{
  "bomFormat" : "CycloneDX",
  "specVersion" : "1.3",
  "serialNumber" : "urn:uuid:cf760a59-f07f-301f-84f2-b69c69972d3e",
  "version" : 1,
  "metadata" : {
    "timestamp" : "2026-05-22T10:49:57Z",
    "tools" : [
      {
        "vendor" : "OWASP Foundation",
        "name" : "CycloneDX Maven plugin",
        "version" : "2.9.1",
        "hashes" : [
          {
            "alg" : "MD5",
            "content" : "9c7a565cf28cce58557d0c621c5ea4b1"
          },
          {
            "alg" : "SHA-1",
            "content" : "be882d5a22050bfa9d19090b1420c188617d0e1c"
          },
          {
            "alg" : "SHA-256",
            "content" : "698e0f37184a5b28c245c4065fd036dfce253b52f82fbb7113d81d36326cc249"
          },
          {
            "alg" : "SHA-512",
            "content" : "c0f0b11026858166f872a2eb54719492e5cecaa0bc9cd6b30b3ecb4a174eed220f4a1b5829d18d6734128e778d3cb3db7ffed177c92866133129cb29081814a0"
          },
          {
            "alg" : "SHA-384",
            "content" : "d80964707dfe5caca8c70521d5066f57589304c0a657e6fbc7c0614ea0fc7b3b3dbe7778361eee0f54ba111e9cb0ffcb"
          },
          {
            "alg" : "SHA3-384",
            "content" : "80bc3a275d9514bc457461ff52a72add8c7ecbbc01d8912efce57139016c544ee776981851be0a58fa977ab4221f703f"
          },
          {
            "alg" : "SHA3-256",
            "content" : "142317d6f245390f4fd2d0c100b16281b8dfc5c0c2cff86943bdcc97039cb699"
          },
          {
            "alg" : "SHA3-512",
            "content" : "af0fb9137c90b65d1a07f72e4d51ae509956cdb8800f35c961b037cdda1fe4a14ce3b496cef71ba85f1621affcfe29cd42704ae4191ff0b090a9602087c8997b"
          }
        ]
      }
    ],
    "component" : {
      "type" : "application",
      "bom-ref" : "pkg:maven/de.virtimo.bpc/karaf@5.0.6?type=karaf-assembly",
      "group" : "de.virtimo.bpc",
      "name" : "karaf",
      "version" : "5.0.6",
      "description" : "Virtimo AG",
      "purl" : "pkg:maven/de.virtimo.bpc/karaf@5.0.6?type=karaf-assembly"
    },
    "properties" : [
      {
        "name" : "maven.goal",
        "value" : "makeAggregateBom"
      },
      {
        "name" : "maven.scopes",
        "value" : "compile,provided,runtime,system"
      }
    ]
  },
  "components" : [
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.karaf.features/framework@4.4.11?type=kar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.karaf.features",
      "name" : "framework",
      "version" : "4.4.11",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "55052bd35aa0797bcef659b0cdd904f3"
        },
        {
          "alg" : "SHA-1",
          "content" : "3cc5466e7a3225d333ac62dca565b93aa8cdf76d"
        },
        {
          "alg" : "SHA-256",
          "content" : "6c5009dbdf426194066cd2a82d3379f59d5ea4e6b8b27ecfbb2b404e1e4e93f6"
        },
        {
          "alg" : "SHA-512",
          "content" : "aff608b438bde8ba65ab0d8b31841f19c726efeb51cf5df4ce243bfccefbcb2e100b0f7779cd7e1aadcadf3b9456e361afbc7dac83947d58b30d3e93f2c776a2"
        },
        {
          "alg" : "SHA-384",
          "content" : "534b69c7f9f6c88dc34002314f5499a0716f84e33bf778775d9284b3af83b335b8ed5546bb30afa7cbeea5efd1ca6058"
        },
        {
          "alg" : "SHA3-384",
          "content" : "f4a78e0ee5cf73cf229843edae018c2fbe69ab91f47a43be03fa9dc67759f6ab6774c56e8d345c2bf0e145e7a706b47e"
        },
        {
          "alg" : "SHA3-256",
          "content" : "554aa4b0286c6a858c58998893dbef0a64ba01a69c5d67cad66c37d74944ac45"
        },
        {
          "alg" : "SHA3-512",
          "content" : "9ae45598ccc5c356770b9b1ec630dd051a286f7ce86670787041a373d83a84e86b334a24334dc32f103b0e1704e2b3149ebcc2d170a5b8f3cdcebbbf0dea7bc8"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.karaf.features/framework@4.4.11?type=kar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.apache.org/karaf/assemblies/features/framework/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/apache/karaf/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://www.mail-archive.com/dev%40karaf.apache.org/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=karaf.git;a=summary/assemblies/features/framework"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.karaf.features/base@4.4.11?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.karaf.features",
      "name" : "base",
      "version" : "4.4.11",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "c5b707aea4ef45686505fd9bb14e0935"
        },
        {
          "alg" : "SHA-1",
          "content" : "911906d0fb48240f180cb6c4ca66c4ea5ef2be23"
        },
        {
          "alg" : "SHA-256",
          "content" : "1bedaa1a532ff16ec0dbdcc4cb215959494ae3c1219594e7df7294b722fefe34"
        },
        {
          "alg" : "SHA-512",
          "content" : "82885b5604189885b2f0280705fc2a9fe7e7095d4860cd9ca8811e878cbbacaa1784f4c8e84d9dc2adc1b026711b66f9eebd75214456734f63c8cc3eb6b12c9a"
        },
        {
          "alg" : "SHA-384",
          "content" : "7e24991ff0fd39830fb7781f0dd8e7dd47264112ce508ce713c9c46c952cbed2c4cfb021a0ede540006c53bcc14af9f2"
        },
        {
          "alg" : "SHA3-384",
          "content" : "78848ef99fc687751b0c267000e2954e05656c915ff4c534b890b427be3260c67534e7af957c8f7edaca201b58dc8456"
        },
        {
          "alg" : "SHA3-256",
          "content" : "e41d0dc5369d64d8a986f62854e56e8e293ef77985b6642440549c3ecc44c54d"
        },
        {
          "alg" : "SHA3-512",
          "content" : "efa616b9652bc84f359e80bd86dc4d68371dc493d70fdf9d02656d6e0238df2b380118f172f1e3f8256c513903a9766a1ff47f6bb67c4dd9069df431c24c8eb2"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.karaf.features/base@4.4.11?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.apache.org/karaf/assemblies/features/base/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/apache/karaf/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://www.mail-archive.com/dev%40karaf.apache.org/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=karaf.git;a=summary/assemblies/features/base"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@2.3.3?type=jar",
      "publisher" : "Eclipse Foundation",
      "group" : "jakarta.xml.bind",
      "name" : "jakarta.xml.bind-api",
      "version" : "2.3.3",
      "description" : "Jakarta XML Binding API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "61286918ca0192e9f87d1358aef718dd"
        },
        {
          "alg" : "SHA-1",
          "content" : "48e3b9cfc10752fba3521d6511f4165bea951801"
        },
        {
          "alg" : "SHA-256",
          "content" : "c04539f472e9a6dd0c7685ea82d677282269ab8e7baca2e14500e381e0c6cec5"
        },
        {
          "alg" : "SHA-512",
          "content" : "adf6436a7a9dc6f64b97127861d7a89b78e82bea67f72bda800ef285163adcd84dbf006f679108a2a8c2eed013e0b771da2354087e0845479ff2b6318b881442"
        },
        {
          "alg" : "SHA-384",
          "content" : "bad8b9f52bf7a7e1d3974cb305a69c093fb32d2131539c18d34e471e3ec32bdd9dd136bb4b38bb14d84e99c562f208c7"
        },
        {
          "alg" : "SHA3-384",
          "content" : "8131aaf65f996cfa2c3f7d406caab3acf3e6650bcbbcd5595f8a457a211810ff110c1923876e068831a07388ddc26f33"
        },
        {
          "alg" : "SHA3-256",
          "content" : "a9e4179a6bfa8b363b9fd4f32f8892c4a7954ed1695d3f33ccef73ceffcaa1d4"
        },
        {
          "alg" : "SHA3-512",
          "content" : "9ecbc0f4aa9cff28d519cbf74c8234b5180ae6ff0d6de4efe2de126b3251d466a5ddb878e70b9968095a843c82721c93a4dec53bfe09e3700f4cfe2e38bcac0a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@2.3.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/eclipse-ee4j/jaxb-api/jakarta.xml.bind-api"
        },
        {
          "type" : "distribution",
          "url" : "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/jaxb-api/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/jaxb-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/jaxb-api.git/jakarta.xml.bind-api"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/javax.annotation/javax.annotation-api@1.3.2?type=jar",
      "publisher" : "GlassFish Community",
      "group" : "javax.annotation",
      "name" : "javax.annotation-api",
      "version" : "1.3.2",
      "description" : "Common Annotations for the JavaTM Platform API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "2ab1973eefffaa2aeec47d50b9e40b9d"
        },
        {
          "alg" : "SHA-1",
          "content" : "934c04d3cfef185a8008e7bf34331b79730a9d43"
        },
        {
          "alg" : "SHA-256",
          "content" : "e04ba5195bcd555dc95650f7cc614d151e4bcd52d29a10b8aa2197f3ab89ab9b"
        },
        {
          "alg" : "SHA-512",
