Added: release/camel/apache-camel/4.8.3/apache-camel-4.8.3-sbom.xml ============================================================================== --- release/camel/apache-camel/4.8.3/apache-camel-4.8.3-sbom.xml (added) +++ release/camel/apache-camel/4.8.3/apache-camel-4.8.3-sbom.xml Sun Jan 12 13:10:24 2025 @@ -0,0 +1,77613 @@ +<?xml version="1.0" encoding="UTF-8"?> +<bom serialNumber="urn:uuid:7790e441-3d67-361e-939a-51cb9d37d4c3" version="1" xmlns="http://cyclonedx.org/schema/bom/1.5";> + <metadata> + <lifecycles> + <lifecycle> + <phase>build</phase> + </lifecycle> + </lifecycles> + <tools> + <components> + <component type="library"> + <author>OWASP Foundation</author> + <group>org.cyclonedx</group> + <name>cyclonedx-maven-plugin</name> + <version>2.8.1</version> + <description>CycloneDX Maven plugin</description> + <hashes> + <hash alg="MD5">42c73e70d517b359d40b757c368d68fc</hash> + <hash alg="SHA-1">c66892e13fb7ed7b8105cb5a280fa767d9e0bf12</hash> + <hash alg="SHA-256">566681b9fcb1b0178e101cd899d2ea399e2039255e208a1a477bc079158dbdc5</hash> + <hash alg="SHA-512">93d7b7421ee2d91f84930e75a52864952f26fee96114740dab477ee5f0e62b6448759ad5a160f1749650379f771941100c7fd84ed523b2407d2004b928998ecb</hash> + <hash alg="SHA-384">04b0c71c1b79f77e723e7db96c72705f50172e94df5a7f28edbd96024b886fff65f61f37fc77abb1d12b0809813ae665</hash> + <hash alg="SHA3-384">eafa68c2c25670f0b77c5db3acdfd97cfe97dfc50c47bba2103353327b049b9bbac0d8b621b1168200ddf21719048c73</hash> + <hash alg="SHA3-256">2c07b6997ba0e40ca3b66e39cfcf101fcebdceaa19fce0baf12e013cf392466e</hash> + <hash alg="SHA3-512">636f068843bad92259885cd4d427630619864c0172bd1b41df15c33a7d411767ab09cf2ff339a97fda149ee44c95a162fdf6cb12de19e2dc0250c2fadc80d882</hash> + </hashes> + </component> + </components> + </tools> + <component type="library" bom-ref="pkg:maven/org.apache.camel/camel@4.8.3?type=pom"> + <publisher>The Apache Software Foundation</publisher> + <group>org.apache.camel</group> + <name>camel</name> + <version>4.8.3</version> + <description>Camel Root POM</description> + <licenses> + <license> + <id>Apache-2.0</id> + <url>https://www.apache.org/licenses/LICENSE-2.0</url> + </license> + </licenses> + <purl>pkg:maven/org.apache.camel/camel@4.8.3?type=pom</purl> + <externalReferences><reference type="website"><url>https://camel.apache.org</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/CAMEL</url></reference><reference type="mailing-list"><url>dev-subscr...@camel.apache.org</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=camel.git;a=summary</url></reference></externalReferences> + </component> + <properties> + <property name="maven.goal">makeAggregateBom</property> + <property name="maven.scopes">compile,provided,runtime,system</property> + <property name="cdx:reproducible">enabled</property> + </properties> + </metadata> + <components> + <component type="library" bom-ref="pkg:maven/org.apache.camel/camel-buildtools@4.8.3?type=jar"> + <publisher>The Apache Software Foundation</publisher> + <group>org.apache.camel</group> + <name>camel-buildtools</name> + <version>4.8.3</version> + <description>The build tools for the Apache Camel project</description> + <licenses> + <license> + <id>Apache-2.0</id> + <url>https://www.apache.org/licenses/LICENSE-2.0</url> + </license> + </licenses> + <purl>pkg:maven/org.apache.camel/camel-buildtools@4.8.3?type=jar</purl> + <externalReferences><reference type="website"><url>https://camel.apache.org/camel-buildtools</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/CAMEL</url></reference><reference type="mailing-list"><url>dev-subscr...@camel.apache.org</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=camel.git;a=summary/camel-buildtools</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.apache.camel/camel-parent@4.8.3?type=pom"> + <publisher>The Apache Software Foundation</publisher> + <group>org.apache.camel</group> + <name>camel-parent</name> + <version>4.8.3</version> + <description>Camel Parent POM</description> + <licenses> + <license> + <id>Apache-2.0</id> + <url>https://www.apache.org/licenses/LICENSE-2.0</url> + </license> + </licenses> + <purl>pkg:maven/org.apache.camel/camel-parent@4.8.3?type=pom</purl> + <externalReferences><reference type="website"><url>https://camel.apache.org/camel-parent</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/CAMEL</url></reference><reference type="mailing-list"><url>dev-subscr...@camel.apache.org</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=camel.git;a=summary/camel-parent</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.apache.camel/camel-etc@4.8.3?type=pom"> + <publisher>The Apache Software Foundation</publisher> + <group>org.apache.camel</group> + <name>camel-etc</name> + <version>4.8.3</version> + <description>Misc stuff</description> + <licenses> + <license> + <id>Apache-2.0</id> + <url>https://www.apache.org/licenses/LICENSE-2.0</url> + </license> + </licenses> + <purl>pkg:maven/org.apache.camel/camel-etc@4.8.3?type=pom</purl> + <externalReferences><reference type="website"><url>https://camel.apache.org/camel-parent/camel-etc</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/CAMEL</url></reference><reference type="mailing-list"><url>dev-subscr...@camel.apache.org</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=camel.git;a=summary/camel-parent/camel-etc</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.apache.camel/tooling@4.8.3?type=pom"> + <publisher>The Apache Software Foundation</publisher> + <group>org.apache.camel</group> + <name>tooling</name> + <version>4.8.3</version> + <description>Camel Tooling</description> + <licenses> + <license> + <id>Apache-2.0</id> + <url>https://www.apache.org/licenses/LICENSE-2.0</url> + </license> + </licenses> + <purl>pkg:maven/org.apache.camel/tooling@4.8.3?type=pom</purl> + <externalReferences><reference type="website"><url>https://camel.apache.org/camel-parent/tooling</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/CAMEL</url></reference><reference type="mailing-list"><url>dev-subscr...@camel.apache.org</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=camel.git;a=summary/camel-parent/tooling</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.apache.camel/camel-tooling-util@4.8.3?type=jar"> + <publisher>The Apache Software Foundation</publisher> + <group>org.apache.camel</group> + <name>camel-tooling-util</name> + <version>4.8.3</version> + <description>Tooling utilities</description> + <licenses> + <license> + <id>Apache-2.0</id> + <url>https://www.apache.org/licenses/LICENSE-2.0</url> + </license> + </licenses> + <purl>pkg:maven/org.apache.camel/camel-tooling-util@4.8.3?type=jar</purl> + <externalReferences><reference type="website"><url>https://camel.apache.org/camel-parent/tooling/camel-tooling-util</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/CAMEL</url></reference><reference type="mailing-list"><url>dev-subscr...@camel.apache.org</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=camel.git;a=summary/camel-parent/tooling/camel-tooling-util</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.junit.jupiter/junit-jupiter-api@5.11.0?type=jar"> + <group>org.junit.jupiter</group> + <name>junit-jupiter-api</name> + <version>5.11.0</version> + <description>Module "junit-jupiter-api" of JUnit 5.</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">fc81c1495c12380b4190f6b69d0be84a</hash> + <hash alg="SHA-1">02093fd814e940224cfa5a1882d87cc9d81e25c3</hash> + <hash alg="SHA-256">42aa202fc862f76cc5af65b47b1c0b1961cdd79cd2216405a6dfa2bd20b20974</hash> + <hash alg="SHA-512">628606a67a06a8c09aae02e4cbac49364e0dbfbedad550c5cd89d1b744bdba3edf2f4c71f1007dc285bb715952458eae4539775987522aa5617bbb325a4d23ac</hash> + <hash alg="SHA-384">dd644a861be4dd375d2078cb5cd05b68b5730a6478fc658b4eefdeb26ddb3f1f9e0340a55d18f481795bc698a6aa4112</hash> + <hash alg="SHA3-384">76caeb975aed7df486660824f7fca3084b56b2c61b0da70f8846115ecc618d47342ac899320e2755e6e29955c7cd357b</hash> + <hash alg="SHA3-256">cedee513df1cf7a086ced3afdaf3bf496f1722323b3b7fde300c19d118584516</hash> + <hash alg="SHA3-512">83df4e128ae3694bc766cd26e5be14a87a99abcb8246a12731febb062993f30703ba4381c34a7690375d6be0b830d4780e81a6e1790ab1ab4591b9a278b0636d</hash> + </hashes> + <licenses> + <license> + <id>EPL-2.0</id> + </license> + </licenses> + <purl>pkg:maven/org.junit.jupiter/junit-jupiter-api@5.11.0?type=jar</purl> + <externalReferences><reference type="website"><url>https://junit.org/junit5/</url></reference><reference type="vcs"><url>https://github.com/junit-team/junit5</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.opentest4j/opentest4j@1.3.0?type=jar"> + <group>org.opentest4j</group> + <name>opentest4j</name> + <version>1.3.0</version> + <description>Open Test Alliance for the JVM</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">03c404f727531f3fd3b4c73997899327</hash> + <hash alg="SHA-1">152ea56b3a72f655d4fd677fc0ef2596c3dd5e6e</hash> + <hash alg="SHA-256">48e2df636cab6563ced64dcdff8abb2355627cb236ef0bf37598682ddf742f1b</hash> + <hash alg="SHA-512">78fc698a7871bb50305e3657893c10500595f043348d875f57bc39ca4a6a51eda3967b7c8c8a7ec3e8f85f2171bca4aa98823e912e416e87e81c6ba5b70a37c3</hash> + <hash alg="SHA-384">10398b6998c9202a0731e2e19ae1c3f9d8a83582c2663fe7bdda15794ee6fa816727dbd8f7c7164bd5395ee1cfe7c97e</hash> + <hash alg="SHA3-384">3abe706fd78509c25a402c7bbf6f9ddf71ffb5b35054864ba0fdf7902207115f888a0ba728fd71d2e87a9360d2498121</hash> + <hash alg="SHA3-256">d961907a1bfa1dcda329dca494ffbc251b31fabcaca5ab7095661a8ce3c1d654</hash> + <hash alg="SHA3-512">0ad661617bcac51bcd26f7ad4611c69b1fd9811b50dbf734e041a3243ab1f845e7796620e8a7c40c4a2df3946864598b1251396c7d9bd813203d82710788cce0</hash> + </hashes> + <licenses> + <license> + <id>Apache-2.0</id> + </license> + </licenses> + <purl>pkg:maven/org.opentest4j/opentest4j@1.3.0?type=jar</purl> + <externalReferences><reference type="website"><url>https://github.com/ota4j-team/opentest4j</url></reference><reference type="vcs"><url>https://github.com/ota4j-team/opentest4j</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.junit.platform/junit-platform-commons@1.11.0?type=jar"> + <group>org.junit.platform</group> + <name>junit-platform-commons</name> + <version>1.11.0</version> + <description>Module "junit-platform-commons" of JUnit 5.