<?xml version="1.0" encoding="UTF-8"?>
<bom serialNumber="urn:uuid:72b9f9db-5745-3398-9787-0ad97136e8c8" version="1" xmlns="http://cyclonedx.org/schema/bom/1.5">
  <metadata>
    <lifecycles>
      <lifecycle>
        <phase>build</phase>
      </lifecycle>
    </lifecycles>
    <tools>
      <tool>
        <vendor>OWASP Foundation</vendor>
        <name>CycloneDX Maven plugin</name>
        <version>2.8.0</version>
        <hashes>
          <hash alg="MD5">76ffec6a7ddd46b2b24517411874eb99</hash>
          <hash alg="SHA-1">5b0d5b41975b53be4799b9621b4af0cfc41d44b6</hash>
          <hash alg="SHA-256">6852aa0f4e42a2db745bab80e384951a6a65b9215d041081d675780999027e81</hash>
          <hash alg="SHA-512">417de20fcdcb11c9713bacbd57290d8e68037fdb4553fd31b8cb08bd760ad52dc65ea88ad4be15844ad3fd5a4d3e440d2f70326f2fe1e63ec78e059c9a883f8d</hash>
          <hash alg="SHA-384">5eb755c6492e7a7385fa9a1e1f4517875bcb834b2df437808a37a2d6f5285df428741762305980315a63fcef1406597d</hash>
          <hash alg="SHA3-384">0fe16a47cf7aab0b22251dafcc39939b68e8f1778093309d8d2060b51a08df445a8b8ed5a9561669faf2e55f907c76d8</hash>
          <hash alg="SHA3-256">3e5a1eb5ab7d0797498862794709ff8eaaa071fe4cc9ec77f52db7e2f97ef487</hash>
          <hash alg="SHA3-512">59281a3e29e76270d7f44b40b5b9f05e55f1ae3ec716d80add806f360940809e3813998ac7c5758043b8e248aed73b86e37dc506cdb4cde03c16bb617d8e5a3a</hash>
        </hashes>
      </tool>
    </tools>
    <component type="library" bom-ref="pkg:maven/org.apache.maven.plugins/maven-source-plugin@4.0.0-beta-1?type=maven-plugin">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven.plugins</group>
      <name>maven-source-plugin</name>
      <version>4.0.0-beta-1</version>
      <description>The Maven Source Plugin creates a JAR archive of the source files of the current project.</description>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven.plugins/maven-source-plugin@4.0.0-beta-1?type=maven-plugin</purl>
      <externalReferences><reference type="website"><url>https://maven.apache.org/plugins/maven-source-plugin/</url></reference><reference type="build-system"><url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-source-plugin/</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/MSOURCES</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?users@maven.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/maven-source-plugin/tree/maven-source-plugin-4.0.0-beta-1</url></reference></externalReferences>
    </component>
    <properties>
      <property name="maven.goal">makeAggregateBom</property>
      <property name="maven.scopes">compile,provided,runtime,system</property>
      <property name="cdx:reproducible">enabled</property>
    </properties>
  </metadata>
  <components>
    <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-api-core@4.0.0-beta-3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven</group>
      <name>maven-api-core</name>
      <version>4.0.0-beta-3</version>
      <description>Maven 4 API - Maven Core API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">6ddce38ffe3e954dfe08980a05a6a324</hash>
        <hash alg="SHA-1">a45ee63cf04f2eb3eeb5b2fdd40ecef842a018f9</hash>
        <hash alg="SHA-256">f24666b3c6eae7e5944fc0832a1406e9489a5badaa24939977651d437bc28515</hash>
        <hash alg="SHA-512">38f8e1394d70a9f3c93d85971641f78013d9a39f6f377da4038d249165d605d351183d20d73995f113acd216dce2a65b9dea96e1e6077102859fcdc520b74963</hash>
        <hash alg="SHA-384">d6c635d296c48c5def2dba5ec45421de79b57305f17ef577fe8357ecf608d9a2564abe1f177bfd189c5a9c91730ef25d</hash>
        <hash alg="SHA3-384">6e86f6a22c90f78fc00eca62c333f5d0c9f9df2c83f8a98bee57ae661ec7cab181ce40263b65b822e645d90e32aa3736</hash>
        <hash alg="SHA3-256">c835713aa0900156e3fd666dea7a3f9d907fd9a7e88319107b6c54aeddce9a2d</hash>
        <hash alg="SHA3-512">dfd34e9f7dc7eab57cb196ed578de88750be6cfc08ef15472d84e8a6ac842770ac538b070168362b1681c63ec652f0d2246d69ec9a95b50ffe4593e7ec2798ea</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven/maven-api-core@4.0.0-beta-3?type=jar</purl>
      <externalReferences><reference type="website"><url>https://maven.apache.org/ref/4.0.0-beta-3/api/maven-api-core/</url></reference><reference type="build-system"><url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/</url></reference><reference type="distribution"><url>https://maven.apache.org/download.html</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/MNG</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?users@maven.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/maven/tree/maven-4.0.0-beta-3/api/maven-api-core</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-api-settings@4.0.0-beta-3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven</group>
      <name>maven-api-settings</name>
      <version>4.0.0-beta-3</version>
      <description>Maven 4 API - Immutable Settings model.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">ac8b3eec53bdfc6bcc0061f1deb47c3a</hash>
        <hash alg="SHA-1">36bb2201d28b1c9c230fc3e5dadc199ea27dad6c</hash>
        <hash alg="SHA-256">015ac566b95285da926edc3b22e2e22657bef3cd55213c197960d798f121e35f</hash>
        <hash alg="SHA-512">3a016bbd0b5d79c68c64d6bbb57ae19a58ccc8ba74551c3d85b95745dbc54dfbcf9ae6d15b03d2d53e9cc9cbbce0ed283c269c423952753413690b039bf35280</hash>
        <hash alg="SHA-384">20be3f78d8c237652fd4da631c8110dae255da2cbf3e799516fcc19237eb7249201bebccd417012fcc2a350745ac4438</hash>
        <hash alg="SHA3-384">f89ae47ff1c72c3483f131865def1be55558bbd415f80e5a6f99d7169fc198c796eace0e4d1ec416d7aa68e424186be1</hash>
        <hash alg="SHA3-256">179ae9d118190343b96d335faa0aea1b3bae4441b83a22338ee7252bea3d9b91</hash>
        <hash alg="SHA3-512">f61cc8f4b6b7d55dd78d0887e15ab8c44cf9359f470af89989ee2a712baa9a8940d21b025dbfb5a0f18c9e6cccae121a36fab7e800ae60502a048568e76f133e</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven/maven-api-settings@4.0.0-beta-3?type=jar</purl>