          "content" : "679cf44c3b9d635b43ed122a555d570292c3f0937c33871c40438a1a53e2058c80578694ec9466eac9e280e19bfb7a95b261594cc4c1161c85dc97df6235e553"
        },
        {
          "alg" : "SHA-384",
          "content" : "fc0058495e54efb6e05a34e3ff422e7c8347bcc77d6d9b87e9253424968dee6ef6a215c318d7e54f8705276be81f0682"
        },
        {
          "alg" : "SHA3-384",
          "content" : "ed6464b715de6ced0d9981a3f28140824946a4b7a02ffaff6116c833bb36e8f77a6282ce63c0d82cfe841d4fd6916891"
        },
        {
          "alg" : "SHA3-256",
          "content" : "ecfc9bef24ae28cf94c6775ecf6e2086d90a25d8d5476a4f6bb24001601b6cd0"
        },
        {
          "alg" : "SHA3-512",
          "content" : "f2b333527faedf504f60aa70a3d491972fa76f7e61e6351027f74613f41001157656824fe312b6e1df6dc4979704fe2a745b618d5368a97fe0bf8749739de9e2"
        }
      ],
      "licenses" : [
        {
          "expression" : "(CDDL-1.0 OR GPL-2.0-with-classpath-exception)"
        }
      ],
      "purl" : "pkg:maven/javax.annotation/javax.annotation-api@1.3.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://jcp.org/en/jsr/detail?id=250"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.java.net/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/javaee/javax.annotation/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "javaee-spec@javaee.groups.io"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/javaee/javax.annotation"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.servicemix.specs/org.apache.servicemix.specs.activation-api-1.2.1@1.2.1_3?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.servicemix.specs",
      "name" : "org.apache.servicemix.specs.activation-api-1.2.1",
      "version" : "1.2.1_3",
      "description" : "This pom provides project information that is common to all ServiceMix branches.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a56cc27373f2a74f3829dd3e368e0cc0"
        },
        {
          "alg" : "SHA-1",
          "content" : "1990267c85546fff9dc1585b5782eb67230b1df2"
        },
        {
          "alg" : "SHA-256",
          "content" : "a01eaa3de604558252893a5fb73bcec8f5463f8e87a4106f4c9c4f325e675fde"
        },
        {
          "alg" : "SHA-512",
          "content" : "3c401b928d854c34ea5fa360602984889df0413b1054ffc2234f7485194a687d3cc3a409f5a5405ea40eaa76f19c9f517f9169e1049bdd2057e93af31826017f"
        },
        {
          "alg" : "SHA-384",
          "content" : "5a0f544a17280d80ad019be9dff583e34337b55e39ac5af33029db79e307a38a3e8eeaa39dc13937e7965d93e298aa1d"
        },
        {
          "alg" : "SHA3-384",
          "content" : "900362d64242fccd22c59f7858bd414c9ebf94f17279d382f97ce4727325b71d467c3c920b5323e3f24a3434b877ad86"
        },
        {
          "alg" : "SHA3-256",
          "content" : "620f1fb53341536fc30be6c091dd32d82d949191e5ab8baa78bffe07d1e9d7fe"
        },
        {
          "alg" : "SHA3-512",
          "content" : "16180fbd77575f513bdf5b29817075dccaa48ade779d9094049cc76ec8f5ddc1484fd0c7d33be459e027dc88ab1a670732ec0d75175d214d1aae87d53cff4d95"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.servicemix.specs/org.apache.servicemix.specs.activation-api-1.2.1@1.2.1_3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://servicemix.apache.org/specs-pom/org.apache.servicemix.specs.activation-api-1.2.1/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/SM"
        },
        {
          "type" : "mailing-list",
          "url" : "http://servicemix.apache.org/discussion-forums.html#nabble-f12051"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=servicemix-specs.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.9?type=jar",
      "publisher" : "Eclipse Foundation",
      "group" : "org.glassfish.jaxb",
      "name" : "jaxb-runtime",
      "version" : "2.3.9",
      "description" : "JAXB (JSR 222) Reference Implementation",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "9383286160dde0e1a0fec25aee8a44ef"
        },
        {
          "alg" : "SHA-1",
          "content" : "9d42b4f19df7e20b625b2044a7de81d95f6dff29"
        },
        {
          "alg" : "SHA-256",
          "content" : "ba88e5bde7c0d878c3e1f2ec2fcabaf51d201eaf93b3bb9cfecfc1f11b2304d4"
        },
        {
          "alg" : "SHA-512",
          "content" : "a71f9f1b7656e2f0b30ebf36c30ec7b8c7b744faf9f94bd1a7944d7295f8445322b78abaf23d145cacf4dfac64010f19eb32d23728fb2a79edc6cda90412faf8"
        },
        {
          "alg" : "SHA-384",
          "content" : "76ab72382ad126d959634eedebfdde334a395cb897e906ea8707ceeb8d257d5c395f234661947a3dbb7b38d86d79404c"
        },
        {
          "alg" : "SHA3-384",
          "content" : "300bf4bc8252852186a9a0cecab02113dd417a4f53266b2d1228c3501c04d0a88f8eb131cba6eed3d11aa3faf29c087a"
        },
        {
          "alg" : "SHA3-256",
          "content" : "15aefb3a92cb323b8934e8ef0be4c6649cd91af1bc33e35b76f79d9d81b67e9a"
        },
        {
          "alg" : "SHA3-512",
          "content" : "3a6bfce14d8701c94249586df4806d6570357d2523484684e4ad10c40161b1cf25fdd1d211799f3131bd64046309f9f76add71b64da97a11d6688f45aa5e7fc5"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.9?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://eclipse-ee4j.github.io/jaxb-ri/"
        },
        {
          "type" : "distribution",
          "url" : "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/jaxb-ri/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://accounts.eclipse.org/mailing-list/jaxb-impl-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/jaxb-ri.git/jaxb-runtime-parent/jaxb-runtime"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.sun.activation/jakarta.activation@1.2.2?type=jar",
      "publisher" : "Eclipse Foundation",
      "group" : "com.sun.activation",
      "name" : "jakarta.activation",
      "version" : "1.2.2",
      "description" : "Jakarta Activation",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0b8bee3bf29b9a015f8b992035581a7c"
        },
        {
          "alg" : "SHA-1",
          "content" : "74548703f9851017ce2f556066659438019e7eb5"
        },
        {
          "alg" : "SHA-256",
          "content" : "02156773e4ae9d048d14a56ad35d644bee9f1052a791d072df3ded3c656e6e1a"
        },
        {
          "alg" : "SHA-512",
          "content" : "8bd94a4370b827e3904f31253b022e5c1851896d3b616ca7daebfef259238cedc56d4ced32c74f24a13c3e2295b0ea012af5d04656b7f713cc53a2f18d5e2cf7"
        },
        {
          "alg" : "SHA-384",
          "content" : "1cb0aff8b73ba52a9931b2cf13c75a1ce6665fb826bf97ede66db75c532136aa189fb53a1925e62b6eef572309ef3b9a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "83801332576d931f4091ba65ea240d49c23e3b93dae939ce2eed63de943f80f251a4347638b99900de5b831796b12590"
        },
        {
          "alg" : "SHA3-256",
          "content" : "5363211b59dfaff6e1973e93548e5e4062189c6d0f43d7802627ebeb7b7ff37d"
        },
        {
          "alg" : "SHA3-512",
          "content" : "0c7b62a3432b19ffad02eafffc7e598391cd32b1313d075f94cda09913402770b4ba2314716625571f266431067229c93cec36e17c3ea598623542988634ca0a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/com.sun.activation/jakarta.activation@1.2.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/eclipse-ee4j/jaf/jakarta.activation"
        },
        {
          "type" : "distribution",
          "url" : "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/jaf/issues/"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/jaf/jakarta.activation"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.glassfish.jaxb/txw2@2.3.9?type=jar",
      "publisher" : "Eclipse Foundation",
      "group" : "org.glassfish.jaxb",
      "name" : "txw2",
      "version" : "2.3.9",
      "description" : "TXW is a library that allows you to write XML documents.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "5db04c7917b3c0a07862a7e63bfc1581"
        },
        {
          "alg" : "SHA-1",
          "content" : "13a78453a89bf7d268382a520cba4d5435c5adfc"
        },
        {
          "alg" : "SHA-256",
          "content" : "973018b87af911ecf6e6d861dd0d6a477e4d8ae6a883ec5d073d3df1330b87f0"
        },
        {
          "alg" : "SHA-512",
          "content" : "de58c863983f5e4b1b7bb0f415da12b18cabcc8babb017a1c99ce7e2cfbe15d49b0abd43f2bd93819c00c55ce36c97c8aa51156ee29989da281d7829c9887db9"
        },
        {
          "alg" : "SHA-384",
          "content" : "17797fa099811f68615a5637eb3d492966a2a86f92f7de67dcf2953aee959ff5dd3f238155361dfa670517116c68769a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "c209205ee3b1831b6e656a6e8465f2f736a0b02bb4859632bf21f7ab961939afc877e10aa2636c781646e6eb5c0566cc"
        },
        {
          "alg" : "SHA3-256",
          "content" : "d7562f7c9b64e65345a0d2f0fd263468dabb3a77e9ebc15c2f8606f7b76a221d"
        },
        {