</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">00f120150f50572c9a0500d3812a4cba</hash> + <hash alg="SHA-1">9bb41eff52781584798c487b68782ae3b4126f14</hash> + <hash alg="SHA-256">609333a4545f9018eb0c59071efd30663a9e9fdce528121b65a04c27e5fc26a7</hash> + <hash alg="SHA-512">2ffa55c14ba25911852406e1974f11e956fd9afd6b4854f9c4db9b85f46e7f1678ab7ebc4780b26f1cb23b41abbf12e568e011d7f47e42b92622a838a8a0c4b0</hash> + <hash alg="SHA-384">4380108050b0837cb8b43c6e00fa9a49e8e4a74aa076c346a23b3dbbc06a79bdabdcc6d4e77cf66ed648df1472343e5c</hash> + <hash alg="SHA3-384">c6c19146a0cf452a502b9c8140e6f943f3bc06ff0211c07b6239b1e67e9e651c9d6e882abf60d28c356ce2b4ccd4ab6c</hash> + <hash alg="SHA3-256">5d1ab7bfee383633f99130e14b7bf71df744cdf4ef541651b4d739f038cb5808</hash> + <hash alg="SHA3-512">0e7fee2a41ae61406c019f342f1a04a0ee7d37a599aab86fbaa7a24523ba43814c2d51d64b7076752e35085e8600bd058b408fb1ff56668f48c3792abb4c0daf</hash> + </hashes> + <licenses> + <license> + <id>EPL-2.0</id> + </license> + </licenses> + <purl>pkg:maven/org.junit.platform/junit-platform-commons@1.11.0?type=jar</purl> + <externalReferences><reference type="website"><url>https://junit.org/junit5/</url></reference><reference type="vcs"><url>https://github.com/junit-team/junit5</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.apiguardian/apiguardian-api@1.1.2?type=jar"> + <group>org.apiguardian</group> + <name>apiguardian-api</name> + <version>1.1.2</version> + <description>@API Guardian</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">8c7de3f82037fa4a2e8be2a2f13092af</hash> + <hash alg="SHA-1">a231e0d844d2721b0fa1b238006d15c6ded6842a</hash> + <hash alg="SHA-256">b509448ac506d607319f182537f0b35d71007582ec741832a1f111e5b5b70b38</hash> + <hash alg="SHA-512">d7ccd0e7019f1a997de39d66dc0ad4efe150428fdd7f4c743c93884f1602a3e90135ad34baea96d5b6d925ad6c0c8487c8e78304f0a089a12383d4a62e2c9a61</hash> + <hash alg="SHA-384">5ae11cfedcee7da43a506a67946ddc8a7a2622284a924ba78f74541e9a22db6868a15f5d84edb91a541e38afded734ea</hash> + <hash alg="SHA3-384">c146116b3dfd969200b2ce52d96b92dd02d6f5a45a86e7e85edf35600ddbc2f3c6e8a1ad7e2db4dcd2c398c09fad0927</hash> + <hash alg="SHA3-256">b4b436d7f615fc0b820204e69f83c517d1c1ccc5f6b99e459209ede4482268de</hash> + <hash alg="SHA3-512">7b95b7ac68a6891b8901b5507acd2c24a0c1e20effa63cd513764f513eab4eb55f8de5178edbe0a400c11f3a18d3f56243569d6d663100f06dd98288504c09c5</hash> + </hashes> + <licenses> + <license> + <id>Apache-2.0</id> + </license> + </licenses> + <purl>pkg:maven/org.apiguardian/apiguardian-api@1.1.2?type=jar</purl> + <externalReferences><reference type="website"><url>https://github.com/apiguardian-team/apiguardian</url></reference><reference type="vcs"><url>https://github.com/apiguardian-team/apiguardian</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.junit.jupiter/junit-jupiter-params@5.11.0?type=jar"> + <group>org.junit.jupiter</group> + <name>junit-jupiter-params</name> + <version>5.11.0</version> + <description>Module "junit-jupiter-params" of JUnit 5.</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">67d4c7e013c0a8d8c86818f468c548a2</hash> + <hash alg="SHA-1">97068da5f462c9a9212516ab58aee632a93c349f</hash> + <hash alg="SHA-256">92ccae2d72e8cc7ac4d3a912fd1a8fecc5e3040a62ac6c667a07a6f55b8023eb</hash> + <hash alg="SHA-512">3e718b1b8c5b6f6468eec3897faa9b1e824027cc321911b4950675ff11423fd1ca7dd50e7b5caa2d029ec94084b621af09ee00fd915f7f74b9b14ef8e72f6050</hash> + <hash alg="SHA-384">e734ba824f3148674a0c59ac68906b03893dad4aed77e45c2e591bb0631fa66e156b0d7570c69df1ed94ccf022a6f86c</hash> + <hash alg="SHA3-384">b3130ed872bcdb5e203bac7fbf71d677a410fee4c6c3f9484c5d5cc2c15e2bf81279ee2a2ac6cb4e0a9da6687ead1a8e</hash> + <hash alg="SHA3-256">cc766df32ecd6f6e700deb95209f3edc1fc6687794d1cdebb364b3b720ea733b</hash> + <hash alg="SHA3-512">b3bf45e2d0d0524ac441f3ed08b2f18b9f3d586b68c7c392fb810e7e0e62ae9e89af847fb6190239cfc4b2498115d290bec6c58c2db5619fbc5bf6c620369ca9</hash> + </hashes> + <licenses> + <license> + <id>EPL-2.0</id> + </license> + </licenses> + <purl>pkg:maven/org.junit.jupiter/junit-jupiter-params@5.11.0?type=jar</purl> + <externalReferences><reference type="website"><url>https://junit.org/junit5/</url></reference><reference type="vcs"><url>https://github.com/junit-team/junit5</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.junit.jupiter/junit-jupiter-engine@5.11.0?type=jar"> + <group>org.junit.jupiter</group> + <name>junit-jupiter-engine</name> + <version>5.11.0</version> + <description>Module "junit-jupiter-engine" of JUnit 5.</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">add9626a4cad3ac2246ea6d88f39f719</hash> + <hash alg="SHA-1">e0ef3a2222e000e0b5ab76fda0d38d011526f54c</hash> + <hash alg="SHA-256">7012423383d0c79d0347c5cf2bd1996c30a12240fb729e0cdfa954852ec693cc</hash> + <hash alg="SHA-512">33393aca0046556a70296737b8896475aef538ddadf6584d65838e6f5fe5f9fe5432b3369569b1295749595901877e0b16799150853f7fc0b6873042506eb8bb</hash> + <hash alg="SHA-384">7075bbe8bcded648bc301b74569aad22c344cb7279fa5061ecc8f91121e77cb1fbb3e7c0e2d69539490d9240b95e9460</hash> + <hash alg="SHA3-384">9ea5ea7d79717088198f50f7ed106fccb69dda8b2936b20efeb916a07a84db8c8a958249aa7ad28e0d44d921c93909bb</hash> + <hash alg="SHA3-256">f16f4f65c01767803bc8fbb66931a98ea64ba88cfd04b6bfb3a3f3f384c9af5c</hash> + <hash alg="SHA3-512">f2ac95ea988cc6765548c3da5700cab0c689df7f603d2e3e3c733e95f138f2d1b558dfde25e393149c6de11933c7c2beebc7cc2215fbfa5bc495993e41c731cb</hash> + </hashes> + <licenses> + <license> + <id>EPL-2.0</id> + </license> + </licenses> + <purl>pkg:maven/org.junit.jupiter/junit-jupiter-engine@5.11.0?type=jar</purl> + <externalReferences><reference type="website"><url>https://junit.org/junit5/</url></reference><reference type="vcs"><url>https://github.com/junit-team/junit5</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.junit.platform/junit-platform-engine@1.11.0?type=jar"> + <group>org.junit.platform</group> + <name>junit-platform-engine</name> + <version>1.11.0</version> + <description>Module "junit-platform-engine" of JUnit 5.</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">652737294f52a90d1b0048cd7b3ca081</hash> + <hash alg="SHA-1">b981f322be92fe343d4a79f28208bb4475806019</hash> + <hash alg="SHA-256">a7e67279c651c516949512b506916475a6d9e284cd4f4c30d029b4ad73a944d8</hash> + <hash alg="SHA-512">fdabaf2df1bfe7caf63cb0878f9bb6141f71803c5a554b3accf5816a6d1644b5fcc36b1d328875eb0a1c9d448ecea5237636faced8b25b77d70b3d046c82e014</hash> + <hash alg="SHA-384">708525856146b3df457b4872f6100496c5f3c7ddfef44e8d22e60724588bcff48e1c3b8dbf251cd42349618facd9fbc0</hash> + <hash alg="SHA3-384">06b649b780c4fad439c88c945e164cb90de51849d747ab1dd7395c5429ad4ececc6bcf104ba6d85ee30f724297f80285</hash> + <hash alg="SHA3-256">f5af53c15032e4ee47b5405d5083d6337a30221d79729b31610476d57c660875</hash> + <hash alg="SHA3-512">e4b552200c0cca0ed16164988f5f1d6f9134d23700a8b3e6ce697fcc22cc1c291300d623da28136f30cb7b4fb79346b5fae48052b5677de4ff4d576d18e4b057</hash> + </hashes> + <licenses> + <license> + <id>EPL-2.0</id> + </license> + </licenses> + <purl>pkg:maven/org.junit.platform/junit-platform-engine@1.11.0?type=jar</purl> + <externalReferences><reference type="website"><url>https://junit.org/junit5/</url></reference><reference type="vcs"><url>https://github.com/junit-team/junit5</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.apache.camel/tooling-parent@4.8.3?type=pom"> + <publisher>The Apache Software Foundation</publisher> + <group>org.apache.camel</group> + <name>tooling-parent</name> + <version>4.8.3</version> + <description>Camel Tooling Parent POM</description> + <licenses> + <license> + <id>Apache-2.0</id> + <url>https://www.apache.org/licenses/LICENSE-2.0</url> + </license> + </licenses> + <purl>pkg:maven/org.apache.camel/tooling-parent@4.8.3?type=pom</purl> + <externalReferences><reference type="website"><url>https://camel.apache.org/camel-parent/tooling/tooling-parent</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/CAMEL</url></reference><reference type="mailing-list"><url>dev-subscr...