{
  "bomFormat" : "CycloneDX",
  "specVersion" : "1.4",
  "version" : 1,
  "metadata" : {
    "tools" : [
      {
        "vendor" : "OWASP Foundation",
        "name" : "CycloneDX Maven plugin",
        "version" : "2.7.10",
        "hashes" : [
          {
            "alg" : "MD5",
            "content" : "1cc7f6a0382f8bb2f758d6a6ea401d1b"
          },
          {
            "alg" : "SHA-1",
            "content" : "a4297947a1f2d7d453105db542651614bbd37f38"
          },
          {
            "alg" : "SHA-256",
            "content" : "bd0fdd8f2f2116eee5e715aeac1580f19eb7a10ec2b6f805b53567067658e872"
          },
          {
            "alg" : "SHA-512",
            "content" : "9cde8352a427e10b96cae01348fc7cfe5d4aa9cd0a5e5dd93b414ce3bb7d112993c3b3004e53af52567fbfa16de0704ec59a5556a635ad70571fd124ae389f39"
          },
          {
            "alg" : "SHA-384",
            "content" : "93d7bf5b5c735347edfbfbd66810273ca840f9a322b816d22d44c3d8e8255c09e86570bb23712aeb0cade0f478be5aeb"
          },
          {
            "alg" : "SHA3-384",
            "content" : "4467f16e9ca32190a6e49c65339eb28ee5e8c78f4e918fcf95128a4b7648898de56ccb43eacfad0c9391ef8cdb7d629a"
          },
          {
            "alg" : "SHA3-256",
            "content" : "ed2996c99b483e969221d5e9a40f562ea2ab85442d361d72a90e85266a3ed781"
          },
          {
            "alg" : "SHA3-512",
            "content" : "c8e6ea9ddc38edc77e284b3bf541663e84752bdc59ed1935799847a48a14ea2fa531b61008fefcba37d732a56702a11ac112437b9b80d18f4ecc8ef0ecfb32cf"
          }
        ]
      }
    ],
    "component" : {
      "publisher" : "Eclipse JGit Project",
      "group" : "org.eclipse.jgit",
      "name" : "org.eclipse.jgit-parent",
      "version" : "6.9.0.202402281855-rc1",
      "description" : "Pure Java implementation of Git",
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause",
            "url" : "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit-parent@6.9.0.202402281855-rc1?type=pom",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.eclipse.org/jgit/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci.eclipse.org/jgit"
        },
        {
          "type" : "distribution",
          "url" : "https://repo.eclipse.org/content/repositories/jgit-releases/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://bugs.eclipse.org/bugs/buglist.cgi?query_format=advanced;component=JGit;product=JGit;classification=Technology"
        },
        {
          "type" : "mailing-list",
          "url" : "http://dev.eclipse.org/mhonarc/lists/jgit-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://git.eclipse.org/r/plugins/gitiles/jgit/jgit"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit-parent@6.9.0.202402281855-rc1?type=pom"
    },
    "properties" : [
      {
        "name" : "maven.goal",
        "value" : "makeAggregateBom"
      },
      {
        "name" : "maven.scopes",
        "value" : "compile,provided,runtime,system"
      },
      {
        "name" : "maven.optional.unused",
        "value" : "true"
      },
      {
        "name" : "cdx:reproducible",
        "value" : "enabled"
      }
    ]
  },
  "components" : [
    {
      "publisher" : "Eclipse JGit Project",
      "group" : "org.eclipse.jgit",
      "name" : "org.eclipse.jgit",
      "version" : "6.9.0.202402281855-rc1",
      "description" : "Repository access and algorithms",
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause",
            "url" : "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit@6.9.0.202402281855-rc1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.eclipse.org/jgit//org.eclipse.jgit"
        },
        {
          "type" : "build-system",
          "url" : "https://ci.eclipse.org/jgit"
        },
        {
          "type" : "distribution",
          "url" : "https://repo.eclipse.org/content/repositories/jgit-releases/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://bugs.eclipse.org/bugs/buglist.cgi?query_format=advanced;component=JGit;product=JGit;classification=Technology"
        },
        {
          "type" : "mailing-list",
          "url" : "http://dev.eclipse.org/mhonarc/lists/jgit-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://git.eclipse.org/r/plugins/gitiles/jgit/jgit/org.eclipse.jgit"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit@6.9.0.202402281855-rc1?type=jar"
    },
    {
      "group" : "com.googlecode.javaewah",
      "name" : "JavaEWAH",
      "version" : "1.2.3",
      "description" : "The bit array data structure is implemented in Java as the BitSet class. Unfortunately, this fails to scale without compression. JavaEWAH is a word-aligned compressed variant of the Java bitset class. It uses a 64-bit run-length encoding (RLE) compression scheme. The goal of word-aligned compression is not to achieve the best compression, but rather to improve query processing time. Hence, we try to save CPU cycles, maybe at the expense of storage. However, the EWAH scheme we implemented is always more efficient storage-wise than an uncompressed bitmap (implemented in Java as the BitSet class). Unlike some alternatives, javaewah does not rely on a patented scheme.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "8fdeda28c1fb10e67b3d79f86bef5e61"
        },
        {
          "alg" : "SHA-1",
          "content" : "13a27c856e0c8808cee9a64032c58eee11c3adc9"
        },
        {
          "alg" : "SHA-256",
          "content" : "d65226949713c4c61a784f41c51167e7b0316f93764398ebba9e4336b3d954c2"
        },
        {
          "alg" : "SHA-512",
          "content" : "48cd9df9252c58e9ffe4583e68607944bcdf2ad7a3be7b4317467f503c4f56cdbde358ca7c4f34fa620d01615072a42f3a572fc4f1237e266310b7508e79bcac"
        },
        {
          "alg" : "SHA-384",
          "content" : "d1fd074f21b8a54a07d3f4579376d7c3ab72f24814ebc9ba92344e9da4721e9bfa3cda3a599137e4ddf2395a3c5b88e4"
        },
        {
          "alg" : "SHA3-384",
          "content" : "a553864f196f73c139a104170ab79e780046fb5f322072c5494a6590361021f875afd7168f858b0531b61918ab49b94e"
        },
        {
          "alg" : "SHA3-256",
          "content" : "bab97f3f893af36c36218a151b0c3fece27d47f358cc19e1ca9c22d77942bb76"
        },
        {
          "alg" : "SHA3-512",
          "content" : "be817b93c7093d44ec8dded565d7e5651772ce38e9c72283c05191b33d0ecb2798cd385395f553500446573ac49dccc21f4ba3067d71eb89e03daa384d0193be"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.googlecode.javaewah/JavaEWAH@1.2.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/lemire/javaewah"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/lemire/javaewah/issues"
        },
        {
          "type" : "vcs",
          "url" : "scm:git:git@github.com:lemire/javaewah.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.googlecode.javaewah/JavaEWAH@1.2.3?type=jar"
    },
    {
      "publisher" : "QOS.ch",
      "group" : "org.slf4j",
      "name" : "slf4j-api",
      "version" : "1.7.36",
      "description" : "The slf4j API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "872da51f5de7f3923da4de871d57fd85"
        },
        {
          "alg" : "SHA-1",
          "content" : "6c62681a2f655b49963a5983b8b0950a6120ae14"
        },
        {
          "alg" : "SHA-256",
          "content" : "d3ef575e3e4979678dc01bf1dcce51021493b4d11fb7f1be8ad982877c16a1c0"
        },
        {
          "alg" : "SHA-512",
          "content" : "f9b033fc019a44f98b16048da7e2b59edd4a6a527ba60e358f65ab88e0afae03a9340f1b3e8a543d49fa542290f499c5594259affa1ff3e6e7bf3b428d4c610b"
        },
        {
          "alg" : "SHA-384",
          "content" : "2b14ad035877087157e379d3277dcdcd79e58d6bdb147c47d29e377d75ce53ad42cafbf22f5fb7827c7e946ff4876b9a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "3bc3110dafb8d5be16a39f3b2671a466463cd99eb39610c0e4719a7bf2d928f2ea213c734887c6926a07c4cca7769e4b"
        },
        {
          "alg" : "SHA3-256",
          "content" : "ba2608179fcf46e2291a90b9cbb4aa30d718e481f59c350cc21c73b88d826881"
        },
        {
          "alg" : "SHA3-512",
          "content" : "14c4edcd19702ef607d78826839d8a6d3a39157df54b89a801d3d3cbbe1307131a77671b041c761122730fb1387888c5ec2e46bdd80e1cb07f8f144676441824"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.slf4j.org"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/qos-ch/slf4j/slf4j-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-codec",
      "name" : "commons-codec",
      "version" : "1.16.0",
      "description" : "The Apache Commons Codec package contains simple encoder and decoders for various formats such as Base64 and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a collection of phonetic encoding utilities.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6e26920fa7228891980890cce06b718c"
        },
        {
          "alg" : "SHA-1",
          "content" : "4e3eb3d79888d76b54e28b350915b5dc3919c9de"
        },
        {
          "alg" : "SHA-256",
          "content" : "56595fb20b0b85bc91d0d503dad50bb7f1b9afc0eed5dffa6cbb25929000484d"
        },
        {
          "alg" : "SHA-512",
          "content" : "eee671e66d808b56b81e15574675cf132d7628c010736d580915bbf8c04849f04df1d95ddeea13c4e119f8f0a564c7003beeb8ab437564e080ee27063c1e52b9"
        },
        {
          "alg" : "SHA-384",
          "content" : "65eb89c19815ea11585ff6c91e2ea4acd6a41ee35502891ba29fb5ec390d567190cf2f4120bfbf50ec470274df22a25f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "1841b59a30e095b063d9a421be91ee2adf28c98a9b32e4ef24130b60362db2f7f69eea04969d035dc4b01db38a14c65c"
        },
        {
          "alg" : "SHA3-256",
          "content" : "8327323df750189daa3755a4fb3936b685f72b46f3917d5dae2c1f3812577c37"
        },
        {
          "alg" : "SHA3-512",
          "content" : "664a0b5779c3e448d448d692a0ab19c2aec422d2adbfb23969bc44d2c6446257104d8206ccca4c0107c58f9a77ece5a48e2fd69fe8038f7cad8254675dadbb05"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-codec/commons-codec@1.16.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-codec/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-parent/actions"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CODEC"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/commons-codec"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-codec/commons-codec@1.16.0?type=jar"
    },
    {
      "publisher" : "Eclipse JGit Project",
      "group" : "org.eclipse.jgit",
      "name" : "org.eclipse.jgit.ant",
      "version" : "6.9.0.202402281855-rc1",
      "description" : "Ant based user interface for Git",
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause",
            "url" : "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.ant@6.9.0.202402281855-rc1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.eclipse.org/jgit//org.eclipse.jgit.ant"
        },
        {
          "type" : "build-system",
          "url" : "https://ci.eclipse.org/jgit"
        },
        {
          "type" : "distribution",
          "url" : "https://repo.eclipse.org/content/repositories/jgit-releases/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://bugs.eclipse.org/bugs/buglist.cgi?query_format=advanced;component=JGit;product=JGit;classification=Technology"
        },
        {
          "type" : "mailing-list",
          "url" : "http://dev.eclipse.org/mhonarc/lists/jgit-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://git.eclipse.org/r/plugins/gitiles/jgit/jgit/org.eclipse.jgit.ant"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.ant@6.9.0.202402281855-rc1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.ant",
      "name" : "ant",
      "version" : "1.10.14",
      "description" : "master POM",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "263e00d844d0e4efa54440ec5ed6362a"
        },
        {
          "alg" : "SHA-1",
          "content" : "1edce9bbfa60dfd51f010879c78f4421dafae7a7"
        },
        {
          "alg" : "SHA-256",
          "content" : "4cbbd9243de4c1042d61d9a15db4c43c90ff93b16d78b39481da1c956c8e9671"
        },
        {
          "alg" : "SHA-512",
          "content" : "9fa6296d1d224e16e6d0ae270e128098d480f8b54dee3deb13d348bf033fa621498dfdafea61d84f0b4710d12c21a42f05be076ddce385754879c8782a333c4e"
        },
        {
          "alg" : "SHA-384",
          "content" : "0f2bae9975d540c9c01872b1f5ff8f8888c2976e1f75e69c7b34175f3bfa9134605c35146f023d7ef9bcb4d6f136ed58"
        },
        {
          "alg" : "SHA3-384",
          "content" : "280026cf5236e14efcbc64e5d4524d260495061f1f47b1f9d6345d77c74db71d334572a975506e2310e3bead325974d9"
        },
        {
          "alg" : "SHA3-256",
          "content" : "7167898eebe3239ace0f86b116ada1314111741eb69832668827c2e398ccac8a"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c6f7c44dd307a999216e327efa7c001ce4f2c4ea400bd6f5b6be5b09f09d81f51aef67c9bcaa0aea7cf257fcd8de7198b9a5b151c305a9a04ca0f20b5c16c64c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.ant/ant@1.10.14?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://ant.apache.org/"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/job/Ant-Build-from-POMs/"
        },
        {
          "type" : "distribution",
          "url" : "https://nowhere.net/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/bugzilla/"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/ant-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf/ant.git/ant"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.ant/ant@1.10.14?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.ant",
      "name" : "ant-launcher",
      "version" : "1.10.14",
      "description" : "master POM",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0e6c71b2f05383e1fb891e99f5267663"
        },
        {
          "alg" : "SHA-1",
          "content" : "8d2268288496b0541a2640f2ee07fe3de1a02301"
        },
        {
          "alg" : "SHA-256",
          "content" : "f0909725a7a24e393888f3fbb558347abf506ce2f7ebc581ff26331b94d951a5"
        },
        {
          "alg" : "SHA-512",
          "content" : "11253b888efb900b34f12288f78136a2ef28c889afdfc12fd2fd5a38ea18b648cfa90dffe283b2c8266a2166cc43dd40a01050e6616ec391c71864b2204d2d88"
        },
        {
          "alg" : "SHA-384",
          "content" : "ef0efd42803c505ae7fbfbe79302c29b99af8c1d5e7bdb022f93a89b5272a2f154d4beb7724effdeea0d6738cb7711b3"
        },
        {
          "alg" : "SHA3-384",
          "content" : "9e21cd11c628201c7b32daac116d8043e207d36cee9e3da668600991e2b6175ee1ef7c74565c659bb69cb8e8860af7ee"
        },
        {
          "alg" : "SHA3-256",
          "content" : "9205c89cf3b4ab21fcfe7fe8f31e0186c8228d39c7b06aace982b6a1ed09213e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "22a891ba3141fc834a28dd07aba3309dff3bf8fa26ea537bfdda06c681847f2c5fcea72c156f839aeba028ec949624992e0e0a9a2320a2c65faf16834bb8ae44"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.ant/ant-launcher@1.10.14?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://ant.apache.org/"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/job/Ant-Build-from-POMs/"
        },
        {
          "type" : "distribution",
          "url" : "https://nowhere.net/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/bugzilla/"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/ant-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf/ant.git/ant-launcher"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.ant/ant-launcher@1.10.14?type=jar"
    },
    {
      "publisher" : "Eclipse JGit Project",
      "group" : "org.eclipse.jgit",
      "name" : "org.eclipse.jgit.archive",
      "version" : "6.9.0.202402281855-rc1",
      "description" : "Support for archiving a Git tree in formats such as zip and tar. This is a separate bundle from org.eclipse.jgit to avoid a dependency by the latter on commons-compress.",
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause",
            "url" : "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.archive@6.9.0.202402281855-rc1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.eclipse.org/jgit//org.eclipse.jgit.archive"
        },
        {
          "type" : "build-system",
          "url" : "https://ci.eclipse.org/jgit"
        },
        {
          "type" : "distribution",
          "url" : "https://repo.eclipse.org/content/repositories/jgit-releases/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://bugs.eclipse.org/bugs/buglist.cgi?query_format=advanced;component=JGit;product=JGit;classification=Technology"
        },
        {
          "type" : "mailing-list",
          "url" : "http://dev.eclipse.org/mhonarc/lists/jgit-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://git.eclipse.org/r/plugins/gitiles/jgit/jgit/org.eclipse.jgit.archive"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.archive@6.9.0.202402281855-rc1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-compress",
      "version" : "1.26.0",
      "description" : "Apache Commons Compress defines an API for working with compression and archive formats. These include bzip2, gzip, pack200, LZMA, XZ, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4, Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "cbc0bb8eca12b747ca21bf998d736e60"
        },
        {
          "alg" : "SHA-1",
          "content" : "659feffdd12280201c8aacb8f7be94f9a883c824"
        },
        {
          "alg" : "SHA-256",
          "content" : "051aceb8bbcc62d0f5b2b8ac72c53767f9c59bfbd050151e65bef6f51c8ed9c9"
        },
        {
          "alg" : "SHA-512",
          "content" : "acbeaa2909b809cd561e7156df18340d96abacb179325622d73bdd6b82cb9b387d6fcb1a44d8195aad4e786da299289e17598a1d337b7c7d1c0bc610cc128714"
        },
        {
          "alg" : "SHA-384",
          "content" : "052d4d0cd1929c4299dd9d37dd36eaea6ed2be6b04d6d83a94f8608a6d1138aa81f7a34f25113ac267e7ba25ce948c9a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "8b0bf441e8ce793fb6513bc07551cc48ab4507696c18e6037b0fcf35bc4e1eb3e44ed962e2d3765c86d4d912770aa53e"
        },
        {
          "alg" : "SHA3-256",
          "content" : "e441768e06092053f4703844ec0c8f2b437e06e7c190d48fec9d7682beb94c40"
        },
        {
          "alg" : "SHA3-512",
