Added: release/camel/apache-camel/4.11.0/apache-camel-4.11.0-sbom.json ============================================================================== --- release/camel/apache-camel/4.11.0/apache-camel-4.11.0-sbom.json (added) +++ release/camel/apache-camel/4.11.0/apache-camel-4.11.0-sbom.json Thu Apr 3 09:04:03 2025 @@ -0,0 +1,210833 @@ +{ + "bomFormat" : "CycloneDX", + "specVersion" : "1.6", + "serialNumber" : "urn:uuid:2c423ba7-eb21-3a5f-8cf7-82071a0af9c7", + "version" : 1, + "metadata" : { + "lifecycles" : [ + { + "phase" : "build" + } + ], + "tools" : { + "components" : [ + { + "type" : "library", + "author" : "OWASP Foundation", + "group" : "org.cyclonedx", + "name" : "cyclonedx-maven-plugin", + "version" : "2.9.1", + "description" : "CycloneDX Maven plugin", + "hashes" : [ + { + "alg" : "MD5", + "content" : "9c7a565cf28cce58557d0c621c5ea4b1" + }, + { + "alg" : "SHA-1", + "content" : "be882d5a22050bfa9d19090b1420c188617d0e1c" + }, + { + "alg" : "SHA-256", + "content" : "698e0f37184a5b28c245c4065fd036dfce253b52f82fbb7113d81d36326cc249" + }, + { + "alg" : "SHA-512", + "content" : "c0f0b11026858166f872a2eb54719492e5cecaa0bc9cd6b30b3ecb4a174eed220f4a1b5829d18d6734128e778d3cb3db7ffed177c92866133129cb29081814a0" + }, + { + "alg" : "SHA-384", + "content" : "d80964707dfe5caca8c70521d5066f57589304c0a657e6fbc7c0614ea0fc7b3b3dbe7778361eee0f54ba111e9cb0ffcb" + }, + { + "alg" : "SHA3-384", + "content" : "80bc3a275d9514bc457461ff52a72add8c7ecbbc01d8912efce57139016c544ee776981851be0a58fa977ab4221f703f" + }, + { + "alg" : "SHA3-256", + "content" : "142317d6f245390f4fd2d0c100b16281b8dfc5c0c2cff86943bdcc97039cb699" + }, + { + "alg" : "SHA3-512", + "content" : "af0fb9137c90b65d1a07f72e4d51ae509956cdb8800f35c961b037cdda1fe4a14ce3b496cef71ba85f1621affcfe29cd42704ae4191ff0b090a9602087c8997b" + } + ] + } + ] + }, + "component" : { + "type" : "library", + "bom-ref" : "pkg:maven/org.apache.camel/camel@4.11.0?type=pom", + "publisher" : "The Apache Software Foundation", + "group" : "org.apache.camel", + "name" : "camel", + "version" : "4.11.0", + "description" : "Camel Root POM", + "licenses" : [ + { + "license" : { + "id" : "Apache-2.0", + "url" : "https://www.apache.org/licenses/LICENSE-2.0" + } + } + ], + "purl" : "pkg:maven/org.apache.camel/camel@4.11.0?type=pom", + "externalReferences" : [ + { + "type" : "website", + "url" : "https://camel.apache.org" + }, + { + "type" : "distribution-intake", + "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" + }, + { + "type" : "issue-tracker", + "url" : "https://issues.apache.org/jira/browse/CAMEL" + }, + { + "type" : "mailing-list", + "url" : "dev-subscr...@camel.apache.org" + }, + { + "type" : "vcs", + "url" : "https://gitbox.apache.org/repos/asf?p=camel.git;a=summary" + } + ] + }, + "properties" : [ + { + "name" : "maven.goal", + "value" : "makeAggregateBom" + }, + { + "name" : "maven.scopes", + "value" : "compile,provided,runtime,system" + }, + { + "name" : "cdx:reproducible", + "value" : "enabled" + } + ] + }, + "components" : [ + { + "type" : "library", + "bom-ref" : "pkg:maven/org.apache.camel/camel-buildtools@4.11.0?type=jar", + "publisher" : "The Apache Software Foundation", + "group" : "org.apache.camel", + "name" : "camel-buildtools", + "version" : "4.11.0", + "description" : "The build tools for the Apache Camel project", + "licenses" : [ + { + "license" : { + "id" : "Apache-2.0", + "url" : "https://www.apache.org/licenses/LICENSE-2.0" + } + } + ], + "purl" : "pkg:maven/org.apache.camel/camel-buildtools@4.11.0?type=jar", + "externalReferences" : [ + { + "type" : "website", + "url" : "https://camel.apache.org/camel-buildtools" + }, + { + "type" : "distribution-intake", + "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" + }, + { + "type" : "issue-tracker", + "url" : "https://issues.apache.org/jira/browse/CAMEL" + }, + { + "type" : "mailing-list", + "url" : "dev-subscr...@camel.apache.org" + }, + { + "type" : "vcs", + "url" : "https://gitbox.apache.org/repos/asf?p=camel.git;a=summary/camel-buildtools" + } + ] + }, + { + "type" : "library", + "bom-ref" : "pkg:maven/org.apache.camel/camel-parent@4.11.0?type=pom", + "publisher" : "The Apache Software Foundation", + "group" : "org.apache.camel", + "name" : "camel-parent", + "version" : "4.11.0", + "description" : "Camel Parent POM", + "licenses" : [ + { + "license" : { + "id" : "Apache-2.0", + "url" : "https://www.apache.org/licenses/LICENSE-2.0" + } + } + ], + "purl" : "pkg:maven/org.apache.camel/camel-parent@4.11.0?type=pom", + "externalReferences" : [ + { + "type" : "website", + "url" : "https://camel.apache.org/camel-parent" + }, + { + "type" : "distribution-intake", + "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" + }, + { + "type" : "issue-tracker", + "url" : "https://issues.apache.org/jira/browse/CAMEL" + }, + { + "type" : "mailing-list", + "url" : "dev-subscr...@camel.apache.org" + }, + { + "type" : "vcs", + "url" : "https://gitbox.apache.org/repos/asf?p=camel.git;a=summary/camel-parent" + } + ] + }, + { + "type" : "library", + "bom-ref" : "pkg:maven/org.apache.camel/camel-etc@4.11.0?type=pom", + "publisher" : "The Apache Software Foundation", + "group" : "org.apache.camel", + "name" : "camel-etc", + "version" : "4.11.0", + "description" : "Misc stuff", + "licenses" : [ + { + "license" : { + "id" : "Apache-2.0", + "url" : "https://www.apache.org/licenses/LICENSE-2.0" + } + } + ], + "purl" : "pkg:maven/org.apache.camel/camel-etc@4.11.0?type=pom", + "externalReferences" : [ + { + "type" : "website", + "url" : "https://camel.apache.org/camel-parent/camel-etc" + }, + { + "type" : "distribution-intake", + "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" + }, + { + "type" : "issue-tracker", + "url" : "https://issues.apache.org/jira/browse/CAMEL" + }, + { + "type" : "mailing-list", + "url" : "dev-subscr...@camel.apache.org" + }, + { + "type" : "vcs", + "url" : "https://gitbox.apache.org/repos/asf?p=camel.git;a=summary/camel-parent/camel-etc" + } + ] + }, + { + "type" : "library", + "bom-ref" : "pkg:maven/org.apache.camel/tooling@4.11.0?type=pom", + "publisher" : "The Apache Software Foundation", + "group" : "org.apache.camel", + "name" : "tooling", + "version" : "4.11.0", + "description" : "Camel Tooling", + "licenses" : [ + { + "license" : { + "id" : "Apache-2.0", + "url" : "https://www.apache.org/licenses/LICENSE-2.0" + } + } + ], + "purl" : "pkg:maven/org.apache.camel/tooling@4.11.0?type=pom", + "externalReferences" : [ + { + "type" : "website", + "url" : "https://camel.apache.org/camel-parent/tooling" + }, + { + "type" : "distribution-intake", + "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" + }, + { + "type" : "issue-tracker", + "url" : "https://issues.apache.org/jira/browse/CAMEL" + }, + { + "type" : "mailing-list", + "url" : "dev-subscr...@camel.apache.org" + }, + { + "type" : "vcs", + "url" : "https://gitbox.apache.org/repos/asf?p=camel.git;a=summary/camel-parent/tooling" + } + ] + }, + { + "type" : "library", + "bom-ref" : "pkg:maven/org.apache.camel/camel-tooling-util@4.11.0?type=jar", + "publisher" : "The Apache Software Foundation", + "group" : "org.apache.camel", + "name" : "camel-tooling-util", + "version" : "4.11.0", + "description" : "Tooling utilities", + "licenses" : [ + { + "license" : { + "id" : "Apache-2.0", + "url" : "https://www.apache.org/licenses/LICENSE-2.0" + } + } + ], + "purl" : "pkg:maven/org.apache.camel/camel-tooling-util@4.11.0?type=jar", + "externalReferences" : [ + { + "type" : "website", + "url" : "https://camel.apache.org/camel-parent/tooling/camel-tooling-util" + }, + { + "type" : "distribution-intake", + "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" + }, + { + "type" : "issue-tracker", + "url" : "https://issues.apache.org/jira/browse/CAMEL" + }, + { + "type" : "mailing-list", + "url" : "dev-subscr...