{
  "bomFormat" : "CycloneDX",
  "specVersion" : "1.5",
  "serialNumber" : "urn:uuid:91bfa96b-cdf4-31fc-8a06-9bf182861c5f",
  "version" : 1,
  "metadata" : {
    "timestamp" : "2026-02-18T12:53:37Z",
    "lifecycles" : [
      {
        "phase" : "build"
      }
    ],
    "tools" : {
      "components" : [
        {
          "type" : "library",
          "author" : "OWASP Foundation",
          "group" : "org.cyclonedx",
          "name" : "cyclonedx-maven-plugin",
          "version" : "2.9.0",
          "description" : "CycloneDX Maven plugin",
          "hashes" : [
            {
              "alg" : "MD5",
              "content" : "dfaeab7ec837ce07874e2ee66fdc57d3"
            },
            {
              "alg" : "SHA-1",
              "content" : "8bab47bafc8183d0a5f37790ff55ed05ead1ae2d"
            },
            {
              "alg" : "SHA-256",
              "content" : "67117e03eae4a03ca8bab3add044995f4899aa21798a2510b8265ef8101e90ac"
            },
            {
              "alg" : "SHA-512",
              "content" : "ae6b706516bb76da806b7854aef9e348fa593f5159ae9d693ad38942165c0ebc0846d977a477f6029612d43468fd2cd73a5aa253c228a94fb8d184e0acefc3d2"
            },
            {
              "alg" : "SHA-384",
              "content" : "ee872354d8b0dcd6f9835a913b3aaba70d9365a46043be78020183282a1e9fca812e969246cbe31d642541591b46648b"
            }
          ]
        }
      ]
    },
    "component" : {
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent/kafka-schema-registry-client@7.8.7?type=jar",
      "publisher" : "Confluent, Inc.",
      "group" : "io.confluent",
      "name" : "kafka-schema-registry-client",
      "version" : "7.8.7",
      "description" : "Schema Registry provides a RESTful interface for storing and retrieving versioned Avro schemas for use with Kafka.",
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent/kafka-schema-registry-client@7.8.7?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://confluent.io/kafka-schema-registry-client"
        },
        {
          "type" : "distribution-intake",
          "url" : "s3://staging-confluent-packages-maven-654654529379-us-west-2/v7.8.7-rc260218111616/maven"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/confluentinc/schema-registry/kafka-schema-registry-client"
        }
      ]
    },
    "properties" : [
      {
        "name" : "maven.goal",
        "value" : "makeBom"
      },
      {
        "name" : "maven.scopes",
        "value" : "compile,provided,runtime,system,test"
      }
    ]
  },
  "components" : [
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.yaml/snakeyaml@2.0?type=jar",
      "group" : "org.yaml",
      "name" : "snakeyaml",
      "version" : "2.0",
      "description" : "YAML 1.1 parser and emitter for Java",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "caf24b81b9d57e6d4f68b1ccd36e00a3"
        },
        {
          "alg" : "SHA-1",
          "content" : "3aab2116756442bf0d4cd1c089b24d34c3baa253"
        },
        {
          "alg" : "SHA-256",
          "content" : "880c9d896e4b74a06c549c15ca496450165d6909fa15d7e662bee8f6a66d7afa"
        },
        {
          "alg" : "SHA-512",
          "content" : "93567558444365c436027bd1064b67ae99abde77fa89b33ac7c586ab83e4dbf02b7610669fd00ccd258bca6ba3fa078954c92d918b989317dce7bf9ce18836b8"
        },
        {
          "alg" : "SHA-384",
          "content" : "63c0ec40f4e3f24786031fb8a9477071c86e69247dce283ff725e328e26fba7bdfbb0ab52027b9b0988b3978703a95fe"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.yaml/snakeyaml@2.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://bitbucket.org/snakeyaml/snakeyaml"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://bitbucket.org/snakeyaml/snakeyaml/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://bitbucket.org/snakeyaml/snakeyaml/src"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.kafka/kafka-clients@7.8.7-ccs?type=jar",
      "group" : "org.apache.kafka",
      "name" : "kafka-clients",
      "version" : "7.8.7-ccs",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "aa7d14b3b71e7588aba30e334197bb2c"
        },
        {
          "alg" : "SHA-1",
          "content" : "f1c4b5dd89ae860a61f20fd4f0240d1eaff794e0"
        },
        {
          "alg" : "SHA-256",
          "content" : "896b5e301421434f125b025b476380ba28bcce6ee7c26d590b4ed8e0deb9e1d5"
        },
        {
          "alg" : "SHA-512",
          "content" : "2ec86e67b6baff8c5bee0e25c4d6ee71525d3ac5ce4581745abf6ff4c1efb5d25dd5e1cce9a5d81c414269a972fb30c5991b7fd7938174afad2b6b056ad38aa2"
        },
        {
          "alg" : "SHA-384",
          "content" : "7d79105ca2927ed8f379613d78e01b634d764fbb3a7cd558ce46e24873ed87033c75e8e818b04c375146589a3047b891"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.kafka/kafka-clients@7.8.7-ccs?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://kafka.apache.org"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.github.luben/zstd-jni@1.5.6-4?type=jar",
      "publisher" : "com.github.luben",
      "group" : "com.github.luben",
      "name" : "zstd-jni",
      "version" : "1.5.6-4",
      "description" : "JNI bindings for Zstd native library that provides fast and high compression lossless algorithm for Java and all JVM languages.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "808e96f7bc2d4a3c5f68e95786f74cc9"
        },
        {
          "alg" : "SHA-1",
          "content" : "ba9e303e0b5e94cdd0017390d7d8c06f47fd61f7"
        },
        {
          "alg" : "SHA-256",
          "content" : "793ca8734aa15687e7e64564eab8b6ae9ee2720eae27aa663074682144b1c386"
        },
        {
          "alg" : "SHA-512",
          "content" : "91ae51e05bfe322e18875cd158f311a0aaef62059fd391b83c4d06447f31518863654fc218891eb99f72def102964c01d8122c73890498fef7288f060cb29e88"
        },
        {
          "alg" : "SHA-384",
          "content" : "0c56933ba08e88187767e688325fdc8e281e8cb2838d6125819da484df8ecf07bfe0b88c9a5b12049efb24f8711f6f76"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-2-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/com.github.luben/zstd-jni@1.5.6-4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/luben/zstd-jni"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/at.yawk.lz4/lz4-java@1.10.2?type=jar",
      "group" : "at.yawk.lz4",
      "name" : "lz4-java",
      "version" : "1.10.2",
      "description" : "Java bindings and pure Java implementations of LZ4 and XXHash",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f9fe6db582e61989316715dca1c79f6d"
        },
        {
          "alg" : "SHA-1",
          "content" : "1df182cf1b030e347c81ca8768c24dab414a04d8"
        },
        {
          "alg" : "SHA-256",
          "content" : "252dabd586d22149a31661a8afc1a50747714eb1a298bd4a6e780c8c91a13866"
        },
        {
          "alg" : "SHA-512",
          "content" : "2634adf408910c3a1cff41f5bbde0f0643d6aa89b9c10c84ee5982628ceaf092015acaa0ed90eb56cdb0cc1c72b6667bc51b4312c8674662d5150a821c512f88"
        },
        {
          "alg" : "SHA-384",
          "content" : "0583dafa52d9c28aa84204fb3996528fd3fac71ed7c452b904bcc8f3f8fc07ca36da13fea1bd7a5eec34f9e6480925f5"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/at.yawk.lz4/lz4-java@1.10.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/yawkat/lz4-java"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/yawkat/lz4-java"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.xerial.snappy/snappy-java@1.1.10.5?type=jar",
      "publisher" : "xerial.org",
      "group" : "org.xerial.snappy",
      "name" : "snappy-java",
