{
  "bomFormat" : "CycloneDX",
  "specVersion" : "1.4",
  "version" : 1,
  "metadata" : {
    "tools" : [
      {
        "vendor" : "OWASP Foundation",
        "name" : "CycloneDX Maven plugin",
        "version" : "2.7.10",
        "hashes" : [
          {
            "alg" : "MD5",
            "content" : "1cc7f6a0382f8bb2f758d6a6ea401d1b"
          },
          {
            "alg" : "SHA-1",
            "content" : "a4297947a1f2d7d453105db542651614bbd37f38"
          },
          {
            "alg" : "SHA-256",
            "content" : "bd0fdd8f2f2116eee5e715aeac1580f19eb7a10ec2b6f805b53567067658e872"
          },
          {
            "alg" : "SHA-512",
            "content" : "9cde8352a427e10b96cae01348fc7cfe5d4aa9cd0a5e5dd93b414ce3bb7d112993c3b3004e53af52567fbfa16de0704ec59a5556a635ad70571fd124ae389f39"
          },
          {
            "alg" : "SHA-384",
            "content" : "93d7bf5b5c735347edfbfbd66810273ca840f9a322b816d22d44c3d8e8255c09e86570bb23712aeb0cade0f478be5aeb"
          },
          {
            "alg" : "SHA3-384",
            "content" : "4467f16e9ca32190a6e49c65339eb28ee5e8c78f4e918fcf95128a4b7648898de56ccb43eacfad0c9391ef8cdb7d629a"
          },
          {
            "alg" : "SHA3-256",
            "content" : "ed2996c99b483e969221d5e9a40f562ea2ab85442d361d72a90e85266a3ed781"
          },
          {
            "alg" : "SHA3-512",
            "content" : "c8e6ea9ddc38edc77e284b3bf541663e84752bdc59ed1935799847a48a14ea2fa531b61008fefcba37d732a56702a11ac112437b9b80d18f4ecc8ef0ecfb32cf"
          }
        ]
      }
    ],
    "component" : {
      "publisher" : "Eclipse JGit Project",
      "group" : "org.eclipse.jgit",
      "name" : "org.eclipse.jgit.junit.ssh",
      "version" : "6.9.0.202403050737-r",
      "description" : "Utility classes to support Ssh based JUnit testing of JGit applications.",
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause",
            "url" : "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.junit.ssh@6.9.0.202403050737-r?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.eclipse.org/jgit//org.eclipse.jgit.junit.ssh"
        },
        {
          "type" : "build-system",
          "url" : "https://ci.eclipse.org/jgit"
        },
        {
          "type" : "distribution",
          "url" : "https://repo.eclipse.org/content/repositories/jgit-releases/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://bugs.eclipse.org/bugs/buglist.cgi?query_format=advanced;component=JGit;product=JGit;classification=Technology"
        },
        {
          "type" : "mailing-list",
          "url" : "http://dev.eclipse.org/mhonarc/lists/jgit-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://git.eclipse.org/r/plugins/gitiles/jgit/jgit/org.eclipse.jgit.junit.ssh"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.junit.ssh@6.9.0.202403050737-r?type=jar"
    },
    "properties" : [
      {
        "name" : "maven.goal",
        "value" : "makeBom"
      },
      {
        "name" : "maven.scopes",
        "value" : "compile,provided,runtime,system"
      },
      {
        "name" : "maven.optional.unused",
        "value" : "true"
      },
      {
        "name" : "cdx:reproducible",
        "value" : "enabled"
      }
    ]
  },
  "components" : [
    {
      "publisher" : "Eclipse JGit Project",
      "group" : "org.eclipse.jgit",
      "name" : "org.eclipse.jgit",
      "version" : "6.9.0.202403050737-r",
      "description" : "Repository access and algorithms",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "bf46ab2ec23bf919a867b25bf08bf22f"
        },
        {
          "alg" : "SHA-1",
          "content" : "e4da064611794c35cbf80a720a3f813285d5ccba"
        },
        {
          "alg" : "SHA-256",
          "content" : "6209ac6691be2a06320f02000d89bed73edf05f45d65ef9a155147511ab77f3c"
        },
        {
          "alg" : "SHA-512",
          "content" : "52f303e821e8ab999ad1e601cf0b80ea06bf25d062e1f6f4d39d46f078b9e45f1594536fd1f98b890b271d39134aa5a970d9ee1f9d15e24c970e794e8b13fc1f"
        },
        {
          "alg" : "SHA-384",
          "content" : "b833ca59e487e1192cce8bf24005efaa49fa618164c8765cc617782032c262bb5a3f62a28b37c62cbc6595581daf23cb"