@camel.apache.org" + }, + { + "type" : "vcs", + "url" : "https://gitbox.apache.org/repos/asf?p=camel.git;a=summary/camel-parent/tooling/camel-tooling-util" + } + ] + }, + { + "type" : "library", + "bom-ref" : "pkg:maven/org.junit.jupiter/junit-jupiter-api@5.12.1?type=jar", + "group" : "org.junit.jupiter", + "name" : "junit-jupiter-api", + "version" : "5.12.1", + "description" : "Module \"junit-jupiter-api\" of JUnit 5.", + "scope" : "required", + "hashes" : [ + { + "alg" : "MD5", + "content" : "456e58e1efb18b45bbd6513d65650d30" + }, + { + "alg" : "SHA-1", + "content" : "9ed9e01546d4eb0840769b5d0ac7924531e98d7d" + }, + { + "alg" : "SHA-256", + "content" : "a401e0b60373edf7df0962c25eb3213e451a4778792d33a76876c3b8a5bb209b" + }, + { + "alg" : "SHA-512", + "content" : "6f2f49092334c57a0a3b2b2df90b265d0fb307d0f1a7ea397788fcd7bd3ddaa8ae4713a07125a8b314744ee4a2510e5fefc2928efb16fbf8b34291cf46aeb7c0" + }, + { + "alg" : "SHA-384", + "content" : "a15869d05a44f8461daa7cec607bed7e022d0995ef3e4ad5ae48f9bd4167ed30f03d3c33a0eee3439a8ed49b15da543c" + }, + { + "alg" : "SHA3-384", + "content" : "4424fbd3e535cd4d46ac79ef6fe91cf1f771ddf9e029524a97ade5e4c1bbaa81da11ea20aa2e7eb863310bbcb3b1f0f9" + }, + { + "alg" : "SHA3-256", + "content" : "ba391cf7b239f5da9ddcf49dd9c33a5cd8c9ddbdefe8695a29d54b5ac7c8a0a0" + }, + { + "alg" : "SHA3-512", + "content" : "fd55b1a92ce28533cae6487702194f9bed6d3e945a6982a9f85c9d26f07e34cfe7b66bfcde417eed92c6285d5b35409567781ee5e0b5d116945d2024f8b09529" + } + ], + "licenses" : [ + { + "license" : { + "id" : "EPL-2.0" + } + } + ], + "purl" : "pkg:maven/org.junit.jupiter/junit-jupiter-api@5.12.1?type=jar", + "externalReferences" : [ + { + "type" : "website", + "url" : "https://junit.org/junit5/" + }, + { + "type" : "vcs", + "url" : "https://github.com/junit-team/junit5" + } + ] + }, + { + "type" : "library", + "bom-ref" : "pkg:maven/org.opentest4j/opentest4j@1.3.0?type=jar", + "group" : "org.opentest4j", + "name" : "opentest4j", + "version" : "1.3.0", + "description" : "Open Test Alliance for the JVM", + "scope" : "required", + "hashes" : [ + { + "alg" : "MD5", + "content" : "03c404f727531f3fd3b4c73997899327" + }, + { + "alg" : "SHA-1", + "content" : "152ea56b3a72f655d4fd677fc0ef2596c3dd5e6e" + }, + { + "alg" : "SHA-256", + "content" : "48e2df636cab6563ced64dcdff8abb2355627cb236ef0bf37598682ddf742f1b" + }, + { + "alg" : "SHA-512", + "content" : "78fc698a7871bb50305e3657893c10500595f043348d875f57bc39ca4a6a51eda3967b7c8c8a7ec3e8f85f2171bca4aa98823e912e416e87e81c6ba5b70a37c3" + }, + { + "alg" : "SHA-384", + "content" : "10398b6998c9202a0731e2e19ae1c3f9d8a83582c2663fe7bdda15794ee6fa816727dbd8f7c7164bd5395ee1cfe7c97e" + }, + { + "alg" : "SHA3-384", + "content" : "3abe706fd78509c25a402c7bbf6f9ddf71ffb5b35054864ba0fdf7902207115f888a0ba728fd71d2e87a9360d2498121" + }, + { + "alg" : "SHA3-256", + "content" : "d961907a1bfa1dcda329dca494ffbc251b31fabcaca5ab7095661a8ce3c1d654" + }, + { + "alg" : "SHA3-512", + "content" : "0ad661617bcac51bcd26f7ad4611c69b1fd9811b50dbf734e041a3243ab1f845e7796620e8a7c40c4a2df3946864598b1251396c7d9bd813203d82710788cce0" + } + ], + "licenses" : [ + { + "license" : { + "id" : "Apache-2.0" + } + } + ], + "purl" : "pkg:maven/org.opentest4j/opentest4j@1.3.0?type=jar", + "externalReferences" : [ + { + "type" : "website", + "url" : "https://github.com/ota4j-team/opentest4j" + }, + { + "type" : "vcs", + "url" : "https://github.com/ota4j-team/opentest4j" + } + ] + }, + { + "type" : "library", + "bom-ref" : "pkg:maven/org.junit.platform/junit-platform-commons@1.12.1?type=jar", + "group" : "org.junit.platform", + "name" : "junit-platform-commons", + "version" : "1.12.1", + "description" : "Module \"junit-platform-commons\" of JUnit 5.", + "scope" : "required", + "hashes" : [ + { + "alg" : "MD5", + "content" : "2683298548d31821091016639e756e4d" + }, + { + "alg" : "SHA-1", + "content" : "d34adac31a6974eec6611cc129927a2e2cfe89ee" + }, + { + "alg" : "SHA-256", + "content" : "c316163581aaa5649280122b12ea36fe4e9c202a1a2267753fea7c9e1df055eb" + }, + { + "alg" : "SHA-512", + "content" : "d564499f3d6e13d69d509b7a8aaf43ff07edc4252d1f7d9215ec56e1e9475a6e6a3004c32af26fa0251874646efd472a658c8ca76d6aa1884add40617f861184" + }, + { + "alg" : "SHA-384", + "content" : "db3b68d82f457c4304aecc01675cc1272a998c8917c78109e3a7e5ffcb64709d4f7bd023e713911577c38dc9bce4925e" + }, + { + "alg" : "SHA3-384", + "content" : "3b0b5f37cfbe6bd4a5e90a4016b83d8bd40f55737a6d4244a957cd6a7aceeb2094d7fb68975b0ac44cc2491f5e972eab" + }, + { + "alg" : "SHA3-256", + "content" : "93f356038aa9546ecc45c0e81ccebd37bd1998d87478fce68f0afa0143b53bd9" + }, + { + "alg" : "SHA3-512", + "content" : "a1c87d10bcfa8ffb5dfc0afc4f6236f7ea92a3e17173ed8b8cca17af04737f8cc39a3cc5a24d8f104316215ff6aae61dee421c4617598f1a3e9b0c3ee5dcba66" + } + ], + "licenses" : [ + { + "license" : { + "id" : "EPL-2.0" + } + } + ], + "purl" : "pkg:maven/org.junit.platform/junit-platform-commons@1.12.1?type=jar", + "externalReferences" : [ + { + "type" : "website", + "url" : "https://junit.org/junit5/" + }, + { + "type" : "vcs", + "url" : "https://github.com/junit-team/junit5" + } + ] + }, + { + "type" : "library", + "bom-ref" : "pkg:maven/org.apiguardian/apiguardian-api@1.1.2?type=jar", + "group" : "org.apiguardian", + "name" : "apiguardian-api", + "version" : "1.1.2", + "description" : "@API Guardian", + "scope" : "required", + "hashes" : [ + { + "alg" : "MD5", + "content" : "8c7de3f82037fa4a2e8be2a2f13092af" + }, + { + "alg" : "SHA-1", + "content" : "a231e0d844d2721b0fa1b238006d15c6ded6842a" + }, + { + "alg" : "SHA-256", + "content" : "b509448ac506d607319f182537f0b35d71007582ec741832a1f111e5b5b70b38" + }, + { + "alg" : "SHA-512", + "content" : "d7ccd0e7019f1a997de39d66dc0ad4efe150428fdd7f4c743c93884f1602a3e90135ad34baea96d5b6d925ad6c0c8487c8e78304f0a089a12383d4a62e2c9a61" + }, + { + "alg" : "SHA-384", + "content" : "5ae11cfedcee7da43a506a67946ddc8a7a2622284a924ba78f74541e9a22db6868a15f5d84edb91a541e38afded734ea" + }, + { + "alg" : "SHA3-384", + "content" : "c146116b3dfd969200b2ce52d96b92dd02d6f5a45a86e7e85edf35600ddbc2f3c6e8a1ad7e2db4dcd2c398c09fad0927" + }, + { + "alg" : "SHA3-256", + "content" : "b4b436d7f615fc0b820204e69f83c517d1c1ccc5f6b99e459209ede4482268de" + }, + { + "alg" : "SHA3-512", + "content" : "7b95b7ac68a6891b8901b5507acd2c24a0c1e20effa63cd513764f513eab4eb55f8de5178edbe0a400c11f3a18d3f56243569d6d663100f06dd98288504c09c5" + } + ], + "licenses" : [ + { + "license" : { + "id" : "Apache-2.0" + } + } + ], + "purl" : "pkg:maven/org.apiguardian/apiguardian-api@1.1.2?type=jar", + "externalReferences" : [ + { + "type" : "website", + "url" : "https://github.com/apiguardian-team/apiguardian" + }, + { + "type" : "vcs", + "url" : "https://github.com/apiguardian-team/apiguardian" + } + ] + }, + { + "type" : "library", + "bom-ref" : "pkg:maven/org.junit.jupiter/junit-jupiter-params@5.12.1?type=jar", + "group" : "org.junit.jupiter", + "name" : "junit-jupiter-params", + "version" : "5.12.1", + "description" : "Module \"junit-jupiter-params\" of JUnit 5.", + "scope" : "required", + "hashes" : [ + { + "alg" : "MD5", + "content" : "e49ef67027c1d187cde528f2fbaea058" + }, + { + "alg" : "SHA-1", + "content" : "a879b3b05785b66201e30709e7c61662b269cbd1" + }, + { + "alg" : "SHA-256", + "content" : "5951706999e35951d4df0eca6e091d3619f659a9c10858f2f5a3ce191cb57673" + }, + { + "alg" : "SHA-512", + "content" : "f98f370d366087a75cd43c0327bb32f15d9597a7fd72b7161a561f4e40e3a44aa7d4d08d09834fdf4a6240c6507f8886544e5c21b03e7cc691d250fb7bcfccc0" + }, + { + "alg" : "SHA-384", + "content" : "de34fd3988d4b71f4b9e8aa99480e47abc6f3d9dd7331ba7c4d6d07c3b94594adf958aed5a66969e02c847f733acb6db" + }, + { + "alg" : "SHA3-384", + "content" : "60282d9ab697fe47def4561e06b528f37ac147a40cd85c92a32b3f57b28c9b5b107a937c2653b510e8c612a5923fb014" + }, + { + "alg" : "SHA3-256", + "content" : "45d2f491703b104f7f178832b2d5e321266eaf1a111249cfbd667f2ec3aa31c4" + }, + { + "alg" : "SHA3-512", + "content" : "4612c4360272d8929f1319576b90b813a37485065a0cc7d42bc91a4cc43b762de8da0af6303ccb8d53949b090f27a82b09c211245f49a39e91af9c27e619f0af" + } + ], + "licenses" : [ + { + "license" : { + "id" : "EPL-2.0" + } + } + ], + "purl" : "pkg:maven/org.junit.jupiter/junit-jupiter-params@5.12.1?type=jar", + "externalReferences" : [ + { + "type" : "website", + "url" : "https://junit.org/junit5/" + }, + { + "type" : "vcs", + "url" : "https://github.com/junit-team/junit5" + } + ] + }, + { + "type" : "library", + "bom-ref" : "pkg:maven/org.junit.jupiter/junit-jupiter-engine@5.12.1?type=jar", + "group" : "org.junit.jupiter", + "name" : "junit-jupiter-engine", + "version" : "5.12.1", + "description" : "Module \"junit-jupiter-engine\" of JUnit 5.", + "scope" : "required", + "hashes" : [ + { + "alg" : "MD5", + "content" : "e83bca4a58d8af5111265e5eb358d573" + }, + { + "alg" : "SHA-1", + "content" : "fec974a323cb74d080b7801abba2e79e01cadbfe" + }, + { + "alg" : "SHA-256", + "content" : "0e7f2dbeb91bfaeb0d4cb33a487351baf0e5a6ed72906154d8fd9975d329c592" + }, + { + "alg" : "SHA-512", + "content" : "af40b8d24afd65b3fb338e7c8ce5cda850467e8ed4087a067a8485ba7098e9e737396eaf0cb1bbfbf4b42e97afe944a3cb7f5281f7d0f23c78374759c750bbe8" + }, + { + "alg" : "SHA-384", + "content" : "f9c61a86808b3776e5ea3c0cf52abbf1b26dad0ade405b5592ab03d0cfffb09d842d1b6e40fa1d44ef5b6ed57e167bdd" + }, + { + "alg" : "SHA3-384", + "content" : "2c0c1f8822d574a9a06b96c9117e73f54eb8fd2ef68ec94629494175cd978b15c2a38c291497e3f2043f989ee7cb6d2a" + }, + { + "alg" : "SHA3-256", + "content" : "6ee470c3984036079e91b1368d0dd350989038ead4fdcf317c8b8300347e2609" + }, + { + "alg" : "SHA3-512", + "content" : "b035c0e5c86ba238fc38a2814a261d9fb3c047b42881a6ea26f54e9f09ba7ca34828c292789779e540021b0c30889b9b7bcdbc4d476bae0a57718a87a404b52b" + } + ], + "licenses" : [ + { + "license" : { + "id" : "EPL-2.0" + } + } + ], + "purl" : "pkg:maven/org.junit.jupiter/junit-jupiter-engine@5.12.1?type=jar", + "externalReferences" : [ + { + "type" : "website", + "url" : "https://junit.org/junit5/" + }, + { + "type" : "vcs", + "url" : "https://github.com/junit-team/junit5" + } + ] + }, + { + "type" : "library", + "bom-ref" : "pkg:maven/org.junit.platform/junit-platform-engine@1.12.1?type=jar", + "group" : "org.junit.platform", + "name" : "junit-platform-engine", + "version" : "1.12.1", + "description" : "Module \"junit-platform-engine\" of JUnit 5.", + "scope" : "required", + "hashes" : [ + { + "alg" : "MD5", + "content" : "5f49a7f902bd3e293c9570d3167c37f4" + }, + { + "alg" : "SHA-1", + "content" : "fc105f3430d6392a4d033fe6f9d58eddd1a03594" + }, + { + "alg" : "SHA-256", + "content" : "7fedff93fd92aec7d29fc60dc01fa027246b36b8088423a5efc4949e5f6affa4" + }, + { + "alg" : "SHA-512", + "content" : "c489143bbbfbd69755507b2e5823b6331d1ec9a8ed27ae0ea6aa4f08750c002672fb7654f23ce42c0c5a14f38b963414ea0ecbe3bca6ac6896ad8572fad01bb0" + }, + { + "alg" : "SHA-384", + "content" : "64ab768d8a835d2525b13be438002a1ad733e25acb4b0f904db4b1b4f4e9696186d3fa7a393fdc5789a0fd83871033b4" + }, + { + "alg" : "SHA3-384", + "content" : "efae7433a4cbc94a053d1692f3fc93ee727804590d7a5c537d1bb384f9e98cd316409055bd7431d5bf6ee2f368b03385" + }, + { + "alg" : "SHA3-256", + "content" : "95da76a55428675b15f729ec1660376fade83cca6bc6e57b84d1ddb76f4d146e" + }, + { + "alg" : "SHA3-512", + "content" : "1cc2ecf71a7eacb2a2305a6d986e82d8b315d9b5cbeeea9c53c0c61ba15a36b0793d557a60f4548b396af2a6ec440da8743fe523a8e2e6a4a1fac726b9e6867c" + } + ], + "licenses" : [ + { + "license" : { + "id" : "EPL-2.0" + } + } + ], + "purl" : "pkg:maven/org.junit.platform/junit-platform-engine@1.12.1?type=jar", + "externalReferences" : [ + { + "type" : "website", + "url" : "https://junit.org/junit5/" + }, + { + "type" : "vcs", + "url" : "https://github.com/junit-team/junit5" + } + ] + }, + { + "type" : "library", + "bom-ref" : "pkg:maven/org.apache.camel/tooling-parent@4.11.0?type=pom", + "publisher" : "The Apache Software Foundation", + "group" : "org.apache.camel", + "name" : "tooling-parent", + "version" : "4.11.0", + "description" : "Camel Tooling Parent POM", + "licenses" : [ + { + "license" : { + "id" : "Apache-2.0", + "url" : "https://www.apache.org/licenses/LICENSE-2.0" + } + } + ], + "purl" : "pkg:maven/org.apache.camel/tooling-parent@4.11.0?type=pom", + "externalReferences" : [ + { + "type" : "website", + "url" : "https://camel.apache.org/camel-parent/tooling/tooling-parent" + }, + { + "type" : "distribution-intake", + "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" + }, + { + "type" : "issue-tracker", + "url" : "https://issues.apache.org/jira/browse/CAMEL" + }, + { + "type" : "mailing-list", + "url" : "dev-subscr...@camel.apache.org" + }, + { + "type" : "vcs", + "url" : "https://gitbox.apache.org/repos/asf?p=camel.git;a=summary/camel-parent/tooling/tooling-parent" + } + ] + }, + { + "type" : "library", + "bom-ref" : "pkg:maven/org.apache.camel/maven-plugins@4.11.0?type=pom", + "publisher" : "The Apache Software Foundation", + "group" : "org.apache.camel", + "name" : "maven-plugins", + "version" : "4.11.0", + "description" : "Camel Maven Plugins", + "licenses" : [ + { + "license" : { + "id" : "Apache-2.0", + "url" : "https://www.apache.org/licenses/LICENSE-2.0" + } + } + ], + "purl" : "pkg:maven/org.apache.camel/maven-plugins@4.11.0?type=pom", + "externalReferences" : [ + { + "type" : "website", + "url" : "https://camel.apache.org/camel-parent/tooling/tooling-parent/maven-plugins" + }, + { + "type" : "distribution-intake", + "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" + }, + { + "type" : "issue-tracker", + "url" : "https://issues.apache.org/jira/browse/CAMEL" + }, + { + "type" : "mailing-list", + "url" : "dev-subscr...@camel.apache.org" + }, + { + "type" : "vcs", + "url" : "https://gitbox.apache.org/repos/asf?p=camel.git;a=summary/camel-parent/tooling/tooling-parent/maven-plugins" + } + ] + }, + { + "type" : "library", + "bom-ref" : "pkg:maven/org.apache.camel/bom-generator-maven-plugin@4.11.0?type=maven-plugin", + "publisher" : "The Apache Software Foundation", + "group" : "org.apache.camel", + "name" : "bom-generator-maven-plugin", + "version" : "4.11.0", + "description" : "Maven plugin to help generating BOM projects", + "licenses" : [ + { + "license" : { + "id" : "Apache-2.0", + "url" : "https://www.apache.org/licenses/LICENSE-2.0" + } + } + ], + "purl" : "pkg:maven/org.apache.camel/bom-generator-maven-plugin@4.11.0?type=maven-plugin", + "externalReferences" : [ + { + "type" : "website", + "url" : "https://camel.apache.org/camel-parent/tooling/tooling-parent/maven-plugins/bom-generator-maven-plugin" + }, + { + "type" : "distribution-intake", + "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" + }, + { + "type" : "issue-tracker", + "url" : "https://issues.apache.org/jira/browse/CAMEL" + }, + { + "type" : "mailing-list", + "url" : "dev-subscr...@camel.apache.org" + }, + { + "type" : "vcs", + "url" : "https://gitbox.apache.org/repos/asf?p=camel.git;a=summary/camel-parent/tooling/tooling-parent/maven-plugins/bom-generator-maven-plugin" + } + ] + }, + { + "type" : "library", + "bom-ref" : "pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.9.22?type=jar", + "publisher" : "The Apache Software Foundation", + "group" : "org.apache.maven.resolver", + "name" : "maven-resolver-api", + "version" : "1.9.22", + "description" : "The application programming interface for the repository system.", + "scope" : "required", + "hashes" : [ + { + "alg" : "MD5", + "content" : "c59d27b3750461be99f8d38e1f503f56" + }, + { + "alg" : "SHA-1", + "content" : "756660687ea077b85be02b019d593ef2758e7db6" + }, + { + "alg" : "SHA-256", + "content" : "63f5f665e44a09ef55463b3b91fda0b78ff07dd24b1060d56e79c10b6e32cbfb" + }, + { + "alg" : "SHA-512", + "content" : "a803e35af37b807b08019f9a9e3184d86774cd99c9c2d89aeb4033bb2f1d8d8b79b523de8e05fdbe020f623bea783611f472db8c7331949f9bbfe4da1ed46415" + }, + { + "alg" : "SHA-384", + "content" : "51b6c0b437ecc37d697ea248ab225891391fc46491713044ffd9230a9484434227bc8e833213abc340bbcdd02172ec9b" + }, + { + "alg" : "SHA3-384", + "content" : "e7b25bee133e6533aa65b3adc31af2e88081a88745028089e57f56dd7b58af4299de99416373322a8332e9d3ce3229da" + }, + { + "alg" : "SHA3-256", + "content" : "9a3a6ba00fcba33588b0767f3c5d92e30906ecb55797891c4de3eae9ec30e6a3" + }, + { + "alg" : "SHA3-512", + "content" : "7dca13e6576e2bd58da3b20f061fa40bf4d07ddc62f1985faec2b5f840f0089c0ff6c4b3a34adeaec4beac9e7780a793091249dfa0facc715556704333606e68" + } + ], + "licenses" : [ + { + "license" : { + "id" : "Apache-2.0", + "url" : "https://www.apache.org/licenses/LICENSE-2.0" + } + } + ], + "purl" : "pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.9.22?type=jar", + "externalReferences" : [ + { + "type" : "website", + "url" : "https://maven.apache.org/resolver/maven-resolver-api/" + }, + { + "type" : "build-system", + "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-resolver/" + }, + { + "type" : "distribution-intake", + "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" + }, + { + "type" : "issue-tracker", + "url" : "https://issues.apache.org/jira/browse/MRESOLVER" + }, + { + "type" : "mailing-list", + "url" : "https://lists.apache.org/list.html?us...@maven.apache.org" + }, + { + "type" : "vcs", + "url" : "https://github.com/apache/maven-resolver/tree/maven-resolver-1.9.22/maven-resolver-api" + } + ] + }, + { + "type" : "library", + "bom-ref" : "pkg:maven/org.apache.maven.resolver/maven-resolver-util@1.9.22?type=jar", + "publisher" : "The Apache Software Foundation", + "group" : "org.apache.maven.resolver", + "name" : "maven-resolver-util", + "version" : "1.9.22", + "description" : "A collection of utility classes to ease usage of the repository system.", + "scope" : "required", + "hashes" : [ + { + "alg" : "MD5", + "content" : "4e84c0379667d2436a99fced60a74b5d" + }, + { + "alg" : "SHA-1", + "content" : "d5febed69ca2fe0dacffec95b6cb0760b0270fd1" + }, + { + "alg" : "SHA-256", + "content" : "4aaea1584c39294ca926fc474723d9684473609ef4490c4eb169d6ea7daca6b5" + }, + { + "alg" : "SHA-512", + "content" : "25c26f2b1929277fdfc8d3fd868dea7b60c8d067f91daafd65918fcc77db2e4c5afcc210dfff76077fa0c1060c6febba4f3a79075ac196ed00791dd197b41d95" + }, + { + "alg" : "SHA-384", + "content" : "2c8441716a3acc3c24694e7f436eb0255802e4dc4c15d27814807be63b676096e1381e4bc7ac6397f4f5dbee5c255e01" + }, + { + "alg" : "SHA3-384", + "content" : "39e3cb46426ee1ae7c0e1b3098e14aa87fe36a37938fbd6cfafe4333ef047a41559e6d9ecc4a59d3201999834c881581" + }, + { + "alg" : "SHA3-256", + "content" : "d8539e2f082bfee39edb15271b72215a3b948ba0872cfa7e6403c7e495968421" + }, + { + "alg" : "SHA3-512", + "content" : "c4407f0e8713d0595cbcbca86c8c7d2c594c02b4bfa2cc67aac97cae84f63f8b71a95948b86261ff9eb71bee0c0bcd94861f836c28a28d199be2d42ade378cfd" + } + ], + "licenses" : [ + { + "license" : { + "id" : "Apache-2.0", + "url" : "https://www.apache.org/licenses/LICENSE-2.0" + } + } + ], + "purl" : "pkg:maven/org.apache.maven.resolver/maven-resolver-util@1.9.22?type=jar", + "externalReferences" : [ + { + "type" : "website", + "url" : "https://maven.apache.org/resolver/maven-resolver-util/" + }, + { + "type" : "build-system", + "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-resolver/" + }, + { + "type" : "distribution-intake", + "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" + }, + { + "type" : "issue-tracker", + "url" : "https://issues.apache.org/jira/browse/MRESOLVER" + }, + { + "type" : "mailing-list", + "url" : "https://lists.apache.org/list.html?us...