{
  "bomFormat" : "CycloneDX",
  "specVersion" : "1.4",
  "serialNumber" : "urn:uuid:a14c4a28-4a17-3af0-8d51-6e05f75c8cb6",
  "version" : 1,
  "metadata" : {
    "tools" : [
      {
        "vendor" : "OWASP Foundation",
        "name" : "CycloneDX Maven plugin",
        "version" : "2.8.0",
        "hashes" : [
          {
            "alg" : "MD5",
            "content" : "76ffec6a7ddd46b2b24517411874eb99"
          },
          {
            "alg" : "SHA-1",
            "content" : "5b0d5b41975b53be4799b9621b4af0cfc41d44b6"
          },
          {
            "alg" : "SHA-256",
            "content" : "6852aa0f4e42a2db745bab80e384951a6a65b9215d041081d675780999027e81"
          },
          {
            "alg" : "SHA-512",
            "content" : "417de20fcdcb11c9713bacbd57290d8e68037fdb4553fd31b8cb08bd760ad52dc65ea88ad4be15844ad3fd5a4d3e440d2f70326f2fe1e63ec78e059c9a883f8d"
          },
          {
            "alg" : "SHA-384",
            "content" : "5eb755c6492e7a7385fa9a1e1f4517875bcb834b2df437808a37a2d6f5285df428741762305980315a63fcef1406597d"
          },
          {
            "alg" : "SHA3-384",
            "content" : "0fe16a47cf7aab0b22251dafcc39939b68e8f1778093309d8d2060b51a08df445a8b8ed5a9561669faf2e55f907c76d8"
          },
          {
            "alg" : "SHA3-256",
            "content" : "3e5a1eb5ab7d0797498862794709ff8eaaa071fe4cc9ec77f52db7e2f97ef487"
          },
          {
            "alg" : "SHA3-512",
            "content" : "59281a3e29e76270d7f44b40b5b9f05e55f1ae3ec716d80add806f360940809e3813998ac7c5758043b8e248aed73b86e37dc506cdb4cde03c16bb617d8e5a3a"
          }
        ]
      }
    ],
    "component" : {
      "publisher" : "Eclipse JGit Project",
      "group" : "org.eclipse.jgit",
      "name" : "org.eclipse.jgit.pgm",
      "version" : "7.0.0.202407311305-m2",
      "description" : "Command line client tools built on top of JGit.",
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause",
            "url" : "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.pgm@7.0.0.202407311305-m2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.eclipse.org/jgit//org.eclipse.jgit.pgm"
        },
        {
          "type" : "build-system",
          "url" : "https://ci.eclipse.org/jgit"
        },
        {
          "type" : "distribution",
          "url" : "https://repo.eclipse.org/content/repositories/jgit-releases/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-jgit/jgit/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "http://dev.eclipse.org/mhonarc/lists/jgit-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://eclipse.gerrithub.io/plugins/gitiles/eclipse-jgit/jgit/org.eclipse.jgit.pgm"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.pgm@7.0.0.202407311305-m2?type=jar"
    },
    "properties" : [
      {
        "name" : "maven.goal",
        "value" : "makeBom"
      },
      {
        "name" : "maven.scopes",
        "value" : "compile,provided,runtime,system"
      },
      {
        "name" : "maven.optional.unused",
        "value" : "true"
      },
      {
        "name" : "cdx:reproducible",
        "value" : "enabled"
      }
    ]
  },
  "components" : [
    {
      "publisher" : "Kohsuke Kawaguchi",
      "group" : "args4j",
      "name" : "args4j",
      "version" : "2.37",
      "description" : "args4j : Java command line arguments parser",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f58e89e55a715448f1eac17edaf4b511"
        },
        {
          "alg" : "SHA-1",
          "content" : "244f60c057d72a785227c0562d3560f42a7ea54b"
        },
        {
          "alg" : "SHA-256",
          "content" : "5a13b0f7ff519183e55b8f453b8faaa23b92ccf0443f1fac515fedf2246bdc18"
        },
        {
          "alg" : "SHA-512",
          "content" : "2237b8fa0a2cd602637a47b24893486ff8251efdc0b9e992239b9f870ac58d66433280e2bc16bc8274095811f029cfdc02fce3131c9f2e96352fff923ab31f8b"
        },
        {
          "alg" : "SHA-384",
          "content" : "ec839cfd5517bdbf27c76f7daf279217918936e7f06402193332c905485c42ea6d458d348bbcfc9896153c4e2d2e4ea3"
        },
        {
          "alg" : "SHA3-384",
          "content" : "3a69c3e40300cb7077fdb2ee0a91a425557bdb1e6b9150aca7ac644fee527ac357e240b795cc5644b375a53d26316ed5"
        },
        {
          "alg" : "SHA3-256",
          "content" : "7e15c28c8461c2543323c4e5377bf67aaf2def2df3b528eeaaa86f49051994bf"
        },
        {
          "alg" : "SHA3-512",
          "content" : "7d1632b2e38c54a116ca73fef42892c321d7687408070f3f3ffdb0f91caf154ec53ca3624c1b673cb71bdd57b8082e37d631ce39d9cd7a07a8d3cd671564d4dd"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl" : "pkg:maven/args4j/args4j@2.37?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://args4j.kohsuke.org/args4j/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://args4j.dev.java.net/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://args4j.dev.java.net/servlets/SummarizeList?listName=users"
        },
        {
          "type" : "vcs",
          "url" : "http://args4j.kohsuke.org/args4j/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/args4j/args4j@2.37?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-compress",
      "version" : "1.26.2",
      "description" : "Apache Commons Compress defines an API for working with compression and archive formats. These include bzip2, gzip, pack200, LZMA, XZ, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4, Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj.",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "d2c5abbd0a822c0b79cf4f03ead483ee"
        },
        {
          "alg" : "SHA-1",
          "content" : "eb1f823447af685208e684fce84783b43517960c"
        },
        {
          "alg" : "SHA-256",
          "content" : "9168a03141d8fc7eda21a2360d83cc0412bcbb1d6204d992bd48c2573cb3c6b8"
        },
        {
          "alg" : "SHA-512",
          "content" : "7106a722d26da945f6d6eea6f0c61b420bff45749bf60c572d992c545b10ccd926dc4b9a9f366ff29d5940c99f26dfeca98f6c1c4b630632a65f04c2d7b94b26"
        },
        {
          "alg" : "SHA-384",
          "content" : "8422ef0d5e9ca419a8b3a33a4c330348f4495b9edded4fde38636d11e99fc3f725df11769d310edc233beed2401daf53"
        },
        {
          "alg" : "SHA3-384",
          "content" : "b32406c91771cfc12e61722add9ab2ef8efa32bf16bdcf80b415f5604bb9b61977c08e6f87f2ef59705c761caca4ffb8"
        },
        {
          "alg" : "SHA3-256",
          "content" : "26c54771c66adc967a167306982bded1fc36a6a2d590401fc435303c9e6256a7"
        },
        {
          "alg" : "SHA3-512",
          "content" : "3f4054fd56ae8d4f012f2cae5469215010123c1ada8931bdcd634551027816afefd8bd871b2ee99f168e2d5a347e0e28c31427dd79e3f42cefcff2662a5603ff"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-compress@1.26.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-compress/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-parent/actions"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/COMPRESS"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-compress.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-compress@1.26.2?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-codec",
      "name" : "commons-codec",
      "version" : "1.17.0",
      "description" : "The Apache Commons Codec component contains encoder and decoders for various formats such as Base16, Base32, Base64, digest, and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a collection of phonetic encoding utilities.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "ca1f080782f7e77cb3aec451e7a7f02d"
        },
        {
          "alg" : "SHA-1",
          "content" : "0dbe8eef6e14460e73da07f7b11bf994d6626355"
        },
        {
          "alg" : "SHA-256",
          "content" : "f700de80ac270d0344fdea7468201d8b9c805e5c648331c3619f2ee067ccfc59"
        },
        {
          "alg" : "SHA-512",
          "content" : "cb9c3b2055d0b31d106293f0bc3696f90a11a30953e5b05a1a3c453e98a563475c93d7c6d1707e75f59d0806fba5fd8e4486b8bd72e58bb6ae995bdbbeeb7e17"
        },
        {
          "alg" : "SHA-384",
          "content" : "a0fd174b2f8a21b43828371a7ee03c915b79e69d7b0e16cfe6367f794e2f8e6bbebc261e8a4ba35a79779b2338a774a4"
        },
        {
          "alg" : "SHA3-384",
          "content" : "803fb227bd6770cc21c701b9529606f95ba05c30ea3d807b18b3681fde0c7cabd0e2f40ab36567832f63e0c42b77d0f2"
        },
        {
          "alg" : "SHA3-256",
          "content" : "41b9b86fd0b19ff44d19d108302d7b0111ed86d07a65a90efe1023537fad8748"
        },
        {
          "alg" : "SHA3-512",
          "content" : "eaacc9eafccf4bda0c72c5151dbd7e99954842782c91b501af8c7ca462a04b6c59d7ab8e1ef43b3ebc1b12ca62f4574544bc31df10f33f4a15cd3c3399bd808b"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-codec/commons-codec@1.17.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-codec/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-parent/actions"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CODEC"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/commons-codec"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-codec/commons-codec@1.17.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-io",
      "name" : "commons-io",
      "version" : "2.16.1",
      "description" : "The Apache Commons IO library contains utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "ed8191a5a217940140001b0acfed18d9"
        },
        {
          "alg" : "SHA-1",
          "content" : "377d592e740dc77124e0901291dbfaa6810a200e"
        },
        {
          "alg" : "SHA-256",
          "content" : "f41f7baacd716896447ace9758621f62c1c6b0a91d89acee488da26fc477c84f"
        },
        {
          "alg" : "SHA-512",
          "content" : "97eab31b073c5c57c8bcfaa2fec7b481a15a9a1f9ed864dfdc63b57f062b230557caa734c3133aca1165facb588c58db0185c07832241d70159e87a4bcf48008"
        },
        {
          "alg" : "SHA-384",
          "content" : "bd78e2eb3d005046d1329557d3a77529e98384d4d87940374eef432d73d5a06ef20fb7b0c44389de64496fe134dcf199"
        },
        {
          "alg" : "SHA3-384",
          "content" : "f9acc2f04f076328d17e2d0615da4367470b45b15f828008d8df57033401ae6b3b83b21cf9bc1745ff3cfe5a102bc48e"
        },
        {
          "alg" : "SHA3-256",
          "content" : "5d4bbe43356c92e3970b69892b44a10cc736ef8cb1bedfc753cc8df050520161"
        },
        {
          "alg" : "SHA3-512",
          "content" : "29440ccf2551b383c7e6cbdf78ef7784a421322e418da1be3fcd3251c8a826ffd5c6d1bea32b9c80e74744c035cc9cd8483e629e407110ff3133a05cb34bef93"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-io/commons-io@2.16.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-io/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-parent/actions"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/IO"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-io.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-io/commons-io@2.16.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-lang3",
      "version" : "3.14.0",
      "description" : "Apache Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4e5c3f5e6b0b965ef241d7d72ac8971f"
        },
        {
          "alg" : "SHA-1",
          "content" : "1ed471194b02f2c6cb734a0cd6f6f107c673afae"
        },
        {
          "alg" : "SHA-256",
          "content" : "7b96bf3ee68949abb5bc465559ac270e0551596fa34523fddf890ec418dde13c"
        },
        {
          "alg" : "SHA-512",
          "content" : "0338b50767166e5746ada6d6aa2e071e7221d699323bfb629f7f204b294c1dc4cad140610a129ed751798443b43e74e0818989c7df7d33c5915aa29742be9ba8"
        },
        {
          "alg" : "SHA-384",
          "content" : "908d0a22dc17aaa04caa5104cff7cad5b88b77eecb78dd5b3b3fefa22ff71ac50a4fb9e31c897ac243f9d841e4b3453d"
        },
        {
          "alg" : "SHA3-384",
          "content" : "8a7f2e061b998780870eddd571620fbf3d3c70bcb54e24539d0db504f59d65bc6bda58136284498babe29fcc5eabb7a6"
        },
        {
          "alg" : "SHA3-256",
          "content" : "022bf1f8039fcea717e9e34dd96eb80cfff05b43c9cbb76e9739b2421e2d027c"
        },
        {
          "alg" : "SHA3-512",
          "content" : "0bcbc4edce974ea970c46e2da12ec98d9fd962c2cf64f757ac97136dec5623ca52af0c225895303c17ffabb57090e6772d7bd326d5e7438cef5454f8bbaeecfa"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-lang/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-parent/actions"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/LANG"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-lang.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar"
    },
    {
      "publisher" : "Eclipse JGit Project",
      "group" : "org.eclipse.jgit",
      "name" : "org.eclipse.jgit.archive",
      "version" : "7.0.0.202407311305-m2",
