{
  "bomFormat" : "CycloneDX",
  "specVersion" : "1.4",
  "serialNumber" : "urn:uuid:34d8fd9e-9eee-4bae-bb02-316751277177",
  "version" : 1,
  "metadata" : {
    "timestamp" : "2026-09-30T10:06:12Z",
    "tools" : [
      {
        "vendor" : "OWASP Foundation",
        "name" : "CycloneDX Maven plugin",
        "version" : "2.7.7",
        "hashes" : [
          {
            "alg" : "MD5",
            "content" : "436dfb24c63a322708e4a5143d8543af"
          },
          {
            "alg" : "SHA-1",
            "content" : "3ef2e8728dc9eff2f129c34057e46e9d2b10629a"
          },
          {
            "alg" : "SHA-256",
            "content" : "c185b79bf0f9264f43bc8c222c44db67bea275bb727e3327cf9aea6bf45292c9"
          },
          {
            "alg" : "SHA-512",
            "content" : "41488733e31e6c5315327dcc86187c2b9a6b96cd08f7e2157ce130688afde29c313fc6a73edb8a76333a930c78874aa2eac874448920030c0f7af0ac05e65ced"
          },
          {
            "alg" : "SHA-384",
            "content" : "f9462f86240fd9fc0942f34981e6d2371f252aa1a4e5e8c3c14e7f0f1a4e4de69ef972e51cf09a749afb6d97c13e67ed"
          },
          {
            "alg" : "SHA3-384",
            "content" : "c755af6239348bc7dd1e1e6b5f14f7cf7e1560d689b252d9610cd865fa4b419d0b8e26260731dfc5da2176b6e706b414"
          },
          {
            "alg" : "SHA3-256",
            "content" : "309aac91005470c9c834354ab918759e2ae7ec52fc1676002621a5bbdf3b7827"
          },
          {
            "alg" : "SHA3-512",
            "content" : "c634570dcf8302e61005e5fa91a9a0d9b81542f731967b3c9f6d3ef89e3b945bd36d7ab69e2ebad8124b9c05da504361c8b36a8ce528d844409eeb7df4eea6ce"
          }
        ]
      }
    ],
    "component" : {
      "publisher" : "The Apache Software Foundation",
      "group" : "io.confluent.flink",
      "name" : "flink-yarn",
      "version" : "2.0.2-cp4",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent.flink/flink-yarn@2.0.2-cp4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://flink.apache.org/flink-yarn"
        },
        {
          "type" : "distribution",
          "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/f53cb792246ff2bb005771ca0bc417b9e0036767"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink/flink-yarn"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.flink/flink-yarn@2.0.2-cp4?type=jar"
    },
    "properties" : [
      {
        "name" : "maven.goal",
        "value" : "makeBom"
      },
      {
        "name" : "maven.scopes",
        "value" : "compile,provided,runtime,system"
      }
    ]
  },
  "components" : [
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "io.confluent.flink",
      "name" : "flink-runtime",
      "version" : "2.0.2-cp4",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "8d058b1f865df8adc8c8ee8fa452afd0"
        },
        {
          "alg" : "SHA-1",
          "content" : "c301221dd333cdb24ccd4089e3feecfe3ad306fe"
        },
        {
          "alg" : "SHA-256",
          "content" : "f244e6ad4fc7733364ba862745233eb446b62ecc431f9a038b119db7eaa84649"
        },
        {
          "alg" : "SHA-512",
          "content" : "ce06116c3050dbc96be1c73896de64676f7934cb590b304f0b1fd44a354c3be19acb09fe9620d3243b6527548f58f06b3dcfa8313220a8a35d344b7ad4180cd4"
        },
        {
          "alg" : "SHA-384",
          "content" : "cbf6a41ad2d94e950fb425641f40927e1a953425a034b66d4e3531bb3a0ff693dccfd55b83856484203b353bb87f44a9"
        },
        {
          "alg" : "SHA3-384",
          "content" : "177a7b7151d85629f4aec18429130235b924aedcbf318f8b460a7e9f0e368e6c40b791ada06b72eb6ba2453467d13704"
        },
        {
          "alg" : "SHA3-256",
          "content" : "4686bb2419b484e6f9f8f168a2ef38837f4d07d10ec0e318b3b7a50102ad8749"
        },
        {
          "alg" : "SHA3-512",
          "content" : "03863ed3093e58fe30b15166a5f308bc812b417761b39927f26fd5c5f3fef2e12624e2022f6d8646d138cc8cfb08a5f60db5dbbea1f292bfaf72f081299fc544"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent.flink/flink-runtime@2.0.2-cp4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://flink.apache.org/flink-runtime"
        },
        {
          "type" : "distribution",
          "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/f53cb792246ff2bb005771ca0bc417b9e0036767"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink/flink-runtime"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.flink/flink-runtime@2.0.2-cp4?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "io.confluent.flink",
      "name" : "flink-datastream-api",
      "version" : "2.0.2-cp4",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "3216e2396de4b2a254ea2367fdc59f32"
        },
        {
          "alg" : "SHA-1",
          "content" : "3bc4feb915a44cf0338b06a54b5068f398b909c5"
        },
        {
          "alg" : "SHA-256",
          "content" : "a421334b6d50db36f85d3c31fc359dadbab81535cd827d2c83045c2124053de3"
        },
        {
          "alg" : "SHA-512",
          "content" : "560d3e2d1ef4bfda586040228d3d34b4969fe83eae668fb78a92436f0265dddd20ae33424c37e2067a24c4fe410ba95429c3bd240168bc53c75703076f1620c9"
        },
        {
          "alg" : "SHA-384",
          "content" : "3fb6e672f625c7b5f3eba57cfd41d6c5a166e4ad13b7d4cb2e0c2d035bc355a3110b2e133f5d27bb0904bb1585a4d32f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "83b4248d8824c17c6c14620e69e7901ff4f0eefd4a2efa3e99f20de4dfa6a3b6f48b7aa503b8c4081154cbefd64d031b"
        },
        {
          "alg" : "SHA3-256",
          "content" : "41ced83cf4c578586ab1e82c4737358bc8187e3e539704d37ab93f131db5f673"
        },
        {
          "alg" : "SHA3-512",
          "content" : "ad2d20ffaa820c255c6770bb0f3f0adb8e85ff2428794993c67aadd71873d081fe723251751e8a770b92343ef22684833ac9f286e2daf4e09817e9758170f532"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent.flink/flink-datastream-api@2.0.2-cp4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://flink.apache.org/flink-datastream-api"
        },
        {
          "type" : "distribution",
          "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/f53cb792246ff2bb005771ca0bc417b9e0036767"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink/flink-datastream-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.flink/flink-datastream-api@2.0.2-cp4?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "io.confluent.flink",
      "name" : "flink-core-api",
      "version" : "2.0.2-cp4",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e68c94d7b97753ec71368582be77dd53"
        },
        {
          "alg" : "SHA-1",
          "content" : "8d90415761ddb150b62810765ba285bd809edeaa"
        },
        {
          "alg" : "SHA-256",
          "content" : "8dff279f9880e435313d6728ef6787f72d30a0a48c7be3e486b1ff03bbc56fc6"
        },
        {
          "alg" : "SHA-512",
          "content" : "83b2869fffac4f3a2aae14381a101d1c47ae454a47e3dba3d51a99b03dc8468ef7f91b94f4b9884bffe917ad97a69ed76fd3d4ac4b49311c2775c2bf474c2459"
        },
        {
          "alg" : "SHA-384",
          "content" : "d574b6bfe48c24eca02d0658ace121b6b3898a0475e90e6fd6594d13e86efeb16e22d2f9bb0b2d9aa56b5d3ae1242ed7"
        },
        {
          "alg" : "SHA3-384",
          "content" : "6f2606a3d933d06d1f37ece43e24e8b2861cff7ab7984fdc6007b0444c5151d32b8b62320bb17512016672146274331a"
        },
        {
          "alg" : "SHA3-256",
          "content" : "69194c597c397aef1805e0b304c72b3d526ba49b7e38ba04f945a56b9ef258ae"
        },
        {
          "alg" : "SHA3-512",
          "content" : "3863e66553cf648d8a36c30ced34fe82a685997d96505e107d911d885c111053f3cdcba0549ae8698c133d75a211c1ea6f2f9cf1d867c6e65e8765fd48483d88"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent.flink/flink-core-api@2.0.2-cp4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://flink.apache.org/flink-core-api"
        },
        {
          "type" : "distribution",
          "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/f53cb792246ff2bb005771ca0bc417b9e0036767"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink/flink-core-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.flink/flink-core-api@2.0.2-cp4?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "io.confluent.flink",
      "name" : "flink-metrics-core",
      "version" : "2.0.2-cp4",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "5a912bfbad2da673e9f26576684ee03b"
        },
        {
          "alg" : "SHA-1",
          "content" : "fbfef8016acbde356b94be6f61ca343ed6dc24a2"
        },
        {
          "alg" : "SHA-256",
          "content" : "7e65186fa5fe8f97ef3560a8a37ad9fd9553eafa1610c01df32eacebb895fcbd"
        },
        {
          "alg" : "SHA-512",
          "content" : "7025ba2ae6c82f04ad44747f225b490137821f2bd9e3e1447e29aac32de6a7f812e59788e9e0369805faed42a7d6bfcf24bc816116fb9fc616774a33f9bb4bbc"
        },
        {
          "alg" : "SHA-384",
          "content" : "cf7aea032ddc4c9681f50dd1595c2994ffcb73fd830549e06d8db5a853a75f2bd909f8fbce0c55542bb80f675bdbadbd"
        },
        {
          "alg" : "SHA3-384",
          "content" : "5b73dab5a0d886dcf4ddad42040dc0c0a1161a9c312aeb62d190b77f9689c7ae5c5c8f0694f4f6548d8502c251639256"
        },
        {
          "alg" : "SHA3-256",
          "content" : "172757a12e3a4fa2cc0496fb3636de30458b7e1cfdbdfa5c8998355726ca07ab"
        },
        {
          "alg" : "SHA3-512",
          "content" : "9c482212175ba0639317a8bece6b6b2a812e97604940776b53bbf25385515b9050f164d07d1c4695c2713966b22fef3c839dd58bab26ecefb22408323007a6c8"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent.flink/flink-metrics-core@2.0.2-cp4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://flink.apache.org/flink-metrics/flink-metrics-core"
        },
        {
          "type" : "distribution",
          "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/f53cb792246ff2bb005771ca0bc417b9e0036767"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink/flink-metrics/flink-metrics-core"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.flink/flink-metrics-core@2.0.2-cp4?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "io.confluent.flink",
      "name" : "flink-core",
      "version" : "2.0.2-cp4",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6fab0035edda6154de17c33bcb176b76"
        },
        {
          "alg" : "SHA-1",
          "content" : "8d5d4436b62db2b25dc8067cf912cfa99d9cac7a"
        },
        {
          "alg" : "SHA-256",
          "content" : "719b669227db1a031e678161afcf394492b70d308bbac31f8d0f7d73736c10cb"
        },
        {
          "alg" : "SHA-512",
          "content" : "160f794248a89cef626637919ca4540add752a63390569d6ac3aa63b67e0b8b2fe38ff476b4ea77f9bd00d241e7f5e3996e77de6595135f106cc819761ccf0b0"
        },
        {
          "alg" : "SHA-384",
          "content" : "7de851e5ea6e01c668744792db80a59f3ddb1670180d5060a0a9e729b57bafd293924f835e7b2243a8316d4489ac8ba4"
        },
        {
          "alg" : "SHA3-384",
          "content" : "dae8bcdec313cd9664d61843c84065b96d4afd744a6803293434dacc8605c7caee3e204c9308710d0881af9aee85d73c"
        },
        {
          "alg" : "SHA3-256",
          "content" : "0f696e177ed86ee88da40e5fbd5fcc77adb34545c31b7f08e0be8c8c38b05656"
        },
        {
          "alg" : "SHA3-512",
          "content" : "7c714b140b67385740ae105eddd2405a9af27e23b19199847944a4419a9f08891990b277c496fee383b199798cc9ba474da9601cb8dbc8a9dbf2c7066697da03"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent.flink/flink-core@2.0.2-cp4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://flink.apache.org/flink-core"
        },
        {
          "type" : "distribution",
          "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/f53cb792246ff2bb005771ca0bc417b9e0036767"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink/flink-core"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.flink/flink-core@2.0.2-cp4?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "io.confluent.flink",
      "name" : "flink-annotations",
      "version" : "2.0.2-cp4",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "8a5beacb34aeb73e619cff09cf8a6bae"
        },
        {
          "alg" : "SHA-1",
          "content" : "c87cb5d81b10f9f55133f21d79b5eafcfc67fcd8"
        },
        {
          "alg" : "SHA-256",
          "content" : "1179cae65453c23f3a99c0579d53407f83c0f6978416cc5d8a552ae4618b2568"
        },
        {
          "alg" : "SHA-512",
          "content" : "c122c2c441a3b4bf8996a03ade291d1acd347cfc3ab40495d83b52e1e09e67412e8bbd1d742887748065d087af8316d10e9fff7f0330a2fccac33ea53f6ac7f4"
        },
        {
          "alg" : "SHA-384",
          "content" : "a2d2874502607d8a4b2344e4e595986f52502b32ef223ac475e75ab12b05943452ca7f509ce1f98d69d5f84fe2ba15a9"
        },
        {
          "alg" : "SHA3-384",
          "content" : "8ca52f44ed95aa9acb76227efc3646aae22373796baff7a94be04cb39a338bb6dae47caf03aa8632cd160a954a34ef6f"
        },
        {
          "alg" : "SHA3-256",
          "content" : "6a7762a5920caaa60c722f03753b1031d18227dd7722b81ad766686174fb8ff1"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c8b7172fa774b0a8842301679c2aef5406c9520b2d850ae6833e1e50c5ee1ecacb5772bc7a6684db4dd61268b143fc42a2b06223b7d54bd484e173c00eaa9b82"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent.flink/flink-annotations@2.0.2-cp4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://flink.apache.org/flink-annotations"
        },
        {
          "type" : "distribution",
          "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/f53cb792246ff2bb005771ca0bc417b9e0036767"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink/flink-annotations"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.flink/flink-annotations@2.0.2-cp4?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "io.confluent.flink.shaded",
      "name" : "flink-shaded-asm-9",
      "version" : "9.6-20.0-cp3",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "ae4e82c0a22005a904be1abea935cab7"
        },
        {
          "alg" : "SHA-1",
          "content" : "7aa7ebb1b9f9f44c223f446148aaf4ad3eb2cdd8"
        },
        {
          "alg" : "SHA-256",
          "content" : "d94d64f424828729af896abd9a32beb33f4cdcd356763748624cf7c535cf0ac8"
        },
        {
          "alg" : "SHA-512",
          "content" : "199c504ed84adb90ad7acfbdd653b0719de8d748b289e130c67a99a9bedde2eaf6442d01b7a5b8c2cf59aa9a73b63d581df9871a9bf1db33d261fd31884ed9f1"
        },
        {
          "alg" : "SHA-384",
          "content" : "d2872d6a4556da13f03be0d563604b870b94e16dce467b724718b5bcdd67cd7793f76f538d8f5df570957a398770c6e0"
        },
        {
          "alg" : "SHA3-384",
          "content" : "6ae173dcf8af5fb45567bcdfa141a3a392d62779a50c66b0c60ccf6a2cbe0900a69ad573d3862bdef841a69e68f785ca"
        },
        {
          "alg" : "SHA3-256",
          "content" : "541a0f46cf8d213b8184305d275559fe7bfd64a119b86f98396529a334334f48"
        },
        {
          "alg" : "SHA3-512",
          "content" : "b9e86b6fa980b028f17a53259f5bdfec71557f122a4b47b0603aed6c626e634976ac1fe923b5c4dd3c12cdaae74d979e8ef84906ea95adc977d7d43bb6a675f3"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent.flink.shaded/flink-shaded-asm-9@9.6-20.0-cp3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://flink.apache.org/flink-shaded-asm-9"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink-shaded/flink-shaded-asm-9"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.flink.shaded/flink-shaded-asm-9@9.6-20.0-cp3?type=jar"
    },
    {
      "group" : "org.snakeyaml",
      "name" : "snakeyaml-engine",
      "version" : "2.6",
      "description" : "Core YAML 1.2 parser and emitter for Java",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "719bcfb9f917992d0a99a6f7106d8466"
        },
        {
          "alg" : "SHA-1",
          "content" : "235a7e571b33eda1a81e0f73a3173ef95dd020e5"
        },
        {
          "alg" : "SHA-256",
          "content" : "2652199af40c9aa2f1782400d2dfbbf4e5226208c4e05ddd4059c3d6d9cd1505"
        },
        {
          "alg" : "SHA-512",
          "content" : "c3b5e87ce323b37bcd9e65d060157ebb26d116b5dac30c6eaa185b30aa24c0be8dfd0ad604a9a12ce7010acadee54a9cea9f065cd2f434eeaed7bccce2e14a7d"
        },
        {
          "alg" : "SHA-384",
          "content" : "edfc3c9a95cc2fa524a322f20ec034ec16b3fad950a58bfd1ed774eaaab946304cddc5e9ea4e117a899ec568ba7fa620"
        },
        {
          "alg" : "SHA3-384",
          "content" : "63b9e0ed448431a1d4b34a4b0b97b65c2c7be6ef46f1ce3b10191373e3339422f9c06bc846ae861a982c3c3618abd9c6"
        },
        {
          "alg" : "SHA3-256",
          "content" : "19ce75167267903be79122e149ede2916c3e07bab0658db21ab40864e8c920cd"
        },
        {
          "alg" : "SHA3-512",
          "content" : "7777f37097a6951dafe18fb038d087e7fe0924bfb2a10c66a76a57d95aa65341d4b674c6ff1d9d453c436ffcb50e281c2bedc854ce687fefc30c9595b7352c8a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.snakeyaml/snakeyaml-engine@2.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://bitbucket.org/snakeyaml/snakeyaml-engine"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://bitbucket.org/snakeyaml/snakeyaml-engine/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://bitbucket.org/snakeyaml/snakeyaml-engine/src"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.snakeyaml/snakeyaml-engine@2.6?type=jar"
    },
    {
      "group" : "com.esotericsoftware",
      "name" : "kryo",
      "version" : "5.6.2",
      "description" : "Fast, efficient Java serialization. This is the main Kryo artifact.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "972ea0c598accd90d33ed5c31bd004b3"
        },
        {
          "alg" : "SHA-1",
          "content" : "c20a8ba517e93cb78001fd64da796f1ac5cd8214"
        },
        {
          "alg" : "SHA-256",
          "content" : "4e8b1d2f4977187af8a51a957329722dc1cdc56a7c94fbb5a791e82897629cff"
        },
        {
          "alg" : "SHA-512",
          "content" : "0095bf5998f1b45c1e2dd25f22af11b619277d544cd9f4a3a355de7f118b5a9312d261c2f70e9b0691f3bec4212dea60dae191c3f1cab939ce7802472ef9f906"
        },
        {
          "alg" : "SHA-384",
          "content" : "b3dc68596ff6341a7cc285fa5db7237c90d46baa2425c20cc1a23686140152c6d0a245881032762e813d70cfdc007364"
        },
        {
          "alg" : "SHA3-384",
          "content" : "80dde34c5740a4a0fa3c2886b289eb3f9e34d2c54ad2e4aa3b025c308f2c35a75e3e3ff8a5e0700f9a7732aa89c12f6a"
        },
        {
          "alg" : "SHA3-256",
          "content" : "b1e7e4ef6c1aa0f4d4aad9cd3434ad003b4b1b0612417538f8da01c87ce81cb8"
        },
        {
          "alg" : "SHA3-512",
          "content" : "cebfb63a44efaadae598d615cd21b8bf67216b3c7b6b5e97a7027026366c8750ce8bd69d39062a5dcc609461896d44def05e8a8e227044951b0d04927b54a966"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/com.esotericsoftware/kryo@5.6.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/EsotericSoftware/kryo/kryo"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/EsotericSoftware/kryo/kryo"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.esotericsoftware/kryo@5.6.2?type=jar"
    },
    {
      "group" : "com.esotericsoftware",
      "name" : "reflectasm",
      "version" : "1.11.9",
      "description" : "High performance Java reflection using code generation",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "602377b51e9843ef87ed48b790945c3e"
        },
        {
          "alg" : "SHA-1",
          "content" : "fd51ad1705d5e27d8785550172a4ab0cb9b8ad23"
        },
        {
          "alg" : "SHA-256",
          "content" : "712b44da79a5b7f47a28cbfcb3d8ecfc872fae349c48aa4d3e38a5d69956afce"
        },
        {
          "alg" : "SHA-512",
          "content" : "c9386a11540853c965b5821771a0e99e97a5701c27e47c39b23c32fd9dd05af8231bf680541195625839eafb3471b835613a7cc734c616e571ef2f62aef84fc0"
        },
        {
          "alg" : "SHA-384",
          "content" : "f0461aaaa75079737a10ae9f3fcf24e74828715bd4f334140c0a9d68395a84c37c6df81d4d7392ac9e51f8ac253367ec"
        },
        {
          "alg" : "SHA3-384",
          "content" : "9115f84613808dbf555e36ea18f9ca84ddabb76e5f030b6c02132ecc3cc0a529fe501d0548cf768b041a2af5833073fd"
        },
        {
          "alg" : "SHA3-256",
          "content" : "e3a5cea0f269206b22975f9b4d459da5a3d2d903b075ffbedecd307ccaa2cfb5"
        },
        {
          "alg" : "SHA3-512",
          "content" : "8d7e00302607e264e0199db0508771106a291023139307012ee0a7d5a380195494832b6e0087c8892ef70bba290b5a1398194f7ef8e378c8cec8fc385097c870"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/com.esotericsoftware/reflectasm@1.11.9?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/EsotericSoftware/reflectasm"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/EsotericSoftware/reflectasm"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.esotericsoftware/reflectasm@1.11.9?type=jar"
    },
    {
      "group" : "com.esotericsoftware",
      "name" : "minlog",
      "version" : "1.3.1",
      "description" : "Minimal overhead Java logging",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "46908e11b408080d53246e4be44e66db"
        },
        {
          "alg" : "SHA-1",
          "content" : "a406e29d3a44d5f020d7b3218aee6d0952db4f73"
        },
        {
          "alg" : "SHA-256",
          "content" : "5d4d632cfbebfe0a7644501cc303570b691406181bee65e9916b921c767d7c72"
        },
        {
          "alg" : "SHA-512",
          "content" : "9a817f66222f9c612ef863b63ad7c1ccd38f2591d80ab9116e675ec52dfc5bba6989b3499c0c95afa42df762584cf0524dbc5a960b3c5dfb126068e446df0eeb"
        },
        {
          "alg" : "SHA-384",
          "content" : "d0bc3e4b93edc1519e89d7ac4dcb78fd5240c1b3e61cd5f2ba19ad0133bc0e79298da54a7f5011e64be6f12a26a487dd"
        },
        {
          "alg" : "SHA3-384",
          "content" : "995751217162b866f1e69c10607e777a4f5b571fa6c9098bc63933df5754e13e2328b149820c88a30a103fc9d938432b"
        },
        {
          "alg" : "SHA3-256",
          "content" : "a799557343159261e72d72f5762262981c16d0e5aa08b16cbf4b989a912bfe81"
        },
        {
          "alg" : "SHA3-512",
          "content" : "b333a0eab8cbdce12ab2d9163ccb8b8d3c8138b35bcf4ff1c69f79844272a9666771ae5017519d3301b8d98aaff6a6bc8655e4b636d2949d285a0d386f64d1d7"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/com.esotericsoftware/minlog@1.3.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/EsotericSoftware/minlog"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/EsotericSoftware/minlog"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.esotericsoftware/minlog@1.3.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "io.confluent.flink",
      "name" : "flink-rpc-core",
      "version" : "2.0.2-cp4",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "946a909112e642b73fab90cb9da763a9"
        },
        {
          "alg" : "SHA-1",
          "content" : "d5479457178757b3d59926a30775c3f925b7c1be"
        },
        {
          "alg" : "SHA-256",
          "content" : "76924b21a226e0f6a66339d4ed0e80b1dfba6f7e7e64eeea6a4b8ed2b8c7bbcf"
        },
        {
          "alg" : "SHA-512",
          "content" : "66996317778bb801729c3e294219e74c48ba2db4b86c03cee42a4ed339894a6a5c3eb96b6eae4484367106a8f03fa233b97f8f2215ebded63bd110d9df6d51cf"
        },
        {
          "alg" : "SHA-384",
          "content" : "21bc9a24b781163fc2306d74f5fc8a7fd3d2a5296a9fa2c74484354558020db9cfc516e5f0c200b62abbea9858a87500"
        },
        {
          "alg" : "SHA3-384",
          "content" : "866f2b64b4db621c2f6edaf357cd523b03ccad0f1c291b7f574494eaab7dacecb2745f30bafff9963a29a9afce928b5d"
        },
        {
          "alg" : "SHA3-256",
          "content" : "e9fc0560acc22fd4c7d231819b8c29901e74a95cb2fa49253d44cf09d8d17d9b"
        },
        {
          "alg" : "SHA3-512",
          "content" : "19829e89c970b545bc58d7627453c0ab5da2beb2dee82a5d7ab9cea781316f58500708765e83d19b12564fc0b0392a679097a030ea892a435e4f961572bc52a4"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent.flink/flink-rpc-core@2.0.2-cp4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://flink.apache.org/flink-rpc/flink-rpc-core"
        },
        {
          "type" : "distribution",
          "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/f53cb792246ff2bb005771ca0bc417b9e0036767"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink/flink-rpc/flink-rpc-core"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.flink/flink-rpc-core@2.0.2-cp4?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "io.confluent.flink",
      "name" : "flink-rpc-akka-loader",
      "version" : "2.0.2-cp4",
      "description" : "This module contains the mechanism for loading flink-rpc-akka through a separate classloader.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f826d3c7f23bbe460ac3e3a0456b63be"
        },
        {
          "alg" : "SHA-1",
          "content" : "00fd9a5cecc811425c39fdb64a25c282fe13ec31"
        },
        {
          "alg" : "SHA-256",
          "content" : "3c20a46decfd0cc707267426d6f5f1f4dda87d5dfc5d3e2df394c63e9b44e5e2"
        },
        {
          "alg" : "SHA-512",
          "content" : "2768b8fa718bbaeb273800df025afb3c4cb8b7b4fd8829b76d39a650b92b3cf2efe5b9ae1abe7069da1ee797d72b6f327930366551612b13eaa84e6eb11562b2"
        },
        {
          "alg" : "SHA-384",
          "content" : "4072368dcc0d574403fd9d5a177d47a9aa8903319b4d82e38344282c9a694793d39f56124bd947b4a334c4f13aa341b0"
        },
        {
          "alg" : "SHA3-384",
          "content" : "a2667a1b37cbb56251c6b6c632c70514a90b69571ae9e9167cbaa2055181b68bcfb09c05974a721f5f3a48e46c982d4c"
        },
        {
          "alg" : "SHA3-256",
          "content" : "147ca0aeb4e4cd6d7b24d5fbeb00d45d3b95fe6064e0e6fd4c9a7d16c5672cbf"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c9c54e4ade633277272ae85fc8257a649b952a0af6034a30f4983123737ff73234b9f26c69f86aa00f14a901ee40024f09d61435991e5f8b13e29d84fc772930"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent.flink/flink-rpc-akka-loader@2.0.2-cp4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://flink.apache.org/flink-rpc/flink-rpc-akka-loader"
        },
        {
          "type" : "distribution",
          "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/f53cb792246ff2bb005771ca0bc417b9e0036767"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink/flink-rpc/flink-rpc-akka-loader"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.flink/flink-rpc-akka-loader@2.0.2-cp4?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "io.confluent.flink",
      "name" : "flink-queryable-state-client-java",
      "version" : "2.0.2-cp4",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "dbd87b19b3294b43cce56dadc162ab0a"
        },
        {
          "alg" : "SHA-1",
          "content" : "58c405b4a58a01b4856c6cb858117b6a165fff3f"
        },
        {
          "alg" : "SHA-256",
          "content" : "dea2dce80d4bc050342c3d104f37b70e44681676c6c43c2ddab0e6d530857c8e"
        },
        {
          "alg" : "SHA-512",
          "content" : "c47ddd7be154b7dd8662fdf7add8158d8ed6acf5647d5c55d0dd9d4a84eb285dec5c77244cabae79362f0bdee5775445241ffb827c3b9b29f602e29561331a24"
        },
        {
          "alg" : "SHA-384",
          "content" : "8360c78d8f786b10afe19326e79c41258df5790553e49ab41720ec6a52cb1a48a17c46c5bccb7acc11783e1adcbb2922"
        },
        {
          "alg" : "SHA3-384",
          "content" : "c724b59b31e924fd888505c64ee27d74b52a92e53697ae9ed23ed7f1b1627a0222b81f18c5203725c6208447edc04628"
        },
        {
          "alg" : "SHA3-256",
          "content" : "018a2fb0b5801736d0afdc0310a19fed3fccc381a7dc7c18b75abaec6f8cd73a"
        },
        {
          "alg" : "SHA3-512",
          "content" : "16e038fdf340a5ac599ad5aa2342d66915c6744fa8dbca381a6b62e9b2ac4804a3a430079ceaf2d1bb25411c333dfc47b7e1788cbb3e22c4508337aec850c332"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent.flink/flink-queryable-state-client-java@2.0.2-cp4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://flink.apache.org/flink-queryable-state/flink-queryable-state-client-java"
        },
        {
          "type" : "distribution",
          "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/f53cb792246ff2bb005771ca0bc417b9e0036767"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink/flink-queryable-state/flink-queryable-state-client-java"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.flink/flink-queryable-state-client-java@2.0.2-cp4?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "io.confluent.flink",
      "name" : "flink-hadoop-fs",
      "version" : "2.0.2-cp4",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "3676e441be87650cbe85a144f560528e"
        },
        {
          "alg" : "SHA-1",
          "content" : "d0dda39c597e23a4f2bd1616393c28ff6a230ba8"
        },
        {
          "alg" : "SHA-256",
          "content" : "d01bed4927aa4a5473c8a04682e32bd8b65c3be3c900efeda8eac3afee97c931"
        },
        {
          "alg" : "SHA-512",
          "content" : "c8db91f366d218263ff3e2e4d0fb1698fefb567786ac616c9135bd266c36d54db369305a59d6df80d11d39821e235f01d65d943cfbd35b5648b35e7169c3187a"
        },
        {
          "alg" : "SHA-384",
          "content" : "e77f273655d215d828d64fac8cae721407cab7bb0eef471483aa5af37ba5eab44cbcd327c55e2a005b194844d0365ecd"
        },
        {
          "alg" : "SHA3-384",
          "content" : "67ebf1c3e81ed51a2bae471c0cfea5f215a6731cfbc54300db694ec1b9d31c56c0af17d060fb6a49a328e963921ab541"
        },
        {
          "alg" : "SHA3-256",
          "content" : "876d09b76e7964152e99a57dc763a93488c32d902968d23a2be1937e0718a7eb"
        },
        {
          "alg" : "SHA3-512",
          "content" : "41776bf68406138d0950c40e46eb627cea881935869a914a8561dcf6830a978503abdbaff31f23a04e80ccef721488d077f323b52dd458b2b1b8c9d56a9b5b5c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent.flink/flink-hadoop-fs@2.0.2-cp4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://flink.apache.org/flink-filesystems/flink-hadoop-fs"
        },
        {
          "type" : "distribution",
          "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/f53cb792246ff2bb005771ca0bc417b9e0036767"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink/flink-filesystems/flink-hadoop-fs"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.flink/flink-hadoop-fs@2.0.2-cp4?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-io",
      "name" : "commons-io",
      "version" : "2.15.1",
      "description" : "The Apache Commons IO library contains utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "84351f7991a0e6722f00e96a4ccc376f"
        },
        {
          "alg" : "SHA-1",
          "content" : "f11560da189ab563a5c8e351941415430e9304ea"
        },
        {
          "alg" : "SHA-256",
          "content" : "a58af12ee1b68cfd2ebb0c27caef164f084381a00ec81a48cc275fd7ea54e154"
        },
        {
          "alg" : "SHA-512",
          "content" : "e9adaeed2d715ac0ae44de056ba165a743a92acbeb9871b535f7e58e0b3bc4fba276495b50429be195098a559f3adb7294048479754a0ee4d397da2efda5f81c"
        },
        {
          "alg" : "SHA-384",
          "content" : "028c72b59373d3894da22f9eb2c731aabd00f670993973f71a354d722670c12ca659686b83bbf8db32d060ca180f50b2"
        },
        {
          "alg" : "SHA3-384",
          "content" : "73cd585ab3736b4be50ec0f10dfe5ebfc3390eea8d56f07f29055f1fddb2dff8084310eaa6fb9f97ea639ed1abd7bc33"
        },
        {
          "alg" : "SHA3-256",
          "content" : "daf39bc99f1a3dc0075714a4a342a58d69a4cd62c25bc39a581f657ca72b1044"
        },
        {
          "alg" : "SHA3-512",
          "content" : "b003f8971d1536ea0fc4320dbfe17d7259d49e59314739f9fc83134e511facbff048b0ef4f86a9d0893781ca09c95cebc3b181a6c89a2d41e851870b96e76839"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-io/commons-io@2.15.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-io/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-parent/actions"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/IO"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-io.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-io/commons-io@2.15.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "io.confluent.flink.shaded",
      "name" : "flink-shaded-netty",
      "version" : "4.1.136.Final-20.0-cp3",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f1a204e366ff9dfaafe142e0f9c3901e"
        },
        {
          "alg" : "SHA-1",
          "content" : "9b30e6dbfb660728eb3c379a4f8f6722a0dc78a4"
        },
        {
          "alg" : "SHA-256",
          "content" : "5daf68f5596e40a2ea286a8613bc62e7db9f30855561f41bae19c5faee3353db"
        },
        {
          "alg" : "SHA-512",
          "content" : "37123fb55e703d84b47d5602fdb6437c78f50f1e6301a62c74a00a891a2d8a61ee1e3faf3962a938d637fda2fad9410a6e6060641dc111119f03dd2d8f05940c"
        },
        {
          "alg" : "SHA-384",
          "content" : "c1fc4fa0f546e99fab669137fa673a026830e5872fa403152ffd76cd93cf8cbf9cce43550fda9f7f71a306b2271d4d85"
        },
        {
          "alg" : "SHA3-384",
          "content" : "3ab2b8158e6de8ea4b22a38fe33e1a1d4999d00c4792ae8690812c744fd229bc19c8b2ae837525c6ee2822523247b796"
        },
        {
          "alg" : "SHA3-256",
          "content" : "f153cc1ce3c46691adf497bc85595e3a89a0cb175914287a04801fc2be8389d6"
        },
        {
          "alg" : "SHA3-512",
          "content" : "bb066a96703b1044c8a49b28348e4f245d71acd7eaca9a31519b09bea74ebd465bca45983965f24b6188d8ef73c42c60dc8ab892232e7b3106d548f6babe0a63"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent.flink.shaded/flink-shaded-netty@4.1.136.Final-20.0-cp3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://flink.apache.org/flink-shaded-netty"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink-shaded/flink-shaded-netty"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.flink.shaded/flink-shaded-netty@4.1.136.Final-20.0-cp3?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.flink",
      "name" : "flink-shaded-guava",
      "version" : "32.1.3-jre-19.0",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "eefe4cdbc39deed31d53410ad9ad97c5"
        },
        {
          "alg" : "SHA-1",
          "content" : "7c197ead6922cd83ff550d372d07592e3f51b586"
        },
        {
          "alg" : "SHA-256",
          "content" : "d325a265bae4b256287c5be3821200b67b7075d18d0eed05bb0a0275ca101029"
        },
        {
          "alg" : "SHA-512",
          "content" : "28365b9f49ff013b82e809863c852f4728768fd08a8f7be7fcd734afb657ac69ecb38d9712505f101ac91a2f6575abb29c7190c13e99cd3ae513c54d69476d07"
        },
        {
          "alg" : "SHA-384",
          "content" : "af00f6b96c91d347c1b572da3784ddab6b84138fc99b3c0933f1e0a36daeb34ddf50b4d26b16fb39dcd1c42102348c9c"
        },
        {
          "alg" : "SHA3-384",
          "content" : "5d1914c122016dfa826a31dbe7413955c034957052a41553f05404f3fd17ab7ed5740f36879004c7db9c727d2ab2570d"
        },
        {
          "alg" : "SHA3-256",
          "content" : "5d749b1e21f790cb440348e9f221e2ad397e237900b38a83cadd9372f8ef2543"
        },
        {
          "alg" : "SHA3-512",
          "content" : "5aeedc6fc2289be12958afb5ebb441f432141cfe08b1967110d0789c5c458aaf4e5e4e28e915d0529be897362ac8f4ca5c3267b31da8c827fe40cd01a5690529"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.flink/flink-shaded-guava@32.1.3-jre-19.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://flink.apache.org/flink-shaded-guava"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink-shaded/flink-shaded-guava"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.flink/flink-shaded-guava@32.1.3-jre-19.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "io.confluent.flink.shaded",
      "name" : "flink-shaded-jackson",
      "version" : "2.18.10-20.0-cp3",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b197e67cae50c94157f513aa4f345d39"
        },
        {
          "alg" : "SHA-1",
          "content" : "ffe1787c22849a05dcfd74054d771a3160c19018"
        },
        {
          "alg" : "SHA-256",
          "content" : "1ac285974137de5f1565b97c5548b35532cbe90b749fbc5fcff26ceebfc61aec"
        },
        {
          "alg" : "SHA-512",
          "content" : "f0f696b1ee2efd99e3c3ca8e48840c4c499bf2c6a1cf700417054b9696319324db4088cb9ee227c53684020478fcaadebf4173e59c7a29c744ee7bfe39857541"
        },
        {
          "alg" : "SHA-384",
          "content" : "0382e77323583746e3de9d143506aff6a5ded88e3a0af29875acc27cfb068f2c6c53cff0efdb092342824428a2a9a820"
        },
        {
          "alg" : "SHA3-384",
          "content" : "80c5c71f775a78ca1172a5f82f07b5207ab0e5eba4b211100c31f6d887b261435cc3b98f507695411fece80406edf565"
        },
        {
          "alg" : "SHA3-256",
          "content" : "1f6f4dc0dd3bb7f0cee390fac88dfea70914a2dbc9d5a0ccefc2c9ab442076bf"
        },
        {
          "alg" : "SHA3-512",
          "content" : "54504d2bce8014c1f8a632179d31e059a4ec5a058a3b30612e4af00030458902aa57c02e5a77e1d740edb3e35833f5243316076254f145cf8cd0d375bd1eb496"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent.flink.shaded/flink-shaded-jackson@2.18.10-20.0-cp3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://flink.apache.org/flink-shaded-jackson-parent/flink-shaded-jackson"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink-shaded/flink-shaded-jackson-parent/flink-shaded-jackson"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.flink.shaded/flink-shaded-jackson@2.18.10-20.0-cp3?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "io.confluent.flink.shaded",
      "name" : "flink-shaded-zookeeper-3",
      "version" : "3.8.4-20.0-cp3",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "959351eeda2edc003503d91a6e052d6f"
        },
        {
          "alg" : "SHA-1",
          "content" : "6cb76091e5d2368acbff08d255031baba91aae57"
        },
        {
          "alg" : "SHA-256",
          "content" : "52e6a125ba736e07b5cf6d1f11e7b3f93ba50d28aad969637377d7b969aa983f"
        },
        {
          "alg" : "SHA-512",
          "content" : "03fa252a53cd8431688bc4a3110577d34289d64b5ebc91024189fefa24c3b4b2e779611b7f21d00d6e6334139019eb9b57329f72556d3964082ad3cbc29d1203"
        },
        {
          "alg" : "SHA-384",
          "content" : "9b5bab0cc87231bcff289b54894b2ce2fc7521c76e272cfb3fc12b52b906eb9a1aefb9b030d56772b44eb93655194bca"
        },
        {
          "alg" : "SHA3-384",
          "content" : "0821636955c6a3bb59204e0e2f1f1120822c63cbde7ffac599cfd343a87adec5cbb93ed93b847e1dbf58456d297f20bf"
        },
        {
          "alg" : "SHA3-256",
          "content" : "22a39c53a614a6d9927789e0d376a7a7dd45ca571ab91a0b9f60eca71f9b1250"
        },
        {
          "alg" : "SHA3-512",
          "content" : "03dc5278f11522ed32a8607eece69bed5351b2101d3dea0a6b4cc03fc0b5d02bfae9f63346cda0220d9932a3dff6ba52fdd9d8106e852deb1dafa6f335ebab83"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent.flink.shaded/flink-shaded-zookeeper-3@3.8.4-20.0-cp3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://flink.apache.org/flink-shaded-zookeeper-parent/flink-shaded-zookeeper-3"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink-shaded/flink-shaded-zookeeper-parent/flink-shaded-zookeeper-3"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.flink.shaded/flink-shaded-zookeeper-3@3.8.4-20.0-cp3?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-lang3",
