{
  "bomFormat" : "CycloneDX",
  "specVersion" : "1.4",
  "serialNumber" : "urn:uuid:37eb6a83-4cdd-3f90-8eb5-fafef5e7471a",
  "version" : 1,
  "metadata" : {
    "timestamp" : "2024-03-07T19:43:30Z",
    "tools" : [
      {
        "vendor" : "OWASP Foundation",
        "name" : "CycloneDX Maven plugin",
        "version" : "2.7.11",
        "hashes" : [
          {
            "alg" : "MD5",
            "content" : "a70e8b649ab4a2bb7922d360173c8237"
          },
          {
            "alg" : "SHA-1",
            "content" : "4c3c0878c15561639076e5be7a48ffcd6111c5ee"
          },
          {
            "alg" : "SHA-256",
            "content" : "70997d52dbffd4e797c467b2062c6ba9b8b5a7380ff2884779f2743b6172ebb5"
          },
          {
            "alg" : "SHA-512",
            "content" : "bc1ce91190c642f68fd3571939d7668def3b879ec8e5a87a213a9710a106e0290f60f9e0414593d19cca958c4fcb5d4450bd2793bcd609948419c8a2a6a7f5c8"
          },
          {
            "alg" : "SHA-384",
            "content" : "3c8421bdafd1754fb424f16dccc83bfe0827648c1cadfffc98bdf1c7da65475dfe48d2f4b16d233bb8819e155ba6a4f3"
          }
        ]
      }
    ],
    "component" : {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.cxf",
      "name" : "cxf-rt-ws-rm",
      "version" : "3.5.8",
      "description" : "Apache CXF Runtime WS Reliable Messaging",
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.cxf/cxf-rt-ws-rm@3.5.8?type=bundle",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://cxf.apache.org"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/view/A-D/view/CXF/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CXF"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/cxf-users"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-ws-rm"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.cxf/cxf-rt-ws-rm@3.5.8?type=bundle"
    },
    "properties" : [
      {
        "name" : "maven.goal",
        "value" : "makeBom"
      },
      {
        "name" : "maven.scopes",
        "value" : "compile,provided,runtime,system"
      }
    ]
  },
  "components" : [
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.aries.blueprint",
      "name" : "org.apache.aries.blueprint.core",
      "version" : "1.10.3",
      "description" : "This bundle contains the core implementation of Blueprint along with the \"ext\" namespace handler.",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "720c3648602f867f58b1b4aa3b2a3ffc"
        },
        {
          "alg" : "SHA-1",
          "content" : "a7f7003cb8233197818155f91f1f6e8990e11cd9"
        },
        {
          "alg" : "SHA-256",
          "content" : "73162744e2f63dfb32a1938110c5d186645ec90fcd05dbc57b4a31c1b7e1bcd5"
        },
        {
          "alg" : "SHA-512",
          "content" : "e595514993eab29718ff95e9a71f3e39459fae60e1ea1a532fb86a5b99fa88dbb54eed0992da0df960451cd2fc78670722cba241ae91381490de7f071f41059a"
        },
        {
          "alg" : "SHA-384",
          "content" : "3a3ddad9ca7d6608716b9e446fd1ec6a4f5e36f1b66a27735babeb4197908ddd7df60db65e3b43dd275f3de628cd5cf0"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.aries.blueprint/org.apache.aries.blueprint.core@1.10.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://aries.apache.org/blueprint-parent/org.apache.aries.blueprint.core"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/ARIES"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/aries-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=aries.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.aries.blueprint/org.apache.aries.blueprint.core@1.10.3?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.aries.blueprint",
      "name" : "org.apache.aries.blueprint.api",
      "version" : "1.0.1",
      "description" : "This bundle contains the blueprint api 1.0.1 and the corresponding xml schema.",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6d0a9938c0fc9c8d60e3711c77f150bb"
        },
        {
          "alg" : "SHA-1",
          "content" : "3637a2551bfc171f3e22d8622ef7d78ff9dcf8aa"
        },
        {
          "alg" : "SHA-256",
          "content" : "e4f28ef73a77494757561a1bef3ad7a74f2f247174c7946ba217948ba4776d8a"
        },
        {
          "alg" : "SHA-512",
          "content" : "359e43219a86a5f9129004710e224471c63a56de5f64ab8e37280a0380bdf13fd5352047bbfb19f3854124891b417b0db93a77723744ecf8dc6af477f85c1e70"
        },
        {
          "alg" : "SHA-384",
          "content" : "4534c9a78b361f374fe265c928c3ec3841605d1199e418be26aa5f1a857427afa013421835a9bab7585c73db44f77f0f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.aries.blueprint/org.apache.aries.blueprint.api@1.0.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://aries.apache.org/org.apache.aries.blueprint.api"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/ARIES"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/aries-user/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/aries/tags/org.apache.aries.blueprint.api-1.0.1"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.aries.blueprint/org.apache.aries.blueprint.api@1.0.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.aries.quiesce",
      "name" : "org.apache.aries.quiesce.api",
      "version" : "1.0.0",
      "description" : "Quiesce API.",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b3fb687d31b16b9eba2d6d23248d8274"
        },
        {
          "alg" : "SHA-1",
          "content" : "3591319ac43345db1e6008e7f82f318746863f08"
        },
        {
          "alg" : "SHA-256",
          "content" : "0737c1406094aa348f31e23f0ee96a6f404327d0572fdc0b2d88c5e5e2a58d8f"
        },
        {
          "alg" : "SHA-512",
          "content" : "a7c74bdb7d930b14e5f71e87b2acd22dad7af0d3e4b452e0d7d64c8a8b0615c4f3108080c690b350d35d531a54ffc5b1321330e256b2ece5405883b751aa543b"
        },
        {
          "alg" : "SHA-384",
          "content" : "2c37bb68caef7967c640b3ac54f4f5853f8e097668eede95c13a4e04378eb6d46e1764c0dcac98abcd5ed49eb2735a7e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.aries.quiesce/org.apache.aries.quiesce.api@1.0.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://aries.apache.org/default-parent/java5-parent/org.apache.aries.quiesce.api"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/ARIES"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/aries-user/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/aries/tags/org.apache.aries.quiesce.api-1.0.0"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.aries.quiesce/org.apache.aries.quiesce.api@1.0.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.aries.proxy",
      "name" : "org.apache.aries.proxy.api",
      "version" : "1.1.1",
      "description" : "This bundle contains the Apache Aries Proxy service API.",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "86a5f630e8c521cff04b8a5ae0bc4ff4"
        },
        {
          "alg" : "SHA-1",
          "content" : "544dd6dadbdbb3c2fc9e3761ef044ca5b74bab7d"
        },
        {
          "alg" : "SHA-256",
          "content" : "33f03f0c4fe8341816da2606414382d749410c517cdd893c16cefd969e459f31"
        },
        {
          "alg" : "SHA-512",
          "content" : "1e023996517e3a1aeebea87144c08b2c563215b45cd64b351c90b626947e274d77a20eb9f0a26ce328c793ae0463945b7b88214ec5632396811b05b2bdffd07c"
        },
        {
          "alg" : "SHA-384",
          "content" : "71c5adafc3534c4bef9b4e98419a011cdeb5acd5a03bf3208a0ea597b398312bdba70a9df08cc8fa2efe42548c0f9c7f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.aries.proxy/org.apache.aries.proxy.api@1.1.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://aries.apache.org/org.apache.aries.proxy.api"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/ARIES"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/aries-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=aries.git;a=summary"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.aries.proxy/org.apache.aries.proxy.api@1.1.1?type=jar"
    },
    {
      "publisher" : "OSGi Alliance",
      "group" : "org.osgi",
      "name" : "org.osgi.core",
      "version" : "6.0.0",
      "description" : "OSGi Core Release 6, Interfaces and Classes for use in compiling bundles.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "cae291c61fe8b7a4476d713550c7ff49"
        },
        {
          "alg" : "SHA-1",
          "content" : "0c49acdc9ac62cf69ee49cb6f1905b4fdb79ea5c"
        },
        {
          "alg" : "SHA-256",
          "content" : "1c1bb435eb34cbf1f743653da38f604d45d53fbc95979053768cd3fc293cb931"
        },
        {
          "alg" : "SHA-512",
          "content" : "a6d5388804982ab2cb0ba82b4291e73f006577c54e5dcb0675a2c4922594ddb0265810a4e7c748c88eba76ee350340376b7a9bd25d2de3afb954cf89117cd470"
        },
        {
          "alg" : "SHA-384",
          "content" : "8daff91fc229b2874c1ff7a214fdee65b1824fbac76eb7feec609c5b70ab2fd24fc5cf017b339788a5c7aec041ec1a1c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.osgi/org.osgi.core@6.0.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.osgi.org"
        },
        {
          "type" : "vcs",
          "url" : "private"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.osgi/org.osgi.core@6.0.0?type=jar"
    },
    {
      "publisher" : "Spring IO",
      "group" : "org.springframework",
      "name" : "spring-beans",
      "version" : "5.3.32",
      "description" : "Spring Beans",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "26ab7195f3c29751545eb317dcc50ffc"
        },
        {
          "alg" : "SHA-1",
          "content" : "71a4d51820d614f6f72d379493c0f32657974c59"
        },
        {
          "alg" : "SHA-256",
          "content" : "0d664fd9090b43854899669768def68e80d1aa83ccf9e3608964dd286cf0812d"
        },
        {
          "alg" : "SHA-512",
          "content" : "9ae605e8e5b6dfcb6d8bb8ca1f00b7a5e7a72959d3fd6e59e9449c4478b6972297269cbad0adc2ae917da4e1edaa8d1d1b4a562cb92943d495bdcbccbfce34dc"
        },
        {
          "alg" : "SHA-384",
          "content" : "788f6987313c6f46c0276b5a06e99b7779970323309481488646322da4cbaf14099f5b454dad6676f37efd9ecd9dd11b"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.springframework/spring-beans@5.3.32?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/spring-projects/spring-framework"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/spring-projects/spring-framework/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/spring-projects/spring-framework"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.springframework/spring-beans@5.3.32?type=jar"
    },
    {
      "publisher" : "Spring IO",
      "group" : "org.springframework",
      "name" : "spring-core",
      "version" : "5.3.32",
      "description" : "Spring Core",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "de057df922d1f52cb028515d74c61b38"
        },
        {
          "alg" : "SHA-1",
          "content" : "50eca89542c407395a58c72097a6cc17b28e718a"
        },
        {
          "alg" : "SHA-256",
          "content" : "e2ac75fd816e2c0c058a737cf66f869b0adf5a2747e58fd85dac98fbd4292f10"
        },
        {
          "alg" : "SHA-512",
          "content" : "88d7f38991c0182e008618e684efae4a799c229ef41b1642164752e40f91677ce52242de5b5cb655f16ee27c46f8f43265a6543a5709ffe461afaa724b23dda5"
        },
        {
          "alg" : "SHA-384",
          "content" : "cb62ebca6b8142769885acc17a5a3bb17f2bb33629c26ced4169a0def26d6da3276da30acbb7dcbabd4fb4e509ca4044"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.springframework/spring-core@5.3.32?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/spring-projects/spring-framework"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/spring-projects/spring-framework/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/spring-projects/spring-framework"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.springframework/spring-core@5.3.32?type=jar"
    },
    {
      "publisher" : "Spring IO",
      "group" : "org.springframework",
      "name" : "spring-jcl",
      "version" : "5.3.32",
      "description" : "Spring Commons Logging Bridge",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4ce71d8dbe453ff51b863e08ef3c0024"
        },
        {
          "alg" : "SHA-1",
          "content" : "b10caddf9d2513895746a13c386d4fb5a1e84e97"
        },
        {
          "alg" : "SHA-256",
          "content" : "b7061ce67aebe2d62afaef74a63b8be740aa774d6843d31f0c9b2a6c6a4ba3fc"
        },
        {
          "alg" : "SHA-512",
          "content" : "54780d7e53c3357747d91b1ae8cff637888ae38412a599cd08f06a39ab4517018c590428c43d02ee716603669d1335cb3e1a6ffb7440a4428c17b2ae13542c1e"
        },
        {
          "alg" : "SHA-384",
          "content" : "c9e9b01f649663b0e0066bb782cd7ad8ecf97900d37e411cd9a669fde80a7215a9f91b6fe00af7107fb344020fb52c87"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.springframework/spring-jcl@5.3.32?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/spring-projects/spring-framework"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/spring-projects/spring-framework/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/spring-projects/spring-framework"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.springframework/spring-jcl@5.3.32?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.cxf",
      "name" : "cxf-core",
      "version" : "3.5.8",
      "description" : "Apache CXF Core",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "55525ade5f838741e646063c1148da95"
        },
        {
          "alg" : "SHA-1",
          "content" : "fb1f1e19c85298d3d773f4b90b2ecd3b49aae50f"
        },
        {
          "alg" : "SHA-256",
          "content" : "57f2accf90747c2ed0e5159444845ef21221908e66c78b9f8c568c45eb757253"
        },
        {
          "alg" : "SHA-512",
          "content" : "350b212db3340b3436d82e4efed620f07700aae8c44e9e8c99a7786f8143fedfd2b6ad2de84c68d1e2e5293a63f5636e935cf65149252b20b8bfec7f186c4e96"
        },
        {
          "alg" : "SHA-384",
