You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@camel.apache.org by gz...@apache.org on 2024/01/31 13:05:13 UTC
svn commit: r67073 [2/2] - /release/camel/apache-camel/3.22.1/apache-camel-3.22.1-sbom.xml
Added: release/camel/apache-camel/3.22.1/apache-camel-3.22.1-sbom.xml
==============================================================================
--- release/camel/apache-camel/3.22.1/apache-camel-3.22.1-sbom.xml (added)
+++ release/camel/apache-camel/3.22.1/apache-camel-3.22.1-sbom.xml Wed Jan 31 13:05:13 2024
@@ -0,0 +1,101948 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<bom version="1" xmlns="http://cyclonedx.org/schema/bom/1.4">
+ <metadata>
+ <tools>
+ <tool>
+ <vendor>OWASP Foundation</vendor>
+ <name>CycloneDX Maven plugin</name>
+ <version>2.7.10</version>
+ <hashes>
+ <hash alg="MD5">1cc7f6a0382f8bb2f758d6a6ea401d1b</hash>
+ <hash alg="SHA-1">a4297947a1f2d7d453105db542651614bbd37f38</hash>
+ <hash alg="SHA-256">bd0fdd8f2f2116eee5e715aeac1580f19eb7a10ec2b6f805b53567067658e872</hash>
+ <hash alg="SHA-512">9cde8352a427e10b96cae01348fc7cfe5d4aa9cd0a5e5dd93b414ce3bb7d112993c3b3004e53af52567fbfa16de0704ec59a5556a635ad70571fd124ae389f39</hash>
+ <hash alg="SHA-384">93d7bf5b5c735347edfbfbd66810273ca840f9a322b816d22d44c3d8e8255c09e86570bb23712aeb0cade0f478be5aeb</hash>
+ <hash alg="SHA3-384">4467f16e9ca32190a6e49c65339eb28ee5e8c78f4e918fcf95128a4b7648898de56ccb43eacfad0c9391ef8cdb7d629a</hash>
+ <hash alg="SHA3-256">ed2996c99b483e969221d5e9a40f562ea2ab85442d361d72a90e85266a3ed781</hash>
+ <hash alg="SHA3-512">c8e6ea9ddc38edc77e284b3bf541663e84752bdc59ed1935799847a48a14ea2fa531b61008fefcba37d732a56702a11ac112437b9b80d18f4ecc8ef0ecfb32cf</hash>
+ </hashes>
+ </tool>
+ </tools>
+ <component type="library" bom-ref="pkg:maven/org.apache.camel/camel@3.22.1?type=pom">
+ <publisher>The Apache Software Foundation</publisher>
+ <group>org.apache.camel</group>
+ <name>camel</name>
+ <version>3.22.1</version>
+ <description>Camel Root POM</description>
+ <licenses>
+ <license>
+ <id>Apache-2.0</id>
+ <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+ </license>
+ </licenses>
+ <purl>pkg:maven/org.apache.camel/camel@3.22.1?type=pom</purl>
+ <externalReferences><reference type="website"><url>https://camel.apache.org</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/CAMEL</url></reference><reference type="mailing-list"><url>dev-subscribe@camel.apache.org</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=camel.git;a=summary</url></reference></externalReferences>
+ </component>
+ <properties>
+ <property name="maven.goal">makeAggregateBom</property>
+ <property name="maven.scopes">compile,provided,runtime,system</property>
+ <property name="cdx:reproducible">enabled</property>
+ </properties>
+ </metadata>
+ <components>
+ <component type="library" bom-ref="pkg:maven/org.apache.camel/camel-buildtools@3.22.1?type=jar">
+ <publisher>The Apache Software Foundation</publisher>
+ <group>org.apache.camel</group>
+ <name>camel-buildtools</name>
+ <version>3.22.1</version>
+ <description>The build tools for the Apache Camel project</description>
+ <licenses>
+ <license>
+ <id>Apache-2.0</id>
+ <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+ </license>
+ </licenses>
+ <purl>pkg:maven/org.apache.camel/camel-buildtools@3.22.1?type=jar</purl>
+ <externalReferences><reference type="website"><url>https://camel.apache.org/camel-buildtools</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/CAMEL</url></reference><reference type="mailing-list"><url>dev-subscribe@camel.apache.org</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=camel.git;a=summary/camel-buildtools</url></reference></externalReferences>
+ </component>
+ <component type="library" bom-ref="pkg:maven/org.apache.camel/camel-parent@3.22.1?type=pom">
+ <group>org.apache.camel</group>
+ <name>camel-parent</name>
+ <version>3.22.1</version>
+ <purl>pkg:maven/org.apache.camel/camel-parent@3.22.1?type=pom</purl>
+ </component>
+ <component type="library" bom-ref="pkg:maven/org.apache.camel/init@3.22.1?type=pom">
+ <group>org.apache.camel</group>
+ <name>init</name>
+ <version>3.22.1</version>
+ <purl>pkg:maven/org.apache.camel/init@3.22.1?type=pom</purl>
+ </component>
+ <component type="library" bom-ref="pkg:maven/org.apache.camel/camel-bundle-plugin@3.22.1?type=maven-plugin">
+ <group>org.apache.camel</group>
+ <name>camel-bundle-plugin</name>
+ <version>3.22.1</version>
+ <purl>pkg:maven/org.apache.camel/camel-bundle-plugin@3.22.1?type=maven-plugin</purl>
+ </component>
+ <component type="library" bom-ref="pkg:maven/org.apache.felix/maven-bundle-plugin@5.1.9?type=jar">
+ <publisher>The Apache Software Foundation</publisher>
+ <group>org.apache.felix</group>
+ <name>maven-bundle-plugin</name>
+ <version>5.1.9</version>
+ <description>Provides a maven plugin that supports creating an OSGi bundle
+ from the contents of the compilation classpath along with its
+ resources and dependencies. Plus a zillion other features.
+ The plugin uses the Bnd tool (http://www.aqute.biz/Code/Bnd)</description>
+ <scope>required</scope>
+ <hashes>
+ <hash alg="MD5">a47534f9f953dc75548a04c6046f3c25</hash>
+ <hash alg="SHA-1">707d2a73eecc3cd7b208eb8b6f766e944ee486db</hash>
+ <hash alg="SHA-256">d5379a3b8dd9b898c2953a1efea780cb5dc06029399ac492bbca13d65aa28eaf</hash>
+ <hash alg="SHA-512">23781a6fba63a6b720cb2b95949fba5f4462f1100babd1e47997aea503cc720722d1672ff91b5f2472f4a54dc4675fb057e4bb7f12e3258849dd804e32a0e157</hash>
+ <hash alg="SHA-384">b0f3a58fb2351ac262dfd76b7e8df922bf48cbcd7a80c4674c87660ad6abef1b9862889b21f3acc497fa56a40f6a9280</hash>
+ <hash alg="SHA3-384">3d8bef2acf057e60b8605304e3fb281392fd17b0b0d6833d9288401ac00e0472fe02967230accee21e41505946f79cbe</hash>
+ <hash alg="SHA3-256">8fd6d5b30d253e6aa50a188ed5081186d58275c5f9e7c4f86f31803ca4979c86</hash>
+ <hash alg="SHA3-512">50ac1bb094faa882a67288db0a406d9ec2dc06a1dd27c1b935b97ca407937d5926dfb31ce6819a1965afe01c93eb9ec22334134db1ff76b9585d20edf6e2fc13</hash>
+ </hashes>
+ <licenses>
+ <license>
+ <id>Apache-2.0</id>
+ </license>
+ </licenses>
+ <purl>pkg:maven/org.apache.felix/maven-bundle-plugin@5.1.9?type=jar</purl>
+ <externalReferences><reference type="website"><url>http://felix.apache.org/components/bundle-plugin/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/FELIX</url></reference><reference type="mailing-list"><url>https://www.mail-archive.com/dev%40felix.apache.org/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=felix-dev.git</url></reference></externalReferences>
+ </component>
+ <component type="library" bom-ref="pkg:maven/org.osgi/org.osgi.core@6.0.0?type=jar">
+ <publisher>OSGi Alliance</publisher>
+ <group>org.osgi</group>
+ <name>org.osgi.core</name>
+ <version>6.0.0</version>
+ <description>OSGi Core Release 6, Interfaces and Classes for use in compiling bundles.</description>
+ <scope>required</scope>
+ <hashes>
+ <hash alg="MD5">cae291c61fe8b7a4476d713550c7ff49</hash>
+ <hash alg="SHA-1">0c49acdc9ac62cf69ee49cb6f1905b4fdb79ea5c</hash>
+ <hash alg="SHA-256">1c1bb435eb34cbf1f743653da38f604d45d53fbc95979053768cd3fc293cb931</hash>
+ <hash alg="SHA-512">a6d5388804982ab2cb0ba82b4291e73f006577c54e5dcb0675a2c4922594ddb0265810a4e7c748c88eba76ee350340376b7a9bd25d2de3afb954cf89117cd470</hash>
+ <hash alg="SHA-384">8daff91fc229b2874c1ff7a214fdee65b1824fbac76eb7feec609c5b70ab2fd24fc5cf017b339788a5c7aec041ec1a1c</hash>
+ <hash alg="SHA3-384">b921d8bea5dab6e7d827ce49a43e6edb4a15c1402e1d70498faf867bd7e9ea61f47b9cbdbf008ed517b71499c02b9e4c</hash>
+ <hash alg="SHA3-256">5836efac64dd3757498bc6648cf02e46f136c6b0b39d5f1641218459d6b68ca0</hash>
+ <hash alg="SHA3-512">9056edfc04943cdc81041db1851cade670415457221617babeb3d3c5136c3dcc303862e55b545f40584477e0654d11d84db6ede072015b08744241202d79ee63</hash>
+ </hashes>
+ <licenses>
+ <license>
+ <id>Apache-2.0</id>
+ </license>
+ </licenses>
+ <purl>pkg:maven/org.osgi/org.osgi.core@6.0.0?type=jar</purl>
+ <externalReferences><reference type="website"><url>http://www.osgi.org</url></reference><reference type="vcs"><url>private</url></reference></externalReferences>
+ </component>
+ <component type="library" bom-ref="pkg:maven/biz.aQute.bnd/biz.aQute.bndlib@6.3.1?type=jar">
+ <publisher>Bndtools</publisher>
+ <group>biz.aQute.bnd</group>
+ <name>biz.aQute.bndlib</name>
+ <version>6.3.1</version>
+ <description>bndlib: A Swiss Army Knife for OSGi</description>
+ <scope>required</scope>
+ <hashes>
+ <hash alg="MD5">6b35b1ae5b56cb48a70554b8d103f860</hash>
+ <hash alg="SHA-1">3218e787f13e1c3a39a966ac67aac651dbe2e23b</hash>
+ <hash alg="SHA-256">6e44092ecd67a3b4a1b3bd6e5ea61133991d9ddf179c72eae39692d2a8c33bf6</hash>
+ <hash alg="SHA-512">7c3f7bc0280beb1b15182c558ef23f431719c046da8473545efe9aeec935776ebf6682cabbb7e7f53dcf2ccca168d8df35859be77121dab04340a5ec7e993608</hash>
+ <hash alg="SHA-384">bf0f41fddbfcc5bb97d922d776497bd5795cdfb8a3c52899d1247d3152757d069adc13a9a33427b39affb4c83cf62f7c</hash>
+ <hash alg="SHA3-384">ca72e96514ca30cde0ac9e305d473d56f5131c47385d82e3d0208746237de39697534446268ed7aedaebb2687575e198</hash>
+ <hash alg="SHA3-256">a88810b780f12202c878b8f87cd54624f8d73fbf6db3a001f9c3c71d2706c679</hash>
+ <hash alg="SHA3-512">8b0664fbbeffc1fcaf15a93b30f663010abd7c8b95272cc6764ac6bce80502c5c66850f7617be9645f74f17f57ac264551d8e7686af44efc342f7118026a4527</hash>
+ </hashes>
+ <licenses>
+ <license>
+ <name>(Apache-2.0 OR EPL-2.0)</name>
+ <url>https://opensource.org/licenses/Apache-2.0,https://opensource.org/licenses/EPL-2.0</url>
+ </license>
+ </licenses>
+ <purl>pkg:maven/biz.aQute.bnd/biz.aQute.bndlib@6.3.1?type=jar</purl>
+ <externalReferences><reference type="website"><url>https://bnd.bndtools.org/</url></reference><reference type="vcs"><url>https://github.com/bndtools/bnd</url></reference></externalReferences>
+ </component>
+ <component type="library" bom-ref="pkg:maven/org.osgi/org.osgi.dto@1.0.0?type=jar">
+ <publisher>OSGi Alliance</publisher>
+ <group>org.osgi</group>
+ <name>org.osgi.dto</name>
+ <version>1.0.0</version>
+ <description>OSGi Companion Code for org.osgi.dto Version 1.0.0.</description>
+ <scope>required</scope>
+ <hashes>
+ <hash alg="MD5">c2bce9030f4b5a2d3c489dfc11fee529</hash>
+ <hash alg="SHA-1">1d01eb8c487477f929127d4a88fbfe97af0379a4</hash>
+ <hash alg="SHA-256">cb75f3c7e48e5a31a31df22e26873346f5bf659e2dcab2369e031e4850d2ff43</hash>
+ <hash alg="SHA-512">6c2e82be9a502b05817ce276a807ec0f72e4847ad1712b9c36afd2bac6989e88873c271ae87fd2d867f56016686b9e3b1a6b39c5e5bed76d6e52fb8e2569b615</hash>
+ <hash alg="SHA-384">c5d6ac5cb81861171836ecb0fcf582b156ee4548fa7861ce4353acde5d9a6968f9e000ffeb12eecf4d8a638804502deb</hash>
+ <hash alg="SHA3-384">98523827d366449a9c975453a0e6aab562f3b5f46dfd7debda783be492172eedb34aa33a12a50ecdc27d669dea3b5ab1</hash>
+ <hash alg="SHA3-256">e1f8b9b077a7d875fa05459af52e293911640cbb271f9755b09eb2a28bdf28d5</hash>
+ <hash alg="SHA3-512">94a7dbd39295e8f23b51108d5494352c26e5a00f855540150b09a1913c71dfbfe6a581ec6734cf5aa4b0c0f207079097b87f7f3ebd1df04c1e0c0cf97f76a8c0</hash>
+ </hashes>
+ <licenses>
+ <license>
+ <id>Apache-2.0</id>
+ </license>
+ </licenses>
+ <purl>pkg:maven/org.osgi/org.osgi.dto@1.0.0?type=jar</purl>
+ <externalReferences><reference type="website"><url>http://www.osgi.org/</url></reference><reference type="vcs"><url>https://osgi.org/git/build.git</url></reference></externalReferences>
+ </component>
+ <component type="library" bom-ref="pkg:maven/org.osgi/org.osgi.resource@1.0.0?type=jar">
+ <publisher>OSGi Alliance</publisher>
+ <group>org.osgi</group>
+ <name>org.osgi.resource</name>
+ <version>1.0.0</version>
+ <description>OSGi Companion Code for org.osgi.resource Version 1.0.0.</description>
+ <scope>required</scope>
+ <hashes>
+ <hash alg="MD5">7d857a4203e2996fab0cf070133e43df</hash>
+ <hash alg="SHA-1">343c88949132984b3f2d4175a72c40b77dc65619</hash>
+ <hash alg="SHA-256">81fc50f1f1d38a4af28e131907d4afe213249aab05060484edca0e60c4af9b4a</hash>
+ <hash alg="SHA-512">4e798790856f83f50832db80bfab64dfceeff1c509d7dde43e74a9f9192ea7a7d5ea77b9b1e81291fa6ba3dcef5ab8fa791ca8093a72a08d7ca6f6499e13e506</hash>
+ <hash alg="SHA-384">73038c395166552b64b6b5469bd8056584f48d19b5762df2e8bd2770405ed8f6071e397a87d9a7ed39f8c2e0e8ab85b2</hash>
+ <hash alg="SHA3-384">e06c8a460b3bf06d6cb22237aeffa6afd2eadd9461096c67b768a14603ad8aaa88f891d03cf0a273a99d86906c1c8eb3</hash>
+ <hash alg="SHA3-256">1097cfd20e80ce368fd828a23ad7c32a202cebd92106f6ebb88ba55ca74349ee</hash>
+ <hash alg="SHA3-512">d7b710e1e0484badb875f326c602c90df6705df48b0f057320919a5255d3ecbddd7053eabc68787480a70aebd7e553e9f51728112e1fa0846c849366b7e8d69b</hash>
+ </hashes>
+ <licenses>
+ <license>
+ <id>Apache-2.0</id>
+ </license>
+ </licenses>
+ <purl>pkg:maven/org.osgi/org.osgi.resource@1.0.0?type=jar</purl>
+ <externalReferences><reference type="website"><url>http://www.osgi.org/</url></reference><reference type="vcs"><url>https://osgi.org/git/build.git</url></reference></externalReferences>
+ </component>
+ <component type="library" bom-ref="pkg:maven/org.osgi/org.osgi.framework@1.8.0?type=jar">
+ <publisher>OSGi Alliance</publisher>
+ <group>org.osgi</group>
+ <name>org.osgi.framework</name>
+ <version>1.8.0</version>
+ <description>OSGi Companion Code for org.osgi.framework Version 1.8.0.</description>
+ <scope>required</scope>
+ <hashes>
+ <hash alg="MD5">1a40fb57099ef5530d25bc9600d509b1</hash>
+ <hash alg="SHA-1">b54d03f9621136b7d9d93b5017b0a4fa490e78b0</hash>
+ <hash alg="SHA-256">ec194b7871af27681716ff05259319a5c3c9b9727e8000e9e832499b93484b4e</hash>
+ <hash alg="SHA-512">9be46a4a81698ac5641809f6b7061453f0960a585fb69a47331029362f605fa50edb51ceb22ae4c5ea2d3617fc1919e3d86a86acde435f73dc73f00e84f444aa</hash>
+ <hash alg="SHA-384">ada694e4cb7fe21ea616132b9228472835515a29d68e6253c6c73e7d37a93ecfa504db0ec5bdb391c9126e89df892541</hash>
+ <hash alg="SHA3-384">1e56c00266021816d80258b7f32a642a436ad786901347f3ddd72eb9a50f4b865f8970710363992da5d50dbca6d7c360</hash>
+ <hash alg="SHA3-256">1ee406718f48a4a6cd3ecff2e39c3497c8241dbcdaa66c6cb2e1c0a9ff64e626</hash>
+ <hash alg="SHA3-512">304002edf444166735e8323c8673aaec2bc97d01e4442fb49371bb9f83d5ba1292e5d30bc1127740e160efa5c67e44e414aa3e2af9096925dcbc89b23c3feda4</hash>
+ </hashes>
+ <licenses>
+ <license>
+ <id>Apache-2.0</id>
+ </license>
+ </licenses>
+ <purl>pkg:maven/org.osgi/org.osgi.framework@1.8.0?type=jar</purl>
+ <externalReferences><reference type="website"><url>http://www.osgi.org/</url></reference><reference type="vcs"><url>https://osgi.org/git/build.git</url></reference></externalReferences>
+ </component>
+ <component type="library" bom-ref="pkg:maven/org.osgi/org.osgi.util.tracker@1.5.4?type=jar">
+ <publisher>Eclipse Foundation</publisher>
+ <group>org.osgi</group>
+ <name>org.osgi.util.tracker</name>
+ <version>1.5.4</version>
+ <description>OSGi Companion Code for org.osgi.util.tracker Version 1.5.4</description>
+ <scope>required</scope>
+ <hashes>
+ <hash alg="MD5">5f1d698bfb3b71fe215d1ca173ee4f82</hash>
+ <hash alg="SHA-1">eec58ba28538cb05b7d78aff8c915d6d35b66db8</hash>
+ <hash alg="SHA-256">7d78c2cc9bcb6421c24f17aa097866ce8d9115c219a4f8d6cc753bc4dfb97efa</hash>
+ <hash alg="SHA-512">eb8f66efc53d63c876f1ab6d67c91a286a3d1b346d043ee7ef5ba376c86c71bf412f7c82f855e78054761a1844b83116c50e775cfe18a11e10e812adbe4f45ce</hash>
+ <hash alg="SHA-384">6de5a62b5666b7150469dfdf21ccf53f677ed4228957609cd9e8ddb429a28fc4c8eae9836a90b6bfb8c782968c8fef6c</hash>
+ <hash alg="SHA3-384">b51e7bd4cfeaa595721d7d2198e3e7112b5f0f1b53e8d3587b0d2faa89ccc0cc045b92627fbc9312e5daa0be0b62308f</hash>
+ <hash alg="SHA3-256">03482d78d50b3124ed6e2df035b9e8812db36cd3d0e465190bf2d7f0d1d0a0b4</hash>
+ <hash alg="SHA3-512">9b2f45711ab42709ddfc135c5563a9ccbb1f6c6ef89b391930a2f33ee223f9b47a22c4e3605805ed5bbe4626448a86078e129a1ec8c852e1fcae005f49d56886</hash>
+ </hashes>
+ <licenses>
+ <license>
+ <id>Apache-2.0</id>
+ <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+ </license>
+ </licenses>
+ <purl>pkg:maven/org.osgi/org.osgi.util.tracker@1.5.4?type=jar</purl>
+ <externalReferences><reference type="website"><url>https://docs.osgi.org/</url></reference><reference type="vcs"><url>https://github.com/osgi/osgi</url></reference></externalReferences>
+ </component>
+ <component type="library" bom-ref="pkg:maven/org.osgi/osgi.annotation@8.0.1?type=jar">
+ <publisher>Eclipse Foundation</publisher>
+ <group>org.osgi</group>
+ <name>osgi.annotation</name>
+ <version>8.0.1</version>
+ <description>OSGi Annotation Release 8, Annotations for use in compiling bundles</description>
+ <scope>required</scope>
+ <hashes>
+ <hash alg="MD5">4f15008cd76e0c6ba527d89148c56d08</hash>
+ <hash alg="SHA-1">593d823753aa6e128129da357d7891758e66aa1d</hash>
+ <hash alg="SHA-256">a0e8a4c362bd3600812f37b0ea45fba966c7bc049d01fed56a09ecc74082759e</hash>
+ <hash alg="SHA-512">9e0dc035fd381d2f4b5c783227acd88656c7f4c8faaaa0e51178b3cd7b051871e0d7a6db906e32149d027df8dd738b27eaf80b74775dc5f6470e030c08a6b47b</hash>
+ <hash alg="SHA-384">3393fc41135ac929638a6a2f4fc14150a705c6576e1a739509bd7850394435c5d6c0794e44f40efdbd9a3a9f79732132</hash>
+ <hash alg="SHA3-384">6ec4762de433eb53ac4a4620577a83d85d06a620a96cf160c21b90ec98e48f025913932d87b9b87b2bcbcea221244d79</hash>
+ <hash alg="SHA3-256">ef77483de9664ad8ae772060ab8d4e84062dbfc321ed780045d0b4f47a61d04d</hash>
+ <hash alg="SHA3-512">bc2fb8c061b3c7a1596946f3beaaa3df852cb43b353c809cfc3d91bcbbf03d19b1c0d32328864a38966b88996a50b0ddec47c4f71d7a6b84d4f4762e39717c03</hash>
+ </hashes>
+ <licenses>
+ <license>
+ <id>Apache-2.0</id>
+ <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+ </license>
+ </licenses>
+ <purl>pkg:maven/org.osgi/osgi.annotation@8.0.1?type=jar</purl>
+ <externalReferences><reference type="website"><url>https://docs.osgi.org/</url></reference><reference type="vcs"><url>https://github.com/osgi/osgi</url></reference></externalReferences>
+ </component>
+ <component type="library" bom-ref="pkg:maven/org.osgi/org.osgi.service.log@1.3.0?type=jar">
+ <publisher>OSGi Alliance</publisher>
+ <group>org.osgi</group>
+ <name>org.osgi.service.log</name>
+ <version>1.3.0</version>
+ <description>OSGi Companion Code for org.osgi.service.log Version 1.3.0.</description>
+ <scope>required</scope>
+ <hashes>
+ <hash alg="MD5">29739566dfaa2776f52dd4daaca8334c</hash>
+ <hash alg="SHA-1">ca330e0489eac540d7fc1917556081695ebc3428</hash>
+ <hash alg="SHA-256">ff6710c4856d32684cf3ebdc45248f41036ff734f2b03bbc08c4609a61fecfa0</hash>
+ <hash alg="SHA-512">fc6a0c6db6157866ee122741d2b52f55cfa827046d389e39c65d51a14a6846be7d0c8b549edae2f4ef902229f81d06eef1db2a9c850ef7539820ee3022cdec8a</hash>
+ <hash alg="SHA-384">e8d7c477e8cbf6a42f415b5bf1a97177e3c7e61d272d867e425c731956194105d39f78be1d7180739bfecf8a57f29b9e</hash>
+ <hash alg="SHA3-384">538944aab0992424451c1f36a70696d078988775b43cca0378a9c002b56e72b2fb33c3c39ef52a0932744dd82367d0c0</hash>
+ <hash alg="SHA3-256">b491d6d747ee6bdfc4d0ec982b38de533bdc5e3da5fd7222a9661126db15cfca</hash>
+ <hash alg="SHA3-512">e46cc071d3ed08f05990943b7b2577933b21c7c9c9cbe3fe28ddcee5436d86c44911e388457186a52a689fbd4f934b621b559fbb0f594ee920872c3cf2e7725d</hash>
+ </hashes>
+ <licenses>
+ <license>
+ <id>Apache-2.0</id>
+ </license>
+ </licenses>
+ <purl>pkg:maven/org.osgi/org.osgi.service.log@1.3.0?type=jar</purl>
+ <externalReferences><reference type="website"><url>http://www.osgi.org/</url></reference><reference type="vcs"><url>https://osgi.org/git/build.git</url></reference></externalReferences>
+ </component>
+ <component type="library" bom-ref="pkg:maven/org.osgi/org.osgi.service.repository@1.1.0?type=jar">
+ <publisher>OSGi Alliance</publisher>
+ <group>org.osgi</group>
+ <name>org.osgi.service.repository</name>
+ <version>1.1.0</version>
+ <description>OSGi Companion Code for org.osgi.service.repository Version 1.1.0.</description>
+ <scope>required</scope>
+ <hashes>
+ <hash alg="MD5">2e293b7d69dee0e4ca04594ba8c3ec76</hash>
+ <hash alg="SHA-1">64ef667172ece1a39b0bd9471b8336c5f002370d</hash>
+ <hash alg="SHA-256">c5553e95b459529192433486d4c4cc22ff45a2eae4968484f9f717319264a532</hash>
+ <hash alg="SHA-512">79e2beb14b0fcb28109a4095d1be685cf5bd375136a685c19175ed64faf885ca4768c28b484b57baed929e2b3cc52ec2731678b73f4586f8642d771c7d4988c6</hash>
+ <hash alg="SHA-384">ab5cfc26701bc90c3ed47e3c1c0c365a7bba033fe2b185edbe2a4b4161ea6f4eadb3b52fbffee05c8aeb6b483ebe1d35</hash>
+ <hash alg="SHA3-384">f6be4abe9e6885ba03001cb154185c9af6742a5fb84f40eb6d704d40c1cfc0a35439e134145212fba4d1acb0fd5e4b69</hash>
+ <hash alg="SHA3-256">dd96e5511d055cc9ccadfaf2fad348175ea9ffab1b501bba67d1d4d3bd673a5b</hash>
+ <hash alg="SHA3-512">64fc01fb1b68a6c7f6fa4dbe4eb3835b5d22a5f53e86e2b9a99e6ce70be3ba9409af1ee093b024c80180caf35110acdcac55c961c3fe977c8af276e250020d9d</hash>
+ </hashes>
+ <licenses>
+ <license>
+ <id>Apache-2.0</id>
+ </license>
+ </licenses>
+ <purl>pkg:maven/org.osgi/org.osgi.service.repository@1.1.0?type=jar</purl>
+ <externalReferences><reference type="website"><url>http://www.osgi.org/</url></reference><reference type="vcs"><url>https://osgi.org/git/build.git</url></reference></externalReferences>
+ </component>
+ <component type="library" bom-ref="pkg:maven/org.osgi/org.osgi.util.function@1.2.0?type=jar">
+ <publisher>Eclipse Foundation</publisher>
+ <group>org.osgi</group>
+ <name>org.osgi.util.function</name>
+ <version>1.2.0</version>
+ <description>OSGi Companion Code for org.osgi.util.function Version 1.2.0</description>
+ <scope>required</scope>
+ <hashes>
+ <hash alg="MD5">60da2a7f440a142095e729639edf2025</hash>
+ <hash alg="SHA-1">9fe65a02596b68e06aad340f41e33d53e3f7b8a7</hash>
+ <hash alg="SHA-256">208819c7c71690c15a6bb8b187474e7f9d0147946b680182a62b9f222ae014ec</hash>
+ <hash alg="SHA-512">3b60eeca88cfcb5b48bcae38c2e9c387648f014932b175c1343ad975ecac0bc0afe0aa7bcfffc1b520faccb36c75bd85b2f8cbac136b22e15460388becfa870e</hash>
+ <hash alg="SHA-384">4f71ac743138690f3d44b23c7afaa46cac291c3b4881e222352e009b30079bf50d45af9e85d4574db677d7b58d440668</hash>
+ <hash alg="SHA3-384">6c0adf88f8ddcbf71e90e5d54c0f3fd446fd61eda9400ac79f1469a39f86ccf8ba7e0edb59972f6e83632b4cad0f96c5</hash>
+ <hash alg="SHA3-256">ed6b7dc2c72482b87c7030aa9e6af6c9661594df28625b76a8c5dbe07e8cdb68</hash>
+ <hash alg="SHA3-512">bf4af07429e2c091ee96fc3ba02c2efc3ef3c1c813a24684cb6a318d0f0615ec887fe94f01b0bdba708da51e9f3e03c5955e3b722578a412c284e3ea17c216c2</hash>
+ </hashes>
+ <licenses>
+ <license>
+ <id>Apache-2.0</id>
+ <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+ </license>
+ </licenses>
+ <purl>pkg:maven/org.osgi/org.osgi.util.function@1.2.0?type=jar</purl>
+ <externalReferences><reference type="website"><url>https://docs.osgi.org/</url></reference><reference type="vcs"><url>https://github.com/osgi/osgi</url></reference></externalReferences>
+ </component>
+ <component type="library" bom-ref="pkg:maven/org.osgi/org.osgi.util.promise@1.2.0?type=jar">
+ <publisher>Eclipse Foundation</publisher>
+ <group>org.osgi</group>
+ <name>org.osgi.util.promise</name>
+ <version>1.2.0</version>
+ <description>OSGi Companion Code for org.osgi.util.promise Version 1.2.0</description>
+ <scope>required</scope>
+ <hashes>
+ <hash alg="MD5">2b347548c17bcc89597695b7232da658</hash>
+ <hash alg="SHA-1">26c17e1bbfc885ae9eae878de9a0afb73240f031</hash>
+ <hash alg="SHA-256">fef86e64f584d012a16a0306160764f6179663b90988a226c4641b920f3a4b36</hash>
+ <hash alg="SHA-512">64923f94550c80058f4d9a6dfa35d4be68897d0ff42e390f36e2f0d6880e35e578628198087968ffd70abc7e0e332e166708efdffa0a975dd67f91ba021e57a2</hash>
+ <hash alg="SHA-384">eb97e207e51dcd673ec87b9ffc3dd5fdd5a51866519b397998261c31e1df736c8b1f77f0afc7dd26fc26cf9f10cb3d7c</hash>
+ <hash alg="SHA3-384">49558cfa0fb30e9f21cebf9b199ab299c60482d81ed593b8965211f96795b0a28aa8fd5c048e3e4c089be9575ad2bcc1</hash>
+ <hash alg="SHA3-256">fc3823d961191f4578bfdd5b8550a1473e4106f30486a5251845ab48f0f02bec</hash>
+ <hash alg="SHA3-512">b61530dfbadc70bd6548ecbadae22f7458f052953275b75fbfe50731f86260ec0f047269ebfca41e788f7954885f83462060948ce46093288fbed10ab1e821c6</hash>
+ </hashes>
+ <licenses>
+ <license>
+ <id>Apache-2.0</id>
+ <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+ </license>
+ </licenses>
+ <purl>pkg:maven/org.osgi/org.osgi.util.promise@1.2.0?type=jar</purl>
+ <externalReferences><reference type="website"><url>https://docs.osgi.org/</url></reference><reference type="vcs"><url>https://github.com/osgi/osgi</url></reference></externalReferences>
+ </component>
+ <component type="library" bom-ref="pkg:maven/biz.aQute.bnd/biz.aQute.bnd.util@6.3.1?type=jar">
+ <publisher>Bndtools</publisher>
+ <group>biz.aQute.bnd</group>
+ <name>biz.aQute.bnd.util</name>
+ <version>6.3.1</version>
+ <description>Util classes</description>
+ <scope>required</scope>
+ <hashes>
+ <hash alg="MD5">87ce017e32f415feaf2786b22d77b2c4</hash>
+ <hash alg="SHA-1">5188e6ee8b8c4eb7dabe1eb2251e77936058a190</hash>
+ <hash alg="SHA-256">96c90979333e3dd085a8d901304eca9bd073b38d4c2114849e2dbe1375bf02fe</hash>
+ <hash alg="SHA-512">7cb333a2c14a66d6698a5bcac2ca9ce39e05bee9f688defd7fdc83df76757ca9b64f7ba27c736f755d6178144e313e57076171dc2182ccb7342ba5672206cd10</hash>
+ <hash alg="SHA-384">63a623244727a305db0a00acad1fb1283d632b97a43666c258f5ea1f932b592b41203e4e62eb9a926c86e4d01245fde6</hash>
+ <hash alg="SHA3-384">fba25b34f055fb6e7bd34492e75c4647bec088ede93eb6b1b51d52f276b2d610c20f001c8f62927b7370461c8afce386</hash>
+ <hash alg="SHA3-256">c09b5c223a6fa69ef65a742d77551f7a2003f7e77743d3872684dd237dbf1a79</hash>
+ <hash alg="SHA3-512">0dad7f9939eed73597c2c668ed835a3a6b48db913fb94e9c2f1ba67221958d86f82049b75e2330f8920dd834f2a810aa6a3e3e8121ad8b99556069bad42bef88</hash>
+ </hashes>
+ <licenses>
+ <license>
+ <name>(Apache-2.0 OR EPL-2.0)</name>
+ <url>https://opensource.org/licenses/Apache-2.0,https://opensource.org/licenses/EPL-2.0</url>
+ </license>
+ </licenses>
+ <purl>pkg:maven/biz.aQute.bnd/biz.aQute.bnd.util@6.3.1?type=jar</purl>
+ <externalReferences><reference type="website"><url>https://bnd.bndtools.org/</url></reference><reference type="vcs"><url>https://github.com/bndtools/bnd</url></reference></externalReferences>
+ </component>
+ <component type="library" bom-ref="pkg:maven/org.slf4j/slf4j-api@1.7.25?type=jar">
+ <publisher>QOS.ch</publisher>
+ <group>org.slf4j</group>
+ <name>slf4j-api</name>
+ <version>1.7.25</version>
+ <description>The slf4j API</description>
+ <scope>required</scope>
+ <hashes>
+ <hash alg="MD5">caafe376afb7086dcbee79f780394ca3</hash>
+ <hash alg="SHA-1">da76ca59f6a57ee3102f8f9bd9cee742973efa8a</hash>
+ <hash alg="SHA-256">18c4a0095d5c1da6b817592e767bb23d29dd2f560ad74df75ff3961dbde25b79</hash>
+ <hash alg="SHA-512">5dd6271fd5b34579d8e66271bab75c89baca8b2ebeaa9966de391284bd08f2d720083c6e0e1edda106ecf8a04e9a32116de6873f0f88c19c049c0fe27e5d820b</hash>
+ <hash alg="SHA-384">f2791380e87fccb18519efd016c03be11206984f4765586d348e57e2f33756b21ed51a95fa09679e1473a5bf5d2d76e1</hash>
+ <hash alg="SHA3-384">d621071a8bca1a32ac3603a816721fd93180a29e520d16a1c655686b169605f679818d6acc0000470ebe25265bdc9962</hash>
+ <hash alg="SHA3-256">abb590301fbb93baf4f7afe227f230ee7992d9a56f7034ef2c37447ac8c52a9b</hash>
+ <hash alg="SHA3-512">c025c503db0d09d0d435c1c96f0e7165f08375abc58eb4e4bf52b0b4689801019a7e966fa5372c03b0697083a992a0baceb7ab5d18659d262f5db4c9bca26584</hash>
+ </hashes>
+ <licenses>
+ <license>
+ <id>MIT</id>
+ <url>https://opensource.org/licenses/MIT</url>
+ </license>
+ </licenses>
+ <purl>pkg:maven/org.slf4j/slf4j-api@1.7.25?type=jar</purl>
+ <externalReferences><reference type="website"><url>http://www.slf4j.org</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/qos-ch/slf4j/slf4j-api</url></reference></externalReferences>
+ </component>
+ <component type="library" bom-ref="pkg:maven/org.apache.felix/org.apache.felix.bundlerepository@1.6.6?type=jar">
+ <publisher>The Apache Software Foundation</publisher>
+ <group>org.apache.felix</group>
+ <name>org.apache.felix.bundlerepository</name>
+ <version>1.6.6</version>
+ <description>Bundle repository service.</description>
+ <scope>required</scope>
+ <hashes>
+ <hash alg="MD5">46a70af6c63035d0ca9e65e926ce8301</hash>
+ <hash alg="SHA-1">83e4b7fda360d32a44cb2e17d159ddf40c334f96</hash>
+ <hash alg="SHA-256">6759ca9b14032623096706be4cf8a85cc1345be4c3c08d95b745b9ad672c7599</hash>
+ <hash alg="SHA-512">0ea9214b7c96356b791add7a85e6d85a1725c0cedf57b23781fcd2c76f7e4946d99ad7070665bf46f7d85a4e634683d73e57b9112040d056cdfec46d519504e6</hash>
+ <hash alg="SHA-384">5d98f47bc27c1857cf7e177b06b13b2cc75c0273a8220490537f2e86d1fbc5047809a7dbafcb30bd091ed332185f7ddb</hash>
+ <hash alg="SHA3-384">bc8e615f431197ffcaf574c9ddfbbffea066629ae5d7d3cb5a11210bf3212bf551f598ac416f2c1fbc7a70134cded7df</hash>
+ <hash alg="SHA3-256">08e577c6fd2348fae467988f7f94d6c9e6f43394731e939ad45ade3e5057eef4</hash>
+ <hash alg="SHA3-512">7a6d34a280ab2d8ff2690c719e7801a0facf75d9fab8551b6a8a4496644e6c26699430cd89c9eccb509ed2f06cf6f8f3a1ad5334dabed340e464dc3a7e2518e7</hash>
+ </hashes>
+ <licenses>
+ <license>
+ <id>Apache-2.0</id>
+ </license>
+ </licenses>
+ <purl>pkg:maven/org.apache.felix/org.apache.felix.bundlerepository@1.6.6?type=jar</purl>
+ <externalReferences><reference type="website"><url>http://felix.apache.org/org.apache.felix.bundlerepository/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/FELIX</url></reference><reference type="mailing-list"><url>http://www.mail-archive.com/dev%40felix.apache.org/</url></reference><reference type="vcs"><url>http://svn.apache.org/repos/asf/felix/releases/org.apache.felix.bundlerepository-1.6.6</url></reference></externalReferences>
+ </component>
+ <component type="library" bom-ref="pkg:maven/org.easymock/easymock@2.4?type=jar">
+ <group>org.easymock</group>
+ <name>easymock</name>
+ <version>2.4</version>
+ <description>EasyMock provides an easy way to create Mock Objects for interfaces by generating them on the fly using Java's proxy mechanism</description>
+ <scope>required</scope>
+ <hashes>
+ <hash alg="MD5">8a53a7ae6e64acaf0747be3c3da394b0</hash>
+ <hash alg="SHA-1">a1703c7b69a0590e25dad65ff8d14d7e465b019d</hash>
+ <hash alg="SHA-256">7c48d8ba6e070409f65a45afc4904824b7702598ab0bec273cdd0ce6f4c2c64f</hash>
+ <hash alg="SHA-512">ef6453849ea6ad7f4db1107daebf894fbf3c0ae653d38b839c5ce4036439cd040f93513f1070022bb5290d40fc957d9e463405c8c6105c8cf715f538ee45731e</hash>
+ <hash alg="SHA-384">230c40d0384b16bc936d118b780c00a1de1f3cc74c525ccf4f0446f69cfd8eb217644411e1959d566fc1f743d7b55f5f</hash>
+ <hash alg="SHA3-384">a21df0cce13fc8a08cc5614748ec1119be9f45e5540d61cfea0ca0a176672568c1a820483f557eadb4d7d1e83b7bd55e</hash>
+ <hash alg="SHA3-256">d7ec5cf2d9f57d34aba8311e91782c8a091d7a5c988097c95b336c1ebf0755a0</hash>
+ <hash alg="SHA3-512">acd284798ef89365ad0798bb5a94d4a163c631104ffe47c03c50bc971ab77ecb9716ce55996a8a941c2b5b0fd013a7c1f9ebed8b34fded393c2314c5fbd944c3</hash>
+ </hashes>
+ <licenses>
+ <license>
+ <id>MIT</id>
+ <url>https://opensource.org/licenses/MIT</url>
+ </license>
+ </licenses>
+ <purl>pkg:maven/org.easymock/easymock@2.4?type=jar</purl>
+ <externalReferences><reference type="website"><url>http://www.easymock.org</url></reference><reference type="distribution"><url>scpexe://shell.sf.net/home/groups/e/ea/easymock/htdocs/maven/repository</url></reference><reference type="issue-tracker"><url>http://sourceforge.net/tracker/?group_id=82958</url></reference><reference type="mailing-list"><url>http://tech.groups.yahoo.com/group/easymock/</url></reference><reference type="vcs"><url>http://easymock.cvs.sourceforge.net/easymock/</url></reference></externalReferences>
+ </component>
+ <component type="library" bom-ref="pkg:maven/org.apache.felix/org.apache.felix.utils@1.6.0?type=jar">
+ <publisher>The Apache Software Foundation</publisher>
+ <group>org.apache.felix</group>
+ <name>org.apache.felix.utils</name>
+ <version>1.6.0</version>
+ <description>Utility classes for OSGi.</description>
+ <scope>required</scope>
+ <hashes>
+ <hash alg="MD5">80a3a9f5566dbd75d40de2333c1433a7</hash>
+ <hash alg="SHA-1">02e894f57eb21c8eb788a2e7425dc187ee005f9f</hash>
+ <hash alg="SHA-256">03dc4ee75332284f4ba4b187c8c946c07f0c822b09e02f8821d85c8d8f46ccfa</hash>
+ <hash alg="SHA-512">fdf4bd9b932edda158f1cf98a344f6a4163ea70a3206d2d205828d575bfb4fdb5102d923981c8e33e7c4d75568df353e66c3ce73adb461dc0a34583e22cf585e</hash>
+ <hash alg="SHA-384">426e04ec63d8801158c63437f2e3822b71e7615324e6398fc97832d094e448f0fe44520fb5254e0e403631281e72f4e1</hash>
+ <hash alg="SHA3-384">b1adf40353eb6bf3e3c8fa44cd0d56530d3ef3fba4a74f1c97160ef6a90d816ba74f49fc5a97e3b5749e60017df846d1</hash>
+ <hash alg="SHA3-256">d91802227cdc7da9ec7385099d0be80a83508e3deca3b621e7c9c43e714b8569</hash>
+ <hash alg="SHA3-512">747a03566682d1e1ffad1f19bbcd159e66fdb41a75244b4b656d882b73e1a1fc8a5daf93c1ebd1c2ba658a336abe50796b90593233eab485ab164dfa338ecfd7</hash>
+ </hashes>
+ <licenses>
+ <license>
+ <id>Apache-2.0</id>
+ </license>
+ </licenses>
+ <purl>pkg:maven/org.apache.felix/org.apache.felix.utils@1.6.0?type=jar</purl>
+ <externalReferences><reference type="website"><url>http://felix.apache.org/org.apache.felix.utils/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/FELIX</url></reference><reference type="mailing-list"><url>http://www.mail-archive.com/dev%40felix.apache.org/</url></reference><reference type="vcs"><url>scm:svn:https://svn.apache.org/repos/asf/felix/releases/org.apache.felix.utils-1.6.0</url></reference></externalReferences>
+ </component>
+ <component type="library" bom-ref="pkg:maven/org.osgi/org.osgi.compendium@4.2.0?type=jar">
+ <group>org.osgi</group>
+ <name>org.osgi.compendium</name>
+ <version>4.2.0</version>
+ <description>POM was created by Sonatype Nexus</description>
+ <scope>required</scope>
+ <hashes>
+ <hash alg="MD5">f36fc59a603aa068e0e6c3d18ac379f3</hash>
+ <hash alg="SHA-1">1e506145ec53132bce79ce8798d98026b598fd48</hash>
+ <hash alg="SHA-256">c1310c4186ccc17a0d7089d83f96dc940c4eccb98d5edfd58819393c29c31655</hash>
+ <hash alg="SHA-512">5e83fb9970dcaad908d9d11fc1f444f42ee43644db0c52f6a975dd9dbac6c8868014c6a4a2cd411bdb56600f1839dbba223c096df5a7ce74569923995d764e76</hash>
+ <hash alg="SHA-384">cfe944023d9273349fb47116d5eff6d489a1bc389d850ef8c6a82463b5934d80a96de91d6efb9987cc20642dae748cab</hash>
+ <hash alg="SHA3-384">6f3efdf40a1ec3a6967e94072fddd5e6424703c7911f0736db2adeda01dd6b3c30ae62e4c15b658128f496242af9f398</hash>
+ <hash alg="SHA3-256">ab7b3446e4f7fa1c755a4c3fc85d7777da7ea5aeb4251c82c21d6feeb75d2920</hash>
+ <hash alg="SHA3-512">452e4c1249554209d60d15dcae352fe1e38359a1410c374ad9769b96b43d9eaa20dfd2c974c59ec72c005c7c386b0a1c78fd48344c4b5a6844d778b0131aaf06</hash>
+ </hashes>
+ <licenses/>
+ <purl>pkg:maven/org.osgi/org.osgi.compendium@4.2.0?type=jar</purl>
+ </component>
+ <component type="library" bom-ref="pkg:maven/org.apache.maven.reporting/maven-reporting-api@3.0?type=jar">
+ <publisher>The Apache Software Foundation</publisher>
+ <group>org.apache.maven.reporting</group>
+ <name>maven-reporting-api</name>
+ <version>3.0</version>
+ <description>API to manage report generation.</description>
+ <scope>required</scope>
+ <hashes>
+ <hash alg="MD5">48cd00abc388c5156879b335e869adab</hash>
+ <hash alg="SHA-1">b2541dd07d08cd5eff9bd4554a2ad6a4198e2dfe</hash>
+ <hash alg="SHA-256">498949e5576b022559d1622e534c18e052f94dec883924b67e0a4e8676c07b17</hash>
+ <hash alg="SHA-512">439b65a7c9f2189b7e268ee1c91d1699f18d3594957bd0176d03e5796319f883647bcd37ff02385d3b34138289291837a7ebc8317d095ac86d9585c0c8fd228d</hash>
+ <hash alg="SHA-384">519935bc8e0fbeca6797779e3cbf14bd2e0d946194b02db156f49587fd21e423e264f6f2bfd6afa970e8defd2a71d2dd</hash>
+ <hash alg="SHA3-384">8b73656ca60392b59c9c9e98c54e847f007bacf2ce26a401f4b6d48a50a46187181d34487ce49ac28de9d4a676bab5cc</hash>
+ <hash alg="SHA3-256">4b1b3ce6325746d7b729b7e4d4d5bf5375b6bcc537d28163fbf5b84e4fb2e743</hash>
+ <hash alg="SHA3-512">96d442a697d8561b91c76422a4c027c5e6d289f4458eeba1a67dc2572dcbe56f73f52b5fd8b645ce34f01d5718379dcc993c22b290a0b096c4e5ea50e28b5b5d</hash>
+ </hashes>
+ <licenses>
+ <license>
+ <id>Apache-2.0</id>
+ </license>
+ </licenses>
+ <purl>pkg:maven/org.apache.maven.reporting/maven-reporting-api@3.0?type=jar</purl>
+ <externalReferences><reference type="website"><url>http://maven.apache.org/shared/maven-reporting-api/</url></reference><reference type="build-system"><url>http://grid.sonatype.org/ci</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://jira.codehaus.org/browse/MSHARED/component/14413</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/maven-users</url></reference><reference type="vcs"><url>http://svn.apache.org/viewvc/maven/shared/tags/maven-reporting-api-3.0</url></reference></externalReferences>
+ </component>
+ <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-archiver@3.5.2?type=jar">
+ <publisher>The Apache Software Foundation</publisher>
+ <group>org.apache.maven</group>
+ <name>maven-archiver</name>
+ <version>3.5.2</version>
+ <description>Provides utility methods for creating JARs and other archive files from a Maven project.</description>
+ <scope>required</scope>
+ <hashes>
+ <hash alg="MD5">880127ba320c005e0bd7db2f71390463</hash>
+ <hash alg="SHA-1">85d6e016fe2cee7f2fbc3294f68780c3bf59d443</hash>
+ <hash alg="SHA-256">8d0a075ba6662041287b6807a8ea14b66b5e1b7da7db96ea322849672c536ca2</hash>
+ <hash alg="SHA-512">a0c029170810106cfe46fbb53992399e765413617db54cac8d348a506a20ce9927c6100d49445eb4c39d513fea6f5a79bb530b27094015052b6f29f250903317</hash>
+ <hash alg="SHA-384">4b15a6e96293c5797c5cb480e3d4a8bd1a1dd3fc9d3b0963c5aaf0db522ad17173d28c769b6c428371365a445887b969</hash>
+ <hash alg="SHA3-384">e420eada8d4c23f935e77c2ef40d4b27aeeb52ac9f2cb5572550c9c3f82c882d8b2b96a21a31536b4feae4fb87131cc9</hash>
+ <hash alg="SHA3-256">cec26fc4768d8bac9e5824b26383a0cc7d098e2dacded659e58eebe428dfc22e</hash>
+ <hash alg="SHA3-512">a444169fac55d2dc20e5b40d2d7ef6b52ead0722e74c747db37076699705e581c39f55a8149115ba0220fea9fb5faa6038435fb6bd80292586234dbb4f66c180</hash>
+ </hashes>
+ <licenses>
+ <license>
+ <id>Apache-2.0</id>
+ </license>
+ </licenses>
+ <purl>pkg:maven/org.apache.maven/maven-archiver@3.5.2?type=jar</purl>
+ <externalReferences><reference type="website"><url>https://maven.apache.org/shared/maven-archiver/</url></reference><reference type="build-system"><url>https://ci-builds.apache.org/job/Maven/job/maven-box/job/maven-archiver/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/issues/?jql=project%3DMSHARED+AND+component%3Dmaven-archiver</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?users@maven.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/maven-archiver/tree/maven-archiver-3.5.2</url></reference></externalReferences>
+ </component>
+ <component type="library" bom-ref="pkg:maven/org.apache.maven.shared/maven-shared-utils@3.3.3?type=jar">
+ <publisher>The Apache Software Foundation</publisher>
+ <group>org.apache.maven.shared</group>
+ <name>maven-shared-utils</name>
+ <version>3.3.3</version>
+ <description>Shared utilities for use by Maven core and plugins</description>
+ <scope>required</scope>
+ <hashes>
+ <hash alg="MD5">d894ecaa696341ba8fcfbe65ac330c05</hash>
+ <hash alg="SHA-1">89bb03ff6e66394a9c952357784858ad692aa2e4</hash>
+ <hash alg="SHA-256">44a60c610f4e31524b03d81a698b1ecceba116320ea510babf859575b2ea7233</hash>
+ <hash alg="SHA-512">d85102ebe4a2a1d98ddb8231cd8e837eeea9cf5d9ce18d8fd8292347ebf4fa6ada9e97c1001a0af65884687a2a27fa12fa3593477de87b0372e4fba51ccbd9ba</hash>
+ <hash alg="SHA-384">e4a821ad9ae6902fb70a0e935da5c98e3c772c0c7ad408129b143ead73e73b06782cc1156756c452b717b7afbd0c3754</hash>
+ <hash alg="SHA3-384">3d39ddd99481899cd9e82a7511b94ceb3a86e05492039b1668d9e287df244c62201f2ca86d7bb5bf2ae8ef8b0cf6e411</hash>
+ <hash alg="SHA3-256">ab611761f9978d941a33f2ac209d3a6929757ab0827fec42372da0e1fb291314</hash>
+ <hash alg="SHA3-512">ee05e95d3a45d86538232a4124bb273223e984f22e188a9bc5bfac882133cdad9bb109d216354b844549e16a19eada9aca5a13e12ca78fc5b57a93c090181ef2</hash>
+ </hashes>
+ <licenses>
+ <license>
+ <id>Apache-2.0</id>
+ </license>
+ </licenses>
+ <purl>pkg:maven/org.apache.maven.shared/maven-shared-utils@3.3.3?type=jar</purl>
