<?xml version="1.0" encoding="UTF-8"?>
<bom serialNumber="urn:uuid:4cdff00d-df55-3036-92f2-30de740f9ddb" version="1" xmlns="http://cyclonedx.org/schema/bom/1.6">
  <metadata>
    <lifecycles>
      <lifecycle>
        <phase>build</phase>
      </lifecycle>
    </lifecycles>
    <tools>
      <components>
        <component type="library">
          <author>OWASP Foundation</author>
          <group>org.cyclonedx</group>
          <name>cyclonedx-maven-plugin</name>
          <version>2.9.1</version>
          <description>CycloneDX Maven plugin</description>
          <hashes>
            <hash alg="MD5">9c7a565cf28cce58557d0c621c5ea4b1</hash>
            <hash alg="SHA-1">be882d5a22050bfa9d19090b1420c188617d0e1c</hash>
            <hash alg="SHA-256">698e0f37184a5b28c245c4065fd036dfce253b52f82fbb7113d81d36326cc249</hash>
            <hash alg="SHA-512">c0f0b11026858166f872a2eb54719492e5cecaa0bc9cd6b30b3ecb4a174eed220f4a1b5829d18d6734128e778d3cb3db7ffed177c92866133129cb29081814a0</hash>
            <hash alg="SHA-384">d80964707dfe5caca8c70521d5066f57589304c0a657e6fbc7c0614ea0fc7b3b3dbe7778361eee0f54ba111e9cb0ffcb</hash>
            <hash alg="SHA3-384">80bc3a275d9514bc457461ff52a72add8c7ecbbc01d8912efce57139016c544ee776981851be0a58fa977ab4221f703f</hash>
            <hash alg="SHA3-256">142317d6f245390f4fd2d0c100b16281b8dfc5c0c2cff86943bdcc97039cb699</hash>
            <hash alg="SHA3-512">af0fb9137c90b65d1a07f72e4d51ae509956cdb8800f35c961b037cdda1fe4a14ce3b496cef71ba85f1621affcfe29cd42704ae4191ff0b090a9602087c8997b</hash>
          </hashes>
        </component>
      </components>
    </tools>
    <component type="library" bom-ref="pkg:maven/org.apache.maven.plugins/maven-changes-plugin@3.0.0-M3?type=maven-plugin">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven.plugins</group>
      <name>maven-changes-plugin</name>
      <version>3.0.0-M3</version>
      <description>Creates a release history for inclusion into the site and assists in generating an announcement mail.</description>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven.plugins/maven-changes-plugin@3.0.0-M3?type=maven-plugin</purl>
      <externalReferences>
        <reference type="website">
          <url>https://maven.apache.org/plugins/maven-changes-plugin/</url>
        </reference>
        <reference type="build-system">
          <url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-changes-plugin/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/apache/maven-changes-plugin/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?users@maven.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/maven-changes-plugin/tree/maven-changes-plugin-3.0.0-M3</url>
        </reference>
      </externalReferences>
    </component>
    <properties>
      <property name="maven.goal">makeAggregateBom</property>
      <property name="maven.scopes">compile,provided,runtime,system</property>
      <property name="cdx:reproducible">enabled</property>
    </properties>
  </metadata>
  <components>
    <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-core@3.6.3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven</group>
      <name>maven-core</name>
      <version>3.6.3</version>
      <description>Maven Core classes.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">f8acb450254136ba84d6fa40294e2795</hash>
        <hash alg="SHA-1">eca800aa73e750ec9a880eb224f0bb68f5b7873b</hash>
        <hash alg="SHA-256">f572ed9e2a6ea3e30522d13448c5d9b3b80ce62a23dac652111952d4941e2a3b</hash>
        <hash alg="SHA-512">fe0e2bd7c34267f7c8139d996bee99f41d29bcb6d1bbedbceb055eda31355ef179ed5e319fa97496eb85499bfc5f8738f7ac7f2c17a7118cb87cfacd984708de</hash>
        <hash alg="SHA-384">6d8776a9dec094f9c58c9b649a024a5a67c04268b260d7fb583de7dd7287b799abadda99755be9d45e55c03910cf1ca1</hash>
        <hash alg="SHA3-384">66204bce2f9b0b0388454a7c93775e3ecbc2321e6e7a1394e2da13e2e7666f7670b5a2db4e5039a95b2260dcbd0c8c3f</hash>
        <hash alg="SHA3-256">b1a979a9519c5eeb78b468ce0adbc6b5382cdbc288c8de1107f01125c94bab7a</hash>
        <hash alg="SHA3-512">b44e7fe5f03085fea942a5c627919209078c07c0f91cfa6c3214725b46acec74728dfe4dfed32bd53e479c460331e2485f0e9b5081ea78d4b853efbd834b203a</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven/maven-core@3.6.3?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://maven.apache.org/ref/3.6.3/maven-core/</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/job/maven-box/job/maven/</url>
        </reference>
        <reference type="distribution">
          <url>https://maven.apache.org/download.html</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/MNG</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?users@maven.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/maven/tree/maven-3.6.3/maven-core</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-builder-support@3.6.3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven</group>
      <name>maven-builder-support</name>
      <version>3.6.3</version>
      <description>Support for descriptor builders (model, setting, toolchains)</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">f43b5ea301aaff0c77aa3b743965da0a</hash>
        <hash alg="SHA-1">e9a37af390009a525d8faa6b18bd682123f85f9e</hash>
        <hash alg="SHA-256">3285308ea243a9967785417af5e21ae0c094099b20dfb0b7e1c3d211a87a5e59</hash>
        <hash alg="SHA-512">1f72981bf568facf16865dbfb1d5955ecbf82d90b5ed3da2bc096fb7e0f67056202d16078d9ad46945de9b59846aadc8ac010d23ab374dffbef5e7534bdbf1fd</hash>
        <hash alg="SHA-384">03caa416ef387c999dcec4a7f3cbc66f84e5f1b61c22f2d4730dbcc7ee48118ed4cc1170a605c83b2d0956346b205c9a</hash>
        <hash alg="SHA3-384">e40df7f3bbdd8963bdb3eed956d157a740efb0b1e51ec0ec5f2440168c0b9a2ad5a382d1b0cfcffafbd35aebcc346093</hash>
        <hash alg="SHA3-256">f72063e2ad824454224213507a2e0b88f9b40f5fc1fd455de5c24ded7cdbbe6e</hash>
        <hash alg="SHA3-512">a5ddd69fb6deeac6ba03f30ef72655bebc5bd0bb636d3b61c03bbd2d0943937be523db7e3bd9d34bae54d1d1785be181695fe64de9ac69f98af21da1bce92931</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven/maven-builder-support@3.6.3?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://maven.apache.org/ref/3.6.3/maven-builder-support/</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/job/maven-box/job/maven/</url>
        </reference>
        <reference type="distribution">
          <url>https://maven.apache.org/download.html</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/MNG</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?users@maven.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/maven/tree/maven-3.6.3/maven-builder-support</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-repository-metadata@3.6.3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven</group>
      <name>maven-repository-metadata</name>
      <version>3.6.3</version>
      <description>Per-directory local and remote repository metadata.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">7c49cd8e557ab6584ab9e4d2cd55f6a2</hash>
        <hash alg="SHA-1">14d28071c85e76b656c46c465db91d394d6f48f0</hash>
        <hash alg="SHA-256">2e7f850b20664a151e6ca73dd3af34e639901435c2fe717717e3cbc7ddead3d4</hash>
        <hash alg="SHA-512">9fbaffa07e4bfc091d4d8818330481bdc9d1d96448087321bb2914aac10ccb1c7b5cc6be0f6c76b8c0232b9cb69e4cdeec4fe40df5e9f2d472a4a027e5a3b3f9</hash>
        <hash alg="SHA-384">510834044a480d914eeb1a78f51cc0e47ee837a9399f843a0a44bbf75bba71109d8b5d4eeb8c789367d01e5ed881a760</hash>
        <hash alg="SHA3-384">dcc6a87ed5dd28de73a849b6fba54754c93d8c29874705fbef8fb3c135088a791cf72af8690aae2ab4800721f31325ce</hash>
        <hash alg="SHA3-256">0f1c5bec6e9d257dcabade9a3fdfcc9f18fe4496fb04a74c1480c36deec65b51</hash>
        <hash alg="SHA3-512">f3366430b6e7f864e47551d99ce5c2dcc8f830b3d2b01243d81cd50465d55c71cb80977aa2d7417f8fc95b37168c2c622993881b1b6c710359744c086f38c2c8</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven/maven-repository-metadata@3.6.3?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://maven.apache.org/ref/3.6.3/maven-repository-metadata/</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/job/maven-box/job/maven/</url>
        </reference>
        <reference type="distribution">
          <url>https://maven.apache.org/download.html</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/MNG</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?users@maven.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/maven/tree/maven-3.6.3/maven-repository-metadata</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-model-builder@3.6.3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven</group>
      <name>maven-model-builder</name>
      <version>3.6.3</version>
      <description>The effective model builder, with inheritance, profile activation, interpolation, ...</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">afa042b1716f60625df9d9a4ed70c6f8</hash>
        <hash alg="SHA-1">4ef1d56f53d3e0a9003b7cc82c89af9878321e82</hash>
        <hash alg="SHA-256">7d9a508edae881054fdb6ad530a5e053a0689ab1318bf7a099016e758b8323ba</hash>
        <hash alg="SHA-512">d65f71a4c755be518061fc2d33582c3da422cb3d52a01cd68bdf906c0fc4bfc1977da7714f9622452a02d34e00b7d4b1b1e4986bb59cbfdc5333bf12c9c7e699</hash>
        <hash alg="SHA-384">2745612bde0c1484f01db481819e5277940b22d7d7f07710130c87c73f91d5ca10e1fc94559d639cace3a831c1679635</hash>
        <hash alg="SHA3-384">8f3e1fceb78caf3c37a33bd6d5c79afa685c6e1e427555d319447863bb48c8bc53824fb67cca9f5c99500c1265a7f78f</hash>
        <hash alg="SHA3-256">d265afae3c868a2f1fc6778f62538150bd5de2157131016c26d2dc0081e1e6c2</hash>
        <hash alg="SHA3-512">39bd4872d744b46bb141a01e140e94e2604c9cd949c00f2c5aabaa9eef33499a25edc7c739c038bfe3445102bc6e31db2338a1a00aea889ccb7b623860fa561c</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven/maven-model-builder@3.6.3?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://maven.apache.org/ref/3.6.3/maven-model-builder/</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/job/maven-box/job/maven/</url>
        </reference>
        <reference type="distribution">
          <url>https://maven.apache.org/download.html</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/MNG</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?users@maven.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/maven/tree/maven-3.6.3/maven-model-builder</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-resolver-provider@3.6.3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven</group>
      <name>maven-resolver-provider</name>
      <version>3.6.3</version>
      <description>Extensions to Maven Resolver for utilizing Maven POM and repository metadata.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">0e5608a1e59e1045934bdef2d2fa0850</hash>
        <hash alg="SHA-1">115240b65c1d0e9745cb2012b977afc3d1795f94</hash>
        <hash alg="SHA-256">2379a5cf0b13ae9e11535c2c34a31b57c3866d9cbb7e116b81f9e288d1823702</hash>
        <hash alg="SHA-512">9febca461a031acd195b96b05fea2f28333a2cb587119a5493a3e9061af87bed4e7e1619acce9a505ad579a71f0a5e740cf78a3642095c2bc45a3d73c358e226</hash>
        <hash alg="SHA-384">72ff99262231234d1d44facece3aa045baf28d3ec52c32712b1df980642a5c35eae5770b975493115810d64434c703c0</hash>
        <hash alg="SHA3-384">960b35f757cb033aaa6c76a90094aa72aa9089413cc9edb06943ae7e0c57039d31a1b6b48eef6a6657265a9b76289796</hash>
        <hash alg="SHA3-256">15cfa486698ec3a61b84de3d27d764e5846c29c9f732d89be869443f31e5115e</hash>
        <hash alg="SHA3-512">a8ed60bb78db20a88fdf63ead0feff1f7d58ff2f4d95b0104b29bf6e4f2c203ba39aece579853d66b0a0714875b602b9eabfbe104f1ca6d7b00a7f2c1271f3b2</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven/maven-resolver-provider@3.6.3?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://maven.apache.org/ref/3.6.3/maven-resolver-provider/</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/job/maven-box/job/maven/</url>
        </reference>
        <reference type="distribution">
          <url>https://maven.apache.org/download.html</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/MNG</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?users@maven.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/maven/tree/maven-3.6.3/maven-resolver-provider</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven.resolver/maven-resolver-impl@1.4.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven.resolver</group>
      <name>maven-resolver-impl</name>
      <version>1.4.1</version>
      <description>An implementation of the repository system.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">fc950efda251e95bd270e82ddc902ba5</hash>
        <hash alg="SHA-1">1658cfa27978c5949c3a92086514a22ca85394e4</hash>
        <hash alg="SHA-256">345507f0c8f54a0d0fc6634b70327ab1ebd027ff85c41f593c111ff4cb65a80e</hash>
        <hash alg="SHA-512">d3132d89be995b13c81ddcca34f4cb22128a774ab133d685369b685e945cdb5c6a4a539cc67043bcf1d11a15f7fc417c464f7c1b34774c2abe7e430cc30c4347</hash>
        <hash alg="SHA-384">da965507c985b3ec25f11e700b34b3baa3b35d97d42b21d90e09a795c582503564458170672191dcd4a032cdbd498bc8</hash>
        <hash alg="SHA3-384">7ed4910c6a4616b2a484616328c67c47254037b84d1b310beb9df9bcefa273bfaa4d54b406a95dd34296f08ca73b9ff6</hash>
        <hash alg="SHA3-256">810a3a122e18e0562aaa4d10f1025c091ea810f2206a4394ccb30c06a8e14992</hash>
        <hash alg="SHA3-512">d96bbf5022851bd37c2e0bec4d65fd2354d3bcaefd0078e1bd35e044e62acc5e4b44fe05cfc7b7009694e5401f96bbe506224b4e66cbc76ba15ea808abcd3455</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven.resolver/maven-resolver-impl@1.4.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://maven.apache.org/resolver/maven-resolver-impl/</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/job/maven-box/job/maven-resolver/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/MRESOLVER</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?users@maven.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/maven-resolver/tree/maven-resolver-1.4.1/maven-resolver-impl</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven.resolver/maven-resolver-spi@1.4.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven.resolver</group>
      <name>maven-resolver-spi</name>
      <version>1.4.1</version>
      <description>The service provider interface for repository system implementations and repository connectors.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">8b9930bb63937ff878d2edf783a654b4</hash>
        <hash alg="SHA-1">905a024ff050e804a8a4df53eeee63cc7d153438</hash>
        <hash alg="SHA-256">878a03db532fc9e3e80a78ad68bba2c6a1f435b449ebd0ef9dcbf6ef39bba536</hash>
        <hash alg="SHA-512">250bccfb03d380b0fa64996e7911fa1c58253f28d933746487b8c0b04474bb2d72afb0360656f651a487fac065ce78c966b059d8aab358e8ba3593aca1eeae0e</hash>
        <hash alg="SHA-384">cdf69253f6f8e60d536d2550b947ceb59df486d40a7124ca33d769176144d1011f577303594a544f48ada54c46c8d9d0</hash>
        <hash alg="SHA3-384">755c45b124fc81a1659b321e43b68e2485e02f72f9581ba89c21780c0eea055f286bacdfc3c2a5e5354107462de6d702</hash>
        <hash alg="SHA3-256">df4d7a0f0f198dea216884c49b592691ba7a6ab40672f05d32282774a568bfea</hash>
        <hash alg="SHA3-512">55b758feedfb29e9e78ce21c05a63ab1b33943c806b0bd4d257eca95ce2f76687eb84bdece4ef2f272cccbbbf62f688fb94bd8bd9f6a420ad8b3943820c3d213</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven.resolver/maven-resolver-spi@1.4.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://maven.apache.org/resolver/maven-resolver-spi/</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/job/maven-box/job/maven-resolver/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/MRESOLVER</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?users@maven.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/maven-resolver/tree/maven-resolver-1.4.1/maven-resolver-spi</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven.resolver/maven-resolver-util@1.4.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven.resolver</group>
      <name>maven-resolver-util</name>
      <version>1.4.1</version>
      <description>A collection of utility classes to ease usage of the repository system.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">96e142730857ccda441a5b9baefeed73</hash>
        <hash alg="SHA-1">3f6d4f4bc3e24b46a776b47ccfeaed9d2ed01549</hash>
        <hash alg="SHA-256">6b2184872fa7cc2ef5a90481b56af9711c15b371e69ab52f0f31bf24e910dd82</hash>
        <hash alg="SHA-512">35a0b284fefad99b77c60f15d091c1bad3417baad1fc86fb6850a347a8a75a9cea26fa227ec601577f4096184b82ce198b4472441e95fce556f7d332c6a155cb</hash>
        <hash alg="SHA-384">29608703ce5c5130762d9c117602bcb5c842b27bd4576291cae8342f835628781589ed5da02ae54bb0cf444f2ca3dc11</hash>
        <hash alg="SHA3-384">3889ea3c5dc697f39f99bd9f4c2a23c51daabdd4454ad33c1e3621a6506bec45b09002eb1230003cb026997993144b26</hash>
        <hash alg="SHA3-256">9e0df8db7beb418484bd4db007c586272df4ca2b0b22e0d08e00aceeb40de911</hash>
        <hash alg="SHA3-512">29318d9c1c068d6b47f162a31303d8c1aaf156713c3af9492b888fa2d41b84f635711c6fea2bb1112b4e471fb31f2d433449bbd25a44a6c6537af050521409e9</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven.resolver/maven-resolver-util@1.4.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://maven.apache.org/resolver/maven-resolver-util/</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/job/maven-box/job/maven-resolver/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/MRESOLVER</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?users@maven.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/maven-resolver/tree/maven-resolver-1.4.1/maven-resolver-util</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven.shared/maven-shared-utils@3.2.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven.shared</group>
      <name>maven-shared-utils</name>
      <version>3.2.1</version>
      <description>Shared utils without any further dependencies</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">9c8c48e58b12b4584278c355f6c98bd5</hash>
        <hash alg="SHA-1">08dd4dfb1d2d8b6969f6462790f82670bcd35ce2</hash>
        <hash alg="SHA-256">3ba9c619893c767db0f9c3e826d5118b57c35229301bcd16d865a89cec16a7e5</hash>
        <hash alg="SHA-512">4cab9de8654b3744ceb1a62b51853e076c191cae8193e8393a979cd428833b994ceed591806960e100942dde3eeb65538169d42666004e3623b6129475fe2cab</hash>
        <hash alg="SHA-384">1bc09d2aee6158c845b91788f45e300f9134fe0b0d965324ae1f56575dacd5a0eae2927ce4e09529e966ed5fd6434c35</hash>
        <hash alg="SHA3-384">c144c0c153f9f000d3fdd4daaee3bb4df4926902fef98da901370ac131ca298f86956c23c2c02c83a50e43fad6dbca62</hash>
        <hash alg="SHA3-256">50280461e8e2e0cbcfd2c22822f3e1d3276e5034287040ce0db0e83a6c56d565</hash>
        <hash alg="SHA3-512">74b04341054157cc206fe7a5b7b0f14552ad311ae2812e2fff40f85866df690739384dfa2a64bc4bf590125c39803aaaf013e003661099cede00a9ad9292369d</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven.shared/maven-shared-utils@3.2.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://maven.apache.org/shared/maven-shared-utils/</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/job/maven-box/job/maven-shared-utils/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/MSHARED/component/12326452</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/maven-users</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/maven-shared-utils/tree/maven-shared-utils-3.2.1</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.9.0.M3?type=jar">
      <publisher>The Eclipse Foundation</publisher>
      <group>org.eclipse.sisu</group>
      <name>org.eclipse.sisu.inject</name>
      <version>0.9.0.M3</version>
      <description>JSR330-based container; supports classpath scanning, auto-binding, and dynamic auto-wiring</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">643a13084e0ac59cdda06319e1b348ea</hash>
        <hash alg="SHA-1">3665002ba4d16dfa779ef658a63d0608c4bd898b</hash>
        <hash alg="SHA-256">15335c4dcf082f599fb8eddcfb58d6a7e9a9c97de2883c257089a479b9b24522</hash>
        <hash alg="SHA-512">76267078f3dd887fd7c4a0931d0ae057d5f51478f712ce4bb5530cfa5c2aa18a8dbe935b32c1afb01a4e2cde44d30579baf5868b8b63ee066ea0714fd9d8a81c</hash>
        <hash alg="SHA-384">d24164f8aaae165de8533530b90168228e7d107a5eeb63997bf6e2d41f1adfaabf29aa9ab4f08e3445c69aa57f6c09b8</hash>
        <hash alg="SHA3-384">aab9bce13f047bcdd8d47420f80e88a314f3566bf7edcd7d37cf286865f45586fda8745793eb2a54c506759f9654bd5b</hash>
        <hash alg="SHA3-256">d9e302304b0f99703243f697f72b12e42df692553c08ef9d2d2e0eb83847eab7</hash>
        <hash alg="SHA3-512">8ac0b60618e01e819fcabcfd210176310d98f9856b49cafd5dfb451393b791b1ed43fc17e359c5868662dc76e0059e23a152c5564f7ce94ca4720bd092cb29d0</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.9.0.M3?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://www.eclipse.org/sisu/org.eclipse.sisu.inject/</url>
        </reference>
        <reference type="build-system">
          <url>https://ci.eclipse.org/sisu/job/sisu.inject/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse/sisu.inject/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>http://dev.eclipse.org/mhonarc/lists/sisu-dev/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse/sisu.inject/org.eclipse.sisu.inject</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.inject/guice@4.2.1?classifier=no_aop&amp;type=jar">