      <externalReferences><reference type="website"><url>https://maven.apache.org/ref/4.0.0-beta-3/api/maven-api-settings/</url></reference><reference type="build-system"><url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/</url></reference><reference type="distribution"><url>https://maven.apache.org/download.html</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/MNG</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?users@maven.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/maven/tree/maven-4.0.0-beta-3/api/maven-api-settings</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-api-toolchain@4.0.0-beta-3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven</group>
      <name>maven-api-toolchain</name>
      <version>4.0.0-beta-3</version>
      <description>Maven 4 API - Immutable Toolchain model.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">fe2168d0c1b2ff4e8717fb6f72f4caab</hash>
        <hash alg="SHA-1">e45c5fe0c9bd2abebc40e7fef6e3dee0d810d568</hash>
        <hash alg="SHA-256">1518546b00ea8756d56b361811fd49760be9342d9f6282f9dcc273a93b91ebc2</hash>
        <hash alg="SHA-512">8e43f079586710cd13002192c3897f0f2b95dc87ddbb73c2ddd42178192e4598b065c8ebfa46c60cc78ced1e613038dc00c0480743c40a058be1f3a4775add74</hash>
        <hash alg="SHA-384">77c8f8962bcf836c14eef29b20b40e89ed0d033dcec84f473ca3bbad1509a01184cef08c10e33a301907ec8638d1169e</hash>
        <hash alg="SHA3-384">4f792d29c0ad9c5157921ac931b0762529e16982d1f185e30ceeb9367c697367e7354cabb6a02c62f319d4a720482b5a</hash>
        <hash alg="SHA3-256">f4f22014c43ac62d3c65be33888769de594622adf9c2df4fb85a874098bbb14d</hash>
        <hash alg="SHA3-512">2a01f6e121c20055b9d810efcd25db8ff9c817f2b4962ab6ccafa93525d520f61a036ba93040ff0947889b96027d2d69f0565a24d206000aa3b59395b360ef7e</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven/maven-api-toolchain@4.0.0-beta-3?type=jar</purl>
      <externalReferences><reference type="website"><url>https://maven.apache.org/ref/4.0.0-beta-3/api/maven-api-toolchain/</url></reference><reference type="build-system"><url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/</url></reference><reference type="distribution"><url>https://maven.apache.org/download.html</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/MNG</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?users@maven.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/maven/tree/maven-4.0.0-beta-3/api/maven-api-toolchain</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-api-plugin@4.0.0-beta-3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven</group>
      <name>maven-api-plugin</name>
      <version>4.0.0-beta-3</version>
      <description>Maven 4 API - Immutable Plugin model.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">2c6c06884f8e8ef94fa438618a61b630</hash>
        <hash alg="SHA-1">f718f60640bcae63980d21b01a3ba00f27fe01bd</hash>
        <hash alg="SHA-256">7b80ab566dd4714dc75f58881667ada6accb697d89ad3f0073d6ec714d802757</hash>
        <hash alg="SHA-512">28c27304d3f67d6ced7ddd336894e9b3e7f1f6df5a1fc904e37f62b8b2005476a2c0810c1a72bb120311254747ef786befd72f46c43f833ca34462e12b3715f1</hash>
        <hash alg="SHA-384">7842c16a3713c2ffda5252722da4b39d80d1c1bef2d548c736255f55a033bbcded2431aa835fbb45d18cb703e8748b51</hash>
        <hash alg="SHA3-384">abbfdff4940ff6b19b80c1c071aa9ad17043ad2719cea4e10efd82309177cb9ceb9ceef72c3256e8a528330e771e70b9</hash>
        <hash alg="SHA3-256">f51007bf538f6f48e484ebc26deee407308ea7c7044bbb4952b3057f13af42c1</hash>
        <hash alg="SHA3-512">762abfec8fa866b1c26bc68d318871e86f93c6ce46c3a8989b07ad2bbc978fc5dc7cecbbcf216412e41af4eca2f4d137b308578e947c111a5afab777793f902a</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven/maven-api-plugin@4.0.0-beta-3?type=jar</purl>
      <externalReferences><reference type="website"><url>https://maven.apache.org/ref/4.0.0-beta-3/api/maven-api-plugin/</url></reference><reference type="build-system"><url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/</url></reference><reference type="distribution"><url>https://maven.apache.org/download.html</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/MNG</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?users@maven.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/maven/tree/maven-4.0.0-beta-3/api/maven-api-plugin</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-api-xml@4.0.0-beta-3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven</group>
      <name>maven-api-xml</name>
      <version>4.0.0-beta-3</version>
      <description>Maven 4 API - Immutable XML.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">84848ebfeee17c2fb222925ee76fadef</hash>
        <hash alg="SHA-1">f71ca6cf08c4930ce65a2e0cceec49bb6a51f821</hash>
        <hash alg="SHA-256">3b5d447d7b4e940dce8e2a1beefef620a83445c893223b4ab14f52f93ecc3706</hash>
        <hash alg="SHA-512">0f435dd80626f1cd9ee397cf0a2dde4dd385539ef2462762e27c197def20a998ea184ec5a0eec3361250264b63368f25638dd9cda9749b34f814ac736bd9c1b1</hash>
        <hash alg="SHA-384">b6975777cd52659572ce1c8a34e40fbb796116f4683908715a96453b519a99b97454351b914869102e1cf2f4b0572b43</hash>
        <hash alg="SHA3-384">d45ad679aea89c1e22b509e307d63eef21e26b89374c69929d4572f475c2dac68fcdea20b4248092cc0d2fd1f52dcf97</hash>
        <hash alg="SHA3-256">6505c6f4ad333cff9c46872b0841a3f39958bb72191c385464b4f6ecae56cb20</hash>
        <hash alg="SHA3-512">84548b4168bac187739fcb55e6858fe5909236f9bf87d3ef5b212d0bb2370b8bc14f61893a70dccff9488e0ac4174f70e5ac0267ab848ec66f46a36c4c8a03a0</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven/maven-api-xml@4.0.0-beta-3?type=jar</purl>
      <externalReferences><reference type="website"><url>https://maven.apache.org/ref/4.0.0-beta-3/api/maven-api-xml/</url></reference><reference type="build-system"><url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/</url></reference><reference type="distribution"><url>https://maven.apache.org/download.html</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/MNG</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?users@maven.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/maven/tree/maven-4.0.0-beta-3/api/maven-api-xml</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-api-di@4.0.0-beta-3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven</group>