@maven.apache.org" + }, + { + "type" : "vcs", + "url" : "https://github.com/apache/maven-resolver/tree/maven-resolver-1.9.22/maven-resolver-util" + } + ] + }, + { + "type" : "library", + "bom-ref" : "pkg:maven/org.apache.maven/maven-core@3.9.9?type=jar", + "publisher" : "The Apache Software Foundation", + "group" : "org.apache.maven", + "name" : "maven-core", + "version" : "3.9.9", + "description" : "Maven Core classes.", + "scope" : "required", + "hashes" : [ + { + "alg" : "MD5", + "content" : "eed2eb37f03ccdea7ef9dab069c0b5d8" + }, + { + "alg" : "SHA-1", + "content" : "b58645e3f14348024b05735c171425e19d30c02e" + }, + { + "alg" : "SHA-256", + "content" : "7fab37fc6044f20ae004376ab8414373636cf51e26ad0b1efa6b3f1cd2bec503" + }, + { + "alg" : "SHA-512", + "content" : "95a717d05c4fb51c4e4d196d6e4e183447f9eb56db13b0b1a8181e3c8b0dbd9abd2ed612ce93bb87799aee4d3b309ba1a7e6924964cb9e45daff2f70a25a0abe" + }, + { + "alg" : "SHA-384", + "content" : "a953e88f9dce06d35b3e2d33ad873d2024730b846e5f94d80fdd687efa0dd07fc42e3d53a70c075abc3497bc4f1383d9" + }, + { + "alg" : "SHA3-384", + "content" : "efdd79ce31e93b75a2df359fec4a0d209eb36d74ff8e89d06c9d95c5125d7bc5b1d7bc67a7b03144ccac46abd3b847dc" + }, + { + "alg" : "SHA3-256", + "content" : "f924a04aa56c923c9e5c904365738e5c46841ad9b5e010ce7adc34b69349c436" + }, + { + "alg" : "SHA3-512", + "content" : "e59ec3884fbfa2528a184db8b008bc46d41a373d94e5b728a6c1d9216f44ca838b96ab95e3c40ef937920e4a068b5824c0f3902d13955d7bc7050a2e3906548e" + } + ], + "licenses" : [ + { + "license" : { + "id" : "Apache-2.0", + "url" : "https://www.apache.org/licenses/LICENSE-2.0" + } + } + ], + "purl" : "pkg:maven/org.apache.maven/maven-core@3.9.9?type=jar", + "externalReferences" : [ + { + "type" : "website", + "url" : "https://maven.apache.org/ref/3.9.9/maven-core/" + }, + { + "type" : "build-system", + "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/" + }, + { + "type" : "distribution", + "url" : "https://maven.apache.org/download.html" + }, + { + "type" : "distribution-intake", + "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" + }, + { + "type" : "issue-tracker", + "url" : "https://issues.apache.org/jira/browse/MNG" + }, + { + "type" : "mailing-list", + "url" : "https://lists.apache.org/list.html?us...@maven.apache.org" + }, + { + "type" : "vcs", + "url" : "https://github.com/apache/maven/tree/maven-3.9.9/maven-core" + } + ] + }, + { + "type" : "library", + "bom-ref" : "pkg:maven/org.apache.maven/maven-model@3.9.9?type=jar", + "publisher" : "The Apache Software Foundation", + "group" : "org.apache.maven", + "name" : "maven-model", + "version" : "3.9.9", + "description" : "Model for Maven POM (Project Object Model)", + "scope" : "required", + "hashes" : [ + { + "alg" : "MD5", + "content" : "813d4aceaaa8e16f8a83c95a96afa22c" + }, + { + "alg" : "SHA-1", + "content" : "585bff8f220ddc1c08c5263b7dee26c49fc7df94" + }, + { + "alg" : "SHA-256", + "content" : "8f59b0a16fe9c933be749a60ae0705a0cb337bb5abaf38801b40b740ff775727" + }, + { + "alg" : "SHA-512", + "content" : "a775b5ec120e1de0bc891cf3dc148193a5e357aed06d0c9a289ea21a55c7fa7053b04fdde3a7e0d29a19f6e01023f74e511e39e0cd6568d3a6f8d27734058ee1" + }, + { + "alg" : "SHA-384", + "content" : "410645fc18300eff25914a1519ee3bda627cff86df984b14ff5e0346031fcd339aaaa4994ea980c0665d206b0dacd4c6" + }, + { + "alg" : "SHA3-384", + "content" : "5dda2fbf976bb1cb95b42e86a94622f73ecb4ad2cf0db0959b401ae169a7c2a0a54366a8a8f9b492f0d6c069260db834" + }, + { + "alg" : "SHA3-256", + "content" : "3ab286c7fee20c98f7282627c64a53cbd2ddb2717a88e9e157d6207dc7dabff4" + }, + { + "alg" : "SHA3-512", + "content" : "073490b65457dd3ac3d8437874478d7e150fb72a48703340e4e2b608f6ed7badd7c33f388f9c43acc5c4d260ae2672c78404864724d920fa0501a017fd58fa6c" + } + ], + "licenses" : [ + { + "license" : { + "id" : "Apache-2.0", + "url" : "https://www.apache.org/licenses/LICENSE-2.0" + } + } + ], + "purl" : "pkg:maven/org.apache.maven/maven-model@3.9.9?type=jar", + "externalReferences" : [ + { + "type" : "website", + "url" : "https://maven.apache.org/ref/3.9.9/maven-model/" + }, + { + "type" : "build-system", + "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/" + }, + { + "type" : "distribution", + "url" : "https://maven.apache.org/download.html" + }, + { + "type" : "distribution-intake", + "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" + }, + { + "type" : "issue-tracker", + "url" : "https://issues.apache.org/jira/browse/MNG" + }, + { + "type" : "mailing-list", + "url" : "https://lists.apache.org/list.html?us...@maven.apache.org" + }, + { + "type" : "vcs", + "url" : "https://github.com/apache/maven/tree/maven-3.9.9/maven-model" + } + ] + }, + { + "type" : "library", + "bom-ref" : "pkg:maven/org.apache.maven/maven-settings@3.9.9?type=jar", + "publisher" : "The Apache Software Foundation", + "group" : "org.apache.maven", + "name" : "maven-settings", + "version" : "3.9.9", + "description" : "Maven Settings model.", + "scope" : "required", + "hashes" : [ + { + "alg" : "MD5", + "content" : "a5eede8fe9b01b7bb3c6dad06a738365" + }, + { + "alg" : "SHA-1", + "content" : "a82024d87a107965ae274d944c844c9186ff410d" + }, + { + "alg" : "SHA-256", + "content" : "68edf1b510e0d759ec501271a5d05e3a6e425462fbb84126c16e8a6f89abdada" + }, + { + "alg" : "SHA-512", + "content" : "0f7466c4791b083e38e5a6f4631b03317f57bdeee6bf1d152a4b75830bf652c80e1f9707b3f64fcfd5f790886eb55279a4c33fbebbb42b5c97066cb3010b1137" + }, + { + "alg" : "SHA-384", + "content" : "b3d6d9512709e1c5f02b86775501c64c0bd81e76a97e399d2928646584f0f4feff5ea922e45c16865f4749bd4301eea7" + }, + { + "alg" : "SHA3-384", + "content" : "e81ec5efa79028a6eb8c58501023882c1f15142659ce3893b4a862b7b7b867397d7c67eb519f972c856979fb728c93a1" + }, + { + "alg" : "SHA3-256", + "content" : "5cad01acc7d3ad12c6da20ef43aa7b8be20bf6b69a59fc532b734ed2d331d00b" + }, + { + "alg" : "SHA3-512", + "content" : "dd6502ca14b0ca1283746748a4dccbe57e150f1d031965dc543baadf520321e1c396a6d94f1f99d7ab23af04edc6be200aa56655066eb0d23d1a7b8367397be1" + } + ], + "licenses" : [ + { + "license" : { + "id" : "Apache-2.0", + "url" : "https://www.apache.org/licenses/LICENSE-2.0" + } + } + ], + "purl" : "pkg:maven/org.apache.maven/maven-settings@3.9.9?type=jar", + "externalReferences" : [ + { + "type" : "website", + "url" : "https://maven.apache.org/ref/3.9.9/maven-settings/" + }, + { + "type" : "build-system", + "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/" + }, + { + "type" : "distribution", + "url" : "https://maven.apache.org/download.html" + }, + { + "type" : "distribution-intake", + "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" + }, + { + "type" : "issue-tracker", + "url" : "https://issues.apache.org/jira/browse/MNG" + }, + { + "type" : "mailing-list", + "url" : "https://lists.apache.org/list.html?us...@maven.apache.org" + }, + { + "type" : "vcs", + "url" : "https://github.com/apache/maven/tree/maven-3.9.9/maven-settings" + } + ] + }, + { + "type" : "library", + "bom-ref" : "pkg:maven/org.apache.maven/maven-settings-builder@3.9.9?type=jar", + "publisher" : "The Apache Software Foundation", + "group" : "org.apache.maven", + "name" : "maven-settings-builder", + "version" : "3.9.9", + "description" : "The effective settings builder, with inheritance and password decryption.", + "scope" : "required", + "hashes" : [ + { + "alg" : "MD5", + "content" : "4fb4ae61642d42cba66821d8698a670a" + }, + { + "alg" : "SHA-1", + "content" : "71a9bee9618839ffaf7c0de3b53ac1c408b57ae0" + }, + { + "alg" : "SHA-256", + "content" : "094640f3fdce47250cb06968a143f40c4e2f1c22be979c73caac2f49f3c38373" + }, + { + "alg" : "SHA-512", + "content" : "aa2b61dd81291b30e627e1894d8336d68b2f4cb99cedf087cc7081d6f3b6685a33c943e3fb04a851fd7635c916f2d0fb8dd705067ea67d13fc43d08025cec19a" + }, + { + "alg" : "SHA-384", + "content" : "3dbfab791cb5a9d27a89c6277f4a9a9e376a8064db0fb208514bbd1ee6a47ac1b2e573402814c313977d2377401cb9b4" + }, + { + "alg" : "SHA3-384", + "content" : "3cbd4352a5d05fc16e305e6cb5ac98b675a51cdab7ac3c8c59dd9d0272c9f82813e06be233604879f198530a7362433b" + }, + { + "alg" : "SHA3-256", + "content" : "abdce4df1cef68ac91b1b307127d3c3c2ce902f1ace17de96c5ff2a6aa54d368" + }, + { + "alg" : "SHA3-512", + "content" : "9b798693e04c6bc23a48c7880e29df42bbb6fa00e144d95c2aea07f2689ccd1618b9fd986a0c05830a120310e5e43d67d1944b19d49dd10113f70c22856ddcf2" + } + ], + "licenses" : [ + { + "license" : { + "id" : "Apache-2.0", + "url" : "https://www.apache.org/licenses/LICENSE-2.0" + } + } + ], + "purl" : "pkg:maven/org.apache.maven/maven-settings-builder@3.9.9?type=jar", + "externalReferences" : [ + { + "type" : "website", + "url" : "https://maven.apache.org/ref/3.9.9/maven-settings-builder/" + }, + { + "type" : "build-system", + "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/" + }, + { + "type" : "distribution", + "url" : "https://maven.apache.org/download.html" + }, + { + "type" : "distribution-intake", + "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" + }, + { + "type" : "issue-tracker", + "url" : "https://issues.apache.org/jira/browse/MNG" + }, + { + "type" : "mailing-list", + "url" : "https://lists.apache.org/list.html?us...