      <publisher>Google, Inc.</publisher>
      <group>com.google.inject</group>
      <name>guice</name>
      <version>4.2.1</version>
      <description>Guice is a lightweight dependency injection framework for Java 6 and above</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">57c18dbf01a6ef7fa4da3fb594cd243e</hash>
        <hash alg="SHA-1">41e5ab52ec65e60b6c0ced947becf7ba96402645</hash>
        <hash alg="SHA-256">158fd8f52d2a4b4ce4293ac2b833bb2427f5ddfe30df4ae0fd4675a1038a3b79</hash>
        <hash alg="SHA-512">51eec8b514cb7b4f05b8e5846e4cfe5dfc42a3e3171ced079a83e122e7113d96defc6edfada375e072f965b01450e170072b1f85fcd11800804239b93c2878dd</hash>
        <hash alg="SHA-384">3ba79400b5419f5963c7ad5f3fcde7a55674e2630edd68e12ca9e8797ca41a777489a34297b6c9678f0f6bef4be66484</hash>
        <hash alg="SHA3-384">e83143d679cfd7a42a5e27ac5038c2da43e75c8bf054f4c63938579df6fb428882fd8371adafbe7db1ba022c5ae13c31</hash>
        <hash alg="SHA3-256">d30b4b222e87e6c30e2543e1b0a172988d1c0757498a928041667b8a09c41e61</hash>
        <hash alg="SHA3-512">ce045743540757b233a4c1731774aa02e9dcbbd3f8cf07bac8ab8268fc28bbfd6d55242433c25b93dc66ce2fcf0adee4688fd2929f6c576fe4994635550e8395</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.inject/guice@4.2.1?classifier=no_aop&amp;type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/google/guice/guice</url>
        </reference>
        <reference type="build-system">
          <url>https://travis-ci.org/google/guice</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/google/guice/issues/</url>
        </reference>
        <reference type="mailing-list">
          <url>http://groups.google.com/group/google-guice/topics</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/google/guice/guice</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/aopalliance/aopalliance@1.0?type=jar">
      <group>aopalliance</group>
      <name>aopalliance</name>
      <version>1.0</version>
      <description>AOP Alliance</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">04177054e180d09e3998808efa0401c7</hash>
        <hash alg="SHA-1">0235ba8b489512805ac13a8f9ea77a1ca5ebe3e8</hash>
        <hash alg="SHA-256">0addec670fedcd3f113c5c8091d783280d23f75e3acb841b61a9cdb079376a08</hash>
        <hash alg="SHA-512">3f44a932d8c00cfeee2eb057bcd7c301a2d029063e0a916e1e20b3aec4877d19d67a2fd8aaf58fa2d5a00133d1602128a7f50912ffb6cabc7b0fdc7fbda3f8a1</hash>
        <hash alg="SHA-384">4dddf44338b5aff9580da2532b81c0ac3e1d09e1f28c6db871a55cad442b705dd7791eb07f9d4577d49d0be3673ba783</hash>
        <hash alg="SHA3-384">2bd64cbaf769c6e4e85e34f7a6119d89e16fbf55af3fc5d6cbd52eb214c367dec1ac7b9062ee0fb35a2e0acfc7c477e1</hash>
        <hash alg="SHA3-256">d4a726b2bf8aa58197021a7d8fca674b4b2790d4c48de43a92f728866a91c2f0</hash>
        <hash alg="SHA3-512">830bc3f8328be76897990e9b9fc42eef02623115e456af96ad09b20900ad615519c8c8de60155ac04fb332eaa9510110d52edd13911af76271c71d91cbd789cc</hash>
      </hashes>
      <licenses>
        <license>
          <name>Public Domain</name>
        </license>
      </licenses>
      <purl>pkg:maven/aopalliance/aopalliance@1.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://aopalliance.sourceforge.net</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.codehaus.plexus/plexus-classworlds@2.6.0?type=jar">
      <publisher>Codehaus Plexus</publisher>
      <group>org.codehaus.plexus</group>
      <name>plexus-classworlds</name>
      <version>2.6.0</version>
      <description>A class loader framework</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">67e722b27e3a33b33c1b263b99dd7c43</hash>
        <hash alg="SHA-1">8587e80fcb38e70b70fae8d5914b6376bfad6259</hash>
        <hash alg="SHA-256">52f77c5ec49f787c9c417ebed5d6efd9922f44a202f217376e4f94c0d74f3549</hash>
        <hash alg="SHA-512">6a58048d9db54e603b9cfd35373cf695b66dd860bec878c663b4fc53b6b3d44dd5b0c92e7603654911b1f78e63ef277cf6b272fe069a360989138550545f274d</hash>
        <hash alg="SHA-384">e839707ea5c4351f2703c6861ee4d58e08df0f7509110af13d4b3824e6ec5cfd65508fa80cc3f222baf5cf6c4ab5d5ac</hash>
        <hash alg="SHA3-384">75389fc7ed9aa3ad33ff317b0d41851fe0073b37aa8c33081722bfafb851493fb0e3b9629f924026fc32841f01399695</hash>
        <hash alg="SHA3-256">3aef41be29373137c58c415693b312c95e048731dce519ab88649eae9ba0e492</hash>
        <hash alg="SHA3-512">312eff142f86b9e110131dcca69527fbec80478e463fed5a34e2bd628673bce7be9ddb6fe0cda7fab2a119d1f310629413740019e686e9162194984ab6e06bf4</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.codehaus.plexus/plexus-classworlds@2.6.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://codehaus-plexus.github.io/plexus-classworlds/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>http://github.com/codehaus-plexus/plexus-classworlds/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>http://archive.plexus.codehaus.org/user</url>
        </reference>
        <reference type="vcs">
          <url>http://github.com/codehaus-plexus/plexus-classworlds/tree/plexus-classworlds-2.6.0/</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.codehaus.plexus/plexus-component-annotations@2.1.0?type=jar">
      <publisher>Codehaus Plexus</publisher>
      <group>org.codehaus.plexus</group>
      <name>plexus-component-annotations</name>
      <version>2.1.0</version>
      <description>Plexus Component "Java 5" Annotations, to describe plexus components properties in java sources with
    standard annotations instead of javadoc annotations.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">141fd7a2ae613cb17d25ecd54b43eb3f</hash>
        <hash alg="SHA-1">2f2147a6cc6a119a1b51a96f31d45c557f6244b9</hash>
        <hash alg="SHA-256">bde3617ce9b5bcf9584126046080043af6a4b3baea40a3b153f02e7bbc32acac</hash>
        <hash alg="SHA-512">cc534fda54272f074fe9edd581a6c3e1ea98127340c7f852c4b4953a44dad048ace22dfa10f30d6adcdfc15efd319dac778a03ebbe20de7779fd1df640506e88</hash>
        <hash alg="SHA-384">dd102351fada419b7e66f38b62868db4141cf93863b8117926564dd883b4a3960d9c9682b346f7106cdaa2a4138c794f</hash>
        <hash alg="SHA3-384">2b335733d7683e8bae312b0608af7c17b1aa22a1b9cbc4cc11549faf6bacc51c7591f1073aac99e5d70fdea31c6253c4</hash>
        <hash alg="SHA3-256">2e9f44d1c5df160563d3cedaf01929682fb3e0432beca7c782d8ba0324fb32b1</hash>
        <hash alg="SHA3-512">5051e4210310ec60fae9f32284a93da3cff63bf43a7dda30eaf2715d24cfc7f2353a6c2731521f4d6ef32e7a3e2526b6a41c8a11b0889c8dbf7ffc7914812641</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.codehaus.plexus/plexus-component-annotations@2.1.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://codehaus-plexus.github.io/plexus-containers/plexus-component-annotations/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>http://github.com/codehaus-plexus/plexus-containers/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>http://archive.plexus.codehaus.org/user</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/codehaus-plexus/plexus-containers/plexus-component-annotations</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-artifact@3.6.3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven</group>
      <name>maven-artifact</name>
      <version>3.6.3</version>
      <description>Maven is a software build management and
    comprehension tool. Based on the concept of a project object model:
    builds, dependency management, documentation creation, site
    publication, and distribution publication are all controlled from
    the declarative file. Maven can be extended by plugins to utilise a
    number of other development tools for reporting or the build
    process.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">b83c1943a0783f3f81d4cd4c83c363e1</hash>
        <hash alg="SHA-1">f8ff8032903882376e8d000c51e3e16d20fc7df7</hash>
        <hash alg="SHA-256">61b20da4e1e3db837630d0810a6a7a5ac9fb7ea31b0a55638062aad6e479c09c</hash>
        <hash alg="SHA-512">53726aee76ea01de2253c623292f64b5bf7784c6e223ebcc7548a2136922cbdf69d3bc42c44d00e6fe2015d2304b67d02d7a988d400da2ed036d489c6ed8fbe6</hash>
        <hash alg="SHA-384">d5905d7b94a605e7b7bbc72d2806ee0c475210436c2b2220b8a61b73a58b4cec0fce3bc7d24158d994bb8a73d954b868</hash>
        <hash alg="SHA3-384">68e5c7eec8ea3a8cdc0259b9baa64cc3014760d2b073d00c552937629f06ae0104f178bc40ca59f17d7742d3d8f99cfb</hash>
        <hash alg="SHA3-256">9f984256f0043acef50ba9953ae796338d495b31246771aea7c8b14c6925d3cb</hash>
        <hash alg="SHA3-512">723f0abf401dd62a99c6c03c3d363b7695dbe10912d1c46f0c26dbfbc697b09ca5b52c8567159c58f8adeece9caf9cf9ce560be110283fe315473d48a091d16a</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven/maven-artifact@3.6.3?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://maven.apache.org/ref/3.6.3/maven-artifact/</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/job/maven-box/job/maven/</url>
        </reference>
        <reference type="distribution">
          <url>https://maven.apache.org/download.html</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/MNG</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?users@maven.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/maven/tree/maven-3.6.3/maven-artifact</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-model@3.6.3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven</group>
      <name>maven-model</name>
      <version>3.6.3</version>
      <description>Model for Maven POM (Project Object Model)</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">ebf3c5e5556a22271bf315d0cd5b2b56</hash>
        <hash alg="SHA-1">61c7848dce2fbf7f7ab0fdc8e8a7cc9da5dd7827</hash>
        <hash alg="SHA-256">17cef1f58e146ef0d7d9e96b3b92d98a1d6fd7d2b3288ba538e8ff1e0d9160cf</hash>
        <hash alg="SHA-512">7df3d781dd0c3a5947c76a02bb811d2bff0eb9bd0ba1efc3a55001576c58612bb1fd221ceb9cedd7ed84dfdb64c973b61af22c56636e1cfb03a55cfbe83655f6</hash>
        <hash alg="SHA-384">dc128cf5bca0d6c14716170efb7d2e37048f73c9b76393b766490580323a58297578c7aa5d49f63b8f48518fabb7320e</hash>
        <hash alg="SHA3-384">6d17e2e75aaf45e995455913082cafe57c147f17af9d265ce2d55f15b3b0044254c24dc3c55cdf5a0bc6ee4ecdefadf7</hash>
        <hash alg="SHA3-256">7884033d63e0ed6001f98b8c7811542a3f7ff4baad8aadd7cb56eafad16b9aa7</hash>
        <hash alg="SHA3-512">b3dd7820626f65b4d44cd9efc024d88ac0b4339efedf8848e6106e7b377be1768b79852cc28c7c2f454071d80e132f389f9146bc5e7c779569df94897682a5e6</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven/maven-model@3.6.3?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://maven.apache.org/ref/3.6.3/maven-model/</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/job/maven-box/job/maven/</url>
        </reference>
        <reference type="distribution">
          <url>https://maven.apache.org/download.html</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/MNG</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?users@maven.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/maven/tree/maven-3.6.3/maven-model</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-plugin-api@3.6.3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven</group>
      <name>maven-plugin-api</name>
      <version>3.6.3</version>
      <description>The API for plugins - Mojos - development.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">6819bbe98ec09c2e65a497195f1d3344</hash>
        <hash alg="SHA-1">063fe5967b9c4c1b6fa6004be76e1c939e8bd1d6</hash>
        <hash alg="SHA-256">61a48effa6d0c68b07ba50df17b270a7f5527212022f250f6d11dbc11efc0e5b</hash>
        <hash alg="SHA-512">07090ed707bb3364219da130bc7b38a2a2b9fd31bae51144202b52e5e9f8d9690e8b3fe360bb3327fbeaed3b555c42b52144fb87a5854c8ca2226c07d62e0ed6</hash>
        <hash alg="SHA-384">4c328407527e490bb7bc735150747b8d5fb4baaa4a9e1b947baa005fcbfebc672a14523046c4e4c9a07cdd509c699ebd</hash>
        <hash alg="SHA3-384">0f5ab5b2a18350b084d7c1c267553b69094872ba05a556ae055aefb7e176d4f6edeb562c11371f42d105b6de708d2f11</hash>
        <hash alg="SHA3-256">ef617c858bca5d4465868cd572c9e66bb20815a870aec53acf111e53d2eb3432</hash>
        <hash alg="SHA3-512">cda7e62e3a24dbe42541c72cdc4e515155c6f1826f6c7ef81c86fc16d16901b6526be55549c1da3cb25e1f342bb7b6d34f2342c4db19b891233758ebdfe258fd</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven/maven-plugin-api@3.6.3?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://maven.apache.org/ref/3.6.3/maven-plugin-api/</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/job/maven-box/job/maven/</url>
        </reference>
        <reference type="distribution">
          <url>https://maven.apache.org/download.html</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/MNG</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?users@maven.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/maven/tree/maven-3.6.3/maven-plugin-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-settings@3.6.3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven</group>
      <name>maven-settings</name>
      <version>3.6.3</version>
      <description>Maven Settings model.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">c7da2b5dfdb0b0ba67e1279a32f40054</hash>
        <hash alg="SHA-1">bbf4e06dcdb0bb33d1546c080df5c8d92b535d30</hash>
        <hash alg="SHA-256">d3904bcac30f11fb49e44f5cecaaebb2e9a7a5e4a9a55f20484fbb9fcc1bb66c</hash>
        <hash alg="SHA-512">dae78e5bedde2009c8a7fdf0b77c91b87b8c4c4cb5bc73f799107edd75597a3c90dc497abdfa43254e7dc31eb7707384254d91fb656c74bb5d86cd868e36209b</hash>
        <hash alg="SHA-384">a920fa55fd2df6cb39e61a341074feaf38ed5746d516d0281a7ec5dd53bfb34bb935d4ae2e7097fe557ddfff4e9d74ee</hash>
        <hash alg="SHA3-384">853c446d877ac42d49e4f8fc8e84d9d1e2df48afc49af067cc6f157517be929634b52e358d6fa1ff17e584ebc03f7f5f</hash>
        <hash alg="SHA3-256">5d18bf0c53eac0bd969936fe50264f2e0bd066c01cac7a7930f47f150be119d1</hash>
        <hash alg="SHA3-512">33715333b6957a22bac890951305b97b6572041a9c902b0d0a442112ddafc398b6d58b71eecd694212d1f5fe5a3ff7ce7fb56faf106812cfcc6ec6ecf4c7d9c9</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven/maven-settings@3.6.3?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://maven.apache.org/ref/3.6.3/maven-settings/</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/job/maven-box/job/maven/</url>
        </reference>
        <reference type="distribution">
          <url>https://maven.apache.org/download.html</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/MNG</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?users@maven.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/maven/tree/maven-3.6.3/maven-settings</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-settings-builder@3.6.3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven</group>
      <name>maven-settings-builder</name>
      <version>3.6.3</version>
      <description>The effective settings builder, with inheritance and password decryption.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">ed6418ee483bd6215770362f68c133d5</hash>
        <hash alg="SHA-1">756d46810b8cc7b2b98585ccc787854cdfde7fd9</hash>
        <hash alg="SHA-256">ba611bdc73b691a73b704443bcd7606f625f06cb79588968e101271acbfa0b15</hash>
        <hash alg="SHA-512">f9f9f538a409d7cf2bd2517854f2d6aa45e0476865f217a11832f042ec361c67998241065540c3269d3db3915c903b15b6e4fb57af9623b192f9d8089110ecbc</hash>
        <hash alg="SHA-384">17de0c4b32cb3a748e37e687e06003157f474c9f6ffff2d23b1e7a0844aed47202a4b39d305d3f484dd8d4efbcddea3a</hash>
        <hash alg="SHA3-384">b717ba2300f62de48be92ef8db5381861c7fc4f1d33c3d02cc144e0628eae01ed7c0f851277ace6d4e3d98a6431c75cf</hash>
        <hash alg="SHA3-256">75dc9283cd3e53b7d3e3486e4c310cc08efe62083c011e6409b023156d1fde59</hash>
        <hash alg="SHA3-512">0b194fd91864af46cd2ba71eb020401fe2b253ac74337e8a0211fa83b53317ba9ef565d4d04e4b5a09bc8983614a43c6f00aa92ec6e7d32a696fe524b3e87c02</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven/maven-settings-builder@3.6.3?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://maven.apache.org/ref/3.6.3/maven-settings-builder/</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/job/maven-box/job/maven/</url>
        </reference>
        <reference type="distribution">
          <url>https://maven.apache.org/download.html</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/MNG</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?users@maven.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/maven/tree/maven-3.6.3/maven-settings-builder</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.codehaus.plexus/plexus-interpolation@1.25?type=jar">
      <publisher>Codehaus Plexus</publisher>
      <group>org.codehaus.plexus</group>
      <name>plexus-interpolation</name>
      <version>1.25</version>
      <description>The Plexus project provides a full software stack for creating and executing software projects.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">86cc99a26f3b3caa0fc2c8c77f4c03b0</hash>
        <hash alg="SHA-1">3b37b3335e6a97e11e690bbdc22ade1a5deb74d6</hash>
        <hash alg="SHA-256">e003802501574637f7abdc4e83e6d509a31e9ff825d12da6d1e419acf9688705</hash>
        <hash alg="SHA-512">fb647c1f159d17e16ae925bb407585e4a4b30c468518e60d3069ea4a75fa0f7122e789923534632125b22b7cef1cb44caf00700bba90282360f7c76e086b6699</hash>
        <hash alg="SHA-384">1cd22e786470775e38c3d2a3fee6fe9d7115199e66052ba0eb8c83d5abe04b74ea108ea413c749329a33ff01013205ce</hash>
        <hash alg="SHA3-384">7678d59689e8f479b259c06a52262a1deec374549e556dd3a4639ebb43d7a9ebb08505c357a7b9fdfdb8b31883c8a72c</hash>
        <hash alg="SHA3-256">815c0f95994eb8c9e7552ee389a3928da5661d472bbc2d567a85ae951ded2c32</hash>
        <hash alg="SHA3-512">e98ae04f2d4bf87eb5576af3582084e5cb4236ac91537c6ad22d174a9018dfc3e85f56c371352ded371201458f0a3cda26431b8aecae8b8bddcbcb26179c0d43</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.codehaus.plexus/plexus-interpolation@1.25?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://codehaus-plexus.github.io/plexus-interpolation/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/codehaus-plexus/plexus-interpolation/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>http://archive.plexus.codehaus.org/user</url>
        </reference>
        <reference type="vcs">
          <url>http://github.com/codehaus-plexus/plexus-interpolation/tree/plexus-interpolation-1.25/</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.sonatype.plexus/plexus-sec-dispatcher@1.4?type=jar">
      <group>org.sonatype.plexus</group>
      <name>plexus-sec-dispatcher</name>
      <version>1.4</version>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">0a46e5bc9bc2fbd3b68091066aff2737</hash>
        <hash alg="SHA-1">43fde524e9b94c883727a9fddb8669181b890ea7</hash>
        <hash alg="SHA-256">da73e32b58132e64daf12269fd9d011c0b303f234840f179908725a632b6b57c</hash>
        <hash alg="SHA-512">5b947edcb05a1c17648ec9fe53dd2c66b4a86dd2b950d989255f6edd636fd5d50d18b8f31b3a1736dadd9cff6790a3d0355f2ed896c3eb7f72e009199fe9957d</hash>
        <hash alg="SHA-384">8d6e72c364a12016aaa2ad1ae7dda8a83af32f47576696eff4fe1d3d7a8142f182beb71d65f9ca668ff38b470d40dd3f</hash>
        <hash alg="SHA3-384">76b890cebb7ddc14dae8854178b79b064d984df35cc65354ecbf97fa869d83c4d6e9093cbf317d1575855a638fc3ba56</hash>
        <hash alg="SHA3-256">64a7cf888dbe8bb7d89cfed8089b1db4f63f88526f39d2463b23caa93a609158</hash>
        <hash alg="SHA3-512">194de7b0bdd4954ebae7982b8d91365864abfb86f16188880393089fa26122e9bc872c3181c4324b933b9faee90b7149140b97e72c552577e6c3447b06601f06</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.sonatype.plexus/plexus-sec-dispatcher@1.4?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://spice.sonatype.org/plexus-sec-dispatcher</url>
        </reference>
        <reference type="build-system">
          <url>https://grid.sonatype.org/ci/view/Spice/</url>
        </reference>
        <reference type="distribution-intake">
          <url>http://repository.sonatype.org/content/repositories/releases</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.sonatype.org/browse/SPICE</url>
        </reference>
        <reference type="vcs">
          <url>http://svn.sonatype.org/spice/tags/plexus-sec-dispatcher-1.4</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.sonatype.plexus/plexus-cipher@1.4?type=jar">
      <group>org.sonatype.plexus</group>
      <name>plexus-cipher</name>
      <version>1.4</version>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">7b2d6fcf0d5800d5b1ce09d98d98dcaf</hash>
        <hash alg="SHA-1">50ade46f23bb38cd984b4ec560c46223432aac38</hash>
        <hash alg="SHA-256">5a15fdba22669e0fdd06e10dcce6320879e1f7398fbc910cd0677b50672a78c4</hash>
        <hash alg="SHA-512">deb948be3a9f6a2fa74adca17e54b1074948267b3a35dd4000d92c559d0387650770ccee096ad8f01dd51c36caf63878dc0bcf57dfb1f2e3e1a9d51204096617</hash>
        <hash alg="SHA-384">29d6722d6d4c412a98ed95f1fd6620047b22ce8d7e3160bcc49ca616a016b57be0c4d35daa8896ef93a80bcff77725ec</hash>
        <hash alg="SHA3-384">2f27b64dcb2dcc7b16eb24487c67363a2977d4d695b97ebea829b7301c444e07cbf8a8b0471332c81b3d3ee393388834</hash>
        <hash alg="SHA3-256">ef83ecf09c7bda0c412b6acdf558171f4f5f1065a68359916ecffcbea8e3475d</hash>
