You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@camel.apache.org by ac...@apache.org on 2023/02/01 09:55:24 UTC

[camel-spring-boot] 03/03: Added SBOM generation to Camel-Spring-boot

This is an automated email from the ASF dual-hosted git repository.

acosentino pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/camel-spring-boot.git

commit 97f3445d781afc64d88ddc09b08509f48ce54973
Author: Andrea Cosentino <an...@gmail.com>
AuthorDate: Wed Feb 1 10:29:00 2023 +0100

    Added SBOM generation to Camel-Spring-boot
    
    Signed-off-by: Andrea Cosentino <an...@gmail.com>
---
 camel-spring-boot-sbom/camel-spring-boot-sbom.json | 166397 ++++++++++++++++++
 camel-spring-boot-sbom/camel-spring-boot-sbom.xml  |  66429 +++++++
 2 files changed, 232826 insertions(+)

diff --git a/camel-spring-boot-sbom/camel-spring-boot-sbom.json b/camel-spring-boot-sbom/camel-spring-boot-sbom.json
new file mode 100644
index 00000000000..40e7ece11ea
--- /dev/null
+++ b/camel-spring-boot-sbom/camel-spring-boot-sbom.json
@@ -0,0 +1,166397 @@
+{
+  "bomFormat" : "CycloneDX",
+  "specVersion" : "1.4",
+  "serialNumber" : "urn:uuid:bafe553e-8d1a-4055-90b4-b60d6d66018b",
+  "version" : 1,
+  "metadata" : {
+    "timestamp" : "2023-02-01T09:11:22Z",
+    "tools" : [
+      {
+        "vendor" : "OWASP Foundation",
+        "name" : "CycloneDX Maven plugin",
+        "version" : "2.7.4",
+        "hashes" : [
+          {
+            "alg" : "MD5",
+            "content" : "1c0045824ba8b7c3459faf37fadb5ca4"
+          },
+          {
+            "alg" : "SHA-1",
+            "content" : "c0259ad78634a65918e328d793d2ea0b8a9c2220"
+          },
+          {
+            "alg" : "SHA-256",
+            "content" : "47bd0e0176ba679b66739820bc52880a9e667c57c8b7301de698c0ce7e271bb1"
+          },
+          {
+            "alg" : "SHA-512",
+            "content" : "e8b72acd176d5d3e13646c2422d6fac1e47d369162cbde8796afa567d36bd182a5f8f4cbdc46185f3607a71e92c410ab0eacd87ab8c17b38e352eb3077a46ecb"
+          },
+          {
+            "alg" : "SHA-384",
+            "content" : "8759a5908a1dbd6797ce597bba7d67a073d63129e1affd9b827482581ee85815b118fb4e950991b9d6793a5d70e8b901"
+          },
+          {
+            "alg" : "SHA3-384",
+            "content" : "7721f8119070762eed34e1d7fbe0eb2f590130a62f9ebcf15dbb9d3321ef25ba2b0709eb6f3e922b59f7203554db555c"
+          },
+          {
+            "alg" : "SHA3-256",
+            "content" : "3fc2ede35393130c22e8ea1985092c498f51f88c67925701906c910829aaac1e"
+          },
+          {
+            "alg" : "SHA3-512",
+            "content" : "7f54ea340410b97d5ccf4b417928359ea30be0d71d4aaa859389f308407e9d94fa3617d395f7e81e00881da67143aa8910fdae2dd01a8fc9c9a07b8bc03fb3b1"
+          }
+        ]
+      }
+    ],
+    "component" : {
+      "publisher" : "The Apache Software Foundation",
+      "group" : "org.apache.camel.springboot",
+      "name" : "spring-boot",
+      "version" : "4.0.0-SNAPSHOT",
+      "description" : "Camel Spring Boot Root POM",
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "Apache-2.0"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/org.apache.camel.springboot/spring-boot@4.0.0-SNAPSHOT?type=pom",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "https://camel.apache.org"
+        },
+        {
+          "type" : "distribution",
+          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
+        },
+        {
+          "type" : "issue-tracker",
+          "url" : "https://issues.apache.org/jira/browse/CAMEL"
+        },
+        {
+          "type" : "mailing-list",
+          "url" : "dev-subscribe@camel.apache.org"
+        },
+        {
+          "type" : "vcs",
+          "url" : "https://gitbox.apache.org/repos/asf?p=camel-spring-boot.git;a=summary"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/org.apache.camel.springboot/spring-boot@4.0.0-SNAPSHOT?type=pom"
+    }
+  },
+  "components" : [
+    {
+      "group" : "org.apache.camel.springboot",
+      "name" : "spring-boot-parent",
+      "version" : "4.0.0-SNAPSHOT",
+      "purl" : "pkg:maven/org.apache.camel.springboot/spring-boot-parent@4.0.0-SNAPSHOT?type=pom",
+      "type" : "library",
+      "bom-ref" : "pkg:maven/org.apache.camel.springboot/spring-boot-parent@4.0.0-SNAPSHOT?type=pom"
+    },
+    {
+      "group" : "org.apache.camel.springboot",
+      "name" : "tooling",
+      "version" : "4.0.0-SNAPSHOT",
+      "purl" : "pkg:maven/org.apache.camel.springboot/tooling@4.0.0-SNAPSHOT?type=pom",
+      "type" : "library",
+      "bom-ref" : "pkg:maven/org.apache.camel.springboot/tooling@4.0.0-SNAPSHOT?type=pom"
+    },
+    {
+      "group" : "org.apache.camel.springboot",
+      "name" : "camel-spring-boot-generator-maven-plugin",
+      "version" : "4.0.0-SNAPSHOT",
+      "purl" : "pkg:maven/org.apache.camel.springboot/camel-spring-boot-generator-maven-plugin@4.0.0-SNAPSHOT?type=maven-plugin",
+      "type" : "library",
+      "bom-ref" : "pkg:maven/org.apache.camel.springboot/camel-spring-boot-generator-maven-plugin@4.0.0-SNAPSHOT?type=maven-plugin"
+    },
+    {
+      "publisher" : "The Apache Software Foundation",
+      "group" : "org.apache.camel",
+      "name" : "camel-package-maven-plugin",
+      "version" : "4.0.0-SNAPSHOT",
+      "description" : "Maven plugin to help package Camel components and plugins",
+      "scope" : "optional",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "b4c9f03418ed02bf2fd5109b6e21b9a3"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "7710dfa60d6fbca1f9e26dd74bc38a064e74ed04"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "a7a819a21bcf1528f974ec66362eb03def2ca65513fe1851bcff96e8354e6a6d"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "2f44fc99f6c50f0b0cd7458ae12bfdeb00247988b6b7ec9a590fb36a4855580010708b55e8a49df11f7cf8ef696ae74a459ecea3c2f7b45c7f6bb1935ead6163"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "d58e2b934486387315e23b69be38f69f9586297035b7a471131befa51dad2643ada0f2eb892aae1bdc892ac23c2cd4ce"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "ce706601c15342226a3f0f7846f5b7b1081176cca298a244d1f2a8d28b6e308cb0561d60c3414f303c5ddb8396b168c1"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "9de68fd65c225136c9dc81acf2ca685dcc3ce624361b842fff1baa1fb25cc285"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "2c4488ac0255285c08f0253a53d45a6d24bb00537b14357e7684a945fcbd56167c5771fd4f0bd159fe3b34f6d1c146b19d5e099cedcfec99198b6b0fa7eaf6c3"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "Apache-2.0",
+            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/org.apache.camel/camel-package-maven-plugin@4.0.0-SNAPSHOT?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "https://www.apache.org/camel/camel-parent/tooling/tooling-parent/maven-plugins/camel-package-maven-plugin/"
+        },
+        {
+          "type" : "distribution",
+          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
+        },
+        {
+          "type" : "mailing-list",
+          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
+        },
+        {
+          "type" : "vcs",
+          "url" : "https://github.com/apache/maven-apache-parent/tree/apache-29/camel/camel-parent/tooling/tooling-parent/maven-plugins/camel-package-maven-plugin"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/org.apache.camel/camel-package-maven-plugin@4.0.0-SNAPSHOT?type=jar"
+    },
+    {
+      "publisher" : "The Apache Software Foundation",
+      "group" : "org.apache.maven.shared",
+      "name" : "maven-shared-utils",
+      "version" : "3.3.4",
+      "description" : "Shared utilities for use by Maven core and plugins",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "908f2a0107ff330ac9b856356a0acaef"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "f87a61adb1e12a00dcc6cc6005a51e693aa7c4ac"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "7925d9c5a0e2040d24b8fae3f612eb399cbffe5838b33ba368777dc7bddf6dda"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "c6693f8a061de74ac59c61d185f5b130cb574405cfc37febb8e73806ea64eea822a4a75c24098fb49b7871373091543a6f4c526c0842589e528cacad40e5554a"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "bc5b42831ff598f42dda54738be004a619d60201a009b04cb3aaa0dc343d0e4fbc423b19739391eb7c33efcac3c08dd5"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "385bebb35d7ea13d92ae6a5afa9257b184a1fcf40cba077a103c7a91d39a4d3e0180a475febdba73ac75949968e77186"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "888fde30d4f9a9e1b7c4c5e4d61f9cf0499192e5bc1212538e2e3320688e44da"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "40b55bb907452777443b8162d456bf1d48e02bfd9124062faed9c9bf51e0f522d40b02f4c24eb39f760469ad226570876f0de6afecd74903112ec794f0aa9a78"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "Apache-2.0"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/org.apache.maven.shared/maven-shared-utils@3.3.4?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "https://maven.apache.org/shared/maven-shared-utils/"
+        },
+        {
+          "type" : "build-system",
+          "url" : "https://ci-builds.apache.org/job/Maven/job/maven-box/job/maven-shared-utils/"
+        },
+        {
+          "type" : "distribution",
+          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
+        },
+        {
+          "type" : "issue-tracker",
+          "url" : "https://issues.apache.org/jira/issues/?jql=project%20%3D%20MSHARED%20AND%20component%20%3D%20maven-shared-utils"
+        },
+        {
+          "type" : "mailing-list",
+          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
+        },
+        {
+          "type" : "vcs",
+          "url" : "https://github.com/apache/maven-shared-utils/tree/maven-shared-utils-3.3.4"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/org.apache.maven.shared/maven-shared-utils@3.3.4?type=jar"
+    },
+    {
+      "publisher" : "The Apache Software Foundation",
+      "group" : "org.apache.commons",
+      "name" : "commons-text",
+      "version" : "1.10.0",
+      "description" : "Apache Commons Text is a library focused on algorithms working on strings.",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "4afc9bfa2d31dbf7330c98fcc954b892"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "3363381aef8cef2dbc1023b3e3a9433b08b64e01"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "770cd903fa7b604d1f7ef7ba17f84108667294b2b478be8ed1af3bffb4ae0018"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "afd836a1094449e0a791fee67363666c47b6d24acff353a5089b837b332c0f4af89565c354682521e37062d20e6b52d70c77bb4f24cca9b9532c274fc708a831"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "06c56e6e513dd77cf10d0da46cdea08c34e220e81fa024735b668c6650df4234e564fe865ff5cafea963f56b1e8ffd4a"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "f09065ed066c25debf8c78cbb0bcc738e1ea283302ec992dcfb649acb90091cff879465c65a162e94534d454e3b4e9bb"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "0b59c567164bb755f2353b78ba66744000a8c4b35e1df05255b080a21c3a3dd5"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "f0fbce02a862b70f472a27d0722c54ac111ca2eb94584b8b0b73d1926aec26047cd92542ad0b3cf980a6825077587f41b194aa93d6f6350d1b87e59e8df1be7c"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "Apache-2.0"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "https://commons.apache.org/proper/commons-text"
+        },
+        {
+          "type" : "build-system",
+          "url" : "https://github.com/apache/commons-parent/actions"
+        },
+        {
+          "type" : "distribution",
+          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
+        },
+        {
+          "type" : "issue-tracker",
+          "url" : "https://issues.apache.org/jira/browse/TEXT"
+        },
+        {
+          "type" : "mailing-list",
+          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
+        },
+        {
+          "type" : "vcs",
+          "url" : "https://gitbox.apache.org/repos/asf?p=commons-text.git"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar"
+    },
+    {
+      "group" : "io.smallrye",
+      "name" : "jandex",
+      "version" : "3.0.3",
+      "description" : "SmallRye Build Parent POM",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "5eea5950eba074081eb28cce4bc73a77"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "4a80909fffa46672f7a0f334ac5e10ff5df9343f"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "876ebc8665a9b6661b60f8436f1a74ab09746a48105121ca636fd36733f281f0"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "748062f75fdea689e7b529e14143357f87f3242d903c42c25d605cdbc145cbeaf9fd4b5f1ddc3f79bdf1a998f297b1afa94733e6a2ee17f6e31db4d9cd91121a"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "81888175de91009e5f47a9fdcaab92fb725f1388c3e7ca6f5f287711c899310367bc16700644e9133bad84a40529e4d0"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "92d13f44ad942bb5881451564f6147321f233acd801ee36dd2dd2090062d06765c8ba0b412362af4e138c26791108125"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "eb92d87c5a65ce17b89f9339eaeb5222455cfa09bd6a0ac52dc2d7b873f784da"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "5d0ddd5b860529f64f19b1791177c5c9239e81cd87e132a00a299d5805e328d763cb847bbc22a4b9e98b37927fa04a7066eec5fee6d4b633ca94c824b950536a"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "Apache-2.0"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/io.smallrye/jandex@3.0.3?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "https://smallrye.io/jandex-parent/jandex"
+        },
+        {
+          "type" : "distribution",
+          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
+        },
+        {
+          "type" : "issue-tracker",
+          "url" : "https://github.com/smallrye/jandex/issues"
+        },
+        {
+          "type" : "vcs",
+          "url" : "https://github.com/smallrye/jandex/jandex/"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/io.smallrye/jandex@3.0.3?type=jar"
+    },
+    {
+      "group" : "org.snakeyaml",
+      "name" : "snakeyaml-engine",
+      "version" : "2.3",
+      "description" : "Core YAML 1.2 parser and emitter for Java",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "e4ca89474b36d8f322e1237b308b972e"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "e6eaafdc8dea303778e3459707da0e3d71e969ef"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "32dbdf0f426cbaf5a08e67c2e43383b63c5ffbed8063d2a56bc1f028eebd6cb1"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "a67a9142f151aa563e469d755156114fee4d7543f0d5bc66ffc46dfdac821db6d6fce57c5e380fe3efba4e9af066724e84139d346884429ac2db4332705f9ace"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "2e017e555a017d554d6ad50b1875dde3fff3ee31a81e502d95a9b9f724774d5a16f3dc03e01e00f0479d359d0477fe22"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "6cbee6c35e5443cc16089acd23545a6a4fdae523d88c6ee06f3aed1b23ab20e56dee1da589724c39a14e613e15c2a0d3"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "5147fdcdeb3180f411281ee208116313e411af644e98a90454b7ac6662c8033c"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "81599f6c41a64e98ce4440d4ca58ac0f8a834754768abc9a1bfab04a2b4b14d3c5838d49a7e6daba0d17320c0fabc2d3e4ffb2463f4afdaed5643c0c90921497"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "Apache-2.0"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/org.snakeyaml/snakeyaml-engine@2.3?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "http://www.snakeyaml.org"
+        },
+        {
+          "type" : "distribution",
+          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
+        },
+        {
+          "type" : "issue-tracker",
+          "url" : "https://bitbucket.org/asomov/snakeyaml-engine/issues"
+        },
+        {
+          "type" : "vcs",
+          "url" : "https://bitbucket.org/asomov/snakeyaml-engine/src"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/org.snakeyaml/snakeyaml-engine@2.3?type=jar"
+    },
+    {
+      "publisher" : "Eclipse Foundation",
+      "group" : "jakarta.annotation",
+      "name" : "jakarta.annotation-api",
+      "version" : "2.1.1",
+      "description" : "Jakarta Annotations API",
+      "scope" : "required",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "5dac2f68e8288d0add4dc92cb161711d"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "48b9bda22b091b1f48b13af03fe36db3be6e1ae3"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "5f65fdaf424eee2b55e1d882ba9bb376be93fb09b37b808be6e22e8851c909fe"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "eabe8b855b735663684052ec4cc357cc737936fa57cebf144eb09f70b3b6c600db7fa6f1c93a4f36c5994b1b37dad2dfcec87a41448872e69552accfd7f52af6"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "798597a6b80b423844d70609c54b00d725a357031888da7e5c3efd3914d1770be69aa7135de13ddb89a4420a5550e35b"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "9629b8ca82f61674f5573723bbb3c137060e1442062eb52fa9c90fc8f57ea7d836eb2fb765d160ec8bf300bcb6b820be"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "f71ffc2a2c2bd1a00dfc00c4be67dbe5f374078bd50d5b24c0b29fbcc6634ecb"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "aa4e29025a55878db6edb0d984bd3a0633f3af03fa69e1d26c97c87c6d29339714003c96e29ff0a977132ce9c2729d0e27e36e9e245a7488266138239bdba15e"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "EPL-2.0"
+          }
+        },
+        {
+          "license" : {
+            "id" : "GPL-2.0-with-classpath-exception"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/jakarta.annotation/jakarta.annotation-api@2.1.1?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "https://projects.eclipse.org/projects/ee4j.ca"
+        },
+        {
+          "type" : "distribution",
+          "url" : "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/"
+        },
+        {
+          "type" : "issue-tracker",
+          "url" : "https://github.com/eclipse-ee4j/common-annotations-api/issues"
+        },
+        {
+          "type" : "mailing-list",
+          "url" : "https://dev.eclipse.org/mhonarc/lists/ca-dev"
+        },
+        {
+          "type" : "vcs",
+          "url" : "https://github.com/eclipse-ee4j/common-annotations-api"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/jakarta.annotation/jakarta.annotation-api@2.1.1?type=jar"
+    },
+    {
+      "publisher" : "The Apache Software Foundation",
+      "group" : "org.apache.camel",
+      "name" : "camel-tooling-util",
+      "version" : "4.0.0-SNAPSHOT",
+      "description" : "Tooling utilities",
+      "scope" : "optional",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "461f95a5322f21073e434826a525e249"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "4a2f8c196f076912c2b737de8afaef98ab7ec1c6"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "ae0b8719313515fe6ae7eb9d6b3f2b24726232c92612e90f7ca8670cc23c3e4b"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "67b0bc7390d38d1342aeb38d8eaa7aaadd5f7da5381911c5303aab60bc8665b2fd3eb737ebfc895d97af2b9afcc9a8072b4721e68ab617479e3c75c3a8cc9551"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "4744f28dba5847ee6563c158fa9868b32f7c41dafc9227c0dbc8f7d51392d26f4114655206033eac8a3af9f3d7b206bc"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "49d1395299a850da1186babaa4faa1f613d2e79fb5693dbc43a140fe6d38eea7f65bb957f0f94203a45859015d318e57"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "8577b691f116c1f6e73a90789e355832a519ab61bd53e29a3dcacff2b949997e"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "9adf33f48284aa42c50d8c9c9eff174108aeaf7c2b01bfa76a6bcd1f414c58df679c04f250b6e375c40bf55554e00d7e7e27555664278b4d535226eedad6aef7"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "Apache-2.0",
+            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/org.apache.camel/camel-tooling-util@4.0.0-SNAPSHOT?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "https://www.apache.org/camel/camel-parent/tooling/camel-tooling-util/"
+        },
+        {
+          "type" : "distribution",
+          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
+        },
+        {
+          "type" : "mailing-list",
+          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
+        },
+        {
+          "type" : "vcs",
+          "url" : "https://github.com/apache/maven-apache-parent/tree/apache-29/camel/camel-parent/tooling/camel-tooling-util"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/org.apache.camel/camel-tooling-util@4.0.0-SNAPSHOT?type=jar"
+    },
+    {
+      "publisher" : "The Apache Software Foundation",
+      "group" : "org.apache.camel",
+      "name" : "camel-tooling-model",
+      "version" : "4.0.0-SNAPSHOT",
+      "description" : "Tooling Model",
+      "scope" : "optional",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "ee5239d65733a9c86324eaa71022a00e"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "305ff70af73bd76b1391961664f8599f9bfd5062"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "fa340914ab686ed08d198edfe5163e5f629b9eaa16f61a8bc34634e1c88a3de2"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "c12da0c1941696a6474b0b081d14422a905082ad910069c488ab1344104e1e929a22f2b716bcf5cf4cb0428a3c94b02df6e5bd83425b7b9369d970962028bac6"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "ddb9c8fd5d5aaa7b92610e562f066a67dd414ec2852553512ab5464ddf78d550ee6154e1992e11a9f0a33ca6601c4053"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "f4d14fa50f0f6e06d45defe2f020624247e996b5e80d397991e46e86bdcac87786645751736265686b708a4eef101463"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "28ec01a9e39bac8653392ab35ce2ea147779ad64daaa968160c86e219549dc75"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "6d75783d01b647f8d0923a9503f874e46e0f8011905ce6919cf38cfc65cb0769d5decd2781beacd4cbd7984d96bd8e5a686feec635fa1c131df32893f9dafd53"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "Apache-2.0",
+            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/org.apache.camel/camel-tooling-model@4.0.0-SNAPSHOT?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "https://www.apache.org/camel/camel-parent/tooling/camel-tooling-model/"
+        },
+        {
+          "type" : "distribution",
+          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
+        },
+        {
+          "type" : "mailing-list",
+          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
+        },
+        {
+          "type" : "vcs",
+          "url" : "https://github.com/apache/maven-apache-parent/tree/apache-29/camel/camel-parent/tooling/camel-tooling-model"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/org.apache.camel/camel-tooling-model@4.0.0-SNAPSHOT?type=jar"
+    },
+    {
+      "publisher" : "The Apache Software Foundation",
+      "group" : "org.apache.camel",
+      "name" : "bom-generator-maven-plugin",
+      "version" : "4.0.0-SNAPSHOT",
+      "description" : "Maven plugin to help generating BOM projects",
+      "scope" : "optional",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "56ec88156de5cc56a2b488cb6a87c450"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "534f9a30aaff88916d5939a79000be3e039651c4"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "e686206d6b47541d97bb31ae9144ca49b06d70b4eb20212ecfc1085129474fe7"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "6992b057939f06f03727d1e1591295205400dc0da05754aad4708ca363d6cb5b3febdab75738ce0bbbfd003028047548b6f553bc5cab46dd94279a30cadb3a79"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "0a380e70d97a917499b868fadf50618579699cdf0dd55c1aa104393637e2fd7d43bf84f0f5d1cbafe442ced411675f25"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "868b2343526f3c1cb0992f853b2170e23ba42f02dd08ca5aedc6880934723bd8ba4ab18d2dd464ed431740affc2605fb"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "1a2eacbeb5b6c100233029f3fcf0dec1264db697e862ab51cfd8144af618fab5"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "ce76da550055e8742cb23f43efd34d6010f9e225097504b04bc839285878425bbb67ae5c38209cfd8c7b9fab1d7b40f5b9321676ba393d3ad13326ecb194bd92"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "Apache-2.0",
+            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/org.apache.camel/bom-generator-maven-plugin@4.0.0-SNAPSHOT?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "https://www.apache.org/camel/camel-parent/tooling/tooling-parent/maven-plugins/bom-generator-maven-plugin/"
+        },
+        {
+          "type" : "distribution",
+          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
+        },
+        {
+          "type" : "mailing-list",
+          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
+        },
+        {
+          "type" : "vcs",
+          "url" : "https://github.com/apache/maven-apache-parent/tree/apache-29/camel/camel-parent/tooling/tooling-parent/maven-plugins/bom-generator-maven-plugin"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/org.apache.camel/bom-generator-maven-plugin@4.0.0-SNAPSHOT?type=jar"
+    },
+    {
+      "publisher" : "The Apache Software Foundation",
+      "group" : "org.apache.maven.resolver",
+      "name" : "maven-resolver-api",
+      "version" : "1.9.4",
+      "description" : "The application programming interface for the repository system.",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "780ee20cf4abadbbf9560c83db0e8c5e"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "e5d1d93ef97ccb74cd16e81ecf58e4c244439a40"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "7c51c97722da5abd1623d16f0224229c364a55ecac832833a54c23fe4b3569cd"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "848e3234f323f8d7b924a0b9867b92fbcf903047a2e7aac75ddb6f49333cc1ed3686500a4db7c26dff6d04294a475b45cb62d02610dc8a6f57a51be2ba4c63ce"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "680b259aabb0b87966d165fdb54e7059260283c945b5d5bca759d058172661c8898e8d31784bd56409c0f949e1368f06"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "6c004a1747c765c59ffa8fcbbe03f50f016c0c084876b896f020aeed96191cbc196f74993c671dfaa312def26c7c157e"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "7d502f465e6fb7d817929178b6c1d2e5054e8e5bb5f7df8d045ccdb27b4b9e05"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "c32af5880c96af5cab8b15498aba0667935ab161690a3a6f1804462e3753e968da961de779407c1327de6df18ab7e4396eb4dbd1004f07ea88efe8d802e5f740"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "Apache-2.0"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.9.4?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "https://maven.apache.org/resolver/maven-resolver-api/"
+        },
+        {
+          "type" : "build-system",
+          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-resolver/"
+        },
+        {
+          "type" : "distribution",
+          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
+        },
+        {
+          "type" : "issue-tracker",
+          "url" : "https://issues.apache.org/jira/browse/MRESOLVER"
+        },
+        {
+          "type" : "mailing-list",
+          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
+        },
+        {
+          "type" : "vcs",
+          "url" : "https://github.com/apache/maven-resolver/tree/maven-resolver-1.9.4/maven-resolver-api"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.9.4?type=jar"
+    },
+    {
+      "publisher" : "The Apache Software Foundation",
+      "group" : "org.apache.maven.resolver",
+      "name" : "maven-resolver-util",
+      "version" : "1.9.4",
+      "description" : "A collection of utility classes to ease usage of the repository system.",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "94afc68e23fd00db4416ba859b4e1a6f"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "d8e8476fffba77d4fc193b60cff03e414c78a580"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "aa2cf7d43e84e81a843f87b28541c93527f017ab8d424db86b68a5089cd2b8d8"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "f1e6572fa514bb0ca0a2a5852357f9a6c1ac851bb362cc0403be41a346a7fd793d89d63c7ce2b455712c08f6296307082d2adae1847c4c4352147d8b6eae041e"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "c81fe27835f193cb93e4c042bf4487b7e912ae6333d8a26d3d597a899c5bd83dbbfc298f55cfe03665475eda855e4fa9"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "d95377dd1bd730758d9dd2635b7a1df305ecbd8af6c5d089b176c00fd302bcab93aebad45d41b55c0bbc5d2994f33f1e"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "4d0a064ab5e936e9a6eabe0109b7eccb9bdafa9cb3e9d33f3c86d0734a180194"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "11ea6ed4adc4e7b9a93156acac9c15a8e52b8faa6af3251f7fdda99952a9ce65d3298f505c3ebf98692d4fce296ffdac21d2a5b5785ab7312dcb8d5d27f8ccc4"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "Apache-2.0"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/org.apache.maven.resolver/maven-resolver-util@1.9.4?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "https://maven.apache.org/resolver/maven-resolver-util/"
+        },
+        {
+          "type" : "build-system",
+          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-resolver/"
+        },
+        {
+          "type" : "distribution",
+          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
+        },
+        {
+          "type" : "issue-tracker",
+          "url" : "https://issues.apache.org/jira/browse/MRESOLVER"
+        },
+        {
+          "type" : "mailing-list",
+          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
+        },
+        {
+          "type" : "vcs",
+          "url" : "https://github.com/apache/maven-resolver/tree/maven-resolver-1.9.4/maven-resolver-util"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/org.apache.maven.resolver/maven-resolver-util@1.9.4?type=jar"
+    },
+    {
+      "publisher" : "Eclipse Foundation",
+      "group" : "jakarta.xml.bind",
+      "name" : "jakarta.xml.bind-api",
+      "version" : "4.0.0",
+      "description" : "Jakarta XML Binding API",
+      "scope" : "optional",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "b5132a66e2d3a60904f8035a1f8a34a8"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "bbb399208d288b15ec101fa4fcfc4bd77cedc97a"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "57e3796ad5753640088f5f9d3c53c183f2c250b7dad90529ea3e19a5515aa122"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "3628ea2ce89380f3d1c09aba611d5b1cf0b53e2a2f87689112e8153b9409995ebc9c6ab1e0e7cfcee194c8233604473bcd8e7b6c4b2aba4e0ef220332208ce70"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "92170801cbeef42dfe5f14f008422fec5e17e4ef172eb2fdfd6d9f70bf269a0609b39187bf0c0f0cd6aae11502d28d37"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "559bc1752bcb888736fd48354363715676bff1f8b541239308d5510a19572430a5ba553cf7b9460149e9460b54486485"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "040475238bcea57cc293d184c25af8f88e058285e66be3e48469561fa820914b"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "49e69f0794ef9d4f37a11a847cb76f196b03ceb02858904bcfabd4832f2d0f51d21b1361325fd75b07f2195f83994e3f3bc519ffb4f9e227618a8a299f942d7a"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "BSD-3-Clause"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@4.0.0?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "https://github.com/eclipse-ee4j/jaxb-api/jakarta.xml.bind-api"
+        },
+        {
+          "type" : "distribution",
+          "url" : "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/"
+        },
+        {
+          "type" : "issue-tracker",
+          "url" : "https://github.com/eclipse-ee4j/jaxb-api/issues"
+        },
+        {
+          "type" : "mailing-list",
+          "url" : "https://dev.eclipse.org/mhonarc/lists/jaxb-dev"
+        },
+        {
+          "type" : "vcs",
+          "url" : "https://github.com/eclipse-ee4j/jaxb-api.git/jakarta.xml.bind-api"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@4.0.0?type=jar"
+    },
+    {
+      "publisher" : "Eclipse Foundation",
+      "group" : "jakarta.activation",
+      "name" : "jakarta.activation-api",
+      "version" : "2.1.0",
+      "description" : "Jakarta Activation API 2.1 Specification",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "7c79641566f97305e17c5f7b9bb33fc3"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "a58861b5deac5e151140511cf57d6b80a83f2d20"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "56e8d994095fe49c28138c60291482f66f18d12ac2b720e938697dce6a3135c7"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "53026e23571e77b9696cf02d1eeb20295b7199a169c12db9807f2ef2512eff859b37108b96bfdbcd2c9f4a66728d12ad8182b5548146897cdc2ad49e7b2b2ebc"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "2e835f36fa8c90490cd4f543062f3ce548175fc97b3dfa2ab3c63f2dcd59c57060a196ace53933639399657f6aec9e5c"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "bde529fca53e87d22908b4794730a03a2fa29b62ba8cce07edd4e10e34d98cd43a7b0e449241010ce55e962ee4140837"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "be51f4c74f02fb8c98fca209dc5d33ed89dfb240c882e790974c06bef563a6ee"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "835e222a4ed4e31f570afd5b10b1935ff8fe4453ce79e340cb021229cc186586e9461411ce7749798a97122794bc3a1965ab770f9682bfb68f6b740e41c50943"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "BSD-3-Clause"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/jakarta.activation/jakarta.activation-api@2.1.0?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "https://github.com/eclipse-ee4j/jaf"
+        },
+        {
+          "type" : "distribution",
+          "url" : "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/"
+        },
+        {
+          "type" : "issue-tracker",
+          "url" : "https://github.com/eclipse-ee4j/jaf/issues/"
+        },
+        {
+          "type" : "mailing-list",
+          "url" : "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/"
+        },
+        {
+          "type" : "vcs",
+          "url" : "https://github.com/eclipse-ee4j/jaf"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/jakarta.activation/jakarta.activation-api@2.1.0?type=jar"
+    },
+    {
+      "publisher" : "The Apache Software Foundation",
+      "group" : "org.apache.camel",
+      "name" : "camel-util-json",
+      "version" : "4.0.0-SNAPSHOT",
+      "description" : "A json simple parser that preserves the ordering in Map as read from JSon source",
+      "scope" : "required",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "072509d12891217dcbbeab4e72b6ca25"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "8deda60c5056c9993054f16b27280dd1b8e5ffc2"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "ace7979114071be530d949a02283e41251581d600d885bfac6f8595fcfba1005"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "211362b9f1bdffea5d5f97b1b17831a4e95f63f512fcd1b492c13bb4f933839fff011ecc2c9fe1c680f1ebced18fa49d70e306fc9b72eaea812f2f0c652ee940"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "aee5afcfe5712464e63b3b9e193756ec2eaba855b04a5ab54f0727ace2e4c6bcc4fa54084e339bc9fb77c7d93dfe6f21"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "c1aad876654dbee8d0c180ae447c4f381eec9ec9525ce34188802a57f55dbb5d7fe1fc1bc0b59f4a8e2191233054d458"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "84ea63c15e57da0cb4632fd62d93c5a44fec1e797d247df851efabdba378818e"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "1249c60e958586954ccced6cde0907c0f37b99a9232dcd93b59f007c7842f3f6e5f951441e9cfa553cb1286e27b034954ef2241c4a1a85a9f870fa566b298056"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "Apache-2.0",
+            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/org.apache.camel/camel-util-json@4.0.0-SNAPSHOT?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "https://www.apache.org/camel/camel-parent/tooling/camel-util-json/"
+        },
+        {
+          "type" : "distribution",
+          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
+        },
+        {
+          "type" : "mailing-list",
+          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
+        },
+        {
+          "type" : "vcs",
+          "url" : "https://github.com/apache/maven-apache-parent/tree/apache-29/camel/camel-parent/tooling/camel-util-json"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/org.apache.camel/camel-util-json@4.0.0-SNAPSHOT?type=jar"
+    },
+    {
+      "publisher" : "JBoss by Red Hat",
+      "group" : "org.mvel",
+      "name" : "mvel2",
+      "version" : "2.4.14.Final",
+      "description" : "MVEL is a powerful expression language for Java-based applications. It provides a plethora of features and is suited for everything from the smallest property binding and extraction, to full blown scripts.",
+      "scope" : "optional",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "3a27272e52246d37dd6a19eb8be65f58"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "4fdeb74adee5162091ab80cfe8adef78af8cf140"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "ad0ff955c33d25187cab4ba8840ccea2bdf0fb689843fbb5f47f50055e9b4b3b"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "c0bfd55ea6845e72ac449c4b63130481f972caff9e4caf3617c57f90190ddb5c5a9b5a7c30312c02747f84d49a34daf549e82418478fd7a3ca0049b865377b90"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "0620beaba1da0fc2d9b487d18d60eb1188e6230acb9f7c374e3f941fd692e14e7f1fedf3f781103a079fd69a2d2d5b79"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "9132be0f27c08235671ba156cb14d8891abf70defef5bbfdc90ea316cd26692adf5af412567ee8aad6648bd9066e7381"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "872ad121e283d36454ac3f15c54896811e4b97787f9c6e6bf07293143ca19534"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "0162a23f26519628567fdb8e6acc827ed6c2f4203c2e27cd54669e9d83fe05e12fec16378cf9a9155c3ff4e7272caef9cbe001e15eacebf0983541023aedeb0b"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "Apache-2.0"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/org.mvel/mvel2@2.4.14.Final?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "http://mvel.codehaus.org/"