          "content" : "5984f9f08f83789555677f6800f25fa8e80a9eb2e4d46b5fb117b8efc24753644fa103a2f6b619827661a41677991bc827965172ef25f1313d8a59154e615e8d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-compress@1.26.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-compress/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-parent/actions"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/COMPRESS"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-compress.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-compress@1.26.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-io",
      "name" : "commons-io",
      "version" : "2.15.1",
      "description" : "The Apache Commons IO library contains utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "84351f7991a0e6722f00e96a4ccc376f"
        },
        {
          "alg" : "SHA-1",
          "content" : "f11560da189ab563a5c8e351941415430e9304ea"
        },
        {
          "alg" : "SHA-256",
          "content" : "a58af12ee1b68cfd2ebb0c27caef164f084381a00ec81a48cc275fd7ea54e154"
        },
        {
          "alg" : "SHA-512",
          "content" : "e9adaeed2d715ac0ae44de056ba165a743a92acbeb9871b535f7e58e0b3bc4fba276495b50429be195098a559f3adb7294048479754a0ee4d397da2efda5f81c"
        },
        {
          "alg" : "SHA-384",
          "content" : "028c72b59373d3894da22f9eb2c731aabd00f670993973f71a354d722670c12ca659686b83bbf8db32d060ca180f50b2"
        },
        {
          "alg" : "SHA3-384",
          "content" : "73cd585ab3736b4be50ec0f10dfe5ebfc3390eea8d56f07f29055f1fddb2dff8084310eaa6fb9f97ea639ed1abd7bc33"
        },
        {
          "alg" : "SHA3-256",
          "content" : "daf39bc99f1a3dc0075714a4a342a58d69a4cd62c25bc39a581f657ca72b1044"
        },
        {
          "alg" : "SHA3-512",
          "content" : "b003f8971d1536ea0fc4320dbfe17d7259d49e59314739f9fc83134e511facbff048b0ef4f86a9d0893781ca09c95cebc3b181a6c89a2d41e851870b96e76839"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-io/commons-io@2.15.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-io/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-parent/actions"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/IO"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-io.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-io/commons-io@2.15.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-lang3",
      "version" : "3.14.0",
      "description" : "Apache Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4e5c3f5e6b0b965ef241d7d72ac8971f"
        },
        {
          "alg" : "SHA-1",
          "content" : "1ed471194b02f2c6cb734a0cd6f6f107c673afae"
        },
        {
          "alg" : "SHA-256",
          "content" : "7b96bf3ee68949abb5bc465559ac270e0551596fa34523fddf890ec418dde13c"
        },
        {
          "alg" : "SHA-512",
          "content" : "0338b50767166e5746ada6d6aa2e071e7221d699323bfb629f7f204b294c1dc4cad140610a129ed751798443b43e74e0818989c7df7d33c5915aa29742be9ba8"
        },
        {
          "alg" : "SHA-384",
          "content" : "908d0a22dc17aaa04caa5104cff7cad5b88b77eecb78dd5b3b3fefa22ff71ac50a4fb9e31c897ac243f9d841e4b3453d"
        },
        {
          "alg" : "SHA3-384",
          "content" : "8a7f2e061b998780870eddd571620fbf3d3c70bcb54e24539d0db504f59d65bc6bda58136284498babe29fcc5eabb7a6"
        },
        {
          "alg" : "SHA3-256",
          "content" : "022bf1f8039fcea717e9e34dd96eb80cfff05b43c9cbb76e9739b2421e2d027c"
        },
        {
          "alg" : "SHA3-512",
          "content" : "0bcbc4edce974ea970c46e2da12ec98d9fd962c2cf64f757ac97136dec5623ca52af0c225895303c17ffabb57090e6772d7bd326d5e7438cef5454f8bbaeecfa"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-lang/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-parent/actions"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/LANG"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-lang.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar"
    },
    {
      "publisher" : "OSGi Alliance",
      "group" : "org.osgi",
      "name" : "org.osgi.core",
      "version" : "6.0.0",
      "description" : "OSGi Core Release 6, Interfaces and Classes for use in compiling bundles.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "cae291c61fe8b7a4476d713550c7ff49"
        },
        {
          "alg" : "SHA-1",
          "content" : "0c49acdc9ac62cf69ee49cb6f1905b4fdb79ea5c"
        },
        {
          "alg" : "SHA-256",
          "content" : "1c1bb435eb34cbf1f743653da38f604d45d53fbc95979053768cd3fc293cb931"
        },
        {
          "alg" : "SHA-512",
          "content" : "a6d5388804982ab2cb0ba82b4291e73f006577c54e5dcb0675a2c4922594ddb0265810a4e7c748c88eba76ee350340376b7a9bd25d2de3afb954cf89117cd470"
        },
        {
          "alg" : "SHA-384",
          "content" : "8daff91fc229b2874c1ff7a214fdee65b1824fbac76eb7feec609c5b70ab2fd24fc5cf017b339788a5c7aec041ec1a1c"
        },
        {
          "alg" : "SHA3-384",
          "content" : "b921d8bea5dab6e7d827ce49a43e6edb4a15c1402e1d70498faf867bd7e9ea61f47b9cbdbf008ed517b71499c02b9e4c"
        },
        {
          "alg" : "SHA3-256",
          "content" : "5836efac64dd3757498bc6648cf02e46f136c6b0b39d5f1641218459d6b68ca0"
        },
        {
          "alg" : "SHA3-512",
          "content" : "9056edfc04943cdc81041db1851cade670415457221617babeb3d3c5136c3dcc303862e55b545f40584477e0654d11d84db6ede072015b08744241202d79ee63"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.osgi/org.osgi.core@6.0.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.osgi.org"
        },
        {
          "type" : "vcs",
          "url" : "private"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.osgi/org.osgi.core@6.0.0?type=jar"
    },
    {
      "publisher" : "Eclipse JGit Project",
      "group" : "org.eclipse.jgit",
      "name" : "org.eclipse.jgit.ui",
      "version" : "6.9.0.202402281855-rc1",
      "description" : "AWT/Swing based UI",
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause",
            "url" : "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.ui@6.9.0.202402281855-rc1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.eclipse.org/jgit//org.eclipse.jgit.ui"
        },
        {
          "type" : "build-system",
          "url" : "https://ci.eclipse.org/jgit"
        },
        {
          "type" : "distribution",
          "url" : "https://repo.eclipse.org/content/repositories/jgit-releases/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://bugs.eclipse.org/bugs/buglist.cgi?query_format=advanced;component=JGit;product=JGit;classification=Technology"
        },
        {
          "type" : "mailing-list",
          "url" : "http://dev.eclipse.org/mhonarc/lists/jgit-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://git.eclipse.org/r/plugins/gitiles/jgit/jgit/org.eclipse.jgit.ui"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.ui@6.9.0.202402281855-rc1?type=jar"
    },
    {
      "publisher" : "Eclipse JGit Project",
      "group" : "org.eclipse.jgit",
      "name" : "org.eclipse.jgit.gpg.bc",
      "version" : "6.9.0.202402281855-rc1",
      "description" : "GPG support for JGit based on BouncyCastle",
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause",
            "url" : "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.gpg.bc@6.9.0.202402281855-rc1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.eclipse.org/jgit//org.eclipse.jgit.gpg.bc"
        },
        {
          "type" : "build-system",
          "url" : "https://ci.eclipse.org/jgit"
        },
        {
          "type" : "distribution",
          "url" : "https://repo.eclipse.org/content/repositories/jgit-releases/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://bugs.eclipse.org/bugs/buglist.cgi?query_format=advanced;component=JGit;product=JGit;classification=Technology"
        },
        {
          "type" : "mailing-list",
          "url" : "http://dev.eclipse.org/mhonarc/lists/jgit-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://git.eclipse.org/r/plugins/gitiles/jgit/jgit/org.eclipse.jgit.gpg.bc"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.gpg.bc@6.9.0.202402281855-rc1?type=jar"
    },
    {
      "group" : "org.bouncycastle",
      "name" : "bcpg-jdk18on",
      "version" : "1.77",
      "description" : "The Bouncy Castle Java API for handling the OpenPGP protocol. This jar contains the OpenPGP API for JDK 1.8 and up. The APIs can be used in conjunction with a JCE/JCA provider such as the one provided with the Bouncy Castle Cryptography APIs.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0037bbb9c5118584afb076333f3706a0"
        },
        {
          "alg" : "SHA-1",
          "content" : "bb0be51e8b378baae6e0d86f5282cd3887066539"
        },
        {
          "alg" : "SHA-256",
          "content" : "07ae5704f3b729284b646643c798db0984af0126e646233fbd577b34de69fdf2"
        },
        {
          "alg" : "SHA-512",
          "content" : "5e723073c81aba72a5d9701625f316f0b252d1b5bbfee00d25471eb7b2e1eae0191e5344e3217c6c8c5f6e793c473f03682be7d87bbce0d72c7260c1f8902fb1"
        },
        {
          "alg" : "SHA-384",
          "content" : "e81b037532d5c39dd45e856cc2c02749643b5a41b4906a7df38646f5a074b212cbca5a76d49dfcb2f48cb8a21c4df255"
        },
        {
          "alg" : "SHA3-384",
          "content" : "d652ae23ad088e59522f39c19a95e97558e3f1ced543a90d9f62aab46162088c3f87a22c624feed1d704573b84942819"
        },
        {
          "alg" : "SHA3-256",
          "content" : "c9e8678294af1607dd2b661bb47d9cc86a4f0103ac53f638c6021778e610d979"
        },
        {
          "alg" : "SHA3-512",
          "content" : "efc6c25bf7f6d0f56c2bef7ee552599771a22830a3afcfe27ab33a91bcd80079d4451084c2bd39f62f5dab51132a6568614c8c17c9af6b56f9b11bfbcf2238f2"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "Bouncy Castle Licence",
            "url" : "https://www.bouncycastle.org/licence.html"
          }
        },
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.bouncycastle/bcpg-jdk18on@1.77?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.bouncycastle.org/java.html"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/bcgit/bc-java/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/bcgit/bc-java"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.bouncycastle/bcpg-jdk18on@1.77?type=jar"
    },
    {
      "group" : "org.bouncycastle",
      "name" : "bcprov-jdk18on",
      "version" : "1.77",
      "description" : "The Bouncy Castle Crypto package is a Java implementation of cryptographic algorithms. This jar contains JCE provider and lightweight API for the Bouncy Castle Cryptography APIs for JDK 1.8 and up.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "ca01387064e08db12e1345b474521ff1"
        },
        {
          "alg" : "SHA-1",
          "content" : "2cc971b6c20949c1ff98d1a4bc741ee848a09523"
        },
        {
          "alg" : "SHA-256",
          "content" : "dabb98c24d72c9b9f585633d1df9c5cd58d9ad373d0cd681367e6a603a495d58"
        },
        {
          "alg" : "SHA-512",
          "content" : "56c359f1370131f91eaeae3ec1d44884358f4296defd8d7516c7b81b9b66158454a667eb1c859d8ad919faee074ae3ecb4ceba2a39a3dd799bef9ada2d8c3da3"
        },
        {
          "alg" : "SHA-384",
          "content" : "2951d9bb941e960287cc4a8947a0239ccfb9bd5058002bd5b9fe045b0bb22e4b23f31357f65211c191384cedf3ef3555"
        },
        {
          "alg" : "SHA3-384",
          "content" : "b02af7de4704cf8f93fcd876055595bd9d117afd5eecf0fa883c43e30a285cbbd71473dd9197d6bb41f2b7702bc2620f"
        },
        {
          "alg" : "SHA3-256",
          "content" : "6e69119cc95e642da12dcb0043589137bc7b36ba11ff3299598aaa510b8f0c03"
        },
        {
          "alg" : "SHA3-512",
          "content" : "da87498233675c659ed554261a641aeb2eecc83df76864f199fee9d5c63564c2fe9465baf86d9ac9e409bba74a4de1e7197eda8736852f4f4a729301ea8c9233"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "Bouncy Castle Licence",
            "url" : "https://www.bouncycastle.org/licence.html"
          }
        }
      ],
      "purl" : "pkg:maven/org.bouncycastle/bcprov-jdk18on@1.77?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.bouncycastle.org/java.html"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/bcgit/bc-java/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/bcgit/bc-java"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.bouncycastle/bcprov-jdk18on@1.77?type=jar"
    },
    {
      "group" : "org.bouncycastle",
      "name" : "bcutil-jdk18on",
      "version" : "1.77",
      "description" : "The Bouncy Castle Java APIs for ASN.1 extension and utility APIs used to support bcpkix and bctls. This jar contains APIs for JDK 1.8 and up.",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b2c48e0e0feda8e2aa200a41243c4e9a"
        },
        {
          "alg" : "SHA-1",
          "content" : "de3eaef351545fe8562cf29ddff4a403a45b49b7"
        },
        {
          "alg" : "SHA-256",
          "content" : "947673bcbc5a8dde2d2fa688a5b7598d0ca6e2a74a7ea30cd93f04f6b3ad68f8"
        },
        {
          "alg" : "SHA-512",
          "content" : "95f424556934618a280688475245ccfb279d8896c0b63014706dc5645a37b5de34f1f9d6479f45bf56410b9fefbf47abd47e9b0f51e90d100f15f66d72207aaa"
        },
        {
          "alg" : "SHA-384",
          "content" : "965563a0c1688bb0097da3bf7a317b56e80d0441341633a71d8ace0eba770504f5f03e1c81834897211c6305612017e2"
        },
        {
          "alg" : "SHA3-384",
          "content" : "a04d0e3d51ecbd1a4d557377087296b05aec93afec2cabeb3faa10a195e95aacb35d26934f5f965618cad8edd8a732c6"
        },
        {
          "alg" : "SHA3-256",
          "content" : "0cdb9263370944a013089eb65d2433bc6ebac63c82d21af7ef5b6b55ab32d0dc"
        },
        {
          "alg" : "SHA3-512",
          "content" : "73cd5a440af8ad4e94f4a4dc3c057a9939ee1d14c254e9152ca3622ad27eb4d4395e0f97bae94cd4b3caaf234dff2a5efbbd18356bc328f8683c300eedc2ca9a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "Bouncy Castle Licence",
            "url" : "https://www.bouncycastle.org/licence.html"
          }
        }
      ],
      "purl" : "pkg:maven/org.bouncycastle/bcutil-jdk18on@1.77?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.bouncycastle.org/java.html"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/bcgit/bc-java/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/bcgit/bc-java"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.bouncycastle/bcutil-jdk18on@1.77?type=jar"
    },
    {
      "group" : "org.bouncycastle",
      "name" : "bcpkix-jdk18on",
      "version" : "1.77",
      "description" : "The Bouncy Castle Java APIs for CMS, PKCS, EAC, TSP, CMP, CRMF, OCSP, and certificate generation. This jar contains APIs for JDK 1.8 and up. The APIs can be used in conjunction with a JCE/JCA provider such as the one provided with the Bouncy Castle Cryptography APIs.",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0921c60f2c9acc8d1066e01efab546f2"
        },
        {
          "alg" : "SHA-1",
          "content" : "ed953791ba0229747dd0fd9911e3d76a462acfd3"
        },
        {
          "alg" : "SHA-256",
          "content" : "1ac7fe8efd5b2f38cdc165be5a0675734fe44808dab92707201f03a535d6f1b8"
        },
        {
          "alg" : "SHA-512",
          "content" : "ac5c081b5b11ceba1857cfb9a5060497d3a2b666d99e9ff47ded73cafd749a5a63cdf422a1bdb29e976471b96937c2f7d0c606bcb631150d31977a37e3540dba"
        },
        {
          "alg" : "SHA-384",
          "content" : "3afee55d4db121ba0ff3bbfbfae8cbfea9b58adec0eb06b9ebfc333b28c7e163db7280c91ec62b716f9fedef9a83758d"
        },
        {
          "alg" : "SHA3-384",
          "content" : "1239484b917324f6ea52b6b8a40bfaa9f89ad3defb842499f2d8d049b28d0514961ce3470c3b21a66e12435b86b71740"
        },
        {
          "alg" : "SHA3-256",
          "content" : "0e0c889ad3b77fcf6d912741b51a74c7d20fdf255bed1885de7c44d9ce434fbd"
        },
        {
          "alg" : "SHA3-512",
          "content" : "ed9540f589209650d9e3172a034c84cef5a4d8e77392bcd6c42ec40a929de6397e5cec412c5f60dca0db8decba6ce21408d3f1c7a9b8b78ab5a5f6e178113dd6"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "Bouncy Castle Licence",
            "url" : "https://www.bouncycastle.org/licence.html"
          }
        }
      ],
      "purl" : "pkg:maven/org.bouncycastle/bcpkix-jdk18on@1.77?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.bouncycastle.org/java.html"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/bcgit/bc-java/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/bcgit/bc-java"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.bouncycastle/bcpkix-jdk18on@1.77?type=jar"
    },
    {
      "publisher" : "Eclipse JGit Project",
      "group" : "org.eclipse.jgit",
      "name" : "org.eclipse.jgit.http.apache",
      "version" : "6.9.0.202402281855-rc1",
      "description" : "Apache httpclient based HTTP support",
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause",
            "url" : "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.http.apache@6.9.0.202402281855-rc1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.eclipse.org/jgit//org.eclipse.jgit.http.apache"
        },
        {
          "type" : "build-system",
          "url" : "https://ci.eclipse.org/jgit"
        },
        {
          "type" : "distribution",
          "url" : "https://repo.eclipse.org/content/repositories/jgit-releases/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://bugs.eclipse.org/bugs/buglist.cgi?query_format=advanced;component=JGit;product=JGit;classification=Technology"
        },
        {
          "type" : "mailing-list",
          "url" : "http://dev.eclipse.org/mhonarc/lists/jgit-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://git.eclipse.org/r/plugins/gitiles/jgit/jgit/org.eclipse.jgit.http.apache"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.http.apache@6.9.0.202402281855-rc1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.httpcomponents",
      "name" : "httpclient",
      "version" : "4.5.14",
      "description" : "Apache HttpComponents Client",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "2cb357c4b763f47e58af6cad47df6ba3"
        },
        {
          "alg" : "SHA-1",
          "content" : "1194890e6f56ec29177673f2f12d0b8e627dec98"
        },
        {
          "alg" : "SHA-256",
          "content" : "c8bc7e1c51a6d4ce72f40d2ebbabf1c4b68bfe76e732104b04381b493478e9d6"
        },
        {
          "alg" : "SHA-512",
          "content" : "a084ef30fb0a2a25397d8fab439fe68f67e294bf53153e2e1355b8df92886d40fe6abe35dc84f014245f7158e92641bcbd98019b4fbbd9e5a0db495b160b4ced"
        },
        {
          "alg" : "SHA-384",
