{ "bomFormat" : "CycloneDX", "specVersion" : "1.4", "serialNumber" : "urn:uuid:91b9b950-d75b-334a-a1a8-01214faaa764", "version" : 1, "metadata" : { "tools" : [ { "vendor" : "OWASP Foundation", "name" : "CycloneDX Maven plugin", "version" : "2.8.0", "hashes" : [ { "alg" : "MD5", "content" : "76ffec6a7ddd46b2b24517411874eb99" }, { "alg" : "SHA-1", "content" : "5b0d5b41975b53be4799b9621b4af0cfc41d44b6" }, { "alg" : "SHA-256", "content" : "6852aa0f4e42a2db745bab80e384951a6a65b9215d041081d675780999027e81" }, { "alg" : "SHA-512", "content" : "417de20fcdcb11c9713bacbd57290d8e68037fdb4553fd31b8cb08bd760ad52dc65ea88ad4be15844ad3fd5a4d3e440d2f70326f2fe1e63ec78e059c9a883f8d" }, { "alg" : "SHA-384", "content" : "5eb755c6492e7a7385fa9a1e1f4517875bcb834b2df437808a37a2d6f5285df428741762305980315a63fcef1406597d" }, { "alg" : "SHA3-384", "content" : "0fe16a47cf7aab0b22251dafcc39939b68e8f1778093309d8d2060b51a08df445a8b8ed5a9561669faf2e55f907c76d8" }, { "alg" : "SHA3-256", "content" : "3e5a1eb5ab7d0797498862794709ff8eaaa071fe4cc9ec77f52db7e2f97ef487" }, { "alg" : "SHA3-512", "content" : "59281a3e29e76270d7f44b40b5b9f05e55f1ae3ec716d80add806f360940809e3813998ac7c5758043b8e248aed73b86e37dc506cdb4cde03c16bb617d8e5a3a" } ] } ], "component" : { "publisher" : "Eclipse JGit Project", "group" : "org.eclipse.jgit", "name" : "org.eclipse.jgit.gpg.bc", "version" : "6.10.0.202406032110-r", "description" : "GPG support for JGit based on BouncyCastle", "licenses" : [ { "license" : { "id" : "BSD-3-Clause", "url" : "https://opensource.org/licenses/BSD-3-Clause" } } ], "purl" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.gpg.bc@6.10.0.202406032110-r?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://www.eclipse.org/jgit//org.eclipse.jgit.gpg.bc" }, { "type" : "build-system", "url" : "https://ci.eclipse.org/jgit" }, { "type" : "distribution", "url" : "https://repo.eclipse.org/content/repositories/jgit-releases/" }, { "type" : "issue-tracker", "url" : "https://bugs.eclipse.org/bugs/buglist.cgi?query_format=advanced;component=JGit;product=JGit;classification=Technology" }, { "type" : "mailing-list", "url" : "http://dev.eclipse.org/mhonarc/lists/jgit-dev" }, { "type" : "vcs", "url" : "https://git.eclipse.org/r/plugins/gitiles/jgit/jgit/org.eclipse.jgit.gpg.bc" } ], "type" : "library", "bom-ref" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.gpg.bc@6.10.0.202406032110-r?type=jar" }, "properties" : [ { "name" : "maven.goal", "value" : "makeBom" }, { "name" : "maven.scopes", "value" : "compile,provided,runtime,system" }, { "name" : "maven.optional.unused", "value" : "true" }, { "name" : "cdx:reproducible", "value" : "enabled" } ] }, "components" : [ { "publisher" : "Eclipse JGit Project", "group" : "org.eclipse.jgit", "name" : "org.eclipse.jgit", "version" : "6.10.0.202406032110-r", "description" : "Repository access and