Added: release/camel/apache-camel/4.7.0/apache-camel-4.7.0-sbom.xml ============================================================================== --- release/camel/apache-camel/4.7.0/apache-camel-4.7.0-sbom.xml (added) +++ release/camel/apache-camel/4.7.0/apache-camel-4.7.0-sbom.xml Sat Jul 13 06:16:44 2024 @@ -0,0 +1,75740 @@ +<?xml version="1.0" encoding="UTF-8"?> +<bom serialNumber="urn:uuid:9dfe64f9-1260-35e1-ba9e-4b9030d343d2" version="1" xmlns="http://cyclonedx.org/schema/bom/1.5";> + <metadata> + <lifecycles> + <lifecycle> + <phase>build</phase> + </lifecycle> + </lifecycles> + <tools> + <tool> + <vendor>OWASP Foundation</vendor> + <name>CycloneDX Maven plugin</name> + <version>2.8.0</version> + <hashes> + <hash alg="MD5">76ffec6a7ddd46b2b24517411874eb99</hash> + <hash alg="SHA-1">5b0d5b41975b53be4799b9621b4af0cfc41d44b6</hash> + <hash alg="SHA-256">6852aa0f4e42a2db745bab80e384951a6a65b9215d041081d675780999027e81</hash> + <hash alg="SHA-512">417de20fcdcb11c9713bacbd57290d8e68037fdb4553fd31b8cb08bd760ad52dc65ea88ad4be15844ad3fd5a4d3e440d2f70326f2fe1e63ec78e059c9a883f8d</hash> + <hash alg="SHA-384">5eb755c6492e7a7385fa9a1e1f4517875bcb834b2df437808a37a2d6f5285df428741762305980315a63fcef1406597d</hash> + <hash alg="SHA3-384">0fe16a47cf7aab0b22251dafcc39939b68e8f1778093309d8d2060b51a08df445a8b8ed5a9561669faf2e55f907c76d8</hash> + <hash alg="SHA3-256">3e5a1eb5ab7d0797498862794709ff8eaaa071fe4cc9ec77f52db7e2f97ef487</hash> + <hash alg="SHA3-512">59281a3e29e76270d7f44b40b5b9f05e55f1ae3ec716d80add806f360940809e3813998ac7c5758043b8e248aed73b86e37dc506cdb4cde03c16bb617d8e5a3a</hash> + </hashes> + </tool> + </tools> + <component type="library" bom-ref="pkg:maven/org.apache.camel/camel@4.7.0?type=pom"> + <publisher>The Apache Software Foundation</publisher> + <group>org.apache.camel</group> + <name>camel</name> + <version>4.7.0</version> + <description>Camel Root POM</description> + <licenses> + <license> + <id>Apache-2.0</id> + <url>https://www.apache.org/licenses/LICENSE-2.0</url> + </license> + </licenses> + <purl>pkg:maven/org.apache.camel/camel@4.7.0?type=pom</purl> + <externalReferences><reference type="website"><url>https://camel.apache.org</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/CAMEL</url></reference><reference type="mailing-list"><url>dev-subscr...@camel.apache.org</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=camel.git;a=summary</url></reference></externalReferences> + </component> + <properties> + <property name="maven.goal">makeAggregateBom</property> + <property name="maven.scopes">compile,provided,runtime,system</property> + <property name="cdx:reproducible">enabled</property> + </properties> + </metadata> + <components> + <component type="library" bom-ref="pkg:maven/org.apache.camel/camel-buildtools@4.7.0?type=jar"> + <publisher>The Apache Software Foundation</publisher> + <group>org.apache.camel</group> + <name>camel-buildtools</name> + <version>4.7.0</version> + <description>The build tools for the Apache Camel project</description> + <licenses> + <license> + <id>Apache-2.0</id> + <url>https://www.apache.org/licenses/LICENSE-2.0</url> + </license> + </licenses> + <purl>pkg:maven/org.apache.camel/camel-buildtools@4.7.0?type=jar</purl> + <externalReferences><reference type="website"><url>https://camel.apache.org/camel-buildtools</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/CAMEL</url></reference><reference type="mailing-list"><url>dev-subscr...@camel.apache.org</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=camel.git;a=summary/camel-buildtools</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.apache.camel/camel-parent@4.7.0?type=pom"> + <publisher>The Apache Software Foundation</publisher> + <group>org.apache.camel</group> + <name>camel-parent</name> + <version>4.7.0</version> + <description>Camel Parent POM</description> + <licenses> + <license> + <id>Apache-2.0</id> + <url>https://www.apache.org/licenses/LICENSE-2.0</url> + </license> + </licenses> + <purl>pkg:maven/org.apache.camel/camel-parent@4.7.0?type=pom</purl> + <externalReferences><reference type="website"><url>https://camel.apache.org/camel-parent</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/CAMEL</url></reference><reference type="mailing-list"><url>dev-subscr...@camel.apache.org</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=camel.git;a=summary/camel-parent</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.apache.camel/camel-etc@4.7.0?type=pom"> + <publisher>The Apache Software Foundation</publisher> + <group>org.apache.camel</group> + <name>camel-etc</name> + <version>4.7.0</version> + <description>Misc stuff</description> + <licenses> + <license> + <id>Apache-2.0</id> + <url>https://www.apache.org/licenses/LICENSE-2.0</url> + </license> + </licenses> + <purl>pkg:maven/org.apache.camel/camel-etc@4.7.0?type=pom</purl> + <externalReferences><reference type="website"><url>https://camel.apache.org/camel-parent/camel-etc</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/CAMEL</url></reference><reference type="mailing-list"><url>dev-subscr...@camel.apache.org</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=camel.git;a=summary/camel-parent/camel-etc</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.apache.camel/tooling@4.7.0?type=pom"> + <publisher>The Apache Software Foundation</publisher> + <group>org.apache.camel</group> + <name>tooling</name> + <version>4.7.0</version> + <description>Camel Tooling</description> + <licenses> + <license> + <id>Apache-2.0</id> + <url>https://www.apache.org/licenses/LICENSE-2.0</url> + </license> + </licenses> + <purl>pkg:maven/org.apache.camel/tooling@4.7.0?type=pom</purl> + <externalReferences><reference type="website"><url>https://camel.apache.org/camel-parent/tooling</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/CAMEL</url></reference><reference type="mailing-list"><url>dev-subscr...@camel.apache.org</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=camel.git;a=summary/camel-parent/tooling</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.apache.camel/camel-tooling-util@4.7.0?type=jar"> + <publisher>The Apache Software Foundation</publisher> + <group>org.apache.camel</group> + <name>camel-tooling-util</name> + <version>4.7.0</version> + <description>Tooling utilities</description> + <licenses> + <license> + <id>Apache-2.0</id> + <url>https://www.apache.org/licenses/LICENSE-2.0</url> + </license> + </licenses> + <purl>pkg:maven/org.apache.camel/camel-tooling-util@4.7.0?type=jar</purl> + <externalReferences><reference type="website"><url>https://camel.apache.org/camel-parent/tooling/camel-tooling-util</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/CAMEL</url></reference><reference type="mailing-list"><url>dev-subscr...@camel.apache.org</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=camel.git;a=summary/camel-parent/tooling/camel-tooling-util</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.junit.jupiter/junit-jupiter-api@5.10.3?type=jar"> + <group>org.junit.jupiter</group> + <name>junit-jupiter-api</name> + <version>5.10.3</version> + <description>Module "junit-jupiter-api" of JUnit 5.</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">9c5af4543b8784a55eab254418cc367b</hash> + <hash alg="SHA-1">a22aa91d1d6c69b2020a9aeb6d095ea81132bfa5</hash> + <hash alg="SHA-256">6efe6e01ca1ff79b7bf4c6f1eed0b29292e166c27eaf7b00ac981a14d4de61aa</hash> + <hash alg="SHA-512">bad54b92ec8c82f7a358c4f535d90900a5925ce51d912709ceb9f0a541b6756ac821d6c25b9e25cead49e9c2030a165ee250e27c55e103fae1c11e12da9ad047</hash> + <hash alg="SHA-384">6e57ad8526286ae4032fa39b2391b34fcb100302d45437b982ca6f8caf21f0c5f36773b119a51ae0867248f29e26c8de</hash> + <hash alg="SHA3-384">1c6ff0e4d31b90aac2bbcc31e709dbe902caaf2016fda8ab0a6b30fcf055476891a68adb5b3ff30d95a1cab2bbb5aa86</hash> + <hash alg="SHA3-256">c3c922847334dd64ba918eaa44703ba4dee5d864d8bc9c064462634a5a30bded</hash> + <hash alg="SHA3-512">0d3c039b1b8a3772584c044d0869e3f88b878ce5bc921bf545ae565d4e07d0f2d923148884905dbbaff0a51099b5b3b47e19a8d9960bc1067b2c3116ff3bb1c0</hash> + </hashes> + <licenses> + <license> + <id>EPL-2.0</id> + </license> + </licenses> + <purl>pkg:maven/org.junit.jupiter/junit-jupiter-api@5.10.3?type=jar</purl> + <externalReferences><reference type="website"><url>https://junit.org/junit5/</url></reference><reference type="vcs"><url>https://github.com/junit-team/junit5</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.opentest4j/opentest4j@1.3.0?type=jar"> + <group>org.opentest4j</group> + <name>opentest4j</name> + <version>1.3.0</version> + <description>Open Test Alliance for the JVM</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">03c404f727531f3fd3b4c73997899327</hash> + <hash alg="SHA-1">152ea56b3a72f655d4fd677fc0ef2596c3dd5e6e</hash> + <hash alg="SHA-256">48e2df636cab6563ced64dcdff8abb2355627cb236ef0bf37598682ddf742f1b</hash> + <hash alg="SHA-512">78fc698a7871bb50305e3657893c10500595f043348d875f57bc39ca4a6a51eda3967b7c8c8a7ec3e8f85f2171bca4aa98823e912e416e87e81c6ba5b70a37c3</hash> + <hash alg="SHA-384">10398b6998c9202a0731e2e19ae1c3f9d8a83582c2663fe7bdda15794ee6fa816727dbd8f7c7164bd5395ee1cfe7c97e</hash> + <hash alg="SHA3-384">3abe706fd78509c25a402c7bbf6f9ddf71ffb5b35054864ba0fdf7902207115f888a0ba728fd71d2e87a9360d2498121</hash> + <hash alg="SHA3-256">d961907a1bfa1dcda329dca494ffbc251b31fabcaca5ab7095661a8ce3c1d654</hash> + <hash alg="SHA3-512">0ad661617bcac51bcd26f7ad4611c69b1fd9811b50dbf734e041a3243ab1f845e7796620e8a7c40c4a2df3946864598b1251396c7d9bd813203d82710788cce0</hash> + </hashes> + <licenses> + <license> + <id>Apache-2.0</id> + </license> + </licenses> + <purl>pkg:maven/org.opentest4j/opentest4j@1.3.0?type=jar</purl> + <externalReferences><reference type="website"><url>https://github.com/ota4j-team/opentest4j</url></reference><reference type="vcs"><url>https://github.com/ota4j-team/opentest4j</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.junit.platform/junit-platform-commons@1.10.3?type=jar"> + <group>org.junit.platform</group> + <name>junit-platform-commons</name> + <version>1.10.3</version> + <description>Module "junit-platform-commons" of JUnit 5.