<?xml version="1.0" encoding="UTF-8"?>
<bom version="1" xmlns="http://cyclonedx.org/schema/bom/1.4">
  <metadata>
    <tools>
      <tool>
        <vendor>OWASP Foundation</vendor>
        <name>CycloneDX Maven plugin</name>
        <version>2.7.10</version>
        <hashes>
          <hash alg="MD5">1cc7f6a0382f8bb2f758d6a6ea401d1b</hash>
          <hash alg="SHA-1">a4297947a1f2d7d453105db542651614bbd37f38</hash>
          <hash alg="SHA-256">bd0fdd8f2f2116eee5e715aeac1580f19eb7a10ec2b6f805b53567067658e872</hash>
          <hash alg="SHA-512">9cde8352a427e10b96cae01348fc7cfe5d4aa9cd0a5e5dd93b414ce3bb7d112993c3b3004e53af52567fbfa16de0704ec59a5556a635ad70571fd124ae389f39</hash>
          <hash alg="SHA-384">93d7bf5b5c735347edfbfbd66810273ca840f9a322b816d22d44c3d8e8255c09e86570bb23712aeb0cade0f478be5aeb</hash>
          <hash alg="SHA3-384">4467f16e9ca32190a6e49c65339eb28ee5e8c78f4e918fcf95128a4b7648898de56ccb43eacfad0c9391ef8cdb7d629a</hash>
          <hash alg="SHA3-256">ed2996c99b483e969221d5e9a40f562ea2ab85442d361d72a90e85266a3ed781</hash>
          <hash alg="SHA3-512">c8e6ea9ddc38edc77e284b3bf541663e84752bdc59ed1935799847a48a14ea2fa531b61008fefcba37d732a56702a11ac112437b9b80d18f4ecc8ef0ecfb32cf</hash>
        </hashes>
      </tool>
    </tools>
    <component type="library" bom-ref="pkg:maven/org.apache.maven.plugins/maven-source-plugin@3.3.1?type=maven-plugin">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven.plugins</group>
      <name>maven-source-plugin</name>
      <version>3.3.1</version>
      <description>The Maven Source Plugin creates a JAR archive of the source files of the current project.</description>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven.plugins/maven-source-plugin@3.3.1?type=maven-plugin</purl>
      <externalReferences><reference type="website"><url>https://maven.apache.org/plugins/maven-source-plugin/</url></reference><reference type="build-system"><url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-source-plugin/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/MSOURCES</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?users@maven.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/maven-source-plugin/tree/maven-source-plugin-3.3.1</url></reference></externalReferences>
    </component>
    <properties>
      <property name="maven.goal">makeAggregateBom</property>
      <property name="maven.scopes">compile,provided,runtime,system</property>
      <property name="cdx:reproducible">enabled</property>
    </properties>
  </metadata>
  <components>
    <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-model@3.2.5?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven</group>
      <name>maven-model</name>
      <version>3.2.5</version>
      <description>Model for Maven POM (Project Object Model)</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">16ceccebac412654c427dcd66df4f6f9</hash>
        <hash alg="SHA-1">ced305476a43e8a042a59e94ef38b3291d9ce1e7</hash>
        <hash alg="SHA-256">8d439cc1661349dab1c69eed0f831336d187e162cc6d68aa4deefcff57ee0624</hash>
        <hash alg="SHA-512">5f67231329c4d1fceec84684f69b3e2a840c4acac8a3af927036e6cc05fe35562fc6a17b104ddc52d8d863fdf70160aeda99259cbc3b08d63b217f52cb8a7658</hash>
        <hash alg="SHA-384">b341f59c5756a7ad161dda15c114ee027d111b2fc5982ed1e9af1882cad87acb6628b08a971f04a5c5716c094416fda2</hash>
        <hash alg="SHA3-384">1257f33ca5d743223771ee8eb7b99044382d882a08f9d5a22b9fa4b496a47685fd172172602e5ddd824c2fd1c9ebcfef</hash>
        <hash alg="SHA3-256">b605e9ef6debcdb6d4764279fe245db460dce5a0dda70ba35efee6b6c3c97ed4</hash>
        <hash alg="SHA3-512">480cec8773bb9f4d1d3dc72b2d49a1bfadda0e7b485d23b0bfc493e815b0cb86e98cd08b516f27086d908035960549e381dde07d32220d14b3dde891b2a84da0</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven/maven-model@3.2.5?type=jar</purl>
      <externalReferences><reference type="website"><url>http://maven.apache.org/ref/3.2.5/maven-model</url></reference><reference type="build-system"><url>https://builds.apache.org/job/maven-3.x/</url></reference><reference type="distribution"><url>http://maven.apache.org/download.html</url></reference><reference type="issue-tracker"><url>http://jira.codehaus.org/browse/MNG</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/maven-users</url></reference><reference type="vcs"><url>https://github.com/apache/maven/tree/maven-3.2.5/maven-model</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-plugin-api@3.2.5?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven</group>
      <name>maven-plugin-api</name>
      <version>3.2.5</version>
      <description>The API for plugins - Mojos - development.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">11a402fb287811b6a249a553e9af5383</hash>
        <hash alg="SHA-1">5c6893f4ac5425d07c4053f3c4e27b2a3b37c516</hash>
        <hash alg="SHA-256">194a6f0ce889ed3b0d8a9bc4d3c79541e878098b7e303e4ac76c1031850772c3</hash>
        <hash alg="SHA-512">ace85ef74fb6a582afe6edb8282d4f09e2e4d5899e7471a0169cb8ccae9bc93d664b9c3e7f7be753434e1b30290447d87a3226969045cfb4e3e15b3ca2a596fa</hash>
        <hash alg="SHA-384">0e796a4fe15828a8b8fc7f642c8cf7932c7b15de868b72eb222f95b91d55fd5281fd679f8a1cfaebfc3d1eeaca794edd</hash>
        <hash alg="SHA3-384">70e29b854f16306beb41c1bc287002e7b214daa65bca7823b60a440a8e766721f4a00fe238453bb55ef0ee0068413c50</hash>
        <hash alg="SHA3-256">4d13e0b021bbe138eaa6a9a753ffc1bd557a70c38b5314fdb540dd052dbcc592</hash>
        <hash alg="SHA3-512">f53db7d4858d810175e662f7b4f12fdf0df1b1d637b2532871d90b4427199795f7ea919dabf7d4e29ac0d166c0e096b7ac20126216c9c9252877bb65bfbdbb9e</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven/maven-plugin-api@3.2.5?type=jar</purl>
      <externalReferences><reference type="website"><url>http://maven.apache.org/ref/3.2.5/maven-plugin-api</url></reference><reference type="build-system"><url>https://builds.apache.org/job/maven-3.x/</url></reference><reference type="distribution"><url>http://maven.apache.org/download.html</url></reference><reference type="issue-tracker"><url>http://jira.codehaus.org/browse/MNG</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/maven-users</url></reference><reference type="vcs"><url>https://github.com/apache/maven/tree/maven-3.2.5/maven-plugin-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.9.0.M2?type=jar">
      <publisher>The Eclipse Foundation</publisher>
      <group>org.eclipse.sisu</group>
      <name>org.eclipse.sisu.plexus</name>
      <version>0.9.0.M2</version>
      <description>Plexus-JSR330 adapter; adds Plexus support to the Sisu-Inject container</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">98e320df2caac742b2ae33d938c69df8</hash>
        <hash alg="SHA-1">31456dd2293197bb282c03168f6767acca3dec96</hash>
        <hash alg="SHA-256">9500d303ce467e26d129dda8559c3f3a91277d41ab49d2c4b4a5779536a62fc1</hash>
        <hash alg="SHA-512">907bb88258ba9d9ae465db219de803074a677193f3a5a05cc36c7fcf413123f50742bab231d3eb783395448bb487934f85b12972efe36b77a32e235524bef4ec</hash>
        <hash alg="SHA-384">8eb92a65730622e93791bc4c6435113596473d69f3d8dd5348c42ea47c2a93017674fafb34f5d5a48ef210638d37640d</hash>
        <hash alg="SHA3-384">e97753b0913e87a430a7e6ce8467a2903670edbc87cba4282cd401137983b15cb9c4361c7504e139bb10119d9d7ddfde</hash>
        <hash alg="SHA3-256">883521331173ce90227bec1c5848ffc2f2a45e83eaa29d0376fb80e633c462c0</hash>
        <hash alg="SHA3-512">3429abb8aecac539bbf04bd6f6ba339c71d7156ec0861f27de86e1664312bb30dcd076a317dad0bbdefad89dbd03fbcf56003e16551c3320e2bf223424998c16</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-1.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.9.0.M2?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.eclipse.org/sisu/org.eclipse.sisu.plexus/</url></reference><reference type="build-system"><url>https://ci.eclipse.org/sisu/job/sisu.plexus/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/eclipse/sisu.plexus/issues</url></reference><reference type="mailing-list"><url>http://dev.eclipse.org/mhonarc/lists/sisu-dev/</url></reference><reference type="vcs"><url>https://github.com/eclipse/sisu.plexus/org.eclipse.sisu.plexus</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/javax.annotation/javax.annotation-api@1.2?type=jar">
      <publisher>GlassFish Community</publisher>
      <group>javax.annotation</group>
      <name>javax.annotation-api</name>
      <version>1.2</version>
      <description>Common Annotations for the JavaTM Platform API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">75fe320d2b3763bd6883ae1ede35e987</hash>
        <hash alg="SHA-1">479c1e06db31c432330183f5cae684163f186146</hash>
        <hash alg="SHA-256">5909b396ca3a2be10d0eea32c74ef78d816e1b4ead21de1d78de1f890d033e04</hash>
        <hash alg="SHA-512">2453330b27a0822bba440c28b98ae1d83d60d97dfa2d040562dd5126b3548e0caa040fea3b886ac6feb0a858e6c1bc45b6c5472b180f1f14792e5ca33e355959</hash>
        <hash alg="SHA-384">37a46eaa1d011969d28ff0daaecd67a560169b3ae70c40102331d85a71139ca07110169fe367f484735914ce5c6b86c0</hash>
        <hash alg="SHA3-384">e2f8df1aad5867355fd1d3de2374d077e3ad885e6bddac3ce7c7bc72a34097e33bc5dfe960f839a7feb515bd5a92ffd1</hash>
        <hash alg="SHA3-256">2e2acc7429faecd2e74c0c441209b1a5b0ccbc245ccd8391425c4b1e4b2fbc94</hash>
        <hash alg="SHA3-512">9a28cb34c7761e695ccea04cc6df1e0f9cd18fef59bf50d5943ddc06802e616bc2bd55211e863c65f7f7661f963ba8ee9e569324642b87bc1703dc6f07cba5e3</hash>
      </hashes>
      <licenses>
        <expression>(CDDL-1.0 OR GPL-2.0-with-classpath-exception)</expression>
      </licenses>
      <purl>pkg:maven/javax.annotation/javax.annotation-api@1.2?type=jar</purl>