      "version" : "1.1.10.5",
      "description" : "snappy-java: A fast compression/decompression library",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a52ffcdbbe525b486237a7098e5c5ff7"
        },
        {
          "alg" : "SHA-1",
          "content" : "ac605269f3598506196e469f1fb0d7ed5c55059e"
        },
        {
          "alg" : "SHA-256",
          "content" : "0f3f1857ed33116583f480b4df5c0218836c47bfbc9c6221c0d73f356decf37b"
        },
        {
          "alg" : "SHA-512",
          "content" : "36c288aa84017b52362a49a20d1702151a16b9f58518b6877f11122941a549d94fab8d515f7f1ad6384fb94be569328abf862edaf970c10a16832498dfda853b"
        },
        {
          "alg" : "SHA-384",
          "content" : "693a542ca2471dec4da5fe582563aff1bf5238e1a8d1a1f79cd8138334f94f1112094fbd270b1637d983c9290084a6e1"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.xerial.snappy/snappy-java@1.1.10.5?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/xerial/snappy-java"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/xerial/snappy-java"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
      "publisher" : "QOS.ch",
      "group" : "org.slf4j",
      "name" : "slf4j-api",
      "version" : "1.7.36",
      "description" : "The slf4j API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "872da51f5de7f3923da4de871d57fd85"
        },
        {
          "alg" : "SHA-1",
          "content" : "6c62681a2f655b49963a5983b8b0950a6120ae14"
        },
        {
          "alg" : "SHA-256",
          "content" : "d3ef575e3e4979678dc01bf1dcce51021493b4d11fb7f1be8ad982877c16a1c0"
        },
        {
          "alg" : "SHA-512",
          "content" : "f9b033fc019a44f98b16048da7e2b59edd4a6a527ba60e358f65ab88e0afae03a9340f1b3e8a543d49fa542290f499c5594259affa1ff3e6e7bf3b428d4c610b"
        },
        {
          "alg" : "SHA-384",
          "content" : "2b14ad035877087157e379d3277dcdcd79e58d6bdb147c47d29e377d75ce53ad42cafbf22f5fb7827c7e946ff4876b9a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/license/mit/"
          }
        }
      ],
      "purl" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.slf4j.org"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/qos-ch/slf4j/slf4j-api"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.avro/avro@1.11.5?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.avro",
      "name" : "avro",
      "version" : "1.11.5",
      "description" : "Avro core components",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b4e9758699f388a661d564c5d26a83a1"
        },
        {
          "alg" : "SHA-1",
          "content" : "39b03945fc96f8e6146849aa49b516cf3657b151"
        },
        {
          "alg" : "SHA-256",
          "content" : "b3c55da4c58304f823f4a2161a308888b9e7b8bc1c7387a4fa3ca1cd48617f93"
        },
        {
          "alg" : "SHA-512",
          "content" : "c3f8b87cd0caf4064b039d2a66273a5f5c22f38d71ef9ffebbe25953bc0fcb2f48d5e4fbac0777630ad410d3506255d6d74a3a1ef961a02f7d4d7a17c9c4c17e"
        },
        {
          "alg" : "SHA-384",
          "content" : "37357433b72e3fa4d9db3616018922d0299c8e0edd2df244b2d591909c40f0308999de02513e71ec113a4f81576cf3c3"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.avro/avro@1.11.5?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://avro.apache.org"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/AVRO"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/avro-dev/"
        },
        {
          "type" : "vcs",
          "url" : "scm:git:https://github.com/apache/avro/avro-parent/avro"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.16.0?type=jar",
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.jackson.core",
      "name" : "jackson-core",
      "version" : "2.16.0",
      "description" : "Core Jackson processing abstractions (aka Streaming API), implementation for JSON",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e2510fa60b7d363566a9016a8c40710f"
        },
        {
          "alg" : "SHA-1",
          "content" : "899e5cf01be55fbf094ad72b2edb0c5df99111ee"
        },
        {
          "alg" : "SHA-256",
          "content" : "66e2cde4cc7e565d5fce2a2998b64e991777bf9fad4d220735c525fd8d01c31a"
        },
        {
          "alg" : "SHA-512",
          "content" : "89b134b2808c34562f751ff39b938e8c1b67030c4cfb8fd0418d76aed1d6b8f256915a5e88d9935f472322b414a7002e59d92160854cbd01774b28eed61c5315"
        },
        {
          "alg" : "SHA-384",
          "content" : "fae7b757f776419e32e2f598f12c92c576c37e0ca489250a4aabf2db118913163aba958a9d5414da47d770810b20594a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.16.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/FasterXML/jackson-core"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/FasterXML/jackson-core/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/FasterXML/jackson-core"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-compress@1.26.1?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-compress",
      "version" : "1.26.1",
      "description" : "Apache Commons Compress defines an API for working with compression and archive formats. These include bzip2, gzip, pack200, LZMA, XZ, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4, Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "7af7d22a7280508327d809b183114a92"
        },
        {
          "alg" : "SHA-1",
          "content" : "44331c1130c370e726a2e1a3e6fba6d2558ef04a"
        },
        {
          "alg" : "SHA-256",
          "content" : "27bb5d40f37c3bb7205b4a0540247df057715e9f6cbbd97d626ab8b50318bb04"
        },
        {
          "alg" : "SHA-512",
          "content" : "ef18a2e3abbf249b95bc5dc95d276fd66e495a74f8f1ce02e9e388048c5a0684f07bbf6924fcc1fc3943b95f30d908fee8778f1e4c6293431172e31f5ddc5f02"
        },
        {
          "alg" : "SHA-384",
          "content" : "c37e35684971b436dc7a6bc428b306804302f99ef46c5df44b6826e267427e6146580b5cda1a96472b65ef12ef7fa6e9"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-compress@1.26.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-compress/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-parent/actions"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/COMPRESS"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-compress.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-codec/commons-codec@1.16.1?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-codec",
      "name" : "commons-codec",
      "version" : "1.16.1",
      "description" : "The Apache Commons Codec component contains encoder and decoders for various formats such as Base16, Base32, Base64, digest, and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a collection of phonetic encoding utilities.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6c5be822d8d3fa61c3b54c4c8978dfdc"
        },
        {
          "alg" : "SHA-1",
          "content" : "47bd4d333fba53406f6c6c51884ddbca435c8862"
        },
        {
          "alg" : "SHA-256",
          "content" : "ec87bfb55f22cbd1b21e2190eeda28b2b312ed2a431ee49fbdcc01812d04a5e4"
        },
        {
          "alg" : "SHA-512",
          "content" : "bd33fd5340757ea0616a8c2a48760cfc9932f93b8e067701f4a122fd59735083468a016d8c0fd65973dd3fa4fc3537855e71a1fae7d14e1777e31ff1c47708ce"
        },
        {
          "alg" : "SHA-384",