</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">83ff374dd428b03f1cf70d0143259f01</hash> + <hash alg="SHA-1">a353d42a2f13343a7cb80c5228ae66ff64495481</hash> + <hash alg="SHA-256">9787f04d49db59397cdd7555d421a5bd2d1445666997d327b94f85e38bed57f1</hash> + <hash alg="SHA-512">6d9e6642a5c08bdce3f1ee7691dad5d6ebc480530fcaf3c13678806996ce14b442cf7b6a0bcc76068dbda0e31376f871b91d81fcb201f3ad0c6a953c69303dc5</hash> + <hash alg="SHA-384">4973595cdef09e6efdab65e1d22e97a5d0cf769f2bfa83da91ff5cfa08e61973cfa2a1a1b00d9ce4d498dcbe00ecfa67</hash> + <hash alg="SHA3-384">8c3159e3444ec6fbcf2760a207d1405d7ca33629bb8621a6ef6e9a4c73dd51e82145ae8588e34ad1b781d3fd9a800c80</hash> + <hash alg="SHA3-256">b0cafec771b817d5d2e372921d4c2a9f9e5249b7fdaebb06744bb232eb4164d0</hash> + <hash alg="SHA3-512">faa376fe38566c65a27bebe835f5f72f3ae7917580b770cc494d4b4622bd0ec03632f7ee4ec3599ba5c660f75ed44435c87d3cf217354212cdba79220399fe4d</hash> + </hashes> + <licenses> + <license> + <id>EPL-2.0</id> + </license> + </licenses> + <purl>pkg:maven/org.junit.platform/junit-platform-commons@1.10.3?type=jar</purl> + <externalReferences><reference type="website"><url>https://junit.org/junit5/</url></reference><reference type="vcs"><url>https://github.com/junit-team/junit5</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.apiguardian/apiguardian-api@1.1.2?type=jar"> + <group>org.apiguardian</group> + <name>apiguardian-api</name> + <version>1.1.2</version> + <description>@API Guardian</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">8c7de3f82037fa4a2e8be2a2f13092af</hash> + <hash alg="SHA-1">a231e0d844d2721b0fa1b238006d15c6ded6842a</hash> + <hash alg="SHA-256">b509448ac506d607319f182537f0b35d71007582ec741832a1f111e5b5b70b38</hash> + <hash alg="SHA-512">d7ccd0e7019f1a997de39d66dc0ad4efe150428fdd7f4c743c93884f1602a3e90135ad34baea96d5b6d925ad6c0c8487c8e78304f0a089a12383d4a62e2c9a61</hash> + <hash alg="SHA-384">5ae11cfedcee7da43a506a67946ddc8a7a2622284a924ba78f74541e9a22db6868a15f5d84edb91a541e38afded734ea</hash> + <hash alg="SHA3-384">c146116b3dfd969200b2ce52d96b92dd02d6f5a45a86e7e85edf35600ddbc2f3c6e8a1ad7e2db4dcd2c398c09fad0927</hash> + <hash alg="SHA3-256">b4b436d7f615fc0b820204e69f83c517d1c1ccc5f6b99e459209ede4482268de</hash> + <hash alg="SHA3-512">7b95b7ac68a6891b8901b5507acd2c24a0c1e20effa63cd513764f513eab4eb55f8de5178edbe0a400c11f3a18d3f56243569d6d663100f06dd98288504c09c5</hash> + </hashes> + <licenses> + <license> + <id>Apache-2.0</id> + </license> + </licenses> + <purl>pkg:maven/org.apiguardian/apiguardian-api@1.1.2?type=jar</purl> + <externalReferences><reference type="website"><url>https://github.com/apiguardian-team/apiguardian</url></reference><reference type="vcs"><url>https://github.com/apiguardian-team/apiguardian</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.junit.jupiter/junit-jupiter-params@5.10.3?type=jar"> + <group>org.junit.jupiter</group> + <name>junit-jupiter-params</name> + <version>5.10.3</version> + <description>Module "junit-jupiter-params" of JUnit 5.</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">8c0d875131fa73e688df785a3b2f338d</hash> + <hash alg="SHA-1">4852f4e4af9074d9214213b199751f99efeab8b9</hash> + <hash alg="SHA-256">7c3ed8cefb12496b76c53c3da986ea8f0bf3f426781869475551ae3a506c1ad8</hash> + <hash alg="SHA-512">c31f0694a2402cf09d24462bc97ad495d7af59ec67caac5877de0f0f443746a90e0efd10fcaa493b8851fc56d73c29bd11fd4688f118d55500c54ca461211445</hash> + <hash alg="SHA-384">644ea07ea7d472c1fc2392a47673ca146433dcdc4b6047f0437279746fd3f53873483f893d6f8da7a275cb5ab757cec1</hash> + <hash alg="SHA3-384">028315b3bf20df0ba0c0f0fef90775856f3c2fbe808718bc0a37db3b8eee8e3a615bff96eb9b67fcc8864e6c4d1d9bc6</hash> + <hash alg="SHA3-256">a4242600d12e3f79fb56e55fb24c1ee315ad50434e82535d1fdb12a9bdfb2c92</hash> + <hash alg="SHA3-512">0f8ed75ad0f0b86601d90d199d16c54a94c3bd3e6abd4b4a43e0ecc892eb0474ad524bae1d045d3e2782b145180e9ce3059f584e3fd197b655e3e20479fcf4d0</hash> + </hashes> + <licenses> + <license> + <id>EPL-2.0</id> + </license> + </licenses> + <purl>pkg:maven/org.junit.jupiter/junit-jupiter-params@5.10.3?type=jar</purl> + <externalReferences><reference type="website"><url>https://junit.org/junit5/</url></reference><reference type="vcs"><url>https://github.com/junit-team/junit5</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.junit.jupiter/junit-jupiter-engine@5.10.3?type=jar"> + <group>org.junit.jupiter</group> + <name>junit-jupiter-engine</name> + <version>5.10.3</version> + <description>Module "junit-jupiter-engine" of JUnit 5.</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">c87ca6659d594120a6030a2760bcdf14</hash> + <hash alg="SHA-1">48c14e866bb1a87ca35d24ff068463bb202ada24</hash> + <hash alg="SHA-256">bbd3ce8dc11e9925071ef9691d68af1ab6e712faa6851f7c5275bc8aafc88673</hash> + <hash alg="SHA-512">6027c52e10dc84e5ab3fb56f1e4a2597d4f1356c1ddce2cff186e92b31a7c3180bc8bcfec8df5dc603c279cee6f71c62cc1bf952efd21f73d9423a39b839fe39</hash> + <hash alg="SHA-384">9632a2745edea1fe1397163dc6d1d02458f1ca9a710c22d76d7f351608ff1267a9a11d5f26eda6348bc54e679ac0dba1</hash> + <hash alg="SHA3-384">30b3ed9b07192b0cbfb06a63c5e643a147c0415288ae62183d12a117b791c11ce181f46c02d1683027bb1e0aee4b3d6a</hash> + <hash alg="SHA3-256">df4d577bdc84d72532b80cba3930deaf335f89e1715620e2b83ccd5383ccbecd</hash> + <hash alg="SHA3-512">fc7c13a769957617c5f23e0ac966478887de99bdb89791a1dace6ef3a54ba6970c7b81b319d55023492c5dad0f3b344911577e3883f39da21710d4ea8f8ba959</hash> + </hashes> + <licenses> + <license> + <id>EPL-2.0</id> + </license> + </licenses> + <purl>pkg:maven/org.junit.jupiter/junit-jupiter-engine@5.10.3?type=jar</purl> + <externalReferences><reference type="website"><url>https://junit.org/junit5/</url></reference><reference type="vcs"><url>https://github.com/junit-team/junit5</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.junit.platform/junit-platform-engine@1.10.3?type=jar"> + <group>org.junit.platform</group> + <name>junit-platform-engine</name> + <version>1.10.3</version> + <description>Module "junit-platform-engine" of JUnit 5.</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">8fe56ec6a59c1e208e8ba0def9e47bf3</hash> + <hash alg="SHA-1">365a320c3cfd47f3346625e541e424e35dc75c42</hash> + <hash alg="SHA-256">df7c32bf75cf47c4c8ddd1942091027947a7d765d30b731fe00830115fafa133</hash> + <hash alg="SHA-512">be12765090d248f6e9b4657b4a57c842c98e92f6f81b1ec9271307a7bd39467cd1acefbf40bed2d5d63ebd0bef7748f9635c959fcc5395c5c9322418fc0f6e96</hash> + <hash alg="SHA-384">ba596ddbd2f6b85b456b38a33b1683880e7608da5614a94011b25565915822974325d0fc2f51eb9216a8706b5c37e958</hash> + <hash alg="SHA3-384">eddfe417686f2e43b34a121954a88e4afa733e1af74940e456c7240f686ef2093a31f42795d10bf9f1f2a47b14cb5726</hash> + <hash alg="SHA3-256">5583101f417b044e88e5debc31385cf6337dc534c0362b0b3395d6dda7698b50</hash> + <hash alg="SHA3-512">af51d1ea92dc5dcb751f1b83f1e49b068f3775354a22c86febc3156b545ff4568c7e2bcff5a707550be9b0672799f73d0fcfb760180bd81251f367b9986c2474</hash> + </hashes> + <licenses> + <license> + <id>EPL-2.0</id> + </license> + </licenses> + <purl>pkg:maven/org.junit.platform/junit-platform-engine@1.10.3?type=jar</purl> + <externalReferences><reference type="website"><url>https://junit.org/junit5/</url></reference><reference type="vcs"><url>https://github.com/junit-team/junit5</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.apache.camel/tooling-parent@4.7.0?type=pom"> + <publisher>The Apache Software Foundation</publisher> + <group>org.apache.camel</group> + <name>tooling-parent</name> + <version>4.7.0</version> + <description>Camel Tooling Parent POM</description> + <licenses> + <license> + <id>Apache-2.0</id> + <url>https://www.apache.org/licenses/LICENSE-2.0</url> + </license> + </licenses> + <purl>pkg:maven/org.apache.camel/tooling-parent@4.7.0?type=pom</purl> + <externalReferences><reference type="website"><url>https://camel.apache.org/camel-parent/tooling/tooling-parent</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/CAMEL</url></reference><reference type="mailing-list"><url>dev-subscr...@camel.apache.org</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=camel.git;a=summary/camel-parent/tooling/tooling-parent</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.apache.camel/maven-plugins@4.7.0?type=pom"> + <publisher>The Apache Software Foundation</publisher> + <group>org.apache.camel</group> + <name>maven-plugins</name> + <version>4.7.0</version> + <description>Camel Maven Plugins</description> + <licenses> + <license> + <id>Apache-2.0</id> + <url>https://www.apache.org/licenses/LICENSE-2.0</url> + </license> + </licenses> + <purl>pkg:maven/org.apache.camel/maven-plugins@4.7.0?type=pom</purl> + <externalReferences><reference type="website"><url>https://camel.apache.org/camel-parent/tooling/tooling-parent/maven-plugins</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/CAMEL</url></reference><reference type="mailing-list"><url>dev-subscr...