Added: release/camel/apache-camel/4.12.0/apache-camel-4.12.0-sbom.json ============================================================================== --- release/camel/apache-camel/4.12.0/apache-camel-4.12.0-sbom.json (added) +++ release/camel/apache-camel/4.12.0/apache-camel-4.12.0-sbom.json Thu May 29 14:29:19 2025 @@ -0,0 +1,216233 @@ +{ + "bomFormat" : "CycloneDX", + "specVersion" : "1.6", + "serialNumber" : "urn:uuid:5ab069b7-f3ca-30e4-8de6-b3d6f4b4d6ee", + "version" : 1, + "metadata" : { + "lifecycles" : [ + { + "phase" : "build" + } + ], + "tools" : { + "components" : [ + { + "type" : "library", + "author" : "OWASP Foundation", + "group" : "org.cyclonedx", + "name" : "cyclonedx-maven-plugin", + "version" : "2.9.1", + "description" : "CycloneDX Maven plugin", + "hashes" : [ + { + "alg" : "MD5", + "content" : "9c7a565cf28cce58557d0c621c5ea4b1" + }, + { + "alg" : "SHA-1", + "content" : "be882d5a22050bfa9d19090b1420c188617d0e1c" + }, + { + "alg" : "SHA-256", + "content" : "698e0f37184a5b28c245c4065fd036dfce253b52f82fbb7113d81d36326cc249" + }, + { + "alg" : "SHA-512", + "content" : "c0f0b11026858166f872a2eb54719492e5cecaa0bc9cd6b30b3ecb4a174eed220f4a1b5829d18d6734128e778d3cb3db7ffed177c92866133129cb29081814a0" + }, + { + "alg" : "SHA-384", + "content" : "d80964707dfe5caca8c70521d5066f57589304c0a657e6fbc7c0614ea0fc7b3b3dbe7778361eee0f54ba111e9cb0ffcb" + }, + { + "alg" : "SHA3-384", + "content" : "80bc3a275d9514bc457461ff52a72add8c7ecbbc01d8912efce57139016c544ee776981851be0a58fa977ab4221f703f" + }, + { + "alg" : "SHA3-256", + "content" : "142317d6f245390f4fd2d0c100b16281b8dfc5c0c2cff86943bdcc97039cb699" + }, + { + "alg" : "SHA3-512", + "content" : "af0fb9137c90b65d1a07f72e4d51ae509956cdb8800f35c961b037cdda1fe4a14ce3b496cef71ba85f1621affcfe29cd42704ae4191ff0b090a9602087c8997b" + } + ] + } + ] + }, + "component" : { + "type" : "library", + "bom-ref" : "pkg:maven/org.apache.camel/camel@4.12.0?type=pom", + "publisher" : "The Apache Software Foundation", + "group" : "org.apache.camel", + "name" : "camel", + "version" : "4.12.0", + "description" : "Camel Root POM", + "licenses" : [ + { + "license" : { + "id" : "Apache-2.0", + "url" : "https://www.apache.org/licenses/LICENSE-2.0" + } + } + ], + "purl" : "pkg:maven/org.apache.camel/camel@4.12.0?type=pom", + "externalReferences" : [ + { + "type" : "website", + "url" : "https://camel.apache.org" + }, + { + "type" : "distribution-intake", + "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" + }, + { + "type" : "issue-tracker", + "url" : "https://issues.apache.org/jira/browse/CAMEL" + }, + { + "type" : "mailing-list", + "url" : "dev-subscr...@camel.apache.org" + }, + { + "type" : "vcs", + "url" : "https://gitbox.apache.org/repos/asf?p=camel.git;a=summary" + } + ] + }, + "properties" : [ + { + "name" : "maven.goal", + "value" : "makeAggregateBom" + }, + { + "name" : "maven.scopes", + "value" : "compile,provided,runtime,system" + }, + { + "name" : "cdx:reproducible", + "value" : "enabled" + } + ] + }, + "components" : [ + { + "type" : "library", + "bom-ref" : "pkg:maven/org.apache.camel/camel-buildtools@4.12.0?type=jar", + "publisher" : "The Apache Software Foundation", + "group" : "org.apache.camel", + "name" : "camel-buildtools", + "version" : "4.12.0", + "description" : "The build tools for the Apache Camel project", + "licenses" : [ + { + "license" : { + "id" : "Apache-2.0", + "url" : "https://www.apache.org/licenses/LICENSE-2.0" + } + } + ], + "purl" : "pkg:maven/org.apache.camel/camel-buildtools@4.12.0?type=jar", + "externalReferences" : [ + { + "type" : "website", + "url" : "https://camel.apache.org/camel-buildtools" + }, + { + "type" : "distribution-intake", + "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" + }, + { + "type" : "issue-tracker", + "url" : "https://issues.apache.org/jira/browse/CAMEL" + }, + { + "type" : "mailing-list", + "url" : "dev-subscr...@camel.apache.org" + }, + { + "type" : "vcs", + "url" : "https://gitbox.apache.org/repos/asf?p=camel.git;a=summary/camel-buildtools" + } + ] + }, + { + "type" : "library", + "bom-ref" : "pkg:maven/org.apache.camel/camel-parent@4.12.0?type=pom", + "publisher" : "The Apache Software Foundation", + "group" : "org.apache.camel", + "name" : "camel-parent", + "version" : "4.12.0", + "description" : "Camel Parent POM", + "licenses" : [ + { + "license" : { + "id" : "Apache-2.0", + "url" : "https://www.apache.org/licenses/LICENSE-2.0" + } + } + ], + "purl" : "pkg:maven/org.apache.camel/camel-parent@4.12.0?type=pom", + "externalReferences" : [ + { + "type" : "website", + "url" : "https://camel.apache.org/camel-parent" + }, + { + "type" : "distribution-intake", + "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" + }, + { + "type" : "issue-tracker", + "url" : "https://issues.apache.org/jira/browse/CAMEL" + }, + { + "type" : "mailing-list", + "url" : "dev-subscr...@camel.apache.org" + }, + { + "type" : "vcs", + "url" : "https://gitbox.apache.org/repos/asf?p=camel.git;a=summary/camel-parent" + } + ] + }, + { + "type" : "library", + "bom-ref" : "pkg:maven/org.apache.camel/camel-etc@4.12.0?type=pom", + "publisher" : "The Apache Software Foundation", + "group" : "org.apache.camel", + "name" : "camel-etc", + "version" : "4.12.0", + "description" : "Misc stuff", + "licenses" : [ + { + "license" : { + "id" : "Apache-2.0", + "url" : "https://www.apache.org/licenses/LICENSE-2.0" + } + } + ], + "purl" : "pkg:maven/org.apache.camel/camel-etc@4.12.0?type=pom", + "externalReferences" : [ + { + "type" : "website", + "url" : "https://camel.apache.org/camel-parent/camel-etc" + }, + { + "type" : "distribution-intake", + "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" + }, + { + "type" : "issue-tracker", + "url" : "https://issues.apache.org/jira/browse/CAMEL" + }, + { + "type" : "mailing-list", + "url" : "dev-subscr...@camel.apache.org" + }, + { + "type" : "vcs", + "url" : "https://gitbox.apache.org/repos/asf?p=camel.git;a=summary/camel-parent/camel-etc" + } + ] + }, + { + "type" : "library", + "bom-ref" : "pkg:maven/org.apache.camel/tooling@4.12.0?type=pom", + "publisher" : "The Apache Software Foundation", + "group" : "org.apache.camel", + "name" : "tooling", + "version" : "4.12.0", + "description" : "Camel Tooling", + "licenses" : [ + { + "license" : { + "id" : "Apache-2.0", + "url" : "https://www.apache.org/licenses/LICENSE-2.0" + } + } + ], + "purl" : "pkg:maven/org.apache.camel/tooling@4.12.0?type=pom", + "externalReferences" : [ + { + "type" : "website", + "url" : "https://camel.apache.org/camel-parent/tooling" + }, + { + "type" : "distribution-intake", + "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" + }, + { + "type" : "issue-tracker", + "url" : "https://issues.apache.org/jira/browse/CAMEL" + }, + { + "type" : "mailing-list", + "url" : "dev-subscr...@camel.apache.org" + }, + { + "type" : "vcs", + "url" : "https://gitbox.apache.org/repos/asf?p=camel.git;a=summary/camel-parent/tooling" + } + ] + }, + { + "type" : "library", + "bom-ref" : "pkg:maven/org.apache.camel/camel-tooling-util@4.12.0?type=jar", + "publisher" : "The Apache Software Foundation", + "group" : "org.apache.camel", + "name" : "camel-tooling-util", + "version" : "4.12.0", + "description" : "Tooling utilities", + "licenses" : [ + { + "license" : { + "id" : "Apache-2.0", + "url" : "https://www.apache.org/licenses/LICENSE-2.0" + } + } + ], + "purl" : "pkg:maven/org.apache.camel/camel-tooling-util@4.12.0?type=jar", + "externalReferences" : [ + { + "type" : "website", + "url" : "https://camel.apache.org/camel-parent/tooling/camel-tooling-util" + }, + { + "type" : "distribution-intake", + "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" + }, + { + "type" : "issue-tracker", + "url" : "https://issues.apache.org/jira/browse/CAMEL" + }, + { + "type" : "mailing-list", + "url" : "dev-subscr...