{
  "bomFormat" : "CycloneDX",
  "specVersion" : "1.4",
  "serialNumber" : "urn:uuid:bd9a7b29-1862-39e3-9351-207565800c65",
  "version" : 1,
  "metadata" : {
    "tools" : [
      {
        "vendor" : "OWASP Foundation",
        "name" : "CycloneDX Maven plugin",
        "version" : "2.8.0",
        "hashes" : [
          {
            "alg" : "MD5",
            "content" : "76ffec6a7ddd46b2b24517411874eb99"
          },
          {
            "alg" : "SHA-1",
            "content" : "5b0d5b41975b53be4799b9621b4af0cfc41d44b6"
          },
          {
            "alg" : "SHA-256",
            "content" : "6852aa0f4e42a2db745bab80e384951a6a65b9215d041081d675780999027e81"
          },
          {
            "alg" : "SHA-512",
            "content" : "417de20fcdcb11c9713bacbd57290d8e68037fdb4553fd31b8cb08bd760ad52dc65ea88ad4be15844ad3fd5a4d3e440d2f70326f2fe1e63ec78e059c9a883f8d"
          },
          {
            "alg" : "SHA-384",
            "content" : "5eb755c6492e7a7385fa9a1e1f4517875bcb834b2df437808a37a2d6f5285df428741762305980315a63fcef1406597d"
          },
          {
            "alg" : "SHA3-384",
            "content" : "0fe16a47cf7aab0b22251dafcc39939b68e8f1778093309d8d2060b51a08df445a8b8ed5a9561669faf2e55f907c76d8"
          },
          {
            "alg" : "SHA3-256",
            "content" : "3e5a1eb5ab7d0797498862794709ff8eaaa071fe4cc9ec77f52db7e2f97ef487"
          },
          {
            "alg" : "SHA3-512",
            "content" : "59281a3e29e76270d7f44b40b5b9f05e55f1ae3ec716d80add806f360940809e3813998ac7c5758043b8e248aed73b86e37dc506cdb4cde03c16bb617d8e5a3a"
          }
        ]
      }
    ],
    "component" : {
      "publisher" : "Eclipse JGit Project",
      "group" : "org.eclipse.jgit",
      "name" : "org.eclipse.jgit.ssh.jsch.test",
      "version" : "7.0.0.202407311305-m2",
      "description" : "JUnit tests for the JGit SSH support based on JSch.",
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause",
            "url" : "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.ssh.jsch.test@7.0.0.202407311305-m2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.eclipse.org/jgit//org.eclipse.jgit.ssh.jsch.test"
        },
        {
          "type" : "build-system",
          "url" : "https://ci.eclipse.org/jgit"
        },
        {
          "type" : "distribution",
          "url" : "https://repo.eclipse.org/content/repositories/jgit-releases/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-jgit/jgit/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "http://dev.eclipse.org/mhonarc/lists/jgit-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://eclipse.gerrithub.io/plugins/gitiles/eclipse-jgit/jgit/org.eclipse.jgit.ssh.jsch.test"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.ssh.jsch.test@7.0.0.202407311305-m2?type=jar"
    },
    "properties" : [
      {
        "name" : "maven.goal",
        "value" : "makeBom"
      },
      {
        "name" : "maven.scopes",
        "value" : "compile,provided,runtime,system"
      },
      {
        "name" : "maven.optional.unused",
        "value" : "true"
      },
      {
        "name" : "cdx:reproducible",
        "value" : "enabled"
      }
    ]
  },
  "components" : [
    {
      "publisher" : "JUnit",
      "group" : "junit",
      "name" : "junit",
      "version" : "4.13.2",
      "description" : "JUnit is a unit testing framework for Java, created by Erich Gamma and Kent Beck.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "d98a9a02a99a9acd22d7653cbcc1f31f"
        },
        {
          "alg" : "SHA-1",
          "content" : "8ac9e16d933b6fb43bc7f576336b8f4d7eb5ba12"
        },
        {
          "alg" : "SHA-256",
          "content" : "8e495b634469d64fb8acfa3495a065cbacc8a0fff55ce1e31007be4c16dc57d3"
        },
        {
          "alg" : "SHA-512",
          "content" : "a31b9950f929a7e5a600d89787ef40e42a8a8e2392e210d0c0f45b3572937670a18a524f1815508cd1152cd1eaa7275cb7430ba45c053be365c83c231bccd3f0"
        },
        {
          "alg" : "SHA-384",
          "content" : "9f85c56a77c699eb87630b9e8224068a34c296bcd9aadb52248dd4665036f5bf1048fe75e5cb590b59e7855ca716acae"
        },
        {
          "alg" : "SHA3-384",
          "content" : "590cfd9396424583879ca8ad732870406bab18325ac72fb2bbe188b9611278d6341700badf7cfc32525b8ff42900c905"
        },
        {
          "alg" : "SHA3-256",
          "content" : "a06b3fd2fd1d9f4306b58125484e3605a395afe5ffe2c801e43ae462f366a430"
        },
        {
          "alg" : "SHA3-512",
          "content" : "a6d25ce3c14f9065f06dfd0e68e1dad5c03bd5de0a302c44ca4733d2cb87ec1bc6f0abd36d65aeee8caf328b6881432c4b682fa4b4b1fa931c3c950de5129fb2"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-1.0",
            "url" : "http://www.eclipse.org/legal/epl-v10.html"
          }
        }
      ],
      "purl" : "pkg:maven/junit/junit@4.13.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://junit.org"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/junit-team/junit4/actions"
        },
        {
          "type" : "distribution",
          "url" : "https://github.com/junit-team/junit4/wiki/Download-and-Install"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/junit-team/junit4/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/junit-team/junit4"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/junit/junit@4.13.2?type=jar"
    },
    {
      "group" : "org.hamcrest",
      "name" : "hamcrest-core",
      "version" : "1.3",
      "description" : "This is the core API of hamcrest matcher framework to be used by third-party framework providers. This includes the a foundation set of matcher implementations for common operations.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6393363b47ddcbba82321110c3e07519"
        },
        {
          "alg" : "SHA-1",
          "content" : "42a25dc3219429f0e5d060061f71acb49bf010a0"
        },
        {
          "alg" : "SHA-256",
          "content" : "66fdef91e9739348df7a096aa384a5685f4e875584cce89386a7a47251c4d8e9"
        },
        {
          "alg" : "SHA-512",
          "content" : "e237ae735aac4fa5a7253ec693191f42ef7ddce384c11d29fbf605981c0be077d086757409acad53cb5b9e53d86a07cc428d459ff0f5b00d32a8cbbca390be49"
        },
        {
          "alg" : "SHA-384",
          "content" : "4b5297d2a12cc32b824153afc83f1ba9f1869ca288330f0a2f759659d09e4c420eb6ba4a1efbfa0657b625edd41293d5"
        },
        {
          "alg" : "SHA3-384",
          "content" : "b14d34985c0a78cf0ba19b5a18bffd403e08adcb2afde228ddef6e16121c7046dbebf58c04d3419311c4496c48aa93be"
        },
        {
          "alg" : "SHA3-256",
          "content" : "f679af77deedf69b3c3066f7916583848c6fd32a950f9c0b0e2ef1da121717ba"
        },
        {
          "alg" : "SHA3-512",
          "content" : "bca821931e438a1977b7b4356b5f8cebf485634f82159d505c48267c34e6a0f4fde9c2917331365f66dc0e52e2ca3a2db5256863584110c27ecebefc28741f63"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.hamcrest/hamcrest-core@1.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/hamcrest/JavaHamcrest/hamcrest-core"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/hamcrest/JavaHamcrest/hamcrest-core"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.hamcrest/hamcrest-core@1.3?type=jar"
    },
    {
      "publisher" : "Eclipse JGit Project",
      "group" : "org.eclipse.jgit",
      "name" : "org.eclipse.jgit",
      "version" : "7.0.0.202407311305-m2",
      "description" : "Repository access and algorithms",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b294b8aeaadeb8d4c1ef3d44c6cf3eae"
        },
        {
          "alg" : "SHA-1",
          "content" : "c9e04dd7ee36a49453476847402ea14ac7c2a313"
        },
        {
          "alg" : "SHA-256",
          "content" : "224df83336844af3b3442582802064a8ed930c2ab687d2c8fc6e699284251fff"
        },
        {
          "alg" : "SHA-512",
          "content" : "1bb65677b65cb96800e5813e0fe5612225cd0fc50f23492815511dd8b860faa989d8f545c0f1951cde5e9ba47b4baafd90b325d35200dcb9919ff75d63d0b9f7"
        },
        {
          "alg" : "SHA-384",
          "content" : "0eca13a0eb00fbd5676a2293e4686b0013b388dcd07c1eb624989def0901adaba71ce4f1b17a9a45a088a44a3d664a0f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "69b1daf0d7cc62a7b3702f3fd860665351661110d7c83a8ceb17f78b8324febf59d223abdbae2f5814f58f4441dd4a39"
        },
        {
          "alg" : "SHA3-256",
          "content" : "4e04c0956b8af87347fb7b9e5165575efacdb7a6f81ecf226c288659bcb2fbc8"
        },
        {
          "alg" : "SHA3-512",
          "content" : "4e890f02b3f6c19d7cabf55a9ceca9cbc585e08490a127a7cfe8e91b0c7e21cb4095c1e80698215af5e7258051a1e9d0e03c39a0b5394257f065d09bf7d6e7d7"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause",
            "url" : "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit@7.0.0.202407311305-m2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.eclipse.org/jgit//org.eclipse.jgit"
        },
        {
          "type" : "build-system",
          "url" : "https://ci.eclipse.org/jgit"
        },
        {
          "type" : "distribution",
          "url" : "https://repo.eclipse.org/content/repositories/jgit-releases/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-jgit/jgit/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "http://dev.eclipse.org/mhonarc/lists/jgit-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://eclipse.gerrithub.io/plugins/gitiles/eclipse-jgit/jgit/org.eclipse.jgit"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit@7.0.0.202407311305-m2?type=jar"
    },
    {
      "group" : "com.googlecode.javaewah",
      "name" : "JavaEWAH",
      "version" : "1.2.3",
      "description" : "The bit array data structure is implemented in Java as the BitSet class. Unfortunately, this fails to scale without compression. JavaEWAH is a word-aligned compressed variant of the Java bitset class. It uses a 64-bit run-length encoding (RLE) compression scheme. The goal of word-aligned compression is not to achieve the best compression, but rather to improve query processing time. Hence, we try to save CPU cycles, maybe at the expense of storage. However, the EWAH scheme we implemented is always more efficient storage-wise than an uncompressed bitmap (implemented in Java as the BitSet class). Unlike some alternatives, javaewah does not rely on a patented scheme.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "8fdeda28c1fb10e67b3d79f86bef5e61"
        },
        {
          "alg" : "SHA-1",
          "content" : "13a27c856e0c8808cee9a64032c58eee11c3adc9"
        },
        {
          "alg" : "SHA-256",
          "content" : "d65226949713c4c61a784f41c51167e7b0316f93764398ebba9e4336b3d954c2"
        },
        {
          "alg" : "SHA-512",
          "content" : "48cd9df9252c58e9ffe4583e68607944bcdf2ad7a3be7b4317467f503c4f56cdbde358ca7c4f34fa620d01615072a42f3a572fc4f1237e266310b7508e79bcac"
        },
        {
          "alg" : "SHA-384",
          "content" : "d1fd074f21b8a54a07d3f4579376d7c3ab72f24814ebc9ba92344e9da4721e9bfa3cda3a599137e4ddf2395a3c5b88e4"
        },
        {
          "alg" : "SHA3-384",
          "content" : "a553864f196f73c139a104170ab79e780046fb5f322072c5494a6590361021f875afd7168f858b0531b61918ab49b94e"
        },
        {
          "alg" : "SHA3-256",
          "content" : "bab97f3f893af36c36218a151b0c3fece27d47f358cc19e1ca9c22d77942bb76"
        },
        {
          "alg" : "SHA3-512",
          "content" : "be817b93c7093d44ec8dded565d7e5651772ce38e9c72283c05191b33d0ecb2798cd385395f553500446573ac49dccc21f4ba3067d71eb89e03daa384d0193be"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.googlecode.javaewah/JavaEWAH@1.2.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/lemire/javaewah"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/lemire/javaewah/issues"
        },
        {
          "type" : "vcs",
          "url" : "scm:git:git@github.com:lemire/javaewah.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.googlecode.javaewah/JavaEWAH@1.2.3?type=jar"
    },
    {
      "publisher" : "QOS.ch",
      "group" : "org.slf4j",
      "name" : "slf4j-api",
      "version" : "1.7.36",
      "description" : "The slf4j API",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "872da51f5de7f3923da4de871d57fd85"
        },
        {
          "alg" : "SHA-1",
          "content" : "6c62681a2f655b49963a5983b8b0950a6120ae14"
        },
        {
          "alg" : "SHA-256",
          "content" : "d3ef575e3e4979678dc01bf1dcce51021493b4d11fb7f1be8ad982877c16a1c0"
        },
        {
          "alg" : "SHA-512",
          "content" : "f9b033fc019a44f98b16048da7e2b59edd4a6a527ba60e358f65ab88e0afae03a9340f1b3e8a543d49fa542290f499c5594259affa1ff3e6e7bf3b428d4c610b"
        },
        {
          "alg" : "SHA-384",
          "content" : "2b14ad035877087157e379d3277dcdcd79e58d6bdb147c47d29e377d75ce53ad42cafbf22f5fb7827c7e946ff4876b9a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "3bc3110dafb8d5be16a39f3b2671a466463cd99eb39610c0e4719a7bf2d928f2ea213c734887c6926a07c4cca7769e4b"
        },
        {
          "alg" : "SHA3-256",
          "content" : "ba2608179fcf46e2291a90b9cbb4aa30d718e481f59c350cc21c73b88d826881"
        },
        {
          "alg" : "SHA3-512",
          "content" : "14c4edcd19702ef607d78826839d8a6d3a39157df54b89a801d3d3cbbe1307131a77671b041c761122730fb1387888c5ec2e46bdd80e1cb07f8f144676441824"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.slf4j.org"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/qos-ch/slf4j/slf4j-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-codec",
      "name" : "commons-codec",
      "version" : "1.17.0",
      "description" : "The Apache Commons Codec component contains encoder and decoders for various formats such as Base16, Base32, Base64, digest, and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a collection of phonetic encoding utilities.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "ca1f080782f7e77cb3aec451e7a7f02d"
        },
        {
          "alg" : "SHA-1",
          "content" : "0dbe8eef6e14460e73da07f7b11bf994d6626355"
        },
        {
          "alg" : "SHA-256",
          "content" : "f700de80ac270d0344fdea7468201d8b9c805e5c648331c3619f2ee067ccfc59"
        },
        {
          "alg" : "SHA-512",
          "content" : "cb9c3b2055d0b31d106293f0bc3696f90a11a30953e5b05a1a3c453e98a563475c93d7c6d1707e75f59d0806fba5fd8e4486b8bd72e58bb6ae995bdbbeeb7e17"
        },
        {
          "alg" : "SHA-384",
          "content" : "a0fd174b2f8a21b43828371a7ee03c915b79e69d7b0e16cfe6367f794e2f8e6bbebc261e8a4ba35a79779b2338a774a4"
        },
        {
          "alg" : "SHA3-384",
          "content" : "803fb227bd6770cc21c701b9529606f95ba05c30ea3d807b18b3681fde0c7cabd0e2f40ab36567832f63e0c42b77d0f2"
        },
        {
          "alg" : "SHA3-256",
          "content" : "41b9b86fd0b19ff44d19d108302d7b0111ed86d07a65a90efe1023537fad8748"
        },
        {
          "alg" : "SHA3-512",
          "content" : "eaacc9eafccf4bda0c72c5151dbd7e99954842782c91b501af8c7ca462a04b6c59d7ab8e1ef43b3ebc1b12ca62f4574544bc31df10f33f4a15cd3c3399bd808b"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-codec/commons-codec@1.17.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-codec/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-parent/actions"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CODEC"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/commons-codec"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-codec/commons-codec@1.17.0?type=jar"
    },
    {
      "publisher" : "Eclipse JGit Project",
      "group" : "org.eclipse.jgit",
      "name" : "org.eclipse.jgit.junit",
      "version" : "7.0.0.202407311305-m2",
      "description" : "Utility classes to support JUnit testing of JGit applications.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "9511b9f58528d20bb8f7f44a09cfc464"