          "content" : "31d5dfd34a8d539902b897c9e70e7da6cd51f84822371aaa943fab57a1f84526115cf0de6904948c3ac6f6e497c0b37a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.cxf/cxf-core@3.5.8?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://cxf.apache.org"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/view/A-D/view/CXF/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CXF"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/cxf-users"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-core"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.cxf/cxf-core@3.5.8?type=jar"
    },
    {
      "publisher" : "Eclipse Foundation",
      "group" : "org.glassfish.jaxb",
      "name" : "jaxb-runtime",
      "version" : "2.3.5",
      "description" : "JAXB (JSR 222) Reference Implementation",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "2d3790292a30333a14b7fb1143864a9c"
        },
        {
          "alg" : "SHA-1",
          "content" : "a169a961a2bb9ac69517ec1005e451becf5cdfab"
        },
        {
          "alg" : "SHA-256",
          "content" : "4a25453756d08be89c6537cc26fea237677ab99eea857ce1bcb84346715cfae4"
        },
        {
          "alg" : "SHA-512",
          "content" : "c55c0754e4d79d548c029504b04b15d5ef28821f0c3ee9e14346fabfc3d6e5ef0bd38b4d076917eeac6a0c79bbbe1f78dd4f36f425c175efed23ea8cb771d9ff"
        },
        {
          "alg" : "SHA-384",
          "content" : "7918c98d770221a2c4bd913870b9ae6e91271fb37eb60f9d2e2a6bca49f7af1980be80e9aad77ca875e79ed3a6391d06"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.5?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://eclipse-ee4j.github.io/jaxb-ri/"
        },
        {
          "type" : "distribution",
          "url" : "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/jaxb-ri/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://accounts.eclipse.org/mailing-list/jaxb-impl-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/jaxb-ri.git/jaxb-runtime-parent/jaxb-runtime"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.5?type=jar"
    },
    {
      "publisher" : "Eclipse Foundation",
      "group" : "org.glassfish.jaxb",
      "name" : "txw2",
      "version" : "2.3.5",
      "description" : "TXW is a library that allows you to write XML documents.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "67005a4cf5ee9cfd82edec1bdbecb32b"
        },
        {
          "alg" : "SHA-1",
          "content" : "ec8930fa62e7b1758b1664d135f50c7abe86a4a3"
        },
        {
          "alg" : "SHA-256",
          "content" : "7d75ea1151367fb66287011d9941715f645922932554acba0c5ac3aec67fb01f"
        },
        {
          "alg" : "SHA-512",
          "content" : "5bdcd56ff4644554e001862d69ddf275441bfd72d641a200e17f0f1093a49fe2c5f2e0d5a65797419b0355843c916b81a6fd4bde67baa6d4a70b6784e4f9def9"
        },
        {
          "alg" : "SHA-384",
          "content" : "ffcb4be280ad100c23249cf17de737bb6093440aa26e533aeb7c57eb5959b964b62c664250c9d39088d22916321a66a7"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.glassfish.jaxb/txw2@2.3.5?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://eclipse-ee4j.github.io/jaxb-ri/"
        },
        {
          "type" : "distribution",
          "url" : "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/jaxb-ri/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://accounts.eclipse.org/mailing-list/jaxb-impl-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/jaxb-ri.git/jaxb-txw-parent/txw2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.glassfish.jaxb/txw2@2.3.5?type=jar"
    },
    {
      "publisher" : "Eclipse Foundation",
      "group" : "com.sun.istack",
      "name" : "istack-commons-runtime",
      "version" : "3.0.12",
      "description" : "istack common utility code",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1952bd76321f8580cfaa57e332a68287"
        },
        {
          "alg" : "SHA-1",
          "content" : "cbbe1a62b0cc6c85972e99d52aaee350153dc530"
        },
        {
          "alg" : "SHA-256",
          "content" : "27d85fc134c9271d5c79d3300fc4669668f017e72409727c428f54f2417f04cd"
        },
        {
          "alg" : "SHA-512",
          "content" : "af36b11cc0d82b7f62c64941f4e7d441d25cb9f3c4b3e08753d038c388e5a09364b5dac9127f29a9b8df6d96034133caadab6d74371077478d2f301605913460"
        },
        {
          "alg" : "SHA-384",
          "content" : "ad8ba1f6538e087915b1e7fbf4a7a60b006ebecc4ab52986c10dfe88ae11ae7eb6e1f302bee06f70b16ec316f001375b"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/com.sun.istack/istack-commons-runtime@3.0.12?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://projects.eclipse.org/projects/ee4j/istack-commons/istack-commons-runtime"
        },
        {
          "type" : "distribution",
          "url" : "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/jaxb-istack-commons/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/jaxb-impl-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/jaxb-istack-commons/istack-commons-runtime"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.sun.istack/istack-commons-runtime@3.0.12?type=jar"
    },
    {
      "publisher" : "Eclipse Foundation",
      "group" : "com.sun.activation",
      "name" : "jakarta.activation",
      "version" : "1.2.2",
      "description" : "Jakarta Activation",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0b8bee3bf29b9a015f8b992035581a7c"
        },
        {
          "alg" : "SHA-1",
          "content" : "74548703f9851017ce2f556066659438019e7eb5"
        },
        {
          "alg" : "SHA-256",
          "content" : "02156773e4ae9d048d14a56ad35d644bee9f1052a791d072df3ded3c656e6e1a"
        },
        {
          "alg" : "SHA-512",
          "content" : "8bd94a4370b827e3904f31253b022e5c1851896d3b616ca7daebfef259238cedc56d4ced32c74f24a13c3e2295b0ea012af5d04656b7f713cc53a2f18d5e2cf7"
        },
        {
          "alg" : "SHA-384",
          "content" : "1cb0aff8b73ba52a9931b2cf13c75a1ce6665fb826bf97ede66db75c532136aa189fb53a1925e62b6eef572309ef3b9a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/com.sun.activation/jakarta.activation@1.2.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/eclipse-ee4j/jaf/jakarta.activation"
        },
        {
          "type" : "distribution",
          "url" : "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/jaf/issues/"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/jaf/jakarta.activation"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.sun.activation/jakarta.activation@1.2.2?type=jar"
    },
    {
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.woodstox",
      "name" : "woodstox-core",
      "version" : "6.4.0",
      "description" : "Woodstox is a high-performance XML processor that implements Stax (JSR-173), SAX2 and Stax2 APIs",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "afcba1114fca8199ef26346dd6011e90"
        },
        {
          "alg" : "SHA-1",
          "content" : "c47579857bbf12c85499f431d4ecf27d77976b7c"
        },
        {
          "alg" : "SHA-256",
          "content" : "d6eb9f2f40049a7a808baf11ffba0737648e62ff52fde9271d808e5d57a27279"
        },
        {
          "alg" : "SHA-512",
          "content" : "7da4cd51f7082e59b3cb78988cda78bf162e2b02457caf17242cb9cea9b8002ada15d4dfe774ca0355acdea95c88b67c4d06a27a61653cb84c9a46d27b2726c6"
        },
        {
          "alg" : "SHA-384",
          "content" : "6e25d32eb4c127f7129ccd912ff882625d3fa43e8eba9bc55013a27a61806d1b865ec809bd21d58d3dbfa3d9e2a3d516"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.woodstox/woodstox-core@6.4.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/FasterXML/woodstox"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/FasterXML/woodstox/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/FasterXML/woodstox"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.woodstox/woodstox-core@6.4.0?type=jar"
    },
    {
      "publisher" : "fasterxml.com",
      "group" : "org.codehaus.woodstox",
      "name" : "stax2-api",
      "version" : "4.2.1",
      "description" : "tax2 API is an extension to basic Stax 1.0 API that adds significant new functionality, such as full-featured bi-direction validation interface and high-performance Typed Access API.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "af8377bc7882332e22456616a9f164f6"
        },
        {
          "alg" : "SHA-1",
          "content" : "a3f7325c52240418c2ba257b103c3c550e140c83"
        },
        {
          "alg" : "SHA-256",
          "content" : "678567e48b51a42c65c699f266539ad3d676d4b1a5b0ad7d89ece8b9d5772579"
        },
        {
          "alg" : "SHA-512",
          "content" : "00efc5d4d17540fb180c5b20d456630a8b3262dff46676689ae916ba16f0fbd9b1a71c7badfb254faad6597f94fed1edb96f77c15f40178eaf4d8cd35cea5e8d"
        },
        {
          "alg" : "SHA-384",
          "content" : "97a6a9f0cc666776e4a4f08729c303d2a602ce5c25ee633cd6c54c72f12d11e9d43634ca6ca4ef7da5973a52030384da"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-4-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://github.com/FasterXML/stax2-api"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/FasterXML/stax2-api/issues"
        },
        {
          "type" : "vcs",
          "url" : "http://github.com/FasterXML/stax2-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.ws.xmlschema",
      "name" : "xmlschema-core",
      "version" : "2.3.1",
      "description" : "Commons XMLSchema is a light weight schema object model that can be used to manipulate or generate XML schema.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "76e1deab5e6e1caa5fed31b3482cd266"
        },
        {
          "alg" : "SHA-1",
          "content" : "5a83fc4e79d128f38c9e32138537060678151759"
        },
        {
          "alg" : "SHA-256",
          "content" : "648f7f7e5228d89069cbc54c32404209f242581bc1c1e2e74229114f081071aa"
        },
        {
          "alg" : "SHA-512",
          "content" : "e08630e6f6fbe2b960a7c161ddff46e135566bcb1dd2aaf3707ac01a843fb462ac1c7eeb830aca7fc88cbe3ffadc235adac07ec019e166050860ed73d249c21f"
        },
        {
          "alg" : "SHA-384",
          "content" : "456b8a1dab0dfbccc13d9b78b195aef80d6989ccbd3a421e3e60305a4d2d48704d2f6b157c593ac2371661a505098c13"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.ws.xmlschema/xmlschema-core@2.3.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://ws.apache.org/commons/xmlschema20/xmlschema-core/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/XMLSCHEMA"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/ws-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=ws-xmlschema.git;a=summary/xmlschema-core"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.ws.xmlschema/xmlschema-core@2.3.1?type=jar"
    },
    {
      "publisher" : "Eclipse Foundation",
      "group" : "jakarta.xml.bind",
      "name" : "jakarta.xml.bind-api",
      "version" : "2.3.3",
      "description" : "Jakarta XML Binding API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "61286918ca0192e9f87d1358aef718dd"
        },
        {
          "alg" : "SHA-1",
          "content" : "48e3b9cfc10752fba3521d6511f4165bea951801"
        },
        {
          "alg" : "SHA-256",
          "content" : "c04539f472e9a6dd0c7685ea82d677282269ab8e7baca2e14500e381e0c6cec5"
        },
        {
          "alg" : "SHA-512",
          "content" : "adf6436a7a9dc6f64b97127861d7a89b78e82bea67f72bda800ef285163adcd84dbf006f679108a2a8c2eed013e0b771da2354087e0845479ff2b6318b881442"
        },
        {
          "alg" : "SHA-384",
          "content" : "bad8b9f52bf7a7e1d3974cb305a69c093fb32d2131539c18d34e471e3ec32bdd9dd136bb4b38bb14d84e99c562f208c7"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@2.3.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/eclipse-ee4j/jaxb-api/jakarta.xml.bind-api"
        },
        {
          "type" : "distribution",
          "url" : "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/jaxb-api/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/jaxb-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/jaxb-api.git/jakarta.xml.bind-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@2.3.3?type=jar"
    },
    {
      "publisher" : "Eclipse Foundation",
      "group" : "jakarta.activation",
      "name" : "jakarta.activation-api",
      "version" : "1.2.2",
      "description" : "Jakarta Activation API jar",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1cbb480310fa1987f9db7a3ed7118af7"
        },
        {
          "alg" : "SHA-1",
          "content" : "99f53adba383cb1bf7c3862844488574b559621f"
        },
        {
          "alg" : "SHA-256",
          "content" : "a187a939103aef5849a7af84bd7e27be2d120c410af291437375ffe061f4f09d"
        },
        {
          "alg" : "SHA-512",
          "content" : "e3d846ff5f62ad9fef514f0726846c63d4aa74b2bb8f60c76258dba37701f83ae75872401071bf40da40697d43a8a6e36d08fa4ef39fe70797fb6f2b1712599f"
        },
        {
          "alg" : "SHA-384",
          "content" : "3e25702596eca7dd48f904b3985d64b4b394d162d3884a907d8b2ee647542808713a42a02f0eeff2c07518a206cc91cf"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/jakarta.activation/jakarta.activation-api@1.2.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/eclipse-ee4j/jaf/jakarta.activation-api"
        },
        {
          "type" : "distribution",
          "url" : "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/jaf/issues/"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/jaf/jakarta.activation-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/jakarta.activation/jakarta.activation-api@1.2.2?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.cxf",
      "name" : "cxf-rt-bindings-soap",
      "version" : "3.5.8",
      "description" : "Apache CXF Runtime SOAP Binding",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "2c99e8a3e3b0d7869ef688874c910f36"
        },
        {
          "alg" : "SHA-1",
          "content" : "ba708dbec060719b9107093651b713f05a28278a"
        },
        {
          "alg" : "SHA-256",