        },
        {
          "alg" : "SHA3-384",
          "content" : "ba06b71360a97820fa3d083d7386484fe204b1d5e8b630e3018947af11a7e6a2aeb33888aac1df1806105ff8c05892f4"
        },
        {
          "alg" : "SHA3-256",
          "content" : "d69c941df0021ff4bb76e70ea51bd7a0e0eefe5b0a52015a4c2e0fbd3624e801"
        },
        {
          "alg" : "SHA3-512",
          "content" : "766bd83f6bb81b2f052044c0fd56dfc02bd6e5f40b4615ed1d0e00236417997995f52be56d8acb5dfed9337889764fc069374ece357ff7f1513091291df2bddd"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause",
            "url" : "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit@6.9.0.202403050737-r?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.eclipse.org/jgit//org.eclipse.jgit"
        },
        {
          "type" : "build-system",
          "url" : "https://ci.eclipse.org/jgit"
        },
        {
          "type" : "distribution",
          "url" : "https://repo.eclipse.org/content/repositories/jgit-releases/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://bugs.eclipse.org/bugs/buglist.cgi?query_format=advanced;component=JGit;product=JGit;classification=Technology"
        },
        {
          "type" : "mailing-list",
          "url" : "http://dev.eclipse.org/mhonarc/lists/jgit-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://git.eclipse.org/r/plugins/gitiles/jgit/jgit/org.eclipse.jgit"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit@6.9.0.202403050737-r?type=jar"
    },
    {
      "group" : "com.googlecode.javaewah",
      "name" : "JavaEWAH",
      "version" : "1.2.3",
      "description" : "The bit array data structure is implemented in Java as the BitSet class. Unfortunately, this fails to scale without compression. JavaEWAH is a word-aligned compressed variant of the Java bitset class. It uses a 64-bit run-length encoding (RLE) compression scheme. The goal of word-aligned compression is not to achieve the best compression, but rather to improve query processing time. Hence, we try to save CPU cycles, maybe at the expense of storage. However, the EWAH scheme we implemented is always more efficient storage-wise than an uncompressed bitmap (implemented in Java as the BitSet class). Unlike some alternatives, javaewah does not rely on a patented scheme.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "8fdeda28c1fb10e67b3d79f86bef5e61"
        },
        {
          "alg" : "SHA-1",
          "content" : "13a27c856e0c8808cee9a64032c58eee11c3adc9"
        },
        {
          "alg" : "SHA-256",
          "content" : "d65226949713c4c61a784f41c51167e7b0316f93764398ebba9e4336b3d954c2"
        },
        {
          "alg" : "SHA-512",
          "content" : "48cd9df9252c58e9ffe4583e68607944bcdf2ad7a3be7b4317467f503c4f56cdbde358ca7c4f34fa620d01615072a42f3a572fc4f1237e266310b7508e79bcac"
        },
        {
          "alg" : "SHA-384",
          "content" : "d1fd074f21b8a54a07d3f4579376d7c3ab72f24814ebc9ba92344e9da4721e9bfa3cda3a599137e4ddf2395a3c5b88e4"
        },
        {
          "alg" : "SHA3-384",
          "content" : "a553864f196f73c139a104170ab79e780046fb5f322072c5494a6590361021f875afd7168f858b0531b61918ab49b94e"
        },
        {
          "alg" : "SHA3-256",
          "content" : "bab97f3f893af36c36218a151b0c3fece27d47f358cc19e1ca9c22d77942bb76"
        },
        {
          "alg" : "SHA3-512",
          "content" : "be817b93c7093d44ec8dded565d7e5651772ce38e9c72283c05191b33d0ecb2798cd385395f553500446573ac49dccc21f4ba3067d71eb89e03daa384d0193be"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.googlecode.javaewah/JavaEWAH@1.2.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/lemire/javaewah"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/lemire/javaewah/issues"
        },
        {
          "type" : "vcs",
          "url" : "scm:git:git@github.com:lemire/javaewah.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.googlecode.javaewah/JavaEWAH@1.2.3?type=jar"
    },
    {
      "publisher" : "QOS.ch",
      "group" : "org.slf4j",
      "name" : "slf4j-api",
      "version" : "1.7.36",
      "description" : "The slf4j API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "872da51f5de7f3923da4de871d57fd85"