        <hash alg="SHA3-512">1a8b406ab9d63cb3af63e56a09bbde88e404041a1b70c68487c1c0009c24d042cea9ee2325ad99c0aee845ec61ff17a69ae14843f08de2f5af90cd5bb617e34c</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.sonatype.plexus/plexus-cipher@1.4?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://spice.sonatype.org/plexus-cipher</url>
        </reference>
        <reference type="build-system">
          <url>https://grid.sonatype.org/ci/view/Spice/</url>
        </reference>
        <reference type="distribution-intake">
          <url>http://repository.sonatype.org/content/repositories/releases</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.sonatype.org/browse/SPICE</url>
        </reference>
        <reference type="vcs">
          <url>http://svn.sonatype.org/spice/tags/plexus-cipher-1.4</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven.plugin-tools/maven-plugin-annotations@3.15.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven.plugin-tools</group>
      <name>maven-plugin-annotations</name>
      <version>3.15.1</version>
      <description>Java annotations to use in Mojos</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">0723da1364961f527fbfce10c8b9c7dd</hash>
        <hash alg="SHA-1">ca287d08819d5d87f3a06b8f065a79eb33c3ecc3</hash>
        <hash alg="SHA-256">b58bcb3a1f362f6e1efa2772064026bb3d4ad92e6f43a1812d8d2886489912f5</hash>
        <hash alg="SHA-512">c02b9fc1d3892a83bae6aa12d929b2dd49b401f3b39784e0a6ce4b9eef14e5a8b3bf7a9112a8589863c780662c18b8da9efdd01862a12d1c5e02a7b25e9a7242</hash>
        <hash alg="SHA-384">ca1bbef5ee6d2b0a7d75b2fcd4432cf633daf9e347962da5373e67324faad36130bea043e6138f699ef2d1fe226dec35</hash>
        <hash alg="SHA3-384">c3627450180431dc53d77d9a33254e911681332fc60f6c37f9947010a80722c4fdc6c4e64a187a100a71233cc7478db9</hash>
        <hash alg="SHA3-256">425c68faacc75830233a9f74190fed3975ecb390d23dd3eb39c7654dd75a5aa7</hash>
        <hash alg="SHA3-512">742d7cb5f2eb07e638491fdd3ccd4aeb40d1208693e411196c54b5ebd9566e4b24a6156e34ce669c59f846ca2eca87ac9565062380e469d0f0dc6229e85d8bed</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven.plugin-tools/maven-plugin-annotations@3.15.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://maven.apache.org/plugin-tools/maven-plugin-annotations</url>
        </reference>
        <reference type="build-system">
          <url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-plugin-tools/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/MPLUGIN</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?users@maven.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/maven-plugin-tools/tree/maven-plugin-tools-3.15.1/maven-plugin-annotations</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/javax.inject/javax.inject@1?type=jar">
      <group>javax.inject</group>
      <name>javax.inject</name>
      <version>1</version>
      <description>The javax.inject API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">289075e48b909e9e74e6c915b3631d2e</hash>
        <hash alg="SHA-1">6975da39a7040257bd51d21a231b76c915872d38</hash>
        <hash alg="SHA-256">91c77044a50c481636c32d916fd89c9118a72195390452c81065080f957de7ff</hash>
        <hash alg="SHA-512">e126b7ccf3e42fd1984a0beef1004a7269a337c202e59e04e8e2af714280d2f2d8d2ba5e6f59481b8dcd34aaf35c966a688d0b48ec7e96f102c274dc0d3b381e</hash>
        <hash alg="SHA-384">ac04c9f03ccbe35a25deb8b50280a0ca01dbe6aff0dd795d55af6112bfe3cd5817eb82f32fb18378d86cd64b07597190</hash>
        <hash alg="SHA3-384">fca090ecb1edeacb9fe865dc515cd1d109b323cd742d4a9733ff199a96ee96e0db4f924079520b9c189ef750f255475d</hash>
        <hash alg="SHA3-256">5b0054e39e522de0e0ffc4034d12f72270291fb24d94d5ffc9c4d69c25035fc6</hash>
        <hash alg="SHA3-512">fb290f5a70b1efc1dff12f40a0b2d7b94019f66da42e78010c0b8e61f222c4f267b67e356a9e9c346eb801e5515e36243888f280c5cb95c2dd69016a30cadeb9</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/javax.inject/javax.inject@1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://code.google.com/p/atinject/</url>
        </reference>
        <reference type="vcs">
          <url>http://code.google.com/p/atinject/source/checkout</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven.reporting/maven-reporting-api@4.0.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven.reporting</group>
      <name>maven-reporting-api</name>
      <version>4.0.0</version>
      <description>API to manage report generation.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">9c49fcb81d69bb5ec513d624c181fc05</hash>
        <hash alg="SHA-1">d3ad7e3d03463b5bd77e7d3ce94539cc723c8dfb</hash>
        <hash alg="SHA-256">cb2cbde3c9c7288f7398a250dcf3c90cf92714cff301f22b298e1091b5def33c</hash>
        <hash alg="SHA-512">5a76ac4d7d9bbd2c834bfa16062bbf9523588e4ace9badfd2820b5cc5b7efbd1aa148479e4aa1a0f94347fa9ab7fd1ab6e9055d35b6f9c49161aa6a9c2ba6bc0</hash>
        <hash alg="SHA-384">a839758279aff4fa8da0e4c5970281791ce296772f4178f1c1a07215f701f8eb1a4f54bf73a4eac15a8f6524a35ce1b0</hash>
        <hash alg="SHA3-384">9bbd0b95e2ca51e8dafcaa64bdaa40630b2847d6867ce5318829d30121580438df1cb552b848617f2a9393c7dbf4dcca</hash>
        <hash alg="SHA3-256">037b404b0c94d26f5d24003235b26d11609aed2c744dd42356ac39de5abdfd05</hash>
        <hash alg="SHA3-512">b2ba70061d190f29a2f6c40c14804b75355740a01f5a86e7af39a3da475f23eecb78dbb1ffc437121d849f0adbb4acf7224fe75e634dbff29dc83640367f5f75</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven.reporting/maven-reporting-api@4.0.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://maven.apache.org/shared/maven-reporting-api/</url>
        </reference>
        <reference type="build-system">
          <url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-reporting-api/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/issues/?jql=project%20%3D%20MSHARED%20AND%20component%20%3D%20maven-reporting-api</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?users@maven.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/maven-reporting-api/tree/maven-reporting-api-4.0.0</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven.reporting/maven-reporting-impl@4.0.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven.reporting</group>
      <name>maven-reporting-impl</name>
      <version>4.0.0</version>
      <description>Abstract classes to manage report generation.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">302ed7d914dc813380d361d1acb83c2f</hash>
        <hash alg="SHA-1">d3753b5c13a873a5ddb71f404c6fe1179a4688c2</hash>
        <hash alg="SHA-256">e9e70fdb26ff8b1f15435e3a68866a25c85b1694007e0fbdfe84e48e946fe463</hash>
        <hash alg="SHA-512">ba9375f585e019dd617570f1b1e9e0d9c5f892bc50cef901b62bb77af5251f33187d72768ecc1e6b75aaa8701cbf7917d1d9fb341059a1a73abc700cccb86cf6</hash>
        <hash alg="SHA-384">61415b631b105f16898ee7e88f49cffb6f58440b91115743e3938c8c0cfbedb176b90a6913242f7d084e850c996d0b26</hash>
        <hash alg="SHA3-384">9432022ecc13aaa5363b61272a60117219f4e62b391022028edb3669880570cf2fa89fa01b16c51785dcb2928081f862</hash>
        <hash alg="SHA3-256">973658f5634db80ba5479ba47092477622328551d8cb3ea8eec876e414ec1e9d</hash>
        <hash alg="SHA3-512">6fcbba982ab9a982f226fa63d9d769340b6d1dc406e33fae8657867f1f948f7f3521ac5447de932aaae246fc8983fad4c7899dab04fc4e4168be70a2597d7b21</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven.reporting/maven-reporting-impl@4.0.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://maven.apache.org/shared/maven-reporting-impl/</url>
        </reference>
        <reference type="build-system">
          <url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-reporting-impl/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/issues/?jql=project%20%3D%20MSHARED%20AND%20component%20in%20(maven-reporting-impl)</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?users@maven.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/maven-reporting-impl/tree/maven-reporting-impl-4.0.0</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven.doxia/doxia-site-model@2.0.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven.doxia</group>
      <name>doxia-site-model</name>
      <version>2.0.0</version>
      <description>The Site Model handles the descriptor for sites, also known as site.xml.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">4da689094c6e4a2d6457d21ce959ac42</hash>
        <hash alg="SHA-1">6a43c5b58b9acbf789618efdda23d5cb9fb0981f</hash>
        <hash alg="SHA-256">f6ec9ef75a41d1b826e5ecf02d92c5de90a6bc70ea93d5340988703223bf2205</hash>
        <hash alg="SHA-512">cbc57a27b6aee02de03e5736e753174c85ab9ca484e3ecf29f14d0e5414bae6c7d8d85746dc0be36e69a465f646e3414b4d42cfe0afe5ec84696c7183dce44fb</hash>
        <hash alg="SHA-384">5792b264ac5100c74ee032f0cd17d6e206de13c0edc9fdcfaac15720f6cb1257398fdcadfc9e4dc82974d45fc5846122</hash>
        <hash alg="SHA3-384">428cf97b0c580abb9585a1c0944f247e7b06f67e91a9dcd5a806980a18f6efb93433e5e0c736ea6ed7290d1a4dacd9f5</hash>
        <hash alg="SHA3-256">93838a46d4982cb621cb9cbf9937efd9eee1ea3e66e3ae38c2e6f5b9c6485e28</hash>
        <hash alg="SHA3-512">3c1f1ecdf57031a6e52f945d6d83578ad6ef718799c27344848a28612498b4e657b761f9254c27ef155d04a282f1b64fa966e95f14509b7f929e3e9ee502c5f1</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven.doxia/doxia-site-model@2.0.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://maven.apache.org/doxia/doxia-sitetools/doxia-site-model/</url>
        </reference>
        <reference type="build-system">
          <url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-doxia-sitetools/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/DOXIASITETOOLS</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?users@maven.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/maven-doxia-sitetools/tree/doxia-sitetools-2.0.0/doxia-site-model</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven.doxia/doxia-integration-tools@2.0.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven.doxia</group>
      <name>doxia-integration-tools</name>
      <version>2.0.0</version>
      <description>A collection of tools to help the integration of Doxia Sitetools in Maven plugins.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">b8e18118b11a20e0ddc66b235989682e</hash>
        <hash alg="SHA-1">ce08d289ed826416983860fb2adced6dd7ade550</hash>
        <hash alg="SHA-256">4aee72f9b30b507964c2f52b63f70e7b41fb9d957359cb5dc13c428abb4b6189</hash>
        <hash alg="SHA-512">f1283e59206ef36d30b461a3acd492e0293ef43408e3836b383cef2008dec2c67855bd834477dc6c570948eb23c0563513ea1e77ed70c4fe740cf497b5aedf7f</hash>
        <hash alg="SHA-384">571f23ff6805482534a2900ea0d31f60990e66a23ca84c7c1277dd7e835a6c366444758b74449c06f34e417e6f023b97</hash>
        <hash alg="SHA3-384">be39da056d82de338c6e162b4ddb394fe5403c191940705b1432a6e63e4fd471bb62287f67b944f294b3b51d0ce5949b</hash>
        <hash alg="SHA3-256">b23f619e2527c6cb933a128e5a46ece0ab7425b731b80499879216e691f34c02</hash>
        <hash alg="SHA3-512">a5546b3480e2427fdf78cd0329f6824d679391873dcac4b1a2a1f7d4e0a097a8161e49266803531c99b366c5f50be6969395ab1c40f53e3265799ae1f6f73937</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven.doxia/doxia-integration-tools@2.0.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://maven.apache.org/doxia/doxia-sitetools/doxia-integration-tools/</url>
        </reference>
        <reference type="build-system">
          <url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-doxia-sitetools/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/DOXIASITETOOLS</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?users@maven.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/maven-doxia-sitetools/tree/doxia-sitetools-2.0.0/doxia-integration-tools</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.codehaus.plexus/plexus-i18n@1.0-beta-10?type=jar">
      <publisher>Codehaus</publisher>
      <group>org.codehaus.plexus</group>
      <name>plexus-i18n</name>
      <version>1.0-beta-10</version>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">7f36c0459c853750c627f682ec7bcf52</hash>
        <hash alg="SHA-1">27506f59e54cc80b8c28b977c2bcd0478094e0cc</hash>
        <hash alg="SHA-256">b87f25b512ffafcafbf4a05ab943812e9c6915291370c6b46016eb3836886c41</hash>
        <hash alg="SHA-512">c06555d10b1f1e66ddb93f3f5045de305b3e7b04f761a9d1956e2aba32d9d7541affc2f2281eae2be48b32d233da08da9f905153c6a0804de98d55b2d3025fae</hash>
        <hash alg="SHA-384">5e2a8327bb2d682e2e8aa69526006d831bda94eaee64b20174b7de88bd476b461be35564f274b4255546609578ecf0f8</hash>
        <hash alg="SHA3-384">c82cafd0a29d74b46d50b1dfd5995dc9a1730595795d603e1608dce98d912a5efed8e26237f27fe6c81bd4d4d0525e56</hash>
        <hash alg="SHA3-256">adacb3d925b0861d579905082a13fd6a2798d33498854ec4293b2a70b2abce02</hash>
        <hash alg="SHA3-512">0a91213ad27ba30f7f9d6586682016d812b73aac213e4084db5bf194d24aab32ca2c38d1c5ee8c5810b39aaacb23528e500da05d579d3aaaf5acff3f41a7668b</hash>
      </hashes>
      <purl>pkg:maven/org.codehaus.plexus/plexus-i18n@1.0-beta-10?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://plexus.codehaus.org/plexus-components/plexus-i18n</url>
        </reference>
        <reference type="distribution-intake">
          <url>dav:https://dav.codehaus.org/repository/plexus</url>
        </reference>
        <reference type="issue-tracker">
          <url>http://jira.codehaus.org/browse/PLX</url>
        </reference>
        <reference type="mailing-list">
          <url>http://archive.plexus.codehaus.org/user</url>
        </reference>
        <reference type="vcs">
          <url>http://fisheye.codehaus.org/browse/plexus/plexus-components/tags/plexus-i18n-1.0-beta-10</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven.doxia/doxia-site-renderer@2.0.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven.doxia</group>
      <name>doxia-site-renderer</name>
      <version>2.0.0</version>
      <description>The Site Renderer handles the rendering of sites, merging site model with document content.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">0af057ade4d5bc3b41a06cf1100bbd93</hash>
        <hash alg="SHA-1">b68214ec1d3250a4594f598f054977d961e66ac8</hash>
        <hash alg="SHA-256">6cdee370194f4b9f742d12ef46528042f480d9bdf3de832de2792e1ae9ffc68d</hash>
        <hash alg="SHA-512">fbd9b5c101c908cfa1a1152d86bd85b34aeab040af2031eed82e40391f2a1f8672665c29e798d9eb0ffc8bbd8daf7d5650ac5498c4674d45e3a2136497bd039d</hash>
        <hash alg="SHA-384">3f0a3411760b923e905272ffef3acdcb521823509c854d676392748b1610b2aff000c1ddac0e06b20839d5f509d113ca</hash>
        <hash alg="SHA3-384">0f0ac53a476af63dea74bee5704aafa778bffec18bd83c09d74c475d9f6f77170b22281bc82726115fd466f6615d1094</hash>
        <hash alg="SHA3-256">1c8dfaf0807068d1c3fca0e0b819ffef373c0dd7f7644d59a133929ab3dbef33</hash>
        <hash alg="SHA3-512">59bcc9793a679d2d23698a2ee066e15529e1c5c78b32c55e69af6bac4c3fca6bf3431cc9be19eaea73ac05c204ed784cfa36f79e34579d29d071cbc3e2b5c18f</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven.doxia/doxia-site-renderer@2.0.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://maven.apache.org/doxia/doxia-sitetools/doxia-site-renderer/</url>
        </reference>
        <reference type="build-system">
          <url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-doxia-sitetools/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/DOXIASITETOOLS</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?users@maven.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/maven-doxia-sitetools/tree/doxia-sitetools-2.0.0/doxia-site-renderer</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven.doxia/doxia-skin-model@2.0.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven.doxia</group>
      <name>doxia-skin-model</name>
      <version>2.0.0</version>
      <description>The Skin Model defines metadata for Doxia Sitetools skins.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">9daee5a484a8a9cb32b2fe6cfea42531</hash>
        <hash alg="SHA-1">86913a4d7f1acbf26d426c97adecb18e21938ebf</hash>
        <hash alg="SHA-256">3ced0d90353f49e8eb1458f54664b93ec117d79b9789a576da41e2f6f99723e0</hash>
        <hash alg="SHA-512">c2c7b6b284566175ab474cc65d3cae4e788e0443a0002d8987879e85f1c0a34a05cd02c4ebac0ddffa616d927d6879bfa962ee765bd26e0c96acfe5b888d574f</hash>
        <hash alg="SHA-384">75878eed8636aa36bed4c9d94749d7366fb37fd6f85a733d69b61a42693334e0777500bd0d1dc3743be20eb043ba6bc9</hash>
        <hash alg="SHA3-384">426009912e94a4701e8b5f60b050baee2df2308568b1e9a41cf116b5302e4a459aa4a27d960268fede81f096438ea826</hash>
        <hash alg="SHA3-256">7f32e9ee1107485d9d5132d96858693fdebd92a477902cf79f61677f9802cdd6</hash>
        <hash alg="SHA3-512">64aaadacb6f783cb666753f52e24c51c8c5e1cf7c58330f774eb30adc9160ea1a77853070c4e59a0c9e2fde97f589cddb361a82f756a0435a97c5cbaabea9554</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven.doxia/doxia-skin-model@2.0.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://maven.apache.org/doxia/doxia-sitetools/doxia-skin-model/</url>
        </reference>
        <reference type="build-system">
          <url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-doxia-sitetools/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/DOXIASITETOOLS</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?users@maven.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/maven-doxia-sitetools/tree/doxia-sitetools-2.0.0/doxia-skin-model</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven.doxia/doxia-module-xhtml5@2.0.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven.doxia</group>
      <name>doxia-module-xhtml5</name>
      <version>2.0.0</version>
      <description>A Doxia module for Xhtml5 source documents.
    Xhtml5 format is supported both as source and target formats.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">2369dd687d9b13d115157299d09ca7d4</hash>
        <hash alg="SHA-1">15fbcfe42e0a50eb33adbc061c9b4db84ec0470e</hash>
        <hash alg="SHA-256">c91557679a0eb9fde3175055628ceb7b8fd5ab6d308340770d236fb06265dc26</hash>
        <hash alg="SHA-512">9a6e7cdbbd4cac4f7f275ae4668a61fee7610b1aa4cc1277c17c01b6e28c2e12e82403404d839a727b9aaf08d5c33328c95772e18e3416a5dbdda7bad5a8a13b</hash>
        <hash alg="SHA-384">11eb926fb6bf0c57d461bb890488c800a374857bea22e6543f2b82273a23fe66ed2f9c6115f1ac7a9169f71160cc76d7</hash>
        <hash alg="SHA3-384">e1b87e1d963f0191797308fd9a1a7b3d99d21cc218a7e8adabc422aec5b37760c8f232638aac4b4d2040992ad2ac6809</hash>
        <hash alg="SHA3-256">65d5775f67a3b4ac04506c0f03f34d7fca0bfcb57fc2f2ffc5b5d609c458a8f1</hash>
        <hash alg="SHA3-512">91102caa2091dc1a033bc2d1cd768998093f124bb4b49f8e526fdb9d99f77a0d4eb055d9a1d728ee3733ad350cb447b6d88f38c08f44ee4886689026ef4636cc</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven.doxia/doxia-module-xhtml5@2.0.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://maven.apache.org/doxia/doxia/doxia-modules/doxia-module-xhtml5/</url>
        </reference>
        <reference type="build-system">
          <url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-doxia/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/DOXIA</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?users@maven.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/maven-doxia/tree/doxia-2.0.0/doxia-modules/doxia-module-xhtml5</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven.doxia/doxia-module-apt@2.0.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven.doxia</group>
      <name>doxia-module-apt</name>
      <version>2.0.0</version>
      <description>A Doxia module for Almost Plain Text source documents.
    APT format is supported both as source and target formats.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">f6613830c1f558b909b32d3e3e271911</hash>
        <hash alg="SHA-1">0505b4e8d57eb3f8c3d66adcca85ce09311742ba</hash>
        <hash alg="SHA-256">f4a846c448ca85358279184a310f6ee3f46fa39688f74a72961c1bfe222f28a6</hash>
        <hash alg="SHA-512">97bbf8b640a29efd19693e09403bda9b1ab0c5b78fd3ea1e383b57d61be8d8fc112a2d2098fee1bf8b84b5b23c52bca1f820245274fb959c74e2c5ff66435705</hash>
        <hash alg="SHA-384">cb4781e22a3c1f17c7cd630c38a704d5cf7289dcbbd90667ae63eaacd925a93d22678e700a6ab0a59f03757a823a05ba</hash>
        <hash alg="SHA3-384">36ba428bde2da90c56f47a39e2bfe6ae2a3f21bf4244f6e77758e433ab355eb8a2ab7f59ee66d212b6d00aeaacc3df8a</hash>
        <hash alg="SHA3-256">aa461bef4ef9be4357f26c06233e5352293067a6e4146891e68660bf73757c2a</hash>
        <hash alg="SHA3-512">8f45c3d4a73a0d943ab7c86e106e38c44fa8435035ae44e007bbb5162f8699588e0828ef300d52bc5ea8ffd3e9379fea68617f7655467f4f09fc65857d49acb5</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven.doxia/doxia-module-apt@2.0.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://maven.apache.org/doxia/doxia/doxia-modules/doxia-module-apt/</url>
        </reference>
        <reference type="build-system">
          <url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-doxia/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/DOXIA</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?users@maven.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/maven-doxia/tree/doxia-2.0.0/doxia-modules/doxia-module-apt</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven.doxia/doxia-module-xdoc@2.0.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven.doxia</group>
      <name>doxia-module-xdoc</name>
      <version>2.0.0</version>
      <description>A Doxia module for Xdoc source documents.