@camel.apache.org" + }, + { + "type" : "vcs", + "url" : "https://gitbox.apache.org/repos/asf?p=camel.git;a=summary/camel-parent/tooling/camel-tooling-util" + } + ] + }, + { + "type" : "library", + "bom-ref" : "pkg:maven/org.junit.jupiter/junit-jupiter-api@5.12.2?type=jar", + "group" : "org.junit.jupiter", + "name" : "junit-jupiter-api", + "version" : "5.12.2", + "description" : "Module \"junit-jupiter-api\" of JUnit 5.", + "scope" : "required", + "hashes" : [ + { + "alg" : "MD5", + "content" : "402d4a6ff77b83558384ff3c31d6cb7b" + }, + { + "alg" : "SHA-1", + "content" : "6de3a3256c5d90f4a439edcb6c2e8dc5180907b0" + }, + { + "alg" : "SHA-256", + "content" : "0b9ca728e4bcd9adc57f29deb9556ff9ed5e08b4e8843b875aba4e4e3e04f092" + }, + { + "alg" : "SHA-512", + "content" : "cfc017675fd2fb8b54974845fd1d68e2c42534e59a03dde5b0f58ef4e77b22c0793d66f1a4446467caf6b7ce6ad533636ede078507ecbcedfa78ad8d8a831993" + }, + { + "alg" : "SHA-384", + "content" : "d1267b37c376220ad737050cd876b39afa67e1b8b0df76e7910f47c5048252862850050b30d02b19de14da439c4a73a4" + }, + { + "alg" : "SHA3-384", + "content" : "8e2859cfd02636d9b7fa481e5c47cb7f3d1bb366cedd262e6272daa4abacf558e9631fcc6e81760b220aeffc9ff28324" + }, + { + "alg" : "SHA3-256", + "content" : "1ed6834b1cc2f94336b3d76e53b22a86ab91014ca4355b372b8b4105659eff87" + }, + { + "alg" : "SHA3-512", + "content" : "1fd59cc374c4f5e9f37b24b392b2ccba4a8f7acf8dfb2a233cc29a3cd185eeed28fbff430979e04b54ceea89424da9c01273b7b06c00f34db0f003121c453a9e" + } + ], + "licenses" : [ + { + "license" : { + "id" : "EPL-2.0" + } + } + ], + "purl" : "pkg:maven/org.junit.jupiter/junit-jupiter-api@5.12.2?type=jar", + "externalReferences" : [ + { + "type" : "website", + "url" : "https://junit.org/junit5/" + }, + { + "type" : "vcs", + "url" : "https://github.com/junit-team/junit5" + } + ] + }, + { + "type" : "library", + "bom-ref" : "pkg:maven/org.opentest4j/opentest4j@1.3.0?type=jar", + "group" : "org.opentest4j", + "name" : "opentest4j", + "version" : "1.3.0", + "description" : "Open Test Alliance for the JVM", + "scope" : "required", + "hashes" : [ + { + "alg" : "MD5", + "content" : "03c404f727531f3fd3b4c73997899327" + }, + { + "alg" : "SHA-1", + "content" : "152ea56b3a72f655d4fd677fc0ef2596c3dd5e6e" + }, + { + "alg" : "SHA-256", + "content" : "48e2df636cab6563ced64dcdff8abb2355627cb236ef0bf37598682ddf742f1b" + }, + { + "alg" : "SHA-512", + "content" : "78fc698a7871bb50305e3657893c10500595f043348d875f57bc39ca4a6a51eda3967b7c8c8a7ec3e8f85f2171bca4aa98823e912e416e87e81c6ba5b70a37c3" + }, + { + "alg" : "SHA-384", + "content" : "10398b6998c9202a0731e2e19ae1c3f9d8a83582c2663fe7bdda15794ee6fa816727dbd8f7c7164bd5395ee1cfe7c97e" + }, + { + "alg" : "SHA3-384", + "content" : "3abe706fd78509c25a402c7bbf6f9ddf71ffb5b35054864ba0fdf7902207115f888a0ba728fd71d2e87a9360d2498121" + }, + { + "alg" : "SHA3-256", + "content" : "d961907a1bfa1dcda329dca494ffbc251b31fabcaca5ab7095661a8ce3c1d654" + }, + { + "alg" : "SHA3-512", + "content" : "0ad661617bcac51bcd26f7ad4611c69b1fd9811b50dbf734e041a3243ab1f845e7796620e8a7c40c4a2df3946864598b1251396c7d9bd813203d82710788cce0" + } + ], + "licenses" : [ + { + "license" : { + "id" : "Apache-2.0" + } + } + ], + "purl" : "pkg:maven/org.opentest4j/opentest4j@1.3.0?type=jar", + "externalReferences" : [ + { + "type" : "website", + "url" : "https://github.com/ota4j-team/opentest4j" + }, + { + "type" : "vcs", + "url" : "https://github.com/ota4j-team/opentest4j" + } + ] + }, + { + "type" : "library", + "bom-ref" : "pkg:maven/org.junit.platform/junit-platform-commons@1.12.2?type=jar", + "group" : "org.junit.platform", + "name" : "junit-platform-commons", + "version" : "1.12.2", + "description" : "Module \"junit-platform-commons\" of JUnit 5.", + "scope" : "required", + "hashes" : [ + { + "alg" : "MD5", + "content" : "ee5021f0b2cc09d82fdf4d4c9075cd4e" + }, + { + "alg" : "SHA-1", + "content" : "b89e88a89ee009937374a4c96912e007b34c8e35" + }, + { + "alg" : "SHA-256", + "content" : "e683a01e85dfabea520c056ac6015a6162756e602ec653c0da85e233f0afbc18" + }, + { + "alg" : "SHA-512", + "content" : "633fc69494adde3750ae5003097bbeea1b7d4b68a079f11dac53733ce00eb7e00d1cd5276879ce88a5b1e6889f100b07b422c1f9e575485e86c3cccc8b06dbfa" + }, + { + "alg" : "SHA-384", + "content" : "638caf5e426b79edb65703b3c992510b418666bcaca1883b695df77d3f2ced4e730a8d14f7cba42f31651eb9a9a5bec5" + }, + { + "alg" : "SHA3-384", + "content" : "fa5ae501edb1521ec2ba7953a6a28ab242114b7e83bfd1f340250d9d1710073c94abb04c89be12f56078162237144b1d" + }, + { + "alg" : "SHA3-256", + "content" : "f2686ea2425a14b3d8c41058bdd5895c4d0408624f4e270fa9314dbc4e34460b" + }, + { + "alg" : "SHA3-512", + "content" : "235c504dccc54400d90482e99148ae5016088c41e41d8cde396c7ceaf69a5232ebaf4b4c9c58a0dd6503681a419b3dd9770525ad32ee57da8fc01164a27eec62" + } + ], + "licenses" : [ + { + "license" : { + "id" : "EPL-2.0" + } + } + ], + "purl" : "pkg:maven/org.junit.platform/junit-platform-commons@1.12.2?type=jar", + "externalReferences" : [ + { + "type" : "website", + "url" : "https://junit.org/junit5/" + }, + { + "type" : "vcs", + "url" : "https://github.com/junit-team/junit5" + } + ] + }, + { + "type" : "library", + "bom-ref" : "pkg:maven/org.apiguardian/apiguardian-api@1.1.2?type=jar", + "group" : "org.apiguardian", + "name" : "apiguardian-api", + "version" : "1.1.2", + "description" : "@API Guardian", + "scope" : "required", + "hashes" : [ + { + "alg" : "MD5", + "content" : "8c7de3f82037fa4a2e8be2a2f13092af" + }, + { + "alg" : "SHA-1", + "content" : "a231e0d844d2721b0fa1b238006d15c6ded6842a" + }, + { + "alg" : "SHA-256", + "content" : "b509448ac506d607319f182537f0b35d71007582ec741832a1f111e5b5b70b38" + }, + { + "alg" : "SHA-512", + "content" : "d7ccd0e7019f1a997de39d66dc0ad4efe150428fdd7f4c743c93884f1602a3e90135ad34baea96d5b6d925ad6c0c8487c8e78304f0a089a12383d4a62e2c9a61" + }, + { + "alg" : "SHA-384", + "content" : "5ae11cfedcee7da43a506a67946ddc8a7a2622284a924ba78f74541e9a22db6868a15f5d84edb91a541e38afded734ea" + }, + { + "alg" : "SHA3-384", + "content" : "c146116b3dfd969200b2ce52d96b92dd02d6f5a45a86e7e85edf35600ddbc2f3c6e8a1ad7e2db4dcd2c398c09fad0927" + }, + { + "alg" : "SHA3-256", + "content" : "b4b436d7f615fc0b820204e69f83c517d1c1ccc5f6b99e459209ede4482268de" + }, + { + "alg" : "SHA3-512", + "content" : "7b95b7ac68a6891b8901b5507acd2c24a0c1e20effa63cd513764f513eab4eb55f8de5178edbe0a400c11f3a18d3f56243569d6d663100f06dd98288504c09c5" + } + ], + "licenses" : [ + { + "license" : { + "id" : "Apache-2.0" + } + } + ], + "purl" : "pkg:maven/org.apiguardian/apiguardian-api@1.1.2?type=jar", + "externalReferences" : [ + { + "type" : "website", + "url" : "https://github.com/apiguardian-team/apiguardian" + }, + { + "type" : "vcs", + "url" : "https://github.com/apiguardian-team/apiguardian" + } + ] + }, + { + "type" : "library", + "bom-ref" : "pkg:maven/org.junit.jupiter/junit-jupiter-params@5.12.2?type=jar", + "group" : "org.junit.jupiter", + "name" : "junit-jupiter-params", + "version" : "5.12.2", + "description" : "Module \"junit-jupiter-params\" of JUnit 5.", + "scope" : "required", + "hashes" : [ + { + "alg" : "MD5", + "content" : "9a48afce7bd438cfd5ee5d8c39454ad8" + }, + { + "alg" : "SHA-1", + "content" : "ff1434a66d1fb84c2c709cde2e2d56d5c8f4fad3" + }, + { + "alg" : "SHA-256", + "content" : "b219ffa949b90a71aa3b6c2b606456b82bca0b2089b7459c8ff461156ff59b0f" + }, + { + "alg" : "SHA-512", + "content" : "d2ce4d3bd3d44f0cd8e49aaa6dcfb6a322995a9fc616f733c27290e952adc045897ede39f636392971057d51f14c29e6dc72421b0a78bd026ffbe5d1de191578" + }, + { + "alg" : "SHA-384", + "content" : "734edca7640095da30b17d53aec3cce0a00580dd87439e61c7c7cd571d62e24b01b23d5fe5bfa9f614b4082995a91dde" + }, + { + "alg" : "SHA3-384", + "content" : "a412b0174054273fd642d58b94af01a7c937d822ef253881dad561ea03c84dcaedbf54e476aa6cc8b29d9d219a483255" + }, + { + "alg" : "SHA3-256", + "content" : "141898d69a3de7285cac2b7702ecf964e57f60c857d6362436bc20a454cf81a1" + }, + { + "alg" : "SHA3-512", + "content" : "3b98430790cbdc0220b43516ba479e30f2e91a4f41e84981437bb3ed6361b0f3449e006d83d965ffe0c2c20c9a9be096ce7d616e73b6f88a57a40d2f0338387c" + } + ], + "licenses" : [ + { + "license" : { + "id" : "EPL-2.0" + } + } + ], + "purl" : "pkg:maven/org.junit.jupiter/junit-jupiter-params@5.12.2?type=jar", + "externalReferences" : [ + { + "type" : "website", + "url" : "https://junit.org/junit5/" + }, + { + "type" : "vcs", + "url" : "https://github.com/junit-team/junit5" + } + ] + }, + { + "type" : "library", + "bom-ref" : "pkg:maven/org.junit.jupiter/junit-jupiter-engine@5.12.2?type=jar", + "group" : "org.junit.jupiter", + "name" : "junit-jupiter-engine", + "version" : "5.12.2", + "description" : "Module \"junit-jupiter-engine\" of JUnit 5.", + "scope" : "required", + "hashes" : [ + { + "alg" : "MD5", + "content" : "71c710ffe677f9983c6969eb10cd442f" + }, + { + "alg" : "SHA-1", + "content" : "b8df7575b8cd3a94dbe27b481d1cd52c57864559" + }, + { + "alg" : "SHA-256", + "content" : "f576c06b8accde9985063b8bc80526cb980eec24dee0b7221fc8ddd7ace65800" + }, + { + "alg" : "SHA-512", + "content" : "430e070046494943b14f4b8337112c1f3c932e20218729c1b023a0ef7d7e8909ef314b841957d5002b42f4e0b07fa0408a0db7a83f89d625c55b5598400b4573" + }, + { + "alg" : "SHA-384", + "content" : "af83463826783601e4dc2caf7589e90fecbb21f5027bb1e4eaca4358b3ede25ddc58481669dd05942280f410215d30e6" + }, + { + "alg" : "SHA3-384", + "content" : "50d1a83f6a3c55a1aae084cc3d18f9048f0746ddb882849cef504c073be328d14fe8a097e035d0c7f4ab64c885c6dacf" + }, + { + "alg" : "SHA3-256", + "content" : "d017f84adef1d12efe78965b1e27d853cfbe54236b1643fef19c7ecfac9dc572" + }, + { + "alg" : "SHA3-512", + "content" : "308333bad82308c2639b856607bc0be147fbf6dea581c607b0c7aa43266f665dd067b4e04c33ed4eca0437f4fba75db595a8650401fcfa70c5efbb6eb33694b1" + } + ], + "licenses" : [ + { + "license" : { + "id" : "EPL-2.0" + } + } + ], + "purl" : "pkg:maven/org.junit.jupiter/junit-jupiter-engine@5.12.2?type=jar", + "externalReferences" : [ + { + "type" : "website", + "url" : "https://junit.org/junit5/" + }, + { + "type" : "vcs", + "url" : "https://github.com/junit-team/junit5" + } + ] + }, + { + "type" : "library", + "bom-ref" : "pkg:maven/org.junit.platform/junit-platform-engine@1.12.2?type=jar", + "group" : "org.junit.platform", + "name" : "junit-platform-engine", + "version" : "1.12.2", + "description" : "Module \"junit-platform-engine\" of JUnit 5.", + "scope" : "required", + "hashes" : [ + { + "alg" : "MD5", + "content" : "a28e43677b7d9519f5e87490356994f8" + }, + { + "alg" : "SHA-1", + "content" : "8519ece93f91b8115705d36be2c36d49808935cd" + }, + { + "alg" : "SHA-256", + "content" : "cef0efcb5bd2e05e2b808d38bab5c655089c0c3001527376e74cb606a7911ec8" + }, + { + "alg" : "SHA-512", + "content" : "e240f0a2ac871683fb327d27cf75e1a3887df1316b7a828ff2a17bd496e4fb48ca44b9d49c8bf1164683f155410fddf623a3beaae61608e4af76342eae484edc" + }, + { + "alg" : "SHA-384", + "content" : "ad2d9ff799732f0a42b833121c400c3237f58f9c20e698760d1643cf393f715fff9f5875880456ad6b4a5ce6fc33f9c3" + }, + { + "alg" : "SHA3-384", + "content" : "f41049424bb8390bdbc6361f5954553b2ce9a1cea543bd44f147ce120c7908803d8fc14614a2118300e6405bf67e9718" + }, + { + "alg" : "SHA3-256", + "content" : "38e025131be3924ec93088cf52be79b490c95950fb08b55d940ffbc86a3e5635" + }, + { + "alg" : "SHA3-512", + "content" : "2f50ddc38dfadf86ba174e90465e6d9470c4ceb8310a11bb14c2ad975291fa8b2fdb1dc4357eb5c15d6875d9b515fe08ef710aefc77974813c76fb226d73e7a2" + } + ], + "licenses" : [ + { + "license" : { + "id" : "EPL-2.0" + } + } + ], + "purl" : "pkg:maven/org.junit.platform/junit-platform-engine@1.12.2?type=jar", + "externalReferences" : [ + { + "type" : "website", + "url" : "https://junit.org/junit5/" + }, + { + "type" : "vcs", + "url" : "https://github.com/junit-team/junit5" + } + ] + }, + { + "type" : "library", + "bom-ref" : "pkg:maven/org.apache.camel/tooling-parent@4.12.0?type=pom", + "publisher" : "The Apache Software Foundation", + "group" : "org.apache.camel", + "name" : "tooling-parent", + "version" : "4.12.0", + "description" : "Camel Tooling Parent POM", + "licenses" : [ + { + "license" : { + "id" : "Apache-2.0", + "url" : "https://www.apache.org/licenses/LICENSE-2.0" + } + } + ], + "purl" : "pkg:maven/org.apache.camel/tooling-parent@4.12.0?type=pom", + "externalReferences" : [ + { + "type" : "website", + "url" : "https://camel.apache.org/camel-parent/tooling/tooling-parent" + }, + { + "type" : "distribution-intake", + "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" + }, + { + "type" : "issue-tracker", + "url" : "https://issues.apache.org/jira/browse/CAMEL" + }, + { + "type" : "mailing-list", + "url" : "dev-subscr...@camel.apache.org" + }, + { + "type" : "vcs", + "url" : "https://gitbox.apache.org/repos/asf?p=camel.git;a=summary/camel-parent/tooling/tooling-parent" + } + ] + }, + { + "type" : "library", + "bom-ref" : "pkg:maven/org.apache.camel/maven-plugins@4.12.0?type=pom", + "publisher" : "The Apache Software Foundation", + "group" : "org.apache.camel", + "name" : "maven-plugins", + "version" : "4.12.0", + "description" : "Camel Maven Plugins", + "licenses" : [ + { + "license" : { + "id" : "Apache-2.0", + "url" : "https://www.apache.org/licenses/LICENSE-2.0" + } + } + ], + "purl" : "pkg:maven/org.apache.camel/maven-plugins@4.12.0?type=pom", + "externalReferences" : [ + { + "type" : "website", + "url" : "https://camel.apache.org/camel-parent/tooling/tooling-parent/maven-plugins" + }, + { + "type" : "distribution-intake", + "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" + }, + { + "type" : "issue-tracker", + "url" : "https://issues.apache.org/jira/browse/CAMEL" + }, + { + "type" : "mailing-list", + "url" : "dev-subscr...@camel.apache.org" + }, + { + "type" : "vcs", + "url" : "https://gitbox.apache.org/repos/asf?p=camel.git;a=summary/camel-parent/tooling/tooling-parent/maven-plugins" + } + ] + }, + { + "type" : "library", + "bom-ref" : "pkg:maven/org.apache.camel/bom-generator-maven-plugin@4.12.0?type=maven-plugin", + "publisher" : "The Apache Software Foundation", + "group" : "org.apache.camel", + "name" : "bom-generator-maven-plugin", + "version" : "4.12.0", + "description" : "Maven plugin to help generating BOM projects", + "licenses" : [ + { + "license" : { + "id" : "Apache-2.0", + "url" : "https://www.apache.org/licenses/LICENSE-2.0" + } + } + ], + "purl" : "pkg:maven/org.apache.camel/bom-generator-maven-plugin@4.12.0?type=maven-plugin", + "externalReferences" : [ + { + "type" : "website", + "url" : "https://camel.apache.org/camel-parent/tooling/tooling-parent/maven-plugins/bom-generator-maven-plugin" + }, + { + "type" : "distribution-intake", + "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" + }, + { + "type" : "issue-tracker", + "url" : "https://issues.apache.org/jira/browse/CAMEL" + }, + { + "type" : "mailing-list", + "url" : "dev-subscr...@camel.apache.org" + }, + { + "type" : "vcs", + "url" : "https://gitbox.apache.org/repos/asf?p=camel.git;a=summary/camel-parent/tooling/tooling-parent/maven-plugins/bom-generator-maven-plugin" + } + ] + }, + { + "type" : "library", + "bom-ref" : "pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.9.23?type=jar", + "publisher" : "The Apache Software Foundation", + "group" : "org.apache.maven.resolver", + "name" : "maven-resolver-api", + "version" : "1.9.23", + "description" : "The application programming interface for the repository system.", + "scope" : "required", + "hashes" : [ + { + "alg" : "MD5", + "content" : "5f375883313631dcd8ea5458922ae869" + }, + { + "alg" : "SHA-1", + "content" : "a3a93e5924b8a53391b73e3e5038c25d4fadb7df" + }, + { + "alg" : "SHA-256", + "content" : "cf068ecef4342e47f526b180cda0bf754f871f68cc1003592d436ff8bf459549" + }, + { + "alg" : "SHA-512", + "content" : "2cc87f65b438e6c79cfe5d54be31ad0592ce7661fc4ad3dfd710a02150c316f30dbb879d3f42bcbc85e0eb83bbfc0bf0cb0e41b2ab9680846bd1b6700a8ca07e" + }, + { + "alg" : "SHA-384", + "content" : "405d50d2c125a6a51c826dfc9f12bca83dbfea591e680ee9fb21039a7cbd7593f35cb65e341d955d3bc3740c81806de4" + }, + { + "alg" : "SHA3-384", + "content" : "d49e47e0f98d5a009108d80f219669aa206722e462b6cbd8432f32e1f2948c5b73089871cf52939bea528d8995f6faf1" + }, + { + "alg" : "SHA3-256", + "content" : "bfc3d0fb47671f0c2faeb33f7cbf573e2c786e6696af62dad4fc0c5c3919c59d" + }, + { + "alg" : "SHA3-512", + "content" : "88232922ed65ed24297cb892f7c4676d39480941dac5b0e66e140c0312dbf4ce463469135a2f8ad8be9d99f8eed18ca9dd969d14f478556eb0c748d21647e18b" + } + ], + "licenses" : [ + { + "license" : { + "id" : "Apache-2.0", + "url" : "https://www.apache.org/licenses/LICENSE-2.0" + } + } + ], + "purl" : "pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.9.23?type=jar", + "externalReferences" : [ + { + "type" : "website", + "url" : "https://maven.apache.org/resolver/maven-resolver-api/" + }, + { + "type" : "build-system", + "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-resolver/" + }, + { + "type" : "distribution-intake", + "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" + }, + { + "type" : "issue-tracker", + "url" : "https://issues.apache.org/jira/browse/MRESOLVER" + }, + { + "type" : "mailing-list", + "url" : "https://lists.apache.org/list.html?us...@maven.apache.org" + }, + { + "type" : "vcs", + "url" : "https://github.com/apache/maven-resolver/tree/maven-resolver-1.9.23/maven-resolver-api" + } + ] + }, + { + "type" : "library", + "bom-ref" : "pkg:maven/org.apache.maven.resolver/maven-resolver-util@1.9.23?type=jar", + "publisher" : "The Apache Software Foundation", + "group" : "org.apache.maven.resolver", + "name" : "maven-resolver-util", + "version" : "1.9.23", + "description" : "A collection of utility classes to ease usage of the repository system.", + "scope" : "required", + "hashes" : [ + { + "alg" : "MD5", + "content" : "93d7729e2662794f741a105759ce32e1" + }, + { + "alg" : "SHA-1", + "content" : "1f5a34b81bddfc5d1200610819ce569c84591318" + }, + { + "alg" : "SHA-256", + "content" : "a6b81ce281313cc2adf19e697d59d53a83793d83e33707fc44836c4934f4030f" + }, + { + "alg" : "SHA-512", + "content" : "ee96d3dfb282e735a32ee3963402de6693a5cac6d75ff03044bf45b6f68feab5c2128424af694b22d161d53f1949cbc4006cc540d3208c7c6ffe8d1b0f5d6d83" + }, + { + "alg" : "SHA-384", + "content" : "b3d783164a31dc7f2aa0700c25c3a87bc52365792ae6a4f2247f40456cf65fce7f5dcb96b3d79735f76842ee657f6085" + }, + { + "alg" : "SHA3-384", + "content" : "dac3deea19fba5f92e01d02fcbaf9a3c3777fb5d801e6cd1dc17ac64d89a7a7d7aba057a59d76c7a9adf548725c5bddd" + }, + { + "alg" : "SHA3-256", + "content" : "ef133f8f5abb40357d827697cf9edc2fdb84fe9f52e9d3bd900e46a97a855f99" + }, + { + "alg" : "SHA3-512", + "content" : "ffc8c21b996fd07517591d4fc6f6dafaadcd4ad0bd6de92973bc71a2f403a242d3af0fc2d55fa027b223de75818efd93aaedc89661bae349be3898dccac2f9c5" + } + ], + "licenses" : [ + { + "license" : { + "id" : "Apache-2.0", + "url" : "https://www.apache.org/licenses/LICENSE-2.0" + } + } + ], + "purl" : "pkg:maven/org.apache.maven.resolver/maven-resolver-util@1.9.23?type=jar", + "externalReferences" : [ + { + "type" : "website", + "url" : "https://maven.apache.org/resolver/maven-resolver-util/" + }, + { + "type" : "build-system", + "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-resolver/" + }, + { + "type" : "distribution-intake", + "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" + }, + { + "type" : "issue-tracker", + "url" : "https://issues.apache.org/jira/browse/MRESOLVER" + }, + { + "type" : "mailing-list", + "url" : "https://lists.apache.org/list.html?us...