      "description" : "Support for archiving a Git tree in formats such as zip and tar. This is a separate bundle from org.eclipse.jgit to avoid a dependency by the latter on commons-compress.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "3c698ef11db416f314f2f2631920ce9d"
        },
        {
          "alg" : "SHA-1",
          "content" : "7f6012a096eb7d4589c4b44f41b0353821aed8f4"
        },
        {
          "alg" : "SHA-256",
          "content" : "fb939aa4e2ecb5c21b7a3f6cac8da156fd956091cf6ab97b06d3955a980fb6b3"
        },
        {
          "alg" : "SHA-512",
          "content" : "4c5f27069e4e1c261db55be9059e6e6c8818cd4e3ca757e6ec7fad794034304a3143c9f1b8fb2b7e87c6540091f0714228ae5f1fdf2c2eca46814e4bf6555137"
        },
        {
          "alg" : "SHA-384",
          "content" : "479e130dcb0288a6c5d6620966ee689929d778d463a85ef4454bf4ad86df3e73949c41a563bbde9051f36be79d044729"
        },
        {
          "alg" : "SHA3-384",
          "content" : "9e926deab5cd183183a243e6f6ba31e2873693ad9a21a2a5a0bfb7188669ecd376e013b6e2939a67371e176629ca1b6d"
        },
        {
          "alg" : "SHA3-256",
          "content" : "3f348c30ebd3e8460b6ba34caa714fff909b7ad71c590a38d34b22f6bf6c00bd"
        },
        {
          "alg" : "SHA3-512",
          "content" : "f24726ba5f8f716ac811dd98b37f5fce56a0304b122fc8c9cefaf0d0ada71582fc29096f7fe6e9a4dc369600504643a19fb8b087627037f64ea718c84c31a935"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause",
            "url" : "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.archive@7.0.0.202407311305-m2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.eclipse.org/jgit//org.eclipse.jgit.archive"
        },
        {
          "type" : "build-system",
          "url" : "https://ci.eclipse.org/jgit"
        },
        {
          "type" : "distribution",
          "url" : "https://repo.eclipse.org/content/repositories/jgit-releases/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-jgit/jgit/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "http://dev.eclipse.org/mhonarc/lists/jgit-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://eclipse.gerrithub.io/plugins/gitiles/eclipse-jgit/jgit/org.eclipse.jgit.archive"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.archive@7.0.0.202407311305-m2?type=jar"
    },
    {
      "publisher" : "OSGi Alliance",
      "group" : "org.osgi",
      "name" : "org.osgi.core",
      "version" : "6.0.0",
      "description" : "OSGi Core Release 6, Interfaces and Classes for use in compiling bundles.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "cae291c61fe8b7a4476d713550c7ff49"
        },
        {
          "alg" : "SHA-1",
          "content" : "0c49acdc9ac62cf69ee49cb6f1905b4fdb79ea5c"
        },
        {
          "alg" : "SHA-256",
          "content" : "1c1bb435eb34cbf1f743653da38f604d45d53fbc95979053768cd3fc293cb931"
        },
        {
          "alg" : "SHA-512",
          "content" : "a6d5388804982ab2cb0ba82b4291e73f006577c54e5dcb0675a2c4922594ddb0265810a4e7c748c88eba76ee350340376b7a9bd25d2de3afb954cf89117cd470"
        },
        {
          "alg" : "SHA-384",
          "content" : "8daff91fc229b2874c1ff7a214fdee65b1824fbac76eb7feec609c5b70ab2fd24fc5cf017b339788a5c7aec041ec1a1c"
        },
        {
          "alg" : "SHA3-384",
          "content" : "b921d8bea5dab6e7d827ce49a43e6edb4a15c1402e1d70498faf867bd7e9ea61f47b9cbdbf008ed517b71499c02b9e4c"
        },
        {
          "alg" : "SHA3-256",
          "content" : "5836efac64dd3757498bc6648cf02e46f136c6b0b39d5f1641218459d6b68ca0"
        },
        {
          "alg" : "SHA3-512",
          "content" : "9056edfc04943cdc81041db1851cade670415457221617babeb3d3c5136c3dcc303862e55b545f40584477e0654d11d84db6ede072015b08744241202d79ee63"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.osgi/org.osgi.core@6.0.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.osgi.org"
        },
        {
          "type" : "vcs",
          "url" : "private"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.osgi/org.osgi.core@6.0.0?type=jar"
    },
    {
      "publisher" : "Eclipse JGit Project",
      "group" : "org.eclipse.jgit",
      "name" : "org.eclipse.jgit",
      "version" : "7.0.0.202407311305-m2",
      "description" : "Repository access and algorithms",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b294b8aeaadeb8d4c1ef3d44c6cf3eae"
        },
        {
          "alg" : "SHA-1",
          "content" : "c9e04dd7ee36a49453476847402ea14ac7c2a313"
        },
        {
          "alg" : "SHA-256",
          "content" : "224df83336844af3b3442582802064a8ed930c2ab687d2c8fc6e699284251fff"
        },
        {
          "alg" : "SHA-512",
          "content" : "1bb65677b65cb96800e5813e0fe5612225cd0fc50f23492815511dd8b860faa989d8f545c0f1951cde5e9ba47b4baafd90b325d35200dcb9919ff75d63d0b9f7"
        },
        {
          "alg" : "SHA-384",
          "content" : "0eca13a0eb00fbd5676a2293e4686b0013b388dcd07c1eb624989def0901adaba71ce4f1b17a9a45a088a44a3d664a0f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "69b1daf0d7cc62a7b3702f3fd860665351661110d7c83a8ceb17f78b8324febf59d223abdbae2f5814f58f4441dd4a39"
        },
        {
          "alg" : "SHA3-256",
          "content" : "4e04c0956b8af87347fb7b9e5165575efacdb7a6f81ecf226c288659bcb2fbc8"
        },
        {
          "alg" : "SHA3-512",
          "content" : "4e890f02b3f6c19d7cabf55a9ceca9cbc585e08490a127a7cfe8e91b0c7e21cb4095c1e80698215af5e7258051a1e9d0e03c39a0b5394257f065d09bf7d6e7d7"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause",
            "url" : "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit@7.0.0.202407311305-m2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.eclipse.org/jgit//org.eclipse.jgit"
        },
        {
          "type" : "build-system",
          "url" : "https://ci.eclipse.org/jgit"
        },
        {
          "type" : "distribution",
          "url" : "https://repo.eclipse.org/content/repositories/jgit-releases/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-jgit/jgit/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "http://dev.eclipse.org/mhonarc/lists/jgit-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://eclipse.gerrithub.io/plugins/gitiles/eclipse-jgit/jgit/org.eclipse.jgit"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit@7.0.0.202407311305-m2?type=jar"
    },
    {
      "group" : "com.googlecode.javaewah",
      "name" : "JavaEWAH",
      "version" : "1.2.3",
      "description" : "The bit array data structure is implemented in Java as the BitSet class. Unfortunately, this fails to scale without compression. JavaEWAH is a word-aligned compressed variant of the Java bitset class. It uses a 64-bit run-length encoding (RLE) compression scheme. The goal of word-aligned compression is not to achieve the best compression, but rather to improve query processing time. Hence, we try to save CPU cycles, maybe at the expense of storage. However, the EWAH scheme we implemented is always more efficient storage-wise than an uncompressed bitmap (implemented in Java as the BitSet class). Unlike some alternatives, javaewah does not rely on a patented scheme.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "8fdeda28c1fb10e67b3d79f86bef5e61"
        },
        {
          "alg" : "SHA-1",
          "content" : "13a27c856e0c8808cee9a64032c58eee11c3adc9"
        },
        {
          "alg" : "SHA-256",
          "content" : "d65226949713c4c61a784f41c51167e7b0316f93764398ebba9e4336b3d954c2"
        },
        {
          "alg" : "SHA-512",
          "content" : "48cd9df9252c58e9ffe4583e68607944bcdf2ad7a3be7b4317467f503c4f56cdbde358ca7c4f34fa620d01615072a42f3a572fc4f1237e266310b7508e79bcac"
        },
        {
          "alg" : "SHA-384",
          "content" : "d1fd074f21b8a54a07d3f4579376d7c3ab72f24814ebc9ba92344e9da4721e9bfa3cda3a599137e4ddf2395a3c5b88e4"
        },
        {
          "alg" : "SHA3-384",
          "content" : "a553864f196f73c139a104170ab79e780046fb5f322072c5494a6590361021f875afd7168f858b0531b61918ab49b94e"
        },
        {
          "alg" : "SHA3-256",
          "content" : "bab97f3f893af36c36218a151b0c3fece27d47f358cc19e1ca9c22d77942bb76"
        },
        {
          "alg" : "SHA3-512",
          "content" : "be817b93c7093d44ec8dded565d7e5651772ce38e9c72283c05191b33d0ecb2798cd385395f553500446573ac49dccc21f4ba3067d71eb89e03daa384d0193be"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.googlecode.javaewah/JavaEWAH@1.2.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/lemire/javaewah"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/lemire/javaewah/issues"
        },
        {
          "type" : "vcs",
          "url" : "scm:git:git@github.com:lemire/javaewah.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.googlecode.javaewah/JavaEWAH@1.2.3?type=jar"
    },
    {
      "publisher" : "Eclipse JGit Project",
      "group" : "org.eclipse.jgit",
      "name" : "org.eclipse.jgit.ui",
      "version" : "7.0.0.202407311305-m2",
      "description" : "AWT/Swing based UI",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "d09f7c60ab4335f0b8b11b965d94580a"
        },
        {
          "alg" : "SHA-1",
          "content" : "242788a3aed516a1460358da3635901cf090c44b"
        },
        {
          "alg" : "SHA-256",
          "content" : "e17e29cb93c02955a752cfd9e41efc35f2d874b3b68db0d3bf2f248aa4d13d43"
        },
        {
          "alg" : "SHA-512",
          "content" : "9f3fd22360209c946b88977cd07fa13c89d3eb1a53000ef2b3945aaee2169e8d20339df735241dda3f152ab09aa32fcf440ffe5ccdebc4b8248eb956956a18af"
        },
        {
          "alg" : "SHA-384",
          "content" : "e8a2240288e52d8edba1336d8c45ecad28f349f792223d1a54c614be3c1c90275ff634fe9e450a56eef7c142d1614d3d"
        },
        {
          "alg" : "SHA3-384",
          "content" : "25c44cd97f42a8a516251dd57552ec80f6fc9092288605b0c5ec3fb5ec661b7519ef17d67233ed99d9380d071dd3645e"
        },
        {
          "alg" : "SHA3-256",
          "content" : "d5f95562ab57c60d19d3caf0e283161223b4fec72e19a6f3e505d818881721bf"
        },
        {
          "alg" : "SHA3-512",
          "content" : "4e473e4ed12976a25abfea52418b41dd425ce108dd6743bbf709844630426ffc4d73ce7511f5b8065e124646d75e1b38948e44a5a51a1d1941828fabb7601ce9"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause",
            "url" : "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.ui@7.0.0.202407311305-m2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.eclipse.org/jgit//org.eclipse.jgit.ui"
        },
        {
          "type" : "build-system",
          "url" : "https://ci.eclipse.org/jgit"
        },
        {
          "type" : "distribution",
          "url" : "https://repo.eclipse.org/content/repositories/jgit-releases/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-jgit/jgit/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "http://dev.eclipse.org/mhonarc/lists/jgit-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://eclipse.gerrithub.io/plugins/gitiles/eclipse-jgit/jgit/org.eclipse.jgit.ui"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.ui@7.0.0.202407311305-m2?type=jar"
    },
    {
      "publisher" : "Eclipse JGit Project",
      "group" : "org.eclipse.jgit",
      "name" : "org.eclipse.jgit.gpg.bc",
      "version" : "7.0.0.202407311305-m2",
      "description" : "GPG support for JGit based on BouncyCastle",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "7576b20d22f7bb4575e35e7048ae251d"
        },
        {
          "alg" : "SHA-1",
          "content" : "bb71fc339ac7ceabd69abefcf350cc334a7352c9"
        },
        {
          "alg" : "SHA-256",
          "content" : "a74f0b9542e8be55faad09647c48757489463bff728fa65421f2ad286da2a154"
        },
        {
          "alg" : "SHA-512",
          "content" : "9905222264cbd2c82e08ccf6287e81712708e9ae7ae23e880b1bdff6fc75b15e979f2a5f1576ab95e769573a4f5a9f2fa637bd0c76854109a8c3995ac6353be0"
        },
        {
          "alg" : "SHA-384",
          "content" : "7c7ae430bf6f796b0513e4b9b6581b65ee6834a44e42c4acb583fe6b3d96b17022b2e123b8013cc62aedd6f626b4eb1b"
        },
        {
          "alg" : "SHA3-384",
          "content" : "c1c2da4935ebdab983c3f5cde5eacc4ae86dffad051f7260d1a1c6e8a88399ad8beb67c6ef53d8ca39bf169d46c0a405"
        },
        {
          "alg" : "SHA3-256",
          "content" : "685998f54fa0b11493739eaf02a7653d3998d8a7b573e7a14736c503b25e49d4"
        },
        {
          "alg" : "SHA3-512",
          "content" : "b3a4cc67f9b5803e35d812e8e02e97721fe559dac838e1dc22f647774ccfb814ab9085b0cf1a908ae9c841b4ca80532e3e03e0d5ea361c44df0c67f143aba78c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause",
            "url" : "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.gpg.bc@7.0.0.202407311305-m2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.eclipse.org/jgit//org.eclipse.jgit.gpg.bc"
        },
        {
          "type" : "build-system",
          "url" : "https://ci.eclipse.org/jgit"
