7ec4337f4f98622e96f94d9b215240015461b8243e31e9c29fa19fd66390f0d5b2bca49f5beea96d9204a0207e673b693"
        },
        {
          "alg" : "SHA-384",
          "content" : "7994f40516efab8854a0e3933df7babdda3750ab1f93a6acc1621e6fd1ea1bbf82d84641c02999e3f23ee7c3a20ab3ed"
        },
        {
          "alg" : "SHA3-384",
          "content" : "81b020baefe5d1cba60c8cc9699728949a1fd5ae4ccc61c9eb0632873303d4f2194feb5d5f65e397933d5cb24acd47ca"
        },
        {
          "alg" : "SHA3-256",
          "content" : "46cb539a7c45ebb241137b56e94a59a25fe4e2eabf9859d3b440d37dc6f836dc"
        },
        {
          "alg" : "SHA3-512",
          "content" : "7f4ba0170cafdb4a079f1685097f7d882bffab7257854143523ccbcc233f43212df3e3dffc8f38bf873ccae221c906c3f8191ac48afe6acb40fd5facd4a09ea1"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/it.unimi.dsi/fastutil@8.2.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://fastutil.di.unimi.it/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/vigna/fastutil"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.parquet/parquet-avro@1.15.2?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.parquet",
      "name" : "parquet-avro",
      "version" : "1.15.2",
      "description" : "Parquet is a columnar storage format that supports nested data. This provides the java implementation.",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "2935ab8a7512044781b77edd1152d369"
        },
        {
          "alg" : "SHA-1",
          "content" : "8fb3f543720124a25514b08db336943a45849917"
        },
        {
          "alg" : "SHA-256",
          "content" : "ffb32d4245648338966d82c9aedd461efb8785fbea27d85b2f2d1ac2a14e6808"
        },
        {
          "alg" : "SHA-512",
          "content" : "c4343d4f62779012b5f603e67935939c0b38e4bf7f392c43aca7f54b83c4655f130c9e0d185d1ca87ed72db992837ed3018e9f2b7761e3a077f35876fa0e4145"
        },
        {
          "alg" : "SHA-384",
          "content" : "013c36b2664870b446ba862ffb9c28c51758a75959c042639ad22e30bbf4171101e88d2176b22841aa98b6aa7901da99"
        },
        {
          "alg" : "SHA3-384",
          "content" : "6a9f7b45aeaa9bd1603b691d04a310b545b9d884843e510990bef7f6824824cfa56971e9060af6bef1fcc20edd611b76"
        },
        {
          "alg" : "SHA3-256",
          "content" : "7e90e8a51bf1a31cda5a177300c18a5943a6eeafdde9edf21c946fd94e95a34f"
        },
        {
          "alg" : "SHA3-512",
          "content" : "3ed0ac58b62547ed1fce0b301fb346c8e7efac173df01a16cc649f70c69bfb5e8b3583194e95aeafd833a0cb326340dfbece494a5f2d55ea6e79e08e5dfab428"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.parquet/parquet-avro@1.15.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://parquet.apache.org"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/apache/parquet-java/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "dev-subscribe@parquet.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "scm:git:git@github.com:apache/parquet-mr.git/parquet-avro"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.parquet/parquet-protobuf@1.15.2?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.parquet",
      "name" : "parquet-protobuf",
      "version" : "1.15.2",
      "description" : "Parquet is a columnar storage format that supports nested data. This provides the java implementation.",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b9c753e90da5c0d6b3a332e7159f7cb9"
        },
        {
          "alg" : "SHA-1",
          "content" : "9056b0cf492a2e234ef3cbb2155be3f148a347c7"
        },
        {
          "alg" : "SHA-256",
          "content" : "11af07df8fcd849e2857ebb45aecd5bab68dd7ecf40bc78a0b2d8067a489656d"
        },
        {
          "alg" : "SHA-512",
          "content" : "ef101162135a2785abb6b704c84bd89b82a6804cfdddb93a8e31a936558e0e175a0d20e19e9311cacbac4d714461d4cf1d069b4b6e319020928a4ac66a4855f9"
        },
        {
          "alg" : "SHA-384",
          "content" : "3bd53c3bc9132f661e54377ed1442addafd92568e4ffecac696323bd4219ecd083869516d4f94da52f93453ae84ba4fe"
        },
        {
          "alg" : "SHA3-384",
          "content" : "0ca067377cf636795de90950aa2aeb89a6651fb8c1a9adaab530545cc7f6280fae02d790bd7f8ee938bbb42d258976b2"
        },
        {
          "alg" : "SHA3-256",
          "content" : "896dabe26d53ec34650cad9f528d8353f56926eba0ea8a00450146c20055dde2"
        },
        {
          "alg" : "SHA3-512",
          "content" : "52901cdd93b9d9a58b7364e2500c9d1a39c6aa5a047c0de291e9a8482dd695777c1a5173fa1ab21ad6f2fff1de4c2eb1274b24a591870ad30ceb39d7963a9a67"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.parquet/parquet-protobuf@1.15.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://parquet.apache.org"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/apache/parquet-java/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "dev-subscribe@parquet.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "scm:git:git@github.com:apache/parquet-mr.git/parquet-protobuf"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.protobuf/protobuf-java-util@3.25.5?type=jar",
      "group" : "com.google.protobuf",
      "name" : "protobuf-java-util",
      "version" : "3.25.5",
      "description" : "Utilities for Protocol Buffers",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "16ac8649c95e9ac6550190f4944665d6"
        },
        {
          "alg" : "SHA-1",
          "content" : "38cc5ce479603e36466feda2a9f1dfdb2210ef00"
        },
        {
          "alg" : "SHA-256",
          "content" : "dacc58b2c3d2fa8d4bddc1acb881e78d6cf7c137dd78bc1d67f6aca732436a8d"
        },
        {
          "alg" : "SHA-512",
          "content" : "bd9411eba3911839ded3dc26536e3383f3135738ec0f17ecd29681f99cbc8dd50dfce73b7da9ab80eca6adea5271cff337192e7d96fea17fe27ee92e69a4d07f"
        },
        {
          "alg" : "SHA-384",
          "content" : "eca054684915d1f1986ca6292ff81bdb6d7a42f57ba8a68bf961c1213531991018b185939b53b29591fd9294b6bf222b"
        },
        {
          "alg" : "SHA3-384",
          "content" : "b352c39152f509ce45b9191876654d6e646ff6f5354e5bbf2b68831fad0d1142bd000ddbb4be53072607cfe0f1d80cab"
        },
        {
          "alg" : "SHA3-256",
          "content" : "ec8e617bda95d5b9e3a484dd75a9b7bfca7fdb7a18b40db657a66cc519e4043e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "7f3c63c2d379fdaf3c6cc0cf3c6ddfc695574baab09eb194853c920d4889777e2c42c36dde4c479a16c56bdf3e63170b780a342643e86fe6fd17b70dcbb58323"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause",
            "url" : "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.protobuf/protobuf-java-util@3.25.5?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://developers.google.com/protocol-buffers/protobuf-java-util/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/protocolbuffers/protobuf/protobuf-java-util"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.api.grpc/proto-google-common-protos@2.41.0?type=jar",
      "publisher" : "Google LLC",
      "group" : "com.google.api.grpc",
      "name" : "proto-google-common-protos",
      "version" : "2.41.0",
      "description" : "PROTO library for proto-google-common-protos",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "34f905dc1d9cf3280b12a64f03c6bfd8"
        },
        {
          "alg" : "SHA-1",
          "content" : "13dfa68e2a2693660c0aa91928733f9296e12456"
        },
        {
          "alg" : "SHA-256",
          "content" : "49edeba62f334053b91aa9455c95e38449269891b920dbc36daa74e959a3d89a"
        },
        {
          "alg" : "SHA-512",
          "content" : "9d1fdeee3fbc6e2868329f3073bbf735804085281207ab331ecce3f73f64b55d4641968e9a91ead1ab7cad7b2d73c64dd935fbf99cea28e3e1f4b4f36fd6a78b"
        },
        {
          "alg" : "SHA-384",
          "content" : "ea5919e77c2e4b5ca0af5cc5d74091fb175e83924184e12516b96909be55a1e941b07f324720ff74b462e0cdbd0603d3"
        },
        {
          "alg" : "SHA3-384",
          "content" : "0d72a656dde4010ce042f4e3631718dcd1b82c411281849a26bdf9896a259edd2ad680186a7c448edca777b437e8c936"
        },
        {