@camel.apache.org</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=camel.git;a=summary/camel-parent/tooling/tooling-parent/maven-plugins</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.apache.camel/bom-generator-maven-plugin@4.7.0?type=maven-plugin"> + <publisher>The Apache Software Foundation</publisher> + <group>org.apache.camel</group> + <name>bom-generator-maven-plugin</name> + <version>4.7.0</version> + <description>Maven plugin to help generating BOM projects</description> + <licenses> + <license> + <id>Apache-2.0</id> + <url>https://www.apache.org/licenses/LICENSE-2.0</url> + </license> + </licenses> + <purl>pkg:maven/org.apache.camel/bom-generator-maven-plugin@4.7.0?type=maven-plugin</purl> + <externalReferences><reference type="website"><url>https://camel.apache.org/camel-parent/tooling/tooling-parent/maven-plugins/bom-generator-maven-plugin</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/CAMEL</url></reference><reference type="mailing-list"><url>dev-subscr...@camel.apache.org</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=camel.git;a=summary/camel-parent/tooling/tooling-parent/maven-plugins/bom-generator-maven-plugin</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.9.20?type=jar"> + <publisher>The Apache Software Foundation</publisher> + <group>org.apache.maven.resolver</group> + <name>maven-resolver-api</name> + <version>1.9.20</version> + <description>The application programming interface for the repository system.</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">424d206b1ab6cdedce55e575fe328ca8</hash> + <hash alg="SHA-1">e9da4e71e96f5ca9418ebbf60d136fe37bfe4ee3</hash> + <hash alg="SHA-256">dee92eda1cd293afbbbb0ee3d752f8c135e193e2232172e036a3f23e38c8c25d</hash> + <hash alg="SHA-512">e641a549f7078316bb26b193697e855432492153c3642189b25a84c03dd4101ae5cf4eff3d591590390c7361733e5308e67fd5a0b4f3ae08125b74900f7dd471</hash> + <hash alg="SHA-384">555c1a9bff564efeebab84f1a66384b57c53529fb606e9d9d1e75a31bbc25869ea9a089465d70476b89dd2270becfc98</hash> + <hash alg="SHA3-384">baada532d2c2b3eacf12c7103ddf4d4d73736f74f52f15869db45a6b831946fd946c803553cb29be71e4e7c00d8ab550</hash> + <hash alg="SHA3-256">724ad8b918eb4ae741b4960671e0a8f7c14e2f7e78123d4e9b6881d358e90044</hash> + <hash alg="SHA3-512">ee2b2e2d13b57ce207667dec7f6d7161118e4e0eda505dcdebe7f796e73c92af94fe388b630ca19778669693d50df740c753168387ff467ce892e0767301b3cb</hash> + </hashes> + <licenses> + <license> + <id>Apache-2.0</id> + <url>https://www.apache.org/licenses/LICENSE-2.0</url> + </license> + </licenses> + <purl>pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.9.20?type=jar</purl> + <externalReferences><reference type="website"><url>https://maven.apache.org/resolver/maven-resolver-api/</url></reference><reference type="build-system"><url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-resolver/</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/MRESOLVER</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?us...@maven.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/maven-resolver/tree/maven-resolver-1.9.20/maven-resolver-api</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.apache.maven.resolver/maven-resolver-util@1.9.20?type=jar"> + <publisher>The Apache Software Foundation</publisher> + <group>org.apache.maven.resolver</group> + <name>maven-resolver-util</name> + <version>1.9.20</version> + <description>A collection of utility classes to ease usage of the repository system.</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">a4793187c72b39cc4d0b5c6b90de0578</hash> + <hash alg="SHA-1">a1f2b661b14dec2f1644c501e0657ed46459bac0</hash> + <hash alg="SHA-256">b869aca6c208d2b1fc92e846e1c13612a5ed2fda3bed9a7c1ae2ff5f14f8cf48</hash> + <hash alg="SHA-512">b136d8aa7b0068a723c1df33c229e4b75aac4edd85023025553d6b6c5c3ed037c5118d15cdfcef0455bba8e7f215cc1727918124fd9f0e6473387c7bd3ce5a0f</hash> + <hash alg="SHA-384">5dd6a1452357667e86b04cbba972dfba63d368133dfbecf897c8db05b2307ccc049fa690429a63141e5196cc3b2fc62a</hash> + <hash alg="SHA3-384">618ba43f00e7b89a1cd9812b61efd35c20bb8f6c149ebfb7f7b49a460fb8c870c9ec2239ccb5fe90d66638d97ee224a7</hash> + <hash alg="SHA3-256">a8a8fae4bb711d19d0711358be15a85295ceca1d11348d430c5654214b96ce78</hash> + <hash alg="SHA3-512">eaf2de08ba3dfdb283836c75d8409be586695fa671e500093cf79162d2e98b3c72a5824e96ed7ac63786a8bf6dc1633d32a88062aa135b459c910a6a1ab79a5c</hash> + </hashes> + <licenses> + <license> + <id>Apache-2.0</id> + <url>https://www.apache.org/licenses/LICENSE-2.0</url> + </license> + </licenses> + <purl>pkg:maven/org.apache.maven.resolver/maven-resolver-util@1.9.20?type=jar</purl> + <externalReferences><reference type="website"><url>https://maven.apache.org/resolver/maven-resolver-util/</url></reference><reference type="build-system"><url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-resolver/</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/MRESOLVER</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?us...@maven.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/maven-resolver/tree/maven-resolver-1.9.20/maven-resolver-util</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-core@3.9.8?type=jar"> + <publisher>The Apache Software Foundation</publisher> + <group>org.apache.maven</group> + <name>maven-core</name> + <version>3.9.8</version> + <description>Maven Core classes.</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">16f8316d64b14e7848f8488f141a209f</hash> + <hash alg="SHA-1">986fe65310335f62a37d8da9cb90105e604f2642</hash> + <hash alg="SHA-256">136d95ada12098f48222638bfdb68ace0e1b518d676cd43845d31eb0aed37736</hash> + <hash alg="SHA-512">bcdb964d71380af4fcff00760ab653111e77386597c892a7661198520bd2d822e21ae414ebc92b2d86b0b36ae33d21be510986a37249eacb3858fe93c84ccbe5</hash> + <hash alg="SHA-384">1875fdf165b3dc05937303dcdc086b2ee1738c375276a13512dd24a55808111213ebd0d9068ee39494a92850baf61b63</hash> + <hash alg="SHA3-384">36cb5e2bd106306681f6ea945992ccc777469c72c8d898761574e4d96af5a6b955b3deb1fb1e773485de8b2c619fdfa7</hash> + <hash alg="SHA3-256">3b73fe26147b80ddb45239436e892b39ee3c16bac1f956ff5f239fee3485717f</hash> + <hash alg="SHA3-512">17eaec6ce154138e3637ddc9edb1fa2903dfbcd394af6851f0d9ce16e815a439d8673c2de8159540fba0e646540df1278dab510749abb097b927e74044781bed</hash> + </hashes> + <licenses> + <license> + <id>Apache-2.0</id> + <url>https://www.apache.org/licenses/LICENSE-2.0</url> + </license> + </licenses> + <purl>pkg:maven/org.apache.maven/maven-core@3.9.8?type=jar</purl> + <externalReferences><reference type="website"><url>https://maven.apache.org/ref/3.9.8/maven-core/</url></reference><reference type="build-system"><url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/</url></reference><reference type="distribution"><url>https://maven.apache.org/download.html</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/MNG</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?us...@maven.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/maven/tree/maven-3.9.8/maven-core</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-model@3.9.8?type=jar"> + <publisher>The Apache Software Foundation</publisher> + <group>org.apache.maven</group> + <name>maven-model</name> + <version>3.9.8</version> + <description>Model for Maven POM (Project Object Model)</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">c9444eab1467f505fa169de504def7c4</hash> + <hash alg="SHA-1">4ba1512e002efe9f9efc09ac8899c613f344d518</hash> + <hash alg="SHA-256">9b4be46c55f0720162664615d4fe8468f99866697a484e1652a19189656cb37d</hash> + <hash alg="SHA-512">7e4639c9091358403e3b80331e376d8cc4ce84fab9026e46d76d8c2eb46d14a6ee2557a6003dcc2952452d7cafce442b2e4ba259d952be2e19fb9ab43a913853</hash> + <hash alg="SHA-384">d6ded2d54e9df12411d93c1dd9e021dcd174db91eb0b0ecaa649199ad4f98a687d81e70cd06a6998c8d9b9a64277f518</hash> + <hash alg="SHA3-384">01eb4d470f3dffe0cc1ddb25303a3e20f39826821eb686300642285a452475146c094de9df7eedc1467b21bafa66f713</hash> + <hash alg="SHA3-256">c7dff99aad1421186dcc35cf28c8938ef63b95d82bcebfdf74dca487c852b52e</hash> + <hash alg="SHA3-512">5e34641aae488c574214fc1bfc9a522a0277ed59c86b10df21b25528753237db4041fffc060707fa01337f4af4b2e9e2eb3235970f5656cb5ee7d1c5b69d21f6</hash> + </hashes> + <licenses> + <license> + <id>Apache-2.0</id> + <url>https://www.apache.org/licenses/LICENSE-2.0</url> + </license> + </licenses> + <purl>pkg:maven/org.apache.maven/maven-model@3.9.8?type=jar</purl> + <externalReferences><reference type="website"><url>https://maven.apache.org/ref/3.9.8/maven-model/</url></reference><reference type="build-system"><url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/</url></reference><reference type="distribution"><url>https://maven.apache.org/download.html</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/MNG</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?us...@maven.