Added: release/camel/apache-camel/4.12.0/apache-camel-4.12.0-sbom.xml ============================================================================== --- release/camel/apache-camel/4.12.0/apache-camel-4.12.0-sbom.xml (added) +++ release/camel/apache-camel/4.12.0/apache-camel-4.12.0-sbom.xml Thu May 29 14:29:34 2025 @@ -0,0 +1,125609 @@ +<?xml version="1.0" encoding="UTF-8"?> +<bom serialNumber="urn:uuid:5ab069b7-f3ca-30e4-8de6-b3d6f4b4d6ee" version="1" xmlns="http://cyclonedx.org/schema/bom/1.6";> + <metadata> + <lifecycles> + <lifecycle> + <phase>build</phase> + </lifecycle> + </lifecycles> + <tools> + <components> + <component type="library"> + <author>OWASP Foundation</author> + <group>org.cyclonedx</group> + <name>cyclonedx-maven-plugin</name> + <version>2.9.1</version> + <description>CycloneDX Maven plugin</description> + <hashes> + <hash alg="MD5">9c7a565cf28cce58557d0c621c5ea4b1</hash> + <hash alg="SHA-1">be882d5a22050bfa9d19090b1420c188617d0e1c</hash> + <hash alg="SHA-256">698e0f37184a5b28c245c4065fd036dfce253b52f82fbb7113d81d36326cc249</hash> + <hash alg="SHA-512">c0f0b11026858166f872a2eb54719492e5cecaa0bc9cd6b30b3ecb4a174eed220f4a1b5829d18d6734128e778d3cb3db7ffed177c92866133129cb29081814a0</hash> + <hash alg="SHA-384">d80964707dfe5caca8c70521d5066f57589304c0a657e6fbc7c0614ea0fc7b3b3dbe7778361eee0f54ba111e9cb0ffcb</hash> + <hash alg="SHA3-384">80bc3a275d9514bc457461ff52a72add8c7ecbbc01d8912efce57139016c544ee776981851be0a58fa977ab4221f703f</hash> + <hash alg="SHA3-256">142317d6f245390f4fd2d0c100b16281b8dfc5c0c2cff86943bdcc97039cb699</hash> + <hash alg="SHA3-512">af0fb9137c90b65d1a07f72e4d51ae509956cdb8800f35c961b037cdda1fe4a14ce3b496cef71ba85f1621affcfe29cd42704ae4191ff0b090a9602087c8997b</hash> + </hashes> + </component> + </components> + </tools> + <component type="library" bom-ref="pkg:maven/org.apache.camel/camel@4.12.0?type=pom"> + <publisher>The Apache Software Foundation</publisher> + <group>org.apache.camel</group> + <name>camel</name> + <version>4.12.0</version> + <description>Camel Root POM</description> + <licenses> + <license> + <id>Apache-2.0</id> + <url>https://www.apache.org/licenses/LICENSE-2.0</url> + </license> + </licenses> + <purl>pkg:maven/org.apache.camel/camel@4.12.0?type=pom</purl> + <externalReferences> + <reference type="website"> + <url>https://camel.apache.org</url> + </reference> + <reference type="distribution-intake"> + <url>https://repository.apache.org/service/local/staging/deploy/maven2</url> + </reference> + <reference type="issue-tracker"> + <url>https://issues.apache.org/jira/browse/CAMEL</url> + </reference> + <reference type="mailing-list"> + <url>dev-subscr...@camel.apache.org</url> + </reference> + <reference type="vcs"> + <url>https://gitbox.apache.org/repos/asf?p=camel.git;a=summary</url> + </reference> + </externalReferences> + </component> + <properties> + <property name="maven.goal">makeAggregateBom</property> + <property name="maven.scopes">compile,provided,runtime,system</property> + <property name="cdx:reproducible">enabled</property> + </properties> + </metadata> + <components> + <component type="library" bom-ref="pkg:maven/org.apache.camel/camel-buildtools@4.12.0?type=jar"> + <publisher>The Apache Software Foundation</publisher> + <group>org.apache.camel</group> + <name>camel-buildtools</name> + <version>4.12.0</version> + <description>The build tools for the Apache Camel project</description> + <licenses> + <license> + <id>Apache-2.0</id> + <url>https://www.apache.org/licenses/LICENSE-2.0</url> + </license> + </licenses> + <purl>pkg:maven/org.apache.camel/camel-buildtools@4.12.0?type=jar</purl> + <externalReferences> + <reference type="website"> + <url>https://camel.apache.org/camel-buildtools</url> + </reference> + <reference type="distribution-intake"> + <url>https://repository.apache.org/service/local/staging/deploy/maven2</url> + </reference> + <reference type="issue-tracker"> + <url>https://issues.apache.org/jira/browse/CAMEL</url> + </reference> + <reference type="mailing-list"> + <url>dev-subscr...@camel.apache.org</url> + </reference> + <reference type="vcs"> + <url>https://gitbox.apache.org/repos/asf?p=camel.git;a=summary/camel-buildtools</url> + </reference> + </externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.apache.camel/camel-parent@4.12.0?type=pom"> + <publisher>The Apache Software Foundation</publisher> + <group>org.apache.camel</group> + <name>camel-parent</name> + <version>4.12.0</version> + <description>Camel Parent POM</description> + <licenses> + <license> + <id>Apache-2.0</id> + <url>https://www.apache.org/licenses/LICENSE-2.0</url> + </license> + </licenses> + <purl>pkg:maven/org.apache.camel/camel-parent@4.12.0?type=pom</purl> + <externalReferences> + <reference type="website"> + <url>https://camel.apache.org/camel-parent</url> + </reference> + <reference type="distribution-intake"> + <url>https://repository.apache.org/service/local/staging/deploy/maven2</url> + </reference> + <reference type="issue-tracker"> + <url>https://issues.apache.org/jira/browse/CAMEL</url> + </reference> + <reference type="mailing-list"> + <url>dev-subscr...@camel.apache.org</url> + </reference> + <reference type="vcs"> + <url>https://gitbox.apache.org/repos/asf?p=camel.git;a=summary/camel-parent</url> + </reference> + </externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.apache.camel/camel-etc@4.12.0?type=pom"> + <publisher>The Apache Software Foundation</publisher> + <group>org.apache.camel</group> + <name>camel-etc</name> + <version>4.12.0</version> + <description>Misc stuff</description> + <licenses> + <license> + <id>Apache-2.0</id> + <url>https://www.apache.org/licenses/LICENSE-2.0</url> + </license> + </licenses> + <purl>pkg:maven/org.apache.camel/camel-etc@4.12.0?type=pom</purl> + <externalReferences> + <reference type="website"> + <url>https://camel.apache.org/camel-parent/camel-etc</url> + </reference> + <reference type="distribution-intake"> + <url>https://repository.apache.org/service/local/staging/deploy/maven2</url> + </reference> + <reference type="issue-tracker"> + <url>https://issues.apache.org/jira/browse/CAMEL</url> + </reference> + <reference type="mailing-list"> + <url>dev-subscr...@camel.apache.org</url> + </reference> + <reference type="vcs"> + <url>https://gitbox.apache.org/repos/asf?p=camel.git;a=summary/camel-parent/camel-etc</url> + </reference> + </externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.apache.camel/tooling@4.12.0?type=pom"> + <publisher>The Apache Software Foundation</publisher> + <group>org.apache.camel</group> + <name>tooling</name> + <version>4.12.0</version> + <description>Camel Tooling</description> + <licenses> + <license> + <id>Apache-2.0</id> + <url>https://www.apache.org/licenses/LICENSE-2.0</url> + </license> + </licenses> + <purl>pkg:maven/org.apache.camel/tooling@4.12.0?type=pom</purl> + <externalReferences> + <reference type="website"> + <url>https://camel.apache.org/camel-parent/tooling</url> + </reference> + <reference type="distribution-intake"> + <url>https://repository.apache.org/service/local/staging/deploy/maven2</url> + </reference> + <reference type="issue-tracker"> + <url>https://issues.apache.org/jira/browse/CAMEL</url> + </reference> + <reference type="mailing-list"> + <url>dev-subscr...@camel.apache.org</url> + </reference> + <reference type="vcs"> + <url>https://gitbox.apache.org/repos/asf?p=camel.git;a=summary/camel-parent/tooling</url> + </reference> + </externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.apache.camel/camel-tooling-util@4.12.0?type=jar"> + <publisher>The Apache Software Foundation</publisher> + <group>org.apache.camel</group> + <name>camel-tooling-util</name> + <version>4.12.0</version> + <description>Tooling utilities</description> + <licenses> + <license> + <id>Apache-2.0</id> + <url>https://www.apache.org/licenses/LICENSE-2.0</url> + </license> + </licenses> + <purl>pkg:maven/org.apache.camel/camel-tooling-util@4.12.0?type=jar</purl> + <externalReferences> + <reference type="website"> + <url>https://camel.apache.org/camel-parent/tooling/camel-tooling-util</url> + </reference> + <reference type="distribution-intake"> + <url>https://repository.apache.org/service/local/staging/deploy/maven2</url> + </reference> + <reference type="issue-tracker"> + <url>https://issues.apache.org/jira/browse/CAMEL</url> + </reference> + <reference type="mailing-list"> + <url>dev-subscr...@camel.apache.org</url> + </reference> + <reference type="vcs"> + <url>https://gitbox.apache.org/repos/asf?p=camel.git;a=summary/camel-parent/tooling/camel-tooling-util</url> + </reference> + </externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.junit.jupiter/junit-jupiter-api@5.12.2?type=jar"> + <group>org.junit.jupiter</group> + <name>junit-jupiter-api</name> + <version>5.12.2</version> + <description>Module "junit-jupiter-api" of JUnit 5.