You are viewing a plain text version of this content. The canonical link for it is here.
Posted to notifications@ant.apache.org by bo...@apache.org on 2026/08/07 14:28:56 UTC
(ant-antlibs-cyclonedx) branch support-ivy-as-component-source updated: SBOMs created manually and using Ivy
This is an automated email from the ASF dual-hosted git repository.
asf-gitbox-commits pushed a commit to branch support-ivy-as-component-source
in repository https://gitbox.apache.org/repos/asf/ant-antlibs-cyclonedx.git
The following commit(s) were added to refs/heads/support-ivy-as-component-source by this push:
new b23ee60 SBOMs created manually and using Ivy
b23ee60 is described below
commit b23ee60f77d84f9a3a6bc4d58fe0211d58630a28
Author: Stefan Bodewig <bo...@apache.org>
AuthorDate: Fri Aug 7 16:28:27 2026 +0200
SBOMs created manually and using Ivy
---
example/ant-cyclonedx-0.2alpha.cdx.diff | 1136 +++++++++++++++++
example/ant-cyclonedx-0.2alpha.cdx.json | 1743 +++++++++++++++++++++++++++
example/ant-cyclonedx-0.2alpha.ivy.cdx.json | 1549 ++++++++++++++++++++++++
3 files changed, 4428 insertions(+)
diff --git a/example/ant-cyclonedx-0.2alpha.cdx.diff b/example/ant-cyclonedx-0.2alpha.cdx.diff
new file mode 100644
index 0000000..2158107
--- /dev/null
+++ b/example/ant-cyclonedx-0.2alpha.cdx.diff
@@ -0,0 +1,1136 @@
+--- ant-cyclonedx-0.2alpha.cdx.json 2026-08-07 16:26:20.482069699 +0200
++++ ant-cyclonedx-0.2alpha.ivy.cdx.json 2026-08-07 16:26:45.477044844 +0200
+@@ -1,10 +1,10 @@
+ {
+ "bomFormat" : "CycloneDX",
+ "specVersion" : "1.7",
+- "serialNumber" : "urn:uuid:46b215d3-5bd4-4619-92bf-4dd0883c885d",
++ "serialNumber" : "urn:uuid:2ef84f46-64af-4fb9-b3da-70f4fcb7acd3",
+ "version" : 1,
+ "metadata" : {
+- "timestamp" : "2026-08-07T14:14:06Z",
++ "timestamp" : "2026-08-07T14:13:23Z",
+ "lifecycles" : [
+ {
+ "phase" : "build"
+@@ -253,36 +253,64 @@
+ "components" : [
+ {
+ "type" : "library",
+- "bom-ref" : "pkg:maven/ch.randelshofer/fastdoubleparser@2.0.1?type=jar",
+- "group" : "ch.randelshofer",
+- "name" : "fastdoubleparser",
+- "version" : "2.0.1",
+- "description" : "A Java port of Daniel Lemire's fast_float project.",
+- "scope" : "required",
++ "bom-ref" : "pkg:maven/com.ethlo.time/itu@1.14.0?type=jar",
++ "group" : "com.ethlo.time",
++ "name" : "itu",
++ "version" : "1.14.0",
++ "description" : "Extremely fast date-time parser and formatter - RFC 3339 (ISO 8601 profile) and W3C format",
++ "hashes" : [
++ {
++ "alg" : "MD5",
++ "content" : "e537d0a2bc8066726f7e4654c253cf84"
++ },
++ {
++ "alg" : "SHA-1",
++ "content" : "c0f9f9d4f4404787e992ab3af5ae95f2fad79e47"
++ },
++ {
++ "alg" : "SHA-256",
++ "content" : "5cf40ab0cc77828ab2b875b1f3ecd71c8295d7721933476abc2e08fddcea164a"
++ },
++ {
++ "alg" : "SHA-512",
++ "content" : "aa69a6af3a7123eb41425bbaf6834e16dc3323172709e2338b8a21b970fd21333d996515f42da4aa0225251e30542ad7d9c8332bdf7d62ed96b42fadc8a1520d"
++ },
++ {
++ "alg" : "SHA3-256",
++ "content" : "f18d275dd2a0038a82432e06bb9f396151310136e3a316a869ef54d7fae834c5"
++ },
++ {
++ "alg" : "SHA3-512",
++ "content" : "8a51b3c6144eb2e363f8804da316d9e3dc246be07af4c0bb55e9540c2a0deb5eb9beb825120d3d203e3a561fd8a605ad64f3af5d233725e1b9c7e06232deaea9"
++ },
++ {
++ "alg" : "SHA-384",
++ "content" : "8d201334c39b68d13d66fc9df2440fa848b055a9b901e1c630ff66a47e70c8816484d106ae18c642d4257034f33e55f2"
++ },
++ {
++ "alg" : "SHA3-384",
++ "content" : "033715e1422cb3f22c1073bc7b058fd16d1436c6314f49f13480d81c86b656cb77a4d852cbba35542bc8f2ce49244ba6"
++ }
++ ],
+ "licenses" : [
+ {
+ "license" : {
+- "id" : "MIT",
+- "url" : "https://opensource.org/license/mit/"
++ "name" : "Apache License, Version 2.0",
++ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+- "purl" : "pkg:maven/ch.randelshofer/fastdoubleparser@2.0.1?type=jar",
++ "purl" : "pkg:maven/com.ethlo.time/itu@1.14.0?type=jar",
+ "externalReferences" : [
+ {
+- "type" : "vcs",
+- "url" : "https://github.com/wrandelshofer/FastDoubleParser/tree/master"
+- },
+- {
+ "type" : "website",
+- "url" : "https://github.com/wrandelshofer/FastDoubleParser"
++ "url" : "https://github.com/ethlo/itu"
+ }
+ ]
+ },
+ {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.22?type=jar",
+- "publisher" : "FasterXML",
+ "group" : "com.fasterxml.jackson.core",
+ "name" : "jackson-annotations",
+ "version" : "2.22",
+@@ -324,38 +352,22 @@
+ "licenses" : [
+ {
+ "license" : {
+- "id" : "Apache-2.0"
++ "name" : "The Apache Software License, Version 2.0",
++ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.22?type=jar",
+ "externalReferences" : [
+ {
+- "type" : "vcs",
+- "url" : "https://github.com/FasterXML/jackson-annotations"
+- },
+- {
+- "type" : "issue-tracker",
+- "url" : "https://github.com/FasterXML/jackson-annotations/issues"
+- },
+- {
+ "type" : "website",
+ "url" : "https://github.com/FasterXML/jackson"
+- },
+- {
+- "type" : "bom",
+- "url" : "https://repo1.maven.org/maven2/com/fasterxml/jackson/core/jackson-annotations/2.22/jackson-annotations-2.22-sbom-cyclonedx.json"
+- },
+- {
+- "type" : "distribution-intake",
+- "url" : "https://central.sonatype.com/api/v1/publisher"
+ }
+ ]
+ },
+ {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.22.1?type=jar",
+- "publisher" : "FasterXML",
+ "group" : "com.fasterxml.jackson.core",
+ "name" : "jackson-core",
+ "version" : "2.22.1",
+@@ -397,38 +409,22 @@
+ "licenses" : [
+ {
+ "license" : {
+- "id" : "Apache-2.0"
++ "name" : "The Apache Software License, Version 2.0",
++ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.22.1?type=jar",
+ "externalReferences" : [
+ {
+- "type" : "vcs",
+- "url" : "https://github.com/FasterXML/jackson-core"
+- },
+- {
+- "type" : "issue-tracker",
+- "url" : "https://github.com/FasterXML/jackson-core/issues"
+- },
+- {
+ "type" : "website",
+ "url" : "https://github.com/FasterXML/jackson-core"
+- },
+- {
+- "type" : "bom",
+- "url" : "https://repo1.maven.org/maven2/com/fasterxml/jackson/core/jackson-core/2.22.1/jackson-core-2.22.1-sbom-cyclonedx.json"
+- },
+- {
+- "type" : "distribution-intake",
+- "url" : "https://central.sonatype.com/api/v1/publisher"
+ }
+ ]
+ },
+ {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.22.1?type=jar",
+- "publisher" : "FasterXML",
+ "group" : "com.fasterxml.jackson.core",
+ "name" : "jackson-databind",
+ "version" : "2.22.1",
+@@ -470,38 +466,22 @@
+ "licenses" : [
+ {
+ "license" : {
+- "id" : "Apache-2.0"
++ "name" : "The Apache Software License, Version 2.0",
++ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.22.1?type=jar",
+ "externalReferences" : [
+ {
+- "type" : "vcs",
+- "url" : "https://github.com/FasterXML/jackson-databind"
+- },
+- {
+- "type" : "issue-tracker",
+- "url" : "https://github.com/FasterXML/jackson-databind/issues"
+- },
+- {
+ "type" : "website",
+ "url" : "https://github.com/FasterXML/jackson"
+- },
+- {
+- "type" : "bom",
+- "url" : "https://repo1.maven.org/maven2/com/fasterxml/jackson/core/jackson-databind/2.22.1/jackson-databind-2.22.1-sbom-cyclonedx.json"
+- },
+- {
+- "type" : "distribution-intake",
+- "url" : "https://central.sonatype.com/api/v1/publisher"
+ }
+ ]
+ },
+ {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.22.1?type=jar",
+- "publisher" : "FasterXML",
+ "group" : "com.fasterxml.jackson.dataformat",
+ "name" : "jackson-dataformat-xml",
+ "version" : "2.22.1",
+@@ -543,31 +523,73 @@
+ "licenses" : [
+ {
+ "license" : {
+- "id" : "Apache-2.0"
++ "name" : "The Apache Software License, Version 2.0",
++ "url" : "http://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.22.1?type=jar",
+ "externalReferences" : [
+ {
+- "type" : "vcs",
+- "url" : "http://github.com/FasterXML/jackson-dataformat-xml"
++ "type" : "website",
++ "url" : "https://github.com/FasterXML/jackson-dataformat-xml"
++ }
++ ]
++ },
++ {
++ "type" : "library",
++ "bom-ref" : "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.22.1?type=jar",
++ "group" : "com.fasterxml.jackson.dataformat",
++ "name" : "jackson-dataformat-yaml",
++ "version" : "2.22.1",
++ "description" : "Support for reading and writing YAML-encoded data via Jackson abstractions.",
++ "hashes" : [
++ {
++ "alg" : "MD5",
++ "content" : "8348dc064a58fb2ae67371764b634812"
+ },
+ {
+- "type" : "issue-tracker",
+- "url" : "https://github.com/FasterXML/jackson-dataformat-xml/issues"
++ "alg" : "SHA-1",
++ "content" : "af5fde2414e4a8d2617e7890f7068c26b5b66a33"
+ },
+ {
+- "type" : "website",
+- "url" : "https://github.com/FasterXML/jackson-dataformat-xml"
++ "alg" : "SHA-256",
++ "content" : "cc3a0e540791a9a1cbcd7584767b84572ffda0b72823856558f47dea69ae8ed1"
+ },
+ {
+- "type" : "bom",
+- "url" : "https://repo1.maven.org/maven2/com/fasterxml/jackson/dataformat/jackson-dataformat-xml/2.22.1/jackson-dataformat-xml-2.22.1-sbom-cyclonedx.json"
++ "alg" : "SHA-512",
++ "content" : "12398c493aa3b54716813a6297b72104fa52ab324bae54512e41a1285ac756fcbb800084c088f8e9d3aceae2e698ca164bc547421d5fe2fb62ed2dadf1d3d000"
+ },
+ {
+- "type" : "distribution-intake",
+- "url" : "https://central.sonatype.com/api/v1/publisher"
++ "alg" : "SHA3-256",
++ "content" : "2d33856e0e0aa27571950d57227a66ab78f22c5cecf7c07afc3ad4dbe3b4b4ae"
++ },
++ {
++ "alg" : "SHA3-512",
++ "content" : "47bdf965089a1949286216aed3b286d8990a3b9169dacb15f0a6f36df07ee397d0ecbcc1294228479068cdbff4b1d8a11718ad5efa744952c34eb092e62cf644"
++ },
++ {
++ "alg" : "SHA-384",
++ "content" : "2f20d92e2fc1932406055a055e0602c9d0a96d7c19b75aeb7dca7c19b30e65bd126677a9bb855ef493be8f4be1feaf62"
++ },
++ {
++ "alg" : "SHA3-384",
++ "content" : "e0bc342c2bcd8d91b674657a28e0a762d68232729d7a53d0c04ba63807a1f6bc458bfb64c422408f0cb701ce753ff7cd"
++ }
++ ],
++ "licenses" : [
++ {
++ "license" : {
++ "name" : "The Apache Software License, Version 2.0",
++ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
++ }
++ }
++ ],
++ "purl" : "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.22.1?type=jar",
++ "externalReferences" : [
++ {
++ "type" : "website",
++ "url" : "https://github.com/FasterXML/jackson-dataformats-text"
+ }
+ ]
+ },
+@@ -615,12 +637,18 @@
+ "licenses" : [
+ {
+ "license" : {
+- "id" : "Apache-2.0",
+- "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
++ "name" : "The Apache License, Version 2.0",
++ "url" : "http://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+- "purl" : "pkg:maven/com.fasterxml.woodstox/woodstox-core@7.2.0?type=jar"
++ "purl" : "pkg:maven/com.fasterxml.woodstox/woodstox-core@7.2.0?type=jar",
++ "externalReferences" : [
++ {
++ "type" : "website",
++ "url" : "https://github.com/FasterXML/woodstox"
++ }
++ ]
+ },
+ {
+ "type" : "library",
+@@ -628,7 +656,7 @@
+ "group" : "com.github.package-url",
+ "name" : "packageurl-java",
+ "version" : "1.5.0",
+- "description" : "The official Java implementation of the PackageURL specification. PackageURL (purl) is a minimal specification for describing a package via a \"mostly universal\" URL",
++ "description" : "The official Java implementation of the PackageURL specification. PackageURL (purl) is a minimal specification for describing a package via a \"mostly universal\" URL.",
+ "hashes" : [
+ {
+ "alg" : "MD5",
+@@ -666,102 +694,16 @@
+ "licenses" : [
+ {
+ "license" : {
+- "id" : "MIT",
++ "name" : "MIT",
+ "url" : "https://opensource.org/licenses/MIT"
+ }
+ }
+ ],
+- "purl" : "pkg:maven/com.github.package-url/packageurl-java@1.5.0?type=jar"
+- },
+- {
+- "type" : "library",
+- "bom-ref" : "pkg:maven/com.jcraft/jsch.agentproxy.connector-factory@0.0.9?type=jar",
+- "group" : "com.jcraft",
+- "name" : "jsch.agentproxy.connector-factory",
+- "version" : "0.0.9",
+- "description" : "a connector factory",
+- "licenses" : [
+- {
+- "license" : {
+- "name" : "Revised BSD",
+- "url" : "http://www.jcraft.com/jsch/LICENSE.txt"
+- }
+- }
+- ],
+- "purl" : "pkg:maven/com.jcraft/jsch.agentproxy.connector-factory@0.0.9?type=jar",
+- "externalReferences" : [
+- {
+- "type" : "website",
+- "url" : "http://www.jcraft.com/"
+- }
+- ]
+- },
+- {
+- "type" : "library",
+- "bom-ref" : "pkg:maven/com.jcraft/jsch.agentproxy.jsch@0.0.9?type=jar",
+- "group" : "com.jcraft",
+- "name" : "jsch.agentproxy.jsch",
+- "version" : "0.0.9",
+- "description" : "a library to use jsch-agent-proxy with JSch",
+- "licenses" : [
+- {
+- "license" : {
+- "name" : "Revised BSD",
+- "url" : "http://www.jcraft.com/jsch/LICENSE.txt"
+- }
+- }
+- ],
+- "purl" : "pkg:maven/com.jcraft/jsch.agentproxy.jsch@0.0.9?type=jar",
+- "externalReferences" : [
+- {
+- "type" : "website",
+- "url" : "http://www.jcraft.com/"
+- }
+- ]
+- },
+- {
+- "type" : "library",
+- "bom-ref" : "pkg:maven/com.jcraft/jsch.agentproxy@0.0.9?type=jar",
+- "group" : "com.jcraft",
+- "name" : "jsch.agentproxy",
+- "version" : "0.0.9",
+- "description" : "a proxy to ssh-agent and Pageant in Java",
+- "licenses" : [
+- {
+- "license" : {
+- "name" : "Revised BSD",
+- "url" : "http://www.jcraft.com/jsch/LICENSE.txt"
+- }
+- }
+- ],
+- "purl" : "pkg:maven/com.jcraft/jsch.agentproxy@0.0.9?type=jar",
++ "purl" : "pkg:maven/com.github.package-url/packageurl-java@1.5.0?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "website",
+- "url" : "http://www.jcraft.com/"
+- }
+- ]
+- },
+- {
+- "type" : "library",
+- "bom-ref" : "pkg:maven/com.jcraft/jsch@0.1.55?type=jar",
+- "group" : "com.jcraft",
+- "name" : "jsch",
+- "version" : "0.1.55",
+- "description" : "JSch is a pure Java implementation of SSH2",
+- "licenses" : [
+- {
+- "license" : {
+- "name" : "Revised BSD",
+- "url" : "http://www.jcraft.com/jsch/LICENSE.txt"
+- }
+- }
+- ],
+- "purl" : "pkg:maven/com.jcraft/jsch@0.1.55?type=jar",
+- "externalReferences" : [
+- {
+- "type" : "website",
+- "url" : "http://www.jcraft.com/"
++ "url" : "https://github.com/package-url/packageurl-java"
+ }
+ ]
+ },
+@@ -809,17 +751,22 @@
+ "licenses" : [
+ {
+ "license" : {
+- "id" : "Apache-2.0",
+- "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
++ "name" : "Apache License Version 2.0",
++ "url" : "https://www.apache.org/licenses/LICENSE-2.0"
+ }
+ }
+ ],
+- "purl" : "pkg:maven/com.networknt/json-schema-validator@2.0.4?type=jar"
++ "purl" : "pkg:maven/com.networknt/json-schema-validator@2.0.4?type=jar",
++ "externalReferences" : [
++ {
++ "type" : "website",
++ "url" : "https://github.com/networknt/json-schema-validator"
++ }
++ ]
+ },
+ {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/commons-codec/commons-codec@1.22.0?type=jar",
+- "publisher" : "The Apache Software Foundation",
+ "group" : "commons-codec",
+ "name" : "commons-codec",
+ "version" : "1.22.0",
+@@ -861,47 +808,22 @@
+ "licenses" : [
+ {
+ "license" : {
+- "id" : "Apache-2.0",
+- "url" : "https://www.apache.org/licenses/LICENSE-2.0"
++ "name" : "Apache-2.0",
++ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/commons-codec/commons-codec@1.22.0?type=jar",
+ "externalReferences" : [
+ {
+- "type" : "vcs",
+- "url" : "https://github.com/apache/commons-codec"
+- },
+- {
+- "type" : "issue-tracker",
+- "url" : "https://issues.apache.org/jira/browse/CODEC"
+- },
+- {
+ "type" : "website",
+ "url" : "https://commons.apache.org/proper/commons-codec/"
+- },
+- {
+- "type" : "bom",
+- "url" : "https://repo1.maven.org/maven2/commons-codec/commons-codec/1.22.0/commons-codec-1.22.0-cyclonedx.json"
+- },
+- {
+- "type" : "mailing-list",
+- "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
+- },
+- {
+- "type" : "distribution-intake",
+- "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
+- },
+- {
+- "type" : "build-system",
+- "url" : "https://github.com/apache/commons-codec/actions"
+ }
+ ]
+ },
+ {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/commons-io/commons-io@2.22.0?type=jar",
+- "publisher" : "The Apache Software Foundation",
+ "group" : "commons-io",
+ "name" : "commons-io",
+ "version" : "2.22.0",
+@@ -943,40 +865,16 @@
+ "licenses" : [
+ {
+ "license" : {
+- "id" : "Apache-2.0",
+- "url" : "https://www.apache.org/licenses/LICENSE-2.0"
++ "name" : "Apache-2.0",
++ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/commons-io/commons-io@2.22.0?type=jar",
+ "externalReferences" : [
+ {
+- "type" : "vcs",
+- "url" : "https://gitbox.apache.org/repos/asf?p=commons-io.git/commons-io"
+- },
+- {
+- "type" : "issue-tracker",
+- "url" : "https://issues.apache.org/jira/browse/IO"
+- },
+- {
+ "type" : "website",
+ "url" : "https://commons.apache.org/proper/commons-io/"
+- },
+- {
+- "type" : "bom",