          "content" : "ee7f4c3e5c01cf77f4d82b09c358087738e6e79507ced9f2c82fdce3b32825bb62b2d66b30ef897e2972d3253478c525"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-codec/commons-codec@1.16.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-codec/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-parent/actions"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CODEC"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/commons-codec"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-io/commons-io@2.16.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-io",
      "name" : "commons-io",
      "version" : "2.16.0",
      "description" : "The Apache Commons IO library contains utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4e115587dca5dd3c178e7c8f17a371b3"
        },
        {
          "alg" : "SHA-1",
          "content" : "27875a7935f1ddcc13267eb6fae1f719e0409572"
        },
        {
          "alg" : "SHA-256",
          "content" : "d1e417901235fae3aa0cb9736baeaf5b74de7349817d1c72390d82e3d83d3a97"
        },
        {
          "alg" : "SHA-512",
          "content" : "afba6cc8fdef9d347aaccb3bff327ba8e2c17135989cf01179fdb2e3ca8d0afdce37defb08659eb1e99b8730e2baaaec95c7d3599f7ebf526c97c8edc477b852"
        },
        {
          "alg" : "SHA-384",
          "content" : "0413eda39746809f3c7ce44336f6d88d8d72e2781db4b74c98a206f34b94639a39024697fde25f310edda8cf628fd376"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-io/commons-io@2.16.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-io/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-parent/actions"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/IO"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-io.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-lang3",
      "version" : "3.18.0",
      "description" : "Apache Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang. The code is tested using the latest revision of the JDK for supported LTS releases: 8, 11, 17 and 21 currently. See https://github.com/apache/commons-lang/blob/master/.github/workflows/maven.yml Please ensure your build environment is up-to-date and kindly report any build issues.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "48b9886957920a4cdb602780ca345087"
        },
        {
          "alg" : "SHA-1",
          "content" : "fb14946f0e39748a6571de0635acbe44e7885491"
        },
        {
          "alg" : "SHA-256",
          "content" : "4eeeae8d20c078abb64b015ec158add383ac581571cddc45c68f0c9ae0230720"
        },
        {
          "alg" : "SHA-512",
          "content" : "c2c9d497fc1be411050f4011b2407764b78aa098eb42925af8a197eabdbc25b507f09fb898805e9bed4815f35236a508ee5b096e36f363df4d407232d50fc832"
        },
        {
          "alg" : "SHA-384",
          "content" : "4fb3f101106e4ce3666d5c15d276ba86f7683a0ef35f0384edfcd579ea454275edbb7400795d265ec3a38e39997e79b8"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-lang/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-lang/actions"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/LANG"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf/commons-lang.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.16.0?type=jar",
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.jackson.core",
      "name" : "jackson-databind",
      "version" : "2.16.0",
      "description" : "General data-binding functionality for Jackson: works on core streaming API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f9ae3e3bd773be8b474cb1b98dcf7ee6"
        },
        {
          "alg" : "SHA-1",
          "content" : "3a6b7f8ff7b30d518bbd65678e9c30cd881f19a7"
        },
        {
          "alg" : "SHA-256",
          "content" : "8aaf1753823be70b798290e5826ab5bfe015d35b3a36a5d3c2ec9f57d4b0138b"
        },
        {
          "alg" : "SHA-512",
          "content" : "2f0a4211c1723bd88299380093a935840290694838a4c5ae0989bad46a615e02017b707ba7f3b825d0f0163f42a392efd0a1629024594992b5a4edee415c207a"
        },
        {
          "alg" : "SHA-384",
          "content" : "8113432d108a152cd08ff4b12e4ea649d3240db070d3194a64712459436c1ea0c4b5362ec86ed076dc92c013215b043c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.16.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/FasterXML/jackson"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/FasterXML/jackson-databind/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/FasterXML/jackson-databind"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.16.0?type=jar",
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.jackson.core",
      "name" : "jackson-annotations",
      "version" : "2.16.0",
      "description" : "Core annotations used for value types, used by Jackson data binding package.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "9caec6e7cdd5cc18e18f99359b9e8d95"
        },
        {
          "alg" : "SHA-1",
          "content" : "dc30995f7428c0a405eba9b8c619b20d2b3b9905"
        },
        {
          "alg" : "SHA-256",
          "content" : "c4b90ea0c0074da17efdc3aa23973525f25d6f34725692169748f529547334a6"
        },
        {
          "alg" : "SHA-512",
          "content" : "2c7d70c88b7e8dd710863f8c920d3e2fe56f8ecc01c757011bd9bbd195228028402566fbf4feaa083192453348a86a70732bf5d3f6eebb75ab4e5b3a525f6148"
        },
        {
          "alg" : "SHA-384",
          "content" : "99413ce47a9980b0954051f651068565e75b6300c0b801179c87f347053e9c9f31c60c698a7e1ee9d1ff664facbb6c8e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.16.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/FasterXML/jackson"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/FasterXML/jackson-annotations/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/FasterXML/jackson-annotations"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8@2.16.0?type=jar",
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.jackson.datatype",
      "name" : "jackson-datatype-jdk8",
      "version" : "2.16.0",
      "description" : "Add-on module for Jackson (http://jackson.codehaus.org) to support JDK 8 data types.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "90a345c79790ef01d916cbb27673bb6a"
        },
        {
          "alg" : "SHA-1",
          "content" : "20ebeb699640f96fc6dd8d3852cb52a57da13333"
        },
        {
          "alg" : "SHA-256",
          "content" : "197056dd721fb460b483660e423c04142af4b9d408be856f7626ca0aca63966c"
        },
        {
          "alg" : "SHA-512",
          "content" : "4764bb4f8a86a39d3cca353d15c825c11e1dd90ff6320492a43559a15b1017d7833592b6d73661650d2737a9dfd060d59c100ee6363f9ddbc11e54d43bb24e07"
        },
        {
          "alg" : "SHA-384",
          "content" : "15e4a4ea88a4567b1d3871d14a744e4df50591b09e22ecca270753f71f8e32a691cef1fd303242d5d286ccdffb5dc827"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8@2.16.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/FasterXML/jackson-modules-java8/jackson-datatype-jdk8"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/FasterXML/jackson-modules-java8/issues"
        },
        {
          "type" : "vcs",
          "url" : "http://github.com/FasterXML/jackson-modules-java8/jackson-datatype-jdk8"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.bouncycastle/bctls-fips@2.1.20?type=jar",
      "group" : "org.bouncycastle",
      "name" : "bctls-fips",
      "version" : "2.1.20",
      "description" : "The Bouncy Castle Java APIs for the TLS, including a JSSE provider. The APIs are designed primarily to be used in conjunction with the BC FIPS provider. The APIs may also be used with other providers although if being used in a FIPS context it is the responsibility of the user to ensure that any other providers used are FIPS certified and used appropriately.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f81962ca7e492deb4d65f165c38e96de"
        },
        {