</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">402d4a6ff77b83558384ff3c31d6cb7b</hash> + <hash alg="SHA-1">6de3a3256c5d90f4a439edcb6c2e8dc5180907b0</hash> + <hash alg="SHA-256">0b9ca728e4bcd9adc57f29deb9556ff9ed5e08b4e8843b875aba4e4e3e04f092</hash> + <hash alg="SHA-512">cfc017675fd2fb8b54974845fd1d68e2c42534e59a03dde5b0f58ef4e77b22c0793d66f1a4446467caf6b7ce6ad533636ede078507ecbcedfa78ad8d8a831993</hash> + <hash alg="SHA-384">d1267b37c376220ad737050cd876b39afa67e1b8b0df76e7910f47c5048252862850050b30d02b19de14da439c4a73a4</hash> + <hash alg="SHA3-384">8e2859cfd02636d9b7fa481e5c47cb7f3d1bb366cedd262e6272daa4abacf558e9631fcc6e81760b220aeffc9ff28324</hash> + <hash alg="SHA3-256">1ed6834b1cc2f94336b3d76e53b22a86ab91014ca4355b372b8b4105659eff87</hash> + <hash alg="SHA3-512">1fd59cc374c4f5e9f37b24b392b2ccba4a8f7acf8dfb2a233cc29a3cd185eeed28fbff430979e04b54ceea89424da9c01273b7b06c00f34db0f003121c453a9e</hash> + </hashes> + <licenses> + <license> + <id>EPL-2.0</id> + </license> + </licenses> + <purl>pkg:maven/org.junit.jupiter/junit-jupiter-api@5.12.2?type=jar</purl> + <externalReferences> + <reference type="website"> + <url>https://junit.org/junit5/</url> + </reference> + <reference type="vcs"> + <url>https://github.com/junit-team/junit5</url> + </reference> + </externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.opentest4j/opentest4j@1.3.0?type=jar"> + <group>org.opentest4j</group> + <name>opentest4j</name> + <version>1.3.0</version> + <description>Open Test Alliance for the JVM</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">03c404f727531f3fd3b4c73997899327</hash> + <hash alg="SHA-1">152ea56b3a72f655d4fd677fc0ef2596c3dd5e6e</hash> + <hash alg="SHA-256">48e2df636cab6563ced64dcdff8abb2355627cb236ef0bf37598682ddf742f1b</hash> + <hash alg="SHA-512">78fc698a7871bb50305e3657893c10500595f043348d875f57bc39ca4a6a51eda3967b7c8c8a7ec3e8f85f2171bca4aa98823e912e416e87e81c6ba5b70a37c3</hash> + <hash alg="SHA-384">10398b6998c9202a0731e2e19ae1c3f9d8a83582c2663fe7bdda15794ee6fa816727dbd8f7c7164bd5395ee1cfe7c97e</hash> + <hash alg="SHA3-384">3abe706fd78509c25a402c7bbf6f9ddf71ffb5b35054864ba0fdf7902207115f888a0ba728fd71d2e87a9360d2498121</hash> + <hash alg="SHA3-256">d961907a1bfa1dcda329dca494ffbc251b31fabcaca5ab7095661a8ce3c1d654</hash> + <hash alg="SHA3-512">0ad661617bcac51bcd26f7ad4611c69b1fd9811b50dbf734e041a3243ab1f845e7796620e8a7c40c4a2df3946864598b1251396c7d9bd813203d82710788cce0</hash> + </hashes> + <licenses> + <license> + <id>Apache-2.0</id> + </license> + </licenses> + <purl>pkg:maven/org.opentest4j/opentest4j@1.3.0?type=jar</purl> + <externalReferences> + <reference type="website"> + <url>https://github.com/ota4j-team/opentest4j</url> + </reference> + <reference type="vcs"> + <url>https://github.com/ota4j-team/opentest4j</url> + </reference> + </externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.junit.platform/junit-platform-commons@1.12.2?type=jar"> + <group>org.junit.platform</group> + <name>junit-platform-commons</name> + <version>1.12.2</version> + <description>Module "junit-platform-commons" of JUnit 5.</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">ee5021f0b2cc09d82fdf4d4c9075cd4e</hash> + <hash alg="SHA-1">b89e88a89ee009937374a4c96912e007b34c8e35</hash> + <hash alg="SHA-256">e683a01e85dfabea520c056ac6015a6162756e602ec653c0da85e233f0afbc18</hash> + <hash alg="SHA-512">633fc69494adde3750ae5003097bbeea1b7d4b68a079f11dac53733ce00eb7e00d1cd5276879ce88a5b1e6889f100b07b422c1f9e575485e86c3cccc8b06dbfa</hash> + <hash alg="SHA-384">638caf5e426b79edb65703b3c992510b418666bcaca1883b695df77d3f2ced4e730a8d14f7cba42f31651eb9a9a5bec5</hash> + <hash alg="SHA3-384">fa5ae501edb1521ec2ba7953a6a28ab242114b7e83bfd1f340250d9d1710073c94abb04c89be12f56078162237144b1d</hash> + <hash alg="SHA3-256">f2686ea2425a14b3d8c41058bdd5895c4d0408624f4e270fa9314dbc4e34460b</hash> + <hash alg="SHA3-512">235c504dccc54400d90482e99148ae5016088c41e41d8cde396c7ceaf69a5232ebaf4b4c9c58a0dd6503681a419b3dd9770525ad32ee57da8fc01164a27eec62</hash> + </hashes> + <licenses> + <license> + <id>EPL-2.0</id> + </license> + </licenses> + <purl>pkg:maven/org.junit.platform/junit-platform-commons@1.12.2?type=jar</purl> + <externalReferences> + <reference type="website"> + <url>https://junit.org/junit5/</url> + </reference> + <reference type="vcs"> + <url>https://github.com/junit-team/junit5</url> + </reference> + </externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.apiguardian/apiguardian-api@1.1.2?type=jar"> + <group>org.apiguardian</group> + <name>apiguardian-api</name> + <version>1.1.2</version> + <description>@API Guardian</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">8c7de3f82037fa4a2e8be2a2f13092af</hash> + <hash alg="SHA-1">a231e0d844d2721b0fa1b238006d15c6ded6842a</hash> + <hash alg="SHA-256">b509448ac506d607319f182537f0b35d71007582ec741832a1f111e5b5b70b38</hash> + <hash alg="SHA-512">d7ccd0e7019f1a997de39d66dc0ad4efe150428fdd7f4c743c93884f1602a3e90135ad34baea96d5b6d925ad6c0c8487c8e78304f0a089a12383d4a62e2c9a61</hash> + <hash alg="SHA-384">5ae11cfedcee7da43a506a67946ddc8a7a2622284a924ba78f74541e9a22db6868a15f5d84edb91a541e38afded734ea</hash> + <hash alg="SHA3-384">c146116b3dfd969200b2ce52d96b92dd02d6f5a45a86e7e85edf35600ddbc2f3c6e8a1ad7e2db4dcd2c398c09fad0927</hash> + <hash alg="SHA3-256">b4b436d7f615fc0b820204e69f83c517d1c1ccc5f6b99e459209ede4482268de</hash> + <hash alg="SHA3-512">7b95b7ac68a6891b8901b5507acd2c24a0c1e20effa63cd513764f513eab4eb55f8de5178edbe0a400c11f3a18d3f56243569d6d663100f06dd98288504c09c5</hash> + </hashes> + <licenses> + <license> + <id>Apache-2.0</id> + </license> + </licenses> + <purl>pkg:maven/org.apiguardian/apiguardian-api@1.1.2?type=jar</purl> + <externalReferences> + <reference type="website"> + <url>https://github.com/apiguardian-team/apiguardian</url> + </reference> + <reference type="vcs"> + <url>https://github.com/apiguardian-team/apiguardian</url> + </reference> + </externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.junit.jupiter/junit-jupiter-params@5.12.2?type=jar"> + <group>org.junit.jupiter</group> + <name>junit-jupiter-params</name> + <version>5.12.2</version> + <description>Module "junit-jupiter-params" of JUnit 5.</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">9a48afce7bd438cfd5ee5d8c39454ad8</hash> + <hash alg="SHA-1">ff1434a66d1fb84c2c709cde2e2d56d5c8f4fad3</hash> + <hash alg="SHA-256">b219ffa949b90a71aa3b6c2b606456b82bca0b2089b7459c8ff461156ff59b0f</hash> + <hash alg="SHA-512">d2ce4d3bd3d44f0cd8e49aaa6dcfb6a322995a9fc616f733c27290e952adc045897ede39f636392971057d51f14c29e6dc72421b0a78bd026ffbe5d1de191578</hash> + <hash alg="SHA-384">734edca7640095da30b17d53aec3cce0a00580dd87439e61c7c7cd571d62e24b01b23d5fe5bfa9f614b4082995a91dde</hash> + <hash alg="SHA3-384">a412b0174054273fd642d58b94af01a7c937d822ef253881dad561ea03c84dcaedbf54e476aa6cc8b29d9d219a483255</hash> + <hash alg="SHA3-256">141898d69a3de7285cac2b7702ecf964e57f60c857d6362436bc20a454cf81a1</hash> + <hash alg="SHA3-512">3b98430790cbdc0220b43516ba479e30f2e91a4f41e84981437bb3ed6361b0f3449e006d83d965ffe0c2c20c9a9be096ce7d616e73b6f88a57a40d2f0338387c</hash> + </hashes> + <licenses> + <license> + <id>EPL-2.0</id> + </license> + </licenses> + <purl>pkg:maven/org.junit.jupiter/junit-jupiter-params@5.12.2?type=jar</purl> + <externalReferences> + <reference type="website"> + <url>https://junit.org/junit5/</url> + </reference> + <reference type="vcs"> + <url>https://github.com/junit-team/junit5</url> + </reference> + </externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.junit.jupiter/junit-jupiter-engine@5.12.2?type=jar"> + <group>org.junit.jupiter</group> + <name>junit-jupiter-engine</name> + <version>5.12.2</version> + <description>Module "junit-jupiter-engine" of JUnit 5.</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">71c710ffe677f9983c6969eb10cd442f</hash> + <hash alg="SHA-1">b8df7575b8cd3a94dbe27b481d1cd52c57864559</hash> + <hash alg="SHA-256">f576c06b8accde9985063b8bc80526cb980eec24dee0b7221fc8ddd7ace65800</hash> + <hash alg="SHA-512">430e070046494943b14f4b8337112c1f3c932e20218729c1b023a0ef7d7e8909ef314b841957d5002b42f4e0b07fa0408a0db7a83f89d625c55b5598400b4573</hash> + <hash alg="SHA-384">af83463826783601e4dc2caf7589e90fecbb21f5027bb1e4eaca4358b3ede25ddc58481669dd05942280f410215d30e6</hash> + <hash alg="SHA3-384">50d1a83f6a3c55a1aae084cc3d18f9048f0746ddb882849cef504c073be328d14fe8a097e035d0c7f4ab64c885c6dacf</hash> + <hash alg="SHA3-256">d017f84adef1d12efe78965b1e27d853cfbe54236b1643fef19c7ecfac9dc572</hash> + <hash alg="SHA3-512">308333bad82308c2639b856607bc0be147fbf6dea581c607b0c7aa43266f665dd067b4e04c33ed4eca0437f4fba75db595a8650401fcfa70c5efbb6eb33694b1</hash> + </hashes> + <licenses> + <license> + <id>EPL-2.0</id> + </license> + </licenses> + <purl>pkg:maven/org.junit.jupiter/junit-jupiter-engine@5.12.2?type=jar</purl> + <externalReferences> + <reference type="website"> + <url>https://junit.org/junit5/</url> + </reference> + <reference type="vcs"> + <url>https://github.com/junit-team/junit5</url> + </reference> + </externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.junit.platform/junit-platform-engine@1.12.2?type=jar"> + <group>org.junit.platform</group> + <name>junit-platform-engine</name> + <version>1.12.2</version> + <description>Module "junit-platform-engine" of JUnit 5.</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">a28e43677b7d9519f5e87490356994f8</hash> + <hash alg="SHA-1">8519ece93f91b8115705d36be2c36d49808935cd</hash> + <hash alg="SHA-256">cef0efcb5bd2e05e2b808d38bab5c655089c0c3001527376e74cb606a7911ec8</hash> + <hash alg="SHA-512">e240f0a2ac871683fb327d27cf75e1a3887df1316b7a828ff2a17bd496e4fb48ca44b9d49c8bf1164683f155410fddf623a3beaae61608e4af76342eae484edc</hash> + <hash alg="SHA-384">ad2d9ff799732f0a42b833121c400c3237f58f9c20e698760d1643cf393f715fff9f5875880456ad6b4a5ce6fc33f9c3</hash> + <hash alg="SHA3-384">f41049424bb8390bdbc6361f5954553b2ce9a1cea543bd44f147ce120c7908803d8fc14614a2118300e6405bf67e9718</hash> + <hash alg="SHA3-256">38e025131be3924ec93088cf52be79b490c95950fb08b55d940ffbc86a3e5635</hash> + <hash alg="SHA3-512">2f50ddc38dfadf86ba174e90465e6d9470c4ceb8310a11bb14c2ad975291fa8b2fdb1dc4357eb5c15d6875d9b515fe08ef710aefc77974813c76fb226d73e7a2</hash> + </hashes> + <licenses> + <license> + <id>EPL-2.0</id> + </license> + </licenses> + <purl>pkg:maven/org.junit.platform/junit-platform-engine@1.12.2?type=jar</purl> + <externalReferences> + <reference type="website"> + <url>https://junit.org/junit5/</url> + </reference> + <reference type="vcs"> + <url>https://github.com/junit-team/junit5</url> + </reference> + </externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.apache.camel/tooling-parent@4.12.0?type=pom"> + <publisher>The Apache Software Foundation</publisher> + <group>org.apache.camel</group> + <name>tooling-parent</name> + <version>4.12.0</version> + <description>Camel Tooling Parent POM</description> + <licenses> + <license> + <id>Apache-2.0</id> + <url>https://www.apache.org/licenses/LICENSE-2.0</url> + </license> + </licenses> + <purl>pkg:maven/org.apache.camel/tooling-parent@4.12.0?type=pom</purl> + <externalReferences> + <reference type="website"> + <url>https://camel.apache.org/camel-parent/tooling/tooling-parent</url> + </reference> + <reference type="distribution-intake"> + <url>https://repository.apache.org/service/local/staging/deploy/maven2</url> + </reference> + <reference type="issue-tracker"> + <url>https://issues.apache.org/jira/browse/CAMEL</url> + </reference> + <reference type="mailing-list"> + <url>dev-subscr...