          "alg" : "SHA3-256",
          "content" : "a2e282f67512ffcb4b7b15c5d57b57d122dc0ee7582272f1b11888dd5e843480"
        },
        {
          "alg" : "SHA3-512",
          "content" : "e4ca3ada69bcd42aa59e4b0817392da4ae613b27b9ef49246218a05b7f73a2b3e0956134694bcc86c2ff25c4a1b5a579622e0ada8ae679c5af76ac7a5f542dda"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.api.grpc/proto-google-common-protos@2.41.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/googleapis/sdk-platform-java"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://google.oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/googleapis/sdk-platform-java/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/googleapis/sdk-platform-java"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.twitter.elephantbird/elephant-bird-core@4.4?type=jar",
      "publisher" : "Twitter",
      "group" : "com.twitter.elephantbird",
      "name" : "elephant-bird-core",
      "version" : "4.4",
      "description" : "Core utilities.",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e89af2a86c1afeb309898424eff27335"
        },
        {
          "alg" : "SHA-1",
          "content" : "310062d31d96ae7ca3007618543c734519ff4104"
        },
        {
          "alg" : "SHA-256",
          "content" : "e6d945258b9654819464478390d7ad351f03b0dc9572de57120460301640bed8"
        },
        {
          "alg" : "SHA-512",
          "content" : "600ea1e704684ad3226927c1b03b5a5e7d5b0d3f1d1455936d36867597f7ebfe4754036c5d64019bfc349ad48e6742c2c7068a5859a764498145d99a578d959c"
        },
        {
          "alg" : "SHA-384",
          "content" : "2facf4fa223e97313d8acac395606a415c1a5cb48ec5f596b6e1e18a47997c39e750c606f97ec672bf38edc81ff58a22"
        },
        {
          "alg" : "SHA3-384",
          "content" : "f0908b6cec998fbdd97e2e7f355c2e25e7a2c6ef1d4ea99142aa11850ecbf2e4e196844ed8d7bbbafff5738dcee9af77"
        },
        {
          "alg" : "SHA3-256",
          "content" : "fce21bc929f1bf497177e69aa7a4401674f242ea55a733bca18f0af78f1119d2"
        },
        {
          "alg" : "SHA3-512",
          "content" : "837cc1e6883cb89309c18396d54b10613738630800ae74ea88a7c7db9746f6ee2634b3593af2c096b42319a12694589cc05ac79b3d122227d3ca80a5569a739e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.twitter.elephantbird/elephant-bird-core@4.4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/kevinweil/elephant-bird/elephant-bird-core"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/kevinweil/elephant-bird/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/kevinweil/elephant-bird/elephant-bird-core"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.twitter.elephantbird/elephant-bird-hadoop-compat@4.4?type=jar",
      "publisher" : "Twitter",
      "group" : "com.twitter.elephantbird",
      "name" : "elephant-bird-hadoop-compat",
      "version" : "4.4",
      "description" : "Utilities for dealing with Hadoop incompatibilities between 1.x and 2.x",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0aa7f9729c37e7c52b91c9e23ec8611b"
        },
        {
          "alg" : "SHA-1",
          "content" : "b35b2db1868284bbbf35ee41328603b5fe147c5b"
        },
        {
          "alg" : "SHA-256",
          "content" : "f23f6a2e1e323b146674817db24564796b90455f3f9e3e56dcf4992ae9cabb5e"
        },
        {
          "alg" : "SHA-512",
          "content" : "256d0124ea8430cbf1162ba8a5113d1b27d1a567f6d1de215b13798754aab14904c74affb45543d81db5754febab8f80aa4075d292101f89883797825ccb235c"
        },
        {
          "alg" : "SHA-384",
          "content" : "b1dc757455020ba2a0cceeb02a74a6cb91bce1507c188d6e46fb5e21167fc3bdf8c8713d7df85978f333172ea8359727"
        },
        {
          "alg" : "SHA3-384",
          "content" : "7815c02d1b82de06fb0eb4c58afc93af2f6b2e38db57a9cd8586d0f46d9367ea37c8629622056e14ebb9627cf89aee71"
        },
        {
          "alg" : "SHA3-256",
          "content" : "f42e6c725f335d91e95cdccb140b47fd04f9e9e8189259b008b4d77907d13128"
        },
        {
          "alg" : "SHA3-512",
          "content" : "0a6d44387dfd2585c3c38edc30eb91cefc789d5add776955d138a944adc00779db04767b9c1fd2b4e8a1548c7fcc7d004518918d6bc3a595b26b9084de63c629"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.twitter.elephantbird/elephant-bird-hadoop-compat@4.4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/kevinweil/elephant-bird/elephant-bird-hadoop-compat"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/kevinweil/elephant-bird/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/kevinweil/elephant-bird/elephant-bird-hadoop-compat"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.thrift/libthrift@0.13.0?type=jar",
      "group" : "org.apache.thrift",
      "name" : "libthrift",
      "version" : "0.13.0",
      "description" : "Thrift is a software framework for scalable cross-language services development.",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "31132a57eacc3e7cd2b7af626b5f1ff9"
        },
        {
          "alg" : "SHA-1",
          "content" : "0e5af3b6dc164eb2c699b70bf67a0babef507faf"
        },
        {
          "alg" : "SHA-256",
          "content" : "f261ec1cfb7452e25c584cb4440389dffce59a6d38dfe91d12ec790594629b6e"
        },
        {
          "alg" : "SHA-512",
          "content" : "0116d91c18d206f1a65c870269d165f3ce70a6c6f78a54e1ab2061d7ac111cf25fec2e60834f39c100f2cec607b510d3bc9cf77fd63f454448c843dcaeac5dcc"
        },
        {
          "alg" : "SHA-384",
          "content" : "8a5064849bd8b3e1aa11866f265664e928d492112de6cbc4c9dd13df6a5d970e98ea09205fca43bc18f70ab736185058"
        },
        {
          "alg" : "SHA3-384",
          "content" : "66f535316eca633690618687493bf7bf73df6961a543154d85411be982829b2c60ec40c7bff2f298e007fe100ff22352"
        },
        {
          "alg" : "SHA3-256",
          "content" : "777bc93a6d776754082380ab0f2ffad42c9fbe2f0acdd7de6d73973d83d8036c"
        },
        {
          "alg" : "SHA3-512",
          "content" : "cd7e2243ec13c3e0e14d271ab025f7d4329cb7d9ebc3073319d2110638cdbeeda22a629b1ef44b8a2504bb0f05c087baad48d77e150d99264b14322f4d75b3a5"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.thrift/libthrift@0.13.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://thrift.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/thrift"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.googlecode.json-simple/json-simple@1.1?type=jar",
      "group" : "com.googlecode.json-simple",
      "name" : "json-simple",
      "version" : "1.1",
      "description" : "A simple Java toolkit for JSON",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "eb342044fc56be9ba49fbfc9789f1bb5"
        },
        {
          "alg" : "SHA-1",
          "content" : "5e303a03d04e6788dddfa3655272580ae0fc13bb"
        },
        {
          "alg" : "SHA-256",
          "content" : "2d9484f4c649f708f47f9a479465fc729770ee65617dca3011836602264f6439"
        },
        {
          "alg" : "SHA-512",
          "content" : "f9caafc041eea982d5ba266482418dca05d46fb992bef3f076a83d564765083a0870e30f68e7c6fc8c80ebd3c88b087eecd2f8455c12daaf7db3b5a975b622e4"
        },
        {
          "alg" : "SHA-384",
          "content" : "8b08037bb87aef9ba1d6236332834b6ab24602084097f10416de8b40e14a0d2108ec0fa877348655b8ccdc3598d47341"
        },
        {
          "alg" : "SHA3-384",
          "content" : "b7d5578beb966f002e851c9bcda5fc487e0c2cbeb14e49fea7ac3b02ad9ff5636ac9e16abb017c6a841b68eca52d2413"
        },
        {
          "alg" : "SHA3-256",
          "content" : "ac4609e5fae460fc0586b14c6171e4f5e738ea25c6772a279bd0e21e1efcc95c"
        },
        {
          "alg" : "SHA3-512",
          "content" : "4a80925f23a26e7a91e94bc28c6c6e5e5bc5e633842f33b4ee0eed8402f76d41f3a89d0761719bf2b9c964b64aa900bd7c53d0d972c15a7a6fdebef8b6b62266"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.googlecode.json-simple/json-simple@1.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://code.google.com/p/json-simple/"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.protobuf/protobuf-java@4.32.1?type=jar",