          "alg" : "SHA-1",
          "content" : "9c0632a6c5ca09a86434cf5e02e72c221e1c930f"
        },
        {
          "alg" : "SHA-256",
          "content" : "c058a438442ea46d8abdefc95e581ebf2834e50504bda925a945b1f4ceb48d86"
        },
        {
          "alg" : "SHA-512",
          "content" : "7af89150b7b6ad23a3e8859976cd4e7cf8e152c16f8a376760b94a77b02b6f3072dc6d0a1ad916e5a28190b3e25c8f92a0720dd040bbb94fb9d1dd72df9492f3"
        },
        {
          "alg" : "SHA-384",
          "content" : "793d1411f41c6a8a0b964ce0d4e3b8dada545a33ce616aabf65c204f49dfb4c64ce02c79043ae5eb81ccc1d84a385f0a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "Bouncy Castle Licence",
            "url" : "https://www.bouncycastle.org/licence.html"
          }
        }
      ],
      "purl" : "pkg:maven/org.bouncycastle/bctls-fips@2.1.20?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.bouncycastle.org/download/bouncy-castle-java-fips"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://www.bouncycastle.org/support"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.bouncycastle/bcutil-fips@2.1.4?type=jar",
      "group" : "org.bouncycastle",
      "name" : "bcutil-fips",
      "version" : "2.1.4",
      "description" : "The Bouncy Castle Java APIs for ASN.1 extension and utility APIs used to support bcpkix and bctls with the BC FIPS provider. The APIs may also be used with other providers although if being used in a FIPS context it is the responsibility of the user to ensure that any other providers used are FIPS certified and used appropriately.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "9323a42a9772823f806ce7b8d3965175"
        },
        {
          "alg" : "SHA-1",
          "content" : "1d37b7a28560684f5b8e4fd65478c9130d4015d0"
        },
        {
          "alg" : "SHA-256",
          "content" : "e169519e6441fb19cabf633d44fcef211506793e5be499ac9215648bd20634e0"
        },
        {
          "alg" : "SHA-512",
          "content" : "6a149e7fbeaf15928e2f79039d0f730c8d1b52c12db7a1eed9491de88a0eeaae821b9bb7616d50e244f8bd754efcf90d7ac9f1c42cdd728c3601df4905935a3d"
        },
        {
          "alg" : "SHA-384",
          "content" : "51b38b4b6dd559b30cd9f4b72300124bc100e1c4944098077a6bfb14fa93e07716149e87523b8ec200cecfb5cdfd8028"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "Bouncy Castle Licence",
            "url" : "https://www.bouncycastle.org/licence.html"
          }
        }
      ],
      "purl" : "pkg:maven/org.bouncycastle/bcutil-fips@2.1.4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.bouncycastle.org/download/bouncy-castle-java-fips"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://www.bouncycastle.org/support"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.bouncycastle/bc-fips@2.1.2?type=jar",
      "group" : "org.bouncycastle",
      "name" : "bc-fips",
      "version" : "2.1.2",
      "description" : "The BC-FJA 2.1.* series is a FIPS 140-3 certified Java implementation with additional Intel native hardware support for AES-NI and SHA-256 where supported. The package has been certified to FIPS 140-3 level 1. This jar contains JCE provider and low-level API for the BC-FJA version 2.1.2, a patched version of BC-FJA-2.1.0, interim FIPS Certificate #4943. Please see certificate for certified platform details.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0e3ce147f5132e096e7c3b22ab23a079"
        },
        {
          "alg" : "SHA-1",
          "content" : "061fbe8383f70489dda95a11a2a4739eb818ff2c"
        },
        {
          "alg" : "SHA-256",
          "content" : "044fcd8a29d236edea8a5b414406cdae63b475f9ad9f05fe2dc904a277941115"
        },
        {
          "alg" : "SHA-512",
          "content" : "c20da957f38fc09b7fc6def8afe9c9f4137a8de56d8d602719be6e1eb7ea0d2dface092bdf0a16d2a178eb57078553e53db60fbbcda166038cddb0a22087f69b"
        },
        {
          "alg" : "SHA-384",
          "content" : "f51856ec6c00f67f454747e75118c6204abaa433a4d6289610a0624cbc0cec2316663df06cbf876ba4ad8cee8748252e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "Bouncy Castle Licence",
            "url" : "https://www.bouncycastle.org/licence.html"
          }
        }
      ],
      "purl" : "pkg:maven/org.bouncycastle/bc-fips@2.1.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.bouncycastle.org/download/bouncy-castle-java-fips/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://www.bouncycastle.org/support"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.easymock/easymock@5.2.0?type=jar",
      "publisher" : "<a href=\"http://easymock.org/contributors.html\" target=\"_blank\">EasyMock contributors</a>",
      "group" : "org.easymock",
      "name" : "easymock",
      "version" : "5.2.0",
      "description" : "EasyMock provides an easy way to create Mock Objects for interfaces and classes generating them on the fly",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1f14fa7d3967662fefc6c6edf3f79736"
        },
        {
          "alg" : "SHA-1",
          "content" : "ceb40330d6ecc2da3cdac41663f193e300497238"
        },
        {
          "alg" : "SHA-256",
          "content" : "e63a6494b96553cbd0dfde13b5f23dabbd811854410d6ebc53a6a6684a1763b5"
        },
        {
          "alg" : "SHA-512",
          "content" : "34c2b94f7d1e46931f8ff2526d258fff07933508992ff1919eddc5538313dee306a994572c9a75c1bc7081833abc2d166dc77f1257d0b4fb04a2218ad0c48022"
        },
        {
          "alg" : "SHA-384",
          "content" : "b30be1de4d5e167ecdbec0da8a8c77874178157471b687b116a0bf1cbcf551bdab587acd52ad8df59fa7d5627a359a01"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.easymock/easymock@5.2.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://easymock.org/easymock"
        },
        {
          "type" : "build-system",
          "url" : "https://travis-ci.org/easymock/easymock"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/easymock/easymock/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://gitter.im/easymock/easymock"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/easymock/easymock/easymock"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.objenesis/objenesis@3.3?type=jar",
      "publisher" : "Joe Walnes, Henri Tremblay, Leonardo Mesquita",
      "group" : "org.objenesis",
      "name" : "objenesis",
      "version" : "3.3",
      "description" : "A library for instantiating Java objects",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "ab0e0b2ab81affdd7f38bcc60fd85571"
        },
        {
          "alg" : "SHA-1",
          "content" : "1049c09f1de4331e8193e579448d0916d75b7631"
        },
        {
          "alg" : "SHA-256",
          "content" : "02dfd0b0439a5591e35b708ed2f5474eb0948f53abf74637e959b8e4ef69bfeb"
        },
        {
          "alg" : "SHA-512",
          "content" : "1fa990d15bd179f07ffbc460d580a6fd0562e45dee8bd4a9405917536b78f45c0d6f644b67f85d781c758aa56eff90aef23eedcc9bd7f5ff887a67b716083e61"
        },
        {
          "alg" : "SHA-384",
          "content" : "2f6878f91a12db32c244afcee619d57c3ad6ff0297f4e41c2247e737c1ccc5fcc1ce03256b479b0f9b87900410bc4502"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.objenesis/objenesis@3.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://objenesis.org/objenesis"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/easymock/objenesis/objenesis"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.mockito/mockito-core@4.6.1?type=jar",
      "group" : "org.mockito",
      "name" : "mockito-core",
      "version" : "4.6.1",