@camel.apache.org</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=camel.git;a=summary/camel-parent/tooling/tooling-parent</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.apache.camel/maven-plugins@4.8.3?type=pom"> + <publisher>The Apache Software Foundation</publisher> + <group>org.apache.camel</group> + <name>maven-plugins</name> + <version>4.8.3</version> + <description>Camel Maven Plugins</description> + <licenses> + <license> + <id>Apache-2.0</id> + <url>https://www.apache.org/licenses/LICENSE-2.0</url> + </license> + </licenses> + <purl>pkg:maven/org.apache.camel/maven-plugins@4.8.3?type=pom</purl> + <externalReferences><reference type="website"><url>https://camel.apache.org/camel-parent/tooling/tooling-parent/maven-plugins</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/CAMEL</url></reference><reference type="mailing-list"><url>dev-subscr...@camel.apache.org</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=camel.git;a=summary/camel-parent/tooling/tooling-parent/maven-plugins</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.apache.camel/bom-generator-maven-plugin@4.8.3?type=maven-plugin"> + <publisher>The Apache Software Foundation</publisher> + <group>org.apache.camel</group> + <name>bom-generator-maven-plugin</name> + <version>4.8.3</version> + <description>Maven plugin to help generating BOM projects</description> + <licenses> + <license> + <id>Apache-2.0</id> + <url>https://www.apache.org/licenses/LICENSE-2.0</url> + </license> + </licenses> + <purl>pkg:maven/org.apache.camel/bom-generator-maven-plugin@4.8.3?type=maven-plugin</purl> + <externalReferences><reference type="website"><url>https://camel.apache.org/camel-parent/tooling/tooling-parent/maven-plugins/bom-generator-maven-plugin</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/CAMEL</url></reference><reference type="mailing-list"><url>dev-subscr...@camel.apache.org</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=camel.git;a=summary/camel-parent/tooling/tooling-parent/maven-plugins/bom-generator-maven-plugin</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.9.22?type=jar"> + <publisher>The Apache Software Foundation</publisher> + <group>org.apache.maven.resolver</group> + <name>maven-resolver-api</name> + <version>1.9.22</version> + <description>The application programming interface for the repository system.</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">c59d27b3750461be99f8d38e1f503f56</hash> + <hash alg="SHA-1">756660687ea077b85be02b019d593ef2758e7db6</hash> + <hash alg="SHA-256">63f5f665e44a09ef55463b3b91fda0b78ff07dd24b1060d56e79c10b6e32cbfb</hash> + <hash alg="SHA-512">a803e35af37b807b08019f9a9e3184d86774cd99c9c2d89aeb4033bb2f1d8d8b79b523de8e05fdbe020f623bea783611f472db8c7331949f9bbfe4da1ed46415</hash> + <hash alg="SHA-384">51b6c0b437ecc37d697ea248ab225891391fc46491713044ffd9230a9484434227bc8e833213abc340bbcdd02172ec9b</hash> + <hash alg="SHA3-384">e7b25bee133e6533aa65b3adc31af2e88081a88745028089e57f56dd7b58af4299de99416373322a8332e9d3ce3229da</hash> + <hash alg="SHA3-256">9a3a6ba00fcba33588b0767f3c5d92e30906ecb55797891c4de3eae9ec30e6a3</hash> + <hash alg="SHA3-512">7dca13e6576e2bd58da3b20f061fa40bf4d07ddc62f1985faec2b5f840f0089c0ff6c4b3a34adeaec4beac9e7780a793091249dfa0facc715556704333606e68</hash> + </hashes> + <licenses> + <license> + <id>Apache-2.0</id> + <url>https://www.apache.org/licenses/LICENSE-2.0</url> + </license> + </licenses> + <purl>pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.9.22?type=jar</purl> + <externalReferences><reference type="website"><url>https://maven.apache.org/resolver/maven-resolver-api/</url></reference><reference type="build-system"><url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-resolver/</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/MRESOLVER</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?us...@maven.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/maven-resolver/tree/maven-resolver-1.9.22/maven-resolver-api</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.apache.maven.resolver/maven-resolver-util@1.9.22?type=jar"> + <publisher>The Apache Software Foundation</publisher> + <group>org.apache.maven.resolver</group> + <name>maven-resolver-util</name> + <version>1.9.22</version> + <description>A collection of utility classes to ease usage of the repository system.</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">4e84c0379667d2436a99fced60a74b5d</hash> + <hash alg="SHA-1">d5febed69ca2fe0dacffec95b6cb0760b0270fd1</hash> + <hash alg="SHA-256">4aaea1584c39294ca926fc474723d9684473609ef4490c4eb169d6ea7daca6b5</hash> + <hash alg="SHA-512">25c26f2b1929277fdfc8d3fd868dea7b60c8d067f91daafd65918fcc77db2e4c5afcc210dfff76077fa0c1060c6febba4f3a79075ac196ed00791dd197b41d95</hash> + <hash alg="SHA-384">2c8441716a3acc3c24694e7f436eb0255802e4dc4c15d27814807be63b676096e1381e4bc7ac6397f4f5dbee5c255e01</hash> + <hash alg="SHA3-384">39e3cb46426ee1ae7c0e1b3098e14aa87fe36a37938fbd6cfafe4333ef047a41559e6d9ecc4a59d3201999834c881581</hash> + <hash alg="SHA3-256">d8539e2f082bfee39edb15271b72215a3b948ba0872cfa7e6403c7e495968421</hash> + <hash alg="SHA3-512">c4407f0e8713d0595cbcbca86c8c7d2c594c02b4bfa2cc67aac97cae84f63f8b71a95948b86261ff9eb71bee0c0bcd94861f836c28a28d199be2d42ade378cfd</hash> + </hashes> + <licenses> + <license> + <id>Apache-2.0</id> + <url>https://www.apache.org/licenses/LICENSE-2.0</url> + </license> + </licenses> + <purl>pkg:maven/org.apache.maven.resolver/maven-resolver-util@1.9.22?type=jar</purl> + <externalReferences><reference type="website"><url>https://maven.apache.org/resolver/maven-resolver-util/</url></reference><reference type="build-system"><url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-resolver/</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/MRESOLVER</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?us...@maven.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/maven-resolver/tree/maven-resolver-1.9.22/maven-resolver-util</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-core@3.9.9?type=jar"> + <publisher>The Apache Software Foundation</publisher> + <group>org.apache.maven</group> + <name>maven-core</name> + <version>3.9.9</version> + <description>Maven Core classes.</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">eed2eb37f03ccdea7ef9dab069c0b5d8</hash> + <hash alg="SHA-1">b58645e3f14348024b05735c171425e19d30c02e</hash> + <hash alg="SHA-256">7fab37fc6044f20ae004376ab8414373636cf51e26ad0b1efa6b3f1cd2bec503</hash> + <hash alg="SHA-512">95a717d05c4fb51c4e4d196d6e4e183447f9eb56db13b0b1a8181e3c8b0dbd9abd2ed612ce93bb87799aee4d3b309ba1a7e6924964cb9e45daff2f70a25a0abe</hash> + <hash alg="SHA-384">a953e88f9dce06d35b3e2d33ad873d2024730b846e5f94d80fdd687efa0dd07fc42e3d53a70c075abc3497bc4f1383d9</hash> + <hash alg="SHA3-384">efdd79ce31e93b75a2df359fec4a0d209eb36d74ff8e89d06c9d95c5125d7bc5b1d7bc67a7b03144ccac46abd3b847dc</hash> + <hash alg="SHA3-256">f924a04aa56c923c9e5c904365738e5c46841ad9b5e010ce7adc34b69349c436</hash> + <hash alg="SHA3-512">e59ec3884fbfa2528a184db8b008bc46d41a373d94e5b728a6c1d9216f44ca838b96ab95e3c40ef937920e4a068b5824c0f3902d13955d7bc7050a2e3906548e</hash> + </hashes> + <licenses> + <license> + <id>Apache-2.0</id> + <url>https://www.apache.org/licenses/LICENSE-2.0</url> + </license> + </licenses> + <purl>pkg:maven/org.apache.maven/maven-core@3.9.9?type=jar</purl> + <externalReferences><reference type="website"><url>https://maven.apache.org/ref/3.9.9/maven-core/</url></reference><reference type="build-system"><url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/</url></reference><reference type="distribution"><url>https://maven.apache.org/download.html</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/MNG</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?us...@maven.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/maven/tree/maven-3.9.9/maven-core</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-model@3.9.9?type=jar"> + <publisher>The Apache Software Foundation</publisher> + <group>org.apache.maven</group> + <name>maven-model</name> + <version>3.9.9</version> + <description>Model for Maven POM (Project Object Model)</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">813d4aceaaa8e16f8a83c95a96afa22c</hash> + <hash alg="SHA-1">585bff8f220ddc1c08c5263b7dee26c49fc7df94</hash> + <hash alg="SHA-256">8f59b0a16fe9c933be749a60ae0705a0cb337bb5abaf38801b40b740ff775727</hash> + <hash alg="SHA-512">a775b5ec120e1de0bc891cf3dc148193a5e357aed06d0c9a289ea21a55c7fa7053b04fdde3a7e0d29a19f6e01023f74e511e39e0cd6568d3a6f8d27734058ee1</hash> + <hash alg="SHA-384">410645fc18300eff25914a1519ee3bda627cff86df984b14ff5e0346031fcd339aaaa4994ea980c0665d206b0dacd4c6</hash> + <hash alg="SHA3-384">5dda2fbf976bb1cb95b42e86a94622f73ecb4ad2cf0db0959b401ae169a7c2a0a54366a8a8f9b492f0d6c069260db834</hash> + <hash alg="SHA3-256">3ab286c7fee20c98f7282627c64a53cbd2ddb2717a88e9e157d6207dc7dabff4</hash> + <hash alg="SHA3-512">073490b65457dd3ac3d8437874478d7e150fb72a48703340e4e2b608f6ed7badd7c33f388f9c43acc5c4d260ae2672c78404864724d920fa0501a017fd58fa6c</hash> + </hashes> + <licenses> + <license> + <id>Apache-2.0</id> + <url>https://www.apache.org/licenses/LICENSE-2.0</url> + </license> + </licenses> + <purl>pkg:maven/org.apache.maven/maven-model@3.9.9?type=jar</purl> + <externalReferences><reference type="website"><url>https://maven.apache.org/ref/3.9.9/maven-model/</url></reference><reference type="build-system"><url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/</url></reference><reference type="distribution"><url>https://maven.apache.org/download.html</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/MNG</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?us...