        },
        {
          "alg" : "SHA-1",
          "content" : "5774e49cf2ed42020147e503ee30d7222b6ccf00"
        },
        {
          "alg" : "SHA-256",
          "content" : "c46134bf272ab4b463f1159ce45c8b39bfcf25bfd9e3c672b0ed0f3e15709ffc"
        },
        {
          "alg" : "SHA-512",
          "content" : "cf7d1d37e2a3df9ff1e7437b4165929e538c19db8d613f73c4e632ac723ad646ff6262b69dd19082fb102be7ee39a163ddadf98b49415d05b4fcb44361d0e239"
        },
        {
          "alg" : "SHA-384",
          "content" : "09588aba43c5d247ce6446b2cd2df035104ba6a39d0657d8769bdf6d59fdb45f0e4debfcdbf3dcf9d457f83b0b103ed9"
        },
        {
          "alg" : "SHA3-384",
          "content" : "a9ee7b23583c5aef997baa8f6d67ac0418dd7e89845f777a7c70fe11f4b05b04d8d19ee9cd633ee182354f8fcf6976ee"
        },
        {
          "alg" : "SHA3-256",
          "content" : "24c8d2c54b2146c4778c2a6fa0296d149b71cefaaaec70449e4072d8b79ffd6a"
        },
        {
          "alg" : "SHA3-512",
          "content" : "92424893b4a214c87de09e5ff5e85373d118dd5d6d00739c803740bf0fcf9fca2f128c0905a66570bf1ed78abe24a013ee18606d437629d4234bc39dc54bb0b3"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause",
            "url" : "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.junit@7.0.0.202407311305-m2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.eclipse.org/jgit//org.eclipse.jgit.junit"
        },
        {
          "type" : "build-system",
          "url" : "https://ci.eclipse.org/jgit"
        },
        {
          "type" : "distribution",
          "url" : "https://repo.eclipse.org/content/repositories/jgit-releases/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-jgit/jgit/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "http://dev.eclipse.org/mhonarc/lists/jgit-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://eclipse.gerrithub.io/plugins/gitiles/eclipse-jgit/jgit/org.eclipse.jgit.junit"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.junit@7.0.0.202407311305-m2?type=jar"
    },
    {
      "publisher" : "Eclipse JGit Project",
      "group" : "org.eclipse.jgit",
      "name" : "org.eclipse.jgit.junit.ssh",
      "version" : "7.0.0.202407311305-m2",
      "description" : "Utility classes to support Ssh based JUnit testing of JGit applications.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "8bd8d20aea9f3968fbafb630b7975a5c"
        },
        {
          "alg" : "SHA-1",
          "content" : "25a5a8b0094f5364c0b98970ad87b00affd311bd"
        },
        {
          "alg" : "SHA-256",
          "content" : "f2c5d1b956000f71db5e0d0fa9943388c7646403e07927130ff13a59857fa16a"
        },
        {
          "alg" : "SHA-512",
          "content" : "5f424f693c36c608541cedbf7df4bdd5b75eb6e65b6c87ccd2431cf68f84c0a7a9ef935eca5fb57f789e1c44506e32c2efc22565e984c42a4f7fbee3249caa7f"
        },
        {
          "alg" : "SHA-384",
          "content" : "9ee87c0eb626cdb0ed320ca3d47a2274ff54eda2549d46301a9398b62fb92ebc7efb18db4cae6b68b98b0c73d5ffebf9"
        },
        {
          "alg" : "SHA3-384",
          "content" : "1dcc35e76099b78ec16f4597827d3b6f3b6c4967bdc679b5dc4c235eb5344b3b7344cf3a0fbaf386e9a6a907155810cb"
        },
        {
          "alg" : "SHA3-256",
          "content" : "699a297ed328ed0639bf791804a5200f9139fc65edb1157a1fa66a0b5d79a870"
        },
        {
          "alg" : "SHA3-512",
          "content" : "2c267567e65aa4e8dae933a99ce178bb3b59f22b02a4665f32087272f8c38dcb0f5f847b90afb28c1ccc018270b08721d617ed5cb7ba9fc92cebca6f89abb338"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause",
            "url" : "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.junit.ssh@7.0.0.202407311305-m2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.eclipse.org/jgit//org.eclipse.jgit.junit.ssh"
        },
        {
          "type" : "build-system",
          "url" : "https://ci.eclipse.org/jgit"
        },
        {
          "type" : "distribution",
          "url" : "https://repo.eclipse.org/content/repositories/jgit-releases/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-jgit/jgit/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "http://dev.eclipse.org/mhonarc/lists/jgit-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://eclipse.gerrithub.io/plugins/gitiles/eclipse-jgit/jgit/org.eclipse.jgit.junit.ssh"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.junit.ssh@7.0.0.202407311305-m2?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.sshd",
      "name" : "sshd-osgi",
      "version" : "2.13.1",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "878d9606e65cc19c9117342da60d5489"
        },
        {
          "alg" : "SHA-1",
          "content" : "50958cc44076749e790d7332021cff546707624c"
        },
        {
          "alg" : "SHA-256",
          "content" : "4de8643421b6a0d5cd4557183d867bf6df503e6587b43a53477f1567966316f7"
        },
        {
          "alg" : "SHA-512",
          "content" : "b7d1664e1febe069b7e3b6749efcdc190ede843db801af2da39575d95812cd1e88216c7640c0f67d87fa5dc475fe81e3f619043414b950f54f75f876317a08e4"
        },
        {
          "alg" : "SHA-384",
          "content" : "ae61937c97fd7c557b3d457c4aeadd5cd1060b59bfbb2ced1fac36af3686d370c0c67639992e0dec9945bccebafb8906"
        },
        {
          "alg" : "SHA3-384",
          "content" : "ef3f8c7907dc161d529ccb973c6d2fab5f73207946cf3223f6685fee5b3758570d755355625dd723bf5e3fbd07ca2962"
        },
        {
          "alg" : "SHA3-256",
          "content" : "58a1c46bee237cf1c526904be097c923eccd31a674edf9c8f46df7701191a25b"
        },
        {
          "alg" : "SHA3-512",
          "content" : "4741abd4607800e92d65626201ef21677d8e72514b23502081cb710bab894ea9c784e5443a8db314e1a434ec109b8970171f17d2af0cc0d244e15f3ad055c3b7"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.sshd/sshd-osgi@2.13.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.apache.org/sshd/sshd-osgi/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/SSHD"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/mina-users/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/mina-sshd/tree/sshd-2.13.1/sshd-osgi"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.sshd/sshd-osgi@2.13.1?type=jar"
    },
    {
      "publisher" : "QOS.ch",
      "group" : "org.slf4j",
      "name" : "jcl-over-slf4j",
      "version" : "1.7.32",
      "description" : "JCL 1.2 implemented over SLF4J",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "8788169f5d5be6550efc75d3bfffc82c"
        },
        {
          "alg" : "SHA-1",
          "content" : "32c060250bcc5282cdbc1fd7008c12eb4ebad00e"
        },
        {
          "alg" : "SHA-256",
          "content" : "60f3bda5922e3912889cca1311d1b227753610bf60cb4e5e914e8b2eaa0326b4"
        },
        {
          "alg" : "SHA-512",
          "content" : "55b0678cbe5359d7fabcec55f305997170b0d45264b5cc0577cc9137ac2388a459b86c5438b5850d6e7247d3a00486f83f4b7e305b0eb756a52d3e5c5466ddbd"
        },
        {
          "alg" : "SHA-384",
          "content" : "f1b69471e3c75cd1c13f6557666ebc4b01c676cce3bd2cb19720471dcca98333b9573b468cfe308abd7cf297cee59133"
        },
        {
          "alg" : "SHA3-384",
          "content" : "2df2a1639c379ed6962a039804e7613ba9cde8ec612c94062d9375d1071b2870edb58f3b9d407650a13dce61bcb69d29"
        },
        {
          "alg" : "SHA3-256",
          "content" : "f515d8b3b683bd709ce241190b40b6f8266b392da6e69b0e637377f488e6d38f"
        },
        {
          "alg" : "SHA3-512",
          "content" : "dd2156b7589ce3989471e856cb65ebb50af00a23aef1a2b80ca7ee5f8a4c4573a7887f54559784e710fa8a089ea57ff04c0a80f804710e956cbaebac11c647b2"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.slf4j/jcl-over-slf4j@1.7.32?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.slf4j.org"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/qos-ch/slf4j/jcl-over-slf4j"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.slf4j/jcl-over-slf4j@1.7.32?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.sshd",
      "name" : "sshd-sftp",
      "version" : "2.13.1",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "72064afac29d7cbf065b07345d244671"
        },
        {
          "alg" : "SHA-1",
          "content" : "e1b6da4ef604718e32cad59ef32618610da7a170"
        },
        {
          "alg" : "SHA-256",
          "content" : "3872fc35008ac93d6abedded52dffe56e1fc4f4f8d6ed4de2f63466740bf750c"
        },
        {
          "alg" : "SHA-512",
          "content" : "dcc32a557692f81eec9f7a7bad730989a37bb423d56519ab4ca8f4bba88d3aec0cbe19677ffdd2865aa58a019553c1b4dc460e4fe8a625d5daa394af9c9a148f"
        },
        {
          "alg" : "SHA-384",
          "content" : "871803f8f03f0752993fe490d2a8f2deb8addb46afef857a396dc4b9f629688980a10143fe642ca68464be921fcd030e"
        },
        {
          "alg" : "SHA3-384",
          "content" : "009df52a3274c5567c961bba3688b0f743d5cf5a6c3eb7f4d2e4f39faa9975206100402e6118678f0d2d9db261507c1a"
        },
        {
          "alg" : "SHA3-256",
          "content" : "acf40e0c25cf2c70dca346f5d4c41308dbf4b9040014dc6f6222febd110f9989"
        },
        {
          "alg" : "SHA3-512",
          "content" : "21dc5e1c423dad60edbe72c1112ba7dcff0133da0396537e2fbf6d3e26fda0fb98037d9249d7de78d98c6ca77f36973a1e53dd87a8fcb41453e051275d848fc8"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.sshd/sshd-sftp@2.13.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.apache.org/sshd/sshd-sftp/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/SSHD"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/mina-users/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/mina-sshd/tree/sshd-2.13.1/sshd-sftp"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.sshd/sshd-sftp@2.13.1?type=jar"
    },
    {
      "publisher" : "Eclipse JGit Project",
      "group" : "org.eclipse.jgit",
      "name" : "org.eclipse.jgit.ssh.jsch",
      "version" : "7.0.0.202407311305-m2",
      "description" : "SSH support for JGit based on JSch",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "63eb4637739cd747676b9793a6142229"
        },
        {
          "alg" : "SHA-1",
          "content" : "aba8ba0e01f472083904aa38c23db4cd427aa9d6"
        },
        {
          "alg" : "SHA-256",
          "content" : "953740060e3eba464d216f64ea68c520b1de7b4b013b8970b945a810a86ba17e"
        },
        {
          "alg" : "SHA-512",
          "content" : "b6bfcc54ad9cac7ba82ed1111fe67047260f0a772d382074a3a56a2852d5af47628a889c694c90e50d594d6ba9c2068efb6a7eb1f9b427b242ff31819f8781d6"
        },
        {
          "alg" : "SHA-384",
          "content" : "856c8576b88fb14477082127762ad2b5d7e79347a1aa979d30e3b91a022848b3832fd6e21b8337389af35c6984ef00e8"
        },
        {
          "alg" : "SHA3-384",
          "content" : "773e39e66afb1cb161d13624e08013cb6386fadfa59bccf88d12ec831f262e5985fd2a87e2c30c92542ee1c9c255f96c"
        },
        {
          "alg" : "SHA3-256",
          "content" : "debc6057e5004be2011991dd2fb87d36878264df0c6f74e62d166caadbbfb7b9"
        },
        {
          "alg" : "SHA3-512",
          "content" : "9120514da47d816c70b441ff84271eaa835901332b08946245f26330ec7ad8eb3399c9a358e4d40a0d04e28751fe76b7d5c260709712a714545408e73c9a089a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause",
            "url" : "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.ssh.jsch@7.0.0.202407311305-m2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.eclipse.org/jgit//org.eclipse.jgit.ssh.jsch"
        },
        {
          "type" : "build-system",
          "url" : "https://ci.eclipse.org/jgit"
        },
        {
          "type" : "distribution",
          "url" : "https://repo.eclipse.org/content/repositories/jgit-releases/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-jgit/jgit/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "http://dev.eclipse.org/mhonarc/lists/jgit-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://eclipse.gerrithub.io/plugins/gitiles/eclipse-jgit/jgit/org.eclipse.jgit.ssh.jsch"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.ssh.jsch@7.0.0.202407311305-m2?type=jar"
    },
    {
      "publisher" : "JCraft,Inc.",
      "group" : "com.jcraft",
      "name" : "jsch",
      "version" : "0.1.55",
      "description" : "JSch is a pure Java implementation of SSH2",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "c395ada0fc012d66f11bd30246f6c84d"
        },
        {
          "alg" : "SHA-1",
          "content" : "bbd40e5aa7aa3cfad5db34965456cee738a42a50"
        },
        {
          "alg" : "SHA-256",
          "content" : "d492b15a6d2ea3f1cc39c422c953c40c12289073dbe8360d98c0f6f9ec74fc44"
        },
        {
          "alg" : "SHA-512",
          "content" : "b6827d8de471682fd11744080663aea77612a03774e2ebcc3357c7c493d5df50d4ec9c8d52c4fcc928bdfdd75b62b40d3c60f184da8a7b8aba44c92afecee7a5"
        },
        {
          "alg" : "SHA-384",
          "content" : "6da3c9e2d72bd25991936dfe918ae7f235d03f386a8f797b65a154ae71b36292f873338ccbf5dd4fd3bc63619c806dbe"
        },
        {
          "alg" : "SHA3-384",
          "content" : "92676d161f4ebe078df11f9cda6dc0bed4c828830bb98340ac34fdb89dc76b019d4320f6fdd3db13cdd6e33582cb9272"
        },
        {
          "alg" : "SHA3-256",
          "content" : "99c7de83022da8f85fcef262e29051b8c33c81d492cf344a5d123b83b5a459f7"
        },
        {
          "alg" : "SHA3-512",
          "content" : "33344b4ee79f0e7c8901b828f2bea13d25727361deeaa37d85dbaf3c44a31e8d0b4f3966ce2e4c3705bebd046cb7adba0486d02babdbc68e9819d059b5981559"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/com.jcraft/jsch@0.1.55?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.jcraft.com/jsch/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "http://git.jcraft.com/jsch.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.jcraft/jsch@0.1.55?type=jar"
    },
    {
      "publisher" : "jcraft",
      "group" : "com.jcraft",
      "name" : "jzlib",
      "version" : "1.1.3",
      "description" : "JZlib is a re-implementation of zlib in pure Java",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "386d3714fef534d21175d8885ae48bf7"
        },
        {
          "alg" : "SHA-1",
          "content" : "c01428efa717624f7aabf4df319939dda9646b2d"
        },
        {
          "alg" : "SHA-256",
          "content" : "89b1360f407381bf61fde411019d8cbd009ebb10cff715f3669017a031027560"
        },
        {
          "alg" : "SHA-512",
          "content" : "339793df0001214aaadac2a5456c3cd54a0c09ba2c9e73cf13155adbfdf1c2a953f7336903e45e76a52ce6b48c5b7c78436667d7836e7354e02e85ba0908afd3"
        },
        {
          "alg" : "SHA-384",
          "content" : "e0fe861e00a6136b1c97ae781ef56068b0e30c22a64ba4186b1703fd543878920e809f32756323f0fa68afc25f64653e"
        },
        {
          "alg" : "SHA3-384",
          "content" : "48f4e07ed293214fedb6ed444886131225f20e591ab0ac8236f64498b2f9aae067d0cb92c8e100263e6e9ccad8074c52"
        },
        {
          "alg" : "SHA3-256",
          "content" : "1a141fb006354f69bbf72a11e15c716be8260f7670ceff4ca764394e4473a91e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "90236a8e878a8838ddc5f3129a1a9ab84d0849702bc4b8ec02d6c5dc09271927359d7da1121f55f36c16bd7d371b6fc631d5439cdd93d9a30ab248dcd84d4618"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-4-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/com.jcraft/jzlib@1.1.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.jcraft.com/jzlib/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "git://github.com/ymnk/jzlib.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.jcraft/jzlib@1.1.3?type=jar"
    },
    {
      "publisher" : "Eclipse JGit Project",
      "group" : "org.eclipse.jgit",
      "name" : "org.eclipse.jgit.test",