@maven.apache.org" + }, + { + "type" : "vcs", + "url" : "https://github.com/apache/maven-resolver/tree/maven-resolver-1.9.23/maven-resolver-util" + } + ] + }, + { + "type" : "library", + "bom-ref" : "pkg:maven/org.apache.maven/maven-core@3.9.9?type=jar", + "publisher" : "The Apache Software Foundation", + "group" : "org.apache.maven", + "name" : "maven-core", + "version" : "3.9.9", + "description" : "Maven Core classes.", + "scope" : "required", + "hashes" : [ + { + "alg" : "MD5", + "content" : "eed2eb37f03ccdea7ef9dab069c0b5d8" + }, + { + "alg" : "SHA-1", + "content" : "b58645e3f14348024b05735c171425e19d30c02e" + }, + { + "alg" : "SHA-256", + "content" : "7fab37fc6044f20ae004376ab8414373636cf51e26ad0b1efa6b3f1cd2bec503" + }, + { + "alg" : "SHA-512", + "content" : "95a717d05c4fb51c4e4d196d6e4e183447f9eb56db13b0b1a8181e3c8b0dbd9abd2ed612ce93bb87799aee4d3b309ba1a7e6924964cb9e45daff2f70a25a0abe" + }, + { + "alg" : "SHA-384", + "content" : "a953e88f9dce06d35b3e2d33ad873d2024730b846e5f94d80fdd687efa0dd07fc42e3d53a70c075abc3497bc4f1383d9" + }, + { + "alg" : "SHA3-384", + "content" : "efdd79ce31e93b75a2df359fec4a0d209eb36d74ff8e89d06c9d95c5125d7bc5b1d7bc67a7b03144ccac46abd3b847dc" + }, + { + "alg" : "SHA3-256", + "content" : "f924a04aa56c923c9e5c904365738e5c46841ad9b5e010ce7adc34b69349c436" + }, + { + "alg" : "SHA3-512", + "content" : "e59ec3884fbfa2528a184db8b008bc46d41a373d94e5b728a6c1d9216f44ca838b96ab95e3c40ef937920e4a068b5824c0f3902d13955d7bc7050a2e3906548e" + } + ], + "licenses" : [ + { + "license" : { + "id" : "Apache-2.0", + "url" : "https://www.apache.org/licenses/LICENSE-2.0" + } + } + ], + "purl" : "pkg:maven/org.apache.maven/maven-core@3.9.9?type=jar", + "externalReferences" : [ + { + "type" : "website", + "url" : "https://maven.apache.org/ref/3.9.9/maven-core/" + }, + { + "type" : "build-system", + "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/" + }, + { + "type" : "distribution", + "url" : "https://maven.apache.org/download.html" + }, + { + "type" : "distribution-intake", + "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" + }, + { + "type" : "issue-tracker", + "url" : "https://issues.apache.org/jira/browse/MNG" + }, + { + "type" : "mailing-list", + "url" : "https://lists.apache.org/list.html?us...@maven.apache.org" + }, + { + "type" : "vcs", + "url" : "https://github.com/apache/maven/tree/maven-3.9.9/maven-core" + } + ] + }, + { + "type" : "library", + "bom-ref" : "pkg:maven/org.apache.maven/maven-model@3.9.9?type=jar", + "publisher" : "The Apache Software Foundation", + "group" : "org.apache.maven", + "name" : "maven-model", + "version" : "3.9.9", + "description" : "Model for Maven POM (Project Object Model)", + "scope" : "required", + "hashes" : [ + { + "alg" : "MD5", + "content" : "813d4aceaaa8e16f8a83c95a96afa22c" + }, + { + "alg" : "SHA-1", + "content" : "585bff8f220ddc1c08c5263b7dee26c49fc7df94" + }, + { + "alg" : "SHA-256", + "content" : "8f59b0a16fe9c933be749a60ae0705a0cb337bb5abaf38801b40b740ff775727" + }, + { + "alg" : "SHA-512", + "content" : "a775b5ec120e1de0bc891cf3dc148193a5e357aed06d0c9a289ea21a55c7fa7053b04fdde3a7e0d29a19f6e01023f74e511e39e0cd6568d3a6f8d27734058ee1" + }, + { + "alg" : "SHA-384", + "content" : "410645fc18300eff25914a1519ee3bda627cff86df984b14ff5e0346031fcd339aaaa4994ea980c0665d206b0dacd4c6" + }, + { + "alg" : "SHA3-384", + "content" : "5dda2fbf976bb1cb95b42e86a94622f73ecb4ad2cf0db0959b401ae169a7c2a0a54366a8a8f9b492f0d6c069260db834" + }, + { + "alg" : "SHA3-256", + "content" : "3ab286c7fee20c98f7282627c64a53cbd2ddb2717a88e9e157d6207dc7dabff4" + }, + { + "alg" : "SHA3-512", + "content" : "073490b65457dd3ac3d8437874478d7e150fb72a48703340e4e2b608f6ed7badd7c33f388f9c43acc5c4d260ae2672c78404864724d920fa0501a017fd58fa6c" + } + ], + "licenses" : [ + { + "license" : { + "id" : "Apache-2.0", + "url" : "https://www.apache.org/licenses/LICENSE-2.0" + } + } + ], + "purl" : "pkg:maven/org.apache.maven/maven-model@3.9.9?type=jar", + "externalReferences" : [ + { + "type" : "website", + "url" : "https://maven.apache.org/ref/3.9.9/maven-model/" + }, + { + "type" : "build-system", + "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/" + }, + { + "type" : "distribution", + "url" : "https://maven.apache.org/download.html" + }, + { + "type" : "distribution-intake", + "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" + }, + { + "type" : "issue-tracker", + "url" : "https://issues.apache.org/jira/browse/MNG" + }, + { + "type" : "mailing-list", + "url" : "https://lists.apache.org/list.html?us...@maven.apache.org" + }, + { + "type" : "vcs", + "url" : "https://github.com/apache/maven/tree/maven-3.9.9/maven-model" + } + ] + }, + { + "type" : "library", + "bom-ref" : "pkg:maven/org.apache.maven/maven-settings@3.9.9?type=jar", + "publisher" : "The Apache Software Foundation", + "group" : "org.apache.maven", + "name" : "maven-settings", + "version" : "3.9.9", + "description" : "Maven Settings model.", + "scope" : "required", + "hashes" : [ + { + "alg" : "MD5", + "content" : "a5eede8fe9b01b7bb3c6dad06a738365" + }, + { + "alg" : "SHA-1", + "content" : "a82024d87a107965ae274d944c844c9186ff410d" + }, + { + "alg" : "SHA-256", + "content" : "68edf1b510e0d759ec501271a5d05e3a6e425462fbb84126c16e8a6f89abdada" + }, + { + "alg" : "SHA-512", + "content" : "0f7466c4791b083e38e5a6f4631b03317f57bdeee6bf1d152a4b75830bf652c80e1f9707b3f64fcfd5f790886eb55279a4c33fbebbb42b5c97066cb3010b1137" + }, + { + "alg" : "SHA-384", + "content" : "b3d6d9512709e1c5f02b86775501c64c0bd81e76a97e399d2928646584f0f4feff5ea922e45c16865f4749bd4301eea7" + }, + { + "alg" : "SHA3-384", + "content" : "e81ec5efa79028a6eb8c58501023882c1f15142659ce3893b4a862b7b7b867397d7c67eb519f972c856979fb728c93a1" + }, + { + "alg" : "SHA3-256", + "content" : "5cad01acc7d3ad12c6da20ef43aa7b8be20bf6b69a59fc532b734ed2d331d00b" + }, + { + "alg" : "SHA3-512", + "content" : "dd6502ca14b0ca1283746748a4dccbe57e150f1d031965dc543baadf520321e1c396a6d94f1f99d7ab23af04edc6be200aa56655066eb0d23d1a7b8367397be1" + } + ], + "licenses" : [ + { + "license" : { + "id" : "Apache-2.0", + "url" : "https://www.apache.org/licenses/LICENSE-2.0" + } + } + ], + "purl" : "pkg:maven/org.apache.maven/maven-settings@3.9.9?type=jar", + "externalReferences" : [ + { + "type" : "website", + "url" : "https://maven.apache.org/ref/3.9.9/maven-settings/" + }, + { + "type" : "build-system", + "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/" + }, + { + "type" : "distribution", + "url" : "https://maven.apache.org/download.html" + }, + { + "type" : "distribution-intake", + "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" + }, + { + "type" : "issue-tracker", + "url" : "https://issues.apache.org/jira/browse/MNG" + }, + { + "type" : "mailing-list", + "url" : "https://lists.apache.org/list.html?us...@maven.apache.org" + }, + { + "type" : "vcs", + "url" : "https://github.com/apache/maven/tree/maven-3.9.9/maven-settings" + } + ] + }, + { + "type" : "library", + "bom-ref" : "pkg:maven/org.apache.maven/maven-settings-builder@3.9.9?type=jar", + "publisher" : "The Apache Software Foundation", + "group" : "org.apache.maven", + "name" : "maven-settings-builder", + "version" : "3.9.9", + "description" : "The effective settings builder, with inheritance and password decryption.", + "scope" : "required", + "hashes" : [ + { + "alg" : "MD5", + "content" : "4fb4ae61642d42cba66821d8698a670a" + }, + { + "alg" : "SHA-1", + "content" : "71a9bee9618839ffaf7c0de3b53ac1c408b57ae0" + }, + { + "alg" : "SHA-256", + "content" : "094640f3fdce47250cb06968a143f40c4e2f1c22be979c73caac2f49f3c38373" + }, + { + "alg" : "SHA-512", + "content" : "aa2b61dd81291b30e627e1894d8336d68b2f4cb99cedf087cc7081d6f3b6685a33c943e3fb04a851fd7635c916f2d0fb8dd705067ea67d13fc43d08025cec19a" + }, + { + "alg" : "SHA-384", + "content" : "3dbfab791cb5a9d27a89c6277f4a9a9e376a8064db0fb208514bbd1ee6a47ac1b2e573402814c313977d2377401cb9b4" + }, + { + "alg" : "SHA3-384", + "content" : "3cbd4352a5d05fc16e305e6cb5ac98b675a51cdab7ac3c8c59dd9d0272c9f82813e06be233604879f198530a7362433b" + }, + { + "alg" : "SHA3-256", + "content" : "abdce4df1cef68ac91b1b307127d3c3c2ce902f1ace17de96c5ff2a6aa54d368" + }, + { + "alg" : "SHA3-512", + "content" : "9b798693e04c6bc23a48c7880e29df42bbb6fa00e144d95c2aea07f2689ccd1618b9fd986a0c05830a120310e5e43d67d1944b19d49dd10113f70c22856ddcf2" + } + ], + "licenses" : [ + { + "license" : { + "id" : "Apache-2.0", + "url" : "https://www.apache.org/licenses/LICENSE-2.0" + } + } + ], + "purl" : "pkg:maven/org.apache.maven/maven-settings-builder@3.9.9?type=jar", + "externalReferences" : [ + { + "type" : "website", + "url" : "https://maven.apache.org/ref/3.9.9/maven-settings-builder/" + }, + { + "type" : "build-system", + "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/" + }, + { + "type" : "distribution", + "url" : "https://maven.apache.org/download.html" + }, + { + "type" : "distribution-intake", + "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" + }, + { + "type" : "issue-tracker", + "url" : "https://issues.apache.org/jira/browse/MNG" + }, + { + "type" : "mailing-list", + "url" : "https://lists.apache.org/list.html?us...