      "description" : "Mockito mock objects library core API and implementation",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "67c6f27b8607f4634bb64c4ffe42987b"
        },
        {
          "alg" : "SHA-1",
          "content" : "545665913b140db2793a0c37e6a686affd9c08b5"
        },
        {
          "alg" : "SHA-256",
          "content" : "ee3b91cdf4c23cff92960c32364371c683ee6415f1ec4678317bcea79c9f9819"
        },
        {
          "alg" : "SHA-512",
          "content" : "50dd388a7d24ad340fb387f30a65dabe1e613e1e086611f58691c5c4b05ce038b9eb5ab79ce52f1ca9abbe55c302a4802a86f228d952afd9d3e9fbceef42e7c5"
        },
        {
          "alg" : "SHA-384",
          "content" : "b34472c5a18b06580675b78a5b2c461e13d373c29a0e8ef8d1d3e750e68875edb004a8de8f0755436e9954468abde252"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT"
          }
        }
      ],
      "purl" : "pkg:maven/org.mockito/mockito-core@4.6.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/mockito/mockito"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/mockito/mockito/actions"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/mockito/mockito/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/mockito/mockito.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/net.bytebuddy/byte-buddy@1.12.10?type=jar",
      "group" : "net.bytebuddy",
      "name" : "byte-buddy",
      "version" : "1.12.10",
      "description" : "Byte Buddy is a Java library for creating Java classes at run time. This artifact is a build of Byte Buddy with all ASM dependencies repackaged into its own name space.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "92ceb541d5a497289e9b920b3cc94c13"
        },
        {
          "alg" : "SHA-1",
          "content" : "f34127d93639fad8c6fb84b3ca30292697d6c55d"
        },
        {
          "alg" : "SHA-256",
          "content" : "1a1ac9ce65eddcea54ead958387bb0b3863d02a2ffe856ab6a57ac79737c19cf"
        },
        {
          "alg" : "SHA-512",
          "content" : "4e295ba2c209794be835ad15aa49f3f01622c7c84be42f4c3ecc9ec0cfab508c45a3077dde310ea2c5201e651ea0f48a870668016c0c79b8b96c4a4930db1087"
        },
        {
          "alg" : "SHA-384",
          "content" : "f07efd73ed56f672b6d6fe69fee8a66ca8f9af174aa8c24a8b5c14f8cc2a9a3508fe8489b7ecb652c6e2f9ca9aad256e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/net.bytebuddy/byte-buddy@1.12.10?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://bytebuddy.net/byte-buddy"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://s01.oss.sonatype.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/raphw/byte-buddy/issues"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/net.bytebuddy/byte-buddy-agent@1.12.10?type=jar",
      "group" : "net.bytebuddy",
      "name" : "byte-buddy-agent",
      "version" : "1.12.10",
      "description" : "The Byte Buddy agent offers convenience for attaching an agent to the local or a remote VM.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b38c175272756e6dd2d0d7aa71e22412"
        },
        {
          "alg" : "SHA-1",
          "content" : "01f097f8d6cad60e8f93e5eb670cf5dc9b64da32"
        },
        {
          "alg" : "SHA-256",
          "content" : "5e8606d14a844c1ec70d2eb8f50c4009fb16138905dee8ca50a328116c041257"
        },
        {
          "alg" : "SHA-512",
          "content" : "7a296822b2262719989dfcfa5ce549341d2f005088beaf6fc1e6dd0585962badd68ae210bae73709646e70b8d52b14239c88c3cabb50dfc261f77be5ed7866a2"
        },
        {
          "alg" : "SHA-384",
          "content" : "10d5deb094c50a36dcf613721b5b23f1b6206696a19f5549dd960cc7e4160c69fcdb2759f9d4fa84817693d298333c09"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/net.bytebuddy/byte-buddy-agent@1.12.10?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://bytebuddy.net/byte-buddy-agent"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://s01.oss.sonatype.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/raphw/byte-buddy/issues"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.mockito/mockito-inline@4.6.1?type=jar",
      "group" : "org.mockito",
      "name" : "mockito-inline",
      "version" : "4.6.1",
      "description" : "Mockito preconfigured inline mock maker (intermediate and to be superseeded by automatic usage in a future version)",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0e57e26c5abe9f279ff8844a5beac889"
        },
        {
          "alg" : "SHA-1",
          "content" : "3d1dffee9a8a1998ec782383ca2f818848f2d5f1"
        },
        {
          "alg" : "SHA-256",
          "content" : "ee52e1c299a632184fba274a9370993e09140429f5e516e6c5570fd6574b297f"
        },
        {
          "alg" : "SHA-512",
          "content" : "9c948cf7fc88f7f747faba78a03497b2ff6153a9d944fa2e1a477dadc4528afc21721854e3d43d53e190d5abe24dbfad69eaf37457e67a34ac099b332bea1350"
        },
        {
          "alg" : "SHA-384",
          "content" : "556d230ee47962f5dc0c97084f95b440475361c389fbdf105fee2690012365a363e80bdc67a53736670eecd65c809852"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT"
          }
        }
      ],
      "purl" : "pkg:maven/org.mockito/mockito-inline@4.6.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/mockito/mockito"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/mockito/mockito/actions"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/mockito/mockito/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/mockito/mockito.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/junit/junit@4.13.2?type=jar",
      "publisher" : "JUnit",
      "group" : "junit",
      "name" : "junit",
      "version" : "4.13.2",
      "description" : "JUnit is a unit testing framework for Java, created by Erich Gamma and Kent Beck.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "d98a9a02a99a9acd22d7653cbcc1f31f"
        },
        {
          "alg" : "SHA-1",
          "content" : "8ac9e16d933b6fb43bc7f576336b8f4d7eb5ba12"
        },
        {
          "alg" : "SHA-256",
          "content" : "8e495b634469d64fb8acfa3495a065cbacc8a0fff55ce1e31007be4c16dc57d3"
        },
        {
          "alg" : "SHA-512",
          "content" : "a31b9950f929a7e5a600d89787ef40e42a8a8e2392e210d0c0f45b3572937670a18a524f1815508cd1152cd1eaa7275cb7430ba45c053be365c83c231bccd3f0"
        },
        {
          "alg" : "SHA-384",
          "content" : "9f85c56a77c699eb87630b9e8224068a34c296bcd9aadb52248dd4665036f5bf1048fe75e5cb590b59e7855ca716acae"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-1.0",
            "url" : "http://www.eclipse.org/legal/epl-v10.html"
          }
        }
      ],
      "purl" : "pkg:maven/junit/junit@4.13.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://junit.org"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/junit-team/junit4/actions"
        },
        {
          "type" : "distribution",
          "url" : "https://github.com/junit-team/junit4/wiki/Download-and-Install"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/junit-team/junit4/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/junit-team/junit4"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.hamcrest/hamcrest-core@1.3?type=jar",
      "group" : "org.hamcrest",
      "name" : "hamcrest-core",
      "version" : "1.3",
      "description" : "This is the core API of hamcrest matcher framework to be used by third-party framework providers. This includes the a foundation set of matcher implementations for common operations.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6393363b47ddcbba82321110c3e07519"
        },
        {
          "alg" : "SHA-1",
          "content" : "42a25dc3219429f0e5d060061f71acb49bf010a0"