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/maven/tree/maven-3.9.8/maven-model</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-settings@3.9.8?type=jar"> + <publisher>The Apache Software Foundation</publisher> + <group>org.apache.maven</group> + <name>maven-settings</name> + <version>3.9.8</version> + <description>Maven Settings model.</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">2778729df8446d53806c149826fbc874</hash> + <hash alg="SHA-1">2bcee8fce7cd50016148d4e667474867c6191d3e</hash> + <hash alg="SHA-256">4087160614240b04cbb7e1d3af46ee27362e9d0d52e18356dd8bac7c183288ec</hash> + <hash alg="SHA-512">00f41d611fd90116f33b4c0aeae2cdb6db7040b9a8a81a0abed3067fd085fecb219e776429ff984a0bc8e561387fd691c92f5c9b344b521a8b756ca8696f8274</hash> + <hash alg="SHA-384">d976f625afcf7b9b3b111c785d73d988cc91d1560010297c5abca391ec5ca89cbaac10280e208b3bed75fd589e63781c</hash> + <hash alg="SHA3-384">8a67cba96899f662b00f7dd86e88b7250e50a913b5c00fef8c26cee8e61523646e07f68f99c9f5e9a1e8d19565f807ad</hash> + <hash alg="SHA3-256">c4e4ed17ef0887788e4da97d033973bd164c16753a3241c4ff8f6a6149248bfa</hash> + <hash alg="SHA3-512">5ed6c6f0b41e79b88b70d4f5095a1de6c6f274a5feb048e961ad42e52a31f1a36d4b30541b81f68d648dbca1edce342a3c1375b5494286d50943fddc75b0ef86</hash> + </hashes> + <licenses> + <license> + <id>Apache-2.0</id> + <url>https://www.apache.org/licenses/LICENSE-2.0</url> + </license> + </licenses> + <purl>pkg:maven/org.apache.maven/maven-settings@3.9.8?type=jar</purl> + <externalReferences><reference type="website"><url>https://maven.apache.org/ref/3.9.8/maven-settings/</url></reference><reference type="build-system"><url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/</url></reference><reference type="distribution"><url>https://maven.apache.org/download.html</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/MNG</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?us...@maven.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/maven/tree/maven-3.9.8/maven-settings</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-settings-builder@3.9.8?type=jar"> + <publisher>The Apache Software Foundation</publisher> + <group>org.apache.maven</group> + <name>maven-settings-builder</name> + <version>3.9.8</version> + <description>The effective settings builder, with inheritance and password decryption.</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">ea76db59df88fc388d45dad4fe4f410c</hash> + <hash alg="SHA-1">ae79e5910986ae7e511bdb9e0eca12009ea83fd3</hash> + <hash alg="SHA-256">46471aa98f27db5c8a90b383294d8ac3b529b7c30afe2bf02ac996cc2c175c99</hash> + <hash alg="SHA-512">5dc5f488362778e90a0515369ec435b53569cbfdfef8c522b06a02da6f08035a2d6c58105cf5997eeb47d73bc7a7c618c8e3432c988ff0422298fc95f47aa87f</hash> + <hash alg="SHA-384">8e6201c7aae296c83b4f8c89c095f42517c28bff78b7f1283bde2f54c7e91f2f4b2227842c429e1facdd38a7eaee84cd</hash> + <hash alg="SHA3-384">e87500be530647506f9c8f02d6b7095f81949bd35c12b3ead6d1547dc1f9950556b375fd244bfcfed828b367e60810e8</hash> + <hash alg="SHA3-256">1518021882c4a30d00cb6f0c1a131279c223b929f2f22c93bb6014d798304140</hash> + <hash alg="SHA3-512">b2eb6449c8a7952a129688a7b95c34fa4fa13f8992e3b3e8184bdd2810d14bb2b8f00d02bda2680f7f2e7ea1480a831aeeeb872d5dc8af8f5072339ed142f283</hash> + </hashes> + <licenses> + <license> + <id>Apache-2.0</id> + <url>https://www.apache.org/licenses/LICENSE-2.0</url> + </license> + </licenses> + <purl>pkg:maven/org.apache.maven/maven-settings-builder@3.9.8?type=jar</purl> + <externalReferences><reference type="website"><url>https://maven.apache.org/ref/3.9.8/maven-settings-builder/</url></reference><reference type="build-system"><url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/</url></reference><reference type="distribution"><url>https://maven.apache.org/download.html</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/MNG</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?us...@maven.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/maven/tree/maven-3.9.8/maven-settings-builder</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.codehaus.plexus/plexus-sec-dispatcher@2.0?type=jar"> + <publisher>Codehaus Plexus</publisher> + <group>org.codehaus.plexus</group> + <name>plexus-sec-dispatcher</name> + <version>2.0</version> + <description>The Plexus project provides a full software stack for creating and executing software projects.</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">e68635a721630177ac70173e441336b6</hash> + <hash alg="SHA-1">f89c5080614ffd0764e49861895dbedde1b47237</hash> + <hash alg="SHA-256">873139960c4c780176dda580b003a2c4bf82188bdce5bb99234e224ef7acfceb</hash> + <hash alg="SHA-512">ad4e814c8baff780a4eee064903e52b09ae00420a59fb075ef72dbb8d64d12d3d5009b03d56c15f93587d931c3a7f06cad6351ab2dc9415ccc6eeab0daebeb07</hash> + <hash alg="SHA-384">4af3426b6409cce7d5fcda4e2af407fc2dbae9873e06d98332bcd032c0039d9080a291e42223ea2bbef9825d3d63493f</hash> + <hash alg="SHA3-384">41720858dd5804f9cb26a8878c16dbdf0372a90e99c037809fe76c3de2c5517ba252af8f8cdf534c1a09900702e6a917</hash> + <hash alg="SHA3-256">50fa723aefb551a3fd5888375d01f1d776c534cdf833baea392818e9bfa8166e</hash> + <hash alg="SHA3-512">a43f823d31b377c0c7ec8d36ace69e5dbcdaf4dc4ebb45ff0561fea9e12d74c06090ee24b29b06769d4031693faf5d7e3146583d3a64bfaef6b7c79773a8831f</hash> + </hashes> + <licenses> + <license> + <id>Apache-2.0</id> + </license> + </licenses> + <purl>pkg:maven/org.codehaus.plexus/plexus-sec-dispatcher@2.0?type=jar</purl> + <externalReferences><reference type="website"><url>https://codehaus-plexus.github.io/plexus-sec-dispatcher/</url></reference><reference type="distribution-intake"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/codehaus-plexus/plexus-sec-dispatcher/issues</url></reference><reference type="mailing-list"><url>http://archive.plexus.codehaus.org/user</url></reference><reference type="vcs"><url>https://github.com/codehaus-plexus/plexus-sec-dispatcher.git</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.codehaus.plexus/plexus-cipher@2.0?type=jar"> + <publisher>Codehaus Plexus</publisher> + <group>org.codehaus.plexus</group> + <name>plexus-cipher</name> + <version>2.0</version> + <description>The Plexus project provides a full software stack for creating and executing software projects.</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">55d612839faf248cbe3e273969c002c2</hash> + <hash alg="SHA-1">425ea8e534716b4bff1ea90f39bd76be951d651b</hash> + <hash alg="SHA-256">9a7f1b5c5a9effd61eadfd8731452a2f76a8e79111fac391ef75ea801bea203a</hash> + <hash alg="SHA-512">8f187b07867a7c29d77454aae4b76479300238d9c4e777c1afa2aebe33b88dab916e29111dd55acac1341849f4579fe91a5470fdd45ccba0e05709c2ce3a1d65</hash> + <hash alg="SHA-384">6973eefe06a8992aa8db1775c0f43a84cbef54eeea9122a5a30c362af3e4fb13b6cbd6fba229142e2a4495f97d71f409</hash> + <hash alg="SHA3-384">ea780d218f96e61005c5582bf3785ddbb33b53ccb4efbffd76ab58166cf261d3c256d52fea28759380684b7e9b0db8eb</hash> + <hash alg="SHA3-256">e2e51d5350ffdce341464ddcdf9ae60108bff40bf5174dc6be43e33ffcd84af9</hash> + <hash alg="SHA3-512">f3e17ea31bdefc8094ba3495b8231ec7f90c7175839b009d9fd230110b66ac4c68c912fda1a6e644d93dbce639d738e2535f1ade5841e072a604f5f8ac536729</hash> + </hashes> + <licenses> + <license> + <id>Apache-2.0</id> + </license> + </licenses> + <purl>pkg:maven/org.codehaus.plexus/plexus-cipher@2.0?type=jar</purl> + <externalReferences><reference type="website"><url>https://codehaus-plexus.github.io/plexus-cipher/</url></reference><reference type="distribution-intake"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/codehaus-plexus/plexus-cipher/issues</url></reference><reference type="mailing-list"><url>http://archive.plexus.codehaus.org/user</url></reference><reference type="vcs"><url>http://github.com/codehaus-plexus/plexus-cipher</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-builder-support@3.9.8?type=jar"> + <publisher>The Apache Software Foundation</publisher> + <group>org.apache.maven</group> + <name>maven-builder-support</name> + <version>3.9.8</version> + <description>Support for descriptor builders (model, setting, toolchains)</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">2fbd3edbf7d0e6e223d7169214c27572</hash> + <hash alg="SHA-1">b64ad95a741566ab289916d8073f45d6e03884ea</hash> + <hash alg="SHA-256">70103cdd84a039a620fb37ffb6f8c689f490af5c5dc5f11cbc15adc515a62e74</hash> + <hash alg="SHA-512">54708d7f93081d9f3464bd5eafac2156b573997dc1dc683f95523e16089cce1c4f365f9c7579b1ef71e1d8439c7fef88507490446bbf4d8cd7d31911a26b4044</hash> + <hash alg="SHA-384">062a7571027485d0dcd060ff6f59bcde5bd68802a9e5b386bae46325d254ec031fc46c2269420bc93b4372bee3f49862</hash> + <hash alg="SHA3-384">8a720bfee2c4932289022f8cf0722979ea7d0737f40e5032c0a9bacfec44410c414be78d88be54abebc79842a54e5cc0</hash> + <hash alg="SHA3-256">ae39504e1459af6b17917df87ddd2ca97bdf67c392a26e9252a93e0d08bb9972</hash> + <hash alg="SHA3-512">674be8be4945025d644fc05fe3855df2fcf2e311546b33dfc0c68cc8ad9f0f7f304227515535c6f8ff016a99e1033d4a632f4653725971469c86f6d1b681bfc1</hash> + </hashes> + <licenses> + <license> + <id>Apache-2.0</id> + <url>https://www.apache.org/licenses/LICENSE-2.0</url> + </license> + </licenses> + <purl>pkg:maven/org.apache.maven/maven-builder-support@3.9.8?type=jar</purl> + <externalReferences><reference type="website"><url>https://maven.apache.org/ref/3.9.8/maven-builder-support/</url></reference><reference type="build-system"><url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/</url></reference><reference type="distribution"><url>https://maven.apache.org/download.html</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/MNG</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?us...