      <name>maven-api-di</name>
      <version>4.0.0-beta-3</version>
      <description>Maven 4 API - Dependency Injection</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">baaf368e4e86630fdb09c8bb7515fd43</hash>
        <hash alg="SHA-1">1a90c469d96cfe2067e282c4649acbba8cf3a6d3</hash>
        <hash alg="SHA-256">ab91c1544b25856dff101d400457be6d5b3d0ba0810ea2fd3d2123b046c1fba5</hash>
        <hash alg="SHA-512">9adbea7e7f75d1f23e63022852c8062a45a5f4fecc74a578cd06f054aecedc5bda7f3a2f1bcd83949650edf982735263dd4b3379aa83734f8285f8897ee06dcd</hash>
        <hash alg="SHA-384">9e341e03a38b8b064473882721c5039dc0d7859129fbfec465742a42efbf6e99d3248d93c94fb1dbdc85ed99ca829b14</hash>
        <hash alg="SHA3-384">400bd9fa8336ad0a12dc2e5a4c8deca2ffeca364580068239a61888809aeabc3ed5000e13e71a1abcc4f6c43974f9f3a</hash>
        <hash alg="SHA3-256">84c66e4f93ad1c3755d917a16da19628b346ce3b168c80e6cbe1dc792c1ccb5b</hash>
        <hash alg="SHA3-512">35c3635cc0f58ab7e422985f56e706fa8709661a90c0770c5652a5e48cac0d239885b3628a7c3dd9ee85e9d1fde0b9166a03d4bcbfac7287db60c7f91682b67a</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven/maven-api-di@4.0.0-beta-3?type=jar</purl>
      <externalReferences><reference type="website"><url>https://maven.apache.org/ref/4.0.0-beta-3/api/maven-api-di/</url></reference><reference type="build-system"><url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/</url></reference><reference type="distribution"><url>https://maven.apache.org/download.html</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/MNG</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?users@maven.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/maven/tree/maven-4.0.0-beta-3/api/maven-api-di</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-api-model@4.0.0-beta-3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven</group>
      <name>maven-api-model</name>
      <version>4.0.0-beta-3</version>
      <description>Maven 4 API - Immutable Model for Maven POM (Project Object Model).</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">f89e051e945fe7c3ac7e25211cc0cee4</hash>
        <hash alg="SHA-1">1382c9302f3569978ea2f1ab16f2a04712ec309d</hash>
        <hash alg="SHA-256">26a8eef7250b8e18964f9ebf6e7f1588a45ae86b6e984ec8621edefa70194aeb</hash>
        <hash alg="SHA-512">74572347124e48eb1cf69ac0c0f9d790ef296f70bc5c66f0d6d53cb04c3e8b99d07164047b51f85eecda138129ba1b918e174750d3c70e39e00ade009ab2cbfd</hash>
        <hash alg="SHA-384">bff336bfa44ef673d00ad0b11571a277e09cad8d585aea05af5069e21edaf58a692f05fcdce830171806eb8838c67b11</hash>
        <hash alg="SHA3-384">46fdd811f4ef4e9b48581313b61db2382546244c1d0c72c3f22f73279028a610d0686126d9bf007544e6a3a88a191adf</hash>
        <hash alg="SHA3-256">570a7d77f73cdd652bb9a1782fb745c865e729549e25e60cf2e6c15a9724fc46</hash>
        <hash alg="SHA3-512">ead1ca920f9e7814ddbb92da09b068103fc845dfc3685860d81608e2255d3744b156c82f3b98310f0828ac39be458020d443e1e96a26573adc663e678d41939a</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven/maven-api-model@4.0.0-beta-3?type=jar</purl>
      <externalReferences><reference type="website"><url>https://maven.apache.org/ref/4.0.0-beta-3/api/maven-api-model/</url></reference><reference type="build-system"><url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/</url></reference><reference type="distribution"><url>https://maven.apache.org/download.html</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/MNG</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?users@maven.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/maven/tree/maven-4.0.0-beta-3/api/maven-api-model</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-api-meta@4.0.0-beta-3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven</group>
      <name>maven-api-meta</name>
      <version>4.0.0-beta-3</version>
      <description>Maven 4 API - Java meta annotations.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">5325b9ddfd6a739de09255e02eda9d12</hash>
        <hash alg="SHA-1">3ef02d48cdd693b8db8149abb1d564686624e97b</hash>
        <hash alg="SHA-256">440cac2f2909d9c2c29ac394c71f15a2dc3ebdd24fd7bc2d3ee7b792fdb1eadd</hash>
        <hash alg="SHA-512">d9eea2cc9961cee7849cc6cab5639f1eb731f731c11ead59680473da689cbe54809e7aaf536cb0eaa219cd1b2945d5f7dc50493863c047003c207a4e08e76b2e</hash>
        <hash alg="SHA-384">8bcc3b7d63265ace7bbc6746ecc7432eccb4ae7f16a41c03e02f9fc31086aa374108a929b00a5d2b98714ff6b6920fae</hash>
        <hash alg="SHA3-384">be0ced518515d61904c89312f973e87b5740158d132b0d6fb63fc79e60d0388c11850299ad17711af15a3111536c2ae9</hash>
        <hash alg="SHA3-256">02ae6426b0465bcd748fb907dae29855fa2377576517c91d8b2fd017b436d276</hash>
        <hash alg="SHA3-512">3b6038f3953cdb26b62677b1ee274f04fd7ce199e6d67b437f7d32eddcf8b44e8c0f1b98deedaeb30779dc18a92f17b54c064f363eaab5dce2180a0acbac2bdd</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven/maven-api-meta@4.0.0-beta-3?type=jar</purl>
      <externalReferences><reference type="website"><url>https://maven.apache.org/ref/4.0.0-beta-3/api/maven-api-meta/</url></reference><reference type="build-system"><url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/</url></reference><reference type="distribution"><url>https://maven.apache.org/download.html</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/MNG</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?users@maven.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/maven/tree/maven-4.0.0-beta-3/api/maven-api-meta</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-archiver@4.0.0-beta-1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven</group>
      <name>maven-archiver</name>
      <version>4.0.0-beta-1</version>
      <description>Provides utility methods for creating JARs and other archive files from a Maven project.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">098b5427a0cd99e4b22d2e4972ac5032</hash>
        <hash alg="SHA-1">ee8a84fdeec2b23a2c9f8f35d032dedbd454e0f2</hash>
        <hash alg="SHA-256">9fda29a9a9cba2fe0e9ce23968f031cff8d7c7e1af6626f59f02ec3020a01896</hash>
        <hash alg="SHA-512">c0a9ab5b229be6091bdd528de7b3f301a6cea53aa9ae47d2a9fae947ef2e2574cbdd0894e644e404190dd1241ad4ea64146a3bd944b6e4b8a1facb6672de69db</hash>
        <hash alg="SHA-384">0cc2334e1aa6c151825403cc9ae7d0627c5474766a7dd9578eae8e1c185d6b0bcce5bdca0ea1162a9267c83524419252</hash>
        <hash alg="SHA3-384">7a1dcbc7409e3343960519580d780a3b11d9bd26a364659137d6a0ee6312dc8b916a5d4af45c026676a34d90d42576d7</hash>
        <hash alg="SHA3-256">6203d298fcc8b048cfbe4bd8d7355b0c48a88265042bc9d1631c712fcaeadb53</hash>
        <hash alg="SHA3-512">b2e40332d2a4da378416226fa9093be859d819ebf688a8afa7ba76ade4300691643a0b9ca5c71ff768a5989f6e4773b2b9cc9b7d79b31c6e2a483c4b05aa6627</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven/maven-archiver@4.0.0-beta-1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://maven.apache.org/shared/maven-archiver/</url></reference><reference type="build-system"><url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-archiver/</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/issues/?jql=project%3DMSHARED+AND+component%3Dmaven-archiver</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?users@maven.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/maven-archiver/tree/maven-archiver-4.0.0-beta-1</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.slf4j/slf4j-api@2.0.13?type=jar">
      <publisher>QOS.ch</publisher>
      <group>org.slf4j</group>
      <name>slf4j-api</name>
      <version>2.0.13</version>
      <description>The slf4j API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">7f4028aa04f75427327f3f30cd62ba4e</hash>
        <hash alg="SHA-1">80229737f704b121a318bba5d5deacbcf395bc77</hash>
        <hash alg="SHA-256">e7c2a48e8515ba1f49fa637d57b4e2f590b3f5bd97407ac699c3aa5efb1204a9</hash>
        <hash alg="SHA-512">b4eeb5757118e264ec7f107d879270784357380d6f53471b7874dd7e0166fdf5686a95eb66bab867abbe9536da032ab052e207165211391c293cbf6178431fb6</hash>
        <hash alg="SHA-384">b67cbb4ef32141423000dd4e067bf32e0c1dd2c4689c611522b9fedfc1744513175a22f4b1276f2cec4721c9467cf882</hash>
        <hash alg="SHA3-384">817fc9641f4fc52bfd76006886c6eba975f6f09b2a7cc59334729a8cc033807c8e89be9ec4309acfc16ed65ff6eee018</hash>
        <hash alg="SHA3-256">f26080cceb5a2e605f3844d6dc8dd3f14c543cb14510765d841d71a64fa454dc</hash>
        <hash alg="SHA3-512">00646c78d65ec854e157638f40735f1888aa585ede59915d58386c599c2fe54ec8c1da73284aeff00ce3142165e33c4c995ad39d08843c31e9e4d7e32c746836</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
          <url>https://opensource.org/licenses/MIT</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.slf4j/slf4j-api@2.0.13?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.slf4j.org</url></reference><reference type="distribution-intake"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/qos-ch/slf4j/slf4j-parent/slf4j-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.codehaus.plexus/plexus-interpolation@1.27?type=jar">
      <publisher>Codehaus Plexus</publisher>
      <group>org.codehaus.plexus</group>
      <name>plexus-interpolation</name>
      <version>1.27</version>
      <description>The Plexus project provides a full software stack for creating and executing software projects.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">c2edbe0dbc934692794aaeac6006055a</hash>
        <hash alg="SHA-1">8dc73f4ff5eafcbb7ec035ba54736e828b272533</hash>
        <hash alg="SHA-256">3fb4fb6143fdf964024c3cb738551524b9ea84e5c211cd660c559ad0703e5230</hash>
        <hash alg="SHA-512">34ae1399e75560d6aec6743ce37e10d2236342ec58145c3fdd7b03340f4ed3ef500f824c845d452dbb8c3f14d118c855707de4a080074fa572daf7ccfef4dddf</hash>
        <hash alg="SHA-384">cf31f04d414db3c864a403628707df8b36c379a984d75804e5cbfeeea5fea54d2510620de045c0b01a7745063b3135fb</hash>
        <hash alg="SHA3-384">9a439b4e81260659af067e91d5e2482337dc718cd32abc08562e9a90fee45da6a0cbfffdc7190b13ba662ed3153fcde1</hash>
        <hash alg="SHA3-256">d8cd271924ed99a870e9f8c17796e2ab0a3e69350465508517992bee0cea6bbe</hash>
        <hash alg="SHA3-512">75a3e2cbde1c45b70c1b4103620f76673db127e17518e2ca51cff1e6d7a84041e495c71171490004650d6476679d009594db2557898e231962bea3744914c501</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.codehaus.plexus/plexus-interpolation@1.27?type=jar</purl>
      <externalReferences><reference type="website"><url>https://codehaus-plexus.github.io/plexus-pom/plexus-interpolation/</url></reference><reference type="distribution-intake"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/codehaus-plexus/plexus-interpolation/issues</url></reference><reference type="mailing-list"><url>https://groups.google.com/forum/#!forum/mojohaus-dev</url></reference><reference type="vcs"><url>http://github.com/codehaus-plexus/plexus-interpolation/tree/plexus-interpolation-1.27/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.codehaus.plexus/plexus-archiver@4.9.2?type=jar">
      <publisher>Codehaus Plexus</publisher>
      <group>org.codehaus.plexus</group>
      <name>plexus-archiver</name>
      <version>4.9.2</version>
      <description>The Plexus project provides a full software stack for creating and executing software projects.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">408c466d4a20a02f4a2428a4f003ca13</hash>
        <hash alg="SHA-1">a03ed402ef8468c1d1bda368d7213cad67f16a71</hash>
        <hash alg="SHA-256">a837bd7d73291564dc8e8c826de0fede75896527a35bdcddb77b0545ee656a4c</hash>
        <hash alg="SHA-512">a1f0e4de6726f6aad22aadb40e5453d42ec299a09465ea0df8aeec28b3a2f1b06e1d0e03f156db4d88836b81f87cea6f620f3c5aac8910a0fb22bce4e9448324</hash>
        <hash alg="SHA-384">057a284377116b1f7862d27267f06f731392a47ddaf9eabb416b6d55e00079ec0b81605d6b3c08e1357f5952617c95bd</hash>
        <hash alg="SHA3-384">085da469ee95cd8d301136ad5875e69e17d2323846bec96c272e11e09b38b24258666fd2ea03ecbebab2e7ba905e7042</hash>
        <hash alg="SHA3-256">de713192117128611e59f76d8caaf6c7b06e3f14ac28e99c5c6e8234119f9a81</hash>