        },
        {
          "alg" : "SHA-1",
          "content" : "6c62681a2f655b49963a5983b8b0950a6120ae14"
        },
        {
          "alg" : "SHA-256",
          "content" : "d3ef575e3e4979678dc01bf1dcce51021493b4d11fb7f1be8ad982877c16a1c0"
        },
        {
          "alg" : "SHA-512",
          "content" : "f9b033fc019a44f98b16048da7e2b59edd4a6a527ba60e358f65ab88e0afae03a9340f1b3e8a543d49fa542290f499c5594259affa1ff3e6e7bf3b428d4c610b"
        },
        {
          "alg" : "SHA-384",
          "content" : "2b14ad035877087157e379d3277dcdcd79e58d6bdb147c47d29e377d75ce53ad42cafbf22f5fb7827c7e946ff4876b9a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "3bc3110dafb8d5be16a39f3b2671a466463cd99eb39610c0e4719a7bf2d928f2ea213c734887c6926a07c4cca7769e4b"
        },
        {
          "alg" : "SHA3-256",
          "content" : "ba2608179fcf46e2291a90b9cbb4aa30d718e481f59c350cc21c73b88d826881"
        },
        {
          "alg" : "SHA3-512",
          "content" : "14c4edcd19702ef607d78826839d8a6d3a39157df54b89a801d3d3cbbe1307131a77671b041c761122730fb1387888c5ec2e46bdd80e1cb07f8f144676441824"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.slf4j.org"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/qos-ch/slf4j/slf4j-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-codec",
      "name" : "commons-codec",
      "version" : "1.16.0",
      "description" : "The Apache Commons Codec package contains simple encoder and decoders for various formats such as Base64 and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a collection of phonetic encoding utilities.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6e26920fa7228891980890cce06b718c"
        },
        {
          "alg" : "SHA-1",
          "content" : "4e3eb3d79888d76b54e28b350915b5dc3919c9de"
        },
        {
          "alg" : "SHA-256",
          "content" : "56595fb20b0b85bc91d0d503dad50bb7f1b9afc0eed5dffa6cbb25929000484d"
        },
        {
          "alg" : "SHA-512",
          "content" : "eee671e66d808b56b81e15574675cf132d7628c010736d580915bbf8c04849f04df1d95ddeea13c4e119f8f0a564c7003beeb8ab437564e080ee27063c1e52b9"
        },
        {
          "alg" : "SHA-384",
          "content" : "65eb89c19815ea11585ff6c91e2ea4acd6a41ee35502891ba29fb5ec390d567190cf2f4120bfbf50ec470274df22a25f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "1841b59a30e095b063d9a421be91ee2adf28c98a9b32e4ef24130b60362db2f7f69eea04969d035dc4b01db38a14c65c"
        },
        {
          "alg" : "SHA3-256",
          "content" : "8327323df750189daa3755a4fb3936b685f72b46f3917d5dae2c1f3812577c37"
        },
        {
          "alg" : "SHA3-512",
          "content" : "664a0b5779c3e448d448d692a0ab19c2aec422d2adbfb23969bc44d2c6446257104d8206ccca4c0107c58f9a77ece5a48e2fd69fe8038f7cad8254675dadbb05"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-codec/commons-codec@1.16.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-codec/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-parent/actions"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CODEC"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/commons-codec"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-codec/commons-codec@1.16.0?type=jar"
    },
    {
      "publisher" : "Eclipse JGit Project",
      "group" : "org.eclipse.jgit",
      "name" : "org.eclipse.jgit.junit",
      "version" : "6.9.0.202403050737-r",
      "description" : "Utility classes to support JUnit testing of JGit applications.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "ba04e9b1b94edf56874fd4f256fedadd"
        },
        {
          "alg" : "SHA-1",
          "content" : "b5a30895922d0ae049229923df0df7dfbad369b5"
        },
        {
          "alg" : "SHA-256",
          "content" : "cb3374fc871e3ce49658e8e8547eaaf945580ad9753cd554091e0eb47571f07d"
        },
        {
          "alg" : "SHA-512",
          "content" : "8e0e7499168abb987ed18ca3addf1ebc5f2e5ba5d85736aee43eabc65db3ae97a9ddbb420c9b7c0677caabdd3a5edd827939ed321ea0dbb4645dcd667d80f166"
        },
        {
          "alg" : "SHA-384",
          "content" : "132350a13a37a1f2a8204493bdf768dd12995b959c1ae4a6e19d5ec851ee16801f5d280ad22f97512b322df27b16a7f0"
        },
        {
          "alg" : "SHA3-384",
          "content" : "3970a66ebaa6f2ce2bee67d1104598bd7273220fb98118620953f748004615c076ef8ce489093da47c92045d17145af5"
        },
        {
          "alg" : "SHA3-256",
          "content" : "0cd56edbced406121ec609dbdd513447fbaa7bff0b5c578560fe479e9400e1fd"
        },
        {
          "alg" : "SHA3-512",
          "content" : "ea0e69e03643d24f39c3ab46f49f7b5d2a3005f5e6d5f938559d10f4e2f5ced7809994e451cf949e572a36da5ebba7dfa03266a7909eb0a55cc37881a61dad07"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause",
            "url" : "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.junit@6.9.0.202403050737-r?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.eclipse.org/jgit//org.eclipse.jgit.junit"
        },
        {
          "type" : "build-system",
          "url" : "https://ci.eclipse.org/jgit"
        },
        {
          "type" : "distribution",
          "url" : "https://repo.eclipse.org/content/repositories/jgit-releases/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://bugs.eclipse.org/bugs/buglist.cgi?query_format=advanced;component=JGit;product=JGit;classification=Technology"
        },
        {
          "type" : "mailing-list",
          "url" : "http://dev.eclipse.org/mhonarc/lists/jgit-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://git.eclipse.org/r/plugins/gitiles/jgit/jgit/org.eclipse.jgit.junit"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.junit@6.9.0.202403050737-r?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.sshd",
      "name" : "sshd-osgi",
      "version" : "2.12.0",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "bd65a91a42a0b0e66c7ec78c338b23f6"
        },
        {
          "alg" : "SHA-1",
          "content" : "32b8de1cbb722ba75bdf9898e0c41d42af00ce57"
        },
        {
          "alg" : "SHA-256",
          "content" : "665ea29384a251bd74f61e16bbb16e20c9ec0a6d90f2b367b69c7920ad8191ef"
        },
        {
          "alg" : "SHA-512",
          "content" : "354cb5c9501b9775265270e9dbe386d67da23ad9e1094ee0cc8c9b80842f199a5f9d717615312779e645df551516fa6b5154e6ed02ffdf6ed8ada63d8dfb4704"
        },
        {
          "alg" : "SHA-384",
          "content" : "60b9326837e846ea1e4f33e870156e4bdbba5d07ee660d73c76a77bfbe8249b54d12cd1e614f668506b18d7797c5d070"
        },
        {
          "alg" : "SHA3-384",
          "content" : "5c52f9d15dc45a8a70520ba8716d6973da1849b4eed48b08a8bf60f50f2d8b1d2c9510cc41c43d21c1d41b6473372b11"
        },
        {
          "alg" : "SHA3-256",
          "content" : "1c464db6a9c796cc9ab2c26ce50e49750838bd2d06c844766b18721f062486db"
        },
        {
          "alg" : "SHA3-512",
          "content" : "7b23e12953da24492ad2ad0586bb9f5e4f813a44ecd7bddbe61ba12d4e70b68e48efcb3f680dffe1c27e09fde9d3cff5b23a38de03c725d1189e3bbe4db13266"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.sshd/sshd-osgi@2.12.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.apache.org/sshd/sshd-osgi/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/SSHD"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/mina-users/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/mina-sshd/tree/sshd-2.12.0/sshd-osgi"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.sshd/sshd-osgi@2.12.0?type=jar"
    },
    {
      "publisher" : "QOS.ch",
      "group" : "org.slf4j",
      "name" : "jcl-over-slf4j",
      "version" : "1.7.32",
      "description" : "JCL 1.2 implemented over SLF4J",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "8788169f5d5be6550efc75d3bfffc82c"
        },
        {
          "alg" : "SHA-1",
          "content" : "32c060250bcc5282cdbc1fd7008c12eb4ebad00e"
        },
        {
          "alg" : "SHA-256",
          "content" : "60f3bda5922e3912889cca1311d1b227753610bf60cb4e5e914e8b2eaa0326b4"
        },
        {
          "alg" : "SHA-512",
          "content" : "55b0678cbe5359d7fabcec55f305997170b0d45264b5cc0577cc9137ac2388a459b86c5438b5850d6e7247d3a00486f83f4b7e305b0eb756a52d3e5c5466ddbd"
        },
        {
          "alg" : "SHA-384",
          "content" : "f1b69471e3c75cd1c13f6557666ebc4b01c676cce3bd2cb19720471dcca98333b9573b468cfe308abd7cf297cee59133"
        },
        {
          "alg" : "SHA3-384",
          "content" : "2df2a1639c379ed6962a039804e7613ba9cde8ec612c94062d9375d1071b2870edb58f3b9d407650a13dce61bcb69d29"
        },
        {
          "alg" : "SHA3-256",
          "content" : "f515d8b3b683bd709ce241190b40b6f8266b392da6e69b0e637377f488e6d38f"
        },
        {
          "alg" : "SHA3-512",
          "content" : "dd2156b7589ce3989471e856cb65ebb50af00a23aef1a2b80ca7ee5f8a4c4573a7887f54559784e710fa8a089ea57ff04c0a80f804710e956cbaebac11c647b2"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.slf4j/jcl-over-slf4j@1.7.32?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.slf4j.org"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/qos-ch/slf4j/jcl-over-slf4j"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.slf4j/jcl-over-slf4j@1.7.32?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.sshd",
      "name" : "sshd-sftp",
      "version" : "2.12.0",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "187327e40217a1c8df19ff86aa443714"
        },
        {
          "alg" : "SHA-1",
          "content" : "0f96f00a07b186ea62838a6a4122e8f4cad44df6"
        },
        {
          "alg" : "SHA-256",
          "content" : "3f2a25bbab47990e3c5901d24694390d9934b46c13261fc5b6b1ef009cf73038"
        },
        {
          "alg" : "SHA-512",
          "content" : "9d11c493dbf6fd95c7546586ae62dff00895fdb40e361b38cb21e82680e85e06ea1eb0bfb2281b9413f9a7b23db552fd3f5609e38ce6462ead9ad6612d1dcb1f"
        },
        {
          "alg" : "SHA-384",
          "content" : "0f7a6e4150a176a6d0aa41c744b848351acda866d5e640722f2f97f440b9024e64f9a4f3bda60a4a067a0de5d8c6bc03"
        },
        {
          "alg" : "SHA3-384",
          "content" : "f2c92edc9e26a3396d5ca86360c8a13678b839fff330824b2ce109c8a1585ea2be229cad4730f55eb9453aa25c68334e"
        },
        {
          "alg" : "SHA3-256",
          "content" : "1acceb19c8d398e7f758d566dc47a8d4db3f4b9d4feca0b4f9de22f323eb78e5"
        },
        {
          "alg" : "SHA3-512",
          "content" : "72b98b7b7eabc72c5e2e01154a4bd6fb159a513be28e401be67d7f9780bc8c2a5f00019cdd4ba6b88dbe8a09322c0d0ac2e3804f11d13bbd2f86c940835f67c2"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.sshd/sshd-sftp@2.12.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.apache.org/sshd/sshd-sftp/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/SSHD"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/mina-users/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/mina-sshd/tree/sshd-2.12.0/sshd-sftp"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.sshd/sshd-sftp@2.12.0?type=jar"
    },
    {
      "publisher" : "JUnit",
      "group" : "junit",
      "name" : "junit",
      "version" : "4.13.2",
      "description" : "JUnit is a unit testing framework for Java, created by Erich Gamma and Kent Beck.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "d98a9a02a99a9acd22d7653cbcc1f31f"
        },
        {
          "alg" : "SHA-1",
          "content" : "8ac9e16d933b6fb43bc7f576336b8f4d7eb5ba12"
        },
        {
          "alg" : "SHA-256",
          "content" : "8e495b634469d64fb8acfa3495a065cbacc8a0fff55ce1e31007be4c16dc57d3"
        },
        {
          "alg" : "SHA-512",
          "content" : "a31b9950f929a7e5a600d89787ef40e42a8a8e2392e210d0c0f45b3572937670a18a524f1815508cd1152cd1eaa7275cb7430ba45c053be365c83c231bccd3f0"
        },
        {
          "alg" : "SHA-384",
          "content" : "9f85c56a77c699eb87630b9e8224068a34c296bcd9aadb52248dd4665036f5bf1048fe75e5cb590b59e7855ca716acae"
        },
        {
          "alg" : "SHA3-384",
          "content" : "590cfd9396424583879ca8ad732870406bab18325ac72fb2bbe188b9611278d6341700badf7cfc32525b8ff42900c905"
        },
        {
          "alg" : "SHA3-256",
          "content" : "a06b3fd2fd1d9f4306b58125484e3605a395afe5ffe2c801e43ae462f366a430"
        },
        {
          "alg" : "SHA3-512",
          "content" : "a6d25ce3c14f9065f06dfd0e68e1dad5c03bd5de0a302c44ca4733d2cb87ec1bc6f0abd36d65aeee8caf328b6881432c4b682fa4b4b1fa931c3c950de5129fb2"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-1.0",
            "url" : "http://www.eclipse.org/legal/epl-v10.html"
          }
        }
      ],
      "purl" : "pkg:maven/junit/junit@4.13.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://junit.org"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/junit-team/junit4/actions"
        },
        {
          "type" : "distribution",
          "url" : "https://github.com/junit-team/junit4/wiki/Download-and-Install"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/junit-team/junit4/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/junit-team/junit4"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/junit/junit@4.13.2?type=jar"
    },
    {
      "group" : "org.hamcrest",
      "name" : "hamcrest-core",
      "version" : "1.3",
      "description" : "This is the core API of hamcrest matcher framework to be used by third-party framework providers. This includes the a foundation set of matcher implementations for common operations.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6393363b47ddcbba82321110c3e07519"
        },
        {
          "alg" : "SHA-1",
          "content" : "42a25dc3219429f0e5d060061f71acb49bf010a0"
        },
        {
          "alg" : "SHA-256",
          "content" : "66fdef91e9739348df7a096aa384a5685f4e875584cce89386a7a47251c4d8e9"
        },
        {
          "alg" : "SHA-512",
          "content" : "e237ae735aac4fa5a7253ec693191f42ef7ddce384c11d29fbf605981c0be077d086757409acad53cb5b9e53d86a07cc428d459ff0f5b00d32a8cbbca390be49"
        },
        {
          "alg" : "SHA-384",
          "content" : "4b5297d2a12cc32b824153afc83f1ba9f1869ca288330f0a2f759659d09e4c420eb6ba4a1efbfa0657b625edd41293d5"
        },
        {
          "alg" : "SHA3-384",
          "content" : "b14d34985c0a78cf0ba19b5a18bffd403e08adcb2afde228ddef6e16121c7046dbebf58c04d3419311c4496c48aa93be"
        },
        {
          "alg" : "SHA3-256",
          "content" : "f679af77deedf69b3c3066f7916583848c6fd32a950f9c0b0e2ef1da121717ba"
        },
        {
          "alg" : "SHA3-512",
          "content" : "bca821931e438a1977b7b4356b5f8cebf485634f82159d505c48267c34e6a0f4fde9c2917331365f66dc0e52e2ca3a2db5256863584110c27ecebefc28741f63"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.hamcrest/hamcrest-core@1.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/hamcrest/JavaHamcrest/hamcrest-core"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/hamcrest/JavaHamcrest/hamcrest-core"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.hamcrest/hamcrest-core@1.3?type=jar"
    }
  ],
  "dependencies" : [
    {
      "ref" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.junit.ssh@6.9.0.202403050737-r?type=jar",
      "dependsOn" : [
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit@6.9.0.202403050737-r?type=jar",
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.junit@6.9.0.202403050737-r?type=jar",
        "pkg:maven/org.apache.sshd/sshd-osgi@2.12.0?type=jar",
        "pkg:maven/org.apache.sshd/sshd-sftp@2.12.0?type=jar",
        "pkg:maven/junit/junit@4.13.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit@6.9.0.202403050737-r?type=jar",
      "dependsOn" : [
        "pkg:maven/com.googlecode.javaewah/JavaEWAH@1.2.3?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.16.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.googlecode.javaewah/JavaEWAH@1.2.3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-codec/commons-codec@1.16.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.junit@6.9.0.202403050737-r?type=jar",
      "dependsOn" : [
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit@6.9.0.202403050737-r?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.sshd/sshd-osgi@2.12.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/org.slf4j/jcl-over-slf4j@1.7.32?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.slf4j/jcl-over-slf4j@1.7.32?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.sshd/sshd-sftp@2.12.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/org.slf4j/jcl-over-slf4j@1.7.32?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/junit/junit@4.13.2?type=jar",
      "dependsOn" : [
        "pkg:maven/org.hamcrest/hamcrest-core@1.3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.hamcrest/hamcrest-core@1.3?type=jar",
      "dependsOn" : [ ]
    }
  ]
}