          "content" : "c8ccaa1fa8ba7c421413e3c30375bd9c31284e837c476fd831e18043ad4187e92166f49554123108891241bed674b95d"
        },
        {
          "alg" : "SHA3-384",
          "content" : "9a17dfcf12b2af3a9b006ec369f9bc78ba322348bf1a01146e0d4f3fec2bed6cbe8b2193fac5b4d5a0c3036c06477510"
        },
        {
          "alg" : "SHA3-256",
          "content" : "48f0a61b691e22dec9d6db8e0b58be4ca17a42a2846c82f0875de21f72bb0faa"
        },
        {
          "alg" : "SHA3-512",
          "content" : "4ad2c9adc761b7e813330f0dcad3f9978702896c7d0cbf81f60a472d550e320b1527be425ba597c8c9352d587e32e1d46ceb4c73e99c70a6190df4c699a7c2a9"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.httpcomponents/httpclient@4.5.14?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://hc.apache.org/httpcomponents-client-ga"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/HTTPCLIENT"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/hc-httpclient-users/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/httpcomponents-client/tree/4.5.14/httpclient"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.httpcomponents/httpclient@4.5.14?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-logging",
      "name" : "commons-logging",
      "version" : "1.2",
      "description" : "Apache Commons Logging is a thin adapter allowing configurable bridging to other, well known logging systems.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "040b4b4d8eac886f6b4a2a3bd2f31b00"
        },
        {
          "alg" : "SHA-1",
          "content" : "4bfc12adfe4842bf07b657f0369c4cb522955686"
        },
        {
          "alg" : "SHA-256",
          "content" : "daddea1ea0be0f56978ab3006b8ac92834afeefbd9b7e4e6316fca57df0fa636"
        },
        {
          "alg" : "SHA-512",
          "content" : "ed00dbfabd9ae00efa26dd400983601d076fe36408b7d6520084b447e5d1fa527ce65bd6afdcb58506c3a808323d28e88f26cb99c6f5db9ff64f6525ecdfa557"
        },
        {
          "alg" : "SHA-384",
          "content" : "ac20720d7156131478205f1b454395abf84cfc8da2f163301af32f63bd3c4764bd26cb54ed53800f33193ae591f3ce9c"
        },
        {
          "alg" : "SHA3-384",
          "content" : "628eb4407e95dca84da1a06b08a6d9b832a49de8472b1b217e8607f08efeeed18b996232d64dd07f03e78e0e3bb4b078"
        },
        {
          "alg" : "SHA3-256",
          "content" : "9aab62deccf156ee6e324c925dfc30ecb53e8465802863a551901a461424e807"
        },
        {
          "alg" : "SHA3-512",
          "content" : "3fd76857f6d20c03799537cc961c1c4ddf1c375c6c192fb982363e3b9397ba138b77f24ef38b4202f44e37586789c0320e4de18fdadd2772304fd14a9b26d552"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-logging/commons-logging@1.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://commons.apache.org/proper/commons-logging/"
        },
        {
          "type" : "build-system",
          "url" : "https://continuum-ci.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/LOGGING"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/repos/asf/commons/proper/logging/trunk"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-logging/commons-logging@1.2?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.httpcomponents",
      "name" : "httpcore",
      "version" : "4.4.16",
      "description" : "Apache HttpComponents Core (blocking I/O)",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "28d2cd9bf8789fd2ec774fb88436ebd1"
        },
        {
          "alg" : "SHA-1",
          "content" : "51cf043c87253c9f58b539c9f7e44c8894223850"
        },
        {
          "alg" : "SHA-256",
          "content" : "6c9b3dd142a09dc468e23ad39aad6f75a0f2b85125104469f026e52a474e464f"
        },
        {
          "alg" : "SHA-512",
          "content" : "168026436a6bcf5e96c0c59606638abbdc30de4b405ae55afde70fdf2895e267a3d48bba6bdadc5a89f38e31da3d9a9dc91e1cab7ea76f5e04322cf1ec63b838"
        },
        {
          "alg" : "SHA-384",
          "content" : "ba9ceaee1a37ca3201d6a1315ecb0327b495489efd0baa155c219c475df8d3eb69fe77ab0026563db406497626da6562"
        },
        {
          "alg" : "SHA3-384",
          "content" : "b9dc44dcc7cc86d5036f26d54c4003a2d72808ae7b07a0808bb53505c6d4281b5ad213eb1f3d0fef1113dec57cb0dfe1"
        },
        {
          "alg" : "SHA3-256",
          "content" : "fd8ab51846476c6c18822151c9ec07b39a9633010b5d20ea937fc6910407bc64"
        },
        {
          "alg" : "SHA3-512",
          "content" : "b42fa528242981a9d70e4f68ab75a24292df5112c44c21b6f18cb9201ce747885ba1d4dc69bc3d14d0da46a6c2638f937c11bc45749abeb55dc89ddada90cdda"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://hc.apache.org/httpcomponents-core-ga"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/HTTPCORE"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/hc-httpclient-users/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/httpcomponents-core/tree/4.4.16/httpcore"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar"
    },
    {
      "publisher" : "Eclipse JGit Project",
      "group" : "org.eclipse.jgit",
      "name" : "org.eclipse.jgit.http.server",
      "version" : "6.9.0.202402281855-rc1",
      "description" : "Git aware HTTP server implementation.",
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause",
            "url" : "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.http.server@6.9.0.202402281855-rc1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.eclipse.org/jgit//org.eclipse.jgit.http.server"
        },
        {
          "type" : "build-system",
          "url" : "https://ci.eclipse.org/jgit"
        },
        {
          "type" : "distribution",
          "url" : "https://repo.eclipse.org/content/repositories/jgit-releases/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://bugs.eclipse.org/bugs/buglist.cgi?query_format=advanced;component=JGit;product=JGit;classification=Technology"
        },
        {
          "type" : "mailing-list",
          "url" : "http://dev.eclipse.org/mhonarc/lists/jgit-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://git.eclipse.org/r/plugins/gitiles/jgit/jgit/org.eclipse.jgit.http.server"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.http.server@6.9.0.202402281855-rc1?type=jar"
    },
    {
      "publisher" : "Eclipse Foundation",
      "group" : "jakarta.servlet",
      "name" : "jakarta.servlet-api",
      "version" : "4.0.4",
      "description" : "Eclipse Enterprise for Java (EE4J) is an open source initiative to create standard APIs, implementations of those APIs, and technology compatibility kits for Java runtimes that enable development, deployment, and management of server-side and cloud-native applications.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f5d1d7a29978e4ae0be5a456ee1c65c3"
        },
        {
          "alg" : "SHA-1",
          "content" : "b8a1142e04838fe54194049c6e7a18dae8f9b960"
        },
        {
          "alg" : "SHA-256",
          "content" : "586e27706c21258f5882f43be06904f49b02db9ac54e345d393fe4a32494d127"
        },
        {
          "alg" : "SHA-512",
          "content" : "1ce4a059fda9a1c7ab751afb13ec05446d756ac418dd95f8ced369b04f6928a76cf50003f89b1b86d96bcb1df8b8f7ff31c516b5287155eea93f683f73d54ab1"
        },
        {
          "alg" : "SHA-384",
          "content" : "ca7e8d9c88f5ae9f193baa15da96d0c8ab48f34758503ded8058f343547c29f215f2d0db1967090ea984b643dcf0fbb6"
        },
        {
          "alg" : "SHA3-384",
          "content" : "3ffc3a80406027cf4baca38fca291a10d26ee50592c2a17316015e96751c6cd002991c337085b578cf897c0812ab6557"
        },
        {
          "alg" : "SHA3-256",
          "content" : "f475e55d86dddd85836c52580ed14efd4f6a82587b8288fce7f9599c490a41e5"
        },
        {
          "alg" : "SHA3-512",
          "content" : "188e5cfd93ab11a3da65ee0eb91fd0400466588dd8a9950b1a99151d60cdad564a23b35c9a723c69be889c96cf3f901d2fc91099c3daf88becda055687a183cb"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl" : "pkg:maven/jakarta.servlet/jakarta.servlet-api@4.0.4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://projects.eclipse.org/projects/ee4j.servlet"
        },
        {
          "type" : "distribution",
          "url" : "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/servlet-api/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/servlet-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/servlet-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/jakarta.servlet/jakarta.servlet-api@4.0.4?type=jar"
    },
    {
      "publisher" : "Eclipse JGit Project",
      "group" : "org.eclipse.jgit",
      "name" : "org.eclipse.jgit.ssh.apache",
      "version" : "6.9.0.202402281855-rc1",
      "description" : "SSH support for JGit based on Apache MINA sshd",
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause",
            "url" : "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.ssh.apache@6.9.0.202402281855-rc1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.eclipse.org/jgit//org.eclipse.jgit.ssh.apache"
        },
        {
          "type" : "build-system",
          "url" : "https://ci.eclipse.org/jgit"
        },
        {
          "type" : "distribution",
          "url" : "https://repo.eclipse.org/content/repositories/jgit-releases/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://bugs.eclipse.org/bugs/buglist.cgi?query_format=advanced;component=JGit;product=JGit;classification=Technology"
        },
        {
          "type" : "mailing-list",
          "url" : "http://dev.eclipse.org/mhonarc/lists/jgit-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://git.eclipse.org/r/plugins/gitiles/jgit/jgit/org.eclipse.jgit.ssh.apache"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.ssh.apache@6.9.0.202402281855-rc1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.sshd",
      "name" : "sshd-osgi",
      "version" : "2.12.0",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "bd65a91a42a0b0e66c7ec78c338b23f6"
        },
        {
          "alg" : "SHA-1",
          "content" : "32b8de1cbb722ba75bdf9898e0c41d42af00ce57"
        },
        {
          "alg" : "SHA-256",
          "content" : "665ea29384a251bd74f61e16bbb16e20c9ec0a6d90f2b367b69c7920ad8191ef"
        },
        {
          "alg" : "SHA-512",
          "content" : "354cb5c9501b9775265270e9dbe386d67da23ad9e1094ee0cc8c9b80842f199a5f9d717615312779e645df551516fa6b5154e6ed02ffdf6ed8ada63d8dfb4704"
        },
        {
          "alg" : "SHA-384",
          "content" : "60b9326837e846ea1e4f33e870156e4bdbba5d07ee660d73c76a77bfbe8249b54d12cd1e614f668506b18d7797c5d070"
        },
        {
          "alg" : "SHA3-384",
          "content" : "5c52f9d15dc45a8a70520ba8716d6973da1849b4eed48b08a8bf60f50f2d8b1d2c9510cc41c43d21c1d41b6473372b11"
        },
        {
          "alg" : "SHA3-256",
          "content" : "1c464db6a9c796cc9ab2c26ce50e49750838bd2d06c844766b18721f062486db"
        },
        {
          "alg" : "SHA3-512",
          "content" : "7b23e12953da24492ad2ad0586bb9f5e4f813a44ecd7bddbe61ba12d4e70b68e48efcb3f680dffe1c27e09fde9d3cff5b23a38de03c725d1189e3bbe4db13266"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.sshd/sshd-osgi@2.12.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.apache.org/sshd/sshd-osgi/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/SSHD"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/mina-users/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/mina-sshd/tree/sshd-2.12.0/sshd-osgi"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.sshd/sshd-osgi@2.12.0?type=jar"
    },
    {
      "publisher" : "QOS.ch",
      "group" : "org.slf4j",
      "name" : "jcl-over-slf4j",
      "version" : "1.7.32",
      "description" : "JCL 1.2 implemented over SLF4J",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "8788169f5d5be6550efc75d3bfffc82c"
        },
        {
          "alg" : "SHA-1",
          "content" : "32c060250bcc5282cdbc1fd7008c12eb4ebad00e"
        },
        {
          "alg" : "SHA-256",
          "content" : "60f3bda5922e3912889cca1311d1b227753610bf60cb4e5e914e8b2eaa0326b4"
        },
        {
          "alg" : "SHA-512",
          "content" : "55b0678cbe5359d7fabcec55f305997170b0d45264b5cc0577cc9137ac2388a459b86c5438b5850d6e7247d3a00486f83f4b7e305b0eb756a52d3e5c5466ddbd"
        },
        {
          "alg" : "SHA-384",
          "content" : "f1b69471e3c75cd1c13f6557666ebc4b01c676cce3bd2cb19720471dcca98333b9573b468cfe308abd7cf297cee59133"
        },
        {
          "alg" : "SHA3-384",
          "content" : "2df2a1639c379ed6962a039804e7613ba9cde8ec612c94062d9375d1071b2870edb58f3b9d407650a13dce61bcb69d29"
        },
        {
          "alg" : "SHA3-256",
          "content" : "f515d8b3b683bd709ce241190b40b6f8266b392da6e69b0e637377f488e6d38f"
        },
        {
          "alg" : "SHA3-512",
          "content" : "dd2156b7589ce3989471e856cb65ebb50af00a23aef1a2b80ca7ee5f8a4c4573a7887f54559784e710fa8a089ea57ff04c0a80f804710e956cbaebac11c647b2"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.slf4j/jcl-over-slf4j@1.7.32?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.slf4j.org"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/qos-ch/slf4j/jcl-over-slf4j"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.slf4j/jcl-over-slf4j@1.7.32?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.sshd",
      "name" : "sshd-sftp",
      "version" : "2.12.0",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "187327e40217a1c8df19ff86aa443714"
        },
        {
          "alg" : "SHA-1",
          "content" : "0f96f00a07b186ea62838a6a4122e8f4cad44df6"
        },
        {
          "alg" : "SHA-256",
          "content" : "3f2a25bbab47990e3c5901d24694390d9934b46c13261fc5b6b1ef009cf73038"
        },
        {
          "alg" : "SHA-512",
          "content" : "9d11c493dbf6fd95c7546586ae62dff00895fdb40e361b38cb21e82680e85e06ea1eb0bfb2281b9413f9a7b23db552fd3f5609e38ce6462ead9ad6612d1dcb1f"
        },
        {
          "alg" : "SHA-384",
          "content" : "0f7a6e4150a176a6d0aa41c744b848351acda866d5e640722f2f97f440b9024e64f9a4f3bda60a4a067a0de5d8c6bc03"
        },
        {
          "alg" : "SHA3-384",
          "content" : "f2c92edc9e26a3396d5ca86360c8a13678b839fff330824b2ce109c8a1585ea2be229cad4730f55eb9453aa25c68334e"
        },
        {
          "alg" : "SHA3-256",
          "content" : "1acceb19c8d398e7f758d566dc47a8d4db3f4b9d4feca0b4f9de22f323eb78e5"
        },
        {
          "alg" : "SHA3-512",
          "content" : "72b98b7b7eabc72c5e2e01154a4bd6fb159a513be28e401be67d7f9780bc8c2a5f00019cdd4ba6b88dbe8a09322c0d0ac2e3804f11d13bbd2f86c940835f67c2"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.sshd/sshd-sftp@2.12.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.apache.org/sshd/sshd-sftp/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/SSHD"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/mina-users/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/mina-sshd/tree/sshd-2.12.0/sshd-sftp"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.sshd/sshd-sftp@2.12.0?type=jar"
    },
    {
      "group" : "net.i2p.crypto",
      "name" : "eddsa",
      "version" : "0.3.0",
      "description" : "Implementation of EdDSA in Java",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "ee7de3b6f19de76a06e465efc978f669"
        },
        {
          "alg" : "SHA-1",
          "content" : "1901c8d4d8bffb7d79027686cfb91e704217c3e1"
        },
        {
          "alg" : "SHA-256",
          "content" : "4dda1120db856640dbec04140ed23242215a075fe127bdefa0dcfa29fb31267d"
        },
        {
          "alg" : "SHA-512",
          "content" : "637e75ef4b58b280af057546afc176dbf3becf2b69f7dd31a716a90e01c01d7b1bcd400b29efeeea6b34df9ade7922c0665a000a3a2db5a446df293f8d1429cc"
        },
        {
          "alg" : "SHA-384",
          "content" : "e13f22b10a675c9a4180ac051c7e07b839e2131188837071e8760162377c649d7c56e64e279f5ff990547495535b4632"
        },
        {
          "alg" : "SHA3-384",
          "content" : "fa7f056ced9efd6cd90b124ef97a63007d9fe68ffd954c9bbdc15229af958807122460a79aa46f1bcbfff0036afc71d4"
        },
        {
          "alg" : "SHA3-256",
          "content" : "852e263100c291206a8a2afa9a2d9e6f486d3ef40a7fe3b1c3d58e5a8a2c8b60"
        },
        {
          "alg" : "SHA3-512",
          "content" : "0a8c062bec2abdbf97028611b5001b392a433183c1467383e61deab3bf4481f3766c3c7290cdca8bd02a007d7dcd8f2ace99a6c07eb3f74aac48ecd139ba3884"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "CC0-1.0"
          }
        }
      ],
      "purl" : "pkg:maven/net.i2p.crypto/eddsa@0.3.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/str4d/ed25519-java"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/str4d/ed25519-java"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/net.i2p.crypto/eddsa@0.3.0?type=jar"
    },
    {
      "publisher" : "Eclipse JGit Project",
      "group" : "org.eclipse.jgit",
      "name" : "org.eclipse.jgit.ssh.apache.agent",
      "version" : "6.9.0.202402281855-rc1",
      "description" : "Support for ssh-agent for the Apache MINA sshd SSH connector",
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause",
            "url" : "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.ssh.apache.agent@6.9.0.202402281855-rc1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.eclipse.org/jgit//org.eclipse.jgit.ssh.apache.agent"
        },
        {
          "type" : "build-system",
          "url" : "https://ci.eclipse.org/jgit"
        },
        {
          "type" : "distribution",
          "url" : "https://repo.eclipse.org/content/repositories/jgit-releases/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://bugs.eclipse.org/bugs/buglist.cgi?query_format=advanced;component=JGit;product=JGit;classification=Technology"
        },
        {
          "type" : "mailing-list",
          "url" : "http://dev.eclipse.org/mhonarc/lists/jgit-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://git.eclipse.org/r/plugins/gitiles/jgit/jgit/org.eclipse.jgit.ssh.apache.agent"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.ssh.apache.agent@6.9.0.202402281855-rc1?type=jar"
    },
    {
      "group" : "net.java.dev.jna",
      "name" : "jna",
      "version" : "5.14.0",
      "description" : "Java Native Access",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "8b3cc652920435ad9f801e6d9b2a3497"
        },
        {
          "alg" : "SHA-1",
          "content" : "67bf3eaea4f0718cb376a181a629e5f88fa1c9dd"
        },
        {