        },
        {
          "type" : "distribution",
          "url" : "https://repo.eclipse.org/content/repositories/jgit-releases/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-jgit/jgit/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "http://dev.eclipse.org/mhonarc/lists/jgit-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://eclipse.gerrithub.io/plugins/gitiles/eclipse-jgit/jgit/org.eclipse.jgit.gpg.bc"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.gpg.bc@7.0.0.202407311305-m2?type=jar"
    },
    {
      "group" : "org.bouncycastle",
      "name" : "bcpg-jdk18on",
      "version" : "1.78.1",
      "description" : "The Bouncy Castle Java API for handling the OpenPGP protocol. This jar contains the OpenPGP API for JDK 1.8 and up. The APIs can be used in conjunction with a JCE/JCA provider such as the one provided with the Bouncy Castle Cryptography APIs.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "003cd380030576107da53d4ba0490875"
        },
        {
          "alg" : "SHA-1",
          "content" : "6c8dbcec20355278ec54840e735f63db2479150e"
        },
        {
          "alg" : "SHA-256",
          "content" : "1463bb2cb8737e9ae34f5bd93f48e27711365bb277f4918f44608ed89b68792d"
        },
        {
          "alg" : "SHA-512",
          "content" : "a2ba9b0767302699754db3b636028c36c7af68786f34d97e7445ebec496dad1c1076c5763da9b9160f3402033aa298b65457a8efd143d92276c81186f3c19706"
        },
        {
          "alg" : "SHA-384",
          "content" : "1599d6493076c6b299ddfb9e7225c3db22f82a24b8333871a2aa55a62e4b874939d23d6b6451168493b7f90de5a01c11"
        },
        {
          "alg" : "SHA3-384",
          "content" : "e2ad587138c254844b387f008a4a40415b48a343c23d997421d9e9050cdc26b441fdc99dc94a962e2d4c90a67504bc15"
        },
        {
          "alg" : "SHA3-256",
          "content" : "96831469ede277df99f52be7014842a116d230bb6d9e92a72a59305c6e107616"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c31e1040c478db318c13faa8291d9f913a52b5af3f16e5094a261fac5be2888e297d92d11e8ff7829678dfd8325d46d9825016bcf0fc2b9cbcfaa7ac5da7ddfe"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "Bouncy Castle Licence",
            "url" : "https://www.bouncycastle.org/licence.html"
          }
        },
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.bouncycastle/bcpg-jdk18on@1.78.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.bouncycastle.org/java.html"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/bcgit/bc-java/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/bcgit/bc-java"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.bouncycastle/bcpg-jdk18on@1.78.1?type=jar"
    },
    {
      "group" : "org.bouncycastle",
      "name" : "bcprov-jdk18on",
      "version" : "1.78.1",
      "description" : "The Bouncy Castle Crypto package is a Java implementation of cryptographic algorithms. This jar contains JCE provider and lightweight API for the Bouncy Castle Cryptography APIs for JDK 1.8 and up.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "9646d6d9c087fd408fafe0e3cfe56c25"
        },
        {
          "alg" : "SHA-1",
          "content" : "39e9e45359e20998eb79c1828751f94a818d25f8"
        },
        {
          "alg" : "SHA-256",
          "content" : "add5915e6acfc6ab5836e1fd8a5e21c6488536a8c1f21f386eeb3bf280b702d7"
        },
        {
          "alg" : "SHA-512",
          "content" : "fb10c3c089921c8173ad285329f730e0e78de175d1b50b9bdd79c6a85a265af9b3331caa0c1ed57e5f47047319ce3b0f3bb5def0a3db9cccf2755cc95e145e52"
        },
        {
          "alg" : "SHA-384",
          "content" : "f800642cf1d359c49455421dcc1f6d4b4225d74128bc221fb6742703d5efe009eaefdac2b8139e2168e55815df32c91c"
        },
        {
          "alg" : "SHA3-384",
          "content" : "de3801b40050d6839874c0f00c933f42c89badc87a64d0664960aaed1b08f350ee5bc2f0575771a9b3a217012698d5d9"
        },
        {
          "alg" : "SHA3-256",
          "content" : "d6a7629eefcee11d7f9cfca72d6b87d2779785ed887987cf94ce7da011b9e373"
        },
        {
          "alg" : "SHA3-512",
          "content" : "6a3e7b0a180e61d17de3107876e0ccce6ddfa23c165827a585b10fac8cc3629ffde930e36aaff5df2327278e35631d9ab970923fe0e34d68876b7911f2a536c5"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "Bouncy Castle Licence",
            "url" : "https://www.bouncycastle.org/licence.html"
          }
        }
      ],
      "purl" : "pkg:maven/org.bouncycastle/bcprov-jdk18on@1.78.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.bouncycastle.org/java.html"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/bcgit/bc-java/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/bcgit/bc-java"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.bouncycastle/bcprov-jdk18on@1.78.1?type=jar"
    },
    {
      "group" : "org.bouncycastle",
      "name" : "bcutil-jdk18on",
      "version" : "1.78.1",
      "description" : "The Bouncy Castle Java APIs for ASN.1 extension and utility APIs used to support bcpkix and bctls. This jar contains APIs for JDK 1.8 and up.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "228149d265033bae6701f70580aa7bf2"
        },
        {
          "alg" : "SHA-1",
          "content" : "5353ca39fe2f148dab9ca1d637a43d0750456254"
        },
        {
          "alg" : "SHA-256",
          "content" : "d9fa56f97b0f761ce3bc8d9d74c5d7137a987bf5bd3abfe1003f9bafa45a1d2f"
        },
        {
          "alg" : "SHA-512",
          "content" : "6a338c50d662993c9f00bba23f98443c923b9a95ff61dc653906f51857f8afaecc57a536bfaf6848ac8e7e9ce0a21f84ec068815853261268f97e951526bc766"
        },
        {
          "alg" : "SHA-384",
          "content" : "cf8b9239ca118fe66fff8752dca15caa6950aa696e5034b087e89893ebed7dc1c7ce28c4e1b01ec7cc791f926c91f3a2"
        },
        {
          "alg" : "SHA3-384",
          "content" : "44d796cc83bdc00d3e6703170c718d34347babe628c7ecbe7769be0d39873a081eea847a336ba0fe96c09c79d52807f8"
        },
        {
          "alg" : "SHA3-256",
          "content" : "681c7ba398b4932feb4f9e3a67e746b519c5f732d73c2aa4ce3ce43274f24f87"
        },
        {
          "alg" : "SHA3-512",
          "content" : "99809d355ddcfd5e72bd627c099f376f04d3f10ce227fb1a27812596b466fd21fdee97c4da061d4e637dd6e256af6871c51de94930c07c7fa8ab070767c4101a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "Bouncy Castle Licence",
            "url" : "https://www.bouncycastle.org/licence.html"
          }
        }
      ],
      "purl" : "pkg:maven/org.bouncycastle/bcutil-jdk18on@1.78.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.bouncycastle.org/java.html"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/bcgit/bc-java/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/bcgit/bc-java"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.bouncycastle/bcutil-jdk18on@1.78.1?type=jar"
    },
    {
      "group" : "org.bouncycastle",
      "name" : "bcpkix-jdk18on",
      "version" : "1.78.1",
      "description" : "The Bouncy Castle Java APIs for CMS, PKCS, EAC, TSP, CMP, CRMF, OCSP, and certificate generation. This jar contains APIs for JDK 1.8 and up. The APIs can be used in conjunction with a JCE/JCA provider such as the one provided with the Bouncy Castle Cryptography APIs.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "bbe33d493826742ce3cda5fe5181b668"
        },
        {
          "alg" : "SHA-1",
          "content" : "17b3541f736df97465f87d9f5b5dfa4991b37bb3"
        },
        {
          "alg" : "SHA-256",
          "content" : "4b48ea084e5232b9d79ebca1887b9de037b124931807cd60710748c2aee08cc9"
        },
        {
          "alg" : "SHA-512",
          "content" : "d71a45844a7946b6a70315254e82a335d2df5e402b2d5a3b496fa69b355184338011b49c5f1c76026764a76f62f2bc140c25db2881bca91dde9677a25c6d587b"
        },
        {
          "alg" : "SHA-384",
          "content" : "8ec868bf88ebf69fa9a3c42803410d221600168652c659687db408a661a64aecf0c6cf1c9d70aa2f8e7a29e9846b1fed"
        },
        {
          "alg" : "SHA3-384",
          "content" : "49e639a4f1b6d3a45a15eadff7afccd62f88111fb4eb8cde1a2df1df8f6a1b0b4a0b8976f1376c5586386158e71a5280"
        },
        {
          "alg" : "SHA3-256",
          "content" : "43fe9d049512fd01e58aea9e088530a4153eec20b58edae9ceea102a1e632bda"
        },
        {
          "alg" : "SHA3-512",
          "content" : "f2d0d02e199df93ac1b90b12d40d5cc7fd5d92e5ba5a93b5ca495ad2c210a2fa927871db5932a9f070ad66ea39a66d3a3ac0ad1ebeb4cbf010de28a247cf26ed"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "Bouncy Castle Licence",
            "url" : "https://www.bouncycastle.org/licence.html"
          }
        }
      ],
      "purl" : "pkg:maven/org.bouncycastle/bcpkix-jdk18on@1.78.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.bouncycastle.org/java.html"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/bcgit/bc-java/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/bcgit/bc-java"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.bouncycastle/bcpkix-jdk18on@1.78.1?type=jar"
    },
    {
      "publisher" : "Eclipse JGit Project",
      "group" : "org.eclipse.jgit",
      "name" : "org.eclipse.jgit.http.apache",
      "version" : "7.0.0.202407311305-m2",
      "description" : "Apache httpclient based HTTP support",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "67a1f911b5079c436307cdab4551b030"
        },
        {
          "alg" : "SHA-1",
          "content" : "524163aefc203009c817865eab1ff56eecb7f7ea"
        },
        {
          "alg" : "SHA-256",
          "content" : "f9d6d46db4c20b832e2c7b2468e7ac3166eac3f31dba264692dfa19a2f95a2fb"
        },
        {
          "alg" : "SHA-512",
          "content" : "e60ed70ea8b98af21790088d959b7f51d23b3b5efcb8d6af529606bcb602de6c6b3f704b79e87078b20b1c1faa786054be9eff8161f1d16255afbb8145037b9f"
        },
        {
          "alg" : "SHA-384",
          "content" : "cd13baacb8551ac38ac6e0210a79766810af8e252097c7b3e1228d141faac9b04b3693036e1fc40d17ab7cbbbbf70081"
        },
        {
          "alg" : "SHA3-384",
          "content" : "295d72ee7e0d43360b8da0ffb3ad284c356da19b1b9a426f05e301ea3cc552345d3a4aeb93d1397e1460257aa80fb80b"
        },
        {
          "alg" : "SHA3-256",
          "content" : "0a528022de281bcfeb7ab8b8c05a6b2c8da588168b1be0c58f487914876aed4a"
        },
        {
          "alg" : "SHA3-512",
          "content" : "7d12018e50a4a0c27fa80368a3f2b73cdbd1362d97dab21a43de4c4f2e2ed8393c0eb0393803d73c9504785b21fae9d158b9451b02e02df1707fdc1dbcfa1404"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause",
            "url" : "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.http.apache@7.0.0.202407311305-m2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.eclipse.org/jgit//org.eclipse.jgit.http.apache"
        },
        {
          "type" : "build-system",
          "url" : "https://ci.eclipse.org/jgit"
        },
        {
          "type" : "distribution",
          "url" : "https://repo.eclipse.org/content/repositories/jgit-releases/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-jgit/jgit/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "http://dev.eclipse.org/mhonarc/lists/jgit-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://eclipse.gerrithub.io/plugins/gitiles/eclipse-jgit/jgit/org.eclipse.jgit.http.apache"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.http.apache@7.0.0.202407311305-m2?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.httpcomponents",
      "name" : "httpcore",
      "version" : "4.4.16",
      "description" : "Apache HttpComponents Core (blocking I/O)",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "28d2cd9bf8789fd2ec774fb88436ebd1"
        },
        {
          "alg" : "SHA-1",
          "content" : "51cf043c87253c9f58b539c9f7e44c8894223850"
        },
        {
          "alg" : "SHA-256",
          "content" : "6c9b3dd142a09dc468e23ad39aad6f75a0f2b85125104469f026e52a474e464f"
        },
        {
          "alg" : "SHA-512",
          "content" : "168026436a6bcf5e96c0c59606638abbdc30de4b405ae55afde70fdf2895e267a3d48bba6bdadc5a89f38e31da3d9a9dc91e1cab7ea76f5e04322cf1ec63b838"
        },
        {
          "alg" : "SHA-384",
          "content" : "ba9ceaee1a37ca3201d6a1315ecb0327b495489efd0baa155c219c475df8d3eb69fe77ab0026563db406497626da6562"
        },
        {
          "alg" : "SHA3-384",
          "content" : "b9dc44dcc7cc86d5036f26d54c4003a2d72808ae7b07a0808bb53505c6d4281b5ad213eb1f3d0fef1113dec57cb0dfe1"
        },
        {
          "alg" : "SHA3-256",
          "content" : "fd8ab51846476c6c18822151c9ec07b39a9633010b5d20ea937fc6910407bc64"
        },
        {
          "alg" : "SHA3-512",