+        },
+        {
+          "type" : "distribution",
+          "url" : "https://repository.jboss.org/nexus/service/local/staging/deploy/maven2/"
+        },
+        {
+          "type" : "issue-tracker",
+          "url" : "http://jira.codehaus.org/browse/MVEL"
+        },
+        {
+          "type" : "mailing-list",
+          "url" : "http://dir.gmane.org/gmane.comp.java.drools.user"
+        },
+        {
+          "type" : "vcs",
+          "url" : "scm:git:git@github.com:mvel/mvel.git"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/org.mvel/mvel2@2.4.14.Final?type=jar"
+    },
+    {
+      "publisher" : "The Apache Software Foundation",
+      "group" : "org.apache.maven",
+      "name" : "maven-core",
+      "version" : "3.8.6",
+      "description" : "Maven Core classes.",
+      "scope" : "optional",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "92b05ed72c78a0ddca876d73e9a6b87c"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "f945f1f19452214d360d453d9357275313f1cfd9"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "439550da8d5451f84cbc6806df7cdccc30c4bbf59456659af95aac907bf658e1"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "788040d5eee543e89143a5fd3b234596f8b982939fe5fd5ef687515f6b28caee0f42deb262016d61ac37d60fcd03db5b4e7a823a746cecbb70fb1babe1cf8e91"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "140f28d2a6af2073f34761c7d5bb2d514c64b85abfed17149f1035b8cbd1516809962e78de534479136c750e1034979d"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "5d7f70585d1c41ab5f2bc5d7d09f1681c1029d20602cab50eb0d1f1fefdb29276a31bb365b54a261637d6662f71befcf"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "a8967017ac24ca7dece5312be999e0d2b4260b04c9794d025cc9f22e49cd90f9"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "119440051ffa4d53e23a50fdc92e71892b4dd8ee13b6cd5b27093ea6a432ecae380eb1ede2075e24f79598e6fb1a922833959561a41d2a6d8ba8f989efe49f89"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "Apache-2.0"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/org.apache.maven/maven-core@3.8.6?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "https://maven.apache.org/ref/3.8.6/maven-core/"
+        },
+        {
+          "type" : "build-system",
+          "url" : "https://builds.apache.org/job/maven-box/job/maven/"
+        },
+        {
+          "type" : "distribution",
+          "url" : "https://maven.apache.org/download.html"
+        },
+        {
+          "type" : "issue-tracker",
+          "url" : "https://issues.apache.org/jira/browse/MNG"
+        },
+        {
+          "type" : "mailing-list",
+          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
+        },
+        {
+          "type" : "vcs",
+          "url" : "https://github.com/apache/maven/tree/maven-3.8.6/maven-core"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/org.apache.maven/maven-core@3.8.6?type=jar"
+    },
+    {
+      "publisher" : "The Apache Software Foundation",
+      "group" : "org.apache.maven",
+      "name" : "maven-model",
+      "version" : "3.8.7",
+      "description" : "Model for Maven POM (Project Object Model)",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "91c8c6b449ca34033832f268df64873b"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "a6a1f77aa36d158c8ec7917112192083b9467cd4"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "6fcadaee2a885c43b158f2e3833d0a3ecb68efc62e25ea5b11f77cc0716a7b2d"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "f24ea0d84444002c3bce0cc2529638125dcc7b2d8dbf1054d43438702672da499deac20d3a9432ed92fd88005d6d6660f26902011ec8914aee40650af0f9ac8a"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "e076fd71ed4f450fe18fa80fa29b0967a1ae95ac3729f1d42b7b77d05b02f18642a787a1671b975df1c40f7dbc7399ba"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "82d7a280f6427218cb64577d41de7e974368a088cedd8f495cca0a64e73b3e29786c2ce15420bf5c348d313303eccfb9"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "9079dd0edebc0a9b12fba1700116c09b958e5268a522a84ed5f61cea90859755"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "fbc8f496338129a4ca92b3b3a0a8890a45a908d0bf3bfd12612abd3152e0311275c7ba8a9b01a84b4522bf209a1508fffd40c5047167252087fc4337531d41f8"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "Apache-2.0"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/org.apache.maven/maven-model@3.8.7?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "https://maven.apache.org/ref/3.8.7/maven-model/"
+        },
+        {
+          "type" : "build-system",
+          "url" : "https://builds.apache.org/job/maven-box/job/maven/"
+        },
+        {
+          "type" : "distribution",
+          "url" : "https://maven.apache.org/download.html"
+        },
+        {
+          "type" : "issue-tracker",
+          "url" : "https://issues.apache.org/jira/browse/MNG"
+        },
+        {
+          "type" : "mailing-list",
+          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
+        },
+        {
+          "type" : "vcs",
+          "url" : "https://github.com/apache/maven/tree/maven-3.8.7/maven-model"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/org.apache.maven/maven-model@3.8.7?type=jar"
+    },
+    {
+      "publisher" : "The Apache Software Foundation",
+      "group" : "org.apache.maven",
+      "name" : "maven-settings",
+      "version" : "3.8.7",
+      "description" : "Maven Settings model.",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "15f27ff0da8cfa9d9ef947f31daa4d6a"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "2fb7eb81ea304e0b7dc0da3cc986ee6887915644"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "00c098d2be3b81da037fa2d41179bf14938edb12ec3ada2c8df640c4a67710bb"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "55188cba897d4e9afbbbd52a0f99074ec7537a14c5618027660427a3a04be2c40a65da879b8d1641469aaf1630fea27b16a6177d32a2b6ca402c73fc19c53e77"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "c5ae30dd808c0984f07bcc7d5e0593a943eb4821c2b82589e79372b9793eed17f4ca42da3159ff4901028d05cdf1953f"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "7c68841b7c613f09fff8f2fc49f955ec03d2599550c0259d8ebd9be962b8f91e07c27a00fce303db9ed11ec8032ddc12"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "ca321ef5c917af55c1a06d44d8eb5a1e070eb1df15e06f40fbf75c7ceaf5e6c1"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "1f3fa5c65486cdf90a0b1106574c4d7855a6e0eb2e0cceb5ef1bcfa1bb2440ce9e7bd11e466b10d187c27a9e02342006990b0ca2aacec02a3f1f8e66e4f6f857"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "Apache-2.0"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/org.apache.maven/maven-settings@3.8.7?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "https://maven.apache.org/ref/3.8.7/maven-settings/"
+        },
+        {
+          "type" : "build-system",
+          "url" : "https://builds.apache.org/job/maven-box/job/maven/"
+        },
+        {
+          "type" : "distribution",
+          "url" : "https://maven.apache.org/download.html"
+        },
+        {
+          "type" : "issue-tracker",
+          "url" : "https://issues.apache.org/jira/browse/MNG"
+        },
+        {
+          "type" : "mailing-list",
+          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
+        },
+        {
+          "type" : "vcs",
+          "url" : "https://github.com/apache/maven/tree/maven-3.8.7/maven-settings"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/org.apache.maven/maven-settings@3.8.7?type=jar"
+    },
+    {
+      "publisher" : "The Apache Software Foundation",
+      "group" : "org.apache.maven",
+      "name" : "maven-settings-builder",
+      "version" : "3.8.6",
+      "description" : "The effective settings builder, with inheritance and password decryption.",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "735e76ad7c32c20bd4e46498492a00be"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "e5c92138dffd1f9e5454cd8224cf8e18253b1803"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "59593889c5056ac5fdcf975143957cdaac8bc8a4260e2bac42136df427e284b8"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "7728fcf96728ebedcecc4fe06f32d4285c28740037d20d2cf41bcc67d58e2c3a5b0fb0918277cfd0e3e37e2f482a591ca3229d651e191960eac4e0c69af43636"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "8290e2de5d4cd92cfb7843a9c6457c632bc4d1072b5c02338303eff8cbcc2f3e84f26032d198ff91d2020f228c30f044"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "2c17eb56f9d51367b2d3a696b225c908c491ca629b203a4599dce832c04215aeccb0a1111803ee15e1a99a5c78905b0b"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "c0f42e4c14ed42b6bacf7cb7109ab7f1751d08968b76717c4c0ede9f17c9669b"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "e18a0e2c832540bcf4653d6fc6e5151cb39785116d1fe13e1a403944b8ff0302e3b3fe0fdae7ae02414d1e7b015e98eb5e78b38f47c7b17061a085279d64855f"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "Apache-2.0"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/org.apache.maven/maven-settings-builder@3.8.6?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "https://maven.apache.org/ref/3.8.6/maven-settings-builder/"
+        },
+        {
+          "type" : "build-system",
+          "url" : "https://builds.apache.org/job/maven-box/job/maven/"
+        },
+        {
+          "type" : "distribution",
+          "url" : "https://maven.apache.org/download.html"
+        },
+        {
+          "type" : "issue-tracker",
+          "url" : "https://issues.apache.org/jira/browse/MNG"
+        },
+        {
+          "type" : "mailing-list",
+          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
+        },
+        {
+          "type" : "vcs",
+          "url" : "https://github.com/apache/maven/tree/maven-3.8.6/maven-settings-builder"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/org.apache.maven/maven-settings-builder@3.8.6?type=jar"
+    },
+    {
+      "publisher" : "Codehaus Plexus",
+      "group" : "org.codehaus.plexus",
+      "name" : "plexus-sec-dispatcher",
+      "version" : "2.0",
+      "description" : "The Plexus project provides a full software stack for creating and executing software projects.",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "e68635a721630177ac70173e441336b6"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "f89c5080614ffd0764e49861895dbedde1b47237"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "873139960c4c780176dda580b003a2c4bf82188bdce5bb99234e224ef7acfceb"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "ad4e814c8baff780a4eee064903e52b09ae00420a59fb075ef72dbb8d64d12d3d5009b03d56c15f93587d931c3a7f06cad6351ab2dc9415ccc6eeab0daebeb07"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "4af3426b6409cce7d5fcda4e2af407fc2dbae9873e06d98332bcd032c0039d9080a291e42223ea2bbef9825d3d63493f"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "41720858dd5804f9cb26a8878c16dbdf0372a90e99c037809fe76c3de2c5517ba252af8f8cdf534c1a09900702e6a917"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "50fa723aefb551a3fd5888375d01f1d776c534cdf833baea392818e9bfa8166e"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "a43f823d31b377c0c7ec8d36ace69e5dbcdaf4dc4ebb45ff0561fea9e12d74c06090ee24b29b06769d4031693faf5d7e3146583d3a64bfaef6b7c79773a8831f"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "Apache-2.0"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/org.codehaus.plexus/plexus-sec-dispatcher@2.0?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "https://codehaus-plexus.github.io/plexus-sec-dispatcher/"
+        },
+        {
+          "type" : "distribution",
+          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
+        },
+        {
+          "type" : "issue-tracker",
+          "url" : "https://github.com/codehaus-plexus/plexus-sec-dispatcher/issues"
+        },
+        {
+          "type" : "mailing-list",
+          "url" : "http://archive.plexus.codehaus.org/user"
+        },
+        {
+          "type" : "vcs",
+          "url" : "https://github.com/codehaus-plexus/plexus-sec-dispatcher.git"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/org.codehaus.plexus/plexus-sec-dispatcher@2.0?type=jar"
+    },
+    {
+      "publisher" : "Codehaus Plexus",
+      "group" : "org.codehaus.plexus",
+      "name" : "plexus-cipher",
+      "version" : "2.0",
+      "description" : "The Plexus project provides a full software stack for creating and executing software projects.",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "55d612839faf248cbe3e273969c002c2"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "425ea8e534716b4bff1ea90f39bd76be951d651b"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "9a7f1b5c5a9effd61eadfd8731452a2f76a8e79111fac391ef75ea801bea203a"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "8f187b07867a7c29d77454aae4b76479300238d9c4e777c1afa2aebe33b88dab916e29111dd55acac1341849f4579fe91a5470fdd45ccba0e05709c2ce3a1d65"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "6973eefe06a8992aa8db1775c0f43a84cbef54eeea9122a5a30c362af3e4fb13b6cbd6fba229142e2a4495f97d71f409"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "ea780d218f96e61005c5582bf3785ddbb33b53ccb4efbffd76ab58166cf261d3c256d52fea28759380684b7e9b0db8eb"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "e2e51d5350ffdce341464ddcdf9ae60108bff40bf5174dc6be43e33ffcd84af9"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "f3e17ea31bdefc8094ba3495b8231ec7f90c7175839b009d9fd230110b66ac4c68c912fda1a6e644d93dbce639d738e2535f1ade5841e072a604f5f8ac536729"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "Apache-2.0"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/org.codehaus.plexus/plexus-cipher@2.0?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "https://codehaus-plexus.github.io/plexus-cipher/"
+        },
+        {
+          "type" : "distribution",
+          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
+        },
+        {
+          "type" : "issue-tracker",
+          "url" : "https://github.com/codehaus-plexus/plexus-cipher/issues"
+        },
+        {
+          "type" : "mailing-list",
+          "url" : "http://archive.plexus.codehaus.org/user"
+        },
+        {
+          "type" : "vcs",
+          "url" : "http://github.com/codehaus-plexus/plexus-cipher"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/org.codehaus.plexus/plexus-cipher@2.0?type=jar"
+    },
+    {
+      "publisher" : "The Apache Software Foundation",
+      "group" : "org.apache.maven",
+      "name" : "maven-builder-support",
+      "version" : "3.8.6",
+      "description" : "Support for descriptor builders (model, setting, toolchains)",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "8648771aa46a6bdbb81de74849ba9385"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "4d22a3faa8880efef2e960bb8a00c2a0b351c46a"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "3d3d9753f36e88039e63f8757bfe643830d69443e168c4ecdaf5f47a2c1d94ce"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "ac6c85e36f216b6b853e242e80e86e709e03d0a9e19ec3ac5ae3ef555cf94d29460a2ac2b5c032babeb65904ae401432d128aa9a3e91cbf344e323af506addef"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "92a25951353f17e77531d265e57c754b74a2c6e0a92024e3330142084cb39c17211d4500c56daf119c425648ebd00bec"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "eee03bc99ef32b954f4b3d684bf54655e6ac33edefe5457ca9b5644ca8325b2fecb6549540099fdf9edb10288199a1ef"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "5d48b6e1c39f06b2a66e6bd80f424bd14b444ed02c06925a5a20b03d6621b577"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "bb9df36c1a50f34f6d4639f5977639f0d0b6a67a472b2558a4f40947caa436fb500e2be5aa081f0dccfca4820b3c771c6de5cbbb0c91d7d7c12ebc16a6d39a47"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "Apache-2.0"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/org.apache.maven/maven-builder-support@3.8.6?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "https://maven.apache.org/ref/3.8.6/maven-builder-support/"
+        },
+        {
+          "type" : "build-system",
+          "url" : "https://builds.apache.org/job/maven-box/job/maven/"
+        },
+        {
+          "type" : "distribution",
+          "url" : "https://maven.apache.org/download.html"
+        },
+        {
+          "type" : "issue-tracker",
+          "url" : "https://issues.apache.org/jira/browse/MNG"
+        },
+        {
+          "type" : "mailing-list",
+          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
+        },
+        {
+          "type" : "vcs",
+          "url" : "https://github.com/apache/maven/tree/maven-3.8.6/maven-builder-support"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/org.apache.maven/maven-builder-support@3.8.6?type=jar"
+    },
+    {
+      "publisher" : "The Apache Software Foundation",
+      "group" : "org.apache.maven",
+      "name" : "maven-repository-metadata",
+      "version" : "3.8.7",
+      "description" : "Per-directory local and remote repository metadata.",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "9300bb51021bcc2558fee4deb19c3ec5"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "42f7cc6120c8a755ed8c3c3bb5dcd5366d2e11ee"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "ae07c180da5ae7784915cf3980e90de361ea4d1bc5337b969694f50339efd9e1"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "75a7a23ea04adcedf56db6817f91520f5b49dfc330b368a508a9d7f61cf5d70642dd55fe1b2cf8b2bdca835cfc090441819dd5b73b70c633c50cab81bd3e87d6"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "072998614ab4d420da5c9d3d5db2a7e314bc4ec42562f7c157ba2d28dd9d1b74d0d449ea0d26566fe6f11525b8cc19e6"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "6ae2c8d801109871deabc775d5f1dd5f1d869dcc24aba4933ff493eb73ebf1667d90d7e1f50b990643817d901ece4bcd"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "7c764f3cb580a545421cff0b8e490445f689421afdb23741299b5547a5206846"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "364940fd87cb330447926e128979ee16e49899fc8e41a2234662bc2480dc55cf4e2be17edd61177b444703c717939f3efca4af48ae33d4e4fe410a881fbbc394"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "Apache-2.0"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/org.apache.maven/maven-repository-metadata@3.8.7?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "https://maven.apache.org/ref/3.8.7/maven-repository-metadata/"
+        },
+        {
+          "type" : "build-system",
+          "url" : "https://builds.apache.org/job/maven-box/job/maven/"
+        },
+        {
+          "type" : "distribution",
+          "url" : "https://maven.apache.org/download.html"
+        },
+        {
+          "type" : "issue-tracker",
+          "url" : "https://issues.apache.org/jira/browse/MNG"
+        },
+        {
+          "type" : "mailing-list",
+          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
+        },
+        {
+          "type" : "vcs",
+          "url" : "https://github.com/apache/maven/tree/maven-3.8.7/maven-repository-metadata"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/org.apache.maven/maven-repository-metadata@3.8.7?type=jar"
+    },
+    {
+      "publisher" : "The Apache Software Foundation",
+      "group" : "org.apache.maven",
+      "name" : "maven-model-builder",
+      "version" : "3.8.6",
+      "description" : "The effective model builder, with inheritance, profile activation, interpolation, ...",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "b3a622ed6c8d38d4ac94068db3f34074"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "8323a726c657becbffc8ea807970935dde3e3903"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "5ca374eb4e6194ec0cd7004366decd39d4d048145a6380f99741a9414f38cebb"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "df9002e18c48855d0636c319b459642d877be1d8e837db36e98e885f76ecb61de801e06455bfb28145ccf419589d7c9a3276ea4d724e1268d57cee2f13211660"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "93e81f63cdb9397174b9c991e4283180b74d5a9c9214e01130a56b5a4f99426e4d0822f960ab9bf973e1047d1e95b862"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "0cc43e9e2e54f0b2a6ca14b5d6a90398fe872978530d724e64958bd78d817a8ed115d7666758e01408f396fb94346c36"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "60fb53d2952bc5a68b583222ff4dade8b92375dd7b096a5fc110b88bf24d75d6"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "389a53bb666a9250f8f656e8a130edf1b8251dd199cbfa456214bdb5984176c34e384961e0da21606177c5b092bf8dfd77840516c7c4db4dfea5a1df7ed53989"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "Apache-2.0"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/org.apache.maven/maven-model-builder@3.8.6?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "https://maven.apache.org/ref/3.8.6/maven-model-builder/"
+        },
+        {
+          "type" : "build-system",
+          "url" : "https://builds.apache.org/job/maven-box/job/maven/"
+        },
+        {
+          "type" : "distribution",
+          "url" : "https://maven.apache.org/download.html"
+        },
+        {
+          "type" : "issue-tracker",
+          "url" : "https://issues.apache.org/jira/browse/MNG"
+        },
+        {
+          "type" : "mailing-list",
+          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
+        },
+        {
+          "type" : "vcs",
+          "url" : "https://github.com/apache/maven/tree/maven-3.8.6/maven-model-builder"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/org.apache.maven/maven-model-builder@3.8.6?type=jar"
+    },
+    {
+      "publisher" : "The Apache Software Foundation",
+      "group" : "org.apache.maven",
+      "name" : "maven-resolver-provider",
+      "version" : "3.8.6",
+      "description" : "Extensions to Maven Resolver for utilizing Maven POM and repository metadata.",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "78472f13757c6190aea51cce74c9abd4"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "c6dadedc9f6b5c1c02d0a93afd1857460b0f501d"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "fbb1abf0346ba84149a0ffcb7b688a06f6e06b49af9c151f4ca01c0fc5ae3ea9"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "8adef2a478599da916505f5e64c786f21a796d49e8790408e8a621abdbe4ea26b5579b8a0250a1dd2321ac780e50d52a837cf260dc793d24db30a0b939a47d94"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "4e03cac26ba54c2af424983614baa6dc36a296f8903a94bd7f14ce6ec38283bce777654f44023bee3a4a6d50b7c33515"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "0691e6738d0814e6b0fab3d5521bd5dd587d8af1c060c24b1ff0c607ea2a58dd19b12792547121117058a1d92eb4adf9"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "210f3161f2ce10d8896d02a9a07a81a825e097a6e2f4c7fc988e08b9fb348693"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "b400b35e25d2a5e530f731481785ab93305808b84234519cf47c940ff3a77d69903f00de52341ece6d55391d47065f5f6b2f65293a62c0938dc8dca96c32f11b"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "Apache-2.0"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/org.apache.maven/maven-resolver-provider@3.8.6?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "https://maven.apache.org/ref/3.8.6/maven-resolver-provider/"
+        },
+        {
+          "type" : "build-system",
+          "url" : "https://builds.apache.org/job/maven-box/job/maven/"
+        },
+        {
+          "type" : "distribution",
+          "url" : "https://maven.apache.org/download.html"
+        },
+        {
+          "type" : "issue-tracker",
+          "url" : "https://issues.apache.org/jira/browse/MNG"
+        },
+        {
+          "type" : "mailing-list",
+          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
+        },
+        {
+          "type" : "vcs",
+          "url" : "https://github.com/apache/maven/tree/maven-3.8.6/maven-resolver-provider"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/org.apache.maven/maven-resolver-provider@3.8.6?type=jar"
+    },
+    {
+      "publisher" : "The Apache Software Foundation",
+      "group" : "org.apache.maven.resolver",
+      "name" : "maven-resolver-impl",
+      "version" : "1.6.3",
+      "description" : "An implementation of the repository system.",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "2145b5eb9ddd8bdf9f3171122c703d4b"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "2714ffe60bd71259a41b3e4816122504b5f2db93"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "17aaebe6e3e59df8cb5b4ec210196f7084637312b9bc4ff14cb77ad1ae3c381b"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "ef011e67152290379da6db1ce256b70dc436eb1596d58c38ee5bf9df65fbe75ed2ddc7768f6c61901c8cb83af88c42ad0b7bf24ad1775949eb4522511825280d"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "37f1caeeb7f6b3a7358e457a2a9c6f2d0f037f2603f82d580a458d6e687a72335355d931885a2156ffc7b81abb715a82"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "200626d2ecc3736cdc13526c4ba88dcc664a1cc4305d8c9c03a9aefdd46759c956188a6908e7b845802fb30bc5818edf"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "051baae5e07302175081aa2163a03364fe15d7bea230a81f13302552c47c7db7"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "c6c926e1d8ae8874b8467b9d9ee0fdf01655aa5591ed69fcc8051438d80ea848b318a56febd6995ce9c4b9e26e8edf1fa561cd46a84c3a6d12e307dc484ae5df"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "Apache-2.0"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/org.apache.maven.resolver/maven-resolver-impl@1.6.3?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "https://maven.apache.org/resolver/maven-resolver-impl/"
+        },
+        {
+          "type" : "build-system",
+          "url" : "https://ci-builds.apache.org/job/Maven/job/maven-box/job/maven-resolver/"
+        },
+        {
+          "type" : "distribution",
+          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
+        },
+        {
+          "type" : "issue-tracker",
+          "url" : "https://issues.apache.org/jira/browse/MRESOLVER"
+        },
+        {
+          "type" : "mailing-list",
+          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
+        },
+        {
+          "type" : "vcs",
+          "url" : "https://github.com/apache/maven-resolver/tree/maven-resolver-1.6.3/maven-resolver-impl"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/org.apache.maven.resolver/maven-resolver-impl@1.6.3?type=jar"
+    },
+    {
+      "publisher" : "The Apache Software Foundation",
+      "group" : "org.apache.maven.resolver",
+      "name" : "maven-resolver-spi",
+      "version" : "1.6.3",
+      "description" : "The service provider interface for repository system implementations and repository connectors.",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "39ccba873cf05b2b5405d24a55133a37"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "176425f73fe768bf9cdb8b5a742e7a00c1d8d178"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "17441a39045ac19bc4a8068fb7284facebf6337754bf2bf8f26a76b5f98ed108"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "2972b721213bfee654460468b2a2aa50546d7f1957be40d955728875af3a9801f8d78a2f796e832b9332d1f90ffb5ccb651289e7b5c8a175628b21b13594df43"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "e497fcbb12f4d64ad35a506c370ebf611c08a26b36bb592d9dc31a70b4244b06d57b10340912bb1d419e4791de4d746d"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "92cc0dfd2087a4a33fffc796987753f36024d892db64fbe8f2a30a08de20cb7fff1204c65b1df0293d59a3204b70599b"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "79a77fc7ce9a0a1383e9636d34f2bd46cf16a7e65f808e199856c2551e26a5b4"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "af7b9a702626ba48d9f5ae50001831167f20c13b2a416e45c2241de7d96fcc113bdc75b04d21a8b2d88e86cf8629c72d9f0d46d19ee64d904c4cf52f479be58c"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "Apache-2.0"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/org.apache.maven.resolver/maven-resolver-spi@1.6.3?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "https://maven.apache.org/resolver/maven-resolver-spi/"
+        },
+        {
+          "type" : "build-system",
+          "url" : "https://ci-builds.apache.org/job/Maven/job/maven-box/job/maven-resolver/"
+        },
+        {
+          "type" : "distribution",
+          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
+        },
+        {
+          "type" : "issue-tracker",
+          "url" : "https://issues.apache.org/jira/browse/MRESOLVER"
+        },
+        {
+          "type" : "mailing-list",
+          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
+        },
+        {
+          "type" : "vcs",
+          "url" : "https://github.com/apache/maven-resolver/tree/maven-resolver-1.6.3/maven-resolver-spi"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/org.apache.maven.resolver/maven-resolver-spi@1.6.3?type=jar"
+    },
+    {
+      "publisher" : "The Eclipse Foundation",
+      "group" : "org.eclipse.sisu",
+      "name" : "org.eclipse.sisu.plexus",
+      "version" : "0.3.5",
+      "description" : "Plexus-JSR330 adapter; adds Plexus support to the Sisu-Inject container",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "30c4a9fa2137698ed66c8542f1be196a"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "d71996bb2e536f966b3b70e647067fff3b73d32f"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "7e4c61096d70826f20f7a7d55c59a5528e7aa5ad247ee2dfe544e4dd25f6a784"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "38d7dbe023f9751cb5e30bf154e31696590317dc7b7f768811fe0f5940513fcea4665670cd47d0b72ded85453b10f7d129b0b7428b155a41c903c7b56c986e8d"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "2e943a72f0ca201d50ba90b4cf70c3c1f7b5ffc3bbfdee45875bc2f6f2e2a3a93acbba3a2f1e7ffb32b70e041633b6de"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "a7b121732001b6f225b0687e7747993f48b3fc1d9a4325b4321a4c59adae36b49677193f5e31e3b1f11a6cd266e459f3"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "b879a16dd84d8d4f39c1009029b3a3a55e18049c7910f77814a32ca088b56585"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "8f8fbebd2a3024bcf6f2e27e8206e3f3c2b2673217c1220743b1869bf60341490db7d1877d9eaf3c452500690df98ccda11a19bda996b74a6ebedc37bc9bc554"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "EPL-1.0"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.3.5?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "http://www.eclipse.org/sisu/org.eclipse.sisu.plexus/"
+        },
+        {
+          "type" : "build-system",
+          "url" : "https://hudson.eclipse.org/sisu/job/sisu-plexus-nightly/"
+        },
+        {
+          "type" : "distribution",
+          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
+        },
+        {
+          "type" : "issue-tracker",
+          "url" : "https://bugs.eclipse.org/bugs/enter_bug.cgi?product=Sisu&component=Plexus&format=guided"
+        },
+        {
+          "type" : "mailing-list",
+          "url" : "http://dev.eclipse.org/mhonarc/lists/sisu-dev/"
+        },
+        {
+          "type" : "vcs",
+          "url" : "http://git.eclipse.org/c/sisu/org.eclipse.sisu.plexus.git/tree/org.eclipse.sisu.plexus/"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.3.5?type=jar"
+    },
+    {
+      "publisher" : "GlassFish Community",
+      "group" : "javax.annotation",
+      "name" : "javax.annotation-api",
+      "version" : "1.2",
+      "description" : "Common Annotations for the JavaTM Platform API",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "75fe320d2b3763bd6883ae1ede35e987"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "479c1e06db31c432330183f5cae684163f186146"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "5909b396ca3a2be10d0eea32c74ef78d816e1b4ead21de1d78de1f890d033e04"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "2453330b27a0822bba440c28b98ae1d83d60d97dfa2d040562dd5126b3548e0caa040fea3b886ac6feb0a858e6c1bc45b6c5472b180f1f14792e5ca33e355959"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "37a46eaa1d011969d28ff0daaecd67a560169b3ae70c40102331d85a71139ca07110169fe367f484735914ce5c6b86c0"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "e2f8df1aad5867355fd1d3de2374d077e3ad885e6bddac3ce7c7bc72a34097e33bc5dfe960f839a7feb515bd5a92ffd1"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "2e2acc7429faecd2e74c0c441209b1a5b0ccbc245ccd8391425c4b1e4b2fbc94"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "9a28cb34c7761e695ccea04cc6df1e0f9cd18fef59bf50d5943ddc06802e616bc2bd55211e863c65f7f7661f963ba8ee9e569324642b87bc1703dc6f07cba5e3"
+        }
+      ],
+      "licenses" : [
+        {
+          "expression" : "(CDDL-1.0 OR GPL-2.0-with-classpath-exception)"
+        }
+      ],
+      "purl" : "pkg:maven/javax.annotation/javax.annotation-api@1.2?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "http://jcp.org/en/jsr/detail?id=250"
+        },
+        {
+          "type" : "distribution",
+          "url" : "https://maven.java.net/service/local/staging/deploy/maven2/"
+        },
+        {
+          "type" : "issue-tracker",
+          "url" : "http://java.net/jira/browse/GLASSFISH"
+        },
+        {
+          "type" : "vcs",
+          "url" : "http://java.net/projects/glassfish/sources/svn/show/tags/javax.annotation-api-1.2"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/javax.annotation/javax.annotation-api@1.2?type=jar"
+    },
+    {
+      "publisher" : "The Eclipse Foundation",
+      "group" : "org.eclipse.sisu",
+      "name" : "org.eclipse.sisu.inject",
+      "version" : "0.3.5",
+      "description" : "JSR330-based container; supports classpath scanning, auto-binding, and dynamic auto-wiring",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "1b296b0ddd911ed3750b3df93b395cd5"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "d4265dd4f0f1d7a06d80df5a5f475d5ff9c17140"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "c5994010bcdce1d2bd603a4d50c47191ddbd7875d1157b23aaa26d33c82fda13"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "f4790768c0d958b3429a3241abb15f9bb6e2fd7f43a5e034dde6a3a6820e6941c00f10ad084d5c38f8edc144e7acbea7ba3dc8952f01dab41e443803db2a4efc"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "b76e74a0cda6d88c1c03d40e71d238fa13e2070485c026945ee8dc6da62eacb02071a65df35fa3e4d9d6b343a89fb605"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "a2d3bae2f5e518c7d11e584f6b8b7368f3b927c3405f48e27d4225d4e2f4917fb5623c0071fc47f081200b7d754571d1"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "b998bcdf4f8b5550a543865408e94fadcf1dd37ac19ec37269ff5307220b2775"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "e9331e8a1b4281b45abec89dd9b7dd948207ebd7bed6be5978a5792d59327f7a4d4ee87c6f60392021f24f28439ab4ca4b6305ef6528e1c241c7a27c883b5931"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "EPL-1.0"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.3.5?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "http://www.eclipse.org/sisu/org.eclipse.sisu.inject/"
+        },
+        {
+          "type" : "build-system",
+          "url" : "https://hudson.eclipse.org/sisu/job/sisu-inject-nightly/"
+        },
+        {
+          "type" : "distribution",
+          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
+        },
+        {
+          "type" : "issue-tracker",
+          "url" : "https://bugs.eclipse.org/bugs/enter_bug.cgi?product=Sisu&component=Inject&format=guided"
+        },
+        {
+          "type" : "mailing-list",
+          "url" : "http://dev.eclipse.org/mhonarc/lists/sisu-dev/"
+        },
+        {
+          "type" : "vcs",
+          "url" : "http://git.eclipse.org/c/sisu/org.eclipse.sisu.inject.git/tree/org.eclipse.sisu.inject/"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.3.5?type=jar"
+    },
+    {
+      "publisher" : "Google, Inc.",
+      "group" : "com.google.inject",
+      "name" : "guice",
+      "version" : "4.2.2",
+      "description" : "Guice is a lightweight dependency injection framework for Java 6 and above",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "57d2b333c34d0f834189d54b6e59d1a6"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "fa13659f9128f4c011c8e1d06f137083b4876377"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "0f4f5fb28609a4d2b38b7f7128be7cf9b541f25283d71b4e56066d99683aafff"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "78f17b090f34564db0fa6903c966e79d8002903d2604f9605a0d713e770a9c772c11d615a5e112dbb15464b9f8945edff6ac3d23ac84ccb08eb1657ec64d4442"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "b8dbffa5d7d5d747da5bcbf80c5642caf7d845210b6246b3fbe37fe35fb62296a143bd131c394c97a09d78c06e05c4f8"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "77c03af1ee596ff17baf62893037dc7c3b2476a68f928811c94c19c6ef33df0098f6bb4bde97be887797442359a17205"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "d6c7802ae9da1ede2a1fd5bddaec3fadbe6cce96754ac1777abe23656da61616"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "a2f0e757d29e73175af02a00b34f35065080ffc9be10e2445e51df556180e2e10b68216277c384f07729cf4b326061a870d6ced32045ee545c43a7c6cb209821"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "Apache-2.0"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/com.google.inject/guice@4.2.2?classifier=no_aop&type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "https://github.com/google/guice/guice"
+        },
+        {
+          "type" : "build-system",
+          "url" : "https://travis-ci.org/google/guice"
+        },
+        {
+          "type" : "distribution",
+          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
+        },
+        {
+          "type" : "issue-tracker",
+          "url" : "https://github.com/google/guice/issues/"
+        },
+        {
+          "type" : "mailing-list",
+          "url" : "http://groups.google.com/group/google-guice/topics"
+        },
+        {