      <externalReferences><reference type="website"><url>http://jcp.org/en/jsr/detail?id=250</url></reference><reference type="distribution"><url>https://maven.java.net/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>http://java.net/jira/browse/GLASSFISH</url></reference><reference type="vcs"><url>http://java.net/projects/glassfish/sources/svn/show/tags/javax.annotation-api-1.2</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/javax.enterprise/cdi-api@1.2?type=jar">
      <publisher>JBoss by Red Hat, Inc.</publisher>
      <group>javax.enterprise</group>
      <name>cdi-api</name>
      <version>1.2</version>
      <description>APIs for CDI (Contexts and Dependency Injection for Java EE)</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">2a8c973affa178efb89e6c50f78d79da</hash>
        <hash alg="SHA-1">53bba91dc3968adf411e076df020cf207283d7dc</hash>
        <hash alg="SHA-256">cc5ce2cbc62fe96bf59af00bba00bde823a1094462b4364747863510b76c0518</hash>
        <hash alg="SHA-512">d73772ea4b1d63828ea2aaa71edb788026065bf5ffbc54fed2d86ca88f08f61199bf9df734941531a3eaf1aea5858b3a37034240f92bec6e1e4e72ce5364c791</hash>
        <hash alg="SHA-384">fbb55bbf43e02c72e0f0dc86569a5666b1fb1b48f97081b00d22e911b152fa0fd0d997bc0816473a70a74da3fbe0c273</hash>
        <hash alg="SHA3-384">bda81740c8fbdf902116bca4bd821c492e99bcc7987d6251ccac98431d1e0cc0c7caf9e6f0acb84be3c86b8e42703944</hash>
        <hash alg="SHA3-256">8cae07e6827d09807cee9c64be0edbefb243b77d254b810d1311ad96d22c9011</hash>
        <hash alg="SHA3-512">6c7268ca95f9c4fca0f24a1d8f14778669fdba4b69a6efacd39dfc033b1093e521bd8424a3f3984388866bd402c5db8d8902382bc5a01ab7f65dfdd1d091af14</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/javax.enterprise/cdi-api@1.2?type=jar</purl>
      <externalReferences><reference type="website"><url>http://cdi-spec.org</url></reference><reference type="build-system"><url>http://hudson.jboss.org</url></reference><reference type="distribution"><url>https://repository.jboss.org/nexus/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>http://jira.jboss.org/browse/CDI</url></reference><reference type="vcs"><url>scm:git:git@github.com:cdi-spec/cdi.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.9.0.M2?type=jar">
      <publisher>The Eclipse Foundation</publisher>
      <group>org.eclipse.sisu</group>
      <name>org.eclipse.sisu.inject</name>
      <version>0.9.0.M2</version>
      <description>JSR330-based container; supports classpath scanning, auto-binding, and dynamic auto-wiring</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">eb805c5b2e22c8002877f0caadc6a87c</hash>
        <hash alg="SHA-1">5ace70e1ea696d156f5034a42a615df13a52003a</hash>
        <hash alg="SHA-256">9b62bcfc352a2ec87da8b01e37c952a54d358bbb1af3f212648aeafe7ab2dbb5</hash>
        <hash alg="SHA-512">89544822c6c11a165f36e8bc29d9c69c9bcf85635234367cd9e8065273d891d1e9a8118a283502b20d00594db9c123e59901caf118b92424690fd6b3f60f2cc9</hash>
        <hash alg="SHA-384">7c1331d3ac0f1908861c96a6d0d32dcd9bfaf3bf1c0a403e6b69ffa88ba2d1b1deddfa9a59c92be43d443688e1e0282d</hash>
        <hash alg="SHA3-384">e9f6df518234899f3f7e82d934c4e66164ccb567f8cf232a234a93c414bf6717ad199d2c6dffd8196ccc9826d113fd34</hash>
        <hash alg="SHA3-256">f1646c76c126c31fdbdf4b0833b53246f34314ed3a5480d56d579d29c8759fb7</hash>
        <hash alg="SHA3-512">e4d125178fea97856067ef119d2d6864235056d8aba53b57171aefd36d14e4b54d25a417ca18af19f720efb9b32eae4a1d339e79c1687570735f359cad01f5c2</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-1.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.9.0.M2?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.eclipse.org/sisu/org.eclipse.sisu.inject/</url></reference><reference type="build-system"><url>https://ci.eclipse.org/sisu/job/sisu.inject/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/eclipse/sisu.inject/issues</url></reference><reference type="mailing-list"><url>http://dev.eclipse.org/mhonarc/lists/sisu-dev/</url></reference><reference type="vcs"><url>https://github.com/eclipse/sisu.inject/org.eclipse.sisu.inject</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-artifact@3.2.5?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven</group>
      <name>maven-artifact</name>
      <version>3.2.5</version>
      <description>Maven is a software build management and
    comprehension tool. Based on the concept of a project object model:
    builds, dependency management, documentation creation, site
    publication, and distribution publication are all controlled from
    the declarative file. Maven can be extended by plugins to utilise a
    number of other development tools for reporting or the build
    process.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">6ca73ba6de24218f238a45d8a06e519b</hash>
        <hash alg="SHA-1">bf5ce89d5f7ff57f2a33e78067ba97e62bae007d</hash>
        <hash alg="SHA-256">270385907ecfbcb256fe5afb883869fd57a5c021b5242693743ef787605c6335</hash>
        <hash alg="SHA-512">7be445c021ac2438a9f37d37db159ba5875b32d74ee901a07462f266f1847c97e69cffd3f51058e468539bfa322c270f6bb50852cbb38e39806011386fb08ed8</hash>
        <hash alg="SHA-384">c918bb72c186b84a6990db3749fdf0dbf819f815fde27242276cac59d9da826f00433794f53987ebc844ff6df3768616</hash>
        <hash alg="SHA3-384">8474a49852cbb6c371540445a4b7d1844d1c94f440052762988483657511d383decc574a09446e25ec11178ab2da35e7</hash>
        <hash alg="SHA3-256">c9c137b9a7a9e7de7a7d6be505ed6feef5f4558c8a5a4f03f3ab7b0127953d69</hash>
        <hash alg="SHA3-512">9a8b08a6435c8874897c0de5b919784135621656c7a7254bc5d00c9487a5186ef03faea91a988a955a08c87c56367c8a61fe9b11ff080c8d5fa40b1a75433a07</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven/maven-artifact@3.2.5?type=jar</purl>
      <externalReferences><reference type="website"><url>http://maven.apache.org/ref/3.2.5/maven-artifact</url></reference><reference type="build-system"><url>https://builds.apache.org/job/maven-3.x/</url></reference><reference type="distribution"><url>http://maven.apache.org/download.html</url></reference><reference type="issue-tracker"><url>http://jira.codehaus.org/browse/MNG</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/maven-users</url></reference><reference type="vcs"><url>https://github.com/apache/maven/tree/maven-3.2.5/maven-artifact</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-core@3.2.5?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven</group>
      <name>maven-core</name>
      <version>3.2.5</version>
      <description>Maven Core classes.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">0988ce2795bb72277a0199179154d398</hash>
        <hash alg="SHA-1">fbec7cf0df4fbc2896a6768ae59053877c05c241</hash>
        <hash alg="SHA-256">4f1a0af8997e1daf778b91c5ae9e973f92df699439d909fdec7fc6055c09de12</hash>
        <hash alg="SHA-512">0173f2ad5720466164832da561b8558a1e75786457548ce3d51c5b15c9a08b5c797b1964e1b4398dc31c747917da604fb50a24a747ad1bab16de714002de60a9</hash>
        <hash alg="SHA-384">a680dfb67da5b1e63f0acfe9bcf3fa123e8b164c92735a4537d74c802bc4ce27a6b95865b536f375f054be6b1f7da0ac</hash>
        <hash alg="SHA3-384">292348c2a3f87955e69756bf50bb771ef617d116004dc0562d75ba3fc7155fe3656e9cf8fca96b1882332cb395cb146e</hash>
        <hash alg="SHA3-256">c99bd5901c26db07e360ce8341b6141ed91ebfeaa8f753c8bbb9fc896cfe8573</hash>
        <hash alg="SHA3-512">16f6c6e120fae8fc0eee3792fffe9d0b74b2188f8fe809d54cdc7287b483c550c121e5f188687d96a3a7b19baf66c728047c121362bddeedd7c7ab63afee7017</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven/maven-core@3.2.5?type=jar</purl>
      <externalReferences><reference type="website"><url>http://maven.apache.org/ref/3.2.5/maven-core</url></reference><reference type="build-system"><url>https://builds.apache.org/job/maven-3.x/</url></reference><reference type="distribution"><url>http://maven.apache.org/download.html</url></reference><reference type="issue-tracker"><url>http://jira.codehaus.org/browse/MNG</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/maven-users</url></reference><reference type="vcs"><url>https://github.com/apache/maven/tree/maven-3.2.5/maven-core</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-settings@3.2.5?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven</group>
      <name>maven-settings</name>
      <version>3.2.5</version>
      <description>Maven Settings model.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">9f78e75d76e2f92c08cbbc859bf6e272</hash>
        <hash alg="SHA-1">52179da78893ed7afea98d980c55e658fb04d9b4</hash>
        <hash alg="SHA-256">1874d4ee660b935675a60bdb2ef63e0ff5a81769f4fc04a035fa9d4c4e238224</hash>
        <hash alg="SHA-512">8e2e132534781f316060fe02eecde47dac20c50fbdc30a9e98efc74a1df58e22601319d779fb6d1fa121fab3860ffa61842ab34c04b4e733bf3a6daab5cd1b36</hash>
        <hash alg="SHA-384">f38f547bf3eaedf9f224fd7635ac2b227a381846e80e802a7b664f0652a28487e87710236f016ea3dc4888df9cdb05b3</hash>
        <hash alg="SHA3-384">7fdda9bea5f4b7b380ea763568685780804b4a32d09298bd9959c3aff228e271888dbfb4b1401c5fc6f588f3d7ad637d</hash>
        <hash alg="SHA3-256">d8a3e3fcd8ef17ee6543de61d7294b05acb2d1cd248ad44b86a5ce7e27aca51e</hash>
        <hash alg="SHA3-512">ae62e75c8acbeffbc571a3205d8969e89b470448be178eea2a24d2f42436cdb530fb619c7e935d961aee0fdaba27546f92d3f65e9e22ed5ebbde409b8a547ca6</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven/maven-settings@3.2.5?type=jar</purl>
      <externalReferences><reference type="website"><url>http://maven.apache.org/ref/3.2.5/maven-settings</url></reference><reference type="build-system"><url>https://builds.apache.org/job/maven-3.x/</url></reference><reference type="distribution"><url>http://maven.apache.org/download.html</url></reference><reference type="issue-tracker"><url>http://jira.codehaus.org/browse/MNG</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/maven-users</url></reference><reference type="vcs"><url>https://github.com/apache/maven/tree/maven-3.2.5/maven-settings</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-settings-builder@3.2.5?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven</group>