          "content" : "b42fa528242981a9d70e4f68ab75a24292df5112c44c21b6f18cb9201ce747885ba1d4dc69bc3d14d0da46a6c2638f937c11bc45749abeb55dc89ddada90cdda"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://hc.apache.org/httpcomponents-core-ga"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/HTTPCORE"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/hc-httpclient-users/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/httpcomponents-core/tree/4.4.16/httpcore"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar"
    },
    {
      "publisher" : "Eclipse JGit Project",
      "group" : "org.eclipse.jgit",
      "name" : "org.eclipse.jgit.ssh.apache",
      "version" : "7.0.0.202407311305-m2",
      "description" : "SSH support for JGit based on Apache MINA sshd",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4cf47ba7fe4e6cecea0cca3a59e380eb"
        },
        {
          "alg" : "SHA-1",
          "content" : "4bc63167ceeaf46840d28c20e130f3fe67615d38"
        },
        {
          "alg" : "SHA-256",
          "content" : "74a2c8999e9ac6b1e9b007d6ab340624768d8380e83a7dc67d39d78d93bd21f0"
        },
        {
          "alg" : "SHA-512",
          "content" : "89eb68d72ec0cb390ca59ef6b8fbfff80ac60d5c196e7374baea253c5fb06f60ed9f6aed7ba00aa3283539bdc84b8807e49b471e76aef4808f238044205e22ed"
        },
        {
          "alg" : "SHA-384",
          "content" : "2aa583878eb76ae10694ad10f630ebe1ccbe117067efd4de6fbf75cfa7b55ddaea5b27242512a2ebb6d7cb5948c1c85b"
        },
        {
          "alg" : "SHA3-384",
          "content" : "504caba4eaa109033aaa8918eaf26050852f3d02eabd7712092914a23ab1179ffeaf17660dd2da4e54e95ae12cf4bccb"
        },
        {
          "alg" : "SHA3-256",
          "content" : "2494e0ccd96b58a6b67a68f7bff2a93f0ce57cb217a230d7ba6ab6f90d092502"
        },
        {
          "alg" : "SHA3-512",
          "content" : "4c3a9dcfc8db69562ef4f91b6372b93a2e6520cd2655b8909003e81486cc1819b1a6a35158276237ec93ba3c100e1c3c13769ef2a7cb4668f30aa865fcc129b4"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause",
            "url" : "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.ssh.apache@7.0.0.202407311305-m2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.eclipse.org/jgit//org.eclipse.jgit.ssh.apache"
        },
        {
          "type" : "build-system",
          "url" : "https://ci.eclipse.org/jgit"
        },
        {
          "type" : "distribution",
          "url" : "https://repo.eclipse.org/content/repositories/jgit-releases/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-jgit/jgit/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "http://dev.eclipse.org/mhonarc/lists/jgit-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://eclipse.gerrithub.io/plugins/gitiles/eclipse-jgit/jgit/org.eclipse.jgit.ssh.apache"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.ssh.apache@7.0.0.202407311305-m2?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.sshd",
      "name" : "sshd-osgi",
      "version" : "2.13.1",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "878d9606e65cc19c9117342da60d5489"
        },
        {
          "alg" : "SHA-1",
          "content" : "50958cc44076749e790d7332021cff546707624c"
        },
        {
          "alg" : "SHA-256",
          "content" : "4de8643421b6a0d5cd4557183d867bf6df503e6587b43a53477f1567966316f7"
        },
        {
          "alg" : "SHA-512",
          "content" : "b7d1664e1febe069b7e3b6749efcdc190ede843db801af2da39575d95812cd1e88216c7640c0f67d87fa5dc475fe81e3f619043414b950f54f75f876317a08e4"
        },
        {
          "alg" : "SHA-384",
          "content" : "ae61937c97fd7c557b3d457c4aeadd5cd1060b59bfbb2ced1fac36af3686d370c0c67639992e0dec9945bccebafb8906"
        },
        {
          "alg" : "SHA3-384",
          "content" : "ef3f8c7907dc161d529ccb973c6d2fab5f73207946cf3223f6685fee5b3758570d755355625dd723bf5e3fbd07ca2962"
        },
        {
          "alg" : "SHA3-256",
          "content" : "58a1c46bee237cf1c526904be097c923eccd31a674edf9c8f46df7701191a25b"
        },
        {
          "alg" : "SHA3-512",
          "content" : "4741abd4607800e92d65626201ef21677d8e72514b23502081cb710bab894ea9c784e5443a8db314e1a434ec109b8970171f17d2af0cc0d244e15f3ad055c3b7"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.sshd/sshd-osgi@2.13.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.apache.org/sshd/sshd-osgi/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/SSHD"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/mina-users/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/mina-sshd/tree/sshd-2.13.1/sshd-osgi"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.sshd/sshd-osgi@2.13.1?type=jar"
    },
    {
      "publisher" : "QOS.ch",
      "group" : "org.slf4j",
      "name" : "jcl-over-slf4j",
      "version" : "1.7.32",
      "description" : "JCL 1.2 implemented over SLF4J",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "8788169f5d5be6550efc75d3bfffc82c"
        },
        {
          "alg" : "SHA-1",
          "content" : "32c060250bcc5282cdbc1fd7008c12eb4ebad00e"
        },
        {
          "alg" : "SHA-256",
          "content" : "60f3bda5922e3912889cca1311d1b227753610bf60cb4e5e914e8b2eaa0326b4"
        },
        {
          "alg" : "SHA-512",
          "content" : "55b0678cbe5359d7fabcec55f305997170b0d45264b5cc0577cc9137ac2388a459b86c5438b5850d6e7247d3a00486f83f4b7e305b0eb756a52d3e5c5466ddbd"
        },
        {
          "alg" : "SHA-384",
          "content" : "f1b69471e3c75cd1c13f6557666ebc4b01c676cce3bd2cb19720471dcca98333b9573b468cfe308abd7cf297cee59133"
        },
        {
          "alg" : "SHA3-384",
          "content" : "2df2a1639c379ed6962a039804e7613ba9cde8ec612c94062d9375d1071b2870edb58f3b9d407650a13dce61bcb69d29"
        },
        {
          "alg" : "SHA3-256",
          "content" : "f515d8b3b683bd709ce241190b40b6f8266b392da6e69b0e637377f488e6d38f"
        },
        {
          "alg" : "SHA3-512",
          "content" : "dd2156b7589ce3989471e856cb65ebb50af00a23aef1a2b80ca7ee5f8a4c4573a7887f54559784e710fa8a089ea57ff04c0a80f804710e956cbaebac11c647b2"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.slf4j/jcl-over-slf4j@1.7.32?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.slf4j.org"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/qos-ch/slf4j/jcl-over-slf4j"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.slf4j/jcl-over-slf4j@1.7.32?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.sshd",
      "name" : "sshd-sftp",
      "version" : "2.13.1",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "72064afac29d7cbf065b07345d244671"
        },
        {
          "alg" : "SHA-1",
          "content" : "e1b6da4ef604718e32cad59ef32618610da7a170"
        },
        {
          "alg" : "SHA-256",
          "content" : "3872fc35008ac93d6abedded52dffe56e1fc4f4f8d6ed4de2f63466740bf750c"
        },
        {
          "alg" : "SHA-512",
          "content" : "dcc32a557692f81eec9f7a7bad730989a37bb423d56519ab4ca8f4bba88d3aec0cbe19677ffdd2865aa58a019553c1b4dc460e4fe8a625d5daa394af9c9a148f"
        },
        {
          "alg" : "SHA-384",
          "content" : "871803f8f03f0752993fe490d2a8f2deb8addb46afef857a396dc4b9f629688980a10143fe642ca68464be921fcd030e"
        },
        {
          "alg" : "SHA3-384",
          "content" : "009df52a3274c5567c961bba3688b0f743d5cf5a6c3eb7f4d2e4f39faa9975206100402e6118678f0d2d9db261507c1a"
        },
        {
          "alg" : "SHA3-256",
          "content" : "acf40e0c25cf2c70dca346f5d4c41308dbf4b9040014dc6f6222febd110f9989"
        },
        {
          "alg" : "SHA3-512",
          "content" : "21dc5e1c423dad60edbe72c1112ba7dcff0133da0396537e2fbf6d3e26fda0fb98037d9249d7de78d98c6ca77f36973a1e53dd87a8fcb41453e051275d848fc8"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.sshd/sshd-sftp@2.13.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.apache.org/sshd/sshd-sftp/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/SSHD"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/mina-users/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/mina-sshd/tree/sshd-2.13.1/sshd-sftp"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.sshd/sshd-sftp@2.13.1?type=jar"
    },
    {
      "group" : "net.i2p.crypto",
      "name" : "eddsa",
      "version" : "0.3.0",
      "description" : "Implementation of EdDSA in Java",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "ee7de3b6f19de76a06e465efc978f669"
        },
        {
          "alg" : "SHA-1",
          "content" : "1901c8d4d8bffb7d79027686cfb91e704217c3e1"
        },
        {
          "alg" : "SHA-256",
          "content" : "4dda1120db856640dbec04140ed23242215a075fe127bdefa0dcfa29fb31267d"
        },
        {
          "alg" : "SHA-512",
          "content" : "637e75ef4b58b280af057546afc176dbf3becf2b69f7dd31a716a90e01c01d7b1bcd400b29efeeea6b34df9ade7922c0665a000a3a2db5a446df293f8d1429cc"
        },
        {
          "alg" : "SHA-384",
          "content" : "e13f22b10a675c9a4180ac051c7e07b839e2131188837071e8760162377c649d7c56e64e279f5ff990547495535b4632"
        },
        {
          "alg" : "SHA3-384",
          "content" : "fa7f056ced9efd6cd90b124ef97a63007d9fe68ffd954c9bbdc15229af958807122460a79aa46f1bcbfff0036afc71d4"
        },
        {
          "alg" : "SHA3-256",
          "content" : "852e263100c291206a8a2afa9a2d9e6f486d3ef40a7fe3b1c3d58e5a8a2c8b60"
        },
        {
          "alg" : "SHA3-512",
          "content" : "0a8c062bec2abdbf97028611b5001b392a433183c1467383e61deab3bf4481f3766c3c7290cdca8bd02a007d7dcd8f2ace99a6c07eb3f74aac48ecd139ba3884"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "CC0-1.0"
          }
        }
      ],
      "purl" : "pkg:maven/net.i2p.crypto/eddsa@0.3.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/str4d/ed25519-java"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/str4d/ed25519-java"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/net.i2p.crypto/eddsa@0.3.0?type=jar"
    },
    {
      "publisher" : "Eclipse JGit Project",
      "group" : "org.eclipse.jgit",
      "name" : "org.eclipse.jgit.ssh.apache.agent",
      "version" : "7.0.0.202407311305-m2",
      "description" : "Support for ssh-agent for the Apache MINA sshd SSH connector",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "af83ec96f3ef285efcc0227b26fc3721"
        },
        {
          "alg" : "SHA-1",
          "content" : "0833fae15b71b92bb3e4aadfbeadfbb96c4fcf8c"
        },
        {
          "alg" : "SHA-256",
          "content" : "edeb081a3218a8d198fd34434c1522ef5a78a9a88f2ae715d6a9ac482d0ba7e5"
        },
        {
          "alg" : "SHA-512",
          "content" : "6a46aeddaaa865a581634b40ef6686014ef264fcd185625a89e300761b84bcc2eaef2e5fb9aa84685314ca496b1095578f5b9205e9e2e93ddebc12f25483d453"
        },
        {
          "alg" : "SHA-384",
          "content" : "d9bc39ca41ec408e4b7e70072070813d111ffda5b52d17bbe1ac1576b6eebbf080cf53e234078459ec97853296222410"
        },
        {
          "alg" : "SHA3-384",
          "content" : "fe6cd193a886fe002e54ec34c0a744c46acf990b8bbcfbe195a177c9d306bb5773d670eebb46c468f6e94fcb47270fa6"
        },
        {
          "alg" : "SHA3-256",
          "content" : "975be94808925ea83cd852d47980cdc0ec0068519219face5644a012181c0ddf"
        },
        {
          "alg" : "SHA3-512",
          "content" : "f3a4df1ca93d07de633bdbbd0abb3e6116a51cf35669aa9aa772e1d6c711c2d707e7752276700827b060336e9fd71a18e0b8dca1774117242e824e9c9ec298fa"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause",
            "url" : "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.ssh.apache.agent@7.0.0.202407311305-m2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.eclipse.org/jgit//org.eclipse.jgit.ssh.apache.agent"
        },
        {
          "type" : "build-system",
          "url" : "https://ci.eclipse.org/jgit"
        },
        {
          "type" : "distribution",
          "url" : "https://repo.eclipse.org/content/repositories/jgit-releases/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-jgit/jgit/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "http://dev.eclipse.org/mhonarc/lists/jgit-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://eclipse.gerrithub.io/plugins/gitiles/eclipse-jgit/jgit/org.eclipse.jgit.ssh.apache.agent"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.ssh.apache.agent@7.0.0.202407311305-m2?type=jar"
    },
    {
      "group" : "net.java.dev.jna",
      "name" : "jna",
      "version" : "5.14.0",
      "description" : "Java Native Access",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "8b3cc652920435ad9f801e6d9b2a3497"
        },
        {
          "alg" : "SHA-1",
          "content" : "67bf3eaea4f0718cb376a181a629e5f88fa1c9dd"
        },
        {
          "alg" : "SHA-256",
          "content" : "34ed1e1f27fa896bca50dbc4e99cf3732967cec387a7a0d5e3486c09673fe8c6"
        },
        {
          "alg" : "SHA-512",
          "content" : "9b4963d049c735192a46216b392e5f718aa2441f4cb318f999188c0ac39b1a3da31e91da01cca7c6bb37772b4a3d9d8ca18ed719bad54d334da40161f49e2eb2"