@maven.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/maven/tree/maven-3.9.8/maven-builder-support</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-repository-metadata@3.9.8?type=jar"> + <publisher>The Apache Software Foundation</publisher> + <group>org.apache.maven</group> + <name>maven-repository-metadata</name> + <version>3.9.8</version> + <description>Per-directory local and remote repository metadata.</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">30cdf526d0176a20067f436790d794d7</hash> + <hash alg="SHA-1">aa8893d34ef8540b0e11adb452e9921074144e93</hash> + <hash alg="SHA-256">1f3f29a6bd8a35c92a6e3cbb5992be74863868fd962e90457c33d28af25472f2</hash> + <hash alg="SHA-512">481bcc75b66937a87005226b81be2708207eead48a028fe5a982dcf8da9a08c0fb5f8a47f4ca1c2430f60a15c4de11f5a31c975934cff0afc00de249dbaa9662</hash> + <hash alg="SHA-384">165855a8186f3a72b87b4ef130c8ce7a02b23a7f0ed64298b3a105566a5bf91afd2429180ea650642921d24fc8b5e66d</hash> + <hash alg="SHA3-384">27196b8a857074dd4117c5759e91ba7726c3b92f4590c2aa7aa9083d7bcd5fd7e52233b37e39c89d78d9496db12b829b</hash> + <hash alg="SHA3-256">7229c5561246ab75fc4274a9c18d23ccddaa2541d3cc394a71c790b438862321</hash> + <hash alg="SHA3-512">db95b28e746d28d1d4bbb8664f6bc5d85a520260f9347858304c06122b539a80dfb5f398792f3a5bf28d9e09f7d9216d3f356f5cf8fa75ca51237d4bb1b1e2ea</hash> + </hashes> + <licenses> + <license> + <id>Apache-2.0</id> + <url>https://www.apache.org/licenses/LICENSE-2.0</url> + </license> + </licenses> + <purl>pkg:maven/org.apache.maven/maven-repository-metadata@3.9.8?type=jar</purl> + <externalReferences><reference type="website"><url>https://maven.apache.org/ref/3.9.8/maven-repository-metadata/</url></reference><reference type="build-system"><url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/</url></reference><reference type="distribution"><url>https://maven.apache.org/download.html</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/MNG</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?us...@maven.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/maven/tree/maven-3.9.8/maven-repository-metadata</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-model-builder@3.9.8?type=jar"> + <publisher>The Apache Software Foundation</publisher> + <group>org.apache.maven</group> + <name>maven-model-builder</name> + <version>3.9.8</version> + <description>The effective model builder, with inheritance, profile activation, interpolation, ...</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">7c00db0db68735f4f5e993ef958ac2b0</hash> + <hash alg="SHA-1">cf62656255b038d5df460c95c3c2c75c98e2b350</hash> + <hash alg="SHA-256">de166f6c06c217d9333de569f7661ef11d5122f74a78103ed5dd48e8a3bd3820</hash> + <hash alg="SHA-512">4e8415840adc131565c10ca2423cf5bb7835e87140b8998f422aa601c0d9999afce9c89da0d4584a3e6c1ca1763c397d9e1cb162832f16d0f7739b4259214349</hash> + <hash alg="SHA-384">7e37338d5744fe2910bc48eafeaf8564c8420f88f2e20050b16721a2fb7d1433b872ea9866bbbe212538bb4b0d79cec6</hash> + <hash alg="SHA3-384">87c9a27a8d8ed31d2a7016ef3ac9afbf6672895babbdc6f3d33e4844335922d492f81dc2065e3f8619ede7c195016bd6</hash> + <hash alg="SHA3-256">b2eb615f5a762280a47056759d17b07dbc29ebe0a9d4c8ad6fe0250853a60753</hash> + <hash alg="SHA3-512">a4201aaa0151b50373881e4cc4a91787dc97a8c21a2de785c48b54ac93961f53dfee24f79527ad1a4454d48e044a1e163e907ff26036d0c663de8ea3bbf317aa</hash> + </hashes> + <licenses> + <license> + <id>Apache-2.0</id> + <url>https://www.apache.org/licenses/LICENSE-2.0</url> + </license> + </licenses> + <purl>pkg:maven/org.apache.maven/maven-model-builder@3.9.8?type=jar</purl> + <externalReferences><reference type="website"><url>https://maven.apache.org/ref/3.9.8/maven-model-builder/</url></reference><reference type="build-system"><url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/</url></reference><reference type="distribution"><url>https://maven.apache.org/download.html</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/MNG</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?us...@maven.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/maven/tree/maven-3.9.8/maven-model-builder</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-resolver-provider@3.9.8?type=jar"> + <publisher>The Apache Software Foundation</publisher> + <group>org.apache.maven</group> + <name>maven-resolver-provider</name> + <version>3.9.8</version> + <description>Extensions to Maven Resolver for utilizing Maven POM and repository metadata.</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">724fba630d1325ac672cfbf43b83bf27</hash> + <hash alg="SHA-1">2b9b8dc45536107e9e514e038c36aeb6f7f9a33d</hash> + <hash alg="SHA-256">20f3c83142e89cb40a7af50ff22df38268cd0ce8fafdca4244453207b8c39750</hash> + <hash alg="SHA-512">b6328a923d2426d1de2c4b9297c1c8009a3e80500361eae5af6def5e47ed89f852065309cce7042a740921b4cd68a9352822f84f4d469acb067f1197b73da702</hash> + <hash alg="SHA-384">c2a2ce8a0c37950e0e6a93b03c5b61d52222872fb0355e5dd37a5b636b043c0fb22270e2ac28def828be3d6f4c7666be</hash> + <hash alg="SHA3-384">d7730191df18abffe164e4bd0484c4cec7cb101622e479a117b657f21b537f94abc2aedee2b6f848dfde9d093d63107d</hash> + <hash alg="SHA3-256">71e86f7b220c34faca308b6a54f7346256f57d97ec1c14eabf8d6c5f74228009</hash> + <hash alg="SHA3-512">1fbb63ae4cedaa56d4876857684eadef1724b65d94a083972bae483df5bc07f4f580a450c370deed72638a264927cff2cd25a2cf7e816952d218d40277a7cabc</hash> + </hashes> + <licenses> + <license> + <id>Apache-2.0</id> + <url>https://www.apache.org/licenses/LICENSE-2.0</url> + </license> + </licenses> + <purl>pkg:maven/org.apache.maven/maven-resolver-provider@3.9.8?type=jar</purl> + <externalReferences><reference type="website"><url>https://maven.apache.org/ref/3.9.8/maven-resolver-provider/</url></reference><reference type="build-system"><url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/</url></reference><reference type="distribution"><url>https://maven.apache.org/download.html</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/MNG</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?us...@maven.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/maven/tree/maven-3.9.8/maven-resolver-provider</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.apache.maven.resolver/maven-resolver-impl@1.9.20?type=jar"> + <publisher>The Apache Software Foundation</publisher> + <group>org.apache.maven.resolver</group> + <name>maven-resolver-impl</name> + <version>1.9.20</version> + <description>An implementation of the repository system.</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">887341c5fba0ba48bc5d2d57d1f698d1</hash> + <hash alg="SHA-1">719030b9a577b2897983a23389a8e10dad393b36</hash> + <hash alg="SHA-256">55672351fa78c1004188944ef874c21b924c32b1333a834ebebf65c3c499739b</hash> + <hash alg="SHA-512">ae9368a3388dea6a5c6ea8a6379cb8c336b0c4342b5b743868b218e27cf565214a7598e519f1e7a6f4920212b72970400526f69a2fccd16a84cef70b354b2ffd</hash> + <hash alg="SHA-384">3ab572b51ccc2e6bd4270fa82ee91e75dc13e7b30322a30a4fdd085fc0ed697e5041d37c561d0a180704dbff9175904f</hash> + <hash alg="SHA3-384">9ec901acf20fbc9f850e1bd830a52008d884f2599e28e7cd2ebdb8b3d7eefda2cb789a72f78b134881939c92e3e2cd89</hash> + <hash alg="SHA3-256">976f9d16fb5bef8fcc5210dd7e7d41d1e24056f1e026f89f4be09e62954be3ae</hash> + <hash alg="SHA3-512">73d6f292258284780f74117e922806b1df2bdebd05029c00fc94cb5b07581a256d0bb7c07d2961b535abd012b6fe83e497eb65963a83add9b0edf754464b764d</hash> + </hashes> + <licenses> + <license> + <id>Apache-2.0</id> + <url>https://www.apache.org/licenses/LICENSE-2.0</url> + </license> + </licenses> + <purl>pkg:maven/org.apache.maven.resolver/maven-resolver-impl@1.9.20?type=jar</purl> + <externalReferences><reference type="website"><url>https://maven.apache.org/resolver/maven-resolver-impl/</url></reference><reference type="build-system"><url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-resolver/</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/MRESOLVER</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?us...@maven.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/maven-resolver/tree/maven-resolver-1.9.20/maven-resolver-impl</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.apache.maven.resolver/maven-resolver-named-locks@1.9.20?type=jar"> + <publisher>The Apache Software Foundation</publisher> + <group>org.apache.maven.resolver</group> + <name>maven-resolver-named-locks</name> + <version>1.9.20</version> + <description>A synchronization utility implementation using Named locks.