{
  "bomFormat" : "CycloneDX",
  "specVersion" : "1.4",
  "version" : 1,
  "metadata" : {
    "tools" : [
      {
        "vendor" : "OWASP Foundation",
        "name" : "CycloneDX Maven plugin",
        "version" : "2.7.10",
        "hashes" : [
          {
            "alg" : "MD5",
            "content" : "1cc7f6a0382f8bb2f758d6a6ea401d1b"
          },
          {
            "alg" : "SHA-1",
            "content" : "a4297947a1f2d7d453105db542651614bbd37f38"
          },
          {
            "alg" : "SHA-256",
            "content" : "bd0fdd8f2f2116eee5e715aeac1580f19eb7a10ec2b6f805b53567067658e872"
          },
          {
            "alg" : "SHA-512",
            "content" : "9cde8352a427e10b96cae01348fc7cfe5d4aa9cd0a5e5dd93b414ce3bb7d112993c3b3004e53af52567fbfa16de0704ec59a5556a635ad70571fd124ae389f39"
          },
          {
            "alg" : "SHA-384",
            "content" : "93d7bf5b5c735347edfbfbd66810273ca840f9a322b816d22d44c3d8e8255c09e86570bb23712aeb0cade0f478be5aeb"
          },
          {
            "alg" : "SHA3-384",
            "content" : "4467f16e9ca32190a6e49c65339eb28ee5e8c78f4e918fcf95128a4b7648898de56ccb43eacfad0c9391ef8cdb7d629a"
          },
          {
            "alg" : "SHA3-256",
            "content" : "ed2996c99b483e969221d5e9a40f562ea2ab85442d361d72a90e85266a3ed781"
          },
          {
            "alg" : "SHA3-512",
            "content" : "c8e6ea9ddc38edc77e284b3bf541663e84752bdc59ed1935799847a48a14ea2fa531b61008fefcba37d732a56702a11ac112437b9b80d18f4ecc8ef0ecfb32cf"
          }
        ]
      }
    ],
    "component" : {
      "publisher" : "Eclipse JGit Project",
      "group" : "org.eclipse.jgit",
      "name" : "org.eclipse.jgit.lfs.server",
      "version" : "6.9.0.202403050737-r",
      "description" : "JGit Large File Storage Server implementation.",
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause",
            "url" : "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.lfs.server@6.9.0.202403050737-r?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.eclipse.org/jgit//org.eclipse.jgit.lfs.server"
        },
        {
          "type" : "build-system",
          "url" : "https://ci.eclipse.org/jgit"
        },
        {
          "type" : "distribution",
          "url" : "https://repo.eclipse.org/content/repositories/jgit-releases/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://bugs.eclipse.org/bugs/buglist.cgi?query_format=advanced;component=JGit;product=JGit;classification=Technology"
        },
        {
          "type" : "mailing-list",
          "url" : "http://dev.eclipse.org/mhonarc/lists/jgit-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://git.eclipse.org/r/plugins/gitiles/jgit/jgit/org.eclipse.jgit.lfs.server"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.lfs.server@6.9.0.202403050737-r?type=jar"
    },
    "properties" : [
      {
        "name" : "maven.goal",
        "value" : "makeBom"
      },
      {
        "name" : "maven.scopes",
        "value" : "compile,provided,runtime,system"
      },
      {
        "name" : "maven.optional.unused",
        "value" : "true"
      },
      {
        "name" : "cdx:reproducible",
        "value" : "enabled"
      }
    ]
  },
  "components" : [
    {
      "publisher" : "Eclipse JGit Project",
      "group" : "org.eclipse.jgit",
      "name" : "org.eclipse.jgit",
      "version" : "6.9.0.202403050737-r",
      "description" : "Repository access and algorithms",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "bf46ab2ec23bf919a867b25bf08bf22f"
        },
        {
          "alg" : "SHA-1",
          "content" : "e4da064611794c35cbf80a720a3f813285d5ccba"
        },
        {
          "alg" : "SHA-256",
          "content" : "6209ac6691be2a06320f02000d89bed73edf05f45d65ef9a155147511ab77f3c"
        },
        {
          "alg" : "SHA-512",
          "content" : "52f303e821e8ab999ad1e601cf0b80ea06bf25d062e1f6f4d39d46f078b9e45f1594536fd1f98b890b271d39134aa5a970d9ee1f9d15e24c970e794e8b13fc1f"
        },
        {