      "group" : "com.google.protobuf",
      "name" : "protobuf-java",
      "version" : "4.32.1",
      "description" : "Core Protocol Buffers library. Protocol Buffers are a way of encoding structured data in an efficient yet extensible format.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "57c0012599d0c1d3176675ca1ccee4a0"
        },
        {
          "alg" : "SHA-1",
          "content" : "e757b7f2b21298e341a6fbe126a6919e539da2ef"
        },
        {
          "alg" : "SHA-256",
          "content" : "8c99e4d971338bafb0b0b1d1cea9b1bbb3dc9630eb9c25109e4c7c27bca832cb"
        },
        {
          "alg" : "SHA-512",
          "content" : "c15c854b0c40af3c5372a8ca526dc4f6412ee9391a1c32ee1a3b44862c48eafdf230ea0dbb30b09cf7fbb263cd9333532fd8c6009bac4a16ed1df1abc6988363"
        },
        {
          "alg" : "SHA-384",
          "content" : "b64a725115d1afe2ccd48a32642817462de521d422629d5b24c738d4cd40151727942fcc0de19c7991e30ba185e2a485"
        },
        {
          "alg" : "SHA3-384",
          "content" : "152cc2fd35b3efe4a92e942c6a1eb2b14247f3ff1d3748952c425de260694cb88eab7b141e592d261dd9c8b25fa6edba"
        },
        {
          "alg" : "SHA3-256",
          "content" : "f936942f69681d77cfe49141d9e87030ccba22d9b419ee3d5d3f1426649b7d4a"
        },
        {
          "alg" : "SHA3-512",
          "content" : "bff2adaaa9b9179d5703b0cd0c6ff8cae00b24b6f83bc1c3cbf1d7d79a0aa3e463614280d3c6d4a48f09daadd4aa3b62cae28af0847a5a4d8a4ebafdc5f12414"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause",
            "url" : "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.protobuf/protobuf-java@4.32.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://developers.google.com/protocol-buffers/protobuf-java/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/protocolbuffers/protobuf/protobuf-java"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
      "publisher" : "QOS.ch",
      "group" : "org.slf4j",
      "name" : "slf4j-api",
      "version" : "1.7.36",
      "description" : "The slf4j API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "872da51f5de7f3923da4de871d57fd85"
        },
        {
          "alg" : "SHA-1",
          "content" : "6c62681a2f655b49963a5983b8b0950a6120ae14"
        },
        {
          "alg" : "SHA-256",
          "content" : "d3ef575e3e4979678dc01bf1dcce51021493b4d11fb7f1be8ad982877c16a1c0"
        },
        {
          "alg" : "SHA-512",
          "content" : "f9b033fc019a44f98b16048da7e2b59edd4a6a527ba60e358f65ab88e0afae03a9340f1b3e8a543d49fa542290f499c5594259affa1ff3e6e7bf3b428d4c610b"
        },
        {
          "alg" : "SHA-384",
          "content" : "2b14ad035877087157e379d3277dcdcd79e58d6bdb147c47d29e377d75ce53ad42cafbf22f5fb7827c7e946ff4876b9a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "3bc3110dafb8d5be16a39f3b2671a466463cd99eb39610c0e4719a7bf2d928f2ea213c734887c6926a07c4cca7769e4b"
        },
        {
          "alg" : "SHA3-256",
          "content" : "ba2608179fcf46e2291a90b9cbb4aa30d718e481f59c350cc21c73b88d826881"
        },
        {
          "alg" : "SHA3-512",
          "content" : "14c4edcd19702ef607d78826839d8a6d3a39157df54b89a801d3d3cbbe1307131a77671b041c761122730fb1387888c5ec2e46bdd80e1cb07f8f144676441824"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/license/mit/"
          }
        }
      ],
      "purl" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.slf4j.org"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/qos-ch/slf4j/slf4j-api"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.flink/flink-shaded-force-shading@20.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.flink",
      "name" : "flink-shaded-force-shading",
      "version" : "20.0",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "9971c3d248dd2ea79add93f77fb0f24f"
        },
        {
          "alg" : "SHA-1",
          "content" : "4c21de8cf9ca8e93777e5d1c4a7a0a2f61852401"
        },
        {
          "alg" : "SHA-256",
          "content" : "50773dc0f2ab1831754513a8861374c0e47b077dbcc33956fe3a6cd02308d0f8"
        },
        {
          "alg" : "SHA-512",
          "content" : "5b7a0bc48a25e82da9d9f8f9a01afe30bc7411b04924d8af72f4120a937b0a3f3999a51e3a55718783d71b97000d1d18568cfb48cb609d33cd201dfe10a7f0b2"
        },
        {
          "alg" : "SHA-384",
          "content" : "3b04f01b51dda20aef349e623f6c8de4713b15f095f4af220ef77c22f0b815687bb60c9def912c2e4eff3513132d7cc7"
        },
        {
          "alg" : "SHA3-384",
          "content" : "b0378ce70a9f05966229d15f8a5f6682280f63b5494040e1002a210128878799c5761bfa1b1b5d4204a0dabb8687f90e"
        },
        {
          "alg" : "SHA3-256",
          "content" : "0e0b42aa42a5be9a215f4e893efabe6773e5c8d54299daf714e36984410c4549"
        },
        {
          "alg" : "SHA3-512",
          "content" : "e8754f8fec246e8de00e9634f8a2c9821af3ebcc194ef570328dcc6e1395b0263d5ae875a702aa69e5a9602616afc3ef51a4b63e70c6df00646b495df87ebd1d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.flink/flink-shaded-force-shading@20.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://flink.apache.org/flink-shaded-force-shading"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink-shaded/flink-shaded-force-shading"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar",
      "group" : "com.google.code.findbugs",
      "name" : "jsr305",
      "version" : "1.3.9",
      "description" : "JSR305 Annotations for Findbugs",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1d5a772e400b04bb67a7ef4a0e0996d8"
        },
        {
          "alg" : "SHA-1",
          "content" : "40719ea6961c0cb6afaeb6a921eaa1f6afd4cfdf"
        },
        {
          "alg" : "SHA-256",
          "content" : "905721a0eea90a81534abb7ee6ef4ea2e5e645fa1def0a5cd88402df1b46c9ed"
        },
        {
          "alg" : "SHA-512",
          "content" : "06da282cfd8e30d9f8cf17702b8709172b00e22b75a627a1d85f8989615b8a1a401bc25d9aee7b14aed1d9b5df73bf2ea8d66f9c8468d9577c29f0ccfa2cc70a"
        },
        {
          "alg" : "SHA-384",
          "content" : "56e6b41ef62eb5edfed0203802cefae9c2df86388148e420bb0c687abb2b80e14d5c2a82d5b35dce4badaf148f94eada"
        },
        {
          "alg" : "SHA3-384",
          "content" : "58c3bf89fa1afa75c2c5078159fd28e27b2273d437f26aaaa7391310b6f0823f3cf476a24f5631c0881f3f7e946d99be"
        },
        {
          "alg" : "SHA3-256",
          "content" : "c333ea5faedfa78e0614a2620438d5724eab093df4e960918391b6a44c2915b0"
        },
        {
          "alg" : "SHA3-512",
          "content" : "67ec31448e156cc72dd036060b460bb2667a13b1cbe500b6b7eed3235b1994b44c39f440ebd07b21ec9595b166ad61121d4f6a132b5b313c558ab21b72599425"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://findbugs.sourceforge.net/"
        },
        {
          "type" : "vcs",
          "url" : "http://findbugs.googlecode.com/svn/trunk/"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.objenesis/objenesis@3.4?type=jar",
      "publisher" : "Joe Walnes, Henri Tremblay, Leonardo Mesquita",
      "group" : "org.objenesis",
      "name" : "objenesis",
      "version" : "3.4",
      "description" : "A library for instantiating Java objects",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "51242320cb2bb25a3f36e2e21fa87de0"
        },
        {
          "alg" : "SHA-1",
          "content" : "675cbe121a68019235d27f6c34b4f0ac30e07418"
        },
        {
          "alg" : "SHA-256",
          "content" : "95488102feaf2e2858adf6b299353677dac6c15294006f8ed1c5556f8e3cd251"
        },
        {
          "alg" : "SHA-512",
          "content" : "951a01075a5462cc989b8d8fb1b7089848eb825ee4e563bab139f121f5f515fbb5cf2ac607a5528cbd3929e610910113346956a4448fa39bf41fd8147e5eac6f"
        },
        {
          "alg" : "SHA-384",
          "content" : "8865ca08b684b72d9dcb620f01974022d864e8e5e0e4b469287bf4720536ee51735f29c7f05da563c967e1e2f1c52589"
        },
        {
          "alg" : "SHA3-384",
          "content" : "730526cb3490fdb1770264395afdc3782fd3397617582dde8bc2807512672f624e2f5b2206d9f615524b92ccdfba191a"