          "alg" : "SHA3-512",
          "content" : "5970569d7f16ccd5cd9e69c05e7973863248f1d8a1f1c6000d4cdcf62bb9b7e6e77104e907dafa557941c757fb51ee70cbaa5e37adf75bd81e5432ad8e07d485"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.glassfish.jaxb/txw2@2.3.9?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://eclipse-ee4j.github.io/jaxb-ri/"
        },
        {
          "type" : "distribution",
          "url" : "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/jaxb-ri/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://accounts.eclipse.org/mailing-list/jaxb-impl-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/jaxb-ri.git/jaxb-txw-parent/txw2"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.sun.istack/istack-commons-runtime@3.0.12?type=jar",
      "publisher" : "Eclipse Foundation",
      "group" : "com.sun.istack",
      "name" : "istack-commons-runtime",
      "version" : "3.0.12",
      "description" : "istack common utility code",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1952bd76321f8580cfaa57e332a68287"
        },
        {
          "alg" : "SHA-1",
          "content" : "cbbe1a62b0cc6c85972e99d52aaee350153dc530"
        },
        {
          "alg" : "SHA-256",
          "content" : "27d85fc134c9271d5c79d3300fc4669668f017e72409727c428f54f2417f04cd"
        },
        {
          "alg" : "SHA-512",
          "content" : "af36b11cc0d82b7f62c64941f4e7d441d25cb9f3c4b3e08753d038c388e5a09364b5dac9127f29a9b8df6d96034133caadab6d74371077478d2f301605913460"
        },
        {
          "alg" : "SHA-384",
          "content" : "ad8ba1f6538e087915b1e7fbf4a7a60b006ebecc4ab52986c10dfe88ae11ae7eb6e1f302bee06f70b16ec316f001375b"
        },
        {
          "alg" : "SHA3-384",
          "content" : "2207c7e1570860d6300ef3157905498efaf26ba85566b053495f583b20c755cc07d6855b2d79136ab4d6544635e39f4d"
        },
        {
          "alg" : "SHA3-256",
          "content" : "50a425e524a6ee81110ecd86190d039a84d46aa3c45855310fe4f95abba3c21e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "286997280ee0885c456686cf91c601e600106138f39eb81fc27381868f7ede0d1521cdf22c420331b1a961ed2f1ba1887a9ae05073f4364e3ffc297f40f0de53"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/com.sun.istack/istack-commons-runtime@3.0.12?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://projects.eclipse.org/projects/ee4j/istack-commons/istack-commons-runtime"
        },
        {
          "type" : "distribution",
          "url" : "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/jaxb-istack-commons/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/jaxb-impl-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/jaxb-istack-commons/istack-commons-runtime"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.karaf.specs/org.apache.karaf.specs.locator@4.4.11?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.karaf.specs",
      "name" : "org.apache.karaf.specs.locator",
      "version" : "4.4.11",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "72d3ff9aee562488ee4165378e005a65"
        },
        {
          "alg" : "SHA-1",
          "content" : "697a586865ef4fe33838aeffbd9c2cef67fe19d3"
        },
        {
          "alg" : "SHA-256",
          "content" : "94ec0b26ed8a906d82a62a67e76c6a567d2c5df97e3124efaee351dd1d98ef08"
        },
        {
          "alg" : "SHA-512",
          "content" : "456be82ede6efe12134a0c3722b79642678bfe0fcaced8dfdf21e0a4c8372479c21bdfdce9c13e9df8f2336fd915eb09784343d174f22748fb144132e87a09a2"
        },
        {
          "alg" : "SHA-384",
          "content" : "65a94f14a8086c18128d5e1b100f8f2523cad0836ac619504a22219551cc9550cb67640ef05febc55715b8f6a5a04208"
        },
        {
          "alg" : "SHA3-384",
          "content" : "f574f556709f89a449d33b1441764cb5a1e0a6a09b33fe7daf72d46c85c772dad5f255218cc6baa16565a0810ed227d2"
        },
        {
          "alg" : "SHA3-256",
          "content" : "5f5a0b531ed48c1cc5c2b092c1b5dbd2e09a8c6b0132ef1c78d19696e78bae3e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "428037c6772ab38c552124d682b92d158ee9f84b44bd4460af47b171694626aa175e46293a4e5e858b47692294f91d0dc0190525ac24174f0357b3ee18c367ea"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.karaf.specs/org.apache.karaf.specs.locator@4.4.11?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.apache.org/karaf/specs/org.apache.karaf.specs.locator/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/apache/karaf/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://www.mail-archive.com/dev%40karaf.apache.org/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=karaf.git;a=summary/specs/org.apache.karaf.specs.locator"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.karaf.specs/org.apache.karaf.specs.java.xml@4.4.11?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.karaf.specs",
      "name" : "org.apache.karaf.specs.java.xml",
      "version" : "4.4.11",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a4486debe6716d675d8e8b79c82c334c"
        },
        {
          "alg" : "SHA-1",
          "content" : "2b8911f90e5a9e2acf612faf03c689bd342902a2"
        },
        {
          "alg" : "SHA-256",
          "content" : "a149f4206d73892c73966d0fa2f4aaebe448b67806e5e1eb5417d35cdebecf50"
        },
        {
          "alg" : "SHA-512",
          "content" : "15ac6ac8cbd315ed6e9ca08ef00ce247f66308c0edcc8da7388b0ba649c0742c915e1797236eafd14033af407fa41bca0775cc9bf9015d2297580b57e5686a3c"
        },
        {
          "alg" : "SHA-384",
          "content" : "5b32c76392a0a7961902c57df59b6089b7ee898c52faab9e62a2079c7bb0daad7307f6ab4e0942bdfac34aedac0c8ad0"
        },
        {
          "alg" : "SHA3-384",
          "content" : "07614416fd196bf9faf56a9778d99038949bdfcd87ccd3719cecb03e6afc8a0ab07e0ee7c172615014cbb265091f9e19"
        },
        {
          "alg" : "SHA3-256",
          "content" : "f07e81a055a8a9e99f2ac4ed0167b68ef48ea4ea8aca56d0eeda9c45598cbc73"
        },
        {
          "alg" : "SHA3-512",
          "content" : "bf6c153263c5259e15582e0ac9d96c71c0eb6c4f99d88677c727e7a4eb6d237ba944ddcbc22b36455f21619711336306e0eb77bcb03bf6d473bcb8af0bcc5444"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.karaf.specs/org.apache.karaf.specs.java.xml@4.4.11?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.apache.org/karaf/specs/org.apache.karaf.specs.java.xml/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/apache/karaf/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://www.mail-archive.com/dev%40karaf.apache.org/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=karaf.git;a=summary/specs/org.apache.karaf.specs.java.xml"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.geronimo.specs/geronimo-stax-api_1.2_spec@1.2?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.geronimo.specs",
      "name" : "geronimo-stax-api_1.2_spec",
      "version" : "1.2",
      "description" : "Java STAX Spec API 1.2",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "7c33bab3af8433a5c2a2c9a05c1c0bff"
        },
        {
          "alg" : "SHA-1",
          "content" : "e3f2cbc94d2fb7b0715049627e73d60029aff488"
        },
        {
          "alg" : "SHA-256",
          "content" : "1a01074b2029d50b1ce78add4a1c023786011cd5f1c52602c2c9fd496675d215"
        },
        {
          "alg" : "SHA-512",
          "content" : "ed46051679b64b960edc6b37a07619e56cf29e4ea32351ca9100a387e59757148f99207463d78133ecf448d1950661923e31f9c8c576fed2779b6142f8ba6a83"
        },
        {
          "alg" : "SHA-384",
          "content" : "3eb1515b0f713faa6e920af7d60ceaef8df0daff01ff10c45dbbef60d064174028fc8ea6dd976e8919334fbef1a91065"
        },
        {
          "alg" : "SHA3-384",
          "content" : "82a191267676c9fc178345603ec01d9fb9b720868ed7675326e7ea050e324a0fe06af3909324306c1ede07ff522db044"
        },
        {
          "alg" : "SHA3-256",
          "content" : "854540903d7542b2fac61ca9259fc6b22ea06a3b861a49bdb2ca8061d4c24195"
        },
        {
          "alg" : "SHA3-512",
          "content" : "169aa1e2deb759a6b8faba4fb2beb09da31b03260142b76d8bd19e5928ceb22f09923d246009b11d186a375ca8606af6faa77fc24646849a47e769995607932f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.geronimo.specs/geronimo-stax-api_1.2_spec@1.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://geronimo.apache.org/maven/specs/geronimo-stax-api_1.2_spec/1.2"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/GERONIMO"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/geronimo-user"
        },
        {
          "type" : "vcs",
          "url" : "https://svn.apache.org/repos/asf/geronimo/specs/tags/geronimo-stax-api_1.2_spec-1.2"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/xml-apis/xml-apis@1.4.01?type=jar",
      "group" : "xml-apis",