+ <externalReferences><reference type="website"><url>https://maven.apache.org/shared/maven-shared-utils/</url></reference><reference type="build-system"><url>https://builds.apache.org/job/maven-box/job/maven-shared-utils/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/issues/?jql=project%20%3D%20MSHARED%20AND%20component%20%3D%20maven-shared-utils</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?users@maven.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/maven-shared-utils/tree/maven-shared-utils-3.3.3</url></reference></externalReferences>
+ </component>
+ <component type="library" bom-ref="pkg:maven/commons-io/commons-io@2.6?type=jar">
+ <publisher>The Apache Software Foundation</publisher>
+ <group>commons-io</group>
+ <name>commons-io</name>
+ <version>2.6</version>
+ <description>The Apache Commons IO library contains utility classes, stream implementations, file filters,
+file comparators, endian transformation classes, and much more.</description>
+ <scope>required</scope>
+ <hashes>
+ <hash alg="MD5">467c2a1f64319c99b5faf03fc78572af</hash>
+ <hash alg="SHA-1">815893df5f31da2ece4040fe0a12fd44b577afaf</hash>
+ <hash alg="SHA-256">f877d304660ac2a142f3865badfc971dec7ed73c747c7f8d5d2f5139ca736513</hash>
+ <hash alg="SHA-512">4de22e2a50711f756a5542474395d8619dca0a8be0407b722605005a1167f8c306bc5eef7f0b8252f5508c817c1ceb759171e4e18d4eb9697dfdd809ac39673f</hash>
+ <hash alg="SHA-384">1efcb8c663fff4cf7f2bc86e1a367b5f88819a6a2f80341fd5d41ad82eb0adda9f34a05c20115f461bee64d1ab487e3c</hash>
+ <hash alg="SHA3-384">47f8067345da2e60493ced8f5852b5a9ee5fd1ee141c03177f132f97fa4beccd3c3f649276cbcb06a3fa2d0b39e20369</hash>
+ <hash alg="SHA3-256">12e088d6b2f63a97e29d4cf1a81dbe311a0110e784677698a2eaa0b63785dc6e</hash>
+ <hash alg="SHA3-512">82e8aa5fb7b8801b94c83f912dc863ff1b569a281081d33ca7e512a694202aebb60101b54bc9ba0a3b6a769221667a3d222b67102377d554603678798ca22d07</hash>
+ </hashes>
+ <licenses>
+ <license>
+ <id>Apache-2.0</id>
+ </license>
+ </licenses>
+ <purl>pkg:maven/commons-io/commons-io@2.6?type=jar</purl>
+ <externalReferences><reference type="website"><url>http://commons.apache.org/proper/commons-io/</url></reference><reference type="build-system"><url>https://builds.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/IO</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://git-wip-us.apache.org/repos/asf?p=commons-io.git</url></reference></externalReferences>
+ </component>
+ <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-compress@1.20?type=jar">
+ <publisher>The Apache Software Foundation</publisher>
+ <group>org.apache.commons</group>
+ <name>commons-compress</name>
+ <version>1.20</version>
+ <description>Apache Commons Compress software defines an API for working with
+compression and archive formats. These include: bzip2, gzip, pack200,
+lzma, xz, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4,
+Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj.</description>
+ <scope>required</scope>
+ <hashes>
+ <hash alg="MD5">3f7237fb56029591b5bdd2698c196220</hash>
+ <hash alg="SHA-1">b8df472b31e1f17c232d2ad78ceb1c84e00c641b</hash>
+ <hash alg="SHA-256">0aeb625c948c697ea7b205156e112363b59ed5e2551212cd4e460bdb72c7c06e</hash>
+ <hash alg="SHA-512">5d3ce7ae4518c0fe5094b512c5c4825cc213ebc388e1e1e7692475406d5876c893140e5bbaaecb1676262a6b73c7250d40b83653cd03600815693474f92f0fa7</hash>
+ <hash alg="SHA-384">934fcbb21929aadb952c0c48b6d1bb89b34b0279d48546896f81b26759edba0e1cbc45dc821f55d6239c34160b507ade</hash>
+ <hash alg="SHA3-384">b59c53dc435ace657070665a1f41d64ca4ce61b21cbc4405879e559b56eb5cf1869debd4ab7b77f202af621142fad77f</hash>
+ <hash alg="SHA3-256">f11ea223d764cb87944f5f5686dbdb3bd140153f6ad146f0ab8666c6157b3e00</hash>
+ <hash alg="SHA3-512">0b1fa80da6f334a0a75ae4164581d2d69c4126f25b91d122d25cf3ee2d217fd399b04dde36f8e9de0faa20dc1804c38ca33b31aa28bf7bd6524332b3d0ac659d</hash>
+ </hashes>
+ <licenses>
+ <license>
+ <id>Apache-2.0</id>
+ </license>
+ </licenses>
+ <purl>pkg:maven/org.apache.commons/commons-compress@1.20?type=jar</purl>
+ <externalReferences><reference type="website"><url>https://commons.apache.org/proper/commons-compress/</url></reference><reference type="build-system"><url>https://builds.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/COMPRESS</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-compress.git</url></reference></externalReferences>
+ </component>
+ <component type="library" bom-ref="pkg:maven/org.codehaus.plexus/plexus-archiver@4.2.7?type=jar">
+ <publisher>Codehaus Plexus</publisher>
+ <group>org.codehaus.plexus</group>
+ <name>plexus-archiver</name>
+ <version>4.2.7</version>
+ <description>The Plexus project provides a full software stack for creating and executing software projects.</description>
+ <scope>required</scope>
+ <hashes>
+ <hash alg="MD5">0b7d267876216af63af4b52fc46d2519</hash>
+ <hash alg="SHA-1">ea77e871447d62c8759404e84989845d0168ddd6</hash>
+ <hash alg="SHA-256">5e0c49de4c56a25aa242e2de2b5fea1c0368826c2a8ab73764a0c91d3631633b</hash>
+ <hash alg="SHA-512">51bbba2c6609eaaf73b2db60e2a993d4e5a1f5ca6a53f16e70266682a36d5810789187145152db5eb34ebfccbac791eeb1988f3067fb1490a8fffce74fc449d4</hash>
+ <hash alg="SHA-384">ed2002e7d870bdd1cae66741012ea058c3721a4868859a674072210a4e9d605f9c980e3304cc1d8dacef397fce4cdecb</hash>
+ <hash alg="SHA3-384">49edf199160096d81096f2ecc777e0be819cad3f9aed4be21c63941ea51415a8c4488a08ec15baeeb83e01cc623d16b5</hash>
+ <hash alg="SHA3-256">61f1fb72c44e9ef283cc1e90126e233b37a172f893e1b5707ef5f1fc94be8e76</hash>
+ <hash alg="SHA3-512">8ed23475b09590a8950e1be201030331446a4adb3dc3ad2a45f85f7fa43a2d98baa6f62a6423a9f723184331be6ec5b6fd7c5207387cfbeafbab9004a150d4be</hash>
+ </hashes>
+ <licenses>
+ <license>
+ <id>Apache-2.0</id>
+ </license>
+ </licenses>
+ <purl>pkg:maven/org.codehaus.plexus/plexus-archiver@4.2.7?type=jar</purl>
+ <externalReferences><reference type="website"><url>https://codehaus-plexus.github.io/plexus-archiver/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/codehaus-plexus/plexus-archiver/issues</url></reference><reference type="mailing-list"><url>http://archive.plexus.codehaus.org/user</url></reference><reference type="vcs"><url>http://github.com/codehaus-plexus/plexus-archiver/tree/plexus-archiver-4.2.7/</url></reference></externalReferences>
+ </component>
+ <component type="library" bom-ref="pkg:maven/org.codehaus.plexus/plexus-io@3.2.0?type=jar">
+ <publisher>Codehaus Plexus</publisher>
+ <group>org.codehaus.plexus</group>
+ <name>plexus-io</name>
+ <version>3.2.0</version>
+ <description>The Plexus project provides a full software stack for creating and executing software projects.</description>
+ <scope>required</scope>
+ <hashes>
+ <hash alg="MD5">10e377cecbafa25cd80de1207be4b685</hash>
+ <hash alg="SHA-1">0f7d52906fe1b21b06fa046a98d6c15c4e595c5e</hash>
+ <hash alg="SHA-256">15cf8cbd9e014b7156482bbb48e515613158bdd9b4b908d21e6b900f7876f6ff</hash>
+ <hash alg="SHA-512">6edb562a75b779b25d65264ae26a1c04ecccf08d6a14708cec67a64e0141d321020983c1103a4f892107c838de2149db7039446641174a786f2153e680613492</hash>
+ <hash alg="SHA-384">20f574cd47ee2b41302317adc21935e4a06c179beb4653ca65c10c2e49b3071c60132c01226984a61e4aa7a59591a496</hash>
+ <hash alg="SHA3-384">cd5afdb48f16ea48bf38691b2ad6c8e68e1fd44f818828cc902e40b7683d7ec13c483b18a0a83767e6dc5ec7ba249eea</hash>
+ <hash alg="SHA3-256">5a922b50da424007987fa34abc116d6d39d9eba1d4a63af553297383f5766105</hash>
+ <hash alg="SHA3-512">fd2f29e6a6987687a5c9b7aeb851e32c1ae88126d79f244fa881028beb3bc8673ad1ad9c57d79abbdebff4affd3ff6c57c3bfb8475010c829fefcc0c53155bb2</hash>
+ </hashes>
+ <licenses>
+ <license>
+ <id>Apache-2.0</id>
+ </license>
+ </licenses>
+ <purl>pkg:maven/org.codehaus.plexus/plexus-io@3.2.0?type=jar</purl>
+ <externalReferences><reference type="website"><url>http://codehaus-plexus.github.io/plexus-io/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/codehaus-plexus/plexus-io/issues</url></reference><reference type="mailing-list"><url>http://archive.plexus.codehaus.org/user</url></reference><reference type="vcs"><url>http://github.com/codehaus-plexus/plexus-io</url></reference></externalReferences>
+ </component>
+ <component type="library" bom-ref="pkg:maven/org.iq80.snappy/snappy@0.4?type=jar">
+ <group>org.iq80.snappy</group>
+ <name>snappy</name>
+ <version>0.4</version>
+ <description>Port of Snappy to Java</description>
+ <scope>required</scope>
+ <hashes>
+ <hash alg="MD5">f0792d1dbe7f90d8b34c7c19961e0073</hash>
+ <hash alg="SHA-1">a42b2d92a89efd35bb14738000dabcac6bd07a8d</hash>
+ <hash alg="SHA-256">46a0c87d504ce9d6063e1ff6e4d20738feb49d8abf85b5071a7d18df4f11bac9</hash>
+ <hash alg="SHA-512">dfd2559bf0388c6f1987d1393497a423203b2a72febbe648b3429e4d07b47a504797228e6e4e39a94c6800c5d3df8d3792863a3b841e6e8f65cfdcda91b6f0ab</hash>
+ <hash alg="SHA-384">7b5feeb0f1ee3fd3f5cd17c5ea31a75cdd060e7beaa1773474727711c308d2cf5b900b5717965afe8c14912e33c41538</hash>
+ <hash alg="SHA3-384">d96d486687e858c1ebe1fadbd731d33e0233922eee703f1a4e36e68fa1dcc527cdcc4fae8fc91894ebeada2a1214606e</hash>
+ <hash alg="SHA3-256">cf1b329b3f46891dc9e86fe9c6350a023dc0cb411739d2fd9d35490dfa8397aa</hash>
+ <hash alg="SHA3-512">3a8584d15b63d4c371fed5b615f7a121fe2530d35d234b2caa499c53e7c558376ed22d289828276fbc77cd7c1311ba4d6c1af03edf08c5f051d5b674f01e6120</hash>
+ </hashes>
+ <licenses>
+ <license>
+ <id>Apache-2.0</id>
+ <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+ </license>
+ </licenses>
+ <purl>pkg:maven/org.iq80.snappy/snappy@0.4?type=jar</purl>
+ <externalReferences><reference type="website"><url>http://github.com/dain/snappy</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>http://github.com/dain/snapy/tree/master</url></reference></externalReferences>
+ </component>
+ <component type="library" bom-ref="pkg:maven/org.tukaani/xz@1.9?type=jar">
+ <group>org.tukaani</group>
+ <name>xz</name>
+ <version>1.9</version>
+ <description>XZ data compression</description>
+ <scope>required</scope>
+ <hashes>
+ <hash alg="MD5">57c2fbfeb55e307ccae52e5322082e02</hash>
+ <hash alg="SHA-1">1ea4bec1a921180164852c65006d928617bd2caf</hash>
+ <hash alg="SHA-256">211b306cfc44f8f96df3a0a3ddaf75ba8c5289eed77d60d72f889bb855f535e5</hash>