@maven.apache.org" + }, + { + "type" : "vcs", + "url" : "https://github.com/apache/maven/tree/maven-3.9.9/maven-settings-builder" + } + ] + }, + { + "type" : "library", + "bom-ref" : "pkg:maven/org.codehaus.plexus/plexus-sec-dispatcher@2.0?type=jar", + "publisher" : "Codehaus Plexus", + "group" : "org.codehaus.plexus", + "name" : "plexus-sec-dispatcher", + "version" : "2.0", + "description" : "The Plexus project provides a full software stack for creating and executing software projects.", + "scope" : "required", + "hashes" : [ + { + "alg" : "MD5", + "content" : "e68635a721630177ac70173e441336b6" + }, + { + "alg" : "SHA-1", + "content" : "f89c5080614ffd0764e49861895dbedde1b47237" + }, + { + "alg" : "SHA-256", + "content" : "873139960c4c780176dda580b003a2c4bf82188bdce5bb99234e224ef7acfceb" + }, + { + "alg" : "SHA-512", + "content" : "ad4e814c8baff780a4eee064903e52b09ae00420a59fb075ef72dbb8d64d12d3d5009b03d56c15f93587d931c3a7f06cad6351ab2dc9415ccc6eeab0daebeb07" + }, + { + "alg" : "SHA-384", + "content" : "4af3426b6409cce7d5fcda4e2af407fc2dbae9873e06d98332bcd032c0039d9080a291e42223ea2bbef9825d3d63493f" + }, + { + "alg" : "SHA3-384", + "content" : "41720858dd5804f9cb26a8878c16dbdf0372a90e99c037809fe76c3de2c5517ba252af8f8cdf534c1a09900702e6a917" + }, + { + "alg" : "SHA3-256", + "content" : "50fa723aefb551a3fd5888375d01f1d776c534cdf833baea392818e9bfa8166e" + }, + { + "alg" : "SHA3-512", + "content" : "a43f823d31b377c0c7ec8d36ace69e5dbcdaf4dc4ebb45ff0561fea9e12d74c06090ee24b29b06769d4031693faf5d7e3146583d3a64bfaef6b7c79773a8831f" + } + ], + "licenses" : [ + { + "license" : { + "id" : "Apache-2.0" + } + } + ], + "purl" : "pkg:maven/org.codehaus.plexus/plexus-sec-dispatcher@2.0?type=jar", + "externalReferences" : [ + { + "type" : "website", + "url" : "https://codehaus-plexus.github.io/plexus-sec-dispatcher/" + }, + { + "type" : "distribution-intake", + "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" + }, + { + "type" : "issue-tracker", + "url" : "https://github.com/codehaus-plexus/plexus-sec-dispatcher/issues" + }, + { + "type" : "mailing-list", + "url" : "http://archive.plexus.codehaus.org/user" + }, + { + "type" : "vcs", + "url" : "https://github.com/codehaus-plexus/plexus-sec-dispatcher.git" + } + ] + }, + { + "type" : "library", + "bom-ref" : "pkg:maven/org.codehaus.plexus/plexus-cipher@2.0?type=jar", + "publisher" : "Codehaus Plexus", + "group" : "org.codehaus.plexus", + "name" : "plexus-cipher", + "version" : "2.0", + "description" : "The Plexus project provides a full software stack for creating and executing software projects.", + "scope" : "required", + "hashes" : [ + { + "alg" : "MD5", + "content" : "55d612839faf248cbe3e273969c002c2" + }, + { + "alg" : "SHA-1", + "content" : "425ea8e534716b4bff1ea90f39bd76be951d651b" + }, + { + "alg" : "SHA-256", + "content" : "9a7f1b5c5a9effd61eadfd8731452a2f76a8e79111fac391ef75ea801bea203a" + }, + { + "alg" : "SHA-512", + "content" : "8f187b07867a7c29d77454aae4b76479300238d9c4e777c1afa2aebe33b88dab916e29111dd55acac1341849f4579fe91a5470fdd45ccba0e05709c2ce3a1d65" + }, + { + "alg" : "SHA-384", + "content" : "6973eefe06a8992aa8db1775c0f43a84cbef54eeea9122a5a30c362af3e4fb13b6cbd6fba229142e2a4495f97d71f409" + }, + { + "alg" : "SHA3-384", + "content" : "ea780d218f96e61005c5582bf3785ddbb33b53ccb4efbffd76ab58166cf261d3c256d52fea28759380684b7e9b0db8eb" + }, + { + "alg" : "SHA3-256", + "content" : "e2e51d5350ffdce341464ddcdf9ae60108bff40bf5174dc6be43e33ffcd84af9" + }, + { + "alg" : "SHA3-512", + "content" : "f3e17ea31bdefc8094ba3495b8231ec7f90c7175839b009d9fd230110b66ac4c68c912fda1a6e644d93dbce639d738e2535f1ade5841e072a604f5f8ac536729" + } + ], + "licenses" : [ + { + "license" : { + "id" : "Apache-2.0" + } + } + ], + "purl" : "pkg:maven/org.codehaus.plexus/plexus-cipher@2.0?type=jar", + "externalReferences" : [ + { + "type" : "website", + "url" : "https://codehaus-plexus.github.io/plexus-cipher/" + }, + { + "type" : "distribution-intake", + "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" + }, + { + "type" : "issue-tracker", + "url" : "https://github.com/codehaus-plexus/plexus-cipher/issues" + }, + { + "type" : "mailing-list", + "url" : "http://archive.plexus.codehaus.org/user" + }, + { + "type" : "vcs", + "url" : "http://github.com/codehaus-plexus/plexus-cipher" + } + ] + }, + { + "type" : "library", + "bom-ref" : "pkg:maven/org.apache.maven/maven-builder-support@3.9.9?type=jar", + "publisher" : "The Apache Software Foundation", + "group" : "org.apache.maven", + "name" : "maven-builder-support", + "version" : "3.9.9", + "description" : "Support for descriptor builders (model, setting, toolchains)", + "scope" : "required", + "hashes" : [ + { + "alg" : "MD5", + "content" : "0266bb9314b63d9fde8aff0d190f48d6" + }, + { + "alg" : "SHA-1", + "content" : "812c13c808e42c54d3f4abdaab603e5262bf8ab8" + }, + { + "alg" : "SHA-256", + "content" : "2ca4a967bdd12a9e85d40e012374f86e63d4a1030c199da4832e3d0a1c6770d8" + }, + { + "alg" : "SHA-512", + "content" : "ea4c95e9b4ee9078b464ca9002857a149d2fd0bbc5fa79e3984ce981c37de0b18b3be03574b909ba4fc330a70387fef2ccbdac4dba029c11dd5cd53375f9be7a" + }, + { + "alg" : "SHA-384", + "content" : "56f102530fdf58549e9470949bd46d6bcd99eb619da435ea6c0579776e77b06b5b1e8faf76b9c6c0b4d1862bbc9747a2" + }, + { + "alg" : "SHA3-384", + "content" : "096b894a7e0aac0801816be8cd439b0825710a2c5dd3a9a64f3c6cadd8d96b2ceb1d635c0c3a52fd4b2393eb774fadf1" + }, + { + "alg" : "SHA3-256", + "content" : "a411474232b09f28bb48a74543df102c9aa4f324bc31c4e041c475024e835093" + }, + { + "alg" : "SHA3-512", + "content" : "e0764cdfafc85f8504fc1e457ff564f70a124de065c89b120f449d01812a9b4e6b26cfa171ed1f81563cd54db0b16ad049903c52e6ca82f1e632df3c4e8025a7" + } + ], + "licenses" : [ + { + "license" : { + "id" : "Apache-2.0", + "url" : "https://www.apache.org/licenses/LICENSE-2.0" + } + } + ], + "purl" : "pkg:maven/org.apache.maven/maven-builder-support@3.9.9?type=jar", + "externalReferences" : [ + { + "type" : "website", + "url" : "https://maven.apache.org/ref/3.9.9/maven-builder-support/" + }, + { + "type" : "build-system", + "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/" + }, + { + "type" : "distribution", + "url" : "https://maven.apache.org/download.html" + }, + { + "type" : "distribution-intake", + "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" + }, + { + "type" : "issue-tracker", + "url" : "https://issues.apache.org/jira/browse/MNG" + }, + { + "type" : "mailing-list", + "url" : "https://lists.apache.org/list.html?us...@maven.apache.org" + }, + { + "type" : "vcs", + "url" : "https://github.com/apache/maven/tree/maven-3.9.9/maven-builder-support" + } + ] + }, + { + "type" : "library", + "bom-ref" : "pkg:maven/org.apache.maven/maven-repository-metadata@3.9.9?type=jar", + "publisher" : "The Apache Software Foundation", + "group" : "org.apache.maven", + "name" : "maven-repository-metadata", + "version" : "3.9.9", + "description" : "Per-directory local and remote repository metadata.", + "scope" : "required", + "hashes" : [ + { + "alg" : "MD5", + "content" : "d341cdcc9abac2d01546301a305f12b3" + }, + { + "alg" : "SHA-1", + "content" : "33a43f0af3371225d1dcaaa20a824df59c692172" + }, + { + "alg" : "SHA-256", + "content" : "137c297e6a52d489b76663c82324d54e40f5d498a8fc015c0203fd91df8623b0" + }, + { + "alg" : "SHA-512", + "content" : "07d1cd2e99588c43835815f5acdf2cb163288041c803cbb8597c81d5a583a5abc553628fdaaa5a22b4bf7a579aa88155e3e5e27c63c31ba4cab74126f7b35824" + }, + { + "alg" : "SHA-384", + "content" : "f088d97c86378ecb5312f79183aa2e469ff1efe28d0244fa7d86cc37f6bf6fa7b277cba016541967d289fbc474bb2305" + }, + { + "alg" : "SHA3-384", + "content" : "332e75f31f8adfad22990c0a612ec12aab085923f3d425453c25275e177daa2feeade1ff22743a4e5f67d33130ae866a" + }, + { + "alg" : "SHA3-256", + "content" : "40356485644aed030cc175fd8d00443a63a3f1384180edcb1be98ccad67081db" + }, + { + "alg" : "SHA3-512", + "content" : "1d8320d0c4421696705f3a4737ed7c4cb5de37a3b0873abbe19e2a57092b1f0c405b2987c8e3c3931105c1a518f92d304c92b394018842f1cde98fd259488482" + } + ], + "licenses" : [ + { + "license" : { + "id" : "Apache-2.0", + "url" : "https://www.apache.org/licenses/LICENSE-2.0" + } + } + ], + "purl" : "pkg:maven/org.apache.maven/maven-repository-metadata@3.9.9?type=jar", + "externalReferences" : [ + { + "type" : "website", + "url" : "https://maven.apache.org/ref/3.9.9/maven-repository-metadata/" + }, + { + "type" : "build-system", + "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/" + }, + { + "type" : "distribution", + "url" : "https://maven.apache.org/download.html" + }, + { + "type" : "distribution-intake", + "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" + }, + { + "type" : "issue-tracker", + "url" : "https://issues.apache.org/jira/browse/MNG" + }, + { + "type" : "mailing-list", + "url" : "https://lists.apache.org/list.html?us...