    Xdoc format is supported both as source and target formats.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">dd12065dc641017da7006cb39f0490e5</hash>
        <hash alg="SHA-1">fe3a51c0226cb7cdfdcc97b73681f6ee80fad72c</hash>
        <hash alg="SHA-256">7956aca14f8adbc48bac86b218701dd44cc990063a69edbfca363b105994a474</hash>
        <hash alg="SHA-512">34d0ff9cf1de22f57764fb3fc5212794393faf97d7f25a2aeb459cdc3768dd8a9d7ba1a722ab8856a9e9cfae8d0f6155d069275028f6d7e064ca1cee909e283e</hash>
        <hash alg="SHA-384">f42887fa6cfe11eadef20b1de3445c7985764cee1524768044e7cd9b5359a3d252e852099130715a12bc51255bcc92de</hash>
        <hash alg="SHA3-384">5d6da0a4ac898aa36b259a78998d3033ed37341471b6e811e722b5341ced7b5ad02542b4d9f72877640305a3a471c55c</hash>
        <hash alg="SHA3-256">0708739dbfcc78dea964478de746aed9dacba22c29de850802756867568b0d91</hash>
        <hash alg="SHA3-512">535580ea82e12ece01b4f913bb9055af2e726188af5e948831fe34dd35bc4186515168220d9ddcd865a334e3f6da65cb8782be278a5f4dc5eb9afee6a31e0a90</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven.doxia/doxia-module-xdoc@2.0.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://maven.apache.org/doxia/doxia/doxia-modules/doxia-module-xdoc/</url>
        </reference>
        <reference type="build-system">
          <url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-doxia/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/DOXIA</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?users@maven.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/maven-doxia/tree/doxia-2.0.0/doxia-modules/doxia-module-xdoc</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-archiver@3.6.2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven</group>
      <name>maven-archiver</name>
      <version>3.6.2</version>
      <description>Provides utility methods for creating JARs and other archive files from a Maven project.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">742b3136d8ff1fcb66f5fd7f3c267c8d</hash>
        <hash alg="SHA-1">a2d949d87fed6db197cc3cceec93012dd2317ca0</hash>
        <hash alg="SHA-256">1f895a587df4844d9b7565e8e9a6352afe1d55532458a0dbeb746bc1d02e9216</hash>
        <hash alg="SHA-512">352f7af9cff067f4a4e959dd9d450f5eae6cb5dd6ac37c11813f11f83cec0b31143f0f6f30860403aedb9f6bd03c7d7a7fea322ee9b283b5c3a053673177133c</hash>
        <hash alg="SHA-384">f4d5965d5713ed15449677d971777fba4dcff34109cb3d573af8d9a307675a57cf7cf41b31ea6de543f72743c6ed8ecc</hash>
        <hash alg="SHA3-384">e05e2c8955181adea2bf8e0fa2e1ad413183b1c905d9ccf0cfee0efdbebc2a04735d8ef53f46e289961d5961976ed5f1</hash>
        <hash alg="SHA3-256">6c43e3a38137addaab770d33d9fb26f75c09b0f8659128f62a122d4364084b74</hash>
        <hash alg="SHA3-512">d91d9158d349d816d14ac81ec6adf98c4394d7f36da17d275e2bf882ac67d8e052a3085960e5e8d02123192ee3fefc52537f19ede8ead73e9691f0e4a17a02ba</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven/maven-archiver@3.6.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://maven.apache.org/shared/maven-archiver/</url>
        </reference>
        <reference type="build-system">
          <url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-archiver/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/issues/?jql=project%3DMSHARED+AND+component%3Dmaven-archiver</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?users@maven.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/maven-archiver/tree/maven-archiver-3.6.2</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven.shared/maven-filtering@3.4.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven.shared</group>
      <name>maven-filtering</name>
      <version>3.4.0</version>
      <description>A component to assist in filtering of resource files with properties from a Maven project.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">480b3bd5dccfc6a3e05cc4f2af3401bc</hash>
        <hash alg="SHA-1">3f0659f3e7c2734e8e8eb5e5dedc9b1f3de8b753</hash>
        <hash alg="SHA-256">ff04a5297c69d95f6face0af8934d6ee7bf1389dec50648bdd5e8569fb9d8e26</hash>
        <hash alg="SHA-512">000b368fb95d639efe3adf8121408c09eda9856a5083c513a1df37fd81e359ceeae767e63349112a41a0e11c592a3cb4b4206af0a739f61c494a445420267841</hash>
        <hash alg="SHA-384">b27e50d35215bcfdd6b2b40e96c62a2db3f10abfa3ee54b08333571564501e14f442d3193fcbdef672f0fdebe169a936</hash>
        <hash alg="SHA3-384">de9502a877d008918e82ce82fd30c3498fd2bac8401a43c851b8538356fe4412693416d4c123c70c092be3cf7eb2f2a1</hash>
        <hash alg="SHA3-256">2b70d12ba2570b4da7248e6a95abf7b5382a528fa27c9d7c7857209b26a85c9d</hash>
        <hash alg="SHA3-512">4ae5fa856ddb72c8acfb67c73c17104b6f25767e160712239a340881d2aa57d87421a1b33a54b9490f2a03989d1746fd08ac731f7b32e0187cfc9ed7ac322c1e</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven.shared/maven-filtering@3.4.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://maven.apache.org/shared/maven-filtering/</url>
        </reference>
        <reference type="build-system">
          <url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-filtering/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/issues/?jql=project%20%3D%20MSHARED%20AND%20component%20%3D%20maven-filtering</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?users@maven.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/maven-filtering/tree/maven-filtering-3.4.0</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.sonatype.plexus/plexus-build-api@0.0.7?type=jar">
      <group>org.sonatype.plexus</group>
      <name>plexus-build-api</name>
      <version>0.0.7</version>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">49f0f8c6bdf2687e358870a4fc1559c6</hash>
        <hash alg="SHA-1">e6ba5cd4bfd8de00235af936e7f63eb24ed436e6</hash>
        <hash alg="SHA-256">934171640fbd3d2495c50b79b0d9adb11e2c83e65bad157df8fe34bcac0ff798</hash>
        <hash alg="SHA-512">e073d367ce5edaf6dfcbf6d1ec9f544082d4536aec8a84b060d24625c0d8ff1facf90529843f9bf4383ef43aa5cd3d0e143f473dffa6da7fd910f1d2e3872ec7</hash>
        <hash alg="SHA-384">2e6c177e34d0bb3fd05ea8f635f01a6b01afd28113f214392cae8f6bdc73715ee1dbfa4d1525f42321f8a8dd05db9191</hash>
        <hash alg="SHA3-384">fe41dea9191319334edb863c438ffe78b19c5f2669a653058d7d4fe5527d7e66a7f382f806ff12fcb09c3f468542e870</hash>
        <hash alg="SHA3-256">530e25ed3a34ee1d1aacda1a935608e70ef6494bb931fee33eb7366df2d85642</hash>
        <hash alg="SHA3-512">9f1b45445d930a9833436b57baeda25522f0151be0b2f2a27ef1c1dcc8f6ccc5f1168fe40ea91f1e3ac1d98308b3dd1da3c7b49a90cb75eb6a924534545435a5</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.sonatype.plexus/plexus-build-api@0.0.7?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://forge.sonatype.com/spice-parent/plexus-build-api/</url>
        </reference>
        <reference type="build-system">
          <url>https://grid.sonatype.org/ci/view/Spice/</url>
        </reference>
        <reference type="distribution-intake">
          <url>http://repository.sonatype.org:8081/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.sonatype.org/browse/SPICE</url>
        </reference>
        <reference type="vcs">
          <url>http://svn.sonatype.org/spice/tags/plexus-build-api-0.0.7</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.9.0.M3?type=jar">
      <publisher>The Eclipse Foundation</publisher>
      <group>org.eclipse.sisu</group>
      <name>org.eclipse.sisu.plexus</name>
      <version>0.9.0.M3</version>
      <description>Plexus-JSR330 adapter; adds Plexus support to the Sisu-Inject container</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">964e7bc9837b270566f18b87af65f5d7</hash>
        <hash alg="SHA-1">b493c7abcc6e04fa0a6a20d489a3db0395c76f70</hash>
        <hash alg="SHA-256">c99674d3773e26154885661711f0b6d63aa5008f5cc99227a236756d4ad9de5e</hash>
        <hash alg="SHA-512">68c5df01ad522917d954b62cb3b11376b3446920e8d5cb35737de508e6acd91a36b34144933f427bbe1d29dca9097ba9dd2431c713fe18069f271a80b519f051</hash>
        <hash alg="SHA-384">bd39a6cc9c18c62e64393da231b61efbf5bdeb8c0306e455bbc6e33f4b614e14023ccfbec83c943994da6684ab453092</hash>
        <hash alg="SHA3-384">aa3ca83152de61ee92ba94f655190b61aa25520db903489656485a56aa9314a453a91284c0fb377dffb8160580a610c2</hash>
        <hash alg="SHA3-256">434081d9dbbd4ffedafa88010d4db9a699fd2bc736e8b12b3bf3cede21f30aa9</hash>
        <hash alg="SHA3-512">86e4c864bdfcbcb7d58ac08d80b2c1406cadf10424c92889d1cb181f924af19b28d53210f77cb2b0515faa7ac6fff2dacd25ae1b62c419a798bdfd2a9f3108ae</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.9.0.M3?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://www.eclipse.org/sisu/org.eclipse.sisu.plexus/</url>
        </reference>
        <reference type="build-system">
          <url>https://ci.eclipse.org/sisu/job/sisu.inject/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse/sisu.inject/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>http://dev.eclipse.org/mhonarc/lists/sisu-dev/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse/sisu.inject/org.eclipse.sisu.plexus</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.codehaus.plexus/plexus-mail-sender-api@1.0-alpha-7?type=jar">
      <publisher>Codehaus</publisher>
      <group>org.codehaus.plexus</group>
      <name>plexus-mail-sender-api</name>
      <version>1.0-alpha-7</version>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">f09f95369932671b37c6edb91f39170c</hash>
        <hash alg="SHA-1">8b46e4a564fe4a52abc2c3f212769d80a2fb4967</hash>
        <hash alg="SHA-256">ad9a7242d36b09ec16f2e0c602f4baddbd19f84ada8d2786ac48b86f0b93322b</hash>
        <hash alg="SHA-512">8bbf6f56f40455043ca2d55a5102f4b5a2d7d08aafe95bb4c45e1294bd63683996c303b4ace112b81dc7ce97977417a6baea58a7728903b41ca3df0aa71a0064</hash>
        <hash alg="SHA-384">a479138fec28582dbda88f2d7e43ad29ce759519c7aabf0652432a699cd3e94b50f70f0588cacae0258696789e2177a4</hash>
        <hash alg="SHA3-384">e29f727278d654adf3774a711efd90636455a579961e3b502ad4863989a26d73aa3b6055fdedad09d800fb70721e48ff</hash>
        <hash alg="SHA3-256">8cdfefb5d3ec1a907491cbe63f2547a8a5111a708c0f52c1237a320937a908d5</hash>
        <hash alg="SHA3-512">22aee69782242d595dc7b1af59810ddf722e9e7e3fff797a756f67933ff2d66043f4ee812304bc15de0bf81ef83f2ab08be1d35cc116eb3f548844b1776dde9b</hash>
      </hashes>
      <purl>pkg:maven/org.codehaus.plexus/plexus-mail-sender-api@1.0-alpha-7?type=jar</purl>
      <externalReferences>
        <reference type="distribution-intake">
          <url>dav:https://dav.codehaus.org/repository/plexus</url>
        </reference>
        <reference type="issue-tracker">
          <url>http://jira.codehaus.org/browse/PLX</url>
        </reference>
        <reference type="mailing-list">
          <url>http://archive.plexus.codehaus.org/user</url>
        </reference>
        <reference type="vcs">
          <url>http://fisheye.codehaus.org/browse/plexus/plexus-components/tags/plexus-mail-sender-1.0-alpha-7/plexus-mail-sender-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.geronimo.javamail/geronimo-javamail_1.4_mail@1.8.4?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.geronimo.javamail</group>
      <name>geronimo-javamail_1.4_mail</name>
      <version>1.8.4</version>
      <description>Geronimmo JavaMail Bundle.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">f0f877ca397f77198f4c941bee52f0a4</hash>
        <hash alg="SHA-1">0c111549605e4fb904984e4f40299a3a653871ea</hash>
        <hash alg="SHA-256">e3e58acb4962ee0615cc398c8903e46cf866fb666a58b3bb80f8d59712c1e69a</hash>
        <hash alg="SHA-512">a53a0aed6922d6d1f37e78cbde16f2a98dbd43f7198293a960c761e2c6f0ac456770a9e21ca64dd460a6612d0bae9d34d90ef21a4a9ae8095ed4677a0b5209eb</hash>
        <hash alg="SHA-384">f2adafd0c3d2bb24490542b0394bae83014b1404b350799ef844f51331f8a71db1f3a8d5aebd462f9e24400502171f0e</hash>
        <hash alg="SHA3-384">a774aa04351e16186868d53d50b34a200705a89d468d4e8826a4d553fd2fdfdef828f187b7a8a70930d17ddd9163199e</hash>
        <hash alg="SHA3-256">3da74bc40cdf844aa9329375e8cad8f24296c4a1414e8fcd7a8a0dda27bc4d59</hash>
        <hash alg="SHA3-512">3f45a98ec3c92d4846a0fdea10010cdbea57ef109fa89ff1b789396a025adf8c87ce63cf2a24bd055a9e8f99b0e95b1b8d7ea9773bf4b1a8f5aa86bb7e8b2963</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.geronimo.javamail/geronimo-javamail_1.4_mail@1.8.4?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://geronimo.apache.org/maven/javamail/geronimo-javamail_1.4_mail/1.8.4/geronimo-javamail_1.4_mail</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/GERONIMO</url>
        </reference>
        <reference type="mailing-list">
          <url>http://mail-archives.apache.org/mod_mbox/geronimo-user</url>
        </reference>
        <reference type="vcs">
          <url>http://svn.apache.org/viewvc/geronimo/javamail/tags/geronimo-javamail_1.4-1.8.4/geronimo-javamail_1.4_mail</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.codehaus.plexus/plexus-mail-sender-javamail@1.0-alpha-7?type=jar">
      <publisher>Codehaus</publisher>
      <group>org.codehaus.plexus</group>
      <name>plexus-mail-sender-javamail</name>
      <version>1.0-alpha-7</version>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">621e3c5c8c0d147b970341cd93a2aed0</hash>
        <hash alg="SHA-1">841e6bcf6708b9f3ba9361bea9eb87c4e3142820</hash>
        <hash alg="SHA-256">9960553f985f0015ff73f032371711856000ad859f5d51c94c867aa3eb47758d</hash>
        <hash alg="SHA-512">f5974794a65a300f4b1678091a90d6235afb1ce3f33b447e71af1029979209736dd11b09eb1fc0443b43e0ed3efb4d349122a83e91eaea64eba2181a09ac5586</hash>
        <hash alg="SHA-384">b9e528a701fa811d517bb8d5b286f851da5f53a6891c0aca45be7540f43413f9c6d723d813f1b4f2ecedfec5ba92a656</hash>
        <hash alg="SHA3-384">4a1749c1deb1f4e63b4fb2f53e9cf1417688d1e4337a28aa315e0ddaed2d77573316a8a7a541a6702edd3bec31a2b625</hash>
        <hash alg="SHA3-256">9ad023b4e10a14377dd7ad1500d6fb5f6b2e6845dcc61c2afc26c1df7500e15c</hash>
        <hash alg="SHA3-512">838957188fc835cfd2650d46c6ab9bd79d483eb3e8a38b81dd7d2b06dc1e98c0cdc33880e87d09e31f67f32fb31423d5a550b05c7ee38c781fc2307768665ea2</hash>
      </hashes>
      <purl>pkg:maven/org.codehaus.plexus/plexus-mail-sender-javamail@1.0-alpha-7?type=jar</purl>
      <externalReferences>
        <reference type="distribution-intake">
          <url>dav:https://dav.codehaus.org/repository/plexus</url>
        </reference>
        <reference type="issue-tracker">
          <url>http://jira.codehaus.org/browse/PLX</url>
        </reference>
        <reference type="mailing-list">
          <url>http://archive.plexus.codehaus.org/user</url>
        </reference>
        <reference type="vcs">
          <url>http://fisheye.codehaus.org/browse/plexus/plexus-components/tags/plexus-mail-sender-1.0-alpha-7/plexus-mail-senders/plexus-mail-sender-javamail</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/javax.mail/mail@1.4?type=jar">
      <group>javax.mail</group>
      <name>mail</name>
      <version>1.4</version>
      <description>The JavaMail API provides a platform-independent and protocol-independent framework to build mail and messaging applications.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">2e64a3805d543bdb86e6e5eeca5529f8</hash>
        <hash alg="SHA-1">1aa1579ae5ecd41920c4f355b0a9ef40b68315dd</hash>
        <hash alg="SHA-256">96868f82264ebd9b7d41f04d78cbe87ab75d68a7bbf8edfb82416aabe9b54b6c</hash>
        <hash alg="SHA-512">75a6b7bcd21b97f534ebe60fe02317aeb2b317d80228d89e64d12704e1ef10ee3189bacc73c506bde53b7c862caf1460723b597192143fe724ffe290604312ee</hash>
        <hash alg="SHA-384">39c8f5faf384f8e10d6ea5734729ff2b80e3104b528a67c8b11745c354495a8024ae1d7735e1674f9347cd7a8ed0736a</hash>
        <hash alg="SHA3-384">5f63750eb4e71e25a09514e2a8b92d79b6bc87196d82ac11e0ffd71e716b2782dc9b354a37c7faa22e08c98ddc42a579</hash>
        <hash alg="SHA3-256">afd561029e8b2844292cdb144070a9e768515f43c8bb98a51aacc01ad7438c3a</hash>
        <hash alg="SHA3-512">bd4b6637423f4cae25c04643b7bddd56757feff7846953fda779082d75d4f7388eb3b8a238a5f71dad2d44de184f19c3d6606bfc6475d573694899128cb3e7a6</hash>
      </hashes>
      <licenses>
        <license>
          <id>CDDL-1.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/javax.mail/mail@1.4?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://glassfish.dev.java.net/javaee5/mail/</url>
        </reference>
        <reference type="distribution">
          <url>https://maven-repository.dev.java.net/nonav/repository/javax.mail/jars/mail-1.4.jar</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/javax.activation/activation@1.1?type=jar">
      <group>javax.activation</group>
      <name>activation</name>
      <version>1.1</version>
      <description>JavaBeans Activation Framework (JAF) is a standard extension to the Java platform that lets you take advantage of standard services to: determine the type of an arbitrary piece of data; encapsulate access to it; discover the operations available on it; and instantiate the appropriate bean to perform the operation(s).</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">8ae38e87cd4f86059c0294a8fe3e0b18</hash>
        <hash alg="SHA-1">e6cb541461c2834bdea3eb920f1884d1eb508b50</hash>
        <hash alg="SHA-256">2881c79c9d6ef01c58e62beea13e9d1ac8b8baa16f2fc198ad6e6776defdcdd3</hash>
        <hash alg="SHA-512">c0ff5bf3ace7acc1b31fcc109cee48d9eb8f025ae15a31dc91eca760933bdb97c93f05d61e95af1e317859d72e5f179f897f5bf3df0e3810f4212d43bacee4bd</hash>
        <hash alg="SHA-384">c4ee54d80a2e67e819700051d6cfa01a17631c89f942b8690afb601e491f02d7497fe57bd5c70edfb9b444ae8222b846</hash>
        <hash alg="SHA3-384">de0777d2d1d7aad105defb12aed17ef38abfe89db2449c5243fa3c69304ea24dd8df0881330351d0733313e8f7252814</hash>
        <hash alg="SHA3-256">5fb94d2742cc3d44abad42c5d61b9c7464a2ef33bc58b4b5b121d49799123460</hash>
        <hash alg="SHA3-512">c5e37fe3d9c420a9035f1160eb1d396e94f01851c01c6e2f19f19a221bfc484e63f9660c7377f58aa65246b95a9eb799ac4e6798c0b20f658edf00a4435e1efa</hash>
      </hashes>
      <licenses>
        <license>
          <id>CDDL-1.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/javax.activation/activation@1.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://java.sun.com/products/javabeans/jaf/index.jsp</url>
        </reference>
        <reference type="distribution">
          <url>https://maven-repository.dev.java.net/nonav/repository/javax.activation/jars/activation-1.1.jar</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.codehaus.plexus/plexus-mail-sender-simple@1.0-alpha-7?type=jar">
      <publisher>Codehaus</publisher>
      <group>org.codehaus.plexus</group>
      <name>plexus-mail-sender-simple</name>
      <version>1.0-alpha-7</version>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">55f44a1c86f5cbb1f17e32774060ea0c</hash>
        <hash alg="SHA-1">95af4e05d18f79a5a264dd0aa466475233d68aa4</hash>
        <hash alg="SHA-256">4f609bbeb25792957c1d3c9f9cce6ef503462e7d7545e527599694fd7d94166d</hash>
        <hash alg="SHA-512">2a332d7676f9fb93d892d17de191bc1323db5a1662aff7f4c24f700f4d968cb151b3aba01b9d0fd7b74bd8f718f4ec3085cac33a8b478243bb100962232d97f7</hash>
        <hash alg="SHA-384">16474a8e58569146bc78d73697e1838870d256ec5e21df8bde6b23cb81866331225aa2f5d66ab32e462a0fc8ba714872</hash>
        <hash alg="SHA3-384">d71df8464463c55fd9ba8e8e6f3cfbb508088e3e4b04d8b5999519b187fcfa5585ff6bbfe7da85c8b5cfae0de4e8a9c1</hash>
        <hash alg="SHA3-256">d8719ba74f96868d6d53040397c683833bbf01b6dd7696c6553ad26f09895859</hash>
        <hash alg="SHA3-512">70d70fb88ba4593e3eac7c91f0c35d3875d2c9d5747b8a274e12c22853c573285ba0aa79be8e7616296ba7f4ec6deb02b5aa9cc4fb8da8ef2e85c7d5fb40b51d</hash>
      </hashes>
      <purl>pkg:maven/org.codehaus.plexus/plexus-mail-sender-simple@1.0-alpha-7?type=jar</purl>
      <externalReferences>
        <reference type="distribution-intake">
          <url>dav:https://dav.codehaus.org/repository/plexus</url>
        </reference>
        <reference type="issue-tracker">
          <url>http://jira.codehaus.org/browse/PLX</url>
        </reference>
        <reference type="mailing-list">
          <url>http://archive.plexus.codehaus.org/user</url>
        </reference>
        <reference type="vcs">
          <url>http://fisheye.codehaus.org/browse/plexus/plexus-components/tags/plexus-mail-sender-1.0-alpha-7/plexus-mail-senders/plexus-mail-sender-simple</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.codehaus.plexus/plexus-utils@4.0.2?type=jar">
      <publisher>Codehaus Plexus</publisher>
      <group>org.codehaus.plexus</group>
      <name>plexus-utils</name>
      <version>4.0.2</version>
      <description>A collection of various utility classes to ease working with strings, files, command lines and
    more.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">4cfdd73e436702d319d551a44fcea500</hash>
        <hash alg="SHA-1">9526a9548b302572f23337fcc217fb4cc713b9c3</hash>
        <hash alg="SHA-256">8957274e75fe2c278b1428dd16a0daeee1dd38152cb6eff816177ac28fccb697</hash>
        <hash alg="SHA-512">a99751d7990df50fd1adc10634c4e14f5deddff8fc1b7c6d26a5c7fc517d3f0e3a8d39435c512c507a0737fc9c3ee67a8f121f9e2aa8b9bfe14d9f01a99a3aa6</hash>
        <hash alg="SHA-384">52a12d800c5aa70fa149d4628fd6a485e3324dbfbbd6a2f24e120176ee8c48e13a4d321f76d64ff86684c2523409a62a</hash>
        <hash alg="SHA3-384">beaf7889c9facf6649bcce19dcc4356db98de628f5d597cb101793ca454ab81d5a436f9652a957c9d1573e9149a0fe49</hash>
        <hash alg="SHA3-256">26369ecaf957f19dc5992708c56ed3816129c40531505eb4bc702755a2fd4b49</hash>
        <hash alg="SHA3-512">f51af4b8d2e097716129f84b69e95947b08cf3c8617b0c6997f55ea3d02f0481284943e474d2935d590ec57975b1edce2774d5006734acc1ca1af567372bdf25</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.codehaus.plexus/plexus-utils@4.0.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://codehaus-plexus.github.io/plexus-utils/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/codehaus-plexus/plexus-utils/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://groups.google.com/forum/#!forum/mojohaus-dev</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/codehaus-plexus/plexus-utils/tree/plexus-utils-4.0.2/</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.codehaus.plexus/plexus-xml@3.0.1?type=jar">
      <publisher>Codehaus Plexus</publisher>
      <group>org.codehaus.plexus</group>
      <name>plexus-xml</name>
      <version>3.0.1</version>
      <description>A collection of various utility classes to ease working with XML in Maven 3.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">cd868918ebc742350840124ea4422ab0</hash>
        <hash alg="SHA-1">b0e73c21402f03c2765674b8dede21673b3288cf</hash>
        <hash alg="SHA-256">c1a510a87a62bd2d74ac1472dd31c3f9e9b0b8b8568f37d77c0f135415bebd05</hash>
        <hash alg="SHA-512">422f2ccdda00dd8c90c2f5b5f4ad6f0410fb6f2bcb3429d196f7f39c96a44a6709c70539648214d5b7686a70240a6c16c7b985b943f8002d318f90896230a259</hash>
        <hash alg="SHA-384">da397eb08963f4366d2119af1d993efa00fee25e50b09454422805ce83e662507e2afc7f6b4171a9c5da111d7ada3365</hash>
        <hash alg="SHA3-384">d21cc3459871a9f6e9a893df8f8bcb85a4f20cee96e821098e2a0f2655b20c9f01f1139e7dc4a80444d627d9854c56f6</hash>
        <hash alg="SHA3-256">bdf4b087b5d0ed2473c5ff7524b7c6dff791738715aa5499f14ed11729b3690b</hash>
        <hash alg="SHA3-512">fedd50a88c651e5a5da1639d5c507634bd50cb9103acfdec9e0db7827656855b7d1ee19ec7318de91996e86dc5e9c38f1b507433498c75ae327b865534999a9a</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.codehaus.plexus/plexus-xml@3.0.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://codehaus-plexus.github.io/plexus-xml/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/codehaus-plexus/plexus-xml/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://groups.google.com/forum/#!forum/mojohaus-dev</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/codehaus-plexus/plexus-xml/tree/plexus-xml-3.0.1/</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.codehaus.plexus/plexus-velocity@2.2.1?type=jar">
      <publisher>Codehaus Plexus</publisher>
      <group>org.codehaus.plexus</group>
      <name>plexus-velocity</name>
      <version>2.2.1</version>
      <description>The Plexus project provides a full software stack for creating and executing software projects.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">dc3e5b37272e75e310c0d4734d314c0f</hash>
        <hash alg="SHA-1">628430e6d58dc3eafa96c3dc71f165291a036c07</hash>
        <hash alg="SHA-256">98626ccaa532a27747c086e8c5d5ab1b90e8969deb4eca22a3190598f9a6224a</hash>
        <hash alg="SHA-512">9ed27f6ad7c38efea59f79869004bf5a59d5d7bdf484b6193b3978abec1eb731b165e6523680c7b2291363b62729d8945bb08406a60b77e423e1641345fab133</hash>
        <hash alg="SHA-384">e6193d9ec4772a515bd28f9ec132971f25cb5dfb23afc8d60b3109eb4833225c2692bbfaa4d982381ff1f1b7301a2566</hash>
        <hash alg="SHA3-384">cc24f94a3dfc238c7f401919aea657a629add970549c1537df51410aaa6dd62a4606d0ac86464638088f8ba1b926436f</hash>
        <hash alg="SHA3-256">054c6115e511668da18a5e23a6869e363b259c9ad77b258372d778a9e21400d5</hash>
        <hash alg="SHA3-512">5a3b469f7340f4c2bf65dd45cc4be1bba93023e42ffc233ce22ac9fd0ff31780d51fbed4f667e3a279a9b470af7d70d4596be7b3275ea12279a6002cd4b243f7</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.codehaus.plexus/plexus-velocity@2.2.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://codehaus-plexus.github.io/plexus-pom/plexus-velocity/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/codehaus-plexus/plexus-velocity/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://groups.google.com/forum/#!forum/mojohaus-dev</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/codehaus-plexus/plexus-velocity</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.velocity.tools/velocity-tools-generic@3.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.velocity.tools</group>
      <name>velocity-tools-generic</name>
      <version>3.1</version>
      <description>Generic tools that can be used in any context.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">76f13879ead8693fd4d5751a8a236089</hash>
        <hash alg="SHA-1">07aaa49086a64cd9dab967a8437cc03abbfad655</hash>
        <hash alg="SHA-256">8258cfdcaa16127f35ffe610a3fa4f76b7ebe51b88922c73c4ee39ce8f378ce5</hash>
        <hash alg="SHA-512">51e7249e92d516f9e8a92a1068856d920edee512563131cca2dede45ed6de0e8667dfe0f54cd59712f255f9019d92ea521b8182622ba303af3a45b9740a6d54b</hash>
        <hash alg="SHA-384">7aadd12f098af99f43a390b4620ffba74008dd3308fbdd18ca0c012929b80196f3977b8748c967312e12546f8e065ce1</hash>
        <hash alg="SHA3-384">221fa964a36d4ee566a50164569df5f905082f2c94cf95bb763e1611f77806bb63000bade25fa3d205d16eea576d7781</hash>
        <hash alg="SHA3-256">3aa26883c32b31553ba468cd678ae0b6aa70272a683aea0d0cb8149afe404dc9</hash>