      "name" : "xml-apis",
      "version" : "1.4.01",
      "description" : "xml-commons provides an Apache-hosted set of DOM, SAX, and JAXP interfaces for use in other xml-based projects. Our hope is that we can standardize on both a common version and packaging scheme for these critical XML standards interfaces to make the lives of both our developers and users easier. The External Components portion of xml-commons contains interfaces that are defined by external standards organizations. For DOM, that's the W3C; for SAX it's David Megginson and sax.sourceforge.net; for JAXP it's Sun.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "7eaad6fea5925cca6c36ee8b3e02ac9d"
        },
        {
          "alg" : "SHA-1",
          "content" : "3789d9fada2d3d458c4ba2de349d48780f381ee3"
        },
        {
          "alg" : "SHA-256",
          "content" : "a840968176645684bb01aed376e067ab39614885f9eee44abe35a5f20ebe7fad"
        },
        {
          "alg" : "SHA-512",
          "content" : "8db0283b6840cd6407957d296b802e3edf90653e2722f8e29f86c1c0b60996c4b43e9e065e6864dab89b2138ddb0174d9b4fdda4a93f94eeb884783db82f3268"
        },
        {
          "alg" : "SHA-384",
          "content" : "bce0ec0f0f692213a1110197c4a11c333673ae0630481255d12b441a8cba70aecfaf104c3d8d9b500ed2a0a19a2bfcce"
        },
        {
          "alg" : "SHA3-384",
          "content" : "c1d8154ef6eee57dfe6ae9a1c1a2525e9ec2aab3631911a53c064ea6480c0b3b1ce8dd079db7b3693d7ef81daba28ace"
        },
        {
          "alg" : "SHA3-256",
          "content" : "09eb76497eac5012ce1000c52f4e597c4941a44b9d960b1ac58a19beb2dd63fc"
        },
        {
          "alg" : "SHA3-512",
          "content" : "1e4eb902e50b3388da4d161ee49f4d47b61dddd2ad10e6ef6cbb67c4ebc9043e0b65ae59a4a0c8eb03dd28814ce4aedd7e0d4962a0aedc3bdcf7de37cde38f66"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        },
        {
          "license" : {
            "id" : "SAX-PD",
            "url" : "http://www.saxproject.org/copying.html"
          }
        },
        {
          "license" : {
            "name" : "The W3C License",
            "url" : "http://www.w3.org/TR/2004/REC-DOM-Level-3-Core-20040407/java-binding.zip"
          }
        }
      ],
      "purl" : "pkg:maven/xml-apis/xml-apis@1.4.01?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://xml.apache.org/commons/components/external/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/bugzilla/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/xml-commons-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://svn.apache.org/viewvc/xml/commons/tags/xml-commons-external-1_4_01/"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.karaf.specs/org.apache.karaf.specs.java.xml.ws@4.4.11?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.karaf.specs",
      "name" : "org.apache.karaf.specs.java.xml.ws",
      "version" : "4.4.11",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6cec2ef6a66bb03ab6793432f7540659"
        },
        {
          "alg" : "SHA-1",
          "content" : "0e031eb0f75b64a8e2fda529ef1ec9f5a2e5eca3"
        },
        {
          "alg" : "SHA-256",
          "content" : "0430e66a3dcf7e6b44a75cc8880391e00002ae6dd328223e07b5799fe63e04ce"
        },
        {
          "alg" : "SHA-512",
          "content" : "f1fe660a8bf687411093cb357f3a084ef803e5d42bc8ed6278c524f725a238c0b2a0092807808e3d0664d178235e9afa65d00218e0b2cc45fa5bc4cc1e122b3a"
        },
        {
          "alg" : "SHA-384",
          "content" : "753b44129bc394e33f819cef115387f5821a5b9967a9e573320b153179913440b85170e691e163d0ad98116bb1172a95"
        },
        {
          "alg" : "SHA3-384",
          "content" : "3c859778ab17123db09a46f1e030d2f3892f527c6504f3a6ad8eef771f989f5b718896262ef65af59b6826fad24722a9"
        },
        {
          "alg" : "SHA3-256",
          "content" : "442f4431ffd914be73c35231742a8483d4f80447e4bad42db5473e71c3d3b89a"
        },
        {
          "alg" : "SHA3-512",
          "content" : "9db88875cc35489f8741193d8a85b69ffa5838716a1f24258704075fd9fd05bc39c37b1df34aee3ff14535bbb4fa4644754dc0bbd724d4d8230c9f1b569815dc"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.karaf.specs/org.apache.karaf.specs.java.xml.ws@4.4.11?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.apache.org/karaf/specs/org.apache.karaf.specs.java.xml.ws/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/apache/karaf/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://www.mail-archive.com/dev%40karaf.apache.org/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=karaf.git;a=summary/specs/org.apache.karaf.specs.java.xml.ws"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.geronimo.specs/geronimo-saaj_1.3_spec@1.1?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.geronimo.specs",
      "name" : "geronimo-saaj_1.3_spec",
      "version" : "1.1",
      "description" : "SOAP AA for Java 1.3",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "3ad94b4a728eadf47458ac4a9ae8fb23"
        },
        {
          "alg" : "SHA-1",
          "content" : "be6e6fc49ca84631f7c47a04d5438e193db54d7c"
        },
        {
          "alg" : "SHA-256",
          "content" : "6cc02675a2e9dc78f7ebb4e450a670619e0915c6246cbb5b93a5ee27b3345aa9"
        },
        {
          "alg" : "SHA-512",
          "content" : "897bd0e2a23a8499fe12e4973712824b025e28a5f28e1ebd40a60845011481e4acf3931d5efa50e482e8e899910b05106368ee3ac7a3763452f5ed927b728d14"
        },
        {
          "alg" : "SHA-384",
          "content" : "c62ff0fdad20bbd43f33e92a8341acb6a73d64baf456a84cf933bb15d35bcddf517e9b6df7f29d789510dd6bff8cc1a3"
        },
        {
          "alg" : "SHA3-384",
          "content" : "cce8a9b5341c47a4b6a4b2ab6c57ac6aa7244f49281dbf9cafa47f2462460f28b4c1635801056596e9cce4a72942f9fc"
        },
        {
          "alg" : "SHA3-256",
          "content" : "277edc7e2eb5f530b20e55173eb3324e66f3e9bd30f2701dab1b1e03320d8fb7"
        },
        {
          "alg" : "SHA3-512",
          "content" : "e2bd896140a27a24884f6a48b461abf31bbf07c6be206f59388970e17211e26987d1cfd74ce67095451a493501d1ada08c4870e2acf1ef8d7973f09d6711bcfa"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.geronimo.specs/geronimo-saaj_1.3_spec@1.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://geronimo.apache.org/maven/specs/geronimo-saaj_1.3_spec/1.1"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/GERONIMO"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/geronimo-user"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewcvs.cgi/geronimo/specs/tags/geronimo-saaj_1.3_spec-1.1"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.geronimo.specs/geronimo-jaxws_2.2_spec@1.2?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.geronimo.specs",
      "name" : "geronimo-jaxws_2.2_spec",
      "version" : "1.2",
      "description" : "Java API for XML Web Services 2.2",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "41c53e6e0a33ac903776e3d0a2a659fe"
        },
        {
          "alg" : "SHA-1",
          "content" : "c5ece362fcac7f92b16120399d8b0911260b3271"
        },
        {
          "alg" : "SHA-256",
          "content" : "f82650e7c27e2763822cc9efc67c645f91a8328aaeb201e909c9747a985f16af"
        },
        {
          "alg" : "SHA-512",
          "content" : "ee1933fc4cfb7f59848c9ebf4c0214129767e37bf30553a0618fa066c768c40662bf43f2f6e6c87bf7c4d98355b7b68117f0b18d3fa4e6e6e815848b87d29ffe"
        },
        {
          "alg" : "SHA-384",
          "content" : "2a5017ae17920a1f4ccb08ff68aaa8e49708ce00b50071ba3ea2ab5e42ddf55980c6eebba8fd6eb75cb202009d356546"
        },
        {
          "alg" : "SHA3-384",
          "content" : "8c034596776a9442cacf426d6873895ecdf122cd484aa220270a2d0ecbf942182376c976646ff103cb15c3d83b330c28"
        },
        {
          "alg" : "SHA3-256",
          "content" : "2795430c28b7657f783b2f78fa8b1a37e3a125c1ddf4d1300b9d592afde3048a"
        },
        {
          "alg" : "SHA3-512",
          "content" : "f6fc445fbe8498c4c19c60d8ff123d87d357e6c7b0a47d260c173de3d19bd6f03cd8f5e5b89ed54cda94fc7916dd25cdc138af4a4a08e62279f213fba67902f0"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.geronimo.specs/geronimo-jaxws_2.2_spec@1.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://geronimo.apache.org/maven/specs/geronimo-jaxws_2.2_spec/1.2"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/GERONIMO"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/geronimo-user"
        },
        {
          "type" : "vcs",
          "url" : "https://svn.apache.org/viewcvs.cgi/geronimo/specs/tags/geronimo-jaxws_2.2_spec-1.2"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.karaf.specs/org.apache.karaf.specs.activator@4.4.11?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.karaf.specs",