          "alg" : "SHA-256",
          "content" : "34ed1e1f27fa896bca50dbc4e99cf3732967cec387a7a0d5e3486c09673fe8c6"
        },
        {
          "alg" : "SHA-512",
          "content" : "9b4963d049c735192a46216b392e5f718aa2441f4cb318f999188c0ac39b1a3da31e91da01cca7c6bb37772b4a3d9d8ca18ed719bad54d334da40161f49e2eb2"
        },
        {
          "alg" : "SHA-384",
          "content" : "2338597e15be0a8cb9a26599b744b044cd7c9b73b6e18e8b3db04233140521cde4aff484098d44a0e91a25e8636c5f1d"
        },
        {
          "alg" : "SHA3-384",
          "content" : "6f9f4f890574e993942281ad1c97ece05d8987e4933c34f3515168c86466a5d99919129c3158c8d5b71b8b2a91709b21"
        },
        {
          "alg" : "SHA3-256",
          "content" : "3a4b5c008deee746be7d0a95c42e6a78524b2aa911a83054eb95284b38a8cdc6"
        },
        {
          "alg" : "SHA3-512",
          "content" : "5701b6ccaddccecb9dfcc33b72047ad5677e4066e0e981ddaa9a766c6089482b8430f91b39520cfd118ca41e3ec462522be91c0bcf0460934fbc9bf90cd0fadf"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "LGPL-2.1-or-later",
            "url" : "https://www.gnu.org/licenses/old-licenses/lgpl-2.1-standalone.html"
          }
        },
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/net.java.dev.jna/jna@5.14.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/java-native-access/jna"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/java-native-access/jna"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/net.java.dev.jna/jna@5.14.0?type=jar"
    },
    {
      "group" : "net.java.dev.jna",
      "name" : "jna-platform",
      "version" : "5.14.0",
      "description" : "Java Native Access Platform",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "3bc3f09a698e6ad250dd093f64fbb8a7"
        },
        {
          "alg" : "SHA-1",
          "content" : "28934d48aed814f11e4c584da55c49fa7032b31b"
        },
        {
          "alg" : "SHA-256",
          "content" : "ae4caceb3840730c2537f9b7fb55a01baba580286b4122951488bcee558c2449"
        },
        {
          "alg" : "SHA-512",
          "content" : "6d6e5292b50c53c6b42bcf293cd28ccf32f8580e6818329604af4277e916d375e436b4f3858586f5e07a93405a930e04d88d6384bc9f1ac2d58de4bb7180faeb"
        },
        {
          "alg" : "SHA-384",
          "content" : "bc7ce0c8e1d96c7fb4c6ac63af2cd8f58762e4c75ee07f38363baebdd40a0174b8e58e9e2561e38dd6957075a2450f9f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "3b8c6e51db79159954624a33101df8b4e4f97552e71d4acd2e626b7aae8a1cf0fa6bdfb73a1aecb76cc5289fe7bf9cad"
        },
        {
          "alg" : "SHA3-256",
          "content" : "5d093bc369bc9635ad309c8be702dd7c8969f5d6c8099c1aa14735564d81559b"
        },
        {
          "alg" : "SHA3-512",
          "content" : "8c0213d254dbe3e7751782dff5f949cb94b4f61dc4d1c9a1c31a9eb57aa14f6b84babbe91dab27daf539f74bb6b55dbbc46752e534b9e6cea4b39bdb69faf668"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "LGPL-2.1-or-later",
            "url" : "https://www.gnu.org/licenses/old-licenses/lgpl-2.1-standalone.html"
          }
        },
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/net.java.dev.jna/jna-platform@5.14.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/java-native-access/jna"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/java-native-access/jna"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/net.java.dev.jna/jna-platform@5.14.0?type=jar"
    },
    {
      "publisher" : "Eclipse JGit Project",
      "group" : "org.eclipse.jgit",
      "name" : "org.eclipse.jgit.ssh.jsch",
      "version" : "6.9.0.202402281855-rc1",
      "description" : "SSH support for JGit based on JSch",
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause",
            "url" : "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.ssh.jsch@6.9.0.202402281855-rc1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.eclipse.org/jgit//org.eclipse.jgit.ssh.jsch"
        },
        {
          "type" : "build-system",
          "url" : "https://ci.eclipse.org/jgit"
        },
        {
          "type" : "distribution",
          "url" : "https://repo.eclipse.org/content/repositories/jgit-releases/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://bugs.eclipse.org/bugs/buglist.cgi?query_format=advanced;component=JGit;product=JGit;classification=Technology"
        },
        {
          "type" : "mailing-list",
          "url" : "http://dev.eclipse.org/mhonarc/lists/jgit-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://git.eclipse.org/r/plugins/gitiles/jgit/jgit/org.eclipse.jgit.ssh.jsch"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.ssh.jsch@6.9.0.202402281855-rc1?type=jar"
    },
    {
      "publisher" : "JCraft,Inc.",
      "group" : "com.jcraft",
      "name" : "jsch",
      "version" : "0.1.55",
      "description" : "JSch is a pure Java implementation of SSH2",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "c395ada0fc012d66f11bd30246f6c84d"
        },
        {
          "alg" : "SHA-1",
          "content" : "bbd40e5aa7aa3cfad5db34965456cee738a42a50"
        },
        {
          "alg" : "SHA-256",
          "content" : "d492b15a6d2ea3f1cc39c422c953c40c12289073dbe8360d98c0f6f9ec74fc44"
        },
        {
          "alg" : "SHA-512",
          "content" : "b6827d8de471682fd11744080663aea77612a03774e2ebcc3357c7c493d5df50d4ec9c8d52c4fcc928bdfdd75b62b40d3c60f184da8a7b8aba44c92afecee7a5"
        },
        {
          "alg" : "SHA-384",
          "content" : "6da3c9e2d72bd25991936dfe918ae7f235d03f386a8f797b65a154ae71b36292f873338ccbf5dd4fd3bc63619c806dbe"
        },
        {
          "alg" : "SHA3-384",
          "content" : "92676d161f4ebe078df11f9cda6dc0bed4c828830bb98340ac34fdb89dc76b019d4320f6fdd3db13cdd6e33582cb9272"
        },
        {
          "alg" : "SHA3-256",
          "content" : "99c7de83022da8f85fcef262e29051b8c33c81d492cf344a5d123b83b5a459f7"
        },
        {
          "alg" : "SHA3-512",
          "content" : "33344b4ee79f0e7c8901b828f2bea13d25727361deeaa37d85dbaf3c44a31e8d0b4f3966ce2e4c3705bebd046cb7adba0486d02babdbc68e9819d059b5981559"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/com.jcraft/jsch@0.1.55?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.jcraft.com/jsch/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "http://git.jcraft.com/jsch.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.jcraft/jsch@0.1.55?type=jar"
    },
    {
      "publisher" : "jcraft",
      "group" : "com.jcraft",
      "name" : "jzlib",
      "version" : "1.1.3",
      "description" : "JZlib is a re-implementation of zlib in pure Java",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "386d3714fef534d21175d8885ae48bf7"
        },
        {
          "alg" : "SHA-1",
          "content" : "c01428efa717624f7aabf4df319939dda9646b2d"
        },
        {
          "alg" : "SHA-256",
          "content" : "89b1360f407381bf61fde411019d8cbd009ebb10cff715f3669017a031027560"
        },
        {
          "alg" : "SHA-512",
          "content" : "339793df0001214aaadac2a5456c3cd54a0c09ba2c9e73cf13155adbfdf1c2a953f7336903e45e76a52ce6b48c5b7c78436667d7836e7354e02e85ba0908afd3"
        },
        {
          "alg" : "SHA-384",
          "content" : "e0fe861e00a6136b1c97ae781ef56068b0e30c22a64ba4186b1703fd543878920e809f32756323f0fa68afc25f64653e"
        },
        {
          "alg" : "SHA3-384",
          "content" : "48f4e07ed293214fedb6ed444886131225f20e591ab0ac8236f64498b2f9aae067d0cb92c8e100263e6e9ccad8074c52"
        },
        {
          "alg" : "SHA3-256",
          "content" : "1a141fb006354f69bbf72a11e15c716be8260f7670ceff4ca764394e4473a91e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "90236a8e878a8838ddc5f3129a1a9ab84d0849702bc4b8ec02d6c5dc09271927359d7da1121f55f36c16bd7d371b6fc631d5439cdd93d9a30ab248dcd84d4618"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-4-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/com.jcraft/jzlib@1.1.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.jcraft.com/jzlib/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "git://github.com/ymnk/jzlib.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.jcraft/jzlib@1.1.3?type=jar"
    },
    {
      "publisher" : "Eclipse JGit Project",
      "group" : "org.eclipse.jgit",
      "name" : "org.eclipse.jgit.lfs",
      "version" : "6.9.0.202402281855-rc1",
      "description" : "JGit Large File Storage (LFS) implementation.",
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause",
            "url" : "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.lfs@6.9.0.202402281855-rc1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.eclipse.org/jgit//org.eclipse.jgit.lfs"
        },
        {
          "type" : "build-system",
          "url" : "https://ci.eclipse.org/jgit"
        },
        {
          "type" : "distribution",
          "url" : "https://repo.eclipse.org/content/repositories/jgit-releases/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://bugs.eclipse.org/bugs/buglist.cgi?query_format=advanced;component=JGit;product=JGit;classification=Technology"
        },
        {
          "type" : "mailing-list",
          "url" : "http://dev.eclipse.org/mhonarc/lists/jgit-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://git.eclipse.org/r/plugins/gitiles/jgit/jgit/org.eclipse.jgit.lfs"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.lfs@6.9.0.202402281855-rc1?type=jar"
    },
    {
      "group" : "com.google.code.gson",
      "name" : "gson",
      "version" : "2.10.1",
      "description" : "Gson JSON library",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "df6097815738cb31fc56391553210843"
        },
        {
          "alg" : "SHA-1",
          "content" : "b3add478d4382b78ea20b1671390a858002feb6c"
        },
        {
          "alg" : "SHA-256",
          "content" : "4241c14a7727c34feea6507ec801318a3d4a90f070e4525681079fb94ee4c593"
        },
        {
          "alg" : "SHA-512",
          "content" : "7503e4b8d05c6cc0ecb3a94c5a2e070e049083a441003a79a0cdf474f4286699b4ba1d2a655ddabb8ba10c50e7c36a7045cccdaee465166d4630db647aba2727"
        },
        {
          "alg" : "SHA-384",
          "content" : "48a4786bd6e1867f058ee4fb676fc82d9d9f64a6d7420d4a47ae2398504c9de73222636614aeb4a9fbf10ee143d72226"
        },
        {
          "alg" : "SHA3-384",
          "content" : "3df9a0332c2766124fe7c915cfea665d2e318ccaa7212415fabd9e93e6eb77de538725fd2ef313cde46f6d814c9566ea"
        },
        {
          "alg" : "SHA3-256",
          "content" : "d3374006d76d4f9acdf3d3a1a4f47899570f52442b2188f80c09a74f22139ecb"
        },
        {
          "alg" : "SHA3-512",
          "content" : "2b10c2f4fe39d8712b430ff171823d7172c0a06685c1eb7de511e90159cec0e094fb2a9b50b747c5b039cb10f1fce9edf82ecbf9c47f76a6f31c4e3cb7586cce"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.code.gson/gson@2.10.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/google/gson/gson"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/google/gson/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/google/gson/gson/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.code.gson/gson@2.10.1?type=jar"
    },
    {
      "publisher" : "Eclipse JGit Project",
      "group" : "org.eclipse.jgit",
      "name" : "org.eclipse.jgit.lfs.server",
      "version" : "6.9.0.202402281855-rc1",
      "description" : "JGit Large File Storage Server implementation.",
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause",
            "url" : "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.lfs.server@6.9.0.202402281855-rc1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.eclipse.org/jgit//org.eclipse.jgit.lfs.server"
        },
        {
          "type" : "build-system",
          "url" : "https://ci.eclipse.org/jgit"
        },
        {
          "type" : "distribution",
          "url" : "https://repo.eclipse.org/content/repositories/jgit-releases/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://bugs.eclipse.org/bugs/buglist.cgi?query_format=advanced;component=JGit;product=JGit;classification=Technology"
        },
        {
          "type" : "mailing-list",
          "url" : "http://dev.eclipse.org/mhonarc/lists/jgit-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://git.eclipse.org/r/plugins/gitiles/jgit/jgit/org.eclipse.jgit.lfs.server"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.lfs.server@6.9.0.202402281855-rc1?type=jar"
    },
    {
      "publisher" : "Eclipse JGit Project",
      "group" : "org.eclipse.jgit",
      "name" : "org.eclipse.jgit.pgm",
      "version" : "6.9.0.202402281855-rc1",
      "description" : "Command line client tools built on top of JGit.",
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause",
            "url" : "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.pgm@6.9.0.202402281855-rc1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.eclipse.org/jgit//org.eclipse.jgit.pgm"
        },
        {
          "type" : "build-system",
          "url" : "https://ci.eclipse.org/jgit"
        },
        {
          "type" : "distribution",
          "url" : "https://repo.eclipse.org/content/repositories/jgit-releases/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://bugs.eclipse.org/bugs/buglist.cgi?query_format=advanced;component=JGit;product=JGit;classification=Technology"
        },
        {
          "type" : "mailing-list",
          "url" : "http://dev.eclipse.org/mhonarc/lists/jgit-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://git.eclipse.org/r/plugins/gitiles/jgit/jgit/org.eclipse.jgit.pgm"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.pgm@6.9.0.202402281855-rc1?type=jar"
    },
    {
      "publisher" : "Kohsuke Kawaguchi",
      "group" : "args4j",
      "name" : "args4j",
      "version" : "2.33",
      "description" : "args4j : Java command line arguments parser",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0a6d515f76b15d29e3cd529de9319739"
        },
        {
          "alg" : "SHA-1",
          "content" : "bd87a75374a6d6523de82fef51fc3cfe9baf9fc9"
        },
        {
          "alg" : "SHA-256",
          "content" : "91ddeaba0b24adce72291c618c00bbdce1c884755f6c4dba9c5c46e871c69ed6"
        },
        {
          "alg" : "SHA-512",
          "content" : "89bd7cb2cfeef19e5019982aef225b0e4cedbaa1e56786dc71fd277f560d2ddb37026fc5ba723d7469f2ea9e06944aff7e9890319954e4c6f0c147c65ca30b81"
        },
        {
          "alg" : "SHA-384",
          "content" : "d747f1f7f299416a4957c80a696e1f8c4b85f736ab55e684ed5f7b7b67b11ef10a1ffe800442b5e6038c0c7cd301882c"
        },
        {
          "alg" : "SHA3-384",
          "content" : "ed0ca2e4e130bc3671bad3ded955281cf7ae244e690d30ad5e5c9a01a8b8f650a7f0414d3f9416718af47882200739a5"
        },
        {
          "alg" : "SHA3-256",
          "content" : "7e7a423d0e9da1753ca2df7b424226f7ffbe38f74035c5112236b3938571dfb4"
        },
        {
          "alg" : "SHA3-512",
          "content" : "189ec81ab77531d4a10b35b2dd1358b2e7738abd1c121e8b818cd4bd421fe65d8332eb6340024c7a0f60bb171147c151b51ca99c8558c55926850ce78c5efb00"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl" : "pkg:maven/args4j/args4j@2.33?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://args4j.kohsuke.org/args4j/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://args4j.dev.java.net/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://args4j.dev.java.net/servlets/SummarizeList?listName=users"
        },
        {
          "type" : "vcs",
          "url" : "http://args4j.kohsuke.org/args4j/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/args4j/args4j@2.33?type=jar"
    },
    {
      "publisher" : "QOS.ch",
      "group" : "org.slf4j",
      "name" : "slf4j-simple",
      "version" : "1.7.36",
      "description" : "SLF4J Simple binding",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "fd4a5fa54910b5ee561f639c903cf34a"
        },
        {
          "alg" : "SHA-1",
          "content" : "a41f9cfe6faafb2eb83a1c7dd2d0dfd844e2a936"
        },
        {
          "alg" : "SHA-256",
          "content" : "2f39bed943d624dfa8f4102d0571283a10870b6aa36f197a8a506f147010c10f"
        },
        {
          "alg" : "SHA-512",
          "content" : "cdcebe8fa58527a1bc7da0c18e90a9547ce8ac99cccfe5657860c2a25478c030ea758251da3e32a71eab9cbb91360692b5c6c5887a1f1597d1fda07151b27e5f"
        },
        {
          "alg" : "SHA-384",
          "content" : "57eb6d0c778ad9637a819fe64ab6a7b5e291c1c2e5e9a8f536c553e54837fe0e26b9ef5a83ce25c7e3e7e8c5d455ab24"
        },
        {
          "alg" : "SHA3-384",
          "content" : "15809f42dc66ec21d8d931c2e10cbb1c2c7c580678c1946a0e4fc8b5c7cec5ff001a5551979693a59fbfa1420ba0c038"
        },
        {
          "alg" : "SHA3-256",
          "content" : "a313022d52742de983fa574ebaaf3c6fbb173b0d823a6c31b2a22f429e03a428"
        },
        {
          "alg" : "SHA3-512",
          "content" : "335556e92ec298e2db4e2aa6d4cff0f61fdee178f8889c84db35b9236f08c4c371cc7ff27a77b16699d531111d0eb3ead3696738ed2bd726f75add07f2c51017"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl" : "pkg:maven/org.slf4j/slf4j-simple@1.7.36?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.slf4j.org"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/qos-ch/slf4j/slf4j-simple"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.slf4j/slf4j-simple@1.7.36?type=jar"
    },
    {
      "publisher" : "Webtide",
      "group" : "org.eclipse.jetty",
      "name" : "jetty-servlet",
      "version" : "10.0.20",
      "description" : "Jetty Servlet Container",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "d2b3ad0c421b562199077fe7b6614f78"
        },
        {
          "alg" : "SHA-1",
          "content" : "e3661d28d5f2e2185fb085ce5560b2969e8f7c1e"
        },
        {
          "alg" : "SHA-256",
          "content" : "9359883103d18c855a4e6bb514c59d9f8cfe9dfc18f81dfe02f15106d7ad60b3"
        },
        {
          "alg" : "SHA-512",
          "content" : "39f8e18834fb1608e9c726a869c3e95f62e3f86e480492ec3ae6753a688633026ee99a9e4f3a56e99ebd26609f6f82b0a8f771630a61f35e33e9ce1286bafc18"
        },
        {
          "alg" : "SHA-384",
          "content" : "6e251c4cfda82c424634dd1ca55bb402205e0f4986699153a76c87d89e251e27ab4f9d2b9f64973748e78c5bc798604f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "1581f1cf6ad016ccef625d74b3b0cb6718b9f0bdde631fe33026f9354d760e309e0a4712d45dfccd7d04a8421bef0526"
        },
        {
          "alg" : "SHA3-256",