</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">956e10ad44281cedbf628fbbd141829a</hash> + <hash alg="SHA-1">0ff232fc989b53c8b0a6faf3b3160b19c7c7260e</hash> + <hash alg="SHA-256">6d0725edfc618555bb70509865307287b80820438a327f778dbe8d6f8e26417d</hash> + <hash alg="SHA-512">212f0e031ddfca69095636e2862854f2501bd13752f418ecaa7858fe525e0a805f8f982a3a7b254668a08b18411f08f227a98b63b1cd819833c420920bebc8d5</hash> + <hash alg="SHA-384">d9617b3ff3a2e16503b3b21f12bf7a2acd917012d80c7b0aa5fca0cf8051de3b8ca54cb64296381217ca75566bf927f7</hash> + <hash alg="SHA3-384">4e7b27393fc215d61df745f730f73f3092b6dda5e76f7a5c22530bba1601af80a2883979e2188ecc9984762f737ac13e</hash> + <hash alg="SHA3-256">d8dede3eae6dbe2200e78643d8f0bb755e986dbefb49c194cf631577a59bdc24</hash> + <hash alg="SHA3-512">2a0de8e06df3271155694b0de882394d05869161127e707dc61fdb2ffb872b2aa0fdb439268ad528f1aded32f63db32ac8a1d3f7667e87ce899a52e31f7cef54</hash> + </hashes> + <licenses> + <license> + <id>Apache-2.0</id> + <url>https://www.apache.org/licenses/LICENSE-2.0</url> + </license> + </licenses> + <purl>pkg:maven/org.apache.maven.resolver/maven-resolver-named-locks@1.9.20?type=jar</purl> + <externalReferences><reference type="website"><url>https://maven.apache.org/resolver/maven-resolver-named-locks/</url></reference><reference type="build-system"><url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-resolver/</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/MRESOLVER</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?us...@maven.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/maven-resolver/tree/maven-resolver-1.9.20/maven-resolver-named-locks</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.apache.maven.resolver/maven-resolver-spi@1.9.20?type=jar"> + <publisher>The Apache Software Foundation</publisher> + <group>org.apache.maven.resolver</group> + <name>maven-resolver-spi</name> + <version>1.9.20</version> + <description>The service provider interface for repository system implementations and repository connectors.</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">003ee5056c5f7ad9946922604a6677ac</hash> + <hash alg="SHA-1">5e0c56befb978b02c91c2684a2bb7906b18314a6</hash> + <hash alg="SHA-256">04c3c41454298dff4f42ad2b69d5b18e74c3c9a329b4f501d717e157d56ebd11</hash> + <hash alg="SHA-512">f0210976e5377c175ab45a301f2df586b85011d710b8a515043e2ed89110e6c89fe0ee56589e5413a776b6a8e4f23a9d2752b607bed8cd97c4f0f2dc9a50c287</hash> + <hash alg="SHA-384">bcdbfb3e9163247e3c374496beb242fdbd105db4f5cd2dc2ad4e3da7c6e20ec5f3abde24efbc250b3d3b5bbb37e942af</hash> + <hash alg="SHA3-384">f100acca4d9c36f4c8d15aa4695e5500aed812278b4fd27d89dd98da9d7bcaf3304f1c97cee81d3c1a4b5c2e48b65a9f</hash> + <hash alg="SHA3-256">bf486bde5a1255c154b088f95ef45719150a77c12961b61990bfb708792d381f</hash> + <hash alg="SHA3-512">46cac08c5250f60d10b9b7ec3cb40b3fadd5d14d08331ad0f7fa912add7e79bbd4e58823b49e684086f83b2733f9a9276e435cb51dc89ad4f13580635d4f1857</hash> + </hashes> + <licenses> + <license> + <id>Apache-2.0</id> + <url>https://www.apache.org/licenses/LICENSE-2.0</url> + </license> + </licenses> + <purl>pkg:maven/org.apache.maven.resolver/maven-resolver-spi@1.9.20?type=jar</purl> + <externalReferences><reference type="website"><url>https://maven.apache.org/resolver/maven-resolver-spi/</url></reference><reference type="build-system"><url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-resolver/</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/MRESOLVER</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?us...@maven.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/maven-resolver/tree/maven-resolver-1.9.20/maven-resolver-spi</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.apache.maven.shared/maven-shared-utils@3.4.2?type=jar"> + <publisher>The Apache Software Foundation</publisher> + <group>org.apache.maven.shared</group> + <name>maven-shared-utils</name> + <version>3.4.2</version> + <description>Shared utilities for use by Maven core and plugins</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">53a038f77a81cb5816ad2b1c7daa8711</hash> + <hash alg="SHA-1">bfa28296272a5915b08de9f11f34a94b0a818fd0</hash> + <hash alg="SHA-256">b613357e1bad4dfc1dead801691c9460f9585fe7c6b466bc25186212d7d18487</hash> + <hash alg="SHA-512">71db8a485a6436cb305276ea9d748f578e1a8ffa1346c8570f7038684ce53d320584174634aeffa1b51629af0171a2d6572854eb07236a83236ad1d9949988e9</hash> + <hash alg="SHA-384">8f7e2c449282244fea3151ac0c956b42bb7ae6cb2397ca8b18952aea802d33cccad6e08a5f515fc34e52bacfece18862</hash> + <hash alg="SHA3-384">72ec6c2c5de8cd074bd59dbb8215005bedc9de58795484ec2792fa867eaf13547aaca81daaf06f1ec117d29b21e70cd0</hash> + <hash alg="SHA3-256">5cf6de29555bde0317d641e8a7afd7d1ed84dddff92c80f8493b4a2873d26c41</hash> + <hash alg="SHA3-512">836acb2525ddc3b352da7db824e00c0831b25f46cb32a77c1e578b39978621e3c47da3554a901749af15b3981620875a4c4492f421a1833d8eb8e50c4804eff8</hash> + </hashes> + <licenses> + <license> + <id>Apache-2.0</id> + <url>https://www.apache.org/licenses/LICENSE-2.0</url> + </license> + </licenses> + <purl>pkg:maven/org.apache.maven.shared/maven-shared-utils@3.4.2?type=jar</purl> + <externalReferences><reference type="website"><url>https://maven.apache.org/shared/maven-shared-utils/</url></reference><reference type="build-system"><url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-shared-utils/</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/issues/?jql=project%20%3D%20MSHARED%20AND%20component%20%3D%20maven-shared-utils</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?us...@maven.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/maven-shared-utils/tree/maven-shared-utils-3.4.2</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.9.0.M3?type=jar"> + <publisher>The Eclipse Foundation</publisher> + <group>org.eclipse.sisu</group> + <name>org.eclipse.sisu.plexus</name> + <version>0.9.0.M3</version> + <description>Plexus-JSR330 adapter; adds Plexus support to the Sisu-Inject container</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">964e7bc9837b270566f18b87af65f5d7</hash> + <hash alg="SHA-1">b493c7abcc6e04fa0a6a20d489a3db0395c76f70</hash> + <hash alg="SHA-256">c99674d3773e26154885661711f0b6d63aa5008f5cc99227a236756d4ad9de5e</hash> + <hash alg="SHA-512">68c5df01ad522917d954b62cb3b11376b3446920e8d5cb35737de508e6acd91a36b34144933f427bbe1d29dca9097ba9dd2431c713fe18069f271a80b519f051</hash> + <hash alg="SHA-384">bd39a6cc9c18c62e64393da231b61efbf5bdeb8c0306e455bbc6e33f4b614e14023ccfbec83c943994da6684ab453092</hash> + <hash alg="SHA3-384">aa3ca83152de61ee92ba94f655190b61aa25520db903489656485a56aa9314a453a91284c0fb377dffb8160580a610c2</hash> + <hash alg="SHA3-256">434081d9dbbd4ffedafa88010d4db9a699fd2bc736e8b12b3bf3cede21f30aa9</hash> + <hash alg="SHA3-512">86e4c864bdfcbcb7d58ac08d80b2c1406cadf10424c92889d1cb181f924af19b28d53210f77cb2b0515faa7ac6fff2dacd25ae1b62c419a798bdfd2a9f3108ae</hash> + </hashes> + <licenses> + <license> + <id>EPL-2.0</id> + </license> + </licenses> + <purl>pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.9.0.M3?type=jar</purl> + <externalReferences><reference type="website"><url>http://www.eclipse.org/sisu/org.eclipse.sisu.plexus/</url></reference><reference type="build-system"><url>https://ci.eclipse.org/sisu/job/sisu.inject/</url></reference><reference type="distribution-intake"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/eclipse/sisu.inject/issues</url></reference><reference type="mailing-list"><url>http://dev.eclipse.org/mhonarc/lists/sisu-dev/</url></reference><reference type="vcs"><url>https://github.com/eclipse/sisu.inject/org.eclipse.sisu.plexus</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.9.0.M3?type=jar"> + <publisher>The Eclipse Foundation</publisher> + <group>org.eclipse.sisu</group> + <name>org.eclipse.sisu.inject</name> + <version>0.9.0.M3</version> + <description>JSR330-based container; supports classpath scanning, auto-binding, and dynamic auto-wiring</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">643a13084e0ac59cdda06319e1b348ea</hash> + <hash alg="SHA-1">3665002ba4d16dfa779ef658a63d0608c4bd898b</hash> + <hash alg="SHA-256">15335c4dcf082f599fb8eddcfb58d6a7e9a9c97de2883c257089a479b9b24522</hash> + <hash alg="SHA-512">76267078f3dd887fd7c4a0931d0ae057d5f51478f712ce4bb5530cfa5c2aa18a8dbe935b32c1afb01a4e2cde44d30579baf5868b8b63ee066ea0714fd9d8a81c</hash> + <hash alg="SHA-384">d24164f8aaae165de8533530b90168228e7d107a5eeb63997bf6e2d41f1adfaabf29aa9ab4f08e3445c69aa57f6c09b8</hash> + <hash alg="SHA3-384">aab9bce13f047bcdd8d47420f80e88a314f3566bf7edcd7d37cf286865f45586fda8745793eb2a54c506759f9654bd5b</hash> + <hash alg="SHA3-256">d9e302304b0f99703243f697f72b12e42df692553c08ef9d2d2e0eb83847eab7</hash> + <hash alg="SHA3-512">8ac0b60618e01e819fcabcfd210176310d98f9856b49cafd5dfb451393b791b1ed43fc17e359c5868662dc76e0059e23a152c5564f7ce94ca4720bd092cb29d0</hash> + </hashes> + <licenses> + <license> + <id>EPL-2.0</id> + </license> + </licenses> + <purl>pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.9.0.M3?type=jar</purl> + <externalReferences><reference type="website"><url>http://www.eclipse.org/sisu/org.eclipse.sisu.inject/</url></reference><reference type="build-system"><url>https://ci.eclipse.org/sisu/job/sisu.inject/</url></reference><reference type="distribution-intake"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/eclipse/sisu.inject/issues</url></reference><reference type="mailing-list"><url>http://dev.eclipse.org/mhonarc/lists/sisu-dev/</url></reference><reference type="vcs"><url>https://github.com/eclipse/sisu.inject/org.eclipse.sisu.inject</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/com.google.inject/guice@5.1.0?type=jar"> + <publisher>Google, Inc.