          "alg" : "SHA-384",
          "content" : "b833ca59e487e1192cce8bf24005efaa49fa618164c8765cc617782032c262bb5a3f62a28b37c62cbc6595581daf23cb"
        },
        {
          "alg" : "SHA3-384",
          "content" : "ba06b71360a97820fa3d083d7386484fe204b1d5e8b630e3018947af11a7e6a2aeb33888aac1df1806105ff8c05892f4"
        },
        {
          "alg" : "SHA3-256",
          "content" : "d69c941df0021ff4bb76e70ea51bd7a0e0eefe5b0a52015a4c2e0fbd3624e801"
        },
        {
          "alg" : "SHA3-512",
          "content" : "766bd83f6bb81b2f052044c0fd56dfc02bd6e5f40b4615ed1d0e00236417997995f52be56d8acb5dfed9337889764fc069374ece357ff7f1513091291df2bddd"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause",
            "url" : "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit@6.9.0.202403050737-r?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.eclipse.org/jgit//org.eclipse.jgit"
        },
        {
          "type" : "build-system",
          "url" : "https://ci.eclipse.org/jgit"
        },
        {
          "type" : "distribution",
          "url" : "https://repo.eclipse.org/content/repositories/jgit-releases/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://bugs.eclipse.org/bugs/buglist.cgi?query_format=advanced;component=JGit;product=JGit;classification=Technology"
        },
        {
          "type" : "mailing-list",
          "url" : "http://dev.eclipse.org/mhonarc/lists/jgit-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://git.eclipse.org/r/plugins/gitiles/jgit/jgit/org.eclipse.jgit"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit@6.9.0.202403050737-r?type=jar"
    },
    {
      "group" : "com.googlecode.javaewah",
      "name" : "JavaEWAH",
      "version" : "1.2.3",
      "description" : "The bit array data structure is implemented in Java as the BitSet class. Unfortunately, this fails to scale without compression. JavaEWAH is a word-aligned compressed variant of the Java bitset class. It uses a 64-bit run-length encoding (RLE) compression scheme. The goal of word-aligned compression is not to achieve the best compression, but rather to improve query processing time. Hence, we try to save CPU cycles, maybe at the expense of storage. However, the EWAH scheme we implemented is always more efficient storage-wise than an uncompressed bitmap (implemented in Java as the BitSet class). Unlike some alternatives, javaewah does not rely on a patented scheme.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "8fdeda28c1fb10e67b3d79f86bef5e61"
        },
        {
          "alg" : "SHA-1",
          "content" : "13a27c856e0c8808cee9a64032c58eee11c3adc9"
        },
        {
          "alg" : "SHA-256",
          "content" : "d65226949713c4c61a784f41c51167e7b0316f93764398ebba9e4336b3d954c2"
        },
        {
          "alg" : "SHA-512",
          "content" : "48cd9df9252c58e9ffe4583e68607944bcdf2ad7a3be7b4317467f503c4f56cdbde358ca7c4f34fa620d01615072a42f3a572fc4f1237e266310b7508e79bcac"
        },
        {
          "alg" : "SHA-384",
          "content" : "d1fd074f21b8a54a07d3f4579376d7c3ab72f24814ebc9ba92344e9da4721e9bfa3cda3a599137e4ddf2395a3c5b88e4"
        },
        {
          "alg" : "SHA3-384",
          "content" : "a553864f196f73c139a104170ab79e780046fb5f322072c5494a6590361021f875afd7168f858b0531b61918ab49b94e"
        },
        {
          "alg" : "SHA3-256",
          "content" : "bab97f3f893af36c36218a151b0c3fece27d47f358cc19e1ca9c22d77942bb76"
        },
        {
          "alg" : "SHA3-512",
          "content" : "be817b93c7093d44ec8dded565d7e5651772ce38e9c72283c05191b33d0ecb2798cd385395f553500446573ac49dccc21f4ba3067d71eb89e03daa384d0193be"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.googlecode.javaewah/JavaEWAH@1.2.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/lemire/javaewah"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/lemire/javaewah/issues"
        },
        {
          "type" : "vcs",
          "url" : "scm:git:git@github.com:lemire/javaewah.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.googlecode.javaewah/JavaEWAH@1.2.3?type=jar"
    },
    {
      "publisher" : "QOS.ch",
      "group" : "org.slf4j",
      "name" : "slf4j-api",
      "version" : "1.7.36",
      "description" : "The slf4j API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "872da51f5de7f3923da4de871d57fd85"
        },
        {
          "alg" : "SHA-1",
          "content" : "6c62681a2f655b49963a5983b8b0950a6120ae14"
        },
        {
          "alg" : "SHA-256",
          "content" : "d3ef575e3e4979678dc01bf1dcce51021493b4d11fb7f1be8ad982877c16a1c0"
        },
        {
          "alg" : "SHA-512",
          "content" : "f9b033fc019a44f98b16048da7e2b59edd4a6a527ba60e358f65ab88e0afae03a9340f1b3e8a543d49fa542290f499c5594259affa1ff3e6e7bf3b428d4c610b"
        },
        {
          "alg" : "SHA-384",
          "content" : "2b14ad035877087157e379d3277dcdcd79e58d6bdb147c47d29e377d75ce53ad42cafbf22f5fb7827c7e946ff4876b9a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "3bc3110dafb8d5be16a39f3b2671a466463cd99eb39610c0e4719a7bf2d928f2ea213c734887c6926a07c4cca7769e4b"
        },
        {
          "alg" : "SHA3-256",
          "content" : "ba2608179fcf46e2291a90b9cbb4aa30d718e481f59c350cc21c73b88d826881"
        },
        {
          "alg" : "SHA3-512",
          "content" : "14c4edcd19702ef607d78826839d8a6d3a39157df54b89a801d3d3cbbe1307131a77671b041c761122730fb1387888c5ec2e46bdd80e1cb07f8f144676441824"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.slf4j.org"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/qos-ch/slf4j/slf4j-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-codec",
      "name" : "commons-codec",
      "version" : "1.16.0",
      "description" : "The Apache Commons Codec package contains simple encoder and decoders for various formats such as Base64 and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a collection of phonetic encoding utilities.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6e26920fa7228891980890cce06b718c"
        },
        {
          "alg" : "SHA-1",
          "content" : "4e3eb3d79888d76b54e28b350915b5dc3919c9de"
        },
        {
          "alg" : "SHA-256",
          "content" : "56595fb20b0b85bc91d0d503dad50bb7f1b9afc0eed5dffa6cbb25929000484d"
        },
        {
          "alg" : "SHA-512",
          "content" : "eee671e66d808b56b81e15574675cf132d7628c010736d580915bbf8c04849f04df1d95ddeea13c4e119f8f0a564c7003beeb8ab437564e080ee27063c1e52b9"
        },
        {
          "alg" : "SHA-384",
          "content" : "65eb89c19815ea11585ff6c91e2ea4acd6a41ee35502891ba29fb5ec390d567190cf2f4120bfbf50ec470274df22a25f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "1841b59a30e095b063d9a421be91ee2adf28c98a9b32e4ef24130b60362db2f7f69eea04969d035dc4b01db38a14c65c"
        },
        {
          "alg" : "SHA3-256",
          "content" : "8327323df750189daa3755a4fb3936b685f72b46f3917d5dae2c1f3812577c37"
        },
        {
          "alg" : "SHA3-512",
          "content" : "664a0b5779c3e448d448d692a0ab19c2aec422d2adbfb23969bc44d2c6446257104d8206ccca4c0107c58f9a77ece5a48e2fd69fe8038f7cad8254675dadbb05"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-codec/commons-codec@1.16.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-codec/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-parent/actions"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CODEC"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/commons-codec"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-codec/commons-codec@1.16.0?type=jar"
    },
    {
      "publisher" : "Eclipse JGit Project",
      "group" : "org.eclipse.jgit",
      "name" : "org.eclipse.jgit.lfs",
      "version" : "6.9.0.202403050737-r",
      "description" : "JGit Large File Storage (LFS) implementation.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "5177f13ba38ca4bd8330db3c49d9d113"
        },
        {
          "alg" : "SHA-1",
          "content" : "334bd6230555dd1eb8abd00ff4d704274e66f2fd"
        },
        {
          "alg" : "SHA-256",
          "content" : "c3f826edca4419d9f954a2ee5b5881ba7a62489d089a9acab7c369d203714646"
        },
        {
          "alg" : "SHA-512",
          "content" : "d9f7b33f2d50a54b609896a8c44adba221bebc8dfa68599b58ffe50c55489d5274f7a19ed83cb2eb84ab5820bc58c142e48bcbe88af2e7c5308d027a5828e46c"
        },
        {
          "alg" : "SHA-384",
          "content" : "d7e4e7c8533b36c2c2ab2b5bd883a83f856206798ded1bcb8d158e74f9f51b5b06229525292f59425f33a613f89ff26d"
        },
        {
          "alg" : "SHA3-384",
          "content" : "5a309c5577fa9fbf9fe6dcff1aa7f56d416016b762cd801f6d488f13935f335c0ebc1d7b71e6d187db97ec92cce5284e"
        },
        {
          "alg" : "SHA3-256",
          "content" : "7a9e06de665cbe3196e68681127ee39a15a9434a7343ec9c1c0c73aeac11c4dc"
        },
        {
          "alg" : "SHA3-512",
          "content" : "708a39b24b5a578d98ed1652d755bc0a1988d85c970e439169b2ecd5c4152eded1207981ac1cbe9978e86730ff90ca92593b43c7e9cb2cde93bee69d0514c9b5"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause",
            "url" : "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.lfs@6.9.0.202403050737-r?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.eclipse.org/jgit//org.eclipse.jgit.lfs"
        },
        {
          "type" : "build-system",
          "url" : "https://ci.eclipse.org/jgit"
        },
        {
          "type" : "distribution",
          "url" : "https://repo.eclipse.org/content/repositories/jgit-releases/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://bugs.eclipse.org/bugs/buglist.cgi?query_format=advanced;component=JGit;product=JGit;classification=Technology"
        },
        {
          "type" : "mailing-list",
          "url" : "http://dev.eclipse.org/mhonarc/lists/jgit-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://git.eclipse.org/r/plugins/gitiles/jgit/jgit/org.eclipse.jgit.lfs"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.lfs@6.9.0.202403050737-r?type=jar"
    },
    {
      "publisher" : "Eclipse JGit Project",
      "group" : "org.eclipse.jgit",
      "name" : "org.eclipse.jgit.http.apache",
      "version" : "6.9.0.202403050737-r",
      "description" : "Apache httpclient based HTTP support",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "128aeb311a4734f2b67b169f964aa534"
        },
        {
          "alg" : "SHA-1",
          "content" : "d3088a338c2b8ebabd9debba7b35aa386663590d"
        },
        {
          "alg" : "SHA-256",
          "content" : "9fbbb37c946b37cac4fd6111f7104e811297934e68135b045fceac7a3e4c02a9"
        },
        {
          "alg" : "SHA-512",
          "content" : "6e5724ab154735f1e3d39213ffcd2d623ade936726e1304f92ab8117f6d9c9f0750d2f75233fca4bb9cecaa9fa7d6b66beb0f38559b2977ddaa49a3383beb531"
        },
        {
          "alg" : "SHA-384",
          "content" : "a46315d19cbd4d0cf2850a1fe269d3537ab1fa15073a705356f974f0e6459d3282d1ae347047d50e8b1611c75f1bcc68"
        },
        {
          "alg" : "SHA3-384",
          "content" : "0c32a64ea810ceb4215e22b0a45fbce7077244fbde73d111848ae2a0d9347463d5f661f0ef7c1e3d569e42400205df13"
        },
        {
          "alg" : "SHA3-256",
          "content" : "c457c352470ef8a2d78becf7adf1dc34d2b87b9e784f844f85d8c111e634b56d"
        },
        {
          "alg" : "SHA3-512",
          "content" : "f0a55ff3d30ff1604103c4eb576c48c6e780f7f0c5e7dc31d7fb018553918f0805a86e5772e76875c3cac10c3e2b927631bf99e50dad389fbcfec3db3ccad80c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause",
            "url" : "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.http.apache@6.9.0.202403050737-r?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.eclipse.org/jgit//org.eclipse.jgit.http.apache"
        },
        {
          "type" : "build-system",
          "url" : "https://ci.eclipse.org/jgit"
        },
        {
          "type" : "distribution",
          "url" : "https://repo.eclipse.org/content/repositories/jgit-releases/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://bugs.eclipse.org/bugs/buglist.cgi?query_format=advanced;component=JGit;product=JGit;classification=Technology"