        <hash alg="SHA3-512">5d32822a5d3c913dacdece7c1415016b6f7f1320589397509c4ea689ae3a585e289acdaed7df14e2fe64be466956179b3260211bca013c11f71fa0542d28336d</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.velocity.tools/velocity-tools-generic@3.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://velocity.apache.org/tools/devel/velocity-tools-generic/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/VELTOOLS</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?general@velocity.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=velocity-tools.git/velocity-tools-generic</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-beanutils/commons-beanutils@1.9.4?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-beanutils</group>
      <name>commons-beanutils</name>
      <version>1.9.4</version>
      <description>Apache Commons BeanUtils provides an easy-to-use but flexible wrapper around reflection and introspection.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">07dc532ee316fe1f2f0323e9bd2f8df4</hash>
        <hash alg="SHA-1">d52b9abcd97f38c81342bb7e7ae1eee9b73cba51</hash>
        <hash alg="SHA-256">7d938c81789028045c08c065e94be75fc280527620d5bd62b519d5838532368a</hash>
        <hash alg="SHA-512">7762b348caecead49038a38a89754ff7d9be6199324315495ba47cf24f52c06faadf9306d925c8fe47c587589a939c82e491e1c730267fdf354243a68c0f96ff</hash>
        <hash alg="SHA-384">dcd3845917b8fb189cf4034b0d7c6d266ec7110f85ffbd2711cdea9eb94b4fa3e1cee9120b484c6a120b82769230ed3a</hash>
        <hash alg="SHA3-384">dfdb8845989be083de807184910124ad7e7e372959b34686cd5f5020f193a2997831ead497b0a5a0233f031aecdf55f6</hash>
        <hash alg="SHA3-256">127a81068335d6ca47f5f5e12d849dc1bc5300b2ad8d3f9b64ca30ff2a76d479</hash>
        <hash alg="SHA3-512">f67405d0a7667adf7cd35cd7416c54e1759380cdb9c8f179a10175058e40292808e17e69d48df4d4d6b5e268c314127cf3ab87af6920a271bb2e6e0df963940d</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/commons-beanutils/commons-beanutils@1.9.4?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://commons.apache.org/proper/commons-beanutils/</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/BEANUTILS</url>
        </reference>
        <reference type="mailing-list">
          <url>http://mail-archives.apache.org/mod_mbox/commons-user/</url>
        </reference>
        <reference type="vcs">
          <url>http://svn.apache.org/viewvc/commons/proper/beanutils/tags/BEANUTILS_1_9_3_RC3</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-collections/commons-collections@3.2.2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-collections</group>
      <name>commons-collections</name>
      <version>3.2.2</version>
      <description>Types that extend and augment the Java Collections Framework.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">f54a8510f834a1a57166970bfc982e94</hash>
        <hash alg="SHA-1">8ad72fe39fa8c91eaaf12aadb21e0c3661fe26d5</hash>
        <hash alg="SHA-256">eeeae917917144a68a741d4c0dff66aa5c5c5fd85593ff217bced3fc8ca783b8</hash>
        <hash alg="SHA-512">51c72f9aca7726f3c387095e66be85a6df97c74b00a25434b89188c1b8eab6e2b55accf7b9bd412430d22bd09324dec076e300b3d1fa39fccad471f0f2a3da16</hash>
        <hash alg="SHA-384">dd4e99b3314bd3c1a1ee26296615d9e44dadf7a1f8a7bbba44fb95121803d331e36d4cca4260e7609af78a47ba3e4073</hash>
        <hash alg="SHA3-384">8ce03528e4a6e95c44283b56eca87e6a6d3bf1363411a55b538f4f9110cf7470581ea5c73925e877ddab08dba0603f40</hash>
        <hash alg="SHA3-256">fd3d6134b5f07077b82ccf93d148dacf7c4ce5c971209510edd0e77e3e38c19e</hash>
        <hash alg="SHA3-512">c2a523916fb7c7d55a05d5e3d9e9b33000733f4b20a71be174e4e093e3f06ea78ad831edd1505527da7388105f8647efb7d5666ba852c90b4e2d5bb74256efbc</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/commons-collections/commons-collections@3.2.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://commons.apache.org/collections/</url>
        </reference>
        <reference type="build-system">
          <url>https://continuum-ci.apache.org/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>http://issues.apache.org/jira/browse/COLLECTIONS</url>
        </reference>
        <reference type="mailing-list">
          <url>http://mail-archives.apache.org/mod_mbox/commons-user/</url>
        </reference>
        <reference type="vcs">
          <url>http://svn.apache.org/viewvc/commons/proper/collections/trunk</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-digester3@3.2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-digester3</name>
      <version>3.2</version>
      <description>The Apache Commons Digester package lets you configure an XML to Java
    object mapping module which triggers certain actions called rules whenever
    a particular pattern of nested XML elements is recognized.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">41d2c62c7aedafa7a3627794abc83f71</hash>
        <hash alg="SHA-1">c3f68c5ff25ec5204470fd8fdf4cb8feff5e8a79</hash>
        <hash alg="SHA-256">1c150e3d2df4b4237b47e28fea2079fb0da324578d5cca6a5fed2e37a62082ec</hash>
        <hash alg="SHA-512">a2063f01fd50f96cfd8765c49935249a77df47965ff0ae375bb1f1e47e3cdeb5e82eaf0b0e32183e581c01821499f9d4c57419e90352a7aa96b97850950e8652</hash>
        <hash alg="SHA-384">1691e34753c8ce3bb16729de8901f65def9362a989887e7b5d3cb05ded854e5b25b01b7725201228a97d17c4d68eb5f1</hash>
        <hash alg="SHA3-384">aaf22fbe0faa7303fc7b3c96ece73ae0e980ebd01454e344f612f7ccb10059c89d29cd579fbf2d211967708a7884a5c2</hash>
        <hash alg="SHA3-256">0c06a70800e0baf107e23e79a2eb7087694e06565fb9a27dc1ec920420b25fb1</hash>
        <hash alg="SHA3-512">2ed528a469c368296f63b6c1bc0ffe0eb01208cf8adf4127c350d38223c47550409e572c33ac2ed567792cb44b46cc002c5a0ec52019beccdedcc5dcc84a7155</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-digester3@3.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://commons.apache.org/digester/</url>
        </reference>
        <reference type="build-system">
          <url>http://vmbuild.apache.org/continuum/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>http://issues.apache.org/jira/browse/DIGESTER</url>
        </reference>
        <reference type="mailing-list">
          <url>http://mail-archives.apache.org/mod_mbox/commons-user/</url>
        </reference>
        <reference type="vcs">
          <url>http://svn.apache.org/viewvc/commons/proper/digester/tags/DIGESTER3_3_2_RC2</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.github.cliftonlabs/json-simple@3.0.2?type=jar">
      <group>com.github.cliftonlabs</group>
      <name>json-simple</name>
      <version>3.0.2</version>
      <description>Java 7+ toolkit to quickly develop RFC 4627 JSON compatible applications.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">148c0d1bdc1bcb24394627d6930ee9ad</hash>
        <hash alg="SHA-1">2337afdb06134a12fc0239299c3ceb2e9c209516</hash>
        <hash alg="SHA-256">fda65a9ad0e1ac0c88987106e89aa4d8b2a2495e7e042371efa83813f65b7295</hash>
        <hash alg="SHA-512">c77f7423fd96b5b6159236536e4e4b509032cea94368186b86c99f4ec72cf40ecfb26821cc7124077363902ce2b91644e32e53fa7de3fce9885b400b0424ecd0</hash>
        <hash alg="SHA-384">805dced7fef08b98489ff09ffedda93998369ed6a024674f09ae8d4e62e8ffab5da235d64e5f91eabc1840f6695a7e43</hash>
        <hash alg="SHA3-384">d0a6dc8d23efc7dd2bd19036d8550a7ea1125528872765ab3094c72b9d76d287e7909abec239d4d8bae2a1d55c8621f6</hash>
        <hash alg="SHA3-256">d4239bd87f94a37ab4eeb653d9789a5a53899e5074d93ba66bea26f80b1ea2ca</hash>
        <hash alg="SHA3-512">448912379c297b72afad74ab6f7c9ef796046476dcaa8a2b4f1905ace248c4f52558c4683b3887e1aeddb03029b9b41ef8a90841cfd088734061c35489eb69b5</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.github.cliftonlabs/json-simple@3.0.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://cliftonlabs.github.io/json-simple/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/cliftonlabs/json-simple.git</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.velocity/velocity-engine-core@2.4.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.velocity</group>
      <name>velocity-engine-core</name>
      <version>2.4.1</version>
      <description>Apache Velocity is a general purpose template engine.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">41a3757dc9d701590be703d1f2bd2462</hash>
        <hash alg="SHA-1">0b662837e8006d5c383bd128503ea86ef5b4d361</hash>
        <hash alg="SHA-256">1c19157d1171d560088e485be97c93a7a2f7e9f56e517f0a30273c5c39df6231</hash>
        <hash alg="SHA-512">77150ed775e644be44d9f1ead19a880c8a02cba18dae97aec4ea8f14db04ee795bce35bd2e5314f2e95d40c01441da954327348f91addc9bb8d0cc9f7c00f561</hash>
        <hash alg="SHA-384">87cb5f02de5e137db4426938d783233d274b41786de2f27719e8469e188822911acce66992ae074b22a9ff47c0997c38</hash>
        <hash alg="SHA3-384">a6671daa3dc0091fbca6fdcb7d8799adee1c1c5c68de7da0a0f07870bb22ed94fe9a705223bf23e90b7f7f5a4d12a5c4</hash>
        <hash alg="SHA3-256">71c8123c1c4bb5fb839e70d229545139b2da58fa3e3d9b09355d355b6f56c595</hash>
        <hash alg="SHA3-512">381c65e4a7026fc680fd37ffe53616f93b4dba2dc9cbd98f76c56e3e5a4ea2dbd5fa82e6b10da7df1dd3b1b4017d7a583a2777cef421f04412893b27e6202a22</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.velocity/velocity-engine-core@2.4.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://velocity.apache.org/engine/devel/velocity-engine-core/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/VELOCITY</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?general@velocity.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=velocity-engine.git/velocity-engine-core</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.xmlrpc/xmlrpc-common@3.1.3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.xmlrpc</group>
      <name>xmlrpc-common</name>
      <version>3.1.3</version>
      <description>Apache XML-RPC is a Java implementation of XML-RPC, a popular protocol that uses XML over HTTP to
    implement remote procedure calls. Compared to SOAP, or JAX-RPC, it is stable, much simpler and easier to handle.
    Version 3 of Apache XML-RPC introduces several important vendor extensions over the original XML-RPC
    specification.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">22f90fb4f397b588b43a8b306167f371</hash>
        <hash alg="SHA-1">415daf1f1473a947452588906dc9f5b3575fb44d</hash>
        <hash alg="SHA-256">c372d20a757d8dd69f4ff1f7e7cda18fea8ccabc4c524168cedcc85fe209697f</hash>
        <hash alg="SHA-512">66986e8201f44f91193d53d10efbee56b15d3bcf49e9022363501a99760f040e651176a62995e81aab791f449e2c7994c7438aae4bace9f4a61a235c5bea3da4</hash>
        <hash alg="SHA-384">014ff2ed9f904f27c1347f2cd7765abc73454d37a04aecb2dd02576509fcd4b6cb86c2b3e9004da309b8370d4e05ee12</hash>
        <hash alg="SHA3-384">602fab8f5284ae351be8959f945cf7e2383fa0d158dd4cb82aa1fdf0b1053eb89431dadab4c40fbcb38d5421eae88a4c</hash>
        <hash alg="SHA3-256">df5f1d0df67c4558dee3312ed7aa0815664ddd4fb1ca832f92f995bae8f330d6</hash>
        <hash alg="SHA3-512">6fcc97bed4c4ce8613861682cdd9a0b259e794ee683c7af6ae844bbe103a78b9577411607c3720233da01fd20ce24b02441090c4b1ad2cb431b6f6924f7489a7</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.xmlrpc/xmlrpc-common@3.1.3?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://ws.apache.org/xmlrpc/xmlrpc-common/</url>
        </reference>
        <reference type="build-system">
          <url>http://vmgump.apache.org/gump/public/ws-xmlrpc/xmlrpc/index.html</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>http://issues.apache.org/jira/BrowseProject.jspa?pid=10465</url>
        </reference>
        <reference type="mailing-list">
          <url>http://mail-archives.apache.org/mod_mbox/ws-xmlrpc-dev/</url>
        </reference>
        <reference type="vcs">
          <url>https://svn.apache.org/viewvc/webservices/xmlrpc/tags/xmlrpc-3.1.3/xmlrpc-common</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.ws.commons.util/ws-commons-util@1.0.2?type=jar">
      <publisher>Apache Software Foundation</publisher>
      <group>org.apache.ws.commons.util</group>
      <name>ws-commons-util</name>
      <version>1.0.2</version>
      <description>This is a small collection of utility classes, that allow high performance XML
      processing based on SAX. Basically, it is assumed, that you are using an JAXP
      1.1 compliant XML parser and nothing else. In particular, no dependency on the
      javax.xml.transform package is introduced.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">e0d2efe441e2dec803c7749c10725f61</hash>
        <hash alg="SHA-1">3f478e6def772c19d1053f61198fa1f6a6119238</hash>
        <hash alg="SHA-256">97c183d35b596c6a010dfea967ca1e67f67696806535dcef5be17ffb2692cfd6</hash>
        <hash alg="SHA-512">aee038ec9c787ad85d9b2240252d031afcdb90f53c3c940134d1db6c246a2ab8e63c89349816aef2735eb527aa12f97538c664a392391693e028284281581ec9</hash>
        <hash alg="SHA-384">b7fc8490947fcc5ee65846ba8be2181190e733898915d1fc2bd7c2f51ad1f6895e01b9f8228dee7418347e531c2f0c00</hash>
        <hash alg="SHA3-384">48dab3cfb299a484e647bf1f090a13847ec8c74550d4334ba926524676c42ef799b972aef936d7874b11fcaba4ba9b59</hash>
        <hash alg="SHA3-256">e4b90b3f811f1ce0a7ae6313d38912e246b7609133f1d0b4b678a12c6d5fc7a7</hash>
        <hash alg="SHA3-512">3d9734f8172c98faa416a4716a813459d5b9a44a42c807ff9a0e609d4d916311fa06a6651670f85025edbaf19587c17767f1896ce748b953dc314b69102ab820</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.ws.commons.util/ws-commons-util@1.0.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://ws.apache.org/commons/util</url>
        </reference>
        <reference type="distribution-intake">
          <url>scpexe://people.apache.org/www/people.apache.org/repo/m2-ibiblio-rsync-repository</url>
        </reference>
        <reference type="issue-tracker">
          <url>http://issues.apache.org/jira/browse/XMLRPC</url>
        </reference>
        <reference type="mailing-list">
          <url>http://mail-archives.apache.org/mod_mbox/ws-xmlrpc-dev/</url>
        </reference>
        <reference type="vcs">
          <url>http://svn.apache.org/viewcvs.cgi/webservices/commons/trunk/util</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar">
      <publisher>QOS.ch</publisher>
      <group>org.slf4j</group>
      <name>slf4j-api</name>
      <version>1.7.36</version>
      <description>The slf4j API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">872da51f5de7f3923da4de871d57fd85</hash>
        <hash alg="SHA-1">6c62681a2f655b49963a5983b8b0950a6120ae14</hash>
        <hash alg="SHA-256">d3ef575e3e4979678dc01bf1dcce51021493b4d11fb7f1be8ad982877c16a1c0</hash>
        <hash alg="SHA-512">f9b033fc019a44f98b16048da7e2b59edd4a6a527ba60e358f65ab88e0afae03a9340f1b3e8a543d49fa542290f499c5594259affa1ff3e6e7bf3b428d4c610b</hash>
        <hash alg="SHA-384">2b14ad035877087157e379d3277dcdcd79e58d6bdb147c47d29e377d75ce53ad42cafbf22f5fb7827c7e946ff4876b9a</hash>
        <hash alg="SHA3-384">3bc3110dafb8d5be16a39f3b2671a466463cd99eb39610c0e4719a7bf2d928f2ea213c734887c6926a07c4cca7769e4b</hash>
        <hash alg="SHA3-256">ba2608179fcf46e2291a90b9cbb4aa30d718e481f59c350cc21c73b88d826881</hash>
        <hash alg="SHA3-512">14c4edcd19702ef607d78826839d8a6d3a39157df54b89a801d3d3cbbe1307131a77671b041c761122730fb1387888c5ec2e46bdd80e1cb07f8f144676441824</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
          <url>https://opensource.org/license/mit/</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://www.slf4j.org</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/qos-ch/slf4j/slf4j-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-collections4@4.5.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-collections4</name>
      <version>4.5.0</version>
      <description>The Apache Commons Collections package contains types that extend and augment the Java Collections Framework.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">d564105594035b363b193d8ce3c18b98</hash>
        <hash alg="SHA-1">e5cf89f0c6e132fc970bd9a465fdcb8dbe94f75a</hash>
        <hash alg="SHA-256">00f93263c267be201b8ae521b44a7137271b16688435340bf629db1bac0a5845</hash>
        <hash alg="SHA-512">ee43c513ac9dcbd7dd23b5cbb4ea5f65a2e10cdfbb403d080b87e778b3b45062315522297c41eca514a9a946228ad7650f0a572d5b78effb8260dd8084131988</hash>
        <hash alg="SHA-384">73db8eb3e79569b3fa62aefdce413e6ea250b9853953cb75b9d5ce0f2f35b59b6e86ef708326a608ff20d95bdade8522</hash>
        <hash alg="SHA3-384">7a9c035fa846cdcebd4331eb86ed31a67595518299a8bee54597c1eb663aee63214553a561a510b929035266c2a4800b</hash>
        <hash alg="SHA3-256">614c41bfd8f9c6c1c1e5667c5be45587c3021b780937ad62f54d17051f425086</hash>
        <hash alg="SHA3-512">3cfd12ec2d03ed29b682123cedae422a4c6dc459034a7e0ab5f00ccd422cb9a2ec423a08b953119c426569b888157a6d80aa0e0c63debea50c5c54c481e2eff5</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-collections4@4.5.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://commons.apache.org/proper/commons-collections/</url>
        </reference>
        <reference type="build-system">
          <url>https://github.com/apache/commons-parent/actions</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/COLLECTIONS</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/commons-user/</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=commons-collections.git</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.httpcomponents</group>
      <name>httpcore</name>
      <version>4.4.16</version>
      <description>Apache HttpComponents Core (blocking I/O)</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">28d2cd9bf8789fd2ec774fb88436ebd1</hash>
        <hash alg="SHA-1">51cf043c87253c9f58b539c9f7e44c8894223850</hash>
        <hash alg="SHA-256">6c9b3dd142a09dc468e23ad39aad6f75a0f2b85125104469f026e52a474e464f</hash>
        <hash alg="SHA-512">168026436a6bcf5e96c0c59606638abbdc30de4b405ae55afde70fdf2895e267a3d48bba6bdadc5a89f38e31da3d9a9dc91e1cab7ea76f5e04322cf1ec63b838</hash>
        <hash alg="SHA-384">ba9ceaee1a37ca3201d6a1315ecb0327b495489efd0baa155c219c475df8d3eb69fe77ab0026563db406497626da6562</hash>
        <hash alg="SHA3-384">b9dc44dcc7cc86d5036f26d54c4003a2d72808ae7b07a0808bb53505c6d4281b5ad213eb1f3d0fef1113dec57cb0dfe1</hash>
        <hash alg="SHA3-256">fd8ab51846476c6c18822151c9ec07b39a9633010b5d20ea937fc6910407bc64</hash>
        <hash alg="SHA3-512">b42fa528242981a9d70e4f68ab75a24292df5112c44c21b6f18cb9201ce747885ba1d4dc69bc3d14d0da46a6c2638f937c11bc45749abeb55dc89ddada90cdda</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://hc.apache.org/httpcomponents-core-ga</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>http://issues.apache.org/jira/browse/HTTPCORE</url>
        </reference>
        <reference type="mailing-list">
          <url>http://mail-archives.apache.org/mod_mbox/hc-httpclient-users/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/httpcomponents-core/tree/4.4.16/httpcore</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.httpcomponents/httpclient@4.5.14?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.httpcomponents</group>
      <name>httpclient</name>
      <version>4.5.14</version>
      <description>Apache HttpComponents Client</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">2cb357c4b763f47e58af6cad47df6ba3</hash>
        <hash alg="SHA-1">1194890e6f56ec29177673f2f12d0b8e627dec98</hash>
        <hash alg="SHA-256">c8bc7e1c51a6d4ce72f40d2ebbabf1c4b68bfe76e732104b04381b493478e9d6</hash>
        <hash alg="SHA-512">a084ef30fb0a2a25397d8fab439fe68f67e294bf53153e2e1355b8df92886d40fe6abe35dc84f014245f7158e92641bcbd98019b4fbbd9e5a0db495b160b4ced</hash>
        <hash alg="SHA-384">c8ccaa1fa8ba7c421413e3c30375bd9c31284e837c476fd831e18043ad4187e92166f49554123108891241bed674b95d</hash>
        <hash alg="SHA3-384">9a17dfcf12b2af3a9b006ec369f9bc78ba322348bf1a01146e0d4f3fec2bed6cbe8b2193fac5b4d5a0c3036c06477510</hash>
        <hash alg="SHA3-256">48f0a61b691e22dec9d6db8e0b58be4ca17a42a2846c82f0875de21f72bb0faa</hash>
        <hash alg="SHA3-512">4ad2c9adc761b7e813330f0dcad3f9978702896c7d0cbf81f60a472d550e320b1527be425ba597c8c9352d587e32e1d46ceb4c73e99c70a6190df4c699a7c2a9</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.httpcomponents/httpclient@4.5.14?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://hc.apache.org/httpcomponents-client-ga</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>http://issues.apache.org/jira/browse/HTTPCLIENT</url>
        </reference>
        <reference type="mailing-list">
          <url>http://mail-archives.apache.org/mod_mbox/hc-httpclient-users/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/httpcomponents-client/tree/4.5.14/httpclient</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-logging/commons-logging@1.2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-logging</group>
      <name>commons-logging</name>
      <version>1.2</version>
      <description>Apache Commons Logging is a thin adapter allowing configurable bridging to other,
    well known logging systems.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">040b4b4d8eac886f6b4a2a3bd2f31b00</hash>
        <hash alg="SHA-1">4bfc12adfe4842bf07b657f0369c4cb522955686</hash>
        <hash alg="SHA-256">daddea1ea0be0f56978ab3006b8ac92834afeefbd9b7e4e6316fca57df0fa636</hash>
        <hash alg="SHA-512">ed00dbfabd9ae00efa26dd400983601d076fe36408b7d6520084b447e5d1fa527ce65bd6afdcb58506c3a808323d28e88f26cb99c6f5db9ff64f6525ecdfa557</hash>
        <hash alg="SHA-384">ac20720d7156131478205f1b454395abf84cfc8da2f163301af32f63bd3c4764bd26cb54ed53800f33193ae591f3ce9c</hash>
        <hash alg="SHA3-384">628eb4407e95dca84da1a06b08a6d9b832a49de8472b1b217e8607f08efeeed18b996232d64dd07f03e78e0e3bb4b078</hash>
        <hash alg="SHA3-256">9aab62deccf156ee6e324c925dfc30ecb53e8465802863a551901a461424e807</hash>
        <hash alg="SHA3-512">3fd76857f6d20c03799537cc961c1c4ddf1c375c6c192fb982363e3b9397ba138b77f24ef38b4202f44e37586789c0320e4de18fdadd2772304fd14a9b26d552</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/commons-logging/commons-logging@1.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://commons.apache.org/proper/commons-logging/</url>
        </reference>
        <reference type="build-system">
          <url>https://continuum-ci.apache.org/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>http://issues.apache.org/jira/browse/LOGGING</url>
        </reference>
        <reference type="mailing-list">
          <url>http://mail-archives.apache.org/mod_mbox/commons-user/</url>
        </reference>
        <reference type="vcs">
          <url>http://svn.apache.org/repos/asf/commons/proper/logging/trunk</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-codec/commons-codec@1.11?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-codec</group>
      <name>commons-codec</name>
      <version>1.11</version>
      <description>The Apache Commons Codec package contains simple encoder and decoders for
     various formats such as Base64 and Hexadecimal.  In addition to these
     widely used encoders and decoders, the codec package also maintains a
     collection of phonetic encoding utilities.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">567159b1ae257a43e1391a8f59d24cfe</hash>
        <hash alg="SHA-1">3acb4705652e16236558f0f4f2192cc33c3bd189</hash>
        <hash alg="SHA-256">e599d5318e97aa48f42136a2927e6dfa4e8881dff0e6c8e3109ddbbff51d7b7d</hash>
        <hash alg="SHA-512">d9586162b257386b5871e7e9ae255a38014a9efaeef5148de5e40a3b0200364dad8516bddd554352aa2e5337bec2cc11df88c76c4fdde96a40f3421aa60650d7</hash>
        <hash alg="SHA-384">9ae3d8fd4c38f3af52c76c5f98039109901cb0f70700e6d9999b27cc4b30b188e2688aa4adcf6b846376bc3ca125907a</hash>
        <hash alg="SHA3-384">bd272e22540371e7d834cd897bce9be657293ba9c5584e0d47a4073711dacb524cc59e294e942ffc01613d17ac7d6ac1</hash>
        <hash alg="SHA3-256">90ec34f9701a8b212c65e6167c505ea6417289f910deedcac8517075b8349728</hash>
        <hash alg="SHA3-512">101bc04efae2bd16d7923e61bca922c4a006b0e4b34909e0f8865196cb4df4f4f6269737c17880b4dfd0309cb487b806e88d09c6e1a7dc70237563b3f4312f7f</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/commons-codec/commons-codec@1.11?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://commons.apache.org/proper/commons-codec/</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>http://issues.apache.org/jira/browse/CODEC</url>
        </reference>
        <reference type="mailing-list">
          <url>http://mail-archives.apache.org/mod_mbox/commons-user/</url>
        </reference>
        <reference type="vcs">
          <url>http://svn.apache.org/viewvc/commons/proper/codec/trunk</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-io/commons-io@2.19.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-io</group>
      <name>commons-io</name>
      <version>2.19.0</version>
      <description>The Apache Commons IO library contains utility classes, stream implementations, file filters,
file comparators, endian transformation classes, and much more.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">3d1fd45f9d2a247c1d05ab1e98c07160</hash>
        <hash alg="SHA-1">1f8d4a99ba72b77aa69101175efc79b0c7dcdd7e</hash>
        <hash alg="SHA-256">824268919b4b62f9f40f08c54381de5993b078f58667e332d17348ae019d72b9</hash>
        <hash alg="SHA-512">98ad3cb92c31b51461c44d06c223a425c3ee8254ad3ddfdc3724e7d14444d2eeac3b054f70be5d4500268f712c1f08779fd5e4360437b4a883c406c0dc3a2c7c</hash>
        <hash alg="SHA-384">b3a8950070de2372be3c05444c203a13e0727bd5ef8c446b7c731dce37d3622509b93a7ffedac2a81b707b73c73bc8d1</hash>
        <hash alg="SHA3-384">9243e8e5354232583e1a269592a4f19e4ee4dc681cf942c10a146be1e4036bcd71bd3f59df78f1916e20c03d7d9bcfd0</hash>
        <hash alg="SHA3-256">b9994550c1fe3140f52b9e2e663f2a4ad1ccc6ca4f19fd3626bfc689ae2f4a6d</hash>
        <hash alg="SHA3-512">e0f4331c5e19afe2d23470066d6d870ac16fdb9b5892cc79d84cfc987d486e28912e9caa3f77fdf1a5de88ae3f8b2e439a5d5ecbf042dcf7c7bca8c89f3d5f92</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/commons-io/commons-io@2.19.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://commons.apache.org/proper/commons-io/</url>
        </reference>
        <reference type="build-system">
          <url>https://github.com/apache/commons-parent/actions</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/IO</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/commons-user/</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=commons-io.git</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-lang3@3.17.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-lang3</name>
      <version>3.17.0</version>
      <description>Apache Commons Lang, a package of Java utility classes for the
  classes that are in java.lang's hierarchy, or are considered to be so
  standard as to justify existence in java.lang.