        },
        {
          "alg" : "SHA3-256",
          "content" : "f22667e2f7f0f86b48015d3995e3edbec9e81929c6860e9af1063c629a114ae2"
        },
        {
          "alg" : "SHA3-512",
          "content" : "465202eb4e341003b66a38a36d676656d17adf66267dc87cfbc6bcd6ee6fd3914423160e01c38d3f505c7f358674dd9e9f08dd7df73196f04e56cae01d4fe91e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.objenesis/objenesis@3.4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://objenesis.org/objenesis"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/easymock/objenesis/objenesis"
        }
      ]
    }
  ],
  "dependencies" : [
    {
      "ref" : "pkg:maven/io.confluent.flink/flink-parquet@2.2.0-cp1?type=jar",
      "dependsOn" : [
        "pkg:maven/io.confluent.flink/flink-core@2.2.0-cp1?type=jar",
        "pkg:maven/io.confluent.flink/flink-table-common@2.2.0-cp1?type=jar",
        "pkg:maven/io.confluent.flink/flink-avro@2.2.0-cp1?type=jar",
        "pkg:maven/io.confluent.flink/flink-connector-files@2.2.0-cp1?type=jar",
        "pkg:maven/io.confluent.flink/flink-hadoop-fs@2.2.0-cp1?type=jar",
        "pkg:maven/io.confluent.flink/flink-runtime@2.2.0-cp1?type=jar",
        "pkg:maven/org.apache.parquet/parquet-hadoop@1.15.2?type=jar",
        "pkg:maven/org.apache.hadoop/hadoop-common@2.10.2?type=jar",
        "pkg:maven/org.apache.hadoop/hadoop-hdfs@2.10.2?type=jar",
        "pkg:maven/org.apache.hadoop/hadoop-mapreduce-client-core@2.10.2?type=jar",
        "pkg:maven/it.unimi.dsi/fastutil@8.2.1?type=jar",
        "pkg:maven/org.apache.parquet/parquet-avro@1.15.2?type=jar",
        "pkg:maven/org.apache.parquet/parquet-protobuf@1.15.2?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java@4.32.1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/org.apache.flink/flink-shaded-force-shading@20.0?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.confluent.flink/flink-core@2.2.0-cp1?type=jar",
      "dependsOn" : [
        "pkg:maven/io.confluent.flink/flink-core-api@2.2.0-cp1?type=jar",
        "pkg:maven/io.confluent.flink/flink-annotations@2.2.0-cp1?type=jar",
        "pkg:maven/org.apache.flink/flink-shaded-asm-9@9.6-20.0?type=jar",
        "pkg:maven/org.apache.flink/flink-shaded-jackson@2.18.2-20.0?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar",
        "pkg:maven/org.snakeyaml/snakeyaml-engine@2.6?type=jar",
        "pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar",
        "pkg:maven/com.esotericsoftware/kryo@5.6.2?type=jar",
        "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar",
        "pkg:maven/org.apache.commons/commons-compress@1.26.0?type=jar",
        "pkg:maven/org.apache.flink/flink-shaded-guava@33.4.0-jre-20.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.confluent.flink/flink-core-api@2.2.0-cp1?type=jar",
      "dependsOn" : [
        "pkg:maven/io.confluent.flink/flink-annotations@2.2.0-cp1?type=jar",
        "pkg:maven/io.confluent.flink/flink-metrics-core@2.2.0-cp1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.confluent.flink/flink-annotations@2.2.0-cp1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.confluent.flink/flink-metrics-core@2.2.0-cp1?type=jar",
      "dependsOn" : [
        "pkg:maven/io.confluent.flink/flink-annotations@2.2.0-cp1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.flink/flink-shaded-asm-9@9.6-20.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.flink/flink-shaded-jackson@2.18.2-20.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.snakeyaml/snakeyaml-engine@2.6?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.esotericsoftware/kryo@5.6.2?type=jar",
      "dependsOn" : [
        "pkg:maven/com.esotericsoftware/reflectasm@1.11.9?type=jar",
        "pkg:maven/org.objenesis/objenesis@3.4?type=jar",
        "pkg:maven/com.esotericsoftware/minlog@1.3.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.esotericsoftware/reflectasm@1.11.9?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.objenesis/objenesis@3.4?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.esotericsoftware/minlog@1.3.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-compress@1.26.0?type=jar",
      "dependsOn" : [
        "pkg:maven/commons-io/commons-io@2.15.1?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/commons-io/commons-io@2.15.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.flink/flink-shaded-guava@33.4.0-jre-20.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.confluent.flink/flink-table-common@2.2.0-cp1?type=jar",
      "dependsOn" : [
        "pkg:maven/io.confluent.flink/flink-core@2.2.0-cp1?type=jar",
        "pkg:maven/org.apache.flink/flink-shaded-asm-9@9.6-20.0?type=jar",
        "pkg:maven/com.ibm.icu/icu4j@67.1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.ibm.icu/icu4j@67.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.confluent.flink/flink-avro@2.2.0-cp1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.avro/avro@1.11.5?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.avro/avro@1.11.5?type=jar",
      "dependsOn" : [
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.18.6?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.18.6?type=jar",
        "pkg:maven/org.apache.commons/commons-compress@1.26.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.18.6?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.18.6?type=jar",
      "dependsOn" : [
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.18.6?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.18.6?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.18.6?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.confluent.flink/flink-connector-files@2.2.0-cp1?type=jar",
      "dependsOn" : [
        "pkg:maven/io.confluent.flink/flink-file-sink-common@2.2.0-cp1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.confluent.flink/flink-file-sink-common@2.2.0-cp1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.confluent.flink/flink-hadoop-fs@2.2.0-cp1?type=jar",
      "dependsOn" : [
        "pkg:maven/io.confluent.flink/flink-core@2.2.0-cp1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.confluent.flink/flink-runtime@2.2.0-cp1?type=jar",
      "dependsOn" : [
        "pkg:maven/io.confluent.flink/flink-datastream-api@2.2.0-cp1?type=jar",
        "pkg:maven/io.confluent.flink/flink-core@2.2.0-cp1?type=jar",
        "pkg:maven/io.confluent.flink/flink-rpc-core@2.2.0-cp1?type=jar",
        "pkg:maven/io.confluent.flink/flink-rpc-akka-loader@2.2.0-cp1?type=jar",
        "pkg:maven/io.confluent.flink/flink-queryable-state-client-java@2.2.0-cp1?type=jar",
        "pkg:maven/io.confluent.flink/flink-hadoop-fs@2.2.0-cp1?type=jar",
        "pkg:maven/commons-io/commons-io@2.15.1?type=jar",
        "pkg:maven/org.apache.flink/flink-shaded-netty@4.1.100.Final-20.0?type=jar",
        "pkg:maven/org.apache.flink/flink-shaded-guava@33.4.0-jre-20.0?type=jar",
        "pkg:maven/org.apache.flink/flink-shaded-jackson@2.18.2-20.0?type=jar",
        "pkg:maven/org.apache.flink/flink-shaded-zookeeper-3@3.8.4-20.0?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar",
        "pkg:maven/io.confluent.flink/flink-connector-datagen@2.2.0-cp1?type=jar",
        "pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar",
        "pkg:maven/commons-cli/commons-cli@1.5.0?type=jar",
        "pkg:maven/org.javassist/javassist@3.24.0-GA?type=jar",
        "pkg:maven/org.xerial.snappy/snappy-java@1.1.10.7?type=jar",
        "pkg:maven/tools.profiler/async-profiler@2.9?type=jar",
        "pkg:maven/org.lz4/lz4-java@1.8.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.confluent.flink/flink-datastream-api@2.2.0-cp1?type=jar",
      "dependsOn" : [
        "pkg:maven/io.confluent.flink/flink-core-api@2.2.0-cp1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.confluent.flink/flink-rpc-core@2.2.0-cp1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.confluent.flink/flink-rpc-akka-loader@2.2.0-cp1?type=jar",
      "dependsOn" : [
        "pkg:maven/io.confluent.flink/flink-core@2.2.0-cp1?type=jar",