          "content" : "a71a87bbfe2ea35613f37d073e7fa22d3f14666dda79a35a8827856747b7e000"
        },
        {
          "alg" : "SHA-512",
          "content" : "a59c23f5395de90101678155fb7879142d272eab172913fabb70d9ae1ce7684b02d2a470873c5d14cda8b5e2295738c7875c30c546ff7fb928cea45513e8f6ef"
        },
        {
          "alg" : "SHA-384",
          "content" : "5ed56979f3ecb79dd94c1994b1504f7dba8d07a049da530cac6d4fd0b661a858f6865a405efe27e9b1cb10a4b139a746"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.cxf/cxf-rt-bindings-soap@3.5.8?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://cxf.apache.org"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/view/A-D/view/CXF/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CXF"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/cxf-users"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-bindings-soap"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.cxf/cxf-rt-bindings-soap@3.5.8?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.cxf",
      "name" : "cxf-rt-wsdl",
      "version" : "3.5.8",
      "description" : "Apache CXF Runtime Core for WSDL Based Technologies",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "ec58616212eaea8b8330d1fde9a8ef9a"
        },
        {
          "alg" : "SHA-1",
          "content" : "5573b1cad8be02b25e7dd17db64d1b438ceac3fb"
        },
        {
          "alg" : "SHA-256",
          "content" : "1c6c089e7fec140daec6e7f6c727fa5c1150c28bffa4c5bd2c14e887b34da9d2"
        },
        {
          "alg" : "SHA-512",
          "content" : "9225d9efd6618f92019e8994f3f9ac44239039438b82e309fd23a527d5b8c2656f08f0f2d613dd55321734b97e48bd381db2a318753fc63d1d72fc9ff370e45b"
        },
        {
          "alg" : "SHA-384",
          "content" : "8c00bb572356b420a925cd20e250559e981afd7a638ae099846d1abb63a26e1c8b63cab7f8ef9aed34a2f948372d8a55"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.cxf/cxf-rt-wsdl@3.5.8?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://cxf.apache.org"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/view/A-D/view/CXF/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CXF"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/cxf-users"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-wsdl"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.cxf/cxf-rt-wsdl@3.5.8?type=jar"
    },
    {
      "publisher" : "OW2",
      "group" : "org.ow2.asm",
      "name" : "asm",
      "version" : "9.6",
      "description" : "ASM, a very small and fast Java bytecode manipulation framework",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6f8bccf756f170d4185bb24c8c2d2020"
        },
        {
          "alg" : "SHA-1",
          "content" : "aa205cf0a06dbd8e04ece91c0b37c3f5d567546a"
        },
        {
          "alg" : "SHA-256",
          "content" : "3c6fac2424db3d4a853b669f4e3d1d9c3c552235e19a319673f887083c2303a1"
        },
        {
          "alg" : "SHA-512",
          "content" : "01a5ea6f5b43bf094c52a50e18325a60af7bb02e74d24f9bc2c727d43e514578fd968b30ff22f9d2720caec071458f9ff82d11a21fbb1ebc42d8203e737c4b52"
        },
        {
          "alg" : "SHA-384",
          "content" : "80e0a92442db343baea7bab9bb1d0b7037c98d6aa54172820b21ea45e51dfea42b7670aa39e938d0f88ad4466004a19a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause",
            "url" : "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.ow2.asm/asm@9.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://asm.ow2.io/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.ow2.org/nexus/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://gitlab.ow2.org/asm/asm/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail.ow2.org/wws/arc/asm/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitlab.ow2.org/asm/asm/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.ow2.asm/asm@9.6?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.cxf",
      "name" : "cxf-rt-databinding-jaxb",
      "version" : "3.5.8",
      "description" : "Apache CXF Runtime JAXB DataBinding",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6e8cf5776bc5324d4314a80e5c4d9d51"
        },
        {
          "alg" : "SHA-1",
          "content" : "0f090784c2338af3e4d523010a74a1ebff77af0a"
        },
        {
          "alg" : "SHA-256",
          "content" : "017b4b5f423d77a9f11132ec4c41ca45fc802c50533ef505ccc0fe1602a767f9"
        },
        {
          "alg" : "SHA-512",
          "content" : "91f9b1c1123776f9334a44eae3e480ec023620de2805c9e3ab8596aed9df08b23bccb1285c8cdd629efcaa40dfbfdd1e70ad6e322627cea7adc4194146984cd3"
        },
        {
          "alg" : "SHA-384",
          "content" : "c001500b2c11986abf73c50565adc56f8c33d06d39690d4164c06335b02fc9adb223d8edee4ed58eb65fc0ed1f70d2a5"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.cxf/cxf-rt-databinding-jaxb@3.5.8?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://cxf.apache.org"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/view/A-D/view/CXF/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CXF"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/cxf-users"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-databinding-jaxb"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.cxf/cxf-rt-databinding-jaxb@3.5.8?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.cxf",
      "name" : "cxf-rt-ws-addr",
      "version" : "3.5.8",
      "description" : "Apache CXF Runtime WS Addressing",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e88c82b4b9971e3bef70bce9d7b89e9c"
        },
        {
          "alg" : "SHA-1",
          "content" : "78e7ac46aa271e012fa5af283e8a1ad9502f7f48"
        },
        {
          "alg" : "SHA-256",
          "content" : "34e2d3953ed291a33175635568befff9a54d36724636ccce48cf34e6261c5060"
        },
        {
          "alg" : "SHA-512",
          "content" : "56007b24536715e6ce241107ba28d9924a91e7293c6fbd42c1c2fb1bb0e840847c18ecfecbe3c09d2edd72a02e6ed0d095cb81ffb0370785c13141c21f98a638"
        },
        {
          "alg" : "SHA-384",
          "content" : "45c583a3ab039e771e6e9ac0a42f2cce78a8681fb704ec83d318b96b50df9734caae8fb87c268a18260c2c5249731176"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.cxf/cxf-rt-ws-addr@3.5.8?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://cxf.apache.org"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/view/A-D/view/CXF/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CXF"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/cxf-users"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-ws-addr"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.cxf/cxf-rt-ws-addr@3.5.8?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.cxf",
      "name" : "cxf-rt-ws-policy",
      "version" : "3.5.8",
      "description" : "Apache CXF Runtime WS Policy",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4b6957c29c23f571b833510f0ad90637"
        },
        {
          "alg" : "SHA-1",
          "content" : "30596c5a3aa6376a66f39d170e8fb470db80c7e2"
        },
        {
          "alg" : "SHA-256",
          "content" : "ca581b9f976aef8e52257eee4d1b0aaa011e096b534a4ff26ee28e8547e79f01"
        },
        {
          "alg" : "SHA-512",
          "content" : "56464902021e71fd9cc0ae3df237f770f872c6ffe5cb59fc2d96330f7b393305ccbe9626d954a7a61ce5d1a32a1014c134635d3f3e598d0c8ee974a6e5aed907"
        },
        {
          "alg" : "SHA-384",
          "content" : "ae99d32e0b7d0468ede0bb02fc79b1c9671edac7db42316b73dc5ec5deaeb863a4605c5d212d81ae6ab52f7daecfa565"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.cxf/cxf-rt-ws-policy@3.5.8?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://cxf.apache.org"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/view/A-D/view/CXF/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CXF"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/cxf-users"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-ws-policy"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.cxf/cxf-rt-ws-policy@3.5.8?type=jar"
    },
    {
      "group" : "wsdl4j",
      "name" : "wsdl4j",
      "version" : "1.6.3",
      "description" : "Java stub generator for WSDL",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "cfc28d89625c5e88589aec7a9aee0208"
        },
        {
          "alg" : "SHA-1",
          "content" : "6d106a6845a3d3477a1560008479312888e94f2f"
        },
        {
          "alg" : "SHA-256",
          "content" : "740f448e6b3bc110e02f4a1e56fb57672e732d2ecaf29ae15835051ae8af4725"
        },
        {
          "alg" : "SHA-512",
          "content" : "3779363efe4b7cf23bfc68388f3c6b5105dedb9192080f144534fcacc8a77014f9f3eb3ae1927344a267364c24deedebf25e306f80dfc293851973685cc58c52"
        },
        {
          "alg" : "SHA-384",
          "content" : "19b91e5508f5e33b8d7c4ad41d3d679d34c0f7b43651f19c7962f534322e6cb768595430a115df82eaf66905a4a71996"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "CPL",
            "url" : "http://www.opensource.org/licenses/cpl1.0.txt"
          }
        }
      ],
      "purl" : "pkg:maven/wsdl4j/wsdl4j@1.6.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://sf.net/projects/wsdl4j"
        },
        {
          "type" : "vcs",
          "url" : "http://wsdl4j.cvs.sourceforge.net/wsdl4j"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/wsdl4j/wsdl4j@1.6.3?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.neethi",
      "name" : "neethi",
      "version" : "3.2.0",
      "description" : "Apache Neethi provides general framework for the programmers to use WS Policy. It is compliant with latest WS Policy specification which was published in March 2006. This framework is specifically written to enable the Apache Web services stack to use WS Policy as a way of expressing it's requirements and capabilities.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e6040db3584bfdbadd0515dbdba6b25a"
        },
        {
          "alg" : "SHA-1",
          "content" : "4e409cf251f420f65130d458256f7be1ad68f055"
        },
        {
          "alg" : "SHA-256",
          "content" : "6ed3c2cd20444972936c1f9b623862d1415592290ce1eb79e1cf1008f999aa3b"
        },
        {
          "alg" : "SHA-512",
          "content" : "eef049866bfec3f543b8cbd5b673516fdb868fa45d2884a3cae3d65293ce179f32135c06d15ecbc039f6738fb9919c5aa2039df75df729e6081988f3570ad032"
        },
        {
          "alg" : "SHA-384",
          "content" : "2eba46d946e12b0898d4578248a606ab767a75d213d61951ab340e66e4c424650eb34356e4bd16e3f89c030a4edc06ea"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.neethi/neethi@3.2.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://ws.apache.org/neethi/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/NEETHI"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/ws-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=ws-neethi.git;a=summary"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.neethi/neethi@3.2.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.cxf",
      "name" : "cxf-rt-ws-security",
      "version" : "3.5.8",
      "description" : "Apache CXF Runtime WS Security",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "8f2480deea509e2ace319bfb0252db10"
        },
        {
          "alg" : "SHA-1",
          "content" : "73517448c074524c074f2a151f736fb5687afb65"
        },
        {
          "alg" : "SHA-256",
          "content" : "c08d3a88a025db160ef711f453787800a731df0ffaf0ef8cadfc538af178006f"
        },
        {
          "alg" : "SHA-512",
          "content" : "5d5c317b04c14b639756d9b401d56dc54c1105d7ea47b249a08dda1b08116f6c48250c82ad08d67c2059f92b6afdd2cd972b1f8a0ee0761c28762cfb540cc656"
        },
        {
          "alg" : "SHA-384",
          "content" : "180053d933db37d440c1fad01fe4b4b193efff501d61a487cec19112b4de78e29b7951799cf8bb593645a17f12cb9834"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.cxf/cxf-rt-ws-security@3.5.8?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://cxf.apache.org"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/view/A-D/view/CXF/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CXF"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/cxf-users"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-ws-security"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.cxf/cxf-rt-ws-security@3.5.8?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.cxf",
      "name" : "cxf-rt-security-saml",
      "version" : "3.5.8",
      "description" : "Apache CXF Runtime SAML Security functionality",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1cfd49933042b04c125448e2a7ec5f9e"
        },
        {
          "alg" : "SHA-1",
          "content" : "890e6415110902d36ad21479da73d9b7b3184cff"
        },
        {
          "alg" : "SHA-256",
          "content" : "9a7f368f222a2f20a98b4df9889df5357d2d2457bde17077d48f22d75f6b6961"
        },
        {
          "alg" : "SHA-512",
          "content" : "cad22527a0ed24655d1e27daa0460a2bb857c6cc06f8a862d1f42fe05ddac2c564ecdfb2cabac571cdf34d02a4c75dcd39b2b63231bc178f451598c70052a17f"
        },
        {
          "alg" : "SHA-384",
          "content" : "db8fc09f672d189f78d5eea504e653e4cc8b284aa552ff1e57565d848ea16230ac94bfdc432057caa515528a5fa12227"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.cxf/cxf-rt-security-saml@3.5.8?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://cxf.apache.org"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/view/A-D/view/CXF/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CXF"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/cxf-users"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-security-saml"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.cxf/cxf-rt-security-saml@3.5.8?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.cxf",
      "name" : "cxf-rt-security",
      "version" : "3.5.8",
      "description" : "Apache CXF Runtime Security functionality",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "5fc3877d2ae732de3c2356147bb05ffa"
        },
        {
          "alg" : "SHA-1",