+ <hash alg="SHA-512">a4362db234d4e83683e90f5baf90c82107450cc4404acab96e3fab14b8a3d4588a19722171d32f27d18463682a6994cad9af0b1065c954e3a77ea7bdcf586bac</hash>
+ <hash alg="SHA-384">aa30349b094723369908369a18e2cb5beb5b7ca0b24b4d56c2f5725fae152220f6526466672b22bfec939e2e0622a01d</hash>
+ <hash alg="SHA3-384">b3e1fee7784188df5e1931c9e8137ac0e20e63f66f93e7f938a448fc0b3adb4be5205c7a5f1835007e233fee2696fc2c</hash>
+ <hash alg="SHA3-256">92eff603ed0aab557e1a45e17a74e80d8ec656b5f137197b23c429c903fa448f</hash>
+ <hash alg="SHA3-512">b290f92958f8cd91705331d8411140c23957ab8b568fbe19a70f4f1dc97eddc13d3a200df28a02ab5911ce18f546c33f720878be0f727edac839a6e63ee66ece</hash>
+ </hashes>
+ <licenses>
+ <license>
+ <name>Public Domain</name>
+ </license>
+ </licenses>
+ <purl>pkg:maven/org.tukaani/xz@1.9?type=jar</purl>
+ <externalReferences><reference type="website"><url>https://tukaani.org/xz/java.html</url></reference><reference type="vcs"><url>https://git.tukaani.org/?p=xz-java.git</url></reference></externalReferences>
+ </component>
+ <component type="library" bom-ref="pkg:maven/org.apache.maven.shared/maven-dependency-tree@3.0?type=jar">
+ <publisher>The Apache Software Foundation</publisher>
+ <group>org.apache.maven.shared</group>
+ <name>maven-dependency-tree</name>
+ <version>3.0</version>
+ <description>A tree-based API for resolution of Maven project dependencies</description>
+ <scope>required</scope>
+ <hashes>
+ <hash alg="MD5">883c1d8377be21c7d8e50bab96d395fa</hash>
+ <hash alg="SHA-1">9f47f3033ba0f65298aaa54f81fac9e8aab785f4</hash>
+ <hash alg="SHA-256">53150e9b638a45958a8d0c6821502f4b932dfe305ce49732affc808d5c5ab2f0</hash>
+ <hash alg="SHA-512">ca7a7a1f62c731b20edfffe5dab120ffa5fb3a79d4d7f850985f38c922a7c48da348d8434d1fe2affe693e0814380cc059e0453ee87dda91a08db18b017e2678</hash>
+ <hash alg="SHA-384">e04e6ea27909a20cbf91cda590c7e683686382bd6bdffa4f65792433c6764c9258ff8f3686e535af6fe6c062d41e36d0</hash>
+ <hash alg="SHA3-384">eb15d95487b21c1a6eaa391ab0aa7ec3cc7e39e772a011f39951d4e022123fb9d9fb8aef0f57709c63a447af5d01dbc8</hash>
+ <hash alg="SHA3-256">3a90306b5ba694929bebfe2c1aff1a5a2041668155daa5e695235d927c1c237a</hash>
+ <hash alg="SHA3-512">17270948112d0f99e46503409634fb0dc4218dab3abea4f51259ded6eb2b8e49091ae6ee8f651f6467351a883dbf3566aa79cb0dd00afa8bdc2450f253c146a9</hash>
+ </hashes>
+ <licenses>
+ <license>
+ <id>Apache-2.0</id>
+ </license>
+ </licenses>
+ <purl>pkg:maven/org.apache.maven.shared/maven-dependency-tree@3.0?type=jar</purl>
+ <externalReferences><reference type="website"><url>http://maven.apache.org/shared/maven-dependency-tree/</url></reference><reference type="build-system"><url>https://builds.apache.org/job/maven-shared/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/MSHARED/component/12326427</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/maven-users</url></reference><reference type="vcs"><url>http://svn.apache.org/viewvc/maven/shared/tags/maven-dependency-tree-3.0</url></reference></externalReferences>
+ </component>
+ <component type="library" bom-ref="pkg:maven/org.codehaus.plexus/plexus-utils@3.3.0?type=jar">
+ <publisher>Codehaus Plexus</publisher>
+ <group>org.codehaus.plexus</group>
+ <name>plexus-utils</name>
+ <version>3.3.0</version>
+ <description>A collection of various utility classes to ease working with strings, files, command lines, XML and
+ more.</description>
+ <scope>required</scope>
+ <hashes>
+ <hash alg="MD5">3ae76ff0195ada460d495efe1fb50d17</hash>
+ <hash alg="SHA-1">cf43b5391de623b36fe066a21127baef82c64022</hash>
+ <hash alg="SHA-256">76d174792540e2775af94d03d10fb2d3c776e2cd0ac0ebf427d3e570072bb9ce</hash>
+ <hash alg="SHA-512">a93038005cd9793476c913beaea7c8c170d1853dddf39bf6794ad6446165eaf538c2c3c2314baa9d919d6b0bda78e5ea3cd987d5dbacf8e3b98e315bcfa7db64</hash>
+ <hash alg="SHA-384">27742e2c82c13ffe947c6ce8750b1989491e8a5d7554cc3fa240a952c9d3a22fe006516041c66650e71972275c06565e</hash>
+ <hash alg="SHA3-384">16af5ee2b4f8710fa14bbd977ef3630466c51c4ed6bf9886ac0ea9c74bd23dedbbce60beae5217fab686777108c2e54d</hash>
+ <hash alg="SHA3-256">364bfb131dab58736c995ac4484d9eab53b1e62129a99ed55e9c12ed39079dc6</hash>
+ <hash alg="SHA3-512">4687c5ca8bb73d6880132d7d886733d0a5ce7a873c7b5b68d9d46066ee7e1f6c11f0510a70f313ca2563550bfcf6e81cf37a0c4ceef247bab55d6aadc49fae59</hash>
+ </hashes>
+ <licenses>
+ <license>
+ <id>Apache-2.0</id>
+ </license>
+ </licenses>
+ <purl>pkg:maven/org.codehaus.plexus/plexus-utils@3.3.0?type=jar</purl>
+ <externalReferences><reference type="website"><url>http://codehaus-plexus.github.io/plexus-utils/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>http://github.com/codehaus-plexus/plexus-utils/issues</url></reference><reference type="mailing-list"><url>http://archive.plexus.codehaus.org/user</url></reference><reference type="vcs"><url>http://github.com/codehaus-plexus/plexus-utils</url></reference></externalReferences>
+ </component>
+ <component type="library" bom-ref="pkg:maven/org.sonatype.plexus/plexus-build-api@0.0.7?type=jar">
+ <group>org.sonatype.plexus</group>
+ <name>plexus-build-api</name>
+ <version>0.0.7</version>
+ <scope>required</scope>
+ <hashes>
+ <hash alg="MD5">49f0f8c6bdf2687e358870a4fc1559c6</hash>
+ <hash alg="SHA-1">e6ba5cd4bfd8de00235af936e7f63eb24ed436e6</hash>
+ <hash alg="SHA-256">934171640fbd3d2495c50b79b0d9adb11e2c83e65bad157df8fe34bcac0ff798</hash>
+ <hash alg="SHA-512">e073d367ce5edaf6dfcbf6d1ec9f544082d4536aec8a84b060d24625c0d8ff1facf90529843f9bf4383ef43aa5cd3d0e143f473dffa6da7fd910f1d2e3872ec7</hash>
+ <hash alg="SHA-384">2e6c177e34d0bb3fd05ea8f635f01a6b01afd28113f214392cae8f6bdc73715ee1dbfa4d1525f42321f8a8dd05db9191</hash>
+ <hash alg="SHA3-384">fe41dea9191319334edb863c438ffe78b19c5f2669a653058d7d4fe5527d7e66a7f382f806ff12fcb09c3f468542e870</hash>
+ <hash alg="SHA3-256">530e25ed3a34ee1d1aacda1a935608e70ef6494bb931fee33eb7366df2d85642</hash>
+ <hash alg="SHA3-512">9f1b45445d930a9833436b57baeda25522f0151be0b2f2a27ef1c1dcc8f6ccc5f1168fe40ea91f1e3ac1d98308b3dd1da3c7b49a90cb75eb6a924534545435a5</hash>
+ </hashes>
+ <licenses>
+ <license>
+ <id>Apache-2.0</id>
+ </license>
+ </licenses>
+ <purl>pkg:maven/org.sonatype.plexus/plexus-build-api@0.0.7?type=jar</purl>
+ <externalReferences><reference type="website"><url>http://forge.sonatype.com/spice-parent/plexus-build-api/</url></reference><reference type="build-system"><url>https://grid.sonatype.org/ci/view/Spice/</url></reference><reference type="distribution"><url>http://repository.sonatype.org:8081/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.sonatype.org/browse/SPICE</url></reference><reference type="vcs"><url>http://svn.sonatype.org/spice/tags/plexus-build-api-0.0.7</url></reference></externalReferences>
+ </component>
+ <component type="library" bom-ref="pkg:maven/org.apache.maven.doxia/doxia-sink-api@1.0?type=jar">
+ <publisher>The Apache Software Foundation</publisher>
+ <group>org.apache.maven.doxia</group>
+ <name>doxia-sink-api</name>
+ <version>1.0</version>
+ <description>Doxia Sink API.</description>
+ <scope>required</scope>
+ <hashes>
+ <hash alg="MD5">04067d1b5c9ac4447fd376632b13fba0</hash>
+ <hash alg="SHA-1">13f502f2fb1d4e2db6f19352c85b83277084bb98</hash>
+ <hash alg="SHA-256">1cd68e9b4cf427a2b6b9a943a9bef6da879d25702334ea5addb0d153bb8f8911</hash>
+ <hash alg="SHA-512">12f5b3e0754daff8a741890e5a25c09e7c7875568ba3976dba9ae278452fbb052478d6c330fa0027dc0d26d2fe8f8e844721e713ff69a638c689546a4086a1bd</hash>
+ <hash alg="SHA-384">947d186c77e25487aed0bd2a5961fd2ffba21efb6ea667e0bfe7043aed860e559c8a47aab0f03a0de9e910cc0b7145b8</hash>
+ <hash alg="SHA3-384">949a71eee2eb1043453a7aba6b727a6654f6c003fcc4b3c202bcffcac48f1ef2de3af1c90601ef77892ecaef3d2a21dd</hash>
+ <hash alg="SHA3-256">fdf34b22419ee3c40db72d2f0709e3ef08ea1d2046fa528de6979a6f6407cb07</hash>
+ <hash alg="SHA3-512">aca622811cfb896b3335760876e0cc6a6661f12aba15c80ba190d6102046d27c7d3ef687872223d0fe0d422c06d039b69141cc6b9fb45db36d1ecb37340e4f30</hash>
+ </hashes>
+ <licenses>
+ <license>
+ <id>Apache-2.0</id>
+ </license>
+ </licenses>
+ <purl>pkg:maven/org.apache.maven.doxia/doxia-sink-api@1.0?type=jar</purl>
+ <externalReferences><reference type="website"><url>http://maven.apache.org/doxia/doxia/doxia-sink-api</url></reference><reference type="build-system"><url>http://ci.sonatype.org</url></reference><reference type="distribution"><url>scp://people.apache.org/www/people.apache.org/builds/maven/1.0/staging-repo</url></reference><reference type="issue-tracker"><url>http://jira.codehaus.org/browse/DOXIA</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/maven-doxia-dev/</url></reference><reference type="vcs"><url>https://svn.apache.org/viewvc/maven/doxia/doxia/tags/doxia-1.0/doxia-sink-api</url></reference></externalReferences>
+ </component>
+ <component type="library" bom-ref="pkg:maven/org.apache.maven.doxia/doxia-site-renderer@1.0?type=jar">
+ <publisher>The Apache Software Foundation</publisher>
+ <group>org.apache.maven.doxia</group>
+ <name>doxia-site-renderer</name>
+ <version>1.0</version>
+ <description>The Site Renderer handles the rendering of sites.</description>
+ <scope>required</scope>
+ <hashes>
+ <hash alg="MD5">81beb123839dd31676053b679a4cbf1e</hash>
+ <hash alg="SHA-1">c70e13ad9cb90f7cf88ceeb10eba2a85d0f9045f</hash>
+ <hash alg="SHA-256">590288e8f5bd89ec0500a299879f004c200f9296b21cfaebb770c387429cabde</hash>
+ <hash alg="SHA-512">f77f1531689d3a8211f5063648b20e4911e9e48169b72ce058bb909795bc7df1735f2c10c994331bd281281095269f46c32e3a8086c1147e369a2f1f98c47967</hash>
+ <hash alg="SHA-384">8f6d1bcd394c5f87204c922aff033595e4a5980d13bbaf3147a026ec76d4d1332e98c582517b0feb568a50cced6b61a6</hash>
+ <hash alg="SHA3-384">339e7616808cd547312387430d19ccf4998882cf8f776f1439efd421d35ee7d6ce66ad004b3ad60ef11e4599ae4d59b7</hash>
+ <hash alg="SHA3-256">b5a578307774b676c7246ba6261b263e2168bd126fc0ef2f0f90945539fc46f9</hash>
+ <hash alg="SHA3-512">c152f65b960f6d5f9f683364624230ddc413d6bffb53e29c1dce7cf641e3524deab99cb80b5301eaf67398ab63e7161c910a7149f1006264ab982f5ad25eba64</hash>
+ </hashes>
+ <licenses>
+ <license>
+ <id>Apache-2.0</id>
+ </license>
+ </licenses>