        "pkg:maven/io.confluent.flink/flink-rpc-core@2.2.0-cp1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.confluent.flink/flink-queryable-state-client-java@2.2.0-cp1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.flink/flink-shaded-netty@4.1.100.Final-20.0?type=jar",
        "pkg:maven/org.apache.flink/flink-shaded-guava@33.4.0-jre-20.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.flink/flink-shaded-netty@4.1.100.Final-20.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.flink/flink-shaded-zookeeper-3@3.8.4-20.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.confluent.flink/flink-connector-datagen@2.2.0-cp1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-cli/commons-cli@1.5.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.javassist/javassist@3.24.0-GA?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.xerial.snappy/snappy-java@1.1.10.7?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/tools.profiler/async-profiler@2.9?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.lz4/lz4-java@1.8.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.parquet/parquet-hadoop@1.15.2?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.parquet/parquet-column@1.15.2?type=jar",
        "pkg:maven/org.apache.parquet/parquet-format-structures@1.15.2?type=jar",
        "pkg:maven/org.apache.parquet/parquet-common@1.15.2?type=jar",
        "pkg:maven/org.apache.parquet/parquet-jackson@1.15.2?type=jar",
        "pkg:maven/io.airlift/aircompressor@2.0.2?type=jar",
        "pkg:maven/commons-pool/commons-pool@1.6?type=jar",
        "pkg:maven/com.github.luben/zstd-jni@1.5.6-6?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.parquet/parquet-column@1.15.2?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.parquet/parquet-common@1.15.2?type=jar",
        "pkg:maven/org.apache.parquet/parquet-encoding@1.15.2?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.parquet/parquet-common@1.15.2?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.parquet/parquet-format-structures@1.15.2?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.parquet/parquet-format-structures@1.15.2?type=jar",
      "dependsOn" : [
        "pkg:maven/javax.annotation/javax.annotation-api@1.3.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/javax.annotation/javax.annotation-api@1.3.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.parquet/parquet-encoding@1.15.2?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.parquet/parquet-common@1.15.2?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.parquet/parquet-jackson@1.15.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.airlift/aircompressor@2.0.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-pool/commons-pool@1.6?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.github.luben/zstd-jni@1.5.6-6?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.hadoop/hadoop-common@2.10.2?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.hadoop/hadoop-annotations@2.10.2?type=jar",
        "pkg:maven/com.google.guava/guava@32.0.0-jre?type=jar",
        "pkg:maven/commons-cli/commons-cli@1.5.0?type=jar",
        "pkg:maven/org.apache.commons/commons-math3@3.6.1?type=jar",
        "pkg:maven/xmlenc/xmlenc@0.52?type=jar",
        "pkg:maven/org.apache.httpcomponents/httpclient@4.5.13?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.15?type=jar",
        "pkg:maven/commons-io/commons-io@2.15.1?type=jar",
        "pkg:maven/commons-net/commons-net@3.1?type=jar",
        "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar",
        "pkg:maven/javax.servlet/servlet-api@2.5?type=jar",
        "pkg:maven/org.mortbay.jetty/jetty@6.1.26?type=jar",
        "pkg:maven/org.mortbay.jetty/jetty-util@6.1.26?type=jar",
        "pkg:maven/org.mortbay.jetty/jetty-sslengine@6.1.26?type=jar",
        "pkg:maven/javax.servlet.jsp/jsp-api@2.1?type=jar",
        "pkg:maven/com.sun.jersey/jersey-core@1.9?type=jar",
        "pkg:maven/com.sun.jersey/jersey-json@1.9?type=jar",
        "pkg:maven/com.sun.jersey/jersey-server@1.9?type=jar",
        "pkg:maven/commons-logging/commons-logging@1.1.3?type=jar",
        "pkg:maven/net.java.dev.jets3t/jets3t@0.9.0?type=jar",
        "pkg:maven/commons-lang/commons-lang@2.6?type=jar",
        "pkg:maven/commons-configuration/commons-configuration@1.7?type=jar",
        "pkg:maven/commons-digester/commons-digester@1.8?type=jar",
        "pkg:maven/commons-beanutils/commons-beanutils@1.11.0?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/org.codehaus.jackson/jackson-core-asl@1.9.13?type=jar",
        "pkg:maven/org.codehaus.jackson/jackson-mapper-asl@1.9.14.jdk17-redhat-00001?type=jar",
        "pkg:maven/org.apache.avro/avro@1.11.5?type=jar",
        "pkg:maven/com.google.code.gson/gson@2.10.1?type=jar",
        "pkg:maven/org.apache.hadoop/hadoop-auth@2.10.2?type=jar",
        "pkg:maven/com.jcraft/jsch@0.1.55?type=jar",
        "pkg:maven/org.apache.curator/curator-client@2.13.0?type=jar",
        "pkg:maven/org.apache.curator/curator-recipes@2.13.0?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar",
        "pkg:maven/org.apache.htrace/htrace-core4@4.1.0-incubating?type=jar",
        "pkg:maven/org.apache.zookeeper/zookeeper@3.8.4?type=jar",
        "pkg:maven/org.apache.commons/commons-compress@1.26.0?type=jar",
        "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1?type=jar",
        "pkg:maven/com.fasterxml.woodstox/woodstox-core@5.4.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.hadoop/hadoop-annotations@2.10.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.guava/guava@32.0.0-jre?type=jar",
      "dependsOn" : [
        "pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar",
        "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar",
        "pkg:maven/org.checkerframework/checker-qual@3.33.0?type=jar",
        "pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0?type=jar",
        "pkg:maven/com.google.j2objc/j2objc-annotations@2.8?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.checkerframework/checker-qual@3.33.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.j2objc/j2objc-annotations@2.8?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-math3@3.6.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/xmlenc/xmlenc@0.52?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.httpcomponents/httpclient@4.5.13?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.httpcomponents/httpcore@4.4.14?type=jar",
        "pkg:maven/commons-logging/commons-logging@1.1.3?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.15?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.httpcomponents/httpcore@4.4.14?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-logging/commons-logging@1.1.3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-codec/commons-codec@1.15?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-net/commons-net@3.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/javax.servlet/servlet-api@2.5?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.mortbay.jetty/jetty@6.1.26?type=jar",
      "dependsOn" : [
        "pkg:maven/org.mortbay.jetty/jetty-util@6.1.26?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.mortbay.jetty/jetty-util@6.1.26?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.mortbay.jetty/jetty-sslengine@6.1.26?type=jar",
      "dependsOn" : [
        "pkg:maven/org.mortbay.jetty/jetty@6.1.26?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/javax.servlet.jsp/jsp-api@2.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.sun.jersey/jersey-core@1.9?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.sun.jersey/jersey-json@1.9?type=jar",
      "dependsOn" : [
        "pkg:maven/org.codehaus.jettison/jettison@1.1?type=jar",
        "pkg:maven/com.sun.xml.bind/jaxb-impl@2.2.3-1?type=jar",
        "pkg:maven/org.codehaus.jackson/jackson-core-asl@1.9.13?type=jar",
        "pkg:maven/org.codehaus.jackson/jackson-mapper-asl@1.9.14.jdk17-redhat-00001?type=jar",