      <name>maven-settings-builder</name>
      <version>3.2.5</version>
      <description>The effective settings builder, with inheritance and password decryption.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">c48b8a83cd03a5672f07b559ca1a5307</hash>
        <hash alg="SHA-1">7fd98de76398a3ff5c1d9a7b85f26cb65a862578</hash>
        <hash alg="SHA-256">9c5a014ceb8abb55e997dcc41d17bbe0ae145db574be6b7186e75950c241269f</hash>
        <hash alg="SHA-512">f2015ad44aaa0b217e5e0d1e22c366136cd44588961cdca2104c4d9bf7d5067e4952880c537a86a669f1ca0169344012a4ca896a3ea3fed2fd7615ff3a12a208</hash>
        <hash alg="SHA-384">28eb1569383d19df9a7c0568193b733c60ce22ff2bed3eff79bd1773178d65fe237045ffe1423b5bf31fd8fd7395619d</hash>
        <hash alg="SHA3-384">bdca020f5b246ba30a38fd9a21e90e44cf323cfcff5616dfab2e69bf4ecb942ecb4f20e728eb14fe094a534c4737eaa8</hash>
        <hash alg="SHA3-256">397da0ae4301b4328dcaa5cdbda657e5d16100aec9beb56b8ef79c9cc00c433f</hash>
        <hash alg="SHA3-512">03db8e98beb008195127f4e68ecb5f02e921450c5f24ea6e77552be9258ff65c8377d888c15e95c5aeb3a83783c370289914b79ff702917a9f4d467bc7bedbfd</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven/maven-settings-builder@3.2.5?type=jar</purl>
      <externalReferences><reference type="website"><url>http://maven.apache.org/ref/3.2.5/maven-settings-builder</url></reference><reference type="build-system"><url>https://builds.apache.org/job/maven-3.x/</url></reference><reference type="distribution"><url>http://maven.apache.org/download.html</url></reference><reference type="issue-tracker"><url>http://jira.codehaus.org/browse/MNG</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/maven-users</url></reference><reference type="vcs"><url>https://github.com/apache/maven/tree/maven-3.2.5/maven-settings-builder</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-repository-metadata@3.2.5?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven</group>
      <name>maven-repository-metadata</name>
      <version>3.2.5</version>
      <description>Per-directory local and remote repository metadata.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">bda12e2d6070d417a6118c6ba769fd4f</hash>
        <hash alg="SHA-1">17049c63ce63654c112eeb82797edee49f8a4601</hash>
        <hash alg="SHA-256">62b517b77f24edebdee0e382ecddb44bb6632b7c08c528d625aed7d2980df12b</hash>
        <hash alg="SHA-512">487f49f1a2da4c39d92d2460864c7cff8efb2fdbe05ac89346a675b5964c4dc4c4551c43a28a423c55e7184f5fe0e517258c5427b2611f171e601794e8e00c55</hash>
        <hash alg="SHA-384">b49837b04166dac3e7667a0a006c889c7c39b8efb41ff6e1ddd9fbeb0c14ca426f8be4bd62813a92c93020ebdd61bc48</hash>
        <hash alg="SHA3-384">3da3119e454ee311d0a7cbafb30bf36637594986431a926164915571ff3b93847da94af5db6599bf7ad27ed9fb43e32e</hash>
        <hash alg="SHA3-256">e86def0032615109e1e61718e8edf7389d03d4934c59b520e2627a9093f78c8b</hash>
        <hash alg="SHA3-512">9c20fdaaadff92d2937bc36b92b5dcdf84f659afd1b617dd3284914845ce417c796b625aba608b59e602ac41c98f6757efe9a3b8fef695ba4f28c18ded0ffbc4</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven/maven-repository-metadata@3.2.5?type=jar</purl>
      <externalReferences><reference type="website"><url>http://maven.apache.org/ref/3.2.5/maven-repository-metadata</url></reference><reference type="build-system"><url>https://builds.apache.org/job/maven-3.x/</url></reference><reference type="distribution"><url>http://maven.apache.org/download.html</url></reference><reference type="issue-tracker"><url>http://jira.codehaus.org/browse/MNG</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/maven-users</url></reference><reference type="vcs"><url>https://github.com/apache/maven/tree/maven-3.2.5/maven-repository-metadata</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-model-builder@3.2.5?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven</group>
      <name>maven-model-builder</name>
      <version>3.2.5</version>
      <description>The effective model builder, with inheritance, profile activation, interpolation, ...</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">a216c67dae851a4cedb4b431a674eba2</hash>
        <hash alg="SHA-1">7a32f3966fab463df9cdae95fd6df8c2e561e3ae</hash>
        <hash alg="SHA-256">cc5321269d080ad6694458f53186be5391a21c488ab3a7d6dd73123c7681879d</hash>
        <hash alg="SHA-512">a25a612d607e301e3041a0c6edd708a096d23ec6e2e1fc1bc092e1f6b9a6974ba9f5b256007ca2b9a9d23a45b84b2d7b49f38e31ebe42844ad438ad4da92b922</hash>
        <hash alg="SHA-384">36a95790b1b09f903ad1f245318d1874ca2f6a5f8d592f5b9a1c1a182f8f5ed0923f7d1c672ec117b503c33f10107f4e</hash>
        <hash alg="SHA3-384">0eb54a8b97a5d03a4d74dc7c4e6438823b602da24d3c4434ea88e1068668e69f9f17c45687404dbdf84508660d4ead62</hash>
        <hash alg="SHA3-256">3cc2d6070a9c4db3ca2589b1e47097cbb8fd62742d271ee5e8241abc9dc3d1fa</hash>
        <hash alg="SHA3-512">e092aee17c316f4c7649b43b930432a85640ca2b32d00eb4d6a0a5ce0c820a1bffa3a7a6800293b685617f08fb431366aeb499af84550acf5aa86febcb337e10</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven/maven-model-builder@3.2.5?type=jar</purl>
      <externalReferences><reference type="website"><url>http://maven.apache.org/ref/3.2.5/maven-model-builder</url></reference><reference type="build-system"><url>https://builds.apache.org/job/maven-3.x/</url></reference><reference type="distribution"><url>http://maven.apache.org/download.html</url></reference><reference type="issue-tracker"><url>http://jira.codehaus.org/browse/MNG</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/maven-users</url></reference><reference type="vcs"><url>https://github.com/apache/maven/tree/maven-3.2.5/maven-model-builder</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-aether-provider@3.2.5?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven</group>
      <name>maven-aether-provider</name>
      <version>3.2.5</version>
      <description>Extensions to Aether for utilizing Maven POM and repository metadata.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">5b6cc79c8c8abc3c92ae7d57c4cbb078</hash>
        <hash alg="SHA-1">dfddf469d20b877b184dda5d6e60f0c75f558a72</hash>
        <hash alg="SHA-256">703944b922d5351aad53b842f7dd38439b7213425f13c6c7f034b8b699b7d578</hash>
        <hash alg="SHA-512">8ce9984b76364e162f8f31c99222c9b996813f2e12e6a8406d6a438d857855f8255e2f0403af281b081e6bc6e95374cb9faa9cff3f35214de1005c477f408299</hash>
        <hash alg="SHA-384">619bcb4fcf830a43b75b5bb3545173aa302102ead74ac3addee28f278d906841292130c4f515a15319893a3617fdd5ea</hash>
        <hash alg="SHA3-384">502aed022268a41bf0583c2a2d6413ac524d8c57b49c9530e4906556e3f773c346c25d3c915085b70b1d4eb56388a1e9</hash>
        <hash alg="SHA3-256">420420738f280be8d8167376df04b1a1baec6b353365cb226fcf487ac087ee2e</hash>
        <hash alg="SHA3-512">c10c2512042c8e52f72483b9063c510e6c109a07e745a847c460fab956c5a5bbc7b8dd13532628a686a8acbb2312ec13bc6740433f5e9cf750d9c04b90b1ba1c</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven/maven-aether-provider@3.2.5?type=jar</purl>
      <externalReferences><reference type="website"><url>http://maven.apache.org/ref/3.2.5/maven-aether-provider</url></reference><reference type="build-system"><url>https://builds.apache.org/job/maven-3.x/</url></reference><reference type="distribution"><url>http://maven.apache.org/download.html</url></reference><reference type="issue-tracker"><url>http://jira.codehaus.org/browse/MNG</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/maven-users</url></reference><reference type="vcs"><url>https://github.com/apache/maven/tree/maven-3.2.5/maven-aether-provider</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.eclipse.aether/aether-spi@1.0.0.v20140518?type=jar">
      <publisher>The Eclipse Foundation</publisher>
      <group>org.eclipse.aether</group>
      <name>aether-spi</name>
      <version>1.0.0.v20140518</version>
      <description>The service provider interface for repository system implementations and repository connectors.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">51c5870c01f48af3231ce6499464827a</hash>
        <hash alg="SHA-1">985a9a12b904fb3bafd4dc6b49f6a084845703a1</hash>
        <hash alg="SHA-256">a3266d127a4e9f4aa9c4fa0986e31eec784e866f79112e1840d1667e17c10fb2</hash>
        <hash alg="SHA-512">8074048d24d05c20da7adda6b8de93249e9e22b7fb62612b74c9f5623b093a7f23ba2cc2e77808542ee5dca6352b0e40e4f755dbd2a63f83a16d24b180bc19fc</hash>
        <hash alg="SHA-384">fa6d14091ab9b0ff63337e31cd0270640e1a84675733963c2d186ad1a6d2f8f64360431b81124e9c5f3d700ef8269374</hash>
        <hash alg="SHA3-384">5f12b67abc816c2b349cd9e7f0cf7320c0a780d6e4a81970fb84b671ae7b39839c7fba37e5ab75a3044ed93687bc737d</hash>
        <hash alg="SHA3-256">539f920cee955ac715fc4ea32fcb8f42adb81a0a923711683a47231cfc99deb7</hash>
        <hash alg="SHA3-512">a0c69f8c37301220994cc3c53ff810e66f4d3975eee386ed1d875a9e709d6f2a131474c9c7247ce6b7019551d909ef4d478ea2160db817c6a69741e70d025435</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-1.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.eclipse.aether/aether-spi@1.0.0.v20140518?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.eclipse.org/aether/aether-spi/</url></reference><reference type="build-system"><url>https://hudson.eclipse.org/aether/job/aether-core/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://bugs.eclipse.org/bugs/buglist.cgi?query_format=specific&amp;bug_status=__open__&amp;product=Aether</url></reference><reference type="mailing-list"><url>http://dev.eclipse.org/mhonarc/lists/aether-dev/</url></reference><reference type="vcs"><url>http://git.eclipse.org/c/aether/aether-core.git/tree/aether-spi/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.eclipse.aether/aether-impl@1.0.0.v20140518?type=jar">