@camel.apache.org</url> + </reference> + <reference type="vcs"> + <url>https://gitbox.apache.org/repos/asf?p=camel.git;a=summary/camel-parent/tooling/tooling-parent</url> + </reference> + </externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.apache.camel/maven-plugins@4.12.0?type=pom"> + <publisher>The Apache Software Foundation</publisher> + <group>org.apache.camel</group> + <name>maven-plugins</name> + <version>4.12.0</version> + <description>Camel Maven Plugins</description> + <licenses> + <license> + <id>Apache-2.0</id> + <url>https://www.apache.org/licenses/LICENSE-2.0</url> + </license> + </licenses> + <purl>pkg:maven/org.apache.camel/maven-plugins@4.12.0?type=pom</purl> + <externalReferences> + <reference type="website"> + <url>https://camel.apache.org/camel-parent/tooling/tooling-parent/maven-plugins</url> + </reference> + <reference type="distribution-intake"> + <url>https://repository.apache.org/service/local/staging/deploy/maven2</url> + </reference> + <reference type="issue-tracker"> + <url>https://issues.apache.org/jira/browse/CAMEL</url> + </reference> + <reference type="mailing-list"> + <url>dev-subscr...@camel.apache.org</url> + </reference> + <reference type="vcs"> + <url>https://gitbox.apache.org/repos/asf?p=camel.git;a=summary/camel-parent/tooling/tooling-parent/maven-plugins</url> + </reference> + </externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.apache.camel/bom-generator-maven-plugin@4.12.0?type=maven-plugin"> + <publisher>The Apache Software Foundation</publisher> + <group>org.apache.camel</group> + <name>bom-generator-maven-plugin</name> + <version>4.12.0</version> + <description>Maven plugin to help generating BOM projects</description> + <licenses> + <license> + <id>Apache-2.0</id> + <url>https://www.apache.org/licenses/LICENSE-2.0</url> + </license> + </licenses> + <purl>pkg:maven/org.apache.camel/bom-generator-maven-plugin@4.12.0?type=maven-plugin</purl> + <externalReferences> + <reference type="website"> + <url>https://camel.apache.org/camel-parent/tooling/tooling-parent/maven-plugins/bom-generator-maven-plugin</url> + </reference> + <reference type="distribution-intake"> + <url>https://repository.apache.org/service/local/staging/deploy/maven2</url> + </reference> + <reference type="issue-tracker"> + <url>https://issues.apache.org/jira/browse/CAMEL</url> + </reference> + <reference type="mailing-list"> + <url>dev-subscr...@camel.apache.org</url> + </reference> + <reference type="vcs"> + <url>https://gitbox.apache.org/repos/asf?p=camel.git;a=summary/camel-parent/tooling/tooling-parent/maven-plugins/bom-generator-maven-plugin</url> + </reference> + </externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.9.23?type=jar"> + <publisher>The Apache Software Foundation</publisher> + <group>org.apache.maven.resolver</group> + <name>maven-resolver-api</name> + <version>1.9.23</version> + <description>The application programming interface for the repository system.</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">5f375883313631dcd8ea5458922ae869</hash> + <hash alg="SHA-1">a3a93e5924b8a53391b73e3e5038c25d4fadb7df</hash> + <hash alg="SHA-256">cf068ecef4342e47f526b180cda0bf754f871f68cc1003592d436ff8bf459549</hash> + <hash alg="SHA-512">2cc87f65b438e6c79cfe5d54be31ad0592ce7661fc4ad3dfd710a02150c316f30dbb879d3f42bcbc85e0eb83bbfc0bf0cb0e41b2ab9680846bd1b6700a8ca07e</hash> + <hash alg="SHA-384">405d50d2c125a6a51c826dfc9f12bca83dbfea591e680ee9fb21039a7cbd7593f35cb65e341d955d3bc3740c81806de4</hash> + <hash alg="SHA3-384">d49e47e0f98d5a009108d80f219669aa206722e462b6cbd8432f32e1f2948c5b73089871cf52939bea528d8995f6faf1</hash> + <hash alg="SHA3-256">bfc3d0fb47671f0c2faeb33f7cbf573e2c786e6696af62dad4fc0c5c3919c59d</hash> + <hash alg="SHA3-512">88232922ed65ed24297cb892f7c4676d39480941dac5b0e66e140c0312dbf4ce463469135a2f8ad8be9d99f8eed18ca9dd969d14f478556eb0c748d21647e18b</hash> + </hashes> + <licenses> + <license> + <id>Apache-2.0</id> + <url>https://www.apache.org/licenses/LICENSE-2.0</url> + </license> + </licenses> + <purl>pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.9.23?type=jar</purl> + <externalReferences> + <reference type="website"> + <url>https://maven.apache.org/resolver/maven-resolver-api/</url> + </reference> + <reference type="build-system"> + <url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-resolver/</url> + </reference> + <reference type="distribution-intake"> + <url>https://repository.apache.org/service/local/staging/deploy/maven2</url> + </reference> + <reference type="issue-tracker"> + <url>https://issues.apache.org/jira/browse/MRESOLVER</url> + </reference> + <reference type="mailing-list"> + <url>https://lists.apache.org/list.html?us...@maven.apache.org</url> + </reference> + <reference type="vcs"> + <url>https://github.com/apache/maven-resolver/tree/maven-resolver-1.9.23/maven-resolver-api</url> + </reference> + </externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.apache.maven.resolver/maven-resolver-util@1.9.23?type=jar"> + <publisher>The Apache Software Foundation</publisher> + <group>org.apache.maven.resolver</group> + <name>maven-resolver-util</name> + <version>1.9.23</version> + <description>A collection of utility classes to ease usage of the repository system.</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">93d7729e2662794f741a105759ce32e1</hash> + <hash alg="SHA-1">1f5a34b81bddfc5d1200610819ce569c84591318</hash> + <hash alg="SHA-256">a6b81ce281313cc2adf19e697d59d53a83793d83e33707fc44836c4934f4030f</hash> + <hash alg="SHA-512">ee96d3dfb282e735a32ee3963402de6693a5cac6d75ff03044bf45b6f68feab5c2128424af694b22d161d53f1949cbc4006cc540d3208c7c6ffe8d1b0f5d6d83</hash> + <hash alg="SHA-384">b3d783164a31dc7f2aa0700c25c3a87bc52365792ae6a4f2247f40456cf65fce7f5dcb96b3d79735f76842ee657f6085</hash> + <hash alg="SHA3-384">dac3deea19fba5f92e01d02fcbaf9a3c3777fb5d801e6cd1dc17ac64d89a7a7d7aba057a59d76c7a9adf548725c5bddd</hash> + <hash alg="SHA3-256">ef133f8f5abb40357d827697cf9edc2fdb84fe9f52e9d3bd900e46a97a855f99</hash> + <hash alg="SHA3-512">ffc8c21b996fd07517591d4fc6f6dafaadcd4ad0bd6de92973bc71a2f403a242d3af0fc2d55fa027b223de75818efd93aaedc89661bae349be3898dccac2f9c5</hash> + </hashes> + <licenses> + <license> + <id>Apache-2.0</id> + <url>https://www.apache.org/licenses/LICENSE-2.0</url> + </license> + </licenses> + <purl>pkg:maven/org.apache.maven.resolver/maven-resolver-util@1.9.23?type=jar</purl> + <externalReferences> + <reference type="website"> + <url>https://maven.apache.org/resolver/maven-resolver-util/</url> + </reference> + <reference type="build-system"> + <url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-resolver/</url> + </reference> + <reference type="distribution-intake"> + <url>https://repository.apache.org/service/local/staging/deploy/maven2</url> + </reference> + <reference type="issue-tracker"> + <url>https://issues.apache.org/jira/browse/MRESOLVER</url> + </reference> + <reference type="mailing-list"> + <url>https://lists.apache.org/list.html?us...@maven.apache.org</url> + </reference> + <reference type="vcs"> + <url>https://github.com/apache/maven-resolver/tree/maven-resolver-1.9.23/maven-resolver-util</url> + </reference> + </externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-core@3.9.9?type=jar"> + <publisher>The Apache Software Foundation</publisher> + <group>org.apache.maven</group> + <name>maven-core</name> + <version>3.9.9</version> + <description>Maven Core classes.</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">eed2eb37f03ccdea7ef9dab069c0b5d8</hash> + <hash alg="SHA-1">b58645e3f14348024b05735c171425e19d30c02e</hash> + <hash alg="SHA-256">7fab37fc6044f20ae004376ab8414373636cf51e26ad0b1efa6b3f1cd2bec503</hash> + <hash alg="SHA-512">95a717d05c4fb51c4e4d196d6e4e183447f9eb56db13b0b1a8181e3c8b0dbd9abd2ed612ce93bb87799aee4d3b309ba1a7e6924964cb9e45daff2f70a25a0abe</hash> + <hash alg="SHA-384">a953e88f9dce06d35b3e2d33ad873d2024730b846e5f94d80fdd687efa0dd07fc42e3d53a70c075abc3497bc4f1383d9</hash> + <hash alg="SHA3-384">efdd79ce31e93b75a2df359fec4a0d209eb36d74ff8e89d06c9d95c5125d7bc5b1d7bc67a7b03144ccac46abd3b847dc</hash> + <hash alg="SHA3-256">f924a04aa56c923c9e5c904365738e5c46841ad9b5e010ce7adc34b69349c436</hash> + <hash alg="SHA3-512">e59ec3884fbfa2528a184db8b008bc46d41a373d94e5b728a6c1d9216f44ca838b96ab95e3c40ef937920e4a068b5824c0f3902d13955d7bc7050a2e3906548e</hash> + </hashes> + <licenses> + <license> + <id>Apache-2.0</id> + <url>https://www.apache.org/licenses/LICENSE-2.0</url> + </license> + </licenses> + <purl>pkg:maven/org.apache.maven/maven-core@3.9.9?type=jar</purl> + <externalReferences> + <reference type="website"> + <url>https://maven.apache.org/ref/3.9.9/maven-core/</url> + </reference> + <reference type="build-system"> + <url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/</url> + </reference> + <reference type="distribution"> + <url>https://maven.apache.org/download.html</url> + </reference> + <reference type="distribution-intake"> + <url>https://repository.apache.org/service/local/staging/deploy/maven2</url> + </reference> + <reference type="issue-tracker"> + <url>https://issues.apache.org/jira/browse/MNG</url> + </reference> + <reference type="mailing-list"> + <url>https://lists.apache.org/list.html?us...