          "content" : "107d2732064d17a40ab2923610047d30258cfe06f1e0baa9790ce10dba2b1e4c"
        },
        {
          "alg" : "SHA3-512",
          "content" : "392219afbc7abd5dfc7ca5c926a85d6a06ac535ad8d031838e85c31a798f903d6d1fa1209240cdb0c051f7e0995613d59fb999f2d25f1810992bf0d5411e4fa7"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jetty/jetty-servlet@10.0.20?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://eclipse.dev/jetty/jetty-servlet"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/jetty/jetty.project/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://www.eclipse.org/lists/jetty-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/jetty/jetty.project/jetty-servlet"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jetty/jetty-servlet@10.0.20?type=jar"
    },
    {
      "publisher" : "Webtide",
      "group" : "org.eclipse.jetty",
      "name" : "jetty-security",
      "version" : "10.0.20",
      "description" : "Jetty security infrastructure",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "d82887b58c28678188b1b5c9a48174c0"
        },
        {
          "alg" : "SHA-1",
          "content" : "f082f9198038e4781ff4cdf4d32db9f90fa8f38a"
        },
        {
          "alg" : "SHA-256",
          "content" : "81b8ee47a28183fc941fd22b31812d02d7d22d89d2414e699929dfc4fe3fed6e"
        },
        {
          "alg" : "SHA-512",
          "content" : "fec3546ada8170d8473dd0d9ad5fe91965229c4f768872be93d9b4ab54388147ad202a415d971d1d71a00f267646d3b6d0147ccf8f700925d9f19cb4bae059be"
        },
        {
          "alg" : "SHA-384",
          "content" : "cdd5f24c2a875f14844a191667785f1a9db33414554394913d9038df15aec39ca9478f8d2c175b11f2387842c3f891ad"
        },
        {
          "alg" : "SHA3-384",
          "content" : "5b883d3c96827e43429845b4b26f0c272f58d4419de5ce90663f55d493f05ca8ad979951db965c33f6fac3156937658b"
        },
        {
          "alg" : "SHA3-256",
          "content" : "0b3dc4ba855d64810dd457acd5affe31340d4f2fb7f8761abd1c8a7c6932748f"
        },
        {
          "alg" : "SHA3-512",
          "content" : "7f80f8a210bc76950604fd16b0456e2540e8f55d2956e50a7c1d4865552bbcd13fa25dfe3c09ed52d763c3f88d2f89505c0fbb0d177096827ebd47dcb62a4321"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jetty/jetty-security@10.0.20?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://eclipse.dev/jetty/jetty-security"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/jetty/jetty.project/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://www.eclipse.org/lists/jetty-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/jetty/jetty.project/jetty-security"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jetty/jetty-security@10.0.20?type=jar"
    },
    {
      "publisher" : "Webtide",
      "group" : "org.eclipse.jetty",
      "name" : "jetty-server",
      "version" : "10.0.20",
      "description" : "The core jetty server artifact.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "d52a475a7a837488e29c3f8b45e8ed7a"
        },
        {
          "alg" : "SHA-1",
          "content" : "66deea078236e21ae9dd7443716b7642766526aa"
        },
        {
          "alg" : "SHA-256",
          "content" : "bb6daaa0508351fb63a129a69594577870e5230a8889319b940b0d31e4009d3e"
        },
        {
          "alg" : "SHA-512",
          "content" : "b9a20518e789723853cb6d26e69394d6f721c21e07a018dfd4b87af0b9d94ef457c308b0869d423cb6c912f4be72bbc081e660aa95ec843e73f19545916430aa"
        },
        {
          "alg" : "SHA-384",
          "content" : "5c879af8308388657b290a3e854e90c0fbcd7e58c84f7d0d4a18d4399da36cbb5850ee33c8316da047b1de15df75d7b9"
        },
        {
          "alg" : "SHA3-384",
          "content" : "732e9c60eed282e9a7a6f348128e4043116160db0ded33441a85fb2b86ed1cb14b9fbf35eb573aa02d92c9483964122c"
        },
        {
          "alg" : "SHA3-256",
          "content" : "554eacbbcb7300675c5aa128a8fe4f008703fef79be3ffdfdcb57c6607d09e7d"
        },
        {
          "alg" : "SHA3-512",
          "content" : "fbde1619c1ff72e5d0384d8ecc11bf395f66f1e954c3d8e1ac1800a0f434588dbf641a52f96923c4e829599452144ce2e4e8b315d7ddbf87ac65ab5205a32b1a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jetty/jetty-server@10.0.20?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://eclipse.dev/jetty/jetty-server"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/jetty/jetty.project/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://www.eclipse.org/lists/jetty-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/jetty/jetty.project/jetty-server"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jetty/jetty-server@10.0.20?type=jar"
    },
    {
      "publisher" : "Webtide",
      "group" : "org.eclipse.jetty",
      "name" : "jetty-http",
      "version" : "10.0.20",
      "description" : "The Eclipse Jetty Project",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "7083c26b2e3b949cb37de8f2fb96a100"
        },
        {
          "alg" : "SHA-1",
          "content" : "d76bf933db81e9f530f1e59f1858bceddb7c4a43"
        },
        {
          "alg" : "SHA-256",
          "content" : "9d8098b2cacfef9cbca3f4c5e80a61d2079f7f5709dc5f63c45ed2c06fb77bd8"
        },
        {
          "alg" : "SHA-512",
          "content" : "8968c6bac1d246b441edecae114660fb4fdb3c3b6da1df7727911a1daee5905738994aa97be1bdf259a08417b7ed54943c19616f2964035502bccd59da42965f"
        },
        {
          "alg" : "SHA-384",
          "content" : "446cf7c2c514f92d7630f92b869f642854475edf8bf24fa64596be2c5a9b46575dc47b2cc6c5d4f4961b70633c6b255d"
        },
        {
          "alg" : "SHA3-384",
          "content" : "ef5b8740d1805056bc5a9b2d5b12d53d5e1aa55494c5a685ffb70b454ee27fe06be1d44a21240fd416dcef829c6ac880"
        },
        {
          "alg" : "SHA3-256",
          "content" : "7730141abd6c847a8f233fe63bc1e55326a1373d1d0c5603a1987aac2dac2f2b"
        },
        {
          "alg" : "SHA3-512",
          "content" : "93e816cae843d6fdd10298436430d58495eb3c8ea78616b5c9c10d7b4255f61e016609b470bfa2d794d155a6cdb3e948ec8a09b9b34125a5e87ede8b34c1c44b"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jetty/jetty-http@10.0.20?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://eclipse.dev/jetty/jetty-http"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/jetty/jetty.project/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://www.eclipse.org/lists/jetty-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/jetty/jetty.project/jetty-http"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jetty/jetty-http@10.0.20?type=jar"
    },
    {
      "publisher" : "Webtide",
      "group" : "org.eclipse.jetty",
      "name" : "jetty-util",
      "version" : "10.0.20",
      "description" : "Utility classes for Jetty",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "3394ccaa1baa0069a6d4cbeef9a11d80"
        },
        {
          "alg" : "SHA-1",
          "content" : "c628108266e75f17dffee34191b74a696fe21746"
        },
        {
          "alg" : "SHA-256",
          "content" : "6b6d6eccceaa01b9588d32371c5f0cd43470c5596e6889789f68ef71f1fb3c3a"
        },
        {
          "alg" : "SHA-512",
          "content" : "843d36f5006d255a6d0ae390f93b6b31caf07017e8099c8b7516e5ca666b4ca9cc5db4fc9fa33b0fc05d5662a23c3ac86f010a61332b3eb26e4acd0ec9ea1244"
        },
        {
          "alg" : "SHA-384",
          "content" : "9f6264503955a55e57804eb648658bb0c37e48b7eca8bfb02268d7e24bce9120fe0bcb643f0d925adb128d53fd321ee0"
        },
        {
          "alg" : "SHA3-384",
          "content" : "432f25810a0e1a08bf53c617f19f82971ee636f40b71113e48f1e09cd09255c4748654841181644a620ed3187cb4c525"
        },
        {
          "alg" : "SHA3-256",
          "content" : "e80d297d9cab9b156725218d87cb1df3f5488675223583e82b00ff67717212e6"
        },
        {
          "alg" : "SHA3-512",
          "content" : "ab446b66d925040b995fb93c7dcd837a46d915b8555d30202c1347513cffe39ada740e797de8491e2a8a27481288d1aa277cdefe110987618d3fd18f51223902"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jetty/jetty-util@10.0.20?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://eclipse.dev/jetty/jetty-util"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/jetty/jetty.project/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://www.eclipse.org/lists/jetty-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/jetty/jetty.project/jetty-util"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jetty/jetty-util@10.0.20?type=jar"
    },
    {
      "publisher" : "Webtide",
      "group" : "org.eclipse.jetty",
      "name" : "jetty-io",
      "version" : "10.0.20",
      "description" : "The Eclipse Jetty Project",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "8c49840632196bda661c45c1ddb0efae"
        },
        {
          "alg" : "SHA-1",
          "content" : "269cea7949f739e41707f3d574782c9f227fe188"
        },
        {
          "alg" : "SHA-256",
          "content" : "b187bb45747500679f27352d7b2d1c147dc9a505259d969f321817c2da63f119"
        },
        {
          "alg" : "SHA-512",
          "content" : "5a6f3e4fe54dfbd6678fc5937f51efe135f06e2aa9ed2c7e2d0f244fbd9b89c53731ffc07adcb3293403217a3403f4116736bf1ba2d9a9ade353ee61ff70e417"
        },
        {
          "alg" : "SHA-384",
          "content" : "542b946fb2946d4bc2fe0690b101632c475ebcedaa0e5be05ed32f38853a69ce458595812905bbc6448e99359dd42a43"
        },
        {
          "alg" : "SHA3-384",
          "content" : "2804e39af26a7994dd9d11882797dbd5fa61fba705eb2eca688a78fd5e24166ae11cc46a2575c22cd69049c23adc1270"
        },
        {
          "alg" : "SHA3-256",
          "content" : "6d7e05dfc7f7240df3e658931dc5ae8de7011539f8221b593dc3486b0e7d84ff"
        },
        {
          "alg" : "SHA3-512",
          "content" : "23d5710a54cfdc62bec5112763da620f7e3b0feb64fd59349abcd6f6a2b4a9ac7ff4f1e0147203b69a7d58603284e6fecfab65e23ae6b909021e0b12fa7575a0"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jetty/jetty-io@10.0.20?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://eclipse.dev/jetty/jetty-io"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/jetty/jetty.project/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://www.eclipse.org/lists/jetty-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/jetty/jetty.project/jetty-io"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jetty/jetty-io@10.0.20?type=jar"
    },
    {
      "publisher" : "Mort Bay Consulting",
      "group" : "org.eclipse.jetty.toolchain",
      "name" : "jetty-servlet-api",
      "version" : "4.0.6",
      "description" : "The Eclipse Jetty Toolchain Parent",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "d63413e02885c25d0129e3d2936606f6"
        },
        {
          "alg" : "SHA-1",
          "content" : "959c5d83d08f5cddf56caff749e48b735193191b"
        },
        {
          "alg" : "SHA-256",
          "content" : "d90bf1f8a9d2ba89f4510bb51e1516dcf94ef6dc034e00f233654abdd78f2210"
        },
        {
          "alg" : "SHA-512",
          "content" : "758454d41cd0c08ec5b25c1e8ba7249fb11f753ea04c337614db9b99f2da9c1dd9a26bd0048aa6d1b95906d8aa67d0a9c719901b611d3017547adda9f7d4a289"
        },
        {
          "alg" : "SHA-384",
          "content" : "6f5cdcc8b31399438db38ef510c30399f4c2e3058ed8c7d9a6d9a425303c31c3f6d41a16e5d9416ddc6e5ca95164b7e4"
        },
        {
          "alg" : "SHA3-384",
          "content" : "f6c797c7ffe1fa8b7c68786718ae4f6e96a3a904cfb9ba3fe17c36cd2967796f6e1bc1ed09bc9dc2e74d1ade975526e9"
        },
        {
          "alg" : "SHA3-256",
          "content" : "1a2f5f3b79a4881afac16b2cecca63f9a18bee4d7b2f0509001e265da8df353c"
        },
        {
          "alg" : "SHA3-512",
          "content" : "443b85f02330d60eda46607dccd92e7f92bc5a3ebf85298ed0dcc28dea468acef800e854918c50300a4fe0fe42a111fb8ffb1be081e817a7a55dd353192f181a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        },
        {
          "license" : {
            "id" : "EPL-1.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jetty.toolchain/jetty-servlet-api@4.0.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://eclipse.org/jetty/jetty-servlet-api"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse/jetty.toolchain"
        },
        {
          "type" : "mailing-list",
          "url" : "http://dev.eclipse.org/mhonarc/lists/jetty-dev/maillist.html"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse/jetty.toolchain/tree/master/jetty-servlet-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jetty.toolchain/jetty-servlet-api@4.0.6?type=jar"
    },
    {
      "group" : "org.tukaani",
      "name" : "xz",
      "version" : "1.9",
      "description" : "XZ data compression",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "57c2fbfeb55e307ccae52e5322082e02"
        },
        {
          "alg" : "SHA-1",
          "content" : "1ea4bec1a921180164852c65006d928617bd2caf"
        },
        {
          "alg" : "SHA-256",
          "content" : "211b306cfc44f8f96df3a0a3ddaf75ba8c5289eed77d60d72f889bb855f535e5"
        },
        {
          "alg" : "SHA-512",
          "content" : "a4362db234d4e83683e90f5baf90c82107450cc4404acab96e3fab14b8a3d4588a19722171d32f27d18463682a6994cad9af0b1065c954e3a77ea7bdcf586bac"
        },
        {
          "alg" : "SHA-384",
          "content" : "aa30349b094723369908369a18e2cb5beb5b7ca0b24b4d56c2f5725fae152220f6526466672b22bfec939e2e0622a01d"
        },
        {
          "alg" : "SHA3-384",
          "content" : "b3e1fee7784188df5e1931c9e8137ac0e20e63f66f93e7f938a448fc0b3adb4be5205c7a5f1835007e233fee2696fc2c"
        },
        {
          "alg" : "SHA3-256",
          "content" : "92eff603ed0aab557e1a45e17a74e80d8ec656b5f137197b23c429c903fa448f"
        },
        {
          "alg" : "SHA3-512",
          "content" : "b290f92958f8cd91705331d8411140c23957ab8b568fbe19a70f4f1dc97eddc13d3a200df28a02ab5911ce18f546c33f720878be0f727edac839a6e63ee66ece"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "Public Domain"
          }
        }
      ],
      "purl" : "pkg:maven/org.tukaani/xz@1.9?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://tukaani.org/xz/java.html"
        },
        {
          "type" : "vcs",
          "url" : "https://git.tukaani.org/?p=xz-java.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.tukaani/xz@1.9?type=jar"
    },
    {
      "publisher" : "Eclipse JGit Project",
      "group" : "org.eclipse.jgit",
      "name" : "org.eclipse.jgit.junit",
      "version" : "6.9.0.202402281855-rc1",
      "description" : "Utility classes to support JUnit testing of JGit applications.",
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause",
            "url" : "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.junit@6.9.0.202402281855-rc1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.eclipse.org/jgit//org.eclipse.jgit.junit"
        },
        {
          "type" : "build-system",
          "url" : "https://ci.eclipse.org/jgit"
        },
        {
          "type" : "distribution",
          "url" : "https://repo.eclipse.org/content/repositories/jgit-releases/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://bugs.eclipse.org/bugs/buglist.cgi?query_format=advanced;component=JGit;product=JGit;classification=Technology"
        },
        {
          "type" : "mailing-list",
          "url" : "http://dev.eclipse.org/mhonarc/lists/jgit-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://git.eclipse.org/r/plugins/gitiles/jgit/jgit/org.eclipse.jgit.junit"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.junit@6.9.0.202402281855-rc1?type=jar"
    },
    {
      "publisher" : "JUnit",
      "group" : "junit",
      "name" : "junit",
      "version" : "4.13.2",
      "description" : "JUnit is a unit testing framework for Java, created by Erich Gamma and Kent Beck.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "d98a9a02a99a9acd22d7653cbcc1f31f"
        },
        {
          "alg" : "SHA-1",
          "content" : "8ac9e16d933b6fb43bc7f576336b8f4d7eb5ba12"
        },
        {
          "alg" : "SHA-256",
          "content" : "8e495b634469d64fb8acfa3495a065cbacc8a0fff55ce1e31007be4c16dc57d3"
        },
        {
          "alg" : "SHA-512",
          "content" : "a31b9950f929a7e5a600d89787ef40e42a8a8e2392e210d0c0f45b3572937670a18a524f1815508cd1152cd1eaa7275cb7430ba45c053be365c83c231bccd3f0"
        },
        {
          "alg" : "SHA-384",
          "content" : "9f85c56a77c699eb87630b9e8224068a34c296bcd9aadb52248dd4665036f5bf1048fe75e5cb590b59e7855ca716acae"
        },
        {
          "alg" : "SHA3-384",
          "content" : "590cfd9396424583879ca8ad732870406bab18325ac72fb2bbe188b9611278d6341700badf7cfc32525b8ff42900c905"
        },
        {
          "alg" : "SHA3-256",
          "content" : "a06b3fd2fd1d9f4306b58125484e3605a395afe5ffe2c801e43ae462f366a430"
        },
        {
          "alg" : "SHA3-512",
          "content" : "a6d25ce3c14f9065f06dfd0e68e1dad5c03bd5de0a302c44ca4733d2cb87ec1bc6f0abd36d65aeee8caf328b6881432c4b682fa4b4b1fa931c3c950de5129fb2"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-1.0",
            "url" : "http://www.eclipse.org/legal/epl-v10.html"
          }
        }
      ],
      "purl" : "pkg:maven/junit/junit@4.13.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://junit.org"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/junit-team/junit4/actions"
        },
        {
          "type" : "distribution",
          "url" : "https://github.com/junit-team/junit4/wiki/Download-and-Install"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/junit-team/junit4/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/junit-team/junit4"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/junit/junit@4.13.2?type=jar"
    },
    {
      "group" : "org.hamcrest",
      "name" : "hamcrest-core",
      "version" : "1.3",
      "description" : "This is the core API of hamcrest matcher framework to be used by third-party framework providers. This includes the a foundation set of matcher implementations for common operations.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6393363b47ddcbba82321110c3e07519"
        },
        {
          "alg" : "SHA-1",
          "content" : "42a25dc3219429f0e5d060061f71acb49bf010a0"
        },
        {
          "alg" : "SHA-256",
          "content" : "66fdef91e9739348df7a096aa384a5685f4e875584cce89386a7a47251c4d8e9"
        },
        {
          "alg" : "SHA-512",