        },
        {
          "alg" : "SHA-384",
          "content" : "2338597e15be0a8cb9a26599b744b044cd7c9b73b6e18e8b3db04233140521cde4aff484098d44a0e91a25e8636c5f1d"
        },
        {
          "alg" : "SHA3-384",
          "content" : "6f9f4f890574e993942281ad1c97ece05d8987e4933c34f3515168c86466a5d99919129c3158c8d5b71b8b2a91709b21"
        },
        {
          "alg" : "SHA3-256",
          "content" : "3a4b5c008deee746be7d0a95c42e6a78524b2aa911a83054eb95284b38a8cdc6"
        },
        {
          "alg" : "SHA3-512",
          "content" : "5701b6ccaddccecb9dfcc33b72047ad5677e4066e0e981ddaa9a766c6089482b8430f91b39520cfd118ca41e3ec462522be91c0bcf0460934fbc9bf90cd0fadf"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "LGPL-2.1-or-later",
            "url" : "https://www.gnu.org/licenses/old-licenses/lgpl-2.1-standalone.html"
          }
        },
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/net.java.dev.jna/jna@5.14.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/java-native-access/jna"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/java-native-access/jna"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/net.java.dev.jna/jna@5.14.0?type=jar"
    },
    {
      "group" : "net.java.dev.jna",
      "name" : "jna-platform",
      "version" : "5.14.0",
      "description" : "Java Native Access Platform",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "3bc3f09a698e6ad250dd093f64fbb8a7"
        },
        {
          "alg" : "SHA-1",
          "content" : "28934d48aed814f11e4c584da55c49fa7032b31b"
        },
        {
          "alg" : "SHA-256",
          "content" : "ae4caceb3840730c2537f9b7fb55a01baba580286b4122951488bcee558c2449"
        },
        {
          "alg" : "SHA-512",
          "content" : "6d6e5292b50c53c6b42bcf293cd28ccf32f8580e6818329604af4277e916d375e436b4f3858586f5e07a93405a930e04d88d6384bc9f1ac2d58de4bb7180faeb"
        },
        {
          "alg" : "SHA-384",
          "content" : "bc7ce0c8e1d96c7fb4c6ac63af2cd8f58762e4c75ee07f38363baebdd40a0174b8e58e9e2561e38dd6957075a2450f9f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "3b8c6e51db79159954624a33101df8b4e4f97552e71d4acd2e626b7aae8a1cf0fa6bdfb73a1aecb76cc5289fe7bf9cad"
        },
        {
          "alg" : "SHA3-256",
          "content" : "5d093bc369bc9635ad309c8be702dd7c8969f5d6c8099c1aa14735564d81559b"
        },
        {
          "alg" : "SHA3-512",
          "content" : "8c0213d254dbe3e7751782dff5f949cb94b4f61dc4d1c9a1c31a9eb57aa14f6b84babbe91dab27daf539f74bb6b55dbbc46752e534b9e6cea4b39bdb69faf668"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "LGPL-2.1-or-later",
            "url" : "https://www.gnu.org/licenses/old-licenses/lgpl-2.1-standalone.html"
          }
        },
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/net.java.dev.jna/jna-platform@5.14.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/java-native-access/jna"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/java-native-access/jna"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/net.java.dev.jna/jna-platform@5.14.0?type=jar"
    },
    {
      "publisher" : "Eclipse JGit Project",
      "group" : "org.eclipse.jgit",
      "name" : "org.eclipse.jgit.ssh.jsch",
      "version" : "7.0.0.202407311305-m2",
      "description" : "SSH support for JGit based on JSch",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "63eb4637739cd747676b9793a6142229"
        },
        {
          "alg" : "SHA-1",
          "content" : "aba8ba0e01f472083904aa38c23db4cd427aa9d6"
        },
        {
          "alg" : "SHA-256",
          "content" : "953740060e3eba464d216f64ea68c520b1de7b4b013b8970b945a810a86ba17e"
        },
        {
          "alg" : "SHA-512",
          "content" : "b6bfcc54ad9cac7ba82ed1111fe67047260f0a772d382074a3a56a2852d5af47628a889c694c90e50d594d6ba9c2068efb6a7eb1f9b427b242ff31819f8781d6"
        },
        {
          "alg" : "SHA-384",
          "content" : "856c8576b88fb14477082127762ad2b5d7e79347a1aa979d30e3b91a022848b3832fd6e21b8337389af35c6984ef00e8"
        },
        {
          "alg" : "SHA3-384",
          "content" : "773e39e66afb1cb161d13624e08013cb6386fadfa59bccf88d12ec831f262e5985fd2a87e2c30c92542ee1c9c255f96c"
        },
        {
          "alg" : "SHA3-256",
          "content" : "debc6057e5004be2011991dd2fb87d36878264df0c6f74e62d166caadbbfb7b9"
        },
        {
          "alg" : "SHA3-512",
          "content" : "9120514da47d816c70b441ff84271eaa835901332b08946245f26330ec7ad8eb3399c9a358e4d40a0d04e28751fe76b7d5c260709712a714545408e73c9a089a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause",
            "url" : "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.ssh.jsch@7.0.0.202407311305-m2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.eclipse.org/jgit//org.eclipse.jgit.ssh.jsch"
        },
        {
          "type" : "build-system",
          "url" : "https://ci.eclipse.org/jgit"
        },
        {
          "type" : "distribution",
          "url" : "https://repo.eclipse.org/content/repositories/jgit-releases/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-jgit/jgit/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "http://dev.eclipse.org/mhonarc/lists/jgit-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://eclipse.gerrithub.io/plugins/gitiles/eclipse-jgit/jgit/org.eclipse.jgit.ssh.jsch"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.ssh.jsch@7.0.0.202407311305-m2?type=jar"
    },
    {
      "publisher" : "JCraft,Inc.",
      "group" : "com.jcraft",
      "name" : "jsch",
      "version" : "0.1.55",
      "description" : "JSch is a pure Java implementation of SSH2",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "c395ada0fc012d66f11bd30246f6c84d"
        },
        {
          "alg" : "SHA-1",
          "content" : "bbd40e5aa7aa3cfad5db34965456cee738a42a50"
        },
        {
          "alg" : "SHA-256",
          "content" : "d492b15a6d2ea3f1cc39c422c953c40c12289073dbe8360d98c0f6f9ec74fc44"
        },
        {
          "alg" : "SHA-512",
          "content" : "b6827d8de471682fd11744080663aea77612a03774e2ebcc3357c7c493d5df50d4ec9c8d52c4fcc928bdfdd75b62b40d3c60f184da8a7b8aba44c92afecee7a5"
        },
        {
          "alg" : "SHA-384",
          "content" : "6da3c9e2d72bd25991936dfe918ae7f235d03f386a8f797b65a154ae71b36292f873338ccbf5dd4fd3bc63619c806dbe"
        },
        {
          "alg" : "SHA3-384",
          "content" : "92676d161f4ebe078df11f9cda6dc0bed4c828830bb98340ac34fdb89dc76b019d4320f6fdd3db13cdd6e33582cb9272"
        },
        {
          "alg" : "SHA3-256",
          "content" : "99c7de83022da8f85fcef262e29051b8c33c81d492cf344a5d123b83b5a459f7"
        },
        {
          "alg" : "SHA3-512",
          "content" : "33344b4ee79f0e7c8901b828f2bea13d25727361deeaa37d85dbaf3c44a31e8d0b4f3966ce2e4c3705bebd046cb7adba0486d02babdbc68e9819d059b5981559"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/com.jcraft/jsch@0.1.55?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.jcraft.com/jsch/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "http://git.jcraft.com/jsch.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.jcraft/jsch@0.1.55?type=jar"
    },
    {
      "publisher" : "jcraft",
      "group" : "com.jcraft",
      "name" : "jzlib",
      "version" : "1.1.3",
      "description" : "JZlib is a re-implementation of zlib in pure Java",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "386d3714fef534d21175d8885ae48bf7"
        },
        {
          "alg" : "SHA-1",
          "content" : "c01428efa717624f7aabf4df319939dda9646b2d"
        },
        {
          "alg" : "SHA-256",
          "content" : "89b1360f407381bf61fde411019d8cbd009ebb10cff715f3669017a031027560"
        },
        {
          "alg" : "SHA-512",
          "content" : "339793df0001214aaadac2a5456c3cd54a0c09ba2c9e73cf13155adbfdf1c2a953f7336903e45e76a52ce6b48c5b7c78436667d7836e7354e02e85ba0908afd3"
        },
        {
          "alg" : "SHA-384",
          "content" : "e0fe861e00a6136b1c97ae781ef56068b0e30c22a64ba4186b1703fd543878920e809f32756323f0fa68afc25f64653e"
        },
        {
          "alg" : "SHA3-384",
          "content" : "48f4e07ed293214fedb6ed444886131225f20e591ab0ac8236f64498b2f9aae067d0cb92c8e100263e6e9ccad8074c52"
        },
        {
          "alg" : "SHA3-256",
          "content" : "1a141fb006354f69bbf72a11e15c716be8260f7670ceff4ca764394e4473a91e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "90236a8e878a8838ddc5f3129a1a9ab84d0849702bc4b8ec02d6c5dc09271927359d7da1121f55f36c16bd7d371b6fc631d5439cdd93d9a30ab248dcd84d4618"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-4-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/com.jcraft/jzlib@1.1.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.jcraft.com/jzlib/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "git://github.com/ymnk/jzlib.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.jcraft/jzlib@1.1.3?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.httpcomponents",
      "name" : "httpclient",
      "version" : "4.5.14",
      "description" : "Apache HttpComponents Client",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "2cb357c4b763f47e58af6cad47df6ba3"
        },
        {
          "alg" : "SHA-1",
          "content" : "1194890e6f56ec29177673f2f12d0b8e627dec98"
        },
        {
          "alg" : "SHA-256",
          "content" : "c8bc7e1c51a6d4ce72f40d2ebbabf1c4b68bfe76e732104b04381b493478e9d6"
        },
        {
          "alg" : "SHA-512",
          "content" : "a084ef30fb0a2a25397d8fab439fe68f67e294bf53153e2e1355b8df92886d40fe6abe35dc84f014245f7158e92641bcbd98019b4fbbd9e5a0db495b160b4ced"
        },
        {
          "alg" : "SHA-384",
          "content" : "c8ccaa1fa8ba7c421413e3c30375bd9c31284e837c476fd831e18043ad4187e92166f49554123108891241bed674b95d"
        },
        {
          "alg" : "SHA3-384",
          "content" : "9a17dfcf12b2af3a9b006ec369f9bc78ba322348bf1a01146e0d4f3fec2bed6cbe8b2193fac5b4d5a0c3036c06477510"
        },
        {
          "alg" : "SHA3-256",
          "content" : "48f0a61b691e22dec9d6db8e0b58be4ca17a42a2846c82f0875de21f72bb0faa"
        },
        {
          "alg" : "SHA3-512",
          "content" : "4ad2c9adc761b7e813330f0dcad3f9978702896c7d0cbf81f60a472d550e320b1527be425ba597c8c9352d587e32e1d46ceb4c73e99c70a6190df4c699a7c2a9"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.httpcomponents/httpclient@4.5.14?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://hc.apache.org/httpcomponents-client-ga"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/HTTPCLIENT"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/hc-httpclient-users/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/httpcomponents-client/tree/4.5.14/httpclient"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.httpcomponents/httpclient@4.5.14?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-logging",
      "name" : "commons-logging",
      "version" : "1.3.2",
      "description" : "Apache Commons Logging is a thin adapter allowing configurable bridging to other, well-known logging systems.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4b970f3b14a5e53d8e8edff1cf2ecd91"
        },
        {
          "alg" : "SHA-1",
          "content" : "3dc966156ef19d23c839715165435e582fafa753"
        },
        {
          "alg" : "SHA-256",
          "content" : "6b858424f518015f32bfcd1183a373f4a827d72d026b6031da0c91cf0e8f3489"
        },
        {
          "alg" : "SHA-512",
          "content" : "9c56baa1371fafccd49f035a4cdcc667f3e6040b07748e04b1b74a225cb5307478f95b2d202e3ca51d89d3757ce046554091c63a1b769ac35ca60c69d058eee2"
        },
        {
          "alg" : "SHA-384",
          "content" : "d3388b679d699e0b37914d29f5dadb187ace1cd59d5192a5c726a75747828dba47c7e99be04c784f00b0949c43c7eb1f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "c032a7514d2d234479d48cd164b0826a12d0c6025bc1e4b5f083485d58f41a7d7e18799aa6a7005c1bf10b7423da8792"
        },
        {
          "alg" : "SHA3-256",
          "content" : "e97bd2bc00770013cb49c9431ab425a75f338bcb7775b3a9d198b244864c5dc5"
        },
        {
          "alg" : "SHA3-512",
          "content" : "8a1ad351653f659643250b3ebc2119b2ea1e4403fea71a43c1a69ddafbe4ce641e5157a4df7426edbe52e638812e3c1d2b24250deb7bf04af06e69e11d9b1388"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-logging/commons-logging@1.3.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-logging/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-parent/actions"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/LOGGING"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf/commons-logging"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-logging/commons-logging@1.3.2?type=jar"
    },
    {
      "publisher" : "QOS.ch",