@maven.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/maven/tree/maven-3.9.9/maven-model</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-settings@3.9.9?type=jar"> + <publisher>The Apache Software Foundation</publisher> + <group>org.apache.maven</group> + <name>maven-settings</name> + <version>3.9.9</version> + <description>Maven Settings model.</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">a5eede8fe9b01b7bb3c6dad06a738365</hash> + <hash alg="SHA-1">a82024d87a107965ae274d944c844c9186ff410d</hash> + <hash alg="SHA-256">68edf1b510e0d759ec501271a5d05e3a6e425462fbb84126c16e8a6f89abdada</hash> + <hash alg="SHA-512">0f7466c4791b083e38e5a6f4631b03317f57bdeee6bf1d152a4b75830bf652c80e1f9707b3f64fcfd5f790886eb55279a4c33fbebbb42b5c97066cb3010b1137</hash> + <hash alg="SHA-384">b3d6d9512709e1c5f02b86775501c64c0bd81e76a97e399d2928646584f0f4feff5ea922e45c16865f4749bd4301eea7</hash> + <hash alg="SHA3-384">e81ec5efa79028a6eb8c58501023882c1f15142659ce3893b4a862b7b7b867397d7c67eb519f972c856979fb728c93a1</hash> + <hash alg="SHA3-256">5cad01acc7d3ad12c6da20ef43aa7b8be20bf6b69a59fc532b734ed2d331d00b</hash> + <hash alg="SHA3-512">dd6502ca14b0ca1283746748a4dccbe57e150f1d031965dc543baadf520321e1c396a6d94f1f99d7ab23af04edc6be200aa56655066eb0d23d1a7b8367397be1</hash> + </hashes> + <licenses> + <license> + <id>Apache-2.0</id> + <url>https://www.apache.org/licenses/LICENSE-2.0</url> + </license> + </licenses> + <purl>pkg:maven/org.apache.maven/maven-settings@3.9.9?type=jar</purl> + <externalReferences><reference type="website"><url>https://maven.apache.org/ref/3.9.9/maven-settings/</url></reference><reference type="build-system"><url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/</url></reference><reference type="distribution"><url>https://maven.apache.org/download.html</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/MNG</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?us...@maven.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/maven/tree/maven-3.9.9/maven-settings</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-settings-builder@3.9.9?type=jar"> + <publisher>The Apache Software Foundation</publisher> + <group>org.apache.maven</group> + <name>maven-settings-builder</name> + <version>3.9.9</version> + <description>The effective settings builder, with inheritance and password decryption.</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">4fb4ae61642d42cba66821d8698a670a</hash> + <hash alg="SHA-1">71a9bee9618839ffaf7c0de3b53ac1c408b57ae0</hash> + <hash alg="SHA-256">094640f3fdce47250cb06968a143f40c4e2f1c22be979c73caac2f49f3c38373</hash> + <hash alg="SHA-512">aa2b61dd81291b30e627e1894d8336d68b2f4cb99cedf087cc7081d6f3b6685a33c943e3fb04a851fd7635c916f2d0fb8dd705067ea67d13fc43d08025cec19a</hash> + <hash alg="SHA-384">3dbfab791cb5a9d27a89c6277f4a9a9e376a8064db0fb208514bbd1ee6a47ac1b2e573402814c313977d2377401cb9b4</hash> + <hash alg="SHA3-384">3cbd4352a5d05fc16e305e6cb5ac98b675a51cdab7ac3c8c59dd9d0272c9f82813e06be233604879f198530a7362433b</hash> + <hash alg="SHA3-256">abdce4df1cef68ac91b1b307127d3c3c2ce902f1ace17de96c5ff2a6aa54d368</hash> + <hash alg="SHA3-512">9b798693e04c6bc23a48c7880e29df42bbb6fa00e144d95c2aea07f2689ccd1618b9fd986a0c05830a120310e5e43d67d1944b19d49dd10113f70c22856ddcf2</hash> + </hashes> + <licenses> + <license> + <id>Apache-2.0</id> + <url>https://www.apache.org/licenses/LICENSE-2.0</url> + </license> + </licenses> + <purl>pkg:maven/org.apache.maven/maven-settings-builder@3.9.9?type=jar</purl> + <externalReferences><reference type="website"><url>https://maven.apache.org/ref/3.9.9/maven-settings-builder/</url></reference><reference type="build-system"><url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/</url></reference><reference type="distribution"><url>https://maven.apache.org/download.html</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/MNG</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?us...@maven.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/maven/tree/maven-3.9.9/maven-settings-builder</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.codehaus.plexus/plexus-sec-dispatcher@2.0?type=jar"> + <publisher>Codehaus Plexus</publisher> + <group>org.codehaus.plexus</group> + <name>plexus-sec-dispatcher</name> + <version>2.0</version> + <description>The Plexus project provides a full software stack for creating and executing software projects.</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">e68635a721630177ac70173e441336b6</hash> + <hash alg="SHA-1">f89c5080614ffd0764e49861895dbedde1b47237</hash> + <hash alg="SHA-256">873139960c4c780176dda580b003a2c4bf82188bdce5bb99234e224ef7acfceb</hash> + <hash alg="SHA-512">ad4e814c8baff780a4eee064903e52b09ae00420a59fb075ef72dbb8d64d12d3d5009b03d56c15f93587d931c3a7f06cad6351ab2dc9415ccc6eeab0daebeb07</hash> + <hash alg="SHA-384">4af3426b6409cce7d5fcda4e2af407fc2dbae9873e06d98332bcd032c0039d9080a291e42223ea2bbef9825d3d63493f</hash> + <hash alg="SHA3-384">41720858dd5804f9cb26a8878c16dbdf0372a90e99c037809fe76c3de2c5517ba252af8f8cdf534c1a09900702e6a917</hash> + <hash alg="SHA3-256">50fa723aefb551a3fd5888375d01f1d776c534cdf833baea392818e9bfa8166e</hash> + <hash alg="SHA3-512">a43f823d31b377c0c7ec8d36ace69e5dbcdaf4dc4ebb45ff0561fea9e12d74c06090ee24b29b06769d4031693faf5d7e3146583d3a64bfaef6b7c79773a8831f</hash> + </hashes> + <licenses> + <license> + <id>Apache-2.0</id> + </license> + </licenses> + <purl>pkg:maven/org.codehaus.plexus/plexus-sec-dispatcher@2.0?type=jar</purl> + <externalReferences><reference type="website"><url>https://codehaus-plexus.github.io/plexus-sec-dispatcher/</url></reference><reference type="distribution-intake"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/codehaus-plexus/plexus-sec-dispatcher/issues</url></reference><reference type="mailing-list"><url>http://archive.plexus.codehaus.org/user</url></reference><reference type="vcs"><url>https://github.com/codehaus-plexus/plexus-sec-dispatcher.git</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.codehaus.plexus/plexus-cipher@2.0?type=jar"> + <publisher>Codehaus Plexus</publisher> + <group>org.codehaus.plexus</group> + <name>plexus-cipher</name> + <version>2.0</version> + <description>The Plexus project provides a full software stack for creating and executing software projects.</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">55d612839faf248cbe3e273969c002c2</hash> + <hash alg="SHA-1">425ea8e534716b4bff1ea90f39bd76be951d651b</hash> + <hash alg="SHA-256">9a7f1b5c5a9effd61eadfd8731452a2f76a8e79111fac391ef75ea801bea203a</hash> + <hash alg="SHA-512">8f187b07867a7c29d77454aae4b76479300238d9c4e777c1afa2aebe33b88dab916e29111dd55acac1341849f4579fe91a5470fdd45ccba0e05709c2ce3a1d65</hash> + <hash alg="SHA-384">6973eefe06a8992aa8db1775c0f43a84cbef54eeea9122a5a30c362af3e4fb13b6cbd6fba229142e2a4495f97d71f409</hash> + <hash alg="SHA3-384">ea780d218f96e61005c5582bf3785ddbb33b53ccb4efbffd76ab58166cf261d3c256d52fea28759380684b7e9b0db8eb</hash> + <hash alg="SHA3-256">e2e51d5350ffdce341464ddcdf9ae60108bff40bf5174dc6be43e33ffcd84af9</hash> + <hash alg="SHA3-512">f3e17ea31bdefc8094ba3495b8231ec7f90c7175839b009d9fd230110b66ac4c68c912fda1a6e644d93dbce639d738e2535f1ade5841e072a604f5f8ac536729</hash> + </hashes> + <licenses> + <license> + <id>Apache-2.0</id> + </license> + </licenses> + <purl>pkg:maven/org.codehaus.plexus/plexus-cipher@2.0?type=jar</purl> + <externalReferences><reference type="website"><url>https://codehaus-plexus.github.io/plexus-cipher/</url></reference><reference type="distribution-intake"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/codehaus-plexus/plexus-cipher/issues</url></reference><reference type="mailing-list"><url>http://archive.plexus.codehaus.org/user</url></reference><reference type="vcs"><url>http://github.com/codehaus-plexus/plexus-cipher</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-builder-support@3.9.9?type=jar"> + <publisher>The Apache Software Foundation</publisher> + <group>org.apache.maven</group> + <name>maven-builder-support</name> + <version>3.9.9</version> + <description>Support for descriptor builders (model, setting, toolchains)</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">0266bb9314b63d9fde8aff0d190f48d6</hash> + <hash alg="SHA-1">812c13c808e42c54d3f4abdaab603e5262bf8ab8</hash> + <hash alg="SHA-256">2ca4a967bdd12a9e85d40e012374f86e63d4a1030c199da4832e3d0a1c6770d8</hash> + <hash alg="SHA-512">ea4c95e9b4ee9078b464ca9002857a149d2fd0bbc5fa79e3984ce981c37de0b18b3be03574b909ba4fc330a70387fef2ccbdac4dba029c11dd5cd53375f9be7a</hash> + <hash alg="SHA-384">56f102530fdf58549e9470949bd46d6bcd99eb619da435ea6c0579776e77b06b5b1e8faf76b9c6c0b4d1862bbc9747a2</hash> + <hash alg="SHA3-384">096b894a7e0aac0801816be8cd439b0825710a2c5dd3a9a64f3c6cadd8d96b2ceb1d635c0c3a52fd4b2393eb774fadf1</hash> + <hash alg="SHA3-256">a411474232b09f28bb48a74543df102c9aa4f324bc31c4e041c475024e835093</hash> + <hash alg="SHA3-512">e0764cdfafc85f8504fc1e457ff564f70a124de065c89b120f449d01812a9b4e6b26cfa171ed1f81563cd54db0b16ad049903c52e6ca82f1e632df3c4e8025a7</hash> + </hashes> + <licenses> + <license> + <id>Apache-2.0</id> + <url>https://www.apache.org/licenses/LICENSE-2.0</url> + </license> + </licenses> + <purl>pkg:maven/org.apache.maven/maven-builder-support@3.9.9?type=jar</purl> + <externalReferences><reference type="website"><url>https://maven.apache.org/ref/3.9.9/maven-builder-support/</url></reference><reference type="build-system"><url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/</url></reference><reference type="distribution"><url>https://maven.apache.org/download.html</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/MNG</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?us...