      "version" : "3.18.0",
      "description" : "Apache Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang. The code is tested using the latest revision of the JDK for supported LTS releases: 8, 11, 17 and 21 currently. See https://github.com/apache/commons-lang/blob/master/.github/workflows/maven.yml Please ensure your build environment is up-to-date and kindly report any build issues.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "48b9886957920a4cdb602780ca345087"
        },
        {
          "alg" : "SHA-1",
          "content" : "fb14946f0e39748a6571de0635acbe44e7885491"
        },
        {
          "alg" : "SHA-256",
          "content" : "4eeeae8d20c078abb64b015ec158add383ac581571cddc45c68f0c9ae0230720"
        },
        {
          "alg" : "SHA-512",
          "content" : "c2c9d497fc1be411050f4011b2407764b78aa098eb42925af8a197eabdbc25b507f09fb898805e9bed4815f35236a508ee5b096e36f363df4d407232d50fc832"
        },
        {
          "alg" : "SHA-384",
          "content" : "4fb3f101106e4ce3666d5c15d276ba86f7683a0ef35f0384edfcd579ea454275edbb7400795d265ec3a38e39997e79b8"
        },
        {
          "alg" : "SHA3-384",
          "content" : "aada7e3612cf3f6190a19fa7c3db74df1e13ec56b300be9bb4317d261d5877c84ab59ba9a09168becdbd82cd41961395"
        },
        {
          "alg" : "SHA3-256",
          "content" : "306d286d0bd7549c203cc802fd755d354c4f7926fa023f4e83623ba1a6261250"
        },
        {
          "alg" : "SHA3-512",
          "content" : "f6f1ecc684e309d7b9fc5c343792508fee935cd2119d962721662c5af88e4864ba6f47a863e083714f315f926c156de1970cd2fb577449bdfdc7bf98a4a451fa"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-lang/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-lang/actions"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/LANG"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf/commons-lang.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "io.confluent.flink",
      "name" : "flink-connector-datagen",
      "version" : "2.0.2-cp4",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e36b4e3efbf538f95d0d54b36c9ef7cf"
        },
        {
          "alg" : "SHA-1",
          "content" : "a626dbb608b22dd515a57338408aed0c5c9fa044"
        },
        {
          "alg" : "SHA-256",
          "content" : "05a07faa5ca242490be552956e1e031867a48d96241e7d0eb5d7d385c9a09fd8"
        },
        {
          "alg" : "SHA-512",
          "content" : "4c05ac3dbc91f36a531416e6bac0b451afb03ab904cb59153b3110f9ccb70f27d82dd83f45499b7e90049cac89dfa2a14e1369c4256189de4d91d51cca76e138"
        },
        {
          "alg" : "SHA-384",
          "content" : "3b2b4b039dc026478eadddb6f15a821621880c89bb0cad4a7d3be18a75767af70ca3acb108fff2be0505e95032b39744"
        },
        {
          "alg" : "SHA3-384",
          "content" : "8bcb9d9801a81ca297b75d337ec2baa9a3cc8167e5412f54fcd61b1d061494bedaa31ca7dae0a769c67ec83a67ebe336"
        },
        {
          "alg" : "SHA3-256",
          "content" : "6b6e3e9db175b79198c358c1a0684194af5b40596c2f94948e4501232fea0a31"
        },
        {
          "alg" : "SHA3-512",
          "content" : "12d630493d4870e92aa25f15d060e80fed006bc5a011ac0363b31c5e6d780a251a591c92e4bbc12c435f95e5687befb8c0af142801d5293d2c5de2e9b4b0bb40"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent.flink/flink-connector-datagen@2.0.2-cp4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://flink.apache.org/flink-connectors/flink-connector-datagen"
        },
        {
          "type" : "distribution",
          "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/f53cb792246ff2bb005771ca0bc417b9e0036767"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink/flink-connectors/flink-connector-datagen"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.flink/flink-connector-datagen@2.0.2-cp4?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-text",
      "version" : "1.10.0",
      "description" : "Apache Commons Text is a library focused on algorithms working on strings.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4afc9bfa2d31dbf7330c98fcc954b892"
        },
        {
          "alg" : "SHA-1",
          "content" : "3363381aef8cef2dbc1023b3e3a9433b08b64e01"
        },
        {
          "alg" : "SHA-256",
          "content" : "770cd903fa7b604d1f7ef7ba17f84108667294b2b478be8ed1af3bffb4ae0018"
        },
        {
          "alg" : "SHA-512",
          "content" : "afd836a1094449e0a791fee67363666c47b6d24acff353a5089b837b332c0f4af89565c354682521e37062d20e6b52d70c77bb4f24cca9b9532c274fc708a831"
        },
        {
          "alg" : "SHA-384",
          "content" : "06c56e6e513dd77cf10d0da46cdea08c34e220e81fa024735b668c6650df4234e564fe865ff5cafea963f56b1e8ffd4a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "f09065ed066c25debf8c78cbb0bcc738e1ea283302ec992dcfb649acb90091cff879465c65a162e94534d454e3b4e9bb"
        },
        {
          "alg" : "SHA3-256",
          "content" : "0b59c567164bb755f2353b78ba66744000a8c4b35e1df05255b080a21c3a3dd5"
        },
        {
          "alg" : "SHA3-512",
          "content" : "f0fbce02a862b70f472a27d0722c54ac111ca2eb94584b8b0b73d1926aec26047cd92542ad0b3cf980a6825077587f41b194aa93d6f6350d1b87e59e8df1be7c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-text"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-parent/actions"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/TEXT"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-text.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-cli",
      "name" : "commons-cli",
      "version" : "1.5.0",
      "description" : "Apache Commons CLI provides a simple API for presenting, processing and validating a Command Line Interface.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6c3b2052160144196118b1f019504388"
        },
        {
          "alg" : "SHA-1",
          "content" : "dc98be5d5390230684a092589d70ea76a147925c"
        },
        {
          "alg" : "SHA-256",
          "content" : "bc8bb01fc0fad250385706e20f927ddcff6173f6339b387dc879237752567ac6"
        },
        {
          "alg" : "SHA-512",
          "content" : "b78ac2b418e9e9e7d0bc866664577199d320408a6f03151b3789bac365c986dd526df853599e633d7e50fe136cbf3eb9ce50c9cfa0ad38c3cc8d8ee416f61c40"
        },
        {
          "alg" : "SHA-384",
          "content" : "a7a2daa807c4007c506b5100f0a9b526c0052c4e1f6b699904ef9d2aba8195b6003dc4d47ca133b15e2f3e830bdbe6c4"
        },
        {
          "alg" : "SHA3-384",
          "content" : "44ca97514a2e34b5bf3de9b5d45c8e871f6eee517db7f3c4b4476eb3e8dfe9a9d8760f3181114708288c373727b42475"
        },
        {
          "alg" : "SHA3-256",
          "content" : "a0a47001d3a293f129ffc21f17f575a9d23ce5b88b440e651e4cd01edd0cc421"
        },
        {
          "alg" : "SHA3-512",
          "content" : "483dae23d6827a105d17847c8c813527f19042b65c4d09635dfc4bfd25990fe3ba2a997540460fd5b1d72ca3add9a38ca8b32004680764db972a9bb62f7f68d8"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-cli/commons-cli@1.5.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-cli/"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CLI"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-cli.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-cli/commons-cli@1.5.0?type=jar"
    },
    {
      "publisher" : "Shigeru Chiba, www.javassist.org",
      "group" : "org.javassist",
      "name" : "javassist",
      "version" : "3.24.0-GA",
      "description" : "Javassist (JAVA programming ASSISTant) makes Java bytecode manipulation simple. It is a class library for editing bytecodes in Java.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "23fd22d0d089ddfac567a39ce0cb1a91"
        },
        {
          "alg" : "SHA-1",
          "content" : "d7466fc2e3af7c023e95c510f06448ad29b225b3"
        },
        {
          "alg" : "SHA-256",
          "content" : "aba81efa678b621203fb89aeff81d6f126f7a9dd709401e5609c42976684ae23"
        },
        {
          "alg" : "SHA-512",
          "content" : "e57dad74a3edef837ece841d06e4a7c96ffecab8fbcba56fe5f7eccd662f0c0d757880a6073793a8c75ad7a0a1d146346b75cdbfe4fd8a271048a54446e5d1a2"
        },
        {
          "alg" : "SHA-384",
          "content" : "4867afdb7522b3dbfa10a51264ac6c15a2a8083d16c8dbef318275d24687768f35130b1c17d8407ca8ecf855abd83dff"
        },
        {
          "alg" : "SHA3-384",
          "content" : "a52be891987d4fc7d319e6417e0cd9a28f189d8623b803d72b5429e118da73b9937899231825e793d37b434d7522d283"
        },
        {
          "alg" : "SHA3-256",
          "content" : "0cf8db7d2a5f7e1a70827538cb4b0b446fcc239f05ca55d9bf8f2a50f1e08af3"
        },
        {
          "alg" : "SHA3-512",
          "content" : "ed9675f9f070203801eb762092ac99636d376b7ef563f99508283006a65a0d2dfce38e1ba7ff2ccfebcede0376ba0724b76b459ca112477234aed8208807f785"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MPL-1.1"
          }
        },
        {
          "license" : {
            "id" : "LGPL-2.1-only"
          }
        },
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.javassist/javassist@3.24.0-GA?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.javassist.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.jboss.org/nexus/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://jira.jboss.org/jira/browse/JASSIST/"
        },
        {
          "type" : "vcs",
          "url" : "scm:git:git@github.com:jboss-javassist/javassist.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.javassist/javassist@3.24.0-GA?type=jar"
    },
    {
      "publisher" : "xerial.org",
      "group" : "org.xerial.snappy",
      "name" : "snappy-java",
      "version" : "1.1.10.7",
      "description" : "snappy-java: A fast compression/decompression library",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "d74bb2e2857f965683c9de931b71fc86"
        },
        {
          "alg" : "SHA-1",
          "content" : "3049f95640f4625a945cfab85715f603fa4c8f80"
        },
        {
          "alg" : "SHA-256",
          "content" : "4c766cb3f855415ee734b2392949a0b6f12a60879334a74518deaf6270d32e36"
        },
        {
          "alg" : "SHA-512",
          "content" : "22a6ebb8e8ad4d8a149b0c67d8658ac1535d7014857064c4f7ed4999e29c6186de8a80b50dd9b59f631fa1c24970524fdbbb84083c80c59eb0c72d4efb041fef"
        },
        {
          "alg" : "SHA-384",
          "content" : "b7ea971de5e286b4bdb8b96063f0ffe611ef82f5887fa6845fc2721bf0e71a88b0c754ba010816596f0b6c178160c0c5"
        },
        {
          "alg" : "SHA3-384",
          "content" : "9ef6c5ad194027c8b4be0f756dfeb958ae3daa5ad942b34c4e9e570ce7516ba91fad298929e4d716f6a091d0b274bbc9"
        },
        {
          "alg" : "SHA3-256",
          "content" : "83f4ede80f49271566745463652e3cdebbe4e2112174400ddf082bf9b39d09cd"
        },
        {
          "alg" : "SHA3-512",
          "content" : "3c1ffb884ac57e812f997357f9501afbffec3aaac2aa2bb87b0dd8ec2e7e43d922c250dfc658920ade2014aa138440d2d9cdfce8e453812d089898d10390a6db"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.xerial.snappy/snappy-java@1.1.10.7?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/xerial/snappy-java"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/xerial/snappy-java"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.xerial.snappy/snappy-java@1.1.10.7?type=jar"
    },
    {
      "group" : "tools.profiler",
      "name" : "async-profiler",
      "version" : "2.9",
      "description" : "Low overhead sampling profiler for Java",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4df6477a255b88e99f2ed4daa3c713cc"
        },
        {
          "alg" : "SHA-1",
          "content" : "4ed20e2a4640ee672e7cf23b1512dbdeb9a4b7e6"
        },
        {
          "alg" : "SHA-256",
          "content" : "6c4e993c28cf2882964cac82a0f96e81a325840043884526565017b2f62c5ba4"
        },
        {
          "alg" : "SHA-512",
          "content" : "60ba593a0cf529397e73e38ef71bc2e5def44f1111a60f40a724ac3472ef7afe92e02a61b0ad18c373122cd92216f49268d335e1150dc3a99ff2431c598aeb5c"
        },
        {
          "alg" : "SHA-384",
          "content" : "65107ddcd2a06b69ac4cdb9bd93452045c4e08b843826666a890816abe0486966599cf6a4b07ff87c5d95e86551bb115"
        },
        {
          "alg" : "SHA3-384",
          "content" : "4989b467a4791464d50c51782ccc60547bfc8105aebc0764656c67405bbd7d023a9d405a1fd864f86dbd186af8624928"
        },
        {
          "alg" : "SHA3-256",
          "content" : "225998977421a87839be6c09f49f9ebd972b063a65f53d374e61fc3d68416ca4"
        },
        {
          "alg" : "SHA3-512",
          "content" : "723c0651f61ae6a119624b11bc9d3959ae44de0bcef51f0a341c5d7ebdc6a0e677f3c43399db9a4a657334f46a1092ee55d45f92344b7e31e6e26669ffe41823"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/tools.profiler/async-profiler@2.9?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://profiler.tools"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/jvm-profiling-tools/async-profiler"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/tools.profiler/async-profiler@2.9?type=jar"
    },
    {
      "group" : "at.yawk.lz4",
      "name" : "lz4-java",
      "version" : "1.11.1",
      "description" : "Java bindings and pure Java implementations of LZ4 and XXHash",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "cf0bae47489d940ad5d5420cfe4f9ebf"
        },
        {
          "alg" : "SHA-1",
          "content" : "140124bf632168cef73cf9ce80477dced52b2443"
        },
        {
          "alg" : "SHA-256",
          "content" : "e5e31b195fcc7e9c5da4b191af3b0082ee616c13f61cbd79409ffa65e4dd5c47"
        },
        {
          "alg" : "SHA-512",
          "content" : "e8bff47e602093b9c86f14021ca4e82d90aa5358f37726b1ba04b8f58812751cf3d7fe2f9893a963eb251d2c3237b41fe890768d8f90ef76a24ad389e2056fda"
        },
        {
          "alg" : "SHA-384",
          "content" : "7fb6a46d318fad3783a92c47a1e0ccdef2e0162266dd503dff2659814e82b8c857507930f00f5d0f529932b6d853a041"
        },
        {
          "alg" : "SHA3-384",
          "content" : "8f69886f5ddf2952d6e15dda6dfc4956f069047f44623c0413b45c24d60b662a5a6de1112ab59c1659e6665ca7a90e64"
        },
        {
          "alg" : "SHA3-256",
          "content" : "aa8d74abc6ba4ec19e730b936cf80ee6ecc02ce903beb874930411484cd403c6"
        },
        {
          "alg" : "SHA3-512",
          "content" : "69eb36d3883c07275daa521501ea2b9c64ca0719d952995f3c0de0c6c79424dadb47c816c8e8a0c2ea6c7b2d3749bbdf948e99cf7548d08034d2536de33690e5"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/at.yawk.lz4/lz4-java@1.11.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/yawkat/lz4-java"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/yawkat/lz4-java"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/at.yawk.lz4/lz4-java@1.11.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "io.confluent.flink",
      "name" : "flink-clients",
      "version" : "2.0.2-cp4",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "8506717734161d93d90fcf96b3a24ea6"
        },
        {
          "alg" : "SHA-1",
          "content" : "8f3bfb4f042a1f39fc05412647cb81e86b964d71"
        },
        {
          "alg" : "SHA-256",
          "content" : "bea5cfe6ec6a5789bdd7e8c6928614f251f5ae87b28575bd952c98b30ea9a8f6"
        },
        {
          "alg" : "SHA-512",
          "content" : "a02eac4bf24435a1c8df668ba9dd38e0156e6344bd03096143c152e31674474da721094bdf799a3f25ace93ef3f82192ca7722543d26d55919eb81ff58d370e4"
        },
        {
          "alg" : "SHA-384",
          "content" : "f40be68cc9a24550ce78487004d8b91ee829b94b3653ff1a072f4fe68d011f745d1e9927e14370e02690ce4a6f425738"
        },
        {
          "alg" : "SHA3-384",
          "content" : "bd952ad92f48e4fa9aecd55f8263460e5f15d14fe1346cea4a2611b688b0cad2f3ed8c38f279b321cd4452d79c37e4ba"
        },
        {
          "alg" : "SHA3-256",
          "content" : "a15be771bf594119c4dbde5f0a8c53156c108f387f87237e9308318647cecd57"
        },
        {
          "alg" : "SHA3-512",
          "content" : "58e653675f78d25375e195e87607ff7c3c787a65d3f2a744b23f578a8135eff316ec7fb112dc6ff60541ee4ba82cea71080d13d3a9c35d9d5e1e2974978b7cf6"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent.flink/flink-clients@2.0.2-cp4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://flink.apache.org/flink-clients"
        },
        {
          "type" : "distribution",
          "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/f53cb792246ff2bb005771ca0bc417b9e0036767"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink/flink-clients"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.flink/flink-clients@2.0.2-cp4?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "io.confluent.flink",
      "name" : "flink-streaming-java",
      "version" : "2.0.2-cp4",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "ab6824cfa3340944fbb33edb32661578"
        },
        {
          "alg" : "SHA-1",
          "content" : "d1cac55f192e7a9033df6306e9054d0052348494"
        },
        {
          "alg" : "SHA-256",
          "content" : "3a8fab9b685017e6207f34e79d66cec77f7ac8e32fc061d11f1b8eb3d6e357cc"
        },
        {
          "alg" : "SHA-512",
          "content" : "56c940dc54363d8a919d59f5309282062b3be395b9ed03d8c6eb2059f95b804b43ccef0feee3702c05d042415d69bb497914957430794a5afe0877ef3bb0fb53"
        },
        {
          "alg" : "SHA-384",
          "content" : "969a4a7c0ff1fedeed91f234f11dd763b8a8928696a32a2e520fafba45c3e8a793c3573894fc5e86f477410753fa7b2e"
        },
        {
          "alg" : "SHA3-384",
          "content" : "ab06c414eeee01d1878efc073007198fd0e171148183d28b579805e210e93824c9b428b5809ca626af5405a57eb3c16f"
        },
        {
          "alg" : "SHA3-256",
          "content" : "d74333ab1a1da943a27fd9d6978c9a270521d2979bb6d0a6458c8a2616c7f693"
        },
        {
          "alg" : "SHA3-512",
          "content" : "9b6d9db57a59ff377c218a434d794a443d9ba115923297f3481f53483fc52dcea7f32115c31d5d7138ac886356d7b5c68bfc4b41e57cee5ccad7328722a9d4ed"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent.flink/flink-streaming-java@2.0.2-cp4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://flink.apache.org/flink-streaming-java"
        },
        {
          "type" : "distribution",
          "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/f53cb792246ff2bb005771ca0bc417b9e0036767"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink/flink-streaming-java"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.flink/flink-streaming-java@2.0.2-cp4?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "io.confluent.flink",
      "name" : "flink-file-sink-common",
      "version" : "2.0.2-cp4",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0bd7c0a5c504f4ab2af847f3385a1b9a"
        },
        {
          "alg" : "SHA-1",
          "content" : "ad5fb68beab25759039fa20b4a98212597181b75"
        },
        {
          "alg" : "SHA-256",
          "content" : "55c44078f7dde247e5fc6d9dba20242b14ad10988372f1107db934d10c2c1372"
        },
        {
          "alg" : "SHA-512",
          "content" : "96f9ddb2630e016dc90c7d9ba3fec381651f092954ca8fa4cd37aca72d41b17b318cb31ab688506a5d4f8198a096b45b0c8fa8a0e4b13a95c95ae5475c53563d"
        },
        {
          "alg" : "SHA-384",
          "content" : "8437b5100db885692f9343e7fe5997d1c6c75a11ce1b0ace05c9ae3344afe28f03cec1acf5b37dca9de5d9d9700774ef"
        },
        {
          "alg" : "SHA3-384",
          "content" : "b174035d1319ca3dc4177d4736d0ce7dc253760b9ccbc5c2ec40b6417e14ec82e3663c4a8101ca360c0f83e55cb3ed05"
        },
        {
          "alg" : "SHA3-256",
          "content" : "ef51e21d5e230bfe3dc3b9b8ec2f05cf7957f593466766ec2d54729af6b72574"
        },
        {
          "alg" : "SHA3-512",
          "content" : "11cb16001b290aafa05d87ba8389e5114001d4295991aff3397b009364aa5001671f292d98e07f55a0a1c27a301c6d88efbf7dfeee747943c431deb3c06536fb"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent.flink/flink-file-sink-common@2.0.2-cp4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://flink.apache.org/flink-connectors/flink-file-sink-common"
        },
        {
          "type" : "distribution",
          "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/f53cb792246ff2bb005771ca0bc417b9e0036767"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink/flink-connectors/flink-file-sink-common"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.flink/flink-file-sink-common@2.0.2-cp4?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "io.confluent.flink",
      "name" : "flink-datastream",
      "version" : "2.0.2-cp4",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "5908ef1ab608647d237053394ef0bfe1"
        },
        {
          "alg" : "SHA-1",
          "content" : "40417af357381ced64cf8064a90d3954de205df0"
        },
        {
          "alg" : "SHA-256",
          "content" : "9bc7fbc8fa77633bf5280ecad56c47e4b6de0cb72a6178a1101dd4e9d27d061d"
        },
        {
          "alg" : "SHA-512",
          "content" : "bd57d4855806aff7140de3c9071c48275d22a5a6c73d2157cfe1a595d52b1ad11f2a5e0cd47a19b29748a93a6cd30f8459ab7756bf5660421bd4038529c37cce"
        },
        {
          "alg" : "SHA-384",
          "content" : "97a9fef4a85efb5c6602552d13e9e90d6c3b369411d7c8673cf3df4330e81b96911a077463941970c9b99353c5caacc1"
        },
        {
          "alg" : "SHA3-384",
          "content" : "b327abb4e60b4185ba6b947783b596225eab90b5ba65d735f068bf6d70124815ea3c2d2f7c57632d0d03fdd3ceb5cd50"
        },
        {
          "alg" : "SHA3-256",
          "content" : "b8025edbc1b5c105e0eb35a5ca0d7329d2ef69b43a4dba7ed8ce0455498e74d9"
        },
        {
          "alg" : "SHA3-512",
          "content" : "ac0428213ac00595345c82a0556e6e34d97e4c5ec2b0b975f681363c618c1f11b4c5c2d9ec733cbba4744e2743b8b077b6f193e6554cb00bc589ac8d08167e87"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent.flink/flink-datastream@2.0.2-cp4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://flink.apache.org/flink-datastream"
        },
        {
          "type" : "distribution",
          "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/f53cb792246ff2bb005771ca0bc417b9e0036767"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink/flink-datastream"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.flink/flink-datastream@2.0.2-cp4?type=jar"
    },
    {
      "publisher" : "Apache Software Foundation",
      "group" : "org.apache.hadoop",
      "name" : "hadoop-common",
      "version" : "2.10.2",
      "description" : "Apache Hadoop Common",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0e701d9a254fa21128f4a5a33aff13de"
        },
        {
          "alg" : "SHA-1",
          "content" : "fd5786fcd0228073e7c9c4ba5739519eceb55ddb"
        },
        {
          "alg" : "SHA-256",
          "content" : "fe93812dc299e17ebcfc12921bd3162c79ecfab84d120d51d4ddc275c7414ff9"
        },
        {
          "alg" : "SHA-512",
          "content" : "abce060bc87b2ed21b8b19c16db1dc5927c35e810189109bff58eaa5adfd048892af809ebd78913bf5c6b01d28f6809bade08f3b2042e1beb247b9eedeae64ea"
        },
        {
          "alg" : "SHA-384",
          "content" : "54ad68c163b4383bf10b88e7aee2e9bba5c36d42416812a675679eb5f030a22a5f651b8d2a5e9b8923833d88861be9f3"
        },
        {
          "alg" : "SHA3-384",
          "content" : "6f75759ad4a8d5816ab7eae09ce076e29b1ed34283f1369e68a2d042e6f68216246cfd9b1e019ed3467058ffd7e94a3c"
        },
        {
          "alg" : "SHA3-256",
          "content" : "ec5b93b393baa94f120a8518eb050e7e0f4138fea29cd12f31695a3220fa465c"
        },
        {
          "alg" : "SHA3-512",
          "content" : "da68a37c26b8a2bd47531b77b67412b12b98a657540512e9d31f4f78a91297b0694be5183bb82441b248cc71302682dcf6385ff352585e11355f95ccb57e6638"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.hadoop/hadoop-common@2.10.2?type=jar",
      "externalReferences" : [
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.hadoop/hadoop-common@2.10.2?type=jar"
    },
    {
      "publisher" : "Apache Software Foundation",
      "group" : "org.apache.hadoop",
      "name" : "hadoop-annotations",
      "version" : "2.10.2",
      "description" : "Apache Hadoop Annotations",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a3ff551c2ea8a5e17c3042ee46f1f763"
        },
        {
          "alg" : "SHA-1",
          "content" : "5b406750215dcbd8d322d57696cd52fdb796e528"
        },
        {
          "alg" : "SHA-256",
          "content" : "c47d615be08cb6631985188489ba17d376577b67e3690d6de1eb9d0d611f35e3"
        },
        {
          "alg" : "SHA-512",
          "content" : "a139640e5f7077610e72b939494825ff95c3d6d18c7c121d5d198bd0ba99bb399116633ee25149d915c3474d0afb9ebe101b48cce28d6f5903a233ceebd7cc6b"
        },
        {
          "alg" : "SHA-384",
          "content" : "6dbe2290de667a3f3dab7e3f4a4327010329bd36e0c50a709f01a41b2c9252475237255318f8b174a625cea17f860d7a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "d92bbeb8a79018ca44309cd45b57a0e92933c95eb4de6ed58522d8bd74a4c5232e8c2366d27094c06c83d3551486e6d3"
        },
        {
          "alg" : "SHA3-256",
          "content" : "66deb54a0b53acbecfe453b97699a527dd4378a69ed0112e2e0ed18c60d4a927"
        },
        {
          "alg" : "SHA3-512",
          "content" : "b0f0bbb9e90a8e22947ccb706525314b3a13e6115b0e3b10785f55289b7e80f5bb14e167be0b62d74de365ea01d3a5ec09b6b3615718acb5dea486d664c761b7"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.hadoop/hadoop-annotations@2.10.2?type=jar",
      "externalReferences" : [
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.hadoop/hadoop-annotations@2.10.2?type=jar"
    },
    {
      "group" : "com.google.guava",
      "name" : "guava",
      "version" : "11.0.2",
      "description" : "Guava is a suite of core and expanded libraries that include utility classes, google's collections, io classes, and much much more. This project is a complete packaging of all the Guava libraries into a single jar. Individual portions of Guava can be used by downloading the appropriate module and its dependencies. Guava (complete) has only one code dependency - javax.annotation, per the JSR-305 spec.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "bed5977336ea1279d2bad3bb258dc8c3"
        },
        {
          "alg" : "SHA-1",
          "content" : "35a3c69e19d72743cac83778aecbee68680f63eb"
        },
        {
          "alg" : "SHA-256",
          "content" : "e144a0ec7f5139c58d4f3729ccfb4240f9c576a1aa43790e4090e09316129ee1"
        },
        {
          "alg" : "SHA-512",
          "content" : "392ae7e0c1b0da2ae91f0e5e022dbcd4bca3861242d57599f563e3a6561592df7baca18fe62000fcd701e1b81cb4ae6987698a5695358127fe4f74ff39776eb5"
        },
        {
          "alg" : "SHA-384",
          "content" : "e9f119ad115dddc4fe076dde2fe5c2fffec092ed4766b24055c234098096c8ccfabcfd351df7a0c382f0a6c62cd9a099"
        },
        {
          "alg" : "SHA3-384",
          "content" : "97804434e2d69e1c3d5df7bf41ee140a7b1babb745684d8d1aed08dae1921a92c8ddca0bf100d2500e91d52688cbd56f"
        },
        {
          "alg" : "SHA3-256",
          "content" : "9d0e45ab59ea2f9acc03b9ac9ffceab88108792ada54b9fc702a8bed0dd5f6f8"
        },
        {
          "alg" : "SHA3-512",
          "content" : "ca7990560ff45358c7136be421cd4b8fadeb2dda19b3a634c31537351d781f46af77a1cdbed64d95c0f82f3d076ea1370845e4ee24675cecf5403c17f2e1cd46"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.guava/guava@11.0.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://code.google.com/p/guava-libraries/guava"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://code.google.com/p/guava-libraries/issues"
        },
        {
          "type" : "vcs",
          "url" : "http://code.google.com/p/guava-libraries/source/browse/guava"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.guava/guava@11.0.2?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-math3",
      "version" : "3.6.1",
      "description" : "The Apache Commons Math project is a library of lightweight, self-contained mathematics and statistics components addressing the most common practical problems not immediately available in the Java programming language or commons-lang.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "5b730d97e4e6368069de1983937c508e"
        },
        {
          "alg" : "SHA-1",
          "content" : "e4ba98f1d4b3c80ec46392f25e094a6a2e58fcbf"
        },
        {
          "alg" : "SHA-256",
          "content" : "1e56d7b058d28b65abd256b8458e3885b674c1d588fa43cd7d1cbb9c7ef2b308"
        },
        {
          "alg" : "SHA-512",
          "content" : "8bc2438b3b4d9a6be4a47a58410b2d4d0e56e05787ab24badab8cbc9075d61857e8d2f0bffedad33f18f8a356541d00f80a8597b5dedb995be8480d693d03226"
        },
        {
          "alg" : "SHA-384",
          "content" : "95d1186d9ca06a3ea2e6437ddec3a55698e2493d3e72f6f554746b74fa929892bd71a2ab501a4e7b1ce56b7cd64e7ab4"
        },
        {
          "alg" : "SHA3-384",
          "content" : "f85bb3e46a00fc4940a3be1331301302b0eb728e2d1fe2c1842d4761e5a0bc7a420c0c705ae60250ca1c7b03d3694b9e"
        },
        {
          "alg" : "SHA3-256",
          "content" : "919c15ae4b1aef2a58aa6ea4b700bc5562e78dbc382f3393169425ca91ad368c"
        },
        {
          "alg" : "SHA3-512",
          "content" : "dbe54d586c898cdbd7df6c31c131ca3525db17fcea5c7f5da8cbfe617e2afc667289290c76771ec5c9567a56fb2b177b0a31d67abcc656410c90287da4d88999"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-math3@3.6.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://commons.apache.org/proper/commons-math/"
        },
        {
          "type" : "build-system",
          "url" : "https://continuum-ci.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/MATH"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://git-wip-us.apache.org/repos/asf?p=commons-math.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-math3@3.6.1?type=jar"
    },
    {
      "group" : "xmlenc",
      "name" : "xmlenc",
      "version" : "0.52",
      "description" : "xmlenc Library",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "c962b6bc3c8de46795b0ed94851fa9c7"
        },
        {
          "alg" : "SHA-1",
          "content" : "d82554efbe65906d83b3d97bd7509289e9db561a"
        },
        {
          "alg" : "SHA-256",
          "content" : "282ae185fc2ff27da7714af9962897c09cfefafb88072219c4a2f9c73616c026"
        },
        {
          "alg" : "SHA-512",
          "content" : "3a1f30f2bcebca32fce505185cfda1cd90fc2dc8c60fe41584f764fc2b4004422462b32ec88b70c93165ecc45201f8834fc16feb067812daa0759d2096b4a63f"
        },
        {
          "alg" : "SHA-384",
          "content" : "3ed1606ddd4995ffb15ef504195fa4ee73f536b1a232d18532cb53f10f9f8e418fc5e91bf47834bc98a4331981301755"
        },
        {
          "alg" : "SHA3-384",
          "content" : "3fd4abcd6d7a65dec35629144d7205789144cad016b398d96eb972982736bc5926fd28b4ad1d8edea4c55f573469d4cc"
        },
        {
          "alg" : "SHA3-256",
          "content" : "0afd3a376b7817f752a3c85db94337ec3f8249aa09a8dfddb72862c39642ce9a"
        },
        {
          "alg" : "SHA3-512",
          "content" : "562a1d61fdddaf4121c2af27ab065bd558429d307af2c51c8b813ca028cff8edc63b641d2998fc9e2b530b64652533faccb5c4544f0f76dfa254dd4e209155cf"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-4-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/xmlenc/xmlenc@0.52?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://xmlenc.sourceforge.net"
        },
        {
          "type" : "vcs",
          "url" : "http://xmlenc.cvs.sourceforge.net/xmlenc/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/xmlenc/xmlenc@0.52?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.httpcomponents",
      "name" : "httpclient",
      "version" : "4.5.13",
      "description" : "Apache HttpComponents Client",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "40d6b9075fbd28fa10292a45a0db9457"
        },
        {
          "alg" : "SHA-1",
          "content" : "e5f6cae5ca7ecaac1ec2827a9e2d65ae2869cada"
        },
        {
          "alg" : "SHA-256",
          "content" : "6fe9026a566c6a5001608cf3fc32196641f6c1e5e1986d1037ccdbd5f31ef743"
        },
        {
          "alg" : "SHA-512",
          "content" : "3567739186e551f84cad3e4b6b270c5b8b19aba297675a96bcdff3663ff7d20d188611d21f675fe5ff1bfd7d8ca31362070910d7b92ab1b699872a120aa6f089"
        },
        {
          "alg" : "SHA-384",
          "content" : "093ac3e2dde58e34aa70309c7305eb3c9b5be2509a9293f1672494da55479a86bd112e83326746dc7a32855472952b99"
        },
        {
          "alg" : "SHA3-384",
          "content" : "cd6882e7868624164e460f2f3ea01466f863c0dcb902b031c656b57356f563be83b29530df41d88d634ed3d01fc9964d"
        },
        {
          "alg" : "SHA3-256",
          "content" : "710b1d8d7dae0b8e4270756694ca9c83d64965f42d3b4170c609b14d47c2762c"
        },
        {
          "alg" : "SHA3-512",
          "content" : "276fa6a6599dc89382d658115695cf4da6b0d39b34e9c349c17a5dbd64122eaee553bb9ed75c0378ec4a83be157c8aa39370662de3c9b8fd55ebc1dd608383e6"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.httpcomponents/httpclient@4.5.13?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://hc.apache.org/httpcomponents-client"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/HTTPCLIENT"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/hc-httpclient-users/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/httpcomponents-client/tree/4.5.13/httpclient"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.httpcomponents/httpclient@4.5.13?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.httpcomponents",
      "name" : "httpcore",
      "version" : "4.4.14",
      "description" : "Apache HttpComponents Core (blocking I/O)",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "2b3991eda121042765a5ee299556c200"
        },
        {
          "alg" : "SHA-1",
          "content" : "9dd1a631c082d92ecd4bd8fd4cf55026c720a8c1"
        },
        {
          "alg" : "SHA-256",
          "content" : "f956209e450cb1d0c51776dfbd23e53e9dd8db9a1298ed62b70bf0944ba63b28"
        },
        {
          "alg" : "SHA-512",
          "content" : "f16a652f4a7b87dbf7cb16f8590d54a3f719c4c7b2f8883ce59db2d73be4701b64f2ca8a2c45aca6a5dbeaddeedff0c280a03722f70c076e239b645faa54eff9"
        },
        {
          "alg" : "SHA-384",
          "content" : "1cd0a3c120cfb4974573b0f499b2ac8a200aa43506777ed09f9806c6899541605fd355a3b5f44977517dd1cb463e808b"
        },
        {
          "alg" : "SHA3-384",
          "content" : "c771301cda89b2c102b76ba7b46222e0ee1898fa1e53fd4d43a7994e4a234a9804f7221feafe0259f0e9db164a5d4576"
        },
        {
          "alg" : "SHA3-256",
          "content" : "97a9e2fcd1946204dd8643e504c0ff73904957da5df605d703734f95345d5816"
        },
        {
          "alg" : "SHA3-512",
          "content" : "ee6045c3724c2a4983330cf9bc57a46c0fcfc252be455a864953ef5c538ea4aab399c4315f7e5b1a315a48bb8f11cc7492e0735615fd68aa3981fa3ddb4d0a98"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.httpcomponents/httpcore@4.4.14?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://hc.apache.org/httpcomponents-core-ga"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/HTTPCORE"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/hc-httpclient-users/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/httpcomponents-core/tree/4.4.14/httpcore"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.httpcomponents/httpcore@4.4.14?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-codec",
      "name" : "commons-codec",
      "version" : "1.15",
      "description" : "The Apache Commons Codec package contains simple encoder and decoders for various formats such as Base64 and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a collection of phonetic encoding utilities.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "303baf002ce6d382198090aedd9d79a2"
        },
        {
          "alg" : "SHA-1",
          "content" : "49d94806b6e3dc933dacbd8acb0fdbab8ebd1e5d"
        },
        {
          "alg" : "SHA-256",
          "content" : "b3e9f6d63a790109bf0d056611fbed1cf69055826defeb9894a71369d246ed63"
        },
        {
          "alg" : "SHA-512",
          "content" : "da30a716770795fce390e4dd340a8b728f220c6572383ffef55bd5839655d5611fcc06128b2144f6cdcb36f53072a12ec80b04afee787665e7ad0b6e888a6787"
        },
        {
          "alg" : "SHA-384",
          "content" : "05d0506283716472175d44c2a4766523397bf8a007c18848f9c9a61718cc8aa437f9cb4b91771037ab29a960860b62a0"
        },
        {
          "alg" : "SHA3-384",
          "content" : "12fad4ef78274b06f97b1243cea6f970088abde082d2de9377d915a34b44f7d7d67807c03e59c849b69f1544e2a9a1be"
        },
        {
          "alg" : "SHA3-256",
          "content" : "87be248f33f241121f54aad61a9a460a79eabefbf1b5b0dd22aeb95b581f727e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "8c992c9c569ebaa0bf956a4c5b34fbf5e1ed1c212c2dd896fa216183ee0bcd341e96698af4b9cec7e8880762faa081a3d3a27f51349aa457cb8e373e4f57c788"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-codec/commons-codec@1.15?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-codec/"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CODEC"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/commons-codec"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-codec/commons-codec@1.15?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-net",
      "name" : "commons-net",
      "version" : "3.1",
      "description" : "Apache Commons Net library contains a collection of network utilities and protocol implementations. Supported protocols include: Echo, Finger, FTP, NNTP, NTP, POP3(S), SMTP(S), Telnet, Whois",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "23c94d51e72f341fb412d6a015e16313"
        },
        {
          "alg" : "SHA-1",
          "content" : "2298164a7c2484406f2aa5ac85b205d39019896f"
        },
        {
          "alg" : "SHA-256",
          "content" : "34a58d6d80a50748307e674ec27b4411e6536fd12e78bec428eb2ee49a123007"
        },
        {
          "alg" : "SHA-512",
          "content" : "66887e7c5077dc6aed5dc85c172e7d80ae13503ab1e000dd76e87626cddb0427f3f9251941af94744d53f6b771e031785ce1362b01595d9723330554213bdfe8"
        },
        {
          "alg" : "SHA-384",
          "content" : "444a0ffddba21cb56369700b5b89641a453adfaffb948e22329011c8eb02ee40b70f57f88c3d10239d49eaf4069c1e25"
        },
        {
          "alg" : "SHA3-384",
          "content" : "c1a19ff6d35406b9363473484f847e995d995d9b6df03fa6e6e6f37b1cb3129baf58975037674c7bdbab79e1d2776246"
        },
        {
          "alg" : "SHA3-256",
          "content" : "2b750264c332b902556ff672997f23c56500eb815c41fc067f1773ba2aecdbd9"
        },
        {
          "alg" : "SHA3-512",
          "content" : "d798769ab7d6950ad16c9d4855de89414b10d8e53356c1c857dc06c408a8fab91c8db1f0529909aa7fa1bca76c38128d9b0b0734dc5f55e0ed6bfaf069ab3e42"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-net/commons-net@3.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://commons.apache.org/net/"