</publisher> + <group>com.google.inject</group> + <name>guice</name> + <version>5.1.0</version> + <description>Guice is a lightweight dependency injection framework for Java 6 and above</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">2560169296aa94492af34af2115e9511</hash> + <hash alg="SHA-1">da25056c694c54ba16e78e4fc35f17fc60f0d1b4</hash> + <hash alg="SHA-256">4130e50bfac48099c860f0d903b91860c81a249c90f38245f8fed58fc817bc26</hash> + <hash alg="SHA-512">b9c7a9b815d9ce387ebf6d58a71541da1be3cb8d847358133dc1f35ca45315bb9db11c13f3238adb643670759a58fd106247039f42c10759374a9b361c62e99e</hash> + <hash alg="SHA-384">1f7e6e7555c97752e2a3a7dc07473384762467c24a0fc8f4c93c0f209ef361ecd4bf2be847281798dd84f68fc8c54b2f</hash> + <hash alg="SHA3-384">59b895108174073d9889ba3e18566eb5e0785310e90dbd918dfb06af5bdf0d72e8a54094c6109090f43e242daa4d6ebf</hash> + <hash alg="SHA3-256">5a9518cdc72dd7fb8d7848500cb8c97c7689e64a52028dabf44e61a933ffd853</hash> + <hash alg="SHA3-512">5b53b7ee09cf057f83acf86de3f35fc45c04cd95c01e78b59fc1b4d9322e17ecaec1d6c5d37cd37084b602c1a74f6457342e27c6271fd140ade3190448c9fb27</hash> + </hashes> + <licenses> + <license> + <id>Apache-2.0</id> + </license> + </licenses> + <purl>pkg:maven/com.google.inject/guice@5.1.0?type=jar</purl> + <externalReferences><reference type="website"><url>https://github.com/google/guice/guice</url></reference><reference type="build-system"><url>https://travis-ci.org/google/guice</url></reference><reference type="distribution-intake"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/google/guice/issues/</url></reference><reference type="mailing-list"><url>http://groups.google.com/group/google-guice/topics</url></reference><reference type="vcs"><url>https://github.com/google/guice/guice</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/aopalliance/aopalliance@1.0?type=jar"> + <group>aopalliance</group> + <name>aopalliance</name> + <version>1.0</version> + <description>AOP Alliance</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">04177054e180d09e3998808efa0401c7</hash> + <hash alg="SHA-1">0235ba8b489512805ac13a8f9ea77a1ca5ebe3e8</hash> + <hash alg="SHA-256">0addec670fedcd3f113c5c8091d783280d23f75e3acb841b61a9cdb079376a08</hash> + <hash alg="SHA-512">3f44a932d8c00cfeee2eb057bcd7c301a2d029063e0a916e1e20b3aec4877d19d67a2fd8aaf58fa2d5a00133d1602128a7f50912ffb6cabc7b0fdc7fbda3f8a1</hash> + <hash alg="SHA-384">4dddf44338b5aff9580da2532b81c0ac3e1d09e1f28c6db871a55cad442b705dd7791eb07f9d4577d49d0be3673ba783</hash> + <hash alg="SHA3-384">2bd64cbaf769c6e4e85e34f7a6119d89e16fbf55af3fc5d6cbd52eb214c367dec1ac7b9062ee0fb35a2e0acfc7c477e1</hash> + <hash alg="SHA3-256">d4a726b2bf8aa58197021a7d8fca674b4b2790d4c48de43a92f728866a91c2f0</hash> + <hash alg="SHA3-512">830bc3f8328be76897990e9b9fc42eef02623115e456af96ad09b20900ad615519c8c8de60155ac04fb332eaa9510110d52edd13911af76271c71d91cbd789cc</hash> + </hashes> + <licenses> + <license> + <name>Public Domain</name> + </license> + </licenses> + <purl>pkg:maven/aopalliance/aopalliance@1.0?type=jar</purl> + <externalReferences><reference type="website"><url>http://aopalliance.sourceforge.net</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/com.google.guava/guava@33.2.1-jre?type=jar"> + <group>com.google.guava</group> + <name>guava</name> + <version>33.2.1-jre</version> + <description>Guava is a suite of core and expanded libraries that include + utility classes, Google's collections, I/O classes, and + much more.</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">872309e5982530bdc7e68096c0d53cd2</hash> + <hash alg="SHA-1">818e780da2c66c63bbb6480fef1f3855eeafa3e4</hash> + <hash alg="SHA-256">452b2d9787b7d366fa8cf5ed9a1c40404542d05effa7a598da03bbbbb76d9f31</hash> + <hash alg="SHA-512">daf6b2eca6df556f70052361657ad11167a21a3b8a76b5821416fe1f7bbe262367216ae5f9135cc8ddb4f94e5d532ca79555b438a9967fbea41e26b203914b85</hash> + <hash alg="SHA-384">bdfa6908c68fcdc4969a260998bb65da326ccd3afaecd9c1b6fe72ce84aedcdc30f3c14ca812647a62e65da5cc74f95e</hash> + <hash alg="SHA3-384">a3e516ba3b32697eb71c511c0fc872113ee4ee6e6239241f9c6e54ca53b06d96a161de9b2431ef77433e7793e3b1cef3</hash> + <hash alg="SHA3-256">a48184d72e92dde277e29ac0ab73d8b4b8afb7d5ca4db94a08f7fd5a3934379f</hash> + <hash alg="SHA3-512">ac0a9fad5d942e5b00423116e773196f8f37163b84e48213891500b5b060f89e3380038efad7ef7da5303c6a2c7f6c0e73d0b48a9024b759edcc3a26ea89551b</hash> + </hashes> + <licenses> + <license> + <id>Apache-2.0</id> + </license> + </licenses> + <purl>pkg:maven/com.google.guava/guava@33.2.1-jre?type=jar</purl> + <externalReferences><reference type="website"><url>https://github.com/google/guava</url></reference><reference type="build-system"><url>https://github.com/google/guava/actions</url></reference><reference type="distribution-intake"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/google/guava/issues</url></reference><reference type="vcs"><url>https://github.com/google/guava/guava</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/com.google.guava/failureaccess@1.0.2?type=jar"> + <group>com.google.guava</group> + <name>failureaccess</name> + <version>1.0.2</version> + <description>Contains + com.google.common.util.concurrent.internal.InternalFutureFailureAccess and + InternalFutures. Most users will never need to use this artifact. Its + classes are conceptually a part of Guava, but they're in this separate + artifact so that Android libraries can use them without pulling in all of + Guava (just as they can use ListenableFuture by depending on the + listenablefuture artifact).</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">3f75955b49b6758fd6d1e1bd9bf777b3</hash> + <hash alg="SHA-1">c4a06a64e650562f30b7bf9aaec1bfed43aca12b</hash> + <hash alg="SHA-256">8a8f81cf9b359e3f6dfa691a1e776985c061ef2f223c9b2c80753e1b458e8064</hash> + <hash alg="SHA-512">ff4ee76aa661708989d53d45576cff3beea9ebbd86481dbbf2ee8c81bb22f882097b430588312b711025f0e890f22c6799d722ccd422a6a7278de08660fe2f51</hash> + <hash alg="SHA-384">85a7bd379da27ad57a4e5c02099fef206083caa52244597ac858a921b48e2912cfa7ef0e7d0c7a10ab2dd8d0f7d6ada0</hash> + <hash alg="SHA3-384">652b22d09b297320e62ac254801e7d3a0fd2a8038461c5cbf7a53a27d681f62b768b964aa62c864453c4e7af217c8c4a</hash> + <hash alg="SHA3-256">a650b2f7982affc2dbb7e2807fbb0fbf58b74fd8dc111cc6dc5e95a00179b7e3</hash> + <hash alg="SHA3-512">2c5ee7629a8fb1c952f437b80fcd1cff86c54ff81de02eda1eb73c0bbfe38d3f072946f8c6396c7f1e46e16a6d44ad393dfe6fd2dd96f75ebb854263d36bb193</hash> + </hashes> + <licenses> + <license> + <id>Apache-2.0</id> + </license> + </licenses> + <purl>pkg:maven/com.google.guava/failureaccess@1.0.2?type=jar</purl> + <externalReferences><reference type="website"><url>https://github.com/google/guava/failureaccess</url></reference><reference type="build-system"><url>https://travis-ci.org/google/guava</url></reference><reference type="distribution-intake"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/google/guava/issues</url></reference><reference type="vcs"><url>https://github.com/google/guava/failureaccess</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/javax.inject/javax.inject@1?type=jar"> + <group>javax.inject</group> + <name>javax.inject</name> + <version>1</version> + <description>The javax.inject API</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">289075e48b909e9e74e6c915b3631d2e</hash> + <hash alg="SHA-1">6975da39a7040257bd51d21a231b76c915872d38</hash> + <hash alg="SHA-256">91c77044a50c481636c32d916fd89c9118a72195390452c81065080f957de7ff</hash> + <hash alg="SHA-512">e126b7ccf3e42fd1984a0beef1004a7269a337c202e59e04e8e2af714280d2f2d8d2ba5e6f59481b8dcd34aaf35c966a688d0b48ec7e96f102c274dc0d3b381e</hash> + <hash alg="SHA-384">ac04c9f03ccbe35a25deb8b50280a0ca01dbe6aff0dd795d55af6112bfe3cd5817eb82f32fb18378d86cd64b07597190</hash> + <hash alg="SHA3-384">fca090ecb1edeacb9fe865dc515cd1d109b323cd742d4a9733ff199a96ee96e0db4f924079520b9c189ef750f255475d</hash> + <hash alg="SHA3-256">5b0054e39e522de0e0ffc4034d12f72270291fb24d94d5ffc9c4d69c25035fc6</hash> + <hash alg="SHA3-512">fb290f5a70b1efc1dff12f40a0b2d7b94019f66da42e78010c0b8e61f222c4f267b67e356a9e9c346eb801e5515e36243888f280c5cb95c2dd69016a30cadeb9</hash> + </hashes> + <licenses> + <license> + <id>Apache-2.0</id> + </license> + </licenses> + <purl>pkg:maven/javax.inject/javax.inject@1?type=jar</purl> + <externalReferences><reference type="website"><url>http://code.google.com/p/atinject/</url></reference><reference type="vcs"><url>http://code.google.com/p/atinject/source/checkout</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.codehaus.plexus/plexus-classworlds@2.8.0?type=jar"> + <publisher>Codehaus Plexus</publisher> + <group>org.codehaus.plexus</group> + <name>plexus-classworlds</name> + <version>2.8.0</version> + <description>A class loader framework</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">92089dee35db6423c2128559238430cb</hash> + <hash alg="SHA-1">5d0d8c71b61b38ce127a46702a453f9aa09a4ee2</hash> + <hash alg="SHA-256">081b40e0eab033cd5ac72d2501bfff4f5fd2a3eef827051111730ea152681c72</hash> + <hash alg="SHA-512">3f8eeaf5089244ca8e0eec46ab0d57924dd187375413ddf55edf5881a2fd17f7b4a12abd0b402e8a2d5c8428bff87809f40921eda9f6ddc20585e861825618ec</hash> + <hash alg="SHA-384">b689762c3c4a75b2f6eda24e97c6d77c1a550b755baa1d7f6b3151f413421380232d5474f3c1b2a15665651d8909b456</hash> + <hash alg="SHA3-384">929e03c89948c96515c8ff58da7653c1396e261b7c5b7d22575634f7266496d655397864ab2e129778af759993f57520</hash> + <hash alg="SHA3-256">a1006c9de6b5f60a8e2ee5839c2fbc128158f6008458e42e65123e7bb2e3cbbc</hash> + <hash alg="SHA3-512">5a813f86a7246cd2f0021d1d6891497128cefcbb2258d3865dc41eb7f4fb5f21c5875f21418a8bbff2b6b100ed0523e7101b7937aa84b6be87a808cfee73e50d</hash> + </hashes> + <licenses> + <license> + <id>Apache-2.0</id> + </license> + </licenses> + <purl>pkg:maven/org.codehaus.plexus/plexus-classworlds@2.8.0?type=jar</purl> + <externalReferences><reference type="website"><url>https://codehaus-plexus.github.io/plexus-classworlds/</url></reference><reference type="distribution-intake"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/codehaus-plexus/plexus-classworlds/issues</url></reference><reference type="mailing-list"><url>https://groups.google.com/forum/#!forum/mojohaus-dev</url></reference><reference type="vcs"><url>https://github.com/codehaus-plexus/plexus-classworlds/tree/plexus-classworlds-2.8.0/</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.codehaus.plexus/plexus-interpolation@1.27?type=jar"> + <publisher>Codehaus Plexus</publisher> + <group>org.codehaus.plexus</group> + <name>plexus-interpolation</name> + <version>1.27</version> + <description>The Plexus project provides a full software stack for creating and executing software projects.