@maven.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/maven/tree/maven-3.9.9/maven-builder-support</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-repository-metadata@3.9.9?type=jar"> + <publisher>The Apache Software Foundation</publisher> + <group>org.apache.maven</group> + <name>maven-repository-metadata</name> + <version>3.9.9</version> + <description>Per-directory local and remote repository metadata.</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">d341cdcc9abac2d01546301a305f12b3</hash> + <hash alg="SHA-1">33a43f0af3371225d1dcaaa20a824df59c692172</hash> + <hash alg="SHA-256">137c297e6a52d489b76663c82324d54e40f5d498a8fc015c0203fd91df8623b0</hash> + <hash alg="SHA-512">07d1cd2e99588c43835815f5acdf2cb163288041c803cbb8597c81d5a583a5abc553628fdaaa5a22b4bf7a579aa88155e3e5e27c63c31ba4cab74126f7b35824</hash> + <hash alg="SHA-384">f088d97c86378ecb5312f79183aa2e469ff1efe28d0244fa7d86cc37f6bf6fa7b277cba016541967d289fbc474bb2305</hash> + <hash alg="SHA3-384">332e75f31f8adfad22990c0a612ec12aab085923f3d425453c25275e177daa2feeade1ff22743a4e5f67d33130ae866a</hash> + <hash alg="SHA3-256">40356485644aed030cc175fd8d00443a63a3f1384180edcb1be98ccad67081db</hash> + <hash alg="SHA3-512">1d8320d0c4421696705f3a4737ed7c4cb5de37a3b0873abbe19e2a57092b1f0c405b2987c8e3c3931105c1a518f92d304c92b394018842f1cde98fd259488482</hash> + </hashes> + <licenses> + <license> + <id>Apache-2.0</id> + <url>https://www.apache.org/licenses/LICENSE-2.0</url> + </license> + </licenses> + <purl>pkg:maven/org.apache.maven/maven-repository-metadata@3.9.9?type=jar</purl> + <externalReferences><reference type="website"><url>https://maven.apache.org/ref/3.9.9/maven-repository-metadata/</url></reference><reference type="build-system"><url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/</url></reference><reference type="distribution"><url>https://maven.apache.org/download.html</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/MNG</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?us...@maven.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/maven/tree/maven-3.9.9/maven-repository-metadata</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-model-builder@3.9.9?type=jar"> + <publisher>The Apache Software Foundation</publisher> + <group>org.apache.maven</group> + <name>maven-model-builder</name> + <version>3.9.9</version> + <description>The effective model builder, with inheritance, profile activation, interpolation, ...</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">a48ea3e9ceec85a9bff88e88048148d9</hash> + <hash alg="SHA-1">6dcd87768eb615301aef0c2221dd168a2d36bc7b</hash> + <hash alg="SHA-256">a4377182ac2e5adfe16be3b3c81981a5ecddab014184de72ae1e522f04a77602</hash> + <hash alg="SHA-512">558ca7b03233b8d38aca3f2f142e0b4a64d576c92e6b5a8921061eb8c83614d8074845e8656fb77b983711e64db9d145f385a0d1a3ae5bf26805b93a6c4ce041</hash> + <hash alg="SHA-384">5ba902dee188aafc6cecb1f9eab759116d00158e0812811f6775654a3f5a73b0b6b429c20e9c727ac157643627b72c27</hash> + <hash alg="SHA3-384">364b44bbff164b35ab770c329592560b1f12037bf466137b137db7434877570ad815a9d2027fcf2ebd35275f29ef7cd0</hash> + <hash alg="SHA3-256">fd2bd5e3ff91d9c5f405d0c584e4a71f91a1ac5c82e8cfb729f78f13ed73c8d2</hash> + <hash alg="SHA3-512">cd2692abcdbf1c0c9adf3ac0210b4f923b6f3497618bf1337d60133e377569b45399f6b3994d73558e9f8ef890192a7bbbb0f674d36ebd482ca5396abfc85ffb</hash> + </hashes> + <licenses> + <license> + <id>Apache-2.0</id> + <url>https://www.apache.org/licenses/LICENSE-2.0</url> + </license> + </licenses> + <purl>pkg:maven/org.apache.maven/maven-model-builder@3.9.9?type=jar</purl> + <externalReferences><reference type="website"><url>https://maven.apache.org/ref/3.9.9/maven-model-builder/</url></reference><reference type="build-system"><url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/</url></reference><reference type="distribution"><url>https://maven.apache.org/download.html</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/MNG</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?us...@maven.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/maven/tree/maven-3.9.9/maven-model-builder</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-resolver-provider@3.9.9?type=jar"> + <publisher>The Apache Software Foundation</publisher> + <group>org.apache.maven</group> + <name>maven-resolver-provider</name> + <version>3.9.9</version> + <description>Extensions to Maven Resolver for utilizing Maven POM and repository metadata.</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">ea2fccfc4c499dbaa570a26da14050d9</hash> + <hash alg="SHA-1">ea361822cd25ae6c9153c594aef805e853031224</hash> + <hash alg="SHA-256">5dea05049c94f952f48ce2bfe0111afdf986acc591fcc11d23fe3b8dcb70291e</hash> + <hash alg="SHA-512">6dcb398c60080cbeaac396df5e565a44e29c9ecffb440d17ca819c2e3e7a86b933e7346eb11c409cad02e2bc97c9ae5f10bc5c4e7d6f5fe81652a7e1d99f9c0f</hash> + <hash alg="SHA-384">170d7d6271574947baff824cfd36e00fa20ea1cefc361c27af52a96f45ac7b7fe23edfd0adfd483f121f2cc63491ad39</hash> + <hash alg="SHA3-384">4223458ae362fc39853aa5538bd99ec00be1af4e41859b00f3937e9922f8353db51248dd06f88865f67b2296b1920724</hash> + <hash alg="SHA3-256">96ad201686d5c420903bab2ac170dfae7b66cc6faadd4dff84dbe981573bbeec</hash> + <hash alg="SHA3-512">c2c4610bcc74f5d11b145b58d6f11f74a2f74b8fe95f725f11177a8b930563bbd7ffc49b0b712c2534c0702f3329b75966b1dafe6d4777ec641fe1c45e19f117</hash> + </hashes> + <licenses> + <license> + <id>Apache-2.0</id> + <url>https://www.apache.org/licenses/LICENSE-2.0</url> + </license> + </licenses> + <purl>pkg:maven/org.apache.maven/maven-resolver-provider@3.9.9?type=jar</purl> + <externalReferences><reference type="website"><url>https://maven.apache.org/ref/3.9.9/maven-resolver-provider/</url></reference><reference type="build-system"><url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/</url></reference><reference type="distribution"><url>https://maven.apache.org/download.html</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/MNG</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?us...@maven.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/maven/tree/maven-3.9.9/maven-resolver-provider</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.apache.maven.resolver/maven-resolver-impl@1.9.22?type=jar"> + <publisher>The Apache Software Foundation</publisher> + <group>org.apache.maven.resolver</group> + <name>maven-resolver-impl</name> + <version>1.9.22</version> + <description>An implementation of the repository system.</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">965f1348220f046c6cbde059c971685d</hash> + <hash alg="SHA-1">19b7a728c9000f8db615f64552d95fe74b413617</hash> + <hash alg="SHA-256">e4dafb8acc13d736377c02d2170d869438dd74b98b860745909d238726babcbb</hash> + <hash alg="SHA-512">82c9ff9c9505e6350983a5a90ef16c64e67f2cb21779e56f5ad02979591f8f2cd12ced6bba066fd0bdfaf6be07d39edf9cecada35d16002a8005711602001d90</hash> + <hash alg="SHA-384">adaca9b851a5f354f5ea1cda398b1d5b910d4c0fac21a33bfa0a44d40ed19cf63afe99f81fc7718293496421ef64777c</hash> + <hash alg="SHA3-384">69dab881fcf9f2b45881899f14ca2c0d885f9de6621d0109887654b6b3f92978b21733348dba75eddd588bd8144da83e</hash> + <hash alg="SHA3-256">b35dea4f939c188e848878b6a3331e6312964ff0258833375c6b975d70cd71a8</hash> + <hash alg="SHA3-512">dc7a39b8a50f5633194a3f070208e2eda099b88226a4d8728c9c4f4bc876e4eba1a7bb018870e1cf414cf31e5bcb214c2b64393c79d8f498b1c380630698f70d</hash> + </hashes> + <licenses> + <license> + <id>Apache-2.0</id> + <url>https://www.apache.org/licenses/LICENSE-2.0</url> + </license> + </licenses> + <purl>pkg:maven/org.apache.maven.resolver/maven-resolver-impl@1.9.22?type=jar</purl> + <externalReferences><reference type="website"><url>https://maven.apache.org/resolver/maven-resolver-impl/</url></reference><reference type="build-system"><url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-resolver/</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/MRESOLVER</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?us...@maven.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/maven-resolver/tree/maven-resolver-1.9.22/maven-resolver-impl</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.apache.maven.resolver/maven-resolver-named-locks@1.9.22?type=jar"> + <publisher>The Apache Software Foundation</publisher> + <group>org.apache.maven.resolver</group> + <name>maven-resolver-named-locks</name> + <version>1.9.22</version> + <description>A synchronization utility implementation using Named locks.