        },
        {
          "type" : "build-system",
          "url" : "http://vmbuild.apache.org/continuum/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/NET"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/commons/proper/net/trunk"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-net/commons-net@3.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-collections",
      "name" : "commons-collections",
      "version" : "3.2.2",
      "description" : "Types that extend and augment the Java Collections Framework.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f54a8510f834a1a57166970bfc982e94"
        },
        {
          "alg" : "SHA-1",
          "content" : "8ad72fe39fa8c91eaaf12aadb21e0c3661fe26d5"
        },
        {
          "alg" : "SHA-256",
          "content" : "eeeae917917144a68a741d4c0dff66aa5c5c5fd85593ff217bced3fc8ca783b8"
        },
        {
          "alg" : "SHA-512",
          "content" : "51c72f9aca7726f3c387095e66be85a6df97c74b00a25434b89188c1b8eab6e2b55accf7b9bd412430d22bd09324dec076e300b3d1fa39fccad471f0f2a3da16"
        },
        {
          "alg" : "SHA-384",
          "content" : "dd4e99b3314bd3c1a1ee26296615d9e44dadf7a1f8a7bbba44fb95121803d331e36d4cca4260e7609af78a47ba3e4073"
        },
        {
          "alg" : "SHA3-384",
          "content" : "8ce03528e4a6e95c44283b56eca87e6a6d3bf1363411a55b538f4f9110cf7470581ea5c73925e877ddab08dba0603f40"
        },
        {
          "alg" : "SHA3-256",
          "content" : "fd3d6134b5f07077b82ccf93d148dacf7c4ce5c971209510edd0e77e3e38c19e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c2a523916fb7c7d55a05d5e3d9e9b33000733f4b20a71be174e4e093e3f06ea78ad831edd1505527da7388105f8647efb7d5666ba852c90b4e2d5bb74256efbc"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://commons.apache.org/collections/"
        },
        {
          "type" : "build-system",
          "url" : "https://continuum-ci.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/COLLECTIONS"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/commons/proper/collections/trunk"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar"
    },
    {
      "group" : "javax.servlet",
      "name" : "servlet-api",
      "version" : "2.5",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "69ca51af4e9a67a1027a7f95b52c3e8f"
        },
        {
          "alg" : "SHA-1",
          "content" : "5959582d97d8b61f4d154ca9e495aafd16726e34"
        },
        {
          "alg" : "SHA-256",
          "content" : "c658ea360a70faeeadb66fb3c90a702e4142a0ab7768f9ae9828678e0d9ad4dc"
        },
        {
          "alg" : "SHA-512",
          "content" : "363ba5590436ab82067b7a2e14b481aeb2b12ca4048d7a1519a2e549b2d3c09ddf718ac64dc2be6c2fc24c51fdc9c8160261329403113369588ce27d87771db6"
        },
        {
          "alg" : "SHA-384",
          "content" : "1d8b8aa3ad4edb7611a43e4e5b0f9538aa70df1d6ecf09cb977f6fb963797850d4350778530f2082aac9bedf09a27824"
        },
        {
          "alg" : "SHA3-384",
          "content" : "2c62a7bf3f321aaa2ccd80e9fa633eb36a672a208c79e117a91e9812e3abfd7df3934930191d109be65441deed2cbd20"
        },
        {
          "alg" : "SHA3-256",
          "content" : "319bcec5b7eb366f63655cdf3cbdaa385e160f61edf3cbd94938e53b59905995"
        },
        {
          "alg" : "SHA3-512",
          "content" : "dd44fc227d6e790255376ef0473746725fa7703d38ae3805715910d1846f41ac789acdc2d2ba1ebde874f7ee32d906608966612c90c618872aed3fca8e28e952"
        }
      ],
      "licenses" : [ ],
      "purl" : "pkg:maven/javax.servlet/servlet-api@2.5?type=jar",
      "type" : "library",
      "bom-ref" : "pkg:maven/javax.servlet/servlet-api@2.5?type=jar"
    },
    {
      "publisher" : "Mort Bay Consulting",
      "group" : "org.mortbay.jetty",
      "name" : "jetty",
      "version" : "6.1.26",
      "description" : "Jetty server core",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "12b65438bbaf225102d0396c21236052"
        },
        {
          "alg" : "SHA-1",
          "content" : "2f546e289fddd5b1fab1d4199fbb6e9ef43ee4b0"
        },
        {
          "alg" : "SHA-256",
          "content" : "21091d3a9c1349f640fdc421504a604c040ed89087ecc12afbe32353326ed4e5"
        },
        {
          "alg" : "SHA-512",
          "content" : "4646b044a05424f1df113c5fddfc066c1fef47933b631efe63701170acc197e531330e583ae0e5000cf8ad38151c91a9e61b2864876de05cfd3ba710481ed484"
        },
        {
          "alg" : "SHA-384",
          "content" : "670285f35903def2e22a3e2430f36d47599e22d8cd96f8aad6c67704076d3648f1b4b790ef13cb0a5bbfbb3cc02e0d3e"
        },
        {
          "alg" : "SHA3-384",
          "content" : "edd96ee76c3821720879c8b8e2ee4a8174fa6b75b54413a9bccbf05223cddfedbbf0693ef6d1e9831e1b3fc44dfb17f8"
        },
        {
          "alg" : "SHA3-256",
          "content" : "9b7c499beb391e8b09b9b24097638ca1f347a0a65b6624899bb8c0272ac59342"
        },
        {
          "alg" : "SHA3-512",
          "content" : "0e3dd9a54c0a37bb9e9eb52d0c9de3b957c8fb7649394d8c547e2fe2099ac892b6145bf630165358a2b83d6ba2f25802a9395615b7c519ff0b84a7cbfa36d3f8"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        },
        {
          "license" : {
            "id" : "EPL-1.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.mortbay.jetty/jetty@6.1.26?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.eclipse.org/jetty/jetty-parent/project/modules/jetty"
        },
        {
          "type" : "distribution",
          "url" : "http://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://jira.codehaus.org/browse/JETTY"
        },
        {
          "type" : "mailing-list",
          "url" : "http://dev.eclipse.org/mhonarc/lists/jetty-dev/maillist.html"
        },
        {
          "type" : "vcs",
          "url" : "http://fisheye.codehaus.org/viewrep/jetty/modules/jetty/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.mortbay.jetty/jetty@6.1.26?type=jar"
    },
    {
      "publisher" : "Mort Bay Consulting",
      "group" : "org.mortbay.jetty",
      "name" : "jetty-util",
      "version" : "6.1.26",
      "description" : "Utility classes for Jetty",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "450fedce4f7f8ad3761577b10a664200"
        },
        {
          "alg" : "SHA-1",
          "content" : "e5642fe0399814e1687d55a3862aa5a3417226a9"
        },
        {
          "alg" : "SHA-256",
          "content" : "9b974ce2b99f48254b76126337dc45b21226f383aaed616f59780adaf167c047"
        },
        {
          "alg" : "SHA-512",
          "content" : "695bfbfc0ecd8f410fea7c44451f1765a610ccfe427d91e2cf900cab18068e89ad98b75dc37d0fec9b83255e698fb7e26d7089c91dd1d85085e99ca7a9af0ec5"
        },
        {
          "alg" : "SHA-384",
          "content" : "056ad2d0482a77607ed1b135a745ad443eb2a66b0b0bd9786f648a620e40712cdca6dbf3db503bb7e9974269a48f0113"
        },
        {
          "alg" : "SHA3-384",
          "content" : "3d7f0ba19c8439b0357bc1e3101c607ea9a04d91dc3388c26da096ded31edbc4450ab738a76a5fab5025079a2df61ae0"
        },
        {
          "alg" : "SHA3-256",
          "content" : "3f39d7eca8fc8984ec5136b8bbb5dbf120191cd4a42ea4ee17da0a73f73db9a4"
        },
        {
          "alg" : "SHA3-512",
          "content" : "15d9bbf0ea9dc9e6d3aee5c0ad2aed75b436a4dd15f6a8726d8b7a6d4e9a935b109981d4ea284fc098a843553716fbbf9531c94d8f411f69b74853a6300b2a0e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        },
        {
          "license" : {
            "id" : "EPL-1.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.mortbay.jetty/jetty-util@6.1.26?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.eclipse.org/jetty/jetty-parent/project/jetty-util"
        },
        {
          "type" : "distribution",
          "url" : "http://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://jira.codehaus.org/browse/JETTY"
        },
        {
          "type" : "mailing-list",
          "url" : "http://dev.eclipse.org/mhonarc/lists/jetty-dev/maillist.html"
        },
        {
          "type" : "vcs",
          "url" : "http://fisheye.codehaus.org/viewrep/jetty/jetty-util/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.mortbay.jetty/jetty-util@6.1.26?type=jar"
    },
    {
      "publisher" : "Mort Bay Consulting",
      "group" : "org.mortbay.jetty",
      "name" : "jetty-sslengine",
      "version" : "6.1.26",
      "description" : "Parent pom for Jetty at Codehaus",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "d3bea45d6939e57fccf450a914fe4e1a"
        },
        {
          "alg" : "SHA-1",
          "content" : "60367999cee49a3b09fa86bdcb52310b6c896014"
        },
        {
          "alg" : "SHA-256",
          "content" : "9c5f6bb168ba01b95d250b57f061c8094e1ce9c89ae4e773492bacb17192ea87"
        },
        {
          "alg" : "SHA-512",
          "content" : "799b56fabb7f1dd299efe33be881a1253fd38f24764d2c478f08d00771f8176b3fe0839b71da7e67d5d6e32bfe10378284dd8701ec57233eb354cca88639ce44"
        },
        {
          "alg" : "SHA-384",
          "content" : "9c2a3838948b3d10eb6f9b72d2dd0b58ab52b3c392d4f0bdf76397c643112bc7a6a35571167d3b6de05df90e9120a6d7"
        },
        {
          "alg" : "SHA3-384",
          "content" : "a332e74cad375e90dfdece5e3fdd919d44c9992423a37bd30ae2c38d3acb9d3ec622fa2a2c51f63635ab5ebe13723ecf"
        },
        {
          "alg" : "SHA3-256",
          "content" : "4f9e1f9ef626efbcf1f8b17ead92a003b0f693905dd8ca39ed43cd2e6ac53d5e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "9522df250bb97b51d5051f72ee0d676febfe3512a3b6919d2e1a08242ef25d0cd6aa89a9f608df29bd185e9a2d93880ce42f3be51ad18a184cc461d359a3c6e1"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.mortbay.jetty/jetty-sslengine@6.1.26?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://jetty.mortbay.org"
        },
        {
          "type" : "distribution",
          "url" : "http://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://jira.codehaus.org/browse/JETTY"
        },
        {
          "type" : "mailing-list",
          "url" : "http://dev.eclipse.org/mhonarc/lists/jetty-dev/maillist.html"
        },
        {
          "type" : "vcs",
          "url" : "http://fisheye.codehaus.org/viewrep/jetty/jetty-sslengine/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.mortbay.jetty/jetty-sslengine@6.1.26?type=jar"
    },
    {
      "group" : "javax.servlet.jsp",
      "name" : "jsp-api",
      "version" : "2.1",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b8a34113a3a1ce29c8c60d7141f5a704"
        },
        {
          "alg" : "SHA-1",
          "content" : "63f943103f250ef1f3a4d5e94d145a0f961f5316"
        },
        {
          "alg" : "SHA-256",
          "content" : "545f4e7dc678ffb4cf8bd0fd40b4a4470a409a787c0ea7d0ad2f08d56112987b"
        },
        {
          "alg" : "SHA-512",
          "content" : "f320915bf27b05f5f93a69572ff0dad6e68f030b6f0fcb1832f80f7ffe56dba9e0575dd8e6b0425b3704ac75ea2b4a7656bdad64b8cc8610bfdcd5bc1989dcc5"
        },
        {
          "alg" : "SHA-384",
          "content" : "d4017a6b2b171512c97a00a9d84dbe60dd48b233964f1d4c1baa260ff65a7e901c896d38b81a57c98de977b49f0273f4"
        },
        {
          "alg" : "SHA3-384",
          "content" : "1189f5774712edc77ac37ae5aa9570156f78050003da49c182e1a84651f1149bbdf13e1d752dbd16fe637a9869ec5660"
        },
        {
          "alg" : "SHA3-256",
          "content" : "68d8a993b6f6c8615f62800c33ad6aecb836bda091da097c640129472f262340"
        },
        {
          "alg" : "SHA3-512",
          "content" : "09175d9a46ef53e85cf68a779ad515f69f4643d3cef6b96a8f147283d8a61e533ab2cca1f217365180dcbcbd67f8d969ebcae085307ba4579f1f6a73cb657fe6"
        }
      ],
      "licenses" : [ ],
      "purl" : "pkg:maven/javax.servlet.jsp/jsp-api@2.1?type=jar",
      "type" : "library",
      "bom-ref" : "pkg:maven/javax.servlet.jsp/jsp-api@2.1?type=jar"
    },
    {
      "publisher" : "Oracle Corporation",
      "group" : "com.sun.jersey",
      "name" : "jersey-core",
      "version" : "1.9",
      "description" : "Jersey is the open source (under dual CDDL+GPL license) JAX-RS (JSR 311) production quality Reference Implementation for building RESTful Web services.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "73d196595f5e410a37c0a4337350ceb7"
        },
        {
          "alg" : "SHA-1",
          "content" : "8341846f18187013bb9e27e46b7ee00a6395daf4"
        },
        {
          "alg" : "SHA-256",
          "content" : "2c6d0ec88fc8c36cb41637d9c00d0698c22cb6b6a137fa526ef782e00d2265bc"
        },
        {
          "alg" : "SHA-512",
          "content" : "9009037551b1a472ebfdf21697b22927028420607764fe91b9283488b54dbb5012e947328fbb0bfcd5393adde76ad1823baf52edd4e8b5a3bf479730c32f1dbb"
        },
        {
          "alg" : "SHA-384",
          "content" : "99509d6dfe02dd7131cbbb3b5b95d44ba3cc1b55acee760685d8616bcaad63fa2ec3cc432285799511a0838957326267"
        },
        {
          "alg" : "SHA3-384",
          "content" : "ec891d4dbbc2ecca1dc2eade1ee7db476683ac09db9c2f2e33142e58c85ebb77215ff98ffbe32d12cac5d1d01a5c442e"
        },
        {
          "alg" : "SHA3-256",
          "content" : "0217456004fa2a6e71c54630f4c8937130aa3fda026b84817a59f3d3fe3d7eab"
        },
        {
          "alg" : "SHA3-512",
          "content" : "f086bf1917aee7d14d76cb5897a657b203dc5d6a221388e2045ebd6dcb90ca1af466bd5b9bb6c6a894865818d2f9f6744d13247350d43afdb150d9c8cf5499f3"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "CDDL-1.1"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl" : "pkg:maven/com.sun.jersey/jersey-core@1.9?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://jersey.java.net/jersey-core/"
        },
        {
          "type" : "build-system",
          "url" : "http://hudson.glassfish.org/job/Jersey-trunk-multiplatform/"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.java.net/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://java.net/jira/browse/JERSEY/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://java.net/projects/jersey/lists/users/archive"
        },
        {
          "type" : "vcs",
          "url" : "http://java.net/projects/jersey/sources/svn/show/trunk/jersey/jersey-core"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.sun.jersey/jersey-core@1.9?type=jar"
    },
    {
      "publisher" : "Oracle Corporation",
      "group" : "com.sun.jersey",
      "name" : "jersey-json",
      "version" : "1.9",
      "description" : "Jersey is the open source (under dual CDDL+GPL license) JAX-RS (JSR 311) production quality Reference Implementation for building RESTful Web services.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "17ca6b0d49ed8db159b7827b6defa6b6"
        },
        {
          "alg" : "SHA-1",
          "content" : "1aa73e1896bcc7013fed247157d7f676226eb432"
        },
        {
          "alg" : "SHA-256",
          "content" : "cc5d535f43cef0d1c467240961aae35801a837ab010319e741b2c7a6658f3fd6"
        },
        {
          "alg" : "SHA-512",
          "content" : "266e6ed47218316f4dd3bb9122d291d077fb5af0f0b649340c9e3724e0b8bc02e6410207a154c8dffac891ad817a241caaf80ff66604200993dbbe5ca9a79b9a"
        },
        {
          "alg" : "SHA-384",
          "content" : "6f05b0ce1da3122567a9c468e3720d54eade2860c61c0793928ec83850ffc1129093e5d6ce97e5804d2b8246045f5b71"
        },
        {
          "alg" : "SHA3-384",
          "content" : "5edc6c6ebd5d2376e6be0623c76a7bf86991b7e862fecb7deb0b6807756e5af2605fe8c4d06fc0ef10dc6465ae5b8b7a"
        },
        {
          "alg" : "SHA3-256",
          "content" : "146f85e2c521aec2a5ba77bc011475ae6693c5238ecf8d090d05f4706417fde5"
        },
        {
          "alg" : "SHA3-512",
          "content" : "1a0bb9d2678ef74c30859cc2b1a9197770fbd5904a0186619b3916f01d539c8dbab887f4d4a9ef8b049a8d84922e53696ea523b9e6c921ee4f847199d07a563f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "CDDL-1.1"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl" : "pkg:maven/com.sun.jersey/jersey-json@1.9?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://jersey.java.net/jersey-json/"
        },
        {
          "type" : "build-system",
          "url" : "http://hudson.glassfish.org/job/Jersey-trunk-multiplatform/"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.java.net/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://java.net/jira/browse/JERSEY/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://java.net/projects/jersey/lists/users/archive"
        },
        {
          "type" : "vcs",
          "url" : "http://java.net/projects/jersey/sources/svn/show/trunk/jersey/jersey-json"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.sun.jersey/jersey-json@1.9?type=jar"
    },
    {
      "group" : "org.codehaus.jettison",
      "name" : "jettison",
      "version" : "1.1",
      "description" : "A StAX implementation for JSON.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "fc80e0aabd516c54739262c3d618303a"
        },
        {
          "alg" : "SHA-1",
          "content" : "1a01a2a1218fcf9faa2cc2a6ced025bdea687262"
        },
        {
          "alg" : "SHA-256",
          "content" : "377940288b0643c48780137f6f68578937e1ea5ca2b73830a820c50a7b7ed801"
        },
        {
          "alg" : "SHA-512",
          "content" : "075137cc1acbcdc4f07ac421d0f8fef7af5ac015520580aa3b908f22463b2ba86ba6be3b7511561d0459f1f14fac94617653c3777342ee0c857016baa7120ee9"
        },
        {
          "alg" : "SHA-384",
          "content" : "6fade925eed045ef42898f7e5cf72ac71e782ac802a9610aba57c78a39e16c7422eea88fd614e26ebe9e3e2e52bb4d2f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "ed287c5346fc063603377b96bfad292cbe28c5604c120acb0405de2e3def3a42da6deafa6d070fbb106482786a791768"
        },
        {
          "alg" : "SHA3-256",
          "content" : "7ab16df7e0316871e5650ca1884fb4ac8b8acdfcdb0bda834729d83b44f8c993"
        },
        {
          "alg" : "SHA3-512",
          "content" : "f96810a0475fdb589211d57ed374b3d4d1b897f8b8b715088d0973fc29eb11f6797eed065de86c9acda29529ef1785c8c8f1d2b3d194148a18e9e1f3488d0ac4"
        }
      ],
      "licenses" : [ ],
      "purl" : "pkg:maven/org.codehaus.jettison/jettison@1.1?type=jar",
      "externalReferences" : [
        {
          "type" : "distribution",
          "url" : "dav:https://dav.codehaus.org/repository/jettison/"
        },
        {
          "type" : "vcs",
          "url" : "https://svn.codehaus.org/jettison/tags/jettison-1.1"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.jettison/jettison@1.1?type=jar"
    },
    {
      "publisher" : "Oracle Corporation",
      "group" : "com.sun.xml.bind",
      "name" : "jaxb-impl",
      "version" : "2.2.3-1",
      "description" : "JAXB (JSR 222) reference implementation",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1b689e7f87caf2615c0f6a47831d0342"
        },
        {
          "alg" : "SHA-1",
          "content" : "56baae106392040a45a06d4a41099173425da1e6"
        },
        {
          "alg" : "SHA-256",
          "content" : "fa3e1499b192c310312bf02881274b68394aaea4c9563e6c554cc406ae644ff8"
        },
        {
          "alg" : "SHA-512",
          "content" : "6f08a9d34bd66ceb0e4cc6cdd782423a8a7ab775808e90b6c872977c653cd3e2c539a78554a5c8ef9402092ac4fdceac56b77e76b3c2d800d5ee97db0301a683"
        },
        {
          "alg" : "SHA-384",
          "content" : "223367a9c31cfbd1a407718ad30b176e32874cb6cd6a63e1c4df78ac74ccf027179f0e98639dc595a4ae408b40db99e4"
        },
        {
          "alg" : "SHA3-384",
          "content" : "1c0e7be9683e61b8626065910045eedcffa85439545a2d73c0c53c5c80ddff0d5b56f6ed569c64db25d6817c8804d7ca"
        },
        {
          "alg" : "SHA3-256",
          "content" : "c9896a8b3078515bfa5cec60e9bd90ad6fb5c39678353bd31d9e6055b1241943"
        },
        {
          "alg" : "SHA3-512",
          "content" : "5d44345d5ffb7be42f0785accf35f20fcf3fe09277bb0b2ea5dd27f1d7da2590d0df53286043f40343cf098544d5592c4acf875de703c66fe4dfb7815bddfd62"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "CDDL-1.1"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl" : "pkg:maven/com.sun.xml.bind/jaxb-impl@2.2.3-1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://jaxb.java.net/"
        },
        {
          "type" : "distribution",
          "url" : "svn:https://svn.java.net/svn/maven2-repository~svn/trunk/repository"
        },
        {
          "type" : "vcs",
          "url" : "https://svn.java.net/svn/jaxb~version2/jaxb-ri"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.sun.xml.bind/jaxb-impl@2.2.3-1?type=jar"
    },
    {
      "publisher" : "Oracle Corporation",
      "group" : "com.sun.jersey",
      "name" : "jersey-server",
      "version" : "1.9",
      "description" : "Jersey is the open source (under dual CDDL+GPL license) JAX-RS (JSR 311) production quality Reference Implementation for building RESTful Web services.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0c98f6cca5df8197b310a0d1d89bb34a"
        },
        {
          "alg" : "SHA-1",
          "content" : "3a6ea7cc5e15c824953f9f3ece2201b634d90d18"
        },
        {
          "alg" : "SHA-256",
          "content" : "3ded91b198077561bd51f6c0442c9cd70b754d8b31b61afaf448bda9d01848f0"
        },
        {
          "alg" : "SHA-512",
          "content" : "9354a94b5044519e6f8f08c89c5d7c57e1041555bc333f401dc18ea51c21c0db03838a55bdb43bbbc0e37a8c3f1f0bcaf4164c5284a5f096af61b549dfe3eec8"
        },
        {
          "alg" : "SHA-384",
          "content" : "231ac671ba61b142d940a3d88919650c701c9cf0cacf91d2f29c450349f486d8e0eab76dbdc73baa98ccda3acaa77101"
        },
        {
          "alg" : "SHA3-384",
          "content" : "d5792bafb84a124b86625cae09072ef0958da59a4ea418ddd57e24dfb91d08d6a1b43ec29ab5586ae437284bf3c85447"
        },
        {
          "alg" : "SHA3-256",
          "content" : "495463f7c0874f77b54bd492889e2c2df0476fec28eb2e9d3b31c8d6619857a5"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c065a652d816f93d5c8fa8eebae4298574898e7f31ae889ca024e8a284df6d630f64ec2313fc73db3b017946ce5fff271a0e0a802e900b71bcf15614521d2315"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "CDDL-1.1"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl" : "pkg:maven/com.sun.jersey/jersey-server@1.9?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://jersey.java.net/jersey-server/"
        },
        {
          "type" : "build-system",
          "url" : "http://hudson.glassfish.org/job/Jersey-trunk-multiplatform/"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.java.net/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://java.net/jira/browse/JERSEY/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://java.net/projects/jersey/lists/users/archive"
        },
        {
          "type" : "vcs",
          "url" : "http://java.net/projects/jersey/sources/svn/show/trunk/jersey/jersey-server"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.sun.jersey/jersey-server@1.9?type=jar"
    },
    {
      "publisher" : "ObjectWeb",
      "group" : "asm",
      "name" : "asm",
      "version" : "3.1",
      "description" : "A very small and fast Java bytecode manipulation framework",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b9b8d2d556f9458aac8c463fd511f86d"
        },
        {
          "alg" : "SHA-1",
          "content" : "c157def142714c544bdea2e6144645702adf7097"
        },
        {
          "alg" : "SHA-256",
          "content" : "333ff5369043975b7e031b8b27206937441854738e038c1f47f98d072a20437a"
        },
        {
          "alg" : "SHA-512",
          "content" : "074612f145765d33c449887a29dd0791205881ba42d613e52b360ca53bd47c5f9835049de8fc6a384041de2e73bd271b6177c2225e2f72853a88359f6c10b14d"
        },
        {
          "alg" : "SHA-384",
          "content" : "c4ae90a52b7a23cbca12a01777e140e3f3f7943634611c23166a60d69a90f1edfeac8b210979f055fab6d1526d287ba4"
        },
        {
          "alg" : "SHA3-384",
          "content" : "04cc814a6d1d69266aba09985cd6ac04c5bc99964b099c88d89690ab656d53044a6a6bea6b79a37dc41c3202364888b6"
        },
        {
          "alg" : "SHA3-256",
          "content" : "0d52b7d9c8c5e047e79df73f4a4883e84eb324739748f1aac584e2e76b3968e6"
        },
        {
          "alg" : "SHA3-512",
          "content" : "5e0956cb7cd39ac3d6dd773d64a1a40f8a5b83c95306c627214572b996fd37188d9382e2b7c6579c3b93d04a9179ea3b479664de3d54ae9f0bf254de808d8c9c"
        }
      ],
      "licenses" : [ ],
      "purl" : "pkg:maven/asm/asm@3.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://asm.objectweb.org/asm/"
        },
        {
          "type" : "distribution",
          "url" : "http://mojo.codehaus.org/my-project"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://forge.objectweb.org/tracker/?group_id=23"
        },
        {
          "type" : "mailing-list",
          "url" : "http://www.ow2.org/wws/arc/asm"
        },
        {
          "type" : "vcs",
          "url" : "http://cvs.forge.objectweb.org/cgi-bin/viewcvs.cgi/asm/asm/asm/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/asm/asm@3.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-logging",
      "name" : "commons-logging",
      "version" : "1.1.3",
      "description" : "Commons Logging is a thin adapter allowing configurable bridging to other, well known logging systems.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "92eb5aabc1b47287de53d45c086a435c"
        },
        {
          "alg" : "SHA-1",
          "content" : "f6f66e966c70a83ffbdb6f17a0919eaf7c8aca7f"
        },
        {
          "alg" : "SHA-256",
          "content" : "70903f6fc82e9908c8da9f20443f61d90f0870a312642991fe8462a0b9391784"
        },
        {
          "alg" : "SHA-512",
          "content" : "e5d1fc8ec4544e1fa0f7c4aae8dbcca466c4987bc92fbbc430b054b10d646b745add4a754b1be9d50edd64330c798c53173a97289db57a966312e16f934e9d1f"
        },
        {
          "alg" : "SHA-384",
          "content" : "00dc41783f4081585e20adcfe83fd4dbb6b5a27236ee633d7e53dedcbca83ba5e5f0ca68d31f95e9c724b365e4c67499"
        },
        {
          "alg" : "SHA3-384",
          "content" : "6915e597821aa2fed7f4b05f4de3476364074ab5cee7e13b4eb5b94a9d297b58cb391c6b730e6ea0d4e81e323a90d002"
        },
        {
          "alg" : "SHA3-256",
          "content" : "c49c80e2576bf037fc871e70df8708f5e35c0977a907e966c0334e9fac17b297"
        },
        {
          "alg" : "SHA3-512",
          "content" : "b74b6e6d771005014614774d059a4e1ceab929c0678839846d143e56e4724455242ffa3d5d411c6554a41e1f66fe1f94c51472d80c07d44c02a2f9a6715d8c7d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-logging/commons-logging@1.1.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://commons.apache.org/proper/commons-logging/"
        },
        {
          "type" : "build-system",
          "url" : "http://vmbuild.apache.org/continuum/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/LOGGING"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/repos/asf/commons/proper/logging/trunk"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-logging/commons-logging@1.1.3?type=jar"
    },
    {
      "group" : "net.java.dev.jets3t",
      "name" : "jets3t",
      "version" : "0.9.0",
      "description" : "JetS3t is a free, open-source Java toolkit and application suite for Amazon Simple Storage Service (Amazon S3), Amazon CloudFront content delivery network, and Google Storage for Developers.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "22559a7c686b19534707228decc3c6d7"
        },
        {
          "alg" : "SHA-1",
          "content" : "792bc96ee7e57b89f472aa0cb5a31015b9f59c96"
        },
        {
          "alg" : "SHA-256",
          "content" : "e89893fc754b252af717d7d14accda946f7dfcfc1e293fd3e04725163d661bd7"
        },
        {
          "alg" : "SHA-512",
          "content" : "79fcaa8be8980b2fc9d8463854130eb7a7d6110fa795e73ac01d9abad23ec1588178e9d557d84f05b8e0b4ac909ae65eed1ff92e35c889208af003e195ff23c4"
        },
        {
          "alg" : "SHA-384",
          "content" : "c6e4516169d4d1c2241c3df7dd57e159cbe603cd746a125fff201cd097a351d82d6ca30e93aeee19a73bca0a009e94e0"
        },
        {
          "alg" : "SHA3-384",
          "content" : "6f5c6938b1c058addb30e83f29d2fd5caa1c85fa388a6e973fb323a769d409865fca658bd5e5657c2c5c12391165e59f"
        },
        {
          "alg" : "SHA3-256",
          "content" : "a796b73cd29be0501cd93cd9aa4472fd1636fec60373648b958d48393ddf5b82"
        },
        {
          "alg" : "SHA3-512",
          "content" : "6aacb4e00e35fe9891313287be52a0d490a22726508ad1e539e01868f2b5f730020301c9cee77386851854ee5adc4c2568f7fe15056ba5a8911f2f6c3d84d744"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/net.java.dev.jets3t/jets3t@0.9.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.jets3t.org"
        },
        {
          "type" : "vcs",
          "url" : "http://bitbucket.org/jmurty/jets3t/src"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/net.java.dev.jets3t/jets3t@0.9.0?type=jar"
    },
    {
      "group" : "com.jamesmurty.utils",
      "name" : "java-xmlbuilder",
      "version" : "1.2",
      "description" : "XML Builder is a utility that creates simple XML documents using relatively sparse Java code",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "da26c3029d677da3f1f281e55ab82c23"
        },
        {
          "alg" : "SHA-1",
          "content" : "fef5136a82e7ca7305f95255f12cc8cc5036375d"
        },
        {
          "alg" : "SHA-256",
          "content" : "cc582a0fa5b803ee9d4987eb9407054c275fb98a6d57c2712c83becbd4ee0e47"
        },
        {
          "alg" : "SHA-512",
          "content" : "6cd49b8b570ed92d5d7be6bf3faa9b56b5b8d3a86c9ccd04669c48f11fbd61324eea03944220b22ad3041923a5195e3dd4e5fb72785d6d812b956999a6eeb104"
        },
        {
          "alg" : "SHA-384",
          "content" : "af2108536ddce7c72b216cff9cc5d49a1388ab53c155366a4ef2615f2f03dd35a0bc84d536b71acaec5c5e3db027f272"
        },
        {
          "alg" : "SHA3-384",
          "content" : "ff4247d0075c546bfaaf036ec5a9cfbce946ce23dbf38a168c8812092939dda611c2c5ae080b87ef61f90694b876b2ff"
        },
        {
          "alg" : "SHA3-256",
          "content" : "0feb56979ad689aa99741b133f031e49085f2f70f5a8b29a6129577910957bc5"
        },
        {
          "alg" : "SHA3-512",
          "content" : "2edc0f7db286f7e7a955806688dfbcc0b087ab719251f1e5b4e3758986f2b4ef44f48ea3a3bf223cd0d4ba5029a661b2b6ce99c6e1729658f867978f8f5f1a4f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.jamesmurty.utils/java-xmlbuilder@1.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/jmurty/java-xmlbuilder"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/jmurty/java-xmlbuilder"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.jamesmurty.utils/java-xmlbuilder@1.2?type=jar"
    },
    {
      "group" : "net.iharder",
      "name" : "base64",
      "version" : "2.3.8",
      "description" : "A Java class providing very fast Base64 encoding and decoding in the form of convenience methods and input/output streams.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "9a9828f0caa016a2f3e0c90fe3af771b"
        },
        {
          "alg" : "SHA-1",
          "content" : "7d2e2cea90cc51169fd02a35888820ab07f6d02f"
        },
        {
          "alg" : "SHA-256",
          "content" : "bbf41fda22877a538f6bc2d5ad0aa372a7ddf4a756af3386aa09d3d4eea84f7f"
        },
        {
          "alg" : "SHA-512",
          "content" : "5d19172215284c6099cecfe8cfbf1b7d429085aee0e65f0fb3be2ab7a9d0777e0a1e8fe118a4a610e2fc81391fca503af8c04b3cceb544b9d4520baf456705ea"
        },
        {
          "alg" : "SHA-384",
          "content" : "621ba488c8b89e3e3dc640fc01fb7cf4b69d1180fe7f3956439e2c9b7a3f4e90fd070232be8c80472af8e040192cc110"
        },
        {
          "alg" : "SHA3-384",
          "content" : "41156fd4fc8badb167a3cc00dc6df86afbbc245e2ea3b8201b71fcdf061e98fc437814305b34dff8e1933f2a28f1fb19"
        },
        {
          "alg" : "SHA3-256",
          "content" : "5ac4e9811129ed306e00ea7ebffb853abddaccf180753d3c8d67a0e2097d850d"
        },
        {
          "alg" : "SHA3-512",
          "content" : "78b830308dd6a7b16923f6669b85aa19a6710d813658ab1c253e5934f627f16ee2492cb8a504fd61af2461f291862ce52e618334257592dc581eb12eab26c68d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "Public domain"
          }
        }
      ],
      "purl" : "pkg:maven/net.iharder/base64@2.3.8?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://iharder.net/base64/"
        },
        {
          "type" : "distribution",
          "url" : "http://oss.sonatype.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "vcs",
          "url" : "http://github.com/omalley/base64"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/net.iharder/base64@2.3.8?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-lang",
      "name" : "commons-lang",
      "version" : "2.6",
      "description" : "Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4d5c1693079575b362edf41500630bbd"
        },
        {
          "alg" : "SHA-1",
          "content" : "0ce1edb914c94ebc388f086c6827e8bdeec71ac2"
        },
        {
          "alg" : "SHA-256",
          "content" : "50f11b09f877c294d56f24463f47d28f929cf5044f648661c0f0cfbae9a2f49c"
        },
        {
          "alg" : "SHA-512",
          "content" : "4a5a3dbe4941c645e2cca068cca5c1882cfe988b02e7cd981d1e51784900767d1deab0e0e0566f559c9fcabb4a180e436d5bb948902d4f4106f37360466afb42"
        },
        {
          "alg" : "SHA-384",
          "content" : "9725bc421adc1dbcd6f937eca0f3075d186a2b353ece4cef66b0fe81bb8d3f7d7641c43e86d657ef526c719f0c2a8c90"
        },
        {
          "alg" : "SHA3-384",
          "content" : "4bc4eaaf2580ded6d552b96ae5261c936de95f69a1d137c47279c51bf2aa1406ae44f69ccc94486267b8441e53c4bd74"
        },
        {
          "alg" : "SHA3-256",
          "content" : "b68d49ef037d428ea0c3e67a7a20f3d68a134bef30a1639ec08d28886b9f5629"
        },
        {
          "alg" : "SHA3-512",
          "content" : "2e9ffc0608827cffc0b48b7a0f35d371c66586c99fea2910f7c2a237c7c57d9ae4d65de7c8e018362c2e4f963c2f70a9196cebf35457f1dd0cea6c65c256f673"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-lang/commons-lang@2.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://commons.apache.org/lang/"
        },
        {
          "type" : "build-system",
          "url" : "http://vmbuild.apache.org/continuum/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/LANG"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/commons/proper/lang/branches/LANG_2_X"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-lang/commons-lang@2.6?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-configuration",
      "name" : "commons-configuration",
      "version" : "1.7",
      "description" : "Tools to assist in the reading of configuration/preferences files in various formats",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0005907480f12ee461cb4cec25af61ea"
        },
        {
          "alg" : "SHA-1",
          "content" : "3559d47ea9e5f46d8cdc6503f08344b67b255dfd"
        },
        {
          "alg" : "SHA-256",
          "content" : "cdc6a3bf74d47965b8e011ae9a28ae30a2d62c229c25e67e0edae2479d599be3"
        },
        {
          "alg" : "SHA-512",
          "content" : "cc6a6075099f2edb228b6eb7424b9769a34f8bf66aa29ab5fd0e5422024fd23bb02fdbfd7d08d9557b12379114c9c5f0649c88700518a5f0b39df237955fd2c2"
        },
        {
          "alg" : "SHA-384",
          "content" : "f7083178493604784a2aa713658c11d56963cc815a99e63af344c1dc1cbac55a87836177a0d145e0e325ecf7d84681eb"
        },
        {
          "alg" : "SHA3-384",
          "content" : "38245710c219cf0b64675a26d9e464214841fd9922897930eb75a8f708f86b074f814949b7be2ce33cdf6a28fc25cb8f"
        },
        {
          "alg" : "SHA3-256",
          "content" : "4c2ee770ab622ce52712713821f144c307035ae9d17aae11c6cfa9dc8832765e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "4220f838810e5855069749829fcf7750a9f320dcfdb9dfa3447b6d8a529a4b60eb8a72b4140c66bc62c4a49c3bd16b25b6a6426297731ea60d1f36ff4e778b28"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-configuration/commons-configuration@1.7?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://commons.apache.org/configuration/"
        },
        {
          "type" : "build-system",
          "url" : "http://vmbuild.apache.org/continuum/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/CONFIGURATION"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/commons/proper/configuration/trunk"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-configuration/commons-configuration@1.7?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-digester",
      "name" : "commons-digester",
      "version" : "1.8",
      "description" : "The Digester package lets you configure an XML->Java object mapping module which triggers certain actions called rules whenever a particular pattern of nested XML elements is recognized.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "cf89c593f0378e9509a06fce7030aeba"
        },
        {
          "alg" : "SHA-1",
          "content" : "dc6a73fdbd1fa3f0944e8497c6c872fa21dca37e"
        },
        {
          "alg" : "SHA-256",
          "content" : "05662373044f3dff112567b7bb5dfa1174e91e074c0c727b4412788013f49d56"
        },
        {
          "alg" : "SHA-512",
          "content" : "138aaadde6b134eeb39574fde80f8eed1dee4a7049fccdd8c462c0a0dfab5419bafd259e77b99d85094b4e7c864673f07249c39c3b18aff87ef39b3663f537a2"
        },
        {
          "alg" : "SHA-384",
          "content" : "9dcfb1988fb8de4fb7482ce419bd99ea780795403228cc51454e9dd7fec3cb3af889178fbc6b906ec6f991aa77124cb5"
        },
        {
          "alg" : "SHA3-384",
          "content" : "40f4faa08d895e7aed56f62b5e793cb99c91819629ed1f6a82a8decfe12fd08077dfa6d61f7974bf1069a1684dcca273"
        },
        {
          "alg" : "SHA3-256",
          "content" : "473187f8a52324feaf965f6ea1a8d578c15e57b68f1336799ff432521ab2df27"
        },
        {
          "alg" : "SHA3-512",
          "content" : "e7a95ea8e864301db31754797d164f37cbc53f61598fdfac9cfdce04f4538f56a10a638a193c60ee176f2cf24e9785c682ccde3b6c13562638b4d5a3a81a0389"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-digester/commons-digester@1.8?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://jakarta.apache.org/commons/digester/"
        },
        {
          "type" : "distribution",
          "url" : "file:///www/jakarta.apache.org/builds/jakarta-commons/digester/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/jakarta-commons-dev/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/repos/asf/jakarta/commons/proper/digester/trunk"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-digester/commons-digester@1.8?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-beanutils",
      "name" : "commons-beanutils",
      "version" : "1.11.0",
      "description" : "Apache Commons BeanUtils provides an easy-to-use but flexible wrapper around reflection and introspection.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "32ed51f196dfda19e0dc1ce53eeed29e"
        },
        {