algorithms", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "47395fdcc13dfbd6d6e4ff8ef68ae94d" }, { "alg" : "SHA-1", "content" : "c90fe8d6b02eba71513ff83e87ca8bcb8336433b" }, { "alg" : "SHA-256", "content" : "6b1ee2eccc4a643b12d2d96db5a32fb43f17bd10087b705c7923307b8e56b38a" }, { "alg" : "SHA-512", "content" : "15bc9126abc7dc3bfa11907b10fa128b39f037b0d0590220882319051c6d0ba863929e266aba2cb465390b382a286adbd3fa9e5d2b440648c06fb4a6001e7495" }, { "alg" : "SHA-384", "content" : "e15d907a850069a2cb419dd4884123f91c264d8a3610fd90d5725266dc1c402651672efaf4d26d9814778dc0a072be75" }, { "alg" : "SHA3-384", "content" : "9df6fd089fbe1be9060dd7f177c4aa21aabbb077a339193cb04b0616aa611b0597235fc78c33a93638bd5303593a4098" }, { "alg" : "SHA3-256", "content" : "d9d014e1a9a4ec5ef710b0b28d909625c4598faad9f3ad2e377e17918e020e53" }, { "alg" : "SHA3-512", "content" : "f8cc9de99fab34b161706dd06001765ad748567226d43196c9a4c3f148639a501513cb9f5a53fc1a9a1268c4723a0eac2db8efb9b823c0df01217799dc2b77ce" } ], "licenses" : [ { "license" : { "id" : "BSD-3-Clause", "url" : "https://opensource.org/licenses/BSD-3-Clause" } } ], "purl" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit@6.10.0.202406032110-r?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://www.eclipse.org/jgit//org.eclipse.jgit" }, { "type" : "build-system", "url" : "https://ci.eclipse.org/jgit" }, { "type" : "distribution", "url" : "https://repo.eclipse.org/content/repositories/jgit-releases/" }, { "type" : "issue-tracker", "url" : "https://bugs.eclipse.org/bugs/buglist.cgi?query_format=advanced;component=JGit;product=JGit;classification=Technology" }, { "type" : "mailing-list", "url" : "http://dev.eclipse.org/mhonarc/lists/jgit-dev" }, { "type" : "vcs", "url" : "https://git.eclipse.org/r/plugins/gitiles/jgit/jgit/org.eclipse.jgit" } ], "type" : "library", "bom-ref" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit@6.10.0.202406032110-r?type=jar" }, { "group" : "com.googlecode.javaewah", "name" : "JavaEWAH", "version" : "1.2.3", "description" : "The bit array data structure is implemented in Java as the BitSet class. Unfortunately, this fails to scale without compression. JavaEWAH is a word-aligned compressed variant of the Java bitset class. It uses a 64-bit run-length encoding (RLE) compression scheme. The goal of word-aligned compression is not to achieve the best compression, but rather to improve query processing time. Hence, we try to save CPU cycles, maybe at the expense of storage. However, the EWAH scheme we implemented is always more efficient storage-wise than an uncompressed bitmap (implemented in Java as the BitSet class). Unlike some alternatives, javaewah does not rely on a patented scheme.", "hashes" : [ { "alg" : "MD5", "content" : "8fdeda28c1fb10e67b3d79f86bef5e61" }, { "alg" : "SHA-1", "content" : "13a27c856e0c8808cee9a64032c58eee11c3adc9" }, { "alg" : "SHA-256", "content" : "d65226949713c4c61a784f41c51167e7b0316f93764398ebba9e4336b3d954c2" }, { "alg" : "SHA-512", "content" : "48cd9df9252c58e9ffe4583e68607944bcdf2ad7a3be7b4317467f503c4f56cdbde358ca7c4f34fa620d01615072a42f3a572fc4f1237e266310b7508e79bcac" }, { "alg" : "SHA-384", "content" : "d1fd074f21b8a54a07d3f4579376d7c3ab72f24814ebc9ba92344e9da4721e9bfa3cda3a599137e4ddf2395a3c5b88e4" }, { "alg" : "SHA3-384", "content" : "a553864f196f73c139a104170ab79e780046fb5f322072c5494a6590361021f875afd7168f858b0531b61918ab49b94e" }, { "alg" : "SHA3-256", "content" : "bab97f3f893af36c36218a151b0c3fece27d47f358cc19e1ca9c22d77942bb76" }, { "alg" : "SHA3-512", "content" : "be817b93c7093d44ec8dded565d7e5651772ce38e9c72283c05191b33d0ecb2798cd385395f553500446573ac49dccc21f4ba3067d71eb89e03daa384d0193be" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/com.googlecode.javaewah/JavaEWAH@1.2.3?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://github.com/lemire/javaewah" }, { "type" : "distribution", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "issue-tracker", "url" : "https://github.com/lemire/javaewah/issues" }, { "type" : "vcs", "url" : "scm:git:git@github.com:lemire/javaewah.git" } ], "type" : "library", "bom-ref" : "pkg:maven/com.googlecode.javaewah/JavaEWAH@1.2.3?type=jar" }, { "publisher" : "The Apache Software Foundation", "group" : "commons-codec", "name" : "commons-codec", "version" : "1.17.0", "description" : "The Apache Commons Codec component contains encoder and decoders for various formats such as Base16, Base32, Base64, digest, and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a collection of phonetic encoding utilities.", "hashes" : [ { "alg" : "MD5", "content" : "ca1f080782f7e77cb3aec451e7a7f02d" }, { "alg" : "SHA-1", "content" : "0dbe8eef6e14460e73da07f7b11bf994d6626355" }, { "alg" : "SHA-256", "content" : "f700de80ac270d0344fdea7468201d8b9c805e5c648331c3619f2ee067ccfc59" }, { "alg" : "SHA-512", "content" : "cb9c3b2055d0b31d106293f0bc3696f90a11a30953e5b05a1a3c453e98a563475c93d7c6d1707e75f59d0806fba5fd8e4486b8bd72e58bb6ae995bdbbeeb7e17" }, { "alg" : "SHA-384", "content" : "a0fd174b2f8a21b43828371a7ee03c915b79e69d7b0e16cfe6367f794e2f8e6bbebc261e8a4ba35a79779b2338a774a4" }, { "alg" : "SHA3-384", "content" : "803fb227bd6770cc21c701b9529606f95ba05c30ea3d807b18b3681fde0c7cabd0e2f40ab36567832f63e0c42b77d0f2" }, { "alg" : "SHA3-256", "content" : "41b9b86fd0b19ff44d19d108302d7b0111ed86d07a65a90efe1023537fad8748" }, { "alg" : "SHA3-512", "content" : "eaacc9eafccf4bda0c72c5151dbd7e99954842782c91b501af8c7ca462a04b6c59d7ab8e1ef43b3ebc1b12ca62f4574544bc31df10f33f4a15cd3c3399bd808b" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0", "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], "purl" : "pkg:maven/commons-codec/commons-codec@1.17.0?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://commons.apache.org/proper/commons-codec/" }, { "type" : "build-system", "url" : "https://github.com/apache/commons-parent/actions" }, { "type" : "distribution", "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" }, { "type" : "issue-tracker", "url" : "https://issues.apache.org/jira/browse/CODEC" }, { "type" : "mailing-list", "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/" }, { "type" : "vcs", "url" : "https://github.com/apache/commons-codec" } ], "type" : "library", "bom-ref" : "pkg:maven/commons-codec/commons-codec@1.17.0?type=jar" }, { "group" : "org.bouncycastle", "name" : "bcpg-jdk18on", "version" : "1.78.1", "description" : "The Bouncy Castle Java API for handling the OpenPGP protocol. This jar contains the OpenPGP API for JDK 1.8 and up. The APIs can be used in conjunction with a JCE/JCA provider such as the one provided with the Bouncy Castle Cryptography APIs.