      "group" : "org.slf4j",
      "name" : "slf4j-api",
      "version" : "1.7.36",
      "description" : "The slf4j API",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "872da51f5de7f3923da4de871d57fd85"
        },
        {
          "alg" : "SHA-1",
          "content" : "6c62681a2f655b49963a5983b8b0950a6120ae14"
        },
        {
          "alg" : "SHA-256",
          "content" : "d3ef575e3e4979678dc01bf1dcce51021493b4d11fb7f1be8ad982877c16a1c0"
        },
        {
          "alg" : "SHA-512",
          "content" : "f9b033fc019a44f98b16048da7e2b59edd4a6a527ba60e358f65ab88e0afae03a9340f1b3e8a543d49fa542290f499c5594259affa1ff3e6e7bf3b428d4c610b"
        },
        {
          "alg" : "SHA-384",
          "content" : "2b14ad035877087157e379d3277dcdcd79e58d6bdb147c47d29e377d75ce53ad42cafbf22f5fb7827c7e946ff4876b9a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "3bc3110dafb8d5be16a39f3b2671a466463cd99eb39610c0e4719a7bf2d928f2ea213c734887c6926a07c4cca7769e4b"
        },
        {
          "alg" : "SHA3-256",
          "content" : "ba2608179fcf46e2291a90b9cbb4aa30d718e481f59c350cc21c73b88d826881"
        },
        {
          "alg" : "SHA3-512",
          "content" : "14c4edcd19702ef607d78826839d8a6d3a39157df54b89a801d3d3cbbe1307131a77671b041c761122730fb1387888c5ec2e46bdd80e1cb07f8f144676441824"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.slf4j.org"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/qos-ch/slf4j/slf4j-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
    },
    {
      "publisher" : "QOS.ch",
      "group" : "org.slf4j",
      "name" : "slf4j-simple",
      "version" : "1.7.36",
      "description" : "SLF4J Simple binding",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "fd4a5fa54910b5ee561f639c903cf34a"
        },
        {
          "alg" : "SHA-1",
          "content" : "a41f9cfe6faafb2eb83a1c7dd2d0dfd844e2a936"
        },
        {
          "alg" : "SHA-256",
          "content" : "2f39bed943d624dfa8f4102d0571283a10870b6aa36f197a8a506f147010c10f"
        },
        {
          "alg" : "SHA-512",
          "content" : "cdcebe8fa58527a1bc7da0c18e90a9547ce8ac99cccfe5657860c2a25478c030ea758251da3e32a71eab9cbb91360692b5c6c5887a1f1597d1fda07151b27e5f"
        },
        {
          "alg" : "SHA-384",
          "content" : "57eb6d0c778ad9637a819fe64ab6a7b5e291c1c2e5e9a8f536c553e54837fe0e26b9ef5a83ce25c7e3e7e8c5d455ab24"
        },
        {
          "alg" : "SHA3-384",
          "content" : "15809f42dc66ec21d8d931c2e10cbb1c2c7c580678c1946a0e4fc8b5c7cec5ff001a5551979693a59fbfa1420ba0c038"
        },
        {
          "alg" : "SHA3-256",
          "content" : "a313022d52742de983fa574ebaaf3c6fbb173b0d823a6c31b2a22f429e03a428"
        },
        {
          "alg" : "SHA3-512",
          "content" : "335556e92ec298e2db4e2aa6d4cff0f61fdee178f8889c84db35b9236f08c4c371cc7ff27a77b16699d531111d0eb3ead3696738ed2bd726f75add07f2c51017"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl" : "pkg:maven/org.slf4j/slf4j-simple@1.7.36?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.slf4j.org"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/qos-ch/slf4j/slf4j-simple"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.slf4j/slf4j-simple@1.7.36?type=jar"
    },
    {
      "publisher" : "Webtide",
      "group" : "org.eclipse.jetty.ee10",
      "name" : "jetty-ee10-servlet",
      "version" : "12.0.10",
      "description" : "Jetty Servlet Container",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a5e3d54bc2843d2a61dcd6b5888de567"
        },
        {
          "alg" : "SHA-1",
          "content" : "a8d087bde78f231084901553bb6829663b4a22f1"
        },
        {
          "alg" : "SHA-256",
          "content" : "d9d6132ce1a7e99cf01ea25b61d6a8a8c255ae6628357d22129d3b3b51d4b960"
        },
        {
          "alg" : "SHA-512",
          "content" : "992d9049ad368dc33afcc8b86a27b9c65a64d8f0d46e839fe21b40117172941f73a4a4267d5deb11153beec5680420768150b38613015f58fbfe8ec93f2d6504"
        },
        {
          "alg" : "SHA-384",
          "content" : "3a603d1e9f41a42cfe867e5199578da9994936a1b3d3a47ca0ea6668794444ebc94f1e3e341478b68be8dbcf6dd7e0d1"
        },
        {
          "alg" : "SHA3-384",
          "content" : "34d59a812da6a0dd67f02a06862f0bf9086ee5092225d11c2c152e54805ad875154f9fd695195aff5c54a569671ea951"
        },
        {
          "alg" : "SHA3-256",
          "content" : "44e9f7671c30886c189afcb1ac636709aa1b35aa580db6d23f347cae4e99cea9"
        },
        {
          "alg" : "SHA3-512",
          "content" : "80ff0382fb7b7a210094f6e5822c7085699ffe191b2596c8c5630df6e114533896596de47a757023858f60418f847ac964c91ebeb8137fb66efa291c60a77908"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jetty.ee10/jetty-ee10-servlet@12.0.10?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://eclipse.dev/jetty/jetty-ee10/jetty-ee10-servlet"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/jetty/jetty.project/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://www.eclipse.org/lists/jetty-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/jetty/jetty.project/jetty-ee10/jetty-ee10-servlet"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jetty.ee10/jetty-ee10-servlet@12.0.10?type=jar"
    },
    {
      "publisher" : "Eclipse Foundation",
      "group" : "jakarta.servlet",
      "name" : "jakarta.servlet-api",
      "version" : "6.0.0",
      "description" : "Eclipse Enterprise for Java (EE4J) is an open source initiative to create standard APIs, implementations of those APIs, and technology compatibility kits for Java runtimes that enable development, deployment, and management of server-side and cloud-native applications.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4bcb3175ed9b7aa3f038d082879ec2a8"
        },
        {
          "alg" : "SHA-1",
          "content" : "abecc699286e65035ebba9844c03931357a6a963"
        },
        {
          "alg" : "SHA-256",
          "content" : "c034eb1afb158987dbb53a5fea0cadf611c8dae8daadd59c44d9d5ab70129cef"
        },
        {
          "alg" : "SHA-512",
          "content" : "b810ce040ed0671a3161fb197845f3ae750cd38c474ef54c351b7b127ff3b4d624a26c33450c62474f42c1cde21c65324cda63b1b3ea0515a286e0bcb0c0c9d5"
        },
        {
          "alg" : "SHA-384",
          "content" : "2f02e56f5b0a3a7191b6cea6e3b872d8d29503299751c6dabfdf4d61b1ae2b431be9c13801083cd6e516b8f52ab38a95"
        },
        {
          "alg" : "SHA3-384",
          "content" : "373855d3aef3be1d54046c33d76daa0a3db62b04e0bfa5957670f17ede4f74426b9d858159e67eb6abc723278f272c23"
        },
        {
          "alg" : "SHA3-256",
          "content" : "cb8c3221eb78148915a75489df9d25665cd41b8949ede82c5ee7a792b1b32fe0"
        },
        {
          "alg" : "SHA3-512",
          "content" : "689137c5de2c0972392e181a4f03e5a1b3f839238839a28442da9aa91f4e5c2980eb48a0107c0fbcd2d35a44ab8a4d698fa197e0dadf264f3e547043fc15dba3"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl" : "pkg:maven/jakarta.servlet/jakarta.servlet-api@6.0.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://projects.eclipse.org/projects/ee4j.servlet"
        },
        {
          "type" : "distribution",
          "url" : "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/servlet-api/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/servlet-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/servlet-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/jakarta.servlet/jakarta.servlet-api@6.0.0?type=jar"
    },
    {
      "publisher" : "Webtide",
      "group" : "org.eclipse.jetty",
      "name" : "jetty-security",
      "version" : "12.0.10",
      "description" : "The common Jetty security implementation",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "968e3ce7af094dc5f7fcc0b136f983f9"
        },
        {
          "alg" : "SHA-1",
          "content" : "a7bd8056fa84439411f60fedd8a94b1983880cf9"
        },
        {
          "alg" : "SHA-256",
          "content" : "f8e6261f1d08ada301142c8183a483b512c91052f26e32bc7ec9864c39461816"
        },
        {
          "alg" : "SHA-512",
          "content" : "86dbf80b60132ad5393d30dc506b6c235d7837a5527aeba9e726047952de18a91ba0e8aaf51644c78bdf8c48f4e8cca2316ce767237adbac6c632ae2eb7fac37"
        },
        {
          "alg" : "SHA-384",
          "content" : "2d8bc1c281320af8f79b2cc952d2d41702b5382c87c4186216ef23b11e7e7a40a55779f8f4dfc3796412e8d709042cf0"
        },
        {
          "alg" : "SHA3-384",
          "content" : "a24bcc71328622248fbe9752d7b76c34dc52cb840695439659320f56643f62e21997cc7f9cfeb5fd4230b741d37ed794"
        },
        {
          "alg" : "SHA3-256",
          "content" : "e4a19ccb167e6e149ef317643fab1536d6d46bd3826a89d3d743add227caeae6"
        },
        {
          "alg" : "SHA3-512",
          "content" : "15a5ac6c2ee396a366bc068e0696386e8b3bf501c555729840c3cf021855f25b1d4f7bc0489bb2847649ea1a98d1d1ec3b7debaf65392035437602214402528d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jetty/jetty-security@12.0.10?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://eclipse.dev/jetty/jetty-core/jetty-security"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/jetty/jetty.project/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://www.eclipse.org/lists/jetty-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/jetty/jetty.project/jetty-core/jetty-security"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jetty/jetty-security@12.0.10?type=jar"
    },
    {
      "publisher" : "Webtide",
      "group" : "org.eclipse.jetty",
      "name" : "jetty-server",
      "version" : "12.0.10",
      "description" : "The legacy jetty server artifact.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b3ca6d7dc9899fef3bac42b87a244d45"
        },
        {
          "alg" : "SHA-1",
          "content" : "0dcdef1c9ead5040e6b637512ab1794191058a22"
        },
        {
          "alg" : "SHA-256",
          "content" : "87980d458878c4ea5f598785226733b8c70c0643ee25b2ca80480facf2dd2e3a"
        },
        {
          "alg" : "SHA-512",
          "content" : "05345ab0d64857eddb46f45e4a7dfab0ef0bf0295cf8d2756a29d44b58a02203c081e5d1236b3661767fe73a5f77a4d3f175bd87a252dd4e98c2dc9f4f18596a"
        },
        {
          "alg" : "SHA-384",
          "content" : "93c78f91ac59266e21f6a527d0b6480bc11f6b74ed29ffa7d3ded082bf643c7762f3c02fd1395ea2c6c6cc908c28bee9"
        },
        {
          "alg" : "SHA3-384",
          "content" : "f3d192fb5539ef8c200751bfa9909d8ce95b892c029170eba4b260a37c5864234d6ae9100145913fcbf92fcf700e78eb"
        },
        {
          "alg" : "SHA3-256",
          "content" : "327e6812bdabe3193563e9fda642c86762ed10225b2dbffc93d8a594bb778019"
        },
        {
          "alg" : "SHA3-512",
          "content" : "1674b23b5838e5415ec4f6105e4eff1c0b02aff47326ba754a1411de0821d9a5b1f73b93a4040b5aa0355fd210597499fe9a9b4cc619cfd968ef45be7b634190"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jetty/jetty-server@12.0.10?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://eclipse.dev/jetty/jetty-core/jetty-server"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/jetty/jetty.project/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://www.eclipse.org/lists/jetty-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/jetty/jetty.project/jetty-core/jetty-server"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jetty/jetty-server@12.0.10?type=jar"
    },
    {
      "publisher" : "Webtide",
      "group" : "org.eclipse.jetty",
      "name" : "jetty-http",
      "version" : "12.0.10",
      "description" : "The Eclipse Jetty Project",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "627fdf8c92bba25c7e1a4bb5ecfc4adb"
        },
        {
          "alg" : "SHA-1",
          "content" : "71f438b9cf1ba0b3411c5eddd386eeeeca25168a"
        },
        {
          "alg" : "SHA-256",
          "content" : "7cf9e68328a7e05748aca8d3eab7e31e0787481149a26faa0dddbb4642778f03"
        },
        {
          "alg" : "SHA-512",
          "content" : "6d271e8a231213bf9242dfbaf41deb2f7e9beb776c9a85dbbb479f70cc7431220fb1e1ad776370365e6152d4f28b101463dba08973a9be27207710c0c58b20f5"
        },
        {
          "alg" : "SHA-384",
          "content" : "62a0c8ff1c642e61da40e8fea16529c367b00d8e1147f121880f347c6c109881fe5aa2051efa2e145d9b5b9e14cf4ad0"
        },
        {
          "alg" : "SHA3-384",
          "content" : "aeba5c1dfde787d09a3a91b88a03a7a3c67439e02cabf2779440dcc548943ae7d7e4df4ef6f36df5945c9dd8c5b67508"
        },
        {
          "alg" : "SHA3-256",
          "content" : "b369af6930e364f8c72787bfb68e63d62de323de4c7ac3514af4fcfc382ad466"
        },
        {
          "alg" : "SHA3-512",