          "alg" : "SHA-1",
          "content" : "ac03ea606d13de04c2e4508227680faff151f491"
        },
        {
          "alg" : "SHA-256",
          "content" : "9e44ba68ec9a3f21286fa2a8bbb003b735c0f69101bb43144b79f4f8aaa74709"
        },
        {
          "alg" : "SHA-512",
          "content" : "4348670579601bc1151de2f27414635c4ea0b4b53061d116c09ba319e2c4f8e91d0cb0713a964668bd5189105ac1e2b6590881850880bf5ff23cc6409f270420"
        },
        {
          "alg" : "SHA-384",
          "content" : "a349c6a1e0a48cbf8d3528e4a39257db1b912c2ef060853837aa14d941154e9adc43248309ab6db7e8ac7730db7b081b"
        },
        {
          "alg" : "SHA3-384",
          "content" : "f3afdd778bb54bc6a9e41b5c31cf98078f005542b87cd0a3713d8e5152ff7eb6d9e2ed3206ce453a3af6f869fa714cbf"
        },
        {
          "alg" : "SHA3-256",
          "content" : "6dd4ec6d993b5792c51b5d6c4ea3b56f35b1c1f0ea65b182cb55c2432315aa68"
        },
        {
          "alg" : "SHA3-512",
          "content" : "fdcaa942f7377fdb36c7977273c1e2177d23e7b13162db1a0e5d3958d87a8c77d08cd6797a7c30cf755d492fa75d0642de5678dfe1d5a936569dccde5549e512"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-beanutils/commons-beanutils@1.11.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-beanutils"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-parent/actions"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/BEANUTILS"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-beanutils.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-beanutils/commons-beanutils@1.11.0?type=jar"
    },
    {
      "publisher" : "FasterXML",
      "group" : "org.codehaus.jackson",
      "name" : "jackson-core-asl",
      "version" : "1.9.13",
      "description" : "Jackson is a high-performance JSON processor (parser, generator)",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "319c49a4304e3fa9fe3cd8dcfc009d37"
        },
        {
          "alg" : "SHA-1",
          "content" : "3c304d70f42f832e0a86d45bd437f692129299a4"
        },
        {
          "alg" : "SHA-256",
          "content" : "440a9cb5ca95b215f953d3a20a6b1a10da1f09b529a9ddea5f8a4905ddab4f5a"
        },
        {
          "alg" : "SHA-512",
          "content" : "11725da54c7c18af0b50967a9317866ce9d11eb94d3b52ff7a54c6550070e143b5a582de9a8ebb6d61a8104f4dcd7ddb9c2e6f5c3605b6900d48f5241fe38d89"
        },
        {
          "alg" : "SHA-384",
          "content" : "26bff8b72770f734bac78e1ef2f575b26b7676895a4f022f402c99e38b567905ace700f553771606603f508b749bfb4f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "27be7948772c3680134e42ca889dc3f42954394fff4b6f7157d73a9f32886795c6d56b80283d2d762409ad56b753a811"
        },
        {
          "alg" : "SHA3-256",
          "content" : "a0ea1eb75ad00b7c61b96cd71b40b6a0f558c7e1089d42b6d3cd635b1f62b0b1"
        },
        {
          "alg" : "SHA3-512",
          "content" : "67bb970e761b9dc171ba1e88e5ca2079de26b046f773f89400ccef901d1c0ce7f9f6d0d4a0af5c18ac54c1fbcdce035809584b6514167bd8cb6730294947b13f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.jackson/jackson-core-asl@1.9.13?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://jackson.codehaus.org"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://jira.codehaus.org/browse/JACKSON"
        },
        {
          "type" : "vcs",
          "url" : "http://xircles.codehaus.org/projects/jackson/repos/primary/repo"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.jackson/jackson-core-asl@1.9.13?type=jar"
    },
    {
      "publisher" : "FasterXML",
      "group" : "org.codehaus.jackson",
      "name" : "jackson-mapper-asl",
      "version" : "1.9.13",
      "description" : "Data Mapper package is a high-performance data binding package built on Jackson JSON processor",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1750f9c339352fc4b728d61b57171613"
        },
        {
          "alg" : "SHA-1",
          "content" : "1ee2f2bed0e5dd29d1cb155a166e6f8d50bbddb7"
        },
        {
          "alg" : "SHA-256",
          "content" : "74e7a07a76f2edbade29312a5a2ebccfa019128bc021ece3856d76197e9be0c2"
        },
        {
          "alg" : "SHA-512",
          "content" : "81cd7962fd9ee6d2354f5e44d23de1fa96d0da665b79a0f4ce6f8012bb4651683ae69b82daae3cf4feb101658a344bf4d665fefc3a57eca3a720761732963873"
        },
        {
          "alg" : "SHA-384",
          "content" : "d0f846e695d5ba34708b7d066a77b66c3f4c726300bd56f222b61b2c72cf35c95c98bfaf5cb99288a96aa54cc6f1d55c"
        },
        {
          "alg" : "SHA3-384",
          "content" : "a089909a560cebbfcd1cc715b2f24360a25b0bc3de9c6da0ba22580ac727a55ff42aa45b1e411aa547121bda38e926ba"
        },
        {
          "alg" : "SHA3-256",
          "content" : "7fa149f84f2f0b937a68e0fff33a8bb68a5113f88b0a030e94a5b8f0e56446c2"
        },
        {
          "alg" : "SHA3-512",
          "content" : "77ba7d6d92fbccf038c917bdd3db80a7ce4c7a65ab4765e580033ffd968acf050e2aa6e989e4d1a465df8e8bb1383b8da87e6a028eae1cb5504d54237dbc3eea"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.jackson/jackson-mapper-asl@1.9.13?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://jackson.codehaus.org"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://jira.codehaus.org/browse/JACKSON"
        },
        {
          "type" : "vcs",
          "url" : "http://xircles.codehaus.org/projects/jackson/repos/primary/repo"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.jackson/jackson-mapper-asl@1.9.13?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.avro",
      "name" : "avro",
      "version" : "1.11.5",
      "description" : "Avro core components",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b4e9758699f388a661d564c5d26a83a1"
        },
        {
          "alg" : "SHA-1",
          "content" : "39b03945fc96f8e6146849aa49b516cf3657b151"
        },
        {
          "alg" : "SHA-256",
          "content" : "b3c55da4c58304f823f4a2161a308888b9e7b8bc1c7387a4fa3ca1cd48617f93"
        },
        {
          "alg" : "SHA-512",
          "content" : "c3f8b87cd0caf4064b039d2a66273a5f5c22f38d71ef9ffebbe25953bc0fcb2f48d5e4fbac0777630ad410d3506255d6d74a3a1ef961a02f7d4d7a17c9c4c17e"
        },
        {
          "alg" : "SHA-384",
          "content" : "37357433b72e3fa4d9db3616018922d0299c8e0edd2df244b2d591909c40f0308999de02513e71ec113a4f81576cf3c3"
        },
        {
          "alg" : "SHA3-384",
          "content" : "c13b67dc40b66c667901dc4216c1833d740f7685f1783217447b799738c38366f08947323b8bc72399b0d9e553da5754"
        },
        {
          "alg" : "SHA3-256",
          "content" : "65a72c91db569bff8a68f52a22b619938768537eaf587cdd22b8013ad241e9e8"
        },
        {
          "alg" : "SHA3-512",
          "content" : "30f5d464efb68d9653db56dabe5e6625c89e87392c0b666558572c04bb3f54721e68e16fc06999fcecf88ec823088d71221b2cb4eebd0c97bed635b5f337c8fd"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.avro/avro@1.11.5?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://avro.apache.org"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/AVRO"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/avro-dev/"
        },
        {
          "type" : "vcs",
          "url" : "scm:git:https://github.com/apache/avro/avro-parent/avro"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.avro/avro@1.11.5?type=jar"
    },
    {
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.jackson.core",
      "name" : "jackson-core",
      "version" : "2.18.9",
      "description" : "Core Jackson processing abstractions (aka Streaming API), implementation for JSON",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1fc67064d7629afbb056aab4309533e4"
        },
        {
          "alg" : "SHA-1",
          "content" : "0ca645ad40f7be06d1a0bbdf9f363d3838b41f40"
        },
        {
          "alg" : "SHA-256",
          "content" : "e03144f48c8d5307da2894570b4972aab8c72f22440f8dcdb745be2485ce2024"
        },
        {
          "alg" : "SHA-512",
          "content" : "089038fd291cc259f12877bc25b6cba1c786465a3413171e82bc851c396bec7c2b73045fc25b19e814242fbfc8159cccaf7aed766cffe188b5cacbecd57f5865"
        },
        {
          "alg" : "SHA-384",
          "content" : "eaafd62742bdc88bc4e6389d68f7099798021bfdb6c93b2233f98a8686b1340e7beaadae17c548b94872e882f6d08159"
        },
        {
          "alg" : "SHA3-384",
          "content" : "a367d877dafe237d3cf884acf1b14f2008716823b2149e54b24d608e84d979d8d1d9b19f3ad29aed4cc946f21b838eb9"
        },
        {
          "alg" : "SHA3-256",
          "content" : "142fd339d30943888e34a050981a9d1d1012f49957f54315a16ec2446dc8533a"
        },
        {
          "alg" : "SHA3-512",
          "content" : "949bb80fdd3ac24c59da3137fbe95a71565f32bfbc92298292b466c086f900f396d1e1d407c01761d1a520a0851f759a523f8331898d2d3adea546ddd8a83e36"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.18.9?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/FasterXML/jackson-core"
        },
        {
          "type" : "distribution",
          "url" : "https://central.sonatype.com/api/v1/publisher"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/FasterXML/jackson-core/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/FasterXML/jackson-core"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.18.9?type=jar"
    },
    {
      "publisher" : "Google",
      "group" : "com.google.protobuf",
      "name" : "protobuf-java",
      "version" : "2.5.0",
      "description" : "Protocol Buffers are a way of encoding structured data in an efficient yet extensible format.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a44473b98947e2a54c54e0db1387d137"
        },
        {
          "alg" : "SHA-1",
          "content" : "a10732c76bfacdbd633a7eb0f7968b1059a65dfa"
        },
        {
          "alg" : "SHA-256",
          "content" : "e0c1c64575c005601725e7c6a02cebf9e1285e888f756b2a1d73ffa8d725cc74"
        },
        {
          "alg" : "SHA-512",
          "content" : "10ea0baf440c78598eee2bff3742bc2f41b7e67847f8bb43a1f154d7649853ebd9eb86288aab65f4d1a196f4586bab16b656ec7940ec92a57b1c117b8f59abac"
        },
        {
          "alg" : "SHA-384",
          "content" : "33ad6e25b942b4076c8b9dfcc0aae8ca802b9028aa9939f86e4752b4847b35fb486f6d3efa81d38ad1edcbec6e614494"
        },
        {
          "alg" : "SHA3-384",
          "content" : "168deff9cc400e301fb783ec5f483237edf9b62eacb11df4e36c2660b1fc42f639df6f5fa155f468873fb899197c9fe8"
        },
        {
          "alg" : "SHA3-256",
          "content" : "73ec3c6d31eea7e1e5e4cc214b822c14887dcf908b5e700e206906a7555c571b"
        },
        {
          "alg" : "SHA3-512",
          "content" : "a394427ca09c2807a376f982176984cfc2c4610e752ddee50d878091291cf4ef37de90c945c6b13e3c8c4db3397c296696ca68d3a7323388c863b8b69272bc8c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.protobuf/protobuf-java@2.5.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://code.google.com/p/protobuf"
        },
        {
          "type" : "distribution",
          "url" : "dav:https://google-maven-repository.googlecode.com/svn/repository/"
        },
        {
          "type" : "vcs",
          "url" : "http://code.google.com/p/protobuf/source/browse"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.protobuf/protobuf-java@2.5.0?type=jar"
    },
    {
      "group" : "com.google.code.gson",
      "name" : "gson",
      "version" : "2.10.1",
      "description" : "Gson JSON library",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "df6097815738cb31fc56391553210843"
        },
        {
          "alg" : "SHA-1",
          "content" : "b3add478d4382b78ea20b1671390a858002feb6c"
        },
        {
          "alg" : "SHA-256",
          "content" : "4241c14a7727c34feea6507ec801318a3d4a90f070e4525681079fb94ee4c593"
        },
        {
          "alg" : "SHA-512",
          "content" : "7503e4b8d05c6cc0ecb3a94c5a2e070e049083a441003a79a0cdf474f4286699b4ba1d2a655ddabb8ba10c50e7c36a7045cccdaee465166d4630db647aba2727"
        },
        {
          "alg" : "SHA-384",
          "content" : "48a4786bd6e1867f058ee4fb676fc82d9d9f64a6d7420d4a47ae2398504c9de73222636614aeb4a9fbf10ee143d72226"
        },
        {
          "alg" : "SHA3-384",
          "content" : "3df9a0332c2766124fe7c915cfea665d2e318ccaa7212415fabd9e93e6eb77de538725fd2ef313cde46f6d814c9566ea"
        },
        {
          "alg" : "SHA3-256",
          "content" : "d3374006d76d4f9acdf3d3a1a4f47899570f52442b2188f80c09a74f22139ecb"
        },
        {
          "alg" : "SHA3-512",
          "content" : "2b10c2f4fe39d8712b430ff171823d7172c0a06685c1eb7de511e90159cec0e094fb2a9b50b747c5b039cb10f1fce9edf82ecbf9c47f76a6f31c4e3cb7586cce"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.code.gson/gson@2.10.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/google/gson/gson"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/google/gson/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/google/gson/gson/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.code.gson/gson@2.10.1?type=jar"
    },
    {
      "publisher" : "Apache Software Foundation",
      "group" : "org.apache.hadoop",
      "name" : "hadoop-auth",
      "version" : "2.10.2",
      "description" : "Apache Hadoop Auth - Java HTTP SPNEGO",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "befc7be7bc7aa4dc9b6324626913cda8"
        },
        {
          "alg" : "SHA-1",
          "content" : "29ab697d6b925ed3a52b782554d59e3312c94572"
        },
        {
          "alg" : "SHA-256",
          "content" : "0acffe01db6dbbdce9e6d46aa758f956af60cc8ef0fa405ca7f5b8747a53687b"
        },
        {
          "alg" : "SHA-512",
          "content" : "b3aac5229209dc11ef20c1125c186fc4ae77e85679725c6a8364538e6026c35439f85ae37579130c6089ab899ba1da180f65a7cfdd0a9c3120fe1c7b0f2157cf"
        },
        {
          "alg" : "SHA-384",
          "content" : "25e6927a991abef2a6c6b75859c6b23a7cbdc90dd9fec7b18ebc0a0d594911a27b2b35ddd5f618b5cc0dca2fd1807d34"
        },
        {
          "alg" : "SHA3-384",
          "content" : "45fcb77fd0d7b54983b74f51b479fcc8cab9f0112b4a7b099e32ec362d0682119d3608e1211e6943ec8eb641bbc64659"
        },
        {
          "alg" : "SHA3-256",
          "content" : "038f1a7d376ac8b57b6c4cd7cedb401217545057a27b100ce84cabbc79d77510"
        },
        {
          "alg" : "SHA3-512",
          "content" : "350d010fdaf42e07fb472735957b3a70038bb05409aaffae7782b6d0f58d7bab4297a3fd3ae73968544f6d6fc0c1f5a1e7a6990ab557ed4521fa26dfadc8d64e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.hadoop/hadoop-auth@2.10.2?type=jar",
      "externalReferences" : [
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.hadoop/hadoop-auth@2.10.2?type=jar"
    },
    {
      "publisher" : "Connect2id Ltd.",
      "group" : "com.nimbusds",
      "name" : "nimbus-jose-jwt",
      "version" : "9.37.4",
      "description" : "Java library for Javascript Object Signing and Encryption (JOSE) and JSON Web Tokens (JWT)",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "c5d322effe54b20543fff3cb4afa74e1"
        },
        {
          "alg" : "SHA-1",
          "content" : "3d680c5ea93472186fda6d0d920d7975d3f4e15c"
        },
        {
          "alg" : "SHA-256",
          "content" : "8fcf4a978bbee7548e8dee6e0528bc85b0ffa84c0f8517c94dd29e590e459449"
        },
        {
          "alg" : "SHA-512",
          "content" : "2501b40311a74b489a511f090b903c3b64599abee05ab03e1be4082cfd07680d2fb3ddaafff35005dbe172a2cdf170761b1a622335b8782a8c76874c69c9d97a"
        },
        {
          "alg" : "SHA-384",
          "content" : "f240726037448c0b46508ac9b7bff642630fb0a1bf8b4e59c723576eb62ae79723452f9a4c859bdc90439a10848d8416"
        },
        {
          "alg" : "SHA3-384",
          "content" : "29ef5a81796db265ce762af47bd32c0dd09bf15fa6ee661c25c580943d8385b4edc73a84f28ed2cdb1632c665af76c1e"
        },
        {
          "alg" : "SHA3-256",
          "content" : "b896fc14e6eef08bb99308deeead56d7b22bc2db120dfeac22ec3df6a78ff889"
        },
        {
          "alg" : "SHA3-512",
          "content" : "85bdb53d899a8e28d13466064e41911922c9aaac4ef005589bdfbb4001f04224c5f11b52a24f7f1d56a1514bc6aa2bcc01eb901ae466ac93d6cabd6c90e7edbb"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.nimbusds/nimbus-jose-jwt@9.37.4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://bitbucket.org/connect2id/nimbus-jose-jwt"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://bitbucket.org/connect2id/nimbus-jose-jwt"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.nimbusds/nimbus-jose-jwt@9.37.4?type=jar"
    },
    {
      "group" : "com.github.stephenc.jcip",
      "name" : "jcip-annotations",
      "version" : "1.0-1",
      "description" : "A clean room implementation of the JCIP Annotations based entirely on the specification provided by the javadocs.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "d62dbfa8789378457ada685e2f614846"
        },
        {
          "alg" : "SHA-1",
          "content" : "ef31541dd28ae2cefdd17c7ebf352d93e9058c63"
        },
        {
          "alg" : "SHA-256",
          "content" : "4fccff8382aafc589962c4edb262f6aa595e34f1e11e61057d1c6a96e8fc7323"
        },
        {
          "alg" : "SHA-512",
          "content" : "02fcd16a30d0e68b3e9e4899731181c6abb7117baa15c096ca940e01dde08bb86101cbeae552c497f8a90d923b5fa2f2b6f3850baf8dc94dbd399887924a9069"
        },
        {
          "alg" : "SHA-384",
          "content" : "88b0ecfde391a3d8468349c70e1539569768dfac3233dfe0b4660904df04e6c6bf26ed9c0784b9b22c122c3448e2a6b6"
        },
        {
          "alg" : "SHA3-384",
          "content" : "487b53f48b55b98a61ae60abedc43543887944867aa6bcb78d5ed46e2d0d7c19510c5fcadc362d939313feafdcfc55e1"
        },
        {
          "alg" : "SHA3-256",
          "content" : "3e79c8f58865d2d58a5311a8bb45772007f07e7f3ed2780784d1e4382dc934d0"
        },
        {
          "alg" : "SHA3-512",
          "content" : "ff32665e1b6d8176ccc7e8c836ca7343c2603dab053e42d79b4258d51a14ff63933c67d24034169ac91e11ebda21cc2c84a2a540072e656d2a8e6fcea7808421"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.github.stephenc.jcip/jcip-annotations@1.0-1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://stephenc.github.com/jcip-annotations"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://github.com/stephenc/jcip-annotations/issues"
        },
        {
          "type" : "vcs",
          "url" : "http://github.com/stephenc/jcip-annotations/tree/master/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.github.stephenc.jcip/jcip-annotations@1.0-1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.directory.server",
      "name" : "apacheds-kerberos-codec",
      "version" : "2.0.0-M15",
      "description" : "The Kerberos protocol encoder/decoder module",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "3118e22eac44e150c383df1d417772f4"
        },
        {
          "alg" : "SHA-1",
          "content" : "1c16e4e477183641c5f0dd5cdecd27ec331bacb5"
        },
        {
          "alg" : "SHA-256",
          "content" : "4996f5b72497e94dd86d64a370158c4fb0049eea9b17ff8b27a4671d6c136ded"
        },
        {
          "alg" : "SHA-512",
          "content" : "9e2ecd4f5d08af238ab32852fdf86f8165701b745ad93f3bc96eb3c0aff95a083773039adc3722123e8504971cd379929f9c4ad6d5c1ca3d112fa3d04e4a83f0"
        },
        {
          "alg" : "SHA-384",
          "content" : "c2e02333581bf5fef1a73c681afbefa13a03451e91bb36adeca90380679ecfa5a687e42073b9a7e6d60d71060d7e586d"
        },
        {
          "alg" : "SHA3-384",
          "content" : "b8f61173cbdbe09e53bca5e2cca5bce141083455b72ba4d6ad624be4da81ce27afecc8c36c7058a36e0291b6672d29da"
        },
        {
          "alg" : "SHA3-256",
          "content" : "161f828310334719481640ce1a82e6004c4b445ad090f6e18622be16042f71e4"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c94fce03575ce82631a361f945c8dbe48332c632f4d2b9386792064a8315fdc7ad7b1b17e63fbb4b6b9f638403be4b7e6255698852195a20e3d241b020a14119"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.directory.server/apacheds-kerberos-codec@2.0.0-M15?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://directory.apache.org/apacheds/1.5/apacheds-kerberos-codec"
        },
        {
          "type" : "build-system",
          "url" : "https://hudson.apache.org/hudson/view/A-F/view/Directory"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/DIRSERVER"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/directory-dev"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/directory/apacheds/tags/2.0.0-M15/apacheds-kerberos-codec"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.directory.server/apacheds-kerberos-codec@2.0.0-M15?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.directory.server",
      "name" : "apacheds-i18n",
      "version" : "2.0.0-M15",
      "description" : "Internationalization of errors and other messages",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f5877c02fd56ade67713560e589c81b9"
        },
        {
          "alg" : "SHA-1",
          "content" : "71c61c84683152ec2a6a65f3f96fe534e304fa22"
        },
        {
          "alg" : "SHA-256",
          "content" : "bd3b7cece7fc6364cbce32b9edd0e9628a3e889c6a93cdeff1b5e2131e2a007c"
        },
        {
          "alg" : "SHA-512",
          "content" : "2ca2e5e475168e97c3e25d52dfd8fd342e5be2f1689842bed03db568538f8f9fd1cee28cde6e815c4706123716a266db6130ceaaac4eddbe9d597de7459d6632"
        },
        {
          "alg" : "SHA-384",
          "content" : "fda3e7e1e80becb69fe5997c75b8f89ecaa7004bfebc20e230dfb3580a3fd9c526757e775c35a53e5681da1c2a7edb3b"
        },
        {
          "alg" : "SHA3-384",
          "content" : "0fc218a9b93501998ab35252262373b7eda92a33d3688bc87694421e847bd4b4a11c3f79ad27a8c93fc000e085b6b28c"
        },
        {
          "alg" : "SHA3-256",
          "content" : "d9bda1adf202334aebea73021e3bbe180096e8165ecf6876b589c8bc58ec7fd0"
        },
        {
          "alg" : "SHA3-512",
          "content" : "b1272d97252156e84b10b85ffa9f43837338ba381e392c3662e96ffaaaee8a1bf82b3b77553cbd7bb0183a969ad3967bc7198cbeffbbe028266aaee90cda4f1d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.directory.server/apacheds-i18n@2.0.0-M15?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://directory.apache.org/apacheds/1.5/apacheds-i18n"
        },
        {
          "type" : "build-system",
          "url" : "https://hudson.apache.org/hudson/view/A-F/view/Directory"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/DIRSERVER"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/directory-dev"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/directory/apacheds/tags/2.0.0-M15/apacheds-i18n"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.directory.server/apacheds-i18n@2.0.0-M15?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.directory.api",
      "name" : "api-asn1-api",
      "version" : "1.0.0-M20",
      "description" : "ASN.1 API",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "cf4561832dab76e9f37461342ec18d17"
        },
        {
          "alg" : "SHA-1",
          "content" : "5e6486ffa3125ba44dc410ead166e1d6ba8ac76d"
        },
        {
          "alg" : "SHA-256",
          "content" : "484aaf4b888b0eb699d95bea265c2d5b6ebec951d70e5c5f7691cd52dd4c8298"
        },
        {
          "alg" : "SHA-512",
          "content" : "10b84880f0b866addba5137d7afd1fc35b6c5e3577a3c8d9d122fc91201f21381173aca49881465ced33fc34680da55ea6bc47e2f8848fb5dd0d988bc0cace97"
        },
        {
          "alg" : "SHA-384",
          "content" : "f0924bad02e083567f2c08fc565484c55e2f9de59abaa7a1fcafa36bc65a451cde6d1b2e78386e04dafba46e85c5e3d2"
        },
        {
          "alg" : "SHA3-384",
          "content" : "7ae5c73827f5ffdc09c7117cbfb7ee9efcf6daf7f8ea5377a96aa1e0ec245846d34d237ca35a57dbf4ab36a5f11c46c3"
        },
        {
          "alg" : "SHA3-256",
          "content" : "58dba2f147b58b85925b06ae53dced0025242998f215aafdbca5a6f24d01463a"
        },
        {
          "alg" : "SHA3-512",
          "content" : "a35ef1eb9ebdc088c64adb05c7fc213185c15363f0c00afb96d2f19f25462052d30f8bad23aa466f173f06b51218c7c1a30ed2f50177a2b9830358a143fca1ba"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.directory.api/api-asn1-api@1.0.0-M20?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://directory.apache.org/api-parent/api-asn1-parent/api-asn1-api/"
        },
        {
          "type" : "build-system",
          "url" : "https://hudson.apache.org/hudson/view/A-F/view/Directory"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/DIRAPI"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/directory-dev"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/directory/shared/tags/1.0.0-M20/api-asn1-parent/api-asn1-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.directory.api/api-asn1-api@1.0.0-M20?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.directory.api",
      "name" : "api-util",
      "version" : "1.0.0-M20",
      "description" : "Utilities shared across this top level project",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "2c5a6722666882024becdd64301be492"
        },
        {
          "alg" : "SHA-1",
          "content" : "a871abf060b3cf83fc6dc4d7e3d151fce50ac3cb"
        },
        {
          "alg" : "SHA-256",
          "content" : "fd32fd047ccf143c58d093b58811aa81e539f8cf83c1187809f1a241a1df12d1"
        },
        {
          "alg" : "SHA-512",
          "content" : "b1c206a420d5dc455f22a1f22980573101b9c74abac044e1b02b2925eaf7c8b188481797d9261cfbe1e2800e684ce88ed8cd18db1ef5909929bec33539a4c5f3"
        },
        {
          "alg" : "SHA-384",
          "content" : "1fed2deab6fe2e3d357bdeee48046861e53582f2404c34bc2bc35992e771e27e8d28b8df65a994f700159e5ca5311316"
        },
        {
          "alg" : "SHA3-384",
          "content" : "0451ed59fec5907fed4e5b9688c0d0b4a682fbb56eecb38ac963670ec0bfbd04790325ce1e2f79022976f0344f9cdc74"
        },
        {
          "alg" : "SHA3-256",
          "content" : "aa8acd1abed952436313c6988941e63e0f33473f8df6e9ae39c8bdee334ae4b7"
        },
        {
          "alg" : "SHA3-512",
          "content" : "b6a0c7780bb76334438af34d098b15c9fdf1627a927f7c451ffb468acde7916e5ddf7fb4942d0800c53fda02f8d788f5c75999e546f1aac9439b9e524efd70fd"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.directory.api/api-util@1.0.0-M20?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://directory.apache.org/api-parent/api-util/"
        },
        {
          "type" : "build-system",
          "url" : "https://hudson.apache.org/hudson/view/A-F/view/Directory"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/DIRAPI"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/directory-dev"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/directory/shared/tags/1.0.0-M20/api-util"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.directory.api/api-util@1.0.0-M20?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.curator",
      "name" : "curator-framework",
      "version" : "2.13.0",
      "description" : "High-level API that greatly simplifies using ZooKeeper.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "91e34b86afb44ef5c728f69ed9790f1d"
        },
        {
          "alg" : "SHA-1",
          "content" : "d45229aee7d3f1f628a34fcac9b66ed5ba52c31f"
        },
        {
          "alg" : "SHA-256",
          "content" : "db084e5e0fed0548a8128f12a3e7a15c875c9595e75316c9578d64e77375c4a9"
        },
        {
          "alg" : "SHA-512",
          "content" : "7a9d520b5668ada07d05435f5632ab24d11bb079338388f43668960a3181d665568a2ef4a73222870362a84e1eeb59ef9ebf171bbcfdd7216735821328287798"
        },
        {
          "alg" : "SHA-384",
          "content" : "bf989371e089766e2bc00589c4ce3419382cfe5da67f1c815604653d59a6429642a6e9008c64a2d09d6398816c527d32"
        },
        {
          "alg" : "SHA3-384",
          "content" : "db0f4c1dd75189db2ec7e5b0fdc6610f49528c1e58929c2135daca3393e87d1c7c72a8524161708587e3f6738186a9c3"
        },
        {
          "alg" : "SHA3-256",
          "content" : "622fdc0fa9f31ff5a109c0bf003921ec5868eff678e4978d3864821257f07144"
        },
        {
          "alg" : "SHA3-512",
          "content" : "ab5960999e0ed951d676618b6d04f81f0ec288a7f6d7410eae41061cfc847c79b3650cf484f567070fa40fb71ed575f523dbc2b9d85d1f1b58f91d19a9b19bb5"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.curator/curator-framework@2.13.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://curator.apache.org/curator-framework"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/job/Curator/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/CURATOR"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/curator-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/curator.git/curator-framework"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.curator/curator-framework@2.13.0?type=jar"
    },
    {
      "publisher" : "JCraft,Inc.",
      "group" : "com.jcraft",
      "name" : "jsch",
      "version" : "0.1.55",
      "description" : "JSch is a pure Java implementation of SSH2",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "c395ada0fc012d66f11bd30246f6c84d"
        },
        {
          "alg" : "SHA-1",
          "content" : "bbd40e5aa7aa3cfad5db34965456cee738a42a50"
        },
        {
          "alg" : "SHA-256",
          "content" : "d492b15a6d2ea3f1cc39c422c953c40c12289073dbe8360d98c0f6f9ec74fc44"
        },
        {
          "alg" : "SHA-512",
          "content" : "b6827d8de471682fd11744080663aea77612a03774e2ebcc3357c7c493d5df50d4ec9c8d52c4fcc928bdfdd75b62b40d3c60f184da8a7b8aba44c92afecee7a5"
        },
        {
          "alg" : "SHA-384",
          "content" : "6da3c9e2d72bd25991936dfe918ae7f235d03f386a8f797b65a154ae71b36292f873338ccbf5dd4fd3bc63619c806dbe"
        },
        {
          "alg" : "SHA3-384",
          "content" : "92676d161f4ebe078df11f9cda6dc0bed4c828830bb98340ac34fdb89dc76b019d4320f6fdd3db13cdd6e33582cb9272"
        },
        {
          "alg" : "SHA3-256",
          "content" : "99c7de83022da8f85fcef262e29051b8c33c81d492cf344a5d123b83b5a459f7"
        },
        {
          "alg" : "SHA3-512",
          "content" : "33344b4ee79f0e7c8901b828f2bea13d25727361deeaa37d85dbaf3c44a31e8d0b4f3966ce2e4c3705bebd046cb7adba0486d02babdbc68e9819d059b5981559"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/com.jcraft/jsch@0.1.55?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.jcraft.com/jsch/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "http://git.jcraft.com/jsch.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.jcraft/jsch@0.1.55?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.curator",
      "name" : "curator-client",
      "version" : "2.13.0",
      "description" : "Low-level API",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "ca2c6ca2277e78d1f6b865ee82e10357"
        },
        {
          "alg" : "SHA-1",
          "content" : "a1974d9b3251c055408059b2f408d19d7db07224"
        },
        {
          "alg" : "SHA-256",
          "content" : "62ab2201b5b9af63b215a4e6829dbe7d553a0805cfb0b1a665f9b49da8270c51"
        },
        {
          "alg" : "SHA-512",
          "content" : "72909bbf56f63fb7afba996336e7270ae08010976b4bb3b8bb90269d53fde78c63f8131a941ebb7cc554981a522f15e2b2a9ec63387d77f7117e5a1ed0b8c028"
        },
        {
          "alg" : "SHA-384",
          "content" : "57d338248aa56fa86aab71303a2746c7e4f061a18029a096f99bdadb7a87152f5067e1955aa2acb928edbcac0631b613"
        },
        {
          "alg" : "SHA3-384",
          "content" : "db824b68c9aa7d06f2843eca902fe7ee04f1f246db6161dd1fc61fb3bfc482e700b10b3694944a9d67e1e18fe0effdff"
        },
        {
          "alg" : "SHA3-256",
          "content" : "93e8027c890377b5d72d2b45062cdb1cc528e39f483ec693222d66cf418d9299"
        },
        {
          "alg" : "SHA3-512",
          "content" : "9ce7bedb13ffc89cd96e5974b420a0c543d8c14324b36291644f4064c27736b8316a3d174c0d285c464596a9cf29e2acccbb3b5e52c3db743d37e2f77c545930"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.curator/curator-client@2.13.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://curator.apache.org/curator-client"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/job/Curator/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/CURATOR"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/curator-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/curator.git/curator-client"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.curator/curator-client@2.13.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.curator",
      "name" : "curator-recipes",
      "version" : "2.13.0",
      "description" : "All of the recipes listed on the ZooKeeper recipes doc (except two phase commit).",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "02685a8f2e44faa1941e953ac426a8d7"
        },
        {
          "alg" : "SHA-1",
          "content" : "1e6d5cf7b18a402f5d52785877010711538d68a0"
        },
        {
          "alg" : "SHA-256",
          "content" : "22be05c1a3e6c5ede22e77372b08dc631a3b93b64acb7f682537ea65a6ddba06"
        },
        {
          "alg" : "SHA-512",
          "content" : "498ce3631ef135b96b467cd3c4fa8ac1797538047589b1454911ec77a5205773346a367492db0771167e8f612c911bac44c8c7c651be00e206eb60e2f0bba2f7"
        },
        {
          "alg" : "SHA-384",
          "content" : "08a4134a208a2c59b0354e5d4e88b29f0f2f4f0bd0b83a6ccd54da70602499a8dedd5711d5481c23ba8782049cdb546c"
        },
        {
          "alg" : "SHA3-384",
          "content" : "756a7a95c028122a46cbde814d179cb4e57629c3bce9dd05f88b2f8ed9f5120b43732dedb0cec8251d10a0aa5e872cce"
        },
        {
          "alg" : "SHA3-256",
          "content" : "5cb92cfe13d5089c6419a9a1979c7a141e0ba062d6a3aca2f9102ac89051c3a8"
        },
        {
          "alg" : "SHA3-512",
          "content" : "de66d759ededd490e6bb55fa6ee697a632dd14918c7fa1d567cf4ab2281ef8921e91b5684a8d4baf2ea92242b942c96a29fcc3a35f89842005e8f8c3cbec0c69"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.curator/curator-recipes@2.13.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://curator.apache.org/curator-recipes"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/job/Curator/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/CURATOR"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/curator-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/curator.git/curator-recipes"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.curator/curator-recipes@2.13.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.htrace",
      "name" : "htrace-core4",
      "version" : "4.1.0-incubating",
      "description" : "A distributed tracing framework.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "34f428e68910ea6555c79e733d433f1a"
        },
        {
          "alg" : "SHA-1",
          "content" : "12b3e2adda95e8c41d9d45d33db075137871d2e2"
        },
        {
          "alg" : "SHA-256",
          "content" : "5d45b7904857c3e4ad36b3bcc57be2d2c5f308c69b5f6a58bd86aa7d48a25ef6"
        },
        {
          "alg" : "SHA-512",
          "content" : "1d61c8cc145a6e43ef99221032abd2e6e519b00ec159bb8f1ecd94cc475dc35097639b35d476a746103dccd04f88c49c52c7d72a43f6c59501ef7cd02f637d85"
        },
        {
          "alg" : "SHA-384",
          "content" : "07a10701d902d6e1f606d977272f6fc9f946cc9f50a1b3efe30d132beb32a00b7b962344d6f76e217012fd61a6f9f996"
        },
        {
          "alg" : "SHA3-384",
          "content" : "7344591e452d480c51380be5dcb7e5efd5bcfaaf3c7f8a27b504d83737aa2e036377cd260242fa5d48ba2fdddd039911"
        },
        {
          "alg" : "SHA3-256",
          "content" : "a7e997922ff4e70bfe61e75b555f93a032aeae813c3eca36db5d606f4cb64db1"
        },
        {
          "alg" : "SHA3-512",
          "content" : "3d9abf6ff9c0a73b5484bf0710294bc083574aca96b13611ada5460170e8170022383a3f6ae1c4f2fa687251f0a8cb7dc6f3fc9510962b5f00edce0e67ea8409"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.htrace/htrace-core4@4.1.0-incubating?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://incubator.apache.org/projects/htrace.html"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/view/H-L/view/HTrace/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/HTRACE"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/incubator-htrace-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://git-wip-us.apache.org/repos/asf?p=incubator-htrace.git/htrace-core4"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.htrace/htrace-core4@4.1.0-incubating?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.zookeeper",
      "name" : "zookeeper",
      "version" : "3.8.4",
      "description" : "ZooKeeper server",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "fdab82f33726e38a7f8e5069d9fb0fc9"
        },
        {
          "alg" : "SHA-1",
          "content" : "6638e37b887b5a279044afbdc9928e19f678eb2e"
        },
        {
          "alg" : "SHA-256",
          "content" : "2d77b152039e7f85dc5438a9304febff86a2f3e55c88976a8be309af39028e97"
        },
        {
          "alg" : "SHA-512",
          "content" : "d66260fc4b3a890adda33486507ca100a8721c33d3371cb9be672c84fa0703d905e12f5c29f213b44e88454a7dbaf2b2b2a57ef63164ab69dbaf3aef6a2d70c8"
        },
        {
          "alg" : "SHA-384",
          "content" : "b8889da29747bf6ca7617b2f3117786d4a9da6584a7de0345df01c4c976326452388e1c4f9cc6efaf9e1489eb2c5fa29"
        },
        {
          "alg" : "SHA3-384",
          "content" : "d29ea0667c34d5203de4c35896fd33aa2e978374d003c8cfcec6f0485e24783b8469ec6fb8fb7894c239f6e05e8dc3d3"
        },
        {
          "alg" : "SHA3-256",
          "content" : "a3f72526ed8b14be139c46126fc78e868e142e84f31e1175fc600c2ae19e1d31"
        },
        {
          "alg" : "SHA3-512",
          "content" : "f372078cc8368014c50c0e8babdb06ab9f97b04dc43a4b045c67dfa4d999fabdc8aabb6032d639ffed305a66452d1d197a4d8afc0061607055096d28c9ea4936"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.zookeeper/zookeeper@3.8.4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://zookeeper.apache.org/zookeeper"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-hadoop.apache.org/view/ZooKeeper/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/ZOOKEEPER"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/zookeeper-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf/zookeeper.git/zookeeper"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.zookeeper/zookeeper@3.8.4?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.zookeeper",
      "name" : "zookeeper-jute",
      "version" : "3.8.4",
      "description" : "ZooKeeper jute",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "399b189d4540f15d78fb2663a1da3450"
        },
        {
          "alg" : "SHA-1",
          "content" : "de7b8a41bbe1ccdfc009de51fa6d160db3ca8025"
        },
        {
          "alg" : "SHA-256",
          "content" : "93e854b55d731e745bafec187e2e7bf3389fd2a88e2fc8d1a3c1b9110284b284"
        },
        {
          "alg" : "SHA-512",
          "content" : "498b031ca7cb4c3dbd39d69488d6295e12e25ef924f20f9699e39a9ed32a7a079a82c2c8c68eb6dafd6428b1edd10e79cd356200b50c52c93a6d129b56422106"
        },
        {
          "alg" : "SHA-384",