@maven.apache.org</url> + </reference> + <reference type="vcs"> + <url>https://github.com/apache/maven/tree/maven-3.9.9/maven-core</url> + </reference> + </externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-model@3.9.9?type=jar"> + <publisher>The Apache Software Foundation</publisher> + <group>org.apache.maven</group> + <name>maven-model</name> + <version>3.9.9</version> + <description>Model for Maven POM (Project Object Model)</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">813d4aceaaa8e16f8a83c95a96afa22c</hash> + <hash alg="SHA-1">585bff8f220ddc1c08c5263b7dee26c49fc7df94</hash> + <hash alg="SHA-256">8f59b0a16fe9c933be749a60ae0705a0cb337bb5abaf38801b40b740ff775727</hash> + <hash alg="SHA-512">a775b5ec120e1de0bc891cf3dc148193a5e357aed06d0c9a289ea21a55c7fa7053b04fdde3a7e0d29a19f6e01023f74e511e39e0cd6568d3a6f8d27734058ee1</hash> + <hash alg="SHA-384">410645fc18300eff25914a1519ee3bda627cff86df984b14ff5e0346031fcd339aaaa4994ea980c0665d206b0dacd4c6</hash> + <hash alg="SHA3-384">5dda2fbf976bb1cb95b42e86a94622f73ecb4ad2cf0db0959b401ae169a7c2a0a54366a8a8f9b492f0d6c069260db834</hash> + <hash alg="SHA3-256">3ab286c7fee20c98f7282627c64a53cbd2ddb2717a88e9e157d6207dc7dabff4</hash> + <hash alg="SHA3-512">073490b65457dd3ac3d8437874478d7e150fb72a48703340e4e2b608f6ed7badd7c33f388f9c43acc5c4d260ae2672c78404864724d920fa0501a017fd58fa6c</hash> + </hashes> + <licenses> + <license> + <id>Apache-2.0</id> + <url>https://www.apache.org/licenses/LICENSE-2.0</url> + </license> + </licenses> + <purl>pkg:maven/org.apache.maven/maven-model@3.9.9?type=jar</purl> + <externalReferences> + <reference type="website"> + <url>https://maven.apache.org/ref/3.9.9/maven-model/</url> + </reference> + <reference type="build-system"> + <url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/</url> + </reference> + <reference type="distribution"> + <url>https://maven.apache.org/download.html</url> + </reference> + <reference type="distribution-intake"> + <url>https://repository.apache.org/service/local/staging/deploy/maven2</url> + </reference> + <reference type="issue-tracker"> + <url>https://issues.apache.org/jira/browse/MNG</url> + </reference> + <reference type="mailing-list"> + <url>https://lists.apache.org/list.html?us...@maven.apache.org</url> + </reference> + <reference type="vcs"> + <url>https://github.com/apache/maven/tree/maven-3.9.9/maven-model</url> + </reference> + </externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-settings@3.9.9?type=jar"> + <publisher>The Apache Software Foundation</publisher> + <group>org.apache.maven</group> + <name>maven-settings</name> + <version>3.9.9</version> + <description>Maven Settings model.</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">a5eede8fe9b01b7bb3c6dad06a738365</hash> + <hash alg="SHA-1">a82024d87a107965ae274d944c844c9186ff410d</hash> + <hash alg="SHA-256">68edf1b510e0d759ec501271a5d05e3a6e425462fbb84126c16e8a6f89abdada</hash> + <hash alg="SHA-512">0f7466c4791b083e38e5a6f4631b03317f57bdeee6bf1d152a4b75830bf652c80e1f9707b3f64fcfd5f790886eb55279a4c33fbebbb42b5c97066cb3010b1137</hash> + <hash alg="SHA-384">b3d6d9512709e1c5f02b86775501c64c0bd81e76a97e399d2928646584f0f4feff5ea922e45c16865f4749bd4301eea7</hash> + <hash alg="SHA3-384">e81ec5efa79028a6eb8c58501023882c1f15142659ce3893b4a862b7b7b867397d7c67eb519f972c856979fb728c93a1</hash> + <hash alg="SHA3-256">5cad01acc7d3ad12c6da20ef43aa7b8be20bf6b69a59fc532b734ed2d331d00b</hash> + <hash alg="SHA3-512">dd6502ca14b0ca1283746748a4dccbe57e150f1d031965dc543baadf520321e1c396a6d94f1f99d7ab23af04edc6be200aa56655066eb0d23d1a7b8367397be1</hash> + </hashes> + <licenses> + <license> + <id>Apache-2.0</id> + <url>https://www.apache.org/licenses/LICENSE-2.0</url> + </license> + </licenses> + <purl>pkg:maven/org.apache.maven/maven-settings@3.9.9?type=jar</purl> + <externalReferences> + <reference type="website"> + <url>https://maven.apache.org/ref/3.9.9/maven-settings/</url> + </reference> + <reference type="build-system"> + <url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/</url> + </reference> + <reference type="distribution"> + <url>https://maven.apache.org/download.html</url> + </reference> + <reference type="distribution-intake"> + <url>https://repository.apache.org/service/local/staging/deploy/maven2</url> + </reference> + <reference type="issue-tracker"> + <url>https://issues.apache.org/jira/browse/MNG</url> + </reference> + <reference type="mailing-list"> + <url>https://lists.apache.org/list.html?us...@maven.apache.org</url> + </reference> + <reference type="vcs"> + <url>https://github.com/apache/maven/tree/maven-3.9.9/maven-settings</url> + </reference> + </externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-settings-builder@3.9.9?type=jar"> + <publisher>The Apache Software Foundation</publisher> + <group>org.apache.maven</group> + <name>maven-settings-builder</name> + <version>3.9.9</version> + <description>The effective settings builder, with inheritance and password decryption.</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">4fb4ae61642d42cba66821d8698a670a</hash> + <hash alg="SHA-1">71a9bee9618839ffaf7c0de3b53ac1c408b57ae0</hash> + <hash alg="SHA-256">094640f3fdce47250cb06968a143f40c4e2f1c22be979c73caac2f49f3c38373</hash> + <hash alg="SHA-512">aa2b61dd81291b30e627e1894d8336d68b2f4cb99cedf087cc7081d6f3b6685a33c943e3fb04a851fd7635c916f2d0fb8dd705067ea67d13fc43d08025cec19a</hash> + <hash alg="SHA-384">3dbfab791cb5a9d27a89c6277f4a9a9e376a8064db0fb208514bbd1ee6a47ac1b2e573402814c313977d2377401cb9b4</hash> + <hash alg="SHA3-384">3cbd4352a5d05fc16e305e6cb5ac98b675a51cdab7ac3c8c59dd9d0272c9f82813e06be233604879f198530a7362433b</hash> + <hash alg="SHA3-256">abdce4df1cef68ac91b1b307127d3c3c2ce902f1ace17de96c5ff2a6aa54d368</hash> + <hash alg="SHA3-512">9b798693e04c6bc23a48c7880e29df42bbb6fa00e144d95c2aea07f2689ccd1618b9fd986a0c05830a120310e5e43d67d1944b19d49dd10113f70c22856ddcf2</hash> + </hashes> + <licenses> + <license> + <id>Apache-2.0</id> + <url>https://www.apache.org/licenses/LICENSE-2.0</url> + </license> + </licenses> + <purl>pkg:maven/org.apache.maven/maven-settings-builder@3.9.9?type=jar</purl> + <externalReferences> + <reference type="website"> + <url>https://maven.apache.org/ref/3.9.9/maven-settings-builder/</url> + </reference> + <reference type="build-system"> + <url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/</url> + </reference> + <reference type="distribution"> + <url>https://maven.apache.org/download.html</url> + </reference> + <reference type="distribution-intake"> + <url>https://repository.apache.org/service/local/staging/deploy/maven2</url> + </reference> + <reference type="issue-tracker"> + <url>https://issues.apache.org/jira/browse/MNG</url> + </reference> + <reference type="mailing-list"> + <url>https://lists.apache.org/list.html?us...@maven.apache.org</url> + </reference> + <reference type="vcs"> + <url>https://github.com/apache/maven/tree/maven-3.9.9/maven-settings-builder</url> + </reference> + </externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.codehaus.plexus/plexus-sec-dispatcher@2.0?type=jar"> + <publisher>Codehaus Plexus</publisher> + <group>org.codehaus.plexus</group> + <name>plexus-sec-dispatcher</name> + <version>2.0</version> + <description>The Plexus project provides a full software stack for creating and executing software projects.</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">e68635a721630177ac70173e441336b6</hash> + <hash alg="SHA-1">f89c5080614ffd0764e49861895dbedde1b47237</hash> + <hash alg="SHA-256">873139960c4c780176dda580b003a2c4bf82188bdce5bb99234e224ef7acfceb</hash> + <hash alg="SHA-512">ad4e814c8baff780a4eee064903e52b09ae00420a59fb075ef72dbb8d64d12d3d5009b03d56c15f93587d931c3a7f06cad6351ab2dc9415ccc6eeab0daebeb07</hash> + <hash alg="SHA-384">4af3426b6409cce7d5fcda4e2af407fc2dbae9873e06d98332bcd032c0039d9080a291e42223ea2bbef9825d3d63493f</hash> + <hash alg="SHA3-384">41720858dd5804f9cb26a8878c16dbdf0372a90e99c037809fe76c3de2c5517ba252af8f8cdf534c1a09900702e6a917</hash> + <hash alg="SHA3-256">50fa723aefb551a3fd5888375d01f1d776c534cdf833baea392818e9bfa8166e</hash> + <hash alg="SHA3-512">a43f823d31b377c0c7ec8d36ace69e5dbcdaf4dc4ebb45ff0561fea9e12d74c06090ee24b29b06769d4031693faf5d7e3146583d3a64bfaef6b7c79773a8831f</hash> + </hashes> + <licenses> + <license> + <id>Apache-2.0</id> + </license> + </licenses> + <purl>pkg:maven/org.codehaus.plexus/plexus-sec-dispatcher@2.0?type=jar</purl> + <externalReferences> + <reference type="website"> + <url>https://codehaus-plexus.github.io/plexus-sec-dispatcher/</url> + </reference> + <reference type="distribution-intake"> + <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url> + </reference> + <reference type="issue-tracker"> + <url>https://github.com/codehaus-plexus/plexus-sec-dispatcher/issues</url> + </reference> + <reference type="mailing-list"> + <url>http://archive.plexus.codehaus.org/user</url> + </reference> + <reference type="vcs"> + <url>https://github.com/codehaus-plexus/plexus-sec-dispatcher.git</url> + </reference> + </externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.codehaus.plexus/plexus-cipher@2.0?type=jar"> + <publisher>Codehaus Plexus</publisher> + <group>org.codehaus.plexus</group> + <name>plexus-cipher</name> + <version>2.0</version> + <description>The Plexus project provides a full software stack for creating and executing software projects.