</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">3d3855f4775bc27f9962f999ea88919b</hash> + <hash alg="SHA-1">121433b079aad9be7ed266b19f2122eeb0e2d111</hash> + <hash alg="SHA-256">0685f29ec3b548d9b6917c527f13c667685a3394b955aaa5b25d0559818b7fc5</hash> + <hash alg="SHA-512">f77654e42e551bfa6ef1e737501123dd1a4faca6cee7eceddad358c7c66e27ece0dbaae7abcf1b8422344e92b5bd5beeb43b8ca3637bc7b0c06cc87ee1d54792</hash> + <hash alg="SHA-384">4130344d40d9054360be193e9b7712b708b9b1cd95fac22e13f980366b1e341e8fe0a6a7bd555836e7ff1bd980844722</hash> + <hash alg="SHA3-384">5446d9a0d6ec6846b33ed718cedeb1eae9df55a08a1005c88e3a5734f1097ce8ef4c6208a70c21ae9d15a7a2a3139e94</hash> + <hash alg="SHA3-256">75af3978ed7eff2d40330beb06c38d8a2df8c31c592f2d0417aecc9e32a491bf</hash> + <hash alg="SHA3-512">0dff59894683f076e09adb05dca30db2ab9ea8fef3b8280437b10be65e649175f7a5e684177891fe6661af6e86a464521e24f7559090dd7d8f7625452ec8cac2</hash> + </hashes> + <licenses> + <license> + <id>Apache-2.0</id> + <url>https://www.apache.org/licenses/LICENSE-2.0</url> + </license> + </licenses> + <purl>pkg:maven/org.apache.maven.resolver/maven-resolver-named-locks@1.9.22?type=jar</purl> + <externalReferences><reference type="website"><url>https://maven.apache.org/resolver/maven-resolver-named-locks/</url></reference><reference type="build-system"><url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-resolver/</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/MRESOLVER</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?us...@maven.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/maven-resolver/tree/maven-resolver-1.9.22/maven-resolver-named-locks</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.apache.maven.resolver/maven-resolver-spi@1.9.22?type=jar"> + <publisher>The Apache Software Foundation</publisher> + <group>org.apache.maven.resolver</group> + <name>maven-resolver-spi</name> + <version>1.9.22</version> + <description>The service provider interface for repository system implementations and repository connectors.</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">7ae784f1d4088fff396386ed6966cafc</hash> + <hash alg="SHA-1">c3101acaa4ec053557028cf1917f1d22112b100d</hash> + <hash alg="SHA-256">99ad721e4631d9bd0c4f9e29c869672577c66f2a674a5723ce38eff13c75cbfd</hash> + <hash alg="SHA-512">3a1e31d872659834cb59a82bd0118fb26ef983e5004849a9a38f80bea344f2d919aa73f142fc605601b8236c431a891a6e98fd8760e7b11aa6a3d7d4862ee009</hash> + <hash alg="SHA-384">8ae4ccfcd203dee8263c6db10061f6afefc5a95903f43ad99f237c92300348ac1dbfdbf22042aefd5bdce86c58e4637f</hash> + <hash alg="SHA3-384">efcfbeb1c69bbfc880d624d24b9376ce07c703df64505776d91b8574ba2292526dbe4ae592bbafde971d2c7feca2617c</hash> + <hash alg="SHA3-256">5e12347c1f0125eea11c00859b4d02c6b7c4f1ea2af305a68b5c2579983d6af0</hash> + <hash alg="SHA3-512">8953a2b8bfc66d3ea6f5ec52c87838759b79624485e08c4ecfafbf05521ccc73e9cf724e3dee643975d10b6b5b0d37caf6cd316823074f5cfd49bd05899cec96</hash> + </hashes> + <licenses> + <license> + <id>Apache-2.0</id> + <url>https://www.apache.org/licenses/LICENSE-2.0</url> + </license> + </licenses> + <purl>pkg:maven/org.apache.maven.resolver/maven-resolver-spi@1.9.22?type=jar</purl> + <externalReferences><reference type="website"><url>https://maven.apache.org/resolver/maven-resolver-spi/</url></reference><reference type="build-system"><url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-resolver/</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/MRESOLVER</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?us...@maven.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/maven-resolver/tree/maven-resolver-1.9.22/maven-resolver-spi</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.apache.maven.shared/maven-shared-utils@3.4.2?type=jar"> + <publisher>The Apache Software Foundation</publisher> + <group>org.apache.maven.shared</group> + <name>maven-shared-utils</name> + <version>3.4.2</version> + <description>Shared utilities for use by Maven core and plugins</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">53a038f77a81cb5816ad2b1c7daa8711</hash> + <hash alg="SHA-1">bfa28296272a5915b08de9f11f34a94b0a818fd0</hash> + <hash alg="SHA-256">b613357e1bad4dfc1dead801691c9460f9585fe7c6b466bc25186212d7d18487</hash> + <hash alg="SHA-512">71db8a485a6436cb305276ea9d748f578e1a8ffa1346c8570f7038684ce53d320584174634aeffa1b51629af0171a2d6572854eb07236a83236ad1d9949988e9</hash> + <hash alg="SHA-384">8f7e2c449282244fea3151ac0c956b42bb7ae6cb2397ca8b18952aea802d33cccad6e08a5f515fc34e52bacfece18862</hash> + <hash alg="SHA3-384">72ec6c2c5de8cd074bd59dbb8215005bedc9de58795484ec2792fa867eaf13547aaca81daaf06f1ec117d29b21e70cd0</hash> + <hash alg="SHA3-256">5cf6de29555bde0317d641e8a7afd7d1ed84dddff92c80f8493b4a2873d26c41</hash> + <hash alg="SHA3-512">836acb2525ddc3b352da7db824e00c0831b25f46cb32a77c1e578b39978621e3c47da3554a901749af15b3981620875a4c4492f421a1833d8eb8e50c4804eff8</hash> + </hashes> + <licenses> + <license> + <id>Apache-2.0</id> + <url>https://www.apache.org/licenses/LICENSE-2.0</url> + </license> + </licenses> + <purl>pkg:maven/org.apache.maven.shared/maven-shared-utils@3.4.2?type=jar</purl> + <externalReferences><reference type="website"><url>https://maven.apache.org/shared/maven-shared-utils/</url></reference><reference type="build-system"><url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-shared-utils/</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/issues/?jql=project%20%3D%20MSHARED%20AND%20component%20%3D%20maven-shared-utils</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?us...@maven.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/maven-shared-utils/tree/maven-shared-utils-3.4.2</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.9.0.M3?type=jar"> + <publisher>The Eclipse Foundation</publisher> + <group>org.eclipse.sisu</group> + <name>org.eclipse.sisu.plexus</name> + <version>0.9.0.M3</version> + <description>Plexus-JSR330 adapter; adds Plexus support to the Sisu-Inject container</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">964e7bc9837b270566f18b87af65f5d7</hash> + <hash alg="SHA-1">b493c7abcc6e04fa0a6a20d489a3db0395c76f70</hash> + <hash alg="SHA-256">c99674d3773e26154885661711f0b6d63aa5008f5cc99227a236756d4ad9de5e</hash> + <hash alg="SHA-512">68c5df01ad522917d954b62cb3b11376b3446920e8d5cb35737de508e6acd91a36b34144933f427bbe1d29dca9097ba9dd2431c713fe18069f271a80b519f051</hash> + <hash alg="SHA-384">bd39a6cc9c18c62e64393da231b61efbf5bdeb8c0306e455bbc6e33f4b614e14023ccfbec83c943994da6684ab453092</hash> + <hash alg="SHA3-384">aa3ca83152de61ee92ba94f655190b61aa25520db903489656485a56aa9314a453a91284c0fb377dffb8160580a610c2</hash> + <hash alg="SHA3-256">434081d9dbbd4ffedafa88010d4db9a699fd2bc736e8b12b3bf3cede21f30aa9</hash> + <hash alg="SHA3-512">86e4c864bdfcbcb7d58ac08d80b2c1406cadf10424c92889d1cb181f924af19b28d53210f77cb2b0515faa7ac6fff2dacd25ae1b62c419a798bdfd2a9f3108ae</hash> + </hashes> + <licenses> + <license> + <id>EPL-2.0</id> + </license> + </licenses> + <purl>pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.9.0.M3?type=jar</purl> + <externalReferences><reference type="website"><url>http://www.eclipse.org/sisu/org.eclipse.sisu.plexus/</url></reference><reference type="build-system"><url>https://ci.eclipse.org/sisu/job/sisu.inject/</url></reference><reference type="distribution-intake"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/eclipse/sisu.inject/issues</url></reference><reference type="mailing-list"><url>http://dev.eclipse.org/mhonarc/lists/sisu-dev/</url></reference><reference type="vcs"><url>https://github.com/eclipse/sisu.inject/org.eclipse.sisu.plexus</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.9.0.M3?type=jar"> + <publisher>The Eclipse Foundation</publisher> + <group>org.eclipse.sisu</group> + <name>org.eclipse.sisu.inject</name> + <version>0.9.0.M3</version> + <description>JSR330-based container; supports classpath scanning, auto-binding, and dynamic auto-wiring</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">643a13084e0ac59cdda06319e1b348ea</hash> + <hash alg="SHA-1">3665002ba4d16dfa779ef658a63d0608c4bd898b</hash> + <hash alg="SHA-256">15335c4dcf082f599fb8eddcfb58d6a7e9a9c97de2883c257089a479b9b24522</hash> + <hash alg="SHA-512">76267078f3dd887fd7c4a0931d0ae057d5f51478f712ce4bb5530cfa5c2aa18a8dbe935b32c1afb01a4e2cde44d30579baf5868b8b63ee066ea0714fd9d8a81c</hash> + <hash alg="SHA-384">d24164f8aaae165de8533530b90168228e7d107a5eeb63997bf6e2d41f1adfaabf29aa9ab4f08e3445c69aa57f6c09b8</hash> + <hash alg="SHA3-384">aab9bce13f047bcdd8d47420f80e88a314f3566bf7edcd7d37cf286865f45586fda8745793eb2a54c506759f9654bd5b</hash> + <hash alg="SHA3-256">d9e302304b0f99703243f697f72b12e42df692553c08ef9d2d2e0eb83847eab7</hash> + <hash alg="SHA3-512">8ac0b60618e01e819fcabcfd210176310d98f9856b49cafd5dfb451393b791b1ed43fc17e359c5868662dc76e0059e23a152c5564f7ce94ca4720bd092cb29d0</hash> + </hashes> + <licenses> + <license> + <id>EPL-2.0</id> + </license> + </licenses> + <purl>pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.9.0.M3?type=jar</purl> + <externalReferences><reference type="website"><url>http://www.eclipse.org/sisu/org.eclipse.sisu.inject/</url></reference><reference type="build-system"><url>https://ci.eclipse.org/sisu/job/sisu.inject/</url></reference><reference type="distribution-intake"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/eclipse/sisu.inject/issues</url></reference><reference type="mailing-list"><url>http://dev.eclipse.org/mhonarc/lists/sisu-dev/</url></reference><reference type="vcs"><url>https://github.com/eclipse/sisu.inject/org.eclipse.sisu.inject</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/com.google.inject/guice@5.1.0?type=jar"> + <publisher>Google, Inc.