        },
        {
          "type" : "mailing-list",
          "url" : "http://dev.eclipse.org/mhonarc/lists/jgit-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://git.eclipse.org/r/plugins/gitiles/jgit/jgit/org.eclipse.jgit.http.apache"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.http.apache@6.9.0.202403050737-r?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.httpcomponents",
      "name" : "httpclient",
      "version" : "4.5.14",
      "description" : "Apache HttpComponents Client",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "2cb357c4b763f47e58af6cad47df6ba3"
        },
        {
          "alg" : "SHA-1",
          "content" : "1194890e6f56ec29177673f2f12d0b8e627dec98"
        },
        {
          "alg" : "SHA-256",
          "content" : "c8bc7e1c51a6d4ce72f40d2ebbabf1c4b68bfe76e732104b04381b493478e9d6"
        },
        {
          "alg" : "SHA-512",
          "content" : "a084ef30fb0a2a25397d8fab439fe68f67e294bf53153e2e1355b8df92886d40fe6abe35dc84f014245f7158e92641bcbd98019b4fbbd9e5a0db495b160b4ced"
        },
        {
          "alg" : "SHA-384",
          "content" : "c8ccaa1fa8ba7c421413e3c30375bd9c31284e837c476fd831e18043ad4187e92166f49554123108891241bed674b95d"
        },
        {
          "alg" : "SHA3-384",
          "content" : "9a17dfcf12b2af3a9b006ec369f9bc78ba322348bf1a01146e0d4f3fec2bed6cbe8b2193fac5b4d5a0c3036c06477510"
        },
        {
          "alg" : "SHA3-256",
          "content" : "48f0a61b691e22dec9d6db8e0b58be4ca17a42a2846c82f0875de21f72bb0faa"
        },
        {
          "alg" : "SHA3-512",
          "content" : "4ad2c9adc761b7e813330f0dcad3f9978702896c7d0cbf81f60a472d550e320b1527be425ba597c8c9352d587e32e1d46ceb4c73e99c70a6190df4c699a7c2a9"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.httpcomponents/httpclient@4.5.14?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://hc.apache.org/httpcomponents-client-ga"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/HTTPCLIENT"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/hc-httpclient-users/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/httpcomponents-client/tree/4.5.14/httpclient"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.httpcomponents/httpclient@4.5.14?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-logging",
      "name" : "commons-logging",
      "version" : "1.2",
      "description" : "Apache Commons Logging is a thin adapter allowing configurable bridging to other, well known logging systems.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "040b4b4d8eac886f6b4a2a3bd2f31b00"
        },
        {
          "alg" : "SHA-1",
          "content" : "4bfc12adfe4842bf07b657f0369c4cb522955686"
        },
        {
          "alg" : "SHA-256",
          "content" : "daddea1ea0be0f56978ab3006b8ac92834afeefbd9b7e4e6316fca57df0fa636"
        },
        {
          "alg" : "SHA-512",
          "content" : "ed00dbfabd9ae00efa26dd400983601d076fe36408b7d6520084b447e5d1fa527ce65bd6afdcb58506c3a808323d28e88f26cb99c6f5db9ff64f6525ecdfa557"
        },
        {
          "alg" : "SHA-384",
          "content" : "ac20720d7156131478205f1b454395abf84cfc8da2f163301af32f63bd3c4764bd26cb54ed53800f33193ae591f3ce9c"
        },
        {
          "alg" : "SHA3-384",
          "content" : "628eb4407e95dca84da1a06b08a6d9b832a49de8472b1b217e8607f08efeeed18b996232d64dd07f03e78e0e3bb4b078"
        },
        {
          "alg" : "SHA3-256",
          "content" : "9aab62deccf156ee6e324c925dfc30ecb53e8465802863a551901a461424e807"
        },
        {
          "alg" : "SHA3-512",
          "content" : "3fd76857f6d20c03799537cc961c1c4ddf1c375c6c192fb982363e3b9397ba138b77f24ef38b4202f44e37586789c0320e4de18fdadd2772304fd14a9b26d552"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-logging/commons-logging@1.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://commons.apache.org/proper/commons-logging/"
        },
        {
          "type" : "build-system",