          "content" : "e98c36f58dc062fa8fddcf62d1a3e42fc947e49a979097b1b6bdc7a005d50e838927ff03a30d49763d35b55f33d93022"
        },
        {
          "alg" : "SHA3-384",
          "content" : "d7f6c56a68ce58b902a175736e1d93b82f4cb4ccc2241f08f3614017bb88f7968a83ff873aa3adb9f94576acd3c889f1"
        },
        {
          "alg" : "SHA3-256",
          "content" : "058b07cefb1f098f3f097d877198941ad0b1d1d3351db267ae3fa6ef7669c318"
        },
        {
          "alg" : "SHA3-512",
          "content" : "74b3faffd49226423ddd934f30af73ffcc79e8c596d7b1e3b382d8bab696c1efad65025df6e4cf399f4ff635025cd0d3d79f0448a0a88c21564f220df392ab02"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.zookeeper/zookeeper-jute@3.8.4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://zookeeper.apache.org/zookeeper-jute"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-hadoop.apache.org/view/ZooKeeper/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/ZOOKEEPER"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/zookeeper-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf/zookeeper.git/zookeeper-jute"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.zookeeper/zookeeper-jute@3.8.4?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.yetus",
      "name" : "audience-annotations",
      "version" : "0.12.0",
      "description" : "Annotations for defining API boundaries and tools for managing javadocs",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "76ba71bbe18c4724d96bec68bbe12ff1"
        },
        {
          "alg" : "SHA-1",
          "content" : "e0efa60318229590103e31c69ebdaae56d903644"
        },
        {
          "alg" : "SHA-256",
          "content" : "ffb101fc066360ff3c77457c927fd7967fb096a6ee9e046ab7071447d8208efc"
        },
        {
          "alg" : "SHA-512",
          "content" : "264a5251272ec55eca1fae5a8fb9336d1eca1ee3bfb586d1ebc382fcfd37077c21cbfa9e198daf4e1eebe9f6fa90487bec2f85bc1c55cf5666cbbfc4d18b1715"
        },
        {
          "alg" : "SHA-384",
          "content" : "f936d92b5c3b3c88428fc7452871e4df112935dd25356396d15deb73dd39790f45909a3d14f038e9f585cee79622ad47"
        },
        {
          "alg" : "SHA3-384",
          "content" : "67ca97a525d98c3dab9ffda40e11d6c683f6f4208ae4a5b28dbd3e2b8b37187dfdcd1d9b89222dc69e5b84ac212f4428"
        },
        {
          "alg" : "SHA3-256",
          "content" : "fd99b55afe40884b5f6cfd9ffbdcd07fa32833443dead288390ca8e737dd3337"
        },
        {
          "alg" : "SHA3-512",
          "content" : "4aaece7bdadc2c2d9660b16345218cfc68a2ea344374d0ffbcdcc3722ff6be5f06c92231ae68ec3884f1aa9b99956cb5135b4060c5457f463251f3767003ad20"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.yetus/audience-annotations@0.12.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://yetus.apache.org/audience-annotations"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/YETUS"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/yetus-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/yetus.git/audience-annotations"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.yetus/audience-annotations@0.12.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-compress",
      "version" : "1.26.0",
      "description" : "Apache Commons Compress defines an API for working with compression and archive formats. These include bzip2, gzip, pack200, LZMA, XZ, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4, Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "cbc0bb8eca12b747ca21bf998d736e60"
        },
        {
          "alg" : "SHA-1",
          "content" : "659feffdd12280201c8aacb8f7be94f9a883c824"
        },
        {
          "alg" : "SHA-256",
          "content" : "051aceb8bbcc62d0f5b2b8ac72c53767f9c59bfbd050151e65bef6f51c8ed9c9"
        },
        {
          "alg" : "SHA-512",
          "content" : "acbeaa2909b809cd561e7156df18340d96abacb179325622d73bdd6b82cb9b387d6fcb1a44d8195aad4e786da299289e17598a1d337b7c7d1c0bc610cc128714"
        },
        {
          "alg" : "SHA-384",
          "content" : "052d4d0cd1929c4299dd9d37dd36eaea6ed2be6b04d6d83a94f8608a6d1138aa81f7a34f25113ac267e7ba25ce948c9a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "8b0bf441e8ce793fb6513bc07551cc48ab4507696c18e6037b0fcf35bc4e1eb3e44ed962e2d3765c86d4d912770aa53e"
        },
        {
          "alg" : "SHA3-256",
          "content" : "e441768e06092053f4703844ec0c8f2b437e06e7c190d48fec9d7682beb94c40"
        },
        {
          "alg" : "SHA3-512",
          "content" : "5984f9f08f83789555677f6800f25fa8e80a9eb2e4d46b5fb117b8efc24753644fa103a2f6b619827661a41677991bc827965172ef25f1313d8a59154e615e8d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-compress@1.26.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-compress/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-parent/actions"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/COMPRESS"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-compress.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-compress@1.26.0?type=jar"
    },
    {
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.woodstox",
      "name" : "woodstox-core",
      "version" : "5.4.0",
      "description" : "Woodstox is a high-performance XML processor that implements Stax (JSR-173), SAX2 and Stax2 APIs",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "89882f2098e9318ac3c5275b0ee82443"
        },
        {
          "alg" : "SHA-1",
          "content" : "3e05dcce371d3f672feba29f086ad78a93ae3996"
        },
        {
          "alg" : "SHA-256",
          "content" : "dbb958cb89f1d45238b061e146249494ff887f5f42b671a3956e98956e0d5c53"
        },
        {
          "alg" : "SHA-512",
          "content" : "b400731b6c32a1d56bf3f55a6fb5340acaf70ed2343807de8c48e9a10045db668eeee0fbaaa22d523cd6ef3b8e376cb6ccd58f05ec0310217ee36d87c340ec81"
        },
        {
          "alg" : "SHA-384",
          "content" : "fca2440f3e2e1251bc1eeef20e4cbe09882ac39241865be0c1387be5a74ddd8fb17b293eb6608f53786a62e0cfb9661b"
        },
        {
          "alg" : "SHA3-384",
          "content" : "ea9531841bb849fd3af4522a4ced686dfe1f4c2cf193bb4eaaebca50bffbc951e9c7581d40050c528d2c41f1ed792bc8"
        },
        {
          "alg" : "SHA3-256",
          "content" : "d1dc27db11970fdff1fc2c17a8b0c74c9f2878baa5357a26a568b4a5df9e5434"
        },
        {
          "alg" : "SHA3-512",
          "content" : "b7b488cdd34ae383b9bc0cc92433d239577fe3cc30ef6e2cb20d2b8825eaecb890e8e504ff6b457890a9cd4500968c387729667e882cd1304648fef1d9d96da2"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.woodstox/woodstox-core@5.4.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/FasterXML/woodstox"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/FasterXML/woodstox/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/FasterXML/woodstox"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.woodstox/woodstox-core@5.4.0?type=jar"
    },
    {
      "publisher" : "Apache Software Foundation",
      "group" : "org.apache.hadoop",
      "name" : "hadoop-hdfs",
      "version" : "2.10.2",
      "description" : "Apache Hadoop HDFS",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "9547e0752c40a69c67164b3dc32e56aa"
        },
        {
          "alg" : "SHA-1",
          "content" : "4ab1cd9842af25a7b2877d1f8d6a4c40fcc87877"
        },
        {
          "alg" : "SHA-256",
          "content" : "b0ad642fff13157a7cb83d5cabe0320c4f5628243f844f2b1f82738417c4f675"
        },
        {
          "alg" : "SHA-512",
          "content" : "b55dc2988a3191013fcc6e519e3fd88199ad2a307af2e4d72bc308d8c1981d19be620a71aae260833cde2726e8ec57a58dda7e4a25490fdfb5ee46e97b4e2b64"
        },
        {
          "alg" : "SHA-384",
          "content" : "6873236b3ffc4e68e42ace799a353067f239b8dbd61917cf693617a171b81b55cdd284960293bd16138d42a4141849aa"
        },
        {
          "alg" : "SHA3-384",
          "content" : "cf2e0dda8669d0f438156513855906b19d5eb168b80586c084ad63213119bdec5371b6f55f09f7711bef2a24760b6d8d"
        },
        {
          "alg" : "SHA3-256",
          "content" : "0ecf3ca01b19b6dc8ba911957f5a95e8b732a88a366fc3c1f73a94e88214c914"
        },
        {
          "alg" : "SHA3-512",
          "content" : "34efeba9ba720f3783b811eda308a9f98078d80bf07308376a4897e58eeecccfd24b05b1119700305a86ade458538d81495be31ce1ed231ee7baabf2a9f126ea"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.hadoop/hadoop-hdfs@2.10.2?type=jar",
      "externalReferences" : [
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.hadoop/hadoop-hdfs@2.10.2?type=jar"
    },
    {
      "publisher" : "Apache Software Foundation",
      "group" : "org.apache.hadoop",
      "name" : "hadoop-hdfs-client",
      "version" : "2.10.2",
      "description" : "Apache Hadoop HDFS Client",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "9b66562e0212a9216d924f7168836a27"
        },
        {
          "alg" : "SHA-1",
          "content" : "c26d4c3c34fb5e651483144a6c9a3d100cfa3645"
        },
        {
          "alg" : "SHA-256",
          "content" : "e29022b3d2d11ac9247f6158ea40cfe8a0c048804a5593b22c04a24a7871b5dc"
        },
        {
          "alg" : "SHA-512",
          "content" : "1990c12c588044498faf3beafddf0e0fb0c6d1c44ae69cc98aee377c4576ed4600d292f8ac2185a6f2f8d953e6f1d51b027b8cc50191b9807ea6cc24d805afd0"
        },
        {
          "alg" : "SHA-384",
          "content" : "f79d9e389610a5fa1c52eb66100d0cd153a303bd0de904bf16bf32b227b7395531f390dcb4438f0760db972b9d523c4c"
        },
        {
          "alg" : "SHA3-384",
          "content" : "2e56835ca7704b57578a4eac14edc0803f19cb9966b9a106c88db4e0269a5fb9ff8345af2cf4e0cb27e24ffbed57c392"
        },
        {
          "alg" : "SHA3-256",
          "content" : "5acb08cb43a711d89c32ed869d6ce951d80bdcf890fa07565fc97f004d5d36f2"
        },
        {
          "alg" : "SHA3-512",
          "content" : "f02c04ad1bd02759772243677e6ee81e92a656c9afb4a719b965991bf81744b2c70dc44f7d4d7d9f87a44caf131137e440a0331ea3531fbfdcf414b204be2dce"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.hadoop/hadoop-hdfs-client@2.10.2?type=jar",
      "externalReferences" : [
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.hadoop/hadoop-hdfs-client@2.10.2?type=jar"
    },
    {
      "group" : "com.squareup.okhttp",
      "name" : "okhttp",
      "version" : "2.7.5",
      "description" : "An HTTP+SPDY client for Android and Java applications",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1943a0ecbb1c503874c8c483284377e4"
        },
        {
          "alg" : "SHA-1",
          "content" : "7a15a7db50f86c4b64aa3367424a60e3a325b8f1"
        },
        {
          "alg" : "SHA-256",
          "content" : "88ac9fd1bb51f82bcc664cc1eb9c225c90dc4389d660231b4cc737bebfe7d0aa"
        },
        {
          "alg" : "SHA-512",
          "content" : "4cd162e8e54127fec029f82aee8797ad4eb87ae976973b0148d7c405255870e5cb4e2ef52791116a5bf52b87a0d0d7ab47688b921eba01272616368a5cf145d8"
        },
        {
          "alg" : "SHA-384",
          "content" : "f7513f7d5728d29ac93ea533078c6ec61b3407671b0fa7a0384669c7869a69f1d2e98268c9e5a62ab3410dbd4c9fcea3"
        },
        {
          "alg" : "SHA3-384",
          "content" : "ff2e156a63cbe975c1eb43149ae975fe67aa763750487ebc0c42e33b91076b251a341c820b967cbaf3780327c894723c"
        },
        {
          "alg" : "SHA3-256",
          "content" : "a673cff4dff28000634360d74eee71a0f9095018b9a3da1dd844ad5f7c95ba93"
        },
        {
          "alg" : "SHA3-512",
          "content" : "ddb64671877c7267b0288449632733c806ebfb81c039d74e22cc771e8942f78a63de029e201c01921a2b70b635350aa49b008558d0bbc3af57dadc31adb7cad5"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.squareup.okhttp/okhttp@2.7.5?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/square/okhttp/okhttp"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/square/okhttp/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/square/okhttp/okhttp/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.squareup.okhttp/okhttp@2.7.5?type=jar"
    },
    {
      "group" : "com.squareup.okio",
      "name" : "okio",
      "version" : "1.6.0",
      "description" : "A modern I/O API for Java",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "164d1c28c323cf6e2a917d60374c5718"
        },
        {
          "alg" : "SHA-1",
          "content" : "98476622f10715998eacf9240d6b479f12c66143"
        },
        {
          "alg" : "SHA-256",
          "content" : "114bdc1f47338a68bcbc95abf2f5cdc72beeec91812f2fcd7b521c1937876266"
        },
        {
          "alg" : "SHA-512",
          "content" : "17bab3c4fde83d0865d2c3ef61b403059e44b83f38b3c42ca352be4faa28afa08416d2525f2941baaa864c7a4730672228928373ba2e2179d9d8b4976d6747ba"
        },
        {
          "alg" : "SHA-384",
          "content" : "a00830a0a6b3f435e852a7eb181b057ab11e6563cff8f1359503f498d204b9f327ed78b31e5ed902f8e154ce65cf7dad"
        },
        {
          "alg" : "SHA3-384",
          "content" : "9ab3e8c6e047006aef7f33b3cc50fb2603efc4a641c098e8ccaf4ac2d9764defb5a9739b5bc7615be1a6b2fab02342bd"
        },
        {
          "alg" : "SHA3-256",
          "content" : "150d6944c7c3176db6815bd343a47ff9c6a81091faf1280118fbed002aab0789"
        },
        {
          "alg" : "SHA3-512",
          "content" : "9f726097dacf3d9965d4334945f4ec807d186d5f80369303da75740d5d05f071838961f088543425c59123357d768a2065b620c94bb9705b3ce1312ce6d52f71"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.squareup.okio/okio@1.6.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/square/okio/okio"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/square/okio/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/square/okio/okio/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.squareup.okio/okio@1.6.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-daemon",
      "name" : "commons-daemon",
      "version" : "1.0.13",
      "description" : "Apache Commons Daemon software provides an alternative invocation mechanism for unix-daemon-like Java code.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "686f1a2cc85f8f4e939bd3cd28c9720b"
        },
        {
          "alg" : "SHA-1",
          "content" : "750856a1fdb3ddf721ccf73c3518e4211cffc3a3"
        },
        {
          "alg" : "SHA-256",
          "content" : "fd63b583fd3e8baeae22efacbd5a4f91c1fd97f56248e62e2615efa7b81daeaa"
        },
        {
          "alg" : "SHA-512",
          "content" : "80cc396ac505e01bc864ff8c244351601102c463f87b5b75e781be5866932d6a568baf0b995c4b5f9750a4fb3c2c4a5c00aea1b22fa9a7a1b43e11987add2587"
        },
        {
          "alg" : "SHA-384",
          "content" : "6be749e20f1942bc30ad8c2564460076c2de632fcd357164b29ed44487a9be461ae20a5662041c78b2372203e6411a6e"
        },
        {
          "alg" : "SHA3-384",
          "content" : "40605565bc22442226f86e8ca7eca372f6f7f558932149cf051167c2c96ca3a017c9f9cb151ad6408b52423457052f71"
        },
        {
          "alg" : "SHA3-256",
          "content" : "e416a5afb7ce017440f851d9d374643a9a5f50a9715d2951600688ec978fd916"
        },
        {
          "alg" : "SHA3-512",
          "content" : "e48894b2267eca0a1ef5ab19ff3902f8fdf9e90f11c01c59eeaed998864fd8e838ee3b2950a9b428f1749c7435b294060ffe9a9a13b723f03e2370ee7bc38ce0"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-daemon/commons-daemon@1.0.13?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://commons.apache.org/daemon/"
        },
        {
          "type" : "build-system",
          "url" : "http://vmbuild.apache.org/continuum/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/DAEMON"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/commons/proper/daemon/trunk"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-daemon/commons-daemon@1.0.13?type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty",
      "version" : "3.10.6.Final",
      "description" : "The Netty project is an effort to provide an asynchronous event-driven network application framework and tools for rapid development of maintainable high performance and high scalability protocol servers and clients. In other words, Netty is a NIO client server framework which enables quick and easy development of network applications such as protocol servers and clients. It greatly simplifies and streamlines network programming such as TCP and UDP socket server.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e9cdf01138257f48d796fb2cf67af53e"
        },
        {
          "alg" : "SHA-1",
          "content" : "18ed04a0e502896552854926e908509db2987a00"
        },
        {
          "alg" : "SHA-256",
          "content" : "8768a50fbe3d93a88d8e6000ea5d68e30f50dc915b3764c3c5870f70c4fb3b49"
        },
        {
          "alg" : "SHA-512",
          "content" : "37cdb98e11b42006fbb26a1c6871261d8e8cb3254183116a550d4971171f576417392395fa0168c68751078148d177af9374ee0f542af527f57531773c62cbc5"
        },
        {
          "alg" : "SHA-384",
          "content" : "7c445aae5d4dd35c2fc8e236589f5711496a4a7ca2a8a4eb47f9359d39db7789f20b0c67f1c28bacf75c2680ba7cbc1e"
        },
        {
          "alg" : "SHA3-384",
          "content" : "65e735913d97979be0c9364ca9c29501aeef15d582ab6bc523f3400ca38350b82b03177c85d918a20bb455711279299d"
        },
        {
          "alg" : "SHA3-256",
          "content" : "d15c13c07be1612c9ca6d8664be842bd67b48f91ddfb6e3a585f51c2042a499f"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c4a6f985c7e55831a047a26ceeb3b78e7d1207854ab81733ecc11ae2e8da7fb7e7c23008b4dc6bd64658f881c457ef9aecde037b57ad108fc7bd5a521cc1af6b"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty@3.10.6.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://netty.io/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty@3.10.6.Final?type=jar"
    },
    {
      "group" : "io.netty",
      "name" : "netty-all",
      "version" : "4.1.137.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "14ad2fee62401f7be3b7ffbce4fd6bd9"
        },
        {
          "alg" : "SHA-1",
          "content" : "4203b1b73351f450fc9f8ee1fde6dd71df1f3e4b"
        },
        {
          "alg" : "SHA-256",
          "content" : "3c21d10662148be5e1dc37adea6866faf0e43096a2174c2ef12a4553b45c3af2"
        },
        {
          "alg" : "SHA-512",
          "content" : "25fe0eaa6eaa96334fb3cab963f8cd0a6a0e9e903ab070baf8181c71476326a0b5a6fd2fdcf0bfd4536914abe95973b38a1d8d0a7915047060d41db41500bd1d"
        },
        {
          "alg" : "SHA-384",
          "content" : "01817c8bade12a24dc3912f800a176506aefa4a60876946b48f87dc902f078626375274070bd5f314c8dd54f34dda76c"
        },
        {
          "alg" : "SHA3-384",
          "content" : "775f0a0052c9c8e2be41d93ab901c8255132ef23a4593cd43acbea7b7ce579284b351296f4f0a7095be406c6eb55b13e"
        },
        {
          "alg" : "SHA3-256",
          "content" : "0052905fa5b279fd5e7d012f3965e0b38e613fcffc16bcc733643b11364a8294"
        },
        {
          "alg" : "SHA3-512",
          "content" : "49dd25aa4ba4628229e72f7ae466171e6954f5bc1f29972aef5e618126b2fcab7c129d2411e3989b9e3752487d468b9a2f8450c931f4e538ed86e78bec13d894"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-all@4.1.137.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/netty-all/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty/netty-all"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-all@4.1.137.Final?type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-buffer",
      "version" : "4.1.137.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "d371110ab6e5494cafa6939ac06ccd45"
        },
        {
          "alg" : "SHA-1",
          "content" : "e048dbf1e7e5077b36cf7c1a6417f2ddfbcc59f6"
        },
        {
          "alg" : "SHA-256",
          "content" : "f474b14c7734f15e0540394cb6f39d67777b7581a42919e4ac89d253d4efd929"
        },
        {
          "alg" : "SHA-512",
          "content" : "d1fbb869280def7d4b27045b490f472e7a01c65b7549bc3585247bef2466e2320afaff7ca87e627a82ca0d2f4ab01b75b7db486b16903e17caaefb79c14c4c2f"
        },
        {
          "alg" : "SHA-384",
          "content" : "010de3e2dbd6499881a00706a7fdf526f6d5a316b685dda4131a670937e8a42710f5bd4a99d9a3994405ab68b896a764"
        },
        {
          "alg" : "SHA3-384",
          "content" : "8cd276097de2a90f93d5eb65dabbdf4d662945a16becde09f58365394e482b9c751fa32c24f5bed727499c9bf1c2f204"
        },
        {
          "alg" : "SHA3-256",
          "content" : "07477f6f5b893f1e5fcccd8aa76c0e949e96f6f3e6f8f2ff25d27a7310768453"
        },
        {
          "alg" : "SHA3-512",
          "content" : "e7c558fedac6cbcca2f76d9f669be7c4035cb490a5f92e26e4f174c7531fec1f7295674317dd7b3b7a971e3c8a41368bb154a36489795943b664a71f112fe85f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-buffer@4.1.137.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/netty-buffer/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty/netty-buffer"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-buffer@4.1.137.Final?type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-codec",
      "version" : "4.1.137.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "fad9d9a0e5fa586ae5971d33163c661c"
        },
        {
          "alg" : "SHA-1",
          "content" : "8f678378e027d567b270afd8552e68e4b460c4dc"
        },
        {
          "alg" : "SHA-256",
          "content" : "9987b6a660b0a6b1f0d791485dae33180b3d1c63687c006fe6d3fd025e9e3798"
        },
        {
          "alg" : "SHA-512",
          "content" : "9a89f308e92f29c39bd0e856a437d84888aa7037ba6d26d2ed94fa2a83559479840dd2310714b63597e041b586bae00198a1dec40e4ebf2cc4f159ec75474708"
        },
        {
          "alg" : "SHA-384",
          "content" : "f80b695bac6e9b34dd18eb21f01077146ac02b48800d68f556ead2ad852526e8dcc7115686a81964eb8ee119aee588cb"
        },
        {
          "alg" : "SHA3-384",
          "content" : "9bf3fea74b949e43b625077413be020070f4061089f89eeb1d207cee9ad25a2bfb17b26ad85ca7f6872320df069c51cd"
        },
        {
          "alg" : "SHA3-256",
          "content" : "ec79f86f53e04fbe8be994c88a7820a57e49065ffbd6ce1d47beecfbcb84c5c8"
        },
        {
          "alg" : "SHA3-512",
          "content" : "703ca4d362e8731dd69aedfb8957d84cf5b603db67fe8d664565f23c888c22c1979ad9fff6c3cb306cbcb278c99c389ec3fbb6f60a14ed35f411643cf18f8f97"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-codec@4.1.137.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/netty-codec/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty/netty-codec"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-codec@4.1.137.Final?type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-codec-dns",
      "version" : "4.1.137.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "c1f5f8144cd26d3a00aaccccfd993681"
        },
        {
          "alg" : "SHA-1",
          "content" : "73a6407b1324eae856c75168ef2b0ff8ef44650f"
        },
        {
          "alg" : "SHA-256",
          "content" : "2d9a33ce41bd9f6f607df95039e42518a1fca16f83c9bbfe72beb57df6e2489f"
        },
        {
          "alg" : "SHA-512",
          "content" : "6e739c40c183ecc83b7fb782b85a249140f385000ffcce77c87a4d1b8ee0bee47ab8183179c2a7b0b93cbc657aedaa034984e10e70e60fb362eeb8c7dbe0cd1c"
        },
        {
          "alg" : "SHA-384",
          "content" : "7530cc522b326ce77d0c7e9d8fe01053850e942d0f815fbe39ecf328f594efd67636e0c49881da42144dd204e1341029"
        },
        {
          "alg" : "SHA3-384",
          "content" : "7658759be5a7dcfe75e2e593a09f33777edbb01155b15de3fdf92058da101676dbd9fa9cfee4165a64c43c6507a1acf3"
        },
        {
          "alg" : "SHA3-256",
          "content" : "a9a0815237691f37c42507e2926bfb7b467d730c2c65094350995fd8b95a8459"
        },
        {
          "alg" : "SHA3-512",
          "content" : "33604c4d067be2032b0373f40a9d95971bbd5e016dfec8fc910306dad9d7fca96c586795a204e14a627a9d8266ab6b101043f97d2b78afb0ff9dd6683e833b86"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-codec-dns@4.1.137.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/netty-codec-dns/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty/netty-codec-dns"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-codec-dns@4.1.137.Final?type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-codec-haproxy",
      "version" : "4.1.137.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a0cacab93a9bf7158f3f9eefbe26c134"
        },
        {
          "alg" : "SHA-1",
          "content" : "c2b9769c5d4a999f68fb879418b2d98bdb922ad3"
        },
        {
          "alg" : "SHA-256",
          "content" : "5ffa58b94c5ac48fb7e41843c18acf7a268e90b5b85423987829c9291ce3a5df"
        },
        {
          "alg" : "SHA-512",
          "content" : "5e1fb08e44d021f762efd395f8a1a600e28e55733e46aff85a9721166f569085f7f61cd3015a65adaad866b2f6964748f5a7462452e808ded1d4ceee220ff416"
        },
        {
          "alg" : "SHA-384",
          "content" : "908c82f8afb9e4f1b9abb8c854e586bfe45f32e0111cba20d868a387e4043d657b3e392342bf334435c172777a2dfd0a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "4d722208406f2ab76eb461a33bf52235bccec6d017ccb6011fe27a1162a9da102773b532e8f0e645f8431c2a0989e9dd"
        },
        {
          "alg" : "SHA3-256",
          "content" : "c6aec574d66ba4d7a514bd518e6632c9cd7c2eb587cfa6e1e9cb31509b4d0cfc"
        },
        {
          "alg" : "SHA3-512",
          "content" : "a6e91e3313468f6aa4dacc8e63a674d31b432f6e9bd08a1fcd0fa71b436b5a51f6ab6b0427f0ef4064c9f60543a4a1276b44321cf42e33af8ce9b51536f4a86a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-codec-haproxy@4.1.137.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/netty-codec-haproxy/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty/netty-codec-haproxy"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-codec-haproxy@4.1.137.Final?type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-codec-http",
      "version" : "4.1.137.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "47074ec9721c7bc5fe40d9c36681820a"
        },
        {
          "alg" : "SHA-1",
          "content" : "a0525968e918c2ca2f6e7f3b66c35de1542a09a5"
        },
        {
          "alg" : "SHA-256",
          "content" : "0535bb5a736472bef5c948d15eb273c4ab9f796656fc7c5d6b982ad92bddbd49"
        },
        {
          "alg" : "SHA-512",
          "content" : "b9909da02987890dc489f1654cd739c57a26952b29c0b503deb715826f9712e0152a5e26fb68b39d348fe94ba34291b97a7ac23b575f0df164fe5d17ced67510"
        },
        {
          "alg" : "SHA-384",
          "content" : "72b6f9658722cee98e862f957a7ae7fc32eb2d93e8ad39c66e909604d644731f83ac064735dc6f0bc921662dd8fb4119"
        },
        {
          "alg" : "SHA3-384",
          "content" : "e1afb4ec136588ee30d1bce15796479c44f6a17b5854627fef8d68a8f7fbc93f38762ebe233dc99d50e807d737c80abf"
        },
        {
          "alg" : "SHA3-256",
          "content" : "81ef64c69ad8fb25f3574ac3fa8e821d88dcc253d99cca406fa3d79e4d54085c"
        },
        {
          "alg" : "SHA3-512",
          "content" : "9228c393a383129add8cb06b0dc6f1267d29347fd0d2098419e06371d9e17b442f93f355b3a9d000a1ad7ab754c39279757ff8fbf193dc224b83511e89bcdcec"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-codec-http@4.1.137.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/netty-codec-http/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty/netty-codec-http"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-codec-http@4.1.137.Final?type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-codec-http2",
      "version" : "4.1.137.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "19d5689f470e617e39c7035d7a98bb20"
        },
        {
          "alg" : "SHA-1",
          "content" : "5d126aebae617ec57a9f3f2d9d90db589031b13b"
        },
        {
          "alg" : "SHA-256",
          "content" : "576ddcfb51b78e86f145c9a52b60e500b1a1d5a257cafec8aa5416ffba044b49"
        },
        {
          "alg" : "SHA-512",
          "content" : "efb06f55c64595815888d9b738458c767d2c71cf0730e4e7dfc499c5400cada64a3bb0329a7789303f08071f78242c855f2537ebbc5c6bd84e49343531c005bc"
        },
        {
          "alg" : "SHA-384",
          "content" : "506a8b356945c70e0b5b8c2100bc042b2b34bfdb4069206ab66f74cfe4a93c2cff829f64a03aefe1ed3f26704bde0d09"
        },
        {
          "alg" : "SHA3-384",
          "content" : "a577a067d0dd49b1f19d6b2262721b37344cd615a8eb23088d4be89d1a7657da82366174e19d1a2efcfcfdcf58137bf1"
        },
        {
          "alg" : "SHA3-256",
          "content" : "bba94aed8bce79a3975c9db9488f462b2620fad97fdbd1608bb52ebed1dc9564"
        },
        {
          "alg" : "SHA3-512",
          "content" : "f97351b8e4041e8f50be188afad9e3386ea82e22e4ab1c5fedb114bbc6b28886a04ad770d9b69cec6bea2d0003304dfb9f3200800faf0f1176352cc0ced3a886"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-codec-http2@4.1.137.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/netty-codec-http2/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty/netty-codec-http2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-codec-http2@4.1.137.Final?type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-codec-memcache",
      "version" : "4.1.137.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "58ea4787f1d5155290f86de092c9fe7a"
        },
        {
          "alg" : "SHA-1",
          "content" : "a5bab2921abd02320f16096cec6682f92bf150d3"
        },
        {
          "alg" : "SHA-256",
          "content" : "3ce5bf2eb871266e93c0bbec050ff814a8641ff4c3b1a21d3fe87523d7940339"
        },
        {
          "alg" : "SHA-512",
          "content" : "6e901efec251ddf7e562e29d7c9e04e38c8d05a29139c7524a8da54d48a4494a65709a589df5dd1f2086beea3cda0866121e68bbc4481930b82cdaf33a87ed6d"
        },
        {
          "alg" : "SHA-384",
          "content" : "86d0b4b9b57c4a5be26c8df404082f57b59109c33e1eee26289cd0058c6b57a5d0f6312fa910e037c938f625e2b27cbc"
        },
        {
          "alg" : "SHA3-384",
          "content" : "ee657acd4b1fc257294cfb3b55c2c722f2a9d9af338fb135eac2690ebc3f98f7e54c15be5236b2fc06d36391cf1fa8f5"
        },
        {
          "alg" : "SHA3-256",
          "content" : "c7799ec0299ab98a1cbda47b744b4c3aaccff49ac9d6bbe3b8ff8065706fdea9"
        },
        {
          "alg" : "SHA3-512",
          "content" : "19c28793e13c4fb17683da2bd61e97750c93d51d6bf420cc32e28b8229d55057804b6948e3fd04c54267a80e0f8d55ad379b7408c3b995447420a9fbb989a7fb"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-codec-memcache@4.1.137.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/netty-codec-memcache/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty/netty-codec-memcache"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-codec-memcache@4.1.137.Final?type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-codec-mqtt",
      "version" : "4.1.137.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "dfe2d30a23dece1dba950fd3d59944b1"
        },
        {
          "alg" : "SHA-1",
          "content" : "99f2eb93af647c8c1d608b96229b7cc3b4de74ad"
        },
        {
          "alg" : "SHA-256",
          "content" : "4c60d6633cb6f547d30fbb6c94d10f037f59f09261214b70c8763cc66d2941d7"
        },
        {
          "alg" : "SHA-512",
          "content" : "4cfc961583b8237ccb1f82a34ac4a6e7f1036df232f2227a77727a3b33030b0b0c72f9e83623ce0987afb7b6fa4b39fdade6bad511a2aadc26b0cc6956b318dd"
        },
        {
          "alg" : "SHA-384",
          "content" : "e3768f7269b51a2497e8f8852a656a3cc9949aa363fd294b32b94a23a288434dedb6241d7fbc51debc4f26ebda9e17f9"
        },
        {
          "alg" : "SHA3-384",
          "content" : "f41af627c4af62beaba7c3da83c562288f9bb4d614b9cf1e9da12d2fa7d50d49e8effc883379aead17302c1d0aff9d50"
        },
        {
          "alg" : "SHA3-256",
          "content" : "9fe862cc9e1357816d35bbbae02e5c4f510502ec63356c33e555c05b55f7f01a"
        },
        {
          "alg" : "SHA3-512",
          "content" : "d6bbd3d8627edcf1eb02bf82d75886f381f90d57729f6e38d007d2fb9b7d23958d38ca87ed377434a0416abded966a984cb1482022b98bbdef4da615be0bbd8d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-codec-mqtt@4.1.137.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/netty-codec-mqtt/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty/netty-codec-mqtt"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-codec-mqtt@4.1.137.Final?type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-codec-redis",
      "version" : "4.1.137.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "8d8190fd700e9adcad44e045ce345a59"
        },
        {
          "alg" : "SHA-1",
          "content" : "8dcc05a4c9b59625bc91d28f9b0663f04b762718"
        },
        {
          "alg" : "SHA-256",
          "content" : "b6952e57e0237c68d20f972695111d93148a6559fee94d2919280ccea984c2f8"
        },
        {
          "alg" : "SHA-512",
          "content" : "0e19166ebf1ea163b61fffb2ef63092653ca4c0d099f910c9743cb4148d68c8d7e12a81cd93b9af309b8f9467f6b0b8aedddbf7e147c128e6d7aa149af51881a"
        },
        {
          "alg" : "SHA-384",
          "content" : "f2add7ff347798e82a56ad1cda2a94d1da73f52c3fa939b8ce2698d78dffe6f9711ed6cb5b47f8cfdb1cfd74e68508df"
        },
        {
          "alg" : "SHA3-384",
          "content" : "4fddb2647d02838fb9d40500199c51c83218b09877238f63588bcea2645645cb7aa4b682f23e958f9311aefd5dadfc43"
        },
        {
          "alg" : "SHA3-256",
          "content" : "8323b0063ca1844ceaba312caf60f9847781e5bb9f58d73c5950ba890056ec0d"
        },
        {
          "alg" : "SHA3-512",
          "content" : "2638a3ffed5975e285a43100d32386bf2d71cc1a16fb9f688e337cca19908a30d55b11963ccb63bf7f397d69837f71eba17e761f29fd6b045c6a80ab8f2be033"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-codec-redis@4.1.137.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/netty-codec-redis/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty/netty-codec-redis"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-codec-redis@4.1.137.Final?type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-codec-smtp",
      "version" : "4.1.137.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b24cb91a2341d9df5a2265f7527da0a8"
        },
        {
          "alg" : "SHA-1",
          "content" : "d6cbe102e5a5115b03c1943ce261243957ff4e6c"
        },
        {
          "alg" : "SHA-256",
          "content" : "ebf50d91aa43124af1a7318cf3bdb9a84a3d1a7f5c092ff377bc6f012e83f41c"
        },
        {
          "alg" : "SHA-512",
          "content" : "b39355fe57be5b58aa1d5db85567f5fa7c68c38dd6af13e6df622aebdb36f892149cb6a7608ce914e85b11295f620dd1094142168390cf0276a10684d1f8f44f"
        },
        {
          "alg" : "SHA-384",
          "content" : "3df36103352abb5947fdd3901857c7c015f67c95e0155df56603d4bfc6cda1e12ccaf9ef7d7d8c7d2fccdb18c746490f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "a188e34d648897a9330180cad53dbde3e7647d4aac9240ffa5d605a2e8ebc8ff128290986c04137d72f32ab6cc2c0d0b"
        },
        {
          "alg" : "SHA3-256",
          "content" : "727deaad0bedb4377f8de82d93c6a2e463f6d3b959556730c823416a3c4020c2"
        },
        {
          "alg" : "SHA3-512",
          "content" : "ad04a59d93da7879b245708a5ac216e8b136202a4eadaf7b2f6c2ada4fb198640cd12cbd387272f24fd63077f566fcf3bfe15b3bba621b5466bb6f371f0e290f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-codec-smtp@4.1.137.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/netty-codec-smtp/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty/netty-codec-smtp"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-codec-smtp@4.1.137.Final?type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-codec-socks",
      "version" : "4.1.137.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "034a1b087709fd37e3fec0c415c0dfb1"
        },
        {
          "alg" : "SHA-1",
          "content" : "0749c5baf033a6ec681e43ebdb6716f440b6776c"
        },
        {
          "alg" : "SHA-256",
          "content" : "4a6190e08988c058bfeef2b5965e71946439c771abf721c68f4039b4e7b023e8"
        },
        {
          "alg" : "SHA-512",
          "content" : "e7b110354dc9674fb1234eb74f128d692ae89a9140dd96e2c76e91863d79dad48e6347e5965bf1d5c8f5a64b1c9c36ce2f17c587617b07b65f65b427d35a3293"
        },
        {
          "alg" : "SHA-384",
          "content" : "e8bb60e42784f03c7bd80bd0be3b7949345069d5f115ac1d2d54e96c3aafe4907920e022252da95daddcd74e799e993b"
        },
        {
          "alg" : "SHA3-384",
          "content" : "786c395fef6b47fffda2346a1735a71ed412103a83aef8fd8ab13836aa3005a2acb051c1b147924a564efb11cc06de86"
        },
        {
          "alg" : "SHA3-256",
          "content" : "7303d64544163cee9f86b75ee7f43cb76149adb53208edb98c3000334cad19ed"
        },
        {
          "alg" : "SHA3-512",
          "content" : "1957bb6af3ddee7ac806bff99aeb14e6575feed95e89b2917f69c8d5941693dcb238cfc6d8816641ad6fb890a121837c105f31a3d7c16da56860608be9bc6adf"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-codec-socks@4.1.137.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/netty-codec-socks/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty/netty-codec-socks"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-codec-socks@4.1.137.Final?type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-codec-stomp",
      "version" : "4.1.137.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "7db931baf701a97dd4b78f484a4fcfff"
        },
        {
          "alg" : "SHA-1",
          "content" : "add7f1e1d8d39d02d904f6c3dae186f31272c6d8"
        },
        {
          "alg" : "SHA-256",
          "content" : "e01124c4dc99d37124ae41a3893226217ba628ad1661424c5a5525959b9fbb63"
        },
        {
          "alg" : "SHA-512",
          "content" : "6d3cb6559bab8246dadd8681544c1da4ffe6bf56ba16134f9a0d52834801df037e92f1eb083e24bedcf5813af9a7c7c93e7bf625968c2a015813d397a3e9eb20"
        },
        {
          "alg" : "SHA-384",
          "content" : "7ca972f8b1375f620ce7141b0f4ba986719644a3828a3bd22db77eceac242b6fde5f7f3c7bdfa8c19011f5c16f98dd3e"
        },
        {
          "alg" : "SHA3-384",
          "content" : "04479e7410926c88f5878f1413541c5369fb7eb7d5a3d50282a897cfb2fad195dcf8570de785d73e771d08784a9234ed"
        },
        {
          "alg" : "SHA3-256",
          "content" : "4de8f3ad8d44cbfcee3a5d44e291702a4de5997bb31a79de6a6ab0554f28e22d"
        },
        {
          "alg" : "SHA3-512",
          "content" : "4c8c2ef29b0b8e0c50e43c0e3a555648ebcea3dbe52dc945c069fb3b0d5a9af32a163eff645b07ed0c5c014a1b1d5ff4d7f5a68acd159f71e85a56c65e233563"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-codec-stomp@4.1.137.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/netty-codec-stomp/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty/netty-codec-stomp"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-codec-stomp@4.1.137.Final?type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-codec-xml",
      "version" : "4.1.137.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "ab8b81a7930d945a7ad89b86ee28b143"
        },
        {
          "alg" : "SHA-1",
          "content" : "168000977a0ff154ac6fa121616cf1b1e95bf97c"
        },
        {
          "alg" : "SHA-256",
          "content" : "f4488c827ae8224ef86594851ae1778d9efe1f02d02808d774d21720cc61ed68"
        },
        {