</publisher> + <group>com.google.inject</group> + <name>guice</name> + <version>5.1.0</version> + <description>Guice is a lightweight dependency injection framework for Java 6 and above</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">2560169296aa94492af34af2115e9511</hash> + <hash alg="SHA-1">da25056c694c54ba16e78e4fc35f17fc60f0d1b4</hash> + <hash alg="SHA-256">4130e50bfac48099c860f0d903b91860c81a249c90f38245f8fed58fc817bc26</hash> + <hash alg="SHA-512">b9c7a9b815d9ce387ebf6d58a71541da1be3cb8d847358133dc1f35ca45315bb9db11c13f3238adb643670759a58fd106247039f42c10759374a9b361c62e99e</hash> + <hash alg="SHA-384">1f7e6e7555c97752e2a3a7dc07473384762467c24a0fc8f4c93c0f209ef361ecd4bf2be847281798dd84f68fc8c54b2f</hash> + <hash alg="SHA3-384">59b895108174073d9889ba3e18566eb5e0785310e90dbd918dfb06af5bdf0d72e8a54094c6109090f43e242daa4d6ebf</hash> + <hash alg="SHA3-256">5a9518cdc72dd7fb8d7848500cb8c97c7689e64a52028dabf44e61a933ffd853</hash> + <hash alg="SHA3-512">5b53b7ee09cf057f83acf86de3f35fc45c04cd95c01e78b59fc1b4d9322e17ecaec1d6c5d37cd37084b602c1a74f6457342e27c6271fd140ade3190448c9fb27</hash> + </hashes> + <licenses> + <license> + <id>Apache-2.0</id> + </license> + </licenses> + <purl>pkg:maven/com.google.inject/guice@5.1.0?type=jar</purl> + <externalReferences><reference type="website"><url>https://github.com/google/guice/guice</url></reference><reference type="build-system"><url>https://travis-ci.org/google/guice</url></reference><reference type="distribution-intake"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/google/guice/issues/</url></reference><reference type="mailing-list"><url>http://groups.google.com/group/google-guice/topics</url></reference><reference type="vcs"><url>https://github.com/google/guice/guice</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/aopalliance/aopalliance@1.0?type=jar"> + <group>aopalliance</group> + <name>aopalliance</name> + <version>1.0</version> + <description>AOP Alliance</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">04177054e180d09e3998808efa0401c7</hash> + <hash alg="SHA-1">0235ba8b489512805ac13a8f9ea77a1ca5ebe3e8</hash> + <hash alg="SHA-256">0addec670fedcd3f113c5c8091d783280d23f75e3acb841b61a9cdb079376a08</hash> + <hash alg="SHA-512">3f44a932d8c00cfeee2eb057bcd7c301a2d029063e0a916e1e20b3aec4877d19d67a2fd8aaf58fa2d5a00133d1602128a7f50912ffb6cabc7b0fdc7fbda3f8a1</hash> + <hash alg="SHA-384">4dddf44338b5aff9580da2532b81c0ac3e1d09e1f28c6db871a55cad442b705dd7791eb07f9d4577d49d0be3673ba783</hash> + <hash alg="SHA3-384">2bd64cbaf769c6e4e85e34f7a6119d89e16fbf55af3fc5d6cbd52eb214c367dec1ac7b9062ee0fb35a2e0acfc7c477e1</hash> + <hash alg="SHA3-256">d4a726b2bf8aa58197021a7d8fca674b4b2790d4c48de43a92f728866a91c2f0</hash> + <hash alg="SHA3-512">830bc3f8328be76897990e9b9fc42eef02623115e456af96ad09b20900ad615519c8c8de60155ac04fb332eaa9510110d52edd13911af76271c71d91cbd789cc</hash> + </hashes> + <licenses> + <license> + <name>Public Domain</name> + </license> + </licenses> + <purl>pkg:maven/aopalliance/aopalliance@1.0?type=jar</purl> + <externalReferences><reference type="website"><url>http://aopalliance.sourceforge.net</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/com.google.guava/guava@33.3.0-jre?type=jar"> + <group>com.google.guava</group> + <name>guava</name> + <version>33.3.0-jre</version> + <description>Guava is a suite of core and expanded libraries that include + utility classes, Google's collections, I/O classes, and + much more.</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">4dc8e97e29f05936b770daffe940f3af</hash> + <hash alg="SHA-1">13b4d0924e6023eda04b4c7aa83b32dfedf735a7</hash> + <hash alg="SHA-256">dfadc3bce3101eff1452aae47d7c833fee443b47bdf9ef13311b6c7cab663ddf</hash> + <hash alg="SHA-512">d4f00bbcbf656eb3b83281e848f9d9e1cc9e03b5af2a32cecdc31ef829c45dac15fa5209912b16aa19b0a49fbf29001aad0e3f7e28f0373bd2322699dc760649</hash> + <hash alg="SHA-384">7580dc3354b5267b139e02fb08803b851331eca034841b6860c2fa20dfa598e0301c6d7304b53e0f2fd24fa855d28469</hash> + <hash alg="SHA3-384">139bb078847a2b828bea455fe8961f334b101bc32497c34c00456edd7affe9034052f5fabf031c24d4029ecf09bf945d</hash> + <hash alg="SHA3-256">02a02e488116309e461fbe55fd57864930b8d58377fcc4939ca1c2a3db3e5612</hash> + <hash alg="SHA3-512">5b9e169e0e77a3bd149d12ee3e116b9cfb53db88d2103f8e8a3b832a3e93c31015140b634e304e1bf125c1f89ced60da473457b7749765f105985f6dc251a3d0</hash> + </hashes> + <licenses> + <license> + <id>Apache-2.0</id> + </license> + </licenses> + <purl>pkg:maven/com.google.guava/guava@33.3.0-jre?type=jar</purl> + <externalReferences><reference type="website"><url>https://github.com/google/guava</url></reference><reference type="build-system"><url>https://github.com/google/guava/actions</url></reference><reference type="distribution-intake"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/google/guava/issues</url></reference><reference type="vcs"><url>https://github.com/google/guava/guava</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/com.google.guava/failureaccess@1.0.2?type=jar"> + <group>com.google.guava</group> + <name>failureaccess</name> + <version>1.0.2</version> + <description>Contains + com.google.common.util.concurrent.internal.InternalFutureFailureAccess and + InternalFutures. Most users will never need to use this artifact. Its + classes are conceptually a part of Guava, but they're in this separate + artifact so that Android libraries can use them without pulling in all of + Guava (just as they can use ListenableFuture by depending on the + listenablefuture artifact).</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">3f75955b49b6758fd6d1e1bd9bf777b3</hash> + <hash alg="SHA-1">c4a06a64e650562f30b7bf9aaec1bfed43aca12b</hash> + <hash alg="SHA-256">8a8f81cf9b359e3f6dfa691a1e776985c061ef2f223c9b2c80753e1b458e8064</hash> + <hash alg="SHA-512">ff4ee76aa661708989d53d45576cff3beea9ebbd86481dbbf2ee8c81bb22f882097b430588312b711025f0e890f22c6799d722ccd422a6a7278de08660fe2f51</hash> + <hash alg="SHA-384">85a7bd379da27ad57a4e5c02099fef206083caa52244597ac858a921b48e2912cfa7ef0e7d0c7a10ab2dd8d0f7d6ada0</hash> + <hash alg="SHA3-384">652b22d09b297320e62ac254801e7d3a0fd2a8038461c5cbf7a53a27d681f62b768b964aa62c864453c4e7af217c8c4a</hash> + <hash alg="SHA3-256">a650b2f7982affc2dbb7e2807fbb0fbf58b74fd8dc111cc6dc5e95a00179b7e3</hash> + <hash alg="SHA3-512">2c5ee7629a8fb1c952f437b80fcd1cff86c54ff81de02eda1eb73c0bbfe38d3f072946f8c6396c7f1e46e16a6d44ad393dfe6fd2dd96f75ebb854263d36bb193</hash> + </hashes> + <licenses> + <license> + <id>Apache-2.0</id> + </license> + </licenses> + <purl>pkg:maven/com.google.guava/failureaccess@1.0.2?type=jar</purl> + <externalReferences><reference type="website"><url>https://github.com/google/guava/failureaccess</url></reference><reference type="build-system"><url>https://travis-ci.org/google/guava</url></reference><reference type="distribution-intake"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/google/guava/issues</url></reference><reference type="vcs"><url>https://github.com/google/guava/failureaccess</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/javax.inject/javax.inject@1?type=jar"> + <group>javax.inject</group> + <name>javax.inject</name> + <version>1</version> + <description>The javax.inject API</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">289075e48b909e9e74e6c915b3631d2e</hash> + <hash alg="SHA-1">6975da39a7040257bd51d21a231b76c915872d38</hash> + <hash alg="SHA-256">91c77044a50c481636c32d916fd89c9118a72195390452c81065080f957de7ff</hash> + <hash alg="SHA-512">e126b7ccf3e42fd1984a0beef1004a7269a337c202e59e04e8e2af714280d2f2d8d2ba5e6f59481b8dcd34aaf35c966a688d0b48ec7e96f102c274dc0d3b381e</hash> + <hash alg="SHA-384">ac04c9f03ccbe35a25deb8b50280a0ca01dbe6aff0dd795d55af6112bfe3cd5817eb82f32fb18378d86cd64b07597190</hash> + <hash alg="SHA3-384">fca090ecb1edeacb9fe865dc515cd1d109b323cd742d4a9733ff199a96ee96e0db4f924079520b9c189ef750f255475d</hash> + <hash alg="SHA3-256">5b0054e39e522de0e0ffc4034d12f72270291fb24d94d5ffc9c4d69c25035fc6</hash> + <hash alg="SHA3-512">fb290f5a70b1efc1dff12f40a0b2d7b94019f66da42e78010c0b8e61f222c4f267b67e356a9e9c346eb801e5515e36243888f280c5cb95c2dd69016a30cadeb9</hash> + </hashes> + <licenses> + <license> + <id>Apache-2.0</id> + </license> + </licenses> + <purl>pkg:maven/javax.inject/javax.inject@1?type=jar</purl> + <externalReferences><reference type="website"><url>http://code.google.com/p/atinject/</url></reference><reference type="vcs"><url>http://code.google.com/p/atinject/source/checkout</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.codehaus.plexus/plexus-classworlds@2.8.0?type=jar"> + <publisher>Codehaus Plexus</publisher> + <group>org.codehaus.plexus</group> + <name>plexus-classworlds</name> + <version>2.8.0</version> + <description>A class loader framework</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">92089dee35db6423c2128559238430cb</hash> + <hash alg="SHA-1">5d0d8c71b61b38ce127a46702a453f9aa09a4ee2</hash> + <hash alg="SHA-256">081b40e0eab033cd5ac72d2501bfff4f5fd2a3eef827051111730ea152681c72</hash> + <hash alg="SHA-512">3f8eeaf5089244ca8e0eec46ab0d57924dd187375413ddf55edf5881a2fd17f7b4a12abd0b402e8a2d5c8428bff87809f40921eda9f6ddc20585e861825618ec</hash> + <hash alg="SHA-384">b689762c3c4a75b2f6eda24e97c6d77c1a550b755baa1d7f6b3151f413421380232d5474f3c1b2a15665651d8909b456</hash> + <hash alg="SHA3-384">929e03c89948c96515c8ff58da7653c1396e261b7c5b7d22575634f7266496d655397864ab2e129778af759993f57520</hash> + <hash alg="SHA3-256">a1006c9de6b5f60a8e2ee5839c2fbc128158f6008458e42e65123e7bb2e3cbbc</hash> + <hash alg="SHA3-512">5a813f86a7246cd2f0021d1d6891497128cefcbb2258d3865dc41eb7f4fb5f21c5875f21418a8bbff2b6b100ed0523e7101b7937aa84b6be87a808cfee73e50d</hash> + </hashes> + <licenses> + <license> + <id>Apache-2.0</id> + </license> + </licenses> + <purl>pkg:maven/org.codehaus.plexus/plexus-classworlds@2.8.0?type=jar</purl> + <externalReferences><reference type="website"><url>https://codehaus-plexus.github.io/plexus-classworlds/</url></reference><reference type="distribution-intake"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/codehaus-plexus/plexus-classworlds/issues</url></reference><reference type="mailing-list"><url>https://groups.google.com/forum/#!forum/mojohaus-dev</url></reference><reference type="vcs"><url>https://github.com/codehaus-plexus/plexus-classworlds/tree/plexus-classworlds-2.8.0/</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.codehaus.plexus/plexus-interpolation@1.27?type=jar"> + <publisher>Codehaus Plexus</publisher> + <group>org.codehaus.plexus</group> + <name>plexus-interpolation</name> + <version>1.27</version> + <description>The Plexus project provides a full software stack for creating and executing software projects.