          "url" : "https://continuum-ci.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/LOGGING"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/repos/asf/commons/proper/logging/trunk"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-logging/commons-logging@1.2?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.httpcomponents",
      "name" : "httpcore",
      "version" : "4.4.16",
      "description" : "Apache HttpComponents Core (blocking I/O)",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "28d2cd9bf8789fd2ec774fb88436ebd1"
        },
        {
          "alg" : "SHA-1",
          "content" : "51cf043c87253c9f58b539c9f7e44c8894223850"
        },
        {
          "alg" : "SHA-256",
          "content" : "6c9b3dd142a09dc468e23ad39aad6f75a0f2b85125104469f026e52a474e464f"
        },
        {
          "alg" : "SHA-512",
          "content" : "168026436a6bcf5e96c0c59606638abbdc30de4b405ae55afde70fdf2895e267a3d48bba6bdadc5a89f38e31da3d9a9dc91e1cab7ea76f5e04322cf1ec63b838"
        },
        {
          "alg" : "SHA-384",
          "content" : "ba9ceaee1a37ca3201d6a1315ecb0327b495489efd0baa155c219c475df8d3eb69fe77ab0026563db406497626da6562"
        },
        {
          "alg" : "SHA3-384",
          "content" : "b9dc44dcc7cc86d5036f26d54c4003a2d72808ae7b07a0808bb53505c6d4281b5ad213eb1f3d0fef1113dec57cb0dfe1"
        },
        {
          "alg" : "SHA3-256",
          "content" : "fd8ab51846476c6c18822151c9ec07b39a9633010b5d20ea937fc6910407bc64"
        },
        {
          "alg" : "SHA3-512",
          "content" : "b42fa528242981a9d70e4f68ab75a24292df5112c44c21b6f18cb9201ce747885ba1d4dc69bc3d14d0da46a6c2638f937c11bc45749abeb55dc89ddada90cdda"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://hc.apache.org/httpcomponents-core-ga"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/HTTPCORE"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/hc-httpclient-users/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/httpcomponents-core/tree/4.4.16/httpcore"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar"
    },
    {
      "publisher" : "Eclipse Foundation",
      "group" : "jakarta.servlet",
      "name" : "jakarta.servlet-api",
      "version" : "4.0.4",
      "description" : "Eclipse Enterprise for Java (EE4J) is an open source initiative to create standard APIs, implementations of those APIs, and technology compatibility kits for Java runtimes that enable development, deployment, and management of server-side and cloud-native applications.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f5d1d7a29978e4ae0be5a456ee1c65c3"
        },
        {
          "alg" : "SHA-1",
          "content" : "b8a1142e04838fe54194049c6e7a18dae8f9b960"
        },
        {
          "alg" : "SHA-256",
          "content" : "586e27706c21258f5882f43be06904f49b02db9ac54e345d393fe4a32494d127"
        },
        {
          "alg" : "SHA-512",
          "content" : "1ce4a059fda9a1c7ab751afb13ec05446d756ac418dd95f8ced369b04f6928a76cf50003f89b1b86d96bcb1df8b8f7ff31c516b5287155eea93f683f73d54ab1"
        },
        {
          "alg" : "SHA-384",
          "content" : "ca7e8d9c88f5ae9f193baa15da96d0c8ab48f34758503ded8058f343547c29f215f2d0db1967090ea984b643dcf0fbb6"
        },
        {
          "alg" : "SHA3-384",
          "content" : "3ffc3a80406027cf4baca38fca291a10d26ee50592c2a17316015e96751c6cd002991c337085b578cf897c0812ab6557"
        },
        {
          "alg" : "SHA3-256",
          "content" : "f475e55d86dddd85836c52580ed14efd4f6a82587b8288fce7f9599c490a41e5"
        },
        {
          "alg" : "SHA3-512",
          "content" : "188e5cfd93ab11a3da65ee0eb91fd0400466588dd8a9950b1a99151d60cdad564a23b35c9a723c69be889c96cf3f901d2fc91099c3daf88becda055687a183cb"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl" : "pkg:maven/jakarta.servlet/jakarta.servlet-api@4.0.4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://projects.eclipse.org/projects/ee4j.servlet"
        },
        {
          "type" : "distribution",
          "url" : "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/servlet-api/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/servlet-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/servlet-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/jakarta.servlet/jakarta.servlet-api@4.0.4?type=jar"
    },
    {
      "group" : "com.google.code.gson",
      "name" : "gson",
      "version" : "2.10.1",
      "description" : "Gson JSON library",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "df6097815738cb31fc56391553210843"
        },
        {
          "alg" : "SHA-1",
          "content" : "b3add478d4382b78ea20b1671390a858002feb6c"
        },
        {
          "alg" : "SHA-256",
          "content" : "4241c14a7727c34feea6507ec801318a3d4a90f070e4525681079fb94ee4c593"
        },
        {
          "alg" : "SHA-512",
          "content" : "7503e4b8d05c6cc0ecb3a94c5a2e070e049083a441003a79a0cdf474f4286699b4ba1d2a655ddabb8ba10c50e7c36a7045cccdaee465166d4630db647aba2727"
        },
        {
          "alg" : "SHA-384",
          "content" : "48a4786bd6e1867f058ee4fb676fc82d9d9f64a6d7420d4a47ae2398504c9de73222636614aeb4a9fbf10ee143d72226"
        },
        {
          "alg" : "SHA3-384",
          "content" : "3df9a0332c2766124fe7c915cfea665d2e318ccaa7212415fabd9e93e6eb77de538725fd2ef313cde46f6d814c9566ea"
        },
        {
          "alg" : "SHA3-256",
          "content" : "d3374006d76d4f9acdf3d3a1a4f47899570f52442b2188f80c09a74f22139ecb"
        },
        {
          "alg" : "SHA3-512",
          "content" : "2b10c2f4fe39d8712b430ff171823d7172c0a06685c1eb7de511e90159cec0e094fb2a9b50b747c5b039cb10f1fce9edf82ecbf9c47f76a6f31c4e3cb7586cce"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.code.gson/gson@2.10.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/google/gson/gson"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/google/gson/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/google/gson/gson/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.code.gson/gson@2.10.1?type=jar"
    }
  ],
  "dependencies" : [
    {
      "ref" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.lfs.server@6.9.0.202403050737-r?type=jar",
      "dependsOn" : [
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit@6.9.0.202403050737-r?type=jar",
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.lfs@6.9.0.202403050737-r?type=jar",
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.http.apache@6.9.0.202403050737-r?type=jar",
        "pkg:maven/jakarta.servlet/jakarta.servlet-api@4.0.4?type=jar",
        "pkg:maven/com.google.code.gson/gson@2.10.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit@6.9.0.202403050737-r?type=jar",
      "dependsOn" : [
        "pkg:maven/com.googlecode.javaewah/JavaEWAH@1.2.3?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.16.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.googlecode.javaewah/JavaEWAH@1.2.3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-codec/commons-codec@1.16.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.lfs@6.9.0.202403050737-r?type=jar",
      "dependsOn" : [
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit@6.9.0.202403050737-r?type=jar",
        "pkg:maven/com.google.code.gson/gson@2.10.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.google.code.gson/gson@2.10.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.http.apache@6.9.0.202403050737-r?type=jar",
      "dependsOn" : [
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit@6.9.0.202403050737-r?type=jar",
        "pkg:maven/org.apache.httpcomponents/httpclient@4.5.14?type=jar",
        "pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.httpcomponents/httpclient@4.5.14?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar",
        "pkg:maven/commons-logging/commons-logging@1.2?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.16.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-logging/commons-logging@1.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/jakarta.servlet/jakarta.servlet-api@4.0.4?type=jar",
      "dependsOn" : [ ]
    }
  ]
}