          "content" : "e237ae735aac4fa5a7253ec693191f42ef7ddce384c11d29fbf605981c0be077d086757409acad53cb5b9e53d86a07cc428d459ff0f5b00d32a8cbbca390be49"
        },
        {
          "alg" : "SHA-384",
          "content" : "4b5297d2a12cc32b824153afc83f1ba9f1869ca288330f0a2f759659d09e4c420eb6ba4a1efbfa0657b625edd41293d5"
        },
        {
          "alg" : "SHA3-384",
          "content" : "b14d34985c0a78cf0ba19b5a18bffd403e08adcb2afde228ddef6e16121c7046dbebf58c04d3419311c4496c48aa93be"
        },
        {
          "alg" : "SHA3-256",
          "content" : "f679af77deedf69b3c3066f7916583848c6fd32a950f9c0b0e2ef1da121717ba"
        },
        {
          "alg" : "SHA3-512",
          "content" : "bca821931e438a1977b7b4356b5f8cebf485634f82159d505c48267c34e6a0f4fde9c2917331365f66dc0e52e2ca3a2db5256863584110c27ecebefc28741f63"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.hamcrest/hamcrest-core@1.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/hamcrest/JavaHamcrest/hamcrest-core"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/hamcrest/JavaHamcrest/hamcrest-core"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.hamcrest/hamcrest-core@1.3?type=jar"
    },
    {
      "publisher" : "Eclipse JGit Project",
      "group" : "org.eclipse.jgit",
      "name" : "org.eclipse.jgit.junit.http",
      "version" : "6.9.0.202402281855-rc1",
      "description" : "Utility classes to support Http based JUnit testing of JGit applications.",
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause",
            "url" : "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.junit.http@6.9.0.202402281855-rc1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.eclipse.org/jgit//org.eclipse.jgit.junit.http"
        },
        {
          "type" : "build-system",
          "url" : "https://ci.eclipse.org/jgit"
        },
        {
          "type" : "distribution",
          "url" : "https://repo.eclipse.org/content/repositories/jgit-releases/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://bugs.eclipse.org/bugs/buglist.cgi?query_format=advanced;component=JGit;product=JGit;classification=Technology"
        },
        {
          "type" : "mailing-list",
          "url" : "http://dev.eclipse.org/mhonarc/lists/jgit-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://git.eclipse.org/r/plugins/gitiles/jgit/jgit/org.eclipse.jgit.junit.http"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.junit.http@6.9.0.202402281855-rc1?type=jar"
    },
    {
      "publisher" : "Eclipse JGit Project",
      "group" : "org.eclipse.jgit",
      "name" : "org.eclipse.jgit.junit.ssh",
      "version" : "6.9.0.202402281855-rc1",
      "description" : "Utility classes to support Ssh based JUnit testing of JGit applications.",
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause",
            "url" : "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.junit.ssh@6.9.0.202402281855-rc1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.eclipse.org/jgit//org.eclipse.jgit.junit.ssh"
        },
        {
          "type" : "build-system",
          "url" : "https://ci.eclipse.org/jgit"
        },
        {
          "type" : "distribution",
          "url" : "https://repo.eclipse.org/content/repositories/jgit-releases/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://bugs.eclipse.org/bugs/buglist.cgi?query_format=advanced;component=JGit;product=JGit;classification=Technology"
        },
        {
          "type" : "mailing-list",
          "url" : "http://dev.eclipse.org/mhonarc/lists/jgit-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://git.eclipse.org/r/plugins/gitiles/jgit/jgit/org.eclipse.jgit.junit.ssh"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.junit.ssh@6.9.0.202402281855-rc1?type=jar"
    },
    {
      "publisher" : "Eclipse JGit Project",
      "group" : "org.eclipse.jgit",
      "name" : "org.eclipse.jgit.test",
      "version" : "6.9.0.202402281855-rc1",
      "description" : "JUnit tests for the core library.",
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause",
            "url" : "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.test@6.9.0.202402281855-rc1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.eclipse.org/jgit//org.eclipse.jgit.test"
        },
        {
          "type" : "build-system",
          "url" : "https://ci.eclipse.org/jgit"
        },
        {
          "type" : "distribution",
          "url" : "https://repo.eclipse.org/content/repositories/jgit-releases/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://bugs.eclipse.org/bugs/buglist.cgi?query_format=advanced;component=JGit;product=JGit;classification=Technology"
        },
        {
          "type" : "mailing-list",
          "url" : "http://dev.eclipse.org/mhonarc/lists/jgit-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://git.eclipse.org/r/plugins/gitiles/jgit/jgit/org.eclipse.jgit.test"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.test@6.9.0.202402281855-rc1?type=jar"
    },
    {
      "group" : "org.assertj",
      "name" : "assertj-core",
      "version" : "3.25.3",
      "description" : "Rich and fluent assertions for testing in Java",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "88258246abdcbf7298b7c3401273e15b"
        },
        {
          "alg" : "SHA-1",
          "content" : "792b270e73aa1cfc28fa135be0b95e69ea451432"
        },
        {
          "alg" : "SHA-256",
          "content" : "7fbdffa1996d43cc08e2576e01008b07e57bbad2b4741aa6c3ab73ce8511130e"
        },
        {
          "alg" : "SHA-512",
          "content" : "cff2c0698b85febc49ab84a692db9bcb8e16c02f53ced530b3174c544d3fa24478a33050cf5f900a41ddc9c3cb66fbc20a5967be8d779c4861134017369d1b9e"
        },
        {
          "alg" : "SHA-384",
          "content" : "871ea788f105e20105e884b69da65abb1bcc236cde63327a0a56162c547b70e3e71d6bc56d5cd07a54d67587e5e54184"
        },
        {
          "alg" : "SHA3-384",
          "content" : "2ccafa0f76ad055b870a840d9ef18ed1c1669cb77d0eba0de926db98d574e48f921a39fe45469938b22943dd3c29fded"
        },
        {
          "alg" : "SHA3-256",
          "content" : "c3419982703bde0c4f7b2a43105604463586b4db087326f95f09bf1925855878"
        },
        {
          "alg" : "SHA3-512",
          "content" : "8b9611210baa82668495d2eb0fde56cb3376b848b29324e344f9d1d6de6c00bca19f21e0c619b45d5a161ffa26212087be6afa6a76bb9100ce630f505e6c7179"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.assertj/assertj-core@3.25.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://assertj.github.io/doc/#assertj-core"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/assertj/assertj/assertj-parent/assertj-core"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.assertj/assertj-core@3.25.3?type=jar"
    },
    {
      "group" : "net.bytebuddy",
      "name" : "byte-buddy",
      "version" : "1.14.12",
      "description" : "Byte Buddy is a Java library for creating Java classes at run time. This artifact is a build of Byte Buddy with all ASM dependencies repackaged into its own name space.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "bf32ed474b27dc431b48bfef82d3c17f"
        },
        {
          "alg" : "SHA-1",
          "content" : "6e37f743dc15a8d7a4feb3eb0025cbc612d5b9e1"
        },
        {
          "alg" : "SHA-256",
          "content" : "970636134d61c183b19f8f58fa631e30d2f2abca344b37848a393cac7863dd70"
        },
        {
          "alg" : "SHA-512",
          "content" : "308fac34915063b0dcdfb2f85e298cfe1cd2806e26d2ac6c14197bfc8458af733e0c159203b9fc3bda95aec990b411e7e077f4204c06405741255797ba81f6b0"
        },
        {
          "alg" : "SHA-384",
          "content" : "7882bb1cea2919cb61765ad7cec30664f5311f85627f1f8b290f8cbcc09460be72f812ae2b853a67d76bb66cca8db098"
        },
        {
          "alg" : "SHA3-384",
          "content" : "40163e968ab5d4bbac70984e6f26378b4e8671c34aef2f5e79c17af83e0ea3ffc465bc836e078b1f90cdc8da46bf6e2e"
        },
        {
          "alg" : "SHA3-256",
          "content" : "9323fe537568843b2620539801210bc19894f6c90b78bb88737ae6ad3142e7ff"
        },
        {
          "alg" : "SHA3-512",
          "content" : "f4e5b4a44b64cbb0970a64d8a25715a8f928c6228d99c2306ba8d3a8044319cfaa28f9d208df4f54ac84ab87d06862c9d20a11f9ae2778a137d51a21263b92a8"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/net.bytebuddy/byte-buddy@1.14.12?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://bytebuddy.net/byte-buddy"
        },
        {
          "type" : "distribution",
          "url" : "https://s01.oss.sonatype.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/raphw/byte-buddy/issues"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/net.bytebuddy/byte-buddy@1.14.12?type=jar"
    },
    {
      "group" : "org.mockito",
      "name" : "mockito-core",
      "version" : "5.10.0",
      "description" : "Mockito mock objects library core API and implementation",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "06362129fee20011772fcae8fd806af8"
        },
        {
          "alg" : "SHA-1",
          "content" : "b3812fa2ee069f1d0b41c1c0155da79d0e1dcde0"
        },
        {
          "alg" : "SHA-256",
          "content" : "0323f591b04d3a0d7ca9ebeebb9e9f34a07c0ec9169b7444ee3951b71d4cad56"
        },
        {
          "alg" : "SHA-512",
          "content" : "a1aa86caf91553e9c919c65625431da2e57849a8a31bd2cdc27ae75e74db49effedadb4f31695d49262467cf939d439314a742aff6ee3ab515df8823b23fa97d"
        },
        {
          "alg" : "SHA-384",
          "content" : "f66041329c52d051c2b47079468c9a69eb54b7f622e4cfa4fedb94cbc1ed5c067c75c436232df778fedee952805bd02f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "04a3626cd0a7417bc46060b80f6b71e80ddc960a580e4afb766e377a542f5d7f52439f8ffd16690b8bb01381f3ff0b4c"
        },
        {
          "alg" : "SHA3-256",
          "content" : "80cb12418f5524e3120ed1c4556e755316256897371b7c08ef5da4855bf448bd"
        },
        {
          "alg" : "SHA3-512",
          "content" : "3a78321e87bdca3c95d7fe45ef258a608a2b92fffe34cb228e3ece9571e8f5e82a600f3100551c3a0b24df9dc2db3a9bb87ce02c510372056af8e1f31227f53a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl" : "pkg:maven/org.mockito/mockito-core@5.10.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/mockito/mockito"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/mockito/mockito/actions"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/mockito/mockito/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/mockito/mockito.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.mockito/mockito-core@5.10.0?type=jar"
    },
    {
      "group" : "net.bytebuddy",
      "name" : "byte-buddy-agent",
      "version" : "1.14.12",
      "description" : "The Byte Buddy agent offers convenience for attaching an agent to the local or a remote VM.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a3e9c8317ad7b6be32af53b6d30dbae5"
        },
        {
          "alg" : "SHA-1",
          "content" : "be4984cb6fd1ef1d11f218a648889dfda44b8a15"
        },
        {
          "alg" : "SHA-256",
          "content" : "2b309a9300092e0b696f7c471fd51d9969001df784c8ab9f07997437d757ad6d"
        },
        {
          "alg" : "SHA-512",
          "content" : "1937841cd9d8c44df8d98d53cf556361180b6d373bf45880345c4286f97b4424df437461d88597c7b58ec78645695c05340c3ad9699ed32deee8eb880adff04d"
        },
        {
          "alg" : "SHA-384",
          "content" : "c7aaa879dbb96d2bd30da5028c50ac7cd2f2adeac6cd4530a1cc749408bd560d828cfad23a7dee4da594116b508eb566"
        },
        {
          "alg" : "SHA3-384",
          "content" : "442a229682806a740eb3812cbaa042c70abdfdd70814a5c15728f04d0e46e9d7fae6f73d92e4d3416ab07d4835f8afa2"
        },
        {
          "alg" : "SHA3-256",
          "content" : "db9139e0988f506941d251be7dab31c9ebf9fef93a46ecb2ca8019ed9c934f7c"
        },
        {
          "alg" : "SHA3-512",
          "content" : "bab3e19dd82463bc89862bd142254a4c784d6e40c1aa0e7048cc467b338b01317e1196aff65aa7e47dcff306a4560497f82058b61dd686208c3bccf3e4fa45ca"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/net.bytebuddy/byte-buddy-agent@1.14.12?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://bytebuddy.net/byte-buddy-agent"
        },
        {
          "type" : "distribution",
          "url" : "https://s01.oss.sonatype.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/raphw/byte-buddy/issues"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/net.bytebuddy/byte-buddy-agent@1.14.12?type=jar"
    },
    {
      "publisher" : "Joe Walnes, Henri Tremblay, Leonardo Mesquita",
      "group" : "org.objenesis",
      "name" : "objenesis",
      "version" : "3.3",
      "description" : "A library for instantiating Java objects",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "ab0e0b2ab81affdd7f38bcc60fd85571"
        },
        {
          "alg" : "SHA-1",
          "content" : "1049c09f1de4331e8193e579448d0916d75b7631"
        },
        {
          "alg" : "SHA-256",
          "content" : "02dfd0b0439a5591e35b708ed2f5474eb0948f53abf74637e959b8e4ef69bfeb"
        },
        {
          "alg" : "SHA-512",
          "content" : "1fa990d15bd179f07ffbc460d580a6fd0562e45dee8bd4a9405917536b78f45c0d6f644b67f85d781c758aa56eff90aef23eedcc9bd7f5ff887a67b716083e61"
        },
        {
          "alg" : "SHA-384",
          "content" : "2f6878f91a12db32c244afcee619d57c3ad6ff0297f4e41c2247e737c1ccc5fcc1ce03256b479b0f9b87900410bc4502"
        },
        {
          "alg" : "SHA3-384",
          "content" : "a3dd9f6908fe732900d50eb209988183ffcf511afb4e401ef95b75c51777709d2d10e1dc9ee386b7357c5c2cbcf8c00e"
        },
        {
          "alg" : "SHA3-256",
          "content" : "fd2b66d174ed68cbfcda41d5cbd29db766c5676866d6b2324b446a87afab3a9f"
        },
        {
          "alg" : "SHA3-512",
          "content" : "ef509e8bcea73bc282287205ffc7625508080be44c16948137274f189459624891dcf109118c9feff109e1aa99becf176f8db837ac4fd586201510c3ae2ea30a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.objenesis/objenesis@3.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://objenesis.org/objenesis"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/easymock/objenesis/objenesis"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.objenesis/objenesis@3.3?type=jar"
    },
    {
      "publisher" : "Eclipse JGit Project",
      "group" : "org.eclipse.jgit",
      "name" : "org.eclipse.jgit.ant.test",
      "version" : "6.9.0.202402281855-rc1",
      "description" : "JUnit tests for the various ant tasks.",
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause",
            "url" : "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.ant.test@6.9.0.202402281855-rc1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.eclipse.org/jgit//org.eclipse.jgit.ant.test"
        },
        {
          "type" : "build-system",
          "url" : "https://ci.eclipse.org/jgit"
        },
        {
          "type" : "distribution",
          "url" : "https://repo.eclipse.org/content/repositories/jgit-releases/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://bugs.eclipse.org/bugs/buglist.cgi?query_format=advanced;component=JGit;product=JGit;classification=Technology"
        },
        {
          "type" : "mailing-list",
          "url" : "http://dev.eclipse.org/mhonarc/lists/jgit-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://git.eclipse.org/r/plugins/gitiles/jgit/jgit/org.eclipse.jgit.ant.test"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.ant.test@6.9.0.202402281855-rc1?type=jar"
    },
    {
      "publisher" : "Eclipse JGit Project",
      "group" : "org.eclipse.jgit",
      "name" : "org.eclipse.jgit.gpg.bc.test",
      "version" : "6.9.0.202402281855-rc1",
      "description" : "JUnit tests for the JGit GPG support based on BouncyCastle.",
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause",
            "url" : "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.gpg.bc.test@6.9.0.202402281855-rc1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.eclipse.org/jgit//org.eclipse.jgit.gpg.bc.test"
        },
        {
          "type" : "build-system",
          "url" : "https://ci.eclipse.org/jgit"
        },
        {
          "type" : "distribution",
          "url" : "https://repo.eclipse.org/content/repositories/jgit-releases/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://bugs.eclipse.org/bugs/buglist.cgi?query_format=advanced;component=JGit;product=JGit;classification=Technology"
        },
        {
          "type" : "mailing-list",
          "url" : "http://dev.eclipse.org/mhonarc/lists/jgit-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://git.eclipse.org/r/plugins/gitiles/jgit/jgit/org.eclipse.jgit.gpg.bc.test"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.gpg.bc.test@6.9.0.202402281855-rc1?type=jar"
    },
    {
      "publisher" : "Eclipse JGit Project",
      "group" : "org.eclipse.jgit",
      "name" : "org.eclipse.jgit.http.test",
      "version" : "6.9.0.202402281855-rc1",
      "description" : "Tests for the HTTP transport.",
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause",
            "url" : "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.http.test@6.9.0.202402281855-rc1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.eclipse.org/jgit//org.eclipse.jgit.http.test"
        },
        {
          "type" : "build-system",
          "url" : "https://ci.eclipse.org/jgit"
        },
        {
          "type" : "distribution",
          "url" : "https://repo.eclipse.org/content/repositories/jgit-releases/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://bugs.eclipse.org/bugs/buglist.cgi?query_format=advanced;component=JGit;product=JGit;classification=Technology"
        },
        {
          "type" : "mailing-list",
          "url" : "http://dev.eclipse.org/mhonarc/lists/jgit-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://git.eclipse.org/r/plugins/gitiles/jgit/jgit/org.eclipse.jgit.http.test"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.http.test@6.9.0.202402281855-rc1?type=jar"
    },
    {
      "publisher" : "Eclipse JGit Project",
      "group" : "org.eclipse.jgit",
      "name" : "org.eclipse.jgit.pgm.test",
      "version" : "6.9.0.202402281855-rc1",
      "description" : "Tests for command line client tools built on top of JGit.",
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause",