+- "url" : "https://repo1.maven.org/maven2/commons-io/commons-io/2.22.0/commons-io-2.22.0-cyclonedx.json"
+- },
+- {
+- "type" : "mailing-list",
+- "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
+- },
+- {
+- "type" : "distribution-intake",
+- "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
+- },
+- {
+- "type" : "build-system",
+- "url" : "https://github.com/apache/commons-io/actions"
+ }
+ ]
+ },
+@@ -1128,24 +1026,7 @@
+ },
+ {
+ "type" : "library",
+- "bom-ref" : "pkg:maven/org.apache.commons/commons-codec@1.18.0?type=jar",
+- "group" : "org.apache.commons",
+- "name" : "commons-codec",
+- "version" : "1.18.0",
+- "licenses" : [
+- {
+- "license" : {
+- "id" : "Apache-2.0",
+- "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+- }
+- }
+- ],
+- "purl" : "pkg:maven/org.apache.commons/commons-codec@1.18.0?type=jar"
+- },
+- {
+- "type" : "library",
+ "bom-ref" : "pkg:maven/org.apache.commons/commons-collections4@4.5.0?type=jar",
+- "publisher" : "The Apache Software Foundation",
+ "group" : "org.apache.commons",
+ "name" : "commons-collections4",
+ "version" : "4.5.0",
+@@ -1187,63 +1068,22 @@
+ "licenses" : [
+ {
+ "license" : {
+- "id" : "Apache-2.0",
+- "url" : "https://www.apache.org/licenses/LICENSE-2.0"
++ "name" : "Apache-2.0",
++ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/org.apache.commons/commons-collections4@4.5.0?type=jar",
+ "externalReferences" : [
+ {
+- "type" : "vcs",
+- "url" : "https://gitbox.apache.org/repos/asf?p=commons-collections.git"
+- },
+- {
+- "type" : "issue-tracker",
+- "url" : "https://issues.apache.org/jira/browse/COLLECTIONS"
+- },
+- {
+ "type" : "website",
+ "url" : "https://commons.apache.org/proper/commons-collections/"
+- },
+- {
+- "type" : "bom",
+- "url" : "https://repo1.maven.org/maven2/org/apache/commons/commons-collections4/4.5.0/commons-collections4-4.5.0-cyclonedx.json"
+- },
+- {
+- "type" : "mailing-list",
+- "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
+- },
+- {
+- "type" : "distribution-intake",
+- "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
+- },
+- {
+- "type" : "build-system",
+- "url" : "https://github.com/apache/commons-parent/actions"
+ }
+ ]
+ },
+ {
+ "type" : "library",
+- "bom-ref" : "pkg:maven/org.apache.commons/commons-compress@1.27.1?type=jar",
+- "group" : "org.apache.commons",
+- "name" : "commons-compress",
+- "version" : "1.27.1",
+- "licenses" : [
+- {
+- "license" : {
+- "id" : "Apache-2.0",
+- "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+- }
+- }
+- ],
+- "purl" : "pkg:maven/org.apache.commons/commons-compress@1.27.1?type=jar"
+- },
+- {
+- "type" : "library",
+ "bom-ref" : "pkg:maven/org.apache.commons/commons-lang3@3.20.0?type=jar",
+- "publisher" : "The Apache Software Foundation",
+ "group" : "org.apache.commons",
+ "name" : "commons-lang3",
+ "version" : "3.20.0",
+@@ -1285,95 +1125,26 @@
+ "licenses" : [
+ {
+ "license" : {
+- "id" : "Apache-2.0",
+- "url" : "https://www.apache.org/licenses/LICENSE-2.0"
++ "name" : "Apache-2.0",
++ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/org.apache.commons/commons-lang3@3.20.0?type=jar",
+ "externalReferences" : [
+ {
+- "type" : "vcs",
+- "url" : "https://gitbox.apache.org/repos/asf/commons-lang.git"
+- },
+- {
+- "type" : "issue-tracker",
+- "url" : "https://issues.apache.org/jira/browse/LANG"
+- },
+- {
+ "type" : "website",
+ "url" : "https://commons.apache.org/proper/commons-lang/"
+- },
+- {
+- "type" : "bom",
+- "url" : "https://repo1.maven.org/maven2/org/apache/commons/commons-lang3/3.20.0/commons-lang3-3.20.0-cyclonedx.json"
+- },
+- {
+- "type" : "mailing-list",
+- "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
+- },
+- {
+- "type" : "distribution-intake",
+- "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
+- },
+- {
+- "type" : "build-system",
+- "url" : "https://github.com/apache/commons-lang/actions"
+ }
+ ]
+ },
+ {
+ "type" : "library",
+- "bom-ref" : "pkg:maven/org.apache.commons/commons-vfs2@2.2?type=jar",
+- "group" : "org.apache.commons",
+- "name" : "commons-vfs2",
+- "version" : "2.2",
+- "licenses" : [
+- {
+- "license" : {
+- "id" : "Apache-2.0",
+- "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+- }
+- }
+- ],
+- "purl" : "pkg:maven/org.apache.commons/commons-vfs2@2.2?type=jar"
+- },
+- {
+- "type" : "library",
+- "bom-ref" : "pkg:maven/org.apache.httpcomponents/httpclient@4.5.13?type=jar",
+- "group" : "org.apache.httpcomponents",
+- "name" : "httpclient",
+- "version" : "4.5.13",
+- "licenses" : [
+- {
+- "license" : {
+- "id" : "Apache-2.0",
+- "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+- }
+- }
+- ],
+- "purl" : "pkg:maven/org.apache.httpcomponents/httpclient@4.5.13?type=jar"
+- },
+- {
+- "type" : "library",
+ "bom-ref" : "pkg:maven/org.apache.ivy/ivy@2.6.0?type=jar",
+- "supplier" : {
+- "name" : "Apache Ant Project Management Committee",
+- "url" : [
+- "https://ant.apache.org/"
+- ]
+- },
+- "manufacturer" : {
+- "name" : "Apache Ant Project Management Committee",
+- "url" : [
+- "https://ant.apache.org/"
+- ]
+- },
+- "publisher" : "The Apache Software Foundation",
++ "isExternal" : true,
+ "group" : "org.apache.ivy",
+ "name" : "ivy",
+ "version" : "2.6.0",
+- "description" : "Apache Ivy",
+ "hashes" : [
+ {
+ "alg" : "MD5",
+@@ -1411,93 +1182,21 @@
+ "licenses" : [
+ {
+ "license" : {
+- "id" : "Apache-2.0",
+- "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
++ "name" : "The Apache Software License, Version 2.0",
++ "url" : "http://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/org.apache.ivy/ivy@2.6.0?type=jar",
+ "externalReferences" : [
+ {
+- "type" : "vcs",
+- "url" : "https://gitbox.apache.org/repos/asf/ant-ivy.git"
+- },
+- {
+- "type" : "issue-tracker",
+- "url" : "http://issues.apache.org/jira/browse/IVY"
+- },
+- {
+ "type" : "website",
+- "url" : "https://ant.apache.org/ivy/"
+- },
+- {
+- "type" : "advisories",
+- "url" : "https://ant.apache.org/ivy/security.html"
+- },
+- {
+- "type" : "bom",
+- "url" : "https://repo1.maven.org/maven2/org/apache/ivy/ivy/2.6.0/ivy-2.6.0.cdx.json"
+- },
+- {
+- "type" : "mailing-list",
+- "url" : "https://ant.apache.org/ivy/mailing-lists.html"
+- },
+- {
+- "type" : "source-distribution",
+- "url" : "https://ant.apache.org/ivy/download.cgi"
+- },
+- {
+- "type" : "distribution",
+- "url" : "https://ant.apache.org/ivy/download.cgi"
+- },
+- {
+- "type" : "license",
+- "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+- },
+- {
+- "type" : "build-system",
+- "url" : "https://ci-builds.apache.org/job/Ant/job/Ivy/"
+- },
+- {
+- "type" : "security-contact",
+- "url" : "https://www.apache.org/security/"
++ "url" : "http://ant.apache.org/ivy/"
+ }
+ ]
+ },
+ {
+ "type" : "library",
+- "bom-ref" : "pkg:maven/org.bouncycastle/bcpg-jdk15on@1.70?type=jar",
+- "group" : "org.bouncycastle",
+- "name" : "bcpg-jdk15on",
+- "version" : "1.70",
+- "licenses" : [
+- {
+- "license" : {
+- "name" : "Bouncy Castle Licence",
+- "url" : "https://www.bouncycastle.org/licence.html"
+- }
+- }
+- ],
+- "purl" : "pkg:maven/org.bouncycastle/bcpg-jdk15on@1.70?type=jar"
+- },
+- {
+- "type" : "library",
+- "bom-ref" : "pkg:maven/org.bouncycastle/bcprov-jdk15on@1.70?type=jar",
+- "group" : "org.bouncycastle",
+- "name" : "bcprov-jdk15on",
+- "version" : "1.70",
+- "licenses" : [
+- {
+- "license" : {
+- "name" : "Bouncy Castle Licence",
+- "url" : "https://www.bouncycastle.org/licence.html"
+- }
+- }
+- ],
+- "purl" : "pkg:maven/org.bouncycastle/bcprov-jdk15on@1.70?type=jar"
+- },
+- {
+- "type" : "library",
+ "bom-ref" : "pkg:maven/org.codehaus.woodstox/stax2-api@4.3.0?type=jar",
+ "group" : "org.codehaus.woodstox",
+ "name" : "stax2-api",
+@@ -1540,17 +1239,22 @@
+ "licenses" : [
+ {
+ "license" : {
+- "id" : "BSD-2-Clause",
++ "name" : "The BSD 2-Clause License",
+ "url" : "http://www.opensource.org/licenses/bsd-license.php"
+ }
+ }
+ ],
+- "purl" : "pkg:maven/org.codehaus.woodstox/stax2-api@4.3.0?type=jar"
++ "purl" : "pkg:maven/org.codehaus.woodstox/stax2-api@4.3.0?type=jar",
++ "externalReferences" : [
++ {
++ "type" : "website",
++ "url" : "http://github.com/FasterXML/stax2-api"
++ }
++ ]
+ },
+ {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/org.cyclonedx/cyclonedx-core-java@13.0.0?type=jar",
+- "publisher" : "OWASP Foundation",
+ "group" : "org.cyclonedx",
+ "name" : "cyclonedx-core-java",
+ "version" : "13.0.0",
+@@ -1592,62 +1296,146 @@
+ "licenses" : [
+ {
+ "license" : {
+- "id" : "Apache-2.0",
+- "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
++ "name" : "Apache-2.0",
++ "url" : "http://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/org.cyclonedx/cyclonedx-core-java@13.0.0?type=jar",
+ "externalReferences" : [
+ {
+- "type" : "vcs",
+- "url" : "https://github.com/CycloneDX/cyclonedx-core-java.git"
++ "type" : "website",
++ "url" : "https://github.com/CycloneDX/cyclonedx-core-java"
++ }
++ ]
++ },
++ {
++ "type" : "library",
++ "bom-ref" : "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar",
++ "group" : "org.slf4j",
++ "name" : "slf4j-api",
++ "version" : "2.0.17",
++ "description" : "The slf4j API",
++ "hashes" : [
++ {
++ "alg" : "MD5",
++ "content" : "b6480d114a23683498ac3f746f959d2f"
+ },
+ {
+- "type" : "issue-tracker",
+- "url" : "https://github.com/CycloneDX/cyclonedx-core-java/issues"
++ "alg" : "SHA-1",
++ "content" : "d9e58ac9c7779ba3bf8142aff6c830617a7fe60f"
+ },
+ {
+- "type" : "website",
+- "url" : "https://github.com/CycloneDX/cyclonedx-core-java"
++ "alg" : "SHA-256",
++ "content" : "7b751d952061954d5abfed7181c1f645d336091b679891591d63329c622eb832"
+ },
+ {
+- "type" : "distribution-intake",
+- "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
++ "alg" : "SHA-512",
++ "content" : "9a3e79db6666a6096a3021bb2e1d918f30f589d8de51d6b600f8ebd92515a510ae2d8f87919cc2dfa8365d64f10194cac8dfa0fb950160eef0e9da06f6caaeb9"
+ },
+ {
+- "type" : "build-system",
+- "url" : "https://github.com/CycloneDX/cyclonedx-core-java/actions"
++ "alg" : "SHA3-256",
++ "content" : "00559b4f4066b4917ba4fe2a6f23111eaeada321112d030910d218ced9084b5e"
++ },
++ {
++ "alg" : "SHA3-512",
++ "content" : "9579c2f7e7516e177c2d493ccc9eb8150978cf19f6f09b28d116f6935239fd56dc6af2b62b3336f79b0b462445550cd1fb5377a07001a6f44aaab6a32fa2fa47"
++ },
++ {
++ "alg" : "SHA-384",
++ "content" : "6ea24f814a9b6ece428cfd0535e2f3b8927005745ef61006b50fdb5a90126ee5ea05650155382b3b755c5bce38ef3944"
++ },
++ {
++ "alg" : "SHA3-384",
++ "content" : "9b1015052f0ec43f9be09764e131834157599611cb52f6fe591c4ac6a8ab4817518f2a4b8871e5e738c8678e93af5557"
++ }
++ ],
++ "licenses" : [
++ {
++ "license" : {
++ "name" : "MIT",
++ "url" : "https://opensource.org/license/mit"
++ }
++ }
++ ],
++ "purl" : "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar",
++ "externalReferences" : [
++ {
++ "type" : "website",
++ "url" : "http://www.slf4j.org"
+ }
+ ]
+ },
+ {
+ "type" : "library",
+- "bom-ref" : "pkg:maven/oro/oro@2.0.8?type=jar",
+- "group" : "oro",
+- "name" : "oro",
+- "version" : "2.0.8",
++ "bom-ref" : "pkg:maven/org.yaml/snakeyaml@2.5?type=jar",
++ "group" : "org.yaml",
++ "name" : "snakeyaml",
++ "version" : "2.5",
++ "description" : "YAML 1.1 parser and emitter for Java",
++ "hashes" : [
++ {
++ "alg" : "MD5",
++ "content" : "8d3b7581db5c7620db55183f33a4f2ad"
++ },
++ {
++ "alg" : "SHA-1",
++ "content" : "2d53ddec134280cb384c1e35d094e5f71c1f2316"
++ },
++ {
++ "alg" : "SHA-256",
++ "content" : "e6682acf1ace77508ef13649cbf4f8d09d2cf5457bdb61d25ffb6ac0233d78dd"
++ },
++ {
++ "alg" : "SHA-512",
++ "content" : "a69bea3ae0ed31b12d9fa23bf1cd3fb71bae88e231d9657f0291e3000ae17a1df50709e072134f9155158f488eba67a3f8daf879462499f07b07d9239e78933e"
++ },
++ {
++ "alg" : "SHA3-256",
++ "content" : "3aa9329b0eab5185331e526a011c74b45b4c4a506214e6c3ec2d2038c51cc261"
++ },
++ {
++ "alg" : "SHA3-512",
++ "content" : "f80ff702aee20a5150a11818985d659fffb1d5238e331aca2048524649e0270e5bca0186ce7caf04ecf85fd95c95c6b9d8ed1f362ed399fef624eb94b70dc6de"
++ },
++ {
++ "alg" : "SHA-384",
++ "content" : "2fa12e4330d6da0a693a13588c8cdeff562c1bd1dc32e043d402ca1fc72d87a30dcc7bb31f9b582df3fe018eb6c6a3bb"
++ },
++ {
++ "alg" : "SHA3-384",
++ "content" : "8c5037c75bb2f464829ba38126a4773c88951705effc2b14289f3bbdef05bb598f10e4d9603dcd1b58efd7cb68d996a2"
++ }
++ ],
+ "licenses" : [
+ {
+ "license" : {
+- "id" : "Apache-2.0",
+- "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
++ "name" : "Apache License, Version 2.0",
++ "url" : "http://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+- "purl" : "pkg:maven/oro/oro@2.0.8?type=jar"
++ "purl" : "pkg:maven/org.yaml/snakeyaml@2.5?type=jar",
++ "externalReferences" : [
++ {
++ "type" : "website",
++ "url" : "https://bitbucket.org/snakeyaml/snakeyaml"
++ }
++ ]
+ }
+ ],
+ "dependencies" : [
+ {
++ "ref" : "pkg:maven/com.ethlo.time/itu@1.14.0?type=jar",
++ "dependsOn" : [ ]
++ },
++ {
+ "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.22?type=jar",
+ "dependsOn" : [ ]
+ },
+ {
+ "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.22.1?type=jar",
+- "dependsOn" : [
+- "pkg:maven/ch.randelshofer/fastdoubleparser@2.0.1?type=jar"
+- ]
++ "dependsOn" : [ ]
+ },
+ {
+ "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.22.1?type=jar",
+@@ -1667,10 +1455,33 @@
+ ]
+ },
+ {
++ "ref" : "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.22.1?type=jar",
++ "dependsOn" : [
++ "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.22.1?type=jar",
++ "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.22.1?type=jar",
++ "pkg:maven/org.yaml/snakeyaml@2.5?type=jar"
++ ]
++ },
++ {
++ "ref" : "pkg:maven/com.fasterxml.woodstox/woodstox-core@7.2.0?type=jar",
++ "dependsOn" : [
++ "pkg:maven/org.codehaus.woodstox/stax2-api@4.3.0?type=jar"
++ ]
++ },
++ {
+ "ref" : "pkg:maven/com.github.package-url/packageurl-java@1.5.0?type=jar",
+ "dependsOn" : [ ]
+ },
+ {
++ "ref" : "pkg:maven/com.networknt/json-schema-validator@2.0.4?type=jar",
++ "dependsOn" : [
++ "pkg:maven/com.ethlo.time/itu@1.14.0?type=jar",
++ "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.22.1?type=jar",
++ "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.22.1?type=jar",
++ "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"
++ ]
++ },
++ {
+ "ref" : "pkg:maven/commons-codec/commons-codec@1.22.0?type=jar",
+ "dependsOn" : [ ]
+ },
+@@ -1681,8 +1492,10 @@
+ {
+ "ref" : "pkg:maven/org.apache.ant/ant-cyclonedx@0.2alpha?type=jar",
+ "dependsOn" : [
++ "pkg:maven/commons-codec/commons-codec@1.22.0?type=jar",
+ "pkg:maven/org.apache.ant/ant-launcher@1.10.17?type=jar",
+ "pkg:maven/org.apache.ant/ant@1.10.17?type=jar",
++ "pkg:maven/org.apache.ivy/ivy@2.6.0?type=jar",
+ "pkg:maven/org.cyclonedx/cyclonedx-core-java@13.0.0?type=jar"
+ ]
+ },
+@@ -1698,9 +1511,7 @@
+ },
+ {
+ "ref" : "pkg:maven/org.apache.commons/commons-collections4@4.5.0?type=jar",
+- "dependsOn" : [
+- "pkg:maven/commons-codec/commons-codec@1.22.0?type=jar"
+- ]
++ "dependsOn" : [ ]
+ },
+ {
+ "ref" : "pkg:maven/org.apache.commons/commons-lang3@3.20.0?type=jar",
+@@ -1708,20 +1519,7 @@
+ },
+ {
+ "ref" : "pkg:maven/org.apache.ivy/ivy@2.6.0?type=jar",
+- "dependsOn" : [
+- "pkg:maven/com.jcraft/jsch.agentproxy.connector-factory@0.0.9?type=jar",
+- "pkg:maven/com.jcraft/jsch.agentproxy.jsch@0.0.9?type=jar",
+- "pkg:maven/com.jcraft/jsch.agentproxy@0.0.9?type=jar",
+- "pkg:maven/com.jcraft/jsch@0.1.55?type=jar",
+- "pkg:maven/org.apache.ant/ant@1.10.17?type=jar",
+- "pkg:maven/org.apache.commons/commons-codec@1.18.0?type=jar",
+- "pkg:maven/org.apache.commons/commons-compress@1.27.1?type=jar",
+- "pkg:maven/org.apache.commons/commons-vfs2@2.2?type=jar",
+- "pkg:maven/org.apache.httpcomponents/httpclient@4.5.13?type=jar",
+- "pkg:maven/org.bouncycastle/bcpg-jdk15on@1.70?type=jar",
+- "pkg:maven/org.bouncycastle/bcprov-jdk15on@1.70?type=jar",
+- "pkg:maven/oro/oro@2.0.8?type=jar"
+- ]
++ "dependsOn" : [ ]
+ },
+ {
+ "ref" : "pkg:maven/org.codehaus.woodstox/stax2-api@4.3.0?type=jar",
+@@ -1738,6 +1536,14 @@
+ "pkg:maven/org.apache.commons/commons-collections4@4.5.0?type=jar",
+ "pkg:maven/org.apache.commons/commons-lang3@3.20.0?type=jar"
+ ]
++ },
++ {
++ "ref" : "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar",
++ "dependsOn" : [ ]
++ },
++ {
++ "ref" : "pkg:maven/org.yaml/snakeyaml@2.5?type=jar",
++ "dependsOn" : [ ]
+ }
+ ]
+ }
+\ Kein Zeilenumbruch am Dateiende.