@maven.apache.org" + }, + { + "type" : "vcs", + "url" : "https://github.com/apache/maven/tree/maven-3.9.9/maven-repository-metadata" + } + ] + }, + { + "type" : "library", + "bom-ref" : "pkg:maven/org.apache.maven/maven-model-builder@3.9.9?type=jar", + "publisher" : "The Apache Software Foundation", + "group" : "org.apache.maven", + "name" : "maven-model-builder", + "version" : "3.9.9", + "description" : "The effective model builder, with inheritance, profile activation, interpolation, ...", + "scope" : "required", + "hashes" : [ + { + "alg" : "MD5", + "content" : "a48ea3e9ceec85a9bff88e88048148d9" + }, + { + "alg" : "SHA-1", + "content" : "6dcd87768eb615301aef0c2221dd168a2d36bc7b" + }, + { + "alg" : "SHA-256", + "content" : "a4377182ac2e5adfe16be3b3c81981a5ecddab014184de72ae1e522f04a77602" + }, + { + "alg" : "SHA-512", + "content" : "558ca7b03233b8d38aca3f2f142e0b4a64d576c92e6b5a8921061eb8c83614d8074845e8656fb77b983711e64db9d145f385a0d1a3ae5bf26805b93a6c4ce041" + }, + { + "alg" : "SHA-384", + "content" : "5ba902dee188aafc6cecb1f9eab759116d00158e0812811f6775654a3f5a73b0b6b429c20e9c727ac157643627b72c27" + }, + { + "alg" : "SHA3-384", + "content" : "364b44bbff164b35ab770c329592560b1f12037bf466137b137db7434877570ad815a9d2027fcf2ebd35275f29ef7cd0" + }, + { + "alg" : "SHA3-256", + "content" : "fd2bd5e3ff91d9c5f405d0c584e4a71f91a1ac5c82e8cfb729f78f13ed73c8d2" + }, + { + "alg" : "SHA3-512", + "content" : "cd2692abcdbf1c0c9adf3ac0210b4f923b6f3497618bf1337d60133e377569b45399f6b3994d73558e9f8ef890192a7bbbb0f674d36ebd482ca5396abfc85ffb" + } + ], + "licenses" : [ + { + "license" : { + "id" : "Apache-2.0", + "url" : "https://www.apache.org/licenses/LICENSE-2.0" + } + } + ], + "purl" : "pkg:maven/org.apache.maven/maven-model-builder@3.9.9?type=jar", + "externalReferences" : [ + { + "type" : "website", + "url" : "https://maven.apache.org/ref/3.9.9/maven-model-builder/" + }, + { + "type" : "build-system", + "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/" + }, + { + "type" : "distribution", + "url" : "https://maven.apache.org/download.html" + }, + { + "type" : "distribution-intake", + "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" + }, + { + "type" : "issue-tracker", + "url" : "https://issues.apache.org/jira/browse/MNG" + }, + { + "type" : "mailing-list", + "url" : "https://lists.apache.org/list.html?us...@maven.apache.org" + }, + { + "type" : "vcs", + "url" : "https://github.com/apache/maven/tree/maven-3.9.9/maven-model-builder" + } + ] + }, + { + "type" : "library", + "bom-ref" : "pkg:maven/org.apache.maven/maven-resolver-provider@3.9.9?type=jar", + "publisher" : "The Apache Software Foundation", + "group" : "org.apache.maven", + "name" : "maven-resolver-provider", + "version" : "3.9.9", + "description" : "Extensions to Maven Resolver for utilizing Maven POM and repository metadata.", + "scope" : "required", + "hashes" : [ + { + "alg" : "MD5", + "content" : "ea2fccfc4c499dbaa570a26da14050d9" + }, + { + "alg" : "SHA-1", + "content" : "ea361822cd25ae6c9153c594aef805e853031224" + }, + { + "alg" : "SHA-256", + "content" : "5dea05049c94f952f48ce2bfe0111afdf986acc591fcc11d23fe3b8dcb70291e" + }, + { + "alg" : "SHA-512", + "content" : "6dcb398c60080cbeaac396df5e565a44e29c9ecffb440d17ca819c2e3e7a86b933e7346eb11c409cad02e2bc97c9ae5f10bc5c4e7d6f5fe81652a7e1d99f9c0f" + }, + { + "alg" : "SHA-384", + "content" : "170d7d6271574947baff824cfd36e00fa20ea1cefc361c27af52a96f45ac7b7fe23edfd0adfd483f121f2cc63491ad39" + }, + { + "alg" : "SHA3-384", + "content" : "4223458ae362fc39853aa5538bd99ec00be1af4e41859b00f3937e9922f8353db51248dd06f88865f67b2296b1920724" + }, + { + "alg" : "SHA3-256", + "content" : "96ad201686d5c420903bab2ac170dfae7b66cc6faadd4dff84dbe981573bbeec" + }, + { + "alg" : "SHA3-512", + "content" : "c2c4610bcc74f5d11b145b58d6f11f74a2f74b8fe95f725f11177a8b930563bbd7ffc49b0b712c2534c0702f3329b75966b1dafe6d4777ec641fe1c45e19f117" + } + ], + "licenses" : [ + { + "license" : { + "id" : "Apache-2.0", + "url" : "https://www.apache.org/licenses/LICENSE-2.0" + } + } + ], + "purl" : "pkg:maven/org.apache.maven/maven-resolver-provider@3.9.9?type=jar", + "externalReferences" : [ + { + "type" : "website", + "url" : "https://maven.apache.org/ref/3.9.9/maven-resolver-provider/" + }, + { + "type" : "build-system", + "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/" + }, + { + "type" : "distribution", + "url" : "https://maven.apache.org/download.html" + }, + { + "type" : "distribution-intake", + "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" + }, + { + "type" : "issue-tracker", + "url" : "https://issues.apache.org/jira/browse/MNG" + }, + { + "type" : "mailing-list", + "url" : "https://lists.apache.org/list.html?us...@maven.apache.org" + }, + { + "type" : "vcs", + "url" : "https://github.com/apache/maven/tree/maven-3.9.9/maven-resolver-provider" + } + ] + }, + { + "type" : "library", + "bom-ref" : "pkg:maven/org.apache.maven.resolver/maven-resolver-impl@1.9.22?type=jar", + "publisher" : "The Apache Software Foundation", + "group" : "org.apache.maven.resolver", + "name" : "maven-resolver-impl", + "version" : "1.9.22", + "description" : "An implementation of the repository system.", + "scope" : "required", + "hashes" : [ + { + "alg" : "MD5", + "content" : "965f1348220f046c6cbde059c971685d" + }, + { + "alg" : "SHA-1", + "content" : "19b7a728c9000f8db615f64552d95fe74b413617" + }, + { + "alg" : "SHA-256", + "content" : "e4dafb8acc13d736377c02d2170d869438dd74b98b860745909d238726babcbb" + }, + { + "alg" : "SHA-512", + "content" : "82c9ff9c9505e6350983a5a90ef16c64e67f2cb21779e56f5ad02979591f8f2cd12ced6bba066fd0bdfaf6be07d39edf9cecada35d16002a8005711602001d90" + }, + { + "alg" : "SHA-384", + "content" : "adaca9b851a5f354f5ea1cda398b1d5b910d4c0fac21a33bfa0a44d40ed19cf63afe99f81fc7718293496421ef64777c" + }, + { + "alg" : "SHA3-384", + "content" : "69dab881fcf9f2b45881899f14ca2c0d885f9de6621d0109887654b6b3f92978b21733348dba75eddd588bd8144da83e" + }, + { + "alg" : "SHA3-256", + "content" : "b35dea4f939c188e848878b6a3331e6312964ff0258833375c6b975d70cd71a8" + }, + { + "alg" : "SHA3-512", + "content" : "dc7a39b8a50f5633194a3f070208e2eda099b88226a4d8728c9c4f4bc876e4eba1a7bb018870e1cf414cf31e5bcb214c2b64393c79d8f498b1c380630698f70d" + } + ], + "licenses" : [ + { + "license" : { + "id" : "Apache-2.0", + "url" : "https://www.apache.org/licenses/LICENSE-2.0" + } + } + ], + "purl" : "pkg:maven/org.apache.maven.resolver/maven-resolver-impl@1.9.22?type=jar", + "externalReferences" : [ + { + "type" : "website", + "url" : "https://maven.apache.org/resolver/maven-resolver-impl/" + }, + { + "type" : "build-system", + "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-resolver/" + }, + { + "type" : "distribution-intake", + "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" + }, + { + "type" : "issue-tracker", + "url" : "https://issues.apache.org/jira/browse/MRESOLVER" + }, + { + "type" : "mailing-list", + "url" : "https://lists.apache.org/list.html?us...@maven.apache.org" + }, + { + "type" : "vcs", + "url" : "https://github.com/apache/maven-resolver/tree/maven-resolver-1.9.22/maven-resolver-impl" + } + ] + }, + { + "type" : "library", + "bom-ref" : "pkg:maven/org.apache.maven.resolver/maven-resolver-named-locks@1.9.22?type=jar", + "publisher" : "The Apache Software Foundation", + "group" : "org.apache.maven.resolver", + "name" : "maven-resolver-named-locks", + "version" : "1.9.22", + "description" : "A synchronization utility implementation using Named locks.", + "scope" : "required", + "hashes" : [ + { + "alg" : "MD5", + "content" : "3d3855f4775bc27f9962f999ea88919b" + }, + { + "alg" : "SHA-1", + "content" : "121433b079aad9be7ed266b19f2122eeb0e2d111" + }, + { + "alg" : "SHA-256", + "content" : "0685f29ec3b548d9b6917c527f13c667685a3394b955aaa5b25d0559818b7fc5" + }, + { + "alg" : "SHA-512", + "content" : "f77654e42e551bfa6ef1e737501123dd1a4faca6cee7eceddad358c7c66e27ece0dbaae7abcf1b8422344e92b5bd5beeb43b8ca3637bc7b0c06cc87ee1d54792" + }, + { + "alg" : "SHA-384", + "content" : "4130344d40d9054360be193e9b7712b708b9b1cd95fac22e13f980366b1e341e8fe0a6a7bd555836e7ff1bd980844722" + }, + { + "alg" : "SHA3-384", + "content" : "5446d9a0d6ec6846b33ed718cedeb1eae9df55a08a1005c88e3a5734f1097ce8ef4c6208a70c21ae9d15a7a2a3139e94" + }, + { + "alg" : "SHA3-256", + "content" : "75af3978ed7eff2d40330beb06c38d8a2df8c31c592f2d0417aecc9e32a491bf" + }, + { + "alg" : "SHA3-512", + "content" : "0dff59894683f076e09adb05dca30db2ab9ea8fef3b8280437b10be65e649175f7a5e684177891fe6661af6e86a464521e24f7559090dd7d8f7625452ec8cac2" + } + ], + "licenses" : [ + { + "license" : { + "id" : "Apache-2.0", + "url" : "https://www.apache.org/licenses/LICENSE-2.0" + } + } + ], + "purl" : "pkg:maven/org.apache.maven.resolver/maven-resolver-named-locks@1.9.22?type=jar", + "externalReferences" : [ + { + "type" : "website", + "url" : "https://maven.apache.org/resolver/maven-resolver-named-locks/" + }, + { + "type" : "build-system", + "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-resolver/" + }, + { + "type" : "distribution-intake", + "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" + }, + { + "type" : "issue-tracker", + "url" : "https://issues.apache.org/jira/browse/MRESOLVER" + }, + { + "type" : "mailing-list", + "url" : "https://lists.apache.org/list.html?us...@maven.apache.org" + }, + { + "type" : "vcs", + "url" : "https://github.com/apache/maven-resolver/tree/maven-resolver-1.9.22/maven-resolver-named-locks" + } + ] + }, + { + "type" : "library", + "bom-ref" : "pkg:maven/org.apache.maven.resolver/maven-resolver-spi@1.9.22?type=jar", + "publisher" : "The Apache Software Foundation", + "group" : "org.apache.maven.resolver", + "name" : "maven-resolver-spi", + "version" : "1.9.22", + "description" : "The service provider interface for repository system implementations and repository connectors.", + "scope" : "required", + "hashes" : [ + { + "alg" : "MD5", + "content" : "7ae784f1d4088fff396386ed6966cafc" + }, + { + "alg" : "SHA-1", + "content" : "c3101acaa4ec053557028cf1917f1d22112b100d" + }, + { + "alg" : "SHA-256", + "content" : "99ad721e4631d9bd0c4f9e29c869672577c66f2a674a5723ce38eff13c75cbfd" + }, + { + "alg" : "SHA-512", + "content" : "3a1e31d872659834cb59a82bd0118fb26ef983e5004849a9a38f80bea344f2d919aa73f142fc605601b8236c431a891a6e98fd8760e7b11aa6a3d7d4862ee009" + }, + { + "alg" : "SHA-384", + "content" : "8ae4ccfcd203dee8263c6db10061f6afefc5a95903f43ad99f237c92300348ac1dbfdbf22042aefd5bdce86c58e4637f" + }, + { + "alg" : "SHA3-384", + "content" : "efcfbeb1c69bbfc880d624d24b9376ce07c703df64505776d91b8574ba2292526dbe4ae592bbafde971d2c7feca2617c" + }, + { + "alg" : "SHA3-256", + "content" : "5e12347c1f0125eea11c00859b4d02c6b7c4f1ea2af305a68b5c2579983d6af0" + }, + { + "alg" : "SHA3-512", + "content" : "8953a2b8bfc66d3ea6f5ec52c87838759b79624485e08c4ecfafbf05521ccc73e9cf724e3dee643975d10b6b5b0d37caf6cd316823074f5cfd49bd05899cec96" + } + ], + "licenses" : [ + { + "license" : { + "id" : "Apache-2.0", + "url" : "https://www.apache.org/licenses/LICENSE-2.0" + } + } + ], + "purl" : "pkg:maven/org.apache.maven.resolver/maven-resolver-spi@1.9.22?type=jar", + "externalReferences" : [ + { + "type" : "website", + "url" : "https://maven.apache.org/resolver/maven-resolver-spi/" + }, + { + "type" : "build-system", + "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-resolver/" + }, + { + "type" : "distribution-intake", + "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" + }, + { + "type" : "issue-tracker", + "url" : "https://issues.apache.org/jira/browse/MRESOLVER" + }, + { + "type" : "mailing-list", + "url" : "https://lists.apache.org/list.html?us...@maven.apache.org" + }, + { + "type" : "vcs", + "url" : "https://github.com/apache/maven-resolver/tree/maven-resolver-1.9.22/maven-resolver-spi" + } + ] + }, + { + "type" : "library", + "bom-ref" : "pkg:maven/org.apache.maven.shared/maven-shared-utils@3.4.2?type=jar", + "publisher" : "The Apache Software Foundation", + "group" : "org.apache.maven.shared", + "name" : "maven-shared-utils", + "version" : "3.4.2", + "description" : "Shared utilities for use by Maven core and plugins", + "scope" : "required", + "hashes" : [ + { + "alg" : "MD5", + "content" : "53a038f77a81cb5816ad2b1c7daa8711" + }, + { + "alg" : "SHA-1", + "content" : "bfa28296272a5915b08de9f11f34a94b0a818fd0" + }, + { + "alg" : "SHA-256", + "content" : "b613357e1bad4dfc1dead801691c9460f9585fe7c6b466bc25186212d7d18487" + }, + { + "alg" : "SHA-512", + "content" : "71db8a485a6436cb305276ea9d748f578e1a8ffa1346c8570f7038684ce53d320584174634aeffa1b51629af0171a2d6572854eb07236a83236ad1d9949988e9" + }, + { + "alg" : "SHA-384", + "content" : "8f7e2c449282244fea3151ac0c956b42bb7ae6cb2397ca8b18952aea802d33cccad6e08a5f515fc34e52bacfece18862" + }, + { + "alg" : "SHA3-384", + "content" : "72ec6c2c5de8cd074bd59dbb8215005bedc9de58795484ec2792fa867eaf13547aaca81daaf06f1ec117d29b21e70cd0" + }, + { + "alg" : "SHA3-256", + "content" : "5cf6de29555bde0317d641e8a7afd7d1ed84dddff92c80f8493b4a2873d26c41" + }, + { + "alg" : "SHA3-512", + "content" : "836acb2525ddc3b352da7db824e00c0831b25f46cb32a77c1e578b39978621e3c47da3554a901749af15b3981620875a4c4492f421a1833d8eb8e50c4804eff8" + } + ], + "licenses" : [ + { + "license" : { + "id" : "Apache-2.0", + "url" : "https://www.apache.org/licenses/LICENSE-2.0" + } + } + ], + "purl" : "pkg:maven/org.apache.maven.shared/maven-shared-utils@3.4.2?type=jar", + "externalReferences" : [ + { + "type" : "website", + "url" : "https://maven.apache.org/shared/maven-shared-utils/" + }, + { + "type" : "build-system", + "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-shared-utils/" + }, + { + "type" : "distribution-intake", + "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" + }, + { + "type" : "issue-tracker", + "url" : "https://issues.apache.org/jira/issues/?jql=project%20%3D%20MSHARED%20AND%20component%20%3D%20maven-shared-utils" + }, + { + "type" : "mailing-list", + "url" : "https://lists.apache.org/list.html?us...@maven.apache.org" + }, + { + "type" : "vcs", + "url" : "https://github.com/apache/maven-shared-utils/tree/maven-shared-utils-3.4.2" + } + ] + }, + { + "type" : "library", + "bom-ref" : "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.9.0.M3?type=jar", + "publisher" : "The Eclipse Foundation", + "group" : "org.eclipse.sisu", + "name" : "org.eclipse.sisu.plexus", + "version" : "0.9.0.M3", + "description" : "Plexus-JSR330 adapter; adds Plexus support to the Sisu-Inject container", + "scope" : "required", + "hashes" : [ + { + "alg" : "MD5", + "content" : "964e7bc9837b270566f18b87af65f5d7" + }, + { + "alg" : "SHA-1", + "content" : "b493c7abcc6e04fa0a6a20d489a3db0395c76f70" + }, + { + "alg" : "SHA-256", + "content" : "c99674d3773e26154885661711f0b6d63aa5008f5cc99227a236756d4ad9de5e" + }, + { + "alg" : "SHA-512", + "content" : "68c5df01ad522917d954b62cb3b11376b3446920e8d5cb35737de508e6acd91a36b34144933f427bbe1d29dca9097ba9dd2431c713fe18069f271a80b519f051" + }, + { + "alg" : "SHA-384", + "content" : "bd39a6cc9c18c62e64393da231b61efbf5bdeb8c0306e455bbc6e33f4b614e14023ccfbec83c943994da6684ab453092" + }, + { + "alg" : "SHA3-384", + "content" : "aa3ca83152de61ee92ba94f655190b61aa25520db903489656485a56aa9314a453a91284c0fb377dffb8160580a610c2" + }, + { + "alg" : "SHA3-256", + "content" : "434081d9dbbd4ffedafa88010d4db9a699fd2bc736e8b12b3bf3cede21f30aa9" + }, + { + "alg" : "SHA3-512", + "content" : "86e4c864bdfcbcb7d58ac08d80b2c1406cadf10424c92889d1cb181f924af19b28d53210f77cb2b0515faa7ac6fff2dacd25ae1b62c419a798bdfd2a9f3108ae" + } + ], + "licenses" : [ + { + "license" : { + "id" : "EPL-2.0" + } + } + ], + "purl" : "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.9.0.M3?type=jar", + "externalReferences" : [ + { + "type" : "website", + "url" : "http://www.eclipse.org/sisu/org.eclipse.sisu.plexus/" + }, + { + "type" : "build-system", + "url" : "https://ci.eclipse.org/sisu/job/sisu.inject/" + }, + { + "type" : "distribution-intake", + "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" + }, + { + "type" : "issue-tracker", + "url" : "https://github.com/eclipse/sisu.inject/issues" + }, + { + "type" : "mailing-list", + "url" : "http://dev.eclipse.org/mhonarc/lists/sisu-dev/" + }, + { + "type" : "vcs", + "url" : "https://github.com/eclipse/sisu.inject/org.eclipse.sisu.plexus" + } + ] + }, + { + "type" : "library", + "bom-ref" : "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.9.0.M3?type=jar", + "publisher" : "The Eclipse Foundation", + "group" : "org.eclipse.sisu", + "name" : "org.eclipse.sisu.inject", + "version" : "0.9.0.M3", + "description" : "JSR330-based container; supports classpath scanning, auto-binding, and