      <publisher>The Eclipse Foundation</publisher>
      <group>org.eclipse.aether</group>
      <name>aether-impl</name>
      <version>1.0.0.v20140518</version>
      <description>An implementation of the repository system.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">819d1c095629b2bd9ed0980395c91b7d</hash>
        <hash alg="SHA-1">a5ee67be2c99dfb95ad61235d749c92ae09c926e</hash>
        <hash alg="SHA-256">9a9b60e685385225f08e662cb9f60d96610b0987f0f47bbf3f0c92df8a897d00</hash>
        <hash alg="SHA-512">594b84397a652e481e1ed14a7b53b554bf3e851410b99189f78d9aa4dfa872f02e9e536255357799d934d1171607a36d38e7e9ff6409d04f4e88aded914f215b</hash>
        <hash alg="SHA-384">5b38a890f624b378fc5e4e067aee2273f24b6f1dd3ef72ae0dd450bdfdfa873e7f814beab8150b9e0c6957275d81b29e</hash>
        <hash alg="SHA3-384">874dfeaf12482b845a1204927e7ab0848511c46b323864c0d01ce501e41c530f4106c73b410a00f0b5524fd702af0f08</hash>
        <hash alg="SHA3-256">38cbb58e4ddabaa86483d16bfbb5065d2e742820484a15d96e4aad3fea49273a</hash>
        <hash alg="SHA3-512">a2363558799963e4ffb1a1eec2fb0410c1a2a769177f55ac535c50e3b676e626e8dfa0b54e0db9d734641c829d416e6196faeccd3092e6b66168da17b8c7242e</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-1.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.eclipse.aether/aether-impl@1.0.0.v20140518?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.eclipse.org/aether/aether-impl/</url></reference><reference type="build-system"><url>https://hudson.eclipse.org/aether/job/aether-core/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://bugs.eclipse.org/bugs/buglist.cgi?query_format=specific&amp;bug_status=__open__&amp;product=Aether</url></reference><reference type="mailing-list"><url>http://dev.eclipse.org/mhonarc/lists/aether-dev/</url></reference><reference type="vcs"><url>http://git.eclipse.org/c/aether/aether-core.git/tree/aether-impl/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.eclipse.aether/aether-api@1.0.0.v20140518?type=jar">
      <publisher>The Eclipse Foundation</publisher>
      <group>org.eclipse.aether</group>
      <name>aether-api</name>
      <version>1.0.0.v20140518</version>
      <description>The application programming interface for the repository system.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">b05ef5410dad83a4e9ba50e08e0dbbf4</hash>
        <hash alg="SHA-1">be68e917f454dcd841865ad7cf9b7615b26a51f7</hash>
        <hash alg="SHA-256">84b98521684ab22f9528470fa6d8ab68a230e1b211623c989ba7016c306eb773</hash>
        <hash alg="SHA-512">41addf7be0094decb6b4d6c11811b7a7edcc280d60f8a5cb3346d963422cacea84b6dcba7a00fa4a93c69a44b7dc5afd0960b8f56e60ae36f6c8e97ab52ffb5e</hash>
        <hash alg="SHA-384">44e821c90b238407402910a378e17ff3d845f26252bc74ad4b62c4f04bec6aa0a68ecc068eb8ed98ecd11d1b3b628d1f</hash>
        <hash alg="SHA3-384">284850d6126cbf7ecd63c54970fa1e359c17d7c720a2a56ac37d45a091a46506fb9e5c95bcfd4104534e0efd7d3bd802</hash>
        <hash alg="SHA3-256">46af39fc94d4514f2f3705bf8980a98c8a6dbb5d254919eb694518411f0e561b</hash>
        <hash alg="SHA3-512">37fabd5b33c819b890186116a31d127e5737282a1422eb2f42a330b59fab518f6a9f31f1e744521ae1d2a6addf61817eae36c1f8e1db06437484da6e23728d1b</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-1.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.eclipse.aether/aether-api@1.0.0.v20140518?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.eclipse.org/aether/aether-api/</url></reference><reference type="build-system"><url>https://hudson.eclipse.org/aether/job/aether-core/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://bugs.eclipse.org/bugs/buglist.cgi?query_format=specific&amp;bug_status=__open__&amp;product=Aether</url></reference><reference type="mailing-list"><url>http://dev.eclipse.org/mhonarc/lists/aether-dev/</url></reference><reference type="vcs"><url>http://git.eclipse.org/c/aether/aether-core.git/tree/aether-api/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.eclipse.aether/aether-util@1.0.0.v20140518?type=jar">
      <publisher>The Eclipse Foundation</publisher>
      <group>org.eclipse.aether</group>
      <name>aether-util</name>
      <version>1.0.0.v20140518</version>
      <description>A collection of utility classes to ease usage of the repository system.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">08495ee7ecf90f0b528e7d65471532af</hash>
        <hash alg="SHA-1">7df5ba98ce8b78985d75fdd8c2981fe69234ef85</hash>
        <hash alg="SHA-256">aff0951639837c4e3a4699a421fa79f410032f603f5c6a5bba435e98531f3984</hash>
        <hash alg="SHA-512">ec43fd01a81d7f8e027603c4627d50eff58eb53e970b6888b0fe07d2963876075d05fc9a5e39f957904b4bc9bd6d729b9d17a15852064939b7a59f322830747e</hash>
        <hash alg="SHA-384">f6cb988a67a2d93ddcae222408b43d92fe6ede0bbc3646115a246a9a088a418ec50be729efd9eed4cada828eaa171946</hash>
        <hash alg="SHA3-384">a7f597f411b6993c91db48a33e0588f83b25a8d065a15a59d71510771a0c55473b9d63719bcadbae09a4ea6dfc20a50b</hash>
        <hash alg="SHA3-256">c381aa336fff73f9c0cee17ebdce8605ac0c6fe1a548768b58b1f854e8db473b</hash>
        <hash alg="SHA3-512">1d7b47331f01856f80ee1adfd0293350747e6e8640c725ce928c4415c64df57f71ef783bbfcdcdc505c53b7f02f4a48a4258be30eb2b7b32afcd547216e8a587</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-1.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.eclipse.aether/aether-util@1.0.0.v20140518?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.eclipse.org/aether/aether-util/</url></reference><reference type="build-system"><url>https://hudson.eclipse.org/aether/job/aether-core/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://bugs.eclipse.org/bugs/buglist.cgi?query_format=specific&amp;bug_status=__open__&amp;product=Aether</url></reference><reference type="mailing-list"><url>http://dev.eclipse.org/mhonarc/lists/aether-dev/</url></reference><reference type="vcs"><url>http://git.eclipse.org/c/aether/aether-core.git/tree/aether-util/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.sonatype.sisu/sisu-guice@3.2.3?classifier=no_aop&amp;type=jar">
      <publisher>Google, Inc.</publisher>
      <group>org.sonatype.sisu</group>
      <name>sisu-guice</name>
      <version>3.2.3</version>
      <description>Patched build of Guice: a lightweight dependency injection framework for Java 6 and above</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">733be430711a32f2b9ba72da565cab2f</hash>
        <hash alg="SHA-1">6b8262f32ff7b60881aed3e7aa9d81fdb48330e9</hash>
        <hash alg="SHA-256">004af7012b6d11ab585ae841130ff091dcad6531d7bf13db4d7deac91589eef4</hash>
        <hash alg="SHA-512">6cbd0095a564aa76423a835c08ee3c12f61eecae241f1c19fb4909f6b5355143e901766e9c7ae97953f70adbec79b8561cbc1e02af51c23552599ed5cb2b5ce2</hash>
        <hash alg="SHA-384">1af7c634c87fc8ec7245c0ada7031f43c54df00072fc637604d3043f43e319368e65e234457b53313364ecfb0c03b6fc</hash>
        <hash alg="SHA3-384">6f95906cf706a0cac5a023d4236bf38a44c5a1abf350e87c8317c2c1aa2a4b34924479ebfa3705f146062f6c2bb29839</hash>
        <hash alg="SHA3-256">d7f517ba0884569b13bd46d218472ab948567bb311307c63cbb0a00b611cc4ab</hash>
        <hash alg="SHA3-512">ef046f737e580bc9682d724665c9b1485475c2d10122776dda545891a7913773af6439b9e22e136a27cefddf9dfa4649a1e32107c7bcb9edb2cb9f5aac05160a</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.sonatype.sisu/sisu-guice@3.2.3?classifier=no_aop&amp;type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/google/guice/sisu-guice</url></reference><reference type="build-system"><url>https://travis-ci.org/google/guice</url></reference><reference type="distribution"><url>https://repository.sonatype.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://github.com/google/guice/issues/</url></reference><reference type="mailing-list"><url>http://groups.google.com/group/google-guice/topics</url></reference><reference type="vcs"><url>http://github.com/sonatype/sisu-guice/sisu-guice</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/aopalliance/aopalliance@1.0?type=jar">
      <group>aopalliance</group>
      <name>aopalliance</name>
      <version>1.0</version>
      <description>AOP Alliance</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">04177054e180d09e3998808efa0401c7</hash>
        <hash alg="SHA-1">0235ba8b489512805ac13a8f9ea77a1ca5ebe3e8</hash>
        <hash alg="SHA-256">0addec670fedcd3f113c5c8091d783280d23f75e3acb841b61a9cdb079376a08</hash>
        <hash alg="SHA-512">3f44a932d8c00cfeee2eb057bcd7c301a2d029063e0a916e1e20b3aec4877d19d67a2fd8aaf58fa2d5a00133d1602128a7f50912ffb6cabc7b0fdc7fbda3f8a1</hash>
        <hash alg="SHA-384">4dddf44338b5aff9580da2532b81c0ac3e1d09e1f28c6db871a55cad442b705dd7791eb07f9d4577d49d0be3673ba783</hash>
        <hash alg="SHA3-384">2bd64cbaf769c6e4e85e34f7a6119d89e16fbf55af3fc5d6cbd52eb214c367dec1ac7b9062ee0fb35a2e0acfc7c477e1</hash>
        <hash alg="SHA3-256">d4a726b2bf8aa58197021a7d8fca674b4b2790d4c48de43a92f728866a91c2f0</hash>
        <hash alg="SHA3-512">830bc3f8328be76897990e9b9fc42eef02623115e456af96ad09b20900ad615519c8c8de60155ac04fb332eaa9510110d52edd13911af76271c71d91cbd789cc</hash>
      </hashes>
      <licenses>
        <license>
          <name>Public Domain</name>
        </license>
      </licenses>
      <purl>pkg:maven/aopalliance/aopalliance@1.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://aopalliance.sourceforge.net</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.guava/guava@16.0.1?type=jar">
      <group>com.google.guava</group>
      <name>guava</name>
      <version>16.0.1</version>
      <description>Guava is a suite of core and expanded libraries that include
    utility classes, google's collections, io classes, and much
    much more.