          "alg" : "SHA-512",
          "content" : "579949ca9658e605689b0eb4a61d0525f42828758f1738aef43e5b075eaef91344ff5d0cba9bfff472372e3be5e45dcc97e4dd705643486b6c25090d526c2724"
        },
        {
          "alg" : "SHA-384",
          "content" : "afe9a9f19c5930e8d82c0cfbbbec5d315955e379cf3ee8047fefb80032d3044ac359314829ab84757addef3c94acacb0"
        },
        {
          "alg" : "SHA3-384",
          "content" : "342bb5dd3c6424956f0eb712eeacbcad5c07ad488d4e7f3105b976af3aaace0afa801b12c74e3024e571550d1f50526f"
        },
        {
          "alg" : "SHA3-256",
          "content" : "e6ebc0e8c4634fee91870377d97e36aea709fb68dae15001885876990095bfb6"
        },
        {
          "alg" : "SHA3-512",
          "content" : "13c2436348e3ff91bcc0a92c45a73353b773fba9772e1517e515bbaad46b1aafea53f555e542057add4482210a8958a16e03abe196858dbfe545a737ae610af4"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-codec-xml@4.1.137.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/netty-codec-xml/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty/netty-codec-xml"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-codec-xml@4.1.137.Final?type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-common",
      "version" : "4.1.137.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "88b626de884daf3a8347d1b005b1aaf8"
        },
        {
          "alg" : "SHA-1",
          "content" : "4ec7a33ef9a11da3f5a2cd5fa8e1d41732dd1968"
        },
        {
          "alg" : "SHA-256",
          "content" : "d31926b01adcc07af86f5e27b81b6d6c115df17d366e835d1fc3f5a1924e7e52"
        },
        {
          "alg" : "SHA-512",
          "content" : "463594e3ab22dee2889fc3ff25a4c7e1e6bda4498785787021c616c48bdb7f7888acc5bb7b377154e1340d9043205c40d2424c95d881a40d1f0072f15fa73ef8"
        },
        {
          "alg" : "SHA-384",
          "content" : "5a842bc8ea757e117883d646fc0e95c77d8e6f88a66823a8fd37f133f9562a91ae412a1f13ea2a512e90debb6cd6edf3"
        },
        {
          "alg" : "SHA3-384",
          "content" : "9c03f7dc7897caecddaf6816c819b07cbdc3056d225e646a731c387b8fb05d3e0a770eefbd4a8237501b412dc88d7fd5"
        },
        {
          "alg" : "SHA3-256",
          "content" : "30edeac419623404f7a90b38b72ea12fb852195b35115c90f6fb62c16d990145"
        },
        {
          "alg" : "SHA3-512",
          "content" : "335d0ea77827d3a1b242113367d9d2b49f8c9eee3fb9f2006053713a9a99c50d5d623e3dd53b4b09283b8a63c801ba181a58c0e6f42144f7dd20e76319bbfdcf"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-common@4.1.137.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/netty-common/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty/netty-common"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-common@4.1.137.Final?type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-handler",
      "version" : "4.1.137.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "57545aa654bfa587636ba4559cb0eb49"
        },
        {
          "alg" : "SHA-1",
          "content" : "ac2cfd0501b38d1749cff5f40c6b7bc4ddf6d477"
        },
        {
          "alg" : "SHA-256",
          "content" : "d0e4c6ee4779f59f6ab2fb5d388e4f57147c82270164b37945764bb9bda96a44"
        },
        {
          "alg" : "SHA-512",
          "content" : "1d0a373325965ca6d2d45af390253894f82474ebeb7cbfddceb16cbfe0bace4d5d0fec6bdd60b8bf2233ee3aace7acbe2beba15260e4667ab525ce1b61762d23"
        },
        {
          "alg" : "SHA-384",
          "content" : "1616f072377636e52f3b74e10d17a9b198063b1a655a9fad9a5b4a4a89c984ea220a0a2c870c2c27d1fe5a0697e5b80d"
        },
        {
          "alg" : "SHA3-384",
          "content" : "b82567238c9841e31769d111f4c43221bd2cf98819290c48f6d993a2274e00852ff0c5b5e10e1d842a537fa2b61b9b15"
        },
        {
          "alg" : "SHA3-256",
          "content" : "ac0689ebbbf2d987cf9ad03588b222db2ddcb60809d6466f47deed9a46c9302f"
        },
        {
          "alg" : "SHA3-512",
          "content" : "f389e7409e8c17d1c7ea89dd8e334de846a798c75d5ce58467a20c31adc9a6b0fc883e9751a0ee6921d33fdffda6da5c259ab3b0d38a12bb642467831b341abe"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-handler@4.1.137.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/netty-handler/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty/netty-handler"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-handler@4.1.137.Final?type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-transport-native-unix-common",
      "version" : "4.1.137.Final",
      "description" : "Static library which contains common unix utilities.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "2011e3c5f89e16b76569cbeebbbba37e"
        },
        {
          "alg" : "SHA-1",
          "content" : "f391028d0f76e6106d1c1e89831164bbe06d66e1"
        },
        {
          "alg" : "SHA-256",
          "content" : "8056e7637f9948f953314894cf995ab664711b66c73c4cd5b593ae84f0b1048c"
        },
        {
          "alg" : "SHA-512",
          "content" : "02d9bf9dee02e50d02a0caf2a9db1e12bee0dc9052a103a48206d9c85738a0648389b2df29d8ed1d65eb854679a6748c515a1c592363ecbcd41cdddc864e537b"
        },
        {
          "alg" : "SHA-384",
          "content" : "cd87acc7a151a2954cc51e388521b0262d14c26b6235b240de20436889ea38f4d6882fdc7c79a5c45a7626630b9b8877"
        },
        {
          "alg" : "SHA3-384",
          "content" : "8e4146cb193f01653e207da9408051995d8d35611442b85eafa3c81c8a8d88ab75f5611202e76be9765818f4fa53eed8"
        },
        {
          "alg" : "SHA3-256",
          "content" : "98e9bd649989d4b7b527afdc98e2f6ed7004f81670f29ce7849b7627d99948b5"
        },
        {
          "alg" : "SHA3-512",
          "content" : "ba46e493106d1f5aa9ca47e96ec84e8d64940cb71aa7783dfcae35c21175d75b8e2e9534304e80142fb2e3d758a08c1ddcbd4d4560c3675e4cd15d903d0e16b1"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-transport-native-unix-common@4.1.137.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/netty-transport-native-unix-common/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty/netty-transport-native-unix-common"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-transport-native-unix-common@4.1.137.Final?type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-handler-proxy",
      "version" : "4.1.137.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "fc000547f0c84fc1bc1b58e014a26030"
        },
        {
          "alg" : "SHA-1",
          "content" : "0da0ce3ce43eea75d6ce657dbf562f63d7e7385a"
        },
        {
          "alg" : "SHA-256",
          "content" : "843de10c4cef34cbc1a5344090f1b57db532fbebf141559862da675f6b656df4"
        },
        {
          "alg" : "SHA-512",
          "content" : "efc646bd9509406f084aa621ba19a019cda2d538df979c560f28cfd64068a65e2d5c4dde3dd3495c7cef77099c67bde50a50d72ed4d5ef489d8d4f1d57a169c7"
        },
        {
          "alg" : "SHA-384",
          "content" : "ca99b759186d45728b3a5b99b2f6bd3565727c2c0b3d548accf4527ec51853aac5525442ab9e189f31b9972323a2ac0e"
        },
        {
          "alg" : "SHA3-384",
          "content" : "f761452640d1aee7a815432c0df9541c86017db421f68233efeda90f3791c8492aab567fecbb92292bd9ef9511dbd0a4"
        },
        {
          "alg" : "SHA3-256",
          "content" : "459a0c343af4f6c64810e3dfdb72d809e78fb95db99851bb30fe0bebf83fcf89"
        },
        {
          "alg" : "SHA3-512",
          "content" : "5f721ff15ff93265f15e2e12c200ca30249afbab294840c98de9cf61d23b772f18c445ad0d22fbabe8138d9c053bea042ef58ef40b77c1fd99cee0a4ef55555c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-handler-proxy@4.1.137.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/netty-handler-proxy/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty/netty-handler-proxy"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-handler-proxy@4.1.137.Final?type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-handler-ssl-ocsp",
      "version" : "4.1.137.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "50e60cc630cf8c51cfcd0d2f041cca6e"
        },
        {
          "alg" : "SHA-1",
          "content" : "c0ea6d68b037849153635af2519b21dc26eb58a6"
        },
        {
          "alg" : "SHA-256",
          "content" : "6a85347e2d598d28da934cc4d8f68b9990ab7052d8366876b820adfa9a5a81df"
        },
        {
          "alg" : "SHA-512",
          "content" : "7b28b56cc248051a9363a5a7cdb04e32a7ac01282505c7f8d8a47e4359a2939b60f57e91edb50411d837930c2d7c76a0e61f77ec87a69089c81830a81b772559"
        },
        {
          "alg" : "SHA-384",
          "content" : "9f369dedb1bef55e45ce491b1912f0fa4d0d95f022c1daf2e25117939b0e6d2c63967c3d3f946c768ec962343c4c1fac"
        },
        {
          "alg" : "SHA3-384",
          "content" : "22ee522badc713471416ab917797f1e0b7583fc14b58a1cc5e340d2a65febc6329b1bcbc16fbbcfa8e1c6dbc6a8ba4de"
        },
        {
          "alg" : "SHA3-256",
          "content" : "aacb9c5d11d944a6c001ffe48517a97cc61a5dfdadbd02d157298e6e0a8bec62"
        },
        {
          "alg" : "SHA3-512",
          "content" : "4e7a296284c58cb3d703c942219fdb496325196f7af2c7c2a27cc3367be6484c99d596ad87cb64477098ead83730ecc7fff07e2c837edec0a69e0f6db72e5e09"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.137.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/netty-handler-ssl-ocsp/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty/netty-handler-ssl-ocsp"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.137.Final?type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-resolver",
      "version" : "4.1.137.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "8e031f5c56cfd4163cb156b3306cebd3"
        },
        {
          "alg" : "SHA-1",
          "content" : "a34345634d7e21946257d4afd2d0c44ff2b15b6b"
        },
        {
          "alg" : "SHA-256",
          "content" : "b4cf2aeedd9fc7c8c439bbfe574f63cfe5b83392e88bbc07ca0e8424b7cff955"
        },
        {
          "alg" : "SHA-512",
          "content" : "3a6d6dfabcdb88e7675b879547e705e65be8df4ba2ed86fe99fc313137cfd2e02e1c6f7b77f62781b8930fc5d85071d3ca011aa5cd800a9492b085ebfc780bd7"
        },
        {
          "alg" : "SHA-384",
          "content" : "c334173833f54436e9530c24dc49666534ae549d11ded88e6b085045363f21966638dc230578e9aac72a3ff951981427"
        },
        {
          "alg" : "SHA3-384",
          "content" : "9990672b95644368ee039f7d4cc31ce8ecbfe4659e00325e1c79798580068376fe699dcc57889d16b2f66e4312d1ed76"
        },
        {
          "alg" : "SHA3-256",
          "content" : "894b024411a992644f5fec275f1583fd31b3256d290983eadef4c0a1f10e8e3f"
        },
        {
          "alg" : "SHA3-512",
          "content" : "b2ce6b6a7ce369fe0c67f3b61b4e4603ab480f96a5654818ad54a452f14d69bd12b27941b0066d01611243f91ca07c4c04f77f11cc5353d018f0ff2dd8248947"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-resolver@4.1.137.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/netty-resolver/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty/netty-resolver"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-resolver@4.1.137.Final?type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-resolver-dns",
      "version" : "4.1.137.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "2dbf5658e7ce1947d6a8e9d6d7a736d8"
        },
        {
          "alg" : "SHA-1",
          "content" : "fc85b3033cb6f2bdd773a765df6b33f6782fbc51"
        },
        {
          "alg" : "SHA-256",
          "content" : "898d63ca62ed68ff46543c5344f969424b417f1e8d082fe2bb0181ba10144194"
        },
        {
          "alg" : "SHA-512",
          "content" : "86f49387c887bb5d766ebf91c6c3e51b2bf24599edd15aaf2b4519be5657312cc71cb4510453f91c6602ae83cc3a8a8d4a22c5baee6e300df4e4e52bae6dd66d"
        },
        {
          "alg" : "SHA-384",
          "content" : "d6ab415235b3f13f01707f71de9d2b66612a8831ee4bfb10ec726546f3f9eabc8cea4c46c1f916b76f97e6cbeb31fe3e"
        },
        {
          "alg" : "SHA3-384",
          "content" : "feccfdcb2a883e91f5e1e2487af0be43f0b1053a93e73ddc10ff65ab4aefc3e162dcd4b1db3adc99311031775b688580"
        },
        {
          "alg" : "SHA3-256",
          "content" : "798752ad0d68f722a63b750ae8c1dbf78d6bce4ad9f98f2ec212400d02d7ed8a"
        },
        {
          "alg" : "SHA3-512",
          "content" : "6bcdfd1bcc8810b3c0955b8fc5e4d1ef3baba1feacbab5e628f61ee0fd5f009949c70dc5d490442b926334e9016f50a798e11fe0db8003488b657108c708dcbf"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-resolver-dns@4.1.137.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/netty-resolver-dns/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty/netty-resolver-dns"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-resolver-dns@4.1.137.Final?type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-transport",
      "version" : "4.1.137.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "06e79cbb36dc63030d1aacc6a1e13d37"
        },
        {
          "alg" : "SHA-1",
          "content" : "8a4a3d0e953076c63c15eac6d0d1a5f5856cae16"
        },
        {
          "alg" : "SHA-256",
          "content" : "6251adc2a2921572382732a2db188d4f4f2251fd6ebb49c5d44bbf33d6bfb1a7"
        },
        {
          "alg" : "SHA-512",
          "content" : "d6fbe968d3666fdc146472755cddb0c785d1e2b256225cede7b362faff534884c03aebfab97d4959d49e0d4605d6e8d86f9d9648d090fa618f02ba5e572b2abc"
        },
        {
          "alg" : "SHA-384",
          "content" : "fda7014237aaf6c81904f6aef91a0049e186f1ea80f8fd487d94d561c40a1606ad48cea93d1d4b829014d611db788c03"
        },
        {
          "alg" : "SHA3-384",
          "content" : "489b73b0e2f1977e730e6cc80c9a3fc4ecee02d9de879e5f0ffab6938f63e25ab45e39e78033c563bf681a2d0c83eae6"
        },
        {
          "alg" : "SHA3-256",
          "content" : "67f3f75e1a2e0a9cb1f07601204e66eb24b41179279cf744f768258f16c38751"
        },
        {
          "alg" : "SHA3-512",
          "content" : "ee3f2906062aa8e0d81f680956bc266607f453cc1179420067f50ceed894acd7d7e33ce0af3082a805e96af2705b2a98d01539166654981a1a7825cce8673b04"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-transport@4.1.137.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/netty-transport/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty/netty-transport"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-transport@4.1.137.Final?type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-transport-rxtx",
      "version" : "4.1.137.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "11e15dce6417e3048963996d86a4ca86"
        },
        {
          "alg" : "SHA-1",
          "content" : "cfe30f67937ddb4203d9261b288de520bda8faba"
        },
        {
          "alg" : "SHA-256",
          "content" : "6422a703bf80bfd15ff9ef84564b47dc5f83e4d31ebf5431f0301304d376aea9"
        },
        {
          "alg" : "SHA-512",
          "content" : "aca30341150b1388ec9222adb49818b7a0363715a25339dccd0af59405da8dc69bbe01f253e6e1e033864ff615ab86f848d6b093e079dbef4ff0c4f427c6ce63"
        },
        {
          "alg" : "SHA-384",
          "content" : "f6ea2dab0ce6e516a658edeb45d6993704a63e9a8687db9f779ec6d960dd8e5477563b09244d3bf332429562e0c009c1"
        },
        {
          "alg" : "SHA3-384",
          "content" : "e5732a1192b6d73c51c5f03032c9037b6555f0ebd828830d20226b0ca5896a67498bc354a7f25d5067c514f620bd2a66"
        },
        {
          "alg" : "SHA3-256",
          "content" : "18f87b40384e91a9b3b541ad9155c809a1acde077be2e27b0db693880978e440"
        },
        {
          "alg" : "SHA3-512",
          "content" : "1fec9285a428bf4518c4a896cbef407f4b79173f9baed8471c61c369d708d495128936ee9bea3d481498936d8aa9a1009ede8590542fdd8b6cc8a3f946760b8e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-transport-rxtx@4.1.137.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/netty-transport-rxtx/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty/netty-transport-rxtx"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-transport-rxtx@4.1.137.Final?type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-transport-sctp",
      "version" : "4.1.137.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "430c0a3171936cc6bce113e2103658e7"
        },
        {
          "alg" : "SHA-1",
          "content" : "7e349a7ca002fa90720a0e88877c3a595d5d321b"
        },
        {
          "alg" : "SHA-256",
          "content" : "ff0c2b8999b97c2d078f9685558c6d3ca2207df2e35d30551d29a659bce7d2c5"
        },
        {
          "alg" : "SHA-512",
          "content" : "b1ed3fff6902bfadbf7add1601af3100bdad13efb0f2394244a3e759045493b5dedefdc999cdca597dfd86acf5466bca7db98613a2196d1cc82299704d05de08"
        },
        {
          "alg" : "SHA-384",
          "content" : "a22d82c6234c0784ce52e723dd9bd6377621db57f55b186d84c90107697aef529ce8be43a95c2d8596db0e7b2a5ff9fc"
        },
        {
          "alg" : "SHA3-384",
          "content" : "dd1f79de93f149f16431a4d30ba916c79f56b3facf0e3526f319c3d97e858aa08e35d8864daa350e67253bbf3e3074ba"
        },
        {
          "alg" : "SHA3-256",
          "content" : "45aac2844953d3c309e4d5c6d77d0ff0e9620dd27adefd6f215842ed4b0ebf75"
        },
        {
          "alg" : "SHA3-512",
          "content" : "f5955e66294152674bee2b52f4a95f5bbe5018809e39c341394fe11c0ecccb39bcbd471a0e37bc9b247e245eaa1d41e7ad3a2b8f36149c003f30087cd7e563f5"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-transport-sctp@4.1.137.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/netty-transport-sctp/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty/netty-transport-sctp"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-transport-sctp@4.1.137.Final?type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-transport-udt",
      "version" : "4.1.137.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "42af8fe6dee1cba687b1eb2c320b4527"
        },
        {
          "alg" : "SHA-1",
          "content" : "eb23b517f2b8aaff3e8857eff238d434571fa26f"
        },
        {
          "alg" : "SHA-256",
          "content" : "28a7fd7a93e51565008747e8929af9f1182f4494cbdd01fe54d5d79081f51b38"
        },
        {
          "alg" : "SHA-512",
          "content" : "a826cc78e2e1f489eefb70779c3533fbdde32858b271b981bf9ed1317e9939ee24ab050e25ce2174be3c6b50fdd79b445fa901cb5ab9811d38a546fa1add482a"
        },
        {
          "alg" : "SHA-384",
          "content" : "85e314599eed589aec05925ea739f2a9d58d7a02f58a12bbdeeee378d1c851f3eef38d1b63f1bd4cd28f9aa40c7a73dc"
        },
        {
          "alg" : "SHA3-384",
          "content" : "1d98820f70758156cf803e5be53642f9c010f85d2fa82f97a8b1ccb9dd01a08cb67e28e6862624a572da79e9b4afff38"
        },
        {
          "alg" : "SHA3-256",
          "content" : "641f7fcee371cec511dd5f80b75c6aedce537f69398bbf7c5e9543513cfc2928"
        },
        {
          "alg" : "SHA3-512",
          "content" : "11bd52e434c884ad71bbb769931d3e5e9c8d21e27ccd15f48380b302e09c41e8c94869d43d7497f1c95adacc7c6c3b911e1457fb91ca75277be9e1b4a4b20f03"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-transport-udt@4.1.137.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/netty-transport-udt/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty/netty-transport-udt"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-transport-udt@4.1.137.Final?type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-transport-classes-epoll",
      "version" : "4.1.137.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "ba51b079c57172c1fcb8aa73462df131"
        },
        {
          "alg" : "SHA-1",
          "content" : "0b1c5acb7a5d7fe5b055553db7c76ae90cdcaf9e"
        },
        {
          "alg" : "SHA-256",
          "content" : "55049554b799dc8e53bf234fffa36e001f7b5b65c32994b9bd59fc6356f1c52f"
        },
        {
          "alg" : "SHA-512",
          "content" : "831d5c8d188fa4dfadf2b6b1f0aef088225134a34a421b44c9ddb72710a91c069c7c254d8a9d111b9fa63869a1fff9d1f82bf222e45cf16b91a2aa7a4013dd28"
        },
        {
          "alg" : "SHA-384",
          "content" : "fa1c945fc99f6ca5e23acef16e939a3863820127f8ca099d1416a50004d07e2fa2bf6db36b194261596eb8a43bf3c003"
        },
        {
          "alg" : "SHA3-384",
          "content" : "97ad89e8ab61c6cb604b384c07b074eb64f08c8d5e9299288bd7b56114e702b90e17b76e117f3fcdcaac884e5c030cb9"
        },
        {
          "alg" : "SHA3-256",
          "content" : "b2873f58e971005e71bc9aafd70e0551decef17dbe39d138425a20e769457af8"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c04a98735be10046b4aae26a499ae4f545ef8ffc49579a39e47de9e9f26a5521b768725e69725a6d2edf011df745037d75cb0d6e7643a9f19eb091f7a4a0362e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.137.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/netty-transport-classes-epoll/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty/netty-transport-classes-epoll"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.137.Final?type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-transport-classes-kqueue",
      "version" : "4.1.137.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "845e2d35393cc336a14aba9a2d0d474c"
        },
        {
          "alg" : "SHA-1",
          "content" : "9e1bdd4fb5f41ace268cc5fd8e94dddca498c9ce"
        },
        {
          "alg" : "SHA-256",
          "content" : "88d0ac216f9c7be690a9d0157778570d6f4c61f885863da1fccec7fcaee35557"
        },
        {
          "alg" : "SHA-512",
          "content" : "5b5fb18bc708305cdb116f073d5f8c7a3ac70fc005d0f7fef7e1a547e6f40ba81ac821360c3094bed30093f6cd7f6ce0c408585ccfdbae917e093aea99131116"
        },
        {
          "alg" : "SHA-384",
          "content" : "acd4a0dc1b7ac378085f5967c40533a6a058e39be0d757064d3695b5aa55cbc9b8ad2ab0c3d9fb8d7abee52315f1c7c3"
        },
        {
          "alg" : "SHA3-384",
          "content" : "37647b9ecc8aafdf35f59e6904f517b6e527d56be2862d7aa9206502410c41535fbb8f0545caf99c9aa9bf6192846a65"
        },
        {
          "alg" : "SHA3-256",
          "content" : "ce2bde6f81c4ac59d38544dc58eabb71f31323ccc8cd4a1d901df473d22786a0"
        },
        {
          "alg" : "SHA3-512",
          "content" : "ddfcc03d4205a7f63b424d7971da4d472be8e48c098625ade83ead7ba647863e2af48a203fb58e866b8c6251c9e2a4a300847812d56412c73e962f5ff1a810cc"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-transport-classes-kqueue@4.1.137.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/netty-transport-classes-kqueue/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty/netty-transport-classes-kqueue"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-transport-classes-kqueue@4.1.137.Final?type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-resolver-dns-classes-macos",
      "version" : "4.1.137.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0ba49892777ac17055bf07f04f8352df"
        },
        {
          "alg" : "SHA-1",
          "content" : "5bd9b82cbef1520d10318119c1aeffc5761a32af"
        },
        {
          "alg" : "SHA-256",
          "content" : "92d0a542954475f563ea58221d864884ba6753c50c1f17985b1045e990bf094c"
        },
        {
          "alg" : "SHA-512",
          "content" : "4a93af2368462b3bb6ced249f7ad22e1c9e268ce82f481dee6d6770065b2d6dd7bf95b7ffa8e71249c5ee5f306e70ebadf900b25e9fc0faf76e29fc35caca104"
        },
        {
          "alg" : "SHA-384",
          "content" : "ae0e73790fc4b6a2bcb3609b30f00e4247f1b8f630717b6d35eb5f292b2254957aca476ca646f1a3baf45fb41150c752"
        },
        {
          "alg" : "SHA3-384",
          "content" : "a1018286005406c5c295ceb7fb9d04c055eaaa224f032900ec3fb5dd4883fdeca9104a255443c080a0476cf03fa50329"
        },
        {
          "alg" : "SHA3-256",
          "content" : "0905196e87e0e120db1917beaa05eeccbbd962d96bbe5bebb49d39be25e1d975"
        },
        {
          "alg" : "SHA3-512",
          "content" : "bc97540c13575175c4bb3f80aa24d72d747e2f252f94862eff6f9a7c2982b16b6622e62ff0bed5aec61f84d123eaa7fafe8188e71cca8c78241e560e931cf01b"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-resolver-dns-classes-macos@4.1.137.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/netty-resolver-dns-classes-macos/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty/netty-resolver-dns-classes-macos"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-resolver-dns-classes-macos@4.1.137.Final?type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-transport-native-epoll",
      "version" : "4.1.137.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "246f386af282e1ad39100892e423fe20"
        },
        {
          "alg" : "SHA-1",
          "content" : "4f44254624faf8fc8eaa69d0e0523c286aaae4ad"
        },
        {
          "alg" : "SHA-256",
          "content" : "185db6053e0e9573d36fa4eb6567b26139afaa4daa7bf5a068e661568304542b"
        },
        {
          "alg" : "SHA-512",
          "content" : "6b07da120cae4be522e1a02083f11748f0dd954f086a17972a0bd760c3618f023995c2b641b3d7274e2e12e447963f94f3c7e6d37681bbc51cad6dcf68b00905"
        },
        {
          "alg" : "SHA-384",
          "content" : "8e4c9b6db4b2595a1f92c9062195a0e1b17c80e499ccffcaf6bc58f188cfa31b5f7953b77367a446f28473b181865b89"
        },
        {
          "alg" : "SHA3-384",
          "content" : "a19dff4b8153d2e97d89cdff9e11983498684bbfe1b87f9a22a5a6a92ba8a390f3f1c81ce7122703285a52f8334f8cdc"
        },
        {
          "alg" : "SHA3-256",
          "content" : "e8b9886f5c1dbe55779b611c933ee021ec7e95711b1e04c6a3c185c3e8ee2b7b"
        },
        {
          "alg" : "SHA3-512",
          "content" : "41cd9b809248d2ee1ea8e62766a77cb5c056df453c7443ad7bd8e3f12533852ecc9bd3c5426525f03a70fffc3500ec42e70d02bd7a097ae141da327e36c1305d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-transport-native-epoll@4.1.137.Final?classifier=linux-x86_64&type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/netty-transport-native-epoll/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty/netty-transport-native-epoll"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-transport-native-epoll@4.1.137.Final?classifier=linux-x86_64&type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-transport-native-epoll",
      "version" : "4.1.137.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1addcf7fd48461de688799b9d2baf24f"
        },
        {
          "alg" : "SHA-1",
          "content" : "63f5cb1dfff20e060da9a716066882ff237648b6"
        },
        {
          "alg" : "SHA-256",
          "content" : "82fb63a2dc90c0bddb81e04065a1c06fb4c5be722ad5d64b46491daf8b6f9a01"
        },
        {
          "alg" : "SHA-512",
          "content" : "4f44b6998a572f2c61066f31dcfbfe971ee4a834b368809423b04ae3117b89a261f5bbbc68d52a887c4e5507be81f1ba5d315aaf23103f7317d9b113582c065e"
        },
        {
          "alg" : "SHA-384",
          "content" : "3593fcd3a42470aa51bc9e28c8e1b059caea9c3854756058cca2302767367e6e6049417a1555754857760a0506a913b7"
        },
        {
          "alg" : "SHA3-384",
          "content" : "10ea5884dafef21a014e442da80c7079d6b174cdc119d93530732ad87bdfa3ee0ac742569eab6a338f557c8c4d362cbb"
        },
        {
          "alg" : "SHA3-256",
          "content" : "35312b340dbb2152cb6376fe577553fc9c58e5bc0945b91330ec97dd29ea478d"
        },
        {
          "alg" : "SHA3-512",
          "content" : "5ac2f295bff52090a52937ac15dc2e93c3e5253d8636edb8e3f199d3ad6108ab46d8fcc8c3214aab3e9a466fa7e77e181fa41ae46458ba8f7b2b0c47bb59bf8c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-transport-native-epoll@4.1.137.Final?classifier=linux-aarch_64&type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/netty-transport-native-epoll/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty/netty-transport-native-epoll"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-transport-native-epoll@4.1.137.Final?classifier=linux-aarch_64&type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-transport-native-epoll",
      "version" : "4.1.137.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a015daa50e621a7402b1dcecd5f9de80"
        },
        {
          "alg" : "SHA-1",
          "content" : "a384239d41f243c8d979ba7ce9146c697d823fac"
        },
        {
          "alg" : "SHA-256",
          "content" : "9d064f9850a85b2893d642eb1a6e42667c1c18d9098a546f231d0108c319df00"
        },
        {
          "alg" : "SHA-512",
          "content" : "b06fe3d1517b1acc36c7309d3bba7189131d6645ee8788c7b2d6b213876c43196c59b0d992501bce1268c40179d9135ddf3793e67397db098b3cc6755a4c4687"
        },
        {
          "alg" : "SHA-384",
          "content" : "1a836a7dc9899a58822534205cd9bda06bf8f597b8de37f8558b2815705bf8f8f93b2def5250e6c33f12e0bb2e511abd"
        },
        {
          "alg" : "SHA3-384",
          "content" : "1941a439f468a9f0f81651abdab869ce55586a88cecfd08e10710b8166834c986096f26e7f87e512554d83512d15501a"
        },
        {
          "alg" : "SHA3-256",
          "content" : "92bbbf67f6af65726b11fc6530df542a50d8645f60b33340beead3cdfe62580b"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c8c99d7d7371971281a6c65c4e8255ec102426d9269d5b211613af3fbd742ffc52030a362361c95f3a43da66c8fefbef39da8be9072b7823a256ef4d2b2dff06"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-transport-native-epoll@4.1.137.Final?classifier=linux-riscv64&type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/netty-transport-native-epoll/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty/netty-transport-native-epoll"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-transport-native-epoll@4.1.137.Final?classifier=linux-riscv64&type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-transport-native-kqueue",
      "version" : "4.1.137.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4dc890c9cccce3063b90f4fa0eb979b9"
        },
        {
          "alg" : "SHA-1",
          "content" : "b8ae2870648768080db4fb4febf26772abdf12f4"
        },
        {
          "alg" : "SHA-256",
          "content" : "29f96e4f350df9467e5cf49e83c0be27a094a6a1f6dfc1bf0e0be9af84333729"
        },
        {
          "alg" : "SHA-512",
          "content" : "4b91fa603cce99774a839b4715326ec994f32be78b5b387a46b20b3ab71dfb9f076418640b40f777cbbb3940b06a8d5e2af52996e31ab1c942012d0052fee63e"
        },
        {
          "alg" : "SHA-384",
          "content" : "51e7237c13313a66392de1ca02a89ce1d626c24c773645b1b5c09025963b6a9f326d9603bf399e1dae69496bb834f672"
        },
        {
          "alg" : "SHA3-384",
          "content" : "c6e99d844a4565b1cff666c6a84ea2d40763fb601416d95c145738570b146ecad5baa1b5fd56a34cc7e966ab56a6c600"
        },
        {
          "alg" : "SHA3-256",
          "content" : "7a286383ef133003524744172f12c94cf415fae6c76b258ccf55b441f14bfca6"
        },
        {
          "alg" : "SHA3-512",
          "content" : "ff951b8a844e3271dc3fcf3b215144974610af054cdb01e630da7ffe40f0bf6277c090e9926d87137bac50ecbc44e833c66eae181714685e39c40efb9abf9ae5"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.137.Final?classifier=osx-x86_64&type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/netty-transport-native-kqueue/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty/netty-transport-native-kqueue"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.137.Final?classifier=osx-x86_64&type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-transport-native-kqueue",
      "version" : "4.1.137.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b9683c7c48a11d43bceb028579a13c2d"
        },
        {
          "alg" : "SHA-1",
          "content" : "fde894b15bf75f994dc3806b0c241f199c8d44c5"
        },
        {
          "alg" : "SHA-256",
          "content" : "6745bb54be0a9105c40c045dcc322b107ac16abf82716963fd64ee921dc5408a"
        },
        {
          "alg" : "SHA-512",
          "content" : "70bcce4aaa5963247446875ec627b7386f07f7daa600a3bfdd90fdbaf6a4ce6f110a8ddbde28c8219ec0770d0ac8542acbc5a84e4c78155828c242d8c5ff395b"
        },
        {
          "alg" : "SHA-384",
          "content" : "bf923183dd6a054d0dfcb58268ff778daad743e90a158ccfb5348f79f7233ffda5b1ec02f3aa7184e75dc476d7e33de3"
        },
        {
          "alg" : "SHA3-384",
          "content" : "a272820fc7c12e038f65ed6ea1b24d7b96a83672a311155779f699e0114d928ce5d2c6b46f21a3085fe040c714d7ecf3"
        },
        {
          "alg" : "SHA3-256",
          "content" : "0eb8450ca6fce8d4da5af490f3ac6d72ae106cf1a9555403ac4780eda022e0cb"
        },
        {
          "alg" : "SHA3-512",
          "content" : "3fac56ae35232290e6afb8062a12a400b4e1bba4a188feb87dcb281abff0a9fc8459a288efd5ca2e0566d7f11071f31b71eb57719dab448b93ea13ee160ff7ec"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.137.Final?classifier=osx-aarch_64&type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/netty-transport-native-kqueue/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty/netty-transport-native-kqueue"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.137.Final?classifier=osx-aarch_64&type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-resolver-dns-native-macos",
      "version" : "4.1.137.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4a1467b2b57c2e80196259b57a6830d6"
        },
        {
          "alg" : "SHA-1",
          "content" : "9f14729b0bc5ea3cc7ae011446a01aa4dcc05817"
        },
        {
          "alg" : "SHA-256",
          "content" : "bc8a5616ab33f0e640bc6174eea770ccfca8ed0e9891ff3bb3ae638255bc006e"
        },
        {
          "alg" : "SHA-512",
          "content" : "87cc7e28fe91b6485dbac647d35fb82f478121b719bf0bf27bbc40d6fcf3f404fd837069990d941e5ae1ecd6073db9d067a3a505f8f3ca7fc773f2466cdaa827"
        },
        {
          "alg" : "SHA-384",
          "content" : "9136862b9c71c6d0853cc945ac0f4b049cee6f6638d5220dffba5696b4954af531aebd4d5e3658e40ecce5f6a918d65c"
        },
        {
          "alg" : "SHA3-384",
          "content" : "d58c7b584f1ef706efd033da0065c1bfe14b853c57891e65fc508d4feb00feb72d7defcf87acdf07e7a416f5ba6d008f"
        },
        {
          "alg" : "SHA3-256",
          "content" : "25ca6094a4ea246ae7c25e6d5b4dcd1550d0c8331cd897418469d843650f9122"
        },
        {
          "alg" : "SHA3-512",
          "content" : "d235bfcc3485f87071725ee9bffe76e8ff67d4d42b298bf35afad38b84959ff4bd6627fc4b3616843cfa463f0b2f513e4419c524d490bd4aaef8682b8e411f03"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-resolver-dns-native-macos@4.1.137.Final?classifier=osx-x86_64&type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/netty-resolver-dns-native-macos/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty/netty-resolver-dns-native-macos"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-resolver-dns-native-macos@4.1.137.Final?classifier=osx-x86_64&type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-resolver-dns-native-macos",
      "version" : "4.1.137.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "5804a683b2c38204afa442f19ad100f5"
        },
        {
          "alg" : "SHA-1",
          "content" : "bdf0a48f4f9b4e6db01d2c512ad67a4d9a6eda39"
        },
        {
          "alg" : "SHA-256",
          "content" : "777e1e9f0337e04388e9f9bd9ff5270e607423be72306b381fd380418b06b9ac"
        },
        {
          "alg" : "SHA-512",
          "content" : "59fdeddca50142444c565e3cff5d14b2927805ad8a45b248510802afc1b1d29d7d65f92797db467c187c9f459a9ae54288c767acd1a95441a8743040d73b3bb3"
        },
        {
          "alg" : "SHA-384",
          "content" : "0183d277353c54a6e30186d56f635ad588722e6cd64006a8d9109578ff8eaa862d2a4b3d7edab6c64e00a5a01fc58fa2"
        },
        {
          "alg" : "SHA3-384",
          "content" : "e4c0f2e2acf6586f3f4b05c0763569396cc580e6fbc78ec1ea82fdbbc8e56c5e6288ccbf69cd2eed8d5e44d14bf54f4c"
        },
        {
          "alg" : "SHA3-256",
          "content" : "05fe762d151d06d2bbf710c56aeb70277c241b11ed5367829b687781af9a99a1"
        },
        {
          "alg" : "SHA3-512",
          "content" : "daaa3a68f99ed28254e78b561b372b796339c1cf621b8f794223a6fb2349c22f342a439b836f866f92ef7fabdefadbdda82831e6776ee0c9e37b64102a3678c1"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-resolver-dns-native-macos@4.1.137.Final?classifier=osx-aarch_64&type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/netty-resolver-dns-native-macos/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty/netty-resolver-dns-native-macos"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-resolver-dns-native-macos@4.1.137.Final?classifier=osx-aarch_64&type=jar"
    },
    {
      "group" : "xerces",
      "name" : "xercesImpl",
      "version" : "2.12.2",
      "description" : "Xerces2 provides high performance, fully compliant XML parsers in the Apache Xerces family. This new version of Xerces continues to build upon the Xerces Native Interface (XNI), a complete framework for building parser components and configurations that is extremely modular and easy to program. The Apache Xerces2 parser is the reference implementation of XNI but other parser components, configurations, and parsers can be written using the Xerces Native Interface. For complete design and implementation documents, refer to the XNI Manual. Xerces2 provides fully conforming XML Schema 1.0 and 1.1 processors. An experimental implementation of the \"XML Schema Definition Language (XSD): Component Designators (SCD) Candidate Recommendation (January 2010)\" is also provided for evaluation. For more information, refer to the XML Schema page. Xerces2 also provides a complete implementation of the Document Object Model Level 3 Core and Load/Save W3C Recommendations and provides a complete implementation of the XML Inclusions (XInclude) W3C Recommendation. It also provides support for OASIS XML Catalogs v1.1. Xerces2 is able to parse documents written according to the XML 1.1 Recommendation, except that it does not yet provide an option to enable normalization checking as described in section 2.13 of this specification. It also handles namespaces according to the XML Namespaces 1.1 Recommendation, and will correctly serialize XML 1.1 documents if the DOM level 3 load/save APIs are in use.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "40e4f2d5aacfbf51a9a1572d77a0e5e9"
        },
        {
          "alg" : "SHA-1",
          "content" : "f051f988aa2c9b4d25d05f95742ab0cc3ed789e2"
        },
        {
          "alg" : "SHA-256",
          "content" : "6fc991829af1708d15aea50c66f0beadcd2cfeb6968e0b2f55c1b0909883fe16"
        },
        {
          "alg" : "SHA-512",
          "content" : "bfd21f2350bf0bb546a68d3303f28c6a15cee1e630138c169344c3f65fe39a15e61c6ff4e5239f38f2f1f9e488eff4d5565a4a0774263064ab6a30aa9fcaaed3"
        },
        {
          "alg" : "SHA-384",
          "content" : "0a35ae0744f05973997b0710cc8d1d774867bc1c1b63ef5bf5f554d1b4c4ab42033f7819430e05ac623e7c8630aa7c52"
        },
        {
          "alg" : "SHA3-384",
          "content" : "b016ed02d907b21c90b4a2560aa4c778e8aad1b5ecb0ba62777f668166c6e7b8a0c0deef7d1e63b7a9b1092c64c8a4a6"
        },
        {
          "alg" : "SHA3-256",
          "content" : "875856aafff433840ee9933c01018cd18c0a13b46bd4472853698ef1dff83168"
        },
        {
          "alg" : "SHA3-512",
          "content" : "1587332fb01515a72b7856b1f566070dcd26fef33c5070039c28684215466a9b9d3a4625cf7181443e3c3a67a313a938cf0775f39b96daf43f5edd4772143c23"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/xerces/xercesImpl@2.12.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://xerces.apache.org/xerces2-j/"