        },
        {
          "alg" : "SHA-256",
          "content" : "66fdef91e9739348df7a096aa384a5685f4e875584cce89386a7a47251c4d8e9"
        },
        {
          "alg" : "SHA-512",
          "content" : "e237ae735aac4fa5a7253ec693191f42ef7ddce384c11d29fbf605981c0be077d086757409acad53cb5b9e53d86a07cc428d459ff0f5b00d32a8cbbca390be49"
        },
        {
          "alg" : "SHA-384",
          "content" : "4b5297d2a12cc32b824153afc83f1ba9f1869ca288330f0a2f759659d09e4c420eb6ba4a1efbfa0657b625edd41293d5"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.hamcrest/hamcrest-core@1.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/hamcrest/JavaHamcrest/hamcrest-core"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/hamcrest/JavaHamcrest/hamcrest-core"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/io.swagger.core.v3/swagger-annotations@2.1.10?type=jar",
      "group" : "io.swagger.core.v3",
      "name" : "swagger-annotations",
      "version" : "2.1.10",
      "description" : "swagger-annotations",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e22896b2bfd66f92ed3532e48b71a84b"
        },
        {
          "alg" : "SHA-1",
          "content" : "1eec58d3db42dcefac76fa47211812c4782b1342"
        },
        {
          "alg" : "SHA-256",
          "content" : "59573c4d6357c2121d40069959879cf008783cc8208dc5123f759b0e6a0077ad"
        },
        {
          "alg" : "SHA-512",
          "content" : "321aed22869b30ba8517d76e075bcc3e534a97ad774b0cb7f84c9707d7cde94406fbd1ae6640243a0fc1f747505e5571e8e3fe3c5b24baf341ae332d916b1d6a"
        },
        {
          "alg" : "SHA-384",
          "content" : "4a8653968b9d588b2c80f1725c3bf28f63147a06e5cb784e277106fd8f2e7f311fb5ed78c158b59e5f2a9395d8a9a8d3"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.swagger.core.v3/swagger-annotations@2.1.10?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/swagger-api/swagger-core/modules/swagger-annotations"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/swagger-api/swagger-core/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://groups.google.com/forum/#!forum/swagger-swaggersocket"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/swagger-api/swagger-core/modules/swagger-annotations"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.guava/guava@32.0.1-jre?type=jar",
      "group" : "com.google.guava",
      "name" : "guava",
      "version" : "32.0.1-jre",
      "description" : "Guava is a suite of core and expanded libraries that include utility classes, Google's collections, I/O classes, and much more.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6951895e804b36322214c95917e598d4"
        },
        {
          "alg" : "SHA-1",
          "content" : "6e5d51a72d142f2d40a57dfb897188b36a95b489"
        },
        {
          "alg" : "SHA-256",
          "content" : "bd7fa227591fb8509677d0d1122cf95158f3b8a9f45653f58281d879f6dc48c5"
        },
        {
          "alg" : "SHA-512",
          "content" : "5dbe7a697511cfbe44f3ffb954e32e997677ecc61f03bb7bb374f1b8fa4a931a95cd9d1f5288eb5d42e2aa380e3241b35059786c07edc48e5aa67c30cddad8a5"
        },
        {
          "alg" : "SHA-384",
          "content" : "abad4556e073fb38062c636b6599ceed992302c7d98150e3842d32ce92f6aac7d630633c56efa581523d591361fcf898"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.guava/guava@32.0.1-jre?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/google/guava"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/google/guava/actions"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/google/guava/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/google/guava/guava"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar",
      "group" : "com.google.guava",
      "name" : "failureaccess",
      "version" : "1.0.1",
      "description" : "Contains com.google.common.util.concurrent.internal.InternalFutureFailureAccess and InternalFutures. Most users will never need to use this artifact. Its classes is conceptually a part of Guava, but they're in this separate artifact so that Android libraries can use them without pulling in all of Guava (just as they can use ListenableFuture by depending on the listenablefuture artifact).",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "091883993ef5bfa91da01dcc8fc52236"
        },
        {
          "alg" : "SHA-1",
          "content" : "1dcf1de382a0bf95a3d8b0849546c88bac1292c9"
        },
        {
          "alg" : "SHA-256",
          "content" : "a171ee4c734dd2da837e4b16be9df4661afab72a41adaf31eb84dfdaf936ca26"
        },
        {
          "alg" : "SHA-512",
          "content" : "f8d59b808d6ba617252305b66d5590937da9b2b843d492d06b8d0b1b1f397e39f360d5817707797b979a5bf20bf21987b35333e7a15c44ed7401fea2d2119cae"
        },
        {
          "alg" : "SHA-384",
          "content" : "67659dbd9647ec303d7f15128dc9dba19b98fd8d74758ee3b602451e32c855e236ccaafe08edf4bbfa245f981268440f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/google/guava/failureaccess"
        },
        {
          "type" : "build-system",
          "url" : "https://travis-ci.org/google/guava"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/google/guava/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/google/guava/failureaccess"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar",
      "group" : "com.google.guava",
      "name" : "listenablefuture",
      "version" : "9999.0-empty-to-avoid-conflict-with-guava",
      "description" : "An empty artifact that Guava depends on to signal that it is providing ListenableFuture -- but is also available in a second \"version\" that contains com.google.common.util.concurrent.ListenableFuture class, without any other Guava classes. The idea is: - If users want only ListenableFuture, they depend on listenablefuture-1.0. - If users want all of Guava, they depend on guava, which, as of Guava 27.0, depends on listenablefuture-9999.0-empty-to-avoid-conflict-with-guava. The 9999.0-... version number is enough for some build systems (notably, Gradle) to select that empty artifact over the \"real\" listenablefuture-1.0 -- avoiding a conflict with the copy of ListenableFuture in guava itself. If users are using an older version of Guava or a build system other than Gradle, they may see class conflicts. If so, they can solve them by manually excluding the listenablefuture artifact or manually forcing their build systems to use 9999.0-....",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "d094c22570d65e132c19cea5d352e381"
        },
        {
          "alg" : "SHA-1",
          "content" : "b421526c5f297295adef1c886e5246c39d4ac629"
        },
        {
          "alg" : "SHA-256",
          "content" : "b372a037d4230aa57fbeffdef30fd6123f9c0c2db85d0aced00c91b974f33f99"
        },
        {
          "alg" : "SHA-512",
          "content" : "c5987a979174cbacae2e78b319f080420cc71bcdbcf7893745731eeb93c23ed13bff8d4599441f373f3a246023d33df03e882de3015ee932a74a774afdd0782f"
        },
        {
          "alg" : "SHA-384",
          "content" : "caff9b74079f95832ca7f6029346b34b606051cc8c5a4389fac263511d277ada0c55f28b0d43011055b268c6eb7184d5"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/google/guava/listenablefuture"
        },
        {
          "type" : "build-system",
          "url" : "https://travis-ci.org/google/guava"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/google/guava/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/google/guava/listenablefuture"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
      "group" : "com.google.code.findbugs",