</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">55d612839faf248cbe3e273969c002c2</hash> + <hash alg="SHA-1">425ea8e534716b4bff1ea90f39bd76be951d651b</hash> + <hash alg="SHA-256">9a7f1b5c5a9effd61eadfd8731452a2f76a8e79111fac391ef75ea801bea203a</hash> + <hash alg="SHA-512">8f187b07867a7c29d77454aae4b76479300238d9c4e777c1afa2aebe33b88dab916e29111dd55acac1341849f4579fe91a5470fdd45ccba0e05709c2ce3a1d65</hash> + <hash alg="SHA-384">6973eefe06a8992aa8db1775c0f43a84cbef54eeea9122a5a30c362af3e4fb13b6cbd6fba229142e2a4495f97d71f409</hash> + <hash alg="SHA3-384">ea780d218f96e61005c5582bf3785ddbb33b53ccb4efbffd76ab58166cf261d3c256d52fea28759380684b7e9b0db8eb</hash> + <hash alg="SHA3-256">e2e51d5350ffdce341464ddcdf9ae60108bff40bf5174dc6be43e33ffcd84af9</hash> + <hash alg="SHA3-512">f3e17ea31bdefc8094ba3495b8231ec7f90c7175839b009d9fd230110b66ac4c68c912fda1a6e644d93dbce639d738e2535f1ade5841e072a604f5f8ac536729</hash> + </hashes> + <licenses> + <license> + <id>Apache-2.0</id> + </license> + </licenses> + <purl>pkg:maven/org.codehaus.plexus/plexus-cipher@2.0?type=jar</purl> + <externalReferences> + <reference type="website"> + <url>https://codehaus-plexus.github.io/plexus-cipher/</url> + </reference> + <reference type="distribution-intake"> + <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url> + </reference> + <reference type="issue-tracker"> + <url>https://github.com/codehaus-plexus/plexus-cipher/issues</url> + </reference> + <reference type="mailing-list"> + <url>http://archive.plexus.codehaus.org/user</url> + </reference> + <reference type="vcs"> + <url>http://github.com/codehaus-plexus/plexus-cipher</url> + </reference> + </externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-builder-support@3.9.9?type=jar"> + <publisher>The Apache Software Foundation</publisher> + <group>org.apache.maven</group> + <name>maven-builder-support</name> + <version>3.9.9</version> + <description>Support for descriptor builders (model, setting, toolchains)</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">0266bb9314b63d9fde8aff0d190f48d6</hash> + <hash alg="SHA-1">812c13c808e42c54d3f4abdaab603e5262bf8ab8</hash> + <hash alg="SHA-256">2ca4a967bdd12a9e85d40e012374f86e63d4a1030c199da4832e3d0a1c6770d8</hash> + <hash alg="SHA-512">ea4c95e9b4ee9078b464ca9002857a149d2fd0bbc5fa79e3984ce981c37de0b18b3be03574b909ba4fc330a70387fef2ccbdac4dba029c11dd5cd53375f9be7a</hash> + <hash alg="SHA-384">56f102530fdf58549e9470949bd46d6bcd99eb619da435ea6c0579776e77b06b5b1e8faf76b9c6c0b4d1862bbc9747a2</hash> + <hash alg="SHA3-384">096b894a7e0aac0801816be8cd439b0825710a2c5dd3a9a64f3c6cadd8d96b2ceb1d635c0c3a52fd4b2393eb774fadf1</hash> + <hash alg="SHA3-256">a411474232b09f28bb48a74543df102c9aa4f324bc31c4e041c475024e835093</hash> + <hash alg="SHA3-512">e0764cdfafc85f8504fc1e457ff564f70a124de065c89b120f449d01812a9b4e6b26cfa171ed1f81563cd54db0b16ad049903c52e6ca82f1e632df3c4e8025a7</hash> + </hashes> + <licenses> + <license> + <id>Apache-2.0</id> + <url>https://www.apache.org/licenses/LICENSE-2.0</url> + </license> + </licenses> + <purl>pkg:maven/org.apache.maven/maven-builder-support@3.9.9?type=jar</purl> + <externalReferences> + <reference type="website"> + <url>https://maven.apache.org/ref/3.9.9/maven-builder-support/</url> + </reference> + <reference type="build-system"> + <url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/</url> + </reference> + <reference type="distribution"> + <url>https://maven.apache.org/download.html</url> + </reference> + <reference type="distribution-intake"> + <url>https://repository.apache.org/service/local/staging/deploy/maven2</url> + </reference> + <reference type="issue-tracker"> + <url>https://issues.apache.org/jira/browse/MNG</url> + </reference> + <reference type="mailing-list"> + <url>https://lists.apache.org/list.html?us...@maven.apache.org</url> + </reference> + <reference type="vcs"> + <url>https://github.com/apache/maven/tree/maven-3.9.9/maven-builder-support</url> + </reference> + </externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-repository-metadata@3.9.9?type=jar"> + <publisher>The Apache Software Foundation</publisher> + <group>org.apache.maven</group> + <name>maven-repository-metadata</name> + <version>3.9.9</version> + <description>Per-directory local and remote repository metadata.</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">d341cdcc9abac2d01546301a305f12b3</hash> + <hash alg="SHA-1">33a43f0af3371225d1dcaaa20a824df59c692172</hash> + <hash alg="SHA-256">137c297e6a52d489b76663c82324d54e40f5d498a8fc015c0203fd91df8623b0</hash> + <hash alg="SHA-512">07d1cd2e99588c43835815f5acdf2cb163288041c803cbb8597c81d5a583a5abc553628fdaaa5a22b4bf7a579aa88155e3e5e27c63c31ba4cab74126f7b35824</hash> + <hash alg="SHA-384">f088d97c86378ecb5312f79183aa2e469ff1efe28d0244fa7d86cc37f6bf6fa7b277cba016541967d289fbc474bb2305</hash> + <hash alg="SHA3-384">332e75f31f8adfad22990c0a612ec12aab085923f3d425453c25275e177daa2feeade1ff22743a4e5f67d33130ae866a</hash> + <hash alg="SHA3-256">40356485644aed030cc175fd8d00443a63a3f1384180edcb1be98ccad67081db</hash> + <hash alg="SHA3-512">1d8320d0c4421696705f3a4737ed7c4cb5de37a3b0873abbe19e2a57092b1f0c405b2987c8e3c3931105c1a518f92d304c92b394018842f1cde98fd259488482</hash> + </hashes> + <licenses> + <license> + <id>Apache-2.0</id> + <url>https://www.apache.org/licenses/LICENSE-2.0</url> + </license> + </licenses> + <purl>pkg:maven/org.apache.maven/maven-repository-metadata@3.9.9?type=jar</purl> + <externalReferences> + <reference type="website"> + <url>https://maven.apache.org/ref/3.9.9/maven-repository-metadata/</url> + </reference> + <reference type="build-system"> + <url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/</url> + </reference> + <reference type="distribution"> + <url>https://maven.apache.org/download.html</url> + </reference> + <reference type="distribution-intake"> + <url>https://repository.apache.org/service/local/staging/deploy/maven2</url> + </reference> + <reference type="issue-tracker"> + <url>https://issues.apache.org/jira/browse/MNG</url> + </reference> + <reference type="mailing-list"> + <url>https://lists.apache.org/list.html?us...@maven.apache.org</url> + </reference> + <reference type="vcs"> + <url>https://github.com/apache/maven/tree/maven-3.9.9/maven-repository-metadata</url> + </reference> + </externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-model-builder@3.9.9?type=jar"> + <publisher>The Apache Software Foundation</publisher> + <group>org.apache.maven</group> + <name>maven-model-builder</name> + <version>3.9.9</version> + <description>The effective model builder, with inheritance, profile activation, interpolation, ...</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">a48ea3e9ceec85a9bff88e88048148d9</hash> + <hash alg="SHA-1">6dcd87768eb615301aef0c2221dd168a2d36bc7b</hash> + <hash alg="SHA-256">a4377182ac2e5adfe16be3b3c81981a5ecddab014184de72ae1e522f04a77602</hash> + <hash alg="SHA-512">558ca7b03233b8d38aca3f2f142e0b4a64d576c92e6b5a8921061eb8c83614d8074845e8656fb77b983711e64db9d145f385a0d1a3ae5bf26805b93a6c4ce041</hash> + <hash alg="SHA-384">5ba902dee188aafc6cecb1f9eab759116d00158e0812811f6775654a3f5a73b0b6b429c20e9c727ac157643627b72c27</hash> + <hash alg="SHA3-384">364b44bbff164b35ab770c329592560b1f12037bf466137b137db7434877570ad815a9d2027fcf2ebd35275f29ef7cd0</hash> + <hash alg="SHA3-256">fd2bd5e3ff91d9c5f405d0c584e4a71f91a1ac5c82e8cfb729f78f13ed73c8d2</hash> + <hash alg="SHA3-512">cd2692abcdbf1c0c9adf3ac0210b4f923b6f3497618bf1337d60133e377569b45399f6b3994d73558e9f8ef890192a7bbbb0f674d36ebd482ca5396abfc85ffb</hash> + </hashes> + <licenses> + <license> + <id>Apache-2.0</id> + <url>https://www.apache.org/licenses/LICENSE-2.0</url> + </license> + </licenses> + <purl>pkg:maven/org.apache.maven/maven-model-builder@3.9.9?type=jar</purl> + <externalReferences> + <reference type="website"> + <url>https://maven.apache.org/ref/3.9.9/maven-model-builder/</url> + </reference> + <reference type="build-system"> + <url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/</url> + </reference> + <reference type="distribution"> + <url>https://maven.apache.org/download.html</url> + </reference> + <reference type="distribution-intake"> + <url>https://repository.apache.org/service/local/staging/deploy/maven2</url> + </reference> + <reference type="issue-tracker"> + <url>https://issues.apache.org/jira/browse/MNG</url> + </reference> + <reference type="mailing-list"> + <url>https://lists.apache.org/list.html?us...@maven.apache.org</url> + </reference> + <reference type="vcs"> + <url>https://github.com/apache/maven/tree/maven-3.9.9/maven-model-builder</url> + </reference> + </externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-resolver-provider@3.9.9?type=jar"> + <publisher>The Apache Software Foundation</publisher> + <group>org.apache.maven</group> + <name>maven-resolver-provider</name> + <version>3.9.9</version> + <description>Extensions to Maven Resolver for utilizing Maven POM and repository metadata.