  The code is tested using the latest revision of the JDK for supported
  LTS releases: 8, 11, 17 and 21 currently.
  See https://github.com/apache/commons-lang/blob/master/.github/workflows/maven.yml
  
  Please ensure your build environment is up-to-date and kindly report any build issues.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">7730df72b7fdff4a3a32d89a314f826a</hash>
        <hash alg="SHA-1">b17d2136f0460dcc0d2016ceefca8723bdf4ee70</hash>
        <hash alg="SHA-256">6ee731df5c8e5a2976a1ca023b6bb320ea8d3539fbe64c8a1d5cb765127c33b4</hash>
        <hash alg="SHA-512">dfd5ff7fe7f852b9caabc81e5a00e20616f98405085f059b64dc2121feb5fa6cb327e11a3d2f954c079811c31f6fd484e90f932d45078796fbfa7dbf1f1eb5aa</hash>
        <hash alg="SHA-384">c6ed55a5c2b05332890a43a3ea73b30f42dc23c92ebd054a8b0d29ca8f49fb9361f7325cfa90715be457804b087221b5</hash>
        <hash alg="SHA3-384">bb9e148a87928c3053bcccee361d5d8d81b3c6ea41a390d96c615afd242409f909361c945f3b4238a297e4ebb2ed413b</hash>
        <hash alg="SHA3-256">f28f34565f25dd65fd1a47916e917df9e3ff2c6721897ea57391a238227c96a2</hash>
        <hash alg="SHA3-512">4c8e7a5f10d091bb240e7eb59287d0e4e4420e7a2d2be2b8060111e479540ffae89040377c99ec7f458cd54e1ac0ed0778951cd1f34d5d90571b8a303fbb9baf</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-lang3@3.17.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://commons.apache.org/proper/commons-lang/</url>
        </reference>
        <reference type="build-system">
          <url>https://github.com/apache/commons-parent/actions</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/LANG</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/commons-user/</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=commons-lang.git</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven.doxia/doxia-sink-api@2.0.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven.doxia</group>
      <name>doxia-sink-api</name>
      <version>2.0.0</version>
      <description>Doxia Sink API.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">0ac989158733a584c6b82e6ab1edc8ec</hash>
        <hash alg="SHA-1">d767d78857c1fb3cbd21ae3a7870894476ecb0fc</hash>
        <hash alg="SHA-256">fba33eaee3b01547bcd14b05ebc37f7dacef1819ad9ee7a5b27899afd3472cf4</hash>
        <hash alg="SHA-512">7eb92a30b7d30c5a397ac1358349560d6b8cc4ff6ca8b0d2d4ada8052bf442b6f860123355fc588ab0de46ae791c9305185fe06fb3b4ab02a74563ed7cfe3282</hash>
        <hash alg="SHA-384">55a70ff149446ab395900dd6bb15f5df1d9abd95466263df2ad1b24c385c7d5321268b0171095bef8043e205ebbb7d14</hash>
        <hash alg="SHA3-384">f1ec162d2f0191e022a342ff4c27487a107c642ea9d8714932c851628ee783246d3991591dc8a39d98da744afefd5cca</hash>
        <hash alg="SHA3-256">81ec30177ed5a89a7587e204e8d23b38cf429c0dd133bf7bacdda99247b6693b</hash>
        <hash alg="SHA3-512">b486bb7701528aac0105fb751a140b7edb5c71435918d87c0635b760bcfd1166c82b9aa99ad1e22432a63788a7cc41e9860921d06c719aeddf339e3fd3eba83d</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven.doxia/doxia-sink-api@2.0.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://maven.apache.org/doxia/doxia/doxia-sink-api/</url>
        </reference>
        <reference type="build-system">
          <url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-doxia/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/DOXIA</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?users@maven.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/maven-doxia/tree/doxia-2.0.0/doxia-sink-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven.doxia/doxia-core@2.0.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven.doxia</group>
      <name>doxia-core</name>
      <version>2.0.0</version>
      <description>Doxia core classes and interfaces.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">c0fb5fa304380a070a896e79a62b6932</hash>
        <hash alg="SHA-1">6b8dd422ff321fdbf32a0196b85cce3d63cfe68c</hash>
        <hash alg="SHA-256">939183cf5ced6741745b2475a4adf78ca85885ee0dad6dae28dd3f25bd447ff3</hash>
        <hash alg="SHA-512">254ba191aa9a3badee94990bdfce0d629faed0634990060fec014801f02cb8c902be4fa887ee7ad8fbdb0628e132257946f55e2cf34d2aee9e80d4e59db919b5</hash>
        <hash alg="SHA-384">67f5e1d315f1277e41e976cd19bbf09af2e68500d73e947e18b77c42b996d7ae709af296cd6f822a9bc080827a35eb32</hash>
        <hash alg="SHA3-384">e07e1c7b41c21b3edbfec8ed9b0defa6e0bdd9ecfc3da020f0d483d27d199e22833292de4e04cd14494fd373ff70a191</hash>
        <hash alg="SHA3-256">01bcf009f82c3480b30905d40c660671c77a34e78e17533e6bf5891d2abd4ada</hash>
        <hash alg="SHA3-512">c2b77bf05c1d98eac15ccc2b5849d3bedf3059f48f00ffd06c4984d53f81e9c8e7e677e7c96ae2cf174d6a1a6e0a21f6afa0e200e3eee0873a80b775ebad5b1a</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven.doxia/doxia-core@2.0.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://maven.apache.org/doxia/doxia/doxia-core/</url>
        </reference>
        <reference type="build-system">
          <url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-doxia/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/DOXIA</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?users@maven.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/maven-doxia/tree/doxia-2.0.0/doxia-core</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-text@1.12.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-text</name>
      <version>1.12.0</version>
      <description>Apache Commons Text is a set of utility functions and reusable components for the purpose of processing
    and manipulating text that should be of use in a Java environment.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">544add6fbc8d4b100b07c3692d08099e</hash>
        <hash alg="SHA-1">66aa90dc099701c4d3b14bd256c328f592ccf0d6</hash>
        <hash alg="SHA-256">de023257ff166044a56bd1aa9124e843cd05dac5806cc705a9311f3556d5a15f</hash>
        <hash alg="SHA-512">7d198cc288e4d515f37c81d0dcd1210bce3594d2a06a11f6a78566d33c33acdb4f292b0b42c87281b69fe3af891966bca708e25fa29b1b3536e9f951f5b57d7c</hash>
        <hash alg="SHA-384">4f471c41486a396f25e6956750440aa05c294778ae1ffaafba1f8596f0d49da45b56ad829d59343900fca7c0db461bbe</hash>
        <hash alg="SHA3-384">685ab7392554fd43e5ec7fcd1f6faab19a74d0541927e947334ac9ae1e97e6d12590998f091ef4293738e3763999a6cc</hash>
        <hash alg="SHA3-256">ed3e3bb796583c58c587be9c692cef80f6e7496120963d9b47cef453d2b6f20d</hash>
        <hash alg="SHA3-512">f5fcacd33f37676d354c836329c41347a4023f851ec0b24785c64c46c72c609dc64599413f2a6a3ecab4e45fcdbb3b487ca36a9b67fcd1c457bd09e1b5530137</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-text@1.12.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://commons.apache.org/proper/commons-text</url>
        </reference>
        <reference type="build-system">
          <url>https://github.com/apache/commons-parent/actions</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/TEXT</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/commons-user/</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=commons-text.git</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.19.0?type=jar">
      <publisher>FasterXML</publisher>
      <group>com.fasterxml.jackson.core</group>
      <name>jackson-core</name>
      <version>2.19.0</version>
      <description>Core Jackson processing abstractions (aka Streaming API), implementation for JSON</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">d741d9cff5a56cb6f1307abe947fb7c1</hash>
        <hash alg="SHA-1">a90640e59ea42632a8e331ff1d6b706cf306050a</hash>
        <hash alg="SHA-256">da8e859bac94874528116a25f20c68560e4287acbf27628711b8a4f96b028430</hash>
        <hash alg="SHA-512">2528a8239e19956a67907a7f99db62a85c745535f67e393a7b323123c6488c9c8e7a083804aee9a4c0317d5eeba0b0990545f697b0a38bc0a60286c77caee556</hash>
        <hash alg="SHA-384">251fec00db21cb056876b49152105a04a27a494ba46ecdfe10427fb9a4b8cd69387c9a6b0057953d74745db853ae1db9</hash>
        <hash alg="SHA3-384">ca2dc9a3e73af60771559a9f94d936c1cd84f7deff6f2d797f6bda873d6fa87bf48a2e9a44d5909365c94d9cf304d5f5</hash>
        <hash alg="SHA3-256">a75de4256551184e3920c457202526cd8b64cbed36e38a4eda6d37a11854aec2</hash>
        <hash alg="SHA3-512">1737c56a27ee88b1017c8a4e5c583171f1d7f4bbc1cef5d462dd9bef78b82f2efdd564ab17ca59f6f0bd2b845a5357ad281818c73a747eba5091154fc4d57d54</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.fasterxml.jackson.core/jackson-core@2.19.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/FasterXML/jackson-core</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/FasterXML/jackson-core/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/FasterXML/jackson-core</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.0?type=jar">
      <publisher>FasterXML</publisher>
      <group>com.fasterxml.jackson.core</group>
      <name>jackson-databind</name>
      <version>2.19.0</version>
      <description>General data-binding functionality for Jackson: works on core streaming API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">0bf98314940eeb0cd056277e4bd377b5</hash>
        <hash alg="SHA-1">b3f7506f6414fb04760561eec11a0880165c2a4a</hash>
        <hash alg="SHA-256">ceda311f476c3b18e1d2b240c94e2dcb9c8d44e70f8afa9facab88bac4ddc03a</hash>
        <hash alg="SHA-512">0e9229bd8641ae2297700b8997ca4a26dae50d8e3dfe89c84301112304484ca6551b5d578e5a7d23945d314cb31e84383a821b974be75484efadd301c89bb738</hash>
        <hash alg="SHA-384">8dd4d4f8983abeadcdbf9700ca462cd04b31f5ee65d5a551a769ab2e1bdcecf9a25476cc84b776ee5a4f3c6a1b958dd8</hash>
        <hash alg="SHA3-384">3ad31f3fdf96f6c1a337057084d8d3f7f06c30d8c067055f3a4d8ccc9742587417d96b1f1e2370b8ee55f61853273963</hash>
        <hash alg="SHA3-256">53a458a0f6910b1cbec8c4e74302b8a8e24a92212f4df812ea9712b065b2bf44</hash>
        <hash alg="SHA3-512">62c83edf90a68c3c9c54995a895a16c24d5d9edfe01ddf34e4612532c528f5e0e046d3589331dcbecc259b08a41b64ef0a24c3f3e09e4eab5ed6725fe44568f9</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/FasterXML/jackson</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/FasterXML/jackson-databind/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/FasterXML/jackson-databind</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.19.0?type=jar">
      <publisher>FasterXML</publisher>
      <group>com.fasterxml.jackson.core</group>
      <name>jackson-annotations</name>
      <version>2.19.0</version>
      <description>Core annotations used for value types, used by Jackson data binding package.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">59c24289bcb30ba31ef04c2cc0ff000d</hash>
        <hash alg="SHA-1">fd1e7c56de1e5b658563c8c66d5074cceb4e3a0b</hash>
        <hash alg="SHA-256">ead60e9cac0e42b57092b9e2d087ff43536e9477d4486ba393037a8cc156cda7</hash>
        <hash alg="SHA-512">ca3b4c2e46e60aeee041e03879381819edd2d9309eda545caffeb99fff9506c83c42d6f578920661d2a2eca6a7d9aa7c13f7d850b7b697b1125b6ba37da9de97</hash>
        <hash alg="SHA-384">fc0eea9870c458aca7d8c8e591094915606b62cfe59dd41b9043b4fff9856570dd5f96ec022b0497f5cd9b84d1e71b98</hash>
        <hash alg="SHA3-384">a21c01c8925a0dab61ffa273f639cfa5eda806778ee646ed7a8279a456412a70a0ecd47fbb31faae3e10b17c0410aa8c</hash>
        <hash alg="SHA3-256">36d2935f972151d7a9c192fe304ffcab98169b77bef85342073b5219d2497fb1</hash>
        <hash alg="SHA3-512">91c30ac2087cd1995fec4283fa394d9d56d2a5fdbc74740432dcf65e74cab1857c7f7affaf2e1a799440c6ebd885f16cdeb89f9ef6f8fbfc37de115bd51f036e</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.19.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/FasterXML/jackson</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/FasterXML/jackson-annotations/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/FasterXML/jackson-annotations</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.xmlrpc/xmlrpc-client@3.1.3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.xmlrpc</group>
      <name>xmlrpc-client</name>
      <version>3.1.3</version>
      <description>Apache XML-RPC is a Java implementation of XML-RPC, a popular protocol that uses XML over HTTP to
    implement remote procedure calls. Compared to SOAP, or JAX-RPC, it is stable, much simpler and easier to handle.
    Version 3 of Apache XML-RPC introduces several important vendor extensions over the original XML-RPC
    specification.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">e304ace736f9812b950f69788bb38a9d</hash>
        <hash alg="SHA-1">e486ad917028b52265610206fb5a1e2b5914b94b</hash>
        <hash alg="SHA-256">0ec351e5475d5b438132ffd7985269ad43f4d22767cd65902437b487b27c57fb</hash>
        <hash alg="SHA-512">072cf8006f14edbb3718f34e264aec8c1d3de741ef196e62e2fe0a585c5332ed271072eb6502954f0cb192282f6ff86a284574e7ed5d3bd58cbc8510dae8f234</hash>
        <hash alg="SHA-384">3ce1c0237ca211b29f53597f2571b3b3f984405d9c587c5c1554886bff3e807b45690cd00427030b7052fa76fb69c18f</hash>
        <hash alg="SHA3-384">661deadff12fec8d2ff105ec6a9008dcc888de9f21e57fdb439ccfabc6d038138c6270995dc8b5719294274410929f58</hash>
        <hash alg="SHA3-256">586133924defa384f9a7745d0dea926736dcb5710ef6411bc1c8e1315fd8b9d9</hash>
        <hash alg="SHA3-512">2315d9f97bdc7a112294abc16f91938135984a53129fca7aec1694e3fc02a4cf2af50dc3c7344b591c1d5b8245fa8fcf5f9906d38c91106246879e1e1dea8b9c</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.xmlrpc/xmlrpc-client@3.1.3?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://ws.apache.org/xmlrpc/xmlrpc-client/</url>
        </reference>
        <reference type="build-system">
          <url>http://vmgump.apache.org/gump/public/ws-xmlrpc/xmlrpc/index.html</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>http://issues.apache.org/jira/BrowseProject.jspa?pid=10465</url>
        </reference>
        <reference type="mailing-list">
          <url>http://mail-archives.apache.org/mod_mbox/ws-xmlrpc-dev/</url>
        </reference>
        <reference type="vcs">
          <url>https://svn.apache.org/viewvc/webservices/xmlrpc/tags/xmlrpc-3.1.3/xmlrpc-client</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.kohsuke/github-api@1.327?type=jar">
      <group>org.kohsuke</group>
      <name>github-api</name>
      <version>1.327</version>
      <description>GitHub API for Java</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">2f39b3b18d2ae50fa8b7e8262e604f15</hash>
        <hash alg="SHA-1">82c1da388b88856b769db2ebf68b7cd7ae6a17a5</hash>
        <hash alg="SHA-256">ca8bf6ef733fcbd5d802ff537844bdb58abd7196f7ea7541bfcffd75ab6912b8</hash>
        <hash alg="SHA-512">08520521e233f0d95e0a726ddc06ae3dd6bb6e724389950445309be5f74fc48de141bba0b1e728b273089ad3bd3ee5041170b168e4ab3dd81972e566b29dbad1</hash>
        <hash alg="SHA-384">50c7bd82972769e575167fd3551f279dd7a53054439b2334dad32cfbec2ee3b189c0c96db68d6752287039615981071a</hash>
        <hash alg="SHA3-384">75b78e6a151e40d1e762c45905a5b61e3c8f2bb395276faa59d6f6e6bf162a630444822b5dc03e4edb569b714684a42a</hash>
        <hash alg="SHA3-256">26acddf586a110d3c83a1d09741b01b005729cdc589d2f2577a71110270207bf</hash>
        <hash alg="SHA3-512">4b4df278d6e606cf1d40fa18052ddcc22012acb4eae034c0ea373bbd5a47178afb5c6216c090fa5dca9431e79d616cb0354ca1d992acd7597e2dbcd5dab76796</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.kohsuke/github-api@1.327?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github-api.kohsuke.org/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://s01.oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="mailing-list">
          <url>https://groups.google.com/forum/#!forum/github-api</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/hub4j/github-api/</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.rometools/rome@2.1.0?type=jar">
      <group>com.rometools</group>
      <name>rome</name>
      <version>2.1.0</version>
      <description>All Roads Lead to ROME. ROME is a set of Atom/RSS Java utilities that make it
        easy to work in Java with most syndication formats. Today it accepts all flavors of RSS
        (0.90, 0.91, 0.92, 0.93, 0.94, 1.0 and 2.0), Atom 0.3 and Atom 1.0 feeds. Rome includes
        a set of parsers and generators for the various flavors of feeds, as well as converters
        to convert from one format to another. The parsers can give you back Java objects that
        are either specific for the format you want to work with, or a generic normalized
        SyndFeed object that lets you work on with the data without bothering about the
        underlying format.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">6d9c631b3729c4bb309c9eefea38e691</hash>
        <hash alg="SHA-1">be1642a0d29daef84db51344151877161e22b07e</hash>
        <hash alg="SHA-256">d4e0bb6857a25ee15e2082be6e83e1da897cfbabb025bfe01ae00346d7db7c78</hash>
        <hash alg="SHA-512">7c34f65adf2361608707dc6524a61dd65685e7901684ebd9d01d635aa1ad2be4ffb591db10760e1f6f51bcff1c2982312ec24fd995df8d53dbb37e5f104b59cd</hash>
        <hash alg="SHA-384">40424d8a2b1aef867add3ad8ce9277315acbe4becb0c5c5395de4138bac2d4ba526bcf0be44f8450b56bd82ba45425e4</hash>
        <hash alg="SHA3-384">4e48ccf0ca3c7f3f1d2cc55997790d799cea9beb4a7b016b427bfc0b789321533ffb0b4ee1091837eae432a3bf71a481</hash>
        <hash alg="SHA3-256">12824b1233a9e402bc8b86113c40ea91ab057b3131507726d038f2cd17aefc3c</hash>
        <hash alg="SHA3-512">9b73c9bd0cc5dcb455418269b96e1574ff9e48adea2c050111a1edd02ce5b6dbb91fb2b74d756946bda2a878c3ecf8814edb52e46f80ccd26488f2b155fb9983</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.rometools/rome@2.1.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://rometools.com/rome</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/rometools/rome/rome</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.rometools/rome-utils@2.1.0?type=jar">
      <group>com.rometools</group>
      <name>rome-utils</name>
      <version>2.1.0</version>
      <description>Utility classes for ROME projects</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">98bb6706317f34b20e53fb375f938739</hash>
        <hash alg="SHA-1">970519368c1406108191ac19e6bf7939a9018df1</hash>
        <hash alg="SHA-256">6e1c3b022dff4cf7492acddbba22356f424ade3d869a42a2a4d74a28454334a4</hash>
        <hash alg="SHA-512">ce37793af2eaab5c0c545b5b7ba272b2b937dc8db48b8a73bc6820db1624ca9ad640180f34dfdb3b05726249c3c05e987bc018986145d18e5edf64ae9db98703</hash>
        <hash alg="SHA-384">481e013450d2bc1785260dab0bd29a3e65f24e444e1382db037b8d953c2ab7f4da7d86b43e0d28c5aa8a741cfeb02cc3</hash>
        <hash alg="SHA3-384">7f7a210e3ee1bb6b0787e5f3d3e5ad423ac70cd7c8739e710558743fbf278963759c384a6037ba972d961e6f2d84a4b3</hash>
        <hash alg="SHA3-256">5e33b2c66d6336267c78867fb85943b3d8fdfbf3778c7dd075ca0cfa852ba8d2</hash>
        <hash alg="SHA3-512">7452a299e082dd9abdc744252353b801a3c740f86183910c50b828b986315b110c8d063e3138e2a7d3411ec56c2ef195e32174cf704bca4f0459a84efe3daa31</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.rometools/rome-utils@2.1.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://rometools.com/rome-utils</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/rometools/rome/rome-utils</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.jdom/jdom2@2.0.6.1?type=jar">
      <publisher>JDOM</publisher>
      <group>org.jdom</group>
      <name>jdom2</name>
      <version>2.0.6.1</version>
      <description>A complete, Java-based solution for accessing, manipulating, 