      "version" : "7.0.0.202407311305-m2",
      "description" : "JUnit tests for the core library.",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0e145dd35fc2b5f156976f573be5facc"
        },
        {
          "alg" : "SHA-1",
          "content" : "b89536c657fb23a922fd0650e78b8a2fb2925d2d"
        },
        {
          "alg" : "SHA-256",
          "content" : "65747ad369a751acd4573dcd61b20ab22b78c506b779e0bbcf0819f1db02016d"
        },
        {
          "alg" : "SHA-512",
          "content" : "1e12425c5ccb2afc9af5cf9e5ee75fe45ae4511db4ee93d91073b29b0455081c00d99b3a517bed8f6bdf45036564f8c58d4c0147f3ef8b58543e14c26a29c873"
        },
        {
          "alg" : "SHA-384",
          "content" : "96affeb95bd283381b7f5562552e734f3371ca610c6e5739093932399f5f09e2ba40da1d5797251a5c3279d7517fa4b5"
        },
        {
          "alg" : "SHA3-384",
          "content" : "c6b0075da88747020c09a557923e7f32c447c2d5633aff17112589fef924169e8dbd8f633b65e641926335916766a2d1"
        },
        {
          "alg" : "SHA3-256",
          "content" : "6adf0dd37076a81bf1a509f8a72a7eb3a85f76410982c1396fc261ce9b9a521a"
        },
        {
          "alg" : "SHA3-512",
          "content" : "cb03324a35afecc6bad451789371cfe33a9935d683a4d4a7df8d9671fb9b4ac78ce6cedf74025e4c2aa562e3256b8b50e5d961f5cb27471fc080b0c7ca837c50"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause",
            "url" : "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.test@7.0.0.202407311305-m2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.eclipse.org/jgit//org.eclipse.jgit.test"
        },
        {
          "type" : "build-system",
          "url" : "https://ci.eclipse.org/jgit"
        },
        {
          "type" : "distribution",
          "url" : "https://repo.eclipse.org/content/repositories/jgit-releases/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-jgit/jgit/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "http://dev.eclipse.org/mhonarc/lists/jgit-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://eclipse.gerrithub.io/plugins/gitiles/eclipse-jgit/jgit/org.eclipse.jgit.test"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.test@7.0.0.202407311305-m2?type=jar"
    },
    {
      "group" : "org.assertj",
      "name" : "assertj-core",
      "version" : "3.26.0",
      "description" : "Rich and fluent assertions for testing in Java",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "58a1b75e2340ef60040a7db4401c15d7"
        },
        {
          "alg" : "SHA-1",
          "content" : "fc4a3d051da838946f9dffe725efbd06cd7d1eec"
        },
        {
          "alg" : "SHA-256",
          "content" : "b0f1b425899001fb6cc856f35318d133b3c4902d6ecdecb0834791268567094f"
        },
        {
          "alg" : "SHA-512",
          "content" : "65bada327f897244d7e1a717df38ab4fde0903a7f6ca4a9db2120d34300bfc8c78e30e63301d0a05110425293074d4dabf547027de29e58eaeccc1e9003b1695"
        },
        {
          "alg" : "SHA-384",
          "content" : "0ca059c20b5cdc4f9ec05d61fad6bbd340ebc643a7d1dc2229b5d1b99257e426e94e1eeec5f3934c4ef3709a9e1910b7"
        },
        {
          "alg" : "SHA3-384",
          "content" : "e7e65f5bad3da245016fb541eea3f47e5bd5942e012579aba52c83413f152e285d7ce4247d650b3ab5eedad0f7ebe51b"
        },
        {
          "alg" : "SHA3-256",
          "content" : "b2245522240f36fe298198b75060f05464a60e286cac57671fb8f89b5ad85e04"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c4dc88ab9187249de46daa85ce69b516760ce4496d72ca925b382762027983f232070fade50f2c7f6c307adeab08349cdd9fbab7ded9f9e95dc227c64b75f357"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.assertj/assertj-core@3.26.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://assertj.github.io/doc/#assertj-core"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/assertj/assertj/assertj-parent/assertj-core"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.assertj/assertj-core@3.26.0?type=jar"
    },
    {
      "group" : "net.bytebuddy",
      "name" : "byte-buddy",
      "version" : "1.14.17",
      "description" : "Byte Buddy is a Java library for creating Java classes at run time. This artifact is a build of Byte Buddy with all ASM dependencies repackaged into its own name space.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "9236614cb260676d7b7489ca96da4af4"
        },
        {
          "alg" : "SHA-1",
          "content" : "a8d08f3c1e75ecc7f38a8cfd7e9fa47919096373"
        },
        {
          "alg" : "SHA-256",
          "content" : "cde8f8f8e07bff3694aace0d9944ba755665a583b05d9153d41062285e9a8a61"
        },
        {
          "alg" : "SHA-512",
          "content" : "5df803ccaf75450a2b33202ffa08ce432662d7f1fe22cfc9e4c09a889303a320aeed9d059bb945cb783499b7a5e40f84e7f30de372b5090e19188dde3de94ef1"
        },
        {
          "alg" : "SHA-384",
          "content" : "244b6fc636364c22244675dbc4f5114f3fe460c945ae517799037da22fe4937922a5fb16958b4bb0ae7fa6657e63c4fd"
        },
        {
          "alg" : "SHA3-384",
          "content" : "96ce1059ec0f27097f056f1c42df380d27ac1c28aff9333436424e5b14641a825b1c5e067b5d7264c8fc5955d0c388ab"
        },
        {
          "alg" : "SHA3-256",
          "content" : "0936133be952ccca23a4451072f862f1d4146a3d8ef5ae50acf531fbf97d4340"
        },
        {
          "alg" : "SHA3-512",
          "content" : "d2ed1c8ce2b1de5fcca4429783332e63590286023c8d0bdea5fffe0ea85cb62d1f47dcfdfabb2ae1c55e890a153802116bc23950e40f951094f0440e67a494c6"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/net.bytebuddy/byte-buddy@1.14.17?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://bytebuddy.net/byte-buddy"
        },
        {
          "type" : "distribution",
          "url" : "https://s01.oss.sonatype.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/raphw/byte-buddy/issues"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/net.bytebuddy/byte-buddy@1.14.17?type=jar"
    },
    {
      "group" : "org.mockito",
      "name" : "mockito-core",
      "version" : "5.12.0",
      "description" : "Mockito mock objects library core API and implementation",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f91c169f81f149ca4736581b03bdb467"
        },
        {
          "alg" : "SHA-1",
          "content" : "22f8bbaf478e6789164787fa411a3b5ed986e110"
        },
        {
          "alg" : "SHA-256",
          "content" : "4a2eb29237050da749e90a46f948bce7e26ec22b671e41f59b1ac6f4b6408229"
        },
        {
          "alg" : "SHA-512",
          "content" : "b87fa4331dde8d6257f046dff8b9c02f5a428392b714f8bca9c97834a3dfd8fd0b9bf2bd645e035b0e72a9c44af46a700c1a5ab16e207a4dd012b3abda971187"
        },
        {
          "alg" : "SHA-384",
          "content" : "19e04cee907a02870ef6ec69a1fa1d6ff2f677a08d5c2faf8804312eb70e59ba33570c40a6bc93144c75c7bf3f903c05"
        },
        {
          "alg" : "SHA3-384",
          "content" : "20217b694c4aaad092b273c6ac089ae4ae37d27ac56e9dd6ccfa057e428c523ae97b1125122b837baa60d8dff5a49a5a"
        },
        {
          "alg" : "SHA3-256",
          "content" : "06107e3226a6fb43fb6b4c4d418407a4bac68aa4f8099d82f860e5a9918ae479"
        },
        {
          "alg" : "SHA3-512",
          "content" : "d943df48549ed95ff161ee9cb77ca1db282b8c18dfd28e6667eeca1b45b1ded94c22f8cb070f7a8a04d3476062f13a92683a2ff212d7ad95869eed040c2f5138"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl" : "pkg:maven/org.mockito/mockito-core@5.12.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/mockito/mockito"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/mockito/mockito/actions"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/mockito/mockito/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/mockito/mockito.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.mockito/mockito-core@5.12.0?type=jar"
    },
    {
      "group" : "net.bytebuddy",
      "name" : "byte-buddy-agent",
      "version" : "1.14.17",
      "description" : "The Byte Buddy agent offers convenience for attaching an agent to the local or a remote VM.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "cfede451adcca8f78e5d193067096bbd"
        },
        {
          "alg" : "SHA-1",
          "content" : "e3c251a39dc90badaf71c83427ba46840f219d8d"
        },
        {
          "alg" : "SHA-256",
          "content" : "461ec3017f1445b0af42d4e5f08eb6f5032fa4039ad737f3fcc4b2a12a38f984"
        },
        {
          "alg" : "SHA-512",
          "content" : "389407ac12a9d6e5809eef246197234de8dc45494d78dec5b011ab22c0c2ea92ee392f53c6954771f265e6a42c3d2f2ad190c1d093d54d1f18d4ec44653bcdae"
        },
        {
          "alg" : "SHA-384",
          "content" : "4240509d4dce4c61e7c199cea20aa393f05558f93464db1ed9cdf9690515c045df24933bf0270a9ac57b9d7b94d0290d"
        },
        {
          "alg" : "SHA3-384",
          "content" : "8ad0323a797254da4207a82540aa417bb32c9d646bf03b6128dde100058dce209dc757f0c3d32ebf2387a777dace07dd"
        },
        {
          "alg" : "SHA3-256",
          "content" : "e84c2f98abe5227aa9bc71df3a563de30899238e2b779d4537ca7fe4d369090a"
        },
        {
          "alg" : "SHA3-512",
          "content" : "37994b60a6b54fc7091d6ba3932cd37a3bce7705c41de4e148980ea8d053294ce3ddc7878a6fb6d45efd4ebd83e3cbb408c660d1c2c35582fa3b489d1bfa1cc2"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/net.bytebuddy/byte-buddy-agent@1.14.17?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://bytebuddy.net/byte-buddy-agent"
        },
        {
          "type" : "distribution",
          "url" : "https://s01.oss.sonatype.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/raphw/byte-buddy/issues"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/net.bytebuddy/byte-buddy-agent@1.14.17?type=jar"
    },
    {
      "publisher" : "Joe Walnes, Henri Tremblay, Leonardo Mesquita",
      "group" : "org.objenesis",
      "name" : "objenesis",
      "version" : "3.3",
      "description" : "A library for instantiating Java objects",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "ab0e0b2ab81affdd7f38bcc60fd85571"
        },
        {
          "alg" : "SHA-1",
          "content" : "1049c09f1de4331e8193e579448d0916d75b7631"
        },
        {
          "alg" : "SHA-256",
          "content" : "02dfd0b0439a5591e35b708ed2f5474eb0948f53abf74637e959b8e4ef69bfeb"
        },
        {
          "alg" : "SHA-512",
          "content" : "1fa990d15bd179f07ffbc460d580a6fd0562e45dee8bd4a9405917536b78f45c0d6f644b67f85d781c758aa56eff90aef23eedcc9bd7f5ff887a67b716083e61"
        },
        {
          "alg" : "SHA-384",
          "content" : "2f6878f91a12db32c244afcee619d57c3ad6ff0297f4e41c2247e737c1ccc5fcc1ce03256b479b0f9b87900410bc4502"
        },
        {
          "alg" : "SHA3-384",
          "content" : "a3dd9f6908fe732900d50eb209988183ffcf511afb4e401ef95b75c51777709d2d10e1dc9ee386b7357c5c2cbcf8c00e"
        },
        {
          "alg" : "SHA3-256",
          "content" : "fd2b66d174ed68cbfcda41d5cbd29db766c5676866d6b2324b446a87afab3a9f"
        },
        {
          "alg" : "SHA3-512",
          "content" : "ef509e8bcea73bc282287205ffc7625508080be44c16948137274f189459624891dcf109118c9feff109e1aa99becf176f8db837ac4fd586201510c3ae2ea30a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.objenesis/objenesis@3.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://objenesis.org/objenesis"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/easymock/objenesis/objenesis"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.objenesis/objenesis@3.3?type=jar"
    },
    {
      "publisher" : "Eclipse JGit Project",
      "group" : "org.eclipse.jgit",
      "name" : "org.eclipse.jgit.ui",
      "version" : "7.0.0.202407311305-m2",
      "description" : "AWT/Swing based UI",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "d09f7c60ab4335f0b8b11b965d94580a"
        },
        {
          "alg" : "SHA-1",
          "content" : "242788a3aed516a1460358da3635901cf090c44b"
        },
        {
          "alg" : "SHA-256",
          "content" : "e17e29cb93c02955a752cfd9e41efc35f2d874b3b68db0d3bf2f248aa4d13d43"
        },
        {
          "alg" : "SHA-512",
          "content" : "9f3fd22360209c946b88977cd07fa13c89d3eb1a53000ef2b3945aaee2169e8d20339df735241dda3f152ab09aa32fcf440ffe5ccdebc4b8248eb956956a18af"
        },
        {
          "alg" : "SHA-384",
          "content" : "e8a2240288e52d8edba1336d8c45ecad28f349f792223d1a54c614be3c1c90275ff634fe9e450a56eef7c142d1614d3d"
        },
        {
          "alg" : "SHA3-384",
          "content" : "25c44cd97f42a8a516251dd57552ec80f6fc9092288605b0c5ec3fb5ec661b7519ef17d67233ed99d9380d071dd3645e"
        },
        {
          "alg" : "SHA3-256",
          "content" : "d5f95562ab57c60d19d3caf0e283161223b4fec72e19a6f3e505d818881721bf"
        },
        {
          "alg" : "SHA3-512",
          "content" : "4e473e4ed12976a25abfea52418b41dd425ce108dd6743bbf709844630426ffc4d73ce7511f5b8065e124646d75e1b38948e44a5a51a1d1941828fabb7601ce9"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause",
            "url" : "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.ui@7.0.0.202407311305-m2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.eclipse.org/jgit//org.eclipse.jgit.ui"
        },
        {
          "type" : "build-system",
          "url" : "https://ci.eclipse.org/jgit"
        },
        {
          "type" : "distribution",
          "url" : "https://repo.eclipse.org/content/repositories/jgit-releases/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-jgit/jgit/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "http://dev.eclipse.org/mhonarc/lists/jgit-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://eclipse.gerrithub.io/plugins/gitiles/eclipse-jgit/jgit/org.eclipse.jgit.ui"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.ui@7.0.0.202407311305-m2?type=jar"
    },
    {
      "publisher" : "Eclipse JGit Project",
      "group" : "org.eclipse.jgit",
      "name" : "org.eclipse.jgit.pgm",
      "version" : "7.0.0.202407311305-m2",
      "description" : "Command line client tools built on top of JGit.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "cdf24ef6d5ab36abf0e9ba6168b5beb0"
        },
        {
          "alg" : "SHA-1",
          "content" : "34656ed3e4a268d9c87e9c3db9755f6072c8ed84"
        },
        {
          "alg" : "SHA-256",
          "content" : "6f694bc75367464af3d745be71733fdb5dca0c70c0097ffc49f8a5901a5bfc4b"
        },
        {
          "alg" : "SHA-512",
          "content" : "2667dbb00582b6230f73f32b797b30697b9d7a9bf4acbc2f4acf5af8013ac1f0696ae3170419ab8aff0325b021bef838f6bfd0d41179d8d19cd258ffb8bee2e8"
        },
        {
          "alg" : "SHA-384",
          "content" : "745d7b2fcbb5424dc59fe742f8676109809ce7eedb8b5ba64e6622fff2414c170189975c0ecd7623ea7098570e360e31"
        },
        {
          "alg" : "SHA3-384",
          "content" : "6af0c67f0b0b422158094411551361e91f3ee6c83f4f05ccd527735bcafddcfc408d36bd1beebeec474422189983ff08"
        },
        {
          "alg" : "SHA3-256",
          "content" : "a08075bab23e63dfc253e5b5a6e9287dfc4fa463fffd57866f30a37bc10d0a55"
        },
        {
          "alg" : "SHA3-512",
          "content" : "df707ce7bbbee5aee1b9455a7e7d8843ec156ccb209c16837089b6de3e7159cfda828514d8bc76d4a1d8086fbc982f68cf3aea96f71e8c939150c8d9278be774"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause",
            "url" : "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.pgm@7.0.0.202407311305-m2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.eclipse.org/jgit//org.eclipse.jgit.pgm"
        },
        {
          "type" : "build-system",
          "url" : "https://ci.eclipse.org/jgit"
        },
        {
          "type" : "distribution",