          "content" : "d82f02527d9b2e0a21ad8c7303edc1ff77533472"
        },
        {
          "alg" : "SHA-256",
          "content" : "8d29b7319ccd007bd0338d703a6fe4ed02efdf782c6bc2ba35e3d940f6166991"
        },
        {
          "alg" : "SHA-512",
          "content" : "88ae20388979a5dca622835fb06b293bf4d4edbdd35cc1ce566c216fa42ef55eb8166ba38f165574da3859b15b1a172fa8492369efd576aa3e16203fab6afe74"
        },
        {
          "alg" : "SHA-384",
          "content" : "68654d02adbf0c77caa029924f83a700ab45736748b5d5290d1a0493ec45f67fd1201671099743cb4e1681b9a719dab4"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.cxf/cxf-rt-security@3.5.8?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://cxf.apache.org"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/view/A-D/view/CXF/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CXF"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/cxf-users"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-security"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.cxf/cxf-rt-security@3.5.8?type=jar"
    },
    {
      "publisher" : "Terracotta Inc., a wholly-owned subsidiary of Software AG USA, Inc.",
      "group" : "org.ehcache",
      "name" : "ehcache",
      "version" : "3.9.3",
      "description" : "End-user ehcache3 jar artifact",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e0ac3ca32b4256d7e7159f9796e8c769"
        },
        {
          "alg" : "SHA-1",
          "content" : "67a2758b89b942dfa622d764353fcf08fba2e7bb"
        },
        {
          "alg" : "SHA-256",
          "content" : "30f709462667c7f3c754c45be54034922523ea6cb9564be6ceaf73e9d959a634"
        },
        {
          "alg" : "SHA-512",
          "content" : "0d3e595482f20f36d4b6fea53c3cca743b279ddd45a080a51ddd958a11dbde18b51c5dc9453ec1246b37e44f4b068e03364bc5e3de89c48ca827fab63de6fa48"
        },
        {
          "alg" : "SHA-384",
          "content" : "c94b6fd79f5813fcb2c1941a64106ca0a8d95a897132bd076d3bba29949f45aeae090213f5471b9d352118d994c895e9"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.ehcache/ehcache@3.9.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://ehcache.org"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/ehcache/ehcache3/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/ehcache/ehcache3"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.ehcache/ehcache@3.9.3?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.wss4j",
      "name" : "wss4j-ws-security-dom",
      "version" : "2.4.3",
      "description" : "Apache WSS4J parent pom",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "2a5a48691fe57e21ab2be1fe76545040"
        },
        {
          "alg" : "SHA-1",
          "content" : "9b6f4cba742acfbf02d9f8c2c190d261d1c8ff1d"
        },
        {
          "alg" : "SHA-256",
          "content" : "48a3b75f71cf06c37c960861fb94944c7d21ef295bdee5dd5e4b668a79c2819d"
        },
        {
          "alg" : "SHA-512",
          "content" : "30eeb576fc07821b0678b7084c6664c2e0f405f779cf45257b3e49b01a3f5eb97e43e6fd7797f8562346a49ced979e12215d6cbc6385c9404ef39e2516446b77"
        },
        {
          "alg" : "SHA-384",
          "content" : "b694f8b5b872260d8248abede928cb599e2ab52f4fe31a1ff414ca54937e43674fd23d4229462b3582975bf2209925da"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.wss4j/wss4j-ws-security-dom@2.4.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://ws.apache.org/wss4j/wss4j-ws-security-dom/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/WSS"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?dev@ws.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=ws-wss4j.git;a=summary/wss4j-parent/wss4j-ws-security-dom"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.wss4j/wss4j-ws-security-dom@2.4.3?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.wss4j",
      "name" : "wss4j-ws-security-common",
      "version" : "2.4.3",
      "description" : "Apache WSS4J parent pom",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "22143a6aaa5af2e49cbb6668f84929f5"
        },
        {
          "alg" : "SHA-1",
          "content" : "8911e3b2befce0eab9014c4ab8104e81ac5d4b01"
        },
        {
          "alg" : "SHA-256",
          "content" : "c28d3f467d8988cd4f2b928eac42d652c88dbd9915d82078f73ef880c5f29e5d"
        },
        {
          "alg" : "SHA-512",
          "content" : "9f4eca4daf215684af2818a9f5dc1cbaec7487a85fe2973c89a657610e739e426f7067ea6222ee45c6ffb14111fe522931a6bb83ec505d72ead896993f11f9f2"
        },
        {
          "alg" : "SHA-384",
          "content" : "5ade6d25e7b0497b9077cdc6f8c8d7264c7a70d429fd84562ef3f0920ce6f0a1856fdc1cc139db5b82570e206ac6b01d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.wss4j/wss4j-ws-security-common@2.4.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://ws.apache.org/wss4j/wss4j-ws-security-common/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/WSS"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?dev@ws.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=ws-wss4j.git;a=summary/wss4j-parent/wss4j-ws-security-common"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.wss4j/wss4j-ws-security-common@2.4.3?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.santuario",
      "name" : "xmlsec",
      "version" : "2.3.4",
      "description" : "Apache XML Security for Java supports XML-Signature Syntax and Processing, W3C Recommendation 12 February 2002, and XML Encryption Syntax and Processing, W3C Recommendation 10 December 2002. As of version 1.4, the library supports the standard Java API JSR-105: XML Digital Signature APIs.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "bad235ebfca40a0514fba17fd742df51"
        },
        {
          "alg" : "SHA-1",
          "content" : "7f2baecd896ae8e8b02b6090220537bd950eccbc"
        },
        {
          "alg" : "SHA-256",
          "content" : "5513e7417edc1eb7188adc4de0312e93156bd7ca6d6c1e6072d3e0006defff23"
        },
        {
          "alg" : "SHA-512",
          "content" : "a948e1988f5bbacf7df1734d4779e3dd6022ded212eda83c784b295371ad2b89b5e7e476cc1673e592abe7a3f0fc153255251467ae7b023ff98ac22f476b1e2e"
        },
        {
          "alg" : "SHA-384",
          "content" : "d2f2631261d48530edf19d9a04ecec293d15ffa75e56912e705ccf7b08ae63a560e5bc49a1b24ad912be920316e4e216"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.santuario/xmlsec@2.3.4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://santuario.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/SANTUARIO"
        },
        {
          "type" : "mailing-list",
          "url" : "http://news.gmane.org/gmane.text.xml.security.devel"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=santuario-xml-security-java.git;a=summary"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.santuario/xmlsec@2.3.4?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-codec",
      "name" : "commons-codec",
      "version" : "1.16.0",
      "description" : "The Apache Commons Codec package contains simple encoder and decoders for various formats such as Base64 and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a collection of phonetic encoding utilities.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6e26920fa7228891980890cce06b718c"
        },
        {
          "alg" : "SHA-1",
          "content" : "4e3eb3d79888d76b54e28b350915b5dc3919c9de"
        },
        {
          "alg" : "SHA-256",
          "content" : "56595fb20b0b85bc91d0d503dad50bb7f1b9afc0eed5dffa6cbb25929000484d"
        },
        {
          "alg" : "SHA-512",
          "content" : "eee671e66d808b56b81e15574675cf132d7628c010736d580915bbf8c04849f04df1d95ddeea13c4e119f8f0a564c7003beeb8ab437564e080ee27063c1e52b9"
        },
        {
          "alg" : "SHA-384",
          "content" : "65eb89c19815ea11585ff6c91e2ea4acd6a41ee35502891ba29fb5ec390d567190cf2f4120bfbf50ec470274df22a25f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-codec/commons-codec@1.16.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-codec/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-parent/actions"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CODEC"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/commons-codec"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-codec/commons-codec@1.16.0?type=jar"
    },
    {
      "publisher" : "Shibboleth Consortium",
      "group" : "org.opensaml",
      "name" : "opensaml-saml-impl",
      "version" : "3.4.6",
      "description" : "SAML Provider Implementations",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "16822d1228404b5fc14a607f94c04b69"
        },
        {
          "alg" : "SHA-1",
          "content" : "c51f094b49d8875a9d1e51aefc01331dff461729"
        },
        {
          "alg" : "SHA-256",
          "content" : "c9b818689fbcda211fcf4a4c970bfc143c5955645129df53b9bdca8f7f83c1b4"
        },
        {
          "alg" : "SHA-512",
          "content" : "75d45e4b39f8efb9db9329e27ecde27ce90de1545a64d053e3c64c6a81b5aa0e3ab962dd834bc312ee508e5e540830fdaea2e4f1be68d53acc7d44bbedf4dd1b"
        },
        {
          "alg" : "SHA-384",
          "content" : "ee422d744f0f0789d722c633271ba3fdf60cf903820d38832295f68619fcf4f8b0dec20c959e5603537ac4a25cc98deb"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.opensaml/opensaml-saml-impl@3.4.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://shibboleth.net/opensaml-saml-impl/"
        },
        {
          "type" : "distribution",
          "url" : "https://build.shibboleth.net/nexus/content/repositories/releases"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.shibboleth.net/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://marc.info/?l=shibboleth-announce"
        },
        {
          "type" : "vcs",
          "url" : "https://git.shibboleth.net/view/opensaml-saml-impl"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.opensaml/opensaml-saml-impl@3.4.6?type=jar"
    },
    {
      "publisher" : "Shibboleth Consortium",
      "group" : "org.opensaml",
      "name" : "opensaml-profile-api",
      "version" : "3.4.6",
      "description" : "Profile API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0cb5bed685408a677fff00c5cbcf4e8d"
        },
        {
          "alg" : "SHA-1",
          "content" : "cf3d855a2eb9a7c44b2d10919746bea5b4f0e6fe"
        },
        {
          "alg" : "SHA-256",
          "content" : "d4aa4269af0d25b7ed5740c46a9894123fc0501546891188678aa74df0f141ba"
        },
        {
          "alg" : "SHA-512",
          "content" : "eff813644bd82a9c0d75943c313106215d8d2a87c2504ba56d3217d231dd9f6439a7c5ef86c4475cf95bfdd0aab479dad3277556415e1ffe7c92e6b54a6aae18"
        },
        {
          "alg" : "SHA-384",
          "content" : "b2344e285a98b5b494d23a55d7ec1e6d9f5f1493b9becc3304fe251f9c2d78ab0d898cdb5b94780d3426e64aee4ff161"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.opensaml/opensaml-profile-api@3.4.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://shibboleth.net/opensaml-profile-api/"
        },
        {
          "type" : "distribution",
          "url" : "https://build.shibboleth.net/nexus/content/repositories/releases"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.shibboleth.net/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://marc.info/?l=shibboleth-announce"
        },
        {
          "type" : "vcs",
          "url" : "https://git.shibboleth.net/view/opensaml-profile-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.opensaml/opensaml-profile-api@3.4.6?type=jar"
    },
    {
      "publisher" : "Shibboleth Consortium",
      "group" : "org.opensaml",
      "name" : "opensaml-core",
      "version" : "3.4.6",
      "description" : "Core",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "078679e8cb6a0c3361eac985019e8e5b"
        },
        {
          "alg" : "SHA-1",
          "content" : "75b749a9ce605414d071ffabbf7e61cd11b9204d"
        },
        {
          "alg" : "SHA-256",
          "content" : "d9b867c9c2b6a44d75a95504a467d94b5183def09fa1f3f0f1a95a79621ec1e1"
        },
        {
          "alg" : "SHA-512",
          "content" : "d030c0d599a95d899750f91e276a3abd12fa33d162c46599bba79d33f3319e1d1a2226b1dba3357eb1721331ddce5efab96d918c285b54efcc02c27dc9cc9681"
        },
        {
          "alg" : "SHA-384",
          "content" : "28f4bbbaff064465545bde6d4feb9cbfca89fd75fce1f7294c0953ec2118251bf084c2099f89f6d023658fe475808ccf"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.opensaml/opensaml-core@3.4.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://shibboleth.net/opensaml-core/"
        },
        {
          "type" : "distribution",
          "url" : "https://build.shibboleth.net/nexus/content/repositories/releases"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.shibboleth.net/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://marc.info/?l=shibboleth-announce"
        },
        {
          "type" : "vcs",
          "url" : "https://git.shibboleth.net/view/opensaml-core"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.opensaml/opensaml-core@3.4.6?type=jar"
    },
    {
      "group" : "io.dropwizard.metrics",
      "name" : "metrics-core",
      "version" : "4.2.25",
      "description" : "Metrics is a Java library which gives you unparalleled insight into what your code does in production. Metrics provides a powerful toolkit of ways to measure the behavior of critical components in your production environment.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f9476a4f1a8287f7a4a2af759c33e44a"
        },
        {
          "alg" : "SHA-1",
          "content" : "76162cb1f7a6f902da4f80e5bcf472078e8cd7e1"
        },
        {
          "alg" : "SHA-256",
          "content" : "8bc7de609a2816b78a7a5009bddf11be560ba527d44db74a0a31a6f44fdb5b5f"
        },
        {
          "alg" : "SHA-512",
          "content" : "7373e8d22599d3cadff126308ac4279141fbcd04c27935b016b3bfb42caf5840db60fc05eba136dd1d19f72b5223ed30f0823e562b0267a3e2d8673a65ca3d9c"
        },
        {
          "alg" : "SHA-384",
          "content" : "b2ce6508895976d6f3a5846dbac246db0c1c6946dd4e7a17d3ebd55f6d094286f735f293997e6b140df8d6f629cabe47"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.dropwizard.metrics/metrics-core@4.2.25?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://metrics.dropwizard.io/metrics-core"
        },
        {
          "type" : "distribution",
          "url" : "https://s01.oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/dropwizard/metrics/issues/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/dropwizard/metrics/metrics-core/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.dropwizard.metrics/metrics-core@4.2.25?type=jar"
    },
    {
      "publisher" : "Shibboleth Consortium",
      "group" : "org.opensaml",
      "name" : "opensaml-saml-api",
      "version" : "3.4.6",
      "description" : "SAML Provider API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "d55c4ec6f542c201b6d5aad5c7115138"
        },
        {
          "alg" : "SHA-1",
          "content" : "571c2b041583625850afefdb3283fcf17940f9cd"
        },
        {
          "alg" : "SHA-256",
          "content" : "a48e58ca9a98753aaa3f58b47ac6f941892b8980ff52381491b244ce02093fce"
        },
        {
          "alg" : "SHA-512",
          "content" : "eb317580c9b42aa50ee4a68cce788cf277f5cc40c263ddca1037f88b83a019ac51ec84c2022f2d6ab1e41a41386880243adf89226ed454a108073524873d0d1c"
        },
        {
          "alg" : "SHA-384",
          "content" : "6e857e58b3cdcaa2bb589616711c2fa0b709235450ae4c1320b864a074179802712ceb73c268d11f903b3bb422a2d6b0"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.opensaml/opensaml-saml-api@3.4.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://shibboleth.net/opensaml-saml-api/"
        },
        {
          "type" : "distribution",
          "url" : "https://build.shibboleth.net/nexus/content/repositories/releases"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.shibboleth.net/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://marc.info/?l=shibboleth-announce"
        },
        {
          "type" : "vcs",
          "url" : "https://git.shibboleth.net/view/opensaml-saml-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.opensaml/opensaml-saml-api@3.4.6?type=jar"
    },
    {
      "publisher" : "Shibboleth Consortium",
      "group" : "org.opensaml",
      "name" : "opensaml-xmlsec-api",
      "version" : "3.4.6",
      "description" : "XML Security API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "83483c37e5b6cd7c234866d9b5e1ac47"
        },
        {
          "alg" : "SHA-1",
          "content" : "3f84e8ce2dc40c247247be036a3a5c6adfae4a70"
        },
        {
          "alg" : "SHA-256",
          "content" : "fb6234bab21f5582f021467a772bb9c4cfb32af8bc1900504811795992bb23fd"
        },
        {
          "alg" : "SHA-512",
          "content" : "941e83b78d38ff69343bc70ab8eee8393cd2a69a03a216ba85f067975fc9968ea876539800623cacec7dcb4736c5a33595c6953880ae1b023493e3d4f321c51c"
        },
        {
          "alg" : "SHA-384",
          "content" : "224c0cabad0442a7d891db138679fc551d660c2bf04ad61833becac3a6279a7ab3c9e07eca09379ae12b054dd8362412"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.opensaml/opensaml-xmlsec-api@3.4.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://shibboleth.net/opensaml-xmlsec-api/"
        },
        {
          "type" : "distribution",
          "url" : "https://build.shibboleth.net/nexus/content/repositories/releases"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.shibboleth.net/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://marc.info/?l=shibboleth-announce"
        },
        {
          "type" : "vcs",
          "url" : "https://git.shibboleth.net/view/opensaml-xmlsec-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.opensaml/opensaml-xmlsec-api@3.4.6?type=jar"
    },
    {
      "publisher" : "Shibboleth Consortium",
      "group" : "org.opensaml",
      "name" : "opensaml-soap-api",
      "version" : "3.4.6",
      "description" : "SOAP Provider API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "65e52ff6f3a55badf553ba021f08696f"
        },
        {
          "alg" : "SHA-1",
          "content" : "6e4dacb4caac0d5ed000719b3a772d384ceff916"
        },
        {
          "alg" : "SHA-256",
          "content" : "76cc47c3610e97df80921611aef80cbbc0f273dcd7323e6e08c70996d121254a"
        },
        {
          "alg" : "SHA-512",
          "content" : "ab644f8342c93d7e0e373c1fb8c493671dff379eebb152dab13835d566c551cd6dcbd5d9c60f9d190f065838491072bf8f455a8e134a4abb7a28225f5b0f5474"
        },
        {
          "alg" : "SHA-384",
          "content" : "4b46f64885fc099a5a7058d7f73382fe025bb7a9af8e933c8895cff4e7eb42c94b16a06b102ebe1cc264dc49941181f4"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.opensaml/opensaml-soap-api@3.4.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://shibboleth.net/opensaml-soap-api/"
        },
        {
          "type" : "distribution",
          "url" : "https://build.shibboleth.net/nexus/content/repositories/releases"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.shibboleth.net/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://marc.info/?l=shibboleth-announce"
        },
        {
          "type" : "vcs",
          "url" : "https://git.shibboleth.net/view/opensaml-soap-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.opensaml/opensaml-soap-api@3.4.6?type=jar"
    },
    {
      "publisher" : "Shibboleth Consortium",
      "group" : "org.opensaml",
      "name" : "opensaml-security-impl",
      "version" : "3.4.6",
      "description" : "Security Implementation",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f6059e2364579e717f39aaa65f3e395b"
        },
        {
          "alg" : "SHA-1",
          "content" : "0dd4e7128d4de8c304827ecc972ee57ae46230fa"
        },
        {
          "alg" : "SHA-256",
          "content" : "78fa84dc93d47756a37bf7a3e5f443630981607f29a0a97ce5e78e8c4272655a"
        },
        {
          "alg" : "SHA-512",
          "content" : "d2024ec50f96454e888a9f021295fc6991f7e80fed26a5f5309a7a0639ed8bceff456bfad67780015a65a37b632b73d32867b90e8effe76a12015c6c4ab5dab8"
        },
        {
          "alg" : "SHA-384",
          "content" : "3595f9433ca34cfa092f9100098714741bb2241d9938fff194a39d98e64b7d5515042a7ea3ffa31890181bcbb577d209"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.opensaml/opensaml-security-impl@3.4.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://shibboleth.net/opensaml-security-impl/"
        },
        {
          "type" : "distribution",
          "url" : "https://build.shibboleth.net/nexus/content/repositories/releases"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.shibboleth.net/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://marc.info/?l=shibboleth-announce"
        },
        {
          "type" : "vcs",
          "url" : "https://git.shibboleth.net/view/opensaml-security-impl"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.opensaml/opensaml-security-impl@3.4.6?type=jar"
    },
    {
      "publisher" : "Shibboleth Consortium",
      "group" : "org.opensaml",
      "name" : "opensaml-security-api",
      "version" : "3.4.6",
      "description" : "Security API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "5b128a68409ed07d1094b40281576c3b"
        },
        {
          "alg" : "SHA-1",
          "content" : "d5cfb49df6b78b0dea66015040fe9940ace2fe71"
        },
        {
          "alg" : "SHA-256",
          "content" : "a84c4e51d8a90c30e70cfa37da22e4d18e54af747e2771fc4e39c6d8c76ae41a"
        },
        {
          "alg" : "SHA-512",
          "content" : "a770f23c8a4f2e46bffd9ffd749790932239a63ba4a420c14e7bec93c6853c3b9708de31ab4e6728d7b3663295329a8422719e271b1f0883280f2f866c344766"
        },
        {
          "alg" : "SHA-384",
          "content" : "ac3bd4800ba02c52f34af4230b44bfedec44da104ff23a7ef083e2ea7cbaeed5e1b4fd3588c0374f434e3d8277a2c533"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.opensaml/opensaml-security-api@3.4.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://shibboleth.net/opensaml-security-api/"
        },
        {
          "type" : "distribution",
          "url" : "https://build.shibboleth.net/nexus/content/repositories/releases"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.shibboleth.net/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://marc.info/?l=shibboleth-announce"
        },
        {
          "type" : "vcs",
          "url" : "https://git.shibboleth.net/view/opensaml-security-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.opensaml/opensaml-security-api@3.4.6?type=jar"
    },
    {
      "publisher" : "Shibboleth Consortium",
      "group" : "org.opensaml",
      "name" : "opensaml-xmlsec-impl",
      "version" : "3.4.6",
      "description" : "XML Security Implementation",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "29d0993ae0e882f5ab843fdca178ad53"
        },
        {
          "alg" : "SHA-1",
          "content" : "f07084d063f046dc762b86f90ff1350c923aa6ac"
        },
        {
          "alg" : "SHA-256",
          "content" : "8151f782375205f6698941fba656dec077f35e4a05e8a3a94e31b84cc7c912a7"
        },
        {
          "alg" : "SHA-512",
          "content" : "0d6f487cec90ec931fcf015e42758d90acbc056dab20bccb889737325fc7443ee5ef3be51d028140ef424313562d37eed0abe795fafbbb5a16ae33e943f10496"
        },
        {
          "alg" : "SHA-384",
          "content" : "63e4ad907a85236121bd787d0c5a3c97e4afb383cc682a488aae52cbb045a9e11caa1a8a1400d29d080f37e4769f46b8"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.opensaml/opensaml-xmlsec-impl@3.4.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://shibboleth.net/opensaml-xmlsec-impl/"
        },
        {
          "type" : "distribution",
          "url" : "https://build.shibboleth.net/nexus/content/repositories/releases"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.shibboleth.net/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://marc.info/?l=shibboleth-announce"
        },
        {
          "type" : "vcs",
          "url" : "https://git.shibboleth.net/view/opensaml-xmlsec-impl"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.opensaml/opensaml-xmlsec-impl@3.4.6?type=jar"
    },
    {
      "publisher" : "Shibboleth Consortium",
      "group" : "net.shibboleth.utilities",
      "name" : "java-support",
      "version" : "7.5.2",
      "description" : "A POM containing properties, profiles, plugin configurations, etc. that are common across all Shibboleth V3 projects.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "8841e4abf4e88a32737d0f2870f2f4af"
        },
        {
          "alg" : "SHA-1",
          "content" : "1b0a80b8c0713e3d6233c643c7421ece305b544f"
        },
        {
          "alg" : "SHA-256",
          "content" : "bc6a861d2447d3a67c81fdf61f0595d38c94ebbe4364bec6d59cb1b87cb2e8b2"
        },
        {
          "alg" : "SHA-512",
          "content" : "e1abbadca603c6b203352c412d4ae45004f3f833e1b236664116122020466dcd868f6ab9653adbe1907947957ccd1edf686a95d2a617e9484faf5fa7a9ff644b"
        },
        {
          "alg" : "SHA-384",
          "content" : "4e1c9110e37fb0366090b53934d4f0e82ca7ff6bc3be4dc1d239f0e4f6a1d2a060ce55b3306c737a414256850ceebcbc"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/net.shibboleth.utilities/java-support@7.5.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://shibboleth.net/java-support/"
        },
        {
          "type" : "distribution",
          "url" : "https://build.shibboleth.net/nexus/content/repositories/releases"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.shibboleth.net/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://marc.info/?l=shibboleth-announce"
        },
        {
          "type" : "vcs",
          "url" : "https://git.shibboleth.net/view/?p=java-support.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/net.shibboleth.utilities/java-support@7.5.2?type=jar"
    },
    {
      "group" : "org.cryptacular",
      "name" : "cryptacular",
      "version" : "1.2.6",
      "description" : "The spectacular complement to the Bouncy Castle crypto API for Java.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b4cf54fbc0b44a3233b0daa8b4c0cb83"
        },
        {
          "alg" : "SHA-1",
          "content" : "c97954b8bc9fbf63393d6a3b9113a6ce70772b45"
        },
        {
          "alg" : "SHA-256",
          "content" : "7a901585834f4533f127c643660435aec9a969af720613dc9126e555be7b1a01"
        },
        {
          "alg" : "SHA-512",
          "content" : "f1537257428dcda2c02dcee022f44539210510c66f752964556da62f6bf0f8924c6f443dca418482cf4d9d66ccc840d883c162a24d1b6639628ffbdaf6820bec"
        },
        {
          "alg" : "SHA-384",
          "content" : "5cbe09098237398b55a517b4769146b5f3a893a062092e82e4aaea0630c940970e835aaffac8b6ea22f7d6cbeaaba191"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        },
        {
          "license" : {
            "name" : "GNU Lesser General Public License",
            "url" : "http://www.gnu.org/licenses/lgpl-3.0.txt"
          }
        }
      ],
      "purl" : "pkg:maven/org.cryptacular/cryptacular@1.2.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.cryptacular.org"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/vt-middleware/cryptacular/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "http://groups.google.com/group/cryptacular"
        },
        {
          "type" : "vcs",
          "url" : "scm:git:git@github.com:vt-middleware/cryptacular.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.cryptacular/cryptacular@1.2.6?type=jar"
    },
    {
      "group" : "org.bouncycastle",
      "name" : "bcprov-jdk18on",
      "version" : "1.77",
      "description" : "The Bouncy Castle Crypto package is a Java implementation of cryptographic algorithms. This jar contains JCE provider and lightweight API for the Bouncy Castle Cryptography APIs for JDK 1.8 and up.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "ca01387064e08db12e1345b474521ff1"
        },
        {
          "alg" : "SHA-1",
          "content" : "2cc971b6c20949c1ff98d1a4bc741ee848a09523"
        },
        {
          "alg" : "SHA-256",
          "content" : "dabb98c24d72c9b9f585633d1df9c5cd58d9ad373d0cd681367e6a603a495d58"
        },
        {
          "alg" : "SHA-512",
          "content" : "56c359f1370131f91eaeae3ec1d44884358f4296defd8d7516c7b81b9b66158454a667eb1c859d8ad919faee074ae3ecb4ceba2a39a3dd799bef9ada2d8c3da3"
        },
        {
          "alg" : "SHA-384",
          "content" : "2951d9bb941e960287cc4a8947a0239ccfb9bd5058002bd5b9fe045b0bb22e4b23f31357f65211c191384cedf3ef3555"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "Bouncy Castle Licence",
            "url" : "https://www.bouncycastle.org/licence.html"
          }
        }
      ],
      "purl" : "pkg:maven/org.bouncycastle/bcprov-jdk18on@1.77?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.bouncycastle.org/java.html"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/bcgit/bc-java/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/bcgit/bc-java"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.bouncycastle/bcprov-jdk18on@1.77?type=jar"
    },
    {
      "publisher" : "Joda.org",
      "group" : "joda-time",
      "name" : "joda-time",
      "version" : "2.10.10",
      "description" : "Date and time library to replace JDK date handling",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "c2a46de8a73ec7b60011429561ae72e3"
        },
        {
          "alg" : "SHA-1",
          "content" : "29e8126e31f41e5c12b9fe3a7eb02e704c47d70b"
        },
        {
          "alg" : "SHA-256",
          "content" : "dd8e7c92185a678d1b7b933f31209b6203c8ffa91e9880475a1be0346b9617e3"
        },
        {
          "alg" : "SHA-512",
          "content" : "e6b873724800c0d8c4a3dabacd53c6b320e87fccd26109f22508ab17d95f21283cd705c68392c04ff76beab38593a02dff924aaee2c07ebb7af4ec6a5ddaa65f"
        },
        {
          "alg" : "SHA-384",
          "content" : "7782be142400320d1313254c68f45c5f3cd3d7e310a83dd7a2d15ae924fac714539e607bdafb16af4fd277d0abec3d87"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/joda-time/joda-time@2.10.10?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.joda.org/joda-time/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/content/repositories/joda-releases"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/JodaOrg/joda-time/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/JodaOrg/joda-time"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/joda-time/joda-time@2.10.10?type=jar"
    },
    {
      "group" : "com.google.guava",
      "name" : "guava",
      "version" : "30.1-jre",
      "description" : "Guava is a suite of core and expanded libraries that include utility classes, Google's collections, I/O classes, and much more.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "2f8966f27f06101a08083bfa9f9277e7"
        },
        {
          "alg" : "SHA-1",
          "content" : "00d0c3ce2311c9e36e73228da25a6e99b2ab826f"
        },
        {
          "alg" : "SHA-256",
          "content" : "e6dd072f9d3fe02a4600688380bd422bdac184caf6fe2418cfdd0934f09432aa"
        },
        {
          "alg" : "SHA-512",
          "content" : "e7a8098c0af7746c8a97a8cc8245166c14ee9213f67943d9d1962c94699f58d789c1e103de9cd407c4f20cd4be4e89814643560e5dae0b3f629312f2b1a2a8e2"
        },
        {
          "alg" : "SHA-384",
          "content" : "12f54fff188f49a7d7284836768f198a6b002a1773ab80311c69449cec0544744938b8818b70cd1811cad830efb6a76d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.guava/guava@30.1-jre?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/google/guava/guava"
        },
        {
          "type" : "build-system",
          "url" : "https://travis-ci.org/google/guava"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/google/guava/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/google/guava/guava"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.guava/guava@30.1-jre?type=jar"
    },
    {
      "group" : "com.google.guava",
      "name" : "failureaccess",
      "version" : "1.0.1",
      "description" : "Contains com.google.common.util.concurrent.internal.InternalFutureFailureAccess and InternalFutures. Most users will never need to use this artifact. Its classes is conceptually a part of Guava, but they're in this separate artifact so that Android libraries can use them without pulling in all of Guava (just as they can use ListenableFuture by depending on the listenablefuture artifact).",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "091883993ef5bfa91da01dcc8fc52236"
        },
        {
          "alg" : "SHA-1",
          "content" : "1dcf1de382a0bf95a3d8b0849546c88bac1292c9"
        },
        {
          "alg" : "SHA-256",
          "content" : "a171ee4c734dd2da837e4b16be9df4661afab72a41adaf31eb84dfdaf936ca26"
        },
        {
          "alg" : "SHA-512",
          "content" : "f8d59b808d6ba617252305b66d5590937da9b2b843d492d06b8d0b1b1f397e39f360d5817707797b979a5bf20bf21987b35333e7a15c44ed7401fea2d2119cae"
        },
        {
          "alg" : "SHA-384",
          "content" : "67659dbd9647ec303d7f15128dc9dba19b98fd8d74758ee3b602451e32c855e236ccaafe08edf4bbfa245f981268440f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/google/guava/failureaccess"
        },
        {
          "type" : "build-system",
          "url" : "https://travis-ci.org/google/guava"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/google/guava/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/google/guava/failureaccess"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar"
    },
    {
      "publisher" : "Shibboleth Consortium",
      "group" : "org.opensaml",
      "name" : "opensaml-xacml-impl",
      "version" : "3.4.6",
      "description" : "XACML Provider Implementations",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "9d8cb6a9cf8d68af9bc2bab3053d9a30"
        },
        {
          "alg" : "SHA-1",
          "content" : "542a94404fe6b51858cc291e18b1890772de555c"
        },
        {
          "alg" : "SHA-256",
          "content" : "2e0b08bd9aabb0f49ee4f98e6fe3d489db94281627f386c80ddc79b4fe903146"
        },
        {
          "alg" : "SHA-512",
          "content" : "29f93611a8476895087c2193b10239b4f0f17cda6125a9c26f91540924a56ab4351c1598c110772d59e5cfbec332db0f82f58dbc8d2981907206ecbefef94d4b"
        },
        {
          "alg" : "SHA-384",
          "content" : "b255ed8785ed879fa48ac4d2a6a0a44bdab45b5dc8a2da728227bbdfdc5afef7b868c8fda32dde218775f3acd1b7b55c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.opensaml/opensaml-xacml-impl@3.4.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://shibboleth.net/opensaml-xacml-impl/"
        },
        {
          "type" : "distribution",
          "url" : "https://build.shibboleth.net/nexus/content/repositories/releases"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.shibboleth.net/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://marc.info/?l=shibboleth-announce"
        },
        {
          "type" : "vcs",
          "url" : "https://git.shibboleth.net/view/opensaml-xacml-impl"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.opensaml/opensaml-xacml-impl@3.4.6?type=jar"
    },
    {
      "publisher" : "Shibboleth Consortium",
      "group" : "org.opensaml",
      "name" : "opensaml-xacml-api",
      "version" : "3.4.6",
      "description" : "XACML Provider API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "cfb758241b65c48297e510c5c1b129fa"
        },
        {
          "alg" : "SHA-1",
          "content" : "2fc136cf70605b6e490daf01a28161cb87b0ffc4"
        },
        {
          "alg" : "SHA-256",
          "content" : "9af782e9674b1e5b34f1c1406e919eea3d91aa09003465d43f6446db5f67e3e6"
        },
        {
          "alg" : "SHA-512",
          "content" : "7fb6ba8adda2aa3f07f913c224ddccb55cefcea390b0f7ac0de00f89f97a093bdb1b2cd88db2a84798c9fa8ee5fec45f8866edbf4b7a23a2857417f616293ae3"
        },
        {
          "alg" : "SHA-384",
          "content" : "43d608db3242c1ab195036fcf332785f2eb05388b012a8ee8523f66c716b68fd83a5b917606eab94782f944f0652a097"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.opensaml/opensaml-xacml-api@3.4.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://shibboleth.net/opensaml-xacml-api/"
        },
        {
          "type" : "distribution",
          "url" : "https://build.shibboleth.net/nexus/content/repositories/releases"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.shibboleth.net/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://marc.info/?l=shibboleth-announce"
        },
        {
          "type" : "vcs",
          "url" : "https://git.shibboleth.net/view/opensaml-xacml-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.opensaml/opensaml-xacml-api@3.4.6?type=jar"
    },
    {
      "publisher" : "Shibboleth Consortium",
      "group" : "org.opensaml",
      "name" : "opensaml-xacml-saml-impl",
      "version" : "3.4.6",
      "description" : "SAML XACML Profile Implementation",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0eaa70b47d18c2a7ae72ec0ce1e47038"
        },
        {
          "alg" : "SHA-1",
          "content" : "2a8dfe1251c1d3ef0c0f1b876b2a7dd7d3bf0cb8"
        },
        {
          "alg" : "SHA-256",
          "content" : "536349704d93a73bcd9475fee89606e6841f2d6f53c58a46fc0c2f659cdc8620"
        },
        {
          "alg" : "SHA-512",
          "content" : "bf93aa3c141e367596482fe9db85c3be2e3f815cd740bdcb4237933ceaee55928edefd717fa45e4c6ee988acdbf623abffd31b4e04fe03adf547abd3bda9fafb"
        },
        {
          "alg" : "SHA-384",
          "content" : "87ea576d71cdb29566d2311cdac48fe15140affb00c4c1121e61028dbe974e8c648a133bc672e81172634f1e7a11bde1"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.opensaml/opensaml-xacml-saml-impl@3.4.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://shibboleth.net/opensaml-xacml-saml-impl/"
        },
        {
          "type" : "distribution",
          "url" : "https://build.shibboleth.net/nexus/content/repositories/releases"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.shibboleth.net/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://marc.info/?l=shibboleth-announce"
        },
        {
          "type" : "vcs",
          "url" : "https://git.shibboleth.net/view/opensaml-xacml-saml-impl"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.opensaml/opensaml-xacml-saml-impl@3.4.6?type=jar"
    },
    {
      "publisher" : "Shibboleth Consortium",
      "group" : "org.opensaml",
      "name" : "opensaml-xacml-saml-api",
      "version" : "3.4.6",
      "description" : "SAML XACML Profile API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "75f667b52f160481e65e7c317ab1c20f"
        },
        {
          "alg" : "SHA-1",
          "content" : "d4d573d93257738309cd079a290a1da7ecdc762e"
        },
        {
          "alg" : "SHA-256",
          "content" : "c25795b730cf4892c3cfb01dd7ec3237dafdc952d78fb6abbabb81d678ae916b"
        },
        {
          "alg" : "SHA-512",
          "content" : "612b5f1d5aab055ca919a351bd69d65635e2e5781773797585e764fc036b8e838b436f13a4ba968d66077226c7005bf3fb063c64931c95f87edffe0d4e91092e"
        },
        {
          "alg" : "SHA-384",
          "content" : "ec510c0233233d2eae13c717e20f6e914bc05d30ae4c43e3b615ead8d1879c5d05e6744550c903da48d1077c398e7aa6"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.opensaml/opensaml-xacml-saml-api@3.4.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://shibboleth.net/opensaml-xacml-saml-api/"
        },
        {
          "type" : "distribution",
          "url" : "https://build.shibboleth.net/nexus/content/repositories/releases"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.shibboleth.net/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://marc.info/?l=shibboleth-announce"
        },
        {
          "type" : "vcs",
          "url" : "https://git.shibboleth.net/view/opensaml-xacml-saml-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.opensaml/opensaml-xacml-saml-api@3.4.6?type=jar"
    },
    {
      "publisher" : "The JASYPT team",
      "group" : "org.jasypt",
      "name" : "jasypt",
      "version" : "1.9.3",
      "description" : "Java library which enables encryption in java apps with minimum effort.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "39327c7e38782102ecdb3c9dc4e8dcd3"
        },
        {
          "alg" : "SHA-1",
          "content" : "0d99ef9540f51c617f2a293b460f025d2ee563dd"
        },
        {
          "alg" : "SHA-256",
          "content" : "f481fbb8dd8ce754bfde7552af4fcbe8c5e303d53663bb3d8ce9d4338e0e55aa"
        },
        {
          "alg" : "SHA-512",
          "content" : "99369da44e4c26f64e600f99b135eb05167ae1ebb5bb9f22233f14023f5416318bb4ca5893dbb0e7d444395ea6fa53713559a6990120b4fc962a1e9284ba5821"
        },
        {
          "alg" : "SHA-384",
          "content" : "12baa02ea8f8bdfdf04070d216dff4339b7b1c128f895007e900a18ee38a899e1a82fded92595a9a6f9127ae8c42877c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.jasypt/jasypt@1.9.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.jasypt.org"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "vcs",
          "url" : "scm:git:git@github.com:jasypt/jasypt.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.jasypt/jasypt@1.9.3?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.geronimo.javamail",
      "name" : "geronimo-javamail_1.4_mail",
      "version" : "1.8.4",
      "description" : "Geronimmo JavaMail Bundle.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f0f877ca397f77198f4c941bee52f0a4"
        },
        {
          "alg" : "SHA-1",
          "content" : "0c111549605e4fb904984e4f40299a3a653871ea"
        },
        {
          "alg" : "SHA-256",
          "content" : "e3e58acb4962ee0615cc398c8903e46cf866fb666a58b3bb80f8d59712c1e69a"
        },
        {
          "alg" : "SHA-512",