        },
        {
          "type" : "vcs",
          "url" : "https://svn.apache.org/repos/asf/xerces/java/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/xerces/xercesImpl@2.12.2?type=jar"
    },
    {
      "group" : "xml-apis",
      "name" : "xml-apis",
      "version" : "1.4.01",
      "description" : "xml-commons provides an Apache-hosted set of DOM, SAX, and JAXP interfaces for use in other xml-based projects. Our hope is that we can standardize on both a common version and packaging scheme for these critical XML standards interfaces to make the lives of both our developers and users easier. The External Components portion of xml-commons contains interfaces that are defined by external standards organizations. For DOM, that's the W3C; for SAX it's David Megginson and sax.sourceforge.net; for JAXP it's Sun.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "7eaad6fea5925cca6c36ee8b3e02ac9d"
        },
        {
          "alg" : "SHA-1",
          "content" : "3789d9fada2d3d458c4ba2de349d48780f381ee3"
        },
        {
          "alg" : "SHA-256",
          "content" : "a840968176645684bb01aed376e067ab39614885f9eee44abe35a5f20ebe7fad"
        },
        {
          "alg" : "SHA-512",
          "content" : "8db0283b6840cd6407957d296b802e3edf90653e2722f8e29f86c1c0b60996c4b43e9e065e6864dab89b2138ddb0174d9b4fdda4a93f94eeb884783db82f3268"
        },
        {
          "alg" : "SHA-384",
          "content" : "bce0ec0f0f692213a1110197c4a11c333673ae0630481255d12b441a8cba70aecfaf104c3d8d9b500ed2a0a19a2bfcce"
        },
        {
          "alg" : "SHA3-384",
          "content" : "c1d8154ef6eee57dfe6ae9a1c1a2525e9ec2aab3631911a53c064ea6480c0b3b1ce8dd079db7b3693d7ef81daba28ace"
        },
        {
          "alg" : "SHA3-256",
          "content" : "09eb76497eac5012ce1000c52f4e597c4941a44b9d960b1ac58a19beb2dd63fc"
        },
        {
          "alg" : "SHA3-512",
          "content" : "1e4eb902e50b3388da4d161ee49f4d47b61dddd2ad10e6ef6cbb67c4ebc9043e0b65ae59a4a0c8eb03dd28814ce4aedd7e0d4962a0aedc3bdcf7de37cde38f66"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        },
        {
          "license" : {
            "id" : "SAX-PD",
            "url" : "http://www.saxproject.org/copying.html"
          }
        },
        {
          "license" : {
            "name" : "The W3C License",
            "url" : "http://www.w3.org/TR/2004/REC-DOM-Level-3-Core-20040407/java-binding.zip"
          }
        }
      ],
      "purl" : "pkg:maven/xml-apis/xml-apis@1.4.01?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://xml.apache.org/commons/components/external/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/bugzilla/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/xml-commons-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://svn.apache.org/viewvc/xml/commons/tags/xml-commons-external-1_4_01/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/xml-apis/xml-apis@1.4.01?type=jar"
    },
    {
      "publisher" : "FuseSource, Corp.",
      "group" : "org.fusesource.leveldbjni",
      "name" : "leveldbjni-all",
      "version" : "1.8",
      "description" : "An uber jar which contains all the leveldbjni platform libraries and dependencies",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6944e9bc03c7938868e53c96726ae914"
        },
        {
          "alg" : "SHA-1",
          "content" : "707350a2eeb1fa2ed77a32ddb3893ed308e941db"
        },
        {
          "alg" : "SHA-256",
          "content" : "c297213b0e6f9392305952753f3099a4c02e70b3656266fe01867e7b6c160ffe"
        },
        {
          "alg" : "SHA-512",
          "content" : "2e9f806af5d89c00e345b4516ffd325893a07f30c87274fa5b8ce314aad021633750b665d8c338fbf5adc79a527e19caf96d0b12af57e56fb8d3d8f7fd845a96"
        },
        {
          "alg" : "SHA-384",
          "content" : "f10d7ce88da5a9fada67fcbf6fc02939346e67428ee5dd7b000f884d8046131391ee1ece83885d3de60532d1227a66f2"
        },
        {
          "alg" : "SHA3-384",
          "content" : "b5919e94b576b4c30017e16f0b1a983aed10ba755bda341cd3f6056b56e0d024c1c63aa9892aab3be166c8a70fc94e47"
        },
        {
          "alg" : "SHA3-256",
          "content" : "5a8e38c0619923426a8a37733a9249986e6b9b389ebe2fe04b9235e045fea406"
        },
        {
          "alg" : "SHA3-512",
          "content" : "136aed54a48e86ec78e99ff19fc40de5dacfe9f0d9975e5e5c19024b68e35cdf88f82587d09d1f4e32db6ddb96fe7cd663bf1e01098e8366547a6a1620f938fc"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.fusesource.leveldbjni/leveldbjni-all@1.8?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://leveldbjni.fusesource.org/leveldbjni-all"
        },
        {
          "type" : "distribution",
          "url" : "http://repo.fusesource.com/nexus/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/fusesource/leveldbjni/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "leveldbjni-dev-subscribe@fusesource.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/fusesource/leveldbjni/leveldbjni-all"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.fusesource.leveldbjni/leveldbjni-all@1.8?type=jar"
    },
    {
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.jackson.core",
      "name" : "jackson-databind",
      "version" : "2.18.9",
      "description" : "General data-binding functionality for Jackson: works on core streaming API",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "9acf7de1c5ad5b5bc0dd72bd8459e7ef"
        },
        {
          "alg" : "SHA-1",
          "content" : "093f3c1564ae82c1f5c034883f9ce45782054e04"
        },
        {
          "alg" : "SHA-256",
          "content" : "71595a3f7ff58344ec0496a9f9ec9f623ef7b85b45402d88f1ca261f1bc4b42c"
        },
        {
          "alg" : "SHA-512",
          "content" : "1ce9e558e10ae7e86bd50a43ab9ea90d3ba8e7437e9d2b73eee6c648a4bf7583d532007fd03696c6e01b943e894f0956ebb5344049b011b609273f68eaf6934e"
        },
        {
          "alg" : "SHA-384",
          "content" : "b171f56a845b5722f39e4f2edd8a83e6700fafb37f0a78ab0cb0546443654a43b21cf45c88dbac3574e5f80710074e5d"
        },
        {
          "alg" : "SHA3-384",
          "content" : "039864fb011921c635dca34c585349e864b82463d03812f9d14695bddcd74d600eb0795514cd4c62ec5ea714afc67dfa"
        },
        {
          "alg" : "SHA3-256",
          "content" : "8fb8c229144a416287713e5ccb4a321cb6a722722a0e0f7df61f1c7efc7b6808"
        },
        {
          "alg" : "SHA3-512",
          "content" : "f9a5c5f4674016810a9a6141e9f4386ee895dabd3670cff2e1a0f5112c2cf27ce413cc75b7163a191a79ba159f3069b68e115252b9e2a2da2b3605abb696fd44"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.18.9?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/FasterXML/jackson"
        },
        {
          "type" : "distribution",
          "url" : "https://central.sonatype.com/api/v1/publisher"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/FasterXML/jackson-databind/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/FasterXML/jackson-databind"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.18.9?type=jar"
    },
    {
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.jackson.core",
      "name" : "jackson-annotations",
      "version" : "2.18.9",
      "description" : "Core annotations used for value types, used by Jackson data binding package.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "de16119eb690bcc4f81286edefeb0dd1"
        },
        {
          "alg" : "SHA-1",
          "content" : "c19aab861fcdf6e2f185ad84fb23f0a8383097f8"
        },
        {
          "alg" : "SHA-256",
          "content" : "798c85b86e7420d0b4eb91e7b3e37d4bee673c61de37a616ba51a7539631e6b7"
        },
        {
          "alg" : "SHA-512",
          "content" : "9e277537563103f19df34d2e23a9b42b751787b95d60db20294c24efe3d05ad161ee76811fbaeb3995ed66b46667647d7695da5f393494c954a08527aeefc7e3"
        },
        {
          "alg" : "SHA-384",
          "content" : "1d0eaf0449d64b46776afcd311aa6763d96a13eeb7da80776758f6d102ee49c42ee8a861d43d2438ad52cfc02e9b54fa"
        },
        {
          "alg" : "SHA3-384",
          "content" : "a08b144cff5d97a3698a7a8db7dfbd9cb907989e0447cb2ee5a715f6aa2cbd4efaa3af115fa6cd66dc91cb5c49c66578"
        },
        {
          "alg" : "SHA3-256",
          "content" : "3ae4f7aaa3045b1d1826240ad3edf3ee9fcbfe78f014713432fec624fb06f7e1"
        },
        {
          "alg" : "SHA3-512",
          "content" : "04b2fd0a6aa5dbe59b60f1a484af4fb13a2392455a0a32dbd6aef8d1a8574b8fb632510d9e77d844aa3f0987b08cb6203f88e10d29afc0c8607b1b6b481aac30"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.18.9?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/FasterXML/jackson"
        },
        {
          "type" : "distribution",
          "url" : "https://central.sonatype.com/api/v1/publisher"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/FasterXML/jackson-annotations/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/FasterXML/jackson-annotations"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.18.9?type=jar"
    },
    {
      "publisher" : "Apache Software Foundation",
      "group" : "org.apache.hadoop",
      "name" : "hadoop-yarn-common",
      "version" : "2.10.2",
      "description" : "Apache Hadoop Project POM",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "8403df1df0610e28bf038523830586e7"
        },
        {
          "alg" : "SHA-1",
          "content" : "da1720fb74f72c3f85b50c6b2f9029b913360183"
        },
        {
          "alg" : "SHA-256",
          "content" : "5b4c7c2bfeaf083a2404b114ecad84e9a3e69e68bd43945c4dedda20d762869d"
        },
        {
          "alg" : "SHA-512",
          "content" : "86482b1a95a1370cb3f3a40131a57ffc7dc439ea94e784b97e1d0e61ba24d25e3b78e75532a91caf819d94f85292a53d919c7886b7d704a52bb234919ceeb2d2"
        },
        {
          "alg" : "SHA-384",
          "content" : "4f0c0ed73c972395115eb0659dbe64a59fddcf54bee5b9f2597c4b1f900159057f67b44fe4803e230f4293ce1950ebf5"
        },
        {
          "alg" : "SHA3-384",
          "content" : "07db1f5459cda20e836abb1863bb4a49be1dfb1670258ebb0d9a297b276eb6bbe712eba8536b8ad16665b7476485cc92"
        },
        {
          "alg" : "SHA3-256",
          "content" : "0fc4c463e30680135c446e18c57a23074593a4b96d01f447033cfe4fb817cc0e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "872e2fc5ed590a28c570650437f8bf54aefb890d79f2b1b2f7b6ce16e0f37e536f07fb4cee5542478fa52e29bd374f153fe30d3df884b6c60e17ba6db1fc902b"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.hadoop/hadoop-yarn-common@2.10.2?type=jar",
      "externalReferences" : [
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.hadoop/hadoop-yarn-common@2.10.2?type=jar"
    },
    {
      "publisher" : "Apache Software Foundation",
      "group" : "org.apache.hadoop",
      "name" : "hadoop-yarn-api",
      "version" : "2.10.2",
      "description" : "Apache Hadoop Project POM",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "8c59fbf8a9da050f8e1b7d9cf51f38e8"
        },
        {
          "alg" : "SHA-1",
          "content" : "1094aa67b087960aefd4ff885ef057053009eb82"
        },
        {
          "alg" : "SHA-256",
          "content" : "b04b7708eeff04dfec1ce162c3cd37e1525087e7e692b3703b690d6f395e8fb6"
        },
        {
          "alg" : "SHA-512",
          "content" : "1f39c160ed764589a889cdcbced25f62c56fd1c2bbdab23b630325adf8105cce40f6a1da40f7661354aff79a517777a3bef094609e4de6d976d6704380685604"
        },
        {
          "alg" : "SHA-384",
          "content" : "bf69fb00b7e873baa86b551d1175868a8a7c3d2277fce4aaa593262d2b0f347a17768c9ef4846a733036982d7e1fd93d"
        },
        {
          "alg" : "SHA3-384",
          "content" : "e1acc0592b39ac21f528e4ded782823807aa7ca8fc32c470d214679ca301c0d47c7e8f818453b5d58d5b59e34b6a5ec1"
        },
        {
          "alg" : "SHA3-256",
          "content" : "b470523dd41e1d1b738dcec75570797d6530fe113ff4d716836fdd0868a57ef1"
        },
        {
          "alg" : "SHA3-512",
          "content" : "f2397718e82ae005e63c3388522a396f59236989c7bd0ef1274b37e9311e3723dbd7fd82bad84abe89391d0eb7f361f8fbdaf69c07bb0dab7ad19cceaf951bb3"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.hadoop/hadoop-yarn-api@2.10.2?type=jar",
      "externalReferences" : [
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.hadoop/hadoop-yarn-api@2.10.2?type=jar"
    },
    {
      "publisher" : "Oracle Corporation",
      "group" : "javax.xml.bind",
      "name" : "jaxb-api",
      "version" : "2.3.1",
      "description" : "JAXB (JSR 222) API",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "bcf270d320f645ad19f5edb60091e87f"
        },
        {
          "alg" : "SHA-1",
          "content" : "8531ad5ac454cc2deb9d4d32c40c4d7451939b5d"
        },
        {
          "alg" : "SHA-256",
          "content" : "88b955a0df57880a26a74708bc34f74dcaf8ebf4e78843a28b50eae945732b06"
        },
        {
          "alg" : "SHA-512",
          "content" : "93a47b245ab830d664a48c9d14e86198a38809ce94f72ca66b3d68746ae1d7b902f6fef2d1ac1a92c01701549ae80a07db69bd822ffd831a95d8dbffad435790"
        },
        {
          "alg" : "SHA-384",
          "content" : "1eb2d7f307bda8cbf6a4ab5b2b97d830d33ca48ad94eb4bb1cbce860c54fca96285dbcb1ce9b164dbf37d4475f9a198f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "8df7409d3f60888f3a80f4d49af66c2cab6dc9f00e79c87c17703faad19d8ba6c8fc96ad897434170ce2686952921cdd"
        },
        {
          "alg" : "SHA3-256",
          "content" : "41338683257d5ecead579ccc137bdef7bc4fea685d039a3d894e1d6730425e1d"
        },
        {
          "alg" : "SHA3-512",
          "content" : "3371a96171f69876b0e6b8354674d252680e6d52c509a2645b1a0b0d7f9e176274bde6c89edb40986264733ffb6794cb7b2cba417666b1e82075bd4fd51197b6"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "CDDL-1.1"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl" : "pkg:maven/javax.xml.bind/jaxb-api@2.3.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/javaee/jaxb-spec/jaxb-api"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.java.net/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/javaee/jaxb-spec/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/javaee/jaxb-spec.git/jaxb-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/javax.xml.bind/jaxb-api@2.3.1?type=jar"
    },
    {
      "publisher" : "Oracle",
      "group" : "javax.activation",
      "name" : "javax.activation-api",
      "version" : "1.2.0",
      "description" : "JavaBeans Activation Framework API jar",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "5e50e56bcf4a3ef3bc758f69f7643c3b"
        },
        {
          "alg" : "SHA-1",
          "content" : "85262acf3ca9816f9537ca47d5adeabaead7cb16"
        },
        {
          "alg" : "SHA-256",
          "content" : "43fdef0b5b6ceb31b0424b208b930c74ab58fac2ceeb7b3f6fd3aeb8b5ca4393"
        },
        {
          "alg" : "SHA-512",
          "content" : "8ee0db43ae402f0079a836ef2bff5d15160e3ff9d585c3283f4cf474be4edd2fcc8714d8f032efd72cae77ec5f6d304fc24fa094d9cdba5cf72966cc964af6c9"
        },
        {
          "alg" : "SHA-384",
          "content" : "d38a6af7ed00f13de8b46d49b9592af9b67adf3df47ddae5e4672f989f3f39101d446a77d1c11319acf8ff0a5b4feedf"
        },
        {
          "alg" : "SHA3-384",
          "content" : "cfee76de5976d5994758a06113368092f09b0729d753b99969d6a5ec32919428bd7c270c98cbbc682ff8ebcf2b93fd8d"
        },
        {
          "alg" : "SHA3-256",
          "content" : "aff48d0f28d8a99690c5a84c3fffdb3775452d5387e5698f4c9028c92a3b4888"
        },
        {
          "alg" : "SHA3-512",
          "content" : "0507ece74b3147de60a830071bd434569c82e03f414a2b7f0d8a225dda36720d2e2194799cdc04def1909fdec21059b67c518bb9162f7f605764d542194e721d"
        }
      ],
      "licenses" : [
        {
          "expression" : "(CDDL-1.0 OR GPL-2.0-with-classpath-exception)"
        }
      ],
      "purl" : "pkg:maven/javax.activation/javax.activation-api@1.2.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://java.net/all/javax.activation-api/"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.java.net/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/javaee/activation/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/javaee/activation/javax.activation-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/javax.activation/javax.activation-api@1.2.0?type=jar"
    },
    {
      "publisher" : "Oracle Corporation",
      "group" : "com.sun.jersey",
      "name" : "jersey-client",
      "version" : "1.9",
      "description" : "Jersey is the open source (under dual CDDL+GPL license) JAX-RS (JSR 311) production quality Reference Implementation for building RESTful Web services.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "cdbba85f9cb7ce5e0ca51d610f0228e9"
        },
        {
          "alg" : "SHA-1",
          "content" : "d3c4b2b5f89db32c96ceddcb863684821910a7bb"
        },
        {
          "alg" : "SHA-256",
          "content" : "8ae03af0d06c46a51b65d123ec40f245da690991aa3669cef4767db8f36fbe68"
        },
        {
          "alg" : "SHA-512",
          "content" : "06e4c88de3491fabc0db7b46e17a7fb234be00dc9e05409f390da914b9362621af6d24380f24a1b9f6992808ec5af0382ea7658acc7f98437e8da8ad650899f6"
        },
        {
          "alg" : "SHA-384",
          "content" : "1927620343cf270e0afdc4187f9f8d856dc0fd3bae3a871fa267a3b3ae14b65ed4a22d813309716d496a005032f98895"
        },
        {
          "alg" : "SHA3-384",
          "content" : "6766e40eb40bdd158414d0b8f70d0bdd89d92a1a4d8eda37ef73cfde1880ca03c55d03886677727c271a901bd2250c1f"
        },
        {
          "alg" : "SHA3-256",
          "content" : "89d6e7452bfbaf2c36363eec77091d9d1f33ad57e20978d14cbed226fd97c4ba"
        },
        {
          "alg" : "SHA3-512",
          "content" : "3129128fda98767ddabfa3a45af990eb6ed0ff44a4e3acd542a8b6c510a5b3b836e53afbdc5e0939c84d9e177fbe2ff81ee5b54cca0b6e82d2ac0e249b76fb25"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "CDDL-1.1"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl" : "pkg:maven/com.sun.jersey/jersey-client@1.9?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://jersey.java.net/jersey-client/"
        },
        {
          "type" : "build-system",
          "url" : "http://hudson.glassfish.org/job/Jersey-trunk-multiplatform/"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.java.net/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://java.net/jira/browse/JERSEY/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://java.net/projects/jersey/lists/users/archive"
        },
        {
          "type" : "vcs",
          "url" : "http://java.net/projects/jersey/sources/svn/show/trunk/jersey/jersey-client"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.sun.jersey/jersey-client@1.9?type=jar"
    },
    {
      "publisher" : "FasterXML",
      "group" : "org.codehaus.jackson",
      "name" : "jackson-jaxrs",
      "version" : "1.9.13",
      "description" : "Jax-RS provider for JSON content type, based on Jackson JSON processor's data binding functionality.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "8481e1904d9bfe974157a6af04b4445e"
        },
        {
          "alg" : "SHA-1",
          "content" : "534d72d2b9d6199dd531dfb27083dd4844082bba"
        },
        {
          "alg" : "SHA-256",
          "content" : "1770570a6ba5c87a4795c0aeb40ee7c5fe5e31df64ef1d4795a0d427796b84bb"
        },
        {
          "alg" : "SHA-512",
          "content" : "9163284c2e06575f3be10a5dba476fa7905273546e1b524571de5cdeb02c34627cecde2408a6417725344e3f5e6844596f0dce30d07dba5b31d7bc50c0e4f741"
        },
        {
          "alg" : "SHA-384",
          "content" : "abfab565c15d170c75889a4a202466427f9eedbbce15c5fde5c3e0fc5a0b80cfc1bcc5ec77ed5696a73b0ae70f247936"
        },
        {
          "alg" : "SHA3-384",
          "content" : "9776bdb98292662239a42c7ff86aa300364ac19bcc56b337bb910ccced2e4b15d23dcdf026e6726c918ac7799c4c341d"
        },
        {
          "alg" : "SHA3-256",
          "content" : "0959d3d6202b71e1da21cfd6b190e818191fe858234bd70aa82a130b174187d4"
        },
        {
          "alg" : "SHA3-512",
          "content" : "d1becbe74f3ca24db47223beb4641076734f86b1625666677c0fcb8b55b68bd37f3768a1440bec783aa61083faa0adf299a35beb24494874bc3da838a2d6c1cc"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        },
        {
          "license" : {
            "name" : "GNU Lesser General Public License (LGPL), Version 2.1",
            "url" : "http://www.fsf.org/licensing/licenses/lgpl.txt"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.jackson/jackson-jaxrs@1.9.13?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://jackson.codehaus.org"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://jira.codehaus.org/browse/JACKSON"
        },
        {
          "type" : "vcs",
          "url" : "http://xircles.codehaus.org/projects/jackson/repos/primary/repo"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.jackson/jackson-jaxrs@1.9.13?type=jar"
    },
    {
      "publisher" : "FasterXML",
      "group" : "org.codehaus.jackson",
      "name" : "jackson-xc",
      "version" : "1.9.13",
      "description" : "Extensions that provide interoperability support for Jackson JSON processor's data binding functionality.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "49f6a735bae30745dcf5ecec27090720"
        },
        {
          "alg" : "SHA-1",
          "content" : "e3480072bc95c202476ffa1de99ff7ee9149f29c"
        },
        {
          "alg" : "SHA-256",
          "content" : "2d2905fcec7d1c55b775995617685dbb03672350704d9e40b492eab5b54d0be7"
        },
        {
          "alg" : "SHA-512",
          "content" : "09a043d9eb469842622636d3814b474af7c74ea3e3e88c9f44ac752c2d14eac4aa4d5bb96e8c8672d445e562d6043bcf484417ee8ef3381279150c00c8fcaf2d"
        },
        {
          "alg" : "SHA-384",
          "content" : "7a806e3d31eb7b0d3342a74816299f18a7d416a7e16cda479ed9ee6d830c0feae5c183d38e336dc452a0045a8c9e065c"
        },
        {
          "alg" : "SHA3-384",
          "content" : "7dbba9062e67edb9233f8a7eeaa4c99883d312245e28e8c78b604a13f7fe5ae6b4ffb26c0c53cced9829de314f940f0d"
        },
        {
          "alg" : "SHA3-256",
          "content" : "faecbad55c02deb233abcb53e5aed9b92d966c8b104d8cc0d21cbdf2c43c8dc3"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c63a14f3c3a23bfe9a6a52668865ec00437e1282d6813f931499f18282271389471c8132ec98c3704a9fcfffcc5694d9f4b529b75173dcec9650ede98f4da555"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        },
        {
          "license" : {
            "name" : "GNU Lesser General Public License (LGPL), Version 2.1",
            "url" : "http://www.fsf.org/licensing/licenses/lgpl.txt"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.jackson/jackson-xc@1.9.13?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://jackson.codehaus.org"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://jira.codehaus.org/browse/JACKSON"
        },
        {
          "type" : "vcs",
          "url" : "http://xircles.codehaus.org/projects/jackson/repos/primary/repo"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.jackson/jackson-xc@1.9.13?type=jar"
    },
    {
      "publisher" : "Google, Inc.",
      "group" : "com.google.inject.extensions",
      "name" : "guice-servlet",
      "version" : "3.0",
      "description" : "Guice is a lightweight dependency injection framework for Java 5 and above",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "c9f66a5f6a0d840d9057b30853f25b85"
        },
        {
          "alg" : "SHA-1",
          "content" : "610cde0e8da5a8b7d8efb8f0b8987466ffebaaf9"
        },
        {
          "alg" : "SHA-256",
          "content" : "9e72a4b8582888d53c2f4297e93276a3c14c82880124490f2da7b16a9df1c618"
        },
        {
          "alg" : "SHA-512",
          "content" : "c9325bf3c317e820babb080b5e2453e8d08cd40b74528b38da2f63bdc2464c3209ed5f5af8d163a21c0424e1bf1252f28c9915b4591aaa864881e8ed452ec3fa"
        },
        {
          "alg" : "SHA-384",
          "content" : "1e9ee84a7d00b8a8d8a914242a1232104f594cab49d536ea3e053d0111013818171a37508ce4798af6cfc67e839fe67e"
        },
        {
          "alg" : "SHA3-384",
          "content" : "966fa9306972b30652d705937f231495c557db8c7d8a257604d03c8a30c1e3cf1ba47bb5e1ce16f684a34a21baad211c"
        },
        {
          "alg" : "SHA3-256",
          "content" : "1c07971a2d8e674756e12fb278eb873f99e571edbcb7481250befd603ef2ff22"
        },
        {
          "alg" : "SHA3-512",
          "content" : "030c11333f82540848416678abd8d09e6ea6e3826110c7130ed6d8f1ada1c816bf930b05eba4b3ab3cd4dc10a4068d78dae04f6ecb0ae383de2a9e7f9c131136"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.inject.extensions/guice-servlet@3.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://code.google.com/p/google-guice/extensions-parent/guice-servlet/"
        },
        {
          "type" : "build-system",
          "url" : "https://grid.sonatype.org/ci/job/Google-Guice/"
        },
        {
          "type" : "distribution",
          "url" : "http://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://code.google.com/p/google-guice/issues/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://groups.google.com/group/google-guice/topics"
        },
        {
          "type" : "vcs",
          "url" : "http://code.google.com/p/google-guice/source/browse/extensions-parent/guice-servlet"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.inject.extensions/guice-servlet@3.0?type=jar"
    },
    {
      "publisher" : "Google, Inc.",
      "group" : "com.google.inject",
      "name" : "guice",
      "version" : "3.0",
      "description" : "Guice is a lightweight dependency injection framework for Java 5 and above",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "ca1c7ba366884cfcd2cfb48d2395c400"
        },
        {
          "alg" : "SHA-1",
          "content" : "9d84f15fe35e2c716a02979fb62f50a29f38aefa"
        },
        {
          "alg" : "SHA-256",
          "content" : "1a59d0421ffd355cc0b70b42df1c2e9af744c8a2d0c92da379f5fca2f07f1d22"
        },
        {
          "alg" : "SHA-512",
          "content" : "8695045803e3d391a427c57573ebea1af880f68d312014e156b977e5b6fa73cd327fe49dbc218e62c1d1e7bd4940bae454cd78c6ff60bad7e3620f66ea0dafbf"
        },
        {
          "alg" : "SHA-384",
          "content" : "f32bd5aaa4ebcda4843bc3aaaad127740d0c810a729cef2b3e8a4d3974f1e130860de52936b97177cf55bd6267718705"
        },
        {
          "alg" : "SHA3-384",
          "content" : "53ce163405f251b5704e60e12275c9f838cd9a79c09b7416506e40831babbff2a5e0686beec75a94277a457ac7532093"
        },
        {
          "alg" : "SHA3-256",
          "content" : "25d02cb8d2f3528c778f1d76c0843d8aa1ee6d9248865a208cce035f685e4f93"
        },
        {
          "alg" : "SHA3-512",
          "content" : "2130aeb71bdc9fa74cd9bf3f4e2726443140b4284567c261897bfd458b6868a22a87a67a63da7e4039916a664d0bd32b629a609f1ce339d58cc61bfb20eb728f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.inject/guice@3.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://code.google.com/p/google-guice/guice/"
        },
        {
          "type" : "build-system",
          "url" : "https://grid.sonatype.org/ci/job/Google-Guice/"
        },
        {
          "type" : "distribution",
          "url" : "http://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://code.google.com/p/google-guice/issues/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://groups.google.com/group/google-guice/topics"
        },
        {
          "type" : "vcs",
          "url" : "http://code.google.com/p/google-guice/source/browse/guice"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.inject/guice@3.0?type=jar"
    },
    {
      "group" : "javax.inject",
      "name" : "javax.inject",
      "version" : "1",
      "description" : "The javax.inject API",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "289075e48b909e9e74e6c915b3631d2e"
        },
        {
          "alg" : "SHA-1",
          "content" : "6975da39a7040257bd51d21a231b76c915872d38"
        },
        {
          "alg" : "SHA-256",
          "content" : "91c77044a50c481636c32d916fd89c9118a72195390452c81065080f957de7ff"
        },
        {
          "alg" : "SHA-512",
          "content" : "e126b7ccf3e42fd1984a0beef1004a7269a337c202e59e04e8e2af714280d2f2d8d2ba5e6f59481b8dcd34aaf35c966a688d0b48ec7e96f102c274dc0d3b381e"
        },
        {
          "alg" : "SHA-384",
          "content" : "ac04c9f03ccbe35a25deb8b50280a0ca01dbe6aff0dd795d55af6112bfe3cd5817eb82f32fb18378d86cd64b07597190"
        },
        {
          "alg" : "SHA3-384",
          "content" : "fca090ecb1edeacb9fe865dc515cd1d109b323cd742d4a9733ff199a96ee96e0db4f924079520b9c189ef750f255475d"
        },
        {
          "alg" : "SHA3-256",
          "content" : "5b0054e39e522de0e0ffc4034d12f72270291fb24d94d5ffc9c4d69c25035fc6"
        },
        {
          "alg" : "SHA3-512",
          "content" : "fb290f5a70b1efc1dff12f40a0b2d7b94019f66da42e78010c0b8e61f222c4f267b67e356a9e9c346eb801e5515e36243888f280c5cb95c2dd69016a30cadeb9"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/javax.inject/javax.inject@1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://code.google.com/p/atinject/"
        },
        {
          "type" : "vcs",
          "url" : "http://code.google.com/p/atinject/source/checkout"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/javax.inject/javax.inject@1?type=jar"
    },
    {
      "group" : "aopalliance",
      "name" : "aopalliance",
      "version" : "1.0",
      "description" : "AOP Alliance",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "04177054e180d09e3998808efa0401c7"
        },
        {
          "alg" : "SHA-1",
          "content" : "0235ba8b489512805ac13a8f9ea77a1ca5ebe3e8"
        },
        {
          "alg" : "SHA-256",
          "content" : "0addec670fedcd3f113c5c8091d783280d23f75e3acb841b61a9cdb079376a08"
        },
        {
          "alg" : "SHA-512",
          "content" : "3f44a932d8c00cfeee2eb057bcd7c301a2d029063e0a916e1e20b3aec4877d19d67a2fd8aaf58fa2d5a00133d1602128a7f50912ffb6cabc7b0fdc7fbda3f8a1"
        },
        {
          "alg" : "SHA-384",
          "content" : "4dddf44338b5aff9580da2532b81c0ac3e1d09e1f28c6db871a55cad442b705dd7791eb07f9d4577d49d0be3673ba783"
        },
        {
          "alg" : "SHA3-384",
          "content" : "2bd64cbaf769c6e4e85e34f7a6119d89e16fbf55af3fc5d6cbd52eb214c367dec1ac7b9062ee0fb35a2e0acfc7c477e1"
        },
        {
          "alg" : "SHA3-256",
          "content" : "d4a726b2bf8aa58197021a7d8fca674b4b2790d4c48de43a92f728866a91c2f0"
        },
        {
          "alg" : "SHA3-512",
          "content" : "830bc3f8328be76897990e9b9fc42eef02623115e456af96ad09b20900ad615519c8c8de60155ac04fb332eaa9510110d52edd13911af76271c71d91cbd789cc"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "Public Domain"
          }
        }
      ],
      "purl" : "pkg:maven/aopalliance/aopalliance@1.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://aopalliance.sourceforge.net"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/aopalliance/aopalliance@1.0?type=jar"
    },
    {
      "publisher" : "Oracle Corporation",
      "group" : "com.sun.jersey.contribs",
      "name" : "jersey-guice",
      "version" : "1.9",
      "description" : "Projects that provide additional functionality to jersey, like integration with other projects/frameworks.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a81140d246f420c1e2eabe649417c5b1"
        },
        {
          "alg" : "SHA-1",
          "content" : "5963c28c47df7e5d6ad34cec80c071c368777f7b"
        },
        {
          "alg" : "SHA-256",
          "content" : "544fc92d2625332a9a8eeaa7a7274cf1af6703936a50afa80d92a78200a7de34"
        },
        {
          "alg" : "SHA-512",
          "content" : "e0378d72c15fc74bb7b575fe444ba5d0ca205ebb22868ed44f01d0f64b3bc55f8fb10491575abce0986a05b70546089f7e90d8ab399b5fd5cf70270fe6cb32c1"
        },
        {
          "alg" : "SHA-384",
          "content" : "c331b2f942b90654c1b2bef206a0b9a54f670c101aaed4e28e0411e6db1bfbe11c4ef32a0485e19ed7b5dd1e48d569dd"
        },
        {
          "alg" : "SHA3-384",
          "content" : "79c420d2150fae631700907833fd180990596d77a4bab0c0fd2380f9693cb4a60955da5a1b353ef39e15667afee513f3"
        },
        {
          "alg" : "SHA3-256",
          "content" : "eec6de76468b9e90e91c581f31992adf37723639d41ef7350dc0129eeba7cd23"
        },
        {
          "alg" : "SHA3-512",
          "content" : "5bbea5bcb9e290999733ca5fd0d18b3c4878f9c4d8052feff9414369cec9dbeb28deee2cae3336573e30657e35f3e03f3caa885fc058cae0ace890f4ddc4ff6f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "CDDL-1.1"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl" : "pkg:maven/com.sun.jersey.contribs/jersey-guice@1.9?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://jersey.java.net/jersey-contribs/jersey-guice/"
        },
        {
          "type" : "build-system",
          "url" : "http://hudson.glassfish.org/job/Jersey-trunk-multiplatform/"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.java.net/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://java.net/jira/browse/JERSEY/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://java.net/projects/jersey/lists/users/archive"
        },
        {
          "type" : "vcs",
          "url" : "http://java.net/projects/jersey/sources/svn/show/trunk/jersey/jersey-contribs/jersey-guice"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.sun.jersey.contribs/jersey-guice@1.9?type=jar"
    },
    {
      "publisher" : "Apache Software Foundation",
      "group" : "org.apache.hadoop",
      "name" : "hadoop-yarn-client",
      "version" : "2.10.2",
      "description" : "Apache Hadoop Project POM",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e336518a208caaa4061678428a39bab6"
        },
        {
          "alg" : "SHA-1",
          "content" : "19ac5a1ef4eed5327ba92f9d6ff513f1bfa4d047"
        },
        {
          "alg" : "SHA-256",
          "content" : "2055ad9335203e68c990788d09aebd0ff047dbd03ff7ee5a0126170fda534847"
        },
        {
          "alg" : "SHA-512",
          "content" : "ed7597e9d48e3ed14e769ad8e17b259e22ef8962c63e0a57ed21f764f29051a3a6e31b28325e083d0d531e2660e9a11987b141170ee30aa165eda49484c9722f"
        },
        {
          "alg" : "SHA-384",
          "content" : "f41ca628ca42c3084087fdfc0123695e9820f0dcea75c5356a13fbd32638612d0188aefbc4aa4e9108d858f9a7e94195"
        },
        {
          "alg" : "SHA3-384",
          "content" : "13d4b856b099d38e80caaf8b228407f0b4de02c91a95469b3ce0546f2da59f5c65261f1435d019525ea1e53a0cff19c9"
        },
        {
          "alg" : "SHA3-256",
          "content" : "5431b9d8c11b9479307d4a65dfb53b6682c4440ed9b665809dd7b0d7ae06e560"
        },
        {
          "alg" : "SHA3-512",
          "content" : "4f610afe92675e3aa6a33d7fa77222516455ddda03bf440facd7c833b2cd9d32017c970c2a6eeb85b3b75dfa7888e3fc25433e960cd1334b154f3d61e1bd8468"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.hadoop/hadoop-yarn-client@2.10.2?type=jar",
      "externalReferences" : [
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.hadoop/hadoop-yarn-client@2.10.2?type=jar"
    },
    {
      "publisher" : "Apache Software Foundation",
      "group" : "org.apache.hadoop",
      "name" : "hadoop-mapreduce-client-core",
      "version" : "2.10.2",
      "description" : "Apache Hadoop Project POM",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "dd27528b7eb179b35d725b11472a5421"
        },
        {
          "alg" : "SHA-1",
          "content" : "049f28d5dd3261273a407176437240f09b848729"
        },
        {
          "alg" : "SHA-256",
          "content" : "0bc0c95543d45ca5b64ecfb49ad7d9c5409ec3c922ef4a0374686e7c626c5312"
        },
        {
          "alg" : "SHA-512",
          "content" : "208b758ae8fa6fca4120e24d4ee685034847bce7c9ac9056d69835ecfafa33b576838e8cee26400615f30ea37d8dd4b82c1d9ec5f7331c49d63d38b0ffc96df1"
        },
        {
          "alg" : "SHA-384",
          "content" : "140aa4e4ed0050a38b82f59de56acd99a7219ef0a373ec5fa24c97f9905580d0a046a3874b4b3365a503597b52e51470"
        },
        {
          "alg" : "SHA3-384",
          "content" : "f2bfc34f640cc717c06b1ff062acc9987b83cc7d844cdc3df18013db856034d81e650e34e94164c7ad20613ddfa2a18f"
        },
        {
          "alg" : "SHA3-256",
          "content" : "d96ae3026b2c03f7e00e785a232dd64ad7d6172a8a24166a8562c363102f3b6e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "237b20feed9e003d0ac54950c98baa0a4a98440c7ea85c265ff9aa1612ffacc58dea45f985490eccaa225dc0f0c51744769d7a8e68565f2106eb3abc2f10168d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.hadoop/hadoop-mapreduce-client-core@2.10.2?type=jar",
      "externalReferences" : [
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.hadoop/hadoop-mapreduce-client-core@2.10.2?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "io.confluent.flink.shaded",
      "name" : "flink-shaded-force-shading",
      "version" : "20.0-cp3",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "703852a2a4f9bbd6ab3cd717774ead30"
        },
        {
          "alg" : "SHA-1",
          "content" : "e8a1205b878f171b60e6c96acfd7e7695f52d5fb"
        },
        {
          "alg" : "SHA-256",
          "content" : "ec8cc080e167fd165babaa88606a44d56f8dfe96988254e14cbdc4bc61c17959"
        },
        {
          "alg" : "SHA-512",
          "content" : "4108f6a343fc972707fe1c940216f630c39959e417f821321455def20376f2aee1797657cbd69f0eb9c5f5cca9f82297c4736feb67a08a192995924b8e5422cd"
        },
        {
          "alg" : "SHA-384",
          "content" : "1797cfbe9f315123e1c9104cd28ff2a0f283db2185a150200e81e16c4f3bf2a933d54855fb29e7b3c95f79b228768233"
        },
        {
          "alg" : "SHA3-384",
          "content" : "855d9938f3b14033fbb61de1679d0f452f40014ffc5f0a662a177d6469136d2df5c47496a02856c697a4b8672528f866"
        },
        {
          "alg" : "SHA3-256",
          "content" : "2670a0179eff2c71dab16f02c43066c937a145a25f172eb730f761e9ed2c7a18"
        },
        {
          "alg" : "SHA3-512",
          "content" : "a163da1cd000206420fe01d6cdf5df50925d65934cefb3c4e0329bfd47813ef2ba58f0cab563bac68ad054158227aa1f2a04cc8c3ab008455c21d573aedd6e21"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent.flink.shaded/flink-shaded-force-shading@20.0-cp3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://flink.apache.org/flink-shaded-force-shading"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink-shaded/flink-shaded-force-shading"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.flink.shaded/flink-shaded-force-shading@20.0-cp3?type=jar"
    },
    {
      "publisher" : "QOS.ch",
      "group" : "org.slf4j",
      "name" : "slf4j-api",
      "version" : "1.7.36",
      "description" : "The slf4j API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "872da51f5de7f3923da4de871d57fd85"
        },
        {
          "alg" : "SHA-1",
          "content" : "6c62681a2f655b49963a5983b8b0950a6120ae14"
        },
        {