</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">c2edbe0dbc934692794aaeac6006055a</hash> + <hash alg="SHA-1">8dc73f4ff5eafcbb7ec035ba54736e828b272533</hash> + <hash alg="SHA-256">3fb4fb6143fdf964024c3cb738551524b9ea84e5c211cd660c559ad0703e5230</hash> + <hash alg="SHA-512">34ae1399e75560d6aec6743ce37e10d2236342ec58145c3fdd7b03340f4ed3ef500f824c845d452dbb8c3f14d118c855707de4a080074fa572daf7ccfef4dddf</hash> + <hash alg="SHA-384">cf31f04d414db3c864a403628707df8b36c379a984d75804e5cbfeeea5fea54d2510620de045c0b01a7745063b3135fb</hash> + <hash alg="SHA3-384">9a439b4e81260659af067e91d5e2482337dc718cd32abc08562e9a90fee45da6a0cbfffdc7190b13ba662ed3153fcde1</hash> + <hash alg="SHA3-256">d8cd271924ed99a870e9f8c17796e2ab0a3e69350465508517992bee0cea6bbe</hash> + <hash alg="SHA3-512">75a3e2cbde1c45b70c1b4103620f76673db127e17518e2ca51cff1e6d7a84041e495c71171490004650d6476679d009594db2557898e231962bea3744914c501</hash> + </hashes> + <licenses> + <license> + <id>Apache-2.0</id> + </license> + </licenses> + <purl>pkg:maven/org.codehaus.plexus/plexus-interpolation@1.27?type=jar</purl> + <externalReferences><reference type="website"><url>https://codehaus-plexus.github.io/plexus-pom/plexus-interpolation/</url></reference><reference type="distribution-intake"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/codehaus-plexus/plexus-interpolation/issues</url></reference><reference type="mailing-list"><url>https://groups.google.com/forum/#!forum/mojohaus-dev</url></reference><reference type="vcs"><url>http://github.com/codehaus-plexus/plexus-interpolation/tree/plexus-interpolation-1.27/</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.codehaus.plexus/plexus-component-annotations@2.1.0?type=jar"> + <publisher>Codehaus Plexus</publisher> + <group>org.codehaus.plexus</group> + <name>plexus-component-annotations</name> + <version>2.1.0</version> + <description>Plexus Component "Java 5" Annotations, to describe plexus components properties in java sources with + standard annotations instead of javadoc annotations.</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">141fd7a2ae613cb17d25ecd54b43eb3f</hash> + <hash alg="SHA-1">2f2147a6cc6a119a1b51a96f31d45c557f6244b9</hash> + <hash alg="SHA-256">bde3617ce9b5bcf9584126046080043af6a4b3baea40a3b153f02e7bbc32acac</hash> + <hash alg="SHA-512">cc534fda54272f074fe9edd581a6c3e1ea98127340c7f852c4b4953a44dad048ace22dfa10f30d6adcdfc15efd319dac778a03ebbe20de7779fd1df640506e88</hash> + <hash alg="SHA-384">dd102351fada419b7e66f38b62868db4141cf93863b8117926564dd883b4a3960d9c9682b346f7106cdaa2a4138c794f</hash> + <hash alg="SHA3-384">2b335733d7683e8bae312b0608af7c17b1aa22a1b9cbc4cc11549faf6bacc51c7591f1073aac99e5d70fdea31c6253c4</hash> + <hash alg="SHA3-256">2e9f44d1c5df160563d3cedaf01929682fb3e0432beca7c782d8ba0324fb32b1</hash> + <hash alg="SHA3-512">5051e4210310ec60fae9f32284a93da3cff63bf43a7dda30eaf2715d24cfc7f2353a6c2731521f4d6ef32e7a3e2526b6a41c8a11b0889c8dbf7ffc7914812641</hash> + </hashes> + <licenses> + <license> + <id>Apache-2.0</id> + </license> + </licenses> + <purl>pkg:maven/org.codehaus.plexus/plexus-component-annotations@2.1.0?type=jar</purl> + <externalReferences><reference type="website"><url>http://codehaus-plexus.github.io/plexus-containers/plexus-component-annotations/</url></reference><reference type="distribution-intake"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>http://github.com/codehaus-plexus/plexus-containers/issues</url></reference><reference type="mailing-list"><url>http://archive.plexus.codehaus.org/user</url></reference><reference type="vcs"><url>https://github.com/codehaus-plexus/plexus-containers/plexus-component-annotations</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.slf4j/slf4j-api@2.0.16?type=jar"> + <publisher>QOS.ch</publisher> + <group>org.slf4j</group> + <name>slf4j-api</name> + <version>2.0.16</version> + <description>The slf4j API</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">c8de8f5d740584cb24b5652cfba8b3c4</hash> + <hash alg="SHA-1">0172931663a09a1fa515567af5fbef00897d3c04</hash> + <hash alg="SHA-256">a12578dde1ba00bd9b816d388a0b879928d00bab3c83c240f7013bf4196c579a</hash> + <hash alg="SHA-512">91c2e7b30f24649bb3edfc7f138c2b7dc715ad36963af159defb80a71205eb7e4c5bcc80d779ef993b567a56724064f190c93985f32665a8df85198a03a2f1bb</hash> + <hash alg="SHA-384">ed0cc7ad67343b9fe4df03ea534025bf9d90c112b33cd8920f29890d923c349b69820c9c42b9e8882047af848b74f99d</hash> + <hash alg="SHA3-384">331ac707cfa4b2bda44deffce7d2a640abb9ae12968cb1ac4879ba1b45542e3d3ce1016c812ff1f2449336bc7ea6bebb</hash> + <hash alg="SHA3-256">3f68204951bb4baedc34fdd7194d0801042268aba0c58ac5d760779510743fbb</hash> + <hash alg="SHA3-512">d7a2f7359e7b2cd6ae3650d28352bf8789acf5855a3596a3be2a236a94931abf8bacf0d6a457afa43164be53abb19cc223ef4f030822a3295c036c078527e361</hash> + </hashes> + <licenses> + <license> + <id>MIT</id> + <url>https://opensource.org/licenses/MIT</url> + </license> + </licenses> + <purl>pkg:maven/org.slf4j/slf4j-api@2.0.16?type=jar</purl> + <externalReferences><reference type="website"><url>http://www.slf4j.org</url></reference><reference type="distribution-intake"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/qos-ch/slf4j/slf4j-parent/slf4j-api</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-artifact@3.9.9?type=jar"> + <publisher>The Apache Software Foundation</publisher> + <group>org.apache.maven</group> + <name>maven-artifact</name> + <version>3.9.9</version> + <description>Maven is a software build management and + comprehension tool. Based on the concept of a project object model: + builds, dependency management, documentation creation, site + publication, and distribution publication are all controlled from + the declarative file. Maven can be extended by plugins to utilise a + number of other development tools for reporting or the build + process.</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">fcb27c2b8225edec3f2356973fa39e98</hash> + <hash alg="SHA-1">a130ec431ef32e12a4424f9b074735bb58e15d2d</hash> + <hash alg="SHA-256">30f015d1c1a393e19c18cd4f43532089c36d4ca328608ce3dda78b74d3d31515</hash> + <hash alg="SHA-512">d9ef181d2d7284c3c4bd1537171cfd1d6e1fd2f365293b71515f039d6951ab1bf40af5240e3b47229c54aaf967078da0d8dfaf79c5f2406ed4966b9a4ac0db92</hash> + <hash alg="SHA-384">40186026f8d4b7fecbb7ac283128efb3667aa12ef39d12ecb3c4c9a1c424b90693ff16412b891ac0109432ad1482418e</hash> + <hash alg="SHA3-384">aa018d441ce753b0b8091622e734d84a45114022a5bb806880e5016ecd4afcbb5e1c4b3054d56a8b1dca131c70c72a0e</hash> + <hash alg="SHA3-256">6c4faabeae8bbba3746f11b27ba1222b35c3de5ce434e04b8aa1df6b4572a4dc</hash> + <hash alg="SHA3-512">02c324849c45463d233dfee4dc36e0f41d1983cd24fb13f92890b764f12b84d76d4e36fc7e51c07dc9db533fa08c0119486fe22cb384b009dd1313dcd70ade7a</hash> + </hashes> + <licenses> + <license> + <id>Apache-2.0</id> + <url>https://www.apache.org/licenses/LICENSE-2.0</url> + </license> + </licenses> + <purl>pkg:maven/org.apache.maven/maven-artifact@3.9.9?type=jar</purl> + <externalReferences><reference type="website"><url>https://maven.apache.org/ref/3.9.9/maven-artifact/</url></reference><reference type="build-system"><url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/</url></reference><reference type="distribution"><url>https://maven.apache.org/download.html</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/MNG</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?us...@maven.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/maven/tree/maven-3.9.9/maven-artifact</url></reference></externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-plugin-api@3.9.9?type=jar"> + <publisher>The Apache Software Foundation</publisher> + <group>org.apache.maven</group> + <name>maven-plugin-api</name> + <version>3.9.9</version> + <description>The API for plugins - Mojos - development.</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">0bf1ae393ffac0c034ce8f3a4b7fc406</hash> + <hash alg="SHA-1">7e06aef37b14f8452928e5efaa88bcf2ee8aed02</hash> + <hash alg="SHA-256">2b491d38db45b0e8eef522e8f7889a3366e546e58b376b07fcb56e34c424e932</hash>
[... 76537 lines stripped ...]