      "name" : "org.apache.karaf.specs.activator",
      "version" : "4.4.11",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "7de8455d141f8c8c227fca5ad5875bc8"
        },
        {
          "alg" : "SHA-1",
          "content" : "fbce840cfb8596a105887221202dc42a4b5bb2bd"
        },
        {
          "alg" : "SHA-256",
          "content" : "f6f519401a442aa8ab8358cf91ab01c87ddf8f4eb2330c3f55a70e5395e4185f"
        },
        {
          "alg" : "SHA-512",
          "content" : "a6898d65ffc828770f94d5e13513278f6c386622eca7f8ff79b20b0d83f051b8f12bc90497d1a9628448edd6ceab0b5c71734f4f37f283400ca63921273fd8dd"
        },
        {
          "alg" : "SHA-384",
          "content" : "70ac021bacd2951be0e4a98e22576a965c66a434e41428950c26f7f5cc8b08639bd2827daf3874f7dcc7f30dd28c6583"
        },
        {
          "alg" : "SHA3-384",
          "content" : "12da9ab96a6e7a8a7a40342e7aa1cde69c30988bc7f3e7a46e2674a8c7a140e58657c93e5a51108bd0c02b131ed26a17"
        },
        {
          "alg" : "SHA3-256",
          "content" : "b9b09740069bd30c978f4e815f364f995ea493c0f920813dd67dc7aa61823ae3"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c01d4be5ef7b933b947b39d4e99b5733a72c775c93c997e7e55ec323fb8a74668a9779cfcc36c6ea7c2e0d56416c917099b2b0f3d566ee9b5bf0950b7fc81c33"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.karaf.specs/org.apache.karaf.specs.activator@4.4.11?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.apache.org/karaf/specs/org.apache.karaf.specs.activator/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/apache/karaf/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://www.mail-archive.com/dev%40karaf.apache.org/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=karaf.git;a=summary/specs/org.apache.karaf.specs.activator"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.karaf/org.apache.karaf.main@4.4.11?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.karaf",
      "name" : "org.apache.karaf.main",
      "version" : "4.4.11",
      "description" : "This bundle is the main Karaf launcher. It's responsible of the Karaf startup including the console, branding, etc bootstrap.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "07e6ff141fbc759749c782845fa4bf57"
        },
        {
          "alg" : "SHA-1",
          "content" : "f1ac8a71c2103580eadbcd3a4a6bdc9f6ebb6ee7"
        },
        {
          "alg" : "SHA-256",
          "content" : "af98c4e6c6b37e6f0c02879405ac7b4661dc074dcd14a1bb7f5cb9bd5e7a39ef"
        },
        {
          "alg" : "SHA-512",
          "content" : "2651e36a6395599668153e286b5126a59b983ea8e309a8eb9384c2ef3080e108ce5da10ad81198cea53af95703cbaa8e8b326cfa91ad6572a21e3d543813e17a"
        },
        {
          "alg" : "SHA-384",
          "content" : "71d4883b131276f35f5f0a363430bbf236f011e855fbb3ee7ef2a45605d9df0c392f2484cdd43ed47177b03ac10c6799"
        },
        {
          "alg" : "SHA3-384",
          "content" : "6179a06a8a3e0a5fd5f131be73d3e604e0d03e51dd6c181e2a3db6ba9d9262fbece0fcdbe306174a218a212b689011a0"
        },
        {
          "alg" : "SHA3-256",
          "content" : "86281e9aece22076c638583b99ee7bb2d60c92a9234d86f96b99d8c71e35f574"
        },
        {
          "alg" : "SHA3-512",
          "content" : "d2c49ba3af9c93841ded08a0f7ee7d8b5ce72c71d1c8f161bd9a5c62f62aaed7451f46c3deb6c397f7db805e3f6caa4b04f4859bd11ae515b49044959b15aef8"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.karaf/org.apache.karaf.main@4.4.11?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.apache.org/karaf/org.apache.karaf.main/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/apache/karaf/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://www.mail-archive.com/dev%40karaf.apache.org/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=karaf.git;a=summary/org.apache.karaf.main"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.karaf/org.apache.karaf.util@4.4.11?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.karaf",
      "name" : "org.apache.karaf.util",
      "version" : "4.4.11",
      "description" : "Karaf Util contains utility classes used in different Karaf modules.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "62f2a1d287bd020436c085316701f838"
        },
        {
          "alg" : "SHA-1",
          "content" : "d3c1a05ce8e13eaf059bd06104a0a462aea0088c"
        },
        {
          "alg" : "SHA-256",
          "content" : "683bd093de1d9064bcff651dc69243ab6ba508773eba88e9f81d6c7aeccb751d"
        },
        {
          "alg" : "SHA-512",
          "content" : "57691720e1da209b66de3d739bafd8fb63c4261f3b5b47377b5e321669aa11b34cdb20a6c9aee92f09380680b06e18517fe0f6c6c950f22dc02a93795d69fd18"
        },
        {
          "alg" : "SHA-384",
          "content" : "dcdcc4f5207a6fc68ed52189967eb37cc74c5a3d383e5682a90885127196eb2921346941a8efd711448ddc21c49c16b0"
        },
        {
          "alg" : "SHA3-384",
          "content" : "c4dc1836a1af1b15ce3c18878a7659088f50bfb3c3164451cf3bb8d14ef85a4a03c5ca4063f84309111a53c0fac92833"
        },
        {
          "alg" : "SHA3-256",
          "content" : "342e4f327d5bf007a29ce24ab9c478f09d47a06f2d134c7d3439ea8417934d2a"
        },
        {
          "alg" : "SHA3-512",
          "content" : "4355a174e55bbbfe4465be225a8ea872bd5b705322ff0a087cf9efe1545c0d3cda27742470c49c9c517ac92e3c8cadab026677d759e8b69a2528641112de8373"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.karaf/org.apache.karaf.util@4.4.11?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.apache.org/karaf/org.apache.karaf.util/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/apache/karaf/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://www.mail-archive.com/dev%40karaf.apache.org/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=karaf.git;a=summary/org.apache.karaf.util"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.felix/org.apache.felix.utils@1.11.8?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.felix",
      "name" : "org.apache.felix.utils",
      "version" : "1.11.8",
      "description" : "Utility classes for OSGi.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "33d17db23165504cf8bc84c7ee09aeb2"
        },
        {
          "alg" : "SHA-1",
          "content" : "4f4b4414c2ca9f7273c162d4e9aca16daab376a5"
        },
        {
          "alg" : "SHA-256",
          "content" : "36d166cd01b1b369048ff741a1ca2c8e066482a619757c062d753e8c352d0cf2"
        },
        {
          "alg" : "SHA-512",
          "content" : "4f03c1f2c9cb2549dc95e68c8319be142beaa0ec0b086e4f81fd9337d9780c6a5a7ee947e735b2d3bd3094794a83e40173e66ce8b24b8a9751f97a784a50aa19"
        },
        {
          "alg" : "SHA-384",
          "content" : "35afae90f97da42e78e72be4830a3e488bf539ba018d09cd2d4ff9a1392c838440cf7fddbe0abafe6f46592184b5c66f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "c38cf8577d372284b0ce3a060859b6320c97c679ad9efd17ba0c2bd69ea7d4287c58c1a7c1363bf28cc2ec4da85f949f"
        },
        {
          "alg" : "SHA3-256",
          "content" : "451f8d569256cb1a4dfc71933a49e1dabd062d95d23d82856f55e09d33599e73"
        },
        {
          "alg" : "SHA3-512",
          "content" : "f2c94e202038120c1c88a2eb01cac84042f133ec27106894fdbbd9124863906204d434b63f709bc1d84b5320e0105282d0685608b7a70fae29ab06fc1c6b025b"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.felix/org.apache.felix.utils@1.11.8?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://felix.apache.org/org.apache.felix.utils/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/FELIX"
        },
        {
          "type" : "mailing-list",
          "url" : "http://www.mail-archive.com/dev%40felix.apache.org/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=felix-dev.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/net.java.dev.jna/jna@5.18.1?type=jar",
      "group" : "net.java.dev.jna",
      "name" : "jna",
      "version" : "5.18.1",
      "description" : "Java Native Access",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "cb531ec131e1c68c045b5d45fe5b9878"
        },
        {
          "alg" : "SHA-1",
          "content" : "b27ba04287cc4abe769642fe8318d39fc89bf937"
        },
        {
          "alg" : "SHA-256",
          "content" : "260c4b1e22b1db9e110ee441c4f13ce115f841fa48c41d78750986214b395557"
        },
        {
          "alg" : "SHA-512",
          "content" : "e859aa7bf03225dacdd043c67f939e9250e3e223ef031a0cb67717974362e9df2bd1d9d704e7b52e7408230f01d816bab7ec1a745d9cf2feb26ebd8398026c7e"
        },
        {
          "alg" : "SHA-384",
          "content" : "58826bcb4171f8fc567f227eaeeac1a6dcc283b0585aa93696242852cb5f783568542d15bdaffa696eb4bac71de0673d"
        },
        {
          "alg" : "SHA3-384",