</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">c2edbe0dbc934692794aaeac6006055a</hash> + <hash alg="SHA-1">8dc73f4ff5eafcbb7ec035ba54736e828b272533</hash> + <hash alg="SHA-256">3fb4fb6143fdf964024c3cb738551524b9ea84e5c211cd660c559ad0703e5230</hash> + <hash alg="SHA-512">34ae1399e75560d6aec6743ce37e10d2236342ec58145c3fdd7b03340f4ed3ef500f824c845d452dbb8c3f14d118c855707de4a080074fa572daf7ccfef4dddf</hash> + <hash alg="SHA-384">cf31f04d414db3c864a403628707df8b36c379a984d75804e5cbfeeea5fea54d2510620de045c0b01a7745063b3135fb</hash> + <hash alg="SHA3-384">9a439b4e81260659af067e91d5e2482337dc718cd32abc08562e9a90fee45da6a0cbfffdc7190b13ba662ed3153fcde1</hash> + <hash alg="SHA3-256">d8cd271924ed99a870e9f8c17796e2ab0a3e69350465508517992bee0cea6bbe</hash> + <hash alg="SHA3-512">75a3e2cbde1c45b70c1b4103620f76673db127e17518e2ca51cff1e6d7a84041e495c71171490004650d6476679d009594db2557898e231962bea3744914c501</hash> + </hashes> + <licenses> + <license> + <id>Apache-2.0</id> + </license> + </licenses> + <purl>pkg:maven/org.codehaus.plexus/plexus-interpolation@1.27?type=jar</purl> + <externalReferences><reference type="website"><url>https://codehaus-plexus.github.io/plexus-pom/plexus-interpolation/</url></reference><reference type="distribution-intake"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/codehaus-plexus/plexus-interpolation/issues</url></reference><reference type="mailing-list"><url>https://groups.google.com/forum/#!forum/mojohaus-dev</url></reference><reference type="vcs"><url>http://github.com/codehaus-plexus/plexus-interpolation/tree/plexus-interpolation-1.27/</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.codehaus.plexus/plexus-component-annotations@2.1.0?type=jar"> + <publisher>Codehaus Plexus</publisher> + <group>org.codehaus.plexus</group> + <name>plexus-component-annotations</name> + <version>2.1.0</version> + <description>Plexus Component "Java 5" Annotations, to describe plexus components properties in java sources with + standard annotations instead of javadoc annotations.</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">141fd7a2ae613cb17d25ecd54b43eb3f</hash> + <hash alg="SHA-1">2f2147a6cc6a119a1b51a96f31d45c557f6244b9</hash> + <hash alg="SHA-256">bde3617ce9b5bcf9584126046080043af6a4b3baea40a3b153f02e7bbc32acac</hash> + <hash alg="SHA-512">cc534fda54272f074fe9edd581a6c3e1ea98127340c7f852c4b4953a44dad048ace22dfa10f30d6adcdfc15efd319dac778a03ebbe20de7779fd1df640506e88</hash> + <hash alg="SHA-384">dd102351fada419b7e66f38b62868db4141cf93863b8117926564dd883b4a3960d9c9682b346f7106cdaa2a4138c794f</hash> + <hash alg="SHA3-384">2b335733d7683e8bae312b0608af7c17b1aa22a1b9cbc4cc11549faf6bacc51c7591f1073aac99e5d70fdea31c6253c4</hash> + <hash alg="SHA3-256">2e9f44d1c5df160563d3cedaf01929682fb3e0432beca7c782d8ba0324fb32b1</hash> + <hash alg="SHA3-512">5051e4210310ec60fae9f32284a93da3cff63bf43a7dda30eaf2715d24cfc7f2353a6c2731521f4d6ef32e7a3e2526b6a41c8a11b0889c8dbf7ffc7914812641</hash> + </hashes> + <licenses> + <license> + <id>Apache-2.0</id> + </license> + </licenses> + <purl>pkg:maven/org.codehaus.plexus/plexus-component-annotations@2.1.0?type=jar</purl> + <externalReferences><reference type="website"><url>http://codehaus-plexus.github.io/plexus-containers/plexus-component-annotations/</url></reference><reference type="distribution-intake"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>http://github.com/codehaus-plexus/plexus-containers/issues</url></reference><reference type="mailing-list"><url>http://archive.plexus.codehaus.org/user</url></reference><reference type="vcs"><url>https://github.com/codehaus-plexus/plexus-containers/plexus-component-annotations</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.slf4j/slf4j-api@2.0.13?type=jar"> + <publisher>QOS.ch</publisher> + <group>org.slf4j</group> + <name>slf4j-api</name> + <version>2.0.13</version> + <description>The slf4j API</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">7f4028aa04f75427327f3f30cd62ba4e</hash> + <hash alg="SHA-1">80229737f704b121a318bba5d5deacbcf395bc77</hash> + <hash alg="SHA-256">e7c2a48e8515ba1f49fa637d57b4e2f590b3f5bd97407ac699c3aa5efb1204a9</hash> + <hash alg="SHA-512">b4eeb5757118e264ec7f107d879270784357380d6f53471b7874dd7e0166fdf5686a95eb66bab867abbe9536da032ab052e207165211391c293cbf6178431fb6</hash> + <hash alg="SHA-384">b67cbb4ef32141423000dd4e067bf32e0c1dd2c4689c611522b9fedfc1744513175a22f4b1276f2cec4721c9467cf882</hash> + <hash alg="SHA3-384">817fc9641f4fc52bfd76006886c6eba975f6f09b2a7cc59334729a8cc033807c8e89be9ec4309acfc16ed65ff6eee018</hash> + <hash alg="SHA3-256">f26080cceb5a2e605f3844d6dc8dd3f14c543cb14510765d841d71a64fa454dc</hash> + <hash alg="SHA3-512">00646c78d65ec854e157638f40735f1888aa585ede59915d58386c599c2fe54ec8c1da73284aeff00ce3142165e33c4c995ad39d08843c31e9e4d7e32c746836</hash> + </hashes> + <licenses> + <license> + <id>MIT</id> + <url>https://opensource.org/licenses/MIT</url> + </license> + </licenses> + <purl>pkg:maven/org.slf4j/slf4j-api@2.0.13?type=jar</purl> + <externalReferences><reference type="website"><url>http://www.slf4j.org</url></reference><reference type="distribution-intake"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/qos-ch/slf4j/slf4j-parent/slf4j-api</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-artifact@3.9.8?type=jar"> + <publisher>The Apache Software Foundation</publisher> + <group>org.apache.maven</group> + <name>maven-artifact</name> + <version>3.9.8</version> + <description>Maven is a software build management and + comprehension tool. Based on the concept of a project object model: + builds, dependency management, documentation creation, site + publication, and distribution publication are all controlled from + the declarative file. Maven can be extended by plugins to utilise a + number of other development tools for reporting or the build + process.</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">17edb392c44a1cf3c17fc03de10e5a66</hash> + <hash alg="SHA-1">a7f2d502a8bf72d17ea97eca6c46776314703a66</hash> + <hash alg="SHA-256">5e2f3cda004182fc815d48b70bc0d144cb128230a841dc711357d57c76c95972</hash> + <hash alg="SHA-512">8e0722b5abd825d8e35d2cbb6cf769bdb853cf614bc63c758a65a94833b2b38e78e41cef50a8ccd60429e96f8b37e974699168857783d1cc40c35d553c933ff2</hash> + <hash alg="SHA-384">12cc6030d522c63ca594eed7866db24f31d05a129fa345cc1e49f85a50234b3bb53a2f7f39320af3771972a2fdf24759</hash> + <hash alg="SHA3-384">5f2f6d8f0ed3bcd1e6c03dac2a81f57b01f5096da6c9bffbd9fa5635655e4859dc6d000937c20a76a08c67b653b1f840</hash> + <hash alg="SHA3-256">d1b8b0af181d43d513992d8cc0e3c21ce266cc575187f16d7fdbf0a69e4ba99d</hash> + <hash alg="SHA3-512">79ce575ad6b70b0add933f87a3cfad907077de495609ff6a0cc2c87b9bcb897ef3c3b5aec372d96044d745bc413fa778eb004ad67f34781532f56ce64c67cbe0</hash> + </hashes> + <licenses> + <license> + <id>Apache-2.0</id> + <url>https://www.apache.org/licenses/LICENSE-2.0</url> + </license> + </licenses> + <purl>pkg:maven/org.apache.maven/maven-artifact@3.9.8?type=jar</purl> + <externalReferences><reference type="website"><url>https://maven.apache.org/ref/3.9.8/maven-artifact/</url></reference><reference type="build-system"><url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/</url></reference><reference type="distribution"><url>https://maven.apache.org/download.html</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/MNG</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?us...@maven.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/maven/tree/maven-3.9.8/maven-artifact</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-plugin-api@3.9.8?type=jar"> + <publisher>The Apache Software Foundation</publisher> + <group>org.apache.maven</group> + <name>maven-plugin-api</name> + <version>3.9.8</version> + <description>The API for plugins - Mojos - development.</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">377ff71179bafa180f347c25f6535c0d</hash> + <hash alg="SHA-1">e7c822d321fcfe0aad7ce4cc5e4499e320718d61</hash> + <hash alg="SHA-256">ec0d41b3c6de899b202523373fdf8571d354f09052c17bf4230baa1ca1cd7936</hash> + <hash alg="SHA-512">17b665495a72f2b2bef88e930973f1063d74b40228a8d432b5e9eba40c827589f00ba0c11dfa9d50fb822d3457dc4418fea562ee607bb02c7ecf6c2ad8d1f50c</hash>
[... 74667 lines stripped ...]