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "003cd380030576107da53d4ba0490875" }, { "alg" : "SHA-1", "content" : "6c8dbcec20355278ec54840e735f63db2479150e" }, { "alg" : "SHA-256", "content" : "1463bb2cb8737e9ae34f5bd93f48e27711365bb277f4918f44608ed89b68792d" }, { "alg" : "SHA-512", "content" : "a2ba9b0767302699754db3b636028c36c7af68786f34d97e7445ebec496dad1c1076c5763da9b9160f3402033aa298b65457a8efd143d92276c81186f3c19706" }, { "alg" : "SHA-384", "content" : "1599d6493076c6b299ddfb9e7225c3db22f82a24b8333871a2aa55a62e4b874939d23d6b6451168493b7f90de5a01c11" }, { "alg" : "SHA3-384", "content" : "e2ad587138c254844b387f008a4a40415b48a343c23d997421d9e9050cdc26b441fdc99dc94a962e2d4c90a67504bc15" }, { "alg" : "SHA3-256", "content" : "96831469ede277df99f52be7014842a116d230bb6d9e92a72a59305c6e107616" }, { "alg" : "SHA3-512", "content" : "c31e1040c478db318c13faa8291d9f913a52b5af3f16e5094a261fac5be2888e297d92d11e8ff7829678dfd8325d46d9825016bcf0fc2b9cbcfaa7ac5da7ddfe" } ], "licenses" : [ { "license" : { "name" : "Bouncy Castle Licence", "url" : "https://www.bouncycastle.org/licence.html" } }, { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/org.bouncycastle/bcpg-jdk18on@1.78.1?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://www.bouncycastle.org/java.html" }, { "type" : "issue-tracker", "url" : "https://github.com/bcgit/bc-java/issues" }, { "type" : "vcs", "url" : "https://github.com/bcgit/bc-java" } ], "type" : "library", "bom-ref" : "pkg:maven/org.bouncycastle/bcpg-jdk18on@1.78.1?type=jar" }, { "group" : "org.bouncycastle", "name" : "bcprov-jdk18on", "version" : "1.78.1", "description" : "The Bouncy Castle Crypto package is a Java implementation of cryptographic algorithms. This jar contains JCE provider and lightweight API for the Bouncy Castle Cryptography APIs for JDK 1.8 and up.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "9646d6d9c087fd408fafe0e3cfe56c25" }, { "alg" : "SHA-1", "content" : "39e9e45359e20998eb79c1828751f94a818d25f8" }, { "alg" : "SHA-256", "content" : "add5915e6acfc6ab5836e1fd8a5e21c6488536a8c1f21f386eeb3bf280b702d7" }, { "alg" : "SHA-512", "content" : "fb10c3c089921c8173ad285329f730e0e78de175d1b50b9bdd79c6a85a265af9b3331caa0c1ed57e5f47047319ce3b0f3bb5def0a3db9cccf2755cc95e145e52" }, { "alg" : "SHA-384", "content" : "f800642cf1d359c49455421dcc1f6d4b4225d74128bc221fb6742703d5efe009eaefdac2b8139e2168e55815df32c91c" }, { "alg" : "SHA3-384", "content" : "de3801b40050d6839874c0f00c933f42c89badc87a64d0664960aaed1b08f350ee5bc2f0575771a9b3a217012698d5d9" }, { "alg" : "SHA3-256", "content" : "d6a7629eefcee11d7f9cfca72d6b87d2779785ed887987cf94ce7da011b9e373" }, { "alg" : "SHA3-512", "content" : "6a3e7b0a180e61d17de3107876e0ccce6ddfa23c165827a585b10fac8cc3629ffde930e36aaff5df2327278e35631d9ab970923fe0e34d68876b7911f2a536c5" } ], "licenses" : [ { "license" : { "name" : "Bouncy Castle Licence", "url" : "https://www.bouncycastle.org/licence.html" } } ], "purl" : "pkg:maven/org.bouncycastle/bcprov-jdk18on@1.78.1?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://www.bouncycastle.org/java.html" }, { "type" : "issue-tracker", "url" : "https://github.com/bcgit/bc-java/issues" }, { "type" : "vcs", "url" : "https://github.com/bcgit/bc-java" } ], "type" : "library", "bom-ref" : "pkg:maven/org.bouncycastle/bcprov-jdk18on@1.78.1?type=jar" }, { "group" : "org.bouncycastle", "name" : "bcutil-jdk18on", "version" : "1.78.1", "description" : "The Bouncy Castle Java APIs for ASN.1 extension and utility APIs used to support bcpkix and bctls. This jar contains APIs for JDK 1.8 and up.", "scope" : "optional", "hashes" : [ { "alg" : "MD5", "content" : "228149d265033bae6701f70580aa7bf2" }, { "alg" : "SHA-1", "content" : "5353ca39fe2f148dab9ca1d637a43d0750456254" }, { "alg" : "SHA-256", "content" : "d9fa56f97b0f761ce3bc8d9d74c5d7137a987bf5bd3abfe1003f9bafa45a1d2f" }, { "alg" : "SHA-512", "content" : "6a338c50d662993c9f00bba23f98443c923b9a95ff61dc653906f51857f8afaecc57a536bfaf6848ac8e7e9ce0a21f84ec068815853261268f97e951526bc766" }, { "alg" : "SHA-384", "content" : "cf8b9239ca118fe66fff8752dca15caa6950aa696e5034b087e89893ebed7dc1c7ce28c4e1b01ec7cc791f926c91f3a2" }, { "alg" : "SHA3-384", "content" : "44d796cc83bdc00d3e6703170c718d34347babe628c7ecbe7769be0d39873a081eea847a336ba0fe96c09c79d52807f8" }, { "alg" : "SHA3-256", "content" : "681c7ba398b4932feb4f9e3a67e746b519c5f732d73c2aa4ce3ce43274f24f87" }, { "alg" : "SHA3-512", "content" : "99809d355ddcfd5e72bd627c099f376f04d3f10ce227fb1a27812596b466fd21fdee97c4da061d4e637dd6e256af6871c51de94930c07c7fa8ab070767c4101a" } ], "licenses" : [ { "license" : { "name" : "Bouncy Castle Licence", "url" : "https://www.bouncycastle.org/licence.html" } } ], "purl" : "pkg:maven/org.bouncycastle/bcutil-jdk18on@1.78.1?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://www.bouncycastle.org/java.html" }, { "type" : "issue-tracker", "url" : "https://github.com/bcgit/bc-java/issues" }, { "type" : "vcs", "url" : "https://github.com/bcgit/bc-java" } ], "type" : "library", "bom-ref" : "pkg:maven/org.bouncycastle/bcutil-jdk18on@1.78.1?type=jar" }, { "group" : "org.bouncycastle", "name" : "bcpkix-jdk18on", "version" : "1.78.1", "description" : "The Bouncy Castle Java APIs for CMS, PKCS, EAC, TSP, CMP, CRMF, OCSP, and certificate generation. This jar contains APIs for JDK 1.8 and up. The APIs can be used in conjunction with a JCE/JCA provider such as the one provided with the Bouncy Castle Cryptography APIs.", "scope" : "optional", "hashes" : [ { "alg" : "MD5", "content" : "bbe33d493826742ce3cda5fe5181b668" }, { "alg" : "SHA-1", "content" : "17b3541f736df97465f87d9f5b5dfa4991b37bb3" }, { "alg" : "SHA-256", "content" : "4b48ea084e5232b9d79ebca1887b9de037b124931807cd60710748c2aee08cc9" }, { "alg" : "SHA-512", "content" : "d71a45844a7946b6a70315254e82a335d2df5e402b2d5a3b496fa69b355184338011b49c5f1c76026764a76f62f2bc140c25db2881bca91dde9677a25c6d587b" }, { "alg" : "SHA-384", "content" : "8ec868bf88ebf69fa9a3c42803410d221600168652c659687db408a661a64aecf0c6cf1c9d70aa2f8e7a29e9846b1fed" }, { "alg" : "SHA3-384", "content" : "49e639a4f1b6d3a45a15eadff7afccd62f88111fb4eb8cde1a2df1df8f6a1b0b4a0b8976f1376c5586386158e71a5280" }, { "alg" : "SHA3-256", "content" : "43fe9d049512fd01e58aea9e088530a4153eec20b58edae9ceea102a1e632bda" }, { "alg" : "SHA3-512", "content" : "f2d0d02e199df93ac1b90b12d40d5cc7fd5d92e5ba5a93b5ca495ad2c210a2fa927871db5932a9f070ad66ea39a66d3a3ac0ad1ebeb4cbf010de28a247cf26ed" } ], "licenses" : [ { "license" : { "name" : "Bouncy Castle Licence", "url" : "https://www.bouncycastle.org/licence.html" } } ], "purl" : "pkg:maven/org.bouncycastle/bcpkix-jdk18on@1.78.1?