          "content" : "a53a0aed6922d6d1f37e78cbde16f2a98dbd43f7198293a960c761e2c6f0ac456770a9e21ca64dd460a6612d0bae9d34d90ef21a4a9ae8095ed4677a0b5209eb"
        },
        {
          "alg" : "SHA-384",
          "content" : "f2adafd0c3d2bb24490542b0394bae83014b1404b350799ef844f51331f8a71db1f3a8d5aebd462f9e24400502171f0e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.geronimo.javamail/geronimo-javamail_1.4_mail@1.8.4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://geronimo.apache.org/maven/javamail/geronimo-javamail_1.4_mail/1.8.4/geronimo-javamail_1.4_mail"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/GERONIMO"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/geronimo-user"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/geronimo/javamail/tags/geronimo-javamail_1.4-1.8.4/geronimo-javamail_1.4_mail"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.geronimo.javamail/geronimo-javamail_1.4_mail@1.8.4?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.wss4j",
      "name" : "wss4j-policy",
      "version" : "2.4.3",
      "description" : "Apache WSS4J parent pom",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "267dc758c1af2ed453b64b3739120f53"
        },
        {
          "alg" : "SHA-1",
          "content" : "da9d12731b1a92f82ee4557c4b7f1e27b2acdf5d"
        },
        {
          "alg" : "SHA-256",
          "content" : "881e08717fc3126c218071e43c6ba73f97c1f0a6594ec4a7994ceea57b20e9a0"
        },
        {
          "alg" : "SHA-512",
          "content" : "a3b7962b0f6d342863a6d6a8dc324b4699f7f466c6877b8ed5dfc71d64577e28589674bd3914a2e03f4ef0a8b8192111e19a7e08678aaec90276444b7d3cf08c"
        },
        {
          "alg" : "SHA-384",
          "content" : "9792fa52d80beee44fad625758962043442df0d4502e003d61c2c12c385ae7302221548d5351a66abcb217896c44d062"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.wss4j/wss4j-policy@2.4.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://ws.apache.org/wss4j/wss4j-policy/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/WSS"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?dev@ws.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=ws-wss4j.git;a=summary/wss4j-parent/wss4j-policy"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.wss4j/wss4j-policy@2.4.3?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.wss4j",
      "name" : "wss4j-ws-security-stax",
      "version" : "2.4.3",
      "description" : "Apache WSS4J parent pom",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "19906deacbe98b6b397ae1dedbfc4676"
        },
        {
          "alg" : "SHA-1",
          "content" : "6566d7fe40028f3fe9313cee01fb2bcf2dacc8dc"
        },
        {
          "alg" : "SHA-256",
          "content" : "ca865a6aa9ab9d7c258952d72204c9549d791018bd692c7f5cd578f75a3bd0f0"
        },
        {
          "alg" : "SHA-512",
          "content" : "973f0d762ceb0688dc297e0366aa9d63f964b27d82298dd95d5f698bdba9a02920ed5f8c5c174d13ec9c898a71fa868aca7d201523443d9de6f877b8a35ac5a2"
        },
        {
          "alg" : "SHA-384",
          "content" : "0b199ff8bfd395cfc880bdcd1228dbd4f606a41bbd6cccb299e927515ac3647f87e0c0dc86d7a6d9da0dad6d62e89376"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.wss4j/wss4j-ws-security-stax@2.4.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://ws.apache.org/wss4j/wss4j-ws-security-stax/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/WSS"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?dev@ws.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=ws-wss4j.git;a=summary/wss4j-parent/wss4j-ws-security-stax"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.wss4j/wss4j-ws-security-stax@2.4.3?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.wss4j",
      "name" : "wss4j-bindings",
      "version" : "2.4.3",
      "description" : "Apache WSS4J parent pom",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "425078dc9882b2d35d6df5e74cb9368e"
        },
        {
          "alg" : "SHA-1",
          "content" : "24bdfca05e2f2b617e86b422331914e0f780bd49"
        },
        {
          "alg" : "SHA-256",
          "content" : "7f4e934497f11938c62f5654000d5dde7d6a3ab62d77bbeaa698194e1d8beb3b"
        },
        {
          "alg" : "SHA-512",
          "content" : "caa5a43ce4b3c473da2202ee8c116a09089fa85f0739d25a882655e98b8aaac392eff4c3ecd70e128f3c2e07f9f2718e8ebf877c0a74469840d5911f1766c3a7"
        },
        {
          "alg" : "SHA-384",
          "content" : "5a9b06de616f0c67a149e9fa0be8186c6f9c3d9f26c35cac02f303cb3cb1611f1547b6dc74c948f677d3145e3f5f9e28"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.wss4j/wss4j-bindings@2.4.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://ws.apache.org/wss4j/wss4j-bindings/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/WSS"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?dev@ws.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=ws-wss4j.git;a=summary/wss4j-parent/wss4j-bindings"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.wss4j/wss4j-bindings@2.4.3?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.wss4j",
      "name" : "wss4j-ws-security-policy-stax",
      "version" : "2.4.3",
      "description" : "Apache WSS4J parent pom",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e7f1c2c0ed770eed1fafbcee7c92abaf"
        },
        {
          "alg" : "SHA-1",
          "content" : "f85b2e0719c1fba921299c43ba1406375eaf517b"
        },
        {
          "alg" : "SHA-256",
          "content" : "61b5aee22a0a6d11538de698a14f605f25a0a134d731564d3b1b51ff28de29c0"
        },
        {
          "alg" : "SHA-512",
          "content" : "ff866e76cee8f741f57d54cd23888d237d202ad5611ab99e50ae3cce84e2b20ca7984214a3694bed60ea8cd479258a94b46b10fc58926d5a7be0c247b72c3cfc"
        },
        {
          "alg" : "SHA-384",
          "content" : "888e100bf069efe000cae9b40214a64c33f99b99c42de0874895756bd718c824e0f11139611cb3ffd886aee8add560e3"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.wss4j/wss4j-ws-security-policy-stax@2.4.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://ws.apache.org/wss4j/wss4j-ws-security-policy-stax/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/WSS"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?dev@ws.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=ws-wss4j.git;a=summary/wss4j-parent/wss4j-ws-security-policy-stax"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.wss4j/wss4j-ws-security-policy-stax@2.4.3?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.cxf",
      "name" : "cxf-rt-management",
      "version" : "3.5.8",
      "description" : "Apache CXF Runtime Management",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "8496b30797dabff4c7eb3b792a7c10f3"
        },
        {
          "alg" : "SHA-1",
          "content" : "1c928cfb6ea64584568bdd32563e028ae2e53cef"
        },
        {
          "alg" : "SHA-256",
          "content" : "11035e1a39245ae0b18830d3099c683295a185ce9661c287440e73428f3f35d3"
        },
        {
          "alg" : "SHA-512",
          "content" : "48259115031967c162e69040a73a069c739171688ee84197ef9071bfcaa8a502ad4bc375572573f8f05133b3985e95565e611afbad9e2c1bf3c842be0e448c8b"
        },
        {
          "alg" : "SHA-384",
          "content" : "c3e8cc7fc7696e299abf56d33b9496dbc4ebd2416f705f07e87e917b3991716fea485f089968188f84c8da6586130a5d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.cxf/cxf-rt-management@3.5.8?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://cxf.apache.org"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/view/A-D/view/CXF/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CXF"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/cxf-users"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-management"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.cxf/cxf-rt-management@3.5.8?type=jar"
    },
    {
      "publisher" : "QOS.ch",
      "group" : "org.slf4j",
      "name" : "slf4j-api",
      "version" : "1.7.36",
      "description" : "The slf4j API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "872da51f5de7f3923da4de871d57fd85"
        },
        {
          "alg" : "SHA-1",
          "content" : "6c62681a2f655b49963a5983b8b0950a6120ae14"
        },
        {
          "alg" : "SHA-256",
          "content" : "d3ef575e3e4979678dc01bf1dcce51021493b4d11fb7f1be8ad982877c16a1c0"
        },
        {
          "alg" : "SHA-512",
          "content" : "f9b033fc019a44f98b16048da7e2b59edd4a6a527ba60e358f65ab88e0afae03a9340f1b3e8a543d49fa542290f499c5594259affa1ff3e6e7bf3b428d4c610b"
        },
        {
          "alg" : "SHA-384",
          "content" : "2b14ad035877087157e379d3277dcdcd79e58d6bdb147c47d29e377d75ce53ad42cafbf22f5fb7827c7e946ff4876b9a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.slf4j.org"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/qos-ch/slf4j/slf4j-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
    },
    {
      "publisher" : "Spring IO",
      "group" : "org.springframework",
      "name" : "spring-context",
      "version" : "5.3.32",
      "description" : "Spring Context",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a26554b4b6b0c97a06c6b7787743a905"
        },
        {
          "alg" : "SHA-1",
          "content" : "eced4842ef45bbd4a91c529016cce4ef82f2108f"
        },
        {
          "alg" : "SHA-256",
          "content" : "dfd80477b59e6461a9a1aefc64cfd830737721468260d8ccfdec0979fe9adfa6"
        },
        {
          "alg" : "SHA-512",
          "content" : "599e3136e829dafb4f8c1b616c4d0ce85eec1cf598cda15d34c1809046c27615544db869a90a6a18b96500ebc6127d0d3e4fc269b146ee14c23a00a6b798e5f9"
        },
        {
          "alg" : "SHA-384",
          "content" : "7b61aabb116a8b061ae62337043b1851df17bd3c8220798d859ce7f16929ff022329a67904455169e0a7a32938a43ab3"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.springframework/spring-context@5.3.32?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/spring-projects/spring-framework"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/spring-projects/spring-framework/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/spring-projects/spring-framework"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.springframework/spring-context@5.3.32?type=jar"
    },
    {
      "publisher" : "Spring IO",
      "group" : "org.springframework",
      "name" : "spring-aop",
      "version" : "5.3.32",
      "description" : "Spring AOP",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "868e64200c5fd24136056a0a397e5284"
        },
        {
          "alg" : "SHA-1",
          "content" : "debd4561bf74aa5020017ffab6dd766b3ff4585d"
        },
        {
          "alg" : "SHA-256",
          "content" : "5c073d3845525bc7ec42a4bad87638dd01f9afb11c02f1e725ca0b7fe4840cb7"
        },
        {
          "alg" : "SHA-512",
          "content" : "dfa4f1ecd3fe588cd0bcc149b36fbdd17fc94c74f94a8d612624be4430c79324389e34137defdc01c0eb2b2abfd6b64cc9010ae31aa4df82ca9a12ba39a640e3"
        },
        {
          "alg" : "SHA-384",
          "content" : "6c2f58e5e7faece5ce670e66f3f2de44f31915450829feb96cffc82ac812489b33f2c73fb5533fe5bacb081b24b54f64"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.springframework/spring-aop@5.3.32?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/spring-projects/spring-framework"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/spring-projects/spring-framework/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/spring-projects/spring-framework"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.springframework/spring-aop@5.3.32?type=jar"
    },
    {
      "publisher" : "Spring IO",
      "group" : "org.springframework",
      "name" : "spring-expression",
      "version" : "5.3.32",
      "description" : "Spring Expression Language (SpEL)",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "8b525e2a52579369d03bfe5c64966913"
        },
        {
          "alg" : "SHA-1",
          "content" : "473a4af30a7421917d83bda2d0fd32571b9e4a70"
        },
        {
          "alg" : "SHA-256",
          "content" : "85a862fada2e43096b96a9ba912d712c0b9de84d6d29a8629644e7bd80386a92"
        },
        {
          "alg" : "SHA-512",
          "content" : "392c3cead5ca2a97225cc251a75add593c8108e5fe1e21798749abe0b9e89cce5347b3d2f5938f88b379b458b5f3748c04c947de26c2ad35d15383291b57cc62"
        },
        {
          "alg" : "SHA-384",
          "content" : "97463b2f73e1b30e858f4276dc9091a0e7abec1b544722ceb0acecdd07013559bbc7b8feaad106a0b295d8878fa3e45a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.springframework/spring-expression@5.3.32?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/spring-projects/spring-framework"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/spring-projects/spring-framework/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/spring-projects/spring-framework"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.springframework/spring-expression@5.3.32?type=jar"
    }
  ],
  "dependencies" : [
    {
      "ref" : "pkg:maven/org.apache.cxf/cxf-rt-ws-rm@3.5.8?type=bundle",
      "dependsOn" : [
        "pkg:maven/org.apache.aries.blueprint/org.apache.aries.blueprint.core@1.10.3?type=jar",
        "pkg:maven/org.osgi/org.osgi.core@6.0.0?type=jar",
        "pkg:maven/org.springframework/spring-beans@5.3.32?type=jar",
        "pkg:maven/org.springframework/spring-core@5.3.32?type=jar",
        "pkg:maven/org.apache.cxf/cxf-core@3.5.8?type=jar",
        "pkg:maven/org.apache.cxf/cxf-rt-bindings-soap@3.5.8?type=jar",
        "pkg:maven/org.apache.cxf/cxf-rt-ws-addr@3.5.8?type=jar",
        "pkg:maven/org.apache.cxf/cxf-rt-ws-policy@3.5.8?type=jar",
        "pkg:maven/org.apache.cxf/cxf-rt-ws-security@3.5.8?type=jar",
        "pkg:maven/org.apache.cxf/cxf-rt-management@3.5.8?type=jar",
        "pkg:maven/org.springframework/spring-context@5.3.32?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.aries.blueprint/org.apache.aries.blueprint.core@1.10.3?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.aries.blueprint/org.apache.aries.blueprint.api@1.0.1?type=jar",