+ <purl>pkg:maven/org.apache.maven.doxia/doxia-site-renderer@1.0?type=jar</purl>
+ <externalReferences><reference type="website"><url>http://maven.apache.org/doxia/doxia-sitetools/doxia-site-renderer</url></reference><reference type="build-system"><url>http://grid.sonatype.org/ci</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://jira.codehaus.org/browse/DOXIASITETOOLS</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/maven-doxia-dev/</url></reference><reference type="vcs"><url>https://svn.apache.org/viewvc/maven/doxia/doxia-sitetools/tags/doxia-sitetools-1.0/doxia-site-renderer</url></reference></externalReferences>
+ </component>
+ <component type="library" bom-ref="pkg:maven/org.apache.maven.doxia/doxia-core@1.0?type=jar">
+ <publisher>The Apache Software Foundation</publisher>
+ <group>org.apache.maven.doxia</group>
+ <name>doxia-core</name>
+ <version>1.0</version>
+ <description>Doxia core classes and interfaces.</description>
+ <scope>required</scope>
+ <hashes>
+ <hash alg="MD5">466c0a59ea402cfcc519b7ccc7039745</hash>
+ <hash alg="SHA-1">e94c3303b09923f8cd7916a59702ef5972033f5d</hash>
+ <hash alg="SHA-256">26a90faef53a1346795d9e3a3ab24111e149b59e80408263747c9441ed966154</hash>
+ <hash alg="SHA-512">5c9749dc137a13852453e3f3311e9ad9607c56e2d2b21843ab3aad3b607effd924114a37d12169965ad805ffa3bfc42a72eaa1cf68507dd13e1890c12ef84ad2</hash>
+ <hash alg="SHA-384">a39d6dadca23dfe9af220af330fb7799da34ed6ae2b5bcec35a84ce7312c157ff596d47d994e3b75af007e7eeba93944</hash>
+ <hash alg="SHA3-384">46fcf4f8911ba3ef2a09314c6cffc59848c09d4bd74487567436acdb3eb1f553c9b0fda41f49ec5d08a5fb2402bb5be6</hash>
+ <hash alg="SHA3-256">f59c5235fb41f2e6e8e5d5690b2ea284c408efdf38156c261050151927519e7e</hash>
+ <hash alg="SHA3-512">3a67468f235e045ef0feae63ec5445630457933301a74b73176317be5cbf1c982f6b3921a14d46dfe4cec98ad291c3aa4aa3bb563f818fe1d1c914b13a492f0d</hash>
+ </hashes>
+ <licenses>
+ <license>
+ <id>Apache-2.0</id>
+ </license>
+ </licenses>
+ <purl>pkg:maven/org.apache.maven.doxia/doxia-core@1.0?type=jar</purl>
+ <externalReferences><reference type="website"><url>http://maven.apache.org/doxia/doxia/doxia-core</url></reference><reference type="build-system"><url>http://ci.sonatype.org</url></reference><reference type="distribution"><url>scp://people.apache.org/www/people.apache.org/builds/maven/1.0/staging-repo</url></reference><reference type="issue-tracker"><url>http://jira.codehaus.org/browse/DOXIA</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/maven-doxia-dev/</url></reference><reference type="vcs"><url>https://svn.apache.org/viewvc/maven/doxia/doxia/tags/doxia-1.0/doxia-core</url></reference></externalReferences>
+ </component>
+ <component type="library" bom-ref="pkg:maven/org.codehaus.plexus/plexus-i18n@1.0-beta-7?type=jar">
+ <publisher>Codehaus</publisher>
+ <group>org.codehaus.plexus</group>
+ <name>plexus-i18n</name>
+ <version>1.0-beta-7</version>
+ <scope>required</scope>
+ <hashes>
+ <hash alg="MD5">65d4f673bd0c49dbc67e020e96b00753</hash>
+ <hash alg="SHA-1">3690f10a668b3c7ac2ef563f14cfb6b2ba30ee57</hash>
+ <hash alg="SHA-256">fff07392dc6b29ef90c435ab004671a715f0aa36653e53b44c358eb842ce67d9</hash>
+ <hash alg="SHA-512">3d0498f18e5c936019974eb512907d7a502fde3b3804c5e37f39f1deeb517702a5460463cfca84c8f3b7dc9fe9c96adb989a42de46b7cf4b7056e12e89cb7afc</hash>
+ <hash alg="SHA-384">12c560bf8b2727602af2e305c011000003df478a44318f6c7ba36fc87c14e84f9eaa2e2a309b6a4f5895e4fa25f16b56</hash>
+ <hash alg="SHA3-384">6dbc41d3c4763bb8a9fc595f7d4deca931da822badb099f9b10e865269a25cefd26cfea821ec44654af95f6fbb76d282</hash>
+ <hash alg="SHA3-256">8386d07b88e401974df362ac08c84180af8c3935e1d13f75fe0b0b0fb8d8b737</hash>
+ <hash alg="SHA3-512">022527689d9485f4e6787b13e7091b03a03444b5889865442c8f2663a07e7147afdbba820378ace151a69e4a2c4f88b0766e527a10456114a9cbb359ac9c8736</hash>
+ </hashes>
+ <licenses/>
+ <purl>pkg:maven/org.codehaus.plexus/plexus-i18n@1.0-beta-7?type=jar</purl>
+ <externalReferences><reference type="website"><url>http://plexus.codehaus.org/plexus-components/plexus-i18n</url></reference><reference type="distribution"><url>dav:https://dav.codehaus.org/repository/plexus</url></reference><reference type="issue-tracker"><url>http://jira.codehaus.org/browse/PLX</url></reference><reference type="mailing-list"><url>http://archive.plexus.codehaus.org/user</url></reference><reference type="vcs"><url>http://fisheye.codehaus.org/browse/plexus/plexus-components/tags/plexus-i18n-1.0-beta-7</url></reference></externalReferences>
+ </component>
+ <component type="library" bom-ref="pkg:maven/org.codehaus.plexus/plexus-container-default@1.0-alpha-30?type=jar">
+ <publisher>Codehaus</publisher>
+ <group>org.codehaus.plexus</group>
+ <name>plexus-container-default</name>
+ <version>1.0-alpha-30</version>
+ <scope>required</scope>
+ <hashes>
+ <hash alg="MD5">af35f8c80bbf8deaaa382bd530c40939</hash>
+ <hash alg="SHA-1">669d4ba8e898e37987eb5e30b121ed1d62c5b7b8</hash>
+ <hash alg="SHA-256">ef5fa49aeb90df9cac923435577dc9c2701a18ba29191b6e407e7870795eea35</hash>
+ <hash alg="SHA-512">1b0e11b59296048081d6cc44fa4f2800068b54c06ba411513115826ac9209ab3538b262c5f543d0a0410e3ed54ee3d99a0b52611fbc3875816b63f7bf2e2e6ad</hash>
+ <hash alg="SHA-384">58c0afcf93afa3c385203be846c0a1515bdfc510b2f83e509e4575fbf29e3bf0577666e3c6b149cc06454d1a30a4e65a</hash>
+ <hash alg="SHA3-384">7d745262fc27e480fca22a6b050e6d896d86c68acf64633eaf5ac2299aab5a65d26a1ed3493e847583f18fe09dfc08a6</hash>
+ <hash alg="SHA3-256">22609f9da58123d3559a9322c9dd93fbc54934eee1d6ed2cae65bd2e4f408535</hash>
+ <hash alg="SHA3-512">59b2416a997d28ce608562f403411a9ec286cc3781d40f36b60f679cfb12854b923b4e791847dd5981d4982b1545b381bbb4c596b6586bf196293d42d9c70836</hash>
+ </hashes>
+ <licenses>
+ <license>
+ <id>Apache-2.0</id>
+ </license>
+ </licenses>
+ <purl>pkg:maven/org.codehaus.plexus/plexus-container-default@1.0-alpha-30?type=jar</purl>
+ <externalReferences><reference type="distribution"><url>dav:https://dav.codehaus.org/repository/plexus</url></reference><reference type="issue-tracker"><url>http://jira.codehaus.org/browse/PLX</url></reference><reference type="mailing-list"><url>http://archive.plexus.codehaus.org/user</url></reference><reference type="vcs"><url>http://fisheye.codehaus.org/browse/plexus/plexus-containers/tags/plexus-containers-1.0-alpha-30/plexus-container-default</url></reference></externalReferences>
+ </component>
+ <component type="library" bom-ref="pkg:maven/junit/junit@3.8.1?type=jar">
+ <publisher>JUnit</publisher>
+ <group>junit</group>
+ <name>junit</name>
+ <version>3.8.1</version>
+ <description>JUnit is a regression testing framework written by Erich Gamma and Kent Beck. It is used by the developer who implements unit tests in Java.</description>
+ <scope>required</scope>
+ <hashes>
+ <hash alg="MD5">1f40fb782a4f2cf78f161d32670f7a3a</hash>
+ <hash alg="SHA-1">99129f16442844f6a4a11ae22fbbee40b14d774f</hash>
+ <hash alg="SHA-256">b58e459509e190bed737f3592bc1950485322846cf10e78ded1d065153012d70</hash>
+ <hash alg="SHA-512">8e6f9fa5eb3ba93a8b1b5a39e01a81c142b33078264dbd0a2030d60dd26735407249a12e66f5cdcab8056e93a5687124fe66e741c233b4c7a06cc8e49f82e98b</hash>
+ <hash alg="SHA-384">dc2d56e8a39724d0755da793b7fe16a6e0d095a26d4ce54914e9ae12e722868bf075014fd668910d524fcb4b031a082f</hash>
+ <hash alg="SHA3-384">a08c7cec0855ca049d7f97cc2f361fe9f11d25641f447909db456d511aeba11fa14f491a8f0974f979d3d785c3e6eb47</hash>
+ <hash alg="SHA3-256">d4b66ce18259eae66bc0c90abe87aab211cf53932b43d95e1671482f377bf863</hash>
+ <hash alg="SHA3-512">837a25d647ca209a4636a9ee1baa04054b55a5bd40b52f69a72660faa5bccec5d6da38784ef50e04918f0b150e73780a601b24efa1f479a7abe11ff142e00e8e</hash>
+ </hashes>
+ <licenses>
+ <license>
+ <name>Common Public License Version 1.0</name>
+ <url>http://www.opensource.org/licenses/cpl1.0.txt</url>
+ </license>
+ </licenses>
+ <purl>pkg:maven/junit/junit@3.8.1?type=jar</purl>
+ <externalReferences><reference type="website"><url>http://junit.org</url></reference><reference type="vcs"><url>http://junit.cvs.sourceforge.net/junit/</url></reference></externalReferences>
+ </component>
+ <component type="library" bom-ref="pkg:maven/org.codehaus.plexus/plexus-velocity@1.1.7?type=jar">
+ <publisher>Codehaus</publisher>
+ <group>org.codehaus.plexus</group>
+ <name>plexus-velocity</name>
+ <version>1.1.7</version>
+ <scope>required</scope>
+ <hashes>
+ <hash alg="MD5">d460d060e07b3bccaf6593440ce7be1e</hash>
+ <hash alg="SHA-1">1440fc2552d1405b1c2d380ef3b96c4d9c6dbd0b</hash>
+ <hash alg="SHA-256">1c9c994fbcd31526d451797072d7afb19f9b1962e710f3088f54fd1267b45fae</hash>
+ <hash alg="SHA-512">a192935edaf26dd9ff2b3b9e009569dca940db98d29b053be67745807405683ba946da445fa812dfe0291f140aaf808fc57327863aee71e0ed52ae75ddcf2f4d</hash>
+ <hash alg="SHA-384">effea859241e26d8fd40fdd72ea9d015d08d04202d5234b1d6149bc152872ca717170c21718fe292018a407e15a0dd71</hash>
+ <hash alg="SHA3-384">f723e744e25e913225f3c9efb5cfe26b5bfccc8e896bc3f62b33cfaaed8250d4d9a26a51b99c203f4dcb32b1127c067f</hash>
+ <hash alg="SHA3-256">1804175f5de84901355aa14bfea4077830e09f09ec48b7efc52f4722a9f720df</hash>
+ <hash alg="SHA3-512">9d6feba1012d7bff9ae7de176723fadd151c94261fef5b8ed30411da82cad78df6e97ed1dd0c139fbebce4059e039ecda08c102756d34bc02282c3f6f1a854ac</hash>
+ </hashes>
+ <licenses/>
+ <purl>pkg:maven/org.codehaus.plexus/plexus-velocity@1.1.7?type=jar</purl>
+ <externalReferences><reference type="website"><url>http://plexus.codehaus.org/plexus-components/plexus-velocity</url></reference><reference type="distribution"><url>dav:https://dav.codehaus.org/repository/plexus</url></reference><reference type="issue-tracker"><url>http://jira.codehaus.org/browse/PLX</url></reference><reference type="mailing-list"><url>http://archive.plexus.codehaus.org/user</url></reference><reference type="vcs"><url>http://fisheye.codehaus.org/browse/plexus/plexus-components/tags/plexus-velocity-1.1.7</url></reference></externalReferences>
+ </component>
+ <component type="library" bom-ref="pkg:maven/org.apache.velocity/velocity@1.5?type=jar">