          "url" : "https://repo.eclipse.org/content/repositories/jgit-releases/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-jgit/jgit/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "http://dev.eclipse.org/mhonarc/lists/jgit-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://eclipse.gerrithub.io/plugins/gitiles/eclipse-jgit/jgit/org.eclipse.jgit.pgm"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.pgm@7.0.0.202407311305-m2?type=jar"
    },
    {
      "publisher" : "Kohsuke Kawaguchi",
      "group" : "args4j",
      "name" : "args4j",
      "version" : "2.37",
      "description" : "args4j : Java command line arguments parser",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f58e89e55a715448f1eac17edaf4b511"
        },
        {
          "alg" : "SHA-1",
          "content" : "244f60c057d72a785227c0562d3560f42a7ea54b"
        },
        {
          "alg" : "SHA-256",
          "content" : "5a13b0f7ff519183e55b8f453b8faaa23b92ccf0443f1fac515fedf2246bdc18"
        },
        {
          "alg" : "SHA-512",
          "content" : "2237b8fa0a2cd602637a47b24893486ff8251efdc0b9e992239b9f870ac58d66433280e2bc16bc8274095811f029cfdc02fce3131c9f2e96352fff923ab31f8b"
        },
        {
          "alg" : "SHA-384",
          "content" : "ec839cfd5517bdbf27c76f7daf279217918936e7f06402193332c905485c42ea6d458d348bbcfc9896153c4e2d2e4ea3"
        },
        {
          "alg" : "SHA3-384",
          "content" : "3a69c3e40300cb7077fdb2ee0a91a425557bdb1e6b9150aca7ac644fee527ac357e240b795cc5644b375a53d26316ed5"
        },
        {
          "alg" : "SHA3-256",
          "content" : "7e15c28c8461c2543323c4e5377bf67aaf2def2df3b528eeaaa86f49051994bf"
        },
        {
          "alg" : "SHA3-512",
          "content" : "7d1632b2e38c54a116ca73fef42892c321d7687408070f3f3ffdb0f91caf154ec53ca3624c1b673cb71bdd57b8082e37d631ce39d9cd7a07a8d3cd671564d4dd"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl" : "pkg:maven/args4j/args4j@2.37?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://args4j.kohsuke.org/args4j/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://args4j.dev.java.net/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://args4j.dev.java.net/servlets/SummarizeList?listName=users"
        },
        {
          "type" : "vcs",
          "url" : "http://args4j.kohsuke.org/args4j/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/args4j/args4j@2.37?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-compress",
      "version" : "1.26.2",
      "description" : "Apache Commons Compress defines an API for working with compression and archive formats. These include bzip2, gzip, pack200, LZMA, XZ, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4, Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "d2c5abbd0a822c0b79cf4f03ead483ee"
        },
        {
          "alg" : "SHA-1",
          "content" : "eb1f823447af685208e684fce84783b43517960c"
        },
        {
          "alg" : "SHA-256",
          "content" : "9168a03141d8fc7eda21a2360d83cc0412bcbb1d6204d992bd48c2573cb3c6b8"
        },
        {
          "alg" : "SHA-512",
          "content" : "7106a722d26da945f6d6eea6f0c61b420bff45749bf60c572d992c545b10ccd926dc4b9a9f366ff29d5940c99f26dfeca98f6c1c4b630632a65f04c2d7b94b26"
        },
        {
          "alg" : "SHA-384",
          "content" : "8422ef0d5e9ca419a8b3a33a4c330348f4495b9edded4fde38636d11e99fc3f725df11769d310edc233beed2401daf53"
        },
        {
          "alg" : "SHA3-384",
          "content" : "b32406c91771cfc12e61722add9ab2ef8efa32bf16bdcf80b415f5604bb9b61977c08e6f87f2ef59705c761caca4ffb8"
        },
        {
          "alg" : "SHA3-256",
          "content" : "26c54771c66adc967a167306982bded1fc36a6a2d590401fc435303c9e6256a7"
        },
        {
          "alg" : "SHA3-512",
          "content" : "3f4054fd56ae8d4f012f2cae5469215010123c1ada8931bdcd634551027816afefd8bd871b2ee99f168e2d5a347e0e28c31427dd79e3f42cefcff2662a5603ff"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-compress@1.26.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-compress/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-parent/actions"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/COMPRESS"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-compress.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-compress@1.26.2?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-io",
      "name" : "commons-io",
      "version" : "2.16.1",
      "description" : "The Apache Commons IO library contains utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "ed8191a5a217940140001b0acfed18d9"
        },
        {
          "alg" : "SHA-1",
          "content" : "377d592e740dc77124e0901291dbfaa6810a200e"
        },
        {
          "alg" : "SHA-256",
          "content" : "f41f7baacd716896447ace9758621f62c1c6b0a91d89acee488da26fc477c84f"
        },
        {
          "alg" : "SHA-512",
          "content" : "97eab31b073c5c57c8bcfaa2fec7b481a15a9a1f9ed864dfdc63b57f062b230557caa734c3133aca1165facb588c58db0185c07832241d70159e87a4bcf48008"
        },
        {
          "alg" : "SHA-384",
          "content" : "bd78e2eb3d005046d1329557d3a77529e98384d4d87940374eef432d73d5a06ef20fb7b0c44389de64496fe134dcf199"
        },
        {
          "alg" : "SHA3-384",
          "content" : "f9acc2f04f076328d17e2d0615da4367470b45b15f828008d8df57033401ae6b3b83b21cf9bc1745ff3cfe5a102bc48e"
        },
        {
          "alg" : "SHA3-256",
          "content" : "5d4bbe43356c92e3970b69892b44a10cc736ef8cb1bedfc753cc8df050520161"
        },
        {
          "alg" : "SHA3-512",
          "content" : "29440ccf2551b383c7e6cbdf78ef7784a421322e418da1be3fcd3251c8a826ffd5c6d1bea32b9c80e74744c035cc9cd8483e629e407110ff3133a05cb34bef93"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-io/commons-io@2.16.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-io/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-parent/actions"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/IO"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-io.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-io/commons-io@2.16.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-lang3",
      "version" : "3.14.0",
      "description" : "Apache Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4e5c3f5e6b0b965ef241d7d72ac8971f"
        },
        {
          "alg" : "SHA-1",
          "content" : "1ed471194b02f2c6cb734a0cd6f6f107c673afae"
        },
        {
          "alg" : "SHA-256",
          "content" : "7b96bf3ee68949abb5bc465559ac270e0551596fa34523fddf890ec418dde13c"
        },
        {
          "alg" : "SHA-512",
          "content" : "0338b50767166e5746ada6d6aa2e071e7221d699323bfb629f7f204b294c1dc4cad140610a129ed751798443b43e74e0818989c7df7d33c5915aa29742be9ba8"
        },
        {
          "alg" : "SHA-384",
          "content" : "908d0a22dc17aaa04caa5104cff7cad5b88b77eecb78dd5b3b3fefa22ff71ac50a4fb9e31c897ac243f9d841e4b3453d"
        },
        {
          "alg" : "SHA3-384",
          "content" : "8a7f2e061b998780870eddd571620fbf3d3c70bcb54e24539d0db504f59d65bc6bda58136284498babe29fcc5eabb7a6"
        },
        {
          "alg" : "SHA3-256",
          "content" : "022bf1f8039fcea717e9e34dd96eb80cfff05b43c9cbb76e9739b2421e2d027c"
        },
        {
          "alg" : "SHA3-512",
          "content" : "0bcbc4edce974ea970c46e2da12ec98d9fd962c2cf64f757ac97136dec5623ca52af0c225895303c17ffabb57090e6772d7bd326d5e7438cef5454f8bbaeecfa"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-lang/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-parent/actions"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/LANG"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-lang.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar"
    },
    {
      "publisher" : "Eclipse JGit Project",
      "group" : "org.eclipse.jgit",
      "name" : "org.eclipse.jgit.archive",
      "version" : "7.0.0.202407311305-m2",
      "description" : "Support for archiving a Git tree in formats such as zip and tar. This is a separate bundle from org.eclipse.jgit to avoid a dependency by the latter on commons-compress.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "3c698ef11db416f314f2f2631920ce9d"
        },
        {
          "alg" : "SHA-1",
          "content" : "7f6012a096eb7d4589c4b44f41b0353821aed8f4"
        },
        {
          "alg" : "SHA-256",
          "content" : "fb939aa4e2ecb5c21b7a3f6cac8da156fd956091cf6ab97b06d3955a980fb6b3"
        },
        {
          "alg" : "SHA-512",
          "content" : "4c5f27069e4e1c261db55be9059e6e6c8818cd4e3ca757e6ec7fad794034304a3143c9f1b8fb2b7e87c6540091f0714228ae5f1fdf2c2eca46814e4bf6555137"
        },
        {
          "alg" : "SHA-384",
          "content" : "479e130dcb0288a6c5d6620966ee689929d778d463a85ef4454bf4ad86df3e73949c41a563bbde9051f36be79d044729"
        },
        {
          "alg" : "SHA3-384",
          "content" : "9e926deab5cd183183a243e6f6ba31e2873693ad9a21a2a5a0bfb7188669ecd376e013b6e2939a67371e176629ca1b6d"
        },
        {
          "alg" : "SHA3-256",
          "content" : "3f348c30ebd3e8460b6ba34caa714fff909b7ad71c590a38d34b22f6bf6c00bd"
        },
        {
          "alg" : "SHA3-512",
          "content" : "f24726ba5f8f716ac811dd98b37f5fce56a0304b122fc8c9cefaf0d0ada71582fc29096f7fe6e9a4dc369600504643a19fb8b087627037f64ea718c84c31a935"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause",
            "url" : "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.archive@7.0.0.202407311305-m2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.eclipse.org/jgit//org.eclipse.jgit.archive"
        },
        {
          "type" : "build-system",
          "url" : "https://ci.eclipse.org/jgit"
        },
        {
          "type" : "distribution",
          "url" : "https://repo.eclipse.org/content/repositories/jgit-releases/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-jgit/jgit/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "http://dev.eclipse.org/mhonarc/lists/jgit-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://eclipse.gerrithub.io/plugins/gitiles/eclipse-jgit/jgit/org.eclipse.jgit.archive"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.archive@7.0.0.202407311305-m2?type=jar"
    },
    {
      "publisher" : "OSGi Alliance",
      "group" : "org.osgi",
      "name" : "org.osgi.core",
      "version" : "6.0.0",
      "description" : "OSGi Core Release 6, Interfaces and Classes for use in compiling bundles.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "cae291c61fe8b7a4476d713550c7ff49"
        },
        {
          "alg" : "SHA-1",
          "content" : "0c49acdc9ac62cf69ee49cb6f1905b4fdb79ea5c"
        },
        {
          "alg" : "SHA-256",
          "content" : "1c1bb435eb34cbf1f743653da38f604d45d53fbc95979053768cd3fc293cb931"
        },
        {
          "alg" : "SHA-512",
          "content" : "a6d5388804982ab2cb0ba82b4291e73f006577c54e5dcb0675a2c4922594ddb0265810a4e7c748c88eba76ee350340376b7a9bd25d2de3afb954cf89117cd470"
        },
        {
          "alg" : "SHA-384",
          "content" : "8daff91fc229b2874c1ff7a214fdee65b1824fbac76eb7feec609c5b70ab2fd24fc5cf017b339788a5c7aec041ec1a1c"
        },
        {
          "alg" : "SHA3-384",
          "content" : "b921d8bea5dab6e7d827ce49a43e6edb4a15c1402e1d70498faf867bd7e9ea61f47b9cbdbf008ed517b71499c02b9e4c"
        },
        {
          "alg" : "SHA3-256",
          "content" : "5836efac64dd3757498bc6648cf02e46f136c6b0b39d5f1641218459d6b68ca0"
        },
        {
          "alg" : "SHA3-512",
          "content" : "9056edfc04943cdc81041db1851cade670415457221617babeb3d3c5136c3dcc303862e55b545f40584477e0654d11d84db6ede072015b08744241202d79ee63"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.osgi/org.osgi.core@6.0.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.osgi.org"
        },
        {
          "type" : "vcs",
          "url" : "private"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.osgi/org.osgi.core@6.0.0?type=jar"
    },
    {
      "publisher" : "Eclipse JGit Project",
      "group" : "org.eclipse.jgit",
      "name" : "org.eclipse.jgit.gpg.bc",
      "version" : "7.0.0.202407311305-m2",
      "description" : "GPG support for JGit based on BouncyCastle",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "7576b20d22f7bb4575e35e7048ae251d"
        },
        {
          "alg" : "SHA-1",
          "content" : "bb71fc339ac7ceabd69abefcf350cc334a7352c9"
        },
        {
          "alg" : "SHA-256",
          "content" : "a74f0b9542e8be55faad09647c48757489463bff728fa65421f2ad286da2a154"
        },
        {
          "alg" : "SHA-512",
          "content" : "9905222264cbd2c82e08ccf6287e81712708e9ae7ae23e880b1bdff6fc75b15e979f2a5f1576ab95e769573a4f5a9f2fa637bd0c76854109a8c3995ac6353be0"
        },
        {
          "alg" : "SHA-384",
          "content" : "7c7ae430bf6f796b0513e4b9b6581b65ee6834a44e42c4acb583fe6b3d96b17022b2e123b8013cc62aedd6f626b4eb1b"
        },
        {
          "alg" : "SHA3-384",
          "content" : "c1c2da4935ebdab983c3f5cde5eacc4ae86dffad051f7260d1a1c6e8a88399ad8beb67c6ef53d8ca39bf169d46c0a405"
        },
        {
          "alg" : "SHA3-256",
          "content" : "685998f54fa0b11493739eaf02a7653d3998d8a7b573e7a14736c503b25e49d4"
        },
        {
          "alg" : "SHA3-512",
          "content" : "b3a4cc67f9b5803e35d812e8e02e97721fe559dac838e1dc22f647774ccfb814ab9085b0cf1a908ae9c841b4ca80532e3e03e0d5ea361c44df0c67f143aba78c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause",
            "url" : "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.gpg.bc@7.0.0.202407311305-m2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.eclipse.org/jgit//org.eclipse.jgit.gpg.bc"
        },
        {
          "type" : "build-system",
          "url" : "https://ci.eclipse.org/jgit"
        },
        {
          "type" : "distribution",
          "url" : "https://repo.eclipse.org/content/repositories/jgit-releases/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-jgit/jgit/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "http://dev.eclipse.org/mhonarc/lists/jgit-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://eclipse.gerrithub.io/plugins/gitiles/eclipse-jgit/jgit/org.eclipse.jgit.gpg.bc"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.gpg.bc@7.0.0.202407311305-m2?type=jar"
    },
    {
      "group" : "org.bouncycastle",
      "name" : "bcpg-jdk18on",
      "version" : "1.78.1",
      "description" : "The Bouncy Castle Java API for handling the OpenPGP protocol. This jar contains the OpenPGP API for JDK 1.8 and up. The APIs can be used in conjunction with a JCE/JCA provider such as the one provided with the Bouncy Castle Cryptography APIs.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "003cd380030576107da53d4ba0490875"
        },
        {
          "alg" : "SHA-1",
          "content" : "6c8dbcec20355278ec54840e735f63db2479150e"
        },
        {
          "alg" : "SHA-256",
          "content" : "1463bb2cb8737e9ae34f5bd93f48e27711365bb277f4918f44608ed89b68792d"
        },
        {
          "alg" : "SHA-512",
          "content" : "a2ba9b0767302699754db3b636028c36c7af68786f34d97e7445ebec496dad1c1076c5763da9b9160f3402033aa298b65457a8efd143d92276c81186f3c19706"
        },
        {
          "alg" : "SHA-384",
          "content" : "1599d6493076c6b299ddfb9e7225c3db22f82a24b8333871a2aa55a62e4b874939d23d6b6451168493b7f90de5a01c11"
        },
        {
          "alg" : "SHA3-384",
          "content" : "e2ad587138c254844b387f008a4a40415b48a343c23d997421d9e9050cdc26b441fdc99dc94a962e2d4c90a67504bc15"
        },
        {
          "alg" : "SHA3-256",
          "content" : "96831469ede277df99f52be7014842a116d230bb6d9e92a72a59305c6e107616"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c31e1040c478db318c13faa8291d9f913a52b5af3f16e5094a261fac5be2888e297d92d11e8ff7829678dfd8325d46d9825016bcf0fc2b9cbcfaa7ac5da7ddfe"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "Bouncy Castle Licence",