        "pkg:maven/org.codehaus.jackson/jackson-jaxrs@1.8.3?type=jar",
        "pkg:maven/org.codehaus.jackson/jackson-xc@1.8.3?type=jar",
        "pkg:maven/com.sun.jersey/jersey-core@1.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.jettison/jettison@1.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.sun.xml.bind/jaxb-impl@2.2.3-1?type=jar",
      "dependsOn" : [
        "pkg:maven/javax.xml.bind/jaxb-api@2.3.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/javax.xml.bind/jaxb-api@2.3.1?type=jar",
      "dependsOn" : [
        "pkg:maven/javax.activation/javax.activation-api@1.2.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/javax.activation/javax.activation-api@1.2.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.jackson/jackson-core-asl@1.9.13?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.jackson/jackson-mapper-asl@1.9.14.jdk17-redhat-00001?type=jar",
      "dependsOn" : [
        "pkg:maven/org.codehaus.jackson/jackson-core-asl@1.9.13?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.jackson/jackson-jaxrs@1.8.3?type=jar",
      "dependsOn" : [
        "pkg:maven/org.codehaus.jackson/jackson-core-asl@1.9.13?type=jar",
        "pkg:maven/org.codehaus.jackson/jackson-mapper-asl@1.9.14.jdk17-redhat-00001?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.jackson/jackson-xc@1.8.3?type=jar",
      "dependsOn" : [
        "pkg:maven/org.codehaus.jackson/jackson-core-asl@1.9.13?type=jar",
        "pkg:maven/org.codehaus.jackson/jackson-mapper-asl@1.9.14.jdk17-redhat-00001?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.sun.jersey/jersey-server@1.9?type=jar",
      "dependsOn" : [
        "pkg:maven/asm/asm@3.1?type=jar",
        "pkg:maven/com.sun.jersey/jersey-core@1.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/asm/asm@3.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/net.java.dev.jets3t/jets3t@0.9.0?type=jar",
      "dependsOn" : [
        "pkg:maven/commons-codec/commons-codec@1.15?type=jar",
        "pkg:maven/commons-logging/commons-logging@1.1.3?type=jar",
        "pkg:maven/org.apache.httpcomponents/httpclient@4.5.13?type=jar",
        "pkg:maven/org.apache.httpcomponents/httpcore@4.4.14?type=jar",
        "pkg:maven/com.jamesmurty.utils/java-xmlbuilder@1.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.jamesmurty.utils/java-xmlbuilder@1.2?type=jar",
      "dependsOn" : [
        "pkg:maven/net.iharder/base64@2.3.8?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/net.iharder/base64@2.3.8?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-lang/commons-lang@2.6?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-configuration/commons-configuration@1.7?type=jar",
      "dependsOn" : [
        "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar",
        "pkg:maven/commons-lang/commons-lang@2.6?type=jar",
        "pkg:maven/commons-logging/commons-logging@1.1.3?type=jar",
        "pkg:maven/commons-beanutils/commons-beanutils@1.11.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/commons-beanutils/commons-beanutils@1.11.0?type=jar",
      "dependsOn" : [
        "pkg:maven/commons-logging/commons-logging@1.1.3?type=jar",
        "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/commons-digester/commons-digester@1.8?type=jar",
      "dependsOn" : [
        "pkg:maven/commons-logging/commons-logging@1.1.3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.google.code.gson/gson@2.10.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.hadoop/hadoop-auth@2.10.2?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.15?type=jar",
        "pkg:maven/org.apache.httpcomponents/httpclient@4.5.13?type=jar",
        "pkg:maven/com.nimbusds/nimbus-jose-jwt@9.37.4?type=jar",
        "pkg:maven/org.apache.directory.server/apacheds-kerberos-codec@2.0.0-M15?type=jar",
        "pkg:maven/org.apache.zookeeper/zookeeper@3.8.4?type=jar",
        "pkg:maven/org.apache.curator/curator-framework@2.13.0?type=jar",
        "pkg:maven/com.google.guava/guava@32.0.0-jre?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.nimbusds/nimbus-jose-jwt@9.37.4?type=jar",
      "dependsOn" : [
        "pkg:maven/com.github.stephenc.jcip/jcip-annotations@1.0-1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.github.stephenc.jcip/jcip-annotations@1.0-1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.directory.server/apacheds-kerberos-codec@2.0.0-M15?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.directory.server/apacheds-i18n@2.0.0-M15?type=jar",
        "pkg:maven/org.apache.directory.api/api-asn1-api@1.0.0-M20?type=jar",
        "pkg:maven/org.apache.directory.api/api-util@1.0.0-M20?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.directory.server/apacheds-i18n@2.0.0-M15?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.directory.api/api-asn1-api@1.0.0-M20?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.directory.api/api-util@1.0.0-M20?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.zookeeper/zookeeper@3.8.4?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.zookeeper/zookeeper-jute@3.8.4?type=jar",
        "pkg:maven/org.apache.yetus/audience-annotations@0.12.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/commons-io/commons-io@2.15.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.zookeeper/zookeeper-jute@3.8.4?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.yetus/audience-annotations@0.12.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.yetus/audience-annotations@0.12.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.curator/curator-framework@2.13.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.curator/curator-client@2.13.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.curator/curator-client@2.13.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.zookeeper/zookeeper@3.8.4?type=jar",
        "pkg:maven/com.google.guava/guava@32.0.0-jre?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.jcraft/jsch@0.1.55?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.curator/curator-recipes@2.13.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.curator/curator-framework@2.13.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.htrace/htrace-core4@4.1.0-incubating?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.woodstox/woodstox-core@5.4.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.hadoop/hadoop-hdfs@2.10.2?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.hadoop/hadoop-hdfs-client@2.10.2?type=jar",
        "pkg:maven/com.google.guava/guava@32.0.0-jre?type=jar",
        "pkg:maven/org.mortbay.jetty/jetty@6.1.26?type=jar",
        "pkg:maven/org.mortbay.jetty/jetty-util@6.1.26?type=jar",
        "pkg:maven/com.sun.jersey/jersey-core@1.9?type=jar",
        "pkg:maven/com.sun.jersey/jersey-server@1.9?type=jar",
        "pkg:maven/commons-cli/commons-cli@1.5.0?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.15?type=jar",
        "pkg:maven/commons-io/commons-io@2.15.1?type=jar",
        "pkg:maven/commons-lang/commons-lang@2.6?type=jar",
        "pkg:maven/commons-logging/commons-logging@1.1.3?type=jar",
        "pkg:maven/commons-daemon/commons-daemon@1.0.13?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java@4.32.1?type=jar",
        "pkg:maven/javax.servlet/servlet-api@2.5?type=jar",
        "pkg:maven/org.codehaus.jackson/jackson-core-asl@1.9.13?type=jar",
        "pkg:maven/org.codehaus.jackson/jackson-mapper-asl@1.9.14.jdk17-redhat-00001?type=jar",
        "pkg:maven/xmlenc/xmlenc@0.52?type=jar",
        "pkg:maven/io.netty/netty@3.10.6.Final?type=jar",
        "pkg:maven/io.netty/netty-all@4.1.135.Final?type=jar",
        "pkg:maven/xerces/xercesImpl@2.12.2?type=jar",
        "pkg:maven/org.apache.htrace/htrace-core4@4.1.0-incubating?type=jar",
        "pkg:maven/org.fusesource.leveldbjni/leveldbjni-all@1.8?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.18.6?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.hadoop/hadoop-hdfs-client@2.10.2?type=jar",
      "dependsOn" : [