+ <publisher>The Apache Software Foundation</publisher>
+ <group>org.apache.velocity</group>
+ <name>velocity</name>
+ <version>1.5</version>
+ <description>Apache Velocity is a general purpose template engine.</description>
+ <scope>required</scope>
+ <hashes>
+ <hash alg="MD5">8d46d30a37e1cf2047cdfa73c552e8a9</hash>
+ <hash alg="SHA-1">09f306baf7523ffc0e81a6353d08a584d254133b</hash>
+ <hash alg="SHA-256">e06403f9cd69033e523bec43195a2a1b6106e28c5d7d053b569ae771e9e49a62</hash>
+ <hash alg="SHA-512">7724748f9d2d054b59999357ea84c031b11f2da7ced9dc605d7b7e849b9545a6265f44668808d583c364d0513aed32da647c3954924e3f53b1cc545cd7dbac28</hash>
+ <hash alg="SHA-384">34a6460ee3860708e7d6a9daad1332c1477496a86fe976407d545e014543f8dd78d00af85812cb897d71d38aa1213033</hash>
+ <hash alg="SHA3-384">858f53deedc6dc54aaba7a6e8e8f1138cdd6719be7c70f4ea1f574e19dcd1b8e5bcd33c24f3880539b2f646abf89aa11</hash>
+ <hash alg="SHA3-256">eabf3c322b7eb7247b17dfd9999c8b2319a728bfbc3c2c61db07d900da3d52ac</hash>
+ <hash alg="SHA3-512">60a889dc92f175094ce5e52a42b67aea4fa765b499897e1f302ebb85d6e161dfef3011bb7aff6a868396dbe050abae469ed72f4d7bd60c28e42f78d8f49aeef8</hash>
+ </hashes>
+ <licenses>
+ <license>
+ <id>Apache-2.0</id>
+ </license>
+ </licenses>
+ <purl>pkg:maven/org.apache.velocity/velocity@1.5?type=jar</purl>
+ <externalReferences><reference type="website"><url>http://velocity.apache.org/engine/releases/velocity-1.5/</url></reference><reference type="distribution"><url>scp://people.apache.org/www/people.apache.org/repo/m2-ibiblio-rsync-repository</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/VELOCITY</url></reference><reference type="vcs"><url>http://svn.apache.org/viewvc/velocity/engine/tags/Velocity_1.5</url></reference></externalReferences>
+ </component>
+ <component type="library" bom-ref="pkg:maven/commons-lang/commons-lang@2.1?type=jar">
+ <publisher>The Apache Software Foundation</publisher>
+ <group>commons-lang</group>
+ <name>commons-lang</name>
+ <version>2.1</version>
+ <description>Commons.Lang, a package of Java utility classes for the
+ classes that are in java.lang's hierarchy, or are considered to be so
+ standard as to justify existence in java.lang.</description>
+ <scope>required</scope>
+ <hashes>
+ <hash alg="MD5">51591549f1662a64543f08a1d4a0cf87</hash>
+ <hash alg="SHA-1">4763ecc9d78781c915c07eb03e90572c7ff04205</hash>
+ <hash alg="SHA-256">2ded7343dc8e57decd5e6302337139be020fdd885a2935925e8d575975e480b9</hash>
+ <hash alg="SHA-512">a312a5e33b17835f2e82e74ab52ab81f0dec01a7e72a2ba58bb76b6a197ffcd2bb410e341ef7b3720f3b595ce49fdd9994ea887ba08ff6fe21b2c714f8c405af</hash>
+ <hash alg="SHA-384">0ecdec642950d40a5035969274dfdc181722af6535cd9d2f8f1b7838b023e513a1b749a55f9c4d43feabd0c94df00da7</hash>
+ <hash alg="SHA3-384">36db3a8d0fc4b9394b9ed534bc520c6d63791d0450c04f50aeb301de0e7d8627f57c9baea684c7762df99491a9c0f000</hash>
+ <hash alg="SHA3-256">fc01ef3947847abe3d0445f075e101a27fa3eb4ed7666cc4a82d29729067055f</hash>
+ <hash alg="SHA3-512">3e68ff94b86a258378055205bc9a78248570bf16a1a145c919469ca6654ae109fb03ec55cf6aea44efb2cfe2e29f663ab634487ea8769dd1be5f6c2f4926ebf6</hash>
+ </hashes>
+ <licenses>
+ <license>
+ <id>Apache-2.0</id>
+ </license>
+ </licenses>
+ <purl>pkg:maven/commons-lang/commons-lang@2.1?type=jar</purl>
+ <externalReferences><reference type="issue-tracker"><url>http://issues.apache.org/bugzilla/</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/eyebrowse/SummarizeList?listName=commons-dev@jakarta.apache.org</url></reference></externalReferences>
+ </component>
+ <component type="library" bom-ref="pkg:maven/oro/oro@2.0.8?type=jar">
+ <group>oro</group>
+ <name>oro</name>
+ <version>2.0.8</version>
+ <scope>required</scope>
+ <hashes>
+ <hash alg="MD5">42e940d5d2d822f4dc04c65053e630ab</hash>
+ <hash alg="SHA-1">5592374f834645c4ae250f4c9fbb314c9369d698</hash>
+ <hash alg="SHA-256">e00ccdad5df7eb43fdee44232ef64602bf63807c2d133a7be83ba09fd49af26e</hash>
+ <hash alg="SHA-512">9a98e493c4d771322b1331ec05ab0e363a83d8ac2af8018d96a44df2bf5bfc97d33ebe6f6f93e46ab10bf1536f0c29e9d9569318ed49bc18b4e96b1a8b476d37</hash>
+ <hash alg="SHA-384">f542e92b7a86bcb20cc21f0c4b29778428944391344ca11df432f9ce36a96ce8e8f65da67e450e52c0e8ba441d2a7332</hash>
+ <hash alg="SHA3-384">e483eec12e463136ea4163a280dc17d62e48f5d49f0f0ad2ab672c4c5366b1f4e5fd460e880caaa4b39666106ac98ca1</hash>
+ <hash alg="SHA3-256">e558c00adc56713dc57cebed64b966e3ca0d8f096056d8843fa8bb11c7c96017</hash>
+ <hash alg="SHA3-512">f6e02d2cd83014e4a4d5ca0f24b189ec944c3b1e306c5eb04fac7e148b47ad2432256ef6b05292cf6d34a31c72420637702cc0fff4b38edcfae21bc0ffda98aa</hash>
+ </hashes>
+ <licenses/>
+ <purl>pkg:maven/oro/oro@2.0.8?type=jar</purl>
+ </component>
+ <component type="library" bom-ref="pkg:maven/org.apache.maven.doxia/doxia-decoration-model@1.0?type=jar">
+ <publisher>The Apache Software Foundation</publisher>
+ <group>org.apache.maven.doxia</group>
+ <name>doxia-decoration-model</name>
+ <version>1.0</version>
+ <description>The Decoration Model handles the site descriptor, also known as site.xml.</description>
+ <scope>required</scope>
+ <hashes>
+ <hash alg="MD5">9225610ba2e8cc67ef8ec0b7d48c9364</hash>
+ <hash alg="SHA-1">040cc4c68fcc197885c4d98f89588bd0445c7449</hash>
+ <hash alg="SHA-256">ec95e400c9b272b87254327ec408ef50f0252a5a8edf331f00902371c733fc00</hash>
+ <hash alg="SHA-512">dd1f6af72980f65d16591331558f868784e7a76b17f38c0dc15e6798449d419ff3a80935ebda5e99b399bd62aef7f73bbae200943bf2f6a2c0c979401a7f4143</hash>
+ <hash alg="SHA-384">3c8017489b9197473b7af208fd13165251f5d4d12186df345b7b5b25195df49fba3a5ffec5b3ddc35bd496178d94bf07</hash>
+ <hash alg="SHA3-384">164cd84510fbb6d0d8a67e8a38c9201c9d42707dacb5c9dd7de742071009ff41d93107b5d93b22454286220b85813346</hash>
+ <hash alg="SHA3-256">1709f232eee4b2c2b8bcd20023255ef4530f76fe6ed745c05ec9f61f1a14716f</hash>
+ <hash alg="SHA3-512">be4018faeb3a253e0889e7f5591a3116763c8d6b58fb07f1228457a0b3dec5321a8a74db3a2c1d00b1e8d6054a6b2e9cfb166da13377afc2ef1c6b617380615c</hash>
+ </hashes>
+ <licenses>
+ <license>
+ <id>Apache-2.0</id>
+ </license>
+ </licenses>
+ <purl>pkg:maven/org.apache.maven.doxia/doxia-decoration-model@1.0?type=jar</purl>
+ <externalReferences><reference type="website"><url>http://maven.apache.org/doxia/doxia-sitetools/doxia-decoration-model</url></reference><reference type="build-system"><url>http://grid.sonatype.org/ci</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://jira.codehaus.org/browse/DOXIASITETOOLS</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/maven-doxia-dev/</url></reference><reference type="vcs"><url>https://svn.apache.org/viewvc/maven/doxia/doxia-sitetools/tags/doxia-sitetools-1.0/doxia-decoration-model</url></reference></externalReferences>
+ </component>
+ <component type="library" bom-ref="pkg:maven/commons-collections/commons-collections@3.2?type=jar">
+ <publisher>The Apache Software Foundation</publisher>
+ <group>commons-collections</group>
+ <name>commons-collections</name>
+ <version>3.2</version>
+ <description>Types that extend and augment the Java Collections Framework.</description>
+ <scope>required</scope>
+ <hashes>
+ <hash alg="MD5">7b9216b608d550787bdf43a63d88bf3b</hash>
+ <hash alg="SHA-1">f951934aa5ae5a88d7e6dfaa6d32307d834a88be</hash>
+ <hash alg="SHA-256">093fea360752de55afcb80cf713403eb1a66cb7dc0d529955b6f4a96f975df5c</hash>
+ <hash alg="SHA-512">4c3361c8cf553c6fc34fe10624985bc1a08ea84547f4fb970487e99dc795a67b4bd36a0a1015492019e36dc1ae8b36def98f3ed3bf3e8382057923ddf67ee5ef</hash>
+ <hash alg="SHA-384">c49bf0ba8c22252c1a7ebecbd6088690db1f3677bc6331ddb3bb8d9b5f53545ea09963c154423d474f1a8c438e130801</hash>
+ <hash alg="SHA3-384">30c74ffe314d0012672eb1c35d34a6853f85d5fb58782024c1203250e4d3e5fd7c321d3a1c66b8fce0d1acf2cf4a9a96</hash>
+ <hash alg="SHA3-256">ccf43652f0b60dbf82c4bc5f8c11fe4332f58569be29fec98583bb0cdfaaa5ef</hash>
+ <hash alg="SHA3-512">c0b557b2bcff5779dd74133f9901985f463d289b729e9b5838ed97e9c3ab9707af58bd2479919922767b09cd7cb05cd0e79bb452a0e91f91cf1919997bc7d5be</hash>
+ </hashes>
+ <licenses>
+ <license>
+ <id>Apache-2.0</id>
+ </license>
+ </licenses>
+ <purl>pkg:maven/commons-collections/commons-collections@3.2?type=jar</purl>
+ <externalReferences><reference type="website"><url>http://jakarta.apache.org/commons/collections/</url></reference><reference type="distribution"><url>file:///www/jakarta.apache.org/builds/jakarta-commons/collections/</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/bugzilla/</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/eyebrowse/SummarizeList?listName=commons-dev@jakarta.apache.org</url></reference><reference type="vcs"><url>http://svn.apache.org/repos/asf/jakarta/commons/proper/collections/trunk</url></reference></externalReferences>
+ </component>
+ <component type="library" bom-ref="pkg:maven/org.apache.maven.doxia/doxia-module-apt@1.0?type=jar">
+ <publisher>The Apache Software Foundation</publisher>
+ <group>org.apache.maven.doxia</group>
+ <name>doxia-module-apt</name>
+ <version>1.0</version>
+ <description>A Doxia module for Almost Plain Text source documents.</description>
+ <scope>required</scope>
+ <hashes>
+ <hash alg="MD5">4819bce32a8305a0012b811f95e2a336</hash>
+ <hash alg="SHA-1">de385703452b5b9029504df97b763f7f48e8bf42</hash>
+ <hash alg="SHA-256">8180ea21cc240abac7a0422f394ec01860306f7964b8148614cceea0dd3302f2</hash>
+ <hash alg="SHA-512">d5c7655954b14eadba66443551a74a65c7e2fbf387a7a5e9d774689ab283195edf35842d539ab381e2998cb35348fafbbe96b89cb38f9888711cad39aa5ae06f</hash>
+ <hash alg="SHA-384">c2d1ca623b25264c0176803a55bc0292ffde5047e6c75ea90bc3b9a249a3cfd27818feb600d3061594b12c9a205105d2</hash>
+ <hash alg="SHA3-384">6dec039328ebf5be4799d778456361acc7caa7ec2357643d1b972830803118b652f4a78f131fe64c369055832aa51297</hash>
+ <hash alg="SHA3-256">7207bd9d14201003965ebec34593b29e5deb420437204d58e6710bab33c86fd6</hash>
+ <hash alg="SHA3-512">0f45581cd75d5c1f7fd8022439f709619b6723ce52dd80bfdbded30fdafa612dca74f5445024f7aa17fe0c44c296840909b9e7d19854d0dba36442ce021c3882</hash>
+ </hashes>
+ <licenses>
[... 100815 lines stripped ...]