diff --git a/example/ant-cyclonedx-0.2alpha.cdx.json b/example/ant-cyclonedx-0.2alpha.cdx.json
new file mode 100644
index 0000000..2b4d835
--- /dev/null
+++ b/example/ant-cyclonedx-0.2alpha.cdx.json
@@ -0,0 +1,1743 @@
+{
+ "bomFormat" : "CycloneDX",
+ "specVersion" : "1.7",
+ "serialNumber" : "urn:uuid:46b215d3-5bd4-4619-92bf-4dd0883c885d",
+ "version" : 1,
+ "metadata" : {
+ "timestamp" : "2026-08-07T14:14:06Z",
+ "lifecycles" : [
+ {
+ "phase" : "build"
+ }
+ ],
+ "tools" : {
+ "components" : [
+ {
+ "type" : "library",
+ "supplier" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "manufacturer" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "publisher" : "The Apache Software Foundation",
+ "group" : "org.apache.ant",
+ "name" : "ant-cyclonedx",
+ "version" : "0.2alpha",
+ "description" : "Apache CycloneDX Antlib",
+ "hashes" : [
+ {
+ "alg" : "MD5",
+ "content" : "d325f6c7629142693fd8b9012f4ad22c"
+ },
+ {
+ "alg" : "SHA-1",
+ "content" : "e96723969081ffd5efbaa87c4378b7545f4fabe2"
+ },
+ {
+ "alg" : "SHA-256",
+ "content" : "209f8ba54603780c2f0180494961c33439381dc0e35d3dbf85d55bd4dba93c81"
+ },
+ {
+ "alg" : "SHA-512",
+ "content" : "5e40d417a70385d1bf492e24bd0e82d3bf99402a404e5a71634c1a5e0ba4d19ec0a4ff21b87e31ce42a0960af51b091dcfd44b2b9e2ceffb07e7f91a3403bd96"
+ },
+ {
+ "alg" : "SHA3-256",
+ "content" : "ff1bdad8b6fda462fd3a54110c7f01007d4bd99a99404a20abea045a2f21f6bd"
+ },
+ {
+ "alg" : "SHA3-512",
+ "content" : "69067b921a6e07932e247dcddbf7f67b5f8e9aee4e9f603b6fa466f57da3b411e2639e932ef940a66666e0fde7ba16f2b84d7348ebacced9b573d5be274455ff"
+ },
+ {
+ "alg" : "SHA-384",
+ "content" : "ea6d1749e734eb73788e2c427a3cc98af197fc141228d79fda7e3e440a0bb9d3724cc8f3e318368e0ec922b187cb7e21"
+ },
+ {
+ "alg" : "SHA3-384",
+ "content" : "8664a9d92721b1c7104cd4a6a9e4f785ffcd225bfabb6a911a3f4780e749acfc7afbc5ae3b873709e057e0e9dfae7b07"
+ }
+ ],
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/org.apache.ant/ant-cyclonedx@0.2alpha?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "vcs",
+ "url" : "https://gitbox.apache.org/repos/asf/ant-antlibs-cyclonedx.git"
+ },
+ {
+ "type" : "issue-tracker",
+ "url" : "https://bz.apache.org/bugzilla/buglist.cgi?component=CycloneDX%20Antlib&product=Ant"
+ },
+ {
+ "type" : "website",
+ "url" : "https://ant.apache.org/antlibs/cyclonedx/"
+ },
+ {
+ "type" : "mailing-list",
+ "url" : "https://ant.apache.org/mail.html"
+ },
+ {
+ "type" : "documentation",
+ "url" : "https://ant.apache.org/antlibs/cyclonedx/manual/"
+ },
+ {
+ "type" : "source-distribution",
+ "url" : "https://ant.apache.org/antlibs/srcdownload.cgi"
+ },
+ {
+ "type" : "distribution",
+ "url" : "https://ant.apache.org/antlibs/bindownload.cgi"
+ },
+ {
+ "type" : "license",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ },
+ {
+ "type" : "build-system",
+ "url" : "https://ci-builds.apache.org/job/Ant/job/CycloneDX%20Antlib/"
+ },
+ {
+ "type" : "security-contact",
+ "url" : "https://www.apache.org/security/"
+ },
+ {
+ "type" : "rfc-9116",
+ "url" : "https://ant.apache.org/.well-known/security.txt"
+ }
+ ]
+ }
+ ]
+ },
+ "component" : {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/org.apache.ant/ant-cyclonedx@0.2alpha?type=jar",
+ "supplier" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "manufacturer" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "publisher" : "The Apache Software Foundation",
+ "group" : "org.apache.ant",
+ "name" : "ant-cyclonedx",
+ "version" : "0.2alpha",
+ "description" : "Apache CycloneDX Antlib",
+ "hashes" : [
+ {
+ "alg" : "MD5",
+ "content" : "d325f6c7629142693fd8b9012f4ad22c"
+ },
+ {
+ "alg" : "SHA-1",
+ "content" : "e96723969081ffd5efbaa87c4378b7545f4fabe2"
+ },
+ {
+ "alg" : "SHA-256",
+ "content" : "209f8ba54603780c2f0180494961c33439381dc0e35d3dbf85d55bd4dba93c81"
+ },
+ {
+ "alg" : "SHA-512",
+ "content" : "5e40d417a70385d1bf492e24bd0e82d3bf99402a404e5a71634c1a5e0ba4d19ec0a4ff21b87e31ce42a0960af51b091dcfd44b2b9e2ceffb07e7f91a3403bd96"
+ },
+ {
+ "alg" : "SHA3-256",
+ "content" : "ff1bdad8b6fda462fd3a54110c7f01007d4bd99a99404a20abea045a2f21f6bd"
+ },
+ {
+ "alg" : "SHA3-512",
+ "content" : "69067b921a6e07932e247dcddbf7f67b5f8e9aee4e9f603b6fa466f57da3b411e2639e932ef940a66666e0fde7ba16f2b84d7348ebacced9b573d5be274455ff"
+ },
+ {
+ "alg" : "SHA-384",
+ "content" : "ea6d1749e734eb73788e2c427a3cc98af197fc141228d79fda7e3e440a0bb9d3724cc8f3e318368e0ec922b187cb7e21"
+ },
+ {
+ "alg" : "SHA3-384",
+ "content" : "8664a9d92721b1c7104cd4a6a9e4f785ffcd225bfabb6a911a3f4780e749acfc7afbc5ae3b873709e057e0e9dfae7b07"
+ }
+ ],
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/org.apache.ant/ant-cyclonedx@0.2alpha?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "vcs",
+ "url" : "https://gitbox.apache.org/repos/asf/ant-antlibs-cyclonedx.git"
+ },
+ {
+ "type" : "issue-tracker",
+ "url" : "https://bz.apache.org/bugzilla/buglist.cgi?component=CycloneDX%20Antlib&product=Ant"
+ },
+ {
+ "type" : "website",
+ "url" : "https://ant.apache.org/antlibs/cyclonedx/"
+ },
+ {
+ "type" : "mailing-list",
+ "url" : "https://ant.apache.org/mail.html"
+ },
+ {
+ "type" : "documentation",
+ "url" : "https://ant.apache.org/antlibs/cyclonedx/manual/"
+ },
+ {
+ "type" : "source-distribution",
+ "url" : "https://ant.apache.org/antlibs/srcdownload.cgi"
+ },
+ {
+ "type" : "distribution",
+ "url" : "https://ant.apache.org/antlibs/bindownload.cgi"
+ },
+ {
+ "type" : "license",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ },
+ {
+ "type" : "security-contact",
+ "url" : "https://www.apache.org/security/"
+ },
+ {
+ "type" : "rfc-9116",
+ "url" : "https://ant.apache.org/.well-known/security.txt"
+ }
+ ]
+ },
+ "manufacturer" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "supplier" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ]
+ },
+ "components" : [
+ {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/ch.randelshofer/fastdoubleparser@2.0.1?type=jar",
+ "group" : "ch.randelshofer",
+ "name" : "fastdoubleparser",
+ "version" : "2.0.1",
+ "description" : "A Java port of Daniel Lemire's fast_float project.",
+ "scope" : "required",
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "MIT",
+ "url" : "https://opensource.org/license/mit/"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/ch.randelshofer/fastdoubleparser@2.0.1?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "vcs",
+ "url" : "https://github.com/wrandelshofer/FastDoubleParser/tree/master"
+ },
+ {
+ "type" : "website",
+ "url" : "https://github.com/wrandelshofer/FastDoubleParser"
+ }
+ ]
+ },
+ {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.22?type=jar",
+ "publisher" : "FasterXML",
+ "group" : "com.fasterxml.jackson.core",
+ "name" : "jackson-annotations",
+ "version" : "2.22",
+ "description" : "Core annotations used for value types, used by Jackson data binding package.",
+ "hashes" : [
+ {
+ "alg" : "MD5",
+ "content" : "04c11c456fd1e21b9a21c25c665109cc"
+ },
+ {
+ "alg" : "SHA-1",
+ "content" : "15c67f9498d6934cff9510fc70c5a12e52290457"
+ },
+ {
+ "alg" : "SHA-256",
+ "content" : "21ddb598807d3a51a876704eb979d9296e1c6a6f47ab1826ff88c6d6a127a2d0"
+ },
+ {
+ "alg" : "SHA-512",
+ "content" : "63b597ec02b4e31c57266d9b96f05f301f217bc12ffb7ba046a5658d2829728930a559947b98eb6c3cc448413a96b4939427aa669ae1e2dc3597ab5d5d287f9f"
+ },
+ {
+ "alg" : "SHA3-256",
+ "content" : "6bfc7b4ba70779fe5f0b1e2af585abab982f7929a68beb2c0e62ea2e2a321de0"
+ },
+ {
+ "alg" : "SHA3-512",
+ "content" : "3f1bdfa32f7df76ac14cd2a3e689b65066fa0a6a760a9b8b1121773bb1b043a44587d4148c67f361dc6c630e6b31f29b2691a57d47caabea5ca23ae44af34a5e"
+ },
+ {
+ "alg" : "SHA-384",
+ "content" : "35b6fe651afeed54d1e6f7a39ac6cf6fdbafacdf2e3bdff7b29b965ccb79a0c53342a56bf0ecea4d6c4c4651b1d6aa19"
+ },
+ {
+ "alg" : "SHA3-384",
+ "content" : "72267dc54c4175c42ca0dd430a87b12cc68619a8777be2048e1d2f0747db884a568b5c346c77c9c8c0714ab96018f5f7"
+ }
+ ],
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.22?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "vcs",
+ "url" : "https://github.com/FasterXML/jackson-annotations"
+ },
+ {
+ "type" : "issue-tracker",
+ "url" : "https://github.com/FasterXML/jackson-annotations/issues"
+ },
+ {
+ "type" : "website",
+ "url" : "https://github.com/FasterXML/jackson"
+ },
+ {
+ "type" : "bom",
+ "url" : "https://repo1.maven.org/maven2/com/fasterxml/jackson/core/jackson-annotations/2.22/jackson-annotations-2.22-sbom-cyclonedx.json"
+ },
+ {
+ "type" : "distribution-intake",
+ "url" : "https://central.sonatype.com/api/v1/publisher"
+ }
+ ]
+ },
+ {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.22.1?type=jar",
+ "publisher" : "FasterXML",
+ "group" : "com.fasterxml.jackson.core",
+ "name" : "jackson-core",
+ "version" : "2.22.1",
+ "description" : "Core Jackson processing abstractions (aka Streaming API), implementation for JSON",
+ "hashes" : [
+ {
+ "alg" : "MD5",
+ "content" : "09e866bcd73613665ef49f5086704fb1"
+ },
+ {
+ "alg" : "SHA-1",
+ "content" : "da7ffb60088d7e8f37ecdd3b617520971cc7b9bf"
+ },
+ {
+ "alg" : "SHA-256",
+ "content" : "941ff029bcdb93e83d209ce516c1a7fb8bbac07d0a2fa122f5bf194b2cd7b4f4"
+ },
+ {
+ "alg" : "SHA-512",
+ "content" : "d4485af4465f561034df86686d672835b0272b6200efb0af55ea71e62d3faf09e9f90e42df4da64650795cf00519fc553f892bf6179330a3e74750110a785efb"
+ },
+ {
+ "alg" : "SHA3-256",
+ "content" : "48fc6e17c36e14b8bae387b92248a43da12293b68a61dd2517c708dbb24ed010"
+ },
+ {
+ "alg" : "SHA3-512",
+ "content" : "f72ef2d2a1012be8b1c972323527a396bbaea0b543bd79fac6d380f8e4855c6d98190b067ccec92ece9ed8e1ece1e6046b1d93f9c85944fcb7133fe0b4dc60e4"
+ },
+ {
+ "alg" : "SHA-384",
+ "content" : "faaf92de6e93475fdbb7d56221fd35d8435ac4f87dddfd334ed05c4318b8b72220010effd08bf8dd156420771b294eb4"
+ },
+ {
+ "alg" : "SHA3-384",
+ "content" : "5c432f1a2f3369485c4ed7d3c3c4499342c23efd0d7a574b73421345df9762bd27643cc469b01632400691f3c09b5d8b"
+ }
+ ],
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.22.1?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "vcs",
+ "url" : "https://github.com/FasterXML/jackson-core"
+ },
+ {
+ "type" : "issue-tracker",
+ "url" : "https://github.com/FasterXML/jackson-core/issues"
+ },
+ {
+ "type" : "website",
+ "url" : "https://github.com/FasterXML/jackson-core"
+ },
+ {
+ "type" : "bom",
+ "url" : "https://repo1.maven.org/maven2/com/fasterxml/jackson/core/jackson-core/2.22.1/jackson-core-2.22.1-sbom-cyclonedx.json"
+ },
+ {
+ "type" : "distribution-intake",
+ "url" : "https://central.sonatype.com/api/v1/publisher"
+ }
+ ]
+ },
+ {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.22.1?type=jar",
+ "publisher" : "FasterXML",
+ "group" : "com.fasterxml.jackson.core",
+ "name" : "jackson-databind",
+ "version" : "2.22.1",
+ "description" : "General data-binding functionality for Jackson: works on core streaming API",
+ "hashes" : [
+ {
+ "alg" : "MD5",
+ "content" : "df2dcf8d581836d48aae7387311cba93"
+ },
+ {
+ "alg" : "SHA-1",
+ "content" : "9e2fb91831cce9cb9262909cd76647508949f232"
+ },
+ {
+ "alg" : "SHA-256",
+ "content" : "7dcd7e53bec1f56c7ad278bd1ca0840bebcc595d61ce44d6a8439abb75b965b2"
+ },
+ {
+ "alg" : "SHA-512",
+ "content" : "d8a905e80e6d7dd2026b16b075dde2d409425b61417120980ea07b261c6bf98d5c065053f1c063b60da30b4324157778ec4eb859945fb8543176e55a2d3b8db8"
+ },
+ {
+ "alg" : "SHA3-256",
+ "content" : "ab1df340c8e99a3ea6f485b9e3bf0e1cb7b57810b09e9161c8eee38eb8db3e47"
+ },
+ {
+ "alg" : "SHA3-512",
+ "content" : "dc3f3df098898dc6bf71fcef0ca232a592f59fb465161b95b03a28eebc9539bede1db83bacaf14dc57328feffc7a4637b911a09356fa4330d93f52131ac7254e"
+ },
+ {
+ "alg" : "SHA-384",
+ "content" : "b45efa1187b756bdfa7e0c6bc2eda85fcf13d879b4bf370f06ef95325c13b629f763a8027dbc34dab7c6a549bb33e945"
+ },
+ {
+ "alg" : "SHA3-384",
+ "content" : "7eeb7d7ea5434fdede4b0d256955d0ebf93a11ad89efcc2a3551d649bf197f6aa6c3dd60247805a13270fd8ed0a98ae8"
+ }
+ ],
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.22.1?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "vcs",
+ "url" : "https://github.com/FasterXML/jackson-databind"
+ },
+ {
+ "type" : "issue-tracker",
+ "url" : "https://github.com/FasterXML/jackson-databind/issues"
+ },
+ {
+ "type" : "website",
+ "url" : "https://github.com/FasterXML/jackson"
+ },
+ {
+ "type" : "bom",
+ "url" : "https://repo1.maven.org/maven2/com/fasterxml/jackson/core/jackson-databind/2.22.1/jackson-databind-2.22.1-sbom-cyclonedx.json"
+ },
+ {
+ "type" : "distribution-intake",
+ "url" : "https://central.sonatype.com/api/v1/publisher"
+ }
+ ]
+ },
+ {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.22.1?type=jar",
+ "publisher" : "FasterXML",
+ "group" : "com.fasterxml.jackson.dataformat",
+ "name" : "jackson-dataformat-xml",
+ "version" : "2.22.1",
+ "description" : "Data format extension for Jackson to offer alternative support for serializing POJOs as XML and deserializing XML as POJOs.",
+ "hashes" : [
+ {
+ "alg" : "MD5",
+ "content" : "dc9e8f9090ad8aab73dc3e850a77586b"
+ },
+ {
+ "alg" : "SHA-1",
+ "content" : "52e415c14654d65bc80cc4942585c5a25423f3c2"
+ },
+ {
+ "alg" : "SHA-256",
+ "content" : "243a9c67b3d7c40d13719daf0a2838942d3e969feafd6b2cae24eeb02c1d75e2"
+ },
+ {
+ "alg" : "SHA-512",
+ "content" : "c8135e28efac33cf9950e6a0b58443df28501f17fbf5426a8ce407a6c5ff53de8e14c1cb1b20a297887a5915fe52e2ef9414946a4234a4b4173133a26be06832"
+ },
+ {
+ "alg" : "SHA3-256",
+ "content" : "7246efd028dcd9a3f10195bc10e7ca984a3e4a779050d74d10c42de3ccb57a2b"
+ },
+ {
+ "alg" : "SHA3-512",
+ "content" : "f376c49689c609dc890634c7c3ffcd4b0eb670893ba900ca7392b7ed841f28010283815155458532d1845dc0432c975b3b3c978895888d5a5c9ddb43714b9076"
+ },
+ {
+ "alg" : "SHA-384",
+ "content" : "6ad9617cb4bad3701f76f098d84ebfbac6c86e7e6b780fea49a944e719b0d5667e90063dde614e4ed7bee8912d20599a"
+ },
+ {
+ "alg" : "SHA3-384",
+ "content" : "701a1eda9821af584e8a9ebc998637e7a21e10e6d370f99a0979a5c633605e10a0d13e8408f965b020d12fbba9341915"
+ }
+ ],
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.22.1?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "vcs",
+ "url" : "http://github.com/FasterXML/jackson-dataformat-xml"
+ },
+ {
+ "type" : "issue-tracker",
+ "url" : "https://github.com/FasterXML/jackson-dataformat-xml/issues"
+ },
+ {
+ "type" : "website",
+ "url" : "https://github.com/FasterXML/jackson-dataformat-xml"
+ },
+ {
+ "type" : "bom",
+ "url" : "https://repo1.maven.org/maven2/com/fasterxml/jackson/dataformat/jackson-dataformat-xml/2.22.1/jackson-dataformat-xml-2.22.1-sbom-cyclonedx.json"
+ },
+ {
+ "type" : "distribution-intake",
+ "url" : "https://central.sonatype.com/api/v1/publisher"
+ }
+ ]
+ },
+ {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/com.fasterxml.woodstox/woodstox-core@7.2.0?type=jar",
+ "group" : "com.fasterxml.woodstox",
+ "name" : "woodstox-core",
+ "version" : "7.2.0",
+ "description" : "Woodstox is a high-performance XML processor that implements Stax (JSR-173), SAX2 and Stax2 APIs",
+ "hashes" : [
+ {
+ "alg" : "MD5",
+ "content" : "d32a36b91bfa2ba1f69e9671ce2fba6a"
+ },
+ {
+ "alg" : "SHA-1",
+ "content" : "ec9c97f566f812e249a7aba6c76815369ac00864"
+ },
+ {
+ "alg" : "SHA-256",
+ "content" : "689f5be95f9bb369d6c0e8db99a99f930b0c48d6a69b46151782b5816c7ea820"
+ },
+ {
+ "alg" : "SHA-512",
+ "content" : "f3baa0b19322e22ef0b5bb6739c1497167938901450e141b2e8769f0acf7ec2e5498349db007f6958de7eee00b2a9b36b0a1c09fa7877f074cb8b5ad2485559d"
+ },
+ {
+ "alg" : "SHA3-256",
+ "content" : "5f57a8d1f1a9cd8920c94436f53bcbca6164a221e793e5ef5db2b8861f9b113b"
+ },
+ {
+ "alg" : "SHA3-512",
+ "content" : "960c8d80a53fdbb0423432d018723f805fcdd674a49d2aef7a58f181bcc53d7a7adf2668ab51300e8789d9ffd4e98267cbceb34fcf03195a779b2faacbe461a8"
+ },
+ {
+ "alg" : "SHA-384",
+ "content" : "d3f9eee2aa2ff88fa3efd0d52d4a0fa8cf79707d36f5a9dacc2852df80584300a32e5d54b77af3a7bf29e35b84413e18"
+ },
+ {
+ "alg" : "SHA3-384",
+ "content" : "f4862abab750ed951776c465833ecf3fc8747dd2bf4f6a3108b5d4ff1e6261a24cd4708e889154848d7bad55099c6c42"
+ }
+ ],
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/com.fasterxml.woodstox/woodstox-core@7.2.0?type=jar"
+ },
+ {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/com.github.package-url/packageurl-java@1.5.0?type=jar",
+ "group" : "com.github.package-url",
+ "name" : "packageurl-java",
+ "version" : "1.5.0",
+ "description" : "The official Java implementation of the PackageURL specification. PackageURL (purl) is a minimal specification for describing a package via a \"mostly universal\" URL",
+ "hashes" : [
+ {
+ "alg" : "MD5",
+ "content" : "90856d8bb5b17e08fdf03b6a2f93b81c"
+ },
+ {
+ "alg" : "SHA-1",
+ "content" : "e6bf530f52feab911f4032604ca0b8216f7ff337"
+ },
+ {
+ "alg" : "SHA-256",
+ "content" : "e45551727707acc0c56ac62d56964332ea0f138d6cc3656d988b9369150f5247"
+ },
+ {
+ "alg" : "SHA-512",
+ "content" : "8064df400154caa110b8845bd17e6cea2683307e575ce88e40d7c0c8965ea0af6c150a376d8b9ba7354676c41b52c94535f30c6e830447613299ccf5fc7aa959"
+ },
+ {
+ "alg" : "SHA3-256",
+ "content" : "c9881b69bde35ea6ff4006877b9fbf91462f911b5b142aa699a45a00867d413a"
+ },
+ {
+ "alg" : "SHA3-512",
+ "content" : "2b9caf58deef687a9bf01abd61a7af4abdb61247a8a966683a18157ee948f1ea424602598dc8f665bf24f7e1e516866298ef0507e9d697cb20dcf60eff2095ca"
+ },
+ {
+ "alg" : "SHA-384",
+ "content" : "0597100022f72e020c9d929bf57ecef91af7574610fb03b4019feba4b25f491a076f03577be2009e66d9001c4c0f8ab0"
+ },
+ {
+ "alg" : "SHA3-384",
+ "content" : "bbdd55a31a4755ef589bcb176283fe03e3c9089d315eab577fef3a9c2d02e632c6ac3fdebbc90a2f0f8ed7974b9f397c"
+ }
+ ],
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "MIT",
+ "url" : "https://opensource.org/licenses/MIT"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/com.github.package-url/packageurl-java@1.5.0?type=jar"
+ },
+ {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/com.jcraft/jsch.agentproxy.connector-factory@0.0.9?type=jar",
+ "group" : "com.jcraft",
+ "name" : "jsch.agentproxy.connector-factory",
+ "version" : "0.0.9",
+ "description" : "a connector factory",
+ "licenses" : [
+ {
+ "license" : {
+ "name" : "Revised BSD",
+ "url" : "http://www.jcraft.com/jsch/LICENSE.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/com.jcraft/jsch.agentproxy.connector-factory@0.0.9?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "website",
+ "url" : "http://www.jcraft.com/"
+ }
+ ]
+ },
+ {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/com.jcraft/jsch.agentproxy.jsch@0.0.9?type=jar",
+ "group" : "com.jcraft",
+ "name" : "jsch.agentproxy.jsch",
+ "version" : "0.0.9",
+ "description" : "a library to use jsch-agent-proxy with JSch",
+ "licenses" : [
+ {
+ "license" : {
+ "name" : "Revised BSD",
+ "url" : "http://www.jcraft.com/jsch/LICENSE.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/com.jcraft/jsch.agentproxy.jsch@0.0.9?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "website",
+ "url" : "http://www.jcraft.com/"
+ }
+ ]
+ },
+ {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/com.jcraft/jsch.agentproxy@0.0.9?type=jar",
+ "group" : "com.jcraft",
+ "name" : "jsch.agentproxy",
+ "version" : "0.0.9",
+ "description" : "a proxy to ssh-agent and Pageant in Java",
+ "licenses" : [
+ {
+ "license" : {
+ "name" : "Revised BSD",
+ "url" : "http://www.jcraft.com/jsch/LICENSE.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/com.jcraft/jsch.agentproxy@0.0.9?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "website",
+ "url" : "http://www.jcraft.com/"
+ }
+ ]
+ },
+ {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/com.jcraft/jsch@0.1.55?type=jar",
+ "group" : "com.jcraft",
+ "name" : "jsch",
+ "version" : "0.1.55",
+ "description" : "JSch is a pure Java implementation of SSH2",
+ "licenses" : [
+ {
+ "license" : {
+ "name" : "Revised BSD",
+ "url" : "http://www.jcraft.com/jsch/LICENSE.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/com.jcraft/jsch@0.1.55?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "website",
+ "url" : "http://www.jcraft.com/"
+ }
+ ]
+ },
+ {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/com.networknt/json-schema-validator@2.0.4?type=jar",
+ "group" : "com.networknt",
+ "name" : "json-schema-validator",
+ "version" : "2.0.4",
+ "description" : "A json schema validator that supports draft v4, v6, v7, v2019-09 and v2020-12",
+ "hashes" : [
+ {
+ "alg" : "MD5",
+ "content" : "e9d8e2cb13ac8c788731f05c6a3a6e8f"
+ },
+ {
+ "alg" : "SHA-1",
+ "content" : "57ec5a08b2fd6dab50a48b84ec42fdcd0436690f"
+ },
+ {
+ "alg" : "SHA-256",
+ "content" : "4856729c8f38ffba02380b0895b7e98a511f6e68a1fb6424782f3e6549dbba07"
+ },
+ {
+ "alg" : "SHA-512",
+ "content" : "8d427c2dcad5ec81ecf8f3e9cb0d561086d22d41c5dda0b48ffbd6f81ff1e6b2d886ede115580f6fa8c25f102eb802efb79224d7f8aae56455d2c019c9733343"
+ },
+ {
+ "alg" : "SHA3-256",
+ "content" : "60b4e1de5308fb203b93c87e221ff8670a372c55004f8583e7ed9985a2843241"
+ },
+ {
+ "alg" : "SHA3-512",
+ "content" : "2bb2e958de2f406905aad9d7798ed0074e936676f74cc9e7588bad52744e6ef808a4a358047bf0273fcaec7007503c1f361ea73709b2726a1a208e291f6d619b"
+ },
+ {
+ "alg" : "SHA-384",
+ "content" : "6c0391ffe0f08dd308e6f092668992b3b6b10be89dec79918cf23529c6800084ecd4ba41dbdde5010b8d340ea840dad9"
+ },
+ {
+ "alg" : "SHA3-384",
+ "content" : "ba9c59890cb53e0475d3f7e645ac6c54e5b42462d582441af794244dca642032ff318c4b719a6865f8c2e86748f20bc1"
+ }
+ ],
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/com.networknt/json-schema-validator@2.0.4?type=jar"
+ },
+ {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/commons-codec/commons-codec@1.22.0?type=jar",
+ "publisher" : "The Apache Software Foundation",
+ "group" : "commons-codec",
+ "name" : "commons-codec",
+ "version" : "1.22.0",
+ "description" : "The Apache Commons Codec component contains encoders and decoders for formats such as Base16, Base32, Base64, digest, and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a collection of phonetic encoding utilities.",
+ "hashes" : [
+ {
+ "alg" : "MD5",
+ "content" : "f14b9146cd553f4e8c5c3f5c9e2be611"
+ },
+ {
+ "alg" : "SHA-1",
+ "content" : "6b3eb4beb7058c2a638f5f17bcb388649fd339dd"
+ },
+ {
+ "alg" : "SHA-256",
+ "content" : "d164fe79f262c32d9b18a0b5b2d317d1c27653d5e98fd2b998c24bf901c72ce4"
+ },
+ {
+ "alg" : "SHA-512",
+ "content" : "5b67a5abf63948323101920fec10140d4370b841cc3c522a2b5e9864782640222c3094442861015494ddbc30bb7ef275722a54455c7c8333084842a26d8755da"
+ },
+ {
+ "alg" : "SHA3-256",
+ "content" : "566a61c3b928e33c5332e4fbb53283411c9f3d88810e84692a72664e711c8c9e"
+ },
+ {
+ "alg" : "SHA3-512",
+ "content" : "d300b773cd81403333626ce99a80a79febcf7e3bc4465c1bbd3e65fc8ad5fe04c07e0a4ab8ca51a61d515c7a095d786c78e8a8b657f7696703a6cc751e9d2421"
+ },
+ {
+ "alg" : "SHA-384",
+ "content" : "1cbfa58c62c4c3fad79f3a808e5d7fca87f4a96d2762f11243011ecf3ea0596638d00163b7fee20bab018a924cafa09f"
+ },
+ {
+ "alg" : "SHA3-384",
+ "content" : "1c0b65c0a1ab43e76dab19e4e0a622840dfcd603924f27bbd09c2261955047f1dd33e5c09a372badaa020f13a0b0124a"
+ }
+ ],
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/commons-codec/commons-codec@1.22.0?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "vcs",
+ "url" : "https://github.com/apache/commons-codec"
+ },
+ {
+ "type" : "issue-tracker",
+ "url" : "https://issues.apache.org/jira/browse/CODEC"
+ },
+ {
+ "type" : "website",
+ "url" : "https://commons.apache.org/proper/commons-codec/"
+ },
+ {
+ "type" : "bom",
+ "url" : "https://repo1.maven.org/maven2/commons-codec/commons-codec/1.22.0/commons-codec-1.22.0-cyclonedx.json"
+ },
+ {
+ "type" : "mailing-list",
+ "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
+ },
+ {
+ "type" : "distribution-intake",
+ "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
+ },
+ {
+ "type" : "build-system",
+ "url" : "https://github.com/apache/commons-codec/actions"
+ }
+ ]
+ },
+ {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/commons-io/commons-io@2.22.0?type=jar",
+ "publisher" : "The Apache Software Foundation",
+ "group" : "commons-io",
+ "name" : "commons-io",
+ "version" : "2.22.0",
+ "description" : "The Apache Commons IO library contains utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more.",
+ "hashes" : [
+ {
+ "alg" : "MD5",
+ "content" : "f91d54bd47c42456b4a5ae62eed85565"
+ },
+ {
+ "alg" : "SHA-1",
+ "content" : "5b1e18bc0ad651ed878029d83f88d9c8189fd51e"
+ },
+ {
+ "alg" : "SHA-256",
+ "content" : "2b9a7b1f726fb86216dbd2c8321eabe0221dbd5b1be81c18e1cb53811b104758"
+ },
+ {
+ "alg" : "SHA-512",
+ "content" : "fca0b4ae70e531bee74413e0b865981aa8b60a9390f789b63997203dae67be65362e95a0c35b9d4b072fbb0810114783415dd22b92fb42e5594b10992f632bc5"
+ },
+ {
+ "alg" : "SHA3-256",
+ "content" : "134157813629f4d9b97044602e1fa2f61c14c3be1f641490b3e06ac941ff3315"
+ },
+ {
+ "alg" : "SHA3-512",
+ "content" : "47832f3b7abe375f3b0ed169996d9776b2a0007b073ab3f06438dce67be9bda45e8aac84737cc639ada4424b13c7614d8c9fcb23779868f7421414777cc0946a"
+ },
+ {
+ "alg" : "SHA-384",
+ "content" : "e1fbf3729c4d2d77b036d90234d9e2ed3fe0c2f5379d333a695c1cb0037f63d288c8b62de05022da0f612da65835fee0"
+ },
+ {
+ "alg" : "SHA3-384",
+ "content" : "02acc6e7f614d8684e7104a52123573152a2e1b651bc6a5be12d4b58861c757d6c56f51105bb97c92309d126059232ea"
+ }
+ ],
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/commons-io/commons-io@2.22.0?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "vcs",
+ "url" : "https://gitbox.apache.org/repos/asf?p=commons-io.git/commons-io"
+ },
+ {
+ "type" : "issue-tracker",
+ "url" : "https://issues.apache.org/jira/browse/IO"
+ },
+ {
+ "type" : "website",
+ "url" : "https://commons.apache.org/proper/commons-io/"
+ },
+ {
+ "type" : "bom",
+ "url" : "https://repo1.maven.org/maven2/commons-io/commons-io/2.22.0/commons-io-2.22.0-cyclonedx.json"
+ },
+ {
+ "type" : "mailing-list",
+ "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
+ },
+ {
+ "type" : "distribution-intake",
+ "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
+ },
+ {
+ "type" : "build-system",
+ "url" : "https://github.com/apache/commons-io/actions"
+ }
+ ]
+ },
+ {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/org.apache.ant/ant-launcher@1.10.17?type=jar",
+ "isExternal" : true,
+ "supplier" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "group" : "org.apache.ant",
+ "name" : "ant-launcher",
+ "version" : "1.10.17",
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/org.apache.ant/ant-launcher@1.10.17?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "vcs",
+ "url" : "https://gitbox.apache.org/repos/asf/ant.git"
+ },
+ {
+ "type" : "issue-tracker",
+ "url" : "https://bz.apache.org/bugzilla/buglist.cgi?product=Ant"
+ },
+ {
+ "type" : "website",
+ "url" : "https://ant.apache.org/"
+ },
+ {
+ "type" : "advisories",
+ "url" : "https://ant.apache.org/security.html#Apache%20Ant%20Security%20Vulnerabilities"
+ },
+ {
+ "type" : "mailing-list",
+ "url" : "https://ant.apache.org/mail.html"
+ },
+ {
+ "type" : "documentation",
+ "url" : "https://ant.apache.org/manual/"
+ },
+ {
+ "type" : "source-distribution",
+ "url" : "https://ant.apache.org/srcdownload.cgi"
+ },
+ {
+ "type" : "distribution",
+ "url" : "https://ant.apache.org/bindownload.cgi"
+ },
+ {
+ "type" : "license",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ },
+ {
+ "type" : "release-notes",
+ "url" : "https://github.com/apache/ant/blob/master/WHATSNEW"
+ },
+ {
+ "type" : "security-contact",
+ "url" : "https://www.apache.org/security/"
+ },
+ {
+ "type" : "rfc-9116",
+ "url" : "https://ant.apache.org/.well-known/security.txt"
+ }
+ ]
+ },
+ {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/org.apache.ant/ant@1.10.17?type=jar",
+ "isExternal" : true,
+ "supplier" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "group" : "org.apache.ant",
+ "name" : "ant",
+ "version" : "1.10.17",
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/org.apache.ant/ant@1.10.17?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "vcs",
+ "url" : "https://gitbox.apache.org/repos/asf/ant.git"
+ },
+ {
+ "type" : "issue-tracker",
+ "url" : "https://bz.apache.org/bugzilla/buglist.cgi?product=Ant"
+ },
+ {
+ "type" : "website",
+ "url" : "https://ant.apache.org/"
+ },
+ {
+ "type" : "advisories",
+ "url" : "https://ant.apache.org/security.html#Apache%20Ant%20Security%20Vulnerabilities"
+ },
+ {
+ "type" : "mailing-list",
+ "url" : "https://ant.apache.org/mail.html"
+ },
+ {
+ "type" : "documentation",
+ "url" : "https://ant.apache.org/manual/"
+ },
+ {
+ "type" : "source-distribution",
+ "url" : "https://ant.apache.org/srcdownload.cgi"
+ },
+ {
+ "type" : "distribution",
+ "url" : "https://ant.apache.org/bindownload.cgi"
+ },
+ {
+ "type" : "license",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ },
+ {
+ "type" : "release-notes",
+ "url" : "https://github.com/apache/ant/blob/master/WHATSNEW"
+ },
+ {
+ "type" : "security-contact",
+ "url" : "https://www.apache.org/security/"
+ },
+ {
+ "type" : "rfc-9116",
+ "url" : "https://ant.apache.org/.well-known/security.txt"
+ }
+ ]
+ },
+ {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/org.apache.commons/commons-codec@1.18.0?type=jar",
+ "group" : "org.apache.commons",
+ "name" : "commons-codec",
+ "version" : "1.18.0",
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/org.apache.commons/commons-codec@1.18.0?type=jar"
+ },
+ {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/org.apache.commons/commons-collections4@4.5.0?type=jar",
+ "publisher" : "The Apache Software Foundation",
+ "group" : "org.apache.commons",
+ "name" : "commons-collections4",
+ "version" : "4.5.0",
+ "description" : "The Apache Commons Collections package contains types that extend and augment the Java Collections Framework.",
+ "hashes" : [
+ {
+ "alg" : "MD5",
+ "content" : "d564105594035b363b193d8ce3c18b98"
+ },
+ {
+ "alg" : "SHA-1",
+ "content" : "e5cf89f0c6e132fc970bd9a465fdcb8dbe94f75a"
+ },
+ {
+ "alg" : "SHA-256",
+ "content" : "00f93263c267be201b8ae521b44a7137271b16688435340bf629db1bac0a5845"
+ },
+ {
+ "alg" : "SHA-512",
+ "content" : "ee43c513ac9dcbd7dd23b5cbb4ea5f65a2e10cdfbb403d080b87e778b3b45062315522297c41eca514a9a946228ad7650f0a572d5b78effb8260dd8084131988"
+ },
+ {
+ "alg" : "SHA3-256",
+ "content" : "614c41bfd8f9c6c1c1e5667c5be45587c3021b780937ad62f54d17051f425086"
+ },
+ {
+ "alg" : "SHA3-512",
+ "content" : "3cfd12ec2d03ed29b682123cedae422a4c6dc459034a7e0ab5f00ccd422cb9a2ec423a08b953119c426569b888157a6d80aa0e0c63debea50c5c54c481e2eff5"
+ },
+ {
+ "alg" : "SHA-384",
+ "content" : "73db8eb3e79569b3fa62aefdce413e6ea250b9853953cb75b9d5ce0f2f35b59b6e86ef708326a608ff20d95bdade8522"
+ },
+ {
+ "alg" : "SHA3-384",
+ "content" : "7a9c035fa846cdcebd4331eb86ed31a67595518299a8bee54597c1eb663aee63214553a561a510b929035266c2a4800b"
+ }
+ ],
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/org.apache.commons/commons-collections4@4.5.0?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "vcs",
+ "url" : "https://gitbox.apache.org/repos/asf?p=commons-collections.git"
+ },
+ {
+ "type" : "issue-tracker",
+ "url" : "https://issues.apache.org/jira/browse/COLLECTIONS"
+ },
+ {
+ "type" : "website",
+ "url" : "https://commons.apache.org/proper/commons-collections/"
+ },
+ {
+ "type" : "bom",
+ "url" : "https://repo1.maven.org/maven2/org/apache/commons/commons-collections4/4.5.0/commons-collections4-4.5.0-cyclonedx.json"
+ },
+ {
+ "type" : "mailing-list",
+ "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
+ },
+ {
+ "type" : "distribution-intake",
+ "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
+ },
+ {
+ "type" : "build-system",
+ "url" : "https://github.com/apache/commons-parent/actions"
+ }
+ ]
+ },
+ {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/org.apache.commons/commons-compress@1.27.1?type=jar",
+ "group" : "org.apache.commons",
+ "name" : "commons-compress",
+ "version" : "1.27.1",
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/org.apache.commons/commons-compress@1.27.1?type=jar"
+ },
+ {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/org.apache.commons/commons-lang3@3.20.0?type=jar",
+ "publisher" : "The Apache Software Foundation",
+ "group" : "org.apache.commons",
+ "name" : "commons-lang3",
+ "version" : "3.20.0",
+ "description" : "Apache Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang. The code is tested using the latest revision of the JDK for supported LTS releases: 8, 11, 17, 21 and 25 currently. See https://github.com/apache/commons-lang/blob/master/.github/workflows/maven.yml Please ensure your build environment is up-to-date and kindly report any build issues.",
+ "hashes" : [
+ {
+ "alg" : "MD5",
+ "content" : "4b29562ded527aa074e1d44f8646dac5"
+ },
+ {
+ "alg" : "SHA-1",
+ "content" : "65897b3e5731220962e659e001904af3c3cbeba9"
+ },
+ {
+ "alg" : "SHA-256",
+ "content" : "69e5c9fa35da7a51a5fd2099dfe56a2d8d32cf233e2f6d770e796146440263f4"
+ },
+ {
+ "alg" : "SHA-512",
+ "content" : "1c72db334ea44f932c35e602b78907865f5bab43e30c871c9be67c8184eaa778f32d7bc3ab525d5921cd28619d3f9babfd483f17de54f007ee07db2e074b0307"
+ },
+ {
+ "alg" : "SHA3-256",
+ "content" : "36e3f71352fa14bc580db45a05b09b063392c6d39acf9e24ffa6a67bbc07a336"
+ },
+ {
+ "alg" : "SHA3-512",
+ "content" : "6ecbc05bb5cd3f7537078b0cf51b0a5f7189dfa60c22e5ec0d6b9e2fd3f7fa7566770b5da87e0c9929f48769933c3e3a473fd5cc7231672fca36ab1fee1f8670"
+ },
+ {
+ "alg" : "SHA-384",
+ "content" : "77dd27c4d5e9372c002bd6878d2cfaaec3cf46dd57d65de63d7f2e09351344531cfa81a537b56628ac6db18adee7e484"
+ },
+ {
+ "alg" : "SHA3-384",
+ "content" : "3456de40eef224b3ad195d2f218dd28eacb0da07607aee7ead94bd8d54bd8311d51c28d4066db4bf8b69a2df48c415f5"
+ }
+ ],
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/org.apache.commons/commons-lang3@3.20.0?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "vcs",
+ "url" : "https://gitbox.apache.org/repos/asf/commons-lang.git"
+ },
+ {
+ "type" : "issue-tracker",
+ "url" : "https://issues.apache.org/jira/browse/LANG"
+ },
+ {
+ "type" : "website",
+ "url" : "https://commons.apache.org/proper/commons-lang/"
+ },
+ {
+ "type" : "bom",
+ "url" : "https://repo1.maven.org/maven2/org/apache/commons/commons-lang3/3.20.0/commons-lang3-3.20.0-cyclonedx.json"
+ },
+ {
+ "type" : "mailing-list",
+ "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
+ },
+ {
+ "type" : "distribution-intake",
+ "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
+ },
+ {
+ "type" : "build-system",
+ "url" : "https://github.com/apache/commons-lang/actions"
+ }
+ ]
+ },
+ {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/org.apache.commons/commons-vfs2@2.2?type=jar",
+ "group" : "org.apache.commons",
+ "name" : "commons-vfs2",
+ "version" : "2.2",
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/org.apache.commons/commons-vfs2@2.2?type=jar"
+ },
+ {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/org.apache.httpcomponents/httpclient@4.5.13?type=jar",
+ "group" : "org.apache.httpcomponents",
+ "name" : "httpclient",
+ "version" : "4.5.13",
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/org.apache.httpcomponents/httpclient@4.5.13?type=jar"
+ },
+ {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/org.apache.ivy/ivy@2.6.0?type=jar",
+ "supplier" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "manufacturer" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "publisher" : "The Apache Software Foundation",
+ "group" : "org.apache.ivy",
+ "name" : "ivy",
+ "version" : "2.6.0",
+ "description" : "Apache Ivy",
+ "hashes" : [
+ {
+ "alg" : "MD5",
+ "content" : "db6f18e5dbe9c39be5d2655a1e354f73"
+ },
+ {
+ "alg" : "SHA-1",
+ "content" : "11a76d2e1d439170c61b47a7a13110a78c6c0824"
+ },
+ {
+ "alg" : "SHA-256",
+ "content" : "7e14fe77306a8cc71197cb3f1681e9e673ccc04254a5ede7e848e2248491ec78"
+ },
+ {
+ "alg" : "SHA-512",
+ "content" : "0e66c0908287112b8a63e468a572ea265767225422bfb17ff3ec9deaa647d2aafbf79b0fa18d021fc3a3e0f8cabc7c07e7c4e613f1d49a538987c49df836dd29"
+ },
+ {
+ "alg" : "SHA3-256",
+ "content" : "be088a0f17e81e2f80d25b85833292a1ce40a0b8c6cb49a8e4cb39a78590d189"
+ },
+ {
+ "alg" : "SHA3-512",
+ "content" : "60c21fa8682b3f80fc62f1f2b10abb5de4dd21baccd85e305e9f14007a14aeb05556c25b1d1ab10107aed356eb4b76996c0a850b02c787e8861215816b34a095"
+ },
+ {
+ "alg" : "SHA-384",
+ "content" : "aeec799ca675640ebd5dba6f91782e1fd338e31be3fbd1665422c1bf87693dd6923a95db9d6526bdcc43aebcaacd6268"
+ },
+ {
+ "alg" : "SHA3-384",
+ "content" : "54ca1ed904a57bc7268c6f1ed34bc5389663d7810967a5d89d109da39e7c7d609c299353b8a3be8df98fd3f050e42c74"
+ }
+ ],
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/org.apache.ivy/ivy@2.6.0?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "vcs",
+ "url" : "https://gitbox.apache.org/repos/asf/ant-ivy.git"
+ },
+ {
+ "type" : "issue-tracker",
+ "url" : "http://issues.apache.org/jira/browse/IVY"
+ },
+ {
+ "type" : "website",
+ "url" : "https://ant.apache.org/ivy/"
+ },
+ {
+ "type" : "advisories",
+ "url" : "https://ant.apache.org/ivy/security.html"
+ },
+ {
+ "type" : "bom",
+ "url" : "https://repo1.maven.org/maven2/org/apache/ivy/ivy/2.6.0/ivy-2.6.0.cdx.json"
+ },
+ {
+ "type" : "mailing-list",
+ "url" : "https://ant.apache.org/ivy/mailing-lists.html"
+ },
+ {
+ "type" : "source-distribution",
+ "url" : "https://ant.apache.org/ivy/download.cgi"
+ },
+ {
+ "type" : "distribution",
+ "url" : "https://ant.apache.org/ivy/download.cgi"
+ },
+ {
+ "type" : "license",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ },
+ {
+ "type" : "build-system",
+ "url" : "https://ci-builds.apache.org/job/Ant/job/Ivy/"
+ },
+ {
+ "type" : "security-contact",
+ "url" : "https://www.apache.org/security/"
+ }
+ ]
+ },
+ {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/org.bouncycastle/bcpg-jdk15on@1.70?type=jar",
+ "group" : "org.bouncycastle",
+ "name" : "bcpg-jdk15on",
+ "version" : "1.70",
+ "licenses" : [
+ {
+ "license" : {
+ "name" : "Bouncy Castle Licence",
+ "url" : "https://www.bouncycastle.org/licence.html"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/org.bouncycastle/bcpg-jdk15on@1.70?type=jar"
+ },
+ {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/org.bouncycastle/bcprov-jdk15on@1.70?type=jar",
+ "group" : "org.bouncycastle",
+ "name" : "bcprov-jdk15on",
+ "version" : "1.70",
+ "licenses" : [
+ {
+ "license" : {
+ "name" : "Bouncy Castle Licence",
+ "url" : "https://www.bouncycastle.org/licence.html"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/org.bouncycastle/bcprov-jdk15on@1.70?type=jar"
+ },
+ {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/org.codehaus.woodstox/stax2-api@4.3.0?type=jar",
+ "group" : "org.codehaus.woodstox",
+ "name" : "stax2-api",
+ "version" : "4.3.0",
+ "description" : "Stax2 API is an extension to basic Stax 1.0 API that adds significant new functionality, such as full-featured bi-direction validation interface and high-performance Typed Access API.",
+ "hashes" : [
+ {
+ "alg" : "MD5",
+ "content" : "6eec6c1cb7f63d8a8098cc5569a47e99"
+ },
+ {
+ "alg" : "SHA-1",
+ "content" : "59251773c44122e8d1366f68884e29dd784e141b"
+ },
+ {
+ "alg" : "SHA-256",
+ "content" : "7c805f36129ea9fa42b696093b7ae1eb20bb6ccec65c8280d6f33db5609ca5e1"
+ },
+ {
+ "alg" : "SHA-512",
+ "content" : "4d1bf5cb3a803423c5420050c245227b944acb4ced29e8095e470bc3a742d6a057c484fa1d531b58933ed8f81d52d5bbfc8406acc4241f6e4ec4c5116fe30d53"
+ },
+ {
+ "alg" : "SHA3-256",
+ "content" : "5a3bc0bf1b00df535d572ae16c62817788bea0f7d02a8c430fadd4cf4df95f5e"
+ },
+ {
+ "alg" : "SHA3-512",
+ "content" : "5d4e4618b22accb1fee19d6d2702dcd0538df7f9e3b7aa8590e7554811770bb317d4bab1eecebc4b31df49a349c68e746256b3e9cca5fbea6f102df411c0e678"
+ },
+ {
+ "alg" : "SHA-384",
+ "content" : "664bf1044e8c9e80083d02d2ccdba3c3953a515594b6a262baef76d1cf3790da9d71eb853806c27c94721e65983d72a3"
+ },
+ {
+ "alg" : "SHA3-384",
+ "content" : "298f2dcfffb3fe28229452770a969b2138008a23c508599a13303f48f21d3458c61ad19df53a20d6447c0f8ef56e4216"
+ }
+ ],
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "BSD-2-Clause",
+ "url" : "http://www.opensource.org/licenses/bsd-license.php"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/org.codehaus.woodstox/stax2-api@4.3.0?type=jar"
+ },
+ {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/org.cyclonedx/cyclonedx-core-java@13.0.0?type=jar",
+ "publisher" : "OWASP Foundation",
+ "group" : "org.cyclonedx",
+ "name" : "cyclonedx-core-java",
+ "version" : "13.0.0",
+ "description" : "The CycloneDX core module provides a model representation of the BOM along with utilities to assist in creating, parsing, and validating BOMs.",
+ "hashes" : [
+ {
+ "alg" : "MD5",
+ "content" : "1fe4b7cc2f01f52aef5544d73be07533"
+ },
+ {
+ "alg" : "SHA-1",
+ "content" : "d29aec05c781badba0ad5a589c37a1ff8b7fb583"
+ },
+ {
+ "alg" : "SHA-256",
+ "content" : "8c2bc1cccb4e2c6c0bcc2b0bacc4da0a110aad2a05791b750caf281e7769ce82"
+ },
+ {
+ "alg" : "SHA-512",
+ "content" : "92cd61fe5a21044d60fdf87e5a14c1655065601370e7c739db5ac5f803bd5282061c86ab6f38146d690309f8058cf09381806ad09e899a85dcf417e1d3b366c5"
+ },
+ {
+ "alg" : "SHA3-256",
+ "content" : "4e2b3a5800ef8cdf7b50d926d4c18261ad54074173b1bf02079ea83ab1d1b3a2"
+ },
+ {
+ "alg" : "SHA3-512",
+ "content" : "b63d4b54f84ec0071bd7263fbc190017fa28f15db7bee318fea9588d6b4063a408a7177410cfaa0d0fa9dbb34a5e0fb1ef5d63195f66014c64495cf5f46590db"
+ },
+ {
+ "alg" : "SHA-384",
+ "content" : "81d28eeb136fd1751a4ba4ebbe20025e528b1c329804c164e540fd9ddd7da09c5752428a18120fdbccfd9d6f67750292"
+ },
+ {
+ "alg" : "SHA3-384",
+ "content" : "dce70366596f8075dc6530a3e038b3bb43427b6ff6928483901309ddefd3840927da18e9f65176201187e4c420cbed7e"
+ }
+ ],
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/org.cyclonedx/cyclonedx-core-java@13.0.0?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "vcs",
+ "url" : "https://github.com/CycloneDX/cyclonedx-core-java.git"
+ },
+ {
+ "type" : "issue-tracker",
+ "url" : "https://github.com/CycloneDX/cyclonedx-core-java/issues"
+ },
+ {
+ "type" : "website",
+ "url" : "https://github.com/CycloneDX/cyclonedx-core-java"
+ },
+ {
+ "type" : "distribution-intake",
+ "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
+ },
+ {
+ "type" : "build-system",
+ "url" : "https://github.com/CycloneDX/cyclonedx-core-java/actions"
+ }
+ ]
+ },
+ {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/oro/oro@2.0.8?type=jar",
+ "group" : "oro",
+ "name" : "oro",
+ "version" : "2.0.8",
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/oro/oro@2.0.8?type=jar"
+ }
+ ],
+ "dependencies" : [
+ {
+ "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.22?type=jar",
+ "dependsOn" : [ ]
+ },
+ {
+ "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.22.1?type=jar",
+ "dependsOn" : [
+ "pkg:maven/ch.randelshofer/fastdoubleparser@2.0.1?type=jar"
+ ]
+ },
+ {
+ "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.22.1?type=jar",
+ "dependsOn" : [
+ "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.22?type=jar",
+ "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.22.1?type=jar"
+ ]
+ },
+ {
+ "ref" : "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.22.1?type=jar",
+ "dependsOn" : [
+ "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.22?type=jar",
+ "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.22.1?type=jar",
+ "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.22.1?type=jar",
+ "pkg:maven/com.fasterxml.woodstox/woodstox-core@7.2.0?type=jar",
+ "pkg:maven/org.codehaus.woodstox/stax2-api@4.3.0?type=jar"
+ ]
+ },
+ {
+ "ref" : "pkg:maven/com.github.package-url/packageurl-java@1.5.0?type=jar",
+ "dependsOn" : [ ]
+ },
+ {
+ "ref" : "pkg:maven/commons-codec/commons-codec@1.22.0?type=jar",
+ "dependsOn" : [ ]
+ },
+ {
+ "ref" : "pkg:maven/commons-io/commons-io@2.22.0?type=jar",
+ "dependsOn" : [ ]
+ },
+ {
+ "ref" : "pkg:maven/org.apache.ant/ant-cyclonedx@0.2alpha?type=jar",
+ "dependsOn" : [
+ "pkg:maven/org.apache.ant/ant-launcher@1.10.17?type=jar",
+ "pkg:maven/org.apache.ant/ant@1.10.17?type=jar",
+ "pkg:maven/org.cyclonedx/cyclonedx-core-java@13.0.0?type=jar"
+ ]
+ },
+ {
+ "ref" : "pkg:maven/org.apache.ant/ant-launcher@1.10.17?type=jar",
+ "dependsOn" : [ ]
+ },
+ {
+ "ref" : "pkg:maven/org.apache.ant/ant@1.10.17?type=jar",
+ "dependsOn" : [
+ "pkg:maven/org.apache.ant/ant-launcher@1.10.17?type=jar"
+ ]
+ },
+ {
+ "ref" : "pkg:maven/org.apache.commons/commons-collections4@4.5.0?type=jar",
+ "dependsOn" : [
+ "pkg:maven/commons-codec/commons-codec@1.22.0?type=jar"
+ ]
+ },
+ {
+ "ref" : "pkg:maven/org.apache.commons/commons-lang3@3.20.0?type=jar",
+ "dependsOn" : [ ]
+ },
+ {
+ "ref" : "pkg:maven/org.apache.ivy/ivy@2.6.0?type=jar",
+ "dependsOn" : [
+ "pkg:maven/com.jcraft/jsch.agentproxy.connector-factory@0.0.9?type=jar",
+ "pkg:maven/com.jcraft/jsch.agentproxy.jsch@0.0.9?type=jar",
+ "pkg:maven/com.jcraft/jsch.agentproxy@0.0.9?type=jar",
+ "pkg:maven/com.jcraft/jsch@0.1.55?type=jar",
+ "pkg:maven/org.apache.ant/ant@1.10.17?type=jar",
+ "pkg:maven/org.apache.commons/commons-codec@1.18.0?type=jar",
+ "pkg:maven/org.apache.commons/commons-compress@1.27.1?type=jar",
+ "pkg:maven/org.apache.commons/commons-vfs2@2.2?type=jar",
+ "pkg:maven/org.apache.httpcomponents/httpclient@4.5.13?type=jar",
+ "pkg:maven/org.bouncycastle/bcpg-jdk15on@1.70?type=jar",
+ "pkg:maven/org.bouncycastle/bcprov-jdk15on@1.70?type=jar",
+ "pkg:maven/oro/oro@2.0.8?type=jar"
+ ]
+ },
+ {
+ "ref" : "pkg:maven/org.codehaus.woodstox/stax2-api@4.3.0?type=jar",
+ "dependsOn" : [ ]
+ },
+ {
+ "ref" : "pkg:maven/org.cyclonedx/cyclonedx-core-java@13.0.0?type=jar",
+ "dependsOn" : [
+ "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.22.1?type=jar",
+ "pkg:maven/com.github.package-url/packageurl-java@1.5.0?type=jar",
+ "pkg:maven/com.networknt/json-schema-validator@2.0.4?type=jar",
+ "pkg:maven/commons-codec/commons-codec@1.22.0?type=jar",
+ "pkg:maven/commons-io/commons-io@2.22.0?type=jar",
+ "pkg:maven/org.apache.commons/commons-collections4@4.5.0?type=jar",
+ "pkg:maven/org.apache.commons/commons-lang3@3.20.0?type=jar"
+ ]
+ }
+ ]
+}
\ No newline at end of file
diff --git a/example/ant-cyclonedx-0.2alpha.ivy.cdx.json b/example/ant-cyclonedx-0.2alpha.ivy.cdx.json
new file mode 100644
index 0000000..d4b57ff
--- /dev/null
+++ b/example/ant-cyclonedx-0.2alpha.ivy.cdx.json
@@ -0,0 +1,1549 @@
+{
+ "bomFormat" : "CycloneDX",
+ "specVersion" : "1.7",
+ "serialNumber" : "urn:uuid:2ef84f46-64af-4fb9-b3da-70f4fcb7acd3",
+ "version" : 1,
+ "metadata" : {
+ "timestamp" : "2026-08-07T14:13:23Z",
+ "lifecycles" : [
+ {
+ "phase" : "build"
+ }
+ ],
+ "tools" : {
+ "components" : [
+ {
+ "type" : "library",
+ "supplier" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "manufacturer" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "publisher" : "The Apache Software Foundation",
+ "group" : "org.apache.ant",
+ "name" : "ant-cyclonedx",
+ "version" : "0.2alpha",
+ "description" : "Apache CycloneDX Antlib",
+ "hashes" : [
+ {
+ "alg" : "MD5",
+ "content" : "d325f6c7629142693fd8b9012f4ad22c"
+ },
+ {
+ "alg" : "SHA-1",
+ "content" : "e96723969081ffd5efbaa87c4378b7545f4fabe2"
+ },
+ {
+ "alg" : "SHA-256",
+ "content" : "209f8ba54603780c2f0180494961c33439381dc0e35d3dbf85d55bd4dba93c81"
+ },
+ {
+ "alg" : "SHA-512",
+ "content" : "5e40d417a70385d1bf492e24bd0e82d3bf99402a404e5a71634c1a5e0ba4d19ec0a4ff21b87e31ce42a0960af51b091dcfd44b2b9e2ceffb07e7f91a3403bd96"
+ },
+ {
+ "alg" : "SHA3-256",
+ "content" : "ff1bdad8b6fda462fd3a54110c7f01007d4bd99a99404a20abea045a2f21f6bd"
+ },
+ {
+ "alg" : "SHA3-512",
+ "content" : "69067b921a6e07932e247dcddbf7f67b5f8e9aee4e9f603b6fa466f57da3b411e2639e932ef940a66666e0fde7ba16f2b84d7348ebacced9b573d5be274455ff"
+ },
+ {
+ "alg" : "SHA-384",
+ "content" : "ea6d1749e734eb73788e2c427a3cc98af197fc141228d79fda7e3e440a0bb9d3724cc8f3e318368e0ec922b187cb7e21"
+ },
+ {
+ "alg" : "SHA3-384",
+ "content" : "8664a9d92721b1c7104cd4a6a9e4f785ffcd225bfabb6a911a3f4780e749acfc7afbc5ae3b873709e057e0e9dfae7b07"
+ }
+ ],
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/org.apache.ant/ant-cyclonedx@0.2alpha?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "vcs",
+ "url" : "https://gitbox.apache.org/repos/asf/ant-antlibs-cyclonedx.git"
+ },
+ {
+ "type" : "issue-tracker",
+ "url" : "https://bz.apache.org/bugzilla/buglist.cgi?component=CycloneDX%20Antlib&product=Ant"
+ },
+ {
+ "type" : "website",
+ "url" : "https://ant.apache.org/antlibs/cyclonedx/"
+ },
+ {
+ "type" : "mailing-list",
+ "url" : "https://ant.apache.org/mail.html"
+ },
+ {
+ "type" : "documentation",
+ "url" : "https://ant.apache.org/antlibs/cyclonedx/manual/"
+ },
+ {
+ "type" : "source-distribution",
+ "url" : "https://ant.apache.org/antlibs/srcdownload.cgi"
+ },
+ {
+ "type" : "distribution",
+ "url" : "https://ant.apache.org/antlibs/bindownload.cgi"
+ },
+ {
+ "type" : "license",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ },
+ {
+ "type" : "build-system",
+ "url" : "https://ci-builds.apache.org/job/Ant/job/CycloneDX%20Antlib/"
+ },
+ {
+ "type" : "security-contact",
+ "url" : "https://www.apache.org/security/"
+ },
+ {
+ "type" : "rfc-9116",
+ "url" : "https://ant.apache.org/.well-known/security.txt"
+ }
+ ]
+ }
+ ]
+ },
+ "component" : {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/org.apache.ant/ant-cyclonedx@0.2alpha?type=jar",
+ "supplier" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "manufacturer" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "publisher" : "The Apache Software Foundation",
+ "group" : "org.apache.ant",
+ "name" : "ant-cyclonedx",
+ "version" : "0.2alpha",
+ "description" : "Apache CycloneDX Antlib",
+ "hashes" : [
+ {
+ "alg" : "MD5",
+ "content" : "d325f6c7629142693fd8b9012f4ad22c"
+ },
+ {
+ "alg" : "SHA-1",
+ "content" : "e96723969081ffd5efbaa87c4378b7545f4fabe2"
+ },
+ {
+ "alg" : "SHA-256",
+ "content" : "209f8ba54603780c2f0180494961c33439381dc0e35d3dbf85d55bd4dba93c81"
+ },
+ {
+ "alg" : "SHA-512",
+ "content" : "5e40d417a70385d1bf492e24bd0e82d3bf99402a404e5a71634c1a5e0ba4d19ec0a4ff21b87e31ce42a0960af51b091dcfd44b2b9e2ceffb07e7f91a3403bd96"
+ },
+ {
+ "alg" : "SHA3-256",
+ "content" : "ff1bdad8b6fda462fd3a54110c7f01007d4bd99a99404a20abea045a2f21f6bd"
+ },
+ {
+ "alg" : "SHA3-512",
+ "content" : "69067b921a6e07932e247dcddbf7f67b5f8e9aee4e9f603b6fa466f57da3b411e2639e932ef940a66666e0fde7ba16f2b84d7348ebacced9b573d5be274455ff"
+ },
+ {
+ "alg" : "SHA-384",
+ "content" : "ea6d1749e734eb73788e2c427a3cc98af197fc141228d79fda7e3e440a0bb9d3724cc8f3e318368e0ec922b187cb7e21"
+ },
+ {
+ "alg" : "SHA3-384",
+ "content" : "8664a9d92721b1c7104cd4a6a9e4f785ffcd225bfabb6a911a3f4780e749acfc7afbc5ae3b873709e057e0e9dfae7b07"
+ }
+ ],
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/org.apache.ant/ant-cyclonedx@0.2alpha?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "vcs",
+ "url" : "https://gitbox.apache.org/repos/asf/ant-antlibs-cyclonedx.git"
+ },
+ {
+ "type" : "issue-tracker",
+ "url" : "https://bz.apache.org/bugzilla/buglist.cgi?component=CycloneDX%20Antlib&product=Ant"
+ },
+ {
+ "type" : "website",
+ "url" : "https://ant.apache.org/antlibs/cyclonedx/"
+ },
+ {
+ "type" : "mailing-list",
+ "url" : "https://ant.apache.org/mail.html"
+ },
+ {
+ "type" : "documentation",
+ "url" : "https://ant.apache.org/antlibs/cyclonedx/manual/"
+ },
+ {
+ "type" : "source-distribution",
+ "url" : "https://ant.apache.org/antlibs/srcdownload.cgi"
+ },
+ {
+ "type" : "distribution",
+ "url" : "https://ant.apache.org/antlibs/bindownload.cgi"
+ },
+ {
+ "type" : "license",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ },
+ {
+ "type" : "security-contact",
+ "url" : "https://www.apache.org/security/"
+ },
+ {
+ "type" : "rfc-9116",
+ "url" : "https://ant.apache.org/.well-known/security.txt"
+ }
+ ]
+ },
+ "manufacturer" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "supplier" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ]
+ },
+ "components" : [
+ {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/com.ethlo.time/itu@1.14.0?type=jar",
+ "group" : "com.ethlo.time",
+ "name" : "itu",
+ "version" : "1.14.0",
+ "description" : "Extremely fast date-time parser and formatter - RFC 3339 (ISO 8601 profile) and W3C format",
+ "hashes" : [
+ {
+ "alg" : "MD5",
+ "content" : "e537d0a2bc8066726f7e4654c253cf84"
+ },
+ {
+ "alg" : "SHA-1",
+ "content" : "c0f9f9d4f4404787e992ab3af5ae95f2fad79e47"
+ },
+ {
+ "alg" : "SHA-256",
+ "content" : "5cf40ab0cc77828ab2b875b1f3ecd71c8295d7721933476abc2e08fddcea164a"
+ },
+ {
+ "alg" : "SHA-512",
+ "content" : "aa69a6af3a7123eb41425bbaf6834e16dc3323172709e2338b8a21b970fd21333d996515f42da4aa0225251e30542ad7d9c8332bdf7d62ed96b42fadc8a1520d"
+ },
+ {
+ "alg" : "SHA3-256",
+ "content" : "f18d275dd2a0038a82432e06bb9f396151310136e3a316a869ef54d7fae834c5"
+ },
+ {
+ "alg" : "SHA3-512",
+ "content" : "8a51b3c6144eb2e363f8804da316d9e3dc246be07af4c0bb55e9540c2a0deb5eb9beb825120d3d203e3a561fd8a605ad64f3af5d233725e1b9c7e06232deaea9"
+ },
+ {
+ "alg" : "SHA-384",
+ "content" : "8d201334c39b68d13d66fc9df2440fa848b055a9b901e1c630ff66a47e70c8816484d106ae18c642d4257034f33e55f2"
+ },
+ {
+ "alg" : "SHA3-384",
+ "content" : "033715e1422cb3f22c1073bc7b058fd16d1436c6314f49f13480d81c86b656cb77a4d852cbba35542bc8f2ce49244ba6"
+ }
+ ],
+ "licenses" : [
+ {
+ "license" : {
+ "name" : "Apache License, Version 2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/com.ethlo.time/itu@1.14.0?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "website",
+ "url" : "https://github.com/ethlo/itu"
+ }
+ ]
+ },
+ {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.22?type=jar",
+ "group" : "com.fasterxml.jackson.core",
+ "name" : "jackson-annotations",
+ "version" : "2.22",
+ "description" : "Core annotations used for value types, used by Jackson data binding package.",
+ "hashes" : [
+ {
+ "alg" : "MD5",
+ "content" : "04c11c456fd1e21b9a21c25c665109cc"
+ },
+ {
+ "alg" : "SHA-1",
+ "content" : "15c67f9498d6934cff9510fc70c5a12e52290457"
+ },
+ {
+ "alg" : "SHA-256",
+ "content" : "21ddb598807d3a51a876704eb979d9296e1c6a6f47ab1826ff88c6d6a127a2d0"
+ },
+ {
+ "alg" : "SHA-512",
+ "content" : "63b597ec02b4e31c57266d9b96f05f301f217bc12ffb7ba046a5658d2829728930a559947b98eb6c3cc448413a96b4939427aa669ae1e2dc3597ab5d5d287f9f"
+ },
+ {
+ "alg" : "SHA3-256",
+ "content" : "6bfc7b4ba70779fe5f0b1e2af585abab982f7929a68beb2c0e62ea2e2a321de0"
+ },
+ {
+ "alg" : "SHA3-512",
+ "content" : "3f1bdfa32f7df76ac14cd2a3e689b65066fa0a6a760a9b8b1121773bb1b043a44587d4148c67f361dc6c630e6b31f29b2691a57d47caabea5ca23ae44af34a5e"
+ },
+ {
+ "alg" : "SHA-384",
+ "content" : "35b6fe651afeed54d1e6f7a39ac6cf6fdbafacdf2e3bdff7b29b965ccb79a0c53342a56bf0ecea4d6c4c4651b1d6aa19"
+ },
+ {
+ "alg" : "SHA3-384",
+ "content" : "72267dc54c4175c42ca0dd430a87b12cc68619a8777be2048e1d2f0747db884a568b5c346c77c9c8c0714ab96018f5f7"
+ }
+ ],
+ "licenses" : [
+ {
+ "license" : {
+ "name" : "The Apache Software License, Version 2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.22?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "website",
+ "url" : "https://github.com/FasterXML/jackson"
+ }
+ ]
+ },
+ {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.22.1?type=jar",
+ "group" : "com.fasterxml.jackson.core",
+ "name" : "jackson-core",
+ "version" : "2.22.1",
+ "description" : "Core Jackson processing abstractions (aka Streaming API), implementation for JSON",
+ "hashes" : [
+ {
+ "alg" : "MD5",
+ "content" : "09e866bcd73613665ef49f5086704fb1"
+ },
+ {
+ "alg" : "SHA-1",
+ "content" : "da7ffb60088d7e8f37ecdd3b617520971cc7b9bf"
+ },
+ {
+ "alg" : "SHA-256",
+ "content" : "941ff029bcdb93e83d209ce516c1a7fb8bbac07d0a2fa122f5bf194b2cd7b4f4"
+ },
+ {
+ "alg" : "SHA-512",
+ "content" : "d4485af4465f561034df86686d672835b0272b6200efb0af55ea71e62d3faf09e9f90e42df4da64650795cf00519fc553f892bf6179330a3e74750110a785efb"
+ },
+ {
+ "alg" : "SHA3-256",
+ "content" : "48fc6e17c36e14b8bae387b92248a43da12293b68a61dd2517c708dbb24ed010"
+ },
+ {
+ "alg" : "SHA3-512",
+ "content" : "f72ef2d2a1012be8b1c972323527a396bbaea0b543bd79fac6d380f8e4855c6d98190b067ccec92ece9ed8e1ece1e6046b1d93f9c85944fcb7133fe0b4dc60e4"
+ },
+ {
+ "alg" : "SHA-384",
+ "content" : "faaf92de6e93475fdbb7d56221fd35d8435ac4f87dddfd334ed05c4318b8b72220010effd08bf8dd156420771b294eb4"
+ },
+ {
+ "alg" : "SHA3-384",
+ "content" : "5c432f1a2f3369485c4ed7d3c3c4499342c23efd0d7a574b73421345df9762bd27643cc469b01632400691f3c09b5d8b"
+ }
+ ],
+ "licenses" : [
+ {
+ "license" : {
+ "name" : "The Apache Software License, Version 2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.22.1?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "website",
+ "url" : "https://github.com/FasterXML/jackson-core"
+ }
+ ]
+ },
+ {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.22.1?type=jar",
+ "group" : "com.fasterxml.jackson.core",
+ "name" : "jackson-databind",
+ "version" : "2.22.1",
+ "description" : "General data-binding functionality for Jackson: works on core streaming API",
+ "hashes" : [
+ {
+ "alg" : "MD5",
+ "content" : "df2dcf8d581836d48aae7387311cba93"
+ },
+ {
+ "alg" : "SHA-1",
+ "content" : "9e2fb91831cce9cb9262909cd76647508949f232"
+ },
+ {
+ "alg" : "SHA-256",
+ "content" : "7dcd7e53bec1f56c7ad278bd1ca0840bebcc595d61ce44d6a8439abb75b965b2"
+ },
+ {
+ "alg" : "SHA-512",
+ "content" : "d8a905e80e6d7dd2026b16b075dde2d409425b61417120980ea07b261c6bf98d5c065053f1c063b60da30b4324157778ec4eb859945fb8543176e55a2d3b8db8"
+ },
+ {
+ "alg" : "SHA3-256",
+ "content" : "ab1df340c8e99a3ea6f485b9e3bf0e1cb7b57810b09e9161c8eee38eb8db3e47"
+ },
+ {
+ "alg" : "SHA3-512",
+ "content" : "dc3f3df098898dc6bf71fcef0ca232a592f59fb465161b95b03a28eebc9539bede1db83bacaf14dc57328feffc7a4637b911a09356fa4330d93f52131ac7254e"
+ },
+ {
+ "alg" : "SHA-384",
+ "content" : "b45efa1187b756bdfa7e0c6bc2eda85fcf13d879b4bf370f06ef95325c13b629f763a8027dbc34dab7c6a549bb33e945"
+ },
+ {
+ "alg" : "SHA3-384",
+ "content" : "7eeb7d7ea5434fdede4b0d256955d0ebf93a11ad89efcc2a3551d649bf197f6aa6c3dd60247805a13270fd8ed0a98ae8"
+ }
+ ],
+ "licenses" : [
+ {
+ "license" : {
+ "name" : "The Apache Software License, Version 2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.22.1?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "website",
+ "url" : "https://github.com/FasterXML/jackson"
+ }
+ ]
+ },
+ {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.22.1?type=jar",
+ "group" : "com.fasterxml.jackson.dataformat",
+ "name" : "jackson-dataformat-xml",
+ "version" : "2.22.1",
+ "description" : "Data format extension for Jackson to offer alternative support for serializing POJOs as XML and deserializing XML as POJOs.",
+ "hashes" : [
+ {
+ "alg" : "MD5",
+ "content" : "dc9e8f9090ad8aab73dc3e850a77586b"
+ },
+ {
+ "alg" : "SHA-1",
+ "content" : "52e415c14654d65bc80cc4942585c5a25423f3c2"
+ },
+ {
+ "alg" : "SHA-256",
+ "content" : "243a9c67b3d7c40d13719daf0a2838942d3e969feafd6b2cae24eeb02c1d75e2"
+ },
+ {
+ "alg" : "SHA-512",
+ "content" : "c8135e28efac33cf9950e6a0b58443df28501f17fbf5426a8ce407a6c5ff53de8e14c1cb1b20a297887a5915fe52e2ef9414946a4234a4b4173133a26be06832"
+ },
+ {
+ "alg" : "SHA3-256",
+ "content" : "7246efd028dcd9a3f10195bc10e7ca984a3e4a779050d74d10c42de3ccb57a2b"
+ },
+ {
+ "alg" : "SHA3-512",
+ "content" : "f376c49689c609dc890634c7c3ffcd4b0eb670893ba900ca7392b7ed841f28010283815155458532d1845dc0432c975b3b3c978895888d5a5c9ddb43714b9076"
+ },
+ {
+ "alg" : "SHA-384",
+ "content" : "6ad9617cb4bad3701f76f098d84ebfbac6c86e7e6b780fea49a944e719b0d5667e90063dde614e4ed7bee8912d20599a"
+ },
+ {
+ "alg" : "SHA3-384",
+ "content" : "701a1eda9821af584e8a9ebc998637e7a21e10e6d370f99a0979a5c633605e10a0d13e8408f965b020d12fbba9341915"
+ }
+ ],
+ "licenses" : [
+ {
+ "license" : {
+ "name" : "The Apache Software License, Version 2.0",
+ "url" : "http://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.22.1?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "website",
+ "url" : "https://github.com/FasterXML/jackson-dataformat-xml"
+ }
+ ]
+ },
+ {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.22.1?type=jar",
+ "group" : "com.fasterxml.jackson.dataformat",
+ "name" : "jackson-dataformat-yaml",
+ "version" : "2.22.1",
+ "description" : "Support for reading and writing YAML-encoded data via Jackson abstractions.",
+ "hashes" : [
+ {
+ "alg" : "MD5",
+ "content" : "8348dc064a58fb2ae67371764b634812"
+ },
+ {
+ "alg" : "SHA-1",
+ "content" : "af5fde2414e4a8d2617e7890f7068c26b5b66a33"
+ },
+ {
+ "alg" : "SHA-256",
+ "content" : "cc3a0e540791a9a1cbcd7584767b84572ffda0b72823856558f47dea69ae8ed1"
+ },
+ {
+ "alg" : "SHA-512",
+ "content" : "12398c493aa3b54716813a6297b72104fa52ab324bae54512e41a1285ac756fcbb800084c088f8e9d3aceae2e698ca164bc547421d5fe2fb62ed2dadf1d3d000"
+ },
+ {
+ "alg" : "SHA3-256",
+ "content" : "2d33856e0e0aa27571950d57227a66ab78f22c5cecf7c07afc3ad4dbe3b4b4ae"
+ },
+ {
+ "alg" : "SHA3-512",
+ "content" : "47bdf965089a1949286216aed3b286d8990a3b9169dacb15f0a6f36df07ee397d0ecbcc1294228479068cdbff4b1d8a11718ad5efa744952c34eb092e62cf644"
+ },
+ {
+ "alg" : "SHA-384",
+ "content" : "2f20d92e2fc1932406055a055e0602c9d0a96d7c19b75aeb7dca7c19b30e65bd126677a9bb855ef493be8f4be1feaf62"
+ },
+ {
+ "alg" : "SHA3-384",
+ "content" : "e0bc342c2bcd8d91b674657a28e0a762d68232729d7a53d0c04ba63807a1f6bc458bfb64c422408f0cb701ce753ff7cd"
+ }
+ ],
+ "licenses" : [
+ {
+ "license" : {
+ "name" : "The Apache Software License, Version 2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.22.1?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "website",
+ "url" : "https://github.com/FasterXML/jackson-dataformats-text"
+ }
+ ]
+ },
+ {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/com.fasterxml.woodstox/woodstox-core@7.2.0?type=jar",
+ "group" : "com.fasterxml.woodstox",
+ "name" : "woodstox-core",
+ "version" : "7.2.0",
+ "description" : "Woodstox is a high-performance XML processor that implements Stax (JSR-173), SAX2 and Stax2 APIs",
+ "hashes" : [
+ {
+ "alg" : "MD5",
+ "content" : "d32a36b91bfa2ba1f69e9671ce2fba6a"
+ },
+ {
+ "alg" : "SHA-1",
+ "content" : "ec9c97f566f812e249a7aba6c76815369ac00864"
+ },
+ {
+ "alg" : "SHA-256",
+ "content" : "689f5be95f9bb369d6c0e8db99a99f930b0c48d6a69b46151782b5816c7ea820"
+ },
+ {
+ "alg" : "SHA-512",
+ "content" : "f3baa0b19322e22ef0b5bb6739c1497167938901450e141b2e8769f0acf7ec2e5498349db007f6958de7eee00b2a9b36b0a1c09fa7877f074cb8b5ad2485559d"
+ },
+ {
+ "alg" : "SHA3-256",
+ "content" : "5f57a8d1f1a9cd8920c94436f53bcbca6164a221e793e5ef5db2b8861f9b113b"
+ },
+ {
+ "alg" : "SHA3-512",
+ "content" : "960c8d80a53fdbb0423432d018723f805fcdd674a49d2aef7a58f181bcc53d7a7adf2668ab51300e8789d9ffd4e98267cbceb34fcf03195a779b2faacbe461a8"
+ },
+ {
+ "alg" : "SHA-384",
+ "content" : "d3f9eee2aa2ff88fa3efd0d52d4a0fa8cf79707d36f5a9dacc2852df80584300a32e5d54b77af3a7bf29e35b84413e18"
+ },
+ {
+ "alg" : "SHA3-384",
+ "content" : "f4862abab750ed951776c465833ecf3fc8747dd2bf4f6a3108b5d4ff1e6261a24cd4708e889154848d7bad55099c6c42"
+ }
+ ],
+ "licenses" : [
+ {
+ "license" : {
+ "name" : "The Apache License, Version 2.0",
+ "url" : "http://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/com.fasterxml.woodstox/woodstox-core@7.2.0?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "website",
+ "url" : "https://github.com/FasterXML/woodstox"
+ }
+ ]
+ },
+ {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/com.github.package-url/packageurl-java@1.5.0?type=jar",
+ "group" : "com.github.package-url",
+ "name" : "packageurl-java",
+ "version" : "1.5.0",
+ "description" : "The official Java implementation of the PackageURL specification. PackageURL (purl) is a minimal specification for describing a package via a \"mostly universal\" URL.",
+ "hashes" : [
+ {
+ "alg" : "MD5",
+ "content" : "90856d8bb5b17e08fdf03b6a2f93b81c"
+ },
+ {
+ "alg" : "SHA-1",
+ "content" : "e6bf530f52feab911f4032604ca0b8216f7ff337"
+ },
+ {
+ "alg" : "SHA-256",
+ "content" : "e45551727707acc0c56ac62d56964332ea0f138d6cc3656d988b9369150f5247"
+ },
+ {
+ "alg" : "SHA-512",
+ "content" : "8064df400154caa110b8845bd17e6cea2683307e575ce88e40d7c0c8965ea0af6c150a376d8b9ba7354676c41b52c94535f30c6e830447613299ccf5fc7aa959"
+ },
+ {
+ "alg" : "SHA3-256",
+ "content" : "c9881b69bde35ea6ff4006877b9fbf91462f911b5b142aa699a45a00867d413a"
+ },
+ {
+ "alg" : "SHA3-512",
+ "content" : "2b9caf58deef687a9bf01abd61a7af4abdb61247a8a966683a18157ee948f1ea424602598dc8f665bf24f7e1e516866298ef0507e9d697cb20dcf60eff2095ca"
+ },
+ {
+ "alg" : "SHA-384",
+ "content" : "0597100022f72e020c9d929bf57ecef91af7574610fb03b4019feba4b25f491a076f03577be2009e66d9001c4c0f8ab0"
+ },
+ {
+ "alg" : "SHA3-384",
+ "content" : "bbdd55a31a4755ef589bcb176283fe03e3c9089d315eab577fef3a9c2d02e632c6ac3fdebbc90a2f0f8ed7974b9f397c"
+ }
+ ],
+ "licenses" : [
+ {
+ "license" : {
+ "name" : "MIT",
+ "url" : "https://opensource.org/licenses/MIT"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/com.github.package-url/packageurl-java@1.5.0?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "website",
+ "url" : "https://github.com/package-url/packageurl-java"
+ }
+ ]
+ },
+ {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/com.networknt/json-schema-validator@2.0.4?type=jar",
+ "group" : "com.networknt",
+ "name" : "json-schema-validator",
+ "version" : "2.0.4",
+ "description" : "A json schema validator that supports draft v4, v6, v7, v2019-09 and v2020-12",
+ "hashes" : [
+ {
+ "alg" : "MD5",
+ "content" : "e9d8e2cb13ac8c788731f05c6a3a6e8f"
+ },
+ {
+ "alg" : "SHA-1",
+ "content" : "57ec5a08b2fd6dab50a48b84ec42fdcd0436690f"
+ },
+ {
+ "alg" : "SHA-256",
+ "content" : "4856729c8f38ffba02380b0895b7e98a511f6e68a1fb6424782f3e6549dbba07"
+ },
+ {
+ "alg" : "SHA-512",
+ "content" : "8d427c2dcad5ec81ecf8f3e9cb0d561086d22d41c5dda0b48ffbd6f81ff1e6b2d886ede115580f6fa8c25f102eb802efb79224d7f8aae56455d2c019c9733343"
+ },
+ {
+ "alg" : "SHA3-256",
+ "content" : "60b4e1de5308fb203b93c87e221ff8670a372c55004f8583e7ed9985a2843241"
+ },
+ {
+ "alg" : "SHA3-512",
+ "content" : "2bb2e958de2f406905aad9d7798ed0074e936676f74cc9e7588bad52744e6ef808a4a358047bf0273fcaec7007503c1f361ea73709b2726a1a208e291f6d619b"
+ },
+ {
+ "alg" : "SHA-384",
+ "content" : "6c0391ffe0f08dd308e6f092668992b3b6b10be89dec79918cf23529c6800084ecd4ba41dbdde5010b8d340ea840dad9"
+ },
+ {
+ "alg" : "SHA3-384",
+ "content" : "ba9c59890cb53e0475d3f7e645ac6c54e5b42462d582441af794244dca642032ff318c4b719a6865f8c2e86748f20bc1"
+ }
+ ],
+ "licenses" : [
+ {
+ "license" : {
+ "name" : "Apache License Version 2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/com.networknt/json-schema-validator@2.0.4?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "website",
+ "url" : "https://github.com/networknt/json-schema-validator"
+ }
+ ]
+ },
+ {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/commons-codec/commons-codec@1.22.0?type=jar",
+ "group" : "commons-codec",
+ "name" : "commons-codec",
+ "version" : "1.22.0",
+ "description" : "The Apache Commons Codec component contains encoders and decoders for formats such as Base16, Base32, Base64, digest, and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a collection of phonetic encoding utilities.",
+ "hashes" : [
+ {
+ "alg" : "MD5",
+ "content" : "f14b9146cd553f4e8c5c3f5c9e2be611"
+ },
+ {
+ "alg" : "SHA-1",
+ "content" : "6b3eb4beb7058c2a638f5f17bcb388649fd339dd"
+ },
+ {
+ "alg" : "SHA-256",
+ "content" : "d164fe79f262c32d9b18a0b5b2d317d1c27653d5e98fd2b998c24bf901c72ce4"
+ },
+ {
+ "alg" : "SHA-512",
+ "content" : "5b67a5abf63948323101920fec10140d4370b841cc3c522a2b5e9864782640222c3094442861015494ddbc30bb7ef275722a54455c7c8333084842a26d8755da"
+ },
+ {
+ "alg" : "SHA3-256",
+ "content" : "566a61c3b928e33c5332e4fbb53283411c9f3d88810e84692a72664e711c8c9e"
+ },
+ {
+ "alg" : "SHA3-512",
+ "content" : "d300b773cd81403333626ce99a80a79febcf7e3bc4465c1bbd3e65fc8ad5fe04c07e0a4ab8ca51a61d515c7a095d786c78e8a8b657f7696703a6cc751e9d2421"
+ },
+ {
+ "alg" : "SHA-384",
+ "content" : "1cbfa58c62c4c3fad79f3a808e5d7fca87f4a96d2762f11243011ecf3ea0596638d00163b7fee20bab018a924cafa09f"
+ },
+ {
+ "alg" : "SHA3-384",
+ "content" : "1c0b65c0a1ab43e76dab19e4e0a622840dfcd603924f27bbd09c2261955047f1dd33e5c09a372badaa020f13a0b0124a"
+ }
+ ],
+ "licenses" : [
+ {
+ "license" : {
+ "name" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/commons-codec/commons-codec@1.22.0?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "website",
+ "url" : "https://commons.apache.org/proper/commons-codec/"
+ }
+ ]
+ },
+ {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/commons-io/commons-io@2.22.0?type=jar",
+ "group" : "commons-io",
+ "name" : "commons-io",
+ "version" : "2.22.0",
+ "description" : "The Apache Commons IO library contains utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more.",
+ "hashes" : [
+ {
+ "alg" : "MD5",
+ "content" : "f91d54bd47c42456b4a5ae62eed85565"
+ },
+ {
+ "alg" : "SHA-1",
+ "content" : "5b1e18bc0ad651ed878029d83f88d9c8189fd51e"
+ },
+ {
+ "alg" : "SHA-256",
+ "content" : "2b9a7b1f726fb86216dbd2c8321eabe0221dbd5b1be81c18e1cb53811b104758"
+ },
+ {
+ "alg" : "SHA-512",
+ "content" : "fca0b4ae70e531bee74413e0b865981aa8b60a9390f789b63997203dae67be65362e95a0c35b9d4b072fbb0810114783415dd22b92fb42e5594b10992f632bc5"
+ },
+ {
+ "alg" : "SHA3-256",
+ "content" : "134157813629f4d9b97044602e1fa2f61c14c3be1f641490b3e06ac941ff3315"
+ },
+ {
+ "alg" : "SHA3-512",
+ "content" : "47832f3b7abe375f3b0ed169996d9776b2a0007b073ab3f06438dce67be9bda45e8aac84737cc639ada4424b13c7614d8c9fcb23779868f7421414777cc0946a"
+ },
+ {
+ "alg" : "SHA-384",
+ "content" : "e1fbf3729c4d2d77b036d90234d9e2ed3fe0c2f5379d333a695c1cb0037f63d288c8b62de05022da0f612da65835fee0"
+ },
+ {
+ "alg" : "SHA3-384",
+ "content" : "02acc6e7f614d8684e7104a52123573152a2e1b651bc6a5be12d4b58861c757d6c56f51105bb97c92309d126059232ea"
+ }
+ ],
+ "licenses" : [
+ {
+ "license" : {
+ "name" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/commons-io/commons-io@2.22.0?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "website",
+ "url" : "https://commons.apache.org/proper/commons-io/"
+ }
+ ]
+ },
+ {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/org.apache.ant/ant-launcher@1.10.17?type=jar",
+ "isExternal" : true,
+ "supplier" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "group" : "org.apache.ant",
+ "name" : "ant-launcher",
+ "version" : "1.10.17",
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/org.apache.ant/ant-launcher@1.10.17?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "vcs",
+ "url" : "https://gitbox.apache.org/repos/asf/ant.git"
+ },
+ {
+ "type" : "issue-tracker",
+ "url" : "https://bz.apache.org/bugzilla/buglist.cgi?product=Ant"
+ },
+ {
+ "type" : "website",
+ "url" : "https://ant.apache.org/"
+ },
+ {
+ "type" : "advisories",
+ "url" : "https://ant.apache.org/security.html#Apache%20Ant%20Security%20Vulnerabilities"
+ },
+ {
+ "type" : "mailing-list",
+ "url" : "https://ant.apache.org/mail.html"
+ },
+ {
+ "type" : "documentation",
+ "url" : "https://ant.apache.org/manual/"
+ },
+ {
+ "type" : "source-distribution",
+ "url" : "https://ant.apache.org/srcdownload.cgi"
+ },
+ {
+ "type" : "distribution",
+ "url" : "https://ant.apache.org/bindownload.cgi"
+ },
+ {
+ "type" : "license",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ },
+ {
+ "type" : "release-notes",
+ "url" : "https://github.com/apache/ant/blob/master/WHATSNEW"
+ },
+ {
+ "type" : "security-contact",
+ "url" : "https://www.apache.org/security/"
+ },
+ {
+ "type" : "rfc-9116",
+ "url" : "https://ant.apache.org/.well-known/security.txt"
+ }
+ ]
+ },
+ {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/org.apache.ant/ant@1.10.17?type=jar",
+ "isExternal" : true,
+ "supplier" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "group" : "org.apache.ant",
+ "name" : "ant",
+ "version" : "1.10.17",
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/org.apache.ant/ant@1.10.17?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "vcs",
+ "url" : "https://gitbox.apache.org/repos/asf/ant.git"
+ },
+ {
+ "type" : "issue-tracker",
+ "url" : "https://bz.apache.org/bugzilla/buglist.cgi?product=Ant"
+ },
+ {
+ "type" : "website",
+ "url" : "https://ant.apache.org/"
+ },
+ {
+ "type" : "advisories",
+ "url" : "https://ant.apache.org/security.html#Apache%20Ant%20Security%20Vulnerabilities"
+ },
+ {
+ "type" : "mailing-list",
+ "url" : "https://ant.apache.org/mail.html"
+ },
+ {
+ "type" : "documentation",
+ "url" : "https://ant.apache.org/manual/"
+ },
+ {
+ "type" : "source-distribution",
+ "url" : "https://ant.apache.org/srcdownload.cgi"
+ },
+ {
+ "type" : "distribution",
+ "url" : "https://ant.apache.org/bindownload.cgi"
+ },
+ {
+ "type" : "license",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ },
+ {
+ "type" : "release-notes",
+ "url" : "https://github.com/apache/ant/blob/master/WHATSNEW"
+ },
+ {
+ "type" : "security-contact",
+ "url" : "https://www.apache.org/security/"
+ },
+ {
+ "type" : "rfc-9116",
+ "url" : "https://ant.apache.org/.well-known/security.txt"
+ }
+ ]
+ },
+ {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/org.apache.commons/commons-collections4@4.5.0?type=jar",
+ "group" : "org.apache.commons",
+ "name" : "commons-collections4",
+ "version" : "4.5.0",
+ "description" : "The Apache Commons Collections package contains types that extend and augment the Java Collections Framework.",
+ "hashes" : [
+ {
+ "alg" : "MD5",
+ "content" : "d564105594035b363b193d8ce3c18b98"
+ },
+ {
+ "alg" : "SHA-1",
+ "content" : "e5cf89f0c6e132fc970bd9a465fdcb8dbe94f75a"
+ },
+ {
+ "alg" : "SHA-256",
+ "content" : "00f93263c267be201b8ae521b44a7137271b16688435340bf629db1bac0a5845"
+ },
+ {
+ "alg" : "SHA-512",
+ "content" : "ee43c513ac9dcbd7dd23b5cbb4ea5f65a2e10cdfbb403d080b87e778b3b45062315522297c41eca514a9a946228ad7650f0a572d5b78effb8260dd8084131988"
+ },
+ {
+ "alg" : "SHA3-256",
+ "content" : "614c41bfd8f9c6c1c1e5667c5be45587c3021b780937ad62f54d17051f425086"
+ },
+ {
+ "alg" : "SHA3-512",
+ "content" : "3cfd12ec2d03ed29b682123cedae422a4c6dc459034a7e0ab5f00ccd422cb9a2ec423a08b953119c426569b888157a6d80aa0e0c63debea50c5c54c481e2eff5"
+ },
+ {
+ "alg" : "SHA-384",
+ "content" : "73db8eb3e79569b3fa62aefdce413e6ea250b9853953cb75b9d5ce0f2f35b59b6e86ef708326a608ff20d95bdade8522"
+ },
+ {
+ "alg" : "SHA3-384",
+ "content" : "7a9c035fa846cdcebd4331eb86ed31a67595518299a8bee54597c1eb663aee63214553a561a510b929035266c2a4800b"
+ }
+ ],
+ "licenses" : [
+ {
+ "license" : {
+ "name" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/org.apache.commons/commons-collections4@4.5.0?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "website",
+ "url" : "https://commons.apache.org/proper/commons-collections/"
+ }
+ ]
+ },
+ {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/org.apache.commons/commons-lang3@3.20.0?type=jar",
+ "group" : "org.apache.commons",
+ "name" : "commons-lang3",
+ "version" : "3.20.0",
+ "description" : "Apache Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang. The code is tested using the latest revision of the JDK for supported LTS releases: 8, 11, 17, 21 and 25 currently. See https://github.com/apache/commons-lang/blob/master/.github/workflows/maven.yml Please ensure your build environment is up-to-date and kindly report any build issues.",
+ "hashes" : [
+ {
+ "alg" : "MD5",
+ "content" : "4b29562ded527aa074e1d44f8646dac5"
+ },
+ {
+ "alg" : "SHA-1",
+ "content" : "65897b3e5731220962e659e001904af3c3cbeba9"
+ },
+ {
+ "alg" : "SHA-256",
+ "content" : "69e5c9fa35da7a51a5fd2099dfe56a2d8d32cf233e2f6d770e796146440263f4"
+ },
+ {
+ "alg" : "SHA-512",
+ "content" : "1c72db334ea44f932c35e602b78907865f5bab43e30c871c9be67c8184eaa778f32d7bc3ab525d5921cd28619d3f9babfd483f17de54f007ee07db2e074b0307"
+ },
+ {
+ "alg" : "SHA3-256",
+ "content" : "36e3f71352fa14bc580db45a05b09b063392c6d39acf9e24ffa6a67bbc07a336"
+ },
+ {
+ "alg" : "SHA3-512",
+ "content" : "6ecbc05bb5cd3f7537078b0cf51b0a5f7189dfa60c22e5ec0d6b9e2fd3f7fa7566770b5da87e0c9929f48769933c3e3a473fd5cc7231672fca36ab1fee1f8670"
+ },
+ {
+ "alg" : "SHA-384",
+ "content" : "77dd27c4d5e9372c002bd6878d2cfaaec3cf46dd57d65de63d7f2e09351344531cfa81a537b56628ac6db18adee7e484"
+ },
+ {
+ "alg" : "SHA3-384",
+ "content" : "3456de40eef224b3ad195d2f218dd28eacb0da07607aee7ead94bd8d54bd8311d51c28d4066db4bf8b69a2df48c415f5"
+ }
+ ],
+ "licenses" : [
+ {
+ "license" : {
+ "name" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/org.apache.commons/commons-lang3@3.20.0?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "website",
+ "url" : "https://commons.apache.org/proper/commons-lang/"
+ }
+ ]
+ },
+ {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/org.apache.ivy/ivy@2.6.0?type=jar",
+ "isExternal" : true,
+ "group" : "org.apache.ivy",
+ "name" : "ivy",
+ "version" : "2.6.0",
+ "hashes" : [
+ {
+ "alg" : "MD5",
+ "content" : "db6f18e5dbe9c39be5d2655a1e354f73"
+ },
+ {
+ "alg" : "SHA-1",
+ "content" : "11a76d2e1d439170c61b47a7a13110a78c6c0824"
+ },
+ {
+ "alg" : "SHA-256",
+ "content" : "7e14fe77306a8cc71197cb3f1681e9e673ccc04254a5ede7e848e2248491ec78"
+ },
+ {
+ "alg" : "SHA-512",
+ "content" : "0e66c0908287112b8a63e468a572ea265767225422bfb17ff3ec9deaa647d2aafbf79b0fa18d021fc3a3e0f8cabc7c07e7c4e613f1d49a538987c49df836dd29"
+ },
+ {
+ "alg" : "SHA3-256",
+ "content" : "be088a0f17e81e2f80d25b85833292a1ce40a0b8c6cb49a8e4cb39a78590d189"
+ },
+ {
+ "alg" : "SHA3-512",
+ "content" : "60c21fa8682b3f80fc62f1f2b10abb5de4dd21baccd85e305e9f14007a14aeb05556c25b1d1ab10107aed356eb4b76996c0a850b02c787e8861215816b34a095"
+ },
+ {
+ "alg" : "SHA-384",
+ "content" : "aeec799ca675640ebd5dba6f91782e1fd338e31be3fbd1665422c1bf87693dd6923a95db9d6526bdcc43aebcaacd6268"
+ },
+ {
+ "alg" : "SHA3-384",
+ "content" : "54ca1ed904a57bc7268c6f1ed34bc5389663d7810967a5d89d109da39e7c7d609c299353b8a3be8df98fd3f050e42c74"
+ }
+ ],
+ "licenses" : [
+ {
+ "license" : {
+ "name" : "The Apache Software License, Version 2.0",
+ "url" : "http://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/org.apache.ivy/ivy@2.6.0?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "website",
+ "url" : "http://ant.apache.org/ivy/"
+ }
+ ]
+ },
+ {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/org.codehaus.woodstox/stax2-api@4.3.0?type=jar",
+ "group" : "org.codehaus.woodstox",
+ "name" : "stax2-api",
+ "version" : "4.3.0",
+ "description" : "Stax2 API is an extension to basic Stax 1.0 API that adds significant new functionality, such as full-featured bi-direction validation interface and high-performance Typed Access API.",
+ "hashes" : [
+ {
+ "alg" : "MD5",
+ "content" : "6eec6c1cb7f63d8a8098cc5569a47e99"
+ },
+ {
+ "alg" : "SHA-1",
+ "content" : "59251773c44122e8d1366f68884e29dd784e141b"
+ },
+ {
+ "alg" : "SHA-256",
+ "content" : "7c805f36129ea9fa42b696093b7ae1eb20bb6ccec65c8280d6f33db5609ca5e1"
+ },
+ {
+ "alg" : "SHA-512",
+ "content" : "4d1bf5cb3a803423c5420050c245227b944acb4ced29e8095e470bc3a742d6a057c484fa1d531b58933ed8f81d52d5bbfc8406acc4241f6e4ec4c5116fe30d53"
+ },
+ {
+ "alg" : "SHA3-256",
+ "content" : "5a3bc0bf1b00df535d572ae16c62817788bea0f7d02a8c430fadd4cf4df95f5e"
+ },
+ {
+ "alg" : "SHA3-512",
+ "content" : "5d4e4618b22accb1fee19d6d2702dcd0538df7f9e3b7aa8590e7554811770bb317d4bab1eecebc4b31df49a349c68e746256b3e9cca5fbea6f102df411c0e678"
+ },
+ {
+ "alg" : "SHA-384",
+ "content" : "664bf1044e8c9e80083d02d2ccdba3c3953a515594b6a262baef76d1cf3790da9d71eb853806c27c94721e65983d72a3"
+ },
+ {
+ "alg" : "SHA3-384",
+ "content" : "298f2dcfffb3fe28229452770a969b2138008a23c508599a13303f48f21d3458c61ad19df53a20d6447c0f8ef56e4216"
+ }
+ ],
+ "licenses" : [
+ {
+ "license" : {
+ "name" : "The BSD 2-Clause License",
+ "url" : "http://www.opensource.org/licenses/bsd-license.php"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/org.codehaus.woodstox/stax2-api@4.3.0?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "website",
+ "url" : "http://github.com/FasterXML/stax2-api"
+ }
+ ]
+ },
+ {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/org.cyclonedx/cyclonedx-core-java@13.0.0?type=jar",
+ "group" : "org.cyclonedx",
+ "name" : "cyclonedx-core-java",
+ "version" : "13.0.0",
+ "description" : "The CycloneDX core module provides a model representation of the BOM along with utilities to assist in creating, parsing, and validating BOMs.",
+ "hashes" : [
+ {
+ "alg" : "MD5",
+ "content" : "1fe4b7cc2f01f52aef5544d73be07533"
+ },
+ {
+ "alg" : "SHA-1",
+ "content" : "d29aec05c781badba0ad5a589c37a1ff8b7fb583"
+ },
+ {
+ "alg" : "SHA-256",
+ "content" : "8c2bc1cccb4e2c6c0bcc2b0bacc4da0a110aad2a05791b750caf281e7769ce82"
+ },
+ {
+ "alg" : "SHA-512",
+ "content" : "92cd61fe5a21044d60fdf87e5a14c1655065601370e7c739db5ac5f803bd5282061c86ab6f38146d690309f8058cf09381806ad09e899a85dcf417e1d3b366c5"
+ },
+ {
+ "alg" : "SHA3-256",
+ "content" : "4e2b3a5800ef8cdf7b50d926d4c18261ad54074173b1bf02079ea83ab1d1b3a2"
+ },
+ {
+ "alg" : "SHA3-512",
+ "content" : "b63d4b54f84ec0071bd7263fbc190017fa28f15db7bee318fea9588d6b4063a408a7177410cfaa0d0fa9dbb34a5e0fb1ef5d63195f66014c64495cf5f46590db"
+ },
+ {
+ "alg" : "SHA-384",
+ "content" : "81d28eeb136fd1751a4ba4ebbe20025e528b1c329804c164e540fd9ddd7da09c5752428a18120fdbccfd9d6f67750292"
+ },
+ {
+ "alg" : "SHA3-384",
+ "content" : "dce70366596f8075dc6530a3e038b3bb43427b6ff6928483901309ddefd3840927da18e9f65176201187e4c420cbed7e"
+ }
+ ],
+ "licenses" : [
+ {
+ "license" : {
+ "name" : "Apache-2.0",
+ "url" : "http://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/org.cyclonedx/cyclonedx-core-java@13.0.0?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "website",
+ "url" : "https://github.com/CycloneDX/cyclonedx-core-java"
+ }
+ ]
+ },
+ {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar",
+ "group" : "org.slf4j",
+ "name" : "slf4j-api",
+ "version" : "2.0.17",
+ "description" : "The slf4j API",
+ "hashes" : [
+ {
+ "alg" : "MD5",
+ "content" : "b6480d114a23683498ac3f746f959d2f"
+ },
+ {
+ "alg" : "SHA-1",
+ "content" : "d9e58ac9c7779ba3bf8142aff6c830617a7fe60f"
+ },
+ {
+ "alg" : "SHA-256",
+ "content" : "7b751d952061954d5abfed7181c1f645d336091b679891591d63329c622eb832"
+ },
+ {
+ "alg" : "SHA-512",
+ "content" : "9a3e79db6666a6096a3021bb2e1d918f30f589d8de51d6b600f8ebd92515a510ae2d8f87919cc2dfa8365d64f10194cac8dfa0fb950160eef0e9da06f6caaeb9"
+ },
+ {
+ "alg" : "SHA3-256",
+ "content" : "00559b4f4066b4917ba4fe2a6f23111eaeada321112d030910d218ced9084b5e"
+ },
+ {
+ "alg" : "SHA3-512",
+ "content" : "9579c2f7e7516e177c2d493ccc9eb8150978cf19f6f09b28d116f6935239fd56dc6af2b62b3336f79b0b462445550cd1fb5377a07001a6f44aaab6a32fa2fa47"
+ },
+ {
+ "alg" : "SHA-384",
+ "content" : "6ea24f814a9b6ece428cfd0535e2f3b8927005745ef61006b50fdb5a90126ee5ea05650155382b3b755c5bce38ef3944"
+ },
+ {
+ "alg" : "SHA3-384",
+ "content" : "9b1015052f0ec43f9be09764e131834157599611cb52f6fe591c4ac6a8ab4817518f2a4b8871e5e738c8678e93af5557"
+ }
+ ],
+ "licenses" : [
+ {
+ "license" : {
+ "name" : "MIT",
+ "url" : "https://opensource.org/license/mit"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "website",
+ "url" : "http://www.slf4j.org"
+ }
+ ]
+ },
+ {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/org.yaml/snakeyaml@2.5?type=jar",
+ "group" : "org.yaml",
+ "name" : "snakeyaml",
+ "version" : "2.5",
+ "description" : "YAML 1.1 parser and emitter for Java",
+ "hashes" : [
+ {
+ "alg" : "MD5",
+ "content" : "8d3b7581db5c7620db55183f33a4f2ad"
+ },
+ {
+ "alg" : "SHA-1",
+ "content" : "2d53ddec134280cb384c1e35d094e5f71c1f2316"
+ },
+ {
+ "alg" : "SHA-256",
+ "content" : "e6682acf1ace77508ef13649cbf4f8d09d2cf5457bdb61d25ffb6ac0233d78dd"
+ },
+ {
+ "alg" : "SHA-512",
+ "content" : "a69bea3ae0ed31b12d9fa23bf1cd3fb71bae88e231d9657f0291e3000ae17a1df50709e072134f9155158f488eba67a3f8daf879462499f07b07d9239e78933e"
+ },
+ {
+ "alg" : "SHA3-256",
+ "content" : "3aa9329b0eab5185331e526a011c74b45b4c4a506214e6c3ec2d2038c51cc261"
+ },
+ {
+ "alg" : "SHA3-512",
+ "content" : "f80ff702aee20a5150a11818985d659fffb1d5238e331aca2048524649e0270e5bca0186ce7caf04ecf85fd95c95c6b9d8ed1f362ed399fef624eb94b70dc6de"
+ },
+ {
+ "alg" : "SHA-384",
+ "content" : "2fa12e4330d6da0a693a13588c8cdeff562c1bd1dc32e043d402ca1fc72d87a30dcc7bb31f9b582df3fe018eb6c6a3bb"
+ },
+ {
+ "alg" : "SHA3-384",
+ "content" : "8c5037c75bb2f464829ba38126a4773c88951705effc2b14289f3bbdef05bb598f10e4d9603dcd1b58efd7cb68d996a2"
+ }
+ ],
+ "licenses" : [
+ {
+ "license" : {
+ "name" : "Apache License, Version 2.0",
+ "url" : "http://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/org.yaml/snakeyaml@2.5?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "website",
+ "url" : "https://bitbucket.org/snakeyaml/snakeyaml"
+ }
+ ]
+ }
+ ],
+ "dependencies" : [
+ {
+ "ref" : "pkg:maven/com.ethlo.time/itu@1.14.0?type=jar",
+ "dependsOn" : [ ]
+ },
+ {
+ "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.22?type=jar",
+ "dependsOn" : [ ]
+ },
+ {
+ "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.22.1?type=jar",
+ "dependsOn" : [ ]
+ },
+ {
+ "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.22.1?type=jar",
+ "dependsOn" : [
+ "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.22?type=jar",
+ "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.22.1?type=jar"
+ ]
+ },
+ {
+ "ref" : "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.22.1?type=jar",
+ "dependsOn" : [
+ "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.22?type=jar",
+ "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.22.1?type=jar",
+ "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.22.1?type=jar",
+ "pkg:maven/com.fasterxml.woodstox/woodstox-core@7.2.0?type=jar",
+ "pkg:maven/org.codehaus.woodstox/stax2-api@4.3.0?type=jar"
+ ]
+ },
+ {
+ "ref" : "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.22.1?type=jar",
+ "dependsOn" : [
+ "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.22.1?type=jar",
+ "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.22.1?type=jar",
+ "pkg:maven/org.yaml/snakeyaml@2.5?type=jar"
+ ]
+ },
+ {
+ "ref" : "pkg:maven/com.fasterxml.woodstox/woodstox-core@7.2.0?type=jar",
+ "dependsOn" : [
+ "pkg:maven/org.codehaus.woodstox/stax2-api@4.3.0?type=jar"
+ ]
+ },
+ {
+ "ref" : "pkg:maven/com.github.package-url/packageurl-java@1.5.0?type=jar",
+ "dependsOn" : [ ]
+ },
+ {
+ "ref" : "pkg:maven/com.networknt/json-schema-validator@2.0.4?type=jar",
+ "dependsOn" : [
+ "pkg:maven/com.ethlo.time/itu@1.14.0?type=jar",
+ "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.22.1?type=jar",
+ "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.22.1?type=jar",
+ "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"
+ ]
+ },
+ {
+ "ref" : "pkg:maven/commons-codec/commons-codec@1.22.0?type=jar",
+ "dependsOn" : [ ]
+ },
+ {
+ "ref" : "pkg:maven/commons-io/commons-io@2.22.0?type=jar",
+ "dependsOn" : [ ]
+ },
+ {
+ "ref" : "pkg:maven/org.apache.ant/ant-cyclonedx@0.2alpha?type=jar",
+ "dependsOn" : [
+ "pkg:maven/commons-codec/commons-codec@1.22.0?type=jar",
+ "pkg:maven/org.apache.ant/ant-launcher@1.10.17?type=jar",
+ "pkg:maven/org.apache.ant/ant@1.10.17?type=jar",
+ "pkg:maven/org.apache.ivy/ivy@2.6.0?type=jar",
+ "pkg:maven/org.cyclonedx/cyclonedx-core-java@13.0.0?type=jar"
+ ]
+ },
+ {
+ "ref" : "pkg:maven/org.apache.ant/ant-launcher@1.10.17?type=jar",
+ "dependsOn" : [ ]
+ },
+ {
+ "ref" : "pkg:maven/org.apache.ant/ant@1.10.17?type=jar",
+ "dependsOn" : [
+ "pkg:maven/org.apache.ant/ant-launcher@1.10.17?type=jar"
+ ]
+ },
+ {
+ "ref" : "pkg:maven/org.apache.commons/commons-collections4@4.5.0?type=jar",
+ "dependsOn" : [ ]
+ },
+ {
+ "ref" : "pkg:maven/org.apache.commons/commons-lang3@3.20.0?type=jar",
+ "dependsOn" : [ ]
+ },
+ {
+ "ref" : "pkg:maven/org.apache.ivy/ivy@2.6.0?type=jar",
+ "dependsOn" : [ ]
+ },
+ {
+ "ref" : "pkg:maven/org.codehaus.woodstox/stax2-api@4.3.0?type=jar",
+ "dependsOn" : [ ]
+ },
+ {
+ "ref" : "pkg:maven/org.cyclonedx/cyclonedx-core-java@13.0.0?type=jar",
+ "dependsOn" : [
+ "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.22.1?type=jar",
+ "pkg:maven/com.github.package-url/packageurl-java@1.5.0?type=jar",
+ "pkg:maven/com.networknt/json-schema-validator@2.0.4?type=jar",
+ "pkg:maven/commons-codec/commons-codec@1.22.0?type=jar",
+ "pkg:maven/commons-io/commons-io@2.22.0?type=jar",
+ "pkg:maven/org.apache.commons/commons-collections4@4.5.0?type=jar",
+ "pkg:maven/org.apache.commons/commons-lang3@3.20.0?type=jar"
+ ]
+ },
+ {
+ "ref" : "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar",
+ "dependsOn" : [ ]
+ },
+ {
+ "ref" : "pkg:maven/org.yaml/snakeyaml@2.5?type=jar",
+ "dependsOn" : [ ]
+ }
+ ]
+}
\ No newline at end of file