@maven.apache.org" + }, + { + "type" : "vcs", + "url" : "https://github.com/apache/maven/tree/maven-3.9.9/maven-settings-builder" + } + ] + }, + { + "type" : "library", + "bom-ref" : "pkg:maven/org.codehaus.plexus/plexus-sec-dispatcher@2.0?type=jar", + "publisher" : "Codehaus Plexus", + "group" : "org.codehaus.plexus", + "name" : "plexus-sec-dispatcher", + "version" : "2.0", + "description" : "The Plexus project provides a full software stack for creating and executing software projects.", + "scope" : "required", + "hashes" : [ + { + "alg" : "MD5", + "content" : "e68635a721630177ac70173e441336b6" + }, + { + "alg" : "SHA-1", + "content" : "f89c5080614ffd0764e49861895dbedde1b47237" + }, + { + "alg" : "SHA-256", + "content" : "873139960c4c780176dda580b003a2c4bf82188bdce5bb99234e224ef7acfceb" + }, + { + "alg" : "SHA-512", + "content" : "ad4e814c8baff780a4eee064903e52b09ae00420a59fb075ef72dbb8d64d12d3d5009b03d56c15f93587d931c3a7f06cad6351ab2dc9415ccc6eeab0daebeb07" + }, + { + "alg" : "SHA-384", + "content" : "4af3426b6409cce7d5fcda4e2af407fc2dbae9873e06d98332bcd032c0039d9080a291e42223ea2bbef9825d3d63493f" + }, + { + "alg" : "SHA3-384", + "content" : "41720858dd5804f9cb26a8878c16dbdf0372a90e99c037809fe76c3de2c5517ba252af8f8cdf534c1a09900702e6a917" + }, + { + "alg" : "SHA3-256", + "content" : "50fa723aefb551a3fd5888375d01f1d776c534cdf833baea392818e9bfa8166e" + }, + { + "alg" : "SHA3-512", + "content" : "a43f823d31b377c0c7ec8d36ace69e5dbcdaf4dc4ebb45ff0561fea9e12d74c06090ee24b29b06769d4031693faf5d7e3146583d3a64bfaef6b7c79773a8831f" + } + ], + "licenses" : [ + { + "license" : { + "id" : "Apache-2.0" + } + } + ], + "purl" : "pkg:maven/org.codehaus.plexus/plexus-sec-dispatcher@2.0?type=jar", + "externalReferences" : [ + { + "type" : "website", + "url" : "https://codehaus-plexus.github.io/plexus-sec-dispatcher/" + }, + { + "type" : "distribution-intake", + "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" + }, + { + "type" : "issue-tracker", + "url" : "https://github.com/codehaus-plexus/plexus-sec-dispatcher/issues" + }, + { + "type" : "mailing-list", + "url" : "http://archive.plexus.codehaus.org/user" + }, + { + "type" : "vcs", + "url" : "https://github.com/codehaus-plexus/plexus-sec-dispatcher.git" + } + ] + }, + { + "type" : "library", + "bom-ref" : "pkg:maven/org.codehaus.plexus/plexus-cipher@2.0?type=jar", + "publisher" : "Codehaus Plexus", + "group" : "org.codehaus.plexus", + "name" : "plexus-cipher", + "version" : "2.0", + "description" : "The Plexus project provides a full software stack for creating and executing software projects.", + "scope" : "required", + "hashes" : [ + { + "alg" : "MD5", + "content" : "55d612839faf248cbe3e273969c002c2" + }, + { + "alg" : "SHA-1", + "content" : "425ea8e534716b4bff1ea90f39bd76be951d651b" + }, + { + "alg" : "SHA-256", + "content" : "9a7f1b5c5a9effd61eadfd8731452a2f76a8e79111fac391ef75ea801bea203a" + }, + { + "alg" : "SHA-512", + "content" : "8f187b07867a7c29d77454aae4b76479300238d9c4e777c1afa2aebe33b88dab916e29111dd55acac1341849f4579fe91a5470fdd45ccba0e05709c2ce3a1d65" + }, + { + "alg" : "SHA-384", + "content" : "6973eefe06a8992aa8db1775c0f43a84cbef54eeea9122a5a30c362af3e4fb13b6cbd6fba229142e2a4495f97d71f409" + }, + { + "alg" : "SHA3-384", + "content" : "ea780d218f96e61005c5582bf3785ddbb33b53ccb4efbffd76ab58166cf261d3c256d52fea28759380684b7e9b0db8eb" + }, + { + "alg" : "SHA3-256", + "content" : "e2e51d5350ffdce341464ddcdf9ae60108bff40bf5174dc6be43e33ffcd84af9" + }, + { + "alg" : "SHA3-512", + "content" : "f3e17ea31bdefc8094ba3495b8231ec7f90c7175839b009d9fd230110b66ac4c68c912fda1a6e644d93dbce639d738e2535f1ade5841e072a604f5f8ac536729" + } + ], + "licenses" : [ + { + "license" : { + "id" : "Apache-2.0" + } + } + ], + "purl" : "pkg:maven/org.codehaus.plexus/plexus-cipher@2.0?type=jar", + "externalReferences" : [ + { + "type" : "website", + "url" : "https://codehaus-plexus.github.io/plexus-cipher/" + }, + { + "type" : "distribution-intake", + "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" + }, + { + "type" : "issue-tracker", + "url" : "https://github.com/codehaus-plexus/plexus-cipher/issues" + }, + { + "type" : "mailing-list", + "url" : "http://archive.plexus.codehaus.org/user" + }, + { + "type" : "vcs", + "url" : "http://github.com/codehaus-plexus/plexus-cipher" + } + ] + }, + { + "type" : "library", + "bom-ref" : "pkg:maven/org.apache.maven/maven-builder-support@3.9.9?type=jar", + "publisher" : "The Apache Software Foundation", + "group" : "org.apache.maven", + "name" : "maven-builder-support", + "version" : "3.9.9", + "description" : "Support for descriptor builders (model, setting, toolchains)", + "scope" : "required", + "hashes" : [ + { + "alg" : "MD5", + "content" : "0266bb9314b63d9fde8aff0d190f48d6" + }, + { + "alg" : "SHA-1", + "content" : "812c13c808e42c54d3f4abdaab603e5262bf8ab8" + }, + { + "alg" : "SHA-256", + "content" : "2ca4a967bdd12a9e85d40e012374f86e63d4a1030c199da4832e3d0a1c6770d8" + }, + { + "alg" : "SHA-512", + "content" : "ea4c95e9b4ee9078b464ca9002857a149d2fd0bbc5fa79e3984ce981c37de0b18b3be03574b909ba4fc330a70387fef2ccbdac4dba029c11dd5cd53375f9be7a" + }, + { + "alg" : "SHA-384", + "content" : "56f102530fdf58549e9470949bd46d6bcd99eb619da435ea6c0579776e77b06b5b1e8faf76b9c6c0b4d1862bbc9747a2" + }, + { + "alg" : "SHA3-384", + "content" : "096b894a7e0aac0801816be8cd439b0825710a2c5dd3a9a64f3c6cadd8d96b2ceb1d635c0c3a52fd4b2393eb774fadf1" + }, + { + "alg" : "SHA3-256", + "content" : "a411474232b09f28bb48a74543df102c9aa4f324bc31c4e041c475024e835093" + }, + { + "alg" : "SHA3-512", + "content" : "e0764cdfafc85f8504fc1e457ff564f70a124de065c89b120f449d01812a9b4e6b26cfa171ed1f81563cd54db0b16ad049903c52e6ca82f1e632df3c4e8025a7" + } + ], + "licenses" : [ + { + "license" : { + "id" : "Apache-2.0", + "url" : "https://www.apache.org/licenses/LICENSE-2.0" + } + } + ], + "purl" : "pkg:maven/org.apache.maven/maven-builder-support@3.9.9?type=jar", + "externalReferences" : [ + { + "type" : "website", + "url" : "https://maven.apache.org/ref/3.9.9/maven-builder-support/" + }, + { + "type" : "build-system", + "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/" + }, + { + "type" : "distribution", + "url" : "https://maven.apache.org/download.html" + }, + { + "type" : "distribution-intake", + "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" + }, + { + "type" : "issue-tracker", + "url" : "https://issues.apache.org/jira/browse/MNG" + }, + { + "type" : "mailing-list", + "url" : "https://lists.apache.org/list.html?us...@maven.apache.org" + }, + { + "type" : "vcs", + "url" : "https://github.com/apache/maven/tree/maven-3.9.9/maven-builder-support" + } + ] + }, + { + "type" : "library", + "bom-ref" : "pkg:maven/org.apache.maven/maven-repository-metadata@3.9.9?type=jar", + "publisher" : "The Apache Software Foundation", + "group" : "org.apache.maven", + "name" : "maven-repository-metadata", + "version" : "3.9.9", + "description" : "Per-directory local and remote repository metadata.", + "scope" : "required", + "hashes" : [ + { + "alg" : "MD5", + "content" : "d341cdcc9abac2d01546301a305f12b3" + }, + { + "alg" : "SHA-1", + "content" : "33a43f0af3371225d1dcaaa20a824df59c692172" + }, + { + "alg" : "SHA-256", + "content" : "137c297e6a52d489b76663c82324d54e40f5d498a8fc015c0203fd91df8623b0" + }, + { + "alg" : "SHA-512", + "content" : "07d1cd2e99588c43835815f5acdf2cb163288041c803cbb8597c81d5a583a5abc553628fdaaa5a22b4bf7a579aa88155e3e5e27c63c31ba4cab74126f7b35824" + }, + { + "alg" : "SHA-384", + "content" : "f088d97c86378ecb5312f79183aa2e469ff1efe28d0244fa7d86cc37f6bf6fa7b277cba016541967d289fbc474bb2305" + }, + { + "alg" : "SHA3-384", + "content" : "332e75f31f8adfad22990c0a612ec12aab085923f3d425453c25275e177daa2feeade1ff22743a4e5f67d33130ae866a" + }, + { + "alg" : "SHA3-256", + "content" : "40356485644aed030cc175fd8d00443a63a3f1384180edcb1be98ccad67081db" + }, + { + "alg" : "SHA3-512", + "content" : "1d8320d0c4421696705f3a4737ed7c4cb5de37a3b0873abbe19e2a57092b1f0c405b2987c8e3c3931105c1a518f92d304c92b394018842f1cde98fd259488482" + } + ], + "licenses" : [ + { + "license" : { + "id" : "Apache-2.0", + "url" : "https://www.apache.org/licenses/LICENSE-2.0" + } + } + ], + "purl" : "pkg:maven/org.apache.maven/maven-repository-metadata@3.9.9?type=jar", + "externalReferences" : [ + { + "type" : "website", + "url" : "https://maven.apache.org/ref/3.9.9/maven-repository-metadata/" + }, + { + "type" : "build-system", + "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/" + }, + { + "type" : "distribution", + "url" : "https://maven.apache.org/download.html" + }, + { + "type" : "distribution-intake", + "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" + }, + { + "type" : "issue-tracker", + "url" : "https://issues.apache.org/jira/browse/MNG" + }, + { + "type" : "mailing-list", + "url" : "https://lists.apache.org/list.html?us...