        <hash alg="SHA3-512">c719f55b47af87502e59affec58cc86e6ef79cf1f9a5f3890e508ffb04cba4d2a5e209ca7c6e1fd9c8a85299f0bc979382cac3efa4b3ab71c043deae15599750</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.codehaus.plexus/plexus-archiver@4.9.2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://codehaus-plexus.github.io/plexus-archiver/</url></reference><reference type="distribution-intake"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/codehaus-plexus/plexus-archiver/issues</url></reference><reference type="mailing-list"><url>https://groups.google.com/forum/#!forum/mojohaus-dev</url></reference><reference type="vcs"><url>https://github.com/codehaus-plexus/plexus-archiver/tree/plexus-archiver-4.9.2/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/javax.inject/javax.inject@1?type=jar">
      <group>javax.inject</group>
      <name>javax.inject</name>
      <version>1</version>
      <description>The javax.inject API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">289075e48b909e9e74e6c915b3631d2e</hash>
        <hash alg="SHA-1">6975da39a7040257bd51d21a231b76c915872d38</hash>
        <hash alg="SHA-256">91c77044a50c481636c32d916fd89c9118a72195390452c81065080f957de7ff</hash>
        <hash alg="SHA-512">e126b7ccf3e42fd1984a0beef1004a7269a337c202e59e04e8e2af714280d2f2d8d2ba5e6f59481b8dcd34aaf35c966a688d0b48ec7e96f102c274dc0d3b381e</hash>
        <hash alg="SHA-384">ac04c9f03ccbe35a25deb8b50280a0ca01dbe6aff0dd795d55af6112bfe3cd5817eb82f32fb18378d86cd64b07597190</hash>
        <hash alg="SHA3-384">fca090ecb1edeacb9fe865dc515cd1d109b323cd742d4a9733ff199a96ee96e0db4f924079520b9c189ef750f255475d</hash>
        <hash alg="SHA3-256">5b0054e39e522de0e0ffc4034d12f72270291fb24d94d5ffc9c4d69c25035fc6</hash>
        <hash alg="SHA3-512">fb290f5a70b1efc1dff12f40a0b2d7b94019f66da42e78010c0b8e61f222c4f267b67e356a9e9c346eb801e5515e36243888f280c5cb95c2dd69016a30cadeb9</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/javax.inject/javax.inject@1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://code.google.com/p/atinject/</url></reference><reference type="vcs"><url>http://code.google.com/p/atinject/source/checkout</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.codehaus.plexus/plexus-io@3.4.2?type=jar">
      <publisher>Codehaus Plexus</publisher>
      <group>org.codehaus.plexus</group>
      <name>plexus-io</name>
      <version>3.4.2</version>
      <description>The Plexus project provides a full software stack for creating and executing software projects.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">77515ce571e8169c13220c506ad177a4</hash>
        <hash alg="SHA-1">40deb3076e4597f1ef973dc794f3a510fa3a942d</hash>
        <hash alg="SHA-256">6ba7fb0db6bfa348c248df3f983ae31318e9c14f35a86a932af5ffd7450aa62a</hash>
        <hash alg="SHA-512">607de2dcb3826986f163a7d312d45ce43cbf6d845ca5f4006a966bf213b8c2625c14342f8de1e6c9cd9c4206fceda8ecc0fa27ace0c36d5e7b04857d63b3ae03</hash>
        <hash alg="SHA-384">7bacec1f58c7d704a3bfe70d4564216438e7d0126bda201ad5c51b27cff46efe5fb3cc02b1378e6793f7effbc1b2cc59</hash>
        <hash alg="SHA3-384">f0aae7a1b6a72d8712393e5d6cfd59425e405f837ebe2e997622dc119f193430b2af5b7e5e4d1e28016a66766435488b</hash>
        <hash alg="SHA3-256">50a8c45be377dbecc46e7535fe35dbfedf31a36f773d86c76dd9942b854957d6</hash>
        <hash alg="SHA3-512">7ebf3a6ea15bb832f1a87cc455731ac8fcb731eb846c0f279ee3d3225327dbd1e01109b7d8a89d4f1582a71749547226f026f1a5e76cb89071898787f1459a9d</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.codehaus.plexus/plexus-io@3.4.2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://codehaus-plexus.github.io/plexus-pom/plexus-io/</url></reference><reference type="distribution-intake"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/codehaus-plexus/plexus-io/issues</url></reference><reference type="mailing-list"><url>https://groups.google.com/forum/#!forum/mojohaus-dev</url></reference><reference type="vcs"><url>http://github.com/codehaus-plexus/plexus-io</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-io/commons-io@2.15.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-io</group>
      <name>commons-io</name>
      <version>2.15.1</version>
      <description>The Apache Commons IO library contains utility classes, stream implementations, file filters,
file comparators, endian transformation classes, and much more.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">84351f7991a0e6722f00e96a4ccc376f</hash>
        <hash alg="SHA-1">f11560da189ab563a5c8e351941415430e9304ea</hash>
        <hash alg="SHA-256">a58af12ee1b68cfd2ebb0c27caef164f084381a00ec81a48cc275fd7ea54e154</hash>
        <hash alg="SHA-512">e9adaeed2d715ac0ae44de056ba165a743a92acbeb9871b535f7e58e0b3bc4fba276495b50429be195098a559f3adb7294048479754a0ee4d397da2efda5f81c</hash>
        <hash alg="SHA-384">028c72b59373d3894da22f9eb2c731aabd00f670993973f71a354d722670c12ca659686b83bbf8db32d060ca180f50b2</hash>
        <hash alg="SHA3-384">73cd585ab3736b4be50ec0f10dfe5ebfc3390eea8d56f07f29055f1fddb2dff8084310eaa6fb9f97ea639ed1abd7bc33</hash>
        <hash alg="SHA3-256">daf39bc99f1a3dc0075714a4a342a58d69a4cd62c25bc39a581f657ca72b1044</hash>
        <hash alg="SHA3-512">b003f8971d1536ea0fc4320dbfe17d7259d49e59314739f9fc83134e511facbff048b0ef4f86a9d0893781ca09c95cebc3b181a6c89a2d41e851870b96e76839</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/commons-io/commons-io@2.15.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://commons.apache.org/proper/commons-io/</url></reference><reference type="build-system"><url>https://github.com/apache/commons-parent/actions</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/IO</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-io.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-compress@1.26.2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-compress</name>
      <version>1.26.2</version>
      <description>Apache Commons Compress defines an API for working with
compression and archive formats. These include bzip2, gzip, pack200,
LZMA, XZ, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4,
Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">d2c5abbd0a822c0b79cf4f03ead483ee</hash>
        <hash alg="SHA-1">eb1f823447af685208e684fce84783b43517960c</hash>