dynamic auto-wiring", + "scope" : "required", + "hashes" : [ + { + "alg" : "MD5", + "content" : "643a13084e0ac59cdda06319e1b348ea" + }, + { + "alg" : "SHA-1", + "content" : "3665002ba4d16dfa779ef658a63d0608c4bd898b" + }, + { + "alg" : "SHA-256", + "content" : "15335c4dcf082f599fb8eddcfb58d6a7e9a9c97de2883c257089a479b9b24522" + }, + { + "alg" : "SHA-512", + "content" : "76267078f3dd887fd7c4a0931d0ae057d5f51478f712ce4bb5530cfa5c2aa18a8dbe935b32c1afb01a4e2cde44d30579baf5868b8b63ee066ea0714fd9d8a81c" + }, + { + "alg" : "SHA-384", + "content" : "d24164f8aaae165de8533530b90168228e7d107a5eeb63997bf6e2d41f1adfaabf29aa9ab4f08e3445c69aa57f6c09b8" + }, + { + "alg" : "SHA3-384", + "content" : "aab9bce13f047bcdd8d47420f80e88a314f3566bf7edcd7d37cf286865f45586fda8745793eb2a54c506759f9654bd5b" + }, + { + "alg" : "SHA3-256", + "content" : "d9e302304b0f99703243f697f72b12e42df692553c08ef9d2d2e0eb83847eab7" + }, + { + "alg" : "SHA3-512", + "content" : "8ac0b60618e01e819fcabcfd210176310d98f9856b49cafd5dfb451393b791b1ed43fc17e359c5868662dc76e0059e23a152c5564f7ce94ca4720bd092cb29d0" + } + ], + "licenses" : [ + { + "license" : { + "id" : "EPL-2.0" + } + } + ], + "purl" : "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.9.0.M3?type=jar", + "externalReferences" : [ + { + "type" : "website", + "url" : "http://www.eclipse.org/sisu/org.eclipse.sisu.inject/" + }, + { + "type" : "build-system", + "url" : "https://ci.eclipse.org/sisu/job/sisu.inject/" + }, + { + "type" : "distribution-intake", + "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" + }, + { + "type" : "issue-tracker", + "url" : "https://github.com/eclipse/sisu.inject/issues" + }, + { + "type" : "mailing-list", + "url" : "http://dev.eclipse.org/mhonarc/lists/sisu-dev/" + }, + { + "type" : "vcs", + "url" : "https://github.com/eclipse/sisu.inject/org.eclipse.sisu.inject" + } + ] + }, + { + "type" : "library", + "bom-ref" : "pkg:maven/com.google.inject/guice@5.1.0?type=jar", + "publisher" : "Google, Inc.", + "group" : "com.google.inject", + "name" : "guice", + "version" : "5.1.0", + "description" : "Guice is a lightweight dependency injection framework for Java 6 and above", + "scope" : "required", + "hashes" : [ + { + "alg" : "MD5", + "content" : "2560169296aa94492af34af2115e9511" + }, + { + "alg" : "SHA-1", + "content" : "da25056c694c54ba16e78e4fc35f17fc60f0d1b4" + }, + { + "alg" : "SHA-256", + "content" : "4130e50bfac48099c860f0d903b91860c81a249c90f38245f8fed58fc817bc26" + }, + { + "alg" : "SHA-512", + "content" : "b9c7a9b815d9ce387ebf6d58a71541da1be3cb8d847358133dc1f35ca45315bb9db11c13f3238adb643670759a58fd106247039f42c10759374a9b361c62e99e" + }, + { + "alg" : "SHA-384", + "content" : "1f7e6e7555c97752e2a3a7dc07473384762467c24a0fc8f4c93c0f209ef361ecd4bf2be847281798dd84f68fc8c54b2f" + }, + { + "alg" : "SHA3-384", + "content" : "59b895108174073d9889ba3e18566eb5e0785310e90dbd918dfb06af5bdf0d72e8a54094c6109090f43e242daa4d6ebf" + }, + { + "alg" : "SHA3-256", + "content" : "5a9518cdc72dd7fb8d7848500cb8c97c7689e64a52028dabf44e61a933ffd853" + }, + { + "alg" : "SHA3-512", + "content" : "5b53b7ee09cf057f83acf86de3f35fc45c04cd95c01e78b59fc1b4d9322e17ecaec1d6c5d37cd37084b602c1a74f6457342e27c6271fd140ade3190448c9fb27" + } + ], + "licenses" : [ + { + "license" : { + "id" : "Apache-2.0" + } + } + ], + "purl" : "pkg:maven/com.google.inject/guice@5.1.0?type=jar", + "externalReferences" : [ + { + "type" : "website", + "url" : "https://github.com/google/guice/guice" + }, + { + "type" : "build-system", + "url" : "https://travis-ci.org/google/guice" + }, + { + "type" : "distribution-intake", + "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" + }, + { + "type" : "issue-tracker", + "url" : "https://github.com/google/guice/issues/" + }, + { + "type" : "mailing-list", + "url" : "http://groups.google.com/group/google-guice/topics" + }, + { + "type" : "vcs", + "url" : "https://github.com/google/guice/guice" + } + ] + }, + { + "type" : "library", + "bom-ref" : "pkg:maven/aopalliance/aopalliance@1.0?type=jar", + "group" : "aopalliance", + "name" : "aopalliance", + "version" : "1.0", + "description" : "AOP Alliance", + "scope" : "required", + "hashes" : [ + { + "alg" : "MD5", + "content" : "04177054e180d09e3998808efa0401c7" + }, + { + "alg" : "SHA-1", + "content" : "0235ba8b489512805ac13a8f9ea77a1ca5ebe3e8" + }, + { + "alg" : "SHA-256", + "content" : "0addec670fedcd3f113c5c8091d783280d23f75e3acb841b61a9cdb079376a08" + }, + { + "alg" : "SHA-512", + "content" : "3f44a932d8c00cfeee2eb057bcd7c301a2d029063e0a916e1e20b3aec4877d19d67a2fd8aaf58fa2d5a00133d1602128a7f50912ffb6cabc7b0fdc7fbda3f8a1" + }, + { + "alg" : "SHA-384", + "content" : "4dddf44338b5aff9580da2532b81c0ac3e1d09e1f28c6db871a55cad442b705dd7791eb07f9d4577d49d0be3673ba783" + }, + { + "alg" : "SHA3-384", + "content" : "2bd64cbaf769c6e4e85e34f7a6119d89e16fbf55af3fc5d6cbd52eb214c367dec1ac7b9062ee0fb35a2e0acfc7c477e1" + }, + { + "alg" : "SHA3-256", + "content" : "d4a726b2bf8aa58197021a7d8fca674b4b2790d4c48de43a92f728866a91c2f0" + }, + { + "alg" : "SHA3-512", + "content" : "830bc3f8328be76897990e9b9fc42eef02623115e456af96ad09b20900ad615519c8c8de60155ac04fb332eaa9510110d52edd13911af76271c71d91cbd789cc" + } + ], + "licenses" : [ + { + "license" : { + "name" : "Public Domain" + } + } + ], + "purl" : "pkg:maven/aopalliance/aopalliance@1.0?type=jar", + "externalReferences" : [ + { + "type" : "website", + "url" : "http://aopalliance.sourceforge.net" + } + ] + }, + { + "type" : "library", + "bom-ref" : "pkg:maven/com.google.guava/guava@33.4.8-jre?type=jar", + "group" : "com.google.guava", + "name" : "guava", + "version" : "33.4.8-jre", + "description" : "Guava is a suite of core and expanded libraries that include utility classes, Google's collections, I/O classes, and much more.", + "scope" : "required", + "hashes" : [ + { + "alg" : "MD5", + "content" : "72920caab34426c5815e3b00f80e3b01" + }, + { + "alg" : "SHA-1", + "content" : "e70a3268e6cd3e7d458aa15787ce6811c34e96ae" + }, + { + "alg" : "SHA-256", + "content" : "f3d7f57f67fd622f4d468dfdd692b3a5e3909246c28017ac3263405f0fe617ed" + }, + { + "alg" : "SHA-512", + "content" : "82c43d82fee2b3264e53cd2e9451865f9467ec0baa68d0ddfffa06a1e5465872913150ef96e99ea91daec4387248d832ec9398859f2fa5f08f65caf103306ba3" + }, + { + "alg" : "SHA-384", + "content" : "6645343c3c7a989539d8e77a53b0b848bc1cd739a405353aa6c00b3e4e6c58a93770c988e53d4c0326ed7ea608eb5820" + }, + { + "alg" : "SHA3-384", + "content" : "cc6d1a11626c5ba5fdec819fdc4c0e97afa3e946744dbf9dae10f9ad77f6570703356e301a686c7727b80095d3ec4bea" + }, + { + "alg" : "SHA3-256", + "content" : "b09ae5778552402e8e5780adbee939191ea149cbf0faf2f9c15a818167730df0" + }, + { + "alg" : "SHA3-512", + "content" : "de052d07cf9a308fe4c1a0743534cf8b651fbd6e5f570b0c1a3d9a3269669fbae164bbbfcd089a52729b3a1d8917fbb73c1dac65cb61f93fc200568f32d09a27" + } + ], + "licenses" : [ + { + "license" : { + "id" : "Apache-2.0" + } + } + ], + "purl" : "pkg:maven/com.google.guava/guava@33.4.8-jre?type=jar", + "externalReferences" : [ + { + "type" : "website", + "url" : "https://github.com/google/guava" + }, + { + "type" : "build-system", + "url" : "https://github.com/google/guava/actions" + }, + { + "type" : "distribution-intake", + "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" + }, + { + "type" : "issue-tracker", + "url" : "https://github.com/google/guava/issues" + }, + { + "type" : "vcs", + "url" : "https://github.com/google/guava/guava" + } + ] + }, + { + "type" : "library", + "bom-ref" : "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar", + "group" : "org.jspecify", + "name" : "jspecify", + "version" : "1.0.0", + "description" : "An artifact of well-named and well-specified annotations to power static analysis checks", + "scope" : "required", + "hashes" : [ + { + "alg" : "MD5", + "content" : "9133aba420d0ca3b001dbb6ae9992cf6" + }, + { + "alg" : "SHA-1", + "content" : "7425a601c1c7ec76645a78d22b8c6a627edee507" + }, + { + "alg" : "SHA-256", + "content" : "1fad6e6be7557781e4d33729d49ae1cdc8fdda6fe477bb0cc68ce351eafdfbab" + }, + { + "alg" : "SHA-512", + "content" : "efded31ef5b342f09422935076e599789076431e93a746685c0607e7de5592719ba6aacde0be670b3f064d1e85630d58d5bce6b34aed2a288fdb34f745efb7bc" + }, + { + "alg" : "SHA-384", + "content" : "814f860e5a44ead6c457676841eef471a8b87be31b84c60a8a4477a18a9cbcb6e3c2ae700969d5c5e52309d961e0537a" + }, + { + "alg" : "SHA3-384", + "content" : "c8844e5b71e5ecfbb7366097ce34af2f5863d86d5ccc3f9ec384d8ade4b60ccc8124c7fc88664f1afd2b0962fc8775bf" + }, + { + "alg" : "SHA3-256", + "content" : "4b4f08ad7606a3ac62997779484919a302267b26d26ee19125f8a7eea60e8a71" + }, + { + "alg" : "SHA3-512", + "content" : "65c6845ebae981cb81b61107707ced39f5b377dae970b47606ef482aaf10e3729def0da40d9377c43abbfb483a5ceae039b0d51c129c50a6d36ad351a5d6b01e" + } + ], + "licenses" : [ + {
[... 213681 lines stripped ...]