          "content" : "3069a01ddba11f6e23e1585d771ad3e01a82f5fb084f8802d147c1c8394f69f72e3a4ec4088019dda7065857dee68235"
        },
        {
          "alg" : "SHA3-256",
          "content" : "d7316b75c8eb5a04e07504766a495a4bda626622ec5bb0db1c700534c02abd78"
        },
        {
          "alg" : "SHA3-512",
          "content" : "f0d4346a86ea27e9e8a84ffb011c7dff6ecdd153c2cb7d7d0d1d7bfa2ea42a2dc6b6a92677db17e69fc80d27c509218e3c591ce5eae78d82fe6a8d844114a281"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "LGPL-2.1-or-later",
            "url" : "https://www.gnu.org/licenses/old-licenses/lgpl-2.1-standalone.html"
          }
        },
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/net.java.dev.jna/jna@5.18.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/java-native-access/jna"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/java-native-access/jna"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/net.java.dev.jna/jna-platform@5.18.1?type=jar",
      "group" : "net.java.dev.jna",
      "name" : "jna-platform",
      "version" : "5.18.1",
      "description" : "Java Native Access Platform",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a7af00779ec98bfe22dfb07b1532830d"
        },
        {
          "alg" : "SHA-1",
          "content" : "dd817f391efc492041c9ae91127527c13750a789"
        },
        {
          "alg" : "SHA-256",
          "content" : "ad14c1b1ec4f43d396231219dfa635ebf828f738eac9f890ea1bc07795892d9a"
        },
        {
          "alg" : "SHA-512",
          "content" : "77ca3355c637707840125529f6f4720434f1a115d0b27b51b6d04e10210acd2af70ebb1e58ce2f5103423a060f9e9c64e1788a0f2457be1abdc406027bc91478"
        },
        {
          "alg" : "SHA-384",
          "content" : "427926aefbd5071a4fc45153593690f8dd50866dc22d8a871d49f1c20b04b4c3923a658073e36123bd3a78cb6f1972c0"
        },
        {
          "alg" : "SHA3-384",
          "content" : "329ab634309fa6d112ff28608150af5ea9a25459499885af3c23d0ab280b398151440976e38c33a5ba1261ce470c6bd7"
        },
        {
          "alg" : "SHA3-256",
          "content" : "3ffd30b2a405d17cdb27adb1d0e55b003c3112005f49cc79fd3c093b74a0059c"
        },
        {
          "alg" : "SHA3-512",
          "content" : "dcf12c68b59d24dbfccaf14b91eefa2d880b90fda4ca14621312b94cefc525b0954e2b250329e8096303b0032a408656d605d4324407e7f682835ca251d38ad6"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "LGPL-2.1-or-later",
            "url" : "https://www.gnu.org/licenses/old-licenses/lgpl-2.1-standalone.html"
          }
        },
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/net.java.dev.jna/jna-platform@5.18.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/java-native-access/jna"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/java-native-access/jna"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.karaf/org.apache.karaf.client@4.4.11?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.karaf",
      "name" : "org.apache.karaf.client",
      "version" : "4.4.11",
      "description" : "Karaf client to connect remotely to a running Karaf instance.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "72f9b0ca7f211f4050a0465e8b949be0"
        },
        {
          "alg" : "SHA-1",
          "content" : "ce57ae03e85dd92071f7995e6332be1b54af80dd"
        },
        {
          "alg" : "SHA-256",
          "content" : "63b5607706f03e9bacaa573f3606eba4bb1b10091f8ccf206b8660c11739c6ba"
        },
        {
          "alg" : "SHA-512",
          "content" : "972b6ca897453b2742a86289a120af0d62f6a78c5ea071e59f6665f6fc63b0fbb823f3f54860ee1cad261983f07a9af9a44fbe5a11500aee13b7c92cebc89dc7"
        },
        {
          "alg" : "SHA-384",
          "content" : "b6887d97179378d1de7535c848e2939ddd18181fbe4f425ff0dc67a3e58aac47f6bbc8b117e0b80e1d4f53ba0891168f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "f5c3f78dd23df45c99b6d50e15a85d7ba28a5a39c888eb0644cba92276200cc6d9e73f6615af1701b10caab07d40b293"
        },
        {
          "alg" : "SHA3-256",
          "content" : "4bb4da7ae73ff0051ed40f63896af9dcff0af63172bb191a506c352c867145e0"
        },
        {
          "alg" : "SHA3-512",
          "content" : "d83188d2cfa3862e2a332f7a18cab37e544f1d0de29e6648624e71ad6be39319100dda73b8793f3f2a5492320298170b5e44b2a615977ba5adcc59588449163f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.karaf/org.apache.karaf.client@4.4.11?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.apache.org/karaf/org.apache.karaf.client/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/apache/karaf/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://www.mail-archive.com/dev%40karaf.apache.org/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=karaf.git;a=summary/org.apache.karaf.client"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.sshd/sshd-osgi@2.17.1?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.sshd",
      "name" : "sshd-osgi",
      "version" : "2.17.1",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b4befe21de613ddcf110cd72e285f8c6"
        },
        {
          "alg" : "SHA-1",
          "content" : "3d159a03c93fbc6e9022742d7a8616abc50dd0fa"
        },
        {
          "alg" : "SHA-256",
          "content" : "77c7c19d86dd59c63cedc9fea79708df264ea779c30076ce5dcfc51dc941a78b"
        },
        {
          "alg" : "SHA-512",
          "content" : "098913dcac7e217fe788db2d61dae1a239217b66346aebaa4eb294844c64d008d06ef72823a32b3de47bec1a26dcf32f277efe7341d62b6143d6b6d37e2669ad"
        },
        {
          "alg" : "SHA-384",
          "content" : "04ec9f15a62ebdca06dee6cb1ce0a348a00568b0fd8f0a50c7640cdf1df564d87a5d32a171eb9e22f01f3be75e3a4dfd"
        },
        {
          "alg" : "SHA3-384",
          "content" : "b810165769130bd7b28fc3203816befda831e5ea18f8d26de651d05ba5b9122ff5a1449c95af41be9213d611e98237b2"
        },
        {
          "alg" : "SHA3-256",
          "content" : "55bed9577c54c7eb6f786b5e61616ba3e97ddcc3b8cf45812999075a33458644"
        },
        {
          "alg" : "SHA3-512",
          "content" : "269d28777b9a2194ead9be0eb3285d009df22f0ca9d891d264810296d7dfb0b98e490967585da1ecab71ada901281c22169063efc5e08043e6c3f8a041ac169e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.sshd/sshd-osgi@2.17.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.apache.org/sshd/sshd-osgi/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/apache/mina-sshd/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/mina-users/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/mina-sshd/tree/sshd-2.17.1/sshd-osgi"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.slf4j/jcl-over-slf4j@1.7.36?type=jar",
      "publisher" : "QOS.ch",
      "group" : "org.slf4j",
      "name" : "jcl-over-slf4j",
      "version" : "1.7.36",
      "description" : "JCL 1.2 implemented over SLF4J",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "8065610cde33ed9fd5d34367912c1938"
        },
        {
          "alg" : "SHA-1",
          "content" : "d877e195a05aca4a2f1ad2ff14bfec1393af4b5e"
        },
        {
          "alg" : "SHA-256",
          "content" : "ab57ca8fd223772c17365d121f59e94ecbf0ae59d08c03a3cb5b81071c019195"
        },
        {
          "alg" : "SHA-512",
          "content" : "ac231ab44521bb5478742af13624db5c14aea809c3a2c13b989fba30186ba6db840f2d1b4aea54f9c1f779547b975fd042dd353f54025592774d40192bd71148"
        },
        {
          "alg" : "SHA-384",
          "content" : "618704032ab3f8f87091ac797e2c9319a4b7f36a53e060695d56173b67ce9bc9e16c74cba228e758ac90e279df75428a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "95a189173932d8080d91de8b71b9d1bca49a330db7cad9c41d51fe9514a9f6299b24e31441f06681b3dcc188807dcf40"
        },
        {
          "alg" : "SHA3-256",
          "content" : "7aef3380fdeae9b7a4adfa6ad69c2c92f246fcdbd4fcd3d1056ee846d8ef92fb"
        },
        {
          "alg" : "SHA3-512",
          "content" : "da7d1b8e5a150300e1051dda5755df64275e5822256ef624fd8a37c582cc2774aadce97f8732de52e54b1c74e28ba601d3bfc3482abb4a24f7e9f779e7e8dd64"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.slf4j/jcl-over-slf4j@1.7.36?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.slf4j.org"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/qos-ch/slf4j/jcl-over-slf4j"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar",
      "publisher" : "QOS.ch",
      "group" : "org.slf4j",
      "name" : "slf4j-api",
      "version" : "2.0.17",
      "description" : "The slf4j API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b6480d114a23683498ac3f746f959d2f"
        },
        {
          "alg" : "SHA-1",
          "content" : "d9e58ac9c7779ba3bf8142aff6c830617a7fe60f"
        },
        {
          "alg" : "SHA-256",
          "content" : "7b751d952061954d5abfed7181c1f645d336091b679891591d63329c622eb832"