            "url" : "https://www.bouncycastle.org/licence.html"
          }
        },
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.bouncycastle/bcpg-jdk18on@1.78.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.bouncycastle.org/java.html"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/bcgit/bc-java/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/bcgit/bc-java"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.bouncycastle/bcpg-jdk18on@1.78.1?type=jar"
    },
    {
      "group" : "org.bouncycastle",
      "name" : "bcprov-jdk18on",
      "version" : "1.78.1",
      "description" : "The Bouncy Castle Crypto package is a Java implementation of cryptographic algorithms. This jar contains JCE provider and lightweight API for the Bouncy Castle Cryptography APIs for JDK 1.8 and up.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "9646d6d9c087fd408fafe0e3cfe56c25"
        },
        {
          "alg" : "SHA-1",
          "content" : "39e9e45359e20998eb79c1828751f94a818d25f8"
        },
        {
          "alg" : "SHA-256",
          "content" : "add5915e6acfc6ab5836e1fd8a5e21c6488536a8c1f21f386eeb3bf280b702d7"
        },
        {
          "alg" : "SHA-512",
          "content" : "fb10c3c089921c8173ad285329f730e0e78de175d1b50b9bdd79c6a85a265af9b3331caa0c1ed57e5f47047319ce3b0f3bb5def0a3db9cccf2755cc95e145e52"
        },
        {
          "alg" : "SHA-384",
          "content" : "f800642cf1d359c49455421dcc1f6d4b4225d74128bc221fb6742703d5efe009eaefdac2b8139e2168e55815df32c91c"
        },
        {
          "alg" : "SHA3-384",
          "content" : "de3801b40050d6839874c0f00c933f42c89badc87a64d0664960aaed1b08f350ee5bc2f0575771a9b3a217012698d5d9"
        },
        {
          "alg" : "SHA3-256",
          "content" : "d6a7629eefcee11d7f9cfca72d6b87d2779785ed887987cf94ce7da011b9e373"
        },
        {
          "alg" : "SHA3-512",
          "content" : "6a3e7b0a180e61d17de3107876e0ccce6ddfa23c165827a585b10fac8cc3629ffde930e36aaff5df2327278e35631d9ab970923fe0e34d68876b7911f2a536c5"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "Bouncy Castle Licence",
            "url" : "https://www.bouncycastle.org/licence.html"
          }
        }
      ],
      "purl" : "pkg:maven/org.bouncycastle/bcprov-jdk18on@1.78.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.bouncycastle.org/java.html"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/bcgit/bc-java/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/bcgit/bc-java"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.bouncycastle/bcprov-jdk18on@1.78.1?type=jar"
    },
    {
      "group" : "org.bouncycastle",
      "name" : "bcutil-jdk18on",
      "version" : "1.78.1",
      "description" : "The Bouncy Castle Java APIs for ASN.1 extension and utility APIs used to support bcpkix and bctls. This jar contains APIs for JDK 1.8 and up.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "228149d265033bae6701f70580aa7bf2"
        },
        {
          "alg" : "SHA-1",
          "content" : "5353ca39fe2f148dab9ca1d637a43d0750456254"
        },
        {
          "alg" : "SHA-256",
          "content" : "d9fa56f97b0f761ce3bc8d9d74c5d7137a987bf5bd3abfe1003f9bafa45a1d2f"
        },
        {
          "alg" : "SHA-512",
          "content" : "6a338c50d662993c9f00bba23f98443c923b9a95ff61dc653906f51857f8afaecc57a536bfaf6848ac8e7e9ce0a21f84ec068815853261268f97e951526bc766"
        },
        {
          "alg" : "SHA-384",
          "content" : "cf8b9239ca118fe66fff8752dca15caa6950aa696e5034b087e89893ebed7dc1c7ce28c4e1b01ec7cc791f926c91f3a2"
        },
        {
          "alg" : "SHA3-384",
          "content" : "44d796cc83bdc00d3e6703170c718d34347babe628c7ecbe7769be0d39873a081eea847a336ba0fe96c09c79d52807f8"
        },
        {
          "alg" : "SHA3-256",
          "content" : "681c7ba398b4932feb4f9e3a67e746b519c5f732d73c2aa4ce3ce43274f24f87"
        },
        {
          "alg" : "SHA3-512",
          "content" : "99809d355ddcfd5e72bd627c099f376f04d3f10ce227fb1a27812596b466fd21fdee97c4da061d4e637dd6e256af6871c51de94930c07c7fa8ab070767c4101a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "Bouncy Castle Licence",
            "url" : "https://www.bouncycastle.org/licence.html"
          }
        }
      ],
      "purl" : "pkg:maven/org.bouncycastle/bcutil-jdk18on@1.78.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.bouncycastle.org/java.html"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/bcgit/bc-java/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/bcgit/bc-java"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.bouncycastle/bcutil-jdk18on@1.78.1?type=jar"
    },
    {
      "group" : "org.bouncycastle",
      "name" : "bcpkix-jdk18on",
      "version" : "1.78.1",
      "description" : "The Bouncy Castle Java APIs for CMS, PKCS, EAC, TSP, CMP, CRMF, OCSP, and certificate generation. This jar contains APIs for JDK 1.8 and up. The APIs can be used in conjunction with a JCE/JCA provider such as the one provided with the Bouncy Castle Cryptography APIs.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "bbe33d493826742ce3cda5fe5181b668"
        },
        {
          "alg" : "SHA-1",
          "content" : "17b3541f736df97465f87d9f5b5dfa4991b37bb3"
        },
        {
          "alg" : "SHA-256",
          "content" : "4b48ea084e5232b9d79ebca1887b9de037b124931807cd60710748c2aee08cc9"
        },
        {
          "alg" : "SHA-512",
          "content" : "d71a45844a7946b6a70315254e82a335d2df5e402b2d5a3b496fa69b355184338011b49c5f1c76026764a76f62f2bc140c25db2881bca91dde9677a25c6d587b"
        },
        {
          "alg" : "SHA-384",
          "content" : "8ec868bf88ebf69fa9a3c42803410d221600168652c659687db408a661a64aecf0c6cf1c9d70aa2f8e7a29e9846b1fed"
        },
        {
          "alg" : "SHA3-384",
          "content" : "49e639a4f1b6d3a45a15eadff7afccd62f88111fb4eb8cde1a2df1df8f6a1b0b4a0b8976f1376c5586386158e71a5280"
        },
        {
          "alg" : "SHA3-256",
          "content" : "43fe9d049512fd01e58aea9e088530a4153eec20b58edae9ceea102a1e632bda"
        },
        {
          "alg" : "SHA3-512",
          "content" : "f2d0d02e199df93ac1b90b12d40d5cc7fd5d92e5ba5a93b5ca495ad2c210a2fa927871db5932a9f070ad66ea39a66d3a3ac0ad1ebeb4cbf010de28a247cf26ed"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "Bouncy Castle Licence",
            "url" : "https://www.bouncycastle.org/licence.html"
          }
        }
      ],
      "purl" : "pkg:maven/org.bouncycastle/bcpkix-jdk18on@1.78.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.bouncycastle.org/java.html"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/bcgit/bc-java/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/bcgit/bc-java"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.bouncycastle/bcpkix-jdk18on@1.78.1?type=jar"
    },
    {
      "publisher" : "Eclipse JGit Project",
      "group" : "org.eclipse.jgit",
      "name" : "org.eclipse.jgit.http.apache",
      "version" : "7.0.0.202407311305-m2",
      "description" : "Apache httpclient based HTTP support",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "67a1f911b5079c436307cdab4551b030"
        },
        {
          "alg" : "SHA-1",
          "content" : "524163aefc203009c817865eab1ff56eecb7f7ea"
        },
        {
          "alg" : "SHA-256",
          "content" : "f9d6d46db4c20b832e2c7b2468e7ac3166eac3f31dba264692dfa19a2f95a2fb"
        },
        {
          "alg" : "SHA-512",
          "content" : "e60ed70ea8b98af21790088d959b7f51d23b3b5efcb8d6af529606bcb602de6c6b3f704b79e87078b20b1c1faa786054be9eff8161f1d16255afbb8145037b9f"
        },
        {
          "alg" : "SHA-384",
          "content" : "cd13baacb8551ac38ac6e0210a79766810af8e252097c7b3e1228d141faac9b04b3693036e1fc40d17ab7cbbbbf70081"
        },
        {
          "alg" : "SHA3-384",
          "content" : "295d72ee7e0d43360b8da0ffb3ad284c356da19b1b9a426f05e301ea3cc552345d3a4aeb93d1397e1460257aa80fb80b"
        },
        {
          "alg" : "SHA3-256",
          "content" : "0a528022de281bcfeb7ab8b8c05a6b2c8da588168b1be0c58f487914876aed4a"
        },
        {
          "alg" : "SHA3-512",
          "content" : "7d12018e50a4a0c27fa80368a3f2b73cdbd1362d97dab21a43de4c4f2e2ed8393c0eb0393803d73c9504785b21fae9d158b9451b02e02df1707fdc1dbcfa1404"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause",
            "url" : "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.http.apache@7.0.0.202407311305-m2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.eclipse.org/jgit//org.eclipse.jgit.http.apache"
        },
        {
          "type" : "build-system",
          "url" : "https://ci.eclipse.org/jgit"
        },
        {
          "type" : "distribution",
          "url" : "https://repo.eclipse.org/content/repositories/jgit-releases/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-jgit/jgit/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "http://dev.eclipse.org/mhonarc/lists/jgit-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://eclipse.gerrithub.io/plugins/gitiles/eclipse-jgit/jgit/org.eclipse.jgit.http.apache"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.http.apache@7.0.0.202407311305-m2?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.httpcomponents",
      "name" : "httpcore",
      "version" : "4.4.16",
      "description" : "Apache HttpComponents Core (blocking I/O)",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "28d2cd9bf8789fd2ec774fb88436ebd1"
        },
        {
          "alg" : "SHA-1",
          "content" : "51cf043c87253c9f58b539c9f7e44c8894223850"
        },
        {
          "alg" : "SHA-256",
          "content" : "6c9b3dd142a09dc468e23ad39aad6f75a0f2b85125104469f026e52a474e464f"
        },
        {
          "alg" : "SHA-512",
          "content" : "168026436a6bcf5e96c0c59606638abbdc30de4b405ae55afde70fdf2895e267a3d48bba6bdadc5a89f38e31da3d9a9dc91e1cab7ea76f5e04322cf1ec63b838"
        },
        {
          "alg" : "SHA-384",
          "content" : "ba9ceaee1a37ca3201d6a1315ecb0327b495489efd0baa155c219c475df8d3eb69fe77ab0026563db406497626da6562"
        },
        {
          "alg" : "SHA3-384",
          "content" : "b9dc44dcc7cc86d5036f26d54c4003a2d72808ae7b07a0808bb53505c6d4281b5ad213eb1f3d0fef1113dec57cb0dfe1"
        },
        {
          "alg" : "SHA3-256",
          "content" : "fd8ab51846476c6c18822151c9ec07b39a9633010b5d20ea937fc6910407bc64"
        },
        {
          "alg" : "SHA3-512",
          "content" : "b42fa528242981a9d70e4f68ab75a24292df5112c44c21b6f18cb9201ce747885ba1d4dc69bc3d14d0da46a6c2638f937c11bc45749abeb55dc89ddada90cdda"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://hc.apache.org/httpcomponents-core-ga"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/HTTPCORE"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/hc-httpclient-users/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/httpcomponents-core/tree/4.4.16/httpcore"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar"
    },
    {
      "publisher" : "Eclipse JGit Project",
      "group" : "org.eclipse.jgit",
      "name" : "org.eclipse.jgit.ssh.apache",
      "version" : "7.0.0.202407311305-m2",
      "description" : "SSH support for JGit based on Apache MINA sshd",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4cf47ba7fe4e6cecea0cca3a59e380eb"
        },
        {
          "alg" : "SHA-1",
          "content" : "4bc63167ceeaf46840d28c20e130f3fe67615d38"
        },
        {
          "alg" : "SHA-256",
          "content" : "74a2c8999e9ac6b1e9b007d6ab340624768d8380e83a7dc67d39d78d93bd21f0"
        },
        {
          "alg" : "SHA-512",
          "content" : "89eb68d72ec0cb390ca59ef6b8fbfff80ac60d5c196e7374baea253c5fb06f60ed9f6aed7ba00aa3283539bdc84b8807e49b471e76aef4808f238044205e22ed"
        },
        {
          "alg" : "SHA-384",
          "content" : "2aa583878eb76ae10694ad10f630ebe1ccbe117067efd4de6fbf75cfa7b55ddaea5b27242512a2ebb6d7cb5948c1c85b"
        },
        {
          "alg" : "SHA3-384",
          "content" : "504caba4eaa109033aaa8918eaf26050852f3d02eabd7712092914a23ab1179ffeaf17660dd2da4e54e95ae12cf4bccb"
        },
        {
          "alg" : "SHA3-256",
          "content" : "2494e0ccd96b58a6b67a68f7bff2a93f0ce57cb217a230d7ba6ab6f90d092502"
        },
        {
          "alg" : "SHA3-512",
          "content" : "4c3a9dcfc8db69562ef4f91b6372b93a2e6520cd2655b8909003e81486cc1819b1a6a35158276237ec93ba3c100e1c3c13769ef2a7cb4668f30aa865fcc129b4"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause",
            "url" : "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.ssh.apache@7.0.0.202407311305-m2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.eclipse.org/jgit//org.eclipse.jgit.ssh.apache"
        },
        {
          "type" : "build-system",
          "url" : "https://ci.eclipse.org/jgit"
        },
        {
          "type" : "distribution",
          "url" : "https://repo.eclipse.org/content/repositories/jgit-releases/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-jgit/jgit/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "http://dev.eclipse.org/mhonarc/lists/jgit-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://eclipse.gerrithub.io/plugins/gitiles/eclipse-jgit/jgit/org.eclipse.jgit.ssh.apache"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.ssh.apache@7.0.0.202407311305-m2?type=jar"
    },
    {
      "group" : "net.i2p.crypto",
      "name" : "eddsa",
      "version" : "0.3.0",
      "description" : "Implementation of EdDSA in Java",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "ee7de3b6f19de76a06e465efc978f669"
        },
        {
          "alg" : "SHA-1",
          "content" : "1901c8d4d8bffb7d79027686cfb91e704217c3e1"
        },
        {
          "alg" : "SHA-256",
          "content" : "4dda1120db856640dbec04140ed23242215a075fe127bdefa0dcfa29fb31267d"
        },
        {
          "alg" : "SHA-512",
          "content" : "637e75ef4b58b280af057546afc176dbf3becf2b69f7dd31a716a90e01c01d7b1bcd400b29efeeea6b34df9ade7922c0665a000a3a2db5a446df293f8d1429cc"
        },
        {
          "alg" : "SHA-384",
          "content" : "e13f22b10a675c9a4180ac051c7e07b839e2131188837071e8760162377c649d7c56e64e279f5ff990547495535b4632"
        },
        {
          "alg" : "SHA3-384",
          "content" : "fa7f056ced9efd6cd90b124ef97a63007d9fe68ffd954c9bbdc15229af958807122460a79aa46f1bcbfff0036afc71d4"
        },
        {
          "alg" : "SHA3-256",
          "content" : "852e263100c291206a8a2afa9a2d9e6f486d3ef40a7fe3b1c3d58e5a8a2c8b60"
        },
        {
          "alg" : "SHA3-512",
          "content" : "0a8c062bec2abdbf97028611b5001b392a433183c1467383e61deab3bf4481f3766c3c7290cdca8bd02a007d7dcd8f2ace99a6c07eb3f74aac48ecd139ba3884"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "CC0-1.0"
          }
        }
      ],
      "purl" : "pkg:maven/net.i2p.crypto/eddsa@0.3.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/str4d/ed25519-java"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/str4d/ed25519-java"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/net.i2p.crypto/eddsa@0.3.0?type=jar"
    },
    {
      "publisher" : "Eclipse JGit Project",
      "group" : "org.eclipse.jgit",
      "name" : "org.eclipse.jgit.ssh.apache.agent",
      "version" : "7.0.0.202407311305-m2",
      "description" : "Support for ssh-agent for the Apache MINA sshd SSH connector",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "af83ec96f3ef285efcc0227b26fc3721"
        },
        {
          "alg" : "SHA-1",
          "content" : "0833fae15b71b92bb3e4aadfbeadfbb96c4fcf8c"
        },
        {
          "alg" : "SHA-256",
          "content" : "edeb081a3218a8d198fd34434c1522ef5a78a9a88f2ae715d6a9ac482d0ba7e5"
        },
        {
          "alg" : "SHA-512",
          "content" : "6a46aeddaaa865a581634b40ef6686014ef264fcd185625a89e300761b84bcc2eaef2e5fb9aa84685314ca496b1095578f5b9205e9e2e93ddebc12f25483d453"
        },
        {
          "alg" : "SHA-384",
          "content" : "d9bc39ca41ec408e4b7e70072070813d111ffda5b52d17bbe1ac1576b6eebbf080cf53e234078459ec97853296222410"
        },
        {
          "alg" : "SHA3-384",
          "content" : "fe6cd193a886fe002e54ec34c0a744c46acf990b8bbcfbe195a177c9d306bb5773d670eebb46c468f6e94fcb47270fa6"
        },
        {
          "alg" : "SHA3-256",
          "content" : "975be94808925ea83cd852d47980cdc0ec0068519219face5644a012181c0ddf"
        },
        {
          "alg" : "SHA3-512",
          "content" : "f3a4df1ca93d07de633bdbbd0abb3e6116a51cf35669aa9aa772e1d6c711c2d707e7752276700827b060336e9fd71a18e0b8dca1774117242e824e9c9ec298fa"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause",
            "url" : "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.ssh.apache.agent@7.0.0.202407311305-m2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.eclipse.org/jgit//org.eclipse.jgit.ssh.apache.agent"
        },
        {
          "type" : "build-system",
          "url" : "https://ci.eclipse.org/jgit"
        },
        {
          "type" : "distribution",
          "url" : "https://repo.eclipse.org/content/repositories/jgit-releases/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-jgit/jgit/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "http://dev.eclipse.org/mhonarc/lists/jgit-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://eclipse.gerrithub.io/plugins/gitiles/eclipse-jgit/jgit/org.eclipse.jgit.ssh.apache.agent"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.ssh.apache.agent@7.0.0.202407311305-m2?type=jar"
    },
    {
      "group" : "net.java.dev.jna",
      "name" : "jna",
      "version" : "5.14.0",
      "description" : "Java Native Access",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "8b3cc652920435ad9f801e6d9b2a3497"
        },
        {
          "alg" : "SHA-1",
          "content" : "67bf3eaea4f0718cb376a181a629e5f88fa1c9dd"
        },
        {
          "alg" : "SHA-256",
          "content" : "34ed1e1f27fa896bca50dbc4e99cf3732967cec387a7a0d5e3486c09673fe8c6"
        },
        {
          "alg" : "SHA-512",
          "content" : "9b4963d049c735192a46216b392e5f718aa2441f4cb318f999188c0ac39b1a3da31e91da01cca7c6bb37772b4a3d9d8ca18ed719bad54d334da40161f49e2eb2"
        },
        {
          "alg" : "SHA-384",
          "content" : "2338597e15be0a8cb9a26599b744b044cd7c9b73b6e18e8b3db04233140521cde4aff484098d44a0e91a25e8636c5f1d"
        },
        {
          "alg" : "SHA3-384",
          "content" : "6f9f4f890574e993942281ad1c97ece05d8987e4933c34f3515168c86466a5d99919129c3158c8d5b71b8b2a91709b21"
        },
        {
          "alg" : "SHA3-256",
          "content" : "3a4b5c008deee746be7d0a95c42e6a78524b2aa911a83054eb95284b38a8cdc6"
        },
        {
          "alg" : "SHA3-512",
          "content" : "5701b6ccaddccecb9dfcc33b72047ad5677e4066e0e981ddaa9a766c6089482b8430f91b39520cfd118ca41e3ec462522be91c0bcf0460934fbc9bf90cd0fadf"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "LGPL-2.1-or-later",
            "url" : "https://www.gnu.org/licenses/old-licenses/lgpl-2.1-standalone.html"
          }
        },
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/net.java.dev.jna/jna@5.14.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/java-native-access/jna"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/java-native-access/jna"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/net.java.dev.jna/jna@5.14.0?type=jar"
    },
    {
      "group" : "net.java.dev.jna",
      "name" : "jna-platform",
      "version" : "5.14.0",
      "description" : "Java Native Access Platform",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "3bc3f09a698e6ad250dd093f64fbb8a7"
        },
        {
          "alg" : "SHA-1",
          "content" : "28934d48aed814f11e4c584da55c49fa7032b31b"
        },
        {
          "alg" : "SHA-256",
          "content" : "ae4caceb3840730c2537f9b7fb55a01baba580286b4122951488bcee558c2449"
        },
        {
          "alg" : "SHA-512",
          "content" : "6d6e5292b50c53c6b42bcf293cd28ccf32f8580e6818329604af4277e916d375e436b4f3858586f5e07a93405a930e04d88d6384bc9f1ac2d58de4bb7180faeb"
        },
        {
          "alg" : "SHA-384",
          "content" : "bc7ce0c8e1d96c7fb4c6ac63af2cd8f58762e4c75ee07f38363baebdd40a0174b8e58e9e2561e38dd6957075a2450f9f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "3b8c6e51db79159954624a33101df8b4e4f97552e71d4acd2e626b7aae8a1cf0fa6bdfb73a1aecb76cc5289fe7bf9cad"
        },
        {
          "alg" : "SHA3-256",
          "content" : "5d093bc369bc9635ad309c8be702dd7c8969f5d6c8099c1aa14735564d81559b"
        },
        {
          "alg" : "SHA3-512",
          "content" : "8c0213d254dbe3e7751782dff5f949cb94b4f61dc4d1c9a1c31a9eb57aa14f6b84babbe91dab27daf539f74bb6b55dbbc46752e534b9e6cea4b39bdb69faf668"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "LGPL-2.1-or-later",
            "url" : "https://www.gnu.org/licenses/old-licenses/lgpl-2.1-standalone.html"
          }
        },
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/net.java.dev.jna/jna-platform@5.14.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/java-native-access/jna"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/java-native-access/jna"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/net.java.dev.jna/jna-platform@5.14.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.httpcomponents",
      "name" : "httpclient",
      "version" : "4.5.14",
      "description" : "Apache HttpComponents Client",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "2cb357c4b763f47e58af6cad47df6ba3"
        },
        {
          "alg" : "SHA-1",
          "content" : "1194890e6f56ec29177673f2f12d0b8e627dec98"
        },
        {
          "alg" : "SHA-256",
          "content" : "c8bc7e1c51a6d4ce72f40d2ebbabf1c4b68bfe76e732104b04381b493478e9d6"
        },
        {
          "alg" : "SHA-512",
          "content" : "a084ef30fb0a2a25397d8fab439fe68f67e294bf53153e2e1355b8df92886d40fe6abe35dc84f014245f7158e92641bcbd98019b4fbbd9e5a0db495b160b4ced"
        },
        {
          "alg" : "SHA-384",
          "content" : "c8ccaa1fa8ba7c421413e3c30375bd9c31284e837c476fd831e18043ad4187e92166f49554123108891241bed674b95d"
        },
        {
          "alg" : "SHA3-384",
          "content" : "9a17dfcf12b2af3a9b006ec369f9bc78ba322348bf1a01146e0d4f3fec2bed6cbe8b2193fac5b4d5a0c3036c06477510"
        },
        {
          "alg" : "SHA3-256",
          "content" : "48f0a61b691e22dec9d6db8e0b58be4ca17a42a2846c82f0875de21f72bb0faa"
        },
        {
          "alg" : "SHA3-512",
          "content" : "4ad2c9adc761b7e813330f0dcad3f9978702896c7d0cbf81f60a472d550e320b1527be425ba597c8c9352d587e32e1d46ceb4c73e99c70a6190df4c699a7c2a9"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.httpcomponents/httpclient@4.5.14?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://hc.apache.org/httpcomponents-client-ga"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/HTTPCLIENT"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/hc-httpclient-users/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/httpcomponents-client/tree/4.5.14/httpclient"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.httpcomponents/httpclient@4.5.14?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-logging",
      "name" : "commons-logging",
      "version" : "1.3.2",
      "description" : "Apache Commons Logging is a thin adapter allowing configurable bridging to other, well-known logging systems.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4b970f3b14a5e53d8e8edff1cf2ecd91"
        },
        {
          "alg" : "SHA-1",
          "content" : "3dc966156ef19d23c839715165435e582fafa753"
        },
        {
          "alg" : "SHA-256",
          "content" : "6b858424f518015f32bfcd1183a373f4a827d72d026b6031da0c91cf0e8f3489"
        },
        {
          "alg" : "SHA-512",
          "content" : "9c56baa1371fafccd49f035a4cdcc667f3e6040b07748e04b1b74a225cb5307478f95b2d202e3ca51d89d3757ce046554091c63a1b769ac35ca60c69d058eee2"
        },
        {
          "alg" : "SHA-384",
          "content" : "d3388b679d699e0b37914d29f5dadb187ace1cd59d5192a5c726a75747828dba47c7e99be04c784f00b0949c43c7eb1f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "c032a7514d2d234479d48cd164b0826a12d0c6025bc1e4b5f083485d58f41a7d7e18799aa6a7005c1bf10b7423da8792"
        },
        {
          "alg" : "SHA3-256",
          "content" : "e97bd2bc00770013cb49c9431ab425a75f338bcb7775b3a9d198b244864c5dc5"
        },
        {
          "alg" : "SHA3-512",
          "content" : "8a1ad351653f659643250b3ebc2119b2ea1e4403fea71a43c1a69ddafbe4ce641e5157a4df7426edbe52e638812e3c1d2b24250deb7bf04af06e69e11d9b1388"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-logging/commons-logging@1.3.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-logging/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-parent/actions"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/LOGGING"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf/commons-logging"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-logging/commons-logging@1.3.2?type=jar"
    },
    {
      "publisher" : "QOS.ch",
      "group" : "org.slf4j",
      "name" : "slf4j-simple",
      "version" : "1.7.36",
      "description" : "SLF4J Simple binding",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "fd4a5fa54910b5ee561f639c903cf34a"
        },
        {
          "alg" : "SHA-1",
          "content" : "a41f9cfe6faafb2eb83a1c7dd2d0dfd844e2a936"
        },
        {
          "alg" : "SHA-256",
          "content" : "2f39bed943d624dfa8f4102d0571283a10870b6aa36f197a8a506f147010c10f"
        },
        {
          "alg" : "SHA-512",
          "content" : "cdcebe8fa58527a1bc7da0c18e90a9547ce8ac99cccfe5657860c2a25478c030ea758251da3e32a71eab9cbb91360692b5c6c5887a1f1597d1fda07151b27e5f"
        },
        {
          "alg" : "SHA-384",
          "content" : "57eb6d0c778ad9637a819fe64ab6a7b5e291c1c2e5e9a8f536c553e54837fe0e26b9ef5a83ce25c7e3e7e8c5d455ab24"
        },
        {
          "alg" : "SHA3-384",
          "content" : "15809f42dc66ec21d8d931c2e10cbb1c2c7c580678c1946a0e4fc8b5c7cec5ff001a5551979693a59fbfa1420ba0c038"
        },
        {
          "alg" : "SHA3-256",
          "content" : "a313022d52742de983fa574ebaaf3c6fbb173b0d823a6c31b2a22f429e03a428"
        },
        {
          "alg" : "SHA3-512",
          "content" : "335556e92ec298e2db4e2aa6d4cff0f61fdee178f8889c84db35b9236f08c4c371cc7ff27a77b16699d531111d0eb3ead3696738ed2bd726f75add07f2c51017"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl" : "pkg:maven/org.slf4j/slf4j-simple@1.7.36?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.slf4j.org"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/qos-ch/slf4j/slf4j-simple"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.slf4j/slf4j-simple@1.7.36?type=jar"
    },
    {
      "publisher" : "Webtide",
      "group" : "org.eclipse.jetty.ee10",
      "name" : "jetty-ee10-servlet",
      "version" : "12.0.10",
      "description" : "Jetty Servlet Container",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a5e3d54bc2843d2a61dcd6b5888de567"
        },
        {
          "alg" : "SHA-1",
          "content" : "a8d087bde78f231084901553bb6829663b4a22f1"
        },
        {
          "alg" : "SHA-256",
          "content" : "d9d6132ce1a7e99cf01ea25b61d6a8a8c255ae6628357d22129d3b3b51d4b960"
        },
        {
          "alg" : "SHA-512",
          "content" : "992d9049ad368dc33afcc8b86a27b9c65a64d8f0d46e839fe21b40117172941f73a4a4267d5deb11153beec5680420768150b38613015f58fbfe8ec93f2d6504"
        },
        {
          "alg" : "SHA-384",
          "content" : "3a603d1e9f41a42cfe867e5199578da9994936a1b3d3a47ca0ea6668794444ebc94f1e3e341478b68be8dbcf6dd7e0d1"
        },
        {
          "alg" : "SHA3-384",
          "content" : "34d59a812da6a0dd67f02a06862f0bf9086ee5092225d11c2c152e54805ad875154f9fd695195aff5c54a569671ea951"
        },
        {
          "alg" : "SHA3-256",
          "content" : "44e9f7671c30886c189afcb1ac636709aa1b35aa580db6d23f347cae4e99cea9"
        },
        {
          "alg" : "SHA3-512",
          "content" : "80ff0382fb7b7a210094f6e5822c7085699ffe191b2596c8c5630df6e114533896596de47a757023858f60418f847ac964c91ebeb8137fb66efa291c60a77908"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jetty.ee10/jetty-ee10-servlet@12.0.10?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://eclipse.dev/jetty/jetty-ee10/jetty-ee10-servlet"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/jetty/jetty.project/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://www.eclipse.org/lists/jetty-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/jetty/jetty.project/jetty-ee10/jetty-ee10-servlet"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jetty.ee10/jetty-ee10-servlet@12.0.10?type=jar"
    },
    {
      "publisher" : "Eclipse Foundation",
      "group" : "jakarta.servlet",
      "name" : "jakarta.servlet-api",
      "version" : "6.0.0",
      "description" : "Eclipse Enterprise for Java (EE4J) is an open source initiative to create standard APIs, implementations of those APIs, and technology compatibility kits for Java runtimes that enable development, deployment, and management of server-side and cloud-native applications.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4bcb3175ed9b7aa3f038d082879ec2a8"
        },
        {
          "alg" : "SHA-1",
          "content" : "abecc699286e65035ebba9844c03931357a6a963"
        },
        {
          "alg" : "SHA-256",
          "content" : "c034eb1afb158987dbb53a5fea0cadf611c8dae8daadd59c44d9d5ab70129cef"
        },
        {
          "alg" : "SHA-512",
          "content" : "b810ce040ed0671a3161fb197845f3ae750cd38c474ef54c351b7b127ff3b4d624a26c33450c62474f42c1cde21c65324cda63b1b3ea0515a286e0bcb0c0c9d5"
        },
        {
          "alg" : "SHA-384",
          "content" : "2f02e56f5b0a3a7191b6cea6e3b872d8d29503299751c6dabfdf4d61b1ae2b431be9c13801083cd6e516b8f52ab38a95"
        },
        {
          "alg" : "SHA3-384",
          "content" : "373855d3aef3be1d54046c33d76daa0a3db62b04e0bfa5957670f17ede4f74426b9d858159e67eb6abc723278f272c23"
        },
        {
          "alg" : "SHA3-256",
          "content" : "cb8c3221eb78148915a75489df9d25665cd41b8949ede82c5ee7a792b1b32fe0"
        },
        {
          "alg" : "SHA3-512",
          "content" : "689137c5de2c0972392e181a4f03e5a1b3f839238839a28442da9aa91f4e5c2980eb48a0107c0fbcd2d35a44ab8a4d698fa197e0dadf264f3e547043fc15dba3"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl" : "pkg:maven/jakarta.servlet/jakarta.servlet-api@6.0.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://projects.eclipse.org/projects/ee4j.servlet"
        },
        {
          "type" : "distribution",
          "url" : "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/servlet-api/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/servlet-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/servlet-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/jakarta.servlet/jakarta.servlet-api@6.0.0?type=jar"
    },
    {
      "publisher" : "Webtide",
      "group" : "org.eclipse.jetty",
      "name" : "jetty-security",
      "version" : "12.0.10",
      "description" : "The common Jetty security implementation",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "968e3ce7af094dc5f7fcc0b136f983f9"
        },
        {
          "alg" : "SHA-1",
          "content" : "a7bd8056fa84439411f60fedd8a94b1983880cf9"
        },
        {
          "alg" : "SHA-256",
          "content" : "f8e6261f1d08ada301142c8183a483b512c91052f26e32bc7ec9864c39461816"
        },
        {
          "alg" : "SHA-512",
          "content" : "86dbf80b60132ad5393d30dc506b6c235d7837a5527aeba9e726047952de18a91ba0e8aaf51644c78bdf8c48f4e8cca2316ce767237adbac6c632ae2eb7fac37"
        },
        {
          "alg" : "SHA-384",
          "content" : "2d8bc1c281320af8f79b2cc952d2d41702b5382c87c4186216ef23b11e7e7a40a55779f8f4dfc3796412e8d709042cf0"
        },
        {
          "alg" : "SHA3-384",
          "content" : "a24bcc71328622248fbe9752d7b76c34dc52cb840695439659320f56643f62e21997cc7f9cfeb5fd4230b741d37ed794"
        },
        {
          "alg" : "SHA3-256",
          "content" : "e4a19ccb167e6e149ef317643fab1536d6d46bd3826a89d3d743add227caeae6"
        },
        {
          "alg" : "SHA3-512",
          "content" : "15a5ac6c2ee396a366bc068e0696386e8b3bf501c555729840c3cf021855f25b1d4f7bc0489bb2847649ea1a98d1d1ec3b7debaf65392035437602214402528d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jetty/jetty-security@12.0.10?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://eclipse.dev/jetty/jetty-core/jetty-security"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/jetty/jetty.project/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://www.eclipse.org/lists/jetty-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/jetty/jetty.project/jetty-core/jetty-security"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jetty/jetty-security@12.0.10?type=jar"
    },
    {
      "publisher" : "Webtide",
      "group" : "org.eclipse.jetty",
      "name" : "jetty-server",
      "version" : "12.0.10",
      "description" : "The legacy jetty server artifact.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b3ca6d7dc9899fef3bac42b87a244d45"
        },
        {
          "alg" : "SHA-1",
          "content" : "0dcdef1c9ead5040e6b637512ab1794191058a22"
        },
        {
          "alg" : "SHA-256",
          "content" : "87980d458878c4ea5f598785226733b8c70c0643ee25b2ca80480facf2dd2e3a"
        },
        {
          "alg" : "SHA-512",
          "content" : "05345ab0d64857eddb46f45e4a7dfab0ef0bf0295cf8d2756a29d44b58a02203c081e5d1236b3661767fe73a5f77a4d3f175bd87a252dd4e98c2dc9f4f18596a"
        },
        {
          "alg" : "SHA-384",
          "content" : "93c78f91ac59266e21f6a527d0b6480bc11f6b74ed29ffa7d3ded082bf643c7762f3c02fd1395ea2c6c6cc908c28bee9"
        },
        {
          "alg" : "SHA3-384",
          "content" : "f3d192fb5539ef8c200751bfa9909d8ce95b892c029170eba4b260a37c5864234d6ae9100145913fcbf92fcf700e78eb"
        },
        {
          "alg" : "SHA3-256",
          "content" : "327e6812bdabe3193563e9fda642c86762ed10225b2dbffc93d8a594bb778019"
        },
        {
          "alg" : "SHA3-512",
          "content" : "1674b23b5838e5415ec4f6105e4eff1c0b02aff47326ba754a1411de0821d9a5b1f73b93a4040b5aa0355fd210597499fe9a9b4cc619cfd968ef45be7b634190"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jetty/jetty-server@12.0.10?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://eclipse.dev/jetty/jetty-core/jetty-server"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/jetty/jetty.project/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://www.eclipse.org/lists/jetty-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/jetty/jetty.project/jetty-core/jetty-server"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jetty/jetty-server@12.0.10?type=jar"
    },
    {
      "publisher" : "Webtide",
      "group" : "org.eclipse.jetty",
      "name" : "jetty-http",
      "version" : "12.0.10",
      "description" : "The Eclipse Jetty Project",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "627fdf8c92bba25c7e1a4bb5ecfc4adb"
        },
        {
          "alg" : "SHA-1",
          "content" : "71f438b9cf1ba0b3411c5eddd386eeeeca25168a"
        },
        {
          "alg" : "SHA-256",
          "content" : "7cf9e68328a7e05748aca8d3eab7e31e0787481149a26faa0dddbb4642778f03"
        },
        {
          "alg" : "SHA-512",
          "content" : "6d271e8a231213bf9242dfbaf41deb2f7e9beb776c9a85dbbb479f70cc7431220fb1e1ad776370365e6152d4f28b101463dba08973a9be27207710c0c58b20f5"
        },
        {
          "alg" : "SHA-384",
          "content" : "62a0c8ff1c642e61da40e8fea16529c367b00d8e1147f121880f347c6c109881fe5aa2051efa2e145d9b5b9e14cf4ad0"
        },
        {
          "alg" : "SHA3-384",
          "content" : "aeba5c1dfde787d09a3a91b88a03a7a3c67439e02cabf2779440dcc548943ae7d7e4df4ef6f36df5945c9dd8c5b67508"
        },
        {
          "alg" : "SHA3-256",
          "content" : "b369af6930e364f8c72787bfb68e63d62de323de4c7ac3514af4fcfc382ad466"
        },
        {
          "alg" : "SHA3-512",
          "content" : "7afe1b8030c2998576844a9950a3ef1fc76afd2a80254970fe4cf341260de4e43d54a5c768a7070ba5fe87bc306acacb3bfd6faa482fba2644e72d9be51611f3"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jetty/jetty-http@12.0.10?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://eclipse.dev/jetty/jetty-core/jetty-http"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/jetty/jetty.project/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://www.eclipse.org/lists/jetty-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/jetty/jetty.project/jetty-core/jetty-http"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jetty/jetty-http@12.0.10?type=jar"
    },
    {
      "publisher" : "Webtide",
      "group" : "org.eclipse.jetty",
      "name" : "jetty-util",
      "version" : "12.0.10",
      "description" : "Utility classes for Jetty",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0902d8b499b63c072e18f00b731a10ae"
        },
        {
          "alg" : "SHA-1",
          "content" : "ec7c95b5a289560f4a7be57170f4fdbedde72b92"
        },
        {
          "alg" : "SHA-256",
          "content" : "c2efa291ba43ca171ce3eedc8bf4d46af89d15cd1e1cd91b351b1d55bf96364a"
        },
        {
          "alg" : "SHA-512",
          "content" : "ebb460961871339418460ef3c6d710217cf992568a24375ad1b3403197dad23aa58e28fb2822cbe66034c43ddc8859df386e1bddac9c05e29301be7167d87fc6"
        },
        {
          "alg" : "SHA-384",
          "content" : "f3729a2204fa07e79d727434a9cfab4d44bd15639926e692fa1ef99b40a317b9896178e5912355e33e8343a40781d2d1"
        },
        {
          "alg" : "SHA3-384",
          "content" : "368b886195de7d2ac7d8dd6815b320dede78ce3ecb6731ea1b97fc4a2c39876718ec4fd4b92fe547d07a9a1e4e63fd3e"
        },
        {
          "alg" : "SHA3-256",
          "content" : "3f6ca02e1bc309ae10b3e971ecc2b7c32b651a59898ebe0ee1b5832898528ebc"
        },
        {
          "alg" : "SHA3-512",
          "content" : "eedc879ab09d45945bf8904450126cfc2e7043e924fd714d81b3f5466e58352d33471b544754020b0d08e0819fa1f16c5c82b407b1c167f56479d341e518ddef"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jetty/jetty-util@12.0.10?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://eclipse.dev/jetty/jetty-core/jetty-util"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/jetty/jetty.project/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://www.eclipse.org/lists/jetty-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/jetty/jetty.project/jetty-core/jetty-util"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jetty/jetty-util@12.0.10?type=jar"
    },
    {
      "publisher" : "Webtide",
      "group" : "org.eclipse.jetty",
      "name" : "jetty-io",
      "version" : "12.0.10",
      "description" : "The Eclipse Jetty Project",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e8c9ffca5e14a02ef80fafd3cbfcf101"
        },
        {
          "alg" : "SHA-1",
          "content" : "4d5ddfc6ad4d6504531861806fade68c7d477f1b"
        },
        {
          "alg" : "SHA-256",
          "content" : "7d9031d2efc1a1d872888340075651b5c1e2516b44e499770c97823c8017d333"
        },
        {
          "alg" : "SHA-512",
          "content" : "59153d80cb3cdd72b2a670f8224006613edaa4ff0fb946f0f8d80b0ab1cfd2e3363d3b59edde9ac9956025ab2ee5cf50f4e7292922455661f025604e560853f4"
        },
        {
          "alg" : "SHA-384",
          "content" : "02befcbc41cfbe0431b9d3f3b1ba2380f2d96969ff8237e72e88e596e0c53efa4d692bd91ec0fc3555a045fca89201d8"
        },
        {
          "alg" : "SHA3-384",
          "content" : "7d976f7d84e1a6748f355261865eb66502e22b39b5a09bd83928370b3206aa8c311eee220476c967a210a0f800519b37"
        },
        {
          "alg" : "SHA3-256",
          "content" : "e557ffc5e86c97a5b65922a2bbfe645c7a7e7b3a20414a938abfad4c2a7c6108"
        },
        {
          "alg" : "SHA3-512",
          "content" : "6b84180b92b32a160c8a0650e227012800e9ac80c83fcbee07cb13730546877573668431795a51c3e394368facf38a1e79b0ab11df868ec4e5894b30d361993d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jetty/jetty-io@12.0.10?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://eclipse.dev/jetty/jetty-core/jetty-io"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/jetty/jetty.project/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://www.eclipse.org/lists/jetty-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/jetty/jetty.project/jetty-core/jetty-io"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jetty/jetty-io@12.0.10?type=jar"
    },
    {
      "publisher" : "Webtide",
      "group" : "org.eclipse.jetty",
      "name" : "jetty-session",
      "version" : "12.0.10",
      "description" : "The common jetty session implementation",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "796a7b4877a32b3114e4e7d0ea069fa5"
        },
        {
          "alg" : "SHA-1",
          "content" : "96dd580a79d938b532e8cff47475efbcaa80ea58"
        },
        {
          "alg" : "SHA-256",
          "content" : "08aae11263cd1f0c698fb3f07cf77662a436b62486bf41a1215a335718a944fc"
        },
        {
          "alg" : "SHA-512",
          "content" : "a679722bc3a8bcdb2e4d96f43a34da27b672d3808e054dc82060ddaf303709e230f73b4611931d24184520f2fd79747a6113d8b438c7a34140df47908af2be2e"
        },
        {
          "alg" : "SHA-384",
          "content" : "f228471ac3efd422fd2bce6b158f861a4864556e49937b1f6ea1934d3fc5e18ea2562c2c2f119ed0a5d543fc53b28a01"
        },
        {
          "alg" : "SHA3-384",
          "content" : "63f91ffcb63a69cd137fee51f034f19d93548cbc233f6f2a0dba0b87fe296e53196784b2186a5c2955d51a768cb4d7db"
        },
        {
          "alg" : "SHA3-256",
          "content" : "4544259999d3928590f4a5c66b223202318b30224d31bf5a33e86c67f4c73128"
        },
        {
          "alg" : "SHA3-512",
          "content" : "8f9c127571ce9da3b2f371380afb3d14bd2b872f2741a770ef055f9c26e57a20ab6d1ea6dd2e71761358cf3d5958626eea2adff76dcac963434c888aa593f5d6"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jetty/jetty-session@12.0.10?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://eclipse.dev/jetty/jetty-core/jetty-session"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/jetty/jetty.project/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://www.eclipse.org/lists/jetty-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/jetty/jetty.project/jetty-core/jetty-session"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jetty/jetty-session@12.0.10?type=jar"
    },
    {
      "publisher" : "Eclipse JGit Project",
      "group" : "org.eclipse.jgit",
      "name" : "org.eclipse.jgit.lfs",
      "version" : "7.0.0.202407311305-m2",
      "description" : "JGit Large File Storage (LFS) implementation.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "ccc7d301901d201f917e609f2cf45847"
        },
        {
          "alg" : "SHA-1",
          "content" : "ae65b2d43bd73d29cfbc42584e9a11bc25643a50"
        },
        {
          "alg" : "SHA-256",
          "content" : "b7e758abf69ca12172e84400df15ac3edaf0e2290abd7214e4fb8cb30ab9f0a6"
        },
        {
          "alg" : "SHA-512",
          "content" : "15b72fcfa8ee97bdfad2e853708644d967ef21a14593aa9b990e9898f6576b3b5a6bc91e62367311235897e035d4c8bb2fb8c8af95b1e59eaae36c098da8cf23"
        },
        {
          "alg" : "SHA-384",
          "content" : "06399592131bf91446c32d8085ba4605c46278aff7a717de5b35c193d23873890acc426dcc37a27d17266fb0d220eeff"
        },
        {
          "alg" : "SHA3-384",
          "content" : "62fca54e55ae37011ecb42eeb3b050592bdff5e3c44c1be0a666b19ffa5bb5712e2106e27d8eeb3adecbd98f52c2d29e"
        },
        {
          "alg" : "SHA3-256",
          "content" : "89cf0f474affc294ccb53c5f2af5e5a2e0f871f467ead7369b3494dd438973b0"
        },
        {
          "alg" : "SHA3-512",
          "content" : "7ec79195dd6dc7c2863b3fc659ae0a122e6e766b05232e3263bac3d49361b5b870bcfa4b676fe0f4e287d4c9fdb7fd671195890e7eec79fcddc33f7617fa876e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause",
            "url" : "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.lfs@7.0.0.202407311305-m2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.eclipse.org/jgit//org.eclipse.jgit.lfs"
        },
        {
          "type" : "build-system",
          "url" : "https://ci.eclipse.org/jgit"
        },
        {
          "type" : "distribution",
          "url" : "https://repo.eclipse.org/content/repositories/jgit-releases/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-jgit/jgit/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "http://dev.eclipse.org/mhonarc/lists/jgit-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://eclipse.gerrithub.io/plugins/gitiles/eclipse-jgit/jgit/org.eclipse.jgit.lfs"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.lfs@7.0.0.202407311305-m2?type=jar"
    },
    {
      "group" : "com.google.code.gson",
      "name" : "gson",
      "version" : "2.11.0",
      "description" : "Gson JSON library",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0c69b9199d3a4e6c34dc03619ff7feee"
        },
        {
          "alg" : "SHA-1",
          "content" : "527175ca6d81050b53bdd4c457a6d6e017626b0e"
        },
        {
          "alg" : "SHA-256",
          "content" : "57928d6e5a6edeb2abd3770a8f95ba44dce45f3b23b7a9dc2b309c581552a78b"
        },
        {
          "alg" : "SHA-512",
          "content" : "b8c91426a8275b42ea5c55b104308ffbe656ae3354bc661f62173352e53a4818a009e4dd82bc6cf518c77fda5a4d2eab0d3ad832581a8f0d87966ef04e6c025a"
        },
        {
          "alg" : "SHA-384",
          "content" : "8720df1ca6f2258a71b7f2307e2b49f0ad2379bc93e93be6a6c619e52b95dbe5a080a49149e8708ce1890e97b47b9bbf"
        },
        {
          "alg" : "SHA3-384",
          "content" : "e3e268c6f8c75f018c7c8160fba7fe373242d45a2313b5c7823f3f75fcc04bbf93cb43c08ba2998b01b8a3c685d77280"
        },
        {
          "alg" : "SHA3-256",
          "content" : "aa4162683be07c5de9c962e88301054ea42a9bed2257a5e4e650545624a2c094"
        },
        {
          "alg" : "SHA3-512",
          "content" : "31730c961b8920673ac3e973a16272752a46df479bfc0ce4dfb6dd324e32d34e5006247d6b5508b8fdc785ba5ffb42534ea3fa2d7094191febcac60654230e24"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.code.gson/gson@2.11.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/google/gson"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/google/gson/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/google/gson/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.code.gson/gson@2.11.0?type=jar"
    },
    {
      "publisher" : "Google LLC",
      "group" : "com.google.errorprone",
      "name" : "error_prone_annotations",
      "version" : "2.27.0",
      "description" : "Error Prone is a static analysis tool for Java that catches common programming mistakes at compile-time.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "fb183180666ce3d0a24ef7ba02d7193c"
        },
        {
          "alg" : "SHA-1",
          "content" : "91b2c29d8a6148b5e2e4930f070d4840e2e48e34"
        },
        {
          "alg" : "SHA-256",