</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">ea2fccfc4c499dbaa570a26da14050d9</hash> + <hash alg="SHA-1">ea361822cd25ae6c9153c594aef805e853031224</hash> + <hash alg="SHA-256">5dea05049c94f952f48ce2bfe0111afdf986acc591fcc11d23fe3b8dcb70291e</hash> + <hash alg="SHA-512">6dcb398c60080cbeaac396df5e565a44e29c9ecffb440d17ca819c2e3e7a86b933e7346eb11c409cad02e2bc97c9ae5f10bc5c4e7d6f5fe81652a7e1d99f9c0f</hash> + <hash alg="SHA-384">170d7d6271574947baff824cfd36e00fa20ea1cefc361c27af52a96f45ac7b7fe23edfd0adfd483f121f2cc63491ad39</hash> + <hash alg="SHA3-384">4223458ae362fc39853aa5538bd99ec00be1af4e41859b00f3937e9922f8353db51248dd06f88865f67b2296b1920724</hash> + <hash alg="SHA3-256">96ad201686d5c420903bab2ac170dfae7b66cc6faadd4dff84dbe981573bbeec</hash> + <hash alg="SHA3-512">c2c4610bcc74f5d11b145b58d6f11f74a2f74b8fe95f725f11177a8b930563bbd7ffc49b0b712c2534c0702f3329b75966b1dafe6d4777ec641fe1c45e19f117</hash> + </hashes> + <licenses> + <license> + <id>Apache-2.0</id> + <url>https://www.apache.org/licenses/LICENSE-2.0</url> + </license> + </licenses> + <purl>pkg:maven/org.apache.maven/maven-resolver-provider@3.9.9?type=jar</purl> + <externalReferences> + <reference type="website"> + <url>https://maven.apache.org/ref/3.9.9/maven-resolver-provider/</url> + </reference> + <reference type="build-system"> + <url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/</url> + </reference> + <reference type="distribution"> + <url>https://maven.apache.org/download.html</url> + </reference> + <reference type="distribution-intake"> + <url>https://repository.apache.org/service/local/staging/deploy/maven2</url> + </reference> + <reference type="issue-tracker"> + <url>https://issues.apache.org/jira/browse/MNG</url> + </reference> + <reference type="mailing-list"> + <url>https://lists.apache.org/list.html?us...@maven.apache.org</url> + </reference> + <reference type="vcs"> + <url>https://github.com/apache/maven/tree/maven-3.9.9/maven-resolver-provider</url> + </reference> + </externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.apache.maven.resolver/maven-resolver-impl@1.9.22?type=jar"> + <publisher>The Apache Software Foundation</publisher> + <group>org.apache.maven.resolver</group> + <name>maven-resolver-impl</name> + <version>1.9.22</version> + <description>An implementation of the repository system.</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">965f1348220f046c6cbde059c971685d</hash> + <hash alg="SHA-1">19b7a728c9000f8db615f64552d95fe74b413617</hash> + <hash alg="SHA-256">e4dafb8acc13d736377c02d2170d869438dd74b98b860745909d238726babcbb</hash> + <hash alg="SHA-512">82c9ff9c9505e6350983a5a90ef16c64e67f2cb21779e56f5ad02979591f8f2cd12ced6bba066fd0bdfaf6be07d39edf9cecada35d16002a8005711602001d90</hash> + <hash alg="SHA-384">adaca9b851a5f354f5ea1cda398b1d5b910d4c0fac21a33bfa0a44d40ed19cf63afe99f81fc7718293496421ef64777c</hash> + <hash alg="SHA3-384">69dab881fcf9f2b45881899f14ca2c0d885f9de6621d0109887654b6b3f92978b21733348dba75eddd588bd8144da83e</hash> + <hash alg="SHA3-256">b35dea4f939c188e848878b6a3331e6312964ff0258833375c6b975d70cd71a8</hash> + <hash alg="SHA3-512">dc7a39b8a50f5633194a3f070208e2eda099b88226a4d8728c9c4f4bc876e4eba1a7bb018870e1cf414cf31e5bcb214c2b64393c79d8f498b1c380630698f70d</hash> + </hashes> + <licenses> + <license> + <id>Apache-2.0</id> + <url>https://www.apache.org/licenses/LICENSE-2.0</url> + </license> + </licenses> + <purl>pkg:maven/org.apache.maven.resolver/maven-resolver-impl@1.9.22?type=jar</purl> + <externalReferences> + <reference type="website"> + <url>https://maven.apache.org/resolver/maven-resolver-impl/</url> + </reference> + <reference type="build-system"> + <url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-resolver/</url> + </reference> + <reference type="distribution-intake"> + <url>https://repository.apache.org/service/local/staging/deploy/maven2</url> + </reference> + <reference type="issue-tracker"> + <url>https://issues.apache.org/jira/browse/MRESOLVER</url> + </reference> + <reference type="mailing-list"> + <url>https://lists.apache.org/list.html?us...@maven.apache.org</url> + </reference> + <reference type="vcs"> + <url>https://github.com/apache/maven-resolver/tree/maven-resolver-1.9.22/maven-resolver-impl</url> + </reference> + </externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.apache.maven.resolver/maven-resolver-named-locks@1.9.22?type=jar"> + <publisher>The Apache Software Foundation</publisher> + <group>org.apache.maven.resolver</group> + <name>maven-resolver-named-locks</name> + <version>1.9.22</version> + <description>A synchronization utility implementation using Named locks.</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">3d3855f4775bc27f9962f999ea88919b</hash> + <hash alg="SHA-1">121433b079aad9be7ed266b19f2122eeb0e2d111</hash> + <hash alg="SHA-256">0685f29ec3b548d9b6917c527f13c667685a3394b955aaa5b25d0559818b7fc5</hash> + <hash alg="SHA-512">f77654e42e551bfa6ef1e737501123dd1a4faca6cee7eceddad358c7c66e27ece0dbaae7abcf1b8422344e92b5bd5beeb43b8ca3637bc7b0c06cc87ee1d54792</hash> + <hash alg="SHA-384">4130344d40d9054360be193e9b7712b708b9b1cd95fac22e13f980366b1e341e8fe0a6a7bd555836e7ff1bd980844722</hash> + <hash alg="SHA3-384">5446d9a0d6ec6846b33ed718cedeb1eae9df55a08a1005c88e3a5734f1097ce8ef4c6208a70c21ae9d15a7a2a3139e94</hash> + <hash alg="SHA3-256">75af3978ed7eff2d40330beb06c38d8a2df8c31c592f2d0417aecc9e32a491bf</hash> + <hash alg="SHA3-512">0dff59894683f076e09adb05dca30db2ab9ea8fef3b8280437b10be65e649175f7a5e684177891fe6661af6e86a464521e24f7559090dd7d8f7625452ec8cac2</hash> + </hashes> + <licenses> + <license> + <id>Apache-2.0</id> + <url>https://www.apache.org/licenses/LICENSE-2.0</url> + </license> + </licenses> + <purl>pkg:maven/org.apache.maven.resolver/maven-resolver-named-locks@1.9.22?type=jar</purl> + <externalReferences> + <reference type="website"> + <url>https://maven.apache.org/resolver/maven-resolver-named-locks/</url> + </reference> + <reference type="build-system"> + <url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-resolver/</url> + </reference> + <reference type="distribution-intake"> + <url>https://repository.apache.org/service/local/staging/deploy/maven2</url> + </reference> + <reference type="issue-tracker"> + <url>https://issues.apache.org/jira/browse/MRESOLVER</url> + </reference> + <reference type="mailing-list"> + <url>https://lists.apache.org/list.html?us...@maven.apache.org</url> + </reference> + <reference type="vcs"> + <url>https://github.com/apache/maven-resolver/tree/maven-resolver-1.9.22/maven-resolver-named-locks</url> + </reference> + </externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.apache.maven.resolver/maven-resolver-spi@1.9.22?type=jar"> + <publisher>The Apache Software Foundation</publisher> + <group>org.apache.maven.resolver</group> + <name>maven-resolver-spi</name> + <version>1.9.22</version> + <description>The service provider interface for repository system implementations and repository connectors.</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">7ae784f1d4088fff396386ed6966cafc</hash> + <hash alg="SHA-1">c3101acaa4ec053557028cf1917f1d22112b100d</hash> + <hash alg="SHA-256">99ad721e4631d9bd0c4f9e29c869672577c66f2a674a5723ce38eff13c75cbfd</hash> + <hash alg="SHA-512">3a1e31d872659834cb59a82bd0118fb26ef983e5004849a9a38f80bea344f2d919aa73f142fc605601b8236c431a891a6e98fd8760e7b11aa6a3d7d4862ee009</hash> + <hash alg="SHA-384">8ae4ccfcd203dee8263c6db10061f6afefc5a95903f43ad99f237c92300348ac1dbfdbf22042aefd5bdce86c58e4637f</hash> + <hash alg="SHA3-384">efcfbeb1c69bbfc880d624d24b9376ce07c703df64505776d91b8574ba2292526dbe4ae592bbafde971d2c7feca2617c</hash> + <hash alg="SHA3-256">5e12347c1f0125eea11c00859b4d02c6b7c4f1ea2af305a68b5c2579983d6af0</hash> + <hash alg="SHA3-512">8953a2b8bfc66d3ea6f5ec52c87838759b79624485e08c4ecfafbf05521ccc73e9cf724e3dee643975d10b6b5b0d37caf6cd316823074f5cfd49bd05899cec96</hash> + </hashes> + <licenses> + <license> + <id>Apache-2.0</id> + <url>https://www.apache.org/licenses/LICENSE-2.0</url> + </license> + </licenses> + <purl>pkg:maven/org.apache.maven.resolver/maven-resolver-spi@1.9.22?type=jar</purl> + <externalReferences> + <reference type="website"> + <url>https://maven.apache.org/resolver/maven-resolver-spi/</url> + </reference> + <reference type="build-system"> + <url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-resolver/</url> + </reference> + <reference type="distribution-intake"> + <url>https://repository.apache.org/service/local/staging/deploy/maven2</url> + </reference> + <reference type="issue-tracker"> + <url>https://issues.apache.org/jira/browse/MRESOLVER</url> + </reference> + <reference type="mailing-list"> + <url>https://lists.apache.org/list.html?us...@maven.apache.org</url> + </reference> + <reference type="vcs"> + <url>https://github.com/apache/maven-resolver/tree/maven-resolver-1.9.22/maven-resolver-spi</url> + </reference> + </externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.apache.maven.shared/maven-shared-utils@3.4.2?type=jar"> + <publisher>The Apache Software Foundation</publisher> + <group>org.apache.maven.shared</group> + <name>maven-shared-utils</name> + <version>3.4.2</version> + <description>Shared utilities for use by Maven core and plugins</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">53a038f77a81cb5816ad2b1c7daa8711</hash> + <hash alg="SHA-1">bfa28296272a5915b08de9f11f34a94b0a818fd0</hash> + <hash alg="SHA-256">b613357e1bad4dfc1dead801691c9460f9585fe7c6b466bc25186212d7d18487</hash> + <hash alg="SHA-512">71db8a485a6436cb305276ea9d748f578e1a8ffa1346c8570f7038684ce53d320584174634aeffa1b51629af0171a2d6572854eb07236a83236ad1d9949988e9</hash> + <hash alg="SHA-384">8f7e2c449282244fea3151ac0c956b42bb7ae6cb2397ca8b18952aea802d33cccad6e08a5f515fc34e52bacfece18862</hash> + <hash alg="SHA3-384">72ec6c2c5de8cd074bd59dbb8215005bedc9de58795484ec2792fa867eaf13547aaca81daaf06f1ec117d29b21e70cd0</hash> + <hash alg="SHA3-256">5cf6de29555bde0317d641e8a7afd7d1ed84dddff92c80f8493b4a2873d26c41</hash> + <hash alg="SHA3-512">836acb2525ddc3b352da7db824e00c0831b25f46cb32a77c1e578b39978621e3c47da3554a901749af15b3981620875a4c4492f421a1833d8eb8e50c4804eff8</hash> + </hashes> + <licenses> + <license> + <id>Apache-2.0</id> + <url>https://www.apache.org/licenses/LICENSE-2.0</url> + </license> + </licenses> + <purl>pkg:maven/org.apache.maven.shared/maven-shared-utils@3.4.2?type=jar</purl> + <externalReferences> + <reference type="website"> + <url>https://maven.apache.org/shared/maven-shared-utils/</url> + </reference> + <reference type="build-system"> + <url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-shared-utils/</url> + </reference> + <reference type="distribution-intake"> + <url>https://repository.apache.org/service/local/staging/deploy/maven2</url> + </reference> + <reference type="issue-tracker"> + <url>https://issues.apache.org/jira/issues/?jql=project%20%3D%20MSHARED%20AND%20component%20%3D%20maven-shared-utils</url> + </reference> + <reference type="mailing-list"> + <url>https://lists.apache.org/list.html?us...