          "content" : "7afe1b8030c2998576844a9950a3ef1fc76afd2a80254970fe4cf341260de4e43d54a5c768a7070ba5fe87bc306acacb3bfd6faa482fba2644e72d9be51611f3"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jetty/jetty-http@12.0.10?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://eclipse.dev/jetty/jetty-core/jetty-http"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/jetty/jetty.project/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://www.eclipse.org/lists/jetty-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/jetty/jetty.project/jetty-core/jetty-http"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jetty/jetty-http@12.0.10?type=jar"
    },
    {
      "publisher" : "Webtide",
      "group" : "org.eclipse.jetty",
      "name" : "jetty-util",
      "version" : "12.0.10",
      "description" : "Utility classes for Jetty",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0902d8b499b63c072e18f00b731a10ae"
        },
        {
          "alg" : "SHA-1",
          "content" : "ec7c95b5a289560f4a7be57170f4fdbedde72b92"
        },
        {
          "alg" : "SHA-256",
          "content" : "c2efa291ba43ca171ce3eedc8bf4d46af89d15cd1e1cd91b351b1d55bf96364a"
        },
        {
          "alg" : "SHA-512",
          "content" : "ebb460961871339418460ef3c6d710217cf992568a24375ad1b3403197dad23aa58e28fb2822cbe66034c43ddc8859df386e1bddac9c05e29301be7167d87fc6"
        },
        {
          "alg" : "SHA-384",
          "content" : "f3729a2204fa07e79d727434a9cfab4d44bd15639926e692fa1ef99b40a317b9896178e5912355e33e8343a40781d2d1"
        },
        {
          "alg" : "SHA3-384",
          "content" : "368b886195de7d2ac7d8dd6815b320dede78ce3ecb6731ea1b97fc4a2c39876718ec4fd4b92fe547d07a9a1e4e63fd3e"
        },
        {
          "alg" : "SHA3-256",
          "content" : "3f6ca02e1bc309ae10b3e971ecc2b7c32b651a59898ebe0ee1b5832898528ebc"
        },
        {
          "alg" : "SHA3-512",
          "content" : "eedc879ab09d45945bf8904450126cfc2e7043e924fd714d81b3f5466e58352d33471b544754020b0d08e0819fa1f16c5c82b407b1c167f56479d341e518ddef"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jetty/jetty-util@12.0.10?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://eclipse.dev/jetty/jetty-core/jetty-util"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/jetty/jetty.project/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://www.eclipse.org/lists/jetty-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/jetty/jetty.project/jetty-core/jetty-util"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jetty/jetty-util@12.0.10?type=jar"
    },
    {
      "publisher" : "Webtide",
      "group" : "org.eclipse.jetty",
      "name" : "jetty-io",
      "version" : "12.0.10",
      "description" : "The Eclipse Jetty Project",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e8c9ffca5e14a02ef80fafd3cbfcf101"
        },
        {
          "alg" : "SHA-1",
          "content" : "4d5ddfc6ad4d6504531861806fade68c7d477f1b"
        },
        {
          "alg" : "SHA-256",
          "content" : "7d9031d2efc1a1d872888340075651b5c1e2516b44e499770c97823c8017d333"
        },
        {
          "alg" : "SHA-512",
          "content" : "59153d80cb3cdd72b2a670f8224006613edaa4ff0fb946f0f8d80b0ab1cfd2e3363d3b59edde9ac9956025ab2ee5cf50f4e7292922455661f025604e560853f4"
        },
        {
          "alg" : "SHA-384",
          "content" : "02befcbc41cfbe0431b9d3f3b1ba2380f2d96969ff8237e72e88e596e0c53efa4d692bd91ec0fc3555a045fca89201d8"
        },
        {
          "alg" : "SHA3-384",
          "content" : "7d976f7d84e1a6748f355261865eb66502e22b39b5a09bd83928370b3206aa8c311eee220476c967a210a0f800519b37"
        },
        {
          "alg" : "SHA3-256",
          "content" : "e557ffc5e86c97a5b65922a2bbfe645c7a7e7b3a20414a938abfad4c2a7c6108"
        },
        {
          "alg" : "SHA3-512",
          "content" : "6b84180b92b32a160c8a0650e227012800e9ac80c83fcbee07cb13730546877573668431795a51c3e394368facf38a1e79b0ab11df868ec4e5894b30d361993d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jetty/jetty-io@12.0.10?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://eclipse.dev/jetty/jetty-core/jetty-io"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/jetty/jetty.project/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://www.eclipse.org/lists/jetty-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/jetty/jetty.project/jetty-core/jetty-io"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jetty/jetty-io@12.0.10?type=jar"
    },
    {
      "publisher" : "Webtide",
      "group" : "org.eclipse.jetty",
      "name" : "jetty-session",
      "version" : "12.0.10",
      "description" : "The common jetty session implementation",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "796a7b4877a32b3114e4e7d0ea069fa5"
        },
        {
          "alg" : "SHA-1",
          "content" : "96dd580a79d938b532e8cff47475efbcaa80ea58"
        },
        {
          "alg" : "SHA-256",
          "content" : "08aae11263cd1f0c698fb3f07cf77662a436b62486bf41a1215a335718a944fc"
        },
        {
          "alg" : "SHA-512",
          "content" : "a679722bc3a8bcdb2e4d96f43a34da27b672d3808e054dc82060ddaf303709e230f73b4611931d24184520f2fd79747a6113d8b438c7a34140df47908af2be2e"
        },
        {
          "alg" : "SHA-384",
          "content" : "f228471ac3efd422fd2bce6b158f861a4864556e49937b1f6ea1934d3fc5e18ea2562c2c2f119ed0a5d543fc53b28a01"
        },
        {
          "alg" : "SHA3-384",
          "content" : "63f91ffcb63a69cd137fee51f034f19d93548cbc233f6f2a0dba0b87fe296e53196784b2186a5c2955d51a768cb4d7db"
        },
        {
          "alg" : "SHA3-256",
          "content" : "4544259999d3928590f4a5c66b223202318b30224d31bf5a33e86c67f4c73128"
        },
        {
          "alg" : "SHA3-512",
          "content" : "8f9c127571ce9da3b2f371380afb3d14bd2b872f2741a770ef055f9c26e57a20ab6d1ea6dd2e71761358cf3d5958626eea2adff76dcac963434c888aa593f5d6"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jetty/jetty-session@12.0.10?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://eclipse.dev/jetty/jetty-core/jetty-session"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/jetty/jetty.project/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://www.eclipse.org/lists/jetty-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/jetty/jetty.project/jetty-core/jetty-session"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jetty/jetty-session@12.0.10?type=jar"
    },
    {
      "publisher" : "Eclipse JGit Project",
      "group" : "org.eclipse.jgit",
      "name" : "org.eclipse.jgit.lfs",
      "version" : "7.0.0.202407311305-m2",
      "description" : "JGit Large File Storage (LFS) implementation.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "ccc7d301901d201f917e609f2cf45847"
        },
        {
          "alg" : "SHA-1",
          "content" : "ae65b2d43bd73d29cfbc42584e9a11bc25643a50"
        },
        {
          "alg" : "SHA-256",
          "content" : "b7e758abf69ca12172e84400df15ac3edaf0e2290abd7214e4fb8cb30ab9f0a6"
        },
        {
          "alg" : "SHA-512",
          "content" : "15b72fcfa8ee97bdfad2e853708644d967ef21a14593aa9b990e9898f6576b3b5a6bc91e62367311235897e035d4c8bb2fb8c8af95b1e59eaae36c098da8cf23"
        },
        {
          "alg" : "SHA-384",
          "content" : "06399592131bf91446c32d8085ba4605c46278aff7a717de5b35c193d23873890acc426dcc37a27d17266fb0d220eeff"
        },
        {
          "alg" : "SHA3-384",
          "content" : "62fca54e55ae37011ecb42eeb3b050592bdff5e3c44c1be0a666b19ffa5bb5712e2106e27d8eeb3adecbd98f52c2d29e"
        },
        {
          "alg" : "SHA3-256",
          "content" : "89cf0f474affc294ccb53c5f2af5e5a2e0f871f467ead7369b3494dd438973b0"
        },
        {
          "alg" : "SHA3-512",
          "content" : "7ec79195dd6dc7c2863b3fc659ae0a122e6e766b05232e3263bac3d49361b5b870bcfa4b676fe0f4e287d4c9fdb7fd671195890e7eec79fcddc33f7617fa876e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause",
            "url" : "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.lfs@7.0.0.202407311305-m2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.eclipse.org/jgit//org.eclipse.jgit.lfs"
        },
        {
          "type" : "build-system",
          "url" : "https://ci.eclipse.org/jgit"
        },
        {
          "type" : "distribution",
          "url" : "https://repo.eclipse.org/content/repositories/jgit-releases/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-jgit/jgit/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "http://dev.eclipse.org/mhonarc/lists/jgit-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://eclipse.gerrithub.io/plugins/gitiles/eclipse-jgit/jgit/org.eclipse.jgit.lfs"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.lfs@7.0.0.202407311305-m2?type=jar"
    },
    {
      "group" : "com.google.code.gson",
      "name" : "gson",
      "version" : "2.11.0",
      "description" : "Gson JSON library",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0c69b9199d3a4e6c34dc03619ff7feee"
        },
        {
          "alg" : "SHA-1",
          "content" : "527175ca6d81050b53bdd4c457a6d6e017626b0e"
        },
        {
          "alg" : "SHA-256",
          "content" : "57928d6e5a6edeb2abd3770a8f95ba44dce45f3b23b7a9dc2b309c581552a78b"
        },
        {
          "alg" : "SHA-512",
          "content" : "b8c91426a8275b42ea5c55b104308ffbe656ae3354bc661f62173352e53a4818a009e4dd82bc6cf518c77fda5a4d2eab0d3ad832581a8f0d87966ef04e6c025a"
        },
        {
          "alg" : "SHA-384",
          "content" : "8720df1ca6f2258a71b7f2307e2b49f0ad2379bc93e93be6a6c619e52b95dbe5a080a49149e8708ce1890e97b47b9bbf"
        },
        {
          "alg" : "SHA3-384",
          "content" : "e3e268c6f8c75f018c7c8160fba7fe373242d45a2313b5c7823f3f75fcc04bbf93cb43c08ba2998b01b8a3c685d77280"
        },
        {
          "alg" : "SHA3-256",
          "content" : "aa4162683be07c5de9c962e88301054ea42a9bed2257a5e4e650545624a2c094"
        },
        {
          "alg" : "SHA3-512",
          "content" : "31730c961b8920673ac3e973a16272752a46df479bfc0ce4dfb6dd324e32d34e5006247d6b5508b8fdc785ba5ffb42534ea3fa2d7094191febcac60654230e24"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.code.gson/gson@2.11.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/google/gson"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/google/gson/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/google/gson/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.code.gson/gson@2.11.0?type=jar"
    },
    {
      "publisher" : "Google LLC",
      "group" : "com.google.errorprone",
      "name" : "error_prone_annotations",
      "version" : "2.27.0",
      "description" : "Error Prone is a static analysis tool for Java that catches common programming mistakes at compile-time.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "fb183180666ce3d0a24ef7ba02d7193c"
        },
        {
          "alg" : "SHA-1",
          "content" : "91b2c29d8a6148b5e2e4930f070d4840e2e48e34"
        },
        {
          "alg" : "SHA-256",
          "content" : "24c923372c58e35d0b9f16a028929bb9aedc77521867c274f2bd0735df5ba1f5"
        },
        {
          "alg" : "SHA-512",
          "content" : "479f3c5e25a7ccd90adf70a9b1a71bae18205681ce966618b2ba28aea1b10c087b10ca7172e7b34384901b5e8d2dd009f1cdcbcd2a01be55082d276245de0a35"
        },
        {
          "alg" : "SHA-384",
          "content" : "b71b73336df13a8d102933d851f2ceb486d8554cfdc717f38fb2d36234a7b0c9bc015112c9d0c7c3520a081fa85c55b7"
        },
        {
          "alg" : "SHA3-384",
          "content" : "94e94fd4ad6e3340aff5b059746395abc4952d4b7f570576f5eee0efb7f8801f2ac0b4c95aba400afc8ac1204e96e630"
        },
        {
          "alg" : "SHA3-256",
          "content" : "faa04401fbf3938684fa829d86310ac894c0646b2cdff18106f5384fcd427f84"
        },
        {
          "alg" : "SHA3-512",
          "content" : "18fdd0dd19823353693fab456226914179623be005d27a85250f5e8758d433c9e88f639556a61a03210339be6dafa86a57068e92e0254b305f1a17add4b805c9"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.27.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://errorprone.info/error_prone_annotations"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/google/error-prone/error_prone_annotations"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.27.0?type=jar"
    },
    {
      "publisher" : "Eclipse JGit Project",
      "group" : "org.eclipse.jgit",
      "name" : "org.eclipse.jgit.lfs.server",
      "version" : "7.0.0.202407311305-m2",
      "description" : "JGit Large File Storage Server implementation.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0528dd0ddb4ca627038ee06356e7c769"
        },
        {
          "alg" : "SHA-1",
          "content" : "2236905b93eb5716b05b50cbed9b1236781e67c4"
        },
        {
          "alg" : "SHA-256",
          "content" : "321d1ca67adf9ff42365eba61ab2502dbb866c1526ce5c93e6f0c503cd7bef83"
        },
        {
          "alg" : "SHA-512",