@maven.apache.org" + }, + { + "type" : "vcs", + "url" : "https://github.com/apache/maven/tree/maven-3.9.9/maven-repository-metadata" + } + ] + }, + { + "type" : "library", + "bom-ref" : "pkg:maven/org.apache.maven/maven-model-builder@3.9.9?type=jar", + "publisher" : "The Apache Software Foundation", + "group" : "org.apache.maven", + "name" : "maven-model-builder", + "version" : "3.9.9", + "description" : "The effective model builder, with inheritance, profile activation, interpolation, ...", + "scope" : "required", + "hashes" : [ + { + "alg" : "MD5", + "content" : "a48ea3e9ceec85a9bff88e88048148d9" + }, + { + "alg" : "SHA-1", + "content" : "6dcd87768eb615301aef0c2221dd168a2d36bc7b" + }, + { + "alg" : "SHA-256", + "content" : "a4377182ac2e5adfe16be3b3c81981a5ecddab014184de72ae1e522f04a77602" + }, + { + "alg" : "SHA-512", + "content" : "558ca7b03233b8d38aca3f2f142e0b4a64d576c92e6b5a8921061eb8c83614d8074845e8656fb77b983711e64db9d145f385a0d1a3ae5bf26805b93a6c4ce041" + }, + { + "alg" : "SHA-384", + "content" : "5ba902dee188aafc6cecb1f9eab759116d00158e0812811f6775654a3f5a73b0b6b429c20e9c727ac157643627b72c27" + }, + { + "alg" : "SHA3-384", + "content" : "364b44bbff164b35ab770c329592560b1f12037bf466137b137db7434877570ad815a9d2027fcf2ebd35275f29ef7cd0" + }, + { + "alg" : "SHA3-256", + "content" : "fd2bd5e3ff91d9c5f405d0c584e4a71f91a1ac5c82e8cfb729f78f13ed73c8d2" + }, + { + "alg" : "SHA3-512", + "content" : "cd2692abcdbf1c0c9adf3ac0210b4f923b6f3497618bf1337d60133e377569b45399f6b3994d73558e9f8ef890192a7bbbb0f674d36ebd482ca5396abfc85ffb" + } + ], + "licenses" : [ + { + "license" : { + "id" : "Apache-2.0", + "url" : "https://www.apache.org/licenses/LICENSE-2.0" + } + } + ], + "purl" : "pkg:maven/org.apache.maven/maven-model-builder@3.9.9?type=jar", + "externalReferences" : [ + { + "type" : "website", + "url" : "https://maven.apache.org/ref/3.9.9/maven-model-builder/" + }, + { + "type" : "build-system", + "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/" + }, + { + "type" : "distribution", + "url" : "https://maven.apache.org/download.html" + }, + { + "type" : "distribution-intake", + "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" + }, + { + "type" : "issue-tracker", + "url" : "https://issues.apache.org/jira/browse/MNG" + }, + { + "type" : "mailing-list", + "url" : "https://lists.apache.org/list.html?us...@maven.apache.org" + }, + { + "type" : "vcs", + "url" : "https://github.com/apache/maven/tree/maven-3.9.9/maven-model-builder" + } + ] + }, + { + "type" : "library", + "bom-ref" : "pkg:maven/org.apache.maven/maven-resolver-provider@3.9.9?type=jar", + "publisher" : "The Apache Software Foundation", + "group" : "org.apache.maven", + "name" : "maven-resolver-provider", + "version" : "3.9.9", + "description" : "Extensions to Maven Resolver for utilizing Maven POM and repository metadata.", + "scope" : "required", + "hashes" : [ + { + "alg" : "MD5", + "content" : "ea2fccfc4c499dbaa570a26da14050d9" + }, + { + "alg" : "SHA-1", + "content" : "ea361822cd25ae6c9153c594aef805e853031224" + }, + { + "alg" : "SHA-256", + "content" : "5dea05049c94f952f48ce2bfe0111afdf986acc591fcc11d23fe3b8dcb70291e" + }, + { + "alg" : "SHA-512", + "content" : "6dcb398c60080cbeaac396df5e565a44e29c9ecffb440d17ca819c2e3e7a86b933e7346eb11c409cad02e2bc97c9ae5f10bc5c4e7d6f5fe81652a7e1d99f9c0f" + }, + { + "alg" : "SHA-384", + "content" : "170d7d6271574947baff824cfd36e00fa20ea1cefc361c27af52a96f45ac7b7fe23edfd0adfd483f121f2cc63491ad39" + }, + { + "alg" : "SHA3-384", + "content" : "4223458ae362fc39853aa5538bd99ec00be1af4e41859b00f3937e9922f8353db51248dd06f88865f67b2296b1920724" + }, + { + "alg" : "SHA3-256", + "content" : "96ad201686d5c420903bab2ac170dfae7b66cc6faadd4dff84dbe981573bbeec" + }, + { + "alg" : "SHA3-512", + "content" : "c2c4610bcc74f5d11b145b58d6f11f74a2f74b8fe95f725f11177a8b930563bbd7ffc49b0b712c2534c0702f3329b75966b1dafe6d4777ec641fe1c45e19f117" + } + ], + "licenses" : [ + { + "license" : { + "id" : "Apache-2.0", + "url" : "https://www.apache.org/licenses/LICENSE-2.0" + } + } + ], + "purl" : "pkg:maven/org.apache.maven/maven-resolver-provider@3.9.9?type=jar", + "externalReferences" : [ + { + "type" : "website", + "url" : "https://maven.apache.org/ref/3.9.9/maven-resolver-provider/" + }, + { + "type" : "build-system", + "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/" + }, + { + "type" : "distribution", + "url" : "https://maven.apache.org/download.html" + }, + { + "type" : "distribution-intake", + "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" + }, + { + "type" : "issue-tracker", + "url" : "https://issues.apache.org/jira/browse/MNG" + }, + { + "type" : "mailing-list", + "url" : "https://lists.apache.org/list.html?us...@maven.apache.org" + }, + { + "type" : "vcs", + "url" : "https://github.com/apache/maven/tree/maven-3.9.9/maven-resolver-provider" + } + ] + }, + { + "type" : "library", + "bom-ref" : "pkg:maven/org.apache.maven.resolver/maven-resolver-impl@1.9.22?type=jar", + "publisher" : "The Apache Software Foundation", + "group" : "org.apache.maven.resolver", + "name" : "maven-resolver-impl", + "version" : "1.9.22", + "description" : "An implementation of the repository system.", + "scope" : "required", + "hashes" : [ + { + "alg" : "MD5", + "content" : "965f1348220f046c6cbde059c971685d" + }, + { + "alg" : "SHA-1", + "content" : "19b7a728c9000f8db615f64552d95fe74b413617" + }, + { + "alg" : "SHA-256", + "content" : "e4dafb8acc13d736377c02d2170d869438dd74b98b860745909d238726babcbb" + }, + { + "alg" : "SHA-512", + "content" : "82c9ff9c9505e6350983a5a90ef16c64e67f2cb21779e56f5ad02979591f8f2cd12ced6bba066fd0bdfaf6be07d39edf9cecada35d16002a8005711602001d90" + }, + { + "alg" : "SHA-384", + "content" : "adaca9b851a5f354f5ea1cda398b1d5b910d4c0fac21a33bfa0a44d40ed19cf63afe99f81fc7718293496421ef64777c" + }, + { + "alg" : "SHA3-384", + "content" : "69dab881fcf9f2b45881899f14ca2c0d885f9de6621d0109887654b6b3f92978b21733348dba75eddd588bd8144da83e" + }, + { + "alg" : "SHA3-256", + "content" : "b35dea4f939c188e848878b6a3331e6312964ff0258833375c6b975d70cd71a8" + }, + { + "alg" : "SHA3-512", + "content" : "dc7a39b8a50f5633194a3f070208e2eda099b88226a4d8728c9c4f4bc876e4eba1a7bb018870e1cf414cf31e5bcb214c2b64393c79d8f498b1c380630698f70d" + } + ], + "licenses" : [ + { + "license" : { + "id" : "Apache-2.0", + "url" : "https://www.apache.org/licenses/LICENSE-2.0" + } + } + ], + "purl" : "pkg:maven/org.apache.maven.resolver/maven-resolver-impl@1.9.22?type=jar", + "externalReferences" : [ + { + "type" : "website", + "url" : "https://maven.apache.org/resolver/maven-resolver-impl/" + }, + { + "type" : "build-system", + "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-resolver/" + }, + { + "type" : "distribution-intake", + "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" + }, + { + "type" : "issue-tracker", + "url" : "https://issues.apache.org/jira/browse/MRESOLVER" + }, + { + "type" : "mailing-list", + "url" : "https://lists.apache.org/list.html?us...