            "url" : "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.pgm.test@6.9.0.202402281855-rc1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.eclipse.org/jgit//org.eclipse.jgit.pgm.test"
        },
        {
          "type" : "build-system",
          "url" : "https://ci.eclipse.org/jgit"
        },
        {
          "type" : "distribution",
          "url" : "https://repo.eclipse.org/content/repositories/jgit-releases/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://bugs.eclipse.org/bugs/buglist.cgi?query_format=advanced;component=JGit;product=JGit;classification=Technology"
        },
        {
          "type" : "mailing-list",
          "url" : "http://dev.eclipse.org/mhonarc/lists/jgit-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://git.eclipse.org/r/plugins/gitiles/jgit/jgit/org.eclipse.jgit.pgm.test"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.pgm.test@6.9.0.202402281855-rc1?type=jar"
    },
    {
      "publisher" : "Eclipse JGit Project",
      "group" : "org.eclipse.jgit",
      "name" : "org.eclipse.jgit.lfs.test",
      "version" : "6.9.0.202402281855-rc1",
      "description" : "Tests for the Large File Extension (LFS).",
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause",
            "url" : "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.lfs.test@6.9.0.202402281855-rc1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.eclipse.org/jgit//org.eclipse.jgit.lfs.test"
        },
        {
          "type" : "build-system",
          "url" : "https://ci.eclipse.org/jgit"
        },
        {
          "type" : "distribution",
          "url" : "https://repo.eclipse.org/content/repositories/jgit-releases/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://bugs.eclipse.org/bugs/buglist.cgi?query_format=advanced;component=JGit;product=JGit;classification=Technology"
        },
        {
          "type" : "mailing-list",
          "url" : "http://dev.eclipse.org/mhonarc/lists/jgit-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://git.eclipse.org/r/plugins/gitiles/jgit/jgit/org.eclipse.jgit.lfs.test"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.lfs.test@6.9.0.202402281855-rc1?type=jar"
    },
    {
      "publisher" : "Eclipse JGit Project",
      "group" : "org.eclipse.jgit",
      "name" : "org.eclipse.jgit.lfs.server.test",
      "version" : "6.9.0.202402281855-rc1",
      "description" : "Tests for the LFS server.",
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause",
            "url" : "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.lfs.server.test@6.9.0.202402281855-rc1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.eclipse.org/jgit//org.eclipse.jgit.lfs.server.test"
        },
        {
          "type" : "build-system",
          "url" : "https://ci.eclipse.org/jgit"
        },
        {
          "type" : "distribution",
          "url" : "https://repo.eclipse.org/content/repositories/jgit-releases/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://bugs.eclipse.org/bugs/buglist.cgi?query_format=advanced;component=JGit;product=JGit;classification=Technology"
        },
        {
          "type" : "mailing-list",
          "url" : "http://dev.eclipse.org/mhonarc/lists/jgit-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://git.eclipse.org/r/plugins/gitiles/jgit/jgit/org.eclipse.jgit.lfs.server.test"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.lfs.server.test@6.9.0.202402281855-rc1?type=jar"
    },
    {
      "publisher" : "Eclipse JGit Project",
      "group" : "org.eclipse.jgit",
      "name" : "org.eclipse.jgit.ssh.apache.test",
      "version" : "6.9.0.202402281855-rc1",
      "description" : "JUnit tests for the JGit SSH support based on Apache MINA sshd.",
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause",
            "url" : "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.ssh.apache.test@6.9.0.202402281855-rc1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.eclipse.org/jgit//org.eclipse.jgit.ssh.apache.test"
        },
        {
          "type" : "build-system",
          "url" : "https://ci.eclipse.org/jgit"
        },
        {
          "type" : "distribution",
          "url" : "https://repo.eclipse.org/content/repositories/jgit-releases/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://bugs.eclipse.org/bugs/buglist.cgi?query_format=advanced;component=JGit;product=JGit;classification=Technology"
        },
        {
          "type" : "mailing-list",
          "url" : "http://dev.eclipse.org/mhonarc/lists/jgit-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://git.eclipse.org/r/plugins/gitiles/jgit/jgit/org.eclipse.jgit.ssh.apache.test"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.ssh.apache.test@6.9.0.202402281855-rc1?type=jar"
    },
    {
      "publisher" : "Eclipse JGit Project",
      "group" : "org.eclipse.jgit",
      "name" : "org.eclipse.jgit.ssh.jsch.test",
      "version" : "6.9.0.202402281855-rc1",
      "description" : "JUnit tests for the JGit SSH support based on JSch.",
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause",
            "url" : "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.ssh.jsch.test@6.9.0.202402281855-rc1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.eclipse.org/jgit//org.eclipse.jgit.ssh.jsch.test"
        },
        {
          "type" : "build-system",
          "url" : "https://ci.eclipse.org/jgit"
        },
        {
          "type" : "distribution",
          "url" : "https://repo.eclipse.org/content/repositories/jgit-releases/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://bugs.eclipse.org/bugs/buglist.cgi?query_format=advanced;component=JGit;product=JGit;classification=Technology"
        },
        {
          "type" : "mailing-list",
          "url" : "http://dev.eclipse.org/mhonarc/lists/jgit-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://git.eclipse.org/r/plugins/gitiles/jgit/jgit/org.eclipse.jgit.ssh.jsch.test"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.ssh.jsch.test@6.9.0.202402281855-rc1?type=jar"
    },
    {
      "group" : "org.eclipse.jgit",
      "name" : "org.eclipse.jgit.coverage",
      "version" : "6.9.0.202402281855-rc1",
      "purl" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.coverage@6.9.0.202402281855-rc1?type=pom",
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.coverage@6.9.0.202402281855-rc1?type=pom"
    },
    {
      "publisher" : "Eclipse JGit Project",
      "group" : "org.eclipse.jgit",
      "name" : "org.eclipse.jgit.benchmarks",
      "version" : "6.9.0.202402281855-rc1",
      "description" : "Pure Java implementation of Git",
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause",
            "url" : "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.benchmarks@6.9.0.202402281855-rc1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.eclipse.org/jgit//org.eclipse.jgit.benchmarks"
        },
        {
          "type" : "build-system",
          "url" : "https://ci.eclipse.org/jgit"
        },
        {
          "type" : "distribution",
          "url" : "https://repo.eclipse.org/content/repositories/jgit-releases/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://bugs.eclipse.org/bugs/buglist.cgi?query_format=advanced;component=JGit;product=JGit;classification=Technology"
        },
        {
          "type" : "mailing-list",
          "url" : "http://dev.eclipse.org/mhonarc/lists/jgit-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://git.eclipse.org/r/plugins/gitiles/jgit/jgit/org.eclipse.jgit.benchmarks"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.benchmarks@6.9.0.202402281855-rc1?type=jar"
    },
    {
      "publisher" : "Oracle",
      "group" : "org.openjdk.jmh",
      "name" : "jmh-core",
      "version" : "1.37",
      "description" : "The jmh is a Java harness for building, running, and analysing nano/micro/macro benchmarks written in Java and other languages targeting the JVM.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "db951a09b14a411f1b642dc6ddc39125"
        },
        {
          "alg" : "SHA-1",
          "content" : "896f27e49105b35ea1964319c83d12082e7a79ef"
        },
        {
          "alg" : "SHA-256",
          "content" : "dc0eaf2bbf0036a70b60798c785d6e03a9daf06b68b8edb0f1ba9eb3421baeb3"
        },
        {
          "alg" : "SHA-512",
          "content" : "8e434cc89f7c8a3035e172675d9f914415039ad8dc403a9f4a306efbe3249c20da0343aa51ebf9e3b9f8ba6746e8544ac561fbcd62f29dbb163b7f10c96c1f34"
        },
        {
          "alg" : "SHA-384",
          "content" : "d90f632fccbe1511298a98bbf8757dc654fb4eb021acae9be1f8b679a20451c1e68a59e23f65b32a8f9499d0794a2fa4"
        },
        {
          "alg" : "SHA3-384",
          "content" : "fd42b91747fb58c0addb3b511bede553d52377d0300a575edadc7cc7bd783b4800e48842e5feae02e0e35c57cefda167"
        },
        {
          "alg" : "SHA3-256",
          "content" : "ed41476ee9c5de73354ed7218ed69272073805bc7281cbcdd309f43cb0e5bf0d"
        },
        {
          "alg" : "SHA3-512",
          "content" : "a6aa50ca96076482ca59679527b626d6a87298eeb20ee9f3cddd397f3cac518cf114c9a9ddaad6dfe5c20d168a7f06d39f7a6655ab77b1de7cf8004294f758e3"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "GNU General Public License (GPL), version 2, with the Classpath exception",
            "url" : "http://openjdk.java.net/legal/gplv2+ce.html"
          }
        }
      ],
      "purl" : "pkg:maven/org.openjdk.jmh/jmh-core@1.37?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://openjdk.java.net/projects/code-tools/jmh/jmh-core/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/openjdk/jmh/jmh-core"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.openjdk.jmh/jmh-core@1.37?type=jar"
    },
    {
      "group" : "net.sf.jopt-simple",
      "name" : "jopt-simple",
      "version" : "5.0.4",
      "description" : "A Java library for parsing command line options",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "eb0d9dffe9b0eddead68fe678be76c49"
        },
        {
          "alg" : "SHA-1",
          "content" : "4fdac2fbe92dfad86aa6e9301736f6b4342a3f5c"
        },
        {
          "alg" : "SHA-256",
          "content" : "df26cc58f235f477db07f753ba5a3ab243ebe5789d9f89ecf68dd62ea9a66c28"
        },
        {
          "alg" : "SHA-512",
          "content" : "cbc27e0b6da6ae4b6245353d6626d2e3c171c3026a555fa21e8ef61b30714e286db85086d1a57c167016e8a7f07be2a243e34b3ab504b1877806f3bcec5df986"
        },
        {
          "alg" : "SHA-384",
          "content" : "5911a03e11958951abf8450de13598f617471e53554ba79e203d6e7af1241022592cc97ad656650415d78c66d6882cfa"
        },
        {
          "alg" : "SHA3-384",
          "content" : "a9233bbb74d1dcf613f5c55a3239a9c465bca6422c44d25eb77e08d12cdcbb60d98af78f28071b04f6a3963dcdc67bb3"
        },
        {
          "alg" : "SHA3-256",
          "content" : "9fa8e57de87f425cab9e7e6dbf68c70268c9c3de29fa54b9f2be9e1b164ab368"
        },
        {
          "alg" : "SHA3-512",
          "content" : "ea3d9c8469b3e3cbfd70616bde82c62685fd54b1970f324e44d58e48d8d60344abd59c06b1f43e8df1e8fc5bce6ff837eb034e2ba3dce499ffadf42ac4b406cc"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT"
          }
        }
      ],
      "purl" : "pkg:maven/net.sf.jopt-simple/jopt-simple@5.0.4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://jopt-simple.github.io/jopt-simple"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/jopt-simple/jopt-simple/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/jopt-simple/jopt-simple"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/net.sf.jopt-simple/jopt-simple@5.0.4?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-math3",
      "version" : "3.6.1",
      "description" : "The Apache Commons Math project is a library of lightweight, self-contained mathematics and statistics components addressing the most common practical problems not immediately available in the Java programming language or commons-lang.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "5b730d97e4e6368069de1983937c508e"
        },
        {
          "alg" : "SHA-1",
          "content" : "e4ba98f1d4b3c80ec46392f25e094a6a2e58fcbf"
        },
        {
          "alg" : "SHA-256",
          "content" : "1e56d7b058d28b65abd256b8458e3885b674c1d588fa43cd7d1cbb9c7ef2b308"
        },
        {
          "alg" : "SHA-512",
          "content" : "8bc2438b3b4d9a6be4a47a58410b2d4d0e56e05787ab24badab8cbc9075d61857e8d2f0bffedad33f18f8a356541d00f80a8597b5dedb995be8480d693d03226"
        },
        {
          "alg" : "SHA-384",
          "content" : "95d1186d9ca06a3ea2e6437ddec3a55698e2493d3e72f6f554746b74fa929892bd71a2ab501a4e7b1ce56b7cd64e7ab4"
        },
        {
          "alg" : "SHA3-384",
          "content" : "f85bb3e46a00fc4940a3be1331301302b0eb728e2d1fe2c1842d4761e5a0bc7a420c0c705ae60250ca1c7b03d3694b9e"
        },
        {
          "alg" : "SHA3-256",
          "content" : "919c15ae4b1aef2a58aa6ea4b700bc5562e78dbc382f3393169425ca91ad368c"
        },
        {
          "alg" : "SHA3-512",
          "content" : "dbe54d586c898cdbd7df6c31c131ca3525db17fcea5c7f5da8cbfe617e2afc667289290c76771ec5c9567a56fb2b177b0a31d67abcc656410c90287da4d88999"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-math3@3.6.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://commons.apache.org/proper/commons-math/"
        },
        {
          "type" : "build-system",
          "url" : "https://continuum-ci.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/MATH"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://git-wip-us.apache.org/repos/asf?p=commons-math.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-math3@3.6.1?type=jar"
    },
    {
      "group" : "org.openjdk.jmh",
      "name" : "jmh-generator-annprocess",
      "version" : "1.37",
      "description" : "JMH benchmark generator, based on annotation processors.",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "68593f57af0d1bb87d857904e3cfc4f5"
        },
        {
          "alg" : "SHA-1",
          "content" : "da93888682df163144edf9b13d2b78e54166063a"
        },
        {
          "alg" : "SHA-256",
          "content" : "6a5604b5b804e0daca1145df1077609321687734a8b49387e49f10557c186c77"
        },
        {
          "alg" : "SHA-512",
          "content" : "0e828c394e02ea1c3472cb3b334f4e13f9e7c2e237dd2915d895b277afbd52573ffc824a3850b0808f190407c8644625ea7d06d77e567fd09607514b4d87f77a"
        },
        {
          "alg" : "SHA-384",
          "content" : "7f8e96e9de30082a1583cd9694f5bffb7c4222884b07db7ea1d2db461ef503985ef7b8eb6b8b52704c59d6b28addc7b4"
        },
        {
          "alg" : "SHA3-384",
          "content" : "3a0b77cda16bd979620e3f486d6752178d5163c88bc1b322a5968d40b7ee50a8516c409c9337f4817b3a73702fccb8f5"
        },
        {
          "alg" : "SHA3-256",
          "content" : "e69559e94de873398363a408a7871d2c0c5f69e06727c2b468a9d92bb1ce60b2"
        },
        {
          "alg" : "SHA3-512",
          "content" : "5f772be2e9300c7957227f8c4cb5816a7582afe5d2819a2952e5e8183c11cd4925347ff334a1db11bc3bd6151e84dbcd75e1e97b6ef432df5c64317e0c15d450"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "GNU General Public License (GPL), version 2, with the Classpath exception",
            "url" : "http://openjdk.java.net/legal/gplv2+ce.html"
          }
        }
      ],
      "purl" : "pkg:maven/org.openjdk.jmh/jmh-generator-annprocess@1.37?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://openjdk.java.net/projects/code-tools/jmh/jmh-generator-annprocess/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/openjdk/jmh/jmh-generator-annprocess"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.openjdk.jmh/jmh-generator-annprocess@1.37?type=jar"
    }
  ],
  "dependencies" : [
    {
      "ref" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit-parent@6.9.0.202402281855-rc1?type=pom",
      "dependsOn" : [
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit@6.9.0.202402281855-rc1?type=jar",
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.ant@6.9.0.202402281855-rc1?type=jar",
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.archive@6.9.0.202402281855-rc1?type=jar",
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.ui@6.9.0.202402281855-rc1?type=jar",
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.gpg.bc@6.9.0.202402281855-rc1?type=jar",
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.http.apache@6.9.0.202402281855-rc1?type=jar",
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.http.server@6.9.0.202402281855-rc1?type=jar",
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.ssh.apache@6.9.0.202402281855-rc1?type=jar",
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.ssh.apache.agent@6.9.0.202402281855-rc1?type=jar",
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.ssh.jsch@6.9.0.202402281855-rc1?type=jar",
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.lfs@6.9.0.202402281855-rc1?type=jar",
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.lfs.server@6.9.0.202402281855-rc1?type=jar",
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.pgm@6.9.0.202402281855-rc1?type=jar",
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.junit@6.9.0.202402281855-rc1?type=jar",
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.junit.http@6.9.0.202402281855-rc1?type=jar",
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.junit.ssh@6.9.0.202402281855-rc1?type=jar",
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.test@6.9.0.202402281855-rc1?type=jar",
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.ant.test@6.9.0.202402281855-rc1?type=jar",
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.gpg.bc.test@6.9.0.202402281855-rc1?type=jar",
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.http.test@6.9.0.202402281855-rc1?type=jar",
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.pgm.test@6.9.0.202402281855-rc1?type=jar",
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.lfs.test@6.9.0.202402281855-rc1?type=jar",
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.lfs.server.test@6.9.0.202402281855-rc1?type=jar",
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.ssh.apache.test@6.9.0.202402281855-rc1?type=jar",
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.ssh.jsch.test@6.9.0.202402281855-rc1?type=jar",
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.coverage@6.9.0.202402281855-rc1?type=pom",