    Guava has only one code dependency - javax.annotation,
    per the JSR-305 spec.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">a68693df58191585d9af914cfbe6067a</hash>
        <hash alg="SHA-1">5fa98cd1a63c99a44dd8d3b77e4762b066a5d0c5</hash>
        <hash alg="SHA-256">a896857d07845d38c7dc5bbc0457b6d9b0f62ecffda010e5e9ec12d561f676d3</hash>
        <hash alg="SHA-512">a9df202229a7955b70f35f33c9662bb0e7fec9e972c1fbac95fcf77ebacf18fea7e834dd60dcec1c8b6894393c75c480e08067e661cc234dea4829b952b7a2c4</hash>
        <hash alg="SHA-384">acc4ff89db23b3e6711f2be79f7c0d430f59327a3f1c9b3dd542e5618c6fec0d74357cf18c4c98c5915c587d4bcd9cbf</hash>
        <hash alg="SHA3-384">2408da9af0df3c949d93b1b6c642f8afd96210a641521ada29b80f19611ddc9505273de86cfa57440531e4f0234a985b</hash>
        <hash alg="SHA3-256">a7042d5a5d683bf80eafdac37adc3d10075ade64edb82daae574bb49cf2fe9cd</hash>
        <hash alg="SHA3-512">e57cd5702d6e2bd8ac39b31eb638b77ff33d15e2498efff2c6ffee9cbf556c466dd98a7ad8d49b085302a32a6f15e1c7a0593e2cc4db90559a38daceba43221f</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.guava/guava@16.0.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://code.google.com/p/guava-libraries/guava</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>http://code.google.com/p/guava-libraries/issues</url></reference><reference type="vcs"><url>http://code.google.com/p/guava-libraries/source/browse/guava</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.codehaus.plexus/plexus-interpolation@1.21?type=jar">
      <publisher>Codehaus</publisher>
      <group>org.codehaus.plexus</group>
      <name>plexus-interpolation</name>
      <version>1.21</version>
      <description>The Plexus project provides a full software stack for creating and executing software projects.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">6629656495f4e5eac4f244fe3b252ea1</hash>
        <hash alg="SHA-1">f92de59d295f16868001644acc21720f3ec9eb15</hash>
        <hash alg="SHA-256">aba7980581027ad5fc74a27ee4d64aad74932fdb32694967242d03fc50290d1f</hash>
        <hash alg="SHA-512">073168d32e16e4e67598558ebbb68778740185e6dcb87d68ab2a68ab867c2acbf2af5c1e8fc82dcb8b2062e46ddc36b6024c00cd5c2fffe794b4610d5f13a66d</hash>
        <hash alg="SHA-384">2ce80945419fddaf00d2d7110d8b0c61975dde40d6b8b643262eff84263974c5551391f5028a995d84c46c65a0ab954e</hash>
        <hash alg="SHA3-384">b887e8ac5cc4fc4427a50c94b6e6aa3d69862dc8880d97999854a397a48f1c57761ab5b8cb3f47045c4d986021a1e395</hash>
        <hash alg="SHA3-256">68a85fb904f7d5a8241b24383f8f90601c47e2a013576e9af9f9ccadcc935d35</hash>
        <hash alg="SHA3-512">7784d80c733fce282ac416c21fc883894679a48a63f5afa50dadd6ff554babc80188fc13eec959e0adcc4e49711c06b338aa5b8f5df80f2abb36394923e32088</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.codehaus.plexus/plexus-interpolation@1.21?type=jar</purl>
      <externalReferences><reference type="website"><url>http://plexus.codehaus.org/plexus-components/plexus-interpolation</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>http://jira.codehaus.org/browse/PLXCOMP</url></reference><reference type="mailing-list"><url>http://archive.plexus.codehaus.org/user</url></reference><reference type="vcs"><url>http://github.com/sonatype/plexus-interpolation</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.codehaus.plexus/plexus-classworlds@2.5.2?type=jar">
      <publisher>Codehaus</publisher>
      <group>org.codehaus.plexus</group>
      <name>plexus-classworlds</name>
      <version>2.5.2</version>
      <description>A class loader framework</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">53b54feee8cef6b843bd6748bda4bfa7</hash>
        <hash alg="SHA-1">4abb111bfdace5b8167db4c0ef74644f3f88f142</hash>
        <hash alg="SHA-256">b2931d41740490a8d931cbe0cfe9ac20deb66cca606e679f52522f7f534c9fd7</hash>
        <hash alg="SHA-512">5bbbce8880a8513ba1314c202005de96fe263b48f45d5cd6a3a3577fdfe7ccd88c2b908093eec237e6624f5dbba664dfb8aa82939cc540bb6652c0f4eea7b333</hash>
        <hash alg="SHA-384">27df83d9e2eb2730f1b0480aead44e0ed8c5243c0e3d96642e564917ee621f3c8b3217a4f3ae4f640fe9f8a0b67a43da</hash>
        <hash alg="SHA3-384">0ed9e4f4bcb3baecda4730667de8d8c93edbfcb1c97d7cf203eac5de3c783c6bc2881b196505b4c0bb10eecc58cb2212</hash>
        <hash alg="SHA3-256">96476ac810a44f0026e4d32bf571b4597735f0bf06a722128104147484b851f7</hash>
        <hash alg="SHA3-512">0da78c61970ad7c2f351727d89361270458559a7448083c5f369547a19cc7a9afc4f3b939e829e87bef06406cd0d4cb57a5b6749d4692d71da37dd4bd090fe41</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.codehaus.plexus/plexus-classworlds@2.5.2?type=jar</purl>
      <externalReferences><reference type="website"><url>http://plexus.codehaus.org/plexus-classworlds/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>http://jira.codehaus.org/browse/PLX</url></reference><reference type="mailing-list"><url>http://archive.plexus.codehaus.org/user</url></reference><reference type="vcs"><url>http://github.com/sonatype/plexus-classworlds</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.codehaus.plexus/plexus-component-annotations@1.5.5?type=jar">
      <publisher>Codehaus</publisher>
      <group>org.codehaus.plexus</group>
      <name>plexus-component-annotations</name>
      <version>1.5.5</version>
      <description>Plexus Component "Java 5" Annotations, to describe plexus components properties in java sources with
    standard annotations instead of javadoc annotations.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">ef37dcdb84030422db428b63c4354e5b</hash>
        <hash alg="SHA-1">c72f2660d0cbed24246ddb55d7fdc4f7374d2078</hash>
        <hash alg="SHA-256">4df7a6a7be64b35bbccf60b5c115697f9ea3421d22674ae67135dde375fcca1f</hash>
        <hash alg="SHA-512">2ea4afb8888f157483c6a8e99852fa8a80e90a3cf0756b3b22c73a8bc59a4aa3d7b50b975a1d810f28a090023b268dab49af14e8f8e33c7553fa61315afe06b2</hash>
        <hash alg="SHA-384">94193ec354f65fa8427b4b5115d1f47cb3bd70b0589c612cb5c604d8a2ddf0cce1d8683bf70c5576c27fc3dad33f0ac0</hash>
        <hash alg="SHA3-384">eccd004db31d02566b743eb55bcfbc7161aca472a4ab3e86fbb437f0bc19bdb666830a6168646b6d569a09f2af4c4fbc</hash>
        <hash alg="SHA3-256">b739989c677fee5136fea5f48524f385bd6a161eb8d606772b05afc10d94c827</hash>
        <hash alg="SHA3-512">58bf57dfa292eeeee95108a732ec5fd9e75cc08e23c94b2335e137c05159b565224529db6348448f973d057c37c84007c417d47de52875d09209a6873a43e218</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.codehaus.plexus/plexus-component-annotations@1.5.5?type=jar</purl>
      <externalReferences><reference type="website"><url>http://plexus.codehaus.org/plexus-containers/plexus-component-annotations/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>http://jira.codehaus.org/browse/PLX</url></reference><reference type="mailing-list"><url>http://archive.plexus.codehaus.org/user</url></reference><reference type="vcs"><url>http://fisheye.codehaus.org/browse/plexus/plexus-containers/tags/plexus-containers-1.5.5/plexus-component-annotations</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.sonatype.plexus/plexus-sec-dispatcher@1.3?type=jar">
      <group>org.sonatype.plexus</group>
      <name>plexus-sec-dispatcher</name>
      <version>1.3</version>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">53160199f5667de3fca69b723173639b</hash>
        <hash alg="SHA-1">dedc02034fb8fcd7615d66593228cb71709134b4</hash>
        <hash alg="SHA-256">3b0559bb8432f28937efe6ca193ef54a8506d0075d73fd7406b9b116c6a11063</hash>
        <hash alg="SHA-512">8b609608e4ce1346fdd3a0793d66dbdb893d6af046594ccc456eaceabca3f7a251cc8a6f1cad22fc17688911d0842cc84fa2303027fdf241c77f4078905aaacd</hash>
        <hash alg="SHA-384">539392b84ed3dfeeaa97c42a4befa559a05d18baabcadda2537b18fe8f340e11823ce0646e8931b92a4cfb24cd39d981</hash>
        <hash alg="SHA3-384">9355f99fc6e1c5f4eaa73417b730adfed5d5d20528171aea4b487b8a75028a900d67abd923df025dffd20f32edff69ab</hash>
        <hash alg="SHA3-256">b6185018455b1ffd854f9d5ef2ba2dc5750ad4c68789854e4c2440bd91ada76c</hash>
        <hash alg="SHA3-512">323c863614c94d12508265454a5c598358a0b5b2fb18400d1ab457cf3a161c7e31079ada7ab8ed5d1b28d1e4dee9ab8f82cfb84ad40b42d69e330562d1a69da7</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.sonatype.plexus/plexus-sec-dispatcher@1.3?type=jar</purl>
      <externalReferences><reference type="website"><url>http://spice.sonatype.org/plexus-sec-dispatcher</url></reference><reference type="build-system"><url>https://grid.sonatype.org/ci/view/Spice/</url></reference><reference type="distribution"><url>http://repository.sonatype.org/content/repositories/releases</url></reference><reference type="issue-tracker"><url>https://issues.sonatype.org/browse/SPICE</url></reference><reference type="vcs"><url>http://svn.sonatype.org/spice/tags/plexus-sec-dispatcher-1.3</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.sonatype.plexus/plexus-cipher@1.4?type=jar">
      <group>org.sonatype.plexus</group>
      <name>plexus-cipher</name>
      <version>1.4</version>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">7b2d6fcf0d5800d5b1ce09d98d98dcaf</hash>
        <hash alg="SHA-1">50ade46f23bb38cd984b4ec560c46223432aac38</hash>
        <hash alg="SHA-256">5a15fdba22669e0fdd06e10dcce6320879e1f7398fbc910cd0677b50672a78c4</hash>
        <hash alg="SHA-512">deb948be3a9f6a2fa74adca17e54b1074948267b3a35dd4000d92c559d0387650770ccee096ad8f01dd51c36caf63878dc0bcf57dfb1f2e3e1a9d51204096617</hash>
        <hash alg="SHA-384">29d6722d6d4c412a98ed95f1fd6620047b22ce8d7e3160bcc49ca616a016b57be0c4d35daa8896ef93a80bcff77725ec</hash>
        <hash alg="SHA3-384">2f27b64dcb2dcc7b16eb24487c67363a2977d4d695b97ebea829b7301c444e07cbf8a8b0471332c81b3d3ee393388834</hash>
        <hash alg="SHA3-256">ef83ecf09c7bda0c412b6acdf558171f4f5f1065a68359916ecffcbea8e3475d</hash>
        <hash alg="SHA3-512">1a8b406ab9d63cb3af63e56a09bbde88e404041a1b70c68487c1c0009c24d042cea9ee2325ad99c0aee845ec61ff17a69ae14843f08de2f5af90cd5bb617e34c</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.sonatype.plexus/plexus-cipher@1.4?type=jar</purl>