        "pkg:maven/com.squareup.okhttp/okhttp@2.7.5?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.squareup.okhttp/okhttp@2.7.5?type=jar",
      "dependsOn" : [
        "pkg:maven/com.squareup.okio/okio@1.6.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.squareup.okio/okio@1.6.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-daemon/commons-daemon@1.0.13?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.protobuf/protobuf-java@4.32.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty@3.10.6.Final?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-all@4.1.135.Final?type=jar",
      "dependsOn" : [
        "pkg:maven/io.netty/netty-buffer@4.1.135.Final?type=jar",
        "pkg:maven/io.netty/netty-codec@4.1.135.Final?type=jar",
        "pkg:maven/io.netty/netty-codec-dns@4.1.135.Final?type=jar",
        "pkg:maven/io.netty/netty-codec-haproxy@4.1.135.Final?type=jar",
        "pkg:maven/io.netty/netty-codec-http@4.1.135.Final?type=jar",
        "pkg:maven/io.netty/netty-codec-http2@4.1.135.Final?type=jar",
        "pkg:maven/io.netty/netty-codec-memcache@4.1.135.Final?type=jar",
        "pkg:maven/io.netty/netty-codec-mqtt@4.1.135.Final?type=jar",
        "pkg:maven/io.netty/netty-codec-redis@4.1.135.Final?type=jar",
        "pkg:maven/io.netty/netty-codec-smtp@4.1.135.Final?type=jar",
        "pkg:maven/io.netty/netty-codec-socks@4.1.135.Final?type=jar",
        "pkg:maven/io.netty/netty-codec-stomp@4.1.135.Final?type=jar",
        "pkg:maven/io.netty/netty-codec-xml@4.1.135.Final?type=jar",
        "pkg:maven/io.netty/netty-common@4.1.135.Final?type=jar",
        "pkg:maven/io.netty/netty-handler@4.1.135.Final?type=jar",
        "pkg:maven/io.netty/netty-transport-native-unix-common@4.1.135.Final?type=jar",
        "pkg:maven/io.netty/netty-handler-proxy@4.1.135.Final?type=jar",
        "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.135.Final?type=jar",
        "pkg:maven/io.netty/netty-resolver@4.1.135.Final?type=jar",
        "pkg:maven/io.netty/netty-resolver-dns@4.1.135.Final?type=jar",
        "pkg:maven/io.netty/netty-transport@4.1.135.Final?type=jar",
        "pkg:maven/io.netty/netty-transport-rxtx@4.1.135.Final?type=jar",
        "pkg:maven/io.netty/netty-transport-sctp@4.1.135.Final?type=jar",
        "pkg:maven/io.netty/netty-transport-udt@4.1.135.Final?type=jar",
        "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.135.Final?type=jar",
        "pkg:maven/io.netty/netty-transport-classes-kqueue@4.1.135.Final?type=jar",
        "pkg:maven/io.netty/netty-resolver-dns-classes-macos@4.1.135.Final?type=jar",
        "pkg:maven/io.netty/netty-transport-native-epoll@4.1.135.Final?classifier=linux-x86_64&type=jar",
        "pkg:maven/io.netty/netty-transport-native-epoll@4.1.135.Final?classifier=linux-aarch_64&type=jar",
        "pkg:maven/io.netty/netty-transport-native-epoll@4.1.135.Final?classifier=linux-riscv64&type=jar",
        "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.135.Final?classifier=osx-x86_64&type=jar",
        "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.135.Final?classifier=osx-aarch_64&type=jar",
        "pkg:maven/io.netty/netty-resolver-dns-native-macos@4.1.135.Final?classifier=osx-x86_64&type=jar",
        "pkg:maven/io.netty/netty-resolver-dns-native-macos@4.1.135.Final?classifier=osx-aarch_64&type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-buffer@4.1.135.Final?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-codec@4.1.135.Final?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-codec-dns@4.1.135.Final?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-codec-haproxy@4.1.135.Final?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-codec-http@4.1.135.Final?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-codec-http2@4.1.135.Final?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-codec-memcache@4.1.135.Final?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-codec-mqtt@4.1.135.Final?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-codec-redis@4.1.135.Final?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-codec-smtp@4.1.135.Final?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-codec-socks@4.1.135.Final?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-codec-stomp@4.1.135.Final?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-codec-xml@4.1.135.Final?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-common@4.1.135.Final?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-handler@4.1.135.Final?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-transport-native-unix-common@4.1.135.Final?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-handler-proxy@4.1.135.Final?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.135.Final?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-resolver@4.1.135.Final?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-resolver-dns@4.1.135.Final?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-transport@4.1.135.Final?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-transport-rxtx@4.1.135.Final?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-transport-sctp@4.1.135.Final?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-transport-udt@4.1.135.Final?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.135.Final?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-transport-classes-kqueue@4.1.135.Final?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-resolver-dns-classes-macos@4.1.135.Final?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-transport-native-epoll@4.1.135.Final?classifier=linux-x86_64&type=jar",
      "dependsOn" : [
        "pkg:maven/io.netty/netty-common@4.1.135.Final?type=jar",
        "pkg:maven/io.netty/netty-buffer@4.1.135.Final?type=jar",
        "pkg:maven/io.netty/netty-transport@4.1.135.Final?type=jar",
        "pkg:maven/io.netty/netty-transport-native-unix-common@4.1.135.Final?type=jar",
        "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.135.Final?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-transport-native-epoll@4.1.135.Final?classifier=linux-aarch_64&type=jar",
      "dependsOn" : [
        "pkg:maven/io.netty/netty-common@4.1.135.Final?type=jar",
        "pkg:maven/io.netty/netty-buffer@4.1.135.Final?type=jar",
        "pkg:maven/io.netty/netty-transport@4.1.135.Final?type=jar",
        "pkg:maven/io.netty/netty-transport-native-unix-common@4.1.135.Final?type=jar",
        "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.135.Final?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-transport-native-epoll@4.1.135.Final?classifier=linux-riscv64&type=jar",
      "dependsOn" : [
        "pkg:maven/io.netty/netty-common@4.1.135.Final?type=jar",
        "pkg:maven/io.netty/netty-buffer@4.1.135.Final?type=jar",
        "pkg:maven/io.netty/netty-transport@4.1.135.Final?type=jar",
        "pkg:maven/io.netty/netty-transport-native-unix-common@4.1.135.Final?type=jar",
        "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.135.Final?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.135.Final?classifier=osx-x86_64&type=jar",
      "dependsOn" : [
        "pkg:maven/io.netty/netty-common@4.1.135.Final?type=jar",
        "pkg:maven/io.netty/netty-buffer@4.1.135.Final?type=jar",
        "pkg:maven/io.netty/netty-transport@4.1.135.Final?type=jar",
        "pkg:maven/io.netty/netty-transport-native-unix-common@4.1.135.Final?type=jar",
        "pkg:maven/io.netty/netty-transport-classes-kqueue@4.1.135.Final?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.135.Final?classifier=osx-aarch_64&type=jar",
      "dependsOn" : [
        "pkg:maven/io.netty/netty-common@4.1.135.Final?type=jar",
        "pkg:maven/io.netty/netty-buffer@4.1.135.Final?type=jar",
        "pkg:maven/io.netty/netty-transport@4.1.135.Final?type=jar",
        "pkg:maven/io.netty/netty-transport-native-unix-common@4.1.135.Final?type=jar",
        "pkg:maven/io.netty/netty-transport-classes-kqueue@4.1.135.Final?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-resolver-dns-native-macos@4.1.135.Final?classifier=osx-x86_64&type=jar",
      "dependsOn" : [
        "pkg:maven/io.netty/netty-resolver-dns-classes-macos@4.1.135.Final?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-resolver-dns-native-macos@4.1.135.Final?classifier=osx-aarch_64&type=jar",
      "dependsOn" : [
        "pkg:maven/io.netty/netty-resolver-dns-classes-macos@4.1.135.Final?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/xerces/xercesImpl@2.12.2?type=jar",
      "dependsOn" : [
        "pkg:maven/xml-apis/xml-apis@1.4.01?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/xml-apis/xml-apis@1.4.01?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.fusesource.leveldbjni/leveldbjni-all@1.8?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.hadoop/hadoop-mapreduce-client-core@2.10.2?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.hadoop/hadoop-yarn-client@2.10.2?type=jar",
        "pkg:maven/org.apache.hadoop/hadoop-yarn-common@2.10.2?type=jar",
        "pkg:maven/org.apache.avro/avro@1.11.5?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/org.apache.hadoop/hadoop-annotations@2.10.2?type=jar",
        "pkg:maven/com.google.inject.extensions/guice-servlet@3.0?type=jar",
        "pkg:maven/io.netty/netty@3.10.6.Final?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.hadoop/hadoop-yarn-client@2.10.2?type=jar",
      "dependsOn" : [
        "pkg:maven/com.google.guava/guava@32.0.0-jre?type=jar",
        "pkg:maven/commons-logging/commons-logging@1.1.3?type=jar",
        "pkg:maven/commons-lang/commons-lang@2.6?type=jar",
        "pkg:maven/commons-cli/commons-cli@1.5.0?type=jar",
        "pkg:maven/org.apache.hadoop/hadoop-annotations@2.10.2?type=jar",
        "pkg:maven/org.apache.hadoop/hadoop-yarn-api@2.10.2?type=jar",
        "pkg:maven/org.apache.hadoop/hadoop-yarn-common@2.10.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.hadoop/hadoop-yarn-api@2.10.2?type=jar",
      "dependsOn" : [
        "pkg:maven/commons-lang/commons-lang@2.6?type=jar",
        "pkg:maven/com.google.guava/guava@32.0.0-jre?type=jar",
        "pkg:maven/commons-logging/commons-logging@1.1.3?type=jar",
        "pkg:maven/javax.xml.bind/jaxb-api@2.3.1?type=jar",
        "pkg:maven/org.apache.hadoop/hadoop-annotations@2.10.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.hadoop/hadoop-yarn-common@2.10.2?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.hadoop/hadoop-yarn-api@2.10.2?type=jar",
        "pkg:maven/javax.xml.bind/jaxb-api@2.3.1?type=jar",
        "pkg:maven/org.apache.commons/commons-compress@1.26.0?type=jar",
        "pkg:maven/commons-lang/commons-lang@2.6?type=jar",
        "pkg:maven/javax.servlet/servlet-api@2.5?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.15?type=jar",
        "pkg:maven/org.mortbay.jetty/jetty-util@6.1.26?type=jar",
        "pkg:maven/com.sun.jersey/jersey-core@1.9?type=jar",
        "pkg:maven/com.sun.jersey/jersey-client@1.9?type=jar",
        "pkg:maven/org.codehaus.jackson/jackson-core-asl@1.9.13?type=jar",
        "pkg:maven/org.codehaus.jackson/jackson-mapper-asl@1.9.14.jdk17-redhat-00001?type=jar",
        "pkg:maven/org.codehaus.jackson/jackson-jaxrs@1.8.3?type=jar",
        "pkg:maven/org.codehaus.jackson/jackson-xc@1.8.3?type=jar",
        "pkg:maven/com.google.guava/guava@32.0.0-jre?type=jar",
        "pkg:maven/commons-logging/commons-logging@1.1.3?type=jar",
        "pkg:maven/commons-cli/commons-cli@1.5.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/org.apache.hadoop/hadoop-annotations@2.10.2?type=jar",
        "pkg:maven/com.google.inject.extensions/guice-servlet@3.0?type=jar",
        "pkg:maven/commons-io/commons-io@2.15.1?type=jar",
        "pkg:maven/com.google.inject/guice@3.0?type=jar",
        "pkg:maven/com.sun.jersey/jersey-server@1.9?type=jar",
        "pkg:maven/com.sun.jersey/jersey-json@1.9?type=jar",
        "pkg:maven/com.sun.jersey.contribs/jersey-guice@1.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.sun.jersey/jersey-client@1.9?type=jar",
      "dependsOn" : [
        "pkg:maven/com.sun.jersey/jersey-core@1.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.google.inject.extensions/guice-servlet@3.0?type=jar",
      "dependsOn" : [
        "pkg:maven/com.google.inject/guice@3.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.google.inject/guice@3.0?type=jar",
      "dependsOn" : [
        "pkg:maven/javax.inject/javax.inject@1?type=jar",
        "pkg:maven/aopalliance/aopalliance@1.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/javax.inject/javax.inject@1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/aopalliance/aopalliance@1.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.sun.jersey.contribs/jersey-guice@1.9?type=jar",
      "dependsOn" : [
        "pkg:maven/javax.inject/javax.inject@1?type=jar",
        "pkg:maven/com.google.inject/guice@3.0?type=jar",
        "pkg:maven/com.google.inject.extensions/guice-servlet@3.0?type=jar",
        "pkg:maven/com.sun.jersey/jersey-server@1.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/it.unimi.dsi/fastutil@8.2.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.parquet/parquet-avro@1.15.2?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.parquet/parquet-column@1.15.2?type=jar",
        "pkg:maven/org.apache.parquet/parquet-hadoop@1.15.2?type=jar",
        "pkg:maven/org.apache.parquet/parquet-common@1.15.2?type=jar",
        "pkg:maven/org.apache.avro/avro@1.11.5?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.parquet/parquet-protobuf@1.15.2?type=jar",
      "dependsOn" : [
        "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar",
        "pkg:maven/com.google.guava/guava@32.0.0-jre?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java@4.32.1?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java-util@3.25.5?type=jar",
        "pkg:maven/com.google.api.grpc/proto-google-common-protos@2.41.0?type=jar",
        "pkg:maven/org.apache.parquet/parquet-common@1.15.2?type=jar",
        "pkg:maven/org.apache.parquet/parquet-column@1.15.2?type=jar",
        "pkg:maven/org.apache.parquet/parquet-hadoop@1.15.2?type=jar",
        "pkg:maven/com.twitter.elephantbird/elephant-bird-core@4.4?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.google.protobuf/protobuf-java-util@3.25.5?type=jar",
      "dependsOn" : [
        "pkg:maven/com.google.protobuf/protobuf-java@4.32.1?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar",
        "pkg:maven/com.google.code.gson/gson@2.10.1?type=jar",
        "pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0?type=jar",
        "pkg:maven/com.google.guava/guava@32.0.0-jre?type=jar",
        "pkg:maven/com.google.j2objc/j2objc-annotations@2.8?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.google.api.grpc/proto-google-common-protos@2.41.0?type=jar",
      "dependsOn" : [
        "pkg:maven/com.google.protobuf/protobuf-java@4.32.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.twitter.elephantbird/elephant-bird-core@4.4?type=jar",
      "dependsOn" : [
        "pkg:maven/com.twitter.elephantbird/elephant-bird-hadoop-compat@4.4?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/commons-lang/commons-lang@2.6?type=jar",
        "pkg:maven/com.google.guava/guava@32.0.0-jre?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java@4.32.1?type=jar",
        "pkg:maven/org.apache.thrift/libthrift@0.13.0?type=jar",
        "pkg:maven/com.googlecode.json-simple/json-simple@1.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.twitter.elephantbird/elephant-bird-hadoop-compat@4.4?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.thrift/libthrift@0.13.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/org.apache.httpcomponents/httpclient@4.5.13?type=jar",
        "pkg:maven/org.apache.httpcomponents/httpcore@4.4.14?type=jar",
        "pkg:maven/javax.annotation/javax.annotation-api@1.3.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.googlecode.json-simple/json-simple@1.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.flink/flink-shaded-force-shading@20.0?type=jar",
      "dependsOn" : [ ]
    }
  ]
}