@maven.apache.org" + }, + { + "type" : "vcs", + "url" : "https://github.com/apache/maven-resolver/tree/maven-resolver-1.9.22/maven-resolver-impl" + } + ] + }, + { + "type" : "library", + "bom-ref" : "pkg:maven/org.apache.maven.resolver/maven-resolver-named-locks@1.9.22?type=jar", + "publisher" : "The Apache Software Foundation", + "group" : "org.apache.maven.resolver", + "name" : "maven-resolver-named-locks", + "version" : "1.9.22", + "description" : "A synchronization utility implementation using Named locks.", + "scope" : "required", + "hashes" : [ + { + "alg" : "MD5", + "content" : "3d3855f4775bc27f9962f999ea88919b" + }, + { + "alg" : "SHA-1", + "content" : "121433b079aad9be7ed266b19f2122eeb0e2d111" + }, + { + "alg" : "SHA-256", + "content" : "0685f29ec3b548d9b6917c527f13c667685a3394b955aaa5b25d0559818b7fc5" + }, + { + "alg" : "SHA-512", + "content" : "f77654e42e551bfa6ef1e737501123dd1a4faca6cee7eceddad358c7c66e27ece0dbaae7abcf1b8422344e92b5bd5beeb43b8ca3637bc7b0c06cc87ee1d54792" + }, + { + "alg" : "SHA-384", + "content" : "4130344d40d9054360be193e9b7712b708b9b1cd95fac22e13f980366b1e341e8fe0a6a7bd555836e7ff1bd980844722" + }, + { + "alg" : "SHA3-384", + "content" : "5446d9a0d6ec6846b33ed718cedeb1eae9df55a08a1005c88e3a5734f1097ce8ef4c6208a70c21ae9d15a7a2a3139e94" + }, + { + "alg" : "SHA3-256", + "content" : "75af3978ed7eff2d40330beb06c38d8a2df8c31c592f2d0417aecc9e32a491bf" + }, + { + "alg" : "SHA3-512", + "content" : "0dff59894683f076e09adb05dca30db2ab9ea8fef3b8280437b10be65e649175f7a5e684177891fe6661af6e86a464521e24f7559090dd7d8f7625452ec8cac2" + } + ], + "licenses" : [ + { + "license" : { + "id" : "Apache-2.0", + "url" : "https://www.apache.org/licenses/LICENSE-2.0" + } + } + ], + "purl" : "pkg:maven/org.apache.maven.resolver/maven-resolver-named-locks@1.9.22?type=jar", + "externalReferences" : [ + { + "type" : "website", + "url" : "https://maven.apache.org/resolver/maven-resolver-named-locks/" + }, + { + "type" : "build-system", + "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-resolver/" + }, + { + "type" : "distribution-intake", + "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" + }, + { + "type" : "issue-tracker", + "url" : "https://issues.apache.org/jira/browse/MRESOLVER" + }, + { + "type" : "mailing-list", + "url" : "https://lists.apache.org/list.html?us...@maven.apache.org" + }, + { + "type" : "vcs", + "url" : "https://github.com/apache/maven-resolver/tree/maven-resolver-1.9.22/maven-resolver-named-locks" + } + ] + }, + { + "type" : "library", + "bom-ref" : "pkg:maven/org.apache.maven.resolver/maven-resolver-spi@1.9.22?type=jar", + "publisher" : "The Apache Software Foundation", + "group" : "org.apache.maven.resolver", + "name" : "maven-resolver-spi", + "version" : "1.9.22", + "description" : "The service provider interface for repository system implementations and repository connectors.", + "scope" : "required", + "hashes" : [ + { + "alg" : "MD5", + "content" : "7ae784f1d4088fff396386ed6966cafc" + }, + { + "alg" : "SHA-1", + "content" : "c3101acaa4ec053557028cf1917f1d22112b100d" + }, + { + "alg" : "SHA-256", + "content" : "99ad721e4631d9bd0c4f9e29c869672577c66f2a674a5723ce38eff13c75cbfd" + }, + { + "alg" : "SHA-512", + "content" : "3a1e31d872659834cb59a82bd0118fb26ef983e5004849a9a38f80bea344f2d919aa73f142fc605601b8236c431a891a6e98fd8760e7b11aa6a3d7d4862ee009" + }, + { + "alg" : "SHA-384", + "content" : "8ae4ccfcd203dee8263c6db10061f6afefc5a95903f43ad99f237c92300348ac1dbfdbf22042aefd5bdce86c58e4637f" + }, + { + "alg" : "SHA3-384", + "content" : "efcfbeb1c69bbfc880d624d24b9376ce07c703df64505776d91b8574ba2292526dbe4ae592bbafde971d2c7feca2617c" + }, + { + "alg" : "SHA3-256", + "content" : "5e12347c1f0125eea11c00859b4d02c6b7c4f1ea2af305a68b5c2579983d6af0" + }, + { + "alg" : "SHA3-512", + "content" : "8953a2b8bfc66d3ea6f5ec52c87838759b79624485e08c4ecfafbf05521ccc73e9cf724e3dee643975d10b6b5b0d37caf6cd316823074f5cfd49bd05899cec96" + } + ], + "licenses" : [ + { + "license" : { + "id" : "Apache-2.0", + "url" : "https://www.apache.org/licenses/LICENSE-2.0" + } + } + ], + "purl" : "pkg:maven/org.apache.maven.resolver/maven-resolver-spi@1.9.22?type=jar", + "externalReferences" : [ + { + "type" : "website", + "url" : "https://maven.apache.org/resolver/maven-resolver-spi/" + }, + { + "type" : "build-system", + "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-resolver/" + }, + { + "type" : "distribution-intake", + "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" + }, + { + "type" : "issue-tracker", + "url" : "https://issues.apache.org/jira/browse/MRESOLVER" + }, + { + "type" : "mailing-list", + "url" : "https://lists.apache.org/list.html?us...@maven.apache.org" + }, + { + "type" : "vcs", + "url" : "https://github.com/apache/maven-resolver/tree/maven-resolver-1.9.22/maven-resolver-spi" + } + ] + }, + { + "type" : "library", + "bom-ref" : "pkg:maven/org.apache.maven.shared/maven-shared-utils@3.4.2?type=jar", + "publisher" : "The Apache Software Foundation", + "group" : "org.apache.maven.shared", + "name" : "maven-shared-utils", + "version" : "3.4.2", + "description" : "Shared utilities for use by Maven core and plugins", + "scope" : "required", + "hashes" : [ + { + "alg" : "MD5", + "content" : "53a038f77a81cb5816ad2b1c7daa8711" + }, + { + "alg" : "SHA-1", + "content" : "bfa28296272a5915b08de9f11f34a94b0a818fd0" + }, + { + "alg" : "SHA-256", + "content" : "b613357e1bad4dfc1dead801691c9460f9585fe7c6b466bc25186212d7d18487" + }, + { + "alg" : "SHA-512", + "content" : "71db8a485a6436cb305276ea9d748f578e1a8ffa1346c8570f7038684ce53d320584174634aeffa1b51629af0171a2d6572854eb07236a83236ad1d9949988e9" + }, + { + "alg" : "SHA-384", + "content" : "8f7e2c449282244fea3151ac0c956b42bb7ae6cb2397ca8b18952aea802d33cccad6e08a5f515fc34e52bacfece18862" + }, + { + "alg" : "SHA3-384", + "content" : "72ec6c2c5de8cd074bd59dbb8215005bedc9de58795484ec2792fa867eaf13547aaca81daaf06f1ec117d29b21e70cd0" + }, + { + "alg" : "SHA3-256", + "content" : "5cf6de29555bde0317d641e8a7afd7d1ed84dddff92c80f8493b4a2873d26c41" + }, + { + "alg" : "SHA3-512", + "content" : "836acb2525ddc3b352da7db824e00c0831b25f46cb32a77c1e578b39978621e3c47da3554a901749af15b3981620875a4c4492f421a1833d8eb8e50c4804eff8" + } + ], + "licenses" : [ + { + "license" : { + "id" : "Apache-2.0", + "url" : "https://www.apache.org/licenses/LICENSE-2.0" + } + } + ], + "purl" : "pkg:maven/org.apache.maven.shared/maven-shared-utils@3.4.2?type=jar", + "externalReferences" : [ + { + "type" : "website", + "url" : "https://maven.apache.org/shared/maven-shared-utils/" + }, + { + "type" : "build-system", + "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-shared-utils/" + }, + { + "type" : "distribution-intake", + "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" + }, + { + "type" : "issue-tracker", + "url" : "https://issues.apache.org/jira/issues/?jql=project%20%3D%20MSHARED%20AND%20component%20%3D%20maven-shared-utils" + }, + { + "type" : "mailing-list", + "url" : "https://lists.apache.org/list.html?us...@maven.apache.org" + }, + { + "type" : "vcs", + "url" : "https://github.com/apache/maven-shared-utils/tree/maven-shared-utils-3.4.2" + } + ] + }, + { + "type" : "library", + "bom-ref" : "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.9.0.M3?type=jar", + "publisher" : "The Eclipse Foundation", + "group" : "org.eclipse.sisu", + "name" : "org.eclipse.sisu.plexus", + "version" : "0.9.0.M3", + "description" : "Plexus-JSR330 adapter; adds Plexus support to the Sisu-Inject container", + "scope" : "required", + "hashes" : [ + { + "alg" : "MD5", + "content" : "964e7bc9837b270566f18b87af65f5d7" + }, + { + "alg" : "SHA-1", + "content" : "b493c7abcc6e04fa0a6a20d489a3db0395c76f70" + }, + { + "alg" : "SHA-256", + "content" : "c99674d3773e26154885661711f0b6d63aa5008f5cc99227a236756d4ad9de5e" + }, + { + "alg" : "SHA-512", + "content" : "68c5df01ad522917d954b62cb3b11376b3446920e8d5cb35737de508e6acd91a36b34144933f427bbe1d29dca9097ba9dd2431c713fe18069f271a80b519f051" + }, + { + "alg" : "SHA-384", + "content" : "bd39a6cc9c18c62e64393da231b61efbf5bdeb8c0306e455bbc6e33f4b614e14023ccfbec83c943994da6684ab453092" + }, + { + "alg" : "SHA3-384", + "content" : "aa3ca83152de61ee92ba94f655190b61aa25520db903489656485a56aa9314a453a91284c0fb377dffb8160580a610c2" + }, + { + "alg" : "SHA3-256", + "content" : "434081d9dbbd4ffedafa88010d4db9a699fd2bc736e8b12b3bf3cede21f30aa9" + }, + { + "alg" : "SHA3-512", + "content" : "86e4c864bdfcbcb7d58ac08d80b2c1406cadf10424c92889d1cb181f924af19b28d53210f77cb2b0515faa7ac6fff2dacd25ae1b62c419a798bdfd2a9f3108ae" + } + ], + "licenses" : [ + { + "license" : { + "id" : "EPL-2.0" + } + } + ], + "purl" : "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.9.0.M3?type=jar", + "externalReferences" : [ + { + "type" : "website", + "url" : "http://www.eclipse.org/sisu/org.eclipse.sisu.plexus/" + }, + { + "type" : "build-system", + "url" : "https://ci.eclipse.org/sisu/job/sisu.inject/" + }, + { + "type" : "distribution-intake", + "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" + }, + { + "type" : "issue-tracker", + "url" : "https://github.com/eclipse/sisu.inject/issues" + }, + { + "type" : "mailing-list", + "url" : "http://dev.eclipse.org/mhonarc/lists/sisu-dev/" + }, + { + "type" : "vcs", + "url" : "https://github.com/eclipse/sisu.inject/org.eclipse.sisu.plexus" + } + ] + }, + { + "type" : "library", + "bom-ref" : "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.9.0.M3?type=jar", + "publisher" : "The Eclipse Foundation", + "group" : "org.eclipse.sisu", + "name" : "org.eclipse.sisu.inject", + "version" : "0.9.0.M3", + "description" : "JSR330-based container; supports classpath scanning, auto-binding, and dynamic auto-wiring", + "scope" : "required", + "hashes" : [ + { + "alg" : "MD5", + "content" : "643a13084e0ac59cdda06319e1b348ea" + }, + { + "alg" : "SHA-1", + "content" : "3665002ba4d16dfa779ef658a63d0608c4bd898b" + }, + { + "alg" : "SHA-256", + "content" : "15335c4dcf082f599fb8eddcfb58d6a7e9a9c97de2883c257089a479b9b24522" + }, + { + "alg" : "SHA-512", + "content" : "76267078f3dd887fd7c4a0931d0ae057d5f51478f712ce4bb5530cfa5c2aa18a8dbe935b32c1afb01a4e2cde44d30579baf5868b8b63ee066ea0714fd9d8a81c" + }, + { + "alg" : "SHA-384", + "content" : "d24164f8aaae165de8533530b90168228e7d107a5eeb63997bf6e2d41f1adfaabf29aa9ab4f08e3445c69aa57f6c09b8" + }, + { + "alg" : "SHA3-384", + "content" : "aab9bce13f047bcdd8d47420f80e88a314f3566bf7edcd7d37cf286865f45586fda8745793eb2a54c506759f9654bd5b" + }, + { + "alg" : "SHA3-256", + "content" : "d9e302304b0f99703243f697f72b12e42df692553c08ef9d2d2e0eb83847eab7" + }, + { + "alg" : "SHA3-512", + "content" : "8ac0b60618e01e819fcabcfd210176310d98f9856b49cafd5dfb451393b791b1ed43fc17e359c5868662dc76e0059e23a152c5564f7ce94ca4720bd092cb29d0" + } + ], + "licenses" : [ + { + "license" : { + "id" : "EPL-2.0" + } + } + ], + "purl" : "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.9.0.M3?type=jar", + "externalReferences" : [ + { + "type" : "website", + "url" : "http://www.eclipse.org/sisu/org.eclipse.sisu.inject/" + }, + { + "type" : "build-system", + "url" : "https://ci.eclipse.org/sisu/job/sisu.inject/" + }, + { + "type" : "distribution-intake", + "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" + }, + { + "type" : "issue-tracker", + "url" : "https://github.com/eclipse/sisu.inject/issues" + }, + { + "type" : "mailing-list", + "url" : "http://dev.eclipse.org/mhonarc/lists/sisu-dev/" + }, + { + "type" : "vcs", + "url" : "https://github.com/eclipse/sisu.inject/org.eclipse.sisu.inject" + } + ] + }, + { + "type" : "library", + "bom-ref" : "pkg:maven/com.google.inject/guice@5.1.0?type=jar", + "publisher" : "Google, Inc.", + "group" : "com.google.inject", + "name" : "guice", + "version" : "5.1.0", + "description" : "Guice is a lightweight dependency injection framework for Java 6 and above", + "scope" : "required", + "hashes" : [ + { + "alg" : "MD5", + "content" : "2560169296aa94492af34af2115e9511" + }, + { + "alg" : "SHA-1", + "content" : "da25056c694c54ba16e78e4fc35f17fc60f0d1b4" + }, + { + "alg" : "SHA-256", + "content" : "4130e50bfac48099c860f0d903b91860c81a249c90f38245f8fed58fc817bc26" + }, + { + "alg" : "SHA-512", + "content" : "b9c7a9b815d9ce387ebf6d58a71541da1be3cb8d847358133dc1f35ca45315bb9db11c13f3238adb643670759a58fd106247039f42c10759374a9b361c62e99e" + }, + { + "alg" : "SHA-384", + "content" : "1f7e6e7555c97752e2a3a7dc07473384762467c24a0fc8f4c93c0f209ef361ecd4bf2be847281798dd84f68fc8c54b2f" + }, + { + "alg" : "SHA3-384", + "content" : "59b895108174073d9889ba3e18566eb5e0785310e90dbd918dfb06af5bdf0d72e8a54094c6109090f43e242daa4d6ebf" + }, + { + "alg" : "SHA3-256", + "content" : "5a9518cdc72dd7fb8d7848500cb8c97c7689e64a52028dabf44e61a933ffd853" + }, + { + "alg" : "SHA3-512", + "content" : "5b53b7ee09cf057f83acf86de3f35fc45c04cd95c01e78b59fc1b4d9322e17ecaec1d6c5d37cd37084b602c1a74f6457342e27c6271fd140ade3190448c9fb27" + } + ], + "licenses" : [ + { + "license" : { + "id" : "Apache-2.0" + } + } + ], + "purl" : "pkg:maven/com.google.inject/guice@5.1.0?type=jar", + "externalReferences" : [ + { + "type" : "website", + "url" : "https://github.com/google/guice/guice" + }, + { + "type" : "build-system", + "url" : "https://travis-ci.org/google/guice" + }, + { + "type" : "distribution-intake", + "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" + }, + { + "type" : "issue-tracker", + "url" : "https://github.com/google/guice/issues/" + }, + { + "type" : "mailing-list", + "url" : "http://groups.google.com/group/google-guice/topics" + }, + { + "type" : "vcs", + "url" : "https://github.com/google/guice/guice" + } + ] + }, + { + "type" : "library", + "bom-ref" : "pkg:maven/aopalliance/aopalliance@1.0?type=jar", + "group" : "aopalliance", + "name" : "aopalliance", + "version" : "1.0", + "description" : "AOP Alliance", + "scope" : "required", + "hashes" : [ + { + "alg" : "MD5", + "content" : "04177054e180d09e3998808efa0401c7" + }, + { + "alg" : "SHA-1", + "content" : "0235ba8b489512805ac13a8f9ea77a1ca5ebe3e8" + }, + { + "alg" : "SHA-256", + "content" : "0addec670fedcd3f113c5c8091d783280d23f75e3acb841b61a9cdb079376a08" + }, + { + "alg" : "SHA-512", + "content" : "3f44a932d8c00cfeee2eb057bcd7c301a2d029063e0a916e1e20b3aec4877d19d67a2fd8aaf58fa2d5a00133d1602128a7f50912ffb6cabc7b0fdc7fbda3f8a1" + }, + { + "alg" : "SHA-384", + "content" : "4dddf44338b5aff9580da2532b81c0ac3e1d09e1f28c6db871a55cad442b705dd7791eb07f9d4577d49d0be3673ba783" + }, + { + "alg" : "SHA3-384", + "content" : "2bd64cbaf769c6e4e85e34f7a6119d89e16fbf55af3fc5d6cbd52eb214c367dec1ac7b9062ee0fb35a2e0acfc7c477e1" + }, + { + "alg" : "SHA3-256", + "content" : "d4a726b2bf8aa58197021a7d8fca674b4b2790d4c48de43a92f728866a91c2f0" + }, + { + "alg" : "SHA3-512", + "content" : "830bc3f8328be76897990e9b9fc42eef02623115e456af96ad09b20900ad615519c8c8de60155ac04fb332eaa9510110d52edd13911af76271c71d91cbd789cc" + } + ], + "licenses" : [ + { + "license" : { + "name" : "Public Domain" + } + } + ], + "purl" : "pkg:maven/aopalliance/aopalliance@1.0?type=jar", + "externalReferences" : [ + { + "type" : "website", + "url" : "http://aopalliance.sourceforge.net" + } + ] + }, + { + "type" : "library", + "bom-ref" : "pkg:maven/com.google.guava/guava@33.4.6-jre?type=jar", + "group" : "com.google.guava", + "name" : "guava", + "version" : "33.4.6-jre", + "description" : "Guava is a suite of core and expanded libraries that include utility classes, Google's collections, I/O classes, and much more.", + "scope" : "required", + "hashes" : [ + { + "alg" : "MD5", + "content" : "b676432575a564378de197062e060afe" + }, + { + "alg" : "SHA-1", + "content" : "4437fb72c3cc5d29554b588d9a97bea12d6a42e1" + }, + { + "alg" : "SHA-256", + "content" : "958a035b74ff6c7d0cdff9c384524b645eb618f7117b60e1ee915f9cffd0e716" + }, + { + "alg" : "SHA-512", + "content" : "21d4e09c3d3d7263938658d6f78a794b017505faa07b2c51190d72a1967cd8347c98f6d6390cc88f51488e20622dc8484beb6d99bcbeef504d21299c5b804e73" + }, + { + "alg" : "SHA-384", + "content" : "87b166e9e2ee0cadc7b51915123f6034c0ad8f969de27e854bb55c7d33363787e16a8a7bb0620e02d71ed89217ef69f9" + }, + { + "alg" : "SHA3-384", + "content" : "cf168be40761b6e1a7dacbec1bcc551ff75675784d3f7fa6a23786576960b332ee32b028d2115490fcf1470fd5c855cf" + }, + { + "alg" : "SHA3-256", + "content" : "1aa6efce4c6099959848f483f4d884248787deea5de561908df4b8dffce6fe83" + }, + { + "alg" : "SHA3-512", + "content" : "d3840cbb5514ce88adb3c8d7323a1fbef457d04492049ea64a7cb3d588d7202c7be8811a3765804bc3abe607c90fcdb983eed5e658d12e53f70719e4bd2bbda6" + } + ], + "licenses" : [ + { + "license" : { + "id" : "Apache-2.0" + } + } + ], + "purl" : "pkg:maven/com.google.guava/guava@33.4.6-jre?type=jar", + "externalReferences" : [ + { + "type" : "website", + "url" : "https://github.com/google/guava" + }, + { + "type" : "build-system", + "url" : "https://github.com/google/guava/actions" + }, + { + "type" : "distribution-intake", + "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" + }, + { + "type" : "issue-tracker", + "url" : "https://github.com/google/guava/issues" + }, + { + "type" : "vcs", + "url" : "https://github.com/google/guava/guava" + } + ] + }, + { + "type" : "library", + "bom-ref" : "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar", + "group" : "org.jspecify", + "name" : "jspecify", + "version" : "1.0.0", + "description" : "An artifact of well-named and well-specified annotations to power static analysis checks", + "scope" : "required", + "hashes" : [ + { + "alg" : "MD5", + "content" : "9133aba420d0ca3b001dbb6ae9992cf6" + }, + { + "alg" : "SHA-1", + "content" : "7425a601c1c7ec76645a78d22b8c6a627edee507" + }, + { + "alg" : "SHA-256", + "content" : "1fad6e6be7557781e4d33729d49ae1cdc8fdda6fe477bb0cc68ce351eafdfbab" + }, + { + "alg" : "SHA-512", + "content" : "efded31ef5b342f09422935076e599789076431e93a746685c0607e7de5592719ba6aacde0be670b3f064d1e85630d58d5bce6b34aed2a288fdb34f745efb7bc" + }, + { + "alg" : "SHA-384", + "content" : "814f860e5a44ead6c457676841eef471a8b87be31b84c60a8a4477a18a9cbcb6e3c2ae700969d5c5e52309d961e0537a" + }, + { + "alg" : "SHA3-384", + "content" : "c8844e5b71e5ecfbb7366097ce34af2f5863d86d5ccc3f9ec384d8ade4b60ccc8124c7fc88664f1afd2b0962fc8775bf" + }, + { + "alg" : "SHA3-256", + "content" : "4b4f08ad7606a3ac62997779484919a302267b26d26ee19125f8a7eea60e8a71" + }, + { + "alg" : "SHA3-512", + "content" : "65c6845ebae981cb81b61107707ced39f5b377dae970b47606ef482aaf10e3729def0da40d9377c43abbfb483a5ceae039b0d51c129c50a6d36ad351a5d6b01e" + } + ], + "licenses" : [ + {
[... 208281 lines stripped ...]