        },
        {
          "alg" : "SHA-512",
          "content" : "9a3e79db6666a6096a3021bb2e1d918f30f589d8de51d6b600f8ebd92515a510ae2d8f87919cc2dfa8365d64f10194cac8dfa0fb950160eef0e9da06f6caaeb9"
        },
        {
          "alg" : "SHA-384",
          "content" : "6ea24f814a9b6ece428cfd0535e2f3b8927005745ef61006b50fdb5a90126ee5ea05650155382b3b755c5bce38ef3944"
        },
        {
          "alg" : "SHA3-384",
          "content" : "9b1015052f0ec43f9be09764e131834157599611cb52f6fe591c4ac6a8ab4817518f2a4b8871e5e738c8678e93af5557"
        },
        {
          "alg" : "SHA3-256",
          "content" : "00559b4f4066b4917ba4fe2a6f23111eaeada321112d030910d218ced9084b5e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "9579c2f7e7516e177c2d493ccc9eb8150978cf19f6f09b28d116f6935239fd56dc6af2b62b3336f79b0b462445550cd1fb5377a07001a6f44aaab6a32fa2fa47"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/license/mit/"
          }
        }
      ],
      "purl" : "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.slf4j.org"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/qos-ch/slf4j/slf4j-parent/slf4j-api"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.karaf.jaas/org.apache.karaf.jaas.boot@4.4.11?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.karaf.jaas",
      "name" : "org.apache.karaf.jaas.boot",
      "version" : "4.4.11",
      "description" : "Provides the JAAS classes loading at boot process.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "07c1ecacaa3e0992dc58ab2ef8f4a723"
        },
        {
          "alg" : "SHA-1",
          "content" : "b3705eb3476d40f439e269310b9e8f46d74b5e34"
        },
        {
          "alg" : "SHA-256",
          "content" : "52381e45e57dc5ddee6c2ac2262a40ca8b17af857c5d3b1d6234615141c31172"
        },
        {
          "alg" : "SHA-512",
          "content" : "2504cd70f038e3b328b36f4f6fbd4b1cc08ac05bdd8cac32c819ad0f74d0baa05620cefacd197d0cd8c07c474c56fa273cd90040d7126db60a67aa508ca74ada"
        },
        {
          "alg" : "SHA-384",
          "content" : "56f6350a6ea7dc5dc7215917505c8ac0a9ae02d4b6b8f2dcb2b752bb26b1b8120e94679099f5c8791b209e2f17b6d8ca"
        },
        {
          "alg" : "SHA3-384",
          "content" : "e9ffd12bdff2da64565de28546b9eda151bee13ffe09035facbb66ebebef763d37eef1851f01296f4acaac7de8e764f2"
        },
        {
          "alg" : "SHA3-256",
          "content" : "711b3dc53528b75d0217d2020d64946047a36a259ec14e46f0c1e657c649b220"
        },
        {
          "alg" : "SHA3-512",
          "content" : "d5b7ba7e1be41c539d41f4ea502333b463b2bc241ee4205b6246ca6c4151ededed9a97eb97f7dec297be6046609b938d0a3f3c5ceeb5b927255aeb14ee2654ad"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.karaf.jaas/org.apache.karaf.jaas.boot@4.4.11?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.apache.org/karaf/jaas/org.apache.karaf.jaas.boot/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/apache/karaf/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://www.mail-archive.com/dev%40karaf.apache.org/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=karaf.git;a=summary/jaas/org.apache.karaf.jaas.boot"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.karaf.diagnostic/org.apache.karaf.diagnostic.boot@4.4.11?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.karaf.diagnostic",
      "name" : "org.apache.karaf.diagnostic.boot",
      "version" : "4.4.11",
      "description" : "Diagnostic Core implementation",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "ea32a6fce0efeb7e0a2aab38c1cbabae"
        },
        {
          "alg" : "SHA-1",
          "content" : "ef6ffea8bd6373983f3f8af3543b70a5bae48e7b"
        },
        {
          "alg" : "SHA-256",
          "content" : "b960f6b2ba80143961f988fb5853cdef3f3812b55fc4a802724ae1669d67bb15"
        },
        {
          "alg" : "SHA-512",
          "content" : "9cd62f2ed2b5004b4b4701b7f43e0bed0825e95b7b31a41ab21d71f613c136be12a33eac70be1c8d2263fbbc7d8026f5cbe9b95775e5330b33d9425002e9bebc"
        },
        {
          "alg" : "SHA-384",
          "content" : "247a18386a9bfa24467c9679df31d9adf03bb8c5388a032966af483406df24b9316f73e6d21fe7234affd10ac0465713"
        },
        {
          "alg" : "SHA3-384",
          "content" : "8c65caa0d9a5295f5637ab17328b28fedc4737f0ff166b14d149471ac23215c43eaddbd08eca3c0097622df579f05f52"
        },
        {
          "alg" : "SHA3-256",
          "content" : "a8ce1bc0bb2976f8d8490761dd2f884a27f93b0f04c172309488d25710f432d7"
        },
        {
          "alg" : "SHA3-512",
          "content" : "e431d1f3c31dded8f62ee7013fa54840090c70f48307d1f6582678efa4a72d5ff531e88e572069b457ba7d0af26895f47be5724b278c90f39d14754e918e156e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.karaf.diagnostic/org.apache.karaf.diagnostic.boot@4.4.11?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.apache.org/karaf/diagnostic/org.apache.karaf.diagnostic.boot/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/apache/karaf/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://www.mail-archive.com/dev%40karaf.apache.org/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=karaf.git;a=summary/diagnostic/org.apache.karaf.diagnostic.boot"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.karaf.config/org.apache.karaf.config.core@4.4.11?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.karaf.config",
      "name" : "org.apache.karaf.config.core",
      "version" : "4.4.11",
      "description" : "This bundle provides Karaf services",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1c219b88afb991dcae9e79275146cb7d"
        },
        {
          "alg" : "SHA-1",
          "content" : "aafd3509ec2beae35fa4c683c42d177c62447db6"
        },
        {
          "alg" : "SHA-256",
          "content" : "787d88cf7a825c8b18157c0c42491cab89e5658ccab226c25e31410db666d5cf"
        },
        {
          "alg" : "SHA-512",
          "content" : "422270a92205761e043ebfd04611b81d0a3f9d45815049a52a47d9f0070c49d4aaaaa0a3234a0a31a12c596e4291d9c90187626502dad03a5c443b4522615c6d"
        },
        {
          "alg" : "SHA-384",
          "content" : "5ac5b80d27020935a8f036bd592f5fc37fba5c23c5d871fc58895408e4d2c4de0d81db52d30bcfecb63e2cc3578fd51e"
        },
        {
          "alg" : "SHA3-384",
          "content" : "d5cb427c95402b9881c74ef765b2fdc23b87cb78f665b2232c054403a1528f2bc532ea60acaae724d527cdda40f58904"
        },
        {
          "alg" : "SHA3-256",
          "content" : "78f4004fef974b37caf68adf75e74300aa735b8e20f2b10e9d980f9876a0da58"
        },
        {
          "alg" : "SHA3-512",
          "content" : "940a6824fde8f976dda62e402797bc002272fc08a43979b1d24193393909d0984aa619318740fca708d7a96e45cdd4b3f8ebdbd656bc3975cf8ecc4e9aa29fe0"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.karaf.config/org.apache.karaf.config.core@4.4.11?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.apache.org/karaf/config/org.apache.karaf.config.core/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/apache/karaf/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://www.mail-archive.com/dev%40karaf.apache.org/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=karaf.git;a=summary/config/org.apache.karaf.config.core"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.felix/org.apache.felix.cm.json@1.0.8?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.felix",
      "name" : "org.apache.felix.cm.json",
      "version" : "1.0.8",
      "description" : "Support for OSGi configurations specified in JSON documents.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "93d352cb04c3f2f8cbae6ce516407bac"
        },
        {
          "alg" : "SHA-1",
          "content" : "9c7bfc9cc6874cbf272422eb0f6befb9483f85cb"
        },
        {
          "alg" : "SHA-256",
          "content" : "44cb2222a3cdcf7959cf8ecdc100a6854d73d4c42cf0100d1fa560b20d41b251"
        },
        {
          "alg" : "SHA-512",
          "content" : "37819ef378d51e202c5c8dc78adc2106e192d4cf137178ce9e87c5a960f594d6652112a0854c7b765b2ef953a27e4014eccbe48c239cbc510d8ad58e74c3f057"
        },
        {
          "alg" : "SHA-384",
          "content" : "97ab50314d503c7712ff8985e25502396a1a55642738347444fd7989bf0953a75c344b7d339d71d578dfc48834b51cfd"
        },
        {
          "alg" : "SHA3-384",
          "content" : "7f18af23e72d837f03e48cdd7be55ad87657049ff3e6b239c47eda06609a79e76acfaab29bd3c86f5239c948840d16fe"
        },
        {
          "alg" : "SHA3-256",
          "content" : "cbfa58fbff44a9f321bcbe879cbbf502b53d5a134adac1f6d2e09f1868e318bd"
        },
        {
          "alg" : "SHA3-512",