          "content" : "831d5053d6c59a13cdc922ae16afad69dc55391ff87fca5695cb5122050c1f20d16d99e92da8660952f16a4db296e4c636d4c6177508643eadf0ecc5a7dec966"
        },
        {
          "alg" : "SHA-384",
          "content" : "b264ff8601ac38dd25df823e051e9c5cd22b96d09b06c809b0a98fac7ac3b758146195df3d7ebb5bef0c04164f4e7424"
        },
        {
          "alg" : "SHA3-384",
          "content" : "3edef394f38686484d2397a5509c6e91c65ef37d972352911dc3c47bddf817ad03ff758435f762582bbb3f3cd5a73266"
        },
        {
          "alg" : "SHA3-256",
          "content" : "27385534968a61bf65f0c50180a34a6ddfe2d015ca24f78398a7ac86f7be4024"
        },
        {
          "alg" : "SHA3-512",
          "content" : "b5de6d1938a753654f8d5277c1361f68da156cd58307631604f35a71954b8a14cfbba08722ce756c1ea1187195799be4855a2d61bbf1f7b3b528e88082b9f7c1"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause",
            "url" : "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.lfs.server@7.0.0.202407311305-m2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.eclipse.org/jgit//org.eclipse.jgit.lfs.server"
        },
        {
          "type" : "build-system",
          "url" : "https://ci.eclipse.org/jgit"
        },
        {
          "type" : "distribution",
          "url" : "https://repo.eclipse.org/content/repositories/jgit-releases/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-jgit/jgit/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "http://dev.eclipse.org/mhonarc/lists/jgit-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://eclipse.gerrithub.io/plugins/gitiles/eclipse-jgit/jgit/org.eclipse.jgit.lfs.server"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.lfs.server@7.0.0.202407311305-m2?type=jar"
    },
    {
      "group" : "org.tukaani",
      "name" : "xz",
      "version" : "1.9",
      "description" : "XZ data compression",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "57c2fbfeb55e307ccae52e5322082e02"
        },
        {
          "alg" : "SHA-1",
          "content" : "1ea4bec1a921180164852c65006d928617bd2caf"
        },
        {
          "alg" : "SHA-256",
          "content" : "211b306cfc44f8f96df3a0a3ddaf75ba8c5289eed77d60d72f889bb855f535e5"
        },
        {
          "alg" : "SHA-512",
          "content" : "a4362db234d4e83683e90f5baf90c82107450cc4404acab96e3fab14b8a3d4588a19722171d32f27d18463682a6994cad9af0b1065c954e3a77ea7bdcf586bac"
        },
        {
          "alg" : "SHA-384",
          "content" : "aa30349b094723369908369a18e2cb5beb5b7ca0b24b4d56c2f5725fae152220f6526466672b22bfec939e2e0622a01d"
        },
        {
          "alg" : "SHA3-384",
          "content" : "b3e1fee7784188df5e1931c9e8137ac0e20e63f66f93e7f938a448fc0b3adb4be5205c7a5f1835007e233fee2696fc2c"
        },
        {
          "alg" : "SHA3-256",
          "content" : "92eff603ed0aab557e1a45e17a74e80d8ec656b5f137197b23c429c903fa448f"
        },
        {
          "alg" : "SHA3-512",
          "content" : "b290f92958f8cd91705331d8411140c23957ab8b568fbe19a70f4f1dc97eddc13d3a200df28a02ab5911ce18f546c33f720878be0f727edac839a6e63ee66ece"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "Public Domain"
          }
        }
      ],
      "purl" : "pkg:maven/org.tukaani/xz@1.9?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://tukaani.org/xz/java.html"
        },
        {
          "type" : "vcs",
          "url" : "https://git.tukaani.org/?p=xz-java.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.tukaani/xz@1.9?type=jar"
    }
  ],
  "dependencies" : [
    {
      "ref" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.pgm@7.0.0.202407311305-m2?type=jar",
      "dependsOn" : [
        "pkg:maven/args4j/args4j@2.37?type=jar",
        "pkg:maven/org.apache.commons/commons-compress@1.26.2?type=jar",
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.archive@7.0.0.202407311305-m2?type=jar",
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit@7.0.0.202407311305-m2?type=jar",
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.ui@7.0.0.202407311305-m2?type=jar",
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.gpg.bc@7.0.0.202407311305-m2?type=jar",
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.http.apache@7.0.0.202407311305-m2?type=jar",
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.ssh.apache@7.0.0.202407311305-m2?type=jar",
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.ssh.apache.agent@7.0.0.202407311305-m2?type=jar",
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.ssh.jsch@7.0.0.202407311305-m2?type=jar",
        "pkg:maven/org.apache.httpcomponents/httpclient@4.5.14?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/org.slf4j/slf4j-simple@1.7.36?type=jar",
        "pkg:maven/org.eclipse.jetty.ee10/jetty-ee10-servlet@12.0.10?type=jar",
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.lfs@7.0.0.202407311305-m2?type=jar",
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.lfs.server@7.0.0.202407311305-m2?type=jar",
        "pkg:maven/org.tukaani/xz@1.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/args4j/args4j@2.37?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-compress@1.26.2?type=jar",
      "dependsOn" : [
        "pkg:maven/commons-codec/commons-codec@1.17.0?type=jar",
        "pkg:maven/commons-io/commons-io@2.16.1?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/commons-codec/commons-codec@1.17.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-io/commons-io@2.16.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.archive@7.0.0.202407311305-m2?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.commons/commons-compress@1.26.2?type=jar",
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit@7.0.0.202407311305-m2?type=jar",
        "pkg:maven/org.osgi/org.osgi.core@6.0.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit@7.0.0.202407311305-m2?type=jar",
      "dependsOn" : [
        "pkg:maven/com.googlecode.javaewah/JavaEWAH@1.2.3?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.17.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.googlecode.javaewah/JavaEWAH@1.2.3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.osgi/org.osgi.core@6.0.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.ui@7.0.0.202407311305-m2?type=jar",
      "dependsOn" : [
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit@7.0.0.202407311305-m2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.gpg.bc@7.0.0.202407311305-m2?type=jar",
      "dependsOn" : [
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit@7.0.0.202407311305-m2?type=jar",
        "pkg:maven/org.bouncycastle/bcpg-jdk18on@1.78.1?type=jar",
        "pkg:maven/org.bouncycastle/bcprov-jdk18on@1.78.1?type=jar",
        "pkg:maven/org.bouncycastle/bcutil-jdk18on@1.78.1?type=jar",
        "pkg:maven/org.bouncycastle/bcpkix-jdk18on@1.78.1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.bouncycastle/bcpg-jdk18on@1.78.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.bouncycastle/bcprov-jdk18on@1.78.1?type=jar",
        "pkg:maven/org.bouncycastle/bcutil-jdk18on@1.78.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.bouncycastle/bcprov-jdk18on@1.78.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.bouncycastle/bcutil-jdk18on@1.78.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.bouncycastle/bcprov-jdk18on@1.78.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.bouncycastle/bcpkix-jdk18on@1.78.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.bouncycastle/bcprov-jdk18on@1.78.1?type=jar",
        "pkg:maven/org.bouncycastle/bcutil-jdk18on@1.78.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.http.apache@7.0.0.202407311305-m2?type=jar",
      "dependsOn" : [
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit@7.0.0.202407311305-m2?type=jar",
        "pkg:maven/org.apache.httpcomponents/httpclient@4.5.14?type=jar",
        "pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.httpcomponents/httpclient@4.5.14?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar",
        "pkg:maven/commons-logging/commons-logging@1.3.2?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.17.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-logging/commons-logging@1.3.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.ssh.apache@7.0.0.202407311305-m2?type=jar",
      "dependsOn" : [
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit@7.0.0.202407311305-m2?type=jar",
        "pkg:maven/org.apache.sshd/sshd-osgi@2.13.1?type=jar",
        "pkg:maven/org.apache.sshd/sshd-sftp@2.13.1?type=jar",
        "pkg:maven/net.i2p.crypto/eddsa@0.3.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.sshd/sshd-osgi@2.13.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/org.slf4j/jcl-over-slf4j@1.7.32?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.slf4j/jcl-over-slf4j@1.7.32?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.sshd/sshd-sftp@2.13.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/org.slf4j/jcl-over-slf4j@1.7.32?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/net.i2p.crypto/eddsa@0.3.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.ssh.apache.agent@7.0.0.202407311305-m2?type=jar",
      "dependsOn" : [
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit@7.0.0.202407311305-m2?type=jar",
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.ssh.apache@7.0.0.202407311305-m2?type=jar",
        "pkg:maven/net.java.dev.jna/jna@5.14.0?type=jar",
        "pkg:maven/net.java.dev.jna/jna-platform@5.14.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/net.java.dev.jna/jna@5.14.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/net.java.dev.jna/jna-platform@5.14.0?type=jar",
      "dependsOn" : [
        "pkg:maven/net.java.dev.jna/jna@5.14.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.ssh.jsch@7.0.0.202407311305-m2?type=jar",
      "dependsOn" : [
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit@7.0.0.202407311305-m2?type=jar",
        "pkg:maven/com.jcraft/jsch@0.1.55?type=jar",
        "pkg:maven/com.jcraft/jzlib@1.1.3?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.jcraft/jsch@0.1.55?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.jcraft/jzlib@1.1.3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.slf4j/slf4j-simple@1.7.36?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jetty.ee10/jetty-ee10-servlet@12.0.10?type=jar",
      "dependsOn" : [
        "pkg:maven/jakarta.servlet/jakarta.servlet-api@6.0.0?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-security@12.0.10?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-server@12.0.10?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-session@12.0.10?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/jakarta.servlet/jakarta.servlet-api@6.0.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jetty/jetty-security@12.0.10?type=jar",
      "dependsOn" : [
        "pkg:maven/org.eclipse.jetty/jetty-server@12.0.10?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jetty/jetty-server@12.0.10?type=jar",
      "dependsOn" : [
        "pkg:maven/org.eclipse.jetty/jetty-http@12.0.10?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-io@12.0.10?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jetty/jetty-http@12.0.10?type=jar",
      "dependsOn" : [
        "pkg:maven/org.eclipse.jetty/jetty-io@12.0.10?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-util@12.0.10?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jetty/jetty-io@12.0.10?type=jar",
      "dependsOn" : [
        "pkg:maven/org.eclipse.jetty/jetty-util@12.0.10?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jetty/jetty-util@12.0.10?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jetty/jetty-session@12.0.10?type=jar",
      "dependsOn" : [
        "pkg:maven/org.eclipse.jetty/jetty-server@12.0.10?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.lfs@7.0.0.202407311305-m2?type=jar",
      "dependsOn" : [
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit@7.0.0.202407311305-m2?type=jar",
        "pkg:maven/com.google.code.gson/gson@2.11.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.google.code.gson/gson@2.11.0?type=jar",
      "dependsOn" : [
        "pkg:maven/com.google.errorprone/error_prone_annotations@2.27.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.27.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.lfs.server@7.0.0.202407311305-m2?type=jar",
      "dependsOn" : [
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit@7.0.0.202407311305-m2?type=jar",
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.lfs@7.0.0.202407311305-m2?type=jar",
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.http.apache@7.0.0.202407311305-m2?type=jar",
        "pkg:maven/com.google.code.gson/gson@2.11.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.tukaani/xz@1.9?type=jar",
      "dependsOn" : [ ]
    }
  ]
}