		and outputting XML data</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">5be72710c66f3c9ba71f8009e92597d1</hash>
        <hash alg="SHA-1">dc15dff8f701b227ee523eeb7a17f77c10eafe2f</hash>
        <hash alg="SHA-256">0b20f45e3a0fd8f0d12cdc5316b06776e902b1365db00118876f9175c60f302c</hash>
        <hash alg="SHA-512">81642db76358fbf131dfe9c2f1d9c280fc23b6bfde6a16a2d36dacc490a1a2af4e0fb4abb5cd78005718bb1d158a42fd6834cd2bfe616ec59625df01951f2478</hash>
        <hash alg="SHA-384">b50c9b35d4b884a4f6174febd926533d1a23d1779a5b757b2ec95fbf8560771379b1abf138b150b170c3ed7bfbea5fa1</hash>
        <hash alg="SHA3-384">2987085748db12fa958ccf2deca4d9307ef4a96730ace701afb39f828b1f513190497f474f26b5b56c8076135f56f088</hash>
        <hash alg="SHA3-256">a33b1e2a9308fe86fe514356807efd152c7be0fdae8e77b28de8c392c34ddcc8</hash>
        <hash alg="SHA3-512">08eafd9535e52f04650bc841b1f92bf2752938d11fab955c631cc448d6e615b281841c8290f102448927d6d29bcd6a8223eafe9e6f36a20ec94b92fe91aabdf2</hash>
      </hashes>
      <licenses>
        <license>
          <name>Similar to Apache License but with the acknowledgment clause removed</name>
          <url>https://raw.github.com/hunterhacker/jdom/master/LICENSE.txt</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.jdom/jdom2@2.0.6.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://www.jdom.org</url>
        </reference>
        <reference type="mailing-list">
          <url>http://jdom.markmail.org/</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/junit/junit@4.13.2?type=jar">
      <publisher>JUnit</publisher>
      <group>junit</group>
      <name>junit</name>
      <version>4.13.2</version>
      <description>JUnit is a unit testing framework for Java, created by Erich Gamma and Kent Beck.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">d98a9a02a99a9acd22d7653cbcc1f31f</hash>
        <hash alg="SHA-1">8ac9e16d933b6fb43bc7f576336b8f4d7eb5ba12</hash>
        <hash alg="SHA-256">8e495b634469d64fb8acfa3495a065cbacc8a0fff55ce1e31007be4c16dc57d3</hash>
        <hash alg="SHA-512">a31b9950f929a7e5a600d89787ef40e42a8a8e2392e210d0c0f45b3572937670a18a524f1815508cd1152cd1eaa7275cb7430ba45c053be365c83c231bccd3f0</hash>
        <hash alg="SHA-384">9f85c56a77c699eb87630b9e8224068a34c296bcd9aadb52248dd4665036f5bf1048fe75e5cb590b59e7855ca716acae</hash>
        <hash alg="SHA3-384">590cfd9396424583879ca8ad732870406bab18325ac72fb2bbe188b9611278d6341700badf7cfc32525b8ff42900c905</hash>
        <hash alg="SHA3-256">a06b3fd2fd1d9f4306b58125484e3605a395afe5ffe2c801e43ae462f366a430</hash>
        <hash alg="SHA3-512">a6d25ce3c14f9065f06dfd0e68e1dad5c03bd5de0a302c44ca4733d2cb87ec1bc6f0abd36d65aeee8caf328b6881432c4b682fa4b4b1fa931c3c950de5129fb2</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-1.0</id>
          <url>http://www.eclipse.org/legal/epl-v10.html</url>
        </license>
      </licenses>
      <purl>pkg:maven/junit/junit@4.13.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://junit.org</url>
        </reference>
        <reference type="build-system">
          <url>https://github.com/junit-team/junit4/actions</url>
        </reference>
        <reference type="distribution">
          <url>https://github.com/junit-team/junit4/wiki/Download-and-Install</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/junit-team/junit4/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/junit-team/junit4</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.hamcrest/hamcrest-core@1.3?type=jar">
      <group>org.hamcrest</group>
      <name>hamcrest-core</name>
      <version>1.3</version>
      <description>This is the core API of hamcrest matcher framework to be used by third-party framework providers. This includes the a foundation set of matcher implementations for common operations.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">6393363b47ddcbba82321110c3e07519</hash>
        <hash alg="SHA-1">42a25dc3219429f0e5d060061f71acb49bf010a0</hash>
        <hash alg="SHA-256">66fdef91e9739348df7a096aa384a5685f4e875584cce89386a7a47251c4d8e9</hash>
        <hash alg="SHA-512">e237ae735aac4fa5a7253ec693191f42ef7ddce384c11d29fbf605981c0be077d086757409acad53cb5b9e53d86a07cc428d459ff0f5b00d32a8cbbca390be49</hash>
        <hash alg="SHA-384">4b5297d2a12cc32b824153afc83f1ba9f1869ca288330f0a2f759659d09e4c420eb6ba4a1efbfa0657b625edd41293d5</hash>
        <hash alg="SHA3-384">b14d34985c0a78cf0ba19b5a18bffd403e08adcb2afde228ddef6e16121c7046dbebf58c04d3419311c4496c48aa93be</hash>
        <hash alg="SHA3-256">f679af77deedf69b3c3066f7916583848c6fd32a950f9c0b0e2ef1da121717ba</hash>
        <hash alg="SHA3-512">bca821931e438a1977b7b4356b5f8cebf485634f82159d505c48267c34e6a0f4fde9c2917331365f66dc0e52e2ca3a2db5256863584110c27ecebefc28741f63</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.hamcrest/hamcrest-core@1.3?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/hamcrest/JavaHamcrest/hamcrest-core</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/hamcrest/JavaHamcrest/hamcrest-core</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.codehaus.plexus/plexus-archiver@4.8.0?type=jar">
      <publisher>Codehaus Plexus</publisher>
      <group>org.codehaus.plexus</group>
      <name>plexus-archiver</name>
      <version>4.8.0</version>
      <description>The Plexus project provides a full software stack for creating and executing software projects.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">d2ec7fb02b77712dc9d95250f0c759f8</hash>
        <hash alg="SHA-1">3083832db67d19f03b5a8d50754a2c295ddcb504</hash>
        <hash alg="SHA-256">24513c9bc6d52716f5a22f7ef03e26c310f62ebcde309de9833deac6a4ac32e3</hash>
        <hash alg="SHA-512">4932381bf32646ac73bffc3104b57cac5a07357ecfa0ed9da369cbb92ad70b709b4fa06873aac4b6514cccdd387ed6e2d56a73258ab5cd35f6837656fbbd46bf</hash>
        <hash alg="SHA-384">c0784c380992d17c30cf11f156ed1450806f2828cc9acae91262118b705a062585e606368d0c315b4041e16eba721efc</hash>
        <hash alg="SHA3-384">1afd40d221e9e0036bbb20102ffbb11cf094cec12b4ebaf8b229f2fc10e570113c8bbbad3cb82afb593fd796156c30ff</hash>
        <hash alg="SHA3-256">b0552cc06c828a585b07be684633303198fe712ef1e557d79248876e2ffd8355</hash>
        <hash alg="SHA3-512">7661343c59c0c9f34ad1c89c7b3759dca1ba6a93ab12fcf773e0489f16049297cae54984c40963900b25e80dae02fcb8048dd722d01aa8707605946b21a941ab</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.codehaus.plexus/plexus-archiver@4.8.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://codehaus-plexus.github.io/plexus-archiver/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/codehaus-plexus/plexus-archiver/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://groups.google.com/forum/#!forum/mojohaus-dev</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/codehaus-plexus/plexus-archiver/tree/plexus-archiver-4.8.0/</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.codehaus.plexus/plexus-io@3.4.1?type=jar">
      <publisher>Codehaus Plexus</publisher>
      <group>org.codehaus.plexus</group>
      <name>plexus-io</name>
      <version>3.4.1</version>
      <description>The Plexus project provides a full software stack for creating and executing software projects.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">7921fc78e18b1dc3dabe8ca5e3558657</hash>
        <hash alg="SHA-1">e9dc0280372501917a124af943dcb709f73577a2</hash>
        <hash alg="SHA-256">ac3be07c2968f98656604ddb8fdf08f1cfc560bc7b329fd17847f151510dc2c4</hash>
        <hash alg="SHA-512">c1555c9c23b61cd9fa1ee39c4015652eedf7e593e0515188d60ce66d1e33852e3570db7c6a471c3d128cbb0cb3bad1aaa526d2db532b0ed73b85678fb5436a5c</hash>
        <hash alg="SHA-384">96a7ad4a6ace76b43a3188e621431b316b671b416f1fb894db73ab8c57729234c2ae4b4f0680045df7a3f54e1699107b</hash>
        <hash alg="SHA3-384">6e6295afe879f7236bd223f14102ceb3714f18fe539c9c1c65782d9fa250aaf90a57a433ff9df264a66053170408dc68</hash>
        <hash alg="SHA3-256">ab97d2c2f4df777fb6e1a01b781c58e644b4bd2f6093d0dcd31533685d01bee4</hash>
        <hash alg="SHA3-512">9d2aa908d414745ad92fae20b8b2cf833e137293a5e01d95c5308ab1464636696d7aa6351cf62323858e7942aa64a6af676710c8788ea6bc1ebadb094353a2a4</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.codehaus.plexus/plexus-io@3.4.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://codehaus-plexus.github.io/plexus-io/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/codehaus-plexus/plexus-io/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>http://archive.plexus.codehaus.org/user</url>
        </reference>
        <reference type="vcs">
          <url>http://github.com/codehaus-plexus/plexus-io</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-compress@1.23.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-compress</name>
      <version>1.23.0</version>
      <description>Apache Commons Compress software defines an API for working with
compression and archive formats.  These include: bzip2, gzip, pack200,
lzma, xz, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4,
Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">96b88349958aeaa15cdf6e5e877bdced</hash>
        <hash alg="SHA-1">4af2060ea9b0c8b74f1854c6cafe4d43cfc161fc</hash>
        <hash alg="SHA-256">c267f17160e9ef662b4d78b7f29dca7c82b15c5cff2cb6a9865ef4ab3dd5b787</hash>
        <hash alg="SHA-512">e1ee5b7526ca1b6b67b3a6671d13899048f078bf0e73c1e9c601d947dcc9fd5c78cec9592b2a7a586faf4a7fba1c6885f679375cc2f06680a13ecfdad1ed41dd</hash>
        <hash alg="SHA-384">10e49e696c18750c37eee7807aca1ef28fadf2c9da6eabb3b5443bb0e1fa8ebd6638addb2042f27e9a9874495eb10d1c</hash>
        <hash alg="SHA3-384">fe9088b53e6a4e89332b61320b31f206b9217f3eb0adc66968a7d82c020ff263b39b686bcef6ef672d14954515edc514</hash>
        <hash alg="SHA3-256">9e2ed6dd76655e6c27cd0e4e27a00c32f6e08ad058be4865a33268781484424f</hash>
        <hash alg="SHA3-512">30b82c3fe576ed24cd82f2941c5bceccd8ceca3b868b91d0f8cdc2d64ac801101c47519ef4984a7af3b5f1a18e5e87bc6572ac8d21f4b91e689d3cd2e0f14694</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-compress@1.23.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://commons.apache.org/proper/commons-compress/</url>
        </reference>
        <reference type="build-system">
          <url>https://github.com/apache/commons-parent/actions</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/COMPRESS</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/commons-user/</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=commons-compress.git</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.iq80.snappy/snappy@0.4?type=jar">
      <group>org.iq80.snappy</group>
      <name>snappy</name>
      <version>0.4</version>
      <description>Port of Snappy to Java</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">f0792d1dbe7f90d8b34c7c19961e0073</hash>
        <hash alg="SHA-1">a42b2d92a89efd35bb14738000dabcac6bd07a8d</hash>
        <hash alg="SHA-256">46a0c87d504ce9d6063e1ff6e4d20738feb49d8abf85b5071a7d18df4f11bac9</hash>
        <hash alg="SHA-512">dfd2559bf0388c6f1987d1393497a423203b2a72febbe648b3429e4d07b47a504797228e6e4e39a94c6800c5d3df8d3792863a3b841e6e8f65cfdcda91b6f0ab</hash>
        <hash alg="SHA-384">7b5feeb0f1ee3fd3f5cd17c5ea31a75cdd060e7beaa1773474727711c308d2cf5b900b5717965afe8c14912e33c41538</hash>
        <hash alg="SHA3-384">d96d486687e858c1ebe1fadbd731d33e0233922eee703f1a4e36e68fa1dcc527cdcc4fae8fc91894ebeada2a1214606e</hash>
        <hash alg="SHA3-256">cf1b329b3f46891dc9e86fe9c6350a023dc0cb411739d2fd9d35490dfa8397aa</hash>
        <hash alg="SHA3-512">3a8584d15b63d4c371fed5b615f7a121fe2530d35d234b2caa499c53e7c558376ed22d289828276fbc77cd7c1311ba4d6c1af03edf08c5f051d5b674f01e6120</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.iq80.snappy/snappy@0.4?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://github.com/dain/snappy</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="vcs">
          <url>http://github.com/dain/snapy/tree/master</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.tukaani/xz@1.9?type=jar">
      <group>org.tukaani</group>
      <name>xz</name>
      <version>1.9</version>
      <description>XZ data compression</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">57c2fbfeb55e307ccae52e5322082e02</hash>
        <hash alg="SHA-1">1ea4bec1a921180164852c65006d928617bd2caf</hash>
        <hash alg="SHA-256">211b306cfc44f8f96df3a0a3ddaf75ba8c5289eed77d60d72f889bb855f535e5</hash>
        <hash alg="SHA-512">a4362db234d4e83683e90f5baf90c82107450cc4404acab96e3fab14b8a3d4588a19722171d32f27d18463682a6994cad9af0b1065c954e3a77ea7bdcf586bac</hash>
        <hash alg="SHA-384">aa30349b094723369908369a18e2cb5beb5b7ca0b24b4d56c2f5725fae152220f6526466672b22bfec939e2e0622a01d</hash>
        <hash alg="SHA3-384">b3e1fee7784188df5e1931c9e8137ac0e20e63f66f93e7f938a448fc0b3adb4be5205c7a5f1835007e233fee2696fc2c</hash>
        <hash alg="SHA3-256">92eff603ed0aab557e1a45e17a74e80d8ec656b5f137197b23c429c903fa448f</hash>
        <hash alg="SHA3-512">b290f92958f8cd91705331d8411140c23957ab8b568fbe19a70f4f1dc97eddc13d3a200df28a02ab5911ce18f546c33f720878be0f727edac839a6e63ee66ece</hash>
      </hashes>
      <licenses>
        <license>
          <name>Public Domain</name>
        </license>
      </licenses>
      <purl>pkg:maven/org.tukaani/xz@1.9?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://tukaani.org/xz/java.html</url>
        </reference>
        <reference type="vcs">
          <url>https://git.tukaani.org/?p=xz-java.git</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.github.luben/zstd-jni@1.5.5-5?type=jar">
      <publisher>com.github.luben</publisher>
      <group>com.github.luben</group>
      <name>zstd-jni</name>
      <version>1.5.5-5</version>
      <description>JNI bindings for Zstd native library that provides fast and high compression lossless algorithm for Java and all JVM languages.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">0e164757192c4dcf3c524f6cabeb8494</hash>
        <hash alg="SHA-1">74ffdc5f140080adacf5278287aadd950179f848</hash>
        <hash alg="SHA-256">c78d4e139894f555d956d12fbfcf3d45af751d4b2f183880ed5f99b69b284416</hash>
        <hash alg="SHA-512">00e9e20c68e74a890be0089b6f10a677876a2ecfc6b1b98f449bcf13d0fa91d4c68c7cc3dc7fec5fc575053d778517af52e0a7ffcb1c26d8e7bc02ed304edda5</hash>
        <hash alg="SHA-384">fec680d74af046105be755c727f04cc753872820405fee71e1c7c27cd0ef18c77f629925e379f8b54f6daafada85b809</hash>
        <hash alg="SHA3-384">bf25464025522c6555d14fa7c05dbec1316aba69b5c2cf0b1a2ae334c47289b23a176cab853977d023b9c706ef9034b0</hash>
        <hash alg="SHA3-256">68ef7b45e04c61c16991172e9dc67273c466729b1e9969aa2c3cd7bd010f1ece</hash>
        <hash alg="SHA3-512">050d8a505a924a31da1190c76c0b70c4fbe9589c907c94a5ad08469ec5bb7f13a10ca7f78fd5f96799a1561f793d8853452ebd638b68b5936da0f300bd4a009e</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-2-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.github.luben/zstd-jni@1.5.5-5?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/luben/zstd-jni</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.guava/guava@32.0.1-jre?type=jar">
      <group>com.google.guava</group>
      <name>guava</name>
      <version>32.0.1-jre</version>
      <description>Guava is a suite of core and expanded libraries that include
    utility classes, Google's collections, I/O classes, and
    much more.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">6951895e804b36322214c95917e598d4</hash>
        <hash alg="SHA-1">6e5d51a72d142f2d40a57dfb897188b36a95b489</hash>
        <hash alg="SHA-256">bd7fa227591fb8509677d0d1122cf95158f3b8a9f45653f58281d879f6dc48c5</hash>
        <hash alg="SHA-512">5dbe7a697511cfbe44f3ffb954e32e997677ecc61f03bb7bb374f1b8fa4a931a95cd9d1f5288eb5d42e2aa380e3241b35059786c07edc48e5aa67c30cddad8a5</hash>
        <hash alg="SHA-384">abad4556e073fb38062c636b6599ceed992302c7d98150e3842d32ce92f6aac7d630633c56efa581523d591361fcf898</hash>
        <hash alg="SHA3-384">c7b02d77e04c567e8870674f71a60141e83ca9e5e9180138450ede78ad7f2be8b6636c514096e15ba2921c2889427852</hash>
        <hash alg="SHA3-256">17f18d8631c9bff9234c214522ce89eb1feef27a4dfe990760d4943ad3de710d</hash>
        <hash alg="SHA3-512">7cf7847812b47cc232ef3c27719457dd19610b3e3bb25c1be640821a3a2be67781047f41e34491b5c8ed68010bbb1d53c5f7706633f3a3f44f3f3133bb7635ec</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.guava/guava@32.0.1-jre?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/google/guava</url>
        </reference>
        <reference type="build-system">
          <url>https://github.com/google/guava/actions</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/google/guava/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/google/guava/guava</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar">
      <group>com.google.guava</group>
      <name>failureaccess</name>
      <version>1.0.1</version>
      <description>Contains
    com.google.common.util.concurrent.internal.InternalFutureFailureAccess and
    InternalFutures. Most users will never need to use this artifact. Its
    classes is conceptually a part of Guava, but they're in this separate
    artifact so that Android libraries can use them without pulling in all of
    Guava (just as they can use ListenableFuture by depending on the
    listenablefuture artifact).</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">091883993ef5bfa91da01dcc8fc52236</hash>
        <hash alg="SHA-1">1dcf1de382a0bf95a3d8b0849546c88bac1292c9</hash>
        <hash alg="SHA-256">a171ee4c734dd2da837e4b16be9df4661afab72a41adaf31eb84dfdaf936ca26</hash>
        <hash alg="SHA-512">f8d59b808d6ba617252305b66d5590937da9b2b843d492d06b8d0b1b1f397e39f360d5817707797b979a5bf20bf21987b35333e7a15c44ed7401fea2d2119cae</hash>
        <hash alg="SHA-384">67659dbd9647ec303d7f15128dc9dba19b98fd8d74758ee3b602451e32c855e236ccaafe08edf4bbfa245f981268440f</hash>
        <hash alg="SHA3-384">1460875f0331c5fa3791772a6a322a7db180261bc2adacf7271df1fbf3b088a587a755a604c039982cb593c5cfc1f101</hash>
        <hash alg="SHA3-256">ea86406e75fcd93eafe3cde1b3135ba485f1bb9b75fed98894a0bf1f0aee04f0</hash>
        <hash alg="SHA3-512">52ac0f487ab5dd27c9f2e54fd1d84c7a620cae9d49be4072aa2b11501787bf4391ddaa13d02eccdf19e8eea46aecbea5f6064b26777c1b836108a280652e04ac</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/google/guava/failureaccess</url>
        </reference>
        <reference type="build-system">
          <url>https://travis-ci.org/google/guava</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/google/guava/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/google/guava/failureaccess</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar">
      <group>com.google.guava</group>
      <name>listenablefuture</name>
      <version>9999.0-empty-to-avoid-conflict-with-guava</version>
      <description>An empty artifact that Guava depends on to signal that it is providing
    ListenableFuture -- but is also available in a second "version" that
    contains com.google.common.util.concurrent.ListenableFuture class, without
    any other Guava classes. The idea is:

    - If users want only ListenableFuture, they depend on listenablefuture-1.0.

    - If users want all of Guava, they depend on guava, which, as of Guava
    27.0, depends on
    listenablefuture-9999.0-empty-to-avoid-conflict-with-guava. The 9999.0-...