@maven.apache.org</url> + </reference> + <reference type="vcs"> + <url>https://github.com/apache/maven-shared-utils/tree/maven-shared-utils-3.4.2</url> + </reference> + </externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.9.0.M3?type=jar"> + <publisher>The Eclipse Foundation</publisher> + <group>org.eclipse.sisu</group> + <name>org.eclipse.sisu.plexus</name> + <version>0.9.0.M3</version> + <description>Plexus-JSR330 adapter; adds Plexus support to the Sisu-Inject container</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">964e7bc9837b270566f18b87af65f5d7</hash> + <hash alg="SHA-1">b493c7abcc6e04fa0a6a20d489a3db0395c76f70</hash> + <hash alg="SHA-256">c99674d3773e26154885661711f0b6d63aa5008f5cc99227a236756d4ad9de5e</hash> + <hash alg="SHA-512">68c5df01ad522917d954b62cb3b11376b3446920e8d5cb35737de508e6acd91a36b34144933f427bbe1d29dca9097ba9dd2431c713fe18069f271a80b519f051</hash> + <hash alg="SHA-384">bd39a6cc9c18c62e64393da231b61efbf5bdeb8c0306e455bbc6e33f4b614e14023ccfbec83c943994da6684ab453092</hash> + <hash alg="SHA3-384">aa3ca83152de61ee92ba94f655190b61aa25520db903489656485a56aa9314a453a91284c0fb377dffb8160580a610c2</hash> + <hash alg="SHA3-256">434081d9dbbd4ffedafa88010d4db9a699fd2bc736e8b12b3bf3cede21f30aa9</hash> + <hash alg="SHA3-512">86e4c864bdfcbcb7d58ac08d80b2c1406cadf10424c92889d1cb181f924af19b28d53210f77cb2b0515faa7ac6fff2dacd25ae1b62c419a798bdfd2a9f3108ae</hash> + </hashes> + <licenses> + <license> + <id>EPL-2.0</id> + </license> + </licenses> + <purl>pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.9.0.M3?type=jar</purl> + <externalReferences> + <reference type="website"> + <url>http://www.eclipse.org/sisu/org.eclipse.sisu.plexus/</url> + </reference> + <reference type="build-system"> + <url>https://ci.eclipse.org/sisu/job/sisu.inject/</url> + </reference> + <reference type="distribution-intake"> + <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url> + </reference> + <reference type="issue-tracker"> + <url>https://github.com/eclipse/sisu.inject/issues</url> + </reference> + <reference type="mailing-list"> + <url>http://dev.eclipse.org/mhonarc/lists/sisu-dev/</url> + </reference> + <reference type="vcs"> + <url>https://github.com/eclipse/sisu.inject/org.eclipse.sisu.plexus</url> + </reference> + </externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.9.0.M3?type=jar"> + <publisher>The Eclipse Foundation</publisher> + <group>org.eclipse.sisu</group> + <name>org.eclipse.sisu.inject</name> + <version>0.9.0.M3</version> + <description>JSR330-based container; supports classpath scanning, auto-binding, and dynamic auto-wiring</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">643a13084e0ac59cdda06319e1b348ea</hash> + <hash alg="SHA-1">3665002ba4d16dfa779ef658a63d0608c4bd898b</hash> + <hash alg="SHA-256">15335c4dcf082f599fb8eddcfb58d6a7e9a9c97de2883c257089a479b9b24522</hash> + <hash alg="SHA-512">76267078f3dd887fd7c4a0931d0ae057d5f51478f712ce4bb5530cfa5c2aa18a8dbe935b32c1afb01a4e2cde44d30579baf5868b8b63ee066ea0714fd9d8a81c</hash> + <hash alg="SHA-384">d24164f8aaae165de8533530b90168228e7d107a5eeb63997bf6e2d41f1adfaabf29aa9ab4f08e3445c69aa57f6c09b8</hash> + <hash alg="SHA3-384">aab9bce13f047bcdd8d47420f80e88a314f3566bf7edcd7d37cf286865f45586fda8745793eb2a54c506759f9654bd5b</hash> + <hash alg="SHA3-256">d9e302304b0f99703243f697f72b12e42df692553c08ef9d2d2e0eb83847eab7</hash> + <hash alg="SHA3-512">8ac0b60618e01e819fcabcfd210176310d98f9856b49cafd5dfb451393b791b1ed43fc17e359c5868662dc76e0059e23a152c5564f7ce94ca4720bd092cb29d0</hash> + </hashes> + <licenses> + <license> + <id>EPL-2.0</id> + </license> + </licenses> + <purl>pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.9.0.M3?type=jar</purl> + <externalReferences> + <reference type="website"> + <url>http://www.eclipse.org/sisu/org.eclipse.sisu.inject/</url> + </reference> + <reference type="build-system"> + <url>https://ci.eclipse.org/sisu/job/sisu.inject/</url> + </reference> + <reference type="distribution-intake"> + <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url> + </reference> + <reference type="issue-tracker"> + <url>https://github.com/eclipse/sisu.inject/issues</url> + </reference> + <reference type="mailing-list"> + <url>http://dev.eclipse.org/mhonarc/lists/sisu-dev/</url> + </reference> + <reference type="vcs"> + <url>https://github.com/eclipse/sisu.inject/org.eclipse.sisu.inject</url> + </reference> + </externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/com.google.inject/guice@5.1.0?type=jar"> + <publisher>Google, Inc.</publisher> + <group>com.google.inject</group> + <name>guice</name> + <version>5.1.0</version> + <description>Guice is a lightweight dependency injection framework for Java 6 and above</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">2560169296aa94492af34af2115e9511</hash> + <hash alg="SHA-1">da25056c694c54ba16e78e4fc35f17fc60f0d1b4</hash> + <hash alg="SHA-256">4130e50bfac48099c860f0d903b91860c81a249c90f38245f8fed58fc817bc26</hash> + <hash alg="SHA-512">b9c7a9b815d9ce387ebf6d58a71541da1be3cb8d847358133dc1f35ca45315bb9db11c13f3238adb643670759a58fd106247039f42c10759374a9b361c62e99e</hash> + <hash alg="SHA-384">1f7e6e7555c97752e2a3a7dc07473384762467c24a0fc8f4c93c0f209ef361ecd4bf2be847281798dd84f68fc8c54b2f</hash> + <hash alg="SHA3-384">59b895108174073d9889ba3e18566eb5e0785310e90dbd918dfb06af5bdf0d72e8a54094c6109090f43e242daa4d6ebf</hash> + <hash alg="SHA3-256">5a9518cdc72dd7fb8d7848500cb8c97c7689e64a52028dabf44e61a933ffd853</hash> + <hash alg="SHA3-512">5b53b7ee09cf057f83acf86de3f35fc45c04cd95c01e78b59fc1b4d9322e17ecaec1d6c5d37cd37084b602c1a74f6457342e27c6271fd140ade3190448c9fb27</hash> + </hashes> + <licenses> + <license> + <id>Apache-2.0</id> + </license> + </licenses> + <purl>pkg:maven/com.google.inject/guice@5.1.0?type=jar</purl> + <externalReferences> + <reference type="website"> + <url>https://github.com/google/guice/guice</url> + </reference> + <reference type="build-system"> + <url>https://travis-ci.org/google/guice</url> + </reference> + <reference type="distribution-intake"> + <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url> + </reference> + <reference type="issue-tracker"> + <url>https://github.com/google/guice/issues/</url> + </reference> + <reference type="mailing-list"> + <url>http://groups.google.com/group/google-guice/topics</url> + </reference> + <reference type="vcs"> + <url>https://github.com/google/guice/guice</url> + </reference> + </externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/aopalliance/aopalliance@1.0?type=jar"> + <group>aopalliance</group> + <name>aopalliance</name> + <version>1.0</version> + <description>AOP Alliance</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">04177054e180d09e3998808efa0401c7</hash> + <hash alg="SHA-1">0235ba8b489512805ac13a8f9ea77a1ca5ebe3e8</hash> + <hash alg="SHA-256">0addec670fedcd3f113c5c8091d783280d23f75e3acb841b61a9cdb079376a08</hash> + <hash alg="SHA-512">3f44a932d8c00cfeee2eb057bcd7c301a2d029063e0a916e1e20b3aec4877d19d67a2fd8aaf58fa2d5a00133d1602128a7f50912ffb6cabc7b0fdc7fbda3f8a1</hash> + <hash alg="SHA-384">4dddf44338b5aff9580da2532b81c0ac3e1d09e1f28c6db871a55cad442b705dd7791eb07f9d4577d49d0be3673ba783</hash> + <hash alg="SHA3-384">2bd64cbaf769c6e4e85e34f7a6119d89e16fbf55af3fc5d6cbd52eb214c367dec1ac7b9062ee0fb35a2e0acfc7c477e1</hash> + <hash alg="SHA3-256">d4a726b2bf8aa58197021a7d8fca674b4b2790d4c48de43a92f728866a91c2f0</hash> + <hash alg="SHA3-512">830bc3f8328be76897990e9b9fc42eef02623115e456af96ad09b20900ad615519c8c8de60155ac04fb332eaa9510110d52edd13911af76271c71d91cbd789cc</hash> + </hashes> + <licenses> + <license> + <name>Public Domain</name> + </license> + </licenses> + <purl>pkg:maven/aopalliance/aopalliance@1.0?type=jar</purl> + <externalReferences> + <reference type="website"> + <url>http://aopalliance.sourceforge.net</url> + </reference> + </externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/com.google.guava/guava@33.4.8-jre?type=jar"> + <group>com.google.guava</group> + <name>guava</name> + <version>33.4.8-jre</version> + <description>Guava is a suite of core and expanded libraries that include + utility classes, Google's collections, I/O classes, and + much more.</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">72920caab34426c5815e3b00f80e3b01</hash> + <hash alg="SHA-1">e70a3268e6cd3e7d458aa15787ce6811c34e96ae</hash> + <hash alg="SHA-256">f3d7f57f67fd622f4d468dfdd692b3a5e3909246c28017ac3263405f0fe617ed</hash> + <hash alg="SHA-512">82c43d82fee2b3264e53cd2e9451865f9467ec0baa68d0ddfffa06a1e5465872913150ef96e99ea91daec4387248d832ec9398859f2fa5f08f65caf103306ba3</hash> + <hash alg="SHA-384">6645343c3c7a989539d8e77a53b0b848bc1cd739a405353aa6c00b3e4e6c58a93770c988e53d4c0326ed7ea608eb5820</hash> + <hash alg="SHA3-384">cc6d1a11626c5ba5fdec819fdc4c0e97afa3e946744dbf9dae10f9ad77f6570703356e301a686c7727b80095d3ec4bea</hash> + <hash alg="SHA3-256">b09ae5778552402e8e5780adbee939191ea149cbf0faf2f9c15a818167730df0</hash> + <hash alg="SHA3-512">de052d07cf9a308fe4c1a0743534cf8b651fbd6e5f570b0c1a3d9a3269669fbae164bbbfcd089a52729b3a1d8917fbb73c1dac65cb61f93fc200568f32d09a27</hash> + </hashes> + <licenses> + <license> + <id>Apache-2.0</id> + </license> + </licenses> + <purl>pkg:maven/com.google.guava/guava@33.4.8-jre?type=jar</purl> + <externalReferences> + <reference type="website"> + <url>https://github.com/google/guava</url> + </reference> + <reference type="build-system"> + <url>https://github.com/google/guava/actions</url> + </reference> + <reference type="distribution-intake"> + <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url> + </reference> + <reference type="issue-tracker"> + <url>https://github.com/google/guava/issues</url> + </reference> + <reference type="vcs"> + <url>https://github.com/google/guava/guava</url> + </reference> + </externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.jspecify/jspecify@1.0.0?type=jar"> + <group>org.jspecify</group> + <name>jspecify</name> + <version>1.0.0</version> + <description>An artifact of well-named and well-specified annotations to power static analysis checks</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">9133aba420d0ca3b001dbb6ae9992cf6</hash> + <hash alg="SHA-1">7425a601c1c7ec76645a78d22b8c6a627edee507</hash> + <hash alg="SHA-256">1fad6e6be7557781e4d33729d49ae1cdc8fdda6fe477bb0cc68ce351eafdfbab</hash> + <hash alg="SHA-512">efded31ef5b342f09422935076e599789076431e93a746685c0607e7de5592719ba6aacde0be670b3f064d1e85630d58d5bce6b34aed2a288fdb34f745efb7bc</hash> + <hash alg="SHA-384">814f860e5a44ead6c457676841eef471a8b87be31b84c60a8a4477a18a9cbcb6e3c2ae700969d5c5e52309d961e0537a</hash> + <hash alg="SHA3-384">c8844e5b71e5ecfbb7366097ce34af2f5863d86d5ccc3f9ec384d8ade4b60ccc8124c7fc88664f1afd2b0962fc8775bf</hash> + <hash alg="SHA3-256">4b4f08ad7606a3ac62997779484919a302267b26d26ee19125f8a7eea60e8a71</hash> + <hash alg="SHA3-512">65c6845ebae981cb81b61107707ced39f5b377dae970b47606ef482aaf10e3729def0da40d9377c43abbfb483a5ceae039b0d51c129c50a6d36ad351a5d6b01e</hash> + </hashes> + <licenses> + <license> + <id>Apache-2.0</id> + </license> + </licenses> + <purl>pkg:maven/org.jspecify/jspecify@1.0.0?type=jar</purl> + <externalReferences> + <reference type="website"> + <url>http://jspecify.org/</url> + </reference> + <reference type="vcs"> + <url>https://github.com/jspecify/jspecify/</url> + </reference> + </externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/com.google.guava/failureaccess@1.0.2?type=jar"> + <group>com.google.guava</group> + <name>failureaccess</name> + <version>1.0.2</version> + <description>Contains + com.google.common.util.concurrent.internal.InternalFutureFailureAccess and + InternalFutures. Most users will never need to use this artifact. Its + classes are conceptually a part of Guava, but they're in this separate + artifact so that Android libraries can use them without pulling in all of + Guava (just as they can use ListenableFuture by depending on the + listenablefuture artifact).</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">3f75955b49b6758fd6d1e1bd9bf777b3</hash> + <hash alg="SHA-1">c4a06a64e650562f30b7bf9aaec1bfed43aca12b</hash> + <hash alg="SHA-256">8a8f81cf9b359e3f6dfa691a1e776985c061ef2f223c9b2c80753e1b458e8064</hash> + <hash alg="SHA-512">ff4ee76aa661708989d53d45576cff3beea9ebbd86481dbbf2ee8c81bb22f882097b430588312b711025f0e890f22c6799d722ccd422a6a7278de08660fe2f51</hash> + <hash alg="SHA-384">85a7bd379da27ad57a4e5c02099fef206083caa52244597ac858a921b48e2912cfa7ef0e7d0c7a10ab2dd8d0f7d6ada0</hash> + <hash alg="SHA3-384">652b22d09b297320e62ac254801e7d3a0fd2a8038461c5cbf7a53a27d681f62b768b964aa62c864453c4e7af217c8c4a</hash> + <hash alg="SHA3-256">a650b2f7982affc2dbb7e2807fbb0fbf58b74fd8dc111cc6dc5e95a00179b7e3</hash> + <hash alg="SHA3-512">2c5ee7629a8fb1c952f437b80fcd1cff86c54ff81de02eda1eb73c0bbfe38d3f072946f8c6396c7f1e46e16a6d44ad393dfe6fd2dd96f75ebb854263d36bb193</hash> + </hashes> + <licenses> + <license> + <id>Apache-2.0</id> + </license> + </licenses> + <purl>pkg:maven/com.google.guava/failureaccess@1.0.2?type=jar</purl> + <externalReferences> + <reference type="website"> + <url>https://github.com/google/guava/failureaccess</url> + </reference> + <reference type="build-system"> + <url>https://travis-ci.org/google/guava</url> + </reference> + <reference type="distribution-intake"> + <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url> + </reference> + <reference type="issue-tracker"> + <url>https://github.com/google/guava/issues</url> + </reference> + <reference type="vcs"> + <url>https://github.com/google/guava/failureaccess</url> + </reference> + </externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/javax.inject/javax.inject@1?type=jar"> + <group>javax.inject</group> + <name>javax.inject</name> + <version>1</version> + <description>The javax.inject API</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">289075e48b909e9e74e6c915b3631d2e</hash> + <hash alg="SHA-1">6975da39a7040257bd51d21a231b76c915872d38</hash> + <hash alg="SHA-256">91c77044a50c481636c32d916fd89c9118a72195390452c81065080f957de7ff</hash> + <hash alg="SHA-512">e126b7ccf3e42fd1984a0beef1004a7269a337c202e59e04e8e2af714280d2f2d8d2ba5e6f59481b8dcd34aaf35c966a688d0b48ec7e96f102c274dc0d3b381e</hash> + <hash alg="SHA-384">ac04c9f03ccbe35a25deb8b50280a0ca01dbe6aff0dd795d55af6112bfe3cd5817eb82f32fb18378d86cd64b07597190</hash> + <hash alg="SHA3-384">fca090ecb1edeacb9fe865dc515cd1d109b323cd742d4a9733ff199a96ee96e0db4f924079520b9c189ef750f255475d</hash> + <hash alg="SHA3-256">5b0054e39e522de0e0ffc4034d12f72270291fb24d94d5ffc9c4d69c25035fc6</hash> + <hash alg="SHA3-512">fb290f5a70b1efc1dff12f40a0b2d7b94019f66da42e78010c0b8e61f222c4f267b67e356a9e9c346eb801e5515e36243888f280c5cb95c2dd69016a30cadeb9</hash> + </hashes> + <licenses> + <license> + <id>Apache-2.0</id> + </license> + </licenses> + <purl>pkg:maven/javax.inject/javax.inject@1?type=jar</purl> + <externalReferences> + <reference type="website"> + <url>http://code.google.com/p/atinject/</url> + </reference> + <reference type="vcs"> + <url>http://code.google.com/p/atinject/source/checkout</url> + </reference> + </externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.codehaus.plexus/plexus-classworlds@2.8.0?type=jar"> + <publisher>Codehaus Plexus</publisher> + <group>org.codehaus.plexus</group> + <name>plexus-classworlds</name> + <version>2.8.0</version> + <description>A class loader framework</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">92089dee35db6423c2128559238430cb</hash> + <hash alg="SHA-1">5d0d8c71b61b38ce127a46702a453f9aa09a4ee2</hash> + <hash alg="SHA-256">081b40e0eab033cd5ac72d2501bfff4f5fd2a3eef827051111730ea152681c72</hash> + <hash alg="SHA-512">3f8eeaf5089244ca8e0eec46ab0d57924dd187375413ddf55edf5881a2fd17f7b4a12abd0b402e8a2d5c8428bff87809f40921eda9f6ddc20585e861825618ec</hash> + <hash alg="SHA-384">b689762c3c4a75b2f6eda24e97c6d77c1a550b755baa1d7f6b3151f413421380232d5474f3c1b2a15665651d8909b456</hash> + <hash alg="SHA3-384">929e03c89948c96515c8ff58da7653c1396e261b7c5b7d22575634f7266496d655397864ab2e129778af759993f57520</hash> + <hash alg="SHA3-256">a1006c9de6b5f60a8e2ee5839c2fbc128158f6008458e42e65123e7bb2e3cbbc</hash> + <hash alg="SHA3-512">5a813f86a7246cd2f0021d1d6891497128cefcbb2258d3865dc41eb7f4fb5f21c5875f21418a8bbff2b6b100ed0523e7101b7937aa84b6be87a808cfee73e50d</hash> + </hashes> + <licenses> + <license> + <id>Apache-2.0</id> + </license> + </licenses> + <purl>pkg:maven/org.codehaus.plexus/plexus-classworlds@2.8.0?type=jar</purl> + <externalReferences> + <reference type="website"> + <url>https://codehaus-plexus.github.io/plexus-classworlds/</url> + </reference> + <reference type="distribution-intake"> + <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url> + </reference> + <reference type="issue-tracker"> + <url>https://github.com/codehaus-plexus/plexus-classworlds/issues</url> + </reference> + <reference type="mailing-list"> + <url>https://groups.google.com/forum/#!forum/mojohaus-dev</url> + </reference> + <reference type="vcs"> + <url>https://github.com/codehaus-plexus/plexus-classworlds/tree/plexus-classworlds-2.8.0/</url> + </reference> + </externalReferences> + </component> + <component type="library" bom-ref="pkg:maven/org.codehaus.plexus/plexus-interpolation@1.27?type=jar"> + <publisher>Codehaus Plexus</publisher> + <group>org.codehaus.plexus</group> + <name>plexus-interpolation</name> + <version>1.27</version> + <description>The Plexus project provides a full software stack for creating and executing software projects.</description> + <scope>required</scope> + <hashes> + <hash alg="MD5">c2edbe0dbc934692794aaeac6006055a</hash> + <hash alg="SHA-1">8dc73f4ff5eafcbb7ec035ba54736e828b272533</hash> + <hash alg="SHA-256">3fb4fb6143fdf964024c3cb738551524b9ea84e5c211cd660c559ad0703e5230</hash> + <hash alg="SHA-512">34ae1399e75560d6aec6743ce37e10d2236342ec58145c3fdd7b03340f4ed3ef500f824c845d452dbb8c3f14d118c855707de4a080074fa572daf7ccfef4dddf</hash> + <hash alg="SHA-384">cf31f04d414db3c864a403628707df8b36c379a984d75804e5cbfeeea5fea54d2510620de045c0b01a7745063b3135fb</hash> + <hash alg="SHA3-384">9a439b4e81260659af067e91d5e2482337dc718cd32abc08562e9a90fee45da6a0cbfffdc7190b13ba662ed3153fcde1</hash> + <hash alg="SHA3-256">d8cd271924ed99a870e9f8c17796e2ab0a3e69350465508517992bee0cea6bbe</hash> + <hash alg="SHA3-512">75a3e2cbde1c45b70c1b4103620f76673db127e17518e2ca51cff1e6d7a84041e495c71171490004650d6476679d009594db2557898e231962bea3744914c501</hash> + </hashes> + <licenses> + <license> + <id>Apache-2.0</id> + </license>
[... 123970 lines stripped ...]