          "content" : "a2eed59b8c692a04842c0757bf8aa714e6851faa038ebfe0830de9a85fa5ef8dec190603f37271104d420726058713eeaf8f2c37f0e860528c2165a177eb9cc6"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.felix/org.apache.felix.cm.json@1.0.8?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://felix.apache.org/org.apache.felix.cm.json/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/FELIX"
        },
        {
          "type" : "mailing-list",
          "url" : "https://www.mail-archive.com/dev%40felix.apache.org/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=felix-dev.git;f=cm.json"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.sling/org.apache.sling.commons.johnzon@1.2.16?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.sling",
      "name" : "org.apache.sling.commons.johnzon",
      "version" : "1.2.16",
      "description" : "Apache Johnzon powered javax.json library",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "116bb4c9fd2df93eb153933e7933980a"
        },
        {
          "alg" : "SHA-1",
          "content" : "10c9a2a8d4481ebe346463616eac45f0bb4d6506"
        },
        {
          "alg" : "SHA-256",
          "content" : "747912f5e3a02b94320725814b12916a4afbc427039e233357e8b4a8efc61c47"
        },
        {
          "alg" : "SHA-512",
          "content" : "df7bdd9a63fe09c3f8b0a0b869f31ff3f0e7c36f7ea7b54b9c64fcfd866cb25ad377ff3eaa3d0c78a5cbd0ea63f7bce95dc1b80c4bbc1a93ab6ca9863c8774d3"
        },
        {
          "alg" : "SHA-384",
          "content" : "c77f4c446e263e4259f5c9580617cc2a9c12ffb16e9b7c15ed22bb66990ea2e6018fc7167ab3706b13172673b9cea58e"
        },
        {
          "alg" : "SHA3-384",
          "content" : "76d079fd1efc4c62039b61da5d22033088f0b70b8f8ce89a92681abf05bfd75509909ecab2e102bf62dce160302ce8f3"
        },
        {
          "alg" : "SHA3-256",
          "content" : "d148add49265d9983fc8ea7cb7f777f3ea23faa644824ee42d0e559daa5a4859"
        },
        {
          "alg" : "SHA3-512",
          "content" : "5d5af7acce248dcb4a2bc16e968b227025cbfbb9625ec5eb1b3c9408775a78940c0b2807d6d3932584524c0b8ca60d8db05fcfdee2db28ab63a4bc2219c5fe88"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.sling/org.apache.sling.commons.johnzon@1.2.16?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://sling.apache.org/sling-bundle-parent/org.apache.sling.commons.johnzon"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-builds.apache.org/job/Sling/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/SLING"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@sling.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=sling-org-apache-sling-commons-johnzon.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.geronimo.specs/geronimo-json_1.1_spec@1.5?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.geronimo.specs",
      "name" : "geronimo-json_1.1_spec",
      "version" : "1.5",
      "description" : "Apache Geronimo implementation of the JSR-374",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a289c903d88374da4b6ea4ae460e990d"
        },
        {
          "alg" : "SHA-1",
          "content" : "4e1944c446960787a90b8ee62baa3c67b666d5f8"
        },
        {
          "alg" : "SHA-256",
          "content" : "8c0494ab337b467a95883efef7551c8ee6dbb55f38ddf9ecc5e7336610c93fc7"
        },
        {
          "alg" : "SHA-512",
          "content" : "3206e00e8f47f1bfa6539a6de436f59c2da9d71cda2cb0426e7d918ba906b382c677dde7d55ff45028d48b8a7c3f8471eeb3392c16dadee1041b83136f77cde7"
        },
        {
          "alg" : "SHA-384",
          "content" : "58f70fba541a18a578953a107e98ae78b1e0f378e83bd5c2289f4667932c216b1f8c16dcf170dea3a2bc2baf5f2e2369"
        },
        {
          "alg" : "SHA3-384",
          "content" : "0fac7f7e297677d7bf921eb211c3fd202ccde7d3e12d2ee7820a2acc43dc58688615ca5d0561bf5a96c944bb4a5d5a3f"
        },
        {
          "alg" : "SHA3-256",
          "content" : "8915c08b1995e22864c95d33f3bafa72d73f2fc4d6b8994e07a5063b52bf57d2"
        },
        {
          "alg" : "SHA3-512",
          "content" : "1ae61230e22f0cda1aebe15c9205e2cc03a808559e3375bec2630f6b457bdbc82c4d3f79e3d1a16c40650d8b1e4a4b070f0cf5d3ba36a932c6c67b13192c0734"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.geronimo.specs/geronimo-json_1.1_spec@1.5?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://geronimo.apache.org/maven/specs/geronimo-json_1.1_spec/1.5"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/GERONIMO"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/geronimo-user"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewcvs.cgi/geronimo/specs/tags/geronimo-json_1.1_spec-1.5"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.platform/org.eclipse.osgi@3.18.0?type=jar",
      "publisher" : "Eclipse Foundation",
      "group" : "org.eclipse.platform",
      "name" : "org.eclipse.osgi",
      "version" : "3.18.0",
      "description" : "OSGi System Bundle %systemBundle",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6c4dac085d3b857724a1ff77ecf8ad55"
        },
        {
          "alg" : "SHA-1",
          "content" : "6f5d53b49a1f60559b39df01a16ac05e8cd13d75"
        },
        {
          "alg" : "SHA-256",
          "content" : "e4feacfbe8843b67608beeaff8a9513654902767999d6e3de941c6d4b85c9a1e"
        },
        {
          "alg" : "SHA-512",
          "content" : "f902fcd480d2a0a6f583b877b1015fe36ebdb87aeabd9504c26450a7cf7b13510c6ceb28a97dc90087a7001d149a684989b2d5745a89680c1b08ec48cbc14b11"
        },
        {
          "alg" : "SHA-384",
          "content" : "df64bbd378c502ff92ab19460d22503d9c0f9088173c309251929ebbc433a11089ca993019811039086d17936b6a4b89"
        },
        {
          "alg" : "SHA3-384",
          "content" : "1d13cf129f1f71b7a23e1b28b4b4046eacadeb844e7524014c08c3b3d91237249228a4525c2c0a84a00c592efeb53c36"
        },
        {
          "alg" : "SHA3-256",
          "content" : "b56a323d4ef0bc1404c44e89e662d838a0a514d7639cd1624ea574e589a89cfa"
        },
        {
          "alg" : "SHA3-512",
          "content" : "ea423031c2bcd0c1219d1dad0565a56aba2e89d327f151719351e90bf8dca02df07cc5fb536aee1439c9ef36387275c4a4a674e9853aee3125f07e2b51784f13"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.platform/org.eclipse.osgi@3.18.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.eclipse.org/platform"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://bugs.eclipse.org/"
        },
        {
          "type" : "vcs",
          "url" : "scm:git:https://github.com/eclipse-equinox/equinox.binaries.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.felix/org.apache.felix.framework@7.0.5?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.felix",
      "name" : "org.apache.felix.framework",
      "version" : "7.0.5",
      "description" : "Apache Felix is a community effort to implement the OSGi Framework and Service platform and other interesting OSGi-related technologies.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "82e51fdc1bde2a02d69d6310a02a4620"
        },
        {
          "alg" : "SHA-1",
          "content" : "dd4cb10c68d9ceb7897e561be7c4c16d25347193"
        },
        {
          "alg" : "SHA-256",
          "content" : "aba72932c5ffe52d1ae9fb735415474bc8305fd04f050e851f3a8f67da1834fd"
        },
        {
          "alg" : "SHA-512",
          "content" : "b632c8228e70f0917c1a2bda5dafceeff6582c5f3372b4000c7823018baefcfe695d108fa21820151b7b56f8fb24b0fb3876c3c966436bebba4cf5e759a2c51a"
        },
        {
          "alg" : "SHA-384",
          "content" : "1d26a3265a6e16682e08cbdeffc554ed9b4d429430dd5a4c8ccb49f3e8f8be4103167c59cefe16a1165e2d353694fab7"
        },
        {
          "alg" : "SHA3-384",
          "content" : "8c2b45ed96e0768c6496788cf42db437f81a6e709b1331f22926d024ec170672e4e0bef08652ba8a4fcb701f1b93b079"
        },
        {
          "alg" : "SHA3-256",
          "content" : "852fd6fe802d90135c629eb2e4c3526134058e39b0ed2ea2bafa694df0fb4068"
        },
        {
          "alg" : "SHA3-512",
          "content" : "f4b93770266b245ae43e2ac322117d856879cd77c8ce8b3d5c68b76e6068e596e549ef5d51a83fc086e6e6c97fdbf4f16f62cc779f46f68d91a35402487ec1cf"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.felix/org.apache.felix.framework@7.0.5?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://felix.apache.org/org.apache.felix.framework/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/FELIX"
        },
        {
          "type" : "mailing-list",
          "url" : "http://www.mail-archive.com/dev%40felix.apache.org/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=felix-dev.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.mojo/animal-sniffer-annotations@1.9?type=jar",
      "publisher" : "Codehaus",
      "group" : "org.codehaus.mojo",
      "name" : "animal-sniffer-annotations",
      "version" : "1.9",
      "description" : "Animