You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@camel.apache.org by gz...@apache.org on 2023/12/26 12:00:53 UTC

svn commit: r66321 [2/2] - /release/camel/apache-camel/3.22.0/apache-camel-3.22.0-sbom.json

Added: release/camel/apache-camel/3.22.0/apache-camel-3.22.0-sbom.json
==============================================================================
--- release/camel/apache-camel/3.22.0/apache-camel-3.22.0-sbom.json (added)
+++ release/camel/apache-camel/3.22.0/apache-camel-3.22.0-sbom.json Tue Dec 26 12:00:53 2023
@@ -0,0 +1,253823 @@
+{
+  "bomFormat" : "CycloneDX",
+  "specVersion" : "1.4",
+  "version" : 1,
+  "metadata" : {
+    "tools" : [
+      {
+        "vendor" : "OWASP Foundation",
+        "name" : "CycloneDX Maven plugin",
+        "version" : "2.7.10",
+        "hashes" : [
+          {
+            "alg" : "MD5",
+            "content" : "1cc7f6a0382f8bb2f758d6a6ea401d1b"
+          },
+          {
+            "alg" : "SHA-1",
+            "content" : "a4297947a1f2d7d453105db542651614bbd37f38"
+          },
+          {
+            "alg" : "SHA-256",
+            "content" : "bd0fdd8f2f2116eee5e715aeac1580f19eb7a10ec2b6f805b53567067658e872"
+          },
+          {
+            "alg" : "SHA-512",
+            "content" : "9cde8352a427e10b96cae01348fc7cfe5d4aa9cd0a5e5dd93b414ce3bb7d112993c3b3004e53af52567fbfa16de0704ec59a5556a635ad70571fd124ae389f39"
+          },
+          {
+            "alg" : "SHA-384",
+            "content" : "93d7bf5b5c735347edfbfbd66810273ca840f9a322b816d22d44c3d8e8255c09e86570bb23712aeb0cade0f478be5aeb"
+          },
+          {
+            "alg" : "SHA3-384",
+            "content" : "4467f16e9ca32190a6e49c65339eb28ee5e8c78f4e918fcf95128a4b7648898de56ccb43eacfad0c9391ef8cdb7d629a"
+          },
+          {
+            "alg" : "SHA3-256",
+            "content" : "ed2996c99b483e969221d5e9a40f562ea2ab85442d361d72a90e85266a3ed781"
+          },
+          {
+            "alg" : "SHA3-512",
+            "content" : "c8e6ea9ddc38edc77e284b3bf541663e84752bdc59ed1935799847a48a14ea2fa531b61008fefcba37d732a56702a11ac112437b9b80d18f4ecc8ef0ecfb32cf"
+          }
+        ]
+      }
+    ],
+    "component" : {
+      "publisher" : "The Apache Software Foundation",
+      "group" : "org.apache.camel",
+      "name" : "camel",
+      "version" : "3.22.0",
+      "description" : "Camel Root POM",
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "Apache-2.0",
+            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/org.apache.camel/camel@3.22.0?type=pom",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "https://camel.apache.org"
+        },
+        {
+          "type" : "distribution",
+          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
+        },
+        {
+          "type" : "issue-tracker",
+          "url" : "https://issues.apache.org/jira/browse/CAMEL"
+        },
+        {
+          "type" : "mailing-list",
+          "url" : "dev-subscribe@camel.apache.org"
+        },
+        {
+          "type" : "vcs",
+          "url" : "https://gitbox.apache.org/repos/asf?p=camel.git;a=summary"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/org.apache.camel/camel@3.22.0?type=pom"
+    },
+    "properties" : [
+      {
+        "name" : "maven.goal",
+        "value" : "makeAggregateBom"
+      },
+      {
+        "name" : "maven.scopes",
+        "value" : "compile,provided,runtime,system"
+      },
+      {
+        "name" : "cdx:reproducible",
+        "value" : "enabled"
+      }
+    ]
+  },
+  "components" : [
+    {
+      "publisher" : "The Apache Software Foundation",
+      "group" : "org.apache.camel",
+      "name" : "camel-buildtools",
+      "version" : "3.22.0",
+      "description" : "The build tools for the Apache Camel project",
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "Apache-2.0",
+            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/org.apache.camel/camel-buildtools@3.22.0?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "https://camel.apache.org/camel-buildtools"
+        },
+        {
+          "type" : "distribution",
+          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
+        },
+        {
+          "type" : "issue-tracker",
+          "url" : "https://issues.apache.org/jira/browse/CAMEL"
+        },
+        {
+          "type" : "mailing-list",
+          "url" : "dev-subscribe@camel.apache.org"
+        },
+        {
+          "type" : "vcs",
+          "url" : "https://gitbox.apache.org/repos/asf?p=camel.git;a=summary/camel-buildtools"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/org.apache.camel/camel-buildtools@3.22.0?type=jar"
+    },
+    {
+      "group" : "org.apache.camel",
+      "name" : "camel-parent",
+      "version" : "3.22.0",
+      "purl" : "pkg:maven/org.apache.camel/camel-parent@3.22.0?type=pom",
+      "type" : "library",
+      "bom-ref" : "pkg:maven/org.apache.camel/camel-parent@3.22.0?type=pom"
+    },
+    {
+      "group" : "org.apache.camel",
+      "name" : "init",
+      "version" : "3.22.0",
+      "purl" : "pkg:maven/org.apache.camel/init@3.22.0?type=pom",
+      "type" : "library",
+      "bom-ref" : "pkg:maven/org.apache.camel/init@3.22.0?type=pom"
+    },
+    {
+      "group" : "org.apache.camel",
+      "name" : "camel-bundle-plugin",
+      "version" : "3.22.0",
+      "purl" : "pkg:maven/org.apache.camel/camel-bundle-plugin@3.22.0?type=maven-plugin",
+      "type" : "library",
+      "bom-ref" : "pkg:maven/org.apache.camel/camel-bundle-plugin@3.22.0?type=maven-plugin"
+    },
+    {
+      "publisher" : "The Apache Software Foundation",
+      "group" : "org.apache.felix",
+      "name" : "maven-bundle-plugin",
+      "version" : "5.1.9",
+      "description" : "Provides a maven plugin that supports creating an OSGi bundle from the contents of the compilation classpath along with its resources and dependencies. Plus a zillion other features. The plugin uses the Bnd tool (http://www.aqute.biz/Code/Bnd)",
+      "scope" : "required",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "a47534f9f953dc75548a04c6046f3c25"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "707d2a73eecc3cd7b208eb8b6f766e944ee486db"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "d5379a3b8dd9b898c2953a1efea780cb5dc06029399ac492bbca13d65aa28eaf"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "23781a6fba63a6b720cb2b95949fba5f4462f1100babd1e47997aea503cc720722d1672ff91b5f2472f4a54dc4675fb057e4bb7f12e3258849dd804e32a0e157"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "b0f3a58fb2351ac262dfd76b7e8df922bf48cbcd7a80c4674c87660ad6abef1b9862889b21f3acc497fa56a40f6a9280"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "3d8bef2acf057e60b8605304e3fb281392fd17b0b0d6833d9288401ac00e0472fe02967230accee21e41505946f79cbe"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "8fd6d5b30d253e6aa50a188ed5081186d58275c5f9e7c4f86f31803ca4979c86"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "50ac1bb094faa882a67288db0a406d9ec2dc06a1dd27c1b935b97ca407937d5926dfb31ce6819a1965afe01c93eb9ec22334134db1ff76b9585d20edf6e2fc13"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "Apache-2.0"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/org.apache.felix/maven-bundle-plugin@5.1.9?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "http://felix.apache.org/components/bundle-plugin/"
+        },
+        {
+          "type" : "distribution",
+          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
+        },
+        {
+          "type" : "issue-tracker",
+          "url" : "http://issues.apache.org/jira/browse/FELIX"
+        },
+        {
+          "type" : "mailing-list",
+          "url" : "https://www.mail-archive.com/dev%40felix.apache.org/"
+        },
+        {
+          "type" : "vcs",
+          "url" : "https://gitbox.apache.org/repos/asf?p=felix-dev.git"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/org.apache.felix/maven-bundle-plugin@5.1.9?type=jar"
+    },
+    {
+      "publisher" : "OSGi Alliance",
+      "group" : "org.osgi",
+      "name" : "org.osgi.core",
+      "version" : "6.0.0",
+      "description" : "OSGi Core Release 6, Interfaces and Classes for use in compiling bundles.",
+      "scope" : "required",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "cae291c61fe8b7a4476d713550c7ff49"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "0c49acdc9ac62cf69ee49cb6f1905b4fdb79ea5c"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "1c1bb435eb34cbf1f743653da38f604d45d53fbc95979053768cd3fc293cb931"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "a6d5388804982ab2cb0ba82b4291e73f006577c54e5dcb0675a2c4922594ddb0265810a4e7c748c88eba76ee350340376b7a9bd25d2de3afb954cf89117cd470"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "8daff91fc229b2874c1ff7a214fdee65b1824fbac76eb7feec609c5b70ab2fd24fc5cf017b339788a5c7aec041ec1a1c"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "b921d8bea5dab6e7d827ce49a43e6edb4a15c1402e1d70498faf867bd7e9ea61f47b9cbdbf008ed517b71499c02b9e4c"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "5836efac64dd3757498bc6648cf02e46f136c6b0b39d5f1641218459d6b68ca0"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "9056edfc04943cdc81041db1851cade670415457221617babeb3d3c5136c3dcc303862e55b545f40584477e0654d11d84db6ede072015b08744241202d79ee63"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "Apache-2.0"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/org.osgi/org.osgi.core@6.0.0?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "http://www.osgi.org"
+        },
+        {
+          "type" : "vcs",
+          "url" : "private"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/org.osgi/org.osgi.core@6.0.0?type=jar"
+    },
+    {
+      "publisher" : "Bndtools",
+      "group" : "biz.aQute.bnd",
+      "name" : "biz.aQute.bndlib",
+      "version" : "6.3.1",
+      "description" : "bndlib: A Swiss Army Knife for OSGi",
+      "scope" : "required",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "6b35b1ae5b56cb48a70554b8d103f860"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "3218e787f13e1c3a39a966ac67aac651dbe2e23b"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "6e44092ecd67a3b4a1b3bd6e5ea61133991d9ddf179c72eae39692d2a8c33bf6"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "7c3f7bc0280beb1b15182c558ef23f431719c046da8473545efe9aeec935776ebf6682cabbb7e7f53dcf2ccca168d8df35859be77121dab04340a5ec7e993608"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "bf0f41fddbfcc5bb97d922d776497bd5795cdfb8a3c52899d1247d3152757d069adc13a9a33427b39affb4c83cf62f7c"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "ca72e96514ca30cde0ac9e305d473d56f5131c47385d82e3d0208746237de39697534446268ed7aedaebb2687575e198"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "a88810b780f12202c878b8f87cd54624f8d73fbf6db3a001f9c3c71d2706c679"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "8b0664fbbeffc1fcaf15a93b30f663010abd7c8b95272cc6764ac6bce80502c5c66850f7617be9645f74f17f57ac264551d8e7686af44efc342f7118026a4527"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "name" : "(Apache-2.0 OR EPL-2.0)",
+            "url" : "https://opensource.org/licenses/Apache-2.0,https://opensource.org/licenses/EPL-2.0"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/biz.aQute.bnd/biz.aQute.bndlib@6.3.1?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "https://bnd.bndtools.org/"
+        },
+        {
+          "type" : "vcs",
+          "url" : "https://github.com/bndtools/bnd"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/biz.aQute.bnd/biz.aQute.bndlib@6.3.1?type=jar"
+    },
+    {
+      "publisher" : "OSGi Alliance",
+      "group" : "org.osgi",
+      "name" : "org.osgi.dto",
+      "version" : "1.0.0",
+      "description" : "OSGi Companion Code for org.osgi.dto Version 1.0.0.",
+      "scope" : "required",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "c2bce9030f4b5a2d3c489dfc11fee529"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "1d01eb8c487477f929127d4a88fbfe97af0379a4"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "cb75f3c7e48e5a31a31df22e26873346f5bf659e2dcab2369e031e4850d2ff43"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "6c2e82be9a502b05817ce276a807ec0f72e4847ad1712b9c36afd2bac6989e88873c271ae87fd2d867f56016686b9e3b1a6b39c5e5bed76d6e52fb8e2569b615"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "c5d6ac5cb81861171836ecb0fcf582b156ee4548fa7861ce4353acde5d9a6968f9e000ffeb12eecf4d8a638804502deb"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "98523827d366449a9c975453a0e6aab562f3b5f46dfd7debda783be492172eedb34aa33a12a50ecdc27d669dea3b5ab1"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "e1f8b9b077a7d875fa05459af52e293911640cbb271f9755b09eb2a28bdf28d5"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "94a7dbd39295e8f23b51108d5494352c26e5a00f855540150b09a1913c71dfbfe6a581ec6734cf5aa4b0c0f207079097b87f7f3ebd1df04c1e0c0cf97f76a8c0"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "Apache-2.0"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/org.osgi/org.osgi.dto@1.0.0?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "http://www.osgi.org/"
+        },
+        {
+          "type" : "vcs",
+          "url" : "https://osgi.org/git/build.git"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/org.osgi/org.osgi.dto@1.0.0?type=jar"
+    },
+    {
+      "publisher" : "OSGi Alliance",
+      "group" : "org.osgi",
+      "name" : "org.osgi.resource",
+      "version" : "1.0.0",
+      "description" : "OSGi Companion Code for org.osgi.resource Version 1.0.0.",
+      "scope" : "required",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "7d857a4203e2996fab0cf070133e43df"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "343c88949132984b3f2d4175a72c40b77dc65619"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "81fc50f1f1d38a4af28e131907d4afe213249aab05060484edca0e60c4af9b4a"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "4e798790856f83f50832db80bfab64dfceeff1c509d7dde43e74a9f9192ea7a7d5ea77b9b1e81291fa6ba3dcef5ab8fa791ca8093a72a08d7ca6f6499e13e506"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "73038c395166552b64b6b5469bd8056584f48d19b5762df2e8bd2770405ed8f6071e397a87d9a7ed39f8c2e0e8ab85b2"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "e06c8a460b3bf06d6cb22237aeffa6afd2eadd9461096c67b768a14603ad8aaa88f891d03cf0a273a99d86906c1c8eb3"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "1097cfd20e80ce368fd828a23ad7c32a202cebd92106f6ebb88ba55ca74349ee"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "d7b710e1e0484badb875f326c602c90df6705df48b0f057320919a5255d3ecbddd7053eabc68787480a70aebd7e553e9f51728112e1fa0846c849366b7e8d69b"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "Apache-2.0"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/org.osgi/org.osgi.resource@1.0.0?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "http://www.osgi.org/"
+        },
+        {
+          "type" : "vcs",
+          "url" : "https://osgi.org/git/build.git"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/org.osgi/org.osgi.resource@1.0.0?type=jar"
+    },
+    {
+      "publisher" : "OSGi Alliance",
+      "group" : "org.osgi",
+      "name" : "org.osgi.framework",
+      "version" : "1.8.0",
+      "description" : "OSGi Companion Code for org.osgi.framework Version 1.8.0.",
+      "scope" : "required",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "1a40fb57099ef5530d25bc9600d509b1"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "b54d03f9621136b7d9d93b5017b0a4fa490e78b0"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "ec194b7871af27681716ff05259319a5c3c9b9727e8000e9e832499b93484b4e"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "9be46a4a81698ac5641809f6b7061453f0960a585fb69a47331029362f605fa50edb51ceb22ae4c5ea2d3617fc1919e3d86a86acde435f73dc73f00e84f444aa"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "ada694e4cb7fe21ea616132b9228472835515a29d68e6253c6c73e7d37a93ecfa504db0ec5bdb391c9126e89df892541"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "1e56c00266021816d80258b7f32a642a436ad786901347f3ddd72eb9a50f4b865f8970710363992da5d50dbca6d7c360"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "1ee406718f48a4a6cd3ecff2e39c3497c8241dbcdaa66c6cb2e1c0a9ff64e626"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "304002edf444166735e8323c8673aaec2bc97d01e4442fb49371bb9f83d5ba1292e5d30bc1127740e160efa5c67e44e414aa3e2af9096925dcbc89b23c3feda4"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "Apache-2.0"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/org.osgi/org.osgi.framework@1.8.0?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "http://www.osgi.org/"
+        },
+        {
+          "type" : "vcs",
+          "url" : "https://osgi.org/git/build.git"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/org.osgi/org.osgi.framework@1.8.0?type=jar"
+    },
+    {
+      "publisher" : "Eclipse Foundation",
+      "group" : "org.osgi",
+      "name" : "org.osgi.util.tracker",
+      "version" : "1.5.4",
+      "description" : "OSGi Companion Code for org.osgi.util.tracker Version 1.5.4",
+      "scope" : "required",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "5f1d698bfb3b71fe215d1ca173ee4f82"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "eec58ba28538cb05b7d78aff8c915d6d35b66db8"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "7d78c2cc9bcb6421c24f17aa097866ce8d9115c219a4f8d6cc753bc4dfb97efa"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "eb8f66efc53d63c876f1ab6d67c91a286a3d1b346d043ee7ef5ba376c86c71bf412f7c82f855e78054761a1844b83116c50e775cfe18a11e10e812adbe4f45ce"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "6de5a62b5666b7150469dfdf21ccf53f677ed4228957609cd9e8ddb429a28fc4c8eae9836a90b6bfb8c782968c8fef6c"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "b51e7bd4cfeaa595721d7d2198e3e7112b5f0f1b53e8d3587b0d2faa89ccc0cc045b92627fbc9312e5daa0be0b62308f"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "03482d78d50b3124ed6e2df035b9e8812db36cd3d0e465190bf2d7f0d1d0a0b4"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "9b2f45711ab42709ddfc135c5563a9ccbb1f6c6ef89b391930a2f33ee223f9b47a22c4e3605805ed5bbe4626448a86078e129a1ec8c852e1fcae005f49d56886"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "Apache-2.0",
+            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/org.osgi/org.osgi.util.tracker@1.5.4?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "https://docs.osgi.org/"
+        },
+        {
+          "type" : "vcs",
+          "url" : "https://github.com/osgi/osgi"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/org.osgi/org.osgi.util.tracker@1.5.4?type=jar"
+    },
+    {
+      "publisher" : "Eclipse Foundation",
+      "group" : "org.osgi",
+      "name" : "osgi.annotation",
+      "version" : "8.0.1",
+      "description" : "OSGi Annotation Release 8, Annotations for use in compiling bundles",
+      "scope" : "required",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "4f15008cd76e0c6ba527d89148c56d08"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "593d823753aa6e128129da357d7891758e66aa1d"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "a0e8a4c362bd3600812f37b0ea45fba966c7bc049d01fed56a09ecc74082759e"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "9e0dc035fd381d2f4b5c783227acd88656c7f4c8faaaa0e51178b3cd7b051871e0d7a6db906e32149d027df8dd738b27eaf80b74775dc5f6470e030c08a6b47b"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "3393fc41135ac929638a6a2f4fc14150a705c6576e1a739509bd7850394435c5d6c0794e44f40efdbd9a3a9f79732132"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "6ec4762de433eb53ac4a4620577a83d85d06a620a96cf160c21b90ec98e48f025913932d87b9b87b2bcbcea221244d79"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "ef77483de9664ad8ae772060ab8d4e84062dbfc321ed780045d0b4f47a61d04d"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "bc2fb8c061b3c7a1596946f3beaaa3df852cb43b353c809cfc3d91bcbbf03d19b1c0d32328864a38966b88996a50b0ddec47c4f71d7a6b84d4f4762e39717c03"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "Apache-2.0",
+            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/org.osgi/osgi.annotation@8.0.1?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "https://docs.osgi.org/"
+        },
+        {
+          "type" : "vcs",
+          "url" : "https://github.com/osgi/osgi"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/org.osgi/osgi.annotation@8.0.1?type=jar"
+    },
+    {
+      "publisher" : "OSGi Alliance",
+      "group" : "org.osgi",
+      "name" : "org.osgi.service.log",
+      "version" : "1.3.0",
+      "description" : "OSGi Companion Code for org.osgi.service.log Version 1.3.0.",
+      "scope" : "required",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "29739566dfaa2776f52dd4daaca8334c"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "ca330e0489eac540d7fc1917556081695ebc3428"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "ff6710c4856d32684cf3ebdc45248f41036ff734f2b03bbc08c4609a61fecfa0"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "fc6a0c6db6157866ee122741d2b52f55cfa827046d389e39c65d51a14a6846be7d0c8b549edae2f4ef902229f81d06eef1db2a9c850ef7539820ee3022cdec8a"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "e8d7c477e8cbf6a42f415b5bf1a97177e3c7e61d272d867e425c731956194105d39f78be1d7180739bfecf8a57f29b9e"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "538944aab0992424451c1f36a70696d078988775b43cca0378a9c002b56e72b2fb33c3c39ef52a0932744dd82367d0c0"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "b491d6d747ee6bdfc4d0ec982b38de533bdc5e3da5fd7222a9661126db15cfca"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "e46cc071d3ed08f05990943b7b2577933b21c7c9c9cbe3fe28ddcee5436d86c44911e388457186a52a689fbd4f934b621b559fbb0f594ee920872c3cf2e7725d"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "Apache-2.0"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/org.osgi/org.osgi.service.log@1.3.0?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "http://www.osgi.org/"
+        },
+        {
+          "type" : "vcs",
+          "url" : "https://osgi.org/git/build.git"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/org.osgi/org.osgi.service.log@1.3.0?type=jar"
+    },
+    {
+      "publisher" : "OSGi Alliance",
+      "group" : "org.osgi",
+      "name" : "org.osgi.service.repository",
+      "version" : "1.1.0",
+      "description" : "OSGi Companion Code for org.osgi.service.repository Version 1.1.0.",
+      "scope" : "required",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "2e293b7d69dee0e4ca04594ba8c3ec76"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "64ef667172ece1a39b0bd9471b8336c5f002370d"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "c5553e95b459529192433486d4c4cc22ff45a2eae4968484f9f717319264a532"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "79e2beb14b0fcb28109a4095d1be685cf5bd375136a685c19175ed64faf885ca4768c28b484b57baed929e2b3cc52ec2731678b73f4586f8642d771c7d4988c6"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "ab5cfc26701bc90c3ed47e3c1c0c365a7bba033fe2b185edbe2a4b4161ea6f4eadb3b52fbffee05c8aeb6b483ebe1d35"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "f6be4abe9e6885ba03001cb154185c9af6742a5fb84f40eb6d704d40c1cfc0a35439e134145212fba4d1acb0fd5e4b69"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "dd96e5511d055cc9ccadfaf2fad348175ea9ffab1b501bba67d1d4d3bd673a5b"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "64fc01fb1b68a6c7f6fa4dbe4eb3835b5d22a5f53e86e2b9a99e6ce70be3ba9409af1ee093b024c80180caf35110acdcac55c961c3fe977c8af276e250020d9d"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "Apache-2.0"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/org.osgi/org.osgi.service.repository@1.1.0?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "http://www.osgi.org/"
+        },
+        {
+          "type" : "vcs",
+          "url" : "https://osgi.org/git/build.git"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/org.osgi/org.osgi.service.repository@1.1.0?type=jar"
+    },
+    {
+      "publisher" : "Eclipse Foundation",
+      "group" : "org.osgi",
+      "name" : "org.osgi.util.function",
+      "version" : "1.2.0",
+      "description" : "OSGi Companion Code for org.osgi.util.function Version 1.2.0",
+      "scope" : "required",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "60da2a7f440a142095e729639edf2025"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "9fe65a02596b68e06aad340f41e33d53e3f7b8a7"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "208819c7c71690c15a6bb8b187474e7f9d0147946b680182a62b9f222ae014ec"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "3b60eeca88cfcb5b48bcae38c2e9c387648f014932b175c1343ad975ecac0bc0afe0aa7bcfffc1b520faccb36c75bd85b2f8cbac136b22e15460388becfa870e"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "4f71ac743138690f3d44b23c7afaa46cac291c3b4881e222352e009b30079bf50d45af9e85d4574db677d7b58d440668"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "6c0adf88f8ddcbf71e90e5d54c0f3fd446fd61eda9400ac79f1469a39f86ccf8ba7e0edb59972f6e83632b4cad0f96c5"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "ed6b7dc2c72482b87c7030aa9e6af6c9661594df28625b76a8c5dbe07e8cdb68"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "bf4af07429e2c091ee96fc3ba02c2efc3ef3c1c813a24684cb6a318d0f0615ec887fe94f01b0bdba708da51e9f3e03c5955e3b722578a412c284e3ea17c216c2"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "Apache-2.0",
+            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/org.osgi/org.osgi.util.function@1.2.0?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "https://docs.osgi.org/"
+        },
+        {
+          "type" : "vcs",
+          "url" : "https://github.com/osgi/osgi"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/org.osgi/org.osgi.util.function@1.2.0?type=jar"
+    },
+    {
+      "publisher" : "Eclipse Foundation",
+      "group" : "org.osgi",
+      "name" : "org.osgi.util.promise",
+      "version" : "1.2.0",
+      "description" : "OSGi Companion Code for org.osgi.util.promise Version 1.2.0",
+      "scope" : "required",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "2b347548c17bcc89597695b7232da658"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "26c17e1bbfc885ae9eae878de9a0afb73240f031"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "fef86e64f584d012a16a0306160764f6179663b90988a226c4641b920f3a4b36"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "64923f94550c80058f4d9a6dfa35d4be68897d0ff42e390f36e2f0d6880e35e578628198087968ffd70abc7e0e332e166708efdffa0a975dd67f91ba021e57a2"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "eb97e207e51dcd673ec87b9ffc3dd5fdd5a51866519b397998261c31e1df736c8b1f77f0afc7dd26fc26cf9f10cb3d7c"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "49558cfa0fb30e9f21cebf9b199ab299c60482d81ed593b8965211f96795b0a28aa8fd5c048e3e4c089be9575ad2bcc1"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "fc3823d961191f4578bfdd5b8550a1473e4106f30486a5251845ab48f0f02bec"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "b61530dfbadc70bd6548ecbadae22f7458f052953275b75fbfe50731f86260ec0f047269ebfca41e788f7954885f83462060948ce46093288fbed10ab1e821c6"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "Apache-2.0",
+            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/org.osgi/org.osgi.util.promise@1.2.0?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "https://docs.osgi.org/"
+        },
+        {
+          "type" : "vcs",
+          "url" : "https://github.com/osgi/osgi"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/org.osgi/org.osgi.util.promise@1.2.0?type=jar"
+    },
+    {
+      "publisher" : "Bndtools",
+      "group" : "biz.aQute.bnd",
+      "name" : "biz.aQute.bnd.util",
+      "version" : "6.3.1",
+      "description" : "Util classes",
+      "scope" : "required",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "87ce017e32f415feaf2786b22d77b2c4"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "5188e6ee8b8c4eb7dabe1eb2251e77936058a190"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "96c90979333e3dd085a8d901304eca9bd073b38d4c2114849e2dbe1375bf02fe"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "7cb333a2c14a66d6698a5bcac2ca9ce39e05bee9f688defd7fdc83df76757ca9b64f7ba27c736f755d6178144e313e57076171dc2182ccb7342ba5672206cd10"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "63a623244727a305db0a00acad1fb1283d632b97a43666c258f5ea1f932b592b41203e4e62eb9a926c86e4d01245fde6"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "fba25b34f055fb6e7bd34492e75c4647bec088ede93eb6b1b51d52f276b2d610c20f001c8f62927b7370461c8afce386"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "c09b5c223a6fa69ef65a742d77551f7a2003f7e77743d3872684dd237dbf1a79"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "0dad7f9939eed73597c2c668ed835a3a6b48db913fb94e9c2f1ba67221958d86f82049b75e2330f8920dd834f2a810aa6a3e3e8121ad8b99556069bad42bef88"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "name" : "(Apache-2.0 OR EPL-2.0)",
+            "url" : "https://opensource.org/licenses/Apache-2.0,https://opensource.org/licenses/EPL-2.0"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/biz.aQute.bnd/biz.aQute.bnd.util@6.3.1?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "https://bnd.bndtools.org/"
+        },
+        {
+          "type" : "vcs",
+          "url" : "https://github.com/bndtools/bnd"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/biz.aQute.bnd/biz.aQute.bnd.util@6.3.1?type=jar"
+    },
+    {
+      "publisher" : "QOS.ch",
+      "group" : "org.slf4j",
+      "name" : "slf4j-api",
+      "version" : "1.7.25",
+      "description" : "The slf4j API",
+      "scope" : "required",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "caafe376afb7086dcbee79f780394ca3"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "da76ca59f6a57ee3102f8f9bd9cee742973efa8a"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "18c4a0095d5c1da6b817592e767bb23d29dd2f560ad74df75ff3961dbde25b79"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "5dd6271fd5b34579d8e66271bab75c89baca8b2ebeaa9966de391284bd08f2d720083c6e0e1edda106ecf8a04e9a32116de6873f0f88c19c049c0fe27e5d820b"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "f2791380e87fccb18519efd016c03be11206984f4765586d348e57e2f33756b21ed51a95fa09679e1473a5bf5d2d76e1"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "d621071a8bca1a32ac3603a816721fd93180a29e520d16a1c655686b169605f679818d6acc0000470ebe25265bdc9962"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "abb590301fbb93baf4f7afe227f230ee7992d9a56f7034ef2c37447ac8c52a9b"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "c025c503db0d09d0d435c1c96f0e7165f08375abc58eb4e4bf52b0b4689801019a7e966fa5372c03b0697083a992a0baceb7ab5d18659d262f5db4c9bca26584"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "MIT",
+            "url" : "https://opensource.org/licenses/MIT"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/org.slf4j/slf4j-api@1.7.25?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "http://www.slf4j.org"
+        },
+        {
+          "type" : "distribution",
+          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
+        },
+        {
+          "type" : "vcs",
+          "url" : "https://github.com/qos-ch/slf4j/slf4j-api"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.25?type=jar"
+    },
+    {
+      "publisher" : "The Apache Software Foundation",
+      "group" : "org.apache.felix",
+      "name" : "org.apache.felix.bundlerepository",
+      "version" : "1.6.6",
+      "description" : "Bundle repository service.",
+      "scope" : "required",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "46a70af6c63035d0ca9e65e926ce8301"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "83e4b7fda360d32a44cb2e17d159ddf40c334f96"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "6759ca9b14032623096706be4cf8a85cc1345be4c3c08d95b745b9ad672c7599"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "0ea9214b7c96356b791add7a85e6d85a1725c0cedf57b23781fcd2c76f7e4946d99ad7070665bf46f7d85a4e634683d73e57b9112040d056cdfec46d519504e6"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "5d98f47bc27c1857cf7e177b06b13b2cc75c0273a8220490537f2e86d1fbc5047809a7dbafcb30bd091ed332185f7ddb"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "bc8e615f431197ffcaf574c9ddfbbffea066629ae5d7d3cb5a11210bf3212bf551f598ac416f2c1fbc7a70134cded7df"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "08e577c6fd2348fae467988f7f94d6c9e6f43394731e939ad45ade3e5057eef4"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "7a6d34a280ab2d8ff2690c719e7801a0facf75d9fab8551b6a8a4496644e6c26699430cd89c9eccb509ed2f06cf6f8f3a1ad5334dabed340e464dc3a7e2518e7"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "Apache-2.0"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/org.apache.felix/org.apache.felix.bundlerepository@1.6.6?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "http://felix.apache.org/org.apache.felix.bundlerepository/"
+        },
+        {
+          "type" : "distribution",
+          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
+        },
+        {
+          "type" : "issue-tracker",
+          "url" : "http://issues.apache.org/jira/browse/FELIX"
+        },
+        {
+          "type" : "mailing-list",
+          "url" : "http://www.mail-archive.com/dev%40felix.apache.org/"
+        },
+        {
+          "type" : "vcs",
+          "url" : "http://svn.apache.org/repos/asf/felix/releases/org.apache.felix.bundlerepository-1.6.6"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/org.apache.felix/org.apache.felix.bundlerepository@1.6.6?type=jar"
+    },
+    {
+      "group" : "org.easymock",
+      "name" : "easymock",
+      "version" : "2.4",
+      "description" : "EasyMock provides an easy way to create Mock Objects for interfaces by generating them on the fly using Java's proxy mechanism",
+      "scope" : "required",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "8a53a7ae6e64acaf0747be3c3da394b0"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "a1703c7b69a0590e25dad65ff8d14d7e465b019d"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "7c48d8ba6e070409f65a45afc4904824b7702598ab0bec273cdd0ce6f4c2c64f"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "ef6453849ea6ad7f4db1107daebf894fbf3c0ae653d38b839c5ce4036439cd040f93513f1070022bb5290d40fc957d9e463405c8c6105c8cf715f538ee45731e"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "230c40d0384b16bc936d118b780c00a1de1f3cc74c525ccf4f0446f69cfd8eb217644411e1959d566fc1f743d7b55f5f"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "a21df0cce13fc8a08cc5614748ec1119be9f45e5540d61cfea0ca0a176672568c1a820483f557eadb4d7d1e83b7bd55e"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "d7ec5cf2d9f57d34aba8311e91782c8a091d7a5c988097c95b336c1ebf0755a0"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "acd284798ef89365ad0798bb5a94d4a163c631104ffe47c03c50bc971ab77ecb9716ce55996a8a941c2b5b0fd013a7c1f9ebed8b34fded393c2314c5fbd944c3"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "MIT",
+            "url" : "https://opensource.org/licenses/MIT"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/org.easymock/easymock@2.4?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "http://www.easymock.org"
+        },
+        {
+          "type" : "distribution",
+          "url" : "scpexe://shell.sf.net/home/groups/e/ea/easymock/htdocs/maven/repository"
+        },
+        {
+          "type" : "issue-tracker",
+          "url" : "http://sourceforge.net/tracker/?group_id=82958"
+        },
+        {
+          "type" : "mailing-list",
+          "url" : "http://tech.groups.yahoo.com/group/easymock/"
+        },
+        {
+          "type" : "vcs",
+          "url" : "http://easymock.cvs.sourceforge.net/easymock/"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/org.easymock/easymock@2.4?type=jar"
+    },
+    {
+      "publisher" : "The Apache Software Foundation",
+      "group" : "org.apache.felix",
+      "name" : "org.apache.felix.utils",
+      "version" : "1.6.0",
+      "description" : "Utility classes for OSGi.",
+      "scope" : "required",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "80a3a9f5566dbd75d40de2333c1433a7"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "02e894f57eb21c8eb788a2e7425dc187ee005f9f"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "03dc4ee75332284f4ba4b187c8c946c07f0c822b09e02f8821d85c8d8f46ccfa"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "fdf4bd9b932edda158f1cf98a344f6a4163ea70a3206d2d205828d575bfb4fdb5102d923981c8e33e7c4d75568df353e66c3ce73adb461dc0a34583e22cf585e"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "426e04ec63d8801158c63437f2e3822b71e7615324e6398fc97832d094e448f0fe44520fb5254e0e403631281e72f4e1"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "b1adf40353eb6bf3e3c8fa44cd0d56530d3ef3fba4a74f1c97160ef6a90d816ba74f49fc5a97e3b5749e60017df846d1"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "d91802227cdc7da9ec7385099d0be80a83508e3deca3b621e7c9c43e714b8569"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "747a03566682d1e1ffad1f19bbcd159e66fdb41a75244b4b656d882b73e1a1fc8a5daf93c1ebd1c2ba658a336abe50796b90593233eab485ab164dfa338ecfd7"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "Apache-2.0"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/org.apache.felix/org.apache.felix.utils@1.6.0?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "http://felix.apache.org/org.apache.felix.utils/"
+        },
+        {
+          "type" : "distribution",
+          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
+        },
+        {
+          "type" : "issue-tracker",
+          "url" : "http://issues.apache.org/jira/browse/FELIX"
+        },
+        {
+          "type" : "mailing-list",
+          "url" : "http://www.mail-archive.com/dev%40felix.apache.org/"
+        },
+        {
+          "type" : "vcs",
+          "url" : "scm:svn:https://svn.apache.org/repos/asf/felix/releases/org.apache.felix.utils-1.6.0"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/org.apache.felix/org.apache.felix.utils@1.6.0?type=jar"
+    },
+    {
+      "group" : "org.osgi",
+      "name" : "org.osgi.compendium",
+      "version" : "4.2.0",
+      "description" : "POM was created by Sonatype Nexus",
+      "scope" : "required",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "f36fc59a603aa068e0e6c3d18ac379f3"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "1e506145ec53132bce79ce8798d98026b598fd48"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "c1310c4186ccc17a0d7089d83f96dc940c4eccb98d5edfd58819393c29c31655"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "5e83fb9970dcaad908d9d11fc1f444f42ee43644db0c52f6a975dd9dbac6c8868014c6a4a2cd411bdb56600f1839dbba223c096df5a7ce74569923995d764e76"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "cfe944023d9273349fb47116d5eff6d489a1bc389d850ef8c6a82463b5934d80a96de91d6efb9987cc20642dae748cab"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "6f3efdf40a1ec3a6967e94072fddd5e6424703c7911f0736db2adeda01dd6b3c30ae62e4c15b658128f496242af9f398"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "ab7b3446e4f7fa1c755a4c3fc85d7777da7ea5aeb4251c82c21d6feeb75d2920"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "452e4c1249554209d60d15dcae352fe1e38359a1410c374ad9769b96b43d9eaa20dfd2c974c59ec72c005c7c386b0a1c78fd48344c4b5a6844d778b0131aaf06"