          "alg" : "SHA-256",
          "content" : "d3ef575e3e4979678dc01bf1dcce51021493b4d11fb7f1be8ad982877c16a1c0"
        },
        {
          "alg" : "SHA-512",
          "content" : "f9b033fc019a44f98b16048da7e2b59edd4a6a527ba60e358f65ab88e0afae03a9340f1b3e8a543d49fa542290f499c5594259affa1ff3e6e7bf3b428d4c610b"
        },
        {
          "alg" : "SHA-384",
          "content" : "2b14ad035877087157e379d3277dcdcd79e58d6bdb147c47d29e377d75ce53ad42cafbf22f5fb7827c7e946ff4876b9a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "3bc3110dafb8d5be16a39f3b2671a466463cd99eb39610c0e4719a7bf2d928f2ea213c734887c6926a07c4cca7769e4b"
        },
        {
          "alg" : "SHA3-256",
          "content" : "ba2608179fcf46e2291a90b9cbb4aa30d718e481f59c350cc21c73b88d826881"
        },
        {
          "alg" : "SHA3-512",
          "content" : "14c4edcd19702ef607d78826839d8a6d3a39157df54b89a801d3d3cbbe1307131a77671b041c761122730fb1387888c5ec2e46bdd80e1cb07f8f144676441824"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.slf4j.org"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/qos-ch/slf4j/slf4j-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
    },
    {
      "group" : "com.google.code.findbugs",
      "name" : "jsr305",
      "version" : "1.3.9",
      "description" : "JSR305 Annotations for Findbugs",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1d5a772e400b04bb67a7ef4a0e0996d8"
        },
        {
          "alg" : "SHA-1",
          "content" : "40719ea6961c0cb6afaeb6a921eaa1f6afd4cfdf"
        },
        {
          "alg" : "SHA-256",
          "content" : "905721a0eea90a81534abb7ee6ef4ea2e5e645fa1def0a5cd88402df1b46c9ed"
        },
        {
          "alg" : "SHA-512",
          "content" : "06da282cfd8e30d9f8cf17702b8709172b00e22b75a627a1d85f8989615b8a1a401bc25d9aee7b14aed1d9b5df73bf2ea8d66f9c8468d9577c29f0ccfa2cc70a"
        },
        {
          "alg" : "SHA-384",
          "content" : "56e6b41ef62eb5edfed0203802cefae9c2df86388148e420bb0c687abb2b80e14d5c2a82d5b35dce4badaf148f94eada"
        },
        {
          "alg" : "SHA3-384",
          "content" : "58c3bf89fa1afa75c2c5078159fd28e27b2273d437f26aaaa7391310b6f0823f3cf476a24f5631c0881f3f7e946d99be"
        },
        {
          "alg" : "SHA3-256",
          "content" : "c333ea5faedfa78e0614a2620438d5724eab093df4e960918391b6a44c2915b0"
        },
        {
          "alg" : "SHA3-512",
          "content" : "67ec31448e156cc72dd036060b460bb2667a13b1cbe500b6b7eed3235b1994b44c39f440ebd07b21ec9595b166ad61121d4f6a132b5b313c558ab21b72599425"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://findbugs.sourceforge.net/"
        },
        {
          "type" : "vcs",
          "url" : "http://findbugs.googlecode.com/svn/trunk/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"
    },
    {
      "publisher" : "Joe Walnes, Henri Tremblay, Leonardo Mesquita",
      "group" : "org.objenesis",
      "name" : "objenesis",
      "version" : "3.4",
      "description" : "A library for instantiating Java objects",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "51242320cb2bb25a3f36e2e21fa87de0"
        },
        {
          "alg" : "SHA-1",
          "content" : "675cbe121a68019235d27f6c34b4f0ac30e07418"
        },
        {
          "alg" : "SHA-256",
          "content" : "95488102feaf2e2858adf6b299353677dac6c15294006f8ed1c5556f8e3cd251"
        },
        {
          "alg" : "SHA-512",
          "content" : "951a01075a5462cc989b8d8fb1b7089848eb825ee4e563bab139f121f5f515fbb5cf2ac607a5528cbd3929e610910113346956a4448fa39bf41fd8147e5eac6f"
        },
        {
          "alg" : "SHA-384",
          "content" : "8865ca08b684b72d9dcb620f01974022d864e8e5e0e4b469287bf4720536ee51735f29c7f05da563c967e1e2f1c52589"
        },
        {
          "alg" : "SHA3-384",
          "content" : "730526cb3490fdb1770264395afdc3782fd3397617582dde8bc2807512672f624e2f5b2206d9f615524b92ccdfba191a"
        },
        {
          "alg" : "SHA3-256",
          "content" : "f22667e2f7f0f86b48015d3995e3edbec9e81929c6860e9af1063c629a114ae2"
        },
        {
          "alg" : "SHA3-512",
          "content" : "465202eb4e341003b66a38a36d676656d17adf66267dc87cfbc6bcd6ee6fd3914423160e01c38d3f505c7f358674dd9e9f08dd7df73196f04e56cae01d4fe91e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.objenesis/objenesis@3.4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://objenesis.org/objenesis"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/easymock/objenesis/objenesis"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.objenesis/objenesis@3.4?type=jar"
    }
  ],
  "dependencies" : [
    {
      "ref" : "pkg:maven/io.confluent.flink/flink-yarn@2.0.2-cp4?type=jar",
      "dependsOn" : [
        "pkg:maven/io.confluent.flink/flink-runtime@2.0.2-cp4?type=jar",
        "pkg:maven/io.confluent.flink/flink-clients@2.0.2-cp4?type=jar",
        "pkg:maven/org.apache.hadoop/hadoop-common@2.10.2?type=jar",
        "pkg:maven/org.apache.hadoop/hadoop-hdfs@2.10.2?type=jar",
        "pkg:maven/org.apache.hadoop/hadoop-yarn-common@2.10.2?type=jar",
        "pkg:maven/org.apache.hadoop/hadoop-yarn-client@2.10.2?type=jar",
        "pkg:maven/org.apache.hadoop/hadoop-mapreduce-client-core@2.10.2?type=jar",
        "pkg:maven/io.confluent.flink.shaded/flink-shaded-force-shading@20.0-cp3?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.confluent.flink/flink-runtime@2.0.2-cp4?type=jar",
      "dependsOn" : [
        "pkg:maven/io.confluent.flink/flink-datastream-api@2.0.2-cp4?type=jar",
        "pkg:maven/io.confluent.flink/flink-core@2.0.2-cp4?type=jar",
        "pkg:maven/io.confluent.flink/flink-rpc-core@2.0.2-cp4?type=jar",
        "pkg:maven/io.confluent.flink/flink-rpc-akka-loader@2.0.2-cp4?type=jar",
        "pkg:maven/io.confluent.flink/flink-queryable-state-client-java@2.0.2-cp4?type=jar",
        "pkg:maven/io.confluent.flink/flink-hadoop-fs@2.0.2-cp4?type=jar",
        "pkg:maven/commons-io/commons-io@2.15.1?type=jar",
        "pkg:maven/io.confluent.flink.shaded/flink-shaded-netty@4.1.136.Final-20.0-cp3?type=jar",
        "pkg:maven/org.apache.flink/flink-shaded-guava@32.1.3-jre-19.0?type=jar",
        "pkg:maven/io.confluent.flink.shaded/flink-shaded-jackson@2.18.10-20.0-cp3?type=jar",
        "pkg:maven/io.confluent.flink.shaded/flink-shaded-zookeeper-3@3.8.4-20.0-cp3?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar",
        "pkg:maven/io.confluent.flink/flink-connector-datagen@2.0.2-cp4?type=jar",
        "pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar",
        "pkg:maven/commons-cli/commons-cli@1.5.0?type=jar",
        "pkg:maven/org.javassist/javassist@3.24.0-GA?type=jar",
        "pkg:maven/org.xerial.snappy/snappy-java@1.1.10.7?type=jar",
        "pkg:maven/tools.profiler/async-profiler@2.9?type=jar",
        "pkg:maven/at.yawk.lz4/lz4-java@1.11.1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.confluent.flink/flink-datastream-api@2.0.2-cp4?type=jar",
      "dependsOn" : [
        "pkg:maven/io.confluent.flink/flink-core-api@2.0.2-cp4?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.confluent.flink/flink-core-api@2.0.2-cp4?type=jar",
      "dependsOn" : [
        "pkg:maven/io.confluent.flink/flink-annotations@2.0.2-cp4?type=jar",
        "pkg:maven/io.confluent.flink/flink-metrics-core@2.0.2-cp4?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.confluent.flink/flink-annotations@2.0.2-cp4?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.confluent.flink/flink-metrics-core@2.0.2-cp4?type=jar",
      "dependsOn" : [
        "pkg:maven/io.confluent.flink/flink-annotations@2.0.2-cp4?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.confluent.flink/flink-core@2.0.2-cp4?type=jar",
      "dependsOn" : [
        "pkg:maven/io.confluent.flink/flink-core-api@2.0.2-cp4?type=jar",
        "pkg:maven/io.confluent.flink/flink-annotations@2.0.2-cp4?type=jar",
        "pkg:maven/io.confluent.flink.shaded/flink-shaded-asm-9@9.6-20.0-cp3?type=jar",
        "pkg:maven/io.confluent.flink.shaded/flink-shaded-jackson@2.18.10-20.0-cp3?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar",
        "pkg:maven/org.snakeyaml/snakeyaml-engine@2.6?type=jar",
        "pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar",
        "pkg:maven/com.esotericsoftware/kryo@5.6.2?type=jar",
        "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar",
        "pkg:maven/org.apache.commons/commons-compress@1.26.0?type=jar",
        "pkg:maven/org.apache.flink/flink-shaded-guava@32.1.3-jre-19.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.confluent.flink.shaded/flink-shaded-asm-9@9.6-20.0-cp3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.confluent.flink.shaded/flink-shaded-jackson@2.18.10-20.0-cp3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.snakeyaml/snakeyaml-engine@2.6?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.esotericsoftware/kryo@5.6.2?type=jar",
      "dependsOn" : [
        "pkg:maven/com.esotericsoftware/reflectasm@1.11.9?type=jar",
        "pkg:maven/org.objenesis/objenesis@3.4?type=jar",
        "pkg:maven/com.esotericsoftware/minlog@1.3.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.esotericsoftware/reflectasm@1.11.9?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.objenesis/objenesis@3.4?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.esotericsoftware/minlog@1.3.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-compress@1.26.0?type=jar",
      "dependsOn" : [
        "pkg:maven/commons-io/commons-io@2.15.1?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/commons-io/commons-io@2.15.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.flink/flink-shaded-guava@32.1.3-jre-19.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.confluent.flink/flink-rpc-core@2.0.2-cp4?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.confluent.flink/flink-rpc-akka-loader@2.0.2-cp4?type=jar",
      "dependsOn" : [
        "pkg:maven/io.confluent.flink/flink-core@2.0.2-cp4?type=jar",
        "pkg:maven/io.confluent.flink/flink-rpc-core@2.0.2-cp4?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.confluent.flink/flink-queryable-state-client-java@2.0.2-cp4?type=jar",
      "dependsOn" : [
        "pkg:maven/io.confluent.flink.shaded/flink-shaded-netty@4.1.136.Final-20.0-cp3?type=jar",
        "pkg:maven/org.apache.flink/flink-shaded-guava@32.1.3-jre-19.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.confluent.flink.shaded/flink-shaded-netty@4.1.136.Final-20.0-cp3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.confluent.flink/flink-hadoop-fs@2.0.2-cp4?type=jar",
      "dependsOn" : [
        "pkg:maven/io.confluent.flink/flink-core@2.0.2-cp4?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.confluent.flink.shaded/flink-shaded-zookeeper-3@3.8.4-20.0-cp3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.confluent.flink/flink-connector-datagen@2.0.2-cp4?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-cli/commons-cli@1.5.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.javassist/javassist@3.24.0-GA?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.xerial.snappy/snappy-java@1.1.10.7?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/tools.profiler/async-profiler@2.9?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/at.yawk.lz4/lz4-java@1.11.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.confluent.flink/flink-clients@2.0.2-cp4?type=jar",
      "dependsOn" : [
        "pkg:maven/io.confluent.flink/flink-core@2.0.2-cp4?type=jar",
        "pkg:maven/io.confluent.flink/flink-runtime@2.0.2-cp4?type=jar",
        "pkg:maven/commons-cli/commons-cli@1.5.0?type=jar",
        "pkg:maven/io.confluent.flink/flink-streaming-java@2.0.2-cp4?type=jar",
        "pkg:maven/io.confluent.flink/flink-datastream@2.0.2-cp4?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.confluent.flink/flink-streaming-java@2.0.2-cp4?type=jar",
      "dependsOn" : [
        "pkg:maven/io.confluent.flink/flink-core@2.0.2-cp4?type=jar",
        "pkg:maven/io.confluent.flink/flink-file-sink-common@2.0.2-cp4?type=jar",
        "pkg:maven/io.confluent.flink/flink-runtime@2.0.2-cp4?type=jar",
        "pkg:maven/org.apache.flink/flink-shaded-guava@32.1.3-jre-19.0?type=jar",
        "pkg:maven/org.apache.commons/commons-math3@3.6.1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.confluent.flink/flink-file-sink-common@2.0.2-cp4?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-math3@3.6.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.confluent.flink/flink-datastream@2.0.2-cp4?type=jar",
      "dependsOn" : [
        "pkg:maven/io.confluent.flink/flink-datastream-api@2.0.2-cp4?type=jar",
        "pkg:maven/io.confluent.flink/flink-streaming-java@2.0.2-cp4?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.hadoop/hadoop-common@2.10.2?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.hadoop/hadoop-annotations@2.10.2?type=jar",
        "pkg:maven/com.google.guava/guava@11.0.2?type=jar",
        "pkg:maven/commons-cli/commons-cli@1.5.0?type=jar",
        "pkg:maven/org.apache.commons/commons-math3@3.6.1?type=jar",
        "pkg:maven/xmlenc/xmlenc@0.52?type=jar",
        "pkg:maven/org.apache.httpcomponents/httpclient@4.5.13?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.15?type=jar",
        "pkg:maven/commons-io/commons-io@2.15.1?type=jar",
        "pkg:maven/commons-net/commons-net@3.1?type=jar",
        "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar",
        "pkg:maven/javax.servlet/servlet-api@2.5?type=jar",
        "pkg:maven/org.mortbay.jetty/jetty@6.1.26?type=jar",
        "pkg:maven/org.mortbay.jetty/jetty-util@6.1.26?type=jar",
        "pkg:maven/org.mortbay.jetty/jetty-sslengine@6.1.26?type=jar",
        "pkg:maven/javax.servlet.jsp/jsp-api@2.1?type=jar",
        "pkg:maven/com.sun.jersey/jersey-core@1.9?type=jar",
        "pkg:maven/com.sun.jersey/jersey-json@1.9?type=jar",
        "pkg:maven/com.sun.jersey/jersey-server@1.9?type=jar",
        "pkg:maven/commons-logging/commons-logging@1.1.3?type=jar",
        "pkg:maven/net.java.dev.jets3t/jets3t@0.9.0?type=jar",
        "pkg:maven/commons-lang/commons-lang@2.6?type=jar",
        "pkg:maven/commons-configuration/commons-configuration@1.7?type=jar",
        "pkg:maven/commons-digester/commons-digester@1.8?type=jar",
        "pkg:maven/commons-beanutils/commons-beanutils@1.11.0?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/org.codehaus.jackson/jackson-core-asl@1.9.13?type=jar",
        "pkg:maven/org.codehaus.jackson/jackson-mapper-asl@1.9.13?type=jar",
        "pkg:maven/org.apache.avro/avro@1.11.5?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java@2.5.0?type=jar",
        "pkg:maven/com.google.code.gson/gson@2.10.1?type=jar",
        "pkg:maven/org.apache.hadoop/hadoop-auth@2.10.2?type=jar",
        "pkg:maven/com.jcraft/jsch@0.1.55?type=jar",
        "pkg:maven/org.apache.curator/curator-client@2.13.0?type=jar",
        "pkg:maven/org.apache.curator/curator-recipes@2.13.0?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar",
        "pkg:maven/org.apache.htrace/htrace-core4@4.1.0-incubating?type=jar",
        "pkg:maven/org.apache.zookeeper/zookeeper@3.8.4?type=jar",
        "pkg:maven/org.apache.commons/commons-compress@1.26.0?type=jar",
        "pkg:maven/com.fasterxml.woodstox/woodstox-core@5.4.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.hadoop/hadoop-annotations@2.10.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.guava/guava@11.0.2?type=jar",
      "dependsOn" : [
        "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/xmlenc/xmlenc@0.52?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.httpcomponents/httpclient@4.5.13?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.httpcomponents/httpcore@4.4.14?type=jar",
        "pkg:maven/commons-logging/commons-logging@1.1.3?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.15?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.httpcomponents/httpcore@4.4.14?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-logging/commons-logging@1.1.3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-codec/commons-codec@1.15?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-net/commons-net@3.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/javax.servlet/servlet-api@2.5?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.mortbay.jetty/jetty@6.1.26?type=jar",
      "dependsOn" : [
        "pkg:maven/org.mortbay.jetty/jetty-util@6.1.26?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.mortbay.jetty/jetty-util@6.1.26?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.mortbay.jetty/jetty-sslengine@6.1.26?type=jar",
      "dependsOn" : [
        "pkg:maven/org.mortbay.jetty/jetty@6.1.26?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/javax.servlet.jsp/jsp-api@2.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.sun.jersey/jersey-core@1.9?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.sun.jersey/jersey-json@1.9?type=jar",
      "dependsOn" : [
        "pkg:maven/org.codehaus.jettison/jettison@1.1?type=jar",
        "pkg:maven/com.sun.xml.bind/jaxb-impl@2.2.3-1?type=jar",
        "pkg:maven/org.codehaus.jackson/jackson-core-asl@1.9.13?type=jar",
        "pkg:maven/org.codehaus.jackson/jackson-mapper-asl@1.9.13?type=jar",
        "pkg:maven/org.codehaus.jackson/jackson-jaxrs@1.9.13?type=jar",
        "pkg:maven/org.codehaus.jackson/jackson-xc@1.9.13?type=jar",
        "pkg:maven/com.sun.jersey/jersey-core@1.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.jettison/jettison@1.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.sun.xml.bind/jaxb-impl@2.2.3-1?type=jar",
      "dependsOn" : [
        "pkg:maven/javax.xml.bind/jaxb-api@2.3.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/javax.xml.bind/jaxb-api@2.3.1?type=jar",
      "dependsOn" : [
        "pkg:maven/javax.activation/javax.activation-api@1.2.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/javax.activation/javax.activation-api@1.2.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.jackson/jackson-core-asl@1.9.13?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.jackson/jackson-mapper-asl@1.9.13?type=jar",
      "dependsOn" : [
        "pkg:maven/org.codehaus.jackson/jackson-core-asl@1.9.13?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.jackson/jackson-jaxrs@1.9.13?type=jar",
      "dependsOn" : [
        "pkg:maven/org.codehaus.jackson/jackson-core-asl@1.9.13?type=jar",
        "pkg:maven/org.codehaus.jackson/jackson-mapper-asl@1.9.13?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.jackson/jackson-xc@1.9.13?type=jar",
      "dependsOn" : [
        "pkg:maven/org.codehaus.jackson/jackson-core-asl@1.9.13?type=jar",
        "pkg:maven/org.codehaus.jackson/jackson-mapper-asl@1.9.13?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.sun.jersey/jersey-server@1.9?type=jar",
      "dependsOn" : [
        "pkg:maven/asm/asm@3.1?type=jar",
        "pkg:maven/com.sun.jersey/jersey-core@1.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/asm/asm@3.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/net.java.dev.jets3t/jets3t@0.9.0?type=jar",
      "dependsOn" : [
        "pkg:maven/commons-codec/commons-codec@1.15?type=jar",
        "pkg:maven/commons-logging/commons-logging@1.1.3?type=jar",
        "pkg:maven/org.apache.httpcomponents/httpclient@4.5.13?type=jar",
        "pkg:maven/org.apache.httpcomponents/httpcore@4.4.14?type=jar",
        "pkg:maven/com.jamesmurty.utils/java-xmlbuilder@1.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.jamesmurty.utils/java-xmlbuilder@1.2?type=jar",
      "dependsOn" : [
        "pkg:maven/net.iharder/base64@2.3.8?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/net.iharder/base64@2.3.8?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-lang/commons-lang@2.6?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-configuration/commons-configuration@1.7?type=jar",
      "dependsOn" : [
        "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar",
        "pkg:maven/commons-lang/commons-lang@2.6?type=jar",
        "pkg:maven/commons-logging/commons-logging@1.1.3?type=jar",
        "pkg:maven/commons-beanutils/commons-beanutils@1.11.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/commons-beanutils/commons-beanutils@1.11.0?type=jar",
      "dependsOn" : [
        "pkg:maven/commons-logging/commons-logging@1.1.3?type=jar",
        "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/commons-digester/commons-digester@1.8?type=jar",
      "dependsOn" : [
        "pkg:maven/commons-logging/commons-logging@1.1.3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.avro/avro@1.11.5?type=jar",
      "dependsOn" : [
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.18.9?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.18.9?type=jar",
        "pkg:maven/org.apache.commons/commons-compress@1.26.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.18.9?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.18.9?type=jar",
      "dependsOn" : [
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.18.9?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.18.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.18.9?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.protobuf/protobuf-java@2.5.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.code.gson/gson@2.10.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.hadoop/hadoop-auth@2.10.2?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.15?type=jar",
        "pkg:maven/org.apache.httpcomponents/httpclient@4.5.13?type=jar",
        "pkg:maven/com.nimbusds/nimbus-jose-jwt@9.37.4?type=jar",
        "pkg:maven/org.apache.directory.server/apacheds-kerberos-codec@2.0.0-M15?type=jar",
        "pkg:maven/org.apache.zookeeper/zookeeper@3.8.4?type=jar",
        "pkg:maven/org.apache.curator/curator-framework@2.13.0?type=jar",
        "pkg:maven/com.google.guava/guava@11.0.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.nimbusds/nimbus-jose-jwt@9.37.4?type=jar",
      "dependsOn" : [
        "pkg:maven/com.github.stephenc.jcip/jcip-annotations@1.0-1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.github.stephenc.jcip/jcip-annotations@1.0-1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.directory.server/apacheds-kerberos-codec@2.0.0-M15?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.directory.server/apacheds-i18n@2.0.0-M15?type=jar",
        "pkg:maven/org.apache.directory.api/api-asn1-api@1.0.0-M20?type=jar",
        "pkg:maven/org.apache.directory.api/api-util@1.0.0-M20?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.directory.server/apacheds-i18n@2.0.0-M15?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.directory.api/api-asn1-api@1.0.0-M20?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.directory.api/api-util@1.0.0-M20?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.zookeeper/zookeeper@3.8.4?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.zookeeper/zookeeper-jute@3.8.4?type=jar",
        "pkg:maven/org.apache.yetus/audience-annotations@0.12.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/commons-io/commons-io@2.15.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.zookeeper/zookeeper-jute@3.8.4?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.yetus/audience-annotations@0.12.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.yetus/audience-annotations@0.12.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.curator/curator-framework@2.13.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.curator/curator-client@2.13.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.curator/curator-client@2.13.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.zookeeper/zookeeper@3.8.4?type=jar",
        "pkg:maven/com.google.guava/guava@11.0.2?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.jcraft/jsch@0.1.55?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.curator/curator-recipes@2.13.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.curator/curator-framework@2.13.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.htrace/htrace-core4@4.1.0-incubating?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.woodstox/woodstox-core@5.4.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.hadoop/hadoop-hdfs@2.10.2?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.hadoop/hadoop-hdfs-client@2.10.2?type=jar",
        "pkg:maven/com.google.guava/guava@11.0.2?type=jar",
        "pkg:maven/org.mortbay.jetty/jetty@6.1.26?type=jar",
        "pkg:maven/org.mortbay.jetty/jetty-util@6.1.26?type=jar",
        "pkg:maven/com.sun.jersey/jersey-core@1.9?type=jar",
        "pkg:maven/com.sun.jersey/jersey-server@1.9?type=jar",
        "pkg:maven/commons-cli/commons-cli@1.5.0?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.15?type=jar",
        "pkg:maven/commons-io/commons-io@2.15.1?type=jar",
        "pkg:maven/commons-lang/commons-lang@2.6?type=jar",
        "pkg:maven/commons-logging/commons-logging@1.1.3?type=jar",
        "pkg:maven/commons-daemon/commons-daemon@1.0.13?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java@2.5.0?type=jar",
        "pkg:maven/javax.servlet/servlet-api@2.5?type=jar",
        "pkg:maven/org.codehaus.jackson/jackson-core-asl@1.9.13?type=jar",
        "pkg:maven/org.codehaus.jackson/jackson-mapper-asl@1.9.13?type=jar",
        "pkg:maven/xmlenc/xmlenc@0.52?type=jar",
        "pkg:maven/io.netty/netty@3.10.6.Final?type=jar",
        "pkg:maven/io.netty/netty-all@4.1.137.Final?type=jar",
        "pkg:maven/xerces/xercesImpl@2.12.2?type=jar",
        "pkg:maven/org.apache.htrace/htrace-core4@4.1.0-incubating?type=jar",
        "pkg:maven/org.fusesource.leveldbjni/leveldbjni-all@1.8?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.18.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.hadoop/hadoop-hdfs-client@2.10.2?type=jar",
      "dependsOn" : [
        "pkg:maven/com.squareup.okhttp/okhttp@2.7.5?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.squareup.okhttp/okhttp@2.7.5?type=jar",
      "dependsOn" : [
        "pkg:maven/com.squareup.okio/okio@1.6.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.squareup.okio/okio@1.6.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-daemon/commons-daemon@1.0.13?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty@3.10.6.Final?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-all@4.1.137.Final?type=jar",
      "dependsOn" : [
        "pkg:maven/io.netty/netty-buffer@4.1.137.Final?type=jar",
        "pkg:maven/io.netty/netty-codec@4.1.137.Final?type=jar",
        "pkg:maven/io.netty/netty-codec-dns@4.1.137.Final?type=jar",
        "pkg:maven/io.netty/netty-codec-haproxy@4.1.137.Final?type=jar",
        "pkg:maven/io.netty/netty-codec-http@4.1.137.Final?type=jar",
        "pkg:maven/io.netty/netty-codec-http2@4.1.137.Final?type=jar",
        "pkg:maven/io.netty/netty-codec-memcache@4.1.137.Final?type=jar",
        "pkg:maven/io.netty/netty-codec-mqtt@4.1.137.Final?type=jar",
        "pkg:maven/io.netty/netty-codec-redis@4.1.137.Final?type=jar",
        "pkg:maven/io.netty/netty-codec-smtp@4.1.137.Final?type=jar",
        "pkg:maven/io.netty/netty-codec-socks@4.1.137.Final?type=jar",
        "pkg:maven/io.netty/netty-codec-stomp@4.1.137.Final?type=jar",
        "pkg:maven/io.netty/netty-codec-xml@4.1.137.Final?type=jar",
        "pkg:maven/io.netty/netty-common@4.1.137.Final?type=jar",
        "pkg:maven/io.netty/netty-handler@4.1.137.Final?type=jar",
        "pkg:maven/io.netty/netty-transport-native-unix-common@4.1.137.Final?type=jar",
        "pkg:maven/io.netty/netty-handler-proxy@4.1.137.Final?type=jar",
        "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.137.Final?type=jar",
        "pkg:maven/io.netty/netty-resolver@4.1.137.Final?type=jar",
        "pkg:maven/io.netty/netty-resolver-dns@4.1.137.Final?type=jar",
        "pkg:maven/io.netty/netty-transport@4.1.137.Final?type=jar",
        "pkg:maven/io.netty/netty-transport-rxtx@4.1.137.Final?type=jar",
        "pkg:maven/io.netty/netty-transport-sctp@4.1.137.Final?type=jar",
        "pkg:maven/io.netty/netty-transport-udt@4.1.137.Final?type=jar",
        "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.137.Final?type=jar",
        "pkg:maven/io.netty/netty-transport-classes-kqueue@4.1.137.Final?type=jar",
        "pkg:maven/io.netty/netty-resolver-dns-classes-macos@4.1.137.Final?type=jar",
        "pkg:maven/io.netty/netty-transport-native-epoll@4.1.137.Final?classifier=linux-x86_64&type=jar",
        "pkg:maven/io.netty/netty-transport-native-epoll@4.1.137.Final?classifier=linux-aarch_64&type=jar",
        "pkg:maven/io.netty/netty-transport-native-epoll@4.1.137.Final?classifier=linux-riscv64&type=jar",
        "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.137.Final?classifier=osx-x86_64&type=jar",
        "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.137.Final?classifier=osx-aarch_64&type=jar",
        "pkg:maven/io.netty/netty-resolver-dns-native-macos@4.1.137.Final?classifier=osx-x86_64&type=jar",
        "pkg:maven/io.netty/netty-resolver-dns-native-macos@4.1.137.Final?classifier=osx-aarch_64&type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-buffer@4.1.137.Final?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-codec@4.1.137.Final?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-codec-dns@4.1.137.Final?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-codec-haproxy@4.1.137.Final?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-codec-http@4.1.137.Final?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-codec-http2@4.1.137.Final?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-codec-memcache@4.1.137.Final?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-codec-mqtt@4.1.137.Final?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-codec-redis@4.1.137.Final?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-codec-smtp@4.1.137.Final?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-codec-socks@4.1.137.Final?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-codec-stomp@4.1.137.Final?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-codec-xml@4.1.137.Final?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-common@4.1.137.Final?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-handler@4.1.137.Final?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-transport-native-unix-common@4.1.137.Final?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-handler-proxy@4.1.137.Final?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.137.Final?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-resolver@4.1.137.Final?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-resolver-dns@4.1.137.Final?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-transport@4.1.137.Final?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-transport-rxtx@4.1.137.Final?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-transport-sctp@4.1.137.Final?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-transport-udt@4.1.137.Final?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.137.Final?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-transport-classes-kqueue@4.1.137.Final?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-resolver-dns-classes-macos@4.1.137.Final?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-transport-native-epoll@4.1.137.Final?classifier=linux-x86_64&type=jar",
      "dependsOn" : [
        "pkg:maven/io.netty/netty-common@4.1.137.Final?type=jar",
        "pkg:maven/io.netty/netty-buffer@4.1.137.Final?type=jar",
        "pkg:maven/io.netty/netty-transport@4.1.137.Final?type=jar",
        "pkg:maven/io.netty/netty-transport-native-unix-common@4.1.137.Final?type=jar",
        "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.137.Final?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-transport-native-epoll@4.1.137.Final?classifier=linux-aarch_64&type=jar",
      "dependsOn" : [
        "pkg:maven/io.netty/netty-common@4.1.137.Final?type=jar",
        "pkg:maven/io.netty/netty-buffer@4.1.137.Final?type=jar",
        "pkg:maven/io.netty/netty-transport@4.1.137.Final?type=jar",
        "pkg:maven/io.netty/netty-transport-native-unix-common@4.1.137.Final?type=jar",
        "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.137.Final?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-transport-native-epoll@4.1.137.Final?classifier=linux-riscv64&type=jar",
      "dependsOn" : [
        "pkg:maven/io.netty/netty-common@4.1.137.Final?type=jar",
        "pkg:maven/io.netty/netty-buffer@4.1.137.Final?type=jar",
        "pkg:maven/io.netty/netty-transport@4.1.137.Final?type=jar",
        "pkg:maven/io.netty/netty-transport-native-unix-common@4.1.137.Final?type=jar",
        "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.137.Final?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.137.Final?classifier=osx-x86_64&type=jar",
      "dependsOn" : [
        "pkg:maven/io.netty/netty-common@4.1.137.Final?type=jar",
        "pkg:maven/io.netty/netty-buffer@4.1.137.Final?type=jar",
        "pkg:maven/io.netty/netty-transport@4.1.137.Final?type=jar",
        "pkg:maven/io.netty/netty-transport-native-unix-common@4.1.137.Final?type=jar",
        "pkg:maven/io.netty/netty-transport-classes-kqueue@4.1.137.Final?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.137.Final?classifier=osx-aarch_64&type=jar",
      "dependsOn" : [
        "pkg:maven/io.netty/netty-common@4.1.137.Final?type=jar",
        "pkg:maven/io.netty/netty-buffer@4.1.137.Final?type=jar",
        "pkg:maven/io.netty/netty-transport@4.1.137.Final?type=jar",
        "pkg:maven/io.netty/netty-transport-native-unix-common@4.1.137.Final?type=jar",
        "pkg:maven/io.netty/netty-transport-classes-kqueue@4.1.137.Final?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-resolver-dns-native-macos@4.1.137.Final?classifier=osx-x86_64&type=jar",
      "dependsOn" : [
        "pkg:maven/io.netty/netty-resolver-dns-classes-macos@4.1.137.Final?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-resolver-dns-native-macos@4.1.137.Final?classifier=osx-aarch_64&type=jar",
      "dependsOn" : [
        "pkg:maven/io.netty/netty-resolver-dns-classes-macos@4.1.137.Final?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/xerces/xercesImpl@2.12.2?type=jar",
      "dependsOn" : [
        "pkg:maven/xml-apis/xml-apis@1.4.01?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/xml-apis/xml-apis@1.4.01?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.fusesource.leveldbjni/leveldbjni-all@1.8?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.hadoop/hadoop-yarn-common@2.10.2?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.hadoop/hadoop-yarn-api@2.10.2?type=jar",
        "pkg:maven/javax.xml.bind/jaxb-api@2.3.1?type=jar",
        "pkg:maven/org.apache.commons/commons-compress@1.26.0?type=jar",
        "pkg:maven/commons-lang/commons-lang@2.6?type=jar",
        "pkg:maven/javax.servlet/servlet-api@2.5?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.15?type=jar",
        "pkg:maven/org.mortbay.jetty/jetty-util@6.1.26?type=jar",
        "pkg:maven/com.sun.jersey/jersey-core@1.9?type=jar",
        "pkg:maven/com.sun.jersey/jersey-client@1.9?type=jar",
        "pkg:maven/org.codehaus.jackson/jackson-core-asl@1.9.13?type=jar",
        "pkg:maven/org.codehaus.jackson/jackson-mapper-asl@1.9.13?type=jar",
        "pkg:maven/org.codehaus.jackson/jackson-jaxrs@1.9.13?type=jar",
        "pkg:maven/org.codehaus.jackson/jackson-xc@1.9.13?type=jar",
        "pkg:maven/com.google.guava/guava@11.0.2?type=jar",
        "pkg:maven/commons-logging/commons-logging@1.1.3?type=jar",
        "pkg:maven/commons-cli/commons-cli@1.5.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/org.apache.hadoop/hadoop-annotations@2.10.2?type=jar",
        "pkg:maven/com.google.inject.extensions/guice-servlet@3.0?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java@2.5.0?type=jar",
        "pkg:maven/commons-io/commons-io@2.15.1?type=jar",
        "pkg:maven/com.google.inject/guice@3.0?type=jar",
        "pkg:maven/com.sun.jersey/jersey-server@1.9?type=jar",
        "pkg:maven/com.sun.jersey/jersey-json@1.9?type=jar",
        "pkg:maven/com.sun.jersey.contribs/jersey-guice@1.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.hadoop/hadoop-yarn-api@2.10.2?type=jar",
      "dependsOn" : [
        "pkg:maven/commons-lang/commons-lang@2.6?type=jar",
        "pkg:maven/com.google.guava/guava@11.0.2?type=jar",
        "pkg:maven/commons-logging/commons-logging@1.1.3?type=jar",
        "pkg:maven/javax.xml.bind/jaxb-api@2.3.1?type=jar",
        "pkg:maven/org.apache.hadoop/hadoop-annotations@2.10.2?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java@2.5.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.sun.jersey/jersey-client@1.9?type=jar",
      "dependsOn" : [
        "pkg:maven/com.sun.jersey/jersey-core@1.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.google.inject.extensions/guice-servlet@3.0?type=jar",
      "dependsOn" : [
        "pkg:maven/com.google.inject/guice@3.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.google.inject/guice@3.0?type=jar",
      "dependsOn" : [
        "pkg:maven/javax.inject/javax.inject@1?type=jar",
        "pkg:maven/aopalliance/aopalliance@1.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/javax.inject/javax.inject@1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/aopalliance/aopalliance@1.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.sun.jersey.contribs/jersey-guice@1.9?type=jar",
      "dependsOn" : [
        "pkg:maven/javax.inject/javax.inject@1?type=jar",
        "pkg:maven/com.google.inject/guice@3.0?type=jar",
        "pkg:maven/com.google.inject.extensions/guice-servlet@3.0?type=jar",
        "pkg:maven/com.sun.jersey/jersey-server@1.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.hadoop/hadoop-yarn-client@2.10.2?type=jar",
      "dependsOn" : [
        "pkg:maven/com.google.guava/guava@11.0.2?type=jar",
        "pkg:maven/commons-logging/commons-logging@1.1.3?type=jar",
        "pkg:maven/commons-lang/commons-lang@2.6?type=jar",
        "pkg:maven/commons-cli/commons-cli@1.5.0?type=jar",
        "pkg:maven/org.apache.hadoop/hadoop-annotations@2.10.2?type=jar",
        "pkg:maven/org.apache.hadoop/hadoop-yarn-api@2.10.2?type=jar",
        "pkg:maven/org.apache.hadoop/hadoop-yarn-common@2.10.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.hadoop/hadoop-mapreduce-client-core@2.10.2?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.hadoop/hadoop-yarn-client@2.10.2?type=jar",
        "pkg:maven/org.apache.hadoop/hadoop-yarn-common@2.10.2?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java@2.5.0?type=jar",
        "pkg:maven/org.apache.avro/avro@1.11.5?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/org.apache.hadoop/hadoop-annotations@2.10.2?type=jar",
        "pkg:maven/com.google.inject.extensions/guice-servlet@3.0?type=jar",
        "pkg:maven/io.netty/netty@3.10.6.Final?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.confluent.flink.shaded/flink-shaded-force-shading@20.0-cp3?type=jar",
      "dependsOn" : [ ]
    }
  ]
}