      "name" : "jsr305",
      "version" : "3.0.2",
      "description" : "JSR305 Annotations for Findbugs",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "dd83accb899363c32b07d7a1b2e4ce40"
        },
        {
          "alg" : "SHA-1",
          "content" : "25ea2e8b0c338a877313bd4672d3fe056ea78f0d"
        },
        {
          "alg" : "SHA-256",
          "content" : "766ad2a0783f2687962c8ad74ceecc38a28b9f72a2d085ee438b7813e928d0c7"
        },
        {
          "alg" : "SHA-512",
          "content" : "bb09db62919a50fa5b55906013be6ca4fc7acb2e87455fac5eaf9ede2e41ce8bbafc0e5a385a561264ea4cd71bbbd3ef5a45e02d63277a201d06a0ae1636f804"
        },
        {
          "alg" : "SHA-384",
          "content" : "ca0b169d3eb2d0922dc031133a021f861a043bb3e405a88728215fd6ff00fa52fdc7347842dcc2031472e3726164bdc4"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://findbugs.sourceforge.net/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://code.google.com/p/jsr-305/"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.checkerframework/checker-qual@3.33.0?type=jar",
      "group" : "org.checkerframework",
      "name" : "checker-qual",
      "version" : "3.33.0",
      "description" : "checker-qual contains annotations (type qualifiers) that a programmer writes to specify Java code for type-checking by the Checker Framework.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "fc9418b779d9d57dcd52197006cbdb9b"
        },
        {
          "alg" : "SHA-1",
          "content" : "de2b60b62da487644fc11f734e73c8b0b431238f"
        },
        {
          "alg" : "SHA-256",
          "content" : "e316255bbfcd9fe50d165314b85abb2b33cb2a66a93c491db648e498a82c2de1"
        },
        {
          "alg" : "SHA-512",
          "content" : "049c446677b7b386f3fb501bf65e032bdf2b1b29a3f545848035fff2b683cd275380cf302e30eea641af7f0801f779bcda3d82a71d928e4176f564f796640a64"
        },
        {
          "alg" : "SHA-384",
          "content" : "ddf7a0f70421d1ed75e93c0a30434a4862c3905e433223e19861323cf0994e843392b746003040f10a7db6fc960b8aa6"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT"
          }
        }
      ],
      "purl" : "pkg:maven/org.checkerframework/checker-qual@3.33.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://checkerframework.org/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/typetools/checker-framework.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0?type=jar",
      "publisher" : "Google LLC",
      "group" : "com.google.errorprone",
      "name" : "error_prone_annotations",
      "version" : "2.18.0",
      "description" : "Error Prone is a static analysis tool for Java that catches common programming mistakes at compile-time.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "64145d0e7fee5a69ed7b84cf402de998"
        },
        {
          "alg" : "SHA-1",
          "content" : "89b684257096f548fa39a7df9fdaa409d4d4df91"
        },
        {
          "alg" : "SHA-256",
          "content" : "9e6814cb71816988a4fd1b07a993a8f21bb7058d522c162b1de849e19bea54ae"
        },
        {
          "alg" : "SHA-512",
          "content" : "3cea86be94bb8ae40d21ad4bf7d7f6b2233e89593b7b741ad84c78840cd3837bb5136f52e62fe9ae0953d7b190c46ad3edc102dfa97b4c7ea472a80206bf5db7"
        },
        {
          "alg" : "SHA-384",
          "content" : "7622eb33f83f03ab32b710b36c2fe836e24c5318f65fb8c0631a99507ca3ae65c2df8e33b63a5ce853b9cab6d9cb32e5"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://errorprone.info/error_prone_annotations"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/google/error-prone/error_prone_annotations"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.j2objc/j2objc-annotations@2.8?type=jar",
      "group" : "com.google.j2objc",
      "name" : "j2objc-annotations",
      "version" : "2.8",
      "description" : "A set of annotations that provide additional information to the J2ObjC translator to modify the result of translation.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "c50af69b704dc91050efb98e0dff66d1"
        },
        {
          "alg" : "SHA-1",
          "content" : "c85270e307e7b822f1086b93689124b89768e273"
        },
        {
          "alg" : "SHA-256",
          "content" : "f02a95fa1a5e95edb3ed859fd0fb7df709d121a35290eff8b74dce2ab7f4d6ed"
        },
        {
          "alg" : "SHA-512",
          "content" : "f8263868a792b41707c9e7fe6fa5650a14cd93fbeafad20efe3772a3058fc933eb59782ec59e6eb9b9c569aa96da80134ae9fdf7547b69c44a97087efddceeff"
        },
        {
          "alg" : "SHA-384",
          "content" : "e6087ec31fec8289158496ad2ed6ce8472d5d513808a312e0782cedac3b86c37a62a63c0b5ea3839491d109fe9e148a1"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.j2objc/j2objc-annotations@2.8?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/google/j2objc/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.sonatype.org/spice/trunk/oss/oss-parent-9/j2objc-annotations"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.guava/guava-testlib@32.0.1-jre?type=jar",
      "group" : "com.google.guava",
      "name" : "guava-testlib",
      "version" : "32.0.1-jre",
      "description" : "Guava testlib is a set of java classes used for more convenient unit testing - particularly to assist the tests for Guava itself.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "095212c7b995a423c61e4207c4090b50"
        },
        {
          "alg" : "SHA-1",
          "content" : "53ebb9303be258ba8fda12881f04be811e0f496e"
        },
        {
          "alg" : "SHA-256",
          "content" : "c97511849a5e085280f106df2b059566febd280b118d33d6a9e068d238100b63"
        },
        {
          "alg" : "SHA-512",
          "content" : "53339d5c42b5593a369efd5ee3bda0cb2c3b1e3df7116a3e3015ac4467e44084324aeb6d363a40b468c991228ae06ab2b752b1a02baa7119699e39b8473b08bf"
        },
        {
          "alg" : "SHA-384",
          "content" : "b5927110758f14517bb51ae66f9efdb86a812710cdfe0535717397a614329b526f8b03b116c4075c5513d17ebaefc38e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.guava/guava-testlib@32.0.1-jre?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/google/guava/guava-testlib"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/google/guava/actions"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/google/guava/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/google/guava/guava-testlib"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent/common-utils@7.8.7?type=jar",
      "publisher" : "Confluent, Inc.",
      "group" : "io.confluent",
      "name" : "common-utils",
      "version" : "7.8.7",
      "description" : "Common utilities, including metrics and config.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "7a9ad79b73f578ae36d7a3fc97bde51a"
        },
        {
          "alg" : "SHA-1",
          "content" : "5ce9a0ec8af8c68753327d4067b1fdc680ef3a99"
        },
        {
          "alg" : "SHA-256",
          "content" : "f88f88c719064c37e059f8fc86f3112ac480ecf8de46367d0bd656903269e456"
        },
        {
          "alg" : "SHA-512",
          "content" : "29e3a5f0f7ca10ec39104d645b412647de6efee71dbd390efd67fc9b011af5500c558b7aa38c819defc1d51ee2ba0c3a2e5edc28934c35183fb9bd3efe909850"
        },
        {
          "alg" : "SHA-384",
          "content" : "dcf1ea48d09b57f22d69de0b91a21042e20f49c21b9b219bc5d248bc366d8246ee3797a0d792ef7182ed2f684aa505e0"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent/common-utils@7.8.7?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://confluent.io/common-utils"
        },
        {
          "type" : "distribution-intake",