+          "type" : "vcs",
+          "url" : "https://github.com/google/guice/guice"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/com.google.inject/guice@4.2.2?classifier=no_aop&type=jar"
+    },
+    {
+      "group" : "aopalliance",
+      "name" : "aopalliance",
+      "version" : "1.0",
+      "description" : "AOP Alliance",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "04177054e180d09e3998808efa0401c7"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "0235ba8b489512805ac13a8f9ea77a1ca5ebe3e8"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "0addec670fedcd3f113c5c8091d783280d23f75e3acb841b61a9cdb079376a08"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "3f44a932d8c00cfeee2eb057bcd7c301a2d029063e0a916e1e20b3aec4877d19d67a2fd8aaf58fa2d5a00133d1602128a7f50912ffb6cabc7b0fdc7fbda3f8a1"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "4dddf44338b5aff9580da2532b81c0ac3e1d09e1f28c6db871a55cad442b705dd7791eb07f9d4577d49d0be3673ba783"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "2bd64cbaf769c6e4e85e34f7a6119d89e16fbf55af3fc5d6cbd52eb214c367dec1ac7b9062ee0fb35a2e0acfc7c477e1"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "d4a726b2bf8aa58197021a7d8fca674b4b2790d4c48de43a92f728866a91c2f0"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "830bc3f8328be76897990e9b9fc42eef02623115e456af96ad09b20900ad615519c8c8de60155ac04fb332eaa9510110d52edd13911af76271c71d91cbd789cc"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "name" : "Public Domain"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/aopalliance/aopalliance@1.0?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "http://aopalliance.sourceforge.net"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/aopalliance/aopalliance@1.0?type=jar"
+    },
+    {
+      "group" : "javax.inject",
+      "name" : "javax.inject",
+      "version" : "1",
+      "description" : "The javax.inject API",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "289075e48b909e9e74e6c915b3631d2e"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "6975da39a7040257bd51d21a231b76c915872d38"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "91c77044a50c481636c32d916fd89c9118a72195390452c81065080f957de7ff"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "e126b7ccf3e42fd1984a0beef1004a7269a337c202e59e04e8e2af714280d2f2d8d2ba5e6f59481b8dcd34aaf35c966a688d0b48ec7e96f102c274dc0d3b381e"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "ac04c9f03ccbe35a25deb8b50280a0ca01dbe6aff0dd795d55af6112bfe3cd5817eb82f32fb18378d86cd64b07597190"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "fca090ecb1edeacb9fe865dc515cd1d109b323cd742d4a9733ff199a96ee96e0db4f924079520b9c189ef750f255475d"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "5b0054e39e522de0e0ffc4034d12f72270291fb24d94d5ffc9c4d69c25035fc6"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "fb290f5a70b1efc1dff12f40a0b2d7b94019f66da42e78010c0b8e61f222c4f267b67e356a9e9c346eb801e5515e36243888f280c5cb95c2dd69016a30cadeb9"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "Apache-2.0"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/javax.inject/javax.inject@1?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "http://code.google.com/p/atinject/"
+        },
+        {
+          "type" : "vcs",
+          "url" : "http://code.google.com/p/atinject/source/checkout"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/javax.inject/javax.inject@1?type=jar"
+    },
+    {
+      "publisher" : "Codehaus Plexus",
+      "group" : "org.codehaus.plexus",
+      "name" : "plexus-classworlds",
+      "version" : "2.6.0",
+      "description" : "A class loader framework",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "67e722b27e3a33b33c1b263b99dd7c43"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "8587e80fcb38e70b70fae8d5914b6376bfad6259"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "52f77c5ec49f787c9c417ebed5d6efd9922f44a202f217376e4f94c0d74f3549"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "6a58048d9db54e603b9cfd35373cf695b66dd860bec878c663b4fc53b6b3d44dd5b0c92e7603654911b1f78e63ef277cf6b272fe069a360989138550545f274d"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "e839707ea5c4351f2703c6861ee4d58e08df0f7509110af13d4b3824e6ec5cfd65508fa80cc3f222baf5cf6c4ab5d5ac"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "75389fc7ed9aa3ad33ff317b0d41851fe0073b37aa8c33081722bfafb851493fb0e3b9629f924026fc32841f01399695"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "3aef41be29373137c58c415693b312c95e048731dce519ab88649eae9ba0e492"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "312eff142f86b9e110131dcca69527fbec80478e463fed5a34e2bd628673bce7be9ddb6fe0cda7fab2a119d1f310629413740019e686e9162194984ab6e06bf4"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "Apache-2.0"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/org.codehaus.plexus/plexus-classworlds@2.6.0?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "http://codehaus-plexus.github.io/plexus-classworlds/"
+        },
+        {
+          "type" : "distribution",
+          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
+        },
+        {
+          "type" : "issue-tracker",
+          "url" : "http://github.com/codehaus-plexus/plexus-classworlds/issues"
+        },
+        {
+          "type" : "mailing-list",
+          "url" : "http://archive.plexus.codehaus.org/user"
+        },
+        {
+          "type" : "vcs",
+          "url" : "http://github.com/codehaus-plexus/plexus-classworlds/tree/plexus-classworlds-2.6.0/"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/org.codehaus.plexus/plexus-classworlds@2.6.0?type=jar"
+    },
+    {
+      "publisher" : "Codehaus Plexus",
+      "group" : "org.codehaus.plexus",
+      "name" : "plexus-interpolation",
+      "version" : "1.26",
+      "description" : "The Plexus project provides a full software stack for creating and executing software projects.",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "1049ae9f5cd8cf618abf5bc5805e6b94"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "25b919c664b79795ccde0ede5cee0fd68b544197"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "b3b5412ce17889103ea564bcdfcf9fb3dfa540344ffeac6b538a73c9d7182662"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "6c3b40442adf721d325ee9cbf935d758223a04b3bd8e0f3b60fdb652175c1ca65a6010f7ea8288617ffa73cb1f19d2737c79c403d343b285e0f9afb1729caa60"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "93dcdffb567f4b7d24eecf9fb0733243ebfe1fd80c92fe69532fed9d1727a58ffa5ce7da4ab26b5c6aa8a6a59beb3844"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "7489d45be45f74f7639db3b18ae6075d32d84adfaa9c4568f3fe2b2fc35c7de73ffce6f42e494466a8c81e78747b0f17"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "62145ec219beb405063de848cb54e0d63efc8c255322998858d7df74f8d1ae18"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "12fba4d2ffab1f89003e375bf74df3fc5d0f831906f9716f2ab2fc5a4ca7084c8a61500b24c5fa0ded27d1cef14b030df70b34c148c138136070e27f7cc41536"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "Apache-2.0"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/org.codehaus.plexus/plexus-interpolation@1.26?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "http://codehaus-plexus.github.io/plexus-interpolation/"
+        },
+        {
+          "type" : "distribution",
+          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
+        },
+        {
+          "type" : "issue-tracker",
+          "url" : "https://github.com/codehaus-plexus/plexus-interpolation/issues"
+        },
+        {
+          "type" : "mailing-list",
+          "url" : "http://archive.plexus.codehaus.org/user"
+        },
+        {
+          "type" : "vcs",
+          "url" : "http://github.com/codehaus-plexus/plexus-interpolation/tree/plexus-interpolation-1.26/"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/org.codehaus.plexus/plexus-interpolation@1.26?type=jar"
+    },
+    {
+      "publisher" : "Codehaus Plexus",
+      "group" : "org.codehaus.plexus",
+      "name" : "plexus-component-annotations",
+      "version" : "2.1.0",
+      "description" : "Plexus Component \"Java 5\" Annotations, to describe plexus components properties in java sources with standard annotations instead of javadoc annotations.",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "141fd7a2ae613cb17d25ecd54b43eb3f"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "2f2147a6cc6a119a1b51a96f31d45c557f6244b9"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "bde3617ce9b5bcf9584126046080043af6a4b3baea40a3b153f02e7bbc32acac"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "cc534fda54272f074fe9edd581a6c3e1ea98127340c7f852c4b4953a44dad048ace22dfa10f30d6adcdfc15efd319dac778a03ebbe20de7779fd1df640506e88"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "dd102351fada419b7e66f38b62868db4141cf93863b8117926564dd883b4a3960d9c9682b346f7106cdaa2a4138c794f"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "2b335733d7683e8bae312b0608af7c17b1aa22a1b9cbc4cc11549faf6bacc51c7591f1073aac99e5d70fdea31c6253c4"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "2e9f44d1c5df160563d3cedaf01929682fb3e0432beca7c782d8ba0324fb32b1"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "5051e4210310ec60fae9f32284a93da3cff63bf43a7dda30eaf2715d24cfc7f2353a6c2731521f4d6ef32e7a3e2526b6a41c8a11b0889c8dbf7ffc7914812641"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "Apache-2.0"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/org.codehaus.plexus/plexus-component-annotations@2.1.0?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "http://codehaus-plexus.github.io/plexus-containers/plexus-component-annotations/"
+        },
+        {
+          "type" : "distribution",
+          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
+        },
+        {
+          "type" : "issue-tracker",
+          "url" : "http://github.com/codehaus-plexus/plexus-containers/issues"
+        },
+        {
+          "type" : "mailing-list",
+          "url" : "http://archive.plexus.codehaus.org/user"
+        },
+        {
+          "type" : "vcs",
+          "url" : "https://github.com/codehaus-plexus/plexus-containers/plexus-component-annotations"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/org.codehaus.plexus/plexus-component-annotations@2.1.0?type=jar"
+    },
+    {
+      "publisher" : "The Apache Software Foundation",
+      "group" : "org.apache.commons",
+      "name" : "commons-lang3",
+      "version" : "3.8.1",
+      "description" : "Apache Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang.",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "540b1256d887a6993ecbef23371a3302"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "6505a72a097d9270f7a9e7bf42c4238283247755"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "dac807f65b07698ff39b1b07bfef3d87ae3fd46d91bbf8a2bc02b2a831616f68"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "fb0fe98385496a565678a000c26a3245082abfbf879cc29a35112b4bf18c966697a7a63bb1fd2fae4a42512cd3de5a2e6dc9d1df4a4058332a6ddeae06cdf667"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "72c6fd199936f06db886eba9dccd188e26afabf7b9e6744cea18f27e414abfe04d3d3f609f8505311a01f43e885bec1a"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "3b6eede7aaff2bbbf5133872b59e9c4932e60064951a68c219f128a8c3a2556c25c2c90a599b342ee3fdef25a745a474"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "4e708ddf8ed0c6dbd8c6bba07e06425b5d263d899884b91bf11f86ec0d6f8463"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "f43e89519e803e976f7b4d756d934be802ab36077cf2dc38dd9aa901eaf7104e58157859f45ccef7b38e072007a60f17270923e2ed7eabd41a4c776dee1458e1"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "Apache-2.0"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/org.apache.commons/commons-lang3@3.8.1?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "http://commons.apache.org/proper/commons-lang/"
+        },
+        {
+          "type" : "build-system",
+          "url" : "https://builds.apache.org/"
+        },
+        {
+          "type" : "distribution",
+          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
+        },
+        {
+          "type" : "issue-tracker",
+          "url" : "http://issues.apache.org/jira/browse/LANG"
+        },
+        {
+          "type" : "mailing-list",
+          "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/"
+        },
+        {
+          "type" : "vcs",
+          "url" : "https://git-wip-us.apache.org/repos/asf?p=commons-lang.git"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/org.apache.commons/commons-lang3@3.8.1?type=jar"
+    },
+    {
+      "publisher" : "QOS.ch",
+      "group" : "org.slf4j",
+      "name" : "slf4j-api",
+      "version" : "2.0.6",
+      "description" : "The slf4j API",
+      "scope" : "required",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "0dd65c386e8c5f4e6e014de3f7a7ae60"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "88c40d8b4f33326f19a7d3c0aaf2c7e8721d4953"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "2f2a92d410b268139d7d63b75ed25e21995cfe4100c19bf23577cfdbc8077bda"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "4f8bcafcbb105542ae9333a79f1779aa299570c129abc718331cb5969af52e06e53e645ba52e67ebbe822006ea95093186656742dd24a4b167e270ba9e55e1e1"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "aae19620668b33d8a5837cd39bfd398644199693c08869812948b52eff238cd9d363cbe1a5bbdd25d6efaac4bd2caa67"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "e70ca0766bfb4ab7b5d4f22855fa7ea28bc26f51e345ce34f11f0d042d08d8fa9b718fa6eab3c19d669dd05ce8075962"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "e0c8b3a870481be3bd73d454901bb6db2a2bd0b34dcd62a13eac94890861caa7"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "d5a1aabdb809a4eb9bf2b81747d33438ec52dbd4cfa87d4f7c11213ec582553d6921c5537e5a09547feb8830c9a7265a163f21df118b9c2e11bc4379a0f514a3"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "MIT",
+            "url" : "https://opensource.org/licenses/MIT"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/org.slf4j/slf4j-api@2.0.6?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "http://www.slf4j.org"
+        },
+        {
+          "type" : "distribution",
+          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
+        },
+        {
+          "type" : "vcs",
+          "url" : "https://github.com/qos-ch/slf4j/slf4j-api"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/org.slf4j/slf4j-api@2.0.6?type=jar"
+    },
+    {
+      "publisher" : "The Apache Software Foundation",
+      "group" : "org.apache.maven",
+      "name" : "maven-artifact",
+      "version" : "3.8.6",
+      "description" : "Maven is a software build management and comprehension tool. Based on the concept of a project object model: builds, dependency management, documentation creation, site publication, and distribution publication are all controlled from the declarative file. Maven can be extended by plugins to utilise a number of other development tools for reporting or the build process.",
+      "scope" : "optional",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "e58778f4d2041b0df8b301303aa4c6d8"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "1637b7e8fc392e389752e79b827b883629285626"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "de22a4c6f54fe31276a823b1bbd3adfd6823529e732f431b5eff0852c2b9252b"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "eb850b594d19553bb46946ef8f9d53acf84fe414c6f7529780a119d0321dbbce4736de6cac66ea2e8d077a6b19bea616d49dc857e41715bd30453064bfa1ca9b"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "b07d343c71622cdc618b1752e1240ea24266a9a5c6b2ede7297d276e14ba3b00735fb2349f6affd1dd20f740308365ab"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "7145c067431aa4ed59181ffdd308f5791a836a7f4de0a01a2762adc07856c07e1363d2cdc1fa6921eb764168e34b72ea"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "82bd99f4699fff03cc87351450c6349fc6da1e641adf011d84edfe9dede67fbd"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "582e08a9102143eb9c07e1057b98e701da1a7c071096bae77d50e3ebce226bb26af10835bf669ae9ad2c38aaaa30b7e48ccd955d0517a4a32b5c2185f149a3bc"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "Apache-2.0"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/org.apache.maven/maven-artifact@3.8.6?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "https://maven.apache.org/ref/3.8.6/maven-artifact/"
+        },
+        {
+          "type" : "build-system",
+          "url" : "https://builds.apache.org/job/maven-box/job/maven/"
+        },
+        {
+          "type" : "distribution",
+          "url" : "https://maven.apache.org/download.html"
+        },
+        {
+          "type" : "issue-tracker",
+          "url" : "https://issues.apache.org/jira/browse/MNG"
+        },
+        {
+          "type" : "mailing-list",
+          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
+        },
+        {
+          "type" : "vcs",
+          "url" : "https://github.com/apache/maven/tree/maven-3.8.6/maven-artifact"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/org.apache.maven/maven-artifact@3.8.6?type=jar"
+    },
+    {
+      "publisher" : "The Apache Software Foundation",
+      "group" : "org.apache.maven",
+      "name" : "maven-plugin-api",
+      "version" : "3.8.6",
+      "description" : "The API for plugins - Mojos - development.",
+      "scope" : "optional",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "c8187986d35b9d8a347e3989402879f3"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "4138e2e9b39f364902ac263888feb7b2407a298e"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "2c317f6041219f16f34bd47ea7618e57552d4f1f707378701b9efed4adecf70a"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "be255bc56ee37e41571e475fedd0c5b4dd8602bac5935fb6d70babeb4aba9dea69c7225714cea445467a07272392bd43a98c9c4eb388726eb047acae4584b182"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "857c99ad41d0bdcc5727ebbe7c0672c2ab6eee62a330dce1566e8766a60b7f3da348cb48cd500e81e011ffcdd7c8eeea"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "434ee124ee37164e649ab4f312a0952ca72e5f976f03f9abcbff4c5c30254b9cec8a2c9707d0f65cc4e462413057b9f2"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "b7cbdf293b47d698fad4b5ddf8f96f3892bdec4d6b03338e5844f2b119f0b590"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "5a997d094546abd5a01cd1d956f6df0321578c71f268de521cf3bdcd88953b1eaee03de9cfa07790f3cc15f68e0e3033781bcab67c0428ce7c6518f6fd11a44b"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "Apache-2.0"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/org.apache.maven/maven-plugin-api@3.8.6?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "https://maven.apache.org/ref/3.8.6/maven-plugin-api/"
+        },
+        {
+          "type" : "build-system",
+          "url" : "https://builds.apache.org/job/maven-box/job/maven/"
+        },
+        {
+          "type" : "distribution",
+          "url" : "https://maven.apache.org/download.html"
+        },
+        {
+          "type" : "issue-tracker",
+          "url" : "https://issues.apache.org/jira/browse/MNG"
+        },
+        {
+          "type" : "mailing-list",
+          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
+        },
+        {
+          "type" : "vcs",
+          "url" : "https://github.com/apache/maven/tree/maven-3.8.6/maven-plugin-api"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/org.apache.maven/maven-plugin-api@3.8.6?type=jar"
+    },
+    {
+      "publisher" : "The Apache Software Foundation",
+      "group" : "org.apache.maven.plugin-tools",
+      "name" : "maven-plugin-annotations",
+      "version" : "3.7.0",
+      "description" : "Java annotations to use in Mojos",
+      "scope" : "optional",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "a397f1717f52d633269d6a64e44362fb"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "d3d4f1844bcf5d938bd2b77b3d31f0324f759204"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "6f154c4eb3bc50dd609e794b364fd18661a4b0b91c7e4a0810127a7620e30603"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "f8985a4a7beadf2ad86a597c7fee086b3ccfd5523b08e0d6a6b5e1d041705237691b0a653c3dac2e8ad89dd0d11e38b077ba3a1107b238f371909d0388b35393"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "c1e7e569dbf0fe30cd8bc0761a70c78ec2248f3a2ec80f9feff5b879cb5c6a9d159298488b28afba304c0f836f33dfc9"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "2a5eabdce146516a084f971da1d29af4622d6515a987eef211a025a0130b53624c980cfc6917d3e452d6c1b97c45ebdc"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "d1f0edc33b6486e240baa79659c08adcb6b7600d3f885b60ad83cbe6f71357ac"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "ce220163db7d28c2650bceff587fc5e48409c6f843ebfdd3645cf1bc2b1659335d7ee8bfe9da36133f81e8254b960a2f20f06a39761d8091cb8b3a0ee71071d2"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "Apache-2.0"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/org.apache.maven.plugin-tools/maven-plugin-annotations@3.7.0?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "https://maven.apache.org/plugin-tools/maven-plugin-annotations"
+        },
+        {
+          "type" : "build-system",
+          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-plugin-tools/"
+        },
+        {
+          "type" : "distribution",
+          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
+        },
+        {
+          "type" : "issue-tracker",
+          "url" : "https://issues.apache.org/jira/browse/MPLUGIN"
+        },
+        {
+          "type" : "mailing-list",
+          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
+        },
+        {
+          "type" : "vcs",
+          "url" : "https://github.com/apache/maven-plugin-tools/tree/maven-plugin-tools-3.7.0/maven-plugin-annotations"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/org.apache.maven.plugin-tools/maven-plugin-annotations@3.7.0?type=jar"
+    },
+    {
+      "publisher" : "The Apache Software Foundation",
+      "group" : "org.apache.maven",
+      "name" : "maven-compat",
+      "version" : "3.8.6",
+      "description" : "Maven2 classes maintained as compatibility layer.",
+      "scope" : "optional",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "6cb57ce3567481a8bcf03de69caae2b2"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "caf3154f8e2dbba1cad6625919f795f19c50ea69"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "dc9303f60725ad0c2c28ddf0721f4e8017882be1315a48c51ebb17e4e682ffe5"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "08aebe6b6cf6a8f1a5355c19dcd742416a6f57f219c7eec0992c37455f2ac1eb8bee58c0f8eaafc5dd47856448546978395f0daa29268be2cfd63f1fd8f6348b"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "92cac690b4940a5ba43d23b591cf0ad81d8cf38d989a23d403f034e4e09bf07b56a9fb9a0606fc5a01d8950b3fe0632c"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "f286c13a299c26d3f6542a210c7ddbb12e361fc364b9bd14cf9e00e8a734917dd73fce636249c9244bdd27ee5d62801b"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "2c318fbba7053c3d285265b0d94d8a1aef82c6257c9ec8563b0f95e0a1ff1aed"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "4a8dc2cb742cc43f691de7c333b4110489faf3a4e5ad3e814edae6eca7f12b1d0c7d2b9a1a2638f13ea306ec96c2beb34d4c52d388c637ca0379983589ee1b94"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "Apache-2.0"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/org.apache.maven/maven-compat@3.8.6?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "https://maven.apache.org/ref/3.8.6/maven-compat/"
+        },
+        {
+          "type" : "build-system",
+          "url" : "https://builds.apache.org/job/maven-box/job/maven/"
+        },
+        {
+          "type" : "distribution",
+          "url" : "https://maven.apache.org/download.html"
+        },
+        {
+          "type" : "issue-tracker",
+          "url" : "https://issues.apache.org/jira/browse/MNG"
+        },
+        {
+          "type" : "mailing-list",
+          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
+        },
+        {
+          "type" : "vcs",
+          "url" : "https://github.com/apache/maven/tree/maven-3.8.6/maven-compat"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/org.apache.maven/maven-compat@3.8.6?type=jar"
+    },
+    {
+      "publisher" : "The Apache Software Foundation",
+      "group" : "org.apache.maven.wagon",
+      "name" : "wagon-provider-api",
+      "version" : "3.5.1",
+      "description" : "Maven Wagon API that defines the contract between different Wagon implementations",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "1c9c31b230017042a508cf7ebbbf79ea"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "118e63f22d05b14535451933ae207be47ec45d91"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "b215d27bfcec3ff8d00d3f6cdc8807f271b8cc270fcebf4f06a67fb90a2aa227"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "6a9e95dd6a2d4c040f3564fd76ae2c290eb3787bdb0a84e2c9caaa1d252eae9bcd3cf6768da652e1790ca8ca54a857213336d5ef606ed61c24b3aef96aadfa3f"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "d1990ae9771494a1af5d2b68dd56bcd6c1e0e83d0d3a09ade0d0d94b3b94f6a5af1d8d63c970038a2772ce9a99e8796c"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "4dd570bc91539f0bf9745efd1b96af43ecc8f7da30e4d50179ede9b898c55803b7c109399067ec47643fbefc63ffcb4e"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "189da5aa97a16efd60a6dc830c6d777eeda0a6e338a653b40595f48efa5985a2"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "49bc7f7df90907b11c27f4d88e085a1d2709e091a5da20355f67f44e7f6cae32e9447a6d65608e53a552cb79c1283c9c63b4123477eb9ddf20ff93e9aeec80c7"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "Apache-2.0"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/org.apache.maven.wagon/wagon-provider-api@3.5.1?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "https://maven.apache.org/wagon/wagon-provider-api"
+        },
+        {
+          "type" : "build-system",
+          "url" : "https://ci-builds.apache.org/job/Maven/job/maven-box/job/maven-wagon/"
+        },
+        {
+          "type" : "distribution",
+          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
+        },
+        {
+          "type" : "issue-tracker",
+          "url" : "https://issues.apache.org/jira/browse/WAGON"
+        },
+        {
+          "type" : "mailing-list",
+          "url" : "http://mail-archives.apache.org/mod_mbox/maven-dev"
+        },
+        {
+          "type" : "vcs",
+          "url" : "https://github.com/apache/maven-wagon/tree/wagon-3.5.1/wagon-provider-api"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/org.apache.maven.wagon/wagon-provider-api@3.5.1?type=jar"
+    },
+    {
+      "publisher" : "The Apache Software Foundation",
+      "group" : "org.apache.maven.shared",
+      "name" : "maven-dependency-tree",
+      "version" : "3.1.0",
+      "description" : "A tree-based API for resolution of Maven project dependencies",
+      "scope" : "optional",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "d229908dceffafd7cb27b13baa29c61e"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "91164b932f3ea0bb7779f6f9c62078adf1b031ae"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "d0e2bd3e0625d5d55226dcac0276fcb6ad59f8d993078a30003d67c7043ae7d9"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "ca317cd2c5a3e13f442f494a18b8f55348018f9503980e7c46ba240b42ae79d97cec439797dbfc0c5b35fa873e30b14ddad2b6023551f35be04666f3c52ac621"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "3c7e9f7f21166e049e2964cda1675147d9fbc7a10f119302d9145aad5b41027cd94bbb17e8773f3d87703107951f8ef6"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "e0f8173b81e8d490ccc981159644a6db25c85429bdf3324ee26db734efd0388d2597e4c68f2c6de807eeff06db7bc0ff"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "7126dc90af1e3e27bf2695dba51dc7537041302df2264937c81bfd3d0df5fe5a"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "3b775f34f925c01453362fad0579ed751cd9a061417e6bd4eafb59a9517acb2dcab6a51d17170740588d7226aa464d7670ec3050ef972713e7d95b54d98c9114"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "Apache-2.0"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/org.apache.maven.shared/maven-dependency-tree@3.1.0?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "https://maven.apache.org/shared/maven-dependency-tree/"
+        },
+        {
+          "type" : "build-system",
+          "url" : "https://ci-builds.apache.org/job/Maven/job/maven-box/job/maven-dependency-tree/"
+        },
+        {
+          "type" : "distribution",
+          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
+        },
+        {
+          "type" : "issue-tracker",
+          "url" : "https://issues.apache.org/jira/issues/?jql=project+%3D+MSHARED+AND+component+%3D+maven-dependency-tree"
+        },
+        {
+          "type" : "mailing-list",
+          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
+        },
+        {
+          "type" : "vcs",
+          "url" : "https://github.com/apache/maven-dependency-tree/tree/maven-dependency-tree-3.1.0"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/org.apache.maven.shared/maven-dependency-tree@3.1.0?type=jar"
+    },
+    {
+      "publisher" : "The Eclipse Foundation",
+      "group" : "org.eclipse.aether",
+      "name" : "aether-util",
+      "version" : "1.1.0",
+      "description" : "A collection of utility classes to ease usage of the repository system.",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "699bc0f3729d8b0a5bacf3e8e84ab010"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "d0f84ba994f0133580e8b957a44593eaa03d42cd"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "556f083dd35fe7f430ac4a7705784191e39df6df89abc31b30cb538f53828d62"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "7d5d135eca891032708069378ca41e6e333813510837a6e620a0f6462ff292842127544bda1e8a80bbd92a80f3d17a0bd6c721bd741a40e66897474799f7bd00"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "35071ce698b4e800dec79c8d8be6e0994197bb36ec25588b13c77dd191efc8997c88fcc7ceffcf7b1afb35974512e9ef"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "be905c754735606a364c6fb568e1c471899a809f131fbad38c4eb5d64aae3e3cefcf5e68df6969a3d5a74e28ade9dd12"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "1a668d4561dac383db3caef99d481aba52f5fb28706afc6f60a19fef298a0d0c"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "b15712c92d5c0c921ef89457f2bae1c0b70bf14b04db14a97434bdfc51d05e920a898e615b1a28cb22b8be84a8321f7578158c40442697e45833b59430f6a0b6"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "EPL-1.0"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/org.eclipse.aether/aether-util@1.1.0?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "http://www.eclipse.org/aether/aether-util/"
+        },
+        {
+          "type" : "build-system",
+          "url" : "https://hudson.eclipse.org/aether/job/aether-core/"
+        },
+        {
+          "type" : "distribution",
+          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
+        },
+        {
+          "type" : "issue-tracker",
+          "url" : "https://bugs.eclipse.org/bugs/buglist.cgi?query_format=specific&bug_status=__open__&product=Aether"
+        },
+        {
+          "type" : "mailing-list",
+          "url" : "http://dev.eclipse.org/mhonarc/lists/aether-dev/"
+        },
+        {
+          "type" : "vcs",
+          "url" : "scm:git:https://github.com/jvanzyl/aether-core/aether-util"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/org.eclipse.aether/aether-util@1.1.0?type=jar"
+    },
+    {
+      "publisher" : "Codehaus",
+      "group" : "org.codehaus.plexus",
+      "name" : "plexus-container-default",
+      "version" : "1.6",
+      "description" : "The Plexus IoC container API and its default implementation.",
+      "scope" : "optional",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "151a63b19d1b94de179638dbdc28766a"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "e3e8dd9ad86a7473221dd306c9a13daef0a87168"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "1f7ac24d368c1fd1463d42e711209b868a878e891e01473d6ed3f58e8109bc94"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "eedfe1ba2e187362d07f3404337e3bfc909286c94127600ad206f96c0f23a8958fd2edf2c469f3145db06e594b0a716b8dbdadfba1ab1b37d0918572104076b0"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "52e4ef7c9647328e200eba89b8ca4a29e216b0cc5b4972402fe98ef41435f0e3a3d9e453101d4e89c1bf6f524a7de22b"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "acc2cafd8334fd629c5980af2deccb65cbaaa48c3e63dc6fb29c5803ea24d63a8ccb0c682f54fa5a388b2dcc2a675738"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "6e1b9610e046b65d7be9c87d900aaf4b325d49d83de1dcd13ffae1f006642acd"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "824a2ce2f5b4def4cd4e275b39237bdcac433c5729cccba77c4a43ba0d6616ff69f3543396679bf33cae75f4000ee9da1e61428ab6fd0e16716d2b0090514075"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "Apache-2.0"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/org.codehaus.plexus/plexus-container-default@1.6?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "http://plexus.codehaus.org/plexus-containers/plexus-container-default/"
+        },
+        {
+          "type" : "distribution",
+          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
+        },
+        {
+          "type" : "issue-tracker",
+          "url" : "http://jira.codehaus.org/browse/PLX"
+        },
+        {
+          "type" : "mailing-list",
+          "url" : "http://archive.plexus.codehaus.org/user"
+        },
+        {
+          "type" : "vcs",
+          "url" : "https://github.com/sonatype/plexus-containers/plexus-container-default"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/org.codehaus.plexus/plexus-container-default@1.6?type=jar"
+    },
+    {
+      "publisher" : "The Apache Software Foundation",
+      "group" : "org.apache.xbean",
+      "name" : "xbean-reflect",
+      "version" : "3.7",
+      "description" : "xbean-reflect provides very flexible ways to creat objects and graphs of objects for DI frameworks",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "b77f0c9914e56547409e65137acba9eb"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "6072a967ec936b3bb25b421d8eca07dd750219fd"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "104e5e9bb5a669f86722f32281960700f7ec8e3209ef51b23eb9b6d23d1629cb"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "bf85e1c95a7362eea675e1bd972b59f76cf63e15d12f7ee555860596aa5b17aee16835b5a60a3480f12baaa8e136909c9b775c5d779f3938ac6571d103cb2a2a"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "1f2a8f3d3c8835c1a23771fcf2018f43825b8ad3b2bd167d5b105704d7622892480daaffb533c7379e08f69d30b37c61"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "d7f8b992c974b5a503c37bf1c643ae99a7b563c047e2b87e4d593f85d21c7c47b84f5ba3ae4c70683b85f51fd5c4a46a"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "31c3334a051e9bd1edd4110b70047bcf42cf5877bd82e845890c51b68726b42e"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "c1545ef579b700e64266524910f8aa3999a45c5d7ef2a7047844223922d5a3f0d8d708638e774fd532b884f425d78ce6098faa98b57b0ace866553b414b48520"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "Apache-2.0"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/org.apache.xbean/xbean-reflect@3.7?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "http://geronimo.apache.org/maven/xbean/3.7/xbean-reflect"
+        },
+        {
+          "type" : "distribution",
+          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
+        },
+        {
+          "type" : "issue-tracker",
+          "url" : "http://issues.apache.org/jira/browse/XBEAN"
+        },
+        {
+          "type" : "mailing-list",
+          "url" : "mailto:xbean-dev-subscribe@geronimo.apache.org"
+        },
+        {
+          "type" : "vcs",
+          "url" : "http://svn.apache.org/viewvc/geronimo/xbean/tags/xbean-3.7/xbean-reflect"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/org.apache.xbean/xbean-reflect@3.7?type=jar"
+    },
+    {
+      "publisher" : "Google",
+      "group" : "com.google.collections",
+      "name" : "google-collections",
+      "version" : "1.0",
+      "description" : "Google Collections Library is a suite of new collections and collection-related goodness for Java 5.0",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "7c882c8d734e50112000e4a88e06c535"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "9ffe71ac6dcab6bc03ea13f5c2e7b2804e69b357"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "81b8d638af0083c4b877099d56aa0fee714485cd2ace1b6a09cab867cadb375d"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "5741bcdf5c2d54daa53a60972d61d0fb3acb68a31ab4a913832de71c47b4abd59b85e760a335d7efde55d4e309824839b09f9224a43c124bd54c634a87a9b7f7"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "4949d462105f7666f8a6e52e9b90392f028a3fcd978d68a2e0b63ae29fd80650be9f01840c36b96de7c41d625ba9ca6c"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "e86ad9dc3098170f6abb083b0ddff0c0c9c82448ebf07b5426129ecb54f37a2f35e10871c572cde1750c067de9e2600f"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "fcad26fcd6c8843ae8bbf09e7cc46e1a99597d6c7b0e65fbfe2628718a3f80c9"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "20d2c29f0efd83f3b42f5b8fa7ff43cfa6058947516bfe705f9dba7205f3f847d394eb87dd3a4e2d3048ab02eb845e8953522547b6f051e7f2ec3d3a8ccabf62"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "Apache-2.0"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/com.google.collections/google-collections@1.0?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "http://code.google.com/p/google-collections/"
+        },
+        {
+          "type" : "distribution",
+          "url" : "dav:https://google-maven-repository.googlecode.com/svn/repository/"
+        },
+        {
+          "type" : "vcs",
+          "url" : "http://code.google.com/p/google-collections/source/browse/"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/com.google.collections/google-collections@1.0?type=jar"
+    },
+    {
+      "publisher" : "Codehaus Plexus",
+      "group" : "org.codehaus.plexus",
+      "name" : "plexus-utils",
+      "version" : "3.3.0",
+      "description" : "A collection of various utility classes to ease working with strings, files, command lines, XML and more.",
+      "scope" : "optional",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "3ae76ff0195ada460d495efe1fb50d17"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "cf43b5391de623b36fe066a21127baef82c64022"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "76d174792540e2775af94d03d10fb2d3c776e2cd0ac0ebf427d3e570072bb9ce"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "a93038005cd9793476c913beaea7c8c170d1853dddf39bf6794ad6446165eaf538c2c3c2314baa9d919d6b0bda78e5ea3cd987d5dbacf8e3b98e315bcfa7db64"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "27742e2c82c13ffe947c6ce8750b1989491e8a5d7554cc3fa240a952c9d3a22fe006516041c66650e71972275c06565e"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "16af5ee2b4f8710fa14bbd977ef3630466c51c4ed6bf9886ac0ea9c74bd23dedbbce60beae5217fab686777108c2e54d"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "364bfb131dab58736c995ac4484d9eab53b1e62129a99ed55e9c12ed39079dc6"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "4687c5ca8bb73d6880132d7d886733d0a5ce7a873c7b5b68d9d46066ee7e1f6c11f0510a70f313ca2563550bfcf6e81cf37a0c4ceef247bab55d6aadc49fae59"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "Apache-2.0"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/org.codehaus.plexus/plexus-utils@3.3.0?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "http://codehaus-plexus.github.io/plexus-utils/"
+        },
+        {
+          "type" : "distribution",
+          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
+        },
+        {
+          "type" : "issue-tracker",
+          "url" : "http://github.com/codehaus-plexus/plexus-utils/issues"
+        },
+        {
+          "type" : "mailing-list",
+          "url" : "http://archive.plexus.codehaus.org/user"
+        },
+        {
+          "type" : "vcs",
+          "url" : "http://github.com/codehaus-plexus/plexus-utils"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/org.codehaus.plexus/plexus-utils@3.3.0?type=jar"
+    },
+    {
+      "group" : "org.sonatype.plexus",
+      "name" : "plexus-build-api",
+      "version" : "0.0.7",
+      "scope" : "optional",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "49f0f8c6bdf2687e358870a4fc1559c6"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "e6ba5cd4bfd8de00235af936e7f63eb24ed436e6"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "934171640fbd3d2495c50b79b0d9adb11e2c83e65bad157df8fe34bcac0ff798"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "e073d367ce5edaf6dfcbf6d1ec9f544082d4536aec8a84b060d24625c0d8ff1facf90529843f9bf4383ef43aa5cd3d0e143f473dffa6da7fd910f1d2e3872ec7"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "2e6c177e34d0bb3fd05ea8f635f01a6b01afd28113f214392cae8f6bdc73715ee1dbfa4d1525f42321f8a8dd05db9191"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "fe41dea9191319334edb863c438ffe78b19c5f2669a653058d7d4fe5527d7e66a7f382f806ff12fcb09c3f468542e870"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "530e25ed3a34ee1d1aacda1a935608e70ef6494bb931fee33eb7366df2d85642"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "9f1b45445d930a9833436b57baeda25522f0151be0b2f2a27ef1c1dcc8f6ccc5f1168fe40ea91f1e3ac1d98308b3dd1da3c7b49a90cb75eb6a924534545435a5"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "Apache-2.0"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/org.sonatype.plexus/plexus-build-api@0.0.7?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "http://forge.sonatype.com/spice-parent/plexus-build-api/"
+        },
+        {
+          "type" : "build-system",
+          "url" : "https://grid.sonatype.org/ci/view/Spice/"
+        },
+        {
+          "type" : "distribution",
+          "url" : "http://repository.sonatype.org:8081/service/local/staging/deploy/maven2"
+        },
+        {
+          "type" : "issue-tracker",
+          "url" : "https://issues.sonatype.org/browse/SPICE"
+        },
+        {
+          "type" : "vcs",
+          "url" : "http://svn.sonatype.org/spice/tags/plexus-build-api-0.0.7"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/org.sonatype.plexus/plexus-build-api@0.0.7?type=jar"
+    },
+    {
+      "publisher" : "The Apache Software Foundation",
+      "group" : "commons-io",
+      "name" : "commons-io",
+      "version" : "2.11.0",
+      "description" : "The Apache Commons IO library contains utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more.",
+      "scope" : "required",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "3b4b7ccfaeceeac240b804839ee1a1ca"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "a2503f302b11ebde7ebc3df41daebe0e4eea3689"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "961b2f6d87dbacc5d54abf45ab7a6e2495f89b75598962d8c723cea9bc210908"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "5bd78eed456ede30119319c5bed8e3e4c443b6fd7bdb3a7a5686647bd83094d0c3e2832a7575cfb60e4ef25f08106b93476939d3adcfecf5533cc030b3039e10"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "114f1e324d90ad887c177876d410f5787a8e8da6c48d4b2862d365802c0efded3a88cb24046976bf6276cadad3712f0f"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "80288c03ad4d80d69f91d056ffc5570d49a9c76bf54ad2dff0121ecde26a560df76d05156f281f5c6db2a38ff07a873d"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "5adfb5ccaf5f21a549422f426118a9542673926fcd18c68390cf813e791dcf6c"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "7573f47f0babb53cefdc7c2309a0b982d800139064537b0797da442853d081010ad7c3c74a500598a0f800639a5d540eca21963ea652c68613907059bd4278c2"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "Apache-2.0"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/commons-io/commons-io@2.11.0?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "https://commons.apache.org/proper/commons-io/"
+        },
+        {
+          "type" : "build-system",
+          "url" : "https://builds.apache.org/"
+        },
+        {
+          "type" : "distribution",
+          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
+        },
+        {
+          "type" : "issue-tracker",
+          "url" : "https://issues.apache.org/jira/browse/IO"
+        },
+        {
+          "type" : "mailing-list",
+          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
+        },
+        {
+          "type" : "vcs",
+          "url" : "https://gitbox.apache.org/repos/asf?p=commons-io.git"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/commons-io/commons-io@2.11.0?type=jar"
+    },
+    {
+      "group" : "com.google.code.gson",
+      "name" : "gson",
+      "version" : "2.9.1",
+      "description" : "Gson JSON library",
+      "scope" : "required",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "0d507d266dcf7eea4b53fc3778d901c9"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "02cc2131b98ebfb04e2b2c7dfb84431f4045096b"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "378534e339e6e6d50b1736fb3abb76f1c15d1be3f4c13cec6d536412e23da603"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "10bf91c79ab151b684834e3ca8ba7d7e19742a3eeb580bde690fba433f9fffe3abbd79ed3fe3f97986c3a2badc4d14e28835a8ef89167b4b9cc6014242338769"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "c50274278af61678dffff13f07de80e6eb1b3522a1f51c71c6b86a8d4911a35e015988e0835c9ef007097bac3417f5ca"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "74634bb3d1ab028a494cf9257cd238a995b617b7bc1808243d75b2dc725ad4eb24ca0fbd0908518162dc522cc27564c4"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "929b108f3650e83e24c867693b0700853464b8a90db85737cc5db489e53d21d3"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "9bfff54945bd12718fb459be8af0da9f0b33576daa39549a3506b2998bf190612b9ed57b84e2588741833ec1eb67b7f1cf1e540bf394db35f65a5d812485c367"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "Apache-2.0",
+            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/com.google.code.gson/gson@2.9.1?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "https://github.com/google/gson/gson"
+        },
+        {
+          "type" : "distribution",
+          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
+        },
+        {
+          "type" : "issue-tracker",
+          "url" : "https://github.com/google/gson/issues"
+        },
+        {
+          "type" : "vcs",
+          "url" : "https://github.com/google/gson/gson/"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/com.google.code.gson/gson@2.9.1?type=jar"
+    },
+    {
+      "group" : "org.asciidoctor",
+      "name" : "asciidoctorj",
+      "version" : "2.5.5",
+      "description" : "AsciidoctorJ provides Java bindings for the Asciidoctor RubyGem (asciidoctor) using JRuby.",
+      "scope" : "optional",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "53ba3cfcbc8d93bf4ee21e47a3487b7a"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "22cb03e7d27a05950a46f779f00a02baca75c31a"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "f084ade79ad46b2b273df04781aa6d209c478723d6aba5c0f161c10e7c7936b9"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "6acd03c8b67155a02a8558828a4a1c93e6d102c5954af940e1c73d052394ca8aa77a95e219a9ec0aeb95b9a2e4b1d17d039d4156ce866bec0f6a7833e71ed277"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "48f01bf7ae7abb855aef1b644f81408b31e250554d4bc85754be8b97a81dd7fd7e381cec1ddeeb51e69b3e2c0fcbe8d3"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "02dcea57ed64c9d0bd647542cdec8d7dc9743248d5b5923b383b1e4e768a76cfe2f1e25b57d718c0ded1134c3d4bfadc"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "12f14cad7016a62066b6ad3763785b25b8d9a48292b037260ade01dde89db66c"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "96078c08657497f79bbaca092a60f1c47e84f6776d437f1ae1463b5059d65719995f8f5e073a71313f13bd8c7ca40e3c351d2e5cd136fafb4a09a39b2f97a3e2"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "Apache-2.0"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/org.asciidoctor/asciidoctorj@2.5.5?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "https://github.com/asciidoctor/asciidoctorj"
+        },
+        {
+          "type" : "vcs",
+          "url" : "https://github.com/asciidoctor/asciidoctorj"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/org.asciidoctor/asciidoctorj@2.5.5?type=jar"
+    },
+    {
+      "group" : "org.asciidoctor",
+      "name" : "asciidoctorj-api",
+      "version" : "2.5.5",
+      "description" : "API for AsciidoctorJ",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "2e29e84e4315fa2e3ce6a070533d4a6a"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "a12e8bd67a304482379dd0647a335868831252e4"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "2fb8d849e25e9d615d1868be39360ded4a3ff536cb7220ac92e681c0491b4a37"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "276efba40f8608e711f0ac68c06c99ae5e70fdd85849209b4dcc9bb8e575614a1740449524481d905bcbdcddcc70d538f5a433121353c494d7f44f2462f21812"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "aeb5177f81de7f3b6190cd4eb7967b09ac7a378e54e2ee0e3d8c75342fe7505bc51e00aa791b4c04dbe607b8ef19f8f0"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "9bf41a945f83fa2b1080c45c1adb02814e7137ab9707bb396b1dc9261da3386b46a2d5993b170284ae35c43eb4cb5ca7"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "83bfaa98af1b78dc379ea5243c67d68e00be04bb65198790693c32f39865063d"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "6684dd57a38241524ac84481d235eea11b515107e0c2f4ae669b58f5dda400d6718318c1a51e88a8471a63ff483e6baeb57858a421fd7e04edd209cb2d0591df"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "Apache-2.0"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/org.asciidoctor/asciidoctorj-api@2.5.5?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "https://github.com/asciidoctor/asciidoctorj"
+        },
+        {
+          "type" : "vcs",
+          "url" : "https://github.com/asciidoctor/asciidoctorj"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/org.asciidoctor/asciidoctorj-api@2.5.5?type=jar"
+    },
+    {
+      "publisher" : "JRuby",
+      "group" : "org.jruby",
+      "name" : "jruby",
+      "version" : "9.3.4.0",
+      "description" : "JRuby is the effort to recreate the Ruby (https://www.ruby-lang.org) interpreter in Java.",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "c59fd477162c73793c646c9e353701d3"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "aa22e294a11c4de4ca3e3d7a40d7917213ee419e"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "0858f0e841138120a651ca748655849e3d15c2b8a4746de5506eee6008a30bb3"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "ce1622769e4e76beee44ab5e1b70d38fa4f52eee44d12c2237a6968e16bcaad0c24f8ffc46e847a8977d58b148349b8ff5abce4e47f4c5ad44f697a29a60a3e7"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "cd10685ff228d29099117b9442ab2ee00ba6cd84c2dbe9608a0b0c370f0f87bf3d5df25ce7aa93b490b1e73540f41d27"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "3243c7f947d30ab66591f672a9e2b560a8f2d3662d7f05bc23af3b48bc1dc9bf0290227fece2f911128939467d6e5d6c"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "2b52966aad2e864eeef17e1765b2a495eb777a867777111d424840c4ec655b56"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "5637ddbeb9388137b203d47224f44efc49bd4e9d4e6e1906a591f7003eba9913ef9a0a550c22bf78a274e511bbf004b3143229d826ebc156a34d48a58255dc7a"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "GPL-2.0",
+            "url" : "https://www.gnu.org/licenses/old-licenses/gpl-2.0-standalone.html"
+          }
+        },
+        {
+          "license" : {
+            "id" : "LGPL-2.1",
+            "url" : "https://www.gnu.org/licenses/old-licenses/lgpl-2.1-standalone.html"
+          }
+        },
+        {
+          "license" : {
+            "id" : "EPL-2.0",
+            "url" : "https://www.eclipse.org/legal/epl-2.0"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/org.jruby/jruby@9.3.4.0?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "https://github.com/jruby/jruby/jruby-artifacts/jruby"
+        },
+        {
+          "type" : "distribution",
+          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
+        },
+        {
+          "type" : "issue-tracker",
+          "url" : "https://github.com/jruby/jruby/issues"
+        },
+        {
+          "type" : "mailing-list",
+          "url" : "https://github.com/jruby/jruby/wiki/MailingLists"
+        },
+        {
+          "type" : "vcs",
+          "url" : "https://github.com/jruby/jruby/jruby-artifacts/jruby"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/org.jruby/jruby@9.3.4.0?type=jar"
+    },
+    {
+      "publisher" : "JRuby",
+      "group" : "org.jruby",
+      "name" : "jruby-base",
+      "version" : "9.3.4.0",
+      "description" : "JRuby is the effort to recreate the Ruby (https://www.ruby-lang.org) interpreter in Java.",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "fa994e09978099b61af7ba0d4eb615bc"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "fe4cc40ca3baeedaa4f13366094b22d550d397b9"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "3bb65167d7ec39906ef158d1c4f1fe6c3c18dfac94e2f0174f9728e33450e2d4"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "078981b3f756ec49c28fccdd8f1ce8b1822b9a75d0150e856b3bc70498c9df5ec760bd27fb97c587c3e7a4d691f9f94d8ba553aee6cc791a401403bb5fce619a"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "dbfaac9a8563b9c40fa6784cf63db2954ebace6472fd907c03c2b79218a3f37e688bd90f4be6149cab34c209c21b776e"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "9d4846ea28bca15baea3e90b05de201aa8ad12ce42b0e15287a5a569ddc76a87f978d842126c3c99b132426d53feebf5"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "52f9f86edf7388a708b663167d0bf31c31d727625c875c3a1d7c332de89854dc"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "72890144f3fe0f22ede1388b4823025e8aa60df58be86657075b69b578703b6a6cc81b01322c38c5adcdc0467289437391a88dc836bfa945de0e4d567f7b0ace"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "GPL-2.0",
+            "url" : "https://www.gnu.org/licenses/old-licenses/gpl-2.0-standalone.html"
+          }
+        },
+        {
+          "license" : {
+            "id" : "LGPL-2.1",
+            "url" : "https://www.gnu.org/licenses/old-licenses/lgpl-2.1-standalone.html"
+          }
+        },
+        {
+          "license" : {
+            "id" : "EPL-2.0",
+            "url" : "https://www.eclipse.org/legal/epl-2.0"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/org.jruby/jruby-base@9.3.4.0?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "https://github.com/jruby/jruby/jruby-base"
+        },
+        {
+          "type" : "distribution",
+          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
+        },
+        {
+          "type" : "issue-tracker",
+          "url" : "https://github.com/jruby/jruby/issues"
+        },
+        {
+          "type" : "mailing-list",
+          "url" : "https://github.com/jruby/jruby/wiki/MailingLists"
+        },
+        {
+          "type" : "vcs",
+          "url" : "https://github.com/jruby/jruby/jruby-base"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/org.jruby/jruby-base@9.3.4.0?type=jar"
+    },
+    {
+      "publisher" : "OW2",
+      "group" : "org.ow2.asm",
+      "name" : "asm-commons",
+      "version" : "9.2",
+      "description" : "Usefull class adapters based on ASM, a very small and fast Java bytecode manipulation framework",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "3eb09775e1076eb0a085a4592faebc2a"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "f4d7f0fc9054386f2893b602454d48e07d4fbead"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "be4ce53138a238bb522cd781cf91f3ba5ce2f6ca93ec62d46a162a127225e0a6"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "d5bd27f9b8b4eea93635ceda3891665fc9db273818eb02d40da4b110b81524458de3f71a63e87d6bec9423ba0f2e14c20ecdf7706dfeb54f0b05aedb13a63ecc"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "e8c5569aa075340aa6ecb4d41ee3028d6fb14a863fad3199bb6d15121bea5f907a5938c6c185e28ed6b3de95497a38ff"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "a7d9b082e9a08cc760cfe994f2152ab5ca64259963ebea2267f0570f0815a6bd04614472ea68694f173518cb7d3a057b"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "89f1821bf9e6b052ea6f945eefa29991f8b886eb48cf1d2c41fc60f599bc10b1"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "8e905b194b1772e5abb9da0b2ef68617ceef0a8ea79331547ea101f6bc5d6943e17ff08c039b190853c2968a5ecffdf4029550bd78421cfbc7e743f7a14674f0"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "BSD-3-Clause",
+            "url" : "https://opensource.org/licenses/BSD-3-Clause"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/org.ow2.asm/asm-commons@9.2?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "http://asm.ow2.io/"
+        },
+        {
+          "type" : "distribution",
+          "url" : "http://repository.ow2.org/nexus/service/local/staging/deploy/maven2"
+        },
+        {
+          "type" : "issue-tracker",
+          "url" : "https://gitlab.ow2.org/asm/asm/issues"
+        },
+        {
+          "type" : "mailing-list",
+          "url" : "https://mail.ow2.org/wws/arc/asm/"
+        },
+        {
+          "type" : "vcs",
+          "url" : "https://gitlab.ow2.org/asm/asm/"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/org.ow2.asm/asm-commons@9.2?type=jar"
+    },
+    {
+      "publisher" : "OW2",
+      "group" : "org.ow2.asm",
+      "name" : "asm-analysis",
+      "version" : "9.2",
+      "description" : "Static code analysis API of ASM, a very small and fast Java bytecode manipulation framework",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "e62aa59de96ae29c690c3521ea4b6359"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "7487dd756daf96cab9986e44b9d7bcb796a61c10"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "878fbe521731c072d14d2d65b983b1beae6ad06fda0007b6a8bae81f73f433c4"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "6f40139d81934ee67af8f9d35ebe1415ad8641a3c667dbf38af8d8b17160198b1eb7edf11add986afaa495352966866c64928cbba23273ab83d4f2c5a93d5130"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "d33171e393864459a8683f43046551c8d568b5b82a3d5eeb49e7c1d2e1177d98ad0a439745c0904377f5bfdd344a489d"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "36eb19217d1b1802b1cd8a13cffce51f510f517ef17b504e64ca36e4896acf72876d044259a8ab2f427e84b81b32de82"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "3bdc0f463b1fcc78ff4d2bd803bd11e31fd4cafb6d96a6cb4411557a17bdf033"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "007c8fd875d898cf864e2965b427c8f890e6d6c5737b91e5a6275c9926e0a8a23f7fb06f3fe4886bd0367cf96d568f90603c3a220433658a0cf61938749c23ed"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "BSD-3-Clause",
+            "url" : "https://opensource.org/licenses/BSD-3-Clause"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/org.ow2.asm/asm-analysis@9.2?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "http://asm.ow2.io/"
+        },
+        {
+          "type" : "distribution",
+          "url" : "http://repository.ow2.org/nexus/service/local/staging/deploy/maven2"
+        },
+        {
+          "type" : "issue-tracker",
+          "url" : "https://gitlab.ow2.org/asm/asm/issues"
+        },
+        {
+          "type" : "mailing-list",
+          "url" : "https://mail.ow2.org/wws/arc/asm/"
+        },
+        {
+          "type" : "vcs",
+          "url" : "https://gitlab.ow2.org/asm/asm/"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/org.ow2.asm/asm-analysis@9.2?type=jar"
+    },
+    {
+      "publisher" : "OW2",
+      "group" : "org.ow2.asm",
+      "name" : "asm-util",
+      "version" : "9.2",
+      "description" : "Utilities for ASM, a very small and fast Java bytecode manipulation framework",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "8562ac2619220b948cef931285b1e13b"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "fbc178fc5ba3dab50fd7e8a5317b8b647c8e8946"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "ff5b3cd331ae8a9a804768280da98f50f424fef23dd3c788bb320e08c94ee598"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "b485d43e53e7247c8b9cb34efd51dffd0e81bd4618ba4ec7ed8479607d970b08c4e36d8c160ba526e87700fb96b53d4e5b1929d8c6620687e21d03d3ae9cf850"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "a20299794f697ba37913265c7afdf20c4d0568d02c18346b40ac6a6eb2a519f1d13a12eb070bc191e9f286abe2884267"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "13a64aa12eebd0664eeb7d7de4c201cb2b0d8a814e4e8bb175265b7fcfc2870cc72b7a3b763c54cc5e951788ac2d2779"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "230e5bfb048294fc98210db296f5d79923d98b392e5c36b6bb0ac9f4d377f297"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "a60ebc59701ba7cbcb12f54db86413036c50f0fc6596321767fead9a56433ce20928f773a886c09c89aa9c97751ec3afc2f3b16e315f9e51c3459da3a6c2a1dd"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "BSD-3-Clause",
+            "url" : "https://opensource.org/licenses/BSD-3-Clause"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/org.ow2.asm/asm-util@9.2?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "http://asm.ow2.io/"
+        },
+        {
+          "type" : "distribution",
+          "url" : "http://repository.ow2.org/nexus/service/local/staging/deploy/maven2"
+        },
+        {
+          "type" : "issue-tracker",
+          "url" : "https://gitlab.ow2.org/asm/asm/issues"
+        },
+        {
+          "type" : "mailing-list",
+          "url" : "https://mail.ow2.org/wws/arc/asm/"
+        },
+        {
+          "type" : "vcs",
+          "url" : "https://gitlab.ow2.org/asm/asm/"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/org.ow2.asm/asm-util@9.2?type=jar"
+    },
+    {
+      "group" : "com.github.jnr",
+      "name" : "jnr-netdb",
+      "version" : "1.2.0",
+      "description" : "Lookup TCP and UDP services from java",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "25e6e5f7e6d05f200b9efac0b9599789"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "1bb5527cac7dadaea7c3bd1e3d86dd95ed0d3b87"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "24f54abd859979b6caabf4918b022c57fc0d3247def4bfe68e5a30172409fc3c"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "dfb143b2a3962bcdb7775d79a501aa93c2e8b7322a4ea3b29e976f6b1701ec93824cfb1ca7b564498ee56e664c18ea09cfd4123ac335058b90502c517f05f5d9"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "252709ccd7fed7a89ab617740a6e19980b710651157c5cfe9b72a4d69d38eaa5307237416f71bbc81ce5251aa96e0543"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "08654d193e1f321cdd20bfcaea827c8dad1c6facc3650050281c88f892aff555adf3de803baa6f049e82b7cac7246699"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "fed369ebbf986c5e7260655414cfcee39d313beb2640533da9d400634b406f08"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "5cf7b2e6adcf14365d0a0456be1ad4c88f0097d6882a51bcb0077a7127df0a38ec18de09c97fa4a6491800925dc15e90267a939850d4e4b9083d72f66a16b947"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "Apache-2.0"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/com.github.jnr/jnr-netdb@1.2.0?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "http://github.com/jnr/jnr-netdb"
+        },
+        {
+          "type" : "distribution",
+          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/com.github.jnr/jnr-netdb@1.2.0?type=jar"
+    },
+    {
+      "group" : "com.github.jnr",
+      "name" : "jnr-enxio",
+      "version" : "0.32.13",
+      "description" : "Native I/O access for java",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "ebf626f3d8a6aa80c6e756282455235b"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "977716da761c3a935efca0b3b090cd987a5c1aeb"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "d3c0136eb0176092210d5c870dbe30f1d92b43d73ee9b1e4a861e28c6460527c"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "ef812cc17e2064a17bbc95566fda6743ef4d9b424c4c909001bea29034993af366eb3ddd714749314d23b1f04db945025657d0b86bb6a13dfe16b6281919b934"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "be41d03a5f28e5f5cb45ddbf131f5ce8285715a66f113cde27383ac4abe890093f1c37fdb291d42ac0d26ea3e483fd9d"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "b14ac5e506f3eef4eb16c1a83d873c279367222d5b575b52da81e3686c6ec1bc23c289550c90b09696ea7401d04e27c3"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "5349fb64f9b702cfa614eeed605c3464682b2f03819433def95d1c3fd82af4f4"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "f66506eed5df9aeb6743d4188f8a90c9cc1e4593ce9a7ce0987ec279cd78c2841f167ed3991144a674f38e276240fccbae2e82744c49a7c0eee5dbde9c744267"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "Apache-2.0"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/com.github.jnr/jnr-enxio@0.32.13?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "http://github.com/jnr/jnr-enxio"
+        },
+        {
+          "type" : "distribution",
+          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/com.github.jnr/jnr-enxio@0.32.13?type=jar"
+    },
+    {
+      "group" : "com.github.jnr",
+      "name" : "jnr-unixsocket",
+      "version" : "0.38.17",
+      "description" : "UNIX socket channels for java",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "ad9fa0eba35b3ce96a33d3b04f4f07ce"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "5412abed09c78ca3d298d34a67c9b61ab8456afb"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "98f62c719b3481457f25fd25e2502ace7a90d45f75a2554ebcfcb6be0b161a17"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "4da3c52da8a70683c3290f8c62a2b3f9e865eb12e31490dd9b63190e534323f90a5187ecff4aba5ef2b538f50a1412fb4435d9cee7d23791b57178ea4685f453"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "2e9e51bf067c152784178fde2336bcd2f8c56d1a0d31233a7d91055a5dda85797d7c410a7cef067f1dbf4d1dc908adcd"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "1bcccd7d852e8137a40a8d2e9d571d5a6c7805d5a69d75f11643861e5279cac445ae9b94549c9f60f4af8bcbd5f8d424"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "fc2d1e588270d876e19aab0ac745fae5b002165d766cdd792aef999439fbe2e5"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "8491855dbbeaaced7469cf357577747ce6ad2154a04245b2552c27ab578865d159abf1fc5d19ada6936aaa8cfafd919be9e92fcec5f7d8c55967b700d65cc2b3"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "Apache-2.0"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/com.github.jnr/jnr-unixsocket@0.38.17?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "http://github.com/jnr/jnr-unixsocket"
+        },
+        {
+          "type" : "distribution",
+          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/com.github.jnr/jnr-unixsocket@0.38.17?type=jar"
+    },
+    {
+      "group" : "com.github.jnr",
+      "name" : "jnr-posix",
+      "version" : "3.1.15",
+      "description" : "Common cross-project/cross-platform POSIX APIs",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "b84aaceb5cf7f0ad649c4d3900ce0740"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "f7d6737adcbd5925d625b8f99166de2cbf13caac"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "c38ecfccd24e5f21f17a62e45d5bd454842c5db17ed42b01b868f9206d0e99e7"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "d8d2d0b5084cc93303402b3ec725a8e2ba22853443de2e228ae6e4983880fd4b2726a91c5803ff7de231b59aa3afcb088e0615439caf8600851da5d0f4ab6e60"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "f35c7cc57184e9b89933a4a03f8e2d9fdb2b00387f12969bb8da542f8b662d7698ee19fc94b85bc7aa9ee5b9157369bf"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "53e1e0b6fd3cb29acc10051e9e111ea6afc296a91ef42b5169dff407bf2f106a7523ff492132140152b790813f550b0b"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "c16d9f75650294b222cbc236362363db7a28df01028937c7f5634b94ba39e6f7"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "faa6d8fa26f59da9072218cd55f9324acb8323810dbc27b4a76d02b103a1c303c7c78a2fbe524731c1ccac21e4510a4bca655051713b832a61e5a0864613dcfc"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "EPL-2.0"
+          }
+        },
+        {
+          "license" : {
+            "name" : "GNU General Public License Version 2",
+            "url" : "http://www.gnu.org/copyleft/gpl.html"
+          }
+        },
+        {
+          "license" : {
+            "name" : "GNU Lesser General Public License Version 2.1",
+            "url" : "http://www.gnu.org/licenses/lgpl.html"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/com.github.jnr/jnr-posix@3.1.15?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "http://nexus.sonatype.org/oss-repository-hosting.html/jnr-posix"
+        },
+        {
+          "type" : "distribution",
+          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
+        },
+        {
+          "type" : "issue-tracker",
+          "url" : "http://jira.codehaus.org/browse/JRUBY"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/com.github.jnr/jnr-posix@3.1.15?type=jar"
+    },
+    {
+      "group" : "com.github.jnr",
+      "name" : "jnr-constants",
+      "version" : "0.10.3",
+      "description" : "A set of platform constants (e.g. errno values)",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "f1e246b219c056d222ab11bcfda5d6a0"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "af19ec7359dd72cbc7869c00bf7cdfa4c308e985"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "a617b0d8463d3ea36435bd1611113dedb3749157afd2269908ab306c992aefed"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "d177b951e42a4035ad3ae5be98abeebf7c7378ce79d22544ef2ace54ae9d6855467c8549a64cc9a08d75273985bd0f417ae70afdc55db884900314a1728304a2"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "74becf1e80d1c4e55df5973783a27c067a63507dae8c929cb1fcb2d1040ff5ffcb3ec42598ec7bbcb9eee9fcf3d80151"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "916804fd2a5495e9a742600bdd7c18042f39ac7594828ec1706270f919ca55f45b83572e3eacf590b301b9ed0e4b3c3d"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "7a3026583807d377f6a4e00b25003dfd6e3a44ab8e6f1e27af27786de2dc05ad"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "910397a0f1e7321ee1905cb802a388234a786a901653218be98a6c9edc02d0bd89a5055608a91c279ea01e2542ae0cc2d8f5c20e01e5f025362121a0e245d604"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "Apache-2.0"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/com.github.jnr/jnr-constants@0.10.3?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "http://github.com/jnr/jnr-constants"
+        },
+        {
+          "type" : "distribution",
+          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/com.github.jnr/jnr-constants@0.10.3?type=jar"
+    },
+    {
+      "group" : "com.github.jnr",
+      "name" : "jnr-ffi",
+      "version" : "2.2.11",
+      "description" : "A library for invoking native functions from java",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "37bce8f977e5390d7f8afdecf2854b83"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "bcf004ce358c87fc4cd2853b658d336348d0370f"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "a9c0bde792514d92e89f19de0412c5e26ee72db5989140242b2902a43b7ac7f5"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "fd979b6bfe073c711e66f380a46dbbf43424a50807c4511c95576034d0b9208f18d8bf66ad3972e9e1b01742c2c18abaf98ba0ec0bd9e2437323e8b71936d046"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "d7ef23a2fc175983e7b2541d652c51761a9de6fb5a46f9c7ce6c362ac61f63294325262a201d00899984474fdc309507"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "47514ff5e402638a6947d8e156a018bc87d8022d37254646bf3027aeea37942481bc907ef419c0a526d863f98d3b4c4c"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "e9a015c418d64cd951d22d1a739793cbc8daff3db8c5ec6b2683cd75e7503bd8"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "082f30a27fb8b485a779ea2631db01125837b8016c8b1d9f0af5cb6aee17c4de5a491f592229af503f006a679961a6c84dc01830cf125ef58dabeb0561eb2a8e"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "Apache-2.0"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/com.github.jnr/jnr-ffi@2.2.11?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "http://github.com/jnr/jnr-ffi"
+        },
+        {
+          "type" : "distribution",
+          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/com.github.jnr/jnr-ffi@2.2.11?type=jar"
+    },
+    {
+      "group" : "com.github.jnr",
+      "name" : "jnr-a64asm",
+      "version" : "1.0.0",
+      "description" : "A pure-java A64 assembler",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "6cb469cbbcf9eca78d50f7da595a8337"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "0a1cb8dbe71b5a6a0288043c3ba3ca64545be165"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "53ae5ea7fa5c284e8279aa348e7b9de4548b0cae10bfd058fa217c791875e4cf"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "922bdf2883c6a9cd6491289020d404ab151fd9ffa78d2ec884a2ac3af739d397016f1f4596c3e6c58744ea600fdbc2d330c8f520a1a9ab0eef6af6b667b35b89"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "933298b61960f09eccb672a0622a93a721d06cf85cdb29500ff6efdf874bad7b08aede29b6cf3b51141c16b38b250be2"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "2a7231c649f4805d34eb19c7e6b6dbb5ecdb663e29ef69a4523e2f7d2ae70740ca3aa03eba3476960d0fe344ea45df2d"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "fc270fd94a4e2b4fb1a9e4dd42ff4600c94e226ef3431aee998a915b62eb19ae"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "8ee64fec1b5e93ff9c2b596c0345ef120479217bea95d669c6e17f338a45945545b546813af2f58920a6bb2d607bd004870d10c8660a516261288d9f555fc850"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "Apache-2.0"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/com.github.jnr/jnr-a64asm@1.0.0?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "http://nexus.sonatype.org/oss-repository-hosting.html/jnr-a64asm"
+        },
+        {
+          "type" : "distribution",
+          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/com.github.jnr/jnr-a64asm@1.0.0?type=jar"
+    },
+    {
+      "group" : "com.github.jnr",
+      "name" : "jnr-x86asm",
+      "version" : "1.0.2",
+      "description" : "A pure-java X86 and X86_64 assembler",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "00670735acb2a9d1421b506dc7d338bc"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "006936bbd6c5b235665d87bd450f5e13b52d4b48"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "39f3675b910e6e9b93825f8284bec9f4ad3044cd20a6f7c8ff9e2f8695ebf21e"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "e928926b01ce545144c1bbf160edee9b923773e32f9a399a71c2ab5e8325d9cbcfb41f41c8f008b80d1beab8da1c4b74845996479c07ed73bc131959911d4762"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "91839815885716f1202a824b195a475d4d7561690192b42cf05b8c6432556a3e7e2dab13b6e970986a97711fb7060844"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "ed27f9b39907e92805c2d6ae6a045e00e24f51544501df3b98b593177df4fe55fee2347c668df66c2ea6fae64c66ee0c"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "f2e4e4807f6674a5b428cebdbdd01e8cadbeee71b785a046bec2bec1de63a41b"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "0dfffcf0daac9513b347ab8bf22887360feea890428e12857d7d3400400ba498fdc61307d9fd9c6a5e1baa9a96279afc07bba08c6229ed4ede71569d710fd0f6"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "MIT",
+            "url" : "https://opensource.org/licenses/MIT"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/com.github.jnr/jnr-x86asm@1.0.2?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "http://github.com/jnr/jnr-x86asm"
+        },
+        {
+          "type" : "distribution",
+          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/com.github.jnr/jnr-x86asm@1.0.2?type=jar"
+    },
+    {
+      "group" : "com.github.jnr",
+      "name" : "jffi",
+      "version" : "1.3.9",
+      "description" : "Java Foreign Function Interface",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "5b6841b6fc76445e9b337603ecce5f7d"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "0b776ea131fa693af2c943368b52acf94131cbd7"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "d73c0f00a5ce9dbf3cb5e5bb2691a326ca3882205ec9a06ceb9006537127e661"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "622f6a975ab0f6bb396e7f134e842b26908f4cf761db71994d32a24eb8edc3da7d186c36ee1953974938add3baf93af8a4d6a927b4ebaa37e20029079e8c3cd0"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "8953d31bd09ab4557c7ee7f7fa4b0412af8a2d3c0c7c9bc22ab177da25f3fe756f08b900ad200f2d4edea689923203ad"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "88d54302addca2467a423201fbe42d3fcab61f0e68181dad730ed24321e5e64cd287f4da3a8c70750f78b7dcb47dcd1d"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "611934c537d855df60fd416ef5e7a1e8ad13c566fe56e63f80914994334f3368"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "a880e7cad2f5e44954968e6dd801242ac0f3331bb9782da2dc9e9b479456d91fd96fc66ec486b98dd8506df5d7123c2820be1ddaed52246ccb299a10fc79c248"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "Apache-2.0"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/com.github.jnr/jffi@1.3.9?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "http://github.com/jnr/jffi"
+        },
+        {
+          "type" : "distribution",
+          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/com.github.jnr/jffi@1.3.9?type=jar"
+    },
+    {
+      "group" : "com.github.jnr",
+      "name" : "jffi",
+      "version" : "1.3.9",
+      "description" : "Java Foreign Function Interface",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "c542a6a89fff8904447f9bc17e4bde9d"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "163d683f80c06911f3e770c723d6e399e4c59448"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "bddfe460d528c68a71d0d4c9d30122f28f6f182f9ebb4be8f65e7090c4ca881c"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "fc05618a8e2e65fe7dd67cd934a58b0a0894c2d43a6244c9d4433434eec5908c6a68fdf3feef286b71a778a8b0693b34e57e668a13761de10072511cd7e817ee"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "8b6a2e5b11dc843ffcc83d75a4f9bfbc517ee05fad79705148596ff7127814dd224cf1ef7bce6db0bd4dc141bb01ff1c"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "96bc0e3ac0424619823cac358e8582c404cd7d189e0ee250cafeb10eb43022be6769f1a8f4ec033b9e9a646ba4d2268a"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "e6679ed3ee4b44b438f701866b4ce1f8ced6523c41bb192433617450b15504a8"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "4f3fa7ae1c0fbdeb8b9cd3f2ebe073ace357171dc70e1077e6f57dc9306036d9d399bb9189d6ae63e3ea317e1129aca1b40361296a0dd43bf4fcb45ecec3d3f7"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "Apache-2.0"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/com.github.jnr/jffi@1.3.9?classifier=native&type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "http://github.com/jnr/jffi"
+        },
+        {
+          "type" : "distribution",
+          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/com.github.jnr/jffi@1.3.9?classifier=native&type=jar"
+    },
+    {
+      "group" : "org.jruby.joni",
+      "name" : "joni",
+      "version" : "2.1.42",
+      "description" : "Java port of Oniguruma: http://www.geocities.jp/kosako3/oniguruma that uses byte arrays directly instead of java Strings and chars",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "0e8256e03dfe95fffa06594abe92dc08"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "71caea12fc5b80b08fa6daa8b3a27ea0fb2df8f7"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "e9e48418f85022c41633d2220f2cc1c71bbb86717e52646bcdfc7964c7f19882"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "53403b45a17eaa472166f184a9cb677bb36f4cb7b5335c8de45985e742325d468640b6770a46f51c1fbfc2d8ad5c8f54720f15b095ce7d27f67770eff9d7695a"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "38a2625398e30cbd53098883435ed2c5e1c86b5ca6cc7cb567969fcd5a61974bc6970377e00ed7142bc7d8229a723698"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "6f3d3ca60452a96d496a33789457977119bb462f0ab94711ee5c8117e7c13cbd0504a21d402f2331d2f8d95a1abbb613"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "2bd150761c338a2246b1d486f513a23dfaba212e638d15791912616065b7a0d1"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "d6688f7d2270814ffeacf7ec359d0dd41186d755d3263332111889698c9d2546d62627152740dc1d032eaf68822b66e5274216090600e02a420cd745737f8375"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "MIT",
+            "url" : "https://opensource.org/licenses/MIT"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/org.jruby.joni/joni@2.1.42?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "http://nexus.sonatype.org/oss-repository-hosting.html/joni"
+        },
+        {
+          "type" : "distribution",
+          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
+        },
+        {
+          "type" : "issue-tracker",
+          "url" : "http://jira.codehaus.org/browse/JRUBY"
+        },
+        {
+          "type" : "vcs",
+          "url" : "https://github.com/jruby/joni"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/org.jruby.joni/joni@2.1.42?type=jar"
+    },
+    {
+      "group" : "org.jruby.jcodings",
+      "name" : "jcodings",
+      "version" : "1.0.56",
+      "description" : "Byte based encoding support library for java",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "5562a7ff3f3e473f7a947be7c9d1a3b0"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "5b4a8dfea448f57057bff4af326467f4f28ecaa0"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "3084f114652f1c5e27e2cbc273a6de9a09ed9c795951648dbe175f309f5b9782"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "655f88032da90007c7f4e0f26ae2137c38a020451cb847adb094f75859b4fe9de91cf2840ee4ce8ffcb50f58df11ad82e64d2f32b5f406dd25bcecabd11fcdc9"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "f0965d7aef5f246b5a3a51e73868de1abff432e97646cd73ed62ec56401121443e66039771d5bf3575600c790b518ee8"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "fa3f0218f07bf99bfc9bca5c5c12b4e3f3aa28c5162a91a4beb3edd631c858baaf94a1f2539dca1eac418cad255b6cf5"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "29e918f6a8f1d62584c46d54b41bc7220176c3869da17a48c04b7a2c2f66ef13"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "1309b1684b19352f9ebe2a6b63a54bff77d19610078876f7dd093ef58b0ed10d2a4bd1ced2acb3897f8c829cdd9728b49952eec0e918d2f1b09dacdc316be80d"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "MIT",
+            "url" : "https://opensource.org/licenses/MIT"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/org.jruby.jcodings/jcodings@1.0.56?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "http://nexus.sonatype.org/oss-repository-hosting.html/jcodings"
+        },
+        {
+          "type" : "distribution",
+          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
+        },
+        {
+          "type" : "issue-tracker",
+          "url" : "https://github.com/jruby/jcodings/issues"
+        },
+        {
+          "type" : "vcs",
+          "url" : "https://github.com/jruby/jcodings"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/org.jruby.jcodings/jcodings@1.0.56?type=jar"
+    },
+    {
+      "group" : "org.jruby",
+      "name" : "dirgra",
+      "version" : "0.3",
+      "description" : "Simple Directed Graph",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "67c71ad64192513616e71c8fc75b5e2d"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "fcdf20c966ff7bd3299c3d7fb3e7bfb14e38d4ee"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "9ee2b48dcdfe0f6261200b81852a3f8c02af702269457c82f485d36d6e078360"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "a3ca12e57a48c3d8401329ada8ea80f8e3587a282095778c35e44f875324c7b75b9c9c0534d864fdfcc61fcd2b46742246c733e09b135050d24fa5ee08a4319a"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "dd171e33aa981361da575f1f065c3a0b5efe3ebfcb4bc4ede3168ff4e1b382b39f4e3eb799385ca790e3c577504b201b"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "909ab8edffab6fe2211a75ef14f46f4d831e9bfe4bf2cb30fdbbfcd388a8ed99f172d0a64fd75373f3b357a26b3e50bd"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "aed9c35f3b95e24d0a7a0fd575d24ce6d190506ca5dd5b56ff50dac43fb51745"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "67f0e0d5c61b65ab2bc2948625a0915bcba6ada91d910832fdbd1d646372baf3b617379604f2e515918a8fec0a96e40c7b492dc9725cbaf5673186fb9d5d42ed"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "EPL-1.0",
+            "url" : "http://www.eclipse.org/legal/epl-v10.html"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/org.jruby/dirgra@0.3?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "https://github.com/jruby/dirgra"
+        },
+        {
+          "type" : "distribution",
+          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
+        },
+        {
+          "type" : "issue-tracker",
+          "url" : "http://jira.codehaus.org/browse/JRUBY"
+        },
+        {
+          "type" : "vcs",
+          "url" : "http://github.com/jruby/dirgra"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/org.jruby/dirgra@0.3?type=jar"
+    },
+    {
+      "group" : "com.headius",
+      "name" : "invokebinder",
+      "version" : "1.12",
+      "description" : "Sonatype helps open source projects to set up Maven repositories on https://oss.sonatype.org/",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "add09bd8a21f157f9d6dbcaeb33ca97d"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "eeaaf9e753374c4c582bdb640742d680e22c9e5d"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "44ccc90262d6e67ccb1807df662572637953ebf712b7d6503bfcb9f076c2df9b"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "5b1f2b5702c995dbbe09a28741a096d1e3f421e86ae1cfadd68b4afd1e7f254630a738c321cb26c33b9b192502d66ce74f32c06431940917abf6244f6e25012d"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "dd6c8a7e4066fa188e77844be7b0685eda550de4a2e7c22837a21e555ea24a6434553216c3a4f02bfd4cc2bbce3f7d9f"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "9a080c51996ed79cbb80210dffbd2e31f23b62dc1169b9a4c4707216c98fe72fcf5bda767b5abbf832b31f607873c299"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "0976be97bb70e5e358a47d8d07fc549ef09a7aad885501f0d9efecae44c889a7"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "e440f2ced11816064230bc8cace7ebb4219e2d0155f623a4b886bf3016f85e637effb316209246b9aeb4cb5d92f3417032627a8f8ed4270cb7abd34017f03847"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "Apache-2.0"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/com.headius/invokebinder@1.12?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "http://maven.apache.org"
+        },
+        {
+          "type" : "distribution",
+          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
+        },
+        {
+          "type" : "vcs",
+          "url" : "https://github.com/headius/invokebinder"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/com.headius/invokebinder@1.12?type=jar"
+    },
+    {
+      "group" : "com.headius",
+      "name" : "options",
+      "version" : "1.6",
+      "description" : "Sonatype helps open source projects to set up Maven repositories on https://oss.sonatype.org/",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "3e377fcbed4e25a91f24c814e0ad4c8d"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "ad1647f0b713b8e05b437483573c772d4523a804"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "c4c52c7931c945792d48c6010596195359a35a82d6ac36c645f14705b9a277db"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "a4b32d835fc28a58783d07f99b213aa559b54bef8c994cea08dd95e522f48c8b91970f09f1919a999c4023f3fae46e10ab155b80a2dba2bc7212dacd9f7e5109"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "35b8bfbd359e50a1517d815314542bfd7a3b533c1a64244f4e88153ccfe6702ea664e2fef0b620f5e238156049f34ff7"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "ddb7f5a336b6607af9e4428af5974a874577129a7ff79e670186a7323efb90c39388d5ca60e36188f6c577fbd819812e"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "0d709b3085168418a6024588f0943e3e7e229f2600122cd4455cf98e8bdeb69b"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "6d66f5e3084d1720bb9bfc52236f37a9fb1109cf07f77f4379b669ffa3ba8b91514e0a94c3bc762e72a6e912f7f67800c2217703d83f67d63ba6efaaf02627eb"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "Apache-2.0"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/com.headius/options@1.6?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "https://github.com/headius/options"
+        },
+        {
+          "type" : "distribution",
+          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
+        },
+        {
+          "type" : "vcs",
+          "url" : "https://github.com/headius/options"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/com.headius/options@1.6?type=jar"
+    },
+    {
+      "publisher" : "jcraft",
+      "group" : "com.jcraft",
+      "name" : "jzlib",
+      "version" : "1.1.3",
+      "description" : "JZlib is a re-implementation of zlib in pure Java",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "386d3714fef534d21175d8885ae48bf7"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "c01428efa717624f7aabf4df319939dda9646b2d"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "89b1360f407381bf61fde411019d8cbd009ebb10cff715f3669017a031027560"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "339793df0001214aaadac2a5456c3cd54a0c09ba2c9e73cf13155adbfdf1c2a953f7336903e45e76a52ce6b48c5b7c78436667d7836e7354e02e85ba0908afd3"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "e0fe861e00a6136b1c97ae781ef56068b0e30c22a64ba4186b1703fd543878920e809f32756323f0fa68afc25f64653e"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "48f4e07ed293214fedb6ed444886131225f20e591ab0ac8236f64498b2f9aae067d0cb92c8e100263e6e9ccad8074c52"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "1a141fb006354f69bbf72a11e15c716be8260f7670ceff4ca764394e4473a91e"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "90236a8e878a8838ddc5f3129a1a9ab84d0849702bc4b8ec02d6c5dc09271927359d7da1121f55f36c16bd7d371b6fc631d5439cdd93d9a30ab248dcd84d4618"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "BSD-4-Clause"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/com.jcraft/jzlib@1.1.3?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "http://www.jcraft.com/jzlib/"
+        },
+        {
+          "type" : "distribution",
+          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
+        },
+        {
+          "type" : "vcs",
+          "url" : "git://github.com/ymnk/jzlib.git"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/com.jcraft/jzlib@1.1.3?type=jar"
+    },
+    {
+      "publisher" : "Joda.org",
+      "group" : "joda-time",
+      "name" : "joda-time",
+      "version" : "2.10.10",
+      "description" : "Date and time library to replace JDK date handling",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "c2a46de8a73ec7b60011429561ae72e3"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "29e8126e31f41e5c12b9fe3a7eb02e704c47d70b"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "dd8e7c92185a678d1b7b933f31209b6203c8ffa91e9880475a1be0346b9617e3"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "e6b873724800c0d8c4a3dabacd53c6b320e87fccd26109f22508ab17d95f21283cd705c68392c04ff76beab38593a02dff924aaee2c07ebb7af4ec6a5ddaa65f"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "7782be142400320d1313254c68f45c5f3cd3d7e310a83dd7a2d15ae924fac714539e607bdafb16af4fd277d0abec3d87"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "9ba509d2d0ac83d7adf75ffc4d6949ff7e54adac022c3e2f23b2aa5199c3260d59ec01f5f97ae6b4ac1a8ff583a7e6c4"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "cbe7879898aeab28dadc4b6814303929e92ed8512f0d1ac4b20ee46acbaec873"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "4998f180686fc8407da93da5e30266d1a5e9f0a5f7209c92d379772f78eb349ed6a42934d2cd00f9e19ee3c2243cbd15be1fc05617720bf4e69256791d2724c9"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "Apache-2.0"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/joda-time/joda-time@2.10.10?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "https://www.joda.org/joda-time/"
+        },
+        {
+          "type" : "distribution",
+          "url" : "https://oss.sonatype.org/content/repositories/joda-releases"
+        },
+        {
+          "type" : "issue-tracker",
+          "url" : "https://github.com/JodaOrg/joda-time/issues"
+        },
+        {
+          "type" : "vcs",
+          "url" : "https://github.com/JodaOrg/joda-time"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/joda-time/joda-time@2.10.10?type=jar"
+    },
+    {
+      "group" : "me.qmx.jitescript",
+      "name" : "jitescript",
+      "version" : "0.4.1",
+      "description" : "Java API for Bytecode",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "5fb5146d3bdc39e80c2641414521bc04"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "f1efcb28cb13d26faf789264d54251faf58f0b63"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "035d4afc5a27202c3e3f38c32506e3657697a4d6d97463eb25affe1cbf45efd5"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "638a6633314642dd13df3c0e4d5b9ce45845003c46bf06ecea3b01fe3391bf5c8a1a987ecab5a0608c542a5ec7f1f0ba3f93accc9391b8afd7e1cad3f96403aa"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "817f265cfbacc321a105fbbe4bbf9dc2d398c461d6cb41d44d881197048e9dad5fded2702f672a50351cb17325093127"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "dc1f46aff76e57eab1ef5db5ea2db7e26f7a8e13535ce6f064867c43eebaa4b7ef712814621252b36fa582e2260ae9a4"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "a04c51c3a3ecf7aa0e2376e41a4d42f1758d9760290fcb074ba2f8d028e06e2d"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "08f07a9d09aa5282598745b705c98887cdf05d872c4fd32d1a86e825699d7a05aee40c4442a557e1fa8f909deb4fd61b3137512f3dc3c5e2eeda626c83ffe09d"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "Apache-2.0"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/me.qmx.jitescript/jitescript@0.4.1?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "https://github.com/qmx/jitescript"
+        },
+        {
+          "type" : "distribution",
+          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/me.qmx.jitescript/jitescript@0.4.1?type=jar"
+    },
+    {
+      "group" : "com.headius",
+      "name" : "backport9",
+      "version" : "1.12",
+      "description" : "Sonatype helps open source projects to set up Maven repositories on https://oss.sonatype.org/",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "cf013aeba341a294bd27fe8aceeb316a"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "48995f1910bb87a5b53d8720092879fce54e04b8"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "c3e2e6a5981e7eb832854f6fe4884bf561bdc70b7e9dc98cab61420db2f55235"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "b84e17f280e5f8a169455f94ff947eb05b41d4a833f2f939418629a2c5f6048b935100c24e7e08ed442e2d6d5d5a422f932055500a0a4db18c55c726bc0b8d75"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "fb8fb79d68de9b8bd0fa7da2a1d6b78e2ca3783715a0f4a39f9ffbff3e3e19a565987a1d23f949cc29f22e019cd4324f"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "77a6498b4a77af0326eb0f68a7011478c92c7a4232ed551af571a7f5563fb40b0a9f982a702cff7aece6054a45c509c5"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "731f93ca00acee73e61807edb5526c61c92fca39015b9f86e1480802771a098f"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "c64e4dceb88253f9b1adb7b76b1fe36ab3d61c4f99558ec0f4d56f5b95f8f2880ed215e150a75bede67a682990da77eb5680be12e76e19149adab29089938206"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "Apache-2.0"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/com.headius/backport9@1.12?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "http://nexus.sonatype.org/oss-repository-hosting.html/backport9"
+        },
+        {
+          "type" : "distribution",
+          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
+        },
+        {
+          "type" : "vcs",
+          "url" : "https://github.com/headius/backport9"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/com.headius/backport9@1.12?type=jar"
+    },
+    {
+      "publisher" : "JRuby",
+      "group" : "org.jruby",
+      "name" : "jruby-stdlib",
+      "version" : "9.3.4.0",
+      "description" : "JRuby is the effort to recreate the Ruby (https://www.ruby-lang.org) interpreter in Java.",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "ccae698752774b25533cb9de03cc1fc9"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "88c79a738b5db3904c42bbaf9578e391d388e641"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "51e6f64af626cd9a2f2ee19e8ae5b3ad38f4d941ce617b5388e29367b64e23f5"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "9887b9b5cdebf29b54adc433f7d4c5d38040893872930f67900385385a6e794a1fa09b83daf8d6b6ece8d4ed4c5b32681fc69687266c30da7cd1639c18abfd3a"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "7cc0481e0bb1ae4fcbdbcc718cdbb68dcc2ee0429f809f4c3529c2245afd00693621131013b178c34c69ad5680c25153"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "7ad1893b96a3deed2417ddbd2ef5c66a20a099957e428d1c0c17ef31c3fda07adb0e3cf56cebf9711c8476a273dc8d91"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "168b3335c0b837fe2d212eb015c763f4fa97329d481a9220e54b294c21e8c9bb"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "75b616f54567845bc102a0661875b8139b4ea873d9b53a6dd2281c44f6d6a08e700f41159958458c123f498a365859d9c0315cfcf58afee189ca942cb040815a"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "GPL-2.0",
+            "url" : "https://www.gnu.org/licenses/old-licenses/gpl-2.0-standalone.html"
+          }
+        },
+        {
+          "license" : {
+            "id" : "LGPL-2.1",
+            "url" : "https://www.gnu.org/licenses/old-licenses/lgpl-2.1-standalone.html"
+          }
+        },
+        {
+          "license" : {
+            "id" : "EPL-2.0",
+            "url" : "https://www.eclipse.org/legal/epl-2.0"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/org.jruby/jruby-stdlib@9.3.4.0?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "https://github.com/jruby/jruby/jruby-stdlib"
+        },
+        {
+          "type" : "distribution",
+          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
+        },
+        {
+          "type" : "issue-tracker",
+          "url" : "https://github.com/jruby/jruby/issues"
+        },
+        {
+          "type" : "mailing-list",
+          "url" : "https://github.com/jruby/jruby/wiki/MailingLists"
+        },
+        {
+          "type" : "vcs",
+          "url" : "https://github.com/jruby/jruby/jruby-stdlib"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/org.jruby/jruby-stdlib@9.3.4.0?type=jar"
+    },
+    {
+      "group" : "com.beust",
+      "name" : "jcommander",
+      "version" : "1.82",
+      "description" : "Command line parsing library for Java",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "c350dc0db8aa038e6bbaf0050720d69c"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "0a7c5fef184d238065de38f81bbc6ee50cca2e21"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "deeac157c8de6822878d85d0c7bc8467a19cc8484d37788f7804f039dde280b1"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "72c9beb5d282ecdebadbd595c4f05710599328e48432dc196a261d8973ec767d52038e5bd26e7c0b78b85b4455687d59f9d0a367221e848e39c72f2f583baf26"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "4c1c536205e57f4ee6e27bdbeb809ce4b9e0c8273d678b06a8178660aca4704676197f70c28399886fcad70cf1bb8cdf"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "fe46acbe164c85af46002f3e76e5a2fe1a134cf0a9f0471890965ebd388b860e1e8469d1fa39fbfdfa9de718be5eb8ec"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "78737587181801bb459d4f09a1d2fba34c9bca274884a262cf9bc880fdd52c3d"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "9e0926e4e04de682de15a780422a5e7c31e8c5eecd6372122ba78a8e70c5ac8156b6b9b4e714ff280306d60d3dbc9d5b915fa8d11b472caa0080da0ba962a79a"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "Apache-2.0"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/com.beust/jcommander@1.82?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "https://jcommander.org"
+        },
+        {
+          "type" : "issue-tracker",
+          "url" : "https://github.com/cbeust/jcommander/issues"
+        },
+        {
+          "type" : "vcs",
+          "url" : "https://github.com/cbeust/jcommander"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/com.beust/jcommander@1.82?type=jar"
+    },
+    {
+      "group" : "com.google.guava",
+      "name" : "guava",
+      "version" : "20.0",
+      "description" : "Guava is a suite of core and expanded libraries that include utility classes, google's collections, io classes, and much much more. Guava has only one code dependency - javax.annotation, per the JSR-305 spec.",
+      "scope" : "required",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "f32a8a2524620dbecc9f6bf6a20c293f"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "89507701249388e1ed5ddcf8c41f4ce1be7831ef"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "36a666e3b71ae7f0f0dca23654b67e086e6c93d192f60ba5dfd5519db6c288c8"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "d8736b5151df2dd052c09548a118af15a8b8b40999954cd093cfd301445accb8b7e9532b36bac8b2fab9234a24e2e05009a33d0a8e149e841ebddbcc733a8e4c"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "23b88393eb8728de962a5108e2d73acc8f745f52ed692a59238dc029eadd20719fd6add5f06a2196d11d43800c334f89"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "474ab51ff1fb1e047e29791b77b39fe3b0f1ec0eb0da6e0a9e0c8b105fa785159c0e09b545c2e51ea62506f1f73f584f"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "33c10a1b58e8cdc9cb4a8c93cb407f98dde9aa324fd9c21054611163d0a2524c"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "03aacb9e1539c58558b9cd712b0b72bd61d5eb48ebf38da1e20a5fd66eb26c7e396b713a57c0bfd3400054b25b3690c94e30b8f0a511bd27ab3a2fa706ec18f7"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "Apache-2.0"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/com.google.guava/guava@20.0?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "https://github.com/google/guava/guava"
+        },
+        {
+          "type" : "build-system",
+          "url" : "https://travis-ci.org/google/guava"
+        },
+        {
+          "type" : "distribution",
+          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
+        },
+        {
+          "type" : "issue-tracker",
+          "url" : "https://github.com/google/guava/issues"
+        },
+        {
+          "type" : "vcs",
+          "url" : "https://github.com/google/guava/guava"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/com.google.guava/guava@20.0?type=jar"
+    },
+    {
+      "publisher" : "JBoss by Red Hat",
+      "group" : "org.jboss.forge.roaster",
+      "name" : "roaster-api",
+      "version" : "2.26.0.Final",
+      "description" : "Forge Roaster is a library for inspecting and manipulating Java types.",
+      "scope" : "optional",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "c144e90bf50feabe2c3f2f6154c40f4f"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "4e6cf8f05c328ea5af6092e82ef69e21b711d5a7"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "75b5a0be95d1df0126a8052507ab0b6a61eca12727497f333b42de7d0b06f9c5"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "b50f2e119bfa662947f5578bf591fed354646f56d46d84e00f6cf80081204f4ba478a18ad236505723d0c4c495abb109fff63e87a454a9ed101f60c8811e738e"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "185f9b52f821c1692bfccbf3ed6497c0c8cac9189d175233eefb960b683ab1e9edf50fe7b7df3faef83edb4b68c2f3cd"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "d8fdd62d16337271f99e0e6fdf637e94462f3fde342abcc89749dc88b07df2fa6bd45127c8ea77cb0d9295139a3b2584"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "6d9a6ab614de8e3d0df2b465d7634259f7adc1d58f00ad763f2361a510edb850"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "39baf7c99a8d83f4d53ec139ee56a4a8931422320a85c5c55df3bf9bf4dab16a4b1fd270e55002500b654be00bbb52fd7db5b06e1cc84451fa561a2533f5b0b6"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "EPL-1.0",
+            "url" : "http://www.eclipse.org/legal/epl-v10.html"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/org.jboss.forge.roaster/roaster-api@2.26.0.Final?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "http://www.jboss.org/roaster-parent/roaster-api"
+        },
+        {
+          "type" : "distribution",
+          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
+        },
+        {
+          "type" : "issue-tracker",
+          "url" : "https://issues.redhat.com/"
+        },
+        {
+          "type" : "mailing-list",
+          "url" : "http://lists.jboss.org/pipermail/jboss-user/"
+        },
+        {
+          "type" : "vcs",
+          "url" : "http://github.com/forge/roaster/roaster-api"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/org.jboss.forge.roaster/roaster-api@2.26.0.Final?type=jar"
+    },
+    {
+      "publisher" : "JBoss by Red Hat",
+      "group" : "org.jboss.forge.roaster",
+      "name" : "roaster-jdt",
+      "version" : "2.26.0.Final",
+      "description" : "Forge Roaster is a library for inspecting and manipulating Java types.",
+      "scope" : "optional",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "95667d597bb4d6d779deb392919cdf80"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "f930822c330b4fc3fda8301fe16e707421988737"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "f18362e88f270ebb7e57911cc0cd31dc895bfbc979f4bee4798380cf2eecd5e3"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "3b570ff5d1f7b36fe48158e642d2158c36440993e52d3826ce2a6c678ce1c14eb51128487124646e582caecbf9cba4b952f5798809f52aa6f9191477eebf5b0f"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "2ec64ec94a54740b8d8db7c127e6842105ddc20756ddc29cb5a8fad6f32e09553d633e745fc0b8c0e1c6a23fb07b3be5"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "b09c73353447ac6f87980e24f5be33b6fd7d9210fc2f7e19b0f6f454dfff2bc28d6f36fd70a2794e7eea5b50ce377bff"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "cd59a3b8e90e2fbda35f043266a430f60f7c3674cc5f15bcabd73fb542d5cb53"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "55f5a694ffa732ceff64f87cf518b0ebf9f73566cc2f4345a136412c3ca2c819990401d4eba68dc9f36fbb4954404f6b29bda2bcf26a021372bbc1164b4e607b"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "EPL-1.0",
+            "url" : "http://www.eclipse.org/legal/epl-v10.html"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/org.jboss.forge.roaster/roaster-jdt@2.26.0.Final?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "http://www.jboss.org/roaster-parent/roaster-jdt"
+        },
+        {
+          "type" : "distribution",
+          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
+        },
+        {
+          "type" : "issue-tracker",
+          "url" : "https://issues.redhat.com/"
+        },
+        {
+          "type" : "mailing-list",
+          "url" : "http://lists.jboss.org/pipermail/jboss-user/"
+        },
+        {
+          "type" : "vcs",
+          "url" : "http://github.com/forge/roaster/roaster-jdt"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/org.jboss.forge.roaster/roaster-jdt@2.26.0.Final?type=jar"
+    },
+    {
+      "publisher" : "VMware, Inc.",
+      "group" : "org.springframework.boot",
+      "name" : "spring-boot",
+      "version" : "3.0.2",
+      "description" : "Spring Boot",
+      "scope" : "required",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "e33dc08955d4f64814facb3bde003f4a"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "69d2e0a07f7df180a4aacdc47c47a3db656857dc"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "b6dd4c0ca0d7992469dbf8ab1bbf639df4d5ec21a8ced4afe4659982fd4081eb"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "b950ea5415ae5b2c27727277252ee95cbc8c08a54832420a8bdd3f035213aa2a5718d16fe799da6823dcfdac9c67995dcf2897cd7bcc99c33b45b09b86424804"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "a0d8e6e4ad76d86675ac23acf23bfa1608b6cb08a4717ff2bbba1acdd7757cc496c044e6189c09c1ce2e48625a1c7b36"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "d7c7d35c4d3eab555606eed225cf01932a4a2d73a509c30fdea410c54b9fd5fa78211edb7f15b974d27d49bedeb48d4e"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "ed2e21bde24fc5b20e80c3a38d6b57a74e3cffef4d0d18b0bc77b09678173ed3"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "9b762c83c3e74295ad2b5f4793d0a12b1b73c2e138038306a078c9cb712ab49948e6acb5a02ddb5d61c3972d6312c1011bc12ccd5219fbde5f2d43ca94fe25f6"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "Apache-2.0"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/org.springframework.boot/spring-boot@3.0.2?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "https://spring.io/projects/spring-boot"
+        },
+        {
+          "type" : "issue-tracker",
+          "url" : "https://github.com/spring-projects/spring-boot/issues"
+        },
+        {
+          "type" : "vcs",
+          "url" : "https://github.com/spring-projects/spring-boot"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/org.springframework.boot/spring-boot@3.0.2?type=jar"
+    },
+    {
+      "publisher" : "Spring IO",
+      "group" : "org.springframework",
+      "name" : "spring-core",
+      "version" : "6.0.4",
+      "description" : "Spring Core",
+      "scope" : "required",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "a54a62940239e9147f5504ee84c9dcb2"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "8e24ad493887023cf5fac93541c72516f8ed9f6a"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "97c9960ffd66f2385bf4b12a9c23fcd7319f1e04d51afb8b43bd43ea077b63d9"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "4dcc0e8922cd887ac39c7f9d9089350196f71caa34cabffda629926bc9347c01cfd0427a0fda481c473b3502c9e589d59cd11677f3791785264e98faaf3e7a58"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "b08147db57d9ed05d237bd19f0a8af50c796c4dd09dd2e8c6b19dd0184ffa0c409b66cf4634b63fbbb5bc9cc260bcfc6"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "3b43b987e1bf7233374b8dd064020e3b9e6e8270ca0cce98648fb18f0d04a484bd6f6d407070b10ba1f9684779062900"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "469538bd433475759502e27fbcc9fc151dddec8aa7676f4b03d84c8355a3616b"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "59d24316d7b0c6c3822bfbb2593933b0e2848fe515cc330068334cf32c65cd5a1646bb643b425288a955f4f5da177f18b26bc4e6cd1d4d79dc522c0f971f2243"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "Apache-2.0"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/org.springframework/spring-core@6.0.4?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "https://github.com/spring-projects/spring-framework"
+        },
+        {
+          "type" : "issue-tracker",
+          "url" : "https://github.com/spring-projects/spring-framework/issues"
+        },
+        {
+          "type" : "vcs",
+          "url" : "https://github.com/spring-projects/spring-framework"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/org.springframework/spring-core@6.0.4?type=jar"
+    },
+    {
+      "publisher" : "Spring IO",
+      "group" : "org.springframework",
+      "name" : "spring-jcl",
+      "version" : "6.0.4",
+      "description" : "Spring Commons Logging Bridge",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "4b0fd095805c865411add0e8146f53f8"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "2d6523d00fc40cdb2c2f409113447940d2c872b5"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "88c40aac5cc4a6172985e0678df0eca65ecd6e558273d3290836b991c30c2340"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "57178538d56710b9afdcae240436e9a51f1279afc3844f62df5b79cbaa04eb6ab3e59182fbf7b4d224b5b61fe0901db1f3cab7e4246f496e89b8e0e7f3a4a4e0"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "a4f9f96c4e6f33b83ee7d9fb60c2e5ab8419a2b18876f87bf8ae02db9b7f201ee3959967724daf1ad69dd1080a675555"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "bb4f44aff988dd4fe9c089929d47a84404e7237235c740e3e291a730c1a9df3cdf6574cdc317a08be618cf0334cfff7d"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "7651e41cdc6d1b7caf330faf8a748ba4c39967adc6c1a5a96d08a8befab31563"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "40a28a1e1d89e584a513e3bae79b3eb62b9379d5738ae38acffbf2919d8fcc04cecad412b9da0ef3bc4a61225d257ed5fda552257a9c045293e3a66d497614c5"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "Apache-2.0"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/org.springframework/spring-jcl@6.0.4?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "https://github.com/spring-projects/spring-framework"
+        },
+        {
+          "type" : "issue-tracker",
+          "url" : "https://github.com/spring-projects/spring-framework/issues"
+        },
+        {
+          "type" : "vcs",
+          "url" : "https://github.com/spring-projects/spring-framework"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/org.springframework/spring-jcl@6.0.4?type=jar"
+    },
+    {
+      "publisher" : "Spring IO",
+      "group" : "org.springframework",
+      "name" : "spring-context",
+      "version" : "6.0.4",
+      "description" : "Spring Context",
+      "scope" : "required",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "793530897927541e0075796f4c0ec905"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "4fffcbb7eb4f1e9f1a4c9d3ca60098f7c063fc05"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "14cf248704963e59251251ab662ade7233e063aae27047ceaa23e0e31b72a874"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "047c0f5e7ed423aefd26826ab61d53701050603e674a64071c127913c0c830aa7879a3b9de5920e261121bbef04f51f3d8841b3661b60f42a0f8764805f018bd"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "891de512f17741a9b9c739ac351196b2d3bfa2fabf7c65e6d369b8b00d9c987f1010766d0bd97c84e0a2743cc3e06676"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "7b25c2e3d23c9dfb59a8b86f61fa7aea4aad22b829634e6b6139c2cd3e5049411851489a822f0625deb840f15a88692e"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "8c188088fd8cef2d2eb13976873485cd9f156ac890f7033549b5ac8886a6fd41"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "66c8e6ad4e44d8a7a8d5aef51314444bc12a7bc5e68760c42a6a1301a067d88586f94e085d59ab62ee9a481f4801615e5a55f69a87ff846652503ac12f596526"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "Apache-2.0"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/org.springframework/spring-context@6.0.4?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "https://github.com/spring-projects/spring-framework"
+        },
+        {
+          "type" : "issue-tracker",
+          "url" : "https://github.com/spring-projects/spring-framework/issues"
+        },
+        {
+          "type" : "vcs",
+          "url" : "https://github.com/spring-projects/spring-framework"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/org.springframework/spring-context@6.0.4?type=jar"
+    },
+    {
+      "publisher" : "Spring IO",
+      "group" : "org.springframework",
+      "name" : "spring-aop",
+      "version" : "6.0.4",
+      "description" : "Spring AOP",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "fa8f0d8b560bca9725463210064486f1"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "c47b65c09a5a6fc41293b6aa981fcbe24a3adcd0"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "65c9c750fb17f6fbf3629cbe4d895f4b505166a5a4ddc404346aac77bfccb0b3"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "7be7249d0f9fc1c63c3b764efd56602205a9b74693c29ae78f03a55887fd73940e75b453926a20e1700a78735e648b8dcafbb946da11db1856ef7c64accf1fd8"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "c8a625fb0e86f6d00c8553107131ee6c8021a086a14331581c486e1aa61a5279411ad47003d079869a82b29b26c53d04"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "5af59e3377c13eba7e7cff693760e05c34590853d7497ae9ae6f496970c62e4e6c224de0b9d12c54f1753445a429a9c4"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "a2bf1dd7a091ca31ff249e26eb5eba7bce13f22f76c593985037f36764f030b2"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "5ca603ffd23250dae31dd8d6cf95af6d887bcef09da59e79d75a8c3d473c17a9ad48aeec1aec3c0b22c8bfa50fbd9a1ffc9f6efd1df890af722c2b0789ecf1bc"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "Apache-2.0"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/org.springframework/spring-aop@6.0.4?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "https://github.com/spring-projects/spring-framework"
+        },
+        {
+          "type" : "issue-tracker",
+          "url" : "https://github.com/spring-projects/spring-framework/issues"
+        },
+        {
+          "type" : "vcs",
+          "url" : "https://github.com/spring-projects/spring-framework"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/org.springframework/spring-aop@6.0.4?type=jar"
+    },
+    {
+      "publisher" : "Spring IO",
+      "group" : "org.springframework",
+      "name" : "spring-beans",
+      "version" : "6.0.4",
+      "description" : "Spring Beans",
+      "scope" : "required",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "60451d470adf96105df9f5501754c0be"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "7d903607ecfcdefccd0d48aea8724632479b3e83"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "f017f5f8fa5164e956eec1fb728086bffa16a742bb4a2545652e932d31ba9046"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "59bbfac2bb2f97b13823805d43c98cd87ede08c6243fee163115429837040146ad9c257d142438ca17c75752c0ab4d1feffd33a66514904790be51ca57209328"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "15ab36d982dda7b64956871ecafbbacaf58ef65cec097dd5be4808a125870c6935b81572c78e7c75613224672f1e97e3"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "fc25573030d3085bb00cf7941fb50febc00059dbd30d35b26a445cd8c4c72e2b543adbf03216d7ee7aa8cbc44af5a4b5"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "a493142b2b9cd1143c9391075b6090bce4b344dbbe7ef1495da65a34d5d1ee19"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "ff3e35f5b99723c069be4e693421d188ad5db71283043de789f8a25a6c5552801e8baddceffc5263489628c9d69f3f215f2cebbb2af58c5697b041e25ebfbee1"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "Apache-2.0"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/org.springframework/spring-beans@6.0.4?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "https://github.com/spring-projects/spring-framework"
+        },
+        {
+          "type" : "issue-tracker",
+          "url" : "https://github.com/spring-projects/spring-framework/issues"
+        },
+        {
+          "type" : "vcs",
+          "url" : "https://github.com/spring-projects/spring-framework"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/org.springframework/spring-beans@6.0.4?type=jar"
+    },
+    {
+      "publisher" : "Spring IO",
+      "group" : "org.springframework",
+      "name" : "spring-expression",
+      "version" : "6.0.4",
+      "description" : "Spring Expression Language (SpEL)",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "aca70af435ccd762f0ab89fad97a1e2e"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "a908e6d3c46fcd6b58221d8427bbaf284bbbee0c"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "d101ca2341e33a6e67bb083ce0c99fb5dd9b604e2057e828a56719db802e471d"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "fcfc7c9b2104fa4a8a7672aa2ed570a9dedfc3ae70d4c49599223f0f72fa1ef21f1ea4aa0629a9ef8a548b02ef101ab4ceda1be83797839ef9318cc816e14af1"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "7c829b1914d11487064e178ef1af670a7a9d140da995b391b2cee3a6089050fd4f788e9ff4f4600da38c3bf98fa1a13b"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "fccd3cbf2e84893078ec0cf74108c05e83985f39d494e662a1c811cf5902c3a8fcf8b0e5877b3a18d18295582a7e3605"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "0e703bc6b77ea1a4e9525ea698885cf8e5c765aa6f121ef8cbf57380768497d7"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "bef760a96ecb4ae5b915b014caca3606086b1c99388fc793e333605e7f999585e407d43ec970cf6969d041350c6754dfe76a1d51e81f9bb92b57c80d2841439f"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "Apache-2.0"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/org.springframework/spring-expression@6.0.4?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "https://github.com/spring-projects/spring-framework"
+        },
+        {
+          "type" : "issue-tracker",
+          "url" : "https://github.com/spring-projects/spring-framework/issues"
+        },
+        {
+          "type" : "vcs",
+          "url" : "https://github.com/spring-projects/spring-framework"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/org.springframework/spring-expression@6.0.4?type=jar"
+    },
+    {
+      "publisher" : "VMware, Inc.",
+      "group" : "org.springframework.boot",
+      "name" : "spring-boot-autoconfigure",
+      "version" : "3.0.2",
+      "description" : "Spring Boot AutoConfigure",
+      "scope" : "required",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "1b113434d1beea11eda348657541c332"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "42ad589ec930e05a2ed702a4940955ff97b16a8c"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "c124f999887a1cf1001365ca9fe7e57f834a39264374171ea33caf877b75b5c1"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "64cecf9cba167b7be5f09fbf94bff0d83e18e2c9b8f4c922302cd91173260d6500e83ecedc676f0ea402d59f703cef180b73dd547d6331eff745e1d9e8576363"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "3a839dc32577c94ccffd27fb2c57e9060d1cec66ecdecc1cdb32592f8fd8647a7bf6a591375fe1b25a2b22d7614ff0b9"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "235f4a3ce04b800005b1bd1d8963f9b2cb68ba87b5e83a2858adc5efe0d80221a674acccc7514f07c74f4d3e6630e85a"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "0033c4165f25cf30aca28de7239e0a97506347229f6c07362ef1365955a7529d"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "1b0b072b508848bab370f4181b059722ebea4e4d147f5736932e03439ae9d384c5d035fb0bd99d65484b1850a14066b57f9490166d3cb9fc7b48cd3dc712dc64"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "Apache-2.0"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/org.springframework.boot/spring-boot-autoconfigure@3.0.2?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "https://spring.io/projects/spring-boot"
+        },
+        {
+          "type" : "issue-tracker",
+          "url" : "https://github.com/spring-projects/spring-boot/issues"
+        },
+        {
+          "type" : "vcs",
+          "url" : "https://github.com/spring-projects/spring-boot"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/org.springframework.boot/spring-boot-autoconfigure@3.0.2?type=jar"
+    },
+    {
+      "publisher" : "Apache Software Foundation",
+      "group" : "org.freemarker",
+      "name" : "freemarker",
+      "version" : "2.3.32",
+      "description" : "FreeMarker is a \"template engine\"; a generic tool to generate text output based on templates.",
+      "scope" : "required",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "22624adfe32b76fe3be07a84de4e1c03"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "8607259125d4fbe982754227ea4f75dd513c6d19"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "04d65ec1bde6cea20e3495d5e78ef96ab774d9936434861d3254bd88e7e94f92"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "934c6c2bf47c1b88b1f81c25294cd83f5105f90f565e1fce75a09a54e51424fb8335542a6d5c3eb9df19dbc0007e869e9b6aebaf37880eac09759529dc0c5ca7"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "6fefe48f8aa5b570695ba5bdbed36a35b59b24673c0977890edf1eda68792a7001946e422cf56b0f5138edb247fac0dc"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "3d21e14024108b2c89f2acd0de306a8f31cea67f55d7c5fa5ceb84a6bca0d52672179b1042a4f313aabacaf020e130b2"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "91fb6edbf9930b9e21c290784b08e5b5a67ff94a4b8e34c47c0bc6f6d81619c7"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "8df650d10a408d90ae0b20dc8c88bfa46309ab7287f0d16c5c9f60f113760a789aadd739080285343db9b3405084ef9049ad6e80b88f74fe8a8924ec741817cb"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "Apache-2.0"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/org.freemarker/freemarker@2.3.32?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "https://freemarker.apache.org/"
+        },
+        {
+          "type" : "distribution",
+          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
+        },
+        {
+          "type" : "issue-tracker",
+          "url" : "https://issues.apache.org/jira/browse/FREEMARKER/"
+        },
+        {
+          "type" : "mailing-list",
+          "url" : "http://mail-archives.apache.org/mod_mbox/freemarker-dev/"
+        },
+        {
+          "type" : "vcs",
+          "url" : "https://git-wip-us.apache.org/repos/asf?p=freemarker.git"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/org.freemarker/freemarker@2.3.32?type=jar"
+    },
+    {
+      "publisher" : "OW2",
+      "group" : "org.ow2.asm",
+      "name" : "asm-tree",
+      "version" : "7.0",
+      "description" : "Tree API of ASM, a very small and fast Java bytecode manipulation framework",
+      "scope" : "optional",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "1879361985d6ccae30837cc3a4ce4d59"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "29bc62dcb85573af6e62e5b2d735ef65966c4180"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "cfd7a0874f9de36a999c127feeadfbfe6e04d4a71ee954d7af3d853f0be48a6c"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "81a223620dd16340d18ecba20ab15cfe078f61ab0ec1aef091afcd282e3f6047b9800200412116289ec14917b5ece9414c8009e92cc9a3333c677b5bfec13bcf"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "45542c2405b9c4e63d20cad99f73552e2f7a4c439f49b233f03c7d6c0dddc125ed4b837492eca431ca679c5d74c8f39d"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "6c4c247a3c020013b140f1dcb12924ec1d5392893cf300fb79d772ad6da0c9bb9cf64dba9343021f8469bd8a52634eee"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "e2cf8b4e3a77b0700ffc5ba33fd3f7a820b92ca4e115621357e8cb7ddacdaf91"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "5cee20e519b10a0e683ec62b8dadba2054533c5efeca81bbfa2b4d0ca5b5c72aaff0aacd6316c13468d4d36ad1ded9ef92009b40c1ac9a6dfbd5dae585e98bf9"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "BSD-4-Clause"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/org.ow2.asm/asm-tree@7.0?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "http://asm.ow2.org/"
+        },
+        {
+          "type" : "distribution",
+          "url" : "http://repository.ow2.org/nexus/service/local/staging/deploy/maven2"
+        },
+        {
+          "type" : "issue-tracker",
+          "url" : "https://gitlab.ow2.org/asm/asm/issues"
+        },
+        {
+          "type" : "mailing-list",
+          "url" : "https://mail.ow2.org/wws/arc/asm/"
+        },
+        {
+          "type" : "vcs",
+          "url" : "https://gitlab.ow2.org/asm/asm/"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/org.ow2.asm/asm-tree@7.0?type=jar"
+    },
+    {
+      "publisher" : "OW2",
+      "group" : "org.ow2.asm",
+      "name" : "asm",
+      "version" : "7.0",
+      "description" : "ASM, a very small and fast Java bytecode manipulation framework",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "4cdf9fd77ce48671ff9fd607f2a8a93c"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "d74d4ba0dee443f68fb2dcb7fcdb945a2cd89912"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "b88ef66468b3c978ad0c97fd6e90979e56155b4ac69089ba7a44e9aa7ffe9acf"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "b31699f50485ddc4e84466064cf5789a3e61bafbec53c4b9cb19ffef07b36722d3efdca8722884fd6d6dedaca65db4dd6f71cd886bba599e8a77971955167a60"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "ece91dc20be47d396ae9218b789cd41aa8290ce79b60369c42f2e974647b5fd32898181a0f44b08275e32f07ea9a411f"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "8b9b0416bf4739b698ff8c5ab97c8d70f535ea92f88d2227680b01b2d508ad59a9c364d8a21bd96d78884834d4312ebe"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "6e99b37e75db90a648fef1f1ae8aafda0f6cf597ec282236f03ec978dd7e11e4"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "dd99c004f99697944316707aedd3822f86c27b0cf42ceda83b8807daab2f495e1b79d6e5bdfffaaa833a7f7626585947787f665ebf35b607316bde9499ceb7c6"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "BSD-4-Clause"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/org.ow2.asm/asm@7.0?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "http://asm.ow2.org/"
+        },
+        {
+          "type" : "distribution",
+          "url" : "http://repository.ow2.org/nexus/service/local/staging/deploy/maven2"
+        },
+        {
+          "type" : "issue-tracker",
+          "url" : "https://gitlab.ow2.org/asm/asm/issues"
+        },
+        {
+          "type" : "mailing-list",
+          "url" : "https://mail.ow2.org/wws/arc/asm/"
+        },
+        {
+          "type" : "vcs",
+          "url" : "https://gitlab.ow2.org/asm/asm/"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/org.ow2.asm/asm@7.0?type=jar"
+    },
+    {
+      "publisher" : "The Apache Software Foundation",
+      "group" : "org.apache.camel",
+      "name" : "spi-annotations",
+      "version" : "4.0.0-SNAPSHOT",
+      "description" : "Annotations for Camel Endpoint developers",
+      "scope" : "optional",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "5390a9d146b36c1f4457f432e7548730"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "1f65b3c083b8abac3e961cbaa45c6241b543a380"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "8e387d2e4d4444f2f7c637cfc459f58df5bfaac2df96653ca0ca1c59b5f3d1aa"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "6a619e299a59b4976efaf4d2881a1b48f9e194f1e3c96b1b750c896a81184edd08d521dc723caa002c6a24f076b5a46e7269f9fe964cb57d271506dc5fe3e498"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "27e1ee58ca169b2233c6ea6e5309b2ff1c08ca74ae94622943a0f68b26fee842d3b63893b0e7574d9881560c00a70740"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "60aeb67f1550f7f2f318e41d50d374efe174a27ad1d3031cadaf2654affd01b720921268cef481839e608aec4d3aa58b"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "da100bc1ea53be616966f1843211d389978c124041f28a898ac579549e13842f"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "1e7649b03468a305e3d5730afd8bc6f93a779f29a8a6eedf1de5103d62c807cf20a2395272663eb1d7c5dc3232817057552a7f2559a73fa9826546cf94cae91d"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "Apache-2.0",
+            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/org.apache.camel/spi-annotations@4.0.0-SNAPSHOT?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "https://www.apache.org/camel/camel-parent/tooling/spi-annotations/"
+        },
+        {
+          "type" : "distribution",
+          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
+        },
+        {
+          "type" : "mailing-list",
+          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
+        },
+        {
+          "type" : "vcs",
+          "url" : "https://github.com/apache/maven-apache-parent/tree/apache-29/camel/camel-parent/tooling/spi-annotations"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/org.apache.camel/spi-annotations@4.0.0-SNAPSHOT?type=jar"
+    },
+    {
+      "publisher" : "AssertJ",
+      "group" : "org.assertj",
+      "name" : "assertj-core",
+      "version" : "3.24.2",
+      "description" : "Rich and fluent assertions for testing in Java",
+      "scope" : "required",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "b596a91049e6ce526bc5595c1bebea2c"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "ebbf338e33f893139459ce5df023115971c2786f"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "df3d0b348f1fe806bdddcb10fa4ae63c6679e9888d4bc7055f09848517976aa3"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "d8e3159effc7954258f2398e26c34eab6c243675408c7b5fcd7ed04a7b7dc06006514510ad15be9e7725f724cbf6e5c534cb22cbfb7c0aed71b81d4ed5755220"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "4f06196b5329e215282476d8e3aa5065092924bccb91da4eb0aa2e8fcd2509f249369654f0c17b59c38f11b878a305e3"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "3029ae58aef975843e9205f130dcdd8f8e7da5ff1bfad62b7d918ffe52b74a3c34a859af13393abe122124a9132f3feb"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "2db6965251a03be26f5baa83792a002444b4de34aaaefb0e6cf3cccf0a20939e"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "fa3ffb87bc40c3f881fb477d41c8565cbc1ce46ead2030442674bb86a425c722b75fce5bb3c22425b21cc3122ac46e0f28b2eaba2bcf5d5ddcb31f47d967b890"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "Apache-2.0"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/org.assertj/assertj-core@3.24.2?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "https://assertj.github.io/doc/#assertj-core"
+        },
+        {
+          "type" : "distribution",
+          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
+        },
+        {
+          "type" : "issue-tracker",
+          "url" : "https://github.com/assertj/assertj/issues"
+        },
+        {
+          "type" : "vcs",
+          "url" : "https://github.com/assertj/assertj/assertj-parent/assertj-core"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/org.assertj/assertj-core@3.24.2?type=jar"
+    },
+    {
+      "group" : "net.bytebuddy",
+      "name" : "byte-buddy",
+      "version" : "1.12.21",
+      "description" : "Byte Buddy is a Java library for creating Java classes at run time. This artifact is a build of Byte Buddy with all ASM dependencies repackaged into its own name space.",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "50a7c31e5a3b01c15df6a5415e7b3cdb"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "1a257bbdb9288f2558d3767cc2cc22b499d5091c"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "f6f45c2237a7f132c16745ad2a52c4cdde58028b11ee80b09f0d422f4930d685"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "43cafae5414f32e0fe307029dc1ec1675e39be9b93ea9e7b4432e404348f985c5dd7c96723fd5962ececbb6fda4085020954259b1b96220170fb64799f941d65"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "0a9c26af506cb5cb9c7e8c6c4858072cc902a8da3afb63af01e3bea465ac56fd30a870fe35a54393cc81b0ad1b3ec04d"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "2b5f2c8c1a35be18978859a9f521019300c8b0f0ade4811d9be72e2c8137a8d40c20cff9b8c58e6b3f82046382a8aa6a"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "00f98eb4576ef076b79da84144cc3b19d4f0d61c37b3a95d70350444619d7c60"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "ddcbaf2e83c38cfc97dda7eea625ca1cf2f62e95633d060375cf2f7b1bc1de2820d282fc6843c2f9e31aecf84b43667eeffce517df6c00778c4ba6ea58267ed1"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "Apache-2.0"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/net.bytebuddy/byte-buddy@1.12.21?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "https://bytebuddy.net/byte-buddy"
+        },
+        {
+          "type" : "distribution",
+          "url" : "https://s01.oss.sonatype.org/service/local/staging/deploy/maven2"
+        },
+        {
+          "type" : "issue-tracker",
+          "url" : "https://github.com/raphw/byte-buddy/issues"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/net.bytebuddy/byte-buddy@1.12.21?type=jar"
+    },
+    {
+      "group" : "org.apache.camel.springboot",
+      "name" : "camel-spring-boot-dependencies-generator",
+      "version" : "4.0.0-SNAPSHOT",
+      "purl" : "pkg:maven/org.apache.camel.springboot/camel-spring-boot-dependencies-generator@4.0.0-SNAPSHOT?type=pom",
+      "type" : "library",
+      "bom-ref" : "pkg:maven/org.apache.camel.springboot/camel-spring-boot-dependencies-generator@4.0.0-SNAPSHOT?type=pom"
+    },
+    {
+      "group" : "org.apache.camel.springboot",
+      "name" : "camel-spring-boot-dependencies",
+      "version" : "4.0.0-SNAPSHOT",
+      "purl" : "pkg:maven/org.apache.camel.springboot/camel-spring-boot-dependencies@4.0.0-SNAPSHOT?type=pom",
+      "type" : "library",
+      "bom-ref" : "pkg:maven/org.apache.camel.springboot/camel-spring-boot-dependencies@4.0.0-SNAPSHOT?type=pom"
+    },
+    {
+      "group" : "org.apache.camel.springboot",
+      "name" : "camel-spring-boot-bom-generator",
+      "version" : "4.0.0-SNAPSHOT",
+      "purl" : "pkg:maven/org.apache.camel.springboot/camel-spring-boot-bom-generator@4.0.0-SNAPSHOT?type=pom",
+      "type" : "library",
+      "bom-ref" : "pkg:maven/org.apache.camel.springboot/camel-spring-boot-bom-generator@4.0.0-SNAPSHOT?type=pom"
+    },
+    {
+      "group" : "org.apache.camel.springboot",
+      "name" : "camel-spring-boot-bom",
+      "version" : "4.0.0-SNAPSHOT",
+      "purl" : "pkg:maven/org.apache.camel.springboot/camel-spring-boot-bom@4.0.0-SNAPSHOT?type=pom",
+      "type" : "library",
+      "bom-ref" : "pkg:maven/org.apache.camel.springboot/camel-spring-boot-bom@4.0.0-SNAPSHOT?type=pom"
+    },
+    {
+      "group" : "org.apache.camel.springboot",
+      "name" : "camel-starter-parent",
+      "version" : "4.0.0-SNAPSHOT",
+      "purl" : "pkg:maven/org.apache.camel.springboot/camel-starter-parent@4.0.0-SNAPSHOT?type=pom",
+      "type" : "library",
+      "bom-ref" : "pkg:maven/org.apache.camel.springboot/camel-starter-parent@4.0.0-SNAPSHOT?type=pom"
+    },
+    {
+      "group" : "org.apache.camel.springboot",
+      "name" : "camel-spring-boot-starter-generator",
+      "version" : "4.0.0-SNAPSHOT",
+      "purl" : "pkg:maven/org.apache.camel.springboot/camel-spring-boot-starter-generator@4.0.0-SNAPSHOT?type=pom",
+      "type" : "library",
+      "bom-ref" : "pkg:maven/org.apache.camel.springboot/camel-spring-boot-starter-generator@4.0.0-SNAPSHOT?type=pom"
+    },
+    {
+      "group" : "org.apache.camel.springboot",
+      "name" : "core-modules",
+      "version" : "4.0.0-SNAPSHOT",
+      "purl" : "pkg:maven/org.apache.camel.springboot/core-modules@4.0.0-SNAPSHOT?type=pom",
+      "type" : "library",
+      "bom-ref" : "pkg:maven/org.apache.camel.springboot/core-modules@4.0.0-SNAPSHOT?type=pom"
+    },
+    {
+      "publisher" : "The Apache Software Foundation",
+      "group" : "org.apache.camel.springboot",
+      "name" : "camel-spring-boot",
+      "version" : "4.0.0-SNAPSHOT",
+      "description" : "Using Camel with Spring Boot",
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "Apache-2.0"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/org.apache.camel.springboot/camel-spring-boot@4.0.0-SNAPSHOT?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "https://camel.apache.org/spring-boot-parent/core-modules/camel-spring-boot"
+        },
+        {
+          "type" : "distribution",
+          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
+        },
+        {
+          "type" : "issue-tracker",
+          "url" : "https://issues.apache.org/jira/browse/CAMEL"
+        },
+        {
+          "type" : "mailing-list",
+          "url" : "dev-subscribe@camel.apache.org"
+        },
+        {
+          "type" : "vcs",
+          "url" : "https://gitbox.apache.org/repos/asf?p=camel-spring-boot.git;a=summary/spring-boot-parent/core-modules/camel-spring-boot"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/org.apache.camel.springboot/camel-spring-boot@4.0.0-SNAPSHOT?type=jar"
+    },
+    {
+      "publisher" : "VMware, Inc.",
+      "group" : "org.springframework.boot",
+      "name" : "spring-boot-starter",
+      "version" : "3.0.2",
+      "description" : "Core starter, including auto-configuration support, logging and YAML",
+      "scope" : "optional",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "2faa5800da45d7a56afe93f60a59f0e0"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "a9426629b5a83ad64fbe4e1d24081cccf4cdab14"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "394493ab5c41c268a1d3e43a9d6cf4b46846636bb443cac129b1aba94bac09b9"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "902aeec6a4ab1662c00e95872eb84ddeb6bc843f518498162ed65e305caa2b5eae24cffc27a31f02e8e6fd58730344c45a9152f03088f7109cae0e452de8c434"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "b17acf0f2c2d2efeb0f9f04e2a2bb5f794e6211ecb878daf8ffcd2025742d761c280cdbe2a007e17aa7e05879863c985"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "6d77393175e7f32160c7e828bc03b7b6eaa147a9be2cf942d4d0b9918d9a7fe1593f6bc7eba96f8b66cf964d906f598b"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "c1adff573a8a9a29749e6fd00c7d09356f1fbec253113662d0bfcb581fd1ada2"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "e4e59fe22055b97c36472ba23550aa0b7f44a7dd3418c74c01dddefd49303bd46c4175ab72fa50218d4e0c8ceb5c9e2cfbf71e1ab346f914b096e67b15d03acc"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "Apache-2.0"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/org.springframework.boot/spring-boot-starter@3.0.2?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "https://spring.io/projects/spring-boot"
+        },
+        {
+          "type" : "issue-tracker",
+          "url" : "https://github.com/spring-projects/spring-boot/issues"
+        },
+        {
+          "type" : "vcs",
+          "url" : "https://github.com/spring-projects/spring-boot"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/org.springframework.boot/spring-boot-starter@3.0.2?type=jar"
+    },
+    {
+      "publisher" : "VMware, Inc.",
+      "group" : "org.springframework.boot",
+      "name" : "spring-boot-starter-logging",
+      "version" : "3.0.2",
+      "description" : "Starter for logging using Logback. Default logging starter",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "e280c74ef74badabd89223c65bfd0549"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "1c5c71058a0297534d5c5f33a5d125bbbdb6a390"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "8f0913e66b756376cb4456a9147bc9f03515afbc19deadda25c45fd3dd93c0b9"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "6adf854c301cccf45e3ff62c5f6806a40709d0d5b2084920db94ec09f83659f41605de6de796494425a437f919cc14dab4edae761dbaddd571adeb4ef9c8f7bb"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "9ac02c868595416d956b7cb21d950c364c19d306030d631ea53e7d247413deed071964e728259d910698a8943ef6e1d0"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "c9b80f74a1985ed93f143982158489871ca0f0b6e9fc2c4dc931c52755599a57fc32421590f95f4cc3f52939a94c1329"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "5238d58ab2e51511e35c5650d6e4205c660ff2cedbd3806cb01418ed18b83101"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "e4fa7ef5dd6b0d73331f325f9aa0806af7ef25fb864116989381c081da9764438e69e932bc2006e3cd683dc7cd5b8c8e100ac35ebd0f0e445abf087d7d052d9a"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "Apache-2.0"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/org.springframework.boot/spring-boot-starter-logging@3.0.2?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "https://spring.io/projects/spring-boot"
+        },
+        {
+          "type" : "issue-tracker",
+          "url" : "https://github.com/spring-projects/spring-boot/issues"
+        },
+        {
+          "type" : "vcs",
+          "url" : "https://github.com/spring-projects/spring-boot"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/org.springframework.boot/spring-boot-starter-logging@3.0.2?type=jar"
+    },
+    {
+      "publisher" : "QOS.ch",
+      "group" : "ch.qos.logback",
+      "name" : "logback-classic",
+      "version" : "1.4.5",
+      "description" : "logback-classic module",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "9d6a0bfe0f105ddda17dc398134d2384"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "28e7dc0b208d6c3f15beefd73976e064b4ecfa9b"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "595431df58c74d515dd4c225b2d84d9f23e16a24daeaafd7c94b059312a8b493"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "cffc906672afa02023c06959b31875e93f63fd37dc5c77428b5d7273c4a2e509d5b40ffabe676dfb89b1f2b43745f3ea5c1e4fd6cb790b37c18559042bc147d9"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "7d82309f84224cb0c6c56abbd62cbacb6f19e83c9215a34d2cb7e8a0ec1e4720d0d4d9e59f8b30e7db3226857d763582"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "bc33534f1be875daba6b1c216d13f706b67104cc9dba0473aa86839aa27ff04e140a8fcb1598c06c8c101498b11b0b2c"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "be95aac696c4a280555cc1c3b340b933455f2862a8cdc5c0a9fbe881d21a3cc2"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "af9199a4756ca4d71c735a46c30e26c5b2ce5b5eeb28c5c4abc13126fcb750aaa4ad168e329578f17e66c1fbb6a4fb0f6025e2aadcca05b389c5705f37944e04"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "EPL-1.0"
+          }
+        },
+        {
+          "license" : {
+            "name" : "GNU Lesser General Public License",
+            "url" : "http://www.gnu.org/licenses/old-licenses/lgpl-2.1.html"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/ch.qos.logback/logback-classic@1.4.5?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "http://logback.qos.ch/logback-classic"
+        },
+        {
+          "type" : "distribution",
+          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
+        },
+        {
+          "type" : "vcs",
+          "url" : "https://github.com/qos-ch/logback/logback-classic"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/ch.qos.logback/logback-classic@1.4.5?type=jar"
+    },
+    {
+      "publisher" : "QOS.ch",
+      "group" : "ch.qos.logback",
+      "name" : "logback-core",
+      "version" : "1.4.5",
+      "description" : "logback-core module",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "baf749c68aacc6d719f3ce3d7345af38"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "e9bb2ea70f84401314da4300343b0a246c8954da"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "8604e7c327556b097590701fba88dae84c581167f2746378f736b37269452380"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "bf23c9bcf23b585e9812f61e66e7b46bb0c3933872616726d3d47d8fac3804b8a9026066e985e332a8369b46be0934c159177a2e7c4b3f9cc35e3ba7c914ff1e"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "4842295eb9011b6076d0f2f40efae9d8cc4434fc079fb3640d27c632892f06425058512d8e993c7a935a011ac58ec8a3"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "c274596b53629a23ad0e6f37853420ee767e5af0ed662a0be0970ac746aa3ccd0bc938975009429180338048a19048b7"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "9702813b8dce6cd4ce09929cf962084e038439369c7da0d12e7e7a1865ad0e68"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "0d335c85655bc43b4b1b79ac6475d9cefca86e52f1844077c177cd8a6124028686b8198a7d6058bbef1d36d7541dffed5652a6302e2b0be0f950135869afe0a5"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "EPL-1.0"
+          }
+        },
+        {
+          "license" : {
+            "name" : "GNU Lesser General Public License",
+            "url" : "http://www.gnu.org/licenses/old-licenses/lgpl-2.1.html"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/ch.qos.logback/logback-core@1.4.5?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "http://logback.qos.ch/logback-core"
+        },
+        {
+          "type" : "distribution",
+          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
+        },
+        {
+          "type" : "vcs",
+          "url" : "https://github.com/qos-ch/logback/logback-core"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/ch.qos.logback/logback-core@1.4.5?type=jar"
+    },
+    {
+      "publisher" : "The Apache Software Foundation",
+      "group" : "org.apache.logging.log4j",
+      "name" : "log4j-to-slf4j",
+      "version" : "2.19.0",
+      "description" : "The Apache Log4j binding between Log4j 2 API and SLF4J.",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "00f577c9e3cb12537a8392b74a7524aa"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "30f4812e43172ecca5041da2cb6b965cc4777c19"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "96b877515c7af999bc7eae28f46b656430da893a7dc28f099841be306f8117bf"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "80f363dac2d9cd480e7b593e5585bb47f18ac10d458c846facdcaf142a5b654641f9abf1a060b12c194ff725390e5f2630ae9306699ee8cc68564e9e5d3be62b"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "c09a2ac2eaa4d99d30fa33f21df8df4ebd3b27faa55488d88bfbf2fc7bd0e8ed5515b7504769f6af252b759565320a80"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "7ea09688e8b3dd0b21f7d5afe27d3f014a8b790fbb7b68b3a914ae8f2ff5da65eedd74df93e2f585d970d9723afd0de2"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "ab94100cf0762884495970d77801fc110dae6ed2ed7408be1982d665f2f885a3"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "370e0b91a9b68a60251f61c2e40c0ffa06d357830a9c9b5bfc09955b6f4f8e7138562df3356e0ddc1d3660ad017bad808b9372be7ffd69b3209b7752b27bd8e2"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "Apache-2.0"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/org.apache.logging.log4j/log4j-to-slf4j@2.19.0?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "https://logging.apache.org/log4j/2.x/log4j-to-slf4j/"
+        },
+        {
+          "type" : "build-system",
+          "url" : "https://github.com/apache/logging-log4j2/actions"
+        },
+        {
+          "type" : "distribution",
+          "url" : "https://logging.apache.org/log4j/2.x/download.html"
+        },
+        {
+          "type" : "issue-tracker",
+          "url" : "https://issues.apache.org/jira/browse/LOG4J2"
+        },
+        {
+          "type" : "mailing-list",
+          "url" : "https://lists.apache.org/list.html?log4j-user@logging.apache.org"
+        },
+        {
+          "type" : "vcs",
+          "url" : "https://gitbox.apache.org/repos/asf?p=logging-log4j2.git/log4j-to-slf4j"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/org.apache.logging.log4j/log4j-to-slf4j@2.19.0?type=jar"
+    },
+    {
+      "publisher" : "The Apache Software Foundation",
+      "group" : "org.apache.logging.log4j",
+      "name" : "log4j-api",
+      "version" : "2.19.0",
+      "description" : "The Apache Log4j API",
+      "scope" : "optional",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "a7f8fc9751cdaa237a1e18059b4887da"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "ea1b37f38c327596b216542bc636cfdc0b8036fa"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "5ccb24ad9f92e768d0bc456d3061a737951262df803e004d2cad096b75a88d60"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "f7cf3647ed90de7fdef377e4321aa9b9ea2512a46d99109b359f7fc5dcfe6d3ae9f879c212707ea4fd16d358d10d21c56d5178ec4803504745de6fe48c66c3f7"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "d578e82caafbeab7b782599a9e115fbb9cfadcbd6ddb9a7ad2f87aec407dfcdf7fb58f41bf0cff2f7decc2afe89de46a"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "c335443decd058222047b35a998c0d6db6cabe83c9af8c7c7695af4c65490db453cb96b06825d09b6771a39bda8d7b4f"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "97b89d7dfdacd7d9cc3672dc6ed96d3463fc1e0827e1290a8a2ac7215bdd754e"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "b1863c45a9c07dd0c27f80f7441f9d7d63c9be0532feedc037ee827e4dfd926d801541327aa80b30db20fb796bec6be8e004c85503effb1285c9eff98b57dacc"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "Apache-2.0"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/org.apache.logging.log4j/log4j-api@2.19.0?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "https://logging.apache.org/log4j/2.x/log4j-api/"
+        },
+        {
+          "type" : "build-system",
+          "url" : "https://github.com/apache/logging-log4j2/actions"
+        },
+        {
+          "type" : "distribution",
+          "url" : "https://logging.apache.org/log4j/2.x/download.html"
+        },
+        {
+          "type" : "issue-tracker",
+          "url" : "https://issues.apache.org/jira/browse/LOG4J2"
+        },
+        {
+          "type" : "mailing-list",
+          "url" : "https://lists.apache.org/list.html?log4j-user@logging.apache.org"
+        },
+        {
+          "type" : "vcs",
+          "url" : "https://gitbox.apache.org/repos/asf?p=logging-log4j2.git/log4j-api"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/org.apache.logging.log4j/log4j-api@2.19.0?type=jar"
+    },
+    {
+      "publisher" : "QOS.ch",
+      "group" : "org.slf4j",
+      "name" : "jul-to-slf4j",
+      "version" : "2.0.6",
+      "description" : "JUL to SLF4J bridge",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "5a22f4776707e517ff1da17a98b3918c"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "c4d348977a83a0bfcf42fd6fd1fee6e7904f1a0c"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "6466a327c5ac59fc41c98437e248b9052a4fad6fae9f83a7f723eae297990017"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "30735a17bbcc9e2c0c81c5c6b4233e85c96cc6c074b3eb8c607ab3410615af76bec8a1bfe9470ac4a185f1bbd8250924aede36fc06623def73a2330bebffe041"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "1f699ba73ec58a28afc32bec472d3d8b4d135f585721690f104aea31685cb23b742fa9d1819572f9dac4216fd5125187"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "5ab4fd0220913c5b2b3699feb947bfb9081935f06e2d249c44682518e821d415c059b46bd222407c309a21fff37b3cf6"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "01f034e76c3ef4db2a0c209737e06e3e8257f7b0c15251b3413e56a6b445e2c0"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "7f453af676f1d1bfc4b1b2ae66180dafc4602c3f30066ac9c0b896346212c4e96566df42172e3d74c9632c4a6bfb067d1e169970e30d001d4ee43dcc7c39bf05"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "MIT",
+            "url" : "https://opensource.org/licenses/MIT"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/org.slf4j/jul-to-slf4j@2.0.6?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "http://www.slf4j.org"
+        },
+        {
+          "type" : "distribution",
+          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
+        },
+        {
+          "type" : "vcs",
+          "url" : "https://github.com/qos-ch/slf4j/jul-to-slf4j"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/org.slf4j/jul-to-slf4j@2.0.6?type=jar"
+    },
+    {
+      "group" : "org.yaml",
+      "name" : "snakeyaml",
+      "version" : "1.33",
+      "description" : "YAML 1.1 parser and emitter for Java",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "e0164a637c691c8cf01d29f90a709c02"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "2cd0a87ff7df953f810c344bdf2fe3340b954c69"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "11ff459788f0a2d781f56a4a86d7e69202cebacd0273d5269c4ae9f02f3fd8f0"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "787b72aebb685689ab379ed8f238fc2f4175bb82d285909e39e7ff1ee1b9e64ad8878f4685dadde274f950b0dc77dca3082a52921c11094aa2a535672ae4f33c"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "9f0a0a35df2b339830b9e78294634ea894e7096e01709c82d965e24a9fa9ac6ee15edbbbf23368dcd57741de5bf23086"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "91d8fd581d60be4090d3b522d8c119c12449cff2ce6c436d0e53977e1c9fea8686b2b360fb15f4c3507e4f243d7d6170"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "7dcf0429ecb923a66e00ec633bafeb297e3b90e1cc2be0f85443fd61367f355a"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "59b32910dddf63475893f7c830d58ca320cd6183704d80b8111cee7bb1674f97f5699c8ac52f905a5b9a20128b9e2b6a26a07490f217033c858d9c358bedcafc"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "Apache-2.0"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/org.yaml/snakeyaml@1.33?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "https://bitbucket.org/snakeyaml/snakeyaml"
+        },
+        {
+          "type" : "distribution",
+          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
+        },
+        {
+          "type" : "issue-tracker",
+          "url" : "https://bitbucket.org/snakeyaml/snakeyaml/issues"
+        },
+        {
+          "type" : "vcs",
+          "url" : "https://bitbucket.org/snakeyaml/snakeyaml/src"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/org.yaml/snakeyaml@1.33?type=jar"
+    },
+    {
+      "publisher" : "VMware, Inc.",
+      "group" : "org.springframework.boot",
+      "name" : "spring-boot-configuration-processor",
+      "version" : "3.0.2",
+      "description" : "Spring Boot Configuration Annotation Processor",
+      "scope" : "optional",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "a43f417bee2f138589e843cbe1d872fa"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "9a921dedf1930388289f0e68f7e7808f3389dcae"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "335584819fa79f75a4a79c339ca38469205198f545e5293333e6f8c63dcbb0a0"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "fd04de0bdba416b032571fb65324f579eaa621ef9020449a0fc7aa9437dddd0efd3698445764f7293cb760931c5de68a46411be1a68e07a4b9b4c4f9b33b8a41"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "f6e37cb28c3dbdc02a9448cc00ef036a1b90e9bb34117412ffb9d573b77d4c81b883c1cfabd2aa5b041ba15734c393f8"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "de34540884604191d336b88395caceb206645bdc39e533fc64e808684653af1778b4f5929e06f781dbc3337e662285e6"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "42ca21cbb14666b0009573fd633c2017a862ba7e264cb4b62467bf582e2a9396"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "2ed32055ce1e844e1898c0995eb147db254460769c06d23f6660e115bc5b5c5bff82693c14260d0f8e98a111d07a522461db67edfe67fa0588ef96f8dd9b48ae"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "Apache-2.0"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/org.springframework.boot/spring-boot-configuration-processor@3.0.2?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "https://spring.io/projects/spring-boot"
+        },
+        {
+          "type" : "issue-tracker",
+          "url" : "https://github.com/spring-projects/spring-boot/issues"
+        },
+        {
+          "type" : "vcs",
+          "url" : "https://github.com/spring-projects/spring-boot"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/org.springframework.boot/spring-boot-configuration-processor@3.0.2?type=jar"
+    },
+    {
+      "publisher" : "VMware, Inc.",
+      "group" : "org.springframework.boot",
+      "name" : "spring-boot-autoconfigure-processor",
+      "version" : "3.0.2",
+      "description" : "Spring Boot AutoConfigure Annotation Processor",
+      "scope" : "optional",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "c9cf4d8fb94dc9d9112970c9b270a7d6"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "66facb862454a00eeca4a48dc21b6618ff3c3e50"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "d5792eb1875bc39a3bb0822d8a43e76f76ad2ef166bf2f5d0dfe6d1653f7656d"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "7d5568275baaddc56b380365e96cfcf9f6d95f01a7d072e1cf5fa4a1266a575509fd6712ee62284e4235c51784e90243e279a3aad974f79b39bf07337bee67db"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "85f12aef5eaa3b71022753eac7d008b1c74e57dc2cd80ba41981a07a9be8821ed8404a1af33e994a50ab253ea0117805"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "17dbdbdc36fa58e157c6c5d2e182358380ef5c6bf4d87b1c4ebc82f8e6448361259a7d25e0da6b0513140d7f95f609c1"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "6a121580befb37fa0d19909b8689551df5ce830bcbb3ccca34ee9016c323c5be"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "16d99100e38f0bc052164d14212ad2c8f0e9970a1ce66938d8ac348b4bd51675c874a8ba2427c9d96f8b629d37a14473ea19356384d485ffe6a890aeda27345c"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "Apache-2.0"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/org.springframework.boot/spring-boot-autoconfigure-processor@3.0.2?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "https://spring.io/projects/spring-boot"
+        },
+        {
+          "type" : "issue-tracker",
+          "url" : "https://github.com/spring-projects/spring-boot/issues"
+        },
+        {
+          "type" : "vcs",
+          "url" : "https://github.com/spring-projects/spring-boot"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/org.springframework.boot/spring-boot-autoconfigure-processor@3.0.2?type=jar"
+    },
+    {
+      "publisher" : "VMware, Inc.",
+      "group" : "org.springframework.boot",
+      "name" : "spring-boot-starter-actuator",
+      "version" : "3.0.2",
+      "description" : "Starter for using Spring Boot's Actuator which provides production ready features to help you monitor and manage your application",
+      "scope" : "optional",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "fb69c16a509e44fee0e210bf3df1174c"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "7d884d7edd505b6d419e86cfaa90c6ec7e847cc7"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "8285962c9b24d046aadc1c3a4a6cfb6b4af7861652efb0ea98216d15f2d10f2f"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "c0e1cbc5de0d7dd2d5186aee07b18ed18451f5be6f8ee78e25b92a827b39d68468a293998527d1b6336f0f2a87dba58836367c946498e7510f002c4fbb844237"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "315521e7d38179960723dba5005890ec611557e05a15ed61c4f605740b1d200f618da4dfd8c1b68438f40f12640b5250"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "190dcdca18e099273a2e617e0cf3951f86af331778badde275a2fa6a4e527fa129030fbbb4f80d2219232dbe1740124b"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "f7022623a46c8e64271b324df604b422c7e2239b0476c497b5ceecac097e0e80"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "dd656b7e464ede77aaa9915523bb78a3d864d643ed37244a497c3528158e8c180b00088a71bc9a395a69c41d96441a621a01ba50eb094e946b241655a9563e66"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "Apache-2.0"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/org.springframework.boot/spring-boot-starter-actuator@3.0.2?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "https://spring.io/projects/spring-boot"
+        },
+        {
+          "type" : "issue-tracker",
+          "url" : "https://github.com/spring-projects/spring-boot/issues"
+        },
+        {
+          "type" : "vcs",
+          "url" : "https://github.com/spring-projects/spring-boot"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/org.springframework.boot/spring-boot-starter-actuator@3.0.2?type=jar"
+    },
+    {
+      "publisher" : "VMware, Inc.",
+      "group" : "org.springframework.boot",
+      "name" : "spring-boot-actuator-autoconfigure",
+      "version" : "3.0.2",
+      "description" : "Spring Boot Actuator AutoConfigure",
+      "scope" : "required",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "227da7cf046fc4f44ba5729f66431012"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "93b5dc38805cc247ae5f1eb4612fe06a12930184"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "40c6458694d3c3930b3e06c3f0180e69a29251ad166f304a2eb438cc0c9d2c40"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "17cb790ba24edc888670db5b721d78b1d640e80e3d4de1544636f3614dc74220d49032afb4a082b4dec6f26a1b354cfaa2f6aff6b05fe3d43ee22ffa81da18d6"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "26c70e361c01d67b8070c7fc4c59e5dd9aac5798e65fb99d23143ae429684d6bfd87a2e2bcb46ca4c6f6bfb0bd8d8b76"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "61121510ee9dfc776ee7a2b754f76db7b91a56623ee14a293dedfc60d58b22ee8fb586bc22da1498ec3ab2ec7b9c9b4b"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "07a7245c734f65624a54a3a0af7b3dc877dfd7a8382b37a77cf67941bae44f11"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "fed478861cd5dbbf05fbaa4628d46999b14b14213d8aea1bdff755dd88b3645449ce6e08146358694aa6fd22b473dc47a4a8ee5eb675ddbfed0d39a33fb48d2e"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "Apache-2.0"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/org.springframework.boot/spring-boot-actuator-autoconfigure@3.0.2?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "https://spring.io/projects/spring-boot"
+        },
+        {
+          "type" : "issue-tracker",
+          "url" : "https://github.com/spring-projects/spring-boot/issues"
+        },
+        {
+          "type" : "vcs",
+          "url" : "https://github.com/spring-projects/spring-boot"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/org.springframework.boot/spring-boot-actuator-autoconfigure@3.0.2?type=jar"
+    },
+    {
+      "publisher" : "VMware, Inc.",
+      "group" : "org.springframework.boot",
+      "name" : "spring-boot-actuator",
+      "version" : "3.0.2",
+      "description" : "Spring Boot Actuator",
+      "scope" : "required",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "55799ca22ff9900040ca99c719ceda7f"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "24a6ef47c1eab1e010a2cba0b9877f0d2a515354"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "ee97f5e2b0939ca5f5e44735bc7981a9ef8e2b418bf649b724f821948a0243a2"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "2b53e23e1fbda0ff055ec246ca797c348064f233e04ee453e8643de5d6d04174717a4f389ac8e4546de559a6dc05410426b9ddcd6e0e83dcd8aac425499256df"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "7af9cf801a5c6989e63cd876f0a6886f4be8eed96089d0c8fda4dd9553c09133ec7fce95e9494539d6c404c7d5faf73f"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "2eec0dcb27b018b17a12004b3fd04ad780798c163d0a273ccf462db64cd2d98086dc553ca50a0e28195f8b6a968326ea"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "07ae1355729143c37d45c92960fc46b7459d96792ee31d6600fcc1e1820ca818"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "3232b55fdb11518bbc10eb814e10263a4f441c8cb0abafee113a598cb17a8c3827e18024bd79c6ef62186ac24915d92d82fb0a780ba0a4a9a08f1705ae305eec"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "Apache-2.0"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/org.springframework.boot/spring-boot-actuator@3.0.2?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "https://spring.io/projects/spring-boot"
+        },
+        {
+          "type" : "issue-tracker",
+          "url" : "https://github.com/spring-projects/spring-boot/issues"
+        },
+        {
+          "type" : "vcs",
+          "url" : "https://github.com/spring-projects/spring-boot"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/org.springframework.boot/spring-boot-actuator@3.0.2?type=jar"
+    },
+    {
+      "publisher" : "FasterXML",
+      "group" : "com.fasterxml.jackson.datatype",
+      "name" : "jackson-datatype-jsr310",
+      "version" : "2.14.1",
+      "description" : "Add-on module to support JSR-310 (Java 8 Date & Time API) data types.",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "9cfb005ce2dc919f3bcc0db655dfd42b"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "f24e8cb1437e05149b7a3049ebd6700f42e664b1"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "0b653613f51d6e15396d2b65ccfec9539b2ab471c5842f5b11ac4877cbd51f72"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "eaa4af49d22e0fe5490e3922ff4bc388cb7ab7235eda3b73ccbfbb3a9998998989b686977d14a06a7f50e1372efc342e139108055db552956d160166855d4f7b"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "4df5f8fe015fd2f2cea7e7596541b2de8ea9bbb284d4055f5a78e106d05ccba68fdb82d231f34170d8fe8e9c25695d03"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "d2f33817499ba958530434001c19e3f50253741e8540d69d499a6579c63c85e9f4aeff5483ea3d9fa430582137dac94c"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "0225059530c389af75b4d33cbe39050af45ee858d073c81b00e4e5eece1a9888"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "686f0874b189ddcb9088ec55a693ca5c7f104564a0d2c85339794ee8387b7e849dc9542bd65818e8febdbd9be4807ae6898a45e2f5ab8561347a75522ab6aaeb"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "Apache-2.0"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.14.1?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "https://github.com/FasterXML/jackson-modules-java8/jackson-datatype-jsr310"
+        },
+        {
+          "type" : "distribution",
+          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
+        },
+        {
+          "type" : "issue-tracker",
+          "url" : "https://github.com/FasterXML/jackson-modules-java8/issues"
+        },
+        {
+          "type" : "vcs",
+          "url" : "http://github.com/FasterXML/jackson-modules-java8/jackson-datatype-jsr310"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.14.1?type=jar"
+    },
+    {
+      "group" : "io.micrometer",
+      "name" : "micrometer-observation",
+      "version" : "1.10.3",
+      "description" : "Module containing Observation related code",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "37269f3eabb5daac168cd9a7a755cb41"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "32cc59dc8b5f00fba9fa88b7139898b0f7905db7"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "5513c52c8bda3fec7b5dda780317b40683fe74c5b34bace5a6cbd54a6487a96d"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "e01d9562129ca12a80cc468e9a5db205992b004230b3f68249f7c5e86f2851bbd9613310a7f1b9f7ab5962811427f269fe001a571d17591ee4bf22fc50c2ed51"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "7e4b3818e9c89728876ea31656ff7cc91517edf2a8bf90723a79303dcc4025c55b4ee3de271abc6bc4f50cccc448d185"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "a3988695a14be9de3c14d86d9860152f84bebd6bd78c1fc0892c9538e29faa7809db381cdb6ea0912a330da345f7ce76"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "92a34e5cac917196130202a56db3c47812af3ed910ee032733d31e732dff8005"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "ccbf175a9fe7b34433283c7b3f3520650ddf6ca696ab8b81d8d91bed8d9472e599ae171de1c96c935c851ae748161ea637e390528192ad72575a0541fb50ff58"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "Apache-2.0"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/io.micrometer/micrometer-observation@1.10.3?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "https://github.com/micrometer-metrics/micrometer"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/io.micrometer/micrometer-observation@1.10.3?type=jar"
+    },
+    {
+      "group" : "io.micrometer",
+      "name" : "micrometer-commons",
+      "version" : "1.10.3",
+      "description" : "Module containing common code",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "0e06788657c25851f3889a46e2d489ef"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "334080a1a6b849d09d3ef96d7b243fc3c16b2e5a"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "5fa97e03b3d8539e9d302258ac073eabef937b9748f1dfedb6e4b4a1ce25c557"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "2fe08ecf57af9db4bced0ee0cef6f2f3cfa1b6d73a9f05ac82ae38489f22556b351d9433fa2a636c478950398c023944e8401b018303c24c14f9d1ba2a2a8958"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "6f63ee58131e2a78b10c6600b070ce1feab93321403c7e6a5cadc757b543af9be936475df551553dea34d83d02e204fb"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "8b37adf2e19ab04401079e850c04be53928b604a163fa08bcc4353aeb42bab4d2c85b4553d5fca3c98e57f81c4955871"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "ac11723922c94292c0a5386f58a0e853e2c6d24893039db15de6c7f9793f3601"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "def4e406a208c13de2ae2ff3020b5c1d9da2bdc8270970701038bda24d4642574e03f8bbf58d52a47d8d083860e53b6f0e309561661862c2add538a70b6eabd5"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "Apache-2.0"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/io.micrometer/micrometer-commons@1.10.3?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "https://github.com/micrometer-metrics/micrometer"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/io.micrometer/micrometer-commons@1.10.3?type=jar"
+    },
+    {
+      "group" : "io.micrometer",
+      "name" : "micrometer-core",
+      "version" : "1.10.3",
+      "description" : "Core module of Micrometer containing instrumentation API and implementation",
+      "scope" : "required",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "95c1ad5ecf33fbcca6ba164c92698660"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "278d3ce3ec0032829291ed88096831ae7be1054a"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "f316b4e52eb0585efcacf344c64b92350652b08b3d48406f68dbbc58309b7377"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "d0ce35150f72e44763e3bcbff58b93fbe058e7059095d2a8336809569c7e23b5464aaac969e90713ef1f726acfaf1e817ebdf16f4bb008fe355329370254307f"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "012c6ed578bfab300045c46b94e4eeee1b99834eefdd5e0e66b645eb80d5df0bf1afedf1635b9734d24ef5e45a878aa8"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "df93f5b1c72310fd2d04f481536fec4e1573cf4a293c813f47a5311423e6c6b7e313d2f83ce82d09405adb4e6ed5ace7"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "b37ee36a9f01c32383e655b6914d821fbff9fa52ebe781cf17a67250db3b4f3c"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "ff2f60897df52cd83df81eff1fc6214542d4ff6c58b78bbec5cfff0f519372400676dbfc52fb15cf9cbf03cbeb21d5cca75c3860cf4f84542cc085d37752d0b5"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "Apache-2.0"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/io.micrometer/micrometer-core@1.10.3?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "https://github.com/micrometer-metrics/micrometer"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/io.micrometer/micrometer-core@1.10.3?type=jar"
+    },
+    {
+      "group" : "org.hdrhistogram",
+      "name" : "HdrHistogram",
+      "version" : "2.1.12",
+      "description" : "HdrHistogram supports the recording and analyzing sampled data value counts across a configurable integer value range with configurable value precision within the range. Value precision is expressed as the number of significant digits in the value recording, and provides control over value quantization behavior across the value range and the subsequent value resolution at any given level.",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "4b1acf3448b750cb485da7e37384fcd8"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "6eb7552156e0d517ae80cc2247be1427c8d90452"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "9b47fbae444feaac4b7e04f0ea294569e4bc282bc69d8c2ce2ac3f23577281e2"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "b03b7270eb7962c88324858f94313adb3a53876f1e11568a78a5b7e00a9419e4d7ab8774747427bff6974b971b6dfc47a127fca11cb30eaf7d83b716e09b1a0d"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "06977d680dafd803d32441994474e598384a584411a67c95ab4a64698c9e4cbd613e0119b54685cea275b507a0a6f362"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "b5ccb4d39bf7cc8ccc33f0f8fcbab0a63c99a94feda840b5d80fc3ae061127f1475cfb869b060933783a1f2eafb103a1"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "ef2113f27862af1d24d90c2028fc566902720248468d3c0f2f1807cc86918882"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "4fca2f75bdfd3f2ac40dc227ae2ef0272142802b1546d4f5edf9155eaeed84eff07b0c3a978291a1df096ec94724b0defb045365e6a51acfdd5da68d72c5a8eb"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "CC0-1.0"
+          }
+        },
+        {
+          "license" : {
+            "id" : "BSD-2-Clause",
+            "url" : "https://opensource.org/licenses/BSD-2-Clause"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/org.hdrhistogram/HdrHistogram@2.1.12?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "http://hdrhistogram.github.io/HdrHistogram/"
+        },
+        {
+          "type" : "issue-tracker",
+          "url" : "https://github.com/HdrHistogram/HdrHistogram/issues"
+        },
+        {
+          "type" : "vcs",
+          "url" : "scm:git:git://github.com/HdrHistogram/HdrHistogram.git"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/org.hdrhistogram/HdrHistogram@2.1.12?type=jar"
+    },
+    {
+      "group" : "org.latencyutils",
+      "name" : "LatencyUtils",
+      "version" : "2.0.3",
+      "description" : "LatencyUtils is a package that provides latency recording and reporting utilities.",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "2ad12e1ef7614cecfb0483fa9ac6da73"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "769c0b82cb2421c8256300e907298a9410a2a3d3"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "a32a9ffa06b2f4e01c5360f8f9df7bc5d9454a5d373cd8f361347fa5a57165ec"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "bb81a42498c65389366205f4e07cee336920e2f05cc0daae213f2784b1d0ce9a908b038daec20478f23eb00b2bf704f96c5b00f63c99615193ab2a3cc4a9f890"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "16ca4640dc9d848e6c6d15441897e1b5a9f27f34207b0bb456dd54d8f267b73b348092e548e78634144de44ba3515205"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "406c2b5c6f64b0c090568e479b5e6136a04a4e77f8eea65d32b4e2b01deebcdf6a0a851240cdb740c25b5a5e61e6c179"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "50ae828358301033542fd7c412e86ee318d5451f89a182e2a679aaf18099d26d"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "456c337b9fb385579aae707409ed6a04d08e5fc87b1a46733dca617c22c625bf253dc4747e0cdbf5e7d8b48102d2938cb482b6b688a79aab645a7459c592258f"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "CC0-1.0"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/org.latencyutils/LatencyUtils@2.0.3?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "http://latencyutils.github.io/LatencyUtils/"
+        },
+        {
+          "type" : "distribution",
+          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
+        },
+        {
+          "type" : "issue-tracker",
+          "url" : "https://github.com/LatencyUtils/LatencyUtils/issues"
+        },
+        {
+          "type" : "vcs",
+          "url" : "scm:git:git://github.com/LatencyUtils/LatencyUtils.git"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/org.latencyutils/LatencyUtils@2.0.3?type=jar"
+    },
+    {
+      "publisher" : "The Apache Software Foundation",
+      "group" : "org.apache.camel",
+      "name" : "camel-spring",
+      "version" : "4.0.0-SNAPSHOT",
+      "description" : "Camel Spring",
+      "scope" : "required",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "4e72ab5983ae0244b701a9e764bec85d"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "1711d58f0d95c6c04d3a2c0151bfb062a126428f"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "182ab4451579e38ce5cc955885e42d45ec3a4df1ac056e4a29d74e309e1e6cff"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "4f7a8df74910f9153ddebdb079fb63145f2a27e3ffeac2e8a2d7f04dfb19a4c0b0fd909bca70cca6fb8cca7ad5d1f2b4f199e53b82aa8a214078348077daeb3d"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "385cecead6ffef6e11d6e4a1c6815ad9edc325ab76639469263bf4d624f3228eba0a8974cf411ecfb031cfa13d5507c6"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "83ee3645296b7ed284db210d103a8df11246d717b098fdab0fe19f28ccf1e2da7009583ab45f51a102813f35aa3d4869"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "e2d7c7d47aa14528b32a27db840c72c284ab77c08a82c48d6ce8110452c483ec"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "de533e552d86af71c6d3537f8c5b8d40ca89ebc93f31062ce49cb04c13eaa290394522dfc9242358b4e555fb228277ebd5a98361215de10d8fc3abd8218dc0b7"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "Apache-2.0",
+            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/org.apache.camel/camel-spring@4.0.0-SNAPSHOT?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "https://www.apache.org/camel/camel-parent/components/camel-spring/"
+        },
+        {
+          "type" : "distribution",
+          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
+        },
+        {
+          "type" : "mailing-list",
+          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
+        },
+        {
+          "type" : "vcs",
+          "url" : "https://github.com/apache/maven-apache-parent/tree/apache-29/camel/camel-parent/components/camel-spring"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/org.apache.camel/camel-spring@4.0.0-SNAPSHOT?type=jar"
+    },
+    {
+      "publisher" : "The Apache Software Foundation",
+      "group" : "org.apache.camel",
+      "name" : "camel-core-engine",
+      "version" : "4.0.0-SNAPSHOT",
+      "description" : "Just the Camel Core engine without any core components",
+      "scope" : "required",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "dee4f54dcccc91a7febb60ab697f1a4f"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "fb7131f671fe3a701ae9590fae60187aa804f2af"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "204335dfcdcd5771e79e23861f7c18de086c41bad44a451352361479cabed043"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "46252176d7ef54b4fdaabc8e9c6322b812c4994a34a202a930bf5eea0240cd26a2bd6c843fff8b591aa4250386ee249bba3499e6c1fe4fcd078b2fbf71145884"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "34c0d2327f7eaff4861aa7a8e3b12d15321b90d22a5aa7de50234152548b11bf2603b753ecdd202557f657730d822b55"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "00b05dc4423d484d906cc4ddad3512efadfbbb86b9bbcf2aa7cbc4b2a61e95e6309a52da7e4c073aa3a4ade8ae639628"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "76ad23bb1302d8dbbd3585bce6723096bb88197e73ef08150af961f3295a447a"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "d2e069438b023d49727f3daf5e6dae2c7ec37d4d9bc6247653534abb52754f7d4da65d885caaac7e055d412bd71f24a717948447a809384f43aaa87856375ae3"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "Apache-2.0",
+            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/org.apache.camel/camel-core-engine@4.0.0-SNAPSHOT?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "https://www.apache.org/camel/camel-parent/core/camel-core-engine/"
+        },
+        {
+          "type" : "distribution",
+          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
+        },
+        {
+          "type" : "mailing-list",
+          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
+        },
+        {
+          "type" : "vcs",
+          "url" : "https://github.com/apache/maven-apache-parent/tree/apache-29/camel/camel-parent/core/camel-core-engine"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/org.apache.camel/camel-core-engine@4.0.0-SNAPSHOT?type=jar"
+    },
+    {
+      "publisher" : "The Apache Software Foundation",
+      "group" : "org.apache.camel",
+      "name" : "camel-api",
+      "version" : "4.0.0-SNAPSHOT",
+      "description" : "The Camel API",
+      "scope" : "required",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "2226d39b4d9b1b855b47b64beee62b16"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "16e9bb620aa4160035c32ac817a3a2010cf2c966"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "cb3a80602f697f3f95922003e1f1ab4d61858fe7845e2c3e30a514b4fea3dfb7"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "9927698007d422067017a331f2f117bf105df2f3123814db0c992118840368494c02416ec210f1781256f52e828641c7673dc7c5180f582a32e2515aa37569d6"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "26711a214cb631e28a89e92a08da22d9d24ded23e151f848069feecd842264769aa5b1eab728039fa5903192fb3c8e9b"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "10aea1f653ee59ed75b8e61593d53fd70e9b86ed5af8ab6c95d278e9a44ee428f87345ec62c8fe728ec5a1f835092203"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "4385e2a16c8a9be1013b0374807735f0ff47e971a28499d7a1b46e0cbcd8c331"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "98ad773bd8891f9cda5d0193f2e53e64a3f0aa26d6cd32a6600559352285896f521c4fe9a88967c00fe5118e70d1f42c94775c94122de4cce59363524ea9884a"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "Apache-2.0",
+            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/org.apache.camel/camel-api@4.0.0-SNAPSHOT?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "https://www.apache.org/camel/camel-parent/core/camel-api/"
+        },
+        {
+          "type" : "distribution",
+          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
+        },
+        {
+          "type" : "mailing-list",
+          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
+        },
+        {
+          "type" : "vcs",
+          "url" : "https://github.com/apache/maven-apache-parent/tree/apache-29/camel/camel-parent/core/camel-api"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/org.apache.camel/camel-api@4.0.0-SNAPSHOT?type=jar"
+    },
+    {
+      "publisher" : "The Apache Software Foundation",
+      "group" : "org.apache.camel",
+      "name" : "camel-core-reifier",
+      "version" : "4.0.0-SNAPSHOT",
+      "description" : "Camel model to processor reifiers",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "a1fd2b2af1053cce725450b67480a0b0"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "ac6ebe7d4d088e781163345611a6062cc8595dc8"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "7b57a7d4c33400fd5f9ffae20292df90b7a15bbb559cbdc2dc54b23080767a74"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "da252580fcb3fa1598a1f04703cd31358760be778672abf78d4b9516d4526dff910a5bef93cc94ac242ee7096fa82e0433ea04d190e1ec6a5d462c59751f8655"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "9e868308f8b3e7181855dd33278fe97d46182ec6d6297c70d70990ed92aca9cd298ec38d6a01b0594fd8ba56ad405b31"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "b18b2f7bace3a7466196212bf988a59770a71bc93f3c0cb106ec7526bfd8bcdc388d3946572216fe9262859f2fbf9d5d"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "8be3fd152b91edfa39fbf3a8d7be3b22b13d728483d497bcf38495af7cc9fe69"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "982b6c882638f3481d00d24593269b14167a40d4065a6400cdae9f018a358dfbc14145a24310ac9beb17ea75cd526ff16f4ab44c2507f22bab1293a26d181383"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "Apache-2.0",
+            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/org.apache.camel/camel-core-reifier@4.0.0-SNAPSHOT?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "https://www.apache.org/camel/camel-parent/core/camel-core-reifier/"
+        },
+        {
+          "type" : "distribution",
+          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
+        },
+        {
+          "type" : "mailing-list",
+          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
+        },
+        {
+          "type" : "vcs",
+          "url" : "https://github.com/apache/maven-apache-parent/tree/apache-29/camel/camel-parent/core/camel-core-reifier"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/org.apache.camel/camel-core-reifier@4.0.0-SNAPSHOT?type=jar"
+    },
+    {
+      "publisher" : "The Apache Software Foundation",
+      "group" : "org.apache.camel",
+      "name" : "camel-util",
+      "version" : "4.0.0-SNAPSHOT",
+      "description" : "The Camel Utilities",
+      "scope" : "required",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "cd1c6fc8dc2aec6464979bef49c27a26"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "fd9e0c595fea4c96d50fbf77a0a35017b79398c3"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "9472bad482b9cfc2dcd7a3124eb7828dec949f1366041c409438e23b31bc3707"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "15d52e3723ac76bcd246e6335f20aaf7a65c980de384f9d5eaf97aeff8c8beeebd48a3d90bf3b751081b9f617bd12bceb111f4bfcdd5defb7a4e3f7ff0bf154a"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "02a2447926efec2429ca67ed42d92fc45785fafc06c66355bf60922909104c69aa41325b140ebc2c5c531ed35fb76694"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "58fd1d7117c4de5257aca94d8b50a7c0060a62617670a4b9d4415e4392d2abf71c49b847d9bed06bd14e2b627e9bb3c9"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "4f2c5ab8c8973b0fba26bacde037fde3d6e029c30711e379275dba25387fb5ed"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "8a64434de71ab2404d36af787609a7e53f5598ac7a5e8e180fddd9ceef5652342c02ea7fb0509c5cd7cc75864a99843d63370fa6d2639de1736552f7ac8c687f"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "Apache-2.0",
+            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/org.apache.camel/camel-util@4.0.0-SNAPSHOT?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "https://www.apache.org/camel/camel-parent/core/camel-util/"
+        },
+        {
+          "type" : "distribution",
+          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
+        },
+        {
+          "type" : "mailing-list",
+          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
+        },
+        {
+          "type" : "vcs",
+          "url" : "https://github.com/apache/maven-apache-parent/tree/apache-29/camel/camel-parent/core/camel-util"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/org.apache.camel/camel-util@4.0.0-SNAPSHOT?type=jar"
+    },
+    {
+      "publisher" : "The Apache Software Foundation",
+      "group" : "org.apache.camel",
+      "name" : "camel-management-api",
+      "version" : "4.0.0-SNAPSHOT",
+      "description" : "The Camel Management API",
+      "scope" : "required",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "4665362060502c32fb7399b1a85a5e2b"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "542136338b5b246f1750cda91c45a628006870e0"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "d42811154e3a07d9cec858bb2dd9c0515fbed54ea5913a4b54b37d231966c8d6"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "ecd2779bcfdce7e34ab3209ec5d0c4b913aef859b50626ec63ee2b4e7ac87b214078cebdfc8a9751bfe13d704a90ea52a6124344f31f0dc7fce602e70fc865fd"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "e16fe622b2db8eda5bf70c393d47dec0d4f92d02e7719e705f788396ec09249d01afd0f00853a06001d892490afeda9c"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "868b658f444384f2578efe1a28276077fa317dc94f7d625fc4ade6606a3690a9c8e17a78fe648a98df9e18f7eb6c857c"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "0f21a5caa3475c0f41fee744c6cd7cb18868ac24a3f639429fe7395c78747806"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "9102a59a3a018e0e4846c61a7c645e1c9146598b9cb5467f20bacbf0a65bd14c2036e694667242955b14353314a1adaecb9a421ba73c73e8989df70c9fd2eaeb"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "Apache-2.0",
+            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/org.apache.camel/camel-management-api@4.0.0-SNAPSHOT?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "https://www.apache.org/camel/camel-parent/core/camel-management-api/"
+        },
+        {
+          "type" : "distribution",
+          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
+        },
+        {
+          "type" : "mailing-list",
+          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
+        },
+        {
+          "type" : "vcs",
+          "url" : "https://github.com/apache/maven-apache-parent/tree/apache-29/camel/camel-parent/core/camel-management-api"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/org.apache.camel/camel-management-api@4.0.0-SNAPSHOT?type=jar"
+    },
+    {
+      "publisher" : "Spring IO",
+      "group" : "org.springframework",
+      "name" : "spring-tx",
+      "version" : "6.0.4",
+      "description" : "Spring Transaction",
+      "scope" : "required",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "1fd343e7be9ac75722064a022c5ea098"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "f8a50c2547179328a5f2202591d6341e3cbf1708"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "22ae6d835882a34a0d4e80b3f1c4eb371a70a561e1db3daf8625df9f5dbbc9cf"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "4f5bd8a4ca9f6435aecaf9f3140e09d300efed244c7dc993ffe666e4fc10abfcb269fc8d20b0cefed22fe1a2b18fa512b02ffa0c7089221d63514a819b82a738"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "2296d3518ab9ea59c4a5b21bc426f19128ad395b3dd10a51d7a2a804f284bb182ff5c63b40d8ab22c98e99bb2fe49b0b"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "9a8d8a1be91ff4864097094b3a8bd6e19fda83f878f9852198e2fec37b91a482f39ef60ece8c002702fac079ffd02f8e"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "da9018ec288e5afd0835295c554964fcd9984eee84919b8f06d83a1bf4775e84"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "78b8bb9c44c44ed00fcbe19d258bd3defd5995cf073d4e09aec6987199d9d8efc77ee71d0a9255b39bb002253aee9d84e6e5df5574445ec4dd669c385c75784c"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "Apache-2.0"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/org.springframework/spring-tx@6.0.4?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "https://github.com/spring-projects/spring-framework"
+        },
+        {
+          "type" : "issue-tracker",
+          "url" : "https://github.com/spring-projects/spring-framework/issues"
+        },
+        {
+          "type" : "vcs",
+          "url" : "https://github.com/spring-projects/spring-framework"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/org.springframework/spring-tx@6.0.4?type=jar"
+    },
+    {
+      "publisher" : "The Apache Software Foundation",
+      "group" : "org.apache.camel",
+      "name" : "camel-spring-main",
+      "version" : "4.0.0-SNAPSHOT",
+      "description" : "Camel Spring Main support",
+      "scope" : "optional",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "85ba2f6fd2c3b939d8701e324692e899"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "90ebe2ff7738858b61403a850c2d47753ab32115"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "d3b8648da2eb2b63c9c46a886ea01c2bea520e81805d2f3288f3f47d990811a7"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "d8d380f8eea6c9dcb3907eb4e480d1794c3a4fef3d172499998886da3c561c1f95ac22693de4ce79d81aea041fae461a3ef7aa67b9790d701851ddf71e31494a"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "50d4358e4058a837f8a641dc81d350757a34418de4d706b31b82f9cda131ade1083b0debd923f8c266dd0a6b15e48a41"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "a9b4f92edf7e784511b9fed1f7a02fb4bfda9655c7deac9bd50f52ba268482202e4142db6e3f219e4cc0238ee43dfc8c"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "40a45d71b2fe58783605ea088e0f8a4466b5f94bf881ec5168baa28c4ac4ee13"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "1530224c05e52a47f1590c7e9dbdc5e0340ce26e373ee51522fa849b3dc58a42a426965283f2c5348f9e8db1faa37e4a08283ea320cbc286112150642b2133fc"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "Apache-2.0",
+            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/org.apache.camel/camel-spring-main@4.0.0-SNAPSHOT?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "https://www.apache.org/camel/camel-parent/components/camel-spring-main/"
+        },
+        {
+          "type" : "distribution",
+          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
+        },
+        {
+          "type" : "mailing-list",
+          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
+        },
+        {
+          "type" : "vcs",
+          "url" : "https://github.com/apache/maven-apache-parent/tree/apache-29/camel/camel-parent/components/camel-spring-main"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/org.apache.camel/camel-spring-main@4.0.0-SNAPSHOT?type=jar"
+    },
+    {
+      "publisher" : "The Apache Software Foundation",
+      "group" : "org.apache.camel",
+      "name" : "camel-main",
+      "version" : "4.0.0-SNAPSHOT",
+      "description" : "Camel Main",
+      "scope" : "required",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "72cb7af333213c2aaa804a5425d46168"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "d17432e14eb19326c90250b971a80c4ae9279946"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "c38ac498f207779cb0c6046474b47d9f23cfe8900633f3bd5c30feca2ae62b30"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "c32349bd05f3b2e7e0d906f3c240f1cda531fc36d1e73cbaa5781a609ce4bf8227b6c126b2beb36ec38f398b153d361c55802e9c8b19c37964fd72eec998d1a1"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "868f4a0eeea482fbe6ad00cefaca17245f0d878ad52d1bf1b9b8f13c26b64151d74bbab130b2046802e9b3b82987a696"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "c29288dcc71fdf49196e1a142d0e9e760d90f64a8fa4bca9eb01d87d21a42603809bad67d1b23b746793d5f722884ac0"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "f5c29cd3538604818cc0bff81a49021594931fde940cfdc3882344738127dc30"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "513b9369cc2ed863a351fbc5acd3c7cb8a41a9a815063431011a2e050bd8883036c74f0d9e849680fdea39ffd643ba4e1f7aec78ddc8cb4fada5f8ad900b236e"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "Apache-2.0",
+            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/org.apache.camel/camel-main@4.0.0-SNAPSHOT?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "https://www.apache.org/camel/camel-parent/core/camel-main/"
+        },
+        {
+          "type" : "distribution",
+          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
+        },
+        {
+          "type" : "mailing-list",
+          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
+        },
+        {
+          "type" : "vcs",
+          "url" : "https://github.com/apache/maven-apache-parent/tree/apache-29/camel/camel-parent/core/camel-main"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/org.apache.camel/camel-main@4.0.0-SNAPSHOT?type=jar"
+    },
+    {
+      "publisher" : "The Apache Software Foundation",
+      "group" : "org.apache.camel",
+      "name" : "camel-base",
+      "version" : "4.0.0-SNAPSHOT",
+      "description" : "The Base Camel Framework",
+      "scope" : "required",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "70c294d15dc909dde73f3fc1ad8a60fc"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "2f4e2eeda3c731291238aa7d8a6cbf649e965bf5"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "c878e69860edbb1e9b812d42e0bf7cad0a61d52472085ba783a837f1512f5a02"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "00e145f463581590fdb194a47489472057bf2de0607ed8c55e3faa4cd15ce81cb17fb10ecfa0f8b712f18868303d69893ce5f49c366eb061ee382de43a7566c9"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "8aceb96f5ec3c4e581b164705913798df529f9d580f94bc24b2abe42641561f7a55e9916e0201216fe57afebf88c1ef7"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "e704442f91f56e740afad23c19d27cebf87fbf0cc0fd9868af4bc7f45461fb3a62f3bfeae7d3d59e9ce99562e3949976"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "fe9b9760d57194e7e3dce1a1b231954154d70374f78efdffc68b17b8998a16f1"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "2dc658fdeb3c7fd8dd32e71e424e9f7dcb16dc28195f34a58c31de07ed84ce74a8da09970ce515e155dcfb0f28079bd6db0c03d831af015fc52d00071d069362"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "Apache-2.0",
+            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/org.apache.camel/camel-base@4.0.0-SNAPSHOT?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "https://www.apache.org/camel/camel-parent/core/camel-base/"
+        },
+        {
+          "type" : "distribution",
+          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
+        },
+        {
+          "type" : "mailing-list",
+          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
+        },
+        {
+          "type" : "vcs",
+          "url" : "https://github.com/apache/maven-apache-parent/tree/apache-29/camel/camel-parent/core/camel-base"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/org.apache.camel/camel-base@4.0.0-SNAPSHOT?type=jar"
+    },
+    {
+      "publisher" : "The Apache Software Foundation",
+      "group" : "org.apache.camel",
+      "name" : "camel-core-languages",
+      "version" : "4.0.0-SNAPSHOT",
+      "description" : "Camel Core Languages",
+      "scope" : "required",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "cc80b64a3baafe0f8661b71be3b82023"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "82513492bac2fd48f558501237aecd69c12d211e"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "90a58ff77ecf9f4d1602ad1a5fce797c481dca17e88d651882c09b7111f086f3"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "de1e2eef7c740762f88f40c4addbe5862985e2d4c3dc2252e4b36a03fe9ea9e8849b27750ad2cbaed2a3c195030510e70d6f8d30711b0f5138860039fd10a2fd"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "dacf72d58d9b81a9beba211752f53ad4fd962c3ae98689c292e7e9f097f5a30fcadafccdfead4e692e335ed0912fc8fa"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "24f43ad7a59e11250e93c44aaf15cb8f6f3087cd14459b05355a5b28d6a1a11226ce502f1a6d34db4b8ab1643c5ec4b2"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "d4acb117163d04f93863f99826bf24c5dfcb6e526097976dbf92e220c24b4f2a"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "dab52d9817d984805b7cbd1098107084e02a2c2ea9e85b309a52dd0350f9ac491194e715c000ee954a63a03ed438cafa8defc21a23130d8c864cf2739d6c49be"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "Apache-2.0",
+            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/org.apache.camel/camel-core-languages@4.0.0-SNAPSHOT?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "https://www.apache.org/camel/camel-parent/core/camel-core-languages/"
+        },
+        {
+          "type" : "distribution",
+          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
+        },
+        {
+          "type" : "mailing-list",
+          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
+        },
+        {
+          "type" : "vcs",
+          "url" : "https://github.com/apache/maven-apache-parent/tree/apache-29/camel/camel-parent/core/camel-core-languages"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/org.apache.camel/camel-core-languages@4.0.0-SNAPSHOT?type=jar"
+    },
+    {
+      "publisher" : "The Apache Software Foundation",
+      "group" : "org.apache.camel",
+      "name" : "camel-xml-jaxb-dsl",
+      "version" : "4.0.0-SNAPSHOT",
+      "description" : "Camel XML DSL with camel-xml-jaxb",
+      "scope" : "optional",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "57dbd541c5a7de33df1c7129ce247b21"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "b7cf19ea384bb2c5a36483ab33fb17f1c9afa797"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "de0e7de668cd40ae9b530a25e07fa43058f23edfead32bb1da9fc5a6bc5788c1"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "2eb07b231a6fac3057d8b8cbd64aadf870465763314dac70948375fc4ca5ebd3d719f69d956489891d102aaae23897addcd0fa6c7bb0f28bd4fd628c6b20b68c"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "109be250b63a10ba91d07f8ce9cb5e2eeb8d1a1914c88765bab968b8c5f77a0354c5d7aa33b2df13e49be72ca9d6de0d"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "3a2afe78df316c41657dd6fb275e638d6b02be82c5b085167e9c4c658bb5e495169f7614e3d27e0c8e5e0fe304badb16"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "b05b316572aef78654ccedfa17fba518ec4dd617c0dd7d7b0c1fbe4280d1200e"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "c642776b3262a74848a26cd07d11c870ef893727c7d68941d2b601da637f0f968dc6ceb0b12efa6287fa9b3e285531b1253edd3a7870c327e240290009b005f7"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "Apache-2.0",
+            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/org.apache.camel/camel-xml-jaxb-dsl@4.0.0-SNAPSHOT?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "https://www.apache.org/camel/camel-parent/dsl/camel-xml-jaxb-dsl/"
+        },
+        {
+          "type" : "distribution",
+          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
+        },
+        {
+          "type" : "mailing-list",
+          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
+        },
+        {
+          "type" : "vcs",
+          "url" : "https://github.com/apache/maven-apache-parent/tree/apache-29/camel/camel-parent/dsl/camel-xml-jaxb-dsl"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/org.apache.camel/camel-xml-jaxb-dsl@4.0.0-SNAPSHOT?type=jar"
+    },
+    {
+      "publisher" : "The Apache Software Foundation",
+      "group" : "org.apache.camel",
+      "name" : "camel-xml-jaxb",
+      "version" : "4.0.0-SNAPSHOT",
+      "description" : "Camel XML JAXB",
+      "scope" : "optional",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "835031dc86192104d234b35f1d0ea01e"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "99d8fe57d0a8c6fc00470d11491545433c110623"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "55e514af21b0b85ab6b54bf4d01fb7111a05476413eac885dfee41a564301ed0"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "e81437509f0017188f2d59a0529a14fc728d253008005e299fc619dcccd598c244d1e6d379915e482f20343d3cb6eaef96549f3d5fbfd606d8a1abbdd018c735"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "bc16838c8af8528035ff7888f69ba69b5ab618025e4a87bc44e92122e76a277bc93f0532602c6c94d5d0a7f9855362da"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "b82d009bd48ade382e4679231216ce3a9b46dd4f54a7d8701c90cba1a1cad306a4953b9933e76c6fa9cdfde35339f718"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "0548fe8cd9e6d39ab060d4fe264fa45a49db8f4a652c899b7d36452de0888a53"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "10092d3aba8349476dd05b170defe3d8b0d3f8845bf5e8a4f4a4a36a40a0b7d93b475937ba23c106cc463dd940fa9a89791b7a826157c578d8541bd346548be7"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "Apache-2.0",
+            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/org.apache.camel/camel-xml-jaxb@4.0.0-SNAPSHOT?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "https://www.apache.org/camel/camel-parent/core/camel-xml-jaxb/"
+        },
+        {
+          "type" : "distribution",
+          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
+        },
+        {
+          "type" : "mailing-list",
+          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
+        },
+        {
+          "type" : "vcs",
+          "url" : "https://github.com/apache/maven-apache-parent/tree/apache-29/camel/camel-parent/core/camel-xml-jaxb"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/org.apache.camel/camel-xml-jaxb@4.0.0-SNAPSHOT?type=jar"
+    },
+    {
+      "publisher" : "Eclipse Foundation",
+      "group" : "com.sun.xml.bind",
+      "name" : "jaxb-core",
+      "version" : "4.0.1",
+      "description" : "Old JAXB Core module. Contains sources required by XJC, JXC and Runtime modules with dependencies.",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "86957dab6148bc36333f6244e4f52ea8"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "e8bf2d711d2d4250537199602bccae0cd4e62726"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "1086909cb130433039d8e2865bf331af628d992bcef10a95f72dc121ab020775"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "083cd810d22f6a071e8cbad5e1b96b82a58d47c8a0a842590bf301431de3c8787c2557692c00a8c0186e603bccf5d5a141cf308d31d5661e5a06260a7c5bc145"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "146b9df97f013de115fa8cb62a402e5360aaa70876aa05181d4fa8186bcedb2ffe284d73143edaa857fdbe96db3a1d31"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "93008638d8b28661b459695b8a084d1add097b4c1faf169d12ed130f023c71567d64d50295c79700d25783e8d94fc2f6"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "45aa77d48df38c432ff8141fe372f387268cae9793bf3d0aecb64483304912c6"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "24c1840077f7555390459aada26c8ea466a0b7bb22a7d06adf9078e6ad3d3c5f8648ae547fd5aefed2683d987a52f72c8d983aa2735fd3402ef8364ca27da676"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "BSD-3-Clause"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/com.sun.xml.bind/jaxb-core@4.0.1?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "https://eclipse-ee4j.github.io/jaxb-ri/"
+        },
+        {
+          "type" : "distribution",
+          "url" : "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/"
+        },
+        {
+          "type" : "issue-tracker",
+          "url" : "https://github.com/eclipse-ee4j/jaxb-ri/issues"
+        },
+        {
+          "type" : "mailing-list",
+          "url" : "https://accounts.eclipse.org/mailing-list/jaxb-impl-dev"
+        },
+        {
+          "type" : "vcs",
+          "url" : "https://github.com/eclipse-ee4j/jaxb-ri.git/jaxb-bundles/jaxb-core"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/com.sun.xml.bind/jaxb-core@4.0.1?type=jar"
+    },
+    {
+      "publisher" : "Eclipse Foundation",
+      "group" : "org.eclipse.angus",
+      "name" : "angus-activation",
+      "version" : "1.0.0",
+      "description" : "Angus Activation Registries Implementation",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "9e3baa4febebb96420a512190a5c44d9"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "0f0ceddd49f92109fbfad9125e958f5bfd3f2aa1"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "e37aff147e18ed48c50aa9fb78cc85e7478cbfd01257b02d53d3a186d1832245"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "dcf6727e97d8831492fe24b515f6bc7f0e8552646590895415de2075a3835ed7b4557261caab0e968b0ad767ec80ce517fd8a88161c6fc37da03fcc9e5ba435f"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "f83719dba2642448f8e56190213aeb05fb72138c05831938c97a6ba620908e134fbb8a302ee09f3307d40bb498bc4fcb"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "a40e5e3c9e2da890090e69708b05d0c4f9c844699d8422345a7234b46b0f962d842a9d99e21c052ff0db5042fe8b2189"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "130301a8cfb9135ff8b4a6e890968ea71223d36d97de47d32c0c2d6179189d1a"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "eaad80cce76fcd1bcec9edc00cc87b82a2c27d28630e5d6f6398b051e796207732f14c4304f000ac3fefc87ab13b1d9a23dd5682c7c3d225a7129c13750b40fe"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "BSD-3-Clause"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/org.eclipse.angus/angus-activation@1.0.0?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "https://github.com/eclipse-ee4j/angus-activation/angus-activation"
+        },
+        {
+          "type" : "distribution",
+          "url" : "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/"
+        },
+        {
+          "type" : "issue-tracker",
+          "url" : "https://github.com/eclipse-ee4j/angus-activation/issues/"
+        },
+        {
+          "type" : "mailing-list",
+          "url" : "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/"
+        },
+        {
+          "type" : "vcs",
+          "url" : "https://github.com/eclipse-ee4j/angus-activation/angus-activation"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/org.eclipse.angus/angus-activation@1.0.0?type=jar"
+    },
+    {
+      "publisher" : "Eclipse Foundation",
+      "group" : "com.sun.xml.bind",
+      "name" : "jaxb-impl",
+      "version" : "4.0.1",
+      "description" : "Old JAXB Runtime module. Contains sources required for runtime processing.",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "a206231cbdf21fd1c6539e323c75a6b2"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "bad26cea1d483dda57b6f634cdeaca3238637aea"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "d97a653a78f8cf9a6de9acf39d4ed91da3907bfed748e8730a62c30f9f3ec9c1"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "ac45a0e17e1d165fe8b050450da0921624f5d6ac61857b16a2c59e45a771bf00ef6464831a842c981fcdb44055f71e9f606532e005007aeb1a3f7d42b93f7c89"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "87110c81c4c154d0fe7f7eb196015613bb0350f9ac956cd9e7a99d8548afb9f8eb87b6ae705e9b593bf0da80d75ef0dc"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "a78cb77214e2800700c89c4ada641309008390a4156617411d2582babcad4461714b749b9b107e8b96f0207c0b8456a6"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "ff1392014fa62e3f66845844986617ad129e852abce9a2f5c59adbc7a57ec936"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "c41eb96d4334c95cdefd2a864c72ea0a09407d8b96ce5bbc22a604032e4044fa61f93f8db83a5a679a8810e228be6f3f06a5bd66b2c20ca06e96e00df1837f70"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "BSD-3-Clause"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/com.sun.xml.bind/jaxb-impl@4.0.1?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "https://eclipse-ee4j.github.io/jaxb-ri/"
+        },
+        {
+          "type" : "distribution",
+          "url" : "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/"
+        },
+        {
+          "type" : "issue-tracker",
+          "url" : "https://github.com/eclipse-ee4j/jaxb-ri/issues"
+        },
+        {
+          "type" : "mailing-list",
+          "url" : "https://accounts.eclipse.org/mailing-list/jaxb-impl-dev"
+        },
+        {
+          "type" : "vcs",
+          "url" : "https://github.com/eclipse-ee4j/jaxb-ri.git/jaxb-bundles/jaxb-impl"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/com.sun.xml.bind/jaxb-impl@4.0.1?type=jar"
+    },
+    {
+      "publisher" : "The Apache Software Foundation",
+      "group" : "org.apache.camel",
+      "name" : "camel-dsl-support",
+      "version" : "4.0.0-SNAPSHOT",
+      "description" : "Camel DSL Support",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "52502ba5c4c2063794cd27ebda3475c4"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "225f392f9a6ba4e49ba7943a3520bbdba4fe4c20"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "0cb24e6a312c63f307d04cca5e85875c1db5a136558c31fdb5432a5a35802b05"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "74e08dbf76861b9a668389d00ec1d1647216eacf3388be912180aaea419579b6fe48394ed538f507d430ce0ad24d8451c414abebecd0f7ad3daf88b6f21c987b"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "74a45dbcef49d99dd6c51084c93a82d496fe0c05c376e2cc0388968c4fc6889316c3998e7b56e1a35a4ea3756a38f619"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "6b4856411fc41ef7d427f535e4285b000956ee3323243e9087f9496b718fdeba459edc9ca9e0a650b986a3e89e395bdc"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "0c2c18c5580e4817335c8ada311539a18a1929f1a8cee0ebfc54a573e548ba36"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "da30e7229901c193b3abcb2d4fb3e42d363328a76abd5f2efccb58eead5f956f58d2fecc8ab1de8e65de21abf4b3c6e1a9c20898aed5252ebda333098c5193ee"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "Apache-2.0",
+            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/org.apache.camel/camel-dsl-support@4.0.0-SNAPSHOT?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "https://www.apache.org/camel/camel-parent/dsl/camel-dsl-support/"
+        },
+        {
+          "type" : "distribution",
+          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
+        },
+        {
+          "type" : "mailing-list",
+          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
+        },
+        {
+          "type" : "vcs",
+          "url" : "https://github.com/apache/maven-apache-parent/tree/apache-29/camel/camel-parent/dsl/camel-dsl-support"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/org.apache.camel/camel-dsl-support@4.0.0-SNAPSHOT?type=jar"
+    },
+    {
+      "publisher" : "The Apache Software Foundation",
+      "group" : "org.apache.camel",
+      "name" : "camel-spring-xml",
+      "version" : "4.0.0-SNAPSHOT",
+      "description" : "Camel Spring with XML DSL",
+      "scope" : "required",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "e66948019e3fef2e3e28fe5dce16a0ca"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "cd3ebd2f784b8a4ba1c08f916892d150399d04c2"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "989756307275ec87f988cf0c45d0d1de3c8c528e5f4c69c46d8ef1cf0592b5b9"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "5a2681b92c81a1f9fd24fdf20b5ab4e77d45c02e7e923f7358005451835687779a4686962147ec6f221d37844a2ecf8d14430854f2fa39225d2a8e7f3856a6fe"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "41fbb1b04fd28865c74f08c68e914a2a0277e7cd58d96dc2ff17136905108124b660741a15af95dd059df3fe88a21c5a"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "1e2b6b2d891994b888891bbc05f0c1cb0bedfecc20d0f0b7b410ceaefa8440587a4c34053148049eef97ec31292eb01a"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "118bce089ac458d0a9ba715f52a3d449137c7692876ed97f7bc7b91364bb6014"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "b5f97c05b897c1bb28a3a03fe5a9e5de457fd6b9642c70ae9fc2f431db2b81c48a57c5905d29944fff68a4743a2f95909b86476a1fa107f1423c50295ed36b31"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "Apache-2.0",
+            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/org.apache.camel/camel-spring-xml@4.0.0-SNAPSHOT?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "https://www.apache.org/camel/camel-parent/components/camel-spring-xml/"
+        },
+        {
+          "type" : "distribution",
+          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
+        },
+        {
+          "type" : "mailing-list",
+          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
+        },
+        {
+          "type" : "vcs",
+          "url" : "https://github.com/apache/maven-apache-parent/tree/apache-29/camel/camel-parent/components/camel-spring-xml"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/org.apache.camel/camel-spring-xml@4.0.0-SNAPSHOT?type=jar"
+    },
+    {
+      "publisher" : "The Apache Software Foundation",
+      "group" : "org.apache.camel",
+      "name" : "camel-xml-jaxp",
+      "version" : "4.0.0-SNAPSHOT",
+      "description" : "Camel XML JAXP",
+      "scope" : "required",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "748ccd03cef9d5506e294f62a719ea3a"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "8485353867244facb36a9773ebf575f415dd7e56"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "418fc78a4b1c14fbf4260a7d30a782b63235b113a2d309ff808349b5af691d45"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "dd480eda083d31b97a42c66109ce9d4b2318cec8f32bd8e4e30518f20cabbd9b125edcfd3ba0ca857086ebaabc53bdf49d1034fad8054a472696da25c7c7ea53"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "a0850349323a79a0341f1e4932e032e99d8f242fd5d85fabf8315939fb192754ff3911eb0788c2d2f32dd9741f27e2c8"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "8ef822340bac198f5364add718ee12d2e9fd9961aa33d9d53bfb16711dd8a22090dece0fdef4f3e63bdba5cf2748f6cd"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "a1f60b89fc1b3ced67a7704eb7229ed7a6cff9748af991505ef14ff4e344cfd8"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "4c6119fc404226f02f49f1f15f047186d7d72987b07582ed21c45fca67d3c6abab6abec7e1a25230428c8192f2a2beb2c3994b01f0edb1df7f5f5fda97dd9b4f"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "Apache-2.0",
+            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/org.apache.camel/camel-xml-jaxp@4.0.0-SNAPSHOT?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "https://www.apache.org/camel/camel-parent/core/camel-xml-jaxp/"
+        },
+        {
+          "type" : "distribution",
+          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
+        },
+        {
+          "type" : "mailing-list",
+          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
+        },
+        {
+          "type" : "vcs",
+          "url" : "https://github.com/apache/maven-apache-parent/tree/apache-29/camel/camel-parent/core/camel-xml-jaxp"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/org.apache.camel/camel-xml-jaxp@4.0.0-SNAPSHOT?type=jar"
+    },
+    {
+      "publisher" : "The Apache Software Foundation",
+      "group" : "org.apache.camel",
+      "name" : "camel-xml-io-util",
+      "version" : "4.0.0-SNAPSHOT",
+      "description" : "Camel XML IO Utilities",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "77d0b16470425123818ac295f5f87292"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "dce85d3f64c4fa0a18bd0b6323ac52f9ca7d0530"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "9dc31e1eb94dcf2e910afd0eb2dce15b222268fe3fa1315da16b83308c4da765"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "215cdf9629e47be98d7a0534e51332d808e88e2785ebcfba454ce276b2d2053cd8645f1a8e682a66dd5b3e2b48bf96c87fcb9574906a5b9f2a9b7b273848c4ff"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "78530e179cd180471947d6c2093dd2e3aea40780d41b593559d1e2de382ae65221f7885184cb5453dc19525dcc316925"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "2fbd1a1841e32bccb669965131f06e5952d7ae3b25b5b8a96a1ce793df999c274446b9f4e18e35187edd1c62cdb6920c"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "ed2ddc070ce5492a4def9f9ec4f13eecc5deb961149000e1b86781a7edcdb8e6"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "6595db53f9e7088ee0add3862c35850d8b0aa77ea82c08e97bd26aa98109d60aa7e955e30df3dd5369ea97526b3795c800af4dc92be06dfdbe564a06bca3e138"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "Apache-2.0",
+            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/org.apache.camel/camel-xml-io-util@4.0.0-SNAPSHOT?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "https://www.apache.org/camel/camel-parent/core/camel-xml-io-util/"
+        },
+        {
+          "type" : "distribution",
+          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
+        },
+        {
+          "type" : "mailing-list",
+          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
+        },
+        {
+          "type" : "vcs",
+          "url" : "https://github.com/apache/maven-apache-parent/tree/apache-29/camel/camel-parent/core/camel-xml-io-util"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/org.apache.camel/camel-xml-io-util@4.0.0-SNAPSHOT?type=jar"
+    },
+    {
+      "publisher" : "The Apache Software Foundation",
+      "group" : "org.apache.camel",
+      "name" : "camel-core-xml",
+      "version" : "4.0.0-SNAPSHOT",
+      "description" : "Camel Core XML support",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "145cfe4d96a3a811e9389ff5b16358d6"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "33d883a758ca98b2e1994b61f7f759cee32a0877"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "69a1f6657a5d4b05f74e8d4da6aa5b6cff8a45fff100a1276d1048768a6af00d"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "66b727229874f3ecad32e9134041430c58cb2fcbbd899da3b02648a1b3344bf8296f2727c1664ac3f1280bce3d1a0f41e8fa1e8c74a2919adc63c41c2ebb5b0b"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "87c98b12cb16709ec3f9ea17ed5ad8675a86998e72fe2faace945cc2b01bc10dd1245c3eb283b6d98bb7c6597191e951"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "2acab924c0f69f5f379f043a7233423c898e266449c5a44d92ebd1ef6b0b818fd3288e654de9619b1b4d4efb8ea94f03"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "0b3bc99aaee73f50cd14753bc0360cb58bf7a3d1d47f913dbec17b8d14dc6d19"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "76903bb1fa2eda9bae7b4462387a3cb1eaa3b47ee45b8f376c47639cc214056a3dfdbf6403f17950c7ffe5f98a61ac111219d3ac07291f8a235b55aac57846de"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "Apache-2.0",
+            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/org.apache.camel/camel-core-xml@4.0.0-SNAPSHOT?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "https://www.apache.org/camel/camel-parent/core/camel-core-xml/"
+        },
+        {
+          "type" : "distribution",
+          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
+        },
+        {
+          "type" : "mailing-list",
+          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
+        },
+        {
+          "type" : "vcs",
+          "url" : "https://github.com/apache/maven-apache-parent/tree/apache-29/camel/camel-parent/core/camel-core-xml"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/org.apache.camel/camel-core-xml@4.0.0-SNAPSHOT?type=jar"
+    },
+    {
+      "publisher" : "The Apache Software Foundation",
+      "group" : "org.apache.camel",
+      "name" : "camel-cloud",
+      "version" : "4.0.0-SNAPSHOT",
+      "description" : "Camel Cloud support",
+      "scope" : "required",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "c30ab5e23b56e4bd6a3e2f951e5932be"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "095749aa115333e5b659a47cbe8e1fd7b759642a"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "9cb6a48e41450f7a600b2cfe3a05945f70616c5ea11aff1eb58e8e2a0ab35f2d"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "a3afb95487e0575b229e5683ce8a5c5bd74227beca5da8a3da608e0be2817c90f920ca4af650d6a2168efc11f15c3814527ccd216a46ed031142f8e438c3fdcd"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "443b959272c3ef85ae026287847b0d7d230ebe1c4035538143610e09ddca51427a3e02d0e46cfc83433d213a9bcf7f0e"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "2b31c4754c051a3b7768541cba92b886addc4183732710ebe3f3399b83bb33294dad51f9e0192e146e7309ba83065c6e"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "ae7cd745bf738dcea9f4f46c01c2f9196210d6757095000660b9f46fa3380f04"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "48090b4b7d3e353b644447341b55ab2b866611d63fcc2fb6bf690ab3eb5af4dec80756c65451cfea13f89306c3e119b23de6ff812725775c0cdc1a022f83e71e"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "Apache-2.0",
+            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/org.apache.camel/camel-cloud@4.0.0-SNAPSHOT?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "https://www.apache.org/camel/camel-parent/core/camel-cloud/"
+        },
+        {
+          "type" : "distribution",
+          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
+        },
+        {
+          "type" : "mailing-list",
+          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
+        },
+        {
+          "type" : "vcs",
+          "url" : "https://github.com/apache/maven-apache-parent/tree/apache-29/camel/camel-parent/core/camel-cloud"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/org.apache.camel/camel-cloud@4.0.0-SNAPSHOT?type=jar"
+    },
+    {
+      "publisher" : "The Apache Software Foundation",
+      "group" : "org.apache.camel",
+      "name" : "camel-core-model",
+      "version" : "4.0.0-SNAPSHOT",
+      "description" : "Camel model",
+      "scope" : "required",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "cebe4f4ed9c9e84ffcb852eb5789f589"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "bcd5b5ac6d7b296987787c390f3fb500ed713683"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "25beb465ba1b5191fd7ae0bb379bd6fe3e71bb891466a398f3400796822054a8"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "645709615dd661cd5297d2a1b82c4f3beac1cdf1b2acfdbac3c39ea2870f2009296c1935c73362a5be21b102b041680a89e3ab66b7fd11aa35ee3b9e757878a1"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "a6449ceb6d1c08a37c9f3fe80075db15a6053a5c8773bb43d56154827b5bb817677d13224ab45bd8de508cd7d6ea9fe1"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "4a99d2ed9c54620d4c43d55da1e1a938476aa3d5a19a7b2667dc1fe6c4c204612f870133edcb9c5526dab87956bda15a"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "e62408c1fe94f228f561d50fd6d00a0b183242c3eb35657c2649f7067c29aa15"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "f9b58497d6ee8a7650fcd8a5a0707321fc201a09ff418d1326cad2e2f28db4b60954ce4d0a33a65ccbe9ac6ebf39361c0a2ff732905c2b6523b24afd77de2e40"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "Apache-2.0",
+            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/org.apache.camel/camel-core-model@4.0.0-SNAPSHOT?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "https://www.apache.org/camel/camel-parent/core/camel-core-model/"
+        },
... 222851 lines suppressed ...