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://www.bouncycastle.org/java.html" }, { "type" : "issue-tracker", "url" : "https://github.com/bcgit/bc-java/issues" }, { "type" : "vcs", "url" : "https://github.com/bcgit/bc-java" } ], "type" : "library", "bom-ref" : "pkg:maven/org.bouncycastle/bcpkix-jdk18on@1.78.1?type=jar" }, { "publisher" : "QOS.ch", "group" : "org.slf4j", "name" : "slf4j-api", "version" : "1.7.36", "description" : "The slf4j API", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "872da51f5de7f3923da4de871d57fd85" }, { "alg" : "SHA-1", "content" : "6c62681a2f655b49963a5983b8b0950a6120ae14" }, { "alg" : "SHA-256", "content" : "d3ef575e3e4979678dc01bf1dcce51021493b4d11fb7f1be8ad982877c16a1c0" }, { "alg" : "SHA-512", "content" : "f9b033fc019a44f98b16048da7e2b59edd4a6a527ba60e358f65ab88e0afae03a9340f1b3e8a543d49fa542290f499c5594259affa1ff3e6e7bf3b428d4c610b" }, { "alg" : "SHA-384", "content" : "2b14ad035877087157e379d3277dcdcd79e58d6bdb147c47d29e377d75ce53ad42cafbf22f5fb7827c7e946ff4876b9a" }, { "alg" : "SHA3-384", "content" : "3bc3110dafb8d5be16a39f3b2671a466463cd99eb39610c0e4719a7bf2d928f2ea213c734887c6926a07c4cca7769e4b" }, { "alg" : "SHA3-256", "content" : "ba2608179fcf46e2291a90b9cbb4aa30d718e481f59c350cc21c73b88d826881" }, { "alg" : "SHA3-512", "content" : "14c4edcd19702ef607d78826839d8a6d3a39157df54b89a801d3d3cbbe1307131a77671b041c761122730fb1387888c5ec2e46bdd80e1cb07f8f144676441824" } ], "licenses" : [ { "license" : { "id" : "MIT", "url" : "https://opensource.org/licenses/MIT" } } ], "purl" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar", "externalReferences" : [ { "type" : "website", "url" : "http://www.slf4j.org" }, { "type" : "distribution", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "vcs", "url" : "https://github.com/qos-ch/slf4j/slf4j-api" } ], "type" : "library", "bom-ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar" } ], "dependencies" : [ { "ref" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.gpg.bc@6.10.0.202406032110-r?type=jar", "dependsOn" : [ "pkg:maven/org.eclipse.jgit/org.eclipse.jgit@6.10.0.202406032110-r?type=jar", "pkg:maven/org.bouncycastle/bcpg-jdk18on@1.78.1?type=jar", "pkg:maven/org.bouncycastle/bcprov-jdk18on@1.78.1?type=jar", "pkg:maven/org.bouncycastle/bcutil-jdk18on@1.78.1?type=jar", "pkg:maven/org.bouncycastle/bcpkix-jdk18on@1.78.1?type=jar", "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar" ] }, { "ref" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit@6.10.0.202406032110-r?type=jar", "dependsOn" : [ "pkg:maven/com.googlecode.javaewah/JavaEWAH@1.2.3?type=jar", "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar", "pkg:maven/commons-codec/commons-codec@1.17.0?type=jar" ] }, { "ref" : "pkg:maven/com.googlecode.javaewah/JavaEWAH@1.2.3?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/commons-codec/commons-codec@1.17.0?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/org.bouncycastle/bcpg-jdk18on@1.78.1?type=jar", "dependsOn" : [ "pkg:maven/org.bouncycastle/bcprov-jdk18on@1.78.1?type=jar", "pkg:maven/org.bouncycastle/bcutil-jdk18on@1.78.1?type=jar" ] }, { "ref" : "pkg:maven/org.bouncycastle/bcprov-jdk18on@1.78.1?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/org.bouncycastle/bcutil-jdk18on@1.78.1?type=jar", "dependsOn" : [ "pkg:maven/org.bouncycastle/bcprov-jdk18on@1.78.1?type=jar" ] }, { "ref" : "pkg:maven/org.bouncycastle/bcpkix-jdk18on@1.78.1?type=jar", "dependsOn" : [ "pkg:maven/org.bouncycastle/bcprov-jdk18on@1.78.1?type=jar", "pkg:maven/org.bouncycastle/bcutil-jdk18on@1.78.1?type=jar" ] } ] }