      <externalReferences><reference type="website"><url>http://spice.sonatype.org/plexus-cipher</url></reference><reference type="build-system"><url>https://grid.sonatype.org/ci/view/Spice/</url></reference><reference type="distribution"><url>http://repository.sonatype.org/content/repositories/releases</url></reference><reference type="issue-tracker"><url>https://issues.sonatype.org/browse/SPICE</url></reference><reference type="vcs"><url>http://svn.sonatype.org/spice/tags/plexus-cipher-1.4</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven.plugin-tools/maven-plugin-annotations@3.10.2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven.plugin-tools</group>
      <name>maven-plugin-annotations</name>
      <version>3.10.2</version>
      <description>Java annotations to use in Mojos</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">b06dba2d701e028fca2951e22043af00</hash>
        <hash alg="SHA-1">631e7bece9413b0aa45daefff48e48b291a4de66</hash>
        <hash alg="SHA-256">96ecaa2fd230ec1689976f3916650695c2b6b204f8418fc49121deb4a27ccaa5</hash>
        <hash alg="SHA-512">9ea3923ea1bcf82dcca9b974bd929b1c548b92bb7201740fc4b0949ee20c64129dc7be643efdaf3411d83470377ccd935c9baa0ada98239dc76ebce5438d7a62</hash>
        <hash alg="SHA-384">f74139ea1da450e4c002fdce86c49c63ecca4002ea84bb6c602aa703eaf96691bb44861cc4fb5de836a0c648239abb0b</hash>
        <hash alg="SHA3-384">e3dbc5a77496443d6759a4119902bc07db622eee1dba1d71aef343272ef518e4897c09f3fb7fb5e6d61a0b4a689fee1b</hash>
        <hash alg="SHA3-256">4cb335f11a845f0a63991fcbc4dc054a03955fcef8f96cedff77b10915f910dc</hash>
        <hash alg="SHA3-512">e9a6d3803e2229c43cad870c622ffa1c913011c7ef4314d0e2604a972af4fa2f3c7164f99b534c5421e48c7b38fdcf1854da2689b763000505a1679f3a3e25b6</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven.plugin-tools/maven-plugin-annotations@3.10.2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://maven.apache.org/plugin-tools/maven-plugin-annotations</url></reference><reference type="build-system"><url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-plugin-tools/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/MPLUGIN</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?users@maven.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/maven-plugin-tools/tree/maven-plugin-tools-3.10.2/maven-plugin-annotations</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-archiver@3.6.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven</group>
      <name>maven-archiver</name>
      <version>3.6.1</version>
      <description>Provides utility methods for creating JARs and other archive files from a Maven project.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">a2fdb930b0fd117baa7ebda5742e60f6</hash>
        <hash alg="SHA-1">7797346a0cfdac37326e0bcd04eca32c0f76b429</hash>
        <hash alg="SHA-256">a5fd6e2121c0a3f5e5cafdf336e21ba2e67a2cf7e781f69e3b8ae28215832823</hash>
        <hash alg="SHA-512">537580a7dc1e78615fcaf933cc863645190784c8e9576ac7123eb6b11a2527dcfe4c57307189c427c3b2e6b4ea83593fa037fa4ac8513f8703ef0b52c093bf8f</hash>
        <hash alg="SHA-384">cabe9b375661f9376f3343f6ef02fe75e4ab28eab843fe7ffc5f2579e7ea684ffa4aa45e26523bcd11712a4966cb44b1</hash>
        <hash alg="SHA3-384">14a7c4cf078d975398c0eb0be90ec3f9e29e6a89cdc63c838045d144c7912efe23355d75dcb38ed061a21b67923151bc</hash>
        <hash alg="SHA3-256">f8ac036230118bbdb5b4cc0b61de3b7b845a14f92aebc1b5612444ba6f8bd501</hash>
        <hash alg="SHA3-512">4070bef92e7a15608acebd06bcf3b210cca15a5ac42cf54d5cd98c84c3b74d32da27824b621108e576c2a6847ce76000c64def5653cd3609a2d018d38cee4bf2</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven/maven-archiver@3.6.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://maven.apache.org/shared/maven-archiver/</url></reference><reference type="build-system"><url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-archiver/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/issues/?jql=project%3DMSHARED+AND+component%3Dmaven-archiver</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?users@maven.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/maven-archiver/tree/maven-archiver-3.6.1</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.codehaus.plexus/plexus-archiver@4.9.1?type=jar">
      <publisher>Codehaus Plexus</publisher>
      <group>org.codehaus.plexus</group>
      <name>plexus-archiver</name>
      <version>4.9.1</version>
      <description>The Plexus project provides a full software stack for creating and executing software projects.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">e9e2ae43947dd9054f4062f4c0de01fa</hash>
        <hash alg="SHA-1">4af255703504c078c9e4ab9f94cdc9e915ba8977</hash>
        <hash alg="SHA-256">a33a0817c46e75f1d0af9abb201eab5f53b09cc7767595914d754ae17769da2d</hash>
        <hash alg="SHA-512">feb5de35721ce8355b1ded61e4251628b41a4c2a3a5dfdf7d93620de3c2ec73d07c1406f75f8b8cb0c715b178df9526b2a2b48c07e78d39e817145d1f9c957f1</hash>
        <hash alg="SHA-384">f7f287d01b0369ee1ee36e2c63b69fe6fd235d14b7fecc7761ef16782e9541dd7e5f772ab4c60b1cd9e37723b5e74426</hash>
        <hash alg="SHA3-384">6e679355190c4e113aa622cfa5c3b6b92498b851f2d3ac86d7bd480ef8db24876283ae362acf3bb91ffa4ff238fb29fc</hash>
        <hash alg="SHA3-256">b5497bf42b771a941078ba27e7b7bb73da908bd20e6325e7931a3d7b95be91cd</hash>
        <hash alg="SHA3-512">343e663f30304d17a72ca33d35260a1080f3a609e29d212fc8bf00e044d7d136f3e32e1439b413b74e1a8d60a83279d44a8334d4297c94f79d648ffeafb8f889</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.codehaus.plexus/plexus-archiver@4.9.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://codehaus-plexus.github.io/plexus-archiver/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/codehaus-plexus/plexus-archiver/issues</url></reference><reference type="mailing-list"><url>https://groups.google.com/forum/#!forum/mojohaus-dev</url></reference><reference type="vcs"><url>https://github.com/codehaus-plexus/plexus-archiver/tree/plexus-archiver-4.9.1/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/javax.inject/javax.inject@1?type=jar">
      <group>javax.inject</group>
      <name>javax.inject</name>
      <version>1</version>
      <description>The javax.inject API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">289075e48b909e9e74e6c915b3631d2e</hash>
        <hash alg="SHA-1">6975da39a7040257bd51d21a231b76c915872d38</hash>
        <hash alg="SHA-256">91c77044a50c481636c32d916fd89c9118a72195390452c81065080f957de7ff</hash>
        <hash alg="SHA-512">e126b7ccf3e42fd1984a0beef1004a7269a337c202e59e04e8e2af714280d2f2d8d2ba5e6f59481b8dcd34aaf35c966a688d0b48ec7e96f102c274dc0d3b381e</hash>
        <hash alg="SHA-384">ac04c9f03ccbe35a25deb8b50280a0ca01dbe6aff0dd795d55af6112bfe3cd5817eb82f32fb18378d86cd64b07597190</hash>
        <hash alg="SHA3-384">fca090ecb1edeacb9fe865dc515cd1d109b323cd742d4a9733ff199a96ee96e0db4f924079520b9c189ef750f255475d</hash>
        <hash alg="SHA3-256">5b0054e39e522de0e0ffc4034d12f72270291fb24d94d5ffc9c4d69c25035fc6</hash>
        <hash alg="SHA3-512">fb290f5a70b1efc1dff12f40a0b2d7b94019f66da42e78010c0b8e61f222c4f267b67e356a9e9c346eb801e5515e36243888f280c5cb95c2dd69016a30cadeb9</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/javax.inject/javax.inject@1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://code.google.com/p/atinject/</url></reference><reference type="vcs"><url>http://code.google.com/p/atinject/source/checkout</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.codehaus.plexus/plexus-io@3.4.1?type=jar">
      <publisher>Codehaus Plexus</publisher>
      <group>org.codehaus.plexus</group>
      <name>plexus-io</name>
      <version>3.4.1</version>
      <description>The Plexus project provides a full software stack for creating and executing software projects.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">7921fc78e18b1dc3dabe8ca5e3558657</hash>
        <hash alg="SHA-1">e9dc0280372501917a124af943dcb709f73577a2</hash>
        <hash alg="SHA-256">ac3be07c2968f98656604ddb8fdf08f1cfc560bc7b329fd17847f151510dc2c4</hash>
        <hash alg="SHA-512">c1555c9c23b61cd9fa1ee39c4015652eedf7e593e0515188d60ce66d1e33852e3570db7c6a471c3d128cbb0cb3bad1aaa526d2db532b0ed73b85678fb5436a5c</hash>
        <hash alg="SHA-384">96a7ad4a6ace76b43a3188e621431b316b671b416f1fb894db73ab8c57729234c2ae4b4f0680045df7a3f54e1699107b</hash>
        <hash alg="SHA3-384">6e6295afe879f7236bd223f14102ceb3714f18fe539c9c1c65782d9fa250aaf90a57a433ff9df264a66053170408dc68</hash>
        <hash alg="SHA3-256">ab97d2c2f4df777fb6e1a01b781c58e644b4bd2f6093d0dcd31533685d01bee4</hash>
        <hash alg="SHA3-512">9d2aa908d414745ad92fae20b8b2cf833e137293a5e01d95c5308ab1464636696d7aa6351cf62323858e7942aa64a6af676710c8788ea6bc1ebadb094353a2a4</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.codehaus.plexus/plexus-io@3.4.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://codehaus-plexus.github.io/plexus-io/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/codehaus-plexus/plexus-io/issues</url></reference><reference type="mailing-list"><url>http://archive.plexus.codehaus.org/user</url></reference><reference type="vcs"><url>http://github.com/codehaus-plexus/plexus-io</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-io/commons-io@2.11.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-io</group>
      <name>commons-io</name>
      <version>2.11.0</version>
      <description>The Apache Commons IO library contains utility classes, stream implementations, file filters,
file comparators, endian transformation classes, and much more.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">3b4b7ccfaeceeac240b804839ee1a1ca</hash>
        <hash alg="SHA-1">a2503f302b11ebde7ebc3df41daebe0e4eea3689</hash>
        <hash alg="SHA-256">961b2f6d87dbacc5d54abf45ab7a6e2495f89b75598962d8c723cea9bc210908</hash>