        "pkg:maven/org.apache.aries.quiesce/org.apache.aries.quiesce.api@1.0.0?type=jar",
        "pkg:maven/org.apache.aries.proxy/org.apache.aries.proxy.api@1.1.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.aries.blueprint/org.apache.aries.blueprint.api@1.0.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.aries.quiesce/org.apache.aries.quiesce.api@1.0.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.aries.proxy/org.apache.aries.proxy.api@1.1.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.osgi/org.osgi.core@6.0.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.springframework/spring-beans@5.3.32?type=jar",
      "dependsOn" : [
        "pkg:maven/org.springframework/spring-core@5.3.32?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.springframework/spring-core@5.3.32?type=jar",
      "dependsOn" : [
        "pkg:maven/org.springframework/spring-jcl@5.3.32?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.springframework/spring-jcl@5.3.32?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.cxf/cxf-core@3.5.8?type=jar",
      "dependsOn" : [
        "pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.5?type=jar",
        "pkg:maven/com.fasterxml.woodstox/woodstox-core@6.4.0?type=jar",
        "pkg:maven/org.apache.ws.xmlschema/xmlschema-core@2.3.1?type=jar",
        "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@2.3.3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.5?type=jar",
      "dependsOn" : [
        "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@2.3.3?type=jar",
        "pkg:maven/org.glassfish.jaxb/txw2@2.3.5?type=jar",
        "pkg:maven/com.sun.istack/istack-commons-runtime@3.0.12?type=jar",
        "pkg:maven/com.sun.activation/jakarta.activation@1.2.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@2.3.3?type=jar",
      "dependsOn" : [
        "pkg:maven/jakarta.activation/jakarta.activation-api@1.2.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/jakarta.activation/jakarta.activation-api@1.2.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.glassfish.jaxb/txw2@2.3.5?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.sun.istack/istack-commons-runtime@3.0.12?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.sun.activation/jakarta.activation@1.2.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.woodstox/woodstox-core@6.4.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.ws.xmlschema/xmlschema-core@2.3.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.cxf/cxf-rt-bindings-soap@3.5.8?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.cxf/cxf-core@3.5.8?type=jar",
        "pkg:maven/org.apache.cxf/cxf-rt-wsdl@3.5.8?type=jar",
        "pkg:maven/org.apache.cxf/cxf-rt-databinding-jaxb@3.5.8?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.cxf/cxf-rt-wsdl@3.5.8?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.cxf/cxf-core@3.5.8?type=jar",
        "pkg:maven/wsdl4j/wsdl4j@1.6.3?type=jar",
        "pkg:maven/org.ow2.asm/asm@9.6?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/wsdl4j/wsdl4j@1.6.3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.ow2.asm/asm@9.6?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.cxf/cxf-rt-databinding-jaxb@3.5.8?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.cxf/cxf-core@3.5.8?type=jar",
        "pkg:maven/org.apache.cxf/cxf-rt-wsdl@3.5.8?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.cxf/cxf-rt-ws-addr@3.5.8?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.cxf/cxf-core@3.5.8?type=jar",
        "pkg:maven/org.apache.cxf/cxf-rt-bindings-soap@3.5.8?type=jar",
        "pkg:maven/org.apache.cxf/cxf-rt-ws-policy@3.5.8?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.cxf/cxf-rt-ws-policy@3.5.8?type=jar",
      "dependsOn" : [
        "pkg:maven/wsdl4j/wsdl4j@1.6.3?type=jar",
        "pkg:maven/org.apache.cxf/cxf-core@3.5.8?type=jar",
        "pkg:maven/org.apache.neethi/neethi@3.2.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.neethi/neethi@3.2.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.cxf/cxf-rt-ws-security@3.5.8?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.cxf/cxf-core@3.5.8?type=jar",
        "pkg:maven/org.apache.cxf/cxf-rt-bindings-soap@3.5.8?type=jar",
        "pkg:maven/org.apache.cxf/cxf-rt-security-saml@3.5.8?type=jar",
        "pkg:maven/org.ehcache/ehcache@3.9.3?type=jar",
        "pkg:maven/org.apache.wss4j/wss4j-ws-security-dom@2.4.3?type=jar",
        "pkg:maven/org.apache.wss4j/wss4j-policy@2.4.3?type=jar",
        "pkg:maven/org.apache.wss4j/wss4j-ws-security-stax@2.4.3?type=jar",
        "pkg:maven/org.apache.wss4j/wss4j-ws-security-policy-stax@2.4.3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.cxf/cxf-rt-security-saml@3.5.8?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.cxf/cxf-rt-security@3.5.8?type=jar",
        "pkg:maven/org.apache.wss4j/wss4j-ws-security-dom@2.4.3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.cxf/cxf-rt-security@3.5.8?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.cxf/cxf-core@3.5.8?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.wss4j/wss4j-ws-security-dom@2.4.3?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.wss4j/wss4j-ws-security-common@2.4.3?type=jar",
        "pkg:maven/org.ehcache/ehcache@3.9.3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.wss4j/wss4j-ws-security-common@2.4.3?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/org.apache.santuario/xmlsec@2.3.4?type=jar",
        "pkg:maven/org.opensaml/opensaml-saml-impl@3.4.6?type=jar",
        "pkg:maven/org.cryptacular/cryptacular@1.2.6?type=jar",
        "pkg:maven/joda-time/joda-time@2.10.10?type=jar",
        "pkg:maven/com.google.guava/guava@30.1-jre?type=jar",
        "pkg:maven/org.opensaml/opensaml-xacml-impl@3.4.6?type=jar",
        "pkg:maven/org.opensaml/opensaml-xacml-saml-impl@3.4.6?type=jar",
        "pkg:maven/org.jasypt/jasypt@1.9.3?type=jar",
        "pkg:maven/org.apache.geronimo.javamail/geronimo-javamail_1.4_mail@1.8.4?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.santuario/xmlsec@2.3.4?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.16.0?type=jar",
        "pkg:maven/com.fasterxml.woodstox/woodstox-core@6.4.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/commons-codec/commons-codec@1.16.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.opensaml/opensaml-saml-impl@3.4.6?type=jar",
      "dependsOn" : [
        "pkg:maven/org.opensaml/opensaml-profile-api@3.4.6?type=jar",
        "pkg:maven/org.opensaml/opensaml-saml-api@3.4.6?type=jar",
        "pkg:maven/org.opensaml/opensaml-security-impl@3.4.6?type=jar",
        "pkg:maven/org.opensaml/opensaml-xmlsec-impl@3.4.6?type=jar",
        "pkg:maven/net.shibboleth.utilities/java-support@7.5.2?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.16.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.opensaml/opensaml-profile-api@3.4.6?type=jar",
      "dependsOn" : [
        "pkg:maven/org.opensaml/opensaml-core@3.4.6?type=jar",
        "pkg:maven/net.shibboleth.utilities/java-support@7.5.2?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.16.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.opensaml/opensaml-core@3.4.6?type=jar",
      "dependsOn" : [
        "pkg:maven/io.dropwizard.metrics/metrics-core@4.2.25?type=jar",
        "pkg:maven/net.shibboleth.utilities/java-support@7.5.2?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.16.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.dropwizard.metrics/metrics-core@4.2.25?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/net.shibboleth.utilities/java-support@7.5.2?type=jar",
      "dependsOn" : [
        "pkg:maven/commons-codec/commons-codec@1.16.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.opensaml/opensaml-saml-api@3.4.6?type=jar",
      "dependsOn" : [
        "pkg:maven/org.opensaml/opensaml-xmlsec-api@3.4.6?type=jar",
        "pkg:maven/org.opensaml/opensaml-soap-api@3.4.6?type=jar",
        "pkg:maven/org.opensaml/opensaml-profile-api@3.4.6?type=jar",
        "pkg:maven/net.shibboleth.utilities/java-support@7.5.2?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.16.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.opensaml/opensaml-xmlsec-api@3.4.6?type=jar",
      "dependsOn" : [
        "pkg:maven/org.opensaml/opensaml-security-api@3.4.6?type=jar",
        "pkg:maven/net.shibboleth.utilities/java-support@7.5.2?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.16.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.opensaml/opensaml-security-api@3.4.6?type=jar",
      "dependsOn" : [
        "pkg:maven/org.opensaml/opensaml-core@3.4.6?type=jar",
        "pkg:maven/org.apache.santuario/xmlsec@2.3.4?type=jar",
        "pkg:maven/net.shibboleth.utilities/java-support@7.5.2?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.16.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.opensaml/opensaml-soap-api@3.4.6?type=jar",
      "dependsOn" : [
        "pkg:maven/org.opensaml/opensaml-xmlsec-api@3.4.6?type=jar",
        "pkg:maven/net.shibboleth.utilities/java-support@7.5.2?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.16.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.opensaml/opensaml-security-impl@3.4.6?type=jar",
      "dependsOn" : [
        "pkg:maven/org.opensaml/opensaml-security-api@3.4.6?type=jar",
        "pkg:maven/net.shibboleth.utilities/java-support@7.5.2?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.16.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.opensaml/opensaml-xmlsec-impl@3.4.6?type=jar",
      "dependsOn" : [
        "pkg:maven/org.opensaml/opensaml-core@3.4.6?type=jar",
        "pkg:maven/org.opensaml/opensaml-security-api@3.4.6?type=jar",
        "pkg:maven/org.opensaml/opensaml-xmlsec-api@3.4.6?type=jar",
        "pkg:maven/org.apache.santuario/xmlsec@2.3.4?type=jar",
        "pkg:maven/org.opensaml/opensaml-security-impl@3.4.6?type=jar",
        "pkg:maven/net.shibboleth.utilities/java-support@7.5.2?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.16.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.cryptacular/cryptacular@1.2.6?type=jar",
      "dependsOn" : [
        "pkg:maven/org.bouncycastle/bcprov-jdk18on@1.77?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.bouncycastle/bcprov-jdk18on@1.77?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/joda-time/joda-time@2.10.10?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.guava/guava@30.1-jre?type=jar",
      "dependsOn" : [
        "pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.opensaml/opensaml-xacml-impl@3.4.6?type=jar",
      "dependsOn" : [
        "pkg:maven/org.opensaml/opensaml-xacml-api@3.4.6?type=jar",
        "pkg:maven/net.shibboleth.utilities/java-support@7.5.2?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.16.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.opensaml/opensaml-xacml-api@3.4.6?type=jar",
      "dependsOn" : [
        "pkg:maven/org.opensaml/opensaml-core@3.4.6?type=jar",
        "pkg:maven/net.shibboleth.utilities/java-support@7.5.2?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.16.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.opensaml/opensaml-xacml-saml-impl@3.4.6?type=jar",
      "dependsOn" : [
        "pkg:maven/org.opensaml/opensaml-xacml-saml-api@3.4.6?type=jar",
        "pkg:maven/org.opensaml/opensaml-saml-impl@3.4.6?type=jar",
        "pkg:maven/net.shibboleth.utilities/java-support@7.5.2?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.16.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.opensaml/opensaml-xacml-saml-api@3.4.6?type=jar",
      "dependsOn" : [
        "pkg:maven/org.opensaml/opensaml-xacml-api@3.4.6?type=jar",
        "pkg:maven/org.opensaml/opensaml-saml-api@3.4.6?type=jar",
        "pkg:maven/net.shibboleth.utilities/java-support@7.5.2?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.16.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.jasypt/jasypt@1.9.3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.geronimo.javamail/geronimo-javamail_1.4_mail@1.8.4?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.ehcache/ehcache@3.9.3?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.wss4j/wss4j-policy@2.4.3?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.neethi/neethi@3.2.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.wss4j/wss4j-ws-security-stax@2.4.3?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.wss4j/wss4j-bindings@2.4.3?type=jar",
        "pkg:maven/org.apache.wss4j/wss4j-ws-security-common@2.4.3?type=jar",
        "pkg:maven/org.ehcache/ehcache@3.9.3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.wss4j/wss4j-bindings@2.4.3?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.santuario/xmlsec@2.3.4?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.wss4j/wss4j-ws-security-policy-stax@2.4.3?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.wss4j/wss4j-ws-security-stax@2.4.3?type=jar",
        "pkg:maven/org.apache.wss4j/wss4j-policy@2.4.3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.cxf/cxf-rt-management@3.5.8?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.cxf/cxf-core@3.5.8?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.springframework/spring-context@5.3.32?type=jar",
      "dependsOn" : [
        "pkg:maven/org.springframework/spring-aop@5.3.32?type=jar",
        "pkg:maven/org.springframework/spring-beans@5.3.32?type=jar",
        "pkg:maven/org.springframework/spring-core@5.3.32?type=jar",
        "pkg:maven/org.springframework/spring-expression@5.3.32?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.springframework/spring-aop@5.3.32?type=jar",
      "dependsOn" : [
        "pkg:maven/org.springframework/spring-beans@5.3.32?type=jar",
        "pkg:maven/org.springframework/spring-core@5.3.32?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.springframework/spring-expression@5.3.32?type=jar",
      "dependsOn" : [
        "pkg:maven/org.springframework/spring-core@5.3.32?type=jar"
      ]
    }
  ]
}