        <hash alg="SHA-256">9168a03141d8fc7eda21a2360d83cc0412bcbb1d6204d992bd48c2573cb3c6b8</hash>
        <hash alg="SHA-512">7106a722d26da945f6d6eea6f0c61b420bff45749bf60c572d992c545b10ccd926dc4b9a9f366ff29d5940c99f26dfeca98f6c1c4b630632a65f04c2d7b94b26</hash>
        <hash alg="SHA-384">8422ef0d5e9ca419a8b3a33a4c330348f4495b9edded4fde38636d11e99fc3f725df11769d310edc233beed2401daf53</hash>
        <hash alg="SHA3-384">b32406c91771cfc12e61722add9ab2ef8efa32bf16bdcf80b415f5604bb9b61977c08e6f87f2ef59705c761caca4ffb8</hash>
        <hash alg="SHA3-256">26c54771c66adc967a167306982bded1fc36a6a2d590401fc435303c9e6256a7</hash>
        <hash alg="SHA3-512">3f4054fd56ae8d4f012f2cae5469215010123c1ada8931bdcd634551027816afefd8bd871b2ee99f168e2d5a347e0e28c31427dd79e3f42cefcff2662a5603ff</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-compress@1.26.2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://commons.apache.org/proper/commons-compress/</url></reference><reference type="build-system"><url>https://github.com/apache/commons-parent/actions</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/COMPRESS</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-compress.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-lang3</name>
      <version>3.14.0</version>
      <description>Apache Commons Lang, a package of Java utility classes for the
  classes that are in java.lang's hierarchy, or are considered to be so
  standard as to justify existence in java.lang.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">4e5c3f5e6b0b965ef241d7d72ac8971f</hash>
        <hash alg="SHA-1">1ed471194b02f2c6cb734a0cd6f6f107c673afae</hash>
        <hash alg="SHA-256">7b96bf3ee68949abb5bc465559ac270e0551596fa34523fddf890ec418dde13c</hash>
        <hash alg="SHA-512">0338b50767166e5746ada6d6aa2e071e7221d699323bfb629f7f204b294c1dc4cad140610a129ed751798443b43e74e0818989c7df7d33c5915aa29742be9ba8</hash>
        <hash alg="SHA-384">908d0a22dc17aaa04caa5104cff7cad5b88b77eecb78dd5b3b3fefa22ff71ac50a4fb9e31c897ac243f9d841e4b3453d</hash>
        <hash alg="SHA3-384">8a7f2e061b998780870eddd571620fbf3d3c70bcb54e24539d0db504f59d65bc6bda58136284498babe29fcc5eabb7a6</hash>
        <hash alg="SHA3-256">022bf1f8039fcea717e9e34dd96eb80cfff05b43c9cbb76e9739b2421e2d027c</hash>
        <hash alg="SHA3-512">0bcbc4edce974ea970c46e2da12ec98d9fd962c2cf64f757ac97136dec5623ca52af0c225895303c17ffabb57090e6772d7bd326d5e7438cef5454f8bbaeecfa</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://commons.apache.org/proper/commons-lang/</url></reference><reference type="build-system"><url>https://github.com/apache/commons-parent/actions</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/LANG</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-lang.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-codec/commons-codec@1.16.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-codec</group>
      <name>commons-codec</name>
      <version>1.16.1</version>
      <description>The Apache Commons Codec component contains encoder and decoders for
     various formats such as Base16, Base32, Base64, digest, and Hexadecimal. In addition to these
     widely used encoders and decoders, the codec package also maintains a
     collection of phonetic encoding utilities.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">6c5be822d8d3fa61c3b54c4c8978dfdc</hash>
        <hash alg="SHA-1">47bd4d333fba53406f6c6c51884ddbca435c8862</hash>
        <hash alg="SHA-256">ec87bfb55f22cbd1b21e2190eeda28b2b312ed2a431ee49fbdcc01812d04a5e4</hash>
        <hash alg="SHA-512">bd33fd5340757ea0616a8c2a48760cfc9932f93b8e067701f4a122fd59735083468a016d8c0fd65973dd3fa4fc3537855e71a1fae7d14e1777e31ff1c47708ce</hash>
        <hash alg="SHA-384">ee7f4c3e5c01cf77f4d82b09c358087738e6e79507ced9f2c82fdce3b32825bb62b2d66b30ef897e2972d3253478c525</hash>
        <hash alg="SHA3-384">c200875af6359f6a584b108ecae3d83496942e1216dfacbd86e3c22e54b90b9519a9b01a229e71552111b10c8734c327</hash>
        <hash alg="SHA3-256">81cd8a4c12e0b7ac84222e33b159cbd6f658b3e0f48e5fd8075d50cd03b05837</hash>
        <hash alg="SHA3-512">c821b99a5b4a3fbf052f562d60479bc252aafa8057fcbe095e09e96cf01594a23455658f9c666866e1937910ff44a1a891760d04c22d5187cb98be9d0d58952b</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/commons-codec/commons-codec@1.16.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://commons.apache.org/proper/commons-codec/</url></reference><reference type="build-system"><url>https://github.com/apache/commons-parent/actions</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/CODEC</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://github.com/apache/commons-codec</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.iq80.snappy/snappy@0.4?type=jar">
      <group>org.iq80.snappy</group>
      <name>snappy</name>
      <version>0.4</version>
      <description>Port of Snappy to Java</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">f0792d1dbe7f90d8b34c7c19961e0073</hash>
        <hash alg="SHA-1">a42b2d92a89efd35bb14738000dabcac6bd07a8d</hash>
        <hash alg="SHA-256">46a0c87d504ce9d6063e1ff6e4d20738feb49d8abf85b5071a7d18df4f11bac9</hash>
        <hash alg="SHA-512">dfd2559bf0388c6f1987d1393497a423203b2a72febbe648b3429e4d07b47a504797228e6e4e39a94c6800c5d3df8d3792863a3b841e6e8f65cfdcda91b6f0ab</hash>
        <hash alg="SHA-384">7b5feeb0f1ee3fd3f5cd17c5ea31a75cdd060e7beaa1773474727711c308d2cf5b900b5717965afe8c14912e33c41538</hash>
        <hash alg="SHA3-384">d96d486687e858c1ebe1fadbd731d33e0233922eee703f1a4e36e68fa1dcc527cdcc4fae8fc91894ebeada2a1214606e</hash>
        <hash alg="SHA3-256">cf1b329b3f46891dc9e86fe9c6350a023dc0cb411739d2fd9d35490dfa8397aa</hash>
        <hash alg="SHA3-512">3a8584d15b63d4c371fed5b615f7a121fe2530d35d234b2caa499c53e7c558376ed22d289828276fbc77cd7c1311ba4d6c1af03edf08c5f051d5b674f01e6120</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.iq80.snappy/snappy@0.4?type=jar</purl>
      <externalReferences><reference type="website"><url>http://github.com/dain/snappy</url></reference><reference type="distribution-intake"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>http://github.com/dain/snapy/tree/master</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.tukaani/xz@1.9?type=jar">