          "content" : "24c923372c58e35d0b9f16a028929bb9aedc77521867c274f2bd0735df5ba1f5"
        },
        {
          "alg" : "SHA-512",
          "content" : "479f3c5e25a7ccd90adf70a9b1a71bae18205681ce966618b2ba28aea1b10c087b10ca7172e7b34384901b5e8d2dd009f1cdcbcd2a01be55082d276245de0a35"
        },
        {
          "alg" : "SHA-384",
          "content" : "b71b73336df13a8d102933d851f2ceb486d8554cfdc717f38fb2d36234a7b0c9bc015112c9d0c7c3520a081fa85c55b7"
        },
        {
          "alg" : "SHA3-384",
          "content" : "94e94fd4ad6e3340aff5b059746395abc4952d4b7f570576f5eee0efb7f8801f2ac0b4c95aba400afc8ac1204e96e630"
        },
        {
          "alg" : "SHA3-256",
          "content" : "faa04401fbf3938684fa829d86310ac894c0646b2cdff18106f5384fcd427f84"
        },
        {
          "alg" : "SHA3-512",
          "content" : "18fdd0dd19823353693fab456226914179623be005d27a85250f5e8758d433c9e88f639556a61a03210339be6dafa86a57068e92e0254b305f1a17add4b805c9"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.27.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://errorprone.info/error_prone_annotations"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/google/error-prone/error_prone_annotations"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.27.0?type=jar"
    },
    {
      "publisher" : "Eclipse JGit Project",
      "group" : "org.eclipse.jgit",
      "name" : "org.eclipse.jgit.lfs.server",
      "version" : "7.0.0.202407311305-m2",
      "description" : "JGit Large File Storage Server implementation.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0528dd0ddb4ca627038ee06356e7c769"
        },
        {
          "alg" : "SHA-1",
          "content" : "2236905b93eb5716b05b50cbed9b1236781e67c4"
        },
        {
          "alg" : "SHA-256",
          "content" : "321d1ca67adf9ff42365eba61ab2502dbb866c1526ce5c93e6f0c503cd7bef83"
        },
        {
          "alg" : "SHA-512",
          "content" : "831d5053d6c59a13cdc922ae16afad69dc55391ff87fca5695cb5122050c1f20d16d99e92da8660952f16a4db296e4c636d4c6177508643eadf0ecc5a7dec966"
        },
        {
          "alg" : "SHA-384",
          "content" : "b264ff8601ac38dd25df823e051e9c5cd22b96d09b06c809b0a98fac7ac3b758146195df3d7ebb5bef0c04164f4e7424"
        },
        {
          "alg" : "SHA3-384",
          "content" : "3edef394f38686484d2397a5509c6e91c65ef37d972352911dc3c47bddf817ad03ff758435f762582bbb3f3cd5a73266"
        },
        {
          "alg" : "SHA3-256",
          "content" : "27385534968a61bf65f0c50180a34a6ddfe2d015ca24f78398a7ac86f7be4024"
        },
        {
          "alg" : "SHA3-512",
          "content" : "b5de6d1938a753654f8d5277c1361f68da156cd58307631604f35a71954b8a14cfbba08722ce756c1ea1187195799be4855a2d61bbf1f7b3b528e88082b9f7c1"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause",
            "url" : "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.lfs.server@7.0.0.202407311305-m2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.eclipse.org/jgit//org.eclipse.jgit.lfs.server"
        },
        {
          "type" : "build-system",
          "url" : "https://ci.eclipse.org/jgit"
        },
        {
          "type" : "distribution",
          "url" : "https://repo.eclipse.org/content/repositories/jgit-releases/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-jgit/jgit/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "http://dev.eclipse.org/mhonarc/lists/jgit-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://eclipse.gerrithub.io/plugins/gitiles/eclipse-jgit/jgit/org.eclipse.jgit.lfs.server"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.lfs.server@7.0.0.202407311305-m2?type=jar"
    }
  ],
  "dependencies" : [
    {
      "ref" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.ssh.jsch.test@7.0.0.202407311305-m2?type=jar",
      "dependsOn" : [
        "pkg:maven/junit/junit@4.13.2?type=jar",
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit@7.0.0.202407311305-m2?type=jar",
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.junit@7.0.0.202407311305-m2?type=jar",
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.junit.ssh@7.0.0.202407311305-m2?type=jar",
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.ssh.jsch@7.0.0.202407311305-m2?type=jar",
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.test@7.0.0.202407311305-m2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/junit/junit@4.13.2?type=jar",
      "dependsOn" : [
        "pkg:maven/org.hamcrest/hamcrest-core@1.3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.hamcrest/hamcrest-core@1.3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit@7.0.0.202407311305-m2?type=jar",
      "dependsOn" : [
        "pkg:maven/com.googlecode.javaewah/JavaEWAH@1.2.3?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.17.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.googlecode.javaewah/JavaEWAH@1.2.3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-codec/commons-codec@1.17.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.junit@7.0.0.202407311305-m2?type=jar",
      "dependsOn" : [
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit@7.0.0.202407311305-m2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.junit.ssh@7.0.0.202407311305-m2?type=jar",
      "dependsOn" : [
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit@7.0.0.202407311305-m2?type=jar",
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.junit@7.0.0.202407311305-m2?type=jar",
        "pkg:maven/org.apache.sshd/sshd-osgi@2.13.1?type=jar",
        "pkg:maven/org.apache.sshd/sshd-sftp@2.13.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.sshd/sshd-osgi@2.13.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/org.slf4j/jcl-over-slf4j@1.7.32?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.slf4j/jcl-over-slf4j@1.7.32?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.sshd/sshd-sftp@2.13.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/org.slf4j/jcl-over-slf4j@1.7.32?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.ssh.jsch@7.0.0.202407311305-m2?type=jar",
      "dependsOn" : [
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit@7.0.0.202407311305-m2?type=jar",
        "pkg:maven/com.jcraft/jsch@0.1.55?type=jar",
        "pkg:maven/com.jcraft/jzlib@1.1.3?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.jcraft/jsch@0.1.55?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.jcraft/jzlib@1.1.3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.test@7.0.0.202407311305-m2?type=jar",
      "dependsOn" : [
        "pkg:maven/junit/junit@4.13.2?type=jar",
        "pkg:maven/org.assertj/assertj-core@3.26.0?type=jar",
        "pkg:maven/org.mockito/mockito-core@5.12.0?type=jar",
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit@7.0.0.202407311305-m2?type=jar",
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.junit@7.0.0.202407311305-m2?type=jar",
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.junit.ssh@7.0.0.202407311305-m2?type=jar",
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.ui@7.0.0.202407311305-m2?type=jar",
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.pgm@7.0.0.202407311305-m2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.assertj/assertj-core@3.26.0?type=jar",
      "dependsOn" : [
        "pkg:maven/net.bytebuddy/byte-buddy@1.14.17?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/net.bytebuddy/byte-buddy@1.14.17?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.mockito/mockito-core@5.12.0?type=jar",
      "dependsOn" : [
        "pkg:maven/net.bytebuddy/byte-buddy@1.14.17?type=jar",
        "pkg:maven/net.bytebuddy/byte-buddy-agent@1.14.17?type=jar",
        "pkg:maven/org.objenesis/objenesis@3.3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/net.bytebuddy/byte-buddy-agent@1.14.17?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.objenesis/objenesis@3.3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.ui@7.0.0.202407311305-m2?type=jar",
      "dependsOn" : [
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit@7.0.0.202407311305-m2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.pgm@7.0.0.202407311305-m2?type=jar",
      "dependsOn" : [
        "pkg:maven/args4j/args4j@2.37?type=jar",
        "pkg:maven/org.apache.commons/commons-compress@1.26.2?type=jar",
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.archive@7.0.0.202407311305-m2?type=jar",
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit@7.0.0.202407311305-m2?type=jar",
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.ui@7.0.0.202407311305-m2?type=jar",
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.gpg.bc@7.0.0.202407311305-m2?type=jar",
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.http.apache@7.0.0.202407311305-m2?type=jar",
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.ssh.apache@7.0.0.202407311305-m2?type=jar",
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.ssh.apache.agent@7.0.0.202407311305-m2?type=jar",
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.ssh.jsch@7.0.0.202407311305-m2?type=jar",
        "pkg:maven/org.apache.httpcomponents/httpclient@4.5.14?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/org.slf4j/slf4j-simple@1.7.36?type=jar",
        "pkg:maven/org.eclipse.jetty.ee10/jetty-ee10-servlet@12.0.10?type=jar",
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.lfs@7.0.0.202407311305-m2?type=jar",
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.lfs.server@7.0.0.202407311305-m2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/args4j/args4j@2.37?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-compress@1.26.2?type=jar",
      "dependsOn" : [
        "pkg:maven/commons-codec/commons-codec@1.17.0?type=jar",
        "pkg:maven/commons-io/commons-io@2.16.1?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/commons-io/commons-io@2.16.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.archive@7.0.0.202407311305-m2?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.commons/commons-compress@1.26.2?type=jar",
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit@7.0.0.202407311305-m2?type=jar",
        "pkg:maven/org.osgi/org.osgi.core@6.0.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.osgi/org.osgi.core@6.0.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.gpg.bc@7.0.0.202407311305-m2?type=jar",
      "dependsOn" : [
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit@7.0.0.202407311305-m2?type=jar",
        "pkg:maven/org.bouncycastle/bcpg-jdk18on@1.78.1?type=jar",
        "pkg:maven/org.bouncycastle/bcprov-jdk18on@1.78.1?type=jar",
        "pkg:maven/org.bouncycastle/bcutil-jdk18on@1.78.1?type=jar",
        "pkg:maven/org.bouncycastle/bcpkix-jdk18on@1.78.1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.bouncycastle/bcpg-jdk18on@1.78.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.bouncycastle/bcprov-jdk18on@1.78.1?type=jar",
        "pkg:maven/org.bouncycastle/bcutil-jdk18on@1.78.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.bouncycastle/bcprov-jdk18on@1.78.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.bouncycastle/bcutil-jdk18on@1.78.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.bouncycastle/bcprov-jdk18on@1.78.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.bouncycastle/bcpkix-jdk18on@1.78.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.bouncycastle/bcprov-jdk18on@1.78.1?type=jar",
        "pkg:maven/org.bouncycastle/bcutil-jdk18on@1.78.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.http.apache@7.0.0.202407311305-m2?type=jar",
      "dependsOn" : [
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit@7.0.0.202407311305-m2?type=jar",
        "pkg:maven/org.apache.httpcomponents/httpclient@4.5.14?type=jar",
        "pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.httpcomponents/httpclient@4.5.14?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar",
        "pkg:maven/commons-logging/commons-logging@1.3.2?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.17.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-logging/commons-logging@1.3.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.ssh.apache@7.0.0.202407311305-m2?type=jar",
      "dependsOn" : [
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit@7.0.0.202407311305-m2?type=jar",
        "pkg:maven/org.apache.sshd/sshd-osgi@2.13.1?type=jar",
        "pkg:maven/org.apache.sshd/sshd-sftp@2.13.1?type=jar",
        "pkg:maven/net.i2p.crypto/eddsa@0.3.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/net.i2p.crypto/eddsa@0.3.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.ssh.apache.agent@7.0.0.202407311305-m2?type=jar",
      "dependsOn" : [
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit@7.0.0.202407311305-m2?type=jar",
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.ssh.apache@7.0.0.202407311305-m2?type=jar",
        "pkg:maven/net.java.dev.jna/jna@5.14.0?type=jar",
        "pkg:maven/net.java.dev.jna/jna-platform@5.14.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/net.java.dev.jna/jna@5.14.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/net.java.dev.jna/jna-platform@5.14.0?type=jar",
      "dependsOn" : [
        "pkg:maven/net.java.dev.jna/jna@5.14.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.slf4j/slf4j-simple@1.7.36?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jetty.ee10/jetty-ee10-servlet@12.0.10?type=jar",
      "dependsOn" : [
        "pkg:maven/jakarta.servlet/jakarta.servlet-api@6.0.0?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-security@12.0.10?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-server@12.0.10?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-session@12.0.10?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/jakarta.servlet/jakarta.servlet-api@6.0.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jetty/jetty-security@12.0.10?type=jar",
      "dependsOn" : [
        "pkg:maven/org.eclipse.jetty/jetty-server@12.0.10?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jetty/jetty-server@12.0.10?type=jar",
      "dependsOn" : [
        "pkg:maven/org.eclipse.jetty/jetty-http@12.0.10?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-io@12.0.10?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jetty/jetty-http@12.0.10?type=jar",
      "dependsOn" : [
        "pkg:maven/org.eclipse.jetty/jetty-io@12.0.10?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-util@12.0.10?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jetty/jetty-io@12.0.10?type=jar",
      "dependsOn" : [
        "pkg:maven/org.eclipse.jetty/jetty-util@12.0.10?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jetty/jetty-util@12.0.10?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jetty/jetty-session@12.0.10?type=jar",
      "dependsOn" : [
        "pkg:maven/org.eclipse.jetty/jetty-server@12.0.10?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.lfs@7.0.0.202407311305-m2?type=jar",
      "dependsOn" : [
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit@7.0.0.202407311305-m2?type=jar",
        "pkg:maven/com.google.code.gson/gson@2.11.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.google.code.gson/gson@2.11.0?type=jar",
      "dependsOn" : [
        "pkg:maven/com.google.errorprone/error_prone_annotations@2.27.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.27.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.lfs.server@7.0.0.202407311305-m2?type=jar",
      "dependsOn" : [
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit@7.0.0.202407311305-m2?type=jar",
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.lfs@7.0.0.202407311305-m2?type=jar",
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.http.apache@7.0.0.202407311305-m2?type=jar",
        "pkg:maven/com.google.code.gson/gson@2.11.0?type=jar"
      ]
    }
  ]
}