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.benchmarks@6.9.0.202402281855-rc1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit@6.9.0.202402281855-rc1?type=jar",
      "dependsOn" : [
        "pkg:maven/com.googlecode.javaewah/JavaEWAH@1.2.3?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.16.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.googlecode.javaewah/JavaEWAH@1.2.3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-codec/commons-codec@1.16.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.ant@6.9.0.202402281855-rc1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit@6.9.0.202402281855-rc1?type=jar",
        "pkg:maven/org.apache.ant/ant@1.10.14?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.ant/ant@1.10.14?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.ant/ant-launcher@1.10.14?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.ant/ant-launcher@1.10.14?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.archive@6.9.0.202402281855-rc1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.commons/commons-compress@1.26.0?type=jar",
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit@6.9.0.202402281855-rc1?type=jar",
        "pkg:maven/org.osgi/org.osgi.core@6.0.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-compress@1.26.0?type=jar",
      "dependsOn" : [
        "pkg:maven/commons-io/commons-io@2.15.1?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/commons-io/commons-io@2.15.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.osgi/org.osgi.core@6.0.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.ui@6.9.0.202402281855-rc1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit@6.9.0.202402281855-rc1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.gpg.bc@6.9.0.202402281855-rc1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit@6.9.0.202402281855-rc1?type=jar",
        "pkg:maven/org.bouncycastle/bcpg-jdk18on@1.77?type=jar",
        "pkg:maven/org.bouncycastle/bcprov-jdk18on@1.77?type=jar",
        "pkg:maven/org.bouncycastle/bcutil-jdk18on@1.77?type=jar",
        "pkg:maven/org.bouncycastle/bcpkix-jdk18on@1.77?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.bouncycastle/bcpg-jdk18on@1.77?type=jar",
      "dependsOn" : [
        "pkg:maven/org.bouncycastle/bcprov-jdk18on@1.77?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.bouncycastle/bcprov-jdk18on@1.77?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.bouncycastle/bcutil-jdk18on@1.77?type=jar",
      "dependsOn" : [
        "pkg:maven/org.bouncycastle/bcprov-jdk18on@1.77?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.bouncycastle/bcpkix-jdk18on@1.77?type=jar",
      "dependsOn" : [
        "pkg:maven/org.bouncycastle/bcprov-jdk18on@1.77?type=jar",
        "pkg:maven/org.bouncycastle/bcutil-jdk18on@1.77?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.http.apache@6.9.0.202402281855-rc1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit@6.9.0.202402281855-rc1?type=jar",
        "pkg:maven/org.apache.httpcomponents/httpclient@4.5.14?type=jar",
        "pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.httpcomponents/httpclient@4.5.14?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar",
        "pkg:maven/commons-logging/commons-logging@1.2?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.16.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-logging/commons-logging@1.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.http.server@6.9.0.202402281855-rc1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit@6.9.0.202402281855-rc1?type=jar",
        "pkg:maven/jakarta.servlet/jakarta.servlet-api@4.0.4?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/jakarta.servlet/jakarta.servlet-api@4.0.4?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.ssh.apache@6.9.0.202402281855-rc1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit@6.9.0.202402281855-rc1?type=jar",
        "pkg:maven/org.apache.sshd/sshd-osgi@2.12.0?type=jar",
        "pkg:maven/org.apache.sshd/sshd-sftp@2.12.0?type=jar",
        "pkg:maven/net.i2p.crypto/eddsa@0.3.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.sshd/sshd-osgi@2.12.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/org.slf4j/jcl-over-slf4j@1.7.32?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.slf4j/jcl-over-slf4j@1.7.32?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.sshd/sshd-sftp@2.12.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/org.slf4j/jcl-over-slf4j@1.7.32?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/net.i2p.crypto/eddsa@0.3.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.ssh.apache.agent@6.9.0.202402281855-rc1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit@6.9.0.202402281855-rc1?type=jar",
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.ssh.apache@6.9.0.202402281855-rc1?type=jar",
        "pkg:maven/net.java.dev.jna/jna@5.14.0?type=jar",
        "pkg:maven/net.java.dev.jna/jna-platform@5.14.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/net.java.dev.jna/jna@5.14.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/net.java.dev.jna/jna-platform@5.14.0?type=jar",
      "dependsOn" : [
        "pkg:maven/net.java.dev.jna/jna@5.14.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.ssh.jsch@6.9.0.202402281855-rc1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit@6.9.0.202402281855-rc1?type=jar",
        "pkg:maven/com.jcraft/jsch@0.1.55?type=jar",
        "pkg:maven/com.jcraft/jzlib@1.1.3?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.jcraft/jsch@0.1.55?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.jcraft/jzlib@1.1.3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.lfs@6.9.0.202402281855-rc1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit@6.9.0.202402281855-rc1?type=jar",
        "pkg:maven/com.google.code.gson/gson@2.10.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.google.code.gson/gson@2.10.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.lfs.server@6.9.0.202402281855-rc1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit@6.9.0.202402281855-rc1?type=jar",
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.lfs@6.9.0.202402281855-rc1?type=jar",
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.http.apache@6.9.0.202402281855-rc1?type=jar",
        "pkg:maven/jakarta.servlet/jakarta.servlet-api@4.0.4?type=jar",
        "pkg:maven/com.google.code.gson/gson@2.10.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.pgm@6.9.0.202402281855-rc1?type=jar",
      "dependsOn" : [
        "pkg:maven/args4j/args4j@2.33?type=jar",
        "pkg:maven/org.apache.commons/commons-compress@1.26.0?type=jar",
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.archive@6.9.0.202402281855-rc1?type=jar",
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit@6.9.0.202402281855-rc1?type=jar",
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.ui@6.9.0.202402281855-rc1?type=jar",
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.gpg.bc@6.9.0.202402281855-rc1?type=jar",
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.http.apache@6.9.0.202402281855-rc1?type=jar",
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.ssh.apache@6.9.0.202402281855-rc1?type=jar",
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.ssh.apache.agent@6.9.0.202402281855-rc1?type=jar",
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.ssh.jsch@6.9.0.202402281855-rc1?type=jar",
        "pkg:maven/org.apache.httpcomponents/httpclient@4.5.14?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/org.slf4j/slf4j-simple@1.7.36?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-servlet@10.0.20?type=jar",
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.lfs@6.9.0.202402281855-rc1?type=jar",
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.lfs.server@6.9.0.202402281855-rc1?type=jar",
        "pkg:maven/org.tukaani/xz@1.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/args4j/args4j@2.33?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.slf4j/slf4j-simple@1.7.36?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jetty/jetty-servlet@10.0.20?type=jar",
      "dependsOn" : [
        "pkg:maven/org.eclipse.jetty/jetty-security@10.0.20?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jetty/jetty-security@10.0.20?type=jar",
      "dependsOn" : [
        "pkg:maven/org.eclipse.jetty/jetty-server@10.0.20?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jetty/jetty-server@10.0.20?type=jar",
      "dependsOn" : [
        "pkg:maven/org.eclipse.jetty/jetty-http@10.0.20?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-io@10.0.20?type=jar",
        "pkg:maven/org.eclipse.jetty.toolchain/jetty-servlet-api@4.0.6?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jetty/jetty-http@10.0.20?type=jar",
      "dependsOn" : [
        "pkg:maven/org.eclipse.jetty/jetty-io@10.0.20?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-util@10.0.20?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jetty/jetty-io@10.0.20?type=jar",
      "dependsOn" : [
        "pkg:maven/org.eclipse.jetty/jetty-util@10.0.20?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jetty/jetty-util@10.0.20?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jetty.toolchain/jetty-servlet-api@4.0.6?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.tukaani/xz@1.9?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.junit@6.9.0.202402281855-rc1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit@6.9.0.202402281855-rc1?type=jar",
        "pkg:maven/junit/junit@4.13.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/junit/junit@4.13.2?type=jar",
      "dependsOn" : [
        "pkg:maven/org.hamcrest/hamcrest-core@1.3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.hamcrest/hamcrest-core@1.3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.junit.http@6.9.0.202402281855-rc1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit@6.9.0.202402281855-rc1?type=jar",
        "pkg:maven/junit/junit@4.13.2?type=jar",
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.http.server@6.9.0.202402281855-rc1?type=jar",
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.junit@6.9.0.202402281855-rc1?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-servlet@10.0.20?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.junit.ssh@6.9.0.202402281855-rc1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit@6.9.0.202402281855-rc1?type=jar",
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.junit@6.9.0.202402281855-rc1?type=jar",
        "pkg:maven/org.apache.sshd/sshd-osgi@2.12.0?type=jar",
        "pkg:maven/org.apache.sshd/sshd-sftp@2.12.0?type=jar",
        "pkg:maven/junit/junit@4.13.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.test@6.9.0.202402281855-rc1?type=jar",
      "dependsOn" : [
        "pkg:maven/junit/junit@4.13.2?type=jar",
        "pkg:maven/org.assertj/assertj-core@3.25.3?type=jar",
        "pkg:maven/org.mockito/mockito-core@5.10.0?type=jar",
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit@6.9.0.202402281855-rc1?type=jar",
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.junit@6.9.0.202402281855-rc1?type=jar",
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.junit.ssh@6.9.0.202402281855-rc1?type=jar",
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.ui@6.9.0.202402281855-rc1?type=jar",
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.pgm@6.9.0.202402281855-rc1?type=jar",
        "pkg:maven/org.tukaani/xz@1.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.assertj/assertj-core@3.25.3?type=jar",
      "dependsOn" : [
        "pkg:maven/net.bytebuddy/byte-buddy@1.14.12?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/net.bytebuddy/byte-buddy@1.14.12?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.mockito/mockito-core@5.10.0?type=jar",
      "dependsOn" : [
        "pkg:maven/net.bytebuddy/byte-buddy@1.14.12?type=jar",
        "pkg:maven/net.bytebuddy/byte-buddy-agent@1.14.12?type=jar",
        "pkg:maven/org.objenesis/objenesis@3.3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/net.bytebuddy/byte-buddy-agent@1.14.12?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.objenesis/objenesis@3.3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.ant.test@6.9.0.202402281855-rc1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit@6.9.0.202402281855-rc1?type=jar",
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.junit@6.9.0.202402281855-rc1?type=jar",
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.ant@6.9.0.202402281855-rc1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.gpg.bc.test@6.9.0.202402281855-rc1?type=jar",
      "dependsOn" : [
        "pkg:maven/junit/junit@4.13.2?type=jar",
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit@6.9.0.202402281855-rc1?type=jar",
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.junit@6.9.0.202402281855-rc1?type=jar",
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.gpg.bc@6.9.0.202402281855-rc1?type=jar",
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.test@6.9.0.202402281855-rc1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.http.test@6.9.0.202402281855-rc1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit@6.9.0.202402281855-rc1?type=jar",
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.junit.http@6.9.0.202402281855-rc1?type=jar",
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.junit@6.9.0.202402281855-rc1?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-servlet@10.0.20?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.pgm.test@6.9.0.202402281855-rc1?type=jar",
      "dependsOn" : [
        "pkg:maven/junit/junit@4.13.2?type=jar",
        "pkg:maven/args4j/args4j@2.33?type=jar",
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.junit@6.9.0.202402281855-rc1?type=jar",
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.pgm@6.9.0.202402281855-rc1?type=jar",
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.ssh.jsch@6.9.0.202402281855-rc1?type=jar",
        "pkg:maven/org.tukaani/xz@1.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.lfs.test@6.9.0.202402281855-rc1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit@6.9.0.202402281855-rc1?type=jar",
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.lfs@6.9.0.202402281855-rc1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.lfs.server.test@6.9.0.202402281855-rc1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.httpcomponents/httpclient@4.5.14?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.ssh.apache.test@6.9.0.202402281855-rc1?type=jar",
      "dependsOn" : [
        "pkg:maven/junit/junit@4.13.2?type=jar",
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit@6.9.0.202402281855-rc1?type=jar",
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.junit@6.9.0.202402281855-rc1?type=jar",
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.junit.ssh@6.9.0.202402281855-rc1?type=jar",
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.ssh.apache@6.9.0.202402281855-rc1?type=jar",
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.test@6.9.0.202402281855-rc1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.ssh.jsch.test@6.9.0.202402281855-rc1?type=jar",
      "dependsOn" : [
        "pkg:maven/junit/junit@4.13.2?type=jar",
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit@6.9.0.202402281855-rc1?type=jar",
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.junit@6.9.0.202402281855-rc1?type=jar",
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.junit.ssh@6.9.0.202402281855-rc1?type=jar",
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.ssh.jsch@6.9.0.202402281855-rc1?type=jar",
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.test@6.9.0.202402281855-rc1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.coverage@6.9.0.202402281855-rc1?type=pom",
      "dependsOn" : [
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit@6.9.0.202402281855-rc1?type=jar",
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.ant@6.9.0.202402281855-rc1?type=jar",
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.archive@6.9.0.202402281855-rc1?type=jar",
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.http.apache@6.9.0.202402281855-rc1?type=jar",
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.http.server@6.9.0.202402281855-rc1?type=jar",
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.lfs@6.9.0.202402281855-rc1?type=jar",
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.lfs.server@6.9.0.202402281855-rc1?type=jar",
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.pgm@6.9.0.202402281855-rc1?type=jar",
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.ui@6.9.0.202402281855-rc1?type=jar",
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.ssh.apache@6.9.0.202402281855-rc1?type=jar",
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.test@6.9.0.202402281855-rc1?type=jar",
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.ant.test@6.9.0.202402281855-rc1?type=jar",
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.http.test@6.9.0.202402281855-rc1?type=jar",
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.pgm.test@6.9.0.202402281855-rc1?type=jar",
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.lfs.test@6.9.0.202402281855-rc1?type=jar",
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.lfs.server.test@6.9.0.202402281855-rc1?type=jar",
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.ssh.apache.test@6.9.0.202402281855-rc1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.benchmarks@6.9.0.202402281855-rc1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.openjdk.jmh/jmh-core@1.37?type=jar",
        "pkg:maven/org.openjdk.jmh/jmh-generator-annprocess@1.37?type=jar",
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit@6.9.0.202402281855-rc1?type=jar",
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.junit@6.9.0.202402281855-rc1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.openjdk.jmh/jmh-core@1.37?type=jar",
      "dependsOn" : [
        "pkg:maven/net.sf.jopt-simple/jopt-simple@5.0.4?type=jar",
        "pkg:maven/org.apache.commons/commons-math3@3.6.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/net.sf.jopt-simple/jopt-simple@5.0.4?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-math3@3.6.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.openjdk.jmh/jmh-generator-annprocess@1.37?type=jar",
      "dependsOn" : [
        "pkg:maven/org.openjdk.jmh/jmh-core@1.37?type=jar"
      ]
    }
  ]
}