    version number is enough for some build systems (notably, Gradle) to select
    that empty artifact over the "real" listenablefuture-1.0 -- avoiding a
    conflict with the copy of ListenableFuture in guava itself. If users are
    using an older version of Guava or a build system other than Gradle, they
    may see class conflicts. If so, they can solve them by manually excluding
    the listenablefuture artifact or manually forcing their build systems to
    use 9999.0-....</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">d094c22570d65e132c19cea5d352e381</hash>
        <hash alg="SHA-1">b421526c5f297295adef1c886e5246c39d4ac629</hash>
        <hash alg="SHA-256">b372a037d4230aa57fbeffdef30fd6123f9c0c2db85d0aced00c91b974f33f99</hash>
        <hash alg="SHA-512">c5987a979174cbacae2e78b319f080420cc71bcdbcf7893745731eeb93c23ed13bff8d4599441f373f3a246023d33df03e882de3015ee932a74a774afdd0782f</hash>
        <hash alg="SHA-384">caff9b74079f95832ca7f6029346b34b606051cc8c5a4389fac263511d277ada0c55f28b0d43011055b268c6eb7184d5</hash>
        <hash alg="SHA3-384">e939f08df0545847ea0d3e4b04a114b08499ad069ba8ec9461d1779f87a56e0c37273630a0f4c14e78c348d3ac7eb97f</hash>
        <hash alg="SHA3-256">1f0a8b1177773b3a8ace839df5eed63cbf56b24a38714898a6e4ed065c42559f</hash>
        <hash alg="SHA3-512">6b495ecc2a18b17365cb08d124a0da47f04bcdde81927b5245edf3edd8e498c3c3fb92ce6a4127f660bac851bb1d3e4510e5c20d03be47ce99dc296d360db285</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/google/guava/listenablefuture</url>
        </reference>
        <reference type="build-system">
          <url>https://travis-ci.org/google/guava</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/google/guava/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/google/guava/listenablefuture</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar">
      <group>com.google.code.findbugs</group>
      <name>jsr305</name>
      <version>3.0.2</version>
      <description>JSR305 Annotations for Findbugs</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">dd83accb899363c32b07d7a1b2e4ce40</hash>
        <hash alg="SHA-1">25ea2e8b0c338a877313bd4672d3fe056ea78f0d</hash>
        <hash alg="SHA-256">766ad2a0783f2687962c8ad74ceecc38a28b9f72a2d085ee438b7813e928d0c7</hash>
        <hash alg="SHA-512">bb09db62919a50fa5b55906013be6ca4fc7acb2e87455fac5eaf9ede2e41ce8bbafc0e5a385a561264ea4cd71bbbd3ef5a45e02d63277a201d06a0ae1636f804</hash>
        <hash alg="SHA-384">ca0b169d3eb2d0922dc031133a021f861a043bb3e405a88728215fd6ff00fa52fdc7347842dcc2031472e3726164bdc4</hash>
        <hash alg="SHA3-384">9903fd7505218999f8262efedb3d935d64bcef84aae781064ab5e1b24755466b269517cada562fa140cd1d417ede57a1</hash>
        <hash alg="SHA3-256">223fda9a89a461afaae73b177a2dc20ed4a90f2f8757f5c65f3241b0510f00ff</hash>
        <hash alg="SHA3-512">3996b5af57a5d5c6a0cd62b11773360fb051dd86a2ba968476806a2a5d32049b82d69a24a3c694e8fe4d735be6a28e41000cc500cc2a9fb577e058045855d2d6</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://findbugs.sourceforge.net/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="vcs">
          <url>https://code.google.com/p/jsr-305/</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.checkerframework/checker-qual@3.33.0?type=jar">
      <group>org.checkerframework</group>
      <name>checker-qual</name>
      <version>3.33.0</version>
      <description>checker-qual contains annotations (type qualifiers) that a programmer
writes to specify Java code for type-checking by the Checker Framework.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">fc9418b779d9d57dcd52197006cbdb9b</hash>
        <hash alg="SHA-1">de2b60b62da487644fc11f734e73c8b0b431238f</hash>
        <hash alg="SHA-256">e316255bbfcd9fe50d165314b85abb2b33cb2a66a93c491db648e498a82c2de1</hash>
        <hash alg="SHA-512">049c446677b7b386f3fb501bf65e032bdf2b1b29a3f545848035fff2b683cd275380cf302e30eea641af7f0801f779bcda3d82a71d928e4176f564f796640a64</hash>
        <hash alg="SHA-384">ddf7a0f70421d1ed75e93c0a30434a4862c3905e433223e19861323cf0994e843392b746003040f10a7db6fc960b8aa6</hash>
        <hash alg="SHA3-384">edf079834fdd23317851318504b2fcc10b055cdb5cc4ada9c773d1b6c815ed6dd193c433d2b83103f070fd521021ff33</hash>
        <hash alg="SHA3-256">56244f45b03fc2a472b35489324e392e6001fac088d19f33629a87adb74a0575</hash>
        <hash alg="SHA3-512">e0516c11fe613f258bf9ad39358a8d9fb7c8df57ff9aaca5d6d16055c196fac4ed3b4185f2501a3bdf7aeb1fe142693b1d788bdaa73366be1af15762bb3591a4</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.checkerframework/checker-qual@3.33.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://checkerframework.org/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/typetools/checker-framework.git</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0?type=jar">
      <publisher>Google LLC</publisher>
      <group>com.google.errorprone</group>
      <name>error_prone_annotations</name>
      <version>2.18.0</version>
      <description>Error Prone is a static analysis tool for Java that catches common programming mistakes at compile-time.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">64145d0e7fee5a69ed7b84cf402de998</hash>
        <hash alg="SHA-1">89b684257096f548fa39a7df9fdaa409d4d4df91</hash>
        <hash alg="SHA-256">9e6814cb71816988a4fd1b07a993a8f21bb7058d522c162b1de849e19bea54ae</hash>
        <hash alg="SHA-512">3cea86be94bb8ae40d21ad4bf7d7f6b2233e89593b7b741ad84c78840cd3837bb5136f52e62fe9ae0953d7b190c46ad3edc102dfa97b4c7ea472a80206bf5db7</hash>
        <hash alg="SHA-384">7622eb33f83f03ab32b710b36c2fe836e24c5318f65fb8c0631a99507ca3ae65c2df8e33b63a5ce853b9cab6d9cb32e5</hash>
        <hash alg="SHA3-384">1ea52a5ce2a9ee1a960dc2a1bbe4b009d4d6a4448498e4cd76401605fa877662911e8c93b2b8bfda57bedc56c83f10a0</hash>
        <hash alg="SHA3-256">ed53f4295da75753267f241315352c4a39e60796f04e1c0c12d29c3a38be48ed</hash>
        <hash alg="SHA3-512">8266b313bd4e1170daf60642e838841370d99bc24b2a1f91825ca22037a6a30ff15cc76069f8e8770f1dc12772c277ee1320de67e815041697d93d6d7ba884fb</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://errorprone.info/error_prone_annotations</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/google/error-prone/error_prone_annotations</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.j2objc/j2objc-annotations@2.8?type=jar">
      <group>com.google.j2objc</group>
      <name>j2objc-annotations</name>
      <version>2.8</version>
      <description>A set of annotations that provide additional information to the J2ObjC
    translator to modify the result of translation.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">c50af69b704dc91050efb98e0dff66d1</hash>
        <hash alg="SHA-1">c85270e307e7b822f1086b93689124b89768e273</hash>
        <hash alg="SHA-256">f02a95fa1a5e95edb3ed859fd0fb7df709d121a35290eff8b74dce2ab7f4d6ed</hash>
        <hash alg="SHA-512">f8263868a792b41707c9e7fe6fa5650a14cd93fbeafad20efe3772a3058fc933eb59782ec59e6eb9b9c569aa96da80134ae9fdf7547b69c44a97087efddceeff</hash>
        <hash alg="SHA-384">e6087ec31fec8289158496ad2ed6ce8472d5d513808a312e0782cedac3b86c37a62a63c0b5ea3839491d109fe9e148a1</hash>
        <hash alg="SHA3-384">10add34bfeb8612283eef89ac96747a3c9b755acd80ad526e1addaeb7efd6323c52b9bfa1a3d34adb40e1ccb963ee65d</hash>
        <hash alg="SHA3-256">b3336f8abd6b1f73b9f06d306974557000a000073bfbae6b54fda26d17dbb072</hash>
        <hash alg="SHA3-512">d376c184a6df071c4e93b913d175b5c2e63deac37105dc20342c19bdda62e4e9598ca1e8bfb4f4fd5cdee6dd5ac3b8af49e2c5193e324d59a59ce1f7adeab627</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.j2objc/j2objc-annotations@2.8?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/google/j2objc/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="vcs">
          <url>http://svn.sonatype.org/spice/trunk/oss/oss-parent-9/j2objc-annotations</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.4.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven.resolver</group>
      <name>maven-resolver-api</name>
      <version>1.4.1</version>
      <description>The application programming interface for the repository system.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">4566dcb75f3d95fcc4c2fc83ae562f71</hash>
        <hash alg="SHA-1">ceee6b7ea1bc252afa585fa32f76c2cda206bdcd</hash>
        <hash alg="SHA-256">33dc67306cc95da14e5444e8b494d967924abf1d01bae1894676164cbd3f6112</hash>
        <hash alg="SHA-512">da56ddeecfbb6d285d08fa60f88fe125d1f08f48ea24013b83b6aadf24835c034c9b45cdb815d99505b35e0605c48b6d7e5949f1735a874049b0790e8a8461dc</hash>
        <hash alg="SHA-384">5756381d718729e842637a3865b1b597757575ff087d4a248b04eaec300f990ff505c174055f00918ab26d14e9ecff88</hash>
        <hash alg="SHA3-384">a42f1e01f6a6350d37d7db4e0a1829d399241e809cbfa713bd047105ee155d6fbdf9334ee3d7a1ddb5f9b6e959b0ba61</hash>
        <hash alg="SHA3-256">1742e3d180c14936f9e0d003c1492e94095ba230b866038250a6a66aea6a5cb6</hash>
        <hash alg="SHA3-512">bda39f42b160f16bbf9bed080a6d896a0022787d3593b8434aa3bb730825a21f19699d0c4fe676f09d0db86dae08233c6b1153572aed09b839b99ed00bef69ed</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.4.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://maven.apache.org/resolver/maven-resolver-api/</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/job/maven-box/job/maven-resolver/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/MRESOLVER</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?users@maven.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/maven-resolver/tree/maven-resolver-1.4.1/maven-resolver-api</url>
        </reference>
      </externalReferences>
    </component>
  </components>
  <dependencies>
    <dependency ref="pkg:maven/org.apache.maven.plugins/maven-changes-plugin@3.0.0-M3?type=maven-plugin">
      <dependency ref="pkg:maven/org.apache.maven/maven-core@3.6.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-artifact@3.6.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-model@3.6.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-plugin-api@3.6.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-settings@3.6.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-settings-builder@3.6.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven.plugin-tools/maven-plugin-annotations@3.15.1?type=jar"/>
      <dependency ref="pkg:maven/javax.inject/javax.inject@1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven.reporting/maven-reporting-api@4.0.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven.reporting/maven-reporting-impl@4.0.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven.shared/maven-filtering@3.4.0?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.9.0.M3?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-mail-sender-api@1.0-alpha-7?type=jar"/>
      <dependency ref="pkg:maven/org.apache.geronimo.javamail/geronimo-javamail_1.4_mail@1.8.4?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-mail-sender-javamail@1.0-alpha-7?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-mail-sender-simple@1.0-alpha-7?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@4.0.2?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-xml@3.0.1?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-velocity@2.2.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.velocity.tools/velocity-tools-generic@3.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.velocity/velocity-engine-core@2.4.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.xmlrpc/xmlrpc-common@3.1.3?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-collections4@4.5.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar"/>
      <dependency ref="pkg:maven/org.apache.httpcomponents/httpclient@4.5.14?type=jar"/>
      <dependency ref="pkg:maven/commons-io/commons-io@2.19.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.17.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven.doxia/doxia-sink-api@2.0.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven.doxia/doxia-core@2.0.0?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.19.0?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.xmlrpc/xmlrpc-client@3.1.3?type=jar"/>
      <dependency ref="pkg:maven/org.kohsuke/github-api@1.327?type=jar"/>
      <dependency ref="pkg:maven/com.rometools/rome@2.1.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.maven/maven-core@3.6.3?type=jar">
      <dependency ref="pkg:maven/org.apache.maven/maven-model@3.6.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-settings@3.6.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-settings-builder@3.6.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-builder-support@3.6.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-repository-metadata@3.6.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-artifact@3.6.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-plugin-api@3.6.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-model-builder@3.6.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-resolver-provider@3.6.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven.resolver/maven-resolver-impl@1.4.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.4.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven.resolver/maven-resolver-spi@1.4.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven.resolver/maven-resolver-util@1.4.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven.shared/maven-shared-utils@3.2.1?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.9.0.M3?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.9.0.M3?type=jar"/>
      <dependency ref="pkg:maven/com.google.inject/guice@4.2.1?classifier=no_aop&amp;type=jar"/>
      <dependency ref="pkg:maven/javax.inject/javax.inject@1?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@4.0.2?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-classworlds@2.6.0?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-component-annotations@2.1.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.17.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.maven/maven-model@3.6.3?type=jar">
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@4.0.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@4.0.2?type=jar"/>
    <dependency ref="pkg:maven/org.apache.maven/maven-settings@3.6.3?type=jar">
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@4.0.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.maven/maven-settings-builder@3.6.3?type=jar">
      <dependency ref="pkg:maven/org.apache.maven/maven-builder-support@3.6.3?type=jar"/>
      <dependency ref="pkg:maven/javax.inject/javax.inject@1?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-interpolation@1.25?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@4.0.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-settings@3.6.3?type=jar"/>
      <dependency ref="pkg:maven/org.sonatype.plexus/plexus-sec-dispatcher@1.4?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.maven/maven-builder-support@3.6.3?type=jar"/>
    <dependency ref="pkg:maven/javax.inject/javax.inject@1?type=jar"/>
    <dependency ref="pkg:maven/org.codehaus.plexus/plexus-interpolation@1.25?type=jar"/>
    <dependency ref="pkg:maven/org.sonatype.plexus/plexus-sec-dispatcher@1.4?type=jar">
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@4.0.2?type=jar"/>
      <dependency ref="pkg:maven/org.sonatype.plexus/plexus-cipher@1.4?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.sonatype.plexus/plexus-cipher@1.4?type=jar"/>
    <dependency ref="pkg:maven/org.apache.maven/maven-repository-metadata@3.6.3?type=jar">
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@4.0.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.maven/maven-artifact@3.6.3?type=jar">
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@4.0.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.17.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.17.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.maven/maven-plugin-api@3.6.3?type=jar">
      <dependency ref="pkg:maven/org.apache.maven/maven-model@3.6.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-artifact@3.6.3?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.9.0.M3?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@4.0.2?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-classworlds@2.6.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.9.0.M3?type=jar">
      <dependency ref="pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.9.0.M3?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-component-annotations@2.1.0?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-classworlds@2.6.0?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@4.0.2?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-xml@3.0.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.9.0.M3?type=jar"/>
    <dependency ref="pkg:maven/org.codehaus.plexus/plexus-component-annotations@2.1.0?type=jar"/>
    <dependency ref="pkg:maven/org.codehaus.plexus/plexus-classworlds@2.6.0?type=jar"/>
    <dependency ref="pkg:maven/org.codehaus.plexus/plexus-xml@3.0.1?type=jar"/>
    <dependency ref="pkg:maven/org.apache.maven/maven-model-builder@3.6.3?type=jar">
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@4.0.2?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-interpolation@1.25?type=jar"/>
      <dependency ref="pkg:maven/javax.inject/javax.inject@1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-model@3.6.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-artifact@3.6.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-builder-support@3.6.3?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.9.0.M3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.maven/maven-resolver-provider@3.6.3?type=jar">
      <dependency ref="pkg:maven/org.apache.maven/maven-model@3.6.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-model-builder@3.6.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-repository-metadata@3.6.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.4.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven.resolver/maven-resolver-spi@1.4.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven.resolver/maven-resolver-util@1.4.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven.resolver/maven-resolver-impl@1.4.1?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@4.0.2?type=jar"/>
      <dependency ref="pkg:maven/javax.inject/javax.inject@1?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.4.1?type=jar"/>
    <dependency ref="pkg:maven/org.apache.maven.resolver/maven-resolver-spi@1.4.1?type=jar">
      <dependency ref="pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.4.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.maven.resolver/maven-resolver-util@1.4.1?type=jar">
      <dependency ref="pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.4.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.maven.resolver/maven-resolver-impl@1.4.1?type=jar">
      <dependency ref="pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.4.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven.resolver/maven-resolver-spi@1.4.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven.resolver/maven-resolver-util@1.4.1?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    <dependency ref="pkg:maven/org.apache.maven.shared/maven-shared-utils@3.2.1?type=jar">
      <dependency ref="pkg:maven/commons-io/commons-io@2.19.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/commons-io/commons-io@2.19.0?type=jar"/>
    <dependency ref="pkg:maven/com.google.inject/guice@4.2.1?classifier=no_aop&amp;type=jar">
      <dependency ref="pkg:maven/javax.inject/javax.inject@1?type=jar"/>
      <dependency ref="pkg:maven/aopalliance/aopalliance@1.0?type=jar"/>
      <dependency ref="pkg:maven/com.google.guava/guava@32.0.1-jre?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/aopalliance/aopalliance@1.0?type=jar"/>
    <dependency ref="pkg:maven/com.google.guava/guava@32.0.1-jre?type=jar">
      <dependency ref="pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar"/>
      <dependency ref="pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar"/>
      <dependency ref="pkg:maven/org.checkerframework/checker-qual@3.33.0?type=jar"/>
      <dependency ref="pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0?type=jar"/>
      <dependency ref="pkg:maven/com.google.j2objc/j2objc-annotations@2.8?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar"/>
    <dependency ref="pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar"/>
    <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar"/>
    <dependency ref="pkg:maven/org.checkerframework/checker-qual@3.33.0?type=jar"/>
    <dependency ref="pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0?type=jar"/>
    <dependency ref="pkg:maven/com.google.j2objc/j2objc-annotations@2.8?type=jar"/>
    <dependency ref="pkg:maven/org.apache.maven.plugin-tools/maven-plugin-annotations@3.15.1?type=jar"/>
    <dependency ref="pkg:maven/org.apache.maven.reporting/maven-reporting-api@4.0.0?type=jar">
      <dependency ref="pkg:maven/org.apache.maven.doxia/doxia-sink-api@2.0.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.maven.doxia/doxia-sink-api@2.0.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.maven.reporting/maven-reporting-impl@4.0.0?type=jar">
      <dependency ref="pkg:maven/org.apache.maven.reporting/maven-reporting-api@4.0.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven.shared/maven-shared-utils@3.2.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven.doxia/doxia-sink-api@2.0.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven.doxia/doxia-site-model@2.0.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven.doxia/doxia-core@2.0.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven.doxia/doxia-integration-tools@2.0.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven.doxia/doxia-site-renderer@2.0.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven.doxia/doxia-module-apt@2.0.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven.doxia/doxia-module-xdoc@2.0.0?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@4.0.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-archiver@3.6.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.4.1?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.9.0.M3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.maven.doxia/doxia-site-model@2.0.0?type=jar">
      <dependency ref="pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.9.0.M3?type=jar"/>
      <dependency ref="pkg:maven/javax.inject/javax.inject@1?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@4.0.2?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-xml@3.0.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.maven.doxia/doxia-core@2.0.0?type=jar">
      <dependency ref="pkg:maven/org.apache.maven.doxia/doxia-sink-api@2.0.0?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/javax.inject/javax.inject@1?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@4.0.2?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-xml@3.0.1?type=jar"/>
      <dependency ref="pkg:maven/commons-io/commons-io@2.19.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-text@1.12.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.17.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.commons/commons-text@1.12.0?type=jar">
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.17.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.maven.doxia/doxia-integration-tools@2.0.0?type=jar">
      <dependency ref="pkg:maven/org.apache.maven.reporting/maven-reporting-api@4.0.0?type=jar"/>
      <dependency ref="pkg:maven/javax.inject/javax.inject@1?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/commons-io/commons-io@2.19.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven.doxia/doxia-site-model@2.0.0?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.9.0.M3?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-i18n@1.0-beta-10?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@4.0.2?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-xml@3.0.1?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-interpolation@1.25?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.codehaus.plexus/plexus-i18n@1.0-beta-10?type=jar">
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@4.0.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.maven.doxia/doxia-site-renderer@2.0.0?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/javax.inject/javax.inject@1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven.doxia/doxia-core@2.0.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven.doxia/doxia-sink-api@2.0.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven.doxia/doxia-site-model@2.0.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven.doxia/doxia-skin-model@2.0.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven.doxia/doxia-module-xhtml5@2.0.0?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.9.0.M3?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-velocity@2.2.1?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@4.0.2?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-xml@3.0.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.velocity/velocity-engine-core@2.4.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.velocity.tools/velocity-tools-generic@3.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.17.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.maven.doxia/doxia-skin-model@2.0.0?type=jar">
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-xml@3.0.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.maven.doxia/doxia-module-xhtml5@2.0.0?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/javax.inject/javax.inject@1?type=jar"/>
      <dependency ref="pkg:maven/commons-io/commons-io@2.19.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.17.0?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-xml@3.0.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven.doxia/doxia-core@2.0.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven.doxia/doxia-sink-api@2.0.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.codehaus.plexus/plexus-velocity@2.2.1?type=jar">
      <dependency ref="pkg:maven/org.apache.velocity/velocity-engine-core@2.4.1?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.velocity/velocity-engine-core@2.4.1?type=jar">
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.17.0?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.velocity.tools/velocity-tools-generic@3.1?type=jar">
      <dependency ref="pkg:maven/org.apache.velocity/velocity-engine-core@2.4.1?type=jar"/>
      <dependency ref="pkg:maven/commons-beanutils/commons-beanutils@1.9.4?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-digester3@3.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.17.0?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/com.github.cliftonlabs/json-simple@3.0.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/commons-beanutils/commons-beanutils@1.9.4?type=jar">
      <dependency ref="pkg:maven/commons-logging/commons-logging@1.2?type=jar"/>
      <dependency ref="pkg:maven/commons-collections/commons-collections@3.2.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/commons-logging/commons-logging@1.2?type=jar"/>
    <dependency ref="pkg:maven/commons-collections/commons-collections@3.2.2?type=jar"/>
    <dependency ref="pkg:maven/org.apache.commons/commons-digester3@3.2?type=jar">
      <dependency ref="pkg:maven/commons-beanutils/commons-beanutils@1.9.4?type=jar"/>
      <dependency ref="pkg:maven/commons-logging/commons-logging@1.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.github.cliftonlabs/json-simple@3.0.2?type=jar"/>
    <dependency ref="pkg:maven/org.apache.maven.doxia/doxia-module-apt@2.0.0?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/commons-io/commons-io@2.19.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.17.0?type=jar"/>
      <dependency ref="pkg:maven/javax.inject/javax.inject@1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven.doxia/doxia-core@2.0.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven.doxia/doxia-sink-api@2.0.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.maven.doxia/doxia-module-xdoc@2.0.0?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/javax.inject/javax.inject@1?type=jar"/>
      <dependency ref="pkg:maven/commons-io/commons-io@2.19.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.17.0?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-xml@3.0.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven.doxia/doxia-core@2.0.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven.doxia/doxia-sink-api@2.0.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.maven/maven-archiver@3.6.2?type=jar">
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-archiver@4.8.0?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-interpolation@1.25?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.codehaus.plexus/plexus-archiver@4.8.0?type=jar">
      <dependency ref="pkg:maven/javax.inject/javax.inject@1?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@4.0.2?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-io@3.4.1?type=jar"/>
      <dependency ref="pkg:maven/commons-io/commons-io@2.19.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-compress@1.23.0?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/org.iq80.snappy/snappy@0.4?type=jar"/>
      <dependency ref="pkg:maven/org.tukaani/xz@1.9?type=jar"/>
      <dependency ref="pkg:maven/com.github.luben/zstd-jni@1.5.5-5?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.codehaus.plexus/plexus-io@3.4.1?type=jar">
      <dependency ref="pkg:maven/javax.inject/javax.inject@1?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@4.0.2?type=jar"/>
      <dependency ref="pkg:maven/commons-io/commons-io@2.19.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.commons/commons-compress@1.23.0?type=jar"/>
    <dependency ref="pkg:maven/org.iq80.snappy/snappy@0.4?type=jar"/>
    <dependency ref="pkg:maven/org.tukaani/xz@1.9?type=jar"/>
    <dependency ref="pkg:maven/com.github.luben/zstd-jni@1.5.5-5?type=jar"/>
    <dependency ref="pkg:maven/org.apache.maven.shared/maven-filtering@3.4.0?type=jar">
      <dependency ref="pkg:maven/javax.inject/javax.inject@1?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/org.sonatype.plexus/plexus-build-api@0.0.7?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@4.0.2?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-xml@3.0.1?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-interpolation@1.25?type=jar"/>
      <dependency ref="pkg:maven/commons-io/commons-io@2.19.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.17.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.sonatype.plexus/plexus-build-api@0.0.7?type=jar">
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@4.0.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.codehaus.plexus/plexus-mail-sender-api@1.0-alpha-7?type=jar">
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@4.0.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.geronimo.javamail/geronimo-javamail_1.4_mail@1.8.4?type=jar"/>
    <dependency ref="pkg:maven/org.codehaus.plexus/plexus-mail-sender-javamail@1.0-alpha-7?type=jar">
      <dependency ref="pkg:maven/javax.mail/mail@1.4?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-mail-sender-api@1.0-alpha-7?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@4.0.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/javax.mail/mail@1.4?type=jar">
      <dependency ref="pkg:maven/javax.activation/activation@1.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/javax.activation/activation@1.1?type=jar"/>
    <dependency ref="pkg:maven/org.codehaus.plexus/plexus-mail-sender-simple@1.0-alpha-7?type=jar">
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-mail-sender-api@1.0-alpha-7?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@4.0.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.xmlrpc/xmlrpc-common@3.1.3?type=jar">
      <dependency ref="pkg:maven/org.apache.ws.commons.util/ws-commons-util@1.0.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.ws.commons.util/ws-commons-util@1.0.2?type=jar">
      <dependency ref="pkg:maven/junit/junit@4.13.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/junit/junit@4.13.2?type=jar">
      <dependency ref="pkg:maven/org.hamcrest/hamcrest-core@1.3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.hamcrest/hamcrest-core@1.3?type=jar"/>
    <dependency ref="pkg:maven/org.apache.commons/commons-collections4@4.5.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar"/>
    <dependency ref="pkg:maven/org.apache.httpcomponents/httpclient@4.5.14?type=jar">
      <dependency ref="pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar"/>
      <dependency ref="pkg:maven/commons-logging/commons-logging@1.2?type=jar"/>
      <dependency ref="pkg:maven/commons-codec/commons-codec@1.11?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/commons-codec/commons-codec@1.11?type=jar"/>
    <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.19.0?type=jar"/>
    <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.0?type=jar">
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.19.0?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.19.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.19.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.xmlrpc/xmlrpc-client@3.1.3?type=jar">
      <dependency ref="pkg:maven/org.apache.xmlrpc/xmlrpc-common@3.1.3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.kohsuke/github-api@1.327?type=jar">
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.17.0?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.0?type=jar"/>
      <dependency ref="pkg:maven/commons-io/commons-io@2.19.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.rometools/rome@2.1.0?type=jar">
      <dependency ref="pkg:maven/com.rometools/rome-utils@2.1.0?type=jar"/>
      <dependency ref="pkg:maven/org.jdom/jdom2@2.0.6.1?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.rometools/rome-utils@2.1.0?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.jdom/jdom2@2.0.6.1?type=jar"/>
  </dependencies>
</bom>