+        }
+      ],
+      "licenses" : [ ],
+      "purl" : "pkg:maven/org.osgi/org.osgi.compendium@4.2.0?type=jar",
+      "type" : "library",
+      "bom-ref" : "pkg:maven/org.osgi/org.osgi.compendium@4.2.0?type=jar"
+    },
+    {
+      "publisher" : "The Apache Software Foundation",
+      "group" : "org.apache.maven.reporting",
+      "name" : "maven-reporting-api",
+      "version" : "3.0",
+      "description" : "API to manage report generation.",
+      "scope" : "required",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "48cd00abc388c5156879b335e869adab"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "b2541dd07d08cd5eff9bd4554a2ad6a4198e2dfe"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "498949e5576b022559d1622e534c18e052f94dec883924b67e0a4e8676c07b17"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "439b65a7c9f2189b7e268ee1c91d1699f18d3594957bd0176d03e5796319f883647bcd37ff02385d3b34138289291837a7ebc8317d095ac86d9585c0c8fd228d"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "519935bc8e0fbeca6797779e3cbf14bd2e0d946194b02db156f49587fd21e423e264f6f2bfd6afa970e8defd2a71d2dd"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "8b73656ca60392b59c9c9e98c54e847f007bacf2ce26a401f4b6d48a50a46187181d34487ce49ac28de9d4a676bab5cc"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "4b1b3ce6325746d7b729b7e4d4d5bf5375b6bcc537d28163fbf5b84e4fb2e743"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "96d442a697d8561b91c76422a4c027c5e6d289f4458eeba1a67dc2572dcbe56f73f52b5fd8b645ce34f01d5718379dcc993c22b290a0b096c4e5ea50e28b5b5d"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "Apache-2.0"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/org.apache.maven.reporting/maven-reporting-api@3.0?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "http://maven.apache.org/shared/maven-reporting-api/"
+        },
+        {
+          "type" : "build-system",
+          "url" : "http://grid.sonatype.org/ci"
+        },
+        {
+          "type" : "distribution",
+          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
+        },
+        {
+          "type" : "issue-tracker",
+          "url" : "http://jira.codehaus.org/browse/MSHARED/component/14413"
+        },
+        {
+          "type" : "mailing-list",
+          "url" : "http://mail-archives.apache.org/mod_mbox/maven-users"
+        },
+        {
+          "type" : "vcs",
+          "url" : "http://svn.apache.org/viewvc/maven/shared/tags/maven-reporting-api-3.0"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/org.apache.maven.reporting/maven-reporting-api@3.0?type=jar"
+    },
+    {
+      "publisher" : "The Apache Software Foundation",
+      "group" : "org.apache.maven",
+      "name" : "maven-archiver",
+      "version" : "3.5.2",
+      "description" : "Provides utility methods for creating JARs and other archive files from a Maven project.",
+      "scope" : "required",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "880127ba320c005e0bd7db2f71390463"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "85d6e016fe2cee7f2fbc3294f68780c3bf59d443"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "8d0a075ba6662041287b6807a8ea14b66b5e1b7da7db96ea322849672c536ca2"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "a0c029170810106cfe46fbb53992399e765413617db54cac8d348a506a20ce9927c6100d49445eb4c39d513fea6f5a79bb530b27094015052b6f29f250903317"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "4b15a6e96293c5797c5cb480e3d4a8bd1a1dd3fc9d3b0963c5aaf0db522ad17173d28c769b6c428371365a445887b969"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "e420eada8d4c23f935e77c2ef40d4b27aeeb52ac9f2cb5572550c9c3f82c882d8b2b96a21a31536b4feae4fb87131cc9"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "cec26fc4768d8bac9e5824b26383a0cc7d098e2dacded659e58eebe428dfc22e"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "a444169fac55d2dc20e5b40d2d7ef6b52ead0722e74c747db37076699705e581c39f55a8149115ba0220fea9fb5faa6038435fb6bd80292586234dbb4f66c180"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "Apache-2.0"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/org.apache.maven/maven-archiver@3.5.2?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "https://maven.apache.org/shared/maven-archiver/"
+        },
+        {
+          "type" : "build-system",
+          "url" : "https://ci-builds.apache.org/job/Maven/job/maven-box/job/maven-archiver/"
+        },
+        {
+          "type" : "distribution",
+          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
+        },
+        {
+          "type" : "issue-tracker",
+          "url" : "https://issues.apache.org/jira/issues/?jql=project%3DMSHARED+AND+component%3Dmaven-archiver"
+        },
+        {
+          "type" : "mailing-list",
+          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
+        },
+        {
+          "type" : "vcs",
+          "url" : "https://github.com/apache/maven-archiver/tree/maven-archiver-3.5.2"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/org.apache.maven/maven-archiver@3.5.2?type=jar"
+    },
+    {
+      "publisher" : "The Apache Software Foundation",
+      "group" : "org.apache.maven.shared",
+      "name" : "maven-shared-utils",
+      "version" : "3.3.3",
+      "description" : "Shared utilities for use by Maven core and plugins",
+      "scope" : "required",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "d894ecaa696341ba8fcfbe65ac330c05"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "89bb03ff6e66394a9c952357784858ad692aa2e4"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "44a60c610f4e31524b03d81a698b1ecceba116320ea510babf859575b2ea7233"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "d85102ebe4a2a1d98ddb8231cd8e837eeea9cf5d9ce18d8fd8292347ebf4fa6ada9e97c1001a0af65884687a2a27fa12fa3593477de87b0372e4fba51ccbd9ba"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "e4a821ad9ae6902fb70a0e935da5c98e3c772c0c7ad408129b143ead73e73b06782cc1156756c452b717b7afbd0c3754"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "3d39ddd99481899cd9e82a7511b94ceb3a86e05492039b1668d9e287df244c62201f2ca86d7bb5bf2ae8ef8b0cf6e411"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "ab611761f9978d941a33f2ac209d3a6929757ab0827fec42372da0e1fb291314"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "ee05e95d3a45d86538232a4124bb273223e984f22e188a9bc5bfac882133cdad9bb109d216354b844549e16a19eada9aca5a13e12ca78fc5b57a93c090181ef2"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "Apache-2.0"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/org.apache.maven.shared/maven-shared-utils@3.3.3?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "https://maven.apache.org/shared/maven-shared-utils/"
+        },
+        {
+          "type" : "build-system",
+          "url" : "https://builds.apache.org/job/maven-box/job/maven-shared-utils/"
+        },
+        {
+          "type" : "distribution",
+          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
+        },
+        {
+          "type" : "issue-tracker",
+          "url" : "https://issues.apache.org/jira/issues/?jql=project%20%3D%20MSHARED%20AND%20component%20%3D%20maven-shared-utils"
+        },
+        {
+          "type" : "mailing-list",
+          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
+        },
+        {
+          "type" : "vcs",
+          "url" : "https://github.com/apache/maven-shared-utils/tree/maven-shared-utils-3.3.3"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/org.apache.maven.shared/maven-shared-utils@3.3.3?type=jar"
+    },
+    {
+      "publisher" : "The Apache Software Foundation",
+      "group" : "commons-io",
+      "name" : "commons-io",
+      "version" : "2.6",
+      "description" : "The Apache Commons IO library contains utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more.",
+      "scope" : "required",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "467c2a1f64319c99b5faf03fc78572af"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "815893df5f31da2ece4040fe0a12fd44b577afaf"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "f877d304660ac2a142f3865badfc971dec7ed73c747c7f8d5d2f5139ca736513"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "4de22e2a50711f756a5542474395d8619dca0a8be0407b722605005a1167f8c306bc5eef7f0b8252f5508c817c1ceb759171e4e18d4eb9697dfdd809ac39673f"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "1efcb8c663fff4cf7f2bc86e1a367b5f88819a6a2f80341fd5d41ad82eb0adda9f34a05c20115f461bee64d1ab487e3c"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "47f8067345da2e60493ced8f5852b5a9ee5fd1ee141c03177f132f97fa4beccd3c3f649276cbcb06a3fa2d0b39e20369"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "12e088d6b2f63a97e29d4cf1a81dbe311a0110e784677698a2eaa0b63785dc6e"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "82e8aa5fb7b8801b94c83f912dc863ff1b569a281081d33ca7e512a694202aebb60101b54bc9ba0a3b6a769221667a3d222b67102377d554603678798ca22d07"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "Apache-2.0"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/commons-io/commons-io@2.6?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "http://commons.apache.org/proper/commons-io/"
+        },
+        {
+          "type" : "build-system",
+          "url" : "https://builds.apache.org/"
+        },
+        {
+          "type" : "distribution",
+          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
+        },
+        {
+          "type" : "issue-tracker",
+          "url" : "http://issues.apache.org/jira/browse/IO"
+        },
+        {
+          "type" : "mailing-list",
+          "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/"
+        },
+        {
+          "type" : "vcs",
+          "url" : "https://git-wip-us.apache.org/repos/asf?p=commons-io.git"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/commons-io/commons-io@2.6?type=jar"
+    },
+    {
+      "publisher" : "The Apache Software Foundation",
+      "group" : "org.apache.commons",
+      "name" : "commons-compress",
+      "version" : "1.20",
+      "description" : "Apache Commons Compress software defines an API for working with compression and archive formats. These include: bzip2, gzip, pack200, lzma, xz, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4, Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj.",
+      "scope" : "required",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "3f7237fb56029591b5bdd2698c196220"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "b8df472b31e1f17c232d2ad78ceb1c84e00c641b"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "0aeb625c948c697ea7b205156e112363b59ed5e2551212cd4e460bdb72c7c06e"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "5d3ce7ae4518c0fe5094b512c5c4825cc213ebc388e1e1e7692475406d5876c893140e5bbaaecb1676262a6b73c7250d40b83653cd03600815693474f92f0fa7"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "934fcbb21929aadb952c0c48b6d1bb89b34b0279d48546896f81b26759edba0e1cbc45dc821f55d6239c34160b507ade"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "b59c53dc435ace657070665a1f41d64ca4ce61b21cbc4405879e559b56eb5cf1869debd4ab7b77f202af621142fad77f"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "f11ea223d764cb87944f5f5686dbdb3bd140153f6ad146f0ab8666c6157b3e00"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "0b1fa80da6f334a0a75ae4164581d2d69c4126f25b91d122d25cf3ee2d217fd399b04dde36f8e9de0faa20dc1804c38ca33b31aa28bf7bd6524332b3d0ac659d"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "Apache-2.0"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/org.apache.commons/commons-compress@1.20?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "https://commons.apache.org/proper/commons-compress/"
+        },
+        {
+          "type" : "build-system",
+          "url" : "https://builds.apache.org/"
+        },
+        {
+          "type" : "distribution",
+          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
+        },
+        {
+          "type" : "issue-tracker",
+          "url" : "https://issues.apache.org/jira/browse/COMPRESS"
+        },
+        {
+          "type" : "mailing-list",
+          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
+        },
+        {
+          "type" : "vcs",
+          "url" : "https://gitbox.apache.org/repos/asf?p=commons-compress.git"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/org.apache.commons/commons-compress@1.20?type=jar"
+    },
+    {
+      "publisher" : "Codehaus Plexus",
+      "group" : "org.codehaus.plexus",
+      "name" : "plexus-archiver",
+      "version" : "4.2.7",
+      "description" : "The Plexus project provides a full software stack for creating and executing software projects.",
+      "scope" : "required",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "0b7d267876216af63af4b52fc46d2519"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "ea77e871447d62c8759404e84989845d0168ddd6"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "5e0c49de4c56a25aa242e2de2b5fea1c0368826c2a8ab73764a0c91d3631633b"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "51bbba2c6609eaaf73b2db60e2a993d4e5a1f5ca6a53f16e70266682a36d5810789187145152db5eb34ebfccbac791eeb1988f3067fb1490a8fffce74fc449d4"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "ed2002e7d870bdd1cae66741012ea058c3721a4868859a674072210a4e9d605f9c980e3304cc1d8dacef397fce4cdecb"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "49edf199160096d81096f2ecc777e0be819cad3f9aed4be21c63941ea51415a8c4488a08ec15baeeb83e01cc623d16b5"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "61f1fb72c44e9ef283cc1e90126e233b37a172f893e1b5707ef5f1fc94be8e76"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "8ed23475b09590a8950e1be201030331446a4adb3dc3ad2a45f85f7fa43a2d98baa6f62a6423a9f723184331be6ec5b6fd7c5207387cfbeafbab9004a150d4be"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "Apache-2.0"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/org.codehaus.plexus/plexus-archiver@4.2.7?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "https://codehaus-plexus.github.io/plexus-archiver/"
+        },
+        {
+          "type" : "distribution",
+          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
+        },
+        {
+          "type" : "issue-tracker",
+          "url" : "https://github.com/codehaus-plexus/plexus-archiver/issues"
+        },
+        {
+          "type" : "mailing-list",
+          "url" : "http://archive.plexus.codehaus.org/user"
+        },
+        {
+          "type" : "vcs",
+          "url" : "http://github.com/codehaus-plexus/plexus-archiver/tree/plexus-archiver-4.2.7/"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/org.codehaus.plexus/plexus-archiver@4.2.7?type=jar"
+    },
+    {
+      "publisher" : "Codehaus Plexus",
+      "group" : "org.codehaus.plexus",
+      "name" : "plexus-io",
+      "version" : "3.2.0",
+      "description" : "The Plexus project provides a full software stack for creating and executing software projects.",
+      "scope" : "required",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "10e377cecbafa25cd80de1207be4b685"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "0f7d52906fe1b21b06fa046a98d6c15c4e595c5e"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "15cf8cbd9e014b7156482bbb48e515613158bdd9b4b908d21e6b900f7876f6ff"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "6edb562a75b779b25d65264ae26a1c04ecccf08d6a14708cec67a64e0141d321020983c1103a4f892107c838de2149db7039446641174a786f2153e680613492"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "20f574cd47ee2b41302317adc21935e4a06c179beb4653ca65c10c2e49b3071c60132c01226984a61e4aa7a59591a496"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "cd5afdb48f16ea48bf38691b2ad6c8e68e1fd44f818828cc902e40b7683d7ec13c483b18a0a83767e6dc5ec7ba249eea"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "5a922b50da424007987fa34abc116d6d39d9eba1d4a63af553297383f5766105"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "fd2f29e6a6987687a5c9b7aeb851e32c1ae88126d79f244fa881028beb3bc8673ad1ad9c57d79abbdebff4affd3ff6c57c3bfb8475010c829fefcc0c53155bb2"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "Apache-2.0"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/org.codehaus.plexus/plexus-io@3.2.0?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "http://codehaus-plexus.github.io/plexus-io/"
+        },
+        {
+          "type" : "distribution",
+          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
+        },
+        {
+          "type" : "issue-tracker",
+          "url" : "https://github.com/codehaus-plexus/plexus-io/issues"
+        },
+        {
+          "type" : "mailing-list",
+          "url" : "http://archive.plexus.codehaus.org/user"
+        },
+        {
+          "type" : "vcs",
+          "url" : "http://github.com/codehaus-plexus/plexus-io"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/org.codehaus.plexus/plexus-io@3.2.0?type=jar"
+    },
+    {
+      "group" : "org.iq80.snappy",
+      "name" : "snappy",
+      "version" : "0.4",
+      "description" : "Port of Snappy to Java",
+      "scope" : "required",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "f0792d1dbe7f90d8b34c7c19961e0073"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "a42b2d92a89efd35bb14738000dabcac6bd07a8d"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "46a0c87d504ce9d6063e1ff6e4d20738feb49d8abf85b5071a7d18df4f11bac9"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "dfd2559bf0388c6f1987d1393497a423203b2a72febbe648b3429e4d07b47a504797228e6e4e39a94c6800c5d3df8d3792863a3b841e6e8f65cfdcda91b6f0ab"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "7b5feeb0f1ee3fd3f5cd17c5ea31a75cdd060e7beaa1773474727711c308d2cf5b900b5717965afe8c14912e33c41538"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "d96d486687e858c1ebe1fadbd731d33e0233922eee703f1a4e36e68fa1dcc527cdcc4fae8fc91894ebeada2a1214606e"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "cf1b329b3f46891dc9e86fe9c6350a023dc0cb411739d2fd9d35490dfa8397aa"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "3a8584d15b63d4c371fed5b615f7a121fe2530d35d234b2caa499c53e7c558376ed22d289828276fbc77cd7c1311ba4d6c1af03edf08c5f051d5b674f01e6120"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "Apache-2.0",
+            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/org.iq80.snappy/snappy@0.4?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "http://github.com/dain/snappy"
+        },
+        {
+          "type" : "distribution",
+          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
+        },
+        {
+          "type" : "vcs",
+          "url" : "http://github.com/dain/snapy/tree/master"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/org.iq80.snappy/snappy@0.4?type=jar"
+    },
+    {
+      "group" : "org.tukaani",
+      "name" : "xz",
+      "version" : "1.9",
+      "description" : "XZ data compression",
+      "scope" : "required",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "57c2fbfeb55e307ccae52e5322082e02"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "1ea4bec1a921180164852c65006d928617bd2caf"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "211b306cfc44f8f96df3a0a3ddaf75ba8c5289eed77d60d72f889bb855f535e5"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "a4362db234d4e83683e90f5baf90c82107450cc4404acab96e3fab14b8a3d4588a19722171d32f27d18463682a6994cad9af0b1065c954e3a77ea7bdcf586bac"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "aa30349b094723369908369a18e2cb5beb5b7ca0b24b4d56c2f5725fae152220f6526466672b22bfec939e2e0622a01d"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "b3e1fee7784188df5e1931c9e8137ac0e20e63f66f93e7f938a448fc0b3adb4be5205c7a5f1835007e233fee2696fc2c"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "92eff603ed0aab557e1a45e17a74e80d8ec656b5f137197b23c429c903fa448f"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "b290f92958f8cd91705331d8411140c23957ab8b568fbe19a70f4f1dc97eddc13d3a200df28a02ab5911ce18f546c33f720878be0f727edac839a6e63ee66ece"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "name" : "Public Domain"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/org.tukaani/xz@1.9?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "https://tukaani.org/xz/java.html"
+        },
+        {
+          "type" : "vcs",
+          "url" : "https://git.tukaani.org/?p=xz-java.git"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/org.tukaani/xz@1.9?type=jar"
+    },
+    {
+      "publisher" : "The Apache Software Foundation",
+      "group" : "org.apache.maven.shared",
+      "name" : "maven-dependency-tree",
+      "version" : "3.0",
+      "description" : "A tree-based API for resolution of Maven project dependencies",
+      "scope" : "required",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "883c1d8377be21c7d8e50bab96d395fa"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "9f47f3033ba0f65298aaa54f81fac9e8aab785f4"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "53150e9b638a45958a8d0c6821502f4b932dfe305ce49732affc808d5c5ab2f0"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "ca7a7a1f62c731b20edfffe5dab120ffa5fb3a79d4d7f850985f38c922a7c48da348d8434d1fe2affe693e0814380cc059e0453ee87dda91a08db18b017e2678"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "e04e6ea27909a20cbf91cda590c7e683686382bd6bdffa4f65792433c6764c9258ff8f3686e535af6fe6c062d41e36d0"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "eb15d95487b21c1a6eaa391ab0aa7ec3cc7e39e772a011f39951d4e022123fb9d9fb8aef0f57709c63a447af5d01dbc8"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "3a90306b5ba694929bebfe2c1aff1a5a2041668155daa5e695235d927c1c237a"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "17270948112d0f99e46503409634fb0dc4218dab3abea4f51259ded6eb2b8e49091ae6ee8f651f6467351a883dbf3566aa79cb0dd00afa8bdc2450f253c146a9"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "Apache-2.0"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/org.apache.maven.shared/maven-dependency-tree@3.0?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "http://maven.apache.org/shared/maven-dependency-tree/"
+        },
+        {
+          "type" : "build-system",
+          "url" : "https://builds.apache.org/job/maven-shared/"
+        },
+        {
+          "type" : "distribution",
+          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
+        },
+        {
+          "type" : "issue-tracker",
+          "url" : "https://issues.apache.org/jira/browse/MSHARED/component/12326427"
+        },
+        {
+          "type" : "mailing-list",
+          "url" : "http://mail-archives.apache.org/mod_mbox/maven-users"
+        },
+        {
+          "type" : "vcs",
+          "url" : "http://svn.apache.org/viewvc/maven/shared/tags/maven-dependency-tree-3.0"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/org.apache.maven.shared/maven-dependency-tree@3.0?type=jar"
+    },
+    {
+      "publisher" : "Codehaus Plexus",
+      "group" : "org.codehaus.plexus",
+      "name" : "plexus-utils",
+      "version" : "3.3.0",
+      "description" : "A collection of various utility classes to ease working with strings, files, command lines, XML and more.",
+      "scope" : "required",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "3ae76ff0195ada460d495efe1fb50d17"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "cf43b5391de623b36fe066a21127baef82c64022"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "76d174792540e2775af94d03d10fb2d3c776e2cd0ac0ebf427d3e570072bb9ce"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "a93038005cd9793476c913beaea7c8c170d1853dddf39bf6794ad6446165eaf538c2c3c2314baa9d919d6b0bda78e5ea3cd987d5dbacf8e3b98e315bcfa7db64"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "27742e2c82c13ffe947c6ce8750b1989491e8a5d7554cc3fa240a952c9d3a22fe006516041c66650e71972275c06565e"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "16af5ee2b4f8710fa14bbd977ef3630466c51c4ed6bf9886ac0ea9c74bd23dedbbce60beae5217fab686777108c2e54d"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "364bfb131dab58736c995ac4484d9eab53b1e62129a99ed55e9c12ed39079dc6"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "4687c5ca8bb73d6880132d7d886733d0a5ce7a873c7b5b68d9d46066ee7e1f6c11f0510a70f313ca2563550bfcf6e81cf37a0c4ceef247bab55d6aadc49fae59"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "Apache-2.0"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/org.codehaus.plexus/plexus-utils@3.3.0?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "http://codehaus-plexus.github.io/plexus-utils/"
+        },
+        {
+          "type" : "distribution",
+          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
+        },
+        {
+          "type" : "issue-tracker",
+          "url" : "http://github.com/codehaus-plexus/plexus-utils/issues"
+        },
+        {
+          "type" : "mailing-list",
+          "url" : "http://archive.plexus.codehaus.org/user"
+        },
+        {
+          "type" : "vcs",
+          "url" : "http://github.com/codehaus-plexus/plexus-utils"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/org.codehaus.plexus/plexus-utils@3.3.0?type=jar"
+    },
+    {
+      "group" : "org.sonatype.plexus",
+      "name" : "plexus-build-api",
+      "version" : "0.0.7",
+      "scope" : "required",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "49f0f8c6bdf2687e358870a4fc1559c6"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "e6ba5cd4bfd8de00235af936e7f63eb24ed436e6"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "934171640fbd3d2495c50b79b0d9adb11e2c83e65bad157df8fe34bcac0ff798"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "e073d367ce5edaf6dfcbf6d1ec9f544082d4536aec8a84b060d24625c0d8ff1facf90529843f9bf4383ef43aa5cd3d0e143f473dffa6da7fd910f1d2e3872ec7"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "2e6c177e34d0bb3fd05ea8f635f01a6b01afd28113f214392cae8f6bdc73715ee1dbfa4d1525f42321f8a8dd05db9191"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "fe41dea9191319334edb863c438ffe78b19c5f2669a653058d7d4fe5527d7e66a7f382f806ff12fcb09c3f468542e870"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "530e25ed3a34ee1d1aacda1a935608e70ef6494bb931fee33eb7366df2d85642"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "9f1b45445d930a9833436b57baeda25522f0151be0b2f2a27ef1c1dcc8f6ccc5f1168fe40ea91f1e3ac1d98308b3dd1da3c7b49a90cb75eb6a924534545435a5"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "Apache-2.0"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/org.sonatype.plexus/plexus-build-api@0.0.7?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "http://forge.sonatype.com/spice-parent/plexus-build-api/"
+        },
+        {
+          "type" : "build-system",
+          "url" : "https://grid.sonatype.org/ci/view/Spice/"
+        },
+        {
+          "type" : "distribution",
+          "url" : "http://repository.sonatype.org:8081/service/local/staging/deploy/maven2"
+        },
+        {
+          "type" : "issue-tracker",
+          "url" : "https://issues.sonatype.org/browse/SPICE"
+        },
+        {
+          "type" : "vcs",
+          "url" : "http://svn.sonatype.org/spice/tags/plexus-build-api-0.0.7"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/org.sonatype.plexus/plexus-build-api@0.0.7?type=jar"
+    },
+    {
+      "publisher" : "The Apache Software Foundation",
+      "group" : "org.apache.maven.doxia",
+      "name" : "doxia-sink-api",
+      "version" : "1.0",
+      "description" : "Doxia Sink API.",
+      "scope" : "required",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "04067d1b5c9ac4447fd376632b13fba0"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "13f502f2fb1d4e2db6f19352c85b83277084bb98"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "1cd68e9b4cf427a2b6b9a943a9bef6da879d25702334ea5addb0d153bb8f8911"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "12f5b3e0754daff8a741890e5a25c09e7c7875568ba3976dba9ae278452fbb052478d6c330fa0027dc0d26d2fe8f8e844721e713ff69a638c689546a4086a1bd"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "947d186c77e25487aed0bd2a5961fd2ffba21efb6ea667e0bfe7043aed860e559c8a47aab0f03a0de9e910cc0b7145b8"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "949a71eee2eb1043453a7aba6b727a6654f6c003fcc4b3c202bcffcac48f1ef2de3af1c90601ef77892ecaef3d2a21dd"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "fdf34b22419ee3c40db72d2f0709e3ef08ea1d2046fa528de6979a6f6407cb07"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "aca622811cfb896b3335760876e0cc6a6661f12aba15c80ba190d6102046d27c7d3ef687872223d0fe0d422c06d039b69141cc6b9fb45db36d1ecb37340e4f30"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "Apache-2.0"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/org.apache.maven.doxia/doxia-sink-api@1.0?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "http://maven.apache.org/doxia/doxia/doxia-sink-api"
+        },
+        {
+          "type" : "build-system",
+          "url" : "http://ci.sonatype.org"
+        },
+        {
+          "type" : "distribution",
+          "url" : "scp://people.apache.org/www/people.apache.org/builds/maven/1.0/staging-repo"
+        },
+        {
+          "type" : "issue-tracker",
+          "url" : "http://jira.codehaus.org/browse/DOXIA"
+        },
+        {
+          "type" : "mailing-list",
+          "url" : "http://mail-archives.apache.org/mod_mbox/maven-doxia-dev/"
+        },
+        {
+          "type" : "vcs",
+          "url" : "https://svn.apache.org/viewvc/maven/doxia/doxia/tags/doxia-1.0/doxia-sink-api"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/org.apache.maven.doxia/doxia-sink-api@1.0?type=jar"
+    },
+    {
+      "publisher" : "The Apache Software Foundation",
+      "group" : "org.apache.maven.doxia",
+      "name" : "doxia-site-renderer",
+      "version" : "1.0",
+      "description" : "The Site Renderer handles the rendering of sites.",
+      "scope" : "required",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "81beb123839dd31676053b679a4cbf1e"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "c70e13ad9cb90f7cf88ceeb10eba2a85d0f9045f"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "590288e8f5bd89ec0500a299879f004c200f9296b21cfaebb770c387429cabde"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "f77f1531689d3a8211f5063648b20e4911e9e48169b72ce058bb909795bc7df1735f2c10c994331bd281281095269f46c32e3a8086c1147e369a2f1f98c47967"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "8f6d1bcd394c5f87204c922aff033595e4a5980d13bbaf3147a026ec76d4d1332e98c582517b0feb568a50cced6b61a6"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "339e7616808cd547312387430d19ccf4998882cf8f776f1439efd421d35ee7d6ce66ad004b3ad60ef11e4599ae4d59b7"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "b5a578307774b676c7246ba6261b263e2168bd126fc0ef2f0f90945539fc46f9"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "c152f65b960f6d5f9f683364624230ddc413d6bffb53e29c1dce7cf641e3524deab99cb80b5301eaf67398ab63e7161c910a7149f1006264ab982f5ad25eba64"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "Apache-2.0"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/org.apache.maven.doxia/doxia-site-renderer@1.0?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "http://maven.apache.org/doxia/doxia-sitetools/doxia-site-renderer"
+        },
+        {
+          "type" : "build-system",
+          "url" : "http://grid.sonatype.org/ci"
+        },
+        {
+          "type" : "distribution",
+          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
+        },
+        {
+          "type" : "issue-tracker",
+          "url" : "http://jira.codehaus.org/browse/DOXIASITETOOLS"
+        },
+        {
+          "type" : "mailing-list",
+          "url" : "http://mail-archives.apache.org/mod_mbox/maven-doxia-dev/"
+        },
+        {
+          "type" : "vcs",
+          "url" : "https://svn.apache.org/viewvc/maven/doxia/doxia-sitetools/tags/doxia-sitetools-1.0/doxia-site-renderer"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/org.apache.maven.doxia/doxia-site-renderer@1.0?type=jar"
+    },
+    {
+      "publisher" : "The Apache Software Foundation",
+      "group" : "org.apache.maven.doxia",
+      "name" : "doxia-core",
+      "version" : "1.0",
+      "description" : "Doxia core classes and interfaces.",
+      "scope" : "required",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "466c0a59ea402cfcc519b7ccc7039745"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "e94c3303b09923f8cd7916a59702ef5972033f5d"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "26a90faef53a1346795d9e3a3ab24111e149b59e80408263747c9441ed966154"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "5c9749dc137a13852453e3f3311e9ad9607c56e2d2b21843ab3aad3b607effd924114a37d12169965ad805ffa3bfc42a72eaa1cf68507dd13e1890c12ef84ad2"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "a39d6dadca23dfe9af220af330fb7799da34ed6ae2b5bcec35a84ce7312c157ff596d47d994e3b75af007e7eeba93944"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "46fcf4f8911ba3ef2a09314c6cffc59848c09d4bd74487567436acdb3eb1f553c9b0fda41f49ec5d08a5fb2402bb5be6"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "f59c5235fb41f2e6e8e5d5690b2ea284c408efdf38156c261050151927519e7e"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "3a67468f235e045ef0feae63ec5445630457933301a74b73176317be5cbf1c982f6b3921a14d46dfe4cec98ad291c3aa4aa3bb563f818fe1d1c914b13a492f0d"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "Apache-2.0"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/org.apache.maven.doxia/doxia-core@1.0?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "http://maven.apache.org/doxia/doxia/doxia-core"
+        },
+        {
+          "type" : "build-system",
+          "url" : "http://ci.sonatype.org"
+        },
+        {
+          "type" : "distribution",
+          "url" : "scp://people.apache.org/www/people.apache.org/builds/maven/1.0/staging-repo"
+        },
+        {
+          "type" : "issue-tracker",
+          "url" : "http://jira.codehaus.org/browse/DOXIA"
+        },
+        {
+          "type" : "mailing-list",
+          "url" : "http://mail-archives.apache.org/mod_mbox/maven-doxia-dev/"
+        },
+        {
+          "type" : "vcs",
+          "url" : "https://svn.apache.org/viewvc/maven/doxia/doxia/tags/doxia-1.0/doxia-core"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/org.apache.maven.doxia/doxia-core@1.0?type=jar"
+    },
+    {
+      "publisher" : "Codehaus",
+      "group" : "org.codehaus.plexus",
+      "name" : "plexus-i18n",
+      "version" : "1.0-beta-7",
+      "scope" : "required",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "65d4f673bd0c49dbc67e020e96b00753"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "3690f10a668b3c7ac2ef563f14cfb6b2ba30ee57"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "fff07392dc6b29ef90c435ab004671a715f0aa36653e53b44c358eb842ce67d9"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "3d0498f18e5c936019974eb512907d7a502fde3b3804c5e37f39f1deeb517702a5460463cfca84c8f3b7dc9fe9c96adb989a42de46b7cf4b7056e12e89cb7afc"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "12c560bf8b2727602af2e305c011000003df478a44318f6c7ba36fc87c14e84f9eaa2e2a309b6a4f5895e4fa25f16b56"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "6dbc41d3c4763bb8a9fc595f7d4deca931da822badb099f9b10e865269a25cefd26cfea821ec44654af95f6fbb76d282"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "8386d07b88e401974df362ac08c84180af8c3935e1d13f75fe0b0b0fb8d8b737"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "022527689d9485f4e6787b13e7091b03a03444b5889865442c8f2663a07e7147afdbba820378ace151a69e4a2c4f88b0766e527a10456114a9cbb359ac9c8736"
+        }
+      ],
+      "licenses" : [ ],
+      "purl" : "pkg:maven/org.codehaus.plexus/plexus-i18n@1.0-beta-7?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "website",
+          "url" : "http://plexus.codehaus.org/plexus-components/plexus-i18n"
+        },
+        {
+          "type" : "distribution",
+          "url" : "dav:https://dav.codehaus.org/repository/plexus"
+        },
+        {
+          "type" : "issue-tracker",
+          "url" : "http://jira.codehaus.org/browse/PLX"
+        },
+        {
+          "type" : "mailing-list",
+          "url" : "http://archive.plexus.codehaus.org/user"
+        },
+        {
+          "type" : "vcs",
+          "url" : "http://fisheye.codehaus.org/browse/plexus/plexus-components/tags/plexus-i18n-1.0-beta-7"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/org.codehaus.plexus/plexus-i18n@1.0-beta-7?type=jar"
+    },
+    {
+      "publisher" : "Codehaus",
+      "group" : "org.codehaus.plexus",
+      "name" : "plexus-container-default",
+      "version" : "1.0-alpha-30",
+      "scope" : "required",
+      "hashes" : [
+        {
+          "alg" : "MD5",
+          "content" : "af35f8c80bbf8deaaa382bd530c40939"
+        },
+        {
+          "alg" : "SHA-1",
+          "content" : "669d4ba8e898e37987eb5e30b121ed1d62c5b7b8"
+        },
+        {
+          "alg" : "SHA-256",
+          "content" : "ef5fa49aeb90df9cac923435577dc9c2701a18ba29191b6e407e7870795eea35"
+        },
+        {
+          "alg" : "SHA-512",
+          "content" : "1b0e11b59296048081d6cc44fa4f2800068b54c06ba411513115826ac9209ab3538b262c5f543d0a0410e3ed54ee3d99a0b52611fbc3875816b63f7bf2e2e6ad"
+        },
+        {
+          "alg" : "SHA-384",
+          "content" : "58c0afcf93afa3c385203be846c0a1515bdfc510b2f83e509e4575fbf29e3bf0577666e3c6b149cc06454d1a30a4e65a"
+        },
+        {
+          "alg" : "SHA3-384",
+          "content" : "7d745262fc27e480fca22a6b050e6d896d86c68acf64633eaf5ac2299aab5a65d26a1ed3493e847583f18fe09dfc08a6"
+        },
+        {
+          "alg" : "SHA3-256",
+          "content" : "22609f9da58123d3559a9322c9dd93fbc54934eee1d6ed2cae65bd2e4f408535"
+        },
+        {
+          "alg" : "SHA3-512",
+          "content" : "59b2416a997d28ce608562f403411a9ec286cc3781d40f36b60f679cfb12854b923b4e791847dd5981d4982b1545b381bbb4c596b6586bf196293d42d9c70836"
+        }
+      ],
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "Apache-2.0"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/org.codehaus.plexus/plexus-container-default@1.0-alpha-30?type=jar",
+      "externalReferences" : [
+        {
+          "type" : "distribution",
+          "url" : "dav:https://dav.codehaus.org/repository/plexus"
+        },

[... 251258 lines stripped ...]