          "url" : "s3://staging-confluent-packages-maven-654654529379-us-west-2/v7.8.7-rc260218111616/maven"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/confluentinc/common/common-utils"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent/assembly-plugin-boilerplate@7.8.7?classifier=resources&type=zip",
      "group" : "io.confluent",
      "name" : "assembly-plugin-boilerplate",
      "version" : "7.8.7",
      "description" : "Maven Assembly Plugin boilerplate for Dockerized projects",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "609889165811b3f705d288c2ad5a70df"
        },
        {
          "alg" : "SHA-1",
          "content" : "247027ca89f1ec32e4fe49b662ed5ee8e2c869f0"
        },
        {
          "alg" : "SHA-256",
          "content" : "4e8628a8a8359386ab85d727b7ee51e94927ba46b9fa13425a7933e54433c6ff"
        },
        {
          "alg" : "SHA-512",
          "content" : "7f15bc103e8279e93b1042b755c87410712db2bd8bdba17b7ccb53d3c9c4fcb1f5e91deeda78631b773acee278604825f3bc228869b393ea81d2a9a4dde2ebbf"
        },
        {
          "alg" : "SHA-384",
          "content" : "75c05e79e25327e7aafc7f21e4a366b7d1c080e6f09140171b6b8b1fa079b55b40c7adab16469d0924bbd3560870a74b"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent/assembly-plugin-boilerplate@7.8.7?classifier=resources&type=zip",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/confluentinc/common"
        },
        {
          "type" : "distribution-intake",
          "url" : "s3://staging-confluent-packages-maven-654654529379-us-west-2/v7.8.7-rc260218111616/maven"
        }
      ]
    }
  ],
  "dependencies" : [
    {
      "ref" : "pkg:maven/io.confluent/kafka-schema-registry-client@7.8.7?type=jar",
      "dependsOn" : [
        "pkg:maven/org.yaml/snakeyaml@2.0?type=jar",
        "pkg:maven/org.apache.kafka/kafka-clients@7.8.7-ccs?type=jar",
        "pkg:maven/org.apache.avro/avro@1.11.5?type=jar",
        "pkg:maven/org.apache.commons/commons-compress@1.26.1?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.16.0?type=jar",
        "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8@2.16.0?type=jar",
        "pkg:maven/org.bouncycastle/bctls-fips@2.1.20?type=jar",
        "pkg:maven/org.easymock/easymock@5.2.0?type=jar",
        "pkg:maven/org.mockito/mockito-core@4.6.1?type=jar",
        "pkg:maven/org.mockito/mockito-inline@4.6.1?type=jar",
        "pkg:maven/junit/junit@4.13.2?type=jar",
        "pkg:maven/io.swagger.core.v3/swagger-annotations@2.1.10?type=jar",
        "pkg:maven/com.google.guava/guava@32.0.1-jre?type=jar",
        "pkg:maven/com.google.guava/guava-testlib@32.0.1-jre?type=jar",
        "pkg:maven/io.confluent/common-utils@7.8.7?type=jar",
        "pkg:maven/io.confluent/assembly-plugin-boilerplate@7.8.7?classifier=resources&type=zip"
      ]
    },
    {
      "ref" : "pkg:maven/org.yaml/snakeyaml@2.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.kafka/kafka-clients@7.8.7-ccs?type=jar",
      "dependsOn" : [
        "pkg:maven/com.github.luben/zstd-jni@1.5.6-4?type=jar",
        "pkg:maven/at.yawk.lz4/lz4-java@1.10.2?type=jar",
        "pkg:maven/org.xerial.snappy/snappy-java@1.1.10.5?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.github.luben/zstd-jni@1.5.6-4?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/at.yawk.lz4/lz4-java@1.10.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.xerial.snappy/snappy-java@1.1.10.5?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.avro/avro@1.11.5?type=jar",
      "dependsOn" : [
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.16.0?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.16.0?type=jar",
        "pkg:maven/org.apache.commons/commons-compress@1.26.1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.16.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.16.0?type=jar",
      "dependsOn" : [
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.16.0?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.16.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.16.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-compress@1.26.1?type=jar",
      "dependsOn" : [
        "pkg:maven/commons-codec/commons-codec@1.16.1?type=jar",
        "pkg:maven/commons-io/commons-io@2.16.0?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/commons-codec/commons-codec@1.16.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-io/commons-io@2.16.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8@2.16.0?type=jar",
      "dependsOn" : [
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.16.0?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.16.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.bouncycastle/bctls-fips@2.1.20?type=jar",
      "dependsOn" : [
        "pkg:maven/org.bouncycastle/bcutil-fips@2.1.4?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.bouncycastle/bcutil-fips@2.1.4?type=jar",
      "dependsOn" : [
        "pkg:maven/org.bouncycastle/bc-fips@2.1.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.bouncycastle/bc-fips@2.1.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.easymock/easymock@5.2.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.objenesis/objenesis@3.3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.objenesis/objenesis@3.3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.mockito/mockito-core@4.6.1?type=jar",
      "dependsOn" : [
        "pkg:maven/net.bytebuddy/byte-buddy@1.12.10?type=jar",
        "pkg:maven/net.bytebuddy/byte-buddy-agent@1.12.10?type=jar",
        "pkg:maven/org.objenesis/objenesis@3.3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/net.bytebuddy/byte-buddy@1.12.10?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/net.bytebuddy/byte-buddy-agent@1.12.10?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.mockito/mockito-inline@4.6.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.mockito/mockito-core@4.6.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/junit/junit@4.13.2?type=jar",
      "dependsOn" : [
        "pkg:maven/org.hamcrest/hamcrest-core@1.3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.hamcrest/hamcrest-core@1.3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.swagger.core.v3/swagger-annotations@2.1.10?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.guava/guava@32.0.1-jre?type=jar",
      "dependsOn" : [
        "pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar",
        "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
        "pkg:maven/org.checkerframework/checker-qual@3.33.0?type=jar",
        "pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0?type=jar",
        "pkg:maven/com.google.j2objc/j2objc-annotations@2.8?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.checkerframework/checker-qual@3.33.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.j2objc/j2objc-annotations@2.8?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.guava/guava-testlib@32.0.1-jre?type=jar",
      "dependsOn" : [
        "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
        "pkg:maven/org.checkerframework/checker-qual@3.33.0?type=jar",
        "pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0?type=jar",
        "pkg:maven/com.google.j2objc/j2objc-annotations@2.8?type=jar",
        "pkg:maven/com.google.guava/guava@32.0.1-jre?type=jar",
        "pkg:maven/junit/junit@4.13.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.confluent/common-utils@7.8.7?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.confluent/assembly-plugin-boilerplate@7.8.7?classifier=resources&type=zip",
      "dependsOn" : [ ]
    }
  ]
}