      <group>org.tukaani</group>
      <name>xz</name>
      <version>1.9</version>
      <description>XZ data compression</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">57c2fbfeb55e307ccae52e5322082e02</hash>
        <hash alg="SHA-1">1ea4bec1a921180164852c65006d928617bd2caf</hash>
        <hash alg="SHA-256">211b306cfc44f8f96df3a0a3ddaf75ba8c5289eed77d60d72f889bb855f535e5</hash>
        <hash alg="SHA-512">a4362db234d4e83683e90f5baf90c82107450cc4404acab96e3fab14b8a3d4588a19722171d32f27d18463682a6994cad9af0b1065c954e3a77ea7bdcf586bac</hash>
        <hash alg="SHA-384">aa30349b094723369908369a18e2cb5beb5b7ca0b24b4d56c2f5725fae152220f6526466672b22bfec939e2e0622a01d</hash>
        <hash alg="SHA3-384">b3e1fee7784188df5e1931c9e8137ac0e20e63f66f93e7f938a448fc0b3adb4be5205c7a5f1835007e233fee2696fc2c</hash>
        <hash alg="SHA3-256">92eff603ed0aab557e1a45e17a74e80d8ec656b5f137197b23c429c903fa448f</hash>
        <hash alg="SHA3-512">b290f92958f8cd91705331d8411140c23957ab8b568fbe19a70f4f1dc97eddc13d3a200df28a02ab5911ce18f546c33f720878be0f727edac839a6e63ee66ece</hash>
      </hashes>
      <licenses>
        <license>
          <name>Public Domain</name>
        </license>
      </licenses>
      <purl>pkg:maven/org.tukaani/xz@1.9?type=jar</purl>
      <externalReferences><reference type="website"><url>https://tukaani.org/xz/java.html</url></reference><reference type="vcs"><url>https://git.tukaani.org/?p=xz-java.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.github.luben/zstd-jni@1.5.5-11?type=jar">
      <publisher>com.github.luben</publisher>
      <group>com.github.luben</group>
      <name>zstd-jni</name>
      <version>1.5.5-11</version>
      <description>JNI bindings for Zstd native library that provides fast and high compression lossless algorithm for Java and all JVM languages.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">00977099d76d2c01a7b19263375ee42e</hash>
        <hash alg="SHA-1">ca6ab366315e179dd80645aad4a60bab959c6523</hash>
        <hash alg="SHA-256">d75b2ced6059f81ad23e021c554259b906b6c4f2991cb772409827569ead4c1a</hash>
        <hash alg="SHA-512">d9bb13345d3a41a9ddbd0d4fbd9a4ab936f8ff98acbcb37394cd0e75aa5e550888d51b93c76fea8629e2f2cf39de4b0fe94abf853b46db426e40674cde8d69d5</hash>
        <hash alg="SHA-384">c128f7dd3f6ec2f5a5566769bd60f6d3ed36583575bb2efdb9e53aee028b629d009ce4008efda5c38da778195ff42429</hash>
        <hash alg="SHA3-384">60e17c55ff7cbe9ec7411bd06ba10470396666dc78ed93943e1412512cb420413182c9071010b5e849d74415fe10ebf0</hash>
        <hash alg="SHA3-256">bba50765cfc050bd98cc6eac6d180751e920067a58c6a41050870e937ecce2d5</hash>
        <hash alg="SHA3-512">a892530c4e30fff48cfb3d94bc59128ac853d172e8012f66184780cbafad5d5381ca239e0f68f712d3b1e399c5155287f0f8b077eb7cb48bdd1548ba7c89a734</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-2-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.github.luben/zstd-jni@1.5.5-11?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/luben/zstd-jni</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.codehaus.plexus/plexus-utils@4.0.1?type=jar">
      <publisher>Codehaus Plexus</publisher>
      <group>org.codehaus.plexus</group>
      <name>plexus-utils</name>
      <version>4.0.1</version>
      <description>A collection of various utility classes to ease working with strings, files, command lines and
    more.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">0fa4c6aabfa676c4a1a1bf0c7473f684</hash>
        <hash alg="SHA-1">2162c639aa9b081ef2a0be9d41643513e284bf99</hash>
        <hash alg="SHA-256">96b9cc44439191d2d0635974e2d44e768736b4fb2abcb65f94cd95e41912fa8b</hash>
        <hash alg="SHA-512">ecf609d495c9e7728476ca35d4290c94d862c393afc6a98090571f4047d4184d1c5231fd6af4bc68fe7d832eca26171f86af5ec590d6f2f70740b720a6f636b5</hash>
        <hash alg="SHA-384">713234f501e1911062a1e4272e10ab355c7dfb8f67ee1068dd35e71f6c1bd97becf4cf41a242877f8272db4028408e3c</hash>
        <hash alg="SHA3-384">615f7639ab790d564b7b96ba58bc30fe38e65348ab6f1d5fa3cc6e96924badea397fb6ceeef1ba3f4bfe738d9c7d9797</hash>
        <hash alg="SHA3-256">2ea14f0fa9b179ee6a286b3973bcb11ab30f419aa0f4bc02bfaaaa65ac984de2</hash>
        <hash alg="SHA3-512">e21bf0de988be9861c589574c742b5f94558baf69e965d103e9b8bdb24bbe3a805bff45c5358f515749b5e9061af2ab4b99f6328babc3c396fc04f1cfd4b5fcc</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.codehaus.plexus/plexus-utils@4.0.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://codehaus-plexus.github.io/plexus-utils/</url></reference><reference type="distribution-intake"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/codehaus-plexus/plexus-utils/issues</url></reference><reference type="mailing-list"><url>https://groups.google.com/forum/#!forum/mojohaus-dev</url></reference><reference type="vcs"><url>https://github.com/codehaus-plexus/plexus-utils/tree/plexus-utils-4.0.1/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven.plugin-tools/maven-plugin-annotations@4.0.0-beta-1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven.plugin-tools</group>
      <name>maven-plugin-annotations</name>
      <version>4.0.0-beta-1</version>
      <description>Java annotations to use in Mojos</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">c68f027de8b07cb798e812c4f1136431</hash>
        <hash alg="SHA-1">821415a8be8f6b77ee43f1b9d5457ab86264eb3d</hash>
        <hash alg="SHA-256">92f05ed7abbf73b2ed19bdff949ca677f39cbcfa0884c5f0ad9ac0b8186c7863</hash>
        <hash alg="SHA-512">41cdc543287b45eb3c6493152463402a276376cc45bed5860ebfb90958fd7066fe75ce51d4dad311ef2814d505442d3d3e1a1511bdb023faa1854d7aa1596a6d</hash>
        <hash alg="SHA-384">d9a27dddb1c1e74e9fde02266724781ae86f3bff6bdf4899e3cba8d85301750cae9f6f5bf9131a5fd743caf5079eb091</hash>
        <hash alg="SHA3-384">5ebcb9ba5b5c75c50c8810e1577e94e7045a4ff47faac736f63d24dc61f4dd346961d709667b24527eb664f353ecf639</hash>
        <hash alg="SHA3-256">e2db182666fc6ec8a50b2cd18cede788fa0ca1c83616dc31507c65f173ce23f1</hash>
