{
  "bomFormat" : "CycloneDX",
  "specVersion" : "1.4",
  "serialNumber" : "urn:uuid:d6ee1458-cd60-3b57-ae12-d4e3872540f2",
  "version" : 1,
  "metadata" : {
    "timestamp" : "2024-03-07T19:43:13Z",
    "tools" : [
      {
        "vendor" : "OWASP Foundation",
        "name" : "CycloneDX Maven plugin",
        "version" : "2.7.11",
        "hashes" : [
          {
            "alg" : "MD5",
            "content" : "a70e8b649ab4a2bb7922d360173c8237"
          },
          {
            "alg" : "SHA-1",
            "content" : "4c3c0878c15561639076e5be7a48ffcd6111c5ee"
          },
          {
            "alg" : "SHA-256",
            "content" : "70997d52dbffd4e797c467b2062c6ba9b8b5a7380ff2884779f2743b6172ebb5"
          },
          {
            "alg" : "SHA-512",
            "content" : "bc1ce91190c642f68fd3571939d7668def3b879ec8e5a87a213a9710a106e0290f60f9e0414593d19cca958c4fcb5d4450bd2793bcd609948419c8a2a6a7f5c8"
          },
          {
            "alg" : "SHA-384",
            "content" : "3c8421bdafd1754fb424f16dccc83bfe0827648c1cadfffc98bdf1c7da65475dfe48d2f4b16d233bb8819e155ba6a4f3"
          }
        ]
      }
    ],
    "component" : {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.cxf",
      "name" : "cxf-rt-ws-security",
      "version" : "3.5.8",
      "description" : "Apache CXF Runtime WS Security",
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.cxf/cxf-rt-ws-security@3.5.8?type=bundle",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://cxf.apache.org"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/view/A-D/view/CXF/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CXF"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/cxf-users"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-ws-security"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.cxf/cxf-rt-ws-security@3.5.8?type=bundle"
    },
    "properties" : [
      {
        "name" : "maven.goal",
        "value" : "makeBom"
      },
      {
        "name" : "maven.scopes",
        "value" : "compile,provided,runtime,system"
      }
    ]
  },
  "components" : [
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.cxf",
      "name" : "cxf-core",
      "version" : "3.5.8",
      "description" : "Apache CXF Core",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "55525ade5f838741e646063c1148da95"
        },
        {
          "alg" : "SHA-1",
          "content" : "fb1f1e19c85298d3d773f4b90b2ecd3b49aae50f"
        },
        {
          "alg" : "SHA-256",
          "content" : "57f2accf90747c2ed0e5159444845ef21221908e66c78b9f8c568c45eb757253"
        },
        {
          "alg" : "SHA-512",
          "content" : "350b212db3340b3436d82e4efed620f07700aae8c44e9e8c99a7786f8143fedfd2b6ad2de84c68d1e2e5293a63f5636e935cf65149252b20b8bfec7f186c4e96"
        },
        {
          "alg" : "SHA-384",
          "content" : "31d5dfd34a8d539902b897c9e70e7da6cd51f84822371aaa943fab57a1f84526115cf0de6904948c3ac6f6e497c0b37a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.cxf/cxf-core@3.5.8?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://cxf.apache.org"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/view/A-D/view/CXF/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CXF"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/cxf-users"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-core"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.cxf/cxf-core@3.5.8?type=jar"
    },
    {
      "publisher" : "Eclipse Foundation",
      "group" : "org.glassfish.jaxb",
      "name" : "jaxb-runtime",
      "version" : "2.3.5",
      "description" : "JAXB (JSR 222) Reference Implementation",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "2d3790292a30333a14b7fb1143864a9c"
        },
        {
          "alg" : "SHA-1",
          "content" : "a169a961a2bb9ac69517ec1005e451becf5cdfab"
        },
        {
          "alg" : "SHA-256",
          "content" : "4a25453756d08be89c6537cc26fea237677ab99eea857ce1bcb84346715cfae4"
        },
        {
          "alg" : "SHA-512",
          "content" : "c55c0754e4d79d548c029504b04b15d5ef28821f0c3ee9e14346fabfc3d6e5ef0bd38b4d076917eeac6a0c79bbbe1f78dd4f36f425c175efed23ea8cb771d9ff"
        },
        {
          "alg" : "SHA-384",
          "content" : "7918c98d770221a2c4bd913870b9ae6e91271fb37eb60f9d2e2a6bca49f7af1980be80e9aad77ca875e79ed3a6391d06"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.5?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://eclipse-ee4j.github.io/jaxb-ri/"
        },
        {
          "type" : "distribution",
          "url" : "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/jaxb-ri/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://accounts.eclipse.org/mailing-list/jaxb-impl-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/jaxb-ri.git/jaxb-runtime-parent/jaxb-runtime"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.5?type=jar"
    },
    {
      "publisher" : "Eclipse Foundation",
      "group" : "org.glassfish.jaxb",
      "name" : "txw2",
      "version" : "2.3.5",
      "description" : "TXW is a library that allows you to write XML documents.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "67005a4cf5ee9cfd82edec1bdbecb32b"
        },
        {
          "alg" : "SHA-1",
          "content" : "ec8930fa62e7b1758b1664d135f50c7abe86a4a3"
        },
        {
          "alg" : "SHA-256",
          "content" : "7d75ea1151367fb66287011d9941715f645922932554acba0c5ac3aec67fb01f"
        },
        {
          "alg" : "SHA-512",
          "content" : "5bdcd56ff4644554e001862d69ddf275441bfd72d641a200e17f0f1093a49fe2c5f2e0d5a65797419b0355843c916b81a6fd4bde67baa6d4a70b6784e4f9def9"
        },
        {
          "alg" : "SHA-384",
          "content" : "ffcb4be280ad100c23249cf17de737bb6093440aa26e533aeb7c57eb5959b964b62c664250c9d39088d22916321a66a7"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.glassfish.jaxb/txw2@2.3.5?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://eclipse-ee4j.github.io/jaxb-ri/"
        },
        {
          "type" : "distribution",
          "url" : "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/jaxb-ri/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://accounts.eclipse.org/mailing-list/jaxb-impl-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/jaxb-ri.git/jaxb-txw-parent/txw2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.glassfish.jaxb/txw2@2.3.5?type=jar"
    },
    {
      "publisher" : "Eclipse Foundation",
      "group" : "com.sun.istack",
      "name" : "istack-commons-runtime",
      "version" : "3.0.12",
      "description" : "istack common utility code",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1952bd76321f8580cfaa57e332a68287"
        },
        {
          "alg" : "SHA-1",
          "content" : "cbbe1a62b0cc6c85972e99d52aaee350153dc530"
        },
        {
          "alg" : "SHA-256",
          "content" : "27d85fc134c9271d5c79d3300fc4669668f017e72409727c428f54f2417f04cd"
        },
        {
          "alg" : "SHA-512",
          "content" : "af36b11cc0d82b7f62c64941f4e7d441d25cb9f3c4b3e08753d038c388e5a09364b5dac9127f29a9b8df6d96034133caadab6d74371077478d2f301605913460"
        },
        {
          "alg" : "SHA-384",
          "content" : "ad8ba1f6538e087915b1e7fbf4a7a60b006ebecc4ab52986c10dfe88ae11ae7eb6e1f302bee06f70b16ec316f001375b"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/com.sun.istack/istack-commons-runtime@3.0.12?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://projects.eclipse.org/projects/ee4j/istack-commons/istack-commons-runtime"
        },
        {
          "type" : "distribution",
          "url" : "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/jaxb-istack-commons/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/jaxb-impl-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/jaxb-istack-commons/istack-commons-runtime"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.sun.istack/istack-commons-runtime@3.0.12?type=jar"
    },
    {
      "publisher" : "Eclipse Foundation",
      "group" : "com.sun.activation",
      "name" : "jakarta.activation",
      "version" : "1.2.2",
      "description" : "Jakarta Activation",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0b8bee3bf29b9a015f8b992035581a7c"
        },
        {
          "alg" : "SHA-1",
          "content" : "74548703f9851017ce2f556066659438019e7eb5"
        },
        {
          "alg" : "SHA-256",
          "content" : "02156773e4ae9d048d14a56ad35d644bee9f1052a791d072df3ded3c656e6e1a"
        },
        {
          "alg" : "SHA-512",
          "content" : "8bd94a4370b827e3904f31253b022e5c1851896d3b616ca7daebfef259238cedc56d4ced32c74f24a13c3e2295b0ea012af5d04656b7f713cc53a2f18d5e2cf7"
        },
        {
          "alg" : "SHA-384",
          "content" : "1cb0aff8b73ba52a9931b2cf13c75a1ce6665fb826bf97ede66db75c532136aa189fb53a1925e62b6eef572309ef3b9a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/com.sun.activation/jakarta.activation@1.2.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/eclipse-ee4j/jaf/jakarta.activation"
        },
        {
          "type" : "distribution",
          "url" : "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/jaf/issues/"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/jaf/jakarta.activation"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.sun.activation/jakarta.activation@1.2.2?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.ws.xmlschema",
      "name" : "xmlschema-core",
      "version" : "2.3.1",
      "description" : "Commons XMLSchema is a light weight schema object model that can be used to manipulate or generate XML schema.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "76e1deab5e6e1caa5fed31b3482cd266"
        },
        {
          "alg" : "SHA-1",
          "content" : "5a83fc4e79d128f38c9e32138537060678151759"
        },
        {
          "alg" : "SHA-256",
          "content" : "648f7f7e5228d89069cbc54c32404209f242581bc1c1e2e74229114f081071aa"
        },
        {
          "alg" : "SHA-512",
          "content" : "e08630e6f6fbe2b960a7c161ddff46e135566bcb1dd2aaf3707ac01a843fb462ac1c7eeb830aca7fc88cbe3ffadc235adac07ec019e166050860ed73d249c21f"
        },
        {
          "alg" : "SHA-384",
          "content" : "456b8a1dab0dfbccc13d9b78b195aef80d6989ccbd3a421e3e60305a4d2d48704d2f6b157c593ac2371661a505098c13"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.ws.xmlschema/xmlschema-core@2.3.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://ws.apache.org/commons/xmlschema20/xmlschema-core/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/XMLSCHEMA"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/ws-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=ws-xmlschema.git;a=summary/xmlschema-core"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.ws.xmlschema/xmlschema-core@2.3.1?type=jar"
    },
    {
      "publisher" : "Eclipse Foundation",
      "group" : "jakarta.xml.bind",
      "name" : "jakarta.xml.bind-api",
      "version" : "2.3.3",
      "description" : "Jakarta XML Binding API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "61286918ca0192e9f87d1358aef718dd"
        },
        {
          "alg" : "SHA-1",
          "content" : "48e3b9cfc10752fba3521d6511f4165bea951801"
        },
        {
          "alg" : "SHA-256",
          "content" : "c04539f472e9a6dd0c7685ea82d677282269ab8e7baca2e14500e381e0c6cec5"
        },
        {
          "alg" : "SHA-512",
          "content" : "adf6436a7a9dc6f64b97127861d7a89b78e82bea67f72bda800ef285163adcd84dbf006f679108a2a8c2eed013e0b771da2354087e0845479ff2b6318b881442"
        },
        {
          "alg" : "SHA-384",
          "content" : "bad8b9f52bf7a7e1d3974cb305a69c093fb32d2131539c18d34e471e3ec32bdd9dd136bb4b38bb14d84e99c562f208c7"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@2.3.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/eclipse-ee4j/jaxb-api/jakarta.xml.bind-api"
        },
        {
          "type" : "distribution",
          "url" : "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/jaxb-api/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/jaxb-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/jaxb-api.git/jakarta.xml.bind-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@2.3.3?type=jar"
    },
    {
      "publisher" : "Eclipse Foundation",
      "group" : "jakarta.activation",
      "name" : "jakarta.activation-api",
      "version" : "1.2.2",
      "description" : "Jakarta Activation API jar",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1cbb480310fa1987f9db7a3ed7118af7"
        },
        {
          "alg" : "SHA-1",
          "content" : "99f53adba383cb1bf7c3862844488574b559621f"
        },
        {
          "alg" : "SHA-256",
          "content" : "a187a939103aef5849a7af84bd7e27be2d120c410af291437375ffe061f4f09d"
        },
        {
          "alg" : "SHA-512",
          "content" : "e3d846ff5f62ad9fef514f0726846c63d4aa74b2bb8f60c76258dba37701f83ae75872401071bf40da40697d43a8a6e36d08fa4ef39fe70797fb6f2b1712599f"
        },
        {
          "alg" : "SHA-384",
          "content" : "3e25702596eca7dd48f904b3985d64b4b394d162d3884a907d8b2ee647542808713a42a02f0eeff2c07518a206cc91cf"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/jakarta.activation/jakarta.activation-api@1.2.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/eclipse-ee4j/jaf/jakarta.activation-api"
        },
        {
          "type" : "distribution",
          "url" : "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/jaf/issues/"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/jaf/jakarta.activation-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/jakarta.activation/jakarta.activation-api@1.2.2?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.cxf",
      "name" : "cxf-rt-bindings-soap",
      "version" : "3.5.8",
      "description" : "Apache CXF Runtime SOAP Binding",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "2c99e8a3e3b0d7869ef688874c910f36"
        },
        {
          "alg" : "SHA-1",
          "content" : "ba708dbec060719b9107093651b713f05a28278a"
        },
        {
          "alg" : "SHA-256",
          "content" : "a71a87bbfe2ea35613f37d073e7fa22d3f14666dda79a35a8827856747b7e000"
        },
        {
          "alg" : "SHA-512",
          "content" : "a59c23f5395de90101678155fb7879142d272eab172913fabb70d9ae1ce7684b02d2a470873c5d14cda8b5e2295738c7875c30c546ff7fb928cea45513e8f6ef"
        },
        {
          "alg" : "SHA-384",
          "content" : "5ed56979f3ecb79dd94c1994b1504f7dba8d07a049da530cac6d4fd0b661a858f6865a405efe27e9b1cb10a4b139a746"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.cxf/cxf-rt-bindings-soap@3.5.8?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://cxf.apache.org"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/view/A-D/view/CXF/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CXF"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/cxf-users"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-bindings-soap"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.cxf/cxf-rt-bindings-soap@3.5.8?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.cxf",
      "name" : "cxf-rt-wsdl",
      "version" : "3.5.8",
      "description" : "Apache CXF Runtime Core for WSDL Based Technologies",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "ec58616212eaea8b8330d1fde9a8ef9a"
        },
        {
          "alg" : "SHA-1",
          "content" : "5573b1cad8be02b25e7dd17db64d1b438ceac3fb"
        },
        {
          "alg" : "SHA-256",
          "content" : "1c6c089e7fec140daec6e7f6c727fa5c1150c28bffa4c5bd2c14e887b34da9d2"
        },
        {
          "alg" : "SHA-512",
          "content" : "9225d9efd6618f92019e8994f3f9ac44239039438b82e309fd23a527d5b8c2656f08f0f2d613dd55321734b97e48bd381db2a318753fc63d1d72fc9ff370e45b"
        },
        {
          "alg" : "SHA-384",
          "content" : "8c00bb572356b420a925cd20e250559e981afd7a638ae099846d1abb63a26e1c8b63cab7f8ef9aed34a2f948372d8a55"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.cxf/cxf-rt-wsdl@3.5.8?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://cxf.apache.org"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/view/A-D/view/CXF/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CXF"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/cxf-users"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-wsdl"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.cxf/cxf-rt-wsdl@3.5.8?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.cxf",
      "name" : "cxf-rt-databinding-jaxb",
      "version" : "3.5.8",
      "description" : "Apache CXF Runtime JAXB DataBinding",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6e8cf5776bc5324d4314a80e5c4d9d51"
        },
        {
          "alg" : "SHA-1",
          "content" : "0f090784c2338af3e4d523010a74a1ebff77af0a"
        },
        {
          "alg" : "SHA-256",
          "content" : "017b4b5f423d77a9f11132ec4c41ca45fc802c50533ef505ccc0fe1602a767f9"
        },
        {
          "alg" : "SHA-512",
          "content" : "91f9b1c1123776f9334a44eae3e480ec023620de2805c9e3ab8596aed9df08b23bccb1285c8cdd629efcaa40dfbfdd1e70ad6e322627cea7adc4194146984cd3"
        },
        {
          "alg" : "SHA-384",
          "content" : "c001500b2c11986abf73c50565adc56f8c33d06d39690d4164c06335b02fc9adb223d8edee4ed58eb65fc0ed1f70d2a5"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.cxf/cxf-rt-databinding-jaxb@3.5.8?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://cxf.apache.org"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/view/A-D/view/CXF/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CXF"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/cxf-users"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-databinding-jaxb"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.cxf/cxf-rt-databinding-jaxb@3.5.8?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.cxf",
      "name" : "cxf-rt-security-saml",
      "version" : "3.5.8",
      "description" : "Apache CXF Runtime SAML Security functionality",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1cfd49933042b04c125448e2a7ec5f9e"
        },
        {
          "alg" : "SHA-1",
          "content" : "890e6415110902d36ad21479da73d9b7b3184cff"
        },
        {
          "alg" : "SHA-256",
          "content" : "9a7f368f222a2f20a98b4df9889df5357d2d2457bde17077d48f22d75f6b6961"
        },
        {
          "alg" : "SHA-512",
          "content" : "cad22527a0ed24655d1e27daa0460a2bb857c6cc06f8a862d1f42fe05ddac2c564ecdfb2cabac571cdf34d02a4c75dcd39b2b63231bc178f451598c70052a17f"
        },
        {
          "alg" : "SHA-384",
          "content" : "db8fc09f672d189f78d5eea504e653e4cc8b284aa552ff1e57565d848ea16230ac94bfdc432057caa515528a5fa12227"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.cxf/cxf-rt-security-saml@3.5.8?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://cxf.apache.org"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/view/A-D/view/CXF/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CXF"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/cxf-users"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-security-saml"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.cxf/cxf-rt-security-saml@3.5.8?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.cxf",
      "name" : "cxf-rt-security",
      "version" : "3.5.8",
      "description" : "Apache CXF Runtime Security functionality",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "5fc3877d2ae732de3c2356147bb05ffa"
        },
        {
          "alg" : "SHA-1",
          "content" : "d82f02527d9b2e0a21ad8c7303edc1ff77533472"
        },
        {
          "alg" : "SHA-256",
          "content" : "8d29b7319ccd007bd0338d703a6fe4ed02efdf782c6bc2ba35e3d940f6166991"
        },
        {
          "alg" : "SHA-512",
          "content" : "88ae20388979a5dca622835fb06b293bf4d4edbdd35cc1ce566c216fa42ef55eb8166ba38f165574da3859b15b1a172fa8492369efd576aa3e16203fab6afe74"
        },
        {
          "alg" : "SHA-384",
          "content" : "68654d02adbf0c77caa029924f83a700ab45736748b5d5290d1a0493ec45f67fd1201671099743cb4e1681b9a719dab4"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.cxf/cxf-rt-security@3.5.8?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://cxf.apache.org"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/view/A-D/view/CXF/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CXF"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/cxf-users"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-security"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.cxf/cxf-rt-security@3.5.8?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.cxf",
      "name" : "cxf-rt-ws-addr",
      "version" : "3.5.8",
      "description" : "Apache CXF Runtime WS Addressing",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e88c82b4b9971e3bef70bce9d7b89e9c"
        },
        {
          "alg" : "SHA-1",
          "content" : "78e7ac46aa271e012fa5af283e8a1ad9502f7f48"
        },
        {
          "alg" : "SHA-256",
          "content" : "34e2d3953ed291a33175635568befff9a54d36724636ccce48cf34e6261c5060"
        },
        {
          "alg" : "SHA-512",
          "content" : "56007b24536715e6ce241107ba28d9924a91e7293c6fbd42c1c2fb1bb0e840847c18ecfecbe3c09d2edd72a02e6ed0d095cb81ffb0370785c13141c21f98a638"
        },
        {
          "alg" : "SHA-384",
          "content" : "45c583a3ab039e771e6e9ac0a42f2cce78a8681fb704ec83d318b96b50df9734caae8fb87c268a18260c2c5249731176"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.cxf/cxf-rt-ws-addr@3.5.8?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://cxf.apache.org"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/view/A-D/view/CXF/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CXF"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/cxf-users"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-ws-addr"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.cxf/cxf-rt-ws-addr@3.5.8?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.cxf",
      "name" : "cxf-rt-ws-policy",
      "version" : "3.5.8",
      "description" : "Apache CXF Runtime WS Policy",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4b6957c29c23f571b833510f0ad90637"
        },
        {
          "alg" : "SHA-1",
          "content" : "30596c5a3aa6376a66f39d170e8fb470db80c7e2"
        },
        {
          "alg" : "SHA-256",
          "content" : "ca581b9f976aef8e52257eee4d1b0aaa011e096b534a4ff26ee28e8547e79f01"
        },
        {
          "alg" : "SHA-512",
          "content" : "56464902021e71fd9cc0ae3df237f770f872c6ffe5cb59fc2d96330f7b393305ccbe9626d954a7a61ce5d1a32a1014c134635d3f3e598d0c8ee974a6e5aed907"
        },
        {
          "alg" : "SHA-384",
          "content" : "ae99d32e0b7d0468ede0bb02fc79b1c9671edac7db42316b73dc5ec5deaeb863a4605c5d212d81ae6ab52f7daecfa565"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.cxf/cxf-rt-ws-policy@3.5.8?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://cxf.apache.org"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/view/A-D/view/CXF/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CXF"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/cxf-users"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-ws-policy"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.cxf/cxf-rt-ws-policy@3.5.8?type=jar"
    },
    {
      "group" : "wsdl4j",
      "name" : "wsdl4j",
      "version" : "1.6.3",
      "description" : "Java stub generator for WSDL",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "cfc28d89625c5e88589aec7a9aee0208"
        },
        {
          "alg" : "SHA-1",
          "content" : "6d106a6845a3d3477a1560008479312888e94f2f"
        },
        {
          "alg" : "SHA-256",
          "content" : "740f448e6b3bc110e02f4a1e56fb57672e732d2ecaf29ae15835051ae8af4725"
        },
        {
          "alg" : "SHA-512",
          "content" : "3779363efe4b7cf23bfc68388f3c6b5105dedb9192080f144534fcacc8a77014f9f3eb3ae1927344a267364c24deedebf25e306f80dfc293851973685cc58c52"
        },
        {
          "alg" : "SHA-384",
          "content" : "19b91e5508f5e33b8d7c4ad41d3d679d34c0f7b43651f19c7962f534322e6cb768595430a115df82eaf66905a4a71996"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "CPL",
            "url" : "http://www.opensource.org/licenses/cpl1.0.txt"
          }
        }
      ],
      "purl" : "pkg:maven/wsdl4j/wsdl4j@1.6.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://sf.net/projects/wsdl4j"
        },
        {
          "type" : "vcs",
          "url" : "http://wsdl4j.cvs.sourceforge.net/wsdl4j"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/wsdl4j/wsdl4j@1.6.3?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.neethi",
      "name" : "neethi",
      "version" : "3.2.0",
      "description" : "Apache Neethi provides general framework for the programmers to use WS Policy. It is compliant with latest WS Policy specification which was published in March 2006. This framework is specifically written to enable the Apache Web services stack to use WS Policy as a way of expressing it's requirements and capabilities.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e6040db3584bfdbadd0515dbdba6b25a"
        },
        {
          "alg" : "SHA-1",
          "content" : "4e409cf251f420f65130d458256f7be1ad68f055"
        },
        {
          "alg" : "SHA-256",
          "content" : "6ed3c2cd20444972936c1f9b623862d1415592290ce1eb79e1cf1008f999aa3b"
        },
        {
          "alg" : "SHA-512",
          "content" : "eef049866bfec3f543b8cbd5b673516fdb868fa45d2884a3cae3d65293ce179f32135c06d15ecbc039f6738fb9919c5aa2039df75df729e6081988f3570ad032"
        },
        {
          "alg" : "SHA-384",
          "content" : "2eba46d946e12b0898d4578248a606ab767a75d213d61951ab340e66e4c424650eb34356e4bd16e3f89c030a4edc06ea"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.neethi/neethi@3.2.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://ws.apache.org/neethi/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/NEETHI"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/ws-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=ws-neethi.git;a=summary"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.neethi/neethi@3.2.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.cxf",
      "name" : "cxf-rt-ws-mex",
      "version" : "3.5.8",
      "description" : "Apache CXF Runtime WS MetadataExchange",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a1c50d73a5aba36c717f1c8611c29ae3"
        },
        {
          "alg" : "SHA-1",
          "content" : "3c94368e514ddfb453be7f0d40f96928f98506e1"
        },
        {
          "alg" : "SHA-256",
          "content" : "1b9dc4a2beaf2783f9b927c8350ee1b4615a37a1bc93decbe7a026b4547429fd"
        },
        {
          "alg" : "SHA-512",
          "content" : "6d4832e5820f6e8ac8f235deeee6e86b6f02605cdd9add1bd51d481bf74f822b2373caa1e9669dd6649fc51ea010f78c6a7b1d798752315305a1900d17af33aa"
        },
        {
          "alg" : "SHA-384",
          "content" : "d5f9d93082088a21b0eef16f5a2dc5a27fe687d9014aa7dbf0a2d8eda227d5f922af9149715940de6fcb3a003677b73d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.cxf/cxf-rt-ws-mex@3.5.8?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://cxf.apache.org"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/view/A-D/view/CXF/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CXF"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/cxf-users"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-ws-mex"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.cxf/cxf-rt-ws-mex@3.5.8?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.cxf",
      "name" : "cxf-rt-transports-http",
      "version" : "3.5.8",
      "description" : "Apache CXF Runtime HTTP Transport",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "29634f1e7547265d691cca67aa94a815"
        },
        {
          "alg" : "SHA-1",
          "content" : "6061f49df2a27df083136a0e5288a61877965bfe"
        },
        {
          "alg" : "SHA-256",
          "content" : "2361b09223a252035677550e34db29aae401b585ea5cd919b3c0c544969c35fd"
        },
        {
          "alg" : "SHA-512",
          "content" : "54c9413198be4d7c5bba0553256ff999aae8d0393626aa9ec0ca66819c88bbcf45147ecbf4ddf6681463edcc72c3c9f0be2643f9949412e2a2f23e48bdef0148"
        },
        {
          "alg" : "SHA-384",
          "content" : "b0a9fdb5413c2a3dd5d29b3d0c00d832ba3fbf2f4882ac452361059bca2ab8a1479c6639c2b923b363066bc8dc9002ce"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.cxf/cxf-rt-transports-http@3.5.8?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://cxf.apache.org"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/view/A-D/view/CXF/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CXF"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/cxf-users"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-transports-http"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.cxf/cxf-rt-transports-http@3.5.8?type=jar"
    },
    {
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.woodstox",
      "name" : "woodstox-core",
      "version" : "6.4.0",
      "description" : "Woodstox is a high-performance XML processor that implements Stax (JSR-173), SAX2 and Stax2 APIs",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "afcba1114fca8199ef26346dd6011e90"
        },
        {
          "alg" : "SHA-1",
          "content" : "c47579857bbf12c85499f431d4ecf27d77976b7c"
        },
        {
          "alg" : "SHA-256",
          "content" : "d6eb9f2f40049a7a808baf11ffba0737648e62ff52fde9271d808e5d57a27279"
        },
        {
          "alg" : "SHA-512",
          "content" : "7da4cd51f7082e59b3cb78988cda78bf162e2b02457caf17242cb9cea9b8002ada15d4dfe774ca0355acdea95c88b67c4d06a27a61653cb84c9a46d27b2726c6"
        },
        {
          "alg" : "SHA-384",
          "content" : "6e25d32eb4c127f7129ccd912ff882625d3fa43e8eba9bc55013a27a61806d1b865ec809bd21d58d3dbfa3d9e2a3d516"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.woodstox/woodstox-core@6.4.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/FasterXML/woodstox"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/FasterXML/woodstox/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/FasterXML/woodstox"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.woodstox/woodstox-core@6.4.0?type=jar"
    },
    {
      "publisher" : "fasterxml.com",
      "group" : "org.codehaus.woodstox",
      "name" : "stax2-api",
      "version" : "4.2.1",
      "description" : "tax2 API is an extension to basic Stax 1.0 API that adds significant new functionality, such as full-featured bi-direction validation interface and high-performance Typed Access API.",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "af8377bc7882332e22456616a9f164f6"
        },
        {
          "alg" : "SHA-1",
          "content" : "a3f7325c52240418c2ba257b103c3c550e140c83"
        },
        {
          "alg" : "SHA-256",
          "content" : "678567e48b51a42c65c699f266539ad3d676d4b1a5b0ad7d89ece8b9d5772579"
        },
        {
          "alg" : "SHA-512",
          "content" : "00efc5d4d17540fb180c5b20d456630a8b3262dff46676689ae916ba16f0fbd9b1a71c7badfb254faad6597f94fed1edb96f77c15f40178eaf4d8cd35cea5e8d"
        },
        {
          "alg" : "SHA-384",
          "content" : "97a6a9f0cc666776e4a4f08729c303d2a602ce5c25ee633cd6c54c72f12d11e9d43634ca6ca4ef7da5973a52030384da"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-4-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://github.com/FasterXML/stax2-api"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/FasterXML/stax2-api/issues"
        },
        {
          "type" : "vcs",
          "url" : "http://github.com/FasterXML/stax2-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1?type=jar"
    },
    {
      "publisher" : "Terracotta Inc., a wholly-owned subsidiary of Software AG USA, Inc.",
      "group" : "org.ehcache",
      "name" : "ehcache",
      "version" : "3.9.3",
      "description" : "End-user ehcache3 jar artifact",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e0ac3ca32b4256d7e7159f9796e8c769"
        },
        {
          "alg" : "SHA-1",
          "content" : "67a2758b89b942dfa622d764353fcf08fba2e7bb"
        },
        {
          "alg" : "SHA-256",
          "content" : "30f709462667c7f3c754c45be54034922523ea6cb9564be6ceaf73e9d959a634"
        },
        {
          "alg" : "SHA-512",
          "content" : "0d3e595482f20f36d4b6fea53c3cca743b279ddd45a080a51ddd958a11dbde18b51c5dc9453ec1246b37e44f4b068e03364bc5e3de89c48ca827fab63de6fa48"
        },
        {
          "alg" : "SHA-384",
          "content" : "c94b6fd79f5813fcb2c1941a64106ca0a8d95a897132bd076d3bba29949f45aeae090213f5471b9d352118d994c895e9"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.ehcache/ehcache@3.9.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://ehcache.org"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/ehcache/ehcache3/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/ehcache/ehcache3"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.ehcache/ehcache@3.9.3?type=jar"
    },
    {
      "publisher" : "QOS.ch",
      "group" : "org.slf4j",
      "name" : "slf4j-api",
      "version" : "1.7.36",
      "description" : "The slf4j API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "872da51f5de7f3923da4de871d57fd85"
        },
        {
          "alg" : "SHA-1",
          "content" : "6c62681a2f655b49963a5983b8b0950a6120ae14"
        },
        {
          "alg" : "SHA-256",
          "content" : "d3ef575e3e4979678dc01bf1dcce51021493b4d11fb7f1be8ad982877c16a1c0"
        },
        {
          "alg" : "SHA-512",
          "content" : "f9b033fc019a44f98b16048da7e2b59edd4a6a527ba60e358f65ab88e0afae03a9340f1b3e8a543d49fa542290f499c5594259affa1ff3e6e7bf3b428d4c610b"
        },
        {
          "alg" : "SHA-384",
          "content" : "2b14ad035877087157e379d3277dcdcd79e58d6bdb147c47d29e377d75ce53ad42cafbf22f5fb7827c7e946ff4876b9a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.slf4j.org"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/qos-ch/slf4j/slf4j-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.wss4j",
      "name" : "wss4j-ws-security-dom",
      "version" : "2.4.3",
      "description" : "Apache WSS4J parent pom",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "2a5a48691fe57e21ab2be1fe76545040"
        },
        {
          "alg" : "SHA-1",
          "content" : "9b6f4cba742acfbf02d9f8c2c190d261d1c8ff1d"
        },
        {
          "alg" : "SHA-256",
          "content" : "48a3b75f71cf06c37c960861fb94944c7d21ef295bdee5dd5e4b668a79c2819d"
        },
        {
          "alg" : "SHA-512",
          "content" : "30eeb576fc07821b0678b7084c6664c2e0f405f779cf45257b3e49b01a3f5eb97e43e6fd7797f8562346a49ced979e12215d6cbc6385c9404ef39e2516446b77"
        },
        {
          "alg" : "SHA-384",
          "content" : "b694f8b5b872260d8248abede928cb599e2ab52f4fe31a1ff414ca54937e43674fd23d4229462b3582975bf2209925da"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.wss4j/wss4j-ws-security-dom@2.4.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://ws.apache.org/wss4j/wss4j-ws-security-dom/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/WSS"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?dev@ws.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=ws-wss4j.git;a=summary/wss4j-parent/wss4j-ws-security-dom"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.wss4j/wss4j-ws-security-dom@2.4.3?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.wss4j",
      "name" : "wss4j-ws-security-common",
      "version" : "2.4.3",
      "description" : "Apache WSS4J parent pom",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "22143a6aaa5af2e49cbb6668f84929f5"
        },
        {
          "alg" : "SHA-1",
          "content" : "8911e3b2befce0eab9014c4ab8104e81ac5d4b01"
        },
        {
          "alg" : "SHA-256",
          "content" : "c28d3f467d8988cd4f2b928eac42d652c88dbd9915d82078f73ef880c5f29e5d"
        },
        {
          "alg" : "SHA-512",
          "content" : "9f4eca4daf215684af2818a9f5dc1cbaec7487a85fe2973c89a657610e739e426f7067ea6222ee45c6ffb14111fe522931a6bb83ec505d72ead896993f11f9f2"
        },
        {
          "alg" : "SHA-384",
          "content" : "5ade6d25e7b0497b9077cdc6f8c8d7264c7a70d429fd84562ef3f0920ce6f0a1856fdc1cc139db5b82570e206ac6b01d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.wss4j/wss4j-ws-security-common@2.4.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://ws.apache.org/wss4j/wss4j-ws-security-common/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/WSS"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?dev@ws.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=ws-wss4j.git;a=summary/wss4j-parent/wss4j-ws-security-common"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.wss4j/wss4j-ws-security-common@2.4.3?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.santuario",
      "name" : "xmlsec",
      "version" : "2.3.4",
      "description" : "Apache XML Security for Java supports XML-Signature Syntax and Processing, W3C Recommendation 12 February 2002, and XML Encryption Syntax and Processing, W3C Recommendation 10 December 2002. As of version 1.4, the library supports the standard Java API JSR-105: XML Digital Signature APIs.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "bad235ebfca40a0514fba17fd742df51"
        },
        {
          "alg" : "SHA-1",
          "content" : "7f2baecd896ae8e8b02b6090220537bd950eccbc"
        },
        {
          "alg" : "SHA-256",
          "content" : "5513e7417edc1eb7188adc4de0312e93156bd7ca6d6c1e6072d3e0006defff23"
        },
        {
          "alg" : "SHA-512",
          "content" : "a948e1988f5bbacf7df1734d4779e3dd6022ded212eda83c784b295371ad2b89b5e7e476cc1673e592abe7a3f0fc153255251467ae7b023ff98ac22f476b1e2e"
        },
        {
          "alg" : "SHA-384",
          "content" : "d2f2631261d48530edf19d9a04ecec293d15ffa75e56912e705ccf7b08ae63a560e5bc49a1b24ad912be920316e4e216"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.santuario/xmlsec@2.3.4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://santuario.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/SANTUARIO"
        },
        {
          "type" : "mailing-list",
          "url" : "http://news.gmane.org/gmane.text.xml.security.devel"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=santuario-xml-security-java.git;a=summary"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.santuario/xmlsec@2.3.4?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-codec",
      "name" : "commons-codec",
      "version" : "1.16.0",
      "description" : "The Apache Commons Codec package contains simple encoder and decoders for various formats such as Base64 and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a collection of phonetic encoding utilities.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6e26920fa7228891980890cce06b718c"
        },
        {
          "alg" : "SHA-1",
          "content" : "4e3eb3d79888d76b54e28b350915b5dc3919c9de"
        },
        {
          "alg" : "SHA-256",
          "content" : "56595fb20b0b85bc91d0d503dad50bb7f1b9afc0eed5dffa6cbb25929000484d"
        },
        {
          "alg" : "SHA-512",
          "content" : "eee671e66d808b56b81e15574675cf132d7628c010736d580915bbf8c04849f04df1d95ddeea13c4e119f8f0a564c7003beeb8ab437564e080ee27063c1e52b9"
        },
        {
          "alg" : "SHA-384",
          "content" : "65eb89c19815ea11585ff6c91e2ea4acd6a41ee35502891ba29fb5ec390d567190cf2f4120bfbf50ec470274df22a25f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-codec/commons-codec@1.16.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-codec/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-parent/actions"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CODEC"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/commons-codec"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-codec/commons-codec@1.16.0?type=jar"
    },
    {
      "publisher" : "Shibboleth Consortium",
      "group" : "org.opensaml",
      "name" : "opensaml-saml-impl",
      "version" : "3.4.6",
      "description" : "SAML Provider Implementations",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "16822d1228404b5fc14a607f94c04b69"
        },
        {
          "alg" : "SHA-1",
          "content" : "c51f094b49d8875a9d1e51aefc01331dff461729"
        },
        {
          "alg" : "SHA-256",
          "content" : "c9b818689fbcda211fcf4a4c970bfc143c5955645129df53b9bdca8f7f83c1b4"
        },
        {
          "alg" : "SHA-512",
          "content" : "75d45e4b39f8efb9db9329e27ecde27ce90de1545a64d053e3c64c6a81b5aa0e3ab962dd834bc312ee508e5e540830fdaea2e4f1be68d53acc7d44bbedf4dd1b"
        },
        {
          "alg" : "SHA-384",
          "content" : "ee422d744f0f0789d722c633271ba3fdf60cf903820d38832295f68619fcf4f8b0dec20c959e5603537ac4a25cc98deb"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.opensaml/opensaml-saml-impl@3.4.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://shibboleth.net/opensaml-saml-impl/"
        },
        {
          "type" : "distribution",
          "url" : "https://build.shibboleth.net/nexus/content/repositories/releases"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.shibboleth.net/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://marc.info/?l=shibboleth-announce"
        },
        {
          "type" : "vcs",
          "url" : "https://git.shibboleth.net/view/opensaml-saml-impl"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.opensaml/opensaml-saml-impl@3.4.6?type=jar"
    },
    {
      "publisher" : "Shibboleth Consortium",
      "group" : "org.opensaml",
      "name" : "opensaml-profile-api",
      "version" : "3.4.6",
      "description" : "Profile API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0cb5bed685408a677fff00c5cbcf4e8d"
        },
        {
          "alg" : "SHA-1",
          "content" : "cf3d855a2eb9a7c44b2d10919746bea5b4f0e6fe"
        },
        {
          "alg" : "SHA-256",
          "content" : "d4aa4269af0d25b7ed5740c46a9894123fc0501546891188678aa74df0f141ba"
        },
        {
          "alg" : "SHA-512",
          "content" : "eff813644bd82a9c0d75943c313106215d8d2a87c2504ba56d3217d231dd9f6439a7c5ef86c4475cf95bfdd0aab479dad3277556415e1ffe7c92e6b54a6aae18"
        },
        {
          "alg" : "SHA-384",
          "content" : "b2344e285a98b5b494d23a55d7ec1e6d9f5f1493b9becc3304fe251f9c2d78ab0d898cdb5b94780d3426e64aee4ff161"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.opensaml/opensaml-profile-api@3.4.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://shibboleth.net/opensaml-profile-api/"
        },
        {
          "type" : "distribution",
          "url" : "https://build.shibboleth.net/nexus/content/repositories/releases"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.shibboleth.net/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://marc.info/?l=shibboleth-announce"
        },
        {
          "type" : "vcs",
          "url" : "https://git.shibboleth.net/view/opensaml-profile-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.opensaml/opensaml-profile-api@3.4.6?type=jar"
    },
    {
      "publisher" : "Shibboleth Consortium",
      "group" : "org.opensaml",
      "name" : "opensaml-core",
      "version" : "3.4.6",
      "description" : "Core",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "078679e8cb6a0c3361eac985019e8e5b"
        },
        {
          "alg" : "SHA-1",
          "content" : "75b749a9ce605414d071ffabbf7e61cd11b9204d"
        },
        {
          "alg" : "SHA-256",
          "content" : "d9b867c9c2b6a44d75a95504a467d94b5183def09fa1f3f0f1a95a79621ec1e1"
        },
        {
          "alg" : "SHA-512",
          "content" : "d030c0d599a95d899750f91e276a3abd12fa33d162c46599bba79d33f3319e1d1a2226b1dba3357eb1721331ddce5efab96d918c285b54efcc02c27dc9cc9681"
        },
        {
          "alg" : "SHA-384",
          "content" : "28f4bbbaff064465545bde6d4feb9cbfca89fd75fce1f7294c0953ec2118251bf084c2099f89f6d023658fe475808ccf"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.opensaml/opensaml-core@3.4.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://shibboleth.net/opensaml-core/"
        },
        {
          "type" : "distribution",
          "url" : "https://build.shibboleth.net/nexus/content/repositories/releases"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.shibboleth.net/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://marc.info/?l=shibboleth-announce"
        },
        {
          "type" : "vcs",
          "url" : "https://git.shibboleth.net/view/opensaml-core"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.opensaml/opensaml-core@3.4.6?type=jar"
    },
    {
      "group" : "io.dropwizard.metrics",
      "name" : "metrics-core",
      "version" : "4.2.25",
      "description" : "Metrics is a Java library which gives you unparalleled insight into what your code does in production. Metrics provides a powerful toolkit of ways to measure the behavior of critical components in your production environment.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f9476a4f1a8287f7a4a2af759c33e44a"
        },
        {
          "alg" : "SHA-1",
          "content" : "76162cb1f7a6f902da4f80e5bcf472078e8cd7e1"
        },
        {
          "alg" : "SHA-256",
          "content" : "8bc7de609a2816b78a7a5009bddf11be560ba527d44db74a0a31a6f44fdb5b5f"
        },
        {
          "alg" : "SHA-512",
          "content" : "7373e8d22599d3cadff126308ac4279141fbcd04c27935b016b3bfb42caf5840db60fc05eba136dd1d19f72b5223ed30f0823e562b0267a3e2d8673a65ca3d9c"
        },
        {
          "alg" : "SHA-384",
          "content" : "b2ce6508895976d6f3a5846dbac246db0c1c6946dd4e7a17d3ebd55f6d094286f735f293997e6b140df8d6f629cabe47"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.dropwizard.metrics/metrics-core@4.2.25?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://metrics.dropwizard.io/metrics-core"
        },
        {
          "type" : "distribution",
          "url" : "https://s01.oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/dropwizard/metrics/issues/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/dropwizard/metrics/metrics-core/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.dropwizard.metrics/metrics-core@4.2.25?type=jar"
    },
    {
      "publisher" : "Shibboleth Consortium",
      "group" : "org.opensaml",
      "name" : "opensaml-saml-api",
      "version" : "3.4.6",
      "description" : "SAML Provider API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "d55c4ec6f542c201b6d5aad5c7115138"
        },
        {
          "alg" : "SHA-1",
          "content" : "571c2b041583625850afefdb3283fcf17940f9cd"
        },
        {
          "alg" : "SHA-256",
          "content" : "a48e58ca9a98753aaa3f58b47ac6f941892b8980ff52381491b244ce02093fce"
        },
        {
          "alg" : "SHA-512",
          "content" : "eb317580c9b42aa50ee4a68cce788cf277f5cc40c263ddca1037f88b83a019ac51ec84c2022f2d6ab1e41a41386880243adf89226ed454a108073524873d0d1c"
        },
        {
          "alg" : "SHA-384",
          "content" : "6e857e58b3cdcaa2bb589616711c2fa0b709235450ae4c1320b864a074179802712ceb73c268d11f903b3bb422a2d6b0"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.opensaml/opensaml-saml-api@3.4.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://shibboleth.net/opensaml-saml-api/"
        },
        {
          "type" : "distribution",
          "url" : "https://build.shibboleth.net/nexus/content/repositories/releases"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.shibboleth.net/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://marc.info/?l=shibboleth-announce"
        },
        {
          "type" : "vcs",
          "url" : "https://git.shibboleth.net/view/opensaml-saml-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.opensaml/opensaml-saml-api@3.4.6?type=jar"
    },
    {
      "publisher" : "Shibboleth Consortium",
      "group" : "org.opensaml",
      "name" : "opensaml-xmlsec-api",
      "version" : "3.4.6",
      "description" : "XML Security API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "83483c37e5b6cd7c234866d9b5e1ac47"
        },
        {
          "alg" : "SHA-1",
          "content" : "3f84e8ce2dc40c247247be036a3a5c6adfae4a70"
        },
        {
          "alg" : "SHA-256",
          "content" : "fb6234bab21f5582f021467a772bb9c4cfb32af8bc1900504811795992bb23fd"
        },
        {
          "alg" : "SHA-512",
          "content" : "941e83b78d38ff69343bc70ab8eee8393cd2a69a03a216ba85f067975fc9968ea876539800623cacec7dcb4736c5a33595c6953880ae1b023493e3d4f321c51c"
        },
        {
          "alg" : "SHA-384",
          "content" : "224c0cabad0442a7d891db138679fc551d660c2bf04ad61833becac3a6279a7ab3c9e07eca09379ae12b054dd8362412"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.opensaml/opensaml-xmlsec-api@3.4.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://shibboleth.net/opensaml-xmlsec-api/"
        },
        {
          "type" : "distribution",
          "url" : "https://build.shibboleth.net/nexus/content/repositories/releases"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.shibboleth.net/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://marc.info/?l=shibboleth-announce"
        },
        {
          "type" : "vcs",
          "url" : "https://git.shibboleth.net/view/opensaml-xmlsec-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.opensaml/opensaml-xmlsec-api@3.4.6?type=jar"
    },
    {
      "publisher" : "Shibboleth Consortium",
      "group" : "org.opensaml",
      "name" : "opensaml-soap-api",
      "version" : "3.4.6",
      "description" : "SOAP Provider API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "65e52ff6f3a55badf553ba021f08696f"
        },
        {
          "alg" : "SHA-1",
          "content" : "6e4dacb4caac0d5ed000719b3a772d384ceff916"
        },
        {
          "alg" : "SHA-256",
          "content" : "76cc47c3610e97df80921611aef80cbbc0f273dcd7323e6e08c70996d121254a"
        },
        {
          "alg" : "SHA-512",
          "content" : "ab644f8342c93d7e0e373c1fb8c493671dff379eebb152dab13835d566c551cd6dcbd5d9c60f9d190f065838491072bf8f455a8e134a4abb7a28225f5b0f5474"
        },
        {
          "alg" : "SHA-384",
          "content" : "4b46f64885fc099a5a7058d7f73382fe025bb7a9af8e933c8895cff4e7eb42c94b16a06b102ebe1cc264dc49941181f4"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.opensaml/opensaml-soap-api@3.4.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://shibboleth.net/opensaml-soap-api/"
        },
        {
          "type" : "distribution",
          "url" : "https://build.shibboleth.net/nexus/content/repositories/releases"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.shibboleth.net/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://marc.info/?l=shibboleth-announce"
        },
        {
          "type" : "vcs",
          "url" : "https://git.shibboleth.net/view/opensaml-soap-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.opensaml/opensaml-soap-api@3.4.6?type=jar"
    },
    {
      "publisher" : "Shibboleth Consortium",
      "group" : "org.opensaml",
      "name" : "opensaml-security-impl",
      "version" : "3.4.6",
      "description" : "Security Implementation",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f6059e2364579e717f39aaa65f3e395b"
        },
        {
          "alg" : "SHA-1",
          "content" : "0dd4e7128d4de8c304827ecc972ee57ae46230fa"
        },
        {
          "alg" : "SHA-256",
          "content" : "78fa84dc93d47756a37bf7a3e5f443630981607f29a0a97ce5e78e8c4272655a"
        },
        {
          "alg" : "SHA-512",
          "content" : "d2024ec50f96454e888a9f021295fc6991f7e80fed26a5f5309a7a0639ed8bceff456bfad67780015a65a37b632b73d32867b90e8effe76a12015c6c4ab5dab8"
        },
        {
          "alg" : "SHA-384",
          "content" : "3595f9433ca34cfa092f9100098714741bb2241d9938fff194a39d98e64b7d5515042a7ea3ffa31890181bcbb577d209"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.opensaml/opensaml-security-impl@3.4.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://shibboleth.net/opensaml-security-impl/"
        },
        {
          "type" : "distribution",
          "url" : "https://build.shibboleth.net/nexus/content/repositories/releases"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.shibboleth.net/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://marc.info/?l=shibboleth-announce"
        },
        {
          "type" : "vcs",
          "url" : "https://git.shibboleth.net/view/opensaml-security-impl"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.opensaml/opensaml-security-impl@3.4.6?type=jar"
    },
    {
      "publisher" : "Shibboleth Consortium",
      "group" : "org.opensaml",
      "name" : "opensaml-security-api",
      "version" : "3.4.6",
      "description" : "Security API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "5b128a68409ed07d1094b40281576c3b"
        },
        {
          "alg" : "SHA-1",
          "content" : "d5cfb49df6b78b0dea66015040fe9940ace2fe71"
        },
        {
          "alg" : "SHA-256",
          "content" : "a84c4e51d8a90c30e70cfa37da22e4d18e54af747e2771fc4e39c6d8c76ae41a"
        },
        {
          "alg" : "SHA-512",
          "content" : "a770f23c8a4f2e46bffd9ffd749790932239a63ba4a420c14e7bec93c6853c3b9708de31ab4e6728d7b3663295329a8422719e271b1f0883280f2f866c344766"
        },
        {
          "alg" : "SHA-384",
          "content" : "ac3bd4800ba02c52f34af4230b44bfedec44da104ff23a7ef083e2ea7cbaeed5e1b4fd3588c0374f434e3d8277a2c533"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.opensaml/opensaml-security-api@3.4.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://shibboleth.net/opensaml-security-api/"
        },
        {
          "type" : "distribution",
          "url" : "https://build.shibboleth.net/nexus/content/repositories/releases"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.shibboleth.net/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://marc.info/?l=shibboleth-announce"
        },
        {
          "type" : "vcs",
          "url" : "https://git.shibboleth.net/view/opensaml-security-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.opensaml/opensaml-security-api@3.4.6?type=jar"
    },
    {
      "publisher" : "Shibboleth Consortium",
      "group" : "org.opensaml",
      "name" : "opensaml-xmlsec-impl",
      "version" : "3.4.6",
      "description" : "XML Security Implementation",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "29d0993ae0e882f5ab843fdca178ad53"
        },
        {
          "alg" : "SHA-1",
          "content" : "f07084d063f046dc762b86f90ff1350c923aa6ac"
        },
        {
          "alg" : "SHA-256",
          "content" : "8151f782375205f6698941fba656dec077f35e4a05e8a3a94e31b84cc7c912a7"
        },
        {
          "alg" : "SHA-512",
          "content" : "0d6f487cec90ec931fcf015e42758d90acbc056dab20bccb889737325fc7443ee5ef3be51d028140ef424313562d37eed0abe795fafbbb5a16ae33e943f10496"
        },
        {
          "alg" : "SHA-384",
          "content" : "63e4ad907a85236121bd787d0c5a3c97e4afb383cc682a488aae52cbb045a9e11caa1a8a1400d29d080f37e4769f46b8"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.opensaml/opensaml-xmlsec-impl@3.4.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://shibboleth.net/opensaml-xmlsec-impl/"
        },
        {
          "type" : "distribution",
          "url" : "https://build.shibboleth.net/nexus/content/repositories/releases"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.shibboleth.net/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://marc.info/?l=shibboleth-announce"
        },
        {
          "type" : "vcs",
          "url" : "https://git.shibboleth.net/view/opensaml-xmlsec-impl"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.opensaml/opensaml-xmlsec-impl@3.4.6?type=jar"
    },
    {
      "publisher" : "Shibboleth Consortium",
      "group" : "net.shibboleth.utilities",
      "name" : "java-support",
      "version" : "7.5.2",
      "description" : "A POM containing properties, profiles, plugin configurations, etc. that are common across all Shibboleth V3 projects.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "8841e4abf4e88a32737d0f2870f2f4af"
        },
        {
          "alg" : "SHA-1",
          "content" : "1b0a80b8c0713e3d6233c643c7421ece305b544f"
        },
        {
          "alg" : "SHA-256",
          "content" : "bc6a861d2447d3a67c81fdf61f0595d38c94ebbe4364bec6d59cb1b87cb2e8b2"
        },
        {
          "alg" : "SHA-512",
          "content" : "e1abbadca603c6b203352c412d4ae45004f3f833e1b236664116122020466dcd868f6ab9653adbe1907947957ccd1edf686a95d2a617e9484faf5fa7a9ff644b"
        },
        {
          "alg" : "SHA-384",
          "content" : "4e1c9110e37fb0366090b53934d4f0e82ca7ff6bc3be4dc1d239f0e4f6a1d2a060ce55b3306c737a414256850ceebcbc"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/net.shibboleth.utilities/java-support@7.5.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://shibboleth.net/java-support/"
        },
        {
          "type" : "distribution",
          "url" : "https://build.shibboleth.net/nexus/content/repositories/releases"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.shibboleth.net/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://marc.info/?l=shibboleth-announce"
        },
        {
          "type" : "vcs",
          "url" : "https://git.shibboleth.net/view/?p=java-support.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/net.shibboleth.utilities/java-support@7.5.2?type=jar"
    },
    {
      "group" : "org.cryptacular",
      "name" : "cryptacular",
      "version" : "1.2.6",
      "description" : "The spectacular complement to the Bouncy Castle crypto API for Java.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b4cf54fbc0b44a3233b0daa8b4c0cb83"
        },
        {
          "alg" : "SHA-1",
          "content" : "c97954b8bc9fbf63393d6a3b9113a6ce70772b45"
        },
        {
          "alg" : "SHA-256",
          "content" : "7a901585834f4533f127c643660435aec9a969af720613dc9126e555be7b1a01"
        },
        {
          "alg" : "SHA-512",
          "content" : "f1537257428dcda2c02dcee022f44539210510c66f752964556da62f6bf0f8924c6f443dca418482cf4d9d66ccc840d883c162a24d1b6639628ffbdaf6820bec"
        },
        {
          "alg" : "SHA-384",
          "content" : "5cbe09098237398b55a517b4769146b5f3a893a062092e82e4aaea0630c940970e835aaffac8b6ea22f7d6cbeaaba191"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        },
        {
          "license" : {
            "name" : "GNU Lesser General Public License",
            "url" : "http://www.gnu.org/licenses/lgpl-3.0.txt"
          }
        }
      ],
      "purl" : "pkg:maven/org.cryptacular/cryptacular@1.2.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.cryptacular.org"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/vt-middleware/cryptacular/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "http://groups.google.com/group/cryptacular"
        },
        {
          "type" : "vcs",
          "url" : "scm:git:git@github.com:vt-middleware/cryptacular.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.cryptacular/cryptacular@1.2.6?type=jar"
    },
    {
      "publisher" : "Joda.org",
      "group" : "joda-time",
      "name" : "joda-time",
      "version" : "2.10.10",
      "description" : "Date and time library to replace JDK date handling",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "c2a46de8a73ec7b60011429561ae72e3"
        },
        {
          "alg" : "SHA-1",
          "content" : "29e8126e31f41e5c12b9fe3a7eb02e704c47d70b"
        },
        {
          "alg" : "SHA-256",
          "content" : "dd8e7c92185a678d1b7b933f31209b6203c8ffa91e9880475a1be0346b9617e3"
        },
        {
          "alg" : "SHA-512",
          "content" : "e6b873724800c0d8c4a3dabacd53c6b320e87fccd26109f22508ab17d95f21283cd705c68392c04ff76beab38593a02dff924aaee2c07ebb7af4ec6a5ddaa65f"
        },
        {
          "alg" : "SHA-384",
          "content" : "7782be142400320d1313254c68f45c5f3cd3d7e310a83dd7a2d15ae924fac714539e607bdafb16af4fd277d0abec3d87"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/joda-time/joda-time@2.10.10?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.joda.org/joda-time/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/content/repositories/joda-releases"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/JodaOrg/joda-time/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/JodaOrg/joda-time"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/joda-time/joda-time@2.10.10?type=jar"
    },
    {
      "group" : "com.google.guava",
      "name" : "guava",
      "version" : "30.1-jre",
      "description" : "Guava is a suite of core and expanded libraries that include utility classes, Google's collections, I/O classes, and much more.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "2f8966f27f06101a08083bfa9f9277e7"
        },
        {
          "alg" : "SHA-1",
          "content" : "00d0c3ce2311c9e36e73228da25a6e99b2ab826f"
        },
        {
          "alg" : "SHA-256",
          "content" : "e6dd072f9d3fe02a4600688380bd422bdac184caf6fe2418cfdd0934f09432aa"
        },
        {
          "alg" : "SHA-512",
          "content" : "e7a8098c0af7746c8a97a8cc8245166c14ee9213f67943d9d1962c94699f58d789c1e103de9cd407c4f20cd4be4e89814643560e5dae0b3f629312f2b1a2a8e2"
        },
        {
          "alg" : "SHA-384",
          "content" : "12f54fff188f49a7d7284836768f198a6b002a1773ab80311c69449cec0544744938b8818b70cd1811cad830efb6a76d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.guava/guava@30.1-jre?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/google/guava/guava"
        },
        {
          "type" : "build-system",
          "url" : "https://travis-ci.org/google/guava"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/google/guava/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/google/guava/guava"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.guava/guava@30.1-jre?type=jar"
    },
    {
      "group" : "com.google.guava",
      "name" : "failureaccess",
      "version" : "1.0.1",
      "description" : "Contains com.google.common.util.concurrent.internal.InternalFutureFailureAccess and InternalFutures. Most users will never need to use this artifact. Its classes is conceptually a part of Guava, but they're in this separate artifact so that Android libraries can use them without pulling in all of Guava (just as they can use ListenableFuture by depending on the listenablefuture artifact).",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "091883993ef5bfa91da01dcc8fc52236"
        },
        {
          "alg" : "SHA-1",
          "content" : "1dcf1de382a0bf95a3d8b0849546c88bac1292c9"
        },
        {
          "alg" : "SHA-256",
          "content" : "a171ee4c734dd2da837e4b16be9df4661afab72a41adaf31eb84dfdaf936ca26"
        },
        {
          "alg" : "SHA-512",
          "content" : "f8d59b808d6ba617252305b66d5590937da9b2b843d492d06b8d0b1b1f397e39f360d5817707797b979a5bf20bf21987b35333e7a15c44ed7401fea2d2119cae"
        },
        {
          "alg" : "SHA-384",
          "content" : "67659dbd9647ec303d7f15128dc9dba19b98fd8d74758ee3b602451e32c855e236ccaafe08edf4bbfa245f981268440f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/google/guava/failureaccess"
        },
        {
          "type" : "build-system",
          "url" : "https://travis-ci.org/google/guava"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/google/guava/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/google/guava/failureaccess"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar"
    },
    {
      "publisher" : "Shibboleth Consortium",
      "group" : "org.opensaml",
      "name" : "opensaml-xacml-impl",
      "version" : "3.4.6",
      "description" : "XACML Provider Implementations",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "9d8cb6a9cf8d68af9bc2bab3053d9a30"
        },
        {
          "alg" : "SHA-1",
          "content" : "542a94404fe6b51858cc291e18b1890772de555c"
        },
        {
          "alg" : "SHA-256",
          "content" : "2e0b08bd9aabb0f49ee4f98e6fe3d489db94281627f386c80ddc79b4fe903146"
        },
        {
          "alg" : "SHA-512",
          "content" : "29f93611a8476895087c2193b10239b4f0f17cda6125a9c26f91540924a56ab4351c1598c110772d59e5cfbec332db0f82f58dbc8d2981907206ecbefef94d4b"
        },
        {
          "alg" : "SHA-384",
          "content" : "b255ed8785ed879fa48ac4d2a6a0a44bdab45b5dc8a2da728227bbdfdc5afef7b868c8fda32dde218775f3acd1b7b55c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.opensaml/opensaml-xacml-impl@3.4.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://shibboleth.net/opensaml-xacml-impl/"
        },
        {
          "type" : "distribution",
          "url" : "https://build.shibboleth.net/nexus/content/repositories/releases"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.shibboleth.net/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://marc.info/?l=shibboleth-announce"
        },
        {
          "type" : "vcs",
          "url" : "https://git.shibboleth.net/view/opensaml-xacml-impl"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.opensaml/opensaml-xacml-impl@3.4.6?type=jar"
    },
    {
      "publisher" : "Shibboleth Consortium",
      "group" : "org.opensaml",
      "name" : "opensaml-xacml-api",
      "version" : "3.4.6",
      "description" : "XACML Provider API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "cfb758241b65c48297e510c5c1b129fa"
        },
        {
          "alg" : "SHA-1",
          "content" : "2fc136cf70605b6e490daf01a28161cb87b0ffc4"
        },
        {
          "alg" : "SHA-256",
          "content" : "9af782e9674b1e5b34f1c1406e919eea3d91aa09003465d43f6446db5f67e3e6"
        },
        {
          "alg" : "SHA-512",
          "content" : "7fb6ba8adda2aa3f07f913c224ddccb55cefcea390b0f7ac0de00f89f97a093bdb1b2cd88db2a84798c9fa8ee5fec45f8866edbf4b7a23a2857417f616293ae3"
        },
        {
          "alg" : "SHA-384",
          "content" : "43d608db3242c1ab195036fcf332785f2eb05388b012a8ee8523f66c716b68fd83a5b917606eab94782f944f0652a097"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.opensaml/opensaml-xacml-api@3.4.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://shibboleth.net/opensaml-xacml-api/"
        },
        {
          "type" : "distribution",
          "url" : "https://build.shibboleth.net/nexus/content/repositories/releases"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.shibboleth.net/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://marc.info/?l=shibboleth-announce"
        },
        {
          "type" : "vcs",
          "url" : "https://git.shibboleth.net/view/opensaml-xacml-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.opensaml/opensaml-xacml-api@3.4.6?type=jar"
    },
    {
      "publisher" : "Shibboleth Consortium",
      "group" : "org.opensaml",
      "name" : "opensaml-xacml-saml-impl",
      "version" : "3.4.6",
      "description" : "SAML XACML Profile Implementation",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0eaa70b47d18c2a7ae72ec0ce1e47038"
        },
        {
          "alg" : "SHA-1",
          "content" : "2a8dfe1251c1d3ef0c0f1b876b2a7dd7d3bf0cb8"
        },
        {
          "alg" : "SHA-256",
          "content" : "536349704d93a73bcd9475fee89606e6841f2d6f53c58a46fc0c2f659cdc8620"
        },
        {
          "alg" : "SHA-512",
          "content" : "bf93aa3c141e367596482fe9db85c3be2e3f815cd740bdcb4237933ceaee55928edefd717fa45e4c6ee988acdbf623abffd31b4e04fe03adf547abd3bda9fafb"
        },
        {
          "alg" : "SHA-384",
          "content" : "87ea576d71cdb29566d2311cdac48fe15140affb00c4c1121e61028dbe974e8c648a133bc672e81172634f1e7a11bde1"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.opensaml/opensaml-xacml-saml-impl@3.4.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://shibboleth.net/opensaml-xacml-saml-impl/"
        },
        {
          "type" : "distribution",
          "url" : "https://build.shibboleth.net/nexus/content/repositories/releases"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.shibboleth.net/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://marc.info/?l=shibboleth-announce"
        },
        {
          "type" : "vcs",
          "url" : "https://git.shibboleth.net/view/opensaml-xacml-saml-impl"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.opensaml/opensaml-xacml-saml-impl@3.4.6?type=jar"
    },
    {
      "publisher" : "Shibboleth Consortium",
      "group" : "org.opensaml",
      "name" : "opensaml-xacml-saml-api",
      "version" : "3.4.6",
      "description" : "SAML XACML Profile API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "75f667b52f160481e65e7c317ab1c20f"
        },
        {
          "alg" : "SHA-1",
          "content" : "d4d573d93257738309cd079a290a1da7ecdc762e"
        },
        {
          "alg" : "SHA-256",
          "content" : "c25795b730cf4892c3cfb01dd7ec3237dafdc952d78fb6abbabb81d678ae916b"
        },
        {
          "alg" : "SHA-512",
          "content" : "612b5f1d5aab055ca919a351bd69d65635e2e5781773797585e764fc036b8e838b436f13a4ba968d66077226c7005bf3fb063c64931c95f87edffe0d4e91092e"
        },
        {
          "alg" : "SHA-384",
          "content" : "ec510c0233233d2eae13c717e20f6e914bc05d30ae4c43e3b615ead8d1879c5d05e6744550c903da48d1077c398e7aa6"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.opensaml/opensaml-xacml-saml-api@3.4.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://shibboleth.net/opensaml-xacml-saml-api/"
        },
        {
          "type" : "distribution",
          "url" : "https://build.shibboleth.net/nexus/content/repositories/releases"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.shibboleth.net/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://marc.info/?l=shibboleth-announce"
        },
        {
          "type" : "vcs",
          "url" : "https://git.shibboleth.net/view/opensaml-xacml-saml-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.opensaml/opensaml-xacml-saml-api@3.4.6?type=jar"
    },
    {
      "publisher" : "The JASYPT team",
      "group" : "org.jasypt",
      "name" : "jasypt",
      "version" : "1.9.3",
      "description" : "Java library which enables encryption in java apps with minimum effort.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "39327c7e38782102ecdb3c9dc4e8dcd3"
        },
        {
          "alg" : "SHA-1",
          "content" : "0d99ef9540f51c617f2a293b460f025d2ee563dd"
        },
        {
          "alg" : "SHA-256",
          "content" : "f481fbb8dd8ce754bfde7552af4fcbe8c5e303d53663bb3d8ce9d4338e0e55aa"
        },
        {
          "alg" : "SHA-512",
          "content" : "99369da44e4c26f64e600f99b135eb05167ae1ebb5bb9f22233f14023f5416318bb4ca5893dbb0e7d444395ea6fa53713559a6990120b4fc962a1e9284ba5821"
        },
        {
          "alg" : "SHA-384",
          "content" : "12baa02ea8f8bdfdf04070d216dff4339b7b1c128f895007e900a18ee38a899e1a82fded92595a9a6f9127ae8c42877c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.jasypt/jasypt@1.9.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.jasypt.org"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "vcs",
          "url" : "scm:git:git@github.com:jasypt/jasypt.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.jasypt/jasypt@1.9.3?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.geronimo.javamail",
      "name" : "geronimo-javamail_1.4_mail",
      "version" : "1.8.4",
      "description" : "Geronimmo JavaMail Bundle.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f0f877ca397f77198f4c941bee52f0a4"
        },
        {
          "alg" : "SHA-1",
          "content" : "0c111549605e4fb904984e4f40299a3a653871ea"
        },
        {
          "alg" : "SHA-256",
          "content" : "e3e58acb4962ee0615cc398c8903e46cf866fb666a58b3bb80f8d59712c1e69a"
        },
        {
          "alg" : "SHA-512",
          "content" : "a53a0aed6922d6d1f37e78cbde16f2a98dbd43f7198293a960c761e2c6f0ac456770a9e21ca64dd460a6612d0bae9d34d90ef21a4a9ae8095ed4677a0b5209eb"
        },
        {
          "alg" : "SHA-384",
          "content" : "f2adafd0c3d2bb24490542b0394bae83014b1404b350799ef844f51331f8a71db1f3a8d5aebd462f9e24400502171f0e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.geronimo.javamail/geronimo-javamail_1.4_mail@1.8.4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://geronimo.apache.org/maven/javamail/geronimo-javamail_1.4_mail/1.8.4/geronimo-javamail_1.4_mail"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/GERONIMO"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/geronimo-user"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/geronimo/javamail/tags/geronimo-javamail_1.4-1.8.4/geronimo-javamail_1.4_mail"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.geronimo.javamail/geronimo-javamail_1.4_mail@1.8.4?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.wss4j",
      "name" : "wss4j-policy",
      "version" : "2.4.3",
      "description" : "Apache WSS4J parent pom",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "267dc758c1af2ed453b64b3739120f53"
        },
        {
          "alg" : "SHA-1",
          "content" : "da9d12731b1a92f82ee4557c4b7f1e27b2acdf5d"
        },
        {
          "alg" : "SHA-256",
          "content" : "881e08717fc3126c218071e43c6ba73f97c1f0a6594ec4a7994ceea57b20e9a0"
        },
        {
          "alg" : "SHA-512",
          "content" : "a3b7962b0f6d342863a6d6a8dc324b4699f7f466c6877b8ed5dfc71d64577e28589674bd3914a2e03f4ef0a8b8192111e19a7e08678aaec90276444b7d3cf08c"
        },
        {
          "alg" : "SHA-384",
          "content" : "9792fa52d80beee44fad625758962043442df0d4502e003d61c2c12c385ae7302221548d5351a66abcb217896c44d062"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.wss4j/wss4j-policy@2.4.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://ws.apache.org/wss4j/wss4j-policy/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/WSS"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?dev@ws.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=ws-wss4j.git;a=summary/wss4j-parent/wss4j-policy"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.wss4j/wss4j-policy@2.4.3?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.wss4j",
      "name" : "wss4j-ws-security-stax",
      "version" : "2.4.3",
      "description" : "Apache WSS4J parent pom",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "19906deacbe98b6b397ae1dedbfc4676"
        },
        {
          "alg" : "SHA-1",
          "content" : "6566d7fe40028f3fe9313cee01fb2bcf2dacc8dc"
        },
        {
          "alg" : "SHA-256",
          "content" : "ca865a6aa9ab9d7c258952d72204c9549d791018bd692c7f5cd578f75a3bd0f0"
        },
        {
          "alg" : "SHA-512",
          "content" : "973f0d762ceb0688dc297e0366aa9d63f964b27d82298dd95d5f698bdba9a02920ed5f8c5c174d13ec9c898a71fa868aca7d201523443d9de6f877b8a35ac5a2"
        },
        {
          "alg" : "SHA-384",
          "content" : "0b199ff8bfd395cfc880bdcd1228dbd4f606a41bbd6cccb299e927515ac3647f87e0c0dc86d7a6d9da0dad6d62e89376"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.wss4j/wss4j-ws-security-stax@2.4.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://ws.apache.org/wss4j/wss4j-ws-security-stax/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/WSS"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?dev@ws.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=ws-wss4j.git;a=summary/wss4j-parent/wss4j-ws-security-stax"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.wss4j/wss4j-ws-security-stax@2.4.3?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.wss4j",
      "name" : "wss4j-bindings",
      "version" : "2.4.3",
      "description" : "Apache WSS4J parent pom",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "425078dc9882b2d35d6df5e74cb9368e"
        },
        {
          "alg" : "SHA-1",
          "content" : "24bdfca05e2f2b617e86b422331914e0f780bd49"
        },
        {
          "alg" : "SHA-256",
          "content" : "7f4e934497f11938c62f5654000d5dde7d6a3ab62d77bbeaa698194e1d8beb3b"
        },
        {
          "alg" : "SHA-512",
          "content" : "caa5a43ce4b3c473da2202ee8c116a09089fa85f0739d25a882655e98b8aaac392eff4c3ecd70e128f3c2e07f9f2718e8ebf877c0a74469840d5911f1766c3a7"
        },
        {
          "alg" : "SHA-384",
          "content" : "5a9b06de616f0c67a149e9fa0be8186c6f9c3d9f26c35cac02f303cb3cb1611f1547b6dc74c948f677d3145e3f5f9e28"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.wss4j/wss4j-bindings@2.4.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://ws.apache.org/wss4j/wss4j-bindings/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/WSS"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?dev@ws.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=ws-wss4j.git;a=summary/wss4j-parent/wss4j-bindings"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.wss4j/wss4j-bindings@2.4.3?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.wss4j",
      "name" : "wss4j-ws-security-policy-stax",
      "version" : "2.4.3",
      "description" : "Apache WSS4J parent pom",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e7f1c2c0ed770eed1fafbcee7c92abaf"
        },
        {
          "alg" : "SHA-1",
          "content" : "f85b2e0719c1fba921299c43ba1406375eaf517b"
        },
        {
          "alg" : "SHA-256",
          "content" : "61b5aee22a0a6d11538de698a14f605f25a0a134d731564d3b1b51ff28de29c0"
        },
        {
          "alg" : "SHA-512",
          "content" : "ff866e76cee8f741f57d54cd23888d237d202ad5611ab99e50ae3cce84e2b20ca7984214a3694bed60ea8cd479258a94b46b10fc58926d5a7be0c247b72c3cfc"
        },
        {
          "alg" : "SHA-384",
          "content" : "888e100bf069efe000cae9b40214a64c33f99b99c42de0874895756bd718c824e0f11139611cb3ffd886aee8add560e3"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.wss4j/wss4j-ws-security-policy-stax@2.4.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://ws.apache.org/wss4j/wss4j-ws-security-policy-stax/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/WSS"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?dev@ws.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=ws-wss4j.git;a=summary/wss4j-parent/wss4j-ws-security-policy-stax"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.wss4j/wss4j-ws-security-policy-stax@2.4.3?type=jar"
    },
    {
      "group" : "org.bouncycastle",
      "name" : "bcprov-jdk18on",
      "version" : "1.77",
      "description" : "The Bouncy Castle Crypto package is a Java implementation of cryptographic algorithms. This jar contains JCE provider and lightweight API for the Bouncy Castle Cryptography APIs for JDK 1.8 and up.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "ca01387064e08db12e1345b474521ff1"
        },
        {
          "alg" : "SHA-1",
          "content" : "2cc971b6c20949c1ff98d1a4bc741ee848a09523"
        },
        {
          "alg" : "SHA-256",
          "content" : "dabb98c24d72c9b9f585633d1df9c5cd58d9ad373d0cd681367e6a603a495d58"
        },
        {
          "alg" : "SHA-512",
          "content" : "56c359f1370131f91eaeae3ec1d44884358f4296defd8d7516c7b81b9b66158454a667eb1c859d8ad919faee074ae3ecb4ceba2a39a3dd799bef9ada2d8c3da3"
        },
        {
          "alg" : "SHA-384",
          "content" : "2951d9bb941e960287cc4a8947a0239ccfb9bd5058002bd5b9fe045b0bb22e4b23f31357f65211c191384cedf3ef3555"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "Bouncy Castle Licence",
            "url" : "https://www.bouncycastle.org/licence.html"
          }
        }
      ],
      "purl" : "pkg:maven/org.bouncycastle/bcprov-jdk18on@1.77?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.bouncycastle.org/java.html"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/bcgit/bc-java/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/bcgit/bc-java"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.bouncycastle/bcprov-jdk18on@1.77?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.cxf",
      "name" : "cxf-rt-frontend-jaxws",
      "version" : "3.5.8",
      "description" : "Apache CXF Runtime JAX-WS Frontend",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "2247ef84ed5daa72041cc27cdb3bedd6"
        },
        {
          "alg" : "SHA-1",
          "content" : "b35681936a1a5e625e5d486262c158d0143c1de1"
        },
        {
          "alg" : "SHA-256",
          "content" : "71a5d177f02c30160436839ee2f32b1e40ea572fbd6cd1b8fb445f7fec4a8cf2"
        },
        {
          "alg" : "SHA-512",
          "content" : "9a0bcad9b59fffce1ba0955974336e312790972ac6fbdecfa489443200ac72439a07d85069486705d5d1e77bd7e0614a15d6cbb665bfbced0ed3c8e6d7d9e911"
        },
        {
          "alg" : "SHA-384",
          "content" : "a01a24373434ee8bbdbcdbd2de990b091dbdfe080ed2475179f93a3a796b21269059775929c3b9ab378a3e799f9cbbd3"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.cxf/cxf-rt-frontend-jaxws@3.5.8?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://cxf.apache.org"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/view/A-D/view/CXF/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CXF"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/cxf-users"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-frontend-jaxws"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.cxf/cxf-rt-frontend-jaxws@3.5.8?type=jar"
    },
    {
      "publisher" : "Apache Software Foundation",
      "group" : "xml-resolver",
      "name" : "xml-resolver",
      "version" : "1.2",
      "description" : "xml-commons provides an Apache-hosted set of DOM, SAX, and JAXP interfaces for use in other xml-based projects. Our hope is that we can standardize on both a common version and packaging scheme for these critical XML standards interfaces to make the lives of both our developers and users easier.",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "706c533146c1f4ee46b66659ea14583a"
        },
        {
          "alg" : "SHA-1",
          "content" : "3d0f97750b3a03e0971831566067754ba4bfd68c"
        },
        {
          "alg" : "SHA-256",
          "content" : "47dcde8986019314ef78ae7280a94973a21d2ed95075a40a000b42da956429e1"
        },
        {
          "alg" : "SHA-512",
          "content" : "eca19b8a6b04c279b7982b16f1763ca1d49b0081a8d4ca2b7419f057d22a0ec60795eb4d901c5eb25dd4a733248876aa2f522c17a6144a26c8ede9fb2f84531a"
        },
        {
          "alg" : "SHA-384",
          "content" : "3eceda91a1ce0a35c490eb4c0bd94b552f96b8e5064b257435d89d65fcc2b04c706d996415efe3cf8a7413db479c3710"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/xml-resolver/xml-resolver@1.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://xml.apache.org/commons/components/resolver/"
        },
        {
          "type" : "distribution",
          "url" : "scp://people.apache.org/www/people.apache.org/repo/m2-ibiblio-rsync-repository"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/bugzilla/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/xml-commons-dev/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/xml/commons/tags/xml-commons-resolver-1_2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/xml-resolver/xml-resolver@1.2?type=jar"
    },
    {
      "publisher" : "OW2",
      "group" : "org.ow2.asm",
      "name" : "asm",
      "version" : "9.6",
      "description" : "ASM, a very small and fast Java bytecode manipulation framework",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6f8bccf756f170d4185bb24c8c2d2020"
        },
        {
          "alg" : "SHA-1",
          "content" : "aa205cf0a06dbd8e04ece91c0b37c3f5d567546a"
        },
        {
          "alg" : "SHA-256",
          "content" : "3c6fac2424db3d4a853b669f4e3d1d9c3c552235e19a319673f887083c2303a1"
        },
        {
          "alg" : "SHA-512",
          "content" : "01a5ea6f5b43bf094c52a50e18325a60af7bb02e74d24f9bc2c727d43e514578fd968b30ff22f9d2720caec071458f9ff82d11a21fbb1ebc42d8203e737c4b52"
        },
        {
          "alg" : "SHA-384",
          "content" : "80e0a92442db343baea7bab9bb1d0b7037c98d6aa54172820b21ea45e51dfea42b7670aa39e938d0f88ad4466004a19a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause",
            "url" : "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.ow2.asm/asm@9.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://asm.ow2.io/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.ow2.org/nexus/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://gitlab.ow2.org/asm/asm/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail.ow2.org/wws/arc/asm/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitlab.ow2.org/asm/asm/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.ow2.asm/asm@9.6?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.cxf",
      "name" : "cxf-rt-bindings-xml",
      "version" : "3.5.8",
      "description" : "Apache CXF Runtime XML Binding",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "56b15a3805ba7ded731af086d3059600"
        },
        {
          "alg" : "SHA-1",
          "content" : "ed41e18670dafaf7b3e0bc875b65dc807aa3a635"
        },
        {
          "alg" : "SHA-256",
          "content" : "5c1dbe0e8fbb65597e22603e970348dc54f9b3c37e1c676cf1e7d9c44c91e8f8"
        },
        {
          "alg" : "SHA-512",
          "content" : "8c0ee1cba80b4a5c5f9c8987013b080e70dded9f6162e1f2b65bb3e4abc2666d7ef44113c04ccba075c26b198a5df12f14c868f9e2e6a46497bc7539b4905098"
        },
        {
          "alg" : "SHA-384",
          "content" : "e362731e45e56f018dc7de2003c53ad373d745a2c73be5d7848fee0971248d2e6da9870bee37da22e3826a0866d606d8"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.cxf/cxf-rt-bindings-xml@3.5.8?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://cxf.apache.org"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/view/A-D/view/CXF/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CXF"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/cxf-users"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-bindings-xml"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.cxf/cxf-rt-bindings-xml@3.5.8?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.cxf",
      "name" : "cxf-rt-frontend-simple",
      "version" : "3.5.8",
      "description" : "Apache CXF Runtime Simple Frontend",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "53eb7b2d7bd71f98ee35f7477fdb5878"
        },
        {
          "alg" : "SHA-1",
          "content" : "118fe9be0d5562999f995f1e9fa526ac6e7fbaea"
        },
        {
          "alg" : "SHA-256",
          "content" : "046e5375e3739425eff086334112ec45bde40e940adf361d178ae850313a0da7"
        },
        {
          "alg" : "SHA-512",
          "content" : "2d72a8680c6f6ecd7df322cd7f6f5fe35fa49f999b687f7ca141e1a9e38429a09ec597f817e025b9f13cdef3d2556285a9e1141a60d9cff00f41924e0d8fe596"
        },
        {
          "alg" : "SHA-384",
          "content" : "7bb346903727a1ba0804f02a0e6b4cf33efd80d4f4c2dcf3a34759bae2cbae42867efe62b6f7b1cbcdb602069c334a5f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.cxf/cxf-rt-frontend-simple@3.5.8?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://cxf.apache.org"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/view/A-D/view/CXF/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CXF"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/cxf-users"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-frontend-simple"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.cxf/cxf-rt-frontend-simple@3.5.8?type=jar"
    }
  ],
  "dependencies" : [
    {
      "ref" : "pkg:maven/org.apache.cxf/cxf-rt-ws-security@3.5.8?type=bundle",
      "dependsOn" : [
        "pkg:maven/org.apache.cxf/cxf-core@3.5.8?type=jar",
        "pkg:maven/org.apache.cxf/cxf-rt-bindings-soap@3.5.8?type=jar",
        "pkg:maven/org.apache.cxf/cxf-rt-security-saml@3.5.8?type=jar",
        "pkg:maven/org.apache.cxf/cxf-rt-ws-addr@3.5.8?type=jar",
        "pkg:maven/org.apache.cxf/cxf-rt-ws-policy@3.5.8?type=jar",
        "pkg:maven/org.apache.cxf/cxf-rt-ws-mex@3.5.8?type=jar",
        "pkg:maven/org.apache.cxf/cxf-rt-transports-http@3.5.8?type=jar",
        "pkg:maven/com.fasterxml.woodstox/woodstox-core@6.4.0?type=jar",
        "pkg:maven/org.ehcache/ehcache@3.9.3?type=jar",
        "pkg:maven/org.apache.wss4j/wss4j-ws-security-dom@2.4.3?type=jar",
        "pkg:maven/org.apache.wss4j/wss4j-policy@2.4.3?type=jar",
        "pkg:maven/org.apache.wss4j/wss4j-ws-security-stax@2.4.3?type=jar",
        "pkg:maven/org.apache.wss4j/wss4j-ws-security-policy-stax@2.4.3?type=jar",
        "pkg:maven/org.bouncycastle/bcprov-jdk18on@1.77?type=jar",
        "pkg:maven/org.apache.cxf/cxf-rt-frontend-jaxws@3.5.8?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.cxf/cxf-core@3.5.8?type=jar",
      "dependsOn" : [
        "pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.5?type=jar",
        "pkg:maven/com.fasterxml.woodstox/woodstox-core@6.4.0?type=jar",
        "pkg:maven/org.apache.ws.xmlschema/xmlschema-core@2.3.1?type=jar",
        "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@2.3.3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.5?type=jar",
      "dependsOn" : [
        "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@2.3.3?type=jar",
        "pkg:maven/org.glassfish.jaxb/txw2@2.3.5?type=jar",
        "pkg:maven/com.sun.istack/istack-commons-runtime@3.0.12?type=jar",
        "pkg:maven/com.sun.activation/jakarta.activation@1.2.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@2.3.3?type=jar",
      "dependsOn" : [
        "pkg:maven/jakarta.activation/jakarta.activation-api@1.2.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/jakarta.activation/jakarta.activation-api@1.2.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.glassfish.jaxb/txw2@2.3.5?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.sun.istack/istack-commons-runtime@3.0.12?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.sun.activation/jakarta.activation@1.2.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.woodstox/woodstox-core@6.4.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.ws.xmlschema/xmlschema-core@2.3.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.cxf/cxf-rt-bindings-soap@3.5.8?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.cxf/cxf-core@3.5.8?type=jar",
        "pkg:maven/org.apache.cxf/cxf-rt-wsdl@3.5.8?type=jar",
        "pkg:maven/org.apache.cxf/cxf-rt-databinding-jaxb@3.5.8?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.cxf/cxf-rt-wsdl@3.5.8?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.cxf/cxf-core@3.5.8?type=jar",
        "pkg:maven/wsdl4j/wsdl4j@1.6.3?type=jar",
        "pkg:maven/org.ow2.asm/asm@9.6?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/wsdl4j/wsdl4j@1.6.3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.ow2.asm/asm@9.6?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.cxf/cxf-rt-databinding-jaxb@3.5.8?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.cxf/cxf-core@3.5.8?type=jar",
        "pkg:maven/org.apache.cxf/cxf-rt-wsdl@3.5.8?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.cxf/cxf-rt-security-saml@3.5.8?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.cxf/cxf-rt-security@3.5.8?type=jar",
        "pkg:maven/org.apache.wss4j/wss4j-ws-security-dom@2.4.3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.cxf/cxf-rt-security@3.5.8?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.cxf/cxf-core@3.5.8?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.wss4j/wss4j-ws-security-dom@2.4.3?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.wss4j/wss4j-ws-security-common@2.4.3?type=jar",
        "pkg:maven/org.ehcache/ehcache@3.9.3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.wss4j/wss4j-ws-security-common@2.4.3?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/org.apache.santuario/xmlsec@2.3.4?type=jar",
        "pkg:maven/org.opensaml/opensaml-saml-impl@3.4.6?type=jar",
        "pkg:maven/org.cryptacular/cryptacular@1.2.6?type=jar",
        "pkg:maven/joda-time/joda-time@2.10.10?type=jar",
        "pkg:maven/com.google.guava/guava@30.1-jre?type=jar",
        "pkg:maven/org.opensaml/opensaml-xacml-impl@3.4.6?type=jar",
        "pkg:maven/org.opensaml/opensaml-xacml-saml-impl@3.4.6?type=jar",
        "pkg:maven/org.jasypt/jasypt@1.9.3?type=jar",
        "pkg:maven/org.apache.geronimo.javamail/geronimo-javamail_1.4_mail@1.8.4?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.santuario/xmlsec@2.3.4?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.16.0?type=jar",
        "pkg:maven/com.fasterxml.woodstox/woodstox-core@6.4.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/commons-codec/commons-codec@1.16.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.opensaml/opensaml-saml-impl@3.4.6?type=jar",
      "dependsOn" : [
        "pkg:maven/org.opensaml/opensaml-profile-api@3.4.6?type=jar",
        "pkg:maven/org.opensaml/opensaml-saml-api@3.4.6?type=jar",
        "pkg:maven/org.opensaml/opensaml-security-impl@3.4.6?type=jar",
        "pkg:maven/org.opensaml/opensaml-xmlsec-impl@3.4.6?type=jar",
        "pkg:maven/net.shibboleth.utilities/java-support@7.5.2?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.16.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.opensaml/opensaml-profile-api@3.4.6?type=jar",
      "dependsOn" : [
        "pkg:maven/org.opensaml/opensaml-core@3.4.6?type=jar",
        "pkg:maven/net.shibboleth.utilities/java-support@7.5.2?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.16.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.opensaml/opensaml-core@3.4.6?type=jar",
      "dependsOn" : [
        "pkg:maven/io.dropwizard.metrics/metrics-core@4.2.25?type=jar",
        "pkg:maven/net.shibboleth.utilities/java-support@7.5.2?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.16.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.dropwizard.metrics/metrics-core@4.2.25?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/net.shibboleth.utilities/java-support@7.5.2?type=jar",
      "dependsOn" : [
        "pkg:maven/commons-codec/commons-codec@1.16.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.opensaml/opensaml-saml-api@3.4.6?type=jar",
      "dependsOn" : [
        "pkg:maven/org.opensaml/opensaml-xmlsec-api@3.4.6?type=jar",
        "pkg:maven/org.opensaml/opensaml-soap-api@3.4.6?type=jar",
        "pkg:maven/org.opensaml/opensaml-profile-api@3.4.6?type=jar",
        "pkg:maven/net.shibboleth.utilities/java-support@7.5.2?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.16.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.opensaml/opensaml-xmlsec-api@3.4.6?type=jar",
      "dependsOn" : [
        "pkg:maven/org.opensaml/opensaml-security-api@3.4.6?type=jar",
        "pkg:maven/net.shibboleth.utilities/java-support@7.5.2?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.16.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.opensaml/opensaml-security-api@3.4.6?type=jar",
      "dependsOn" : [
        "pkg:maven/org.opensaml/opensaml-core@3.4.6?type=jar",
        "pkg:maven/org.apache.santuario/xmlsec@2.3.4?type=jar",
        "pkg:maven/net.shibboleth.utilities/java-support@7.5.2?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.16.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.opensaml/opensaml-soap-api@3.4.6?type=jar",
      "dependsOn" : [
        "pkg:maven/org.opensaml/opensaml-xmlsec-api@3.4.6?type=jar",
        "pkg:maven/net.shibboleth.utilities/java-support@7.5.2?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.16.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.opensaml/opensaml-security-impl@3.4.6?type=jar",
      "dependsOn" : [
        "pkg:maven/org.opensaml/opensaml-security-api@3.4.6?type=jar",
        "pkg:maven/net.shibboleth.utilities/java-support@7.5.2?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.16.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.opensaml/opensaml-xmlsec-impl@3.4.6?type=jar",
      "dependsOn" : [
        "pkg:maven/org.opensaml/opensaml-core@3.4.6?type=jar",
        "pkg:maven/org.opensaml/opensaml-security-api@3.4.6?type=jar",
        "pkg:maven/org.opensaml/opensaml-xmlsec-api@3.4.6?type=jar",
        "pkg:maven/org.apache.santuario/xmlsec@2.3.4?type=jar",
        "pkg:maven/org.opensaml/opensaml-security-impl@3.4.6?type=jar",
        "pkg:maven/net.shibboleth.utilities/java-support@7.5.2?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.16.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.cryptacular/cryptacular@1.2.6?type=jar",
      "dependsOn" : [
        "pkg:maven/org.bouncycastle/bcprov-jdk18on@1.77?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.bouncycastle/bcprov-jdk18on@1.77?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/joda-time/joda-time@2.10.10?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.guava/guava@30.1-jre?type=jar",
      "dependsOn" : [
        "pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.opensaml/opensaml-xacml-impl@3.4.6?type=jar",
      "dependsOn" : [
        "pkg:maven/org.opensaml/opensaml-xacml-api@3.4.6?type=jar",
        "pkg:maven/net.shibboleth.utilities/java-support@7.5.2?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.16.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.opensaml/opensaml-xacml-api@3.4.6?type=jar",
      "dependsOn" : [
        "pkg:maven/org.opensaml/opensaml-core@3.4.6?type=jar",
        "pkg:maven/net.shibboleth.utilities/java-support@7.5.2?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.16.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.opensaml/opensaml-xacml-saml-impl@3.4.6?type=jar",
      "dependsOn" : [
        "pkg:maven/org.opensaml/opensaml-xacml-saml-api@3.4.6?type=jar",
        "pkg:maven/org.opensaml/opensaml-saml-impl@3.4.6?type=jar",
        "pkg:maven/net.shibboleth.utilities/java-support@7.5.2?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.16.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.opensaml/opensaml-xacml-saml-api@3.4.6?type=jar",
      "dependsOn" : [
        "pkg:maven/org.opensaml/opensaml-xacml-api@3.4.6?type=jar",
        "pkg:maven/org.opensaml/opensaml-saml-api@3.4.6?type=jar",
        "pkg:maven/net.shibboleth.utilities/java-support@7.5.2?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.16.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.jasypt/jasypt@1.9.3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.geronimo.javamail/geronimo-javamail_1.4_mail@1.8.4?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.ehcache/ehcache@3.9.3?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.cxf/cxf-rt-ws-addr@3.5.8?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.cxf/cxf-core@3.5.8?type=jar",
        "pkg:maven/org.apache.cxf/cxf-rt-bindings-soap@3.5.8?type=jar",
        "pkg:maven/org.apache.cxf/cxf-rt-ws-policy@3.5.8?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.cxf/cxf-rt-ws-policy@3.5.8?type=jar",
      "dependsOn" : [
        "pkg:maven/wsdl4j/wsdl4j@1.6.3?type=jar",
        "pkg:maven/org.apache.cxf/cxf-core@3.5.8?type=jar",
        "pkg:maven/org.apache.neethi/neethi@3.2.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.neethi/neethi@3.2.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.cxf/cxf-rt-ws-mex@3.5.8?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.cxf/cxf-core@3.5.8?type=jar",
        "pkg:maven/org.apache.cxf/cxf-rt-bindings-soap@3.5.8?type=jar",
        "pkg:maven/org.apache.cxf/cxf-rt-ws-addr@3.5.8?type=jar",
        "pkg:maven/org.apache.cxf/cxf-rt-ws-policy@3.5.8?type=jar",
        "pkg:maven/org.apache.cxf/cxf-rt-frontend-jaxws@3.5.8?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.cxf/cxf-rt-frontend-jaxws@3.5.8?type=jar",
      "dependsOn" : [
        "pkg:maven/xml-resolver/xml-resolver@1.2?type=jar",
        "pkg:maven/org.ow2.asm/asm@9.6?type=jar",
        "pkg:maven/org.apache.cxf/cxf-core@3.5.8?type=jar",
        "pkg:maven/org.apache.cxf/cxf-rt-bindings-soap@3.5.8?type=jar",
        "pkg:maven/org.apache.cxf/cxf-rt-bindings-xml@3.5.8?type=jar",
        "pkg:maven/org.apache.cxf/cxf-rt-frontend-simple@3.5.8?type=jar",
        "pkg:maven/org.apache.cxf/cxf-rt-ws-addr@3.5.8?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/xml-resolver/xml-resolver@1.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.cxf/cxf-rt-bindings-xml@3.5.8?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.cxf/cxf-core@3.5.8?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.cxf/cxf-rt-frontend-simple@3.5.8?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.cxf/cxf-core@3.5.8?type=jar",
        "pkg:maven/org.apache.cxf/cxf-rt-bindings-soap@3.5.8?type=jar",
        "pkg:maven/org.apache.cxf/cxf-rt-wsdl@3.5.8?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.cxf/cxf-rt-transports-http@3.5.8?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.cxf/cxf-core@3.5.8?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.wss4j/wss4j-policy@2.4.3?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.neethi/neethi@3.2.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.wss4j/wss4j-ws-security-stax@2.4.3?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.wss4j/wss4j-bindings@2.4.3?type=jar",
        "pkg:maven/org.apache.wss4j/wss4j-ws-security-common@2.4.3?type=jar",
        "pkg:maven/org.ehcache/ehcache@3.9.3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.wss4j/wss4j-bindings@2.4.3?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.santuario/xmlsec@2.3.4?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.wss4j/wss4j-ws-security-policy-stax@2.4.3?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.wss4j/wss4j-ws-security-stax@2.4.3?type=jar",
        "pkg:maven/org.apache.wss4j/wss4j-policy@2.4.3?type=jar"
      ]
    }
  ]
}