        <hash alg="SHA-512">5bd78eed456ede30119319c5bed8e3e4c443b6fd7bdb3a7a5686647bd83094d0c3e2832a7575cfb60e4ef25f08106b93476939d3adcfecf5533cc030b3039e10</hash>
        <hash alg="SHA-384">114f1e324d90ad887c177876d410f5787a8e8da6c48d4b2862d365802c0efded3a88cb24046976bf6276cadad3712f0f</hash>
        <hash alg="SHA3-384">80288c03ad4d80d69f91d056ffc5570d49a9c76bf54ad2dff0121ecde26a560df76d05156f281f5c6db2a38ff07a873d</hash>
        <hash alg="SHA3-256">5adfb5ccaf5f21a549422f426118a9542673926fcd18c68390cf813e791dcf6c</hash>
        <hash alg="SHA3-512">7573f47f0babb53cefdc7c2309a0b982d800139064537b0797da442853d081010ad7c3c74a500598a0f800639a5d540eca21963ea652c68613907059bd4278c2</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/commons-io/commons-io@2.11.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://commons.apache.org/proper/commons-io/</url></reference><reference type="build-system"><url>https://builds.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/IO</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-io.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-compress@1.25.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-compress</name>
      <version>1.25.0</version>
      <description>Apache Commons Compress defines an API for working with
compression and archive formats.  These include: bzip2, gzip, pack200,
LZMA, XZ, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4,
Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">45f94488e95ceeaf2f401c4f5542b35c</hash>
        <hash alg="SHA-1">9d35aec423da6c8a7f93d7e9e1c6b1d9fe14bb5e</hash>
        <hash alg="SHA-256">d0ec8014ebbb0749f471803122b21796afddf2e98e194e4374622e5fbaf69f49</hash>
        <hash alg="SHA-512">262ba7771cef5b3eee9e8790102cbe022bb52f5e4bd7f69e3ab132563472bbd5ae6de653df467bfbd7e9828d5edf9b81a6c43236b3ae65ac757ba745abb4f764</hash>
        <hash alg="SHA-384">73124bf7ce8a827d1bb42c4a7fddf2cbf6a89b84f32a7e0cac4a7bbcc99c5a7267a679c8fb0ae3bfb631e7824250da0c</hash>
        <hash alg="SHA3-384">81f4e544a5000293b27f35c8b6a78ccb9e04eafaeb6252ddd78724ebd43ced9e790eec488db1ba96b5c130898821d6e2</hash>
        <hash alg="SHA3-256">b75cf4407a6973e1e56710f4f2ec25fbe59c1503101bd23d164d78d5a655b506</hash>
        <hash alg="SHA3-512">511656c844b399f004af9591124dbdbaf6f8bb6893a03e55b0f9bcc745fcfb9ab5521e9eff859c2a4b4f2aa2188ae603bc18d38b510bc7c047e7f84238f782ed</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-compress@1.25.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://commons.apache.org/proper/commons-compress/</url></reference><reference type="build-system"><url>https://github.com/apache/commons-parent/actions</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/COMPRESS</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-compress.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar">
      <publisher>QOS.ch</publisher>
      <group>org.slf4j</group>
      <name>slf4j-api</name>
      <version>1.7.36</version>
      <description>The slf4j API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">872da51f5de7f3923da4de871d57fd85</hash>
        <hash alg="SHA-1">6c62681a2f655b49963a5983b8b0950a6120ae14</hash>
        <hash alg="SHA-256">d3ef575e3e4979678dc01bf1dcce51021493b4d11fb7f1be8ad982877c16a1c0</hash>
        <hash alg="SHA-512">f9b033fc019a44f98b16048da7e2b59edd4a6a527ba60e358f65ab88e0afae03a9340f1b3e8a543d49fa542290f499c5594259affa1ff3e6e7bf3b428d4c610b</hash>
        <hash alg="SHA-384">2b14ad035877087157e379d3277dcdcd79e58d6bdb147c47d29e377d75ce53ad42cafbf22f5fb7827c7e946ff4876b9a</hash>
        <hash alg="SHA3-384">3bc3110dafb8d5be16a39f3b2671a466463cd99eb39610c0e4719a7bf2d928f2ea213c734887c6926a07c4cca7769e4b</hash>
        <hash alg="SHA3-256">ba2608179fcf46e2291a90b9cbb4aa30d718e481f59c350cc21c73b88d826881</hash>
        <hash alg="SHA3-512">14c4edcd19702ef607d78826839d8a6d3a39157df54b89a801d3d3cbbe1307131a77671b041c761122730fb1387888c5ec2e46bdd80e1cb07f8f144676441824</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
          <url>https://opensource.org/licenses/MIT</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.slf4j.org</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/qos-ch/slf4j/slf4j-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.iq80.snappy/snappy@0.4?type=jar">
      <group>org.iq80.snappy</group>
      <name>snappy</name>
      <version>0.4</version>
      <description>Port of Snappy to Java</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">f0792d1dbe7f90d8b34c7c19961e0073</hash>
        <hash alg="SHA-1">a42b2d92a89efd35bb14738000dabcac6bd07a8d</hash>
        <hash alg="SHA-256">46a0c87d504ce9d6063e1ff6e4d20738feb49d8abf85b5071a7d18df4f11bac9</hash>
        <hash alg="SHA-512">dfd2559bf0388c6f1987d1393497a423203b2a72febbe648b3429e4d07b47a504797228e6e4e39a94c6800c5d3df8d3792863a3b841e6e8f65cfdcda91b6f0ab</hash>
        <hash alg="SHA-384">7b5feeb0f1ee3fd3f5cd17c5ea31a75cdd060e7beaa1773474727711c308d2cf5b900b5717965afe8c14912e33c41538</hash>
        <hash alg="SHA3-384">d96d486687e858c1ebe1fadbd731d33e0233922eee703f1a4e36e68fa1dcc527cdcc4fae8fc91894ebeada2a1214606e</hash>
        <hash alg="SHA3-256">cf1b329b3f46891dc9e86fe9c6350a023dc0cb411739d2fd9d35490dfa8397aa</hash>
        <hash alg="SHA3-512">3a8584d15b63d4c371fed5b615f7a121fe2530d35d234b2caa499c53e7c558376ed22d289828276fbc77cd7c1311ba4d6c1af03edf08c5f051d5b674f01e6120</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.iq80.snappy/snappy@0.4?type=jar</purl>
      <externalReferences><reference type="website"><url>http://github.com/dain/snappy</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>http://github.com/dain/snapy/tree/master</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.tukaani/xz@1.9?type=jar">
      <group>org.tukaani</group>
      <name>xz</name>
      <version>1.9</version>
      <description>XZ data compression</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">57c2fbfeb55e307ccae52e5322082e02</hash>
        <hash alg="SHA-1">1ea4bec1a921180164852c65006d928617bd2caf</hash>
        <hash alg="SHA-256">211b306cfc44f8f96df3a0a3ddaf75ba8c5289eed77d60d72f889bb855f535e5</hash>
        <hash alg="SHA-512">a4362db234d4e83683e90f5baf90c82107450cc4404acab96e3fab14b8a3d4588a19722171d32f27d18463682a6994cad9af0b1065c954e3a77ea7bdcf586bac</hash>
        <hash alg="SHA-384">aa30349b094723369908369a18e2cb5beb5b7ca0b24b4d56c2f5725fae152220f6526466672b22bfec939e2e0622a01d</hash>
        <hash alg="SHA3-384">b3e1fee7784188df5e1931c9e8137ac0e20e63f66f93e7f938a448fc0b3adb4be5205c7a5f1835007e233fee2696fc2c</hash>
        <hash alg="SHA3-256">92eff603ed0aab557e1a45e17a74e80d8ec656b5f137197b23c429c903fa448f</hash>
        <hash alg="SHA3-512">b290f92958f8cd91705331d8411140c23957ab8b568fbe19a70f4f1dc97eddc13d3a200df28a02ab5911ce18f546c33f720878be0f727edac839a6e63ee66ece</hash>
      </hashes>
      <licenses>
        <license>
          <name>Public Domain</name>
        </license>
      </licenses>
      <purl>pkg:maven/org.tukaani/xz@1.9?type=jar</purl>
      <externalReferences><reference type="website"><url>https://tukaani.org/xz/java.html</url></reference><reference type="vcs"><url>https://git.tukaani.org/?p=xz-java.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.github.luben/zstd-jni@1.5.5-11?type=jar">
      <publisher>com.github.luben</publisher>
      <group>com.github.luben</group>
      <name>zstd-jni</name>
      <version>1.5.5-11</version>
      <description>JNI bindings for Zstd native library that provides fast and high compression lossless algorithm for Java and all JVM languages.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">00977099d76d2c01a7b19263375ee42e</hash>
        <hash alg="SHA-1">ca6ab366315e179dd80645aad4a60bab959c6523</hash>
        <hash alg="SHA-256">d75b2ced6059f81ad23e021c554259b906b6c4f2991cb772409827569ead4c1a</hash>
        <hash alg="SHA-512">d9bb13345d3a41a9ddbd0d4fbd9a4ab936f8ff98acbcb37394cd0e75aa5e550888d51b93c76fea8629e2f2cf39de4b0fe94abf853b46db426e40674cde8d69d5</hash>
        <hash alg="SHA-384">c128f7dd3f6ec2f5a5566769bd60f6d3ed36583575bb2efdb9e53aee028b629d009ce4008efda5c38da778195ff42429</hash>
        <hash alg="SHA3-384">60e17c55ff7cbe9ec7411bd06ba10470396666dc78ed93943e1412512cb420413182c9071010b5e849d74415fe10ebf0</hash>
        <hash alg="SHA3-256">bba50765cfc050bd98cc6eac6d180751e920067a58c6a41050870e937ecce2d5</hash>
        <hash alg="SHA3-512">a892530c4e30fff48cfb3d94bc59128ac853d172e8012f66184780cbafad5d5381ca239e0f68f712d3b1e399c5155287f0f8b077eb7cb48bdd1548ba7c89a734</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-2-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.github.luben/zstd-jni@1.5.5-11?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/luben/zstd-jni</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.codehaus.plexus/plexus-utils@3.5.1?type=jar">
      <publisher>Codehaus Plexus</publisher>
      <group>org.codehaus.plexus</group>
      <name>plexus-utils</name>
      <version>3.5.1</version>
      <description>A collection of various utility classes to ease working with strings, files, command lines, XML and
    more.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">cdec471a77f52e687d0df4c43f392a71</hash>
        <hash alg="SHA-1">c6bfb17c97ecc8863e88778ea301be742c62b06d</hash>
        <hash alg="SHA-256">86e0255d4c879c61b4833ed7f13124e8bb679df47debb127326e7db7dd49a07b</hash>
        <hash alg="SHA-512">e2d4e7bc919deb022d0fcc428da066d62c34a02d248b184ffc3edcea08ffbdc354cd018240b21a0495eafcd01723a692e583803ccb10d99fbfa97f58a49f967f</hash>
        <hash alg="SHA-384">ace26d0a31c11f312f1f6c1300d35fa6d9ed173d1f2718639e7f0b68d987d0d8fb57ec95eb187c250a8656cac3252711</hash>
        <hash alg="SHA3-384">01fba8224fd90332e30c8633fc6cb3d4190af08d39f117f0b4c65d440fb8c174aa777fa52275db918dc941c3e5339518</hash>
        <hash alg="SHA3-256">79a135751f0df24eb9dd9d1d0c9c8907158234cddb1b710ebf43cc7a344a533b</hash>