        <hash alg="SHA3-512">59c9ec4715b6065d0f6f1ad4023db5b015e993d12ec44fe8f9c46c8584cd456a048482fb3351efbbe42da93694c8d4976b9188015cadd631ee1bfcdc0703fc08</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven.plugin-tools/maven-plugin-annotations@4.0.0-beta-1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://maven.apache.org/plugin-tools/maven-plugin-annotations</url></reference><reference type="build-system"><url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-plugin-tools/</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/MPLUGIN</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?users@maven.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/maven-plugin-tools/tree/maven-plugin-tools-4.0.0-beta-1/maven-plugin-annotations</url></reference></externalReferences>
    </component>
  </components>
  <dependencies>
    <dependency ref="pkg:maven/org.apache.maven.plugins/maven-source-plugin@4.0.0-beta-1?type=maven-plugin">
      <dependency ref="pkg:maven/org.apache.maven/maven-api-core@4.0.0-beta-3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-api-di@4.0.0-beta-3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-api-model@4.0.0-beta-3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-api-meta@4.0.0-beta-3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-archiver@4.0.0-beta-1?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-archiver@4.9.2?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@4.0.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven.plugin-tools/maven-plugin-annotations@4.0.0-beta-1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.maven/maven-api-core@4.0.0-beta-3?type=jar">
      <dependency ref="pkg:maven/org.apache.maven/maven-api-meta@4.0.0-beta-3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-api-model@4.0.0-beta-3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-api-settings@4.0.0-beta-3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-api-toolchain@4.0.0-beta-3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-api-plugin@4.0.0-beta-3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-api-xml@4.0.0-beta-3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-api-di@4.0.0-beta-3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.maven/maven-api-meta@4.0.0-beta-3?type=jar"/>
    <dependency ref="pkg:maven/org.apache.maven/maven-api-model@4.0.0-beta-3?type=jar">
      <dependency ref="pkg:maven/org.apache.maven/maven-api-meta@4.0.0-beta-3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-api-xml@4.0.0-beta-3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.maven/maven-api-xml@4.0.0-beta-3?type=jar">
      <dependency ref="pkg:maven/org.apache.maven/maven-api-meta@4.0.0-beta-3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.maven/maven-api-settings@4.0.0-beta-3?type=jar">
      <dependency ref="pkg:maven/org.apache.maven/maven-api-meta@4.0.0-beta-3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-api-xml@4.0.0-beta-3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.maven/maven-api-toolchain@4.0.0-beta-3?type=jar">
      <dependency ref="pkg:maven/org.apache.maven/maven-api-meta@4.0.0-beta-3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-api-xml@4.0.0-beta-3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.maven/maven-api-plugin@4.0.0-beta-3?type=jar">
      <dependency ref="pkg:maven/org.apache.maven/maven-api-meta@4.0.0-beta-3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-api-xml@4.0.0-beta-3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.maven/maven-api-di@4.0.0-beta-3?type=jar"/>
    <dependency ref="pkg:maven/org.apache.maven/maven-archiver@4.0.0-beta-1?type=jar">
      <dependency ref="pkg:maven/org.apache.maven/maven-api-core@4.0.0-beta-3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-api-model@4.0.0-beta-3?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.13?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-archiver@4.9.2?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-interpolation@1.27?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.13?type=jar"/>
    <dependency ref="pkg:maven/org.codehaus.plexus/plexus-archiver@4.9.2?type=jar">
      <dependency ref="pkg:maven/javax.inject/javax.inject@1?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@4.0.1?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-io@3.4.2?type=jar"/>
      <dependency ref="pkg:maven/commons-io/commons-io@2.15.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-compress@1.26.2?type=jar"/>
      <dependency ref="pkg:maven/commons-codec/commons-codec@1.16.1?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.13?type=jar"/>
      <dependency ref="pkg:maven/org.iq80.snappy/snappy@0.4?type=jar"/>
      <dependency ref="pkg:maven/org.tukaani/xz@1.9?type=jar"/>
      <dependency ref="pkg:maven/com.github.luben/zstd-jni@1.5.5-11?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/javax.inject/javax.inject@1?type=jar"/>
    <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@4.0.1?type=jar"/>
    <dependency ref="pkg:maven/org.codehaus.plexus/plexus-io@3.4.2?type=jar">
      <dependency ref="pkg:maven/javax.inject/javax.inject@1?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@4.0.1?type=jar"/>
      <dependency ref="pkg:maven/commons-io/commons-io@2.15.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/commons-io/commons-io@2.15.1?type=jar"/>
    <dependency ref="pkg:maven/org.apache.commons/commons-compress@1.26.2?type=jar">
      <dependency ref="pkg:maven/commons-codec/commons-codec@1.16.1?type=jar"/>
      <dependency ref="pkg:maven/commons-io/commons-io@2.15.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/commons-codec/commons-codec@1.16.1?type=jar"/>
    <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar"/>
    <dependency ref="pkg:maven/org.iq80.snappy/snappy@0.4?type=jar"/>
    <dependency ref="pkg:maven/org.tukaani/xz@1.9?type=jar"/>
    <dependency ref="pkg:maven/com.github.luben/zstd-jni@1.5.5-11?type=jar"/>
    <dependency ref="pkg:maven/org.codehaus.plexus/plexus-interpolation@1.27?type=jar"/>
    <dependency ref="pkg:maven/org.apache.maven.plugin-tools/maven-plugin-annotations@4.0.0-beta-1?type=jar"/>
  </dependencies>
</bom>