        <hash alg="SHA3-512">f1f21811c5c5125479290ed3b5b2b07c11ee4b9671bcbd24e7e8b8a4123a2686673ee064ba38c1e195acbe2b533ca738289be3064ec77062a32a756ed851fba1</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.codehaus.plexus/plexus-utils@3.5.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://codehaus-plexus.github.io/plexus-utils/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>http://github.com/codehaus-plexus/plexus-utils/issues</url></reference><reference type="mailing-list"><url>http://archive.plexus.codehaus.org/user</url></reference><reference type="vcs"><url>http://github.com/codehaus-plexus/plexus-utils</url></reference></externalReferences>
    </component>
  </components>
  <dependencies>
    <dependency ref="pkg:maven/org.apache.maven.plugins/maven-source-plugin@3.3.1?type=maven-plugin">
      <dependency ref="pkg:maven/org.apache.maven/maven-model@3.2.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-plugin-api@3.2.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-artifact@3.2.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-core@3.2.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven.plugin-tools/maven-plugin-annotations@3.10.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-archiver@3.6.1?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-archiver@4.9.1?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@3.5.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.maven/maven-model@3.2.5?type=jar">
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@3.5.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@3.5.1?type=jar"/>
    <dependency ref="pkg:maven/org.apache.maven/maven-plugin-api@3.2.5?type=jar">
      <dependency ref="pkg:maven/org.apache.maven/maven-model@3.2.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-artifact@3.2.5?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.9.0.M2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.maven/maven-artifact@3.2.5?type=jar">
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@3.5.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.9.0.M2?type=jar">
      <dependency ref="pkg:maven/javax.annotation/javax.annotation-api@1.2?type=jar"/>
      <dependency ref="pkg:maven/javax.enterprise/cdi-api@1.2?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.9.0.M2?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-component-annotations@1.5.5?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-classworlds@2.5.2?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@3.5.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/javax.annotation/javax.annotation-api@1.2?type=jar"/>
    <dependency ref="pkg:maven/javax.enterprise/cdi-api@1.2?type=jar">
      <dependency ref="pkg:maven/javax.inject/javax.inject@1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/javax.inject/javax.inject@1?type=jar"/>
    <dependency ref="pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.9.0.M2?type=jar"/>
    <dependency ref="pkg:maven/org.codehaus.plexus/plexus-component-annotations@1.5.5?type=jar"/>
    <dependency ref="pkg:maven/org.codehaus.plexus/plexus-classworlds@2.5.2?type=jar"/>
    <dependency ref="pkg:maven/org.apache.maven/maven-core@3.2.5?type=jar">
      <dependency ref="pkg:maven/org.apache.maven/maven-model@3.2.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-settings@3.2.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-settings-builder@3.2.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-repository-metadata@3.2.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-artifact@3.2.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-plugin-api@3.2.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-model-builder@3.2.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-aether-provider@3.2.5?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.aether/aether-impl@1.0.0.v20140518?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.aether/aether-api@1.0.0.v20140518?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.aether/aether-util@1.0.0.v20140518?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.9.0.M2?type=jar"/>
      <dependency ref="pkg:maven/org.sonatype.sisu/sisu-guice@3.2.3?classifier=no_aop&amp;type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-interpolation@1.21?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@3.5.1?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-classworlds@2.5.2?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-component-annotations@1.5.5?type=jar"/>
      <dependency ref="pkg:maven/org.sonatype.plexus/plexus-sec-dispatcher@1.3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.maven/maven-settings@3.2.5?type=jar">
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@3.5.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.maven/maven-settings-builder@3.2.5?type=jar">
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@3.5.1?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-interpolation@1.21?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-component-annotations@1.5.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-settings@3.2.5?type=jar"/>
      <dependency ref="pkg:maven/org.sonatype.plexus/plexus-sec-dispatcher@1.3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.codehaus.plexus/plexus-interpolation@1.21?type=jar"/>
    <dependency ref="pkg:maven/org.sonatype.plexus/plexus-sec-dispatcher@1.3?type=jar">
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@3.5.1?type=jar"/>
      <dependency ref="pkg:maven/org.sonatype.plexus/plexus-cipher@1.4?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.sonatype.plexus/plexus-cipher@1.4?type=jar"/>
    <dependency ref="pkg:maven/org.apache.maven/maven-repository-metadata@3.2.5?type=jar">
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@3.5.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.maven/maven-model-builder@3.2.5?type=jar">
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@3.5.1?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-interpolation@1.21?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-component-annotations@1.5.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-model@3.2.5?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.maven/maven-aether-provider@3.2.5?type=jar">
      <dependency ref="pkg:maven/org.apache.maven/maven-model@3.2.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-model-builder@3.2.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-repository-metadata@3.2.5?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.aether/aether-api@1.0.0.v20140518?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.aether/aether-spi@1.0.0.v20140518?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.aether/aether-util@1.0.0.v20140518?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.aether/aether-impl@1.0.0.v20140518?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-component-annotations@1.5.5?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@3.5.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.eclipse.aether/aether-api@1.0.0.v20140518?type=jar"/>
    <dependency ref="pkg:maven/org.eclipse.aether/aether-spi@1.0.0.v20140518?type=jar">
      <dependency ref="pkg:maven/org.eclipse.aether/aether-api@1.0.0.v20140518?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.eclipse.aether/aether-util@1.0.0.v20140518?type=jar">
      <dependency ref="pkg:maven/org.eclipse.aether/aether-api@1.0.0.v20140518?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.eclipse.aether/aether-impl@1.0.0.v20140518?type=jar">
      <dependency ref="pkg:maven/org.eclipse.aether/aether-api@1.0.0.v20140518?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.aether/aether-spi@1.0.0.v20140518?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.aether/aether-util@1.0.0.v20140518?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.sonatype.sisu/sisu-guice@3.2.3?classifier=no_aop&amp;type=jar">
      <dependency ref="pkg:maven/javax.inject/javax.inject@1?type=jar"/>
      <dependency ref="pkg:maven/aopalliance/aopalliance@1.0?type=jar"/>
      <dependency ref="pkg:maven/com.google.guava/guava@16.0.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/aopalliance/aopalliance@1.0?type=jar"/>
    <dependency ref="pkg:maven/com.google.guava/guava@16.0.1?type=jar"/>
    <dependency ref="pkg:maven/org.apache.maven.plugin-tools/maven-plugin-annotations@3.10.2?type=jar"/>
    <dependency ref="pkg:maven/org.apache.maven/maven-archiver@3.6.1?type=jar">
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-archiver@4.9.1?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-interpolation@1.21?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.codehaus.plexus/plexus-archiver@4.9.1?type=jar">
      <dependency ref="pkg:maven/javax.inject/javax.inject@1?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@3.5.1?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-io@3.4.1?type=jar"/>
      <dependency ref="pkg:maven/commons-io/commons-io@2.11.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-compress@1.25.0?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/org.iq80.snappy/snappy@0.4?type=jar"/>
      <dependency ref="pkg:maven/org.tukaani/xz@1.9?type=jar"/>
      <dependency ref="pkg:maven/com.github.luben/zstd-jni@1.5.5-11?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.codehaus.plexus/plexus-io@3.4.1?type=jar">
      <dependency ref="pkg:maven/javax.inject/javax.inject@1?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@3.5.1?type=jar"/>
      <dependency ref="pkg:maven/commons-io/commons-io@2.11.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/commons-io/commons-io@2.11.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.commons/commons-compress@1.25.0?type=jar"/>
    <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    <dependency ref="pkg:maven/org.iq80.snappy/snappy@0.4?type=jar"/>
    <dependency ref="pkg:maven/org.tukaani/xz@1.9?type=jar"/>
    <dependency ref="pkg:maven/com.github.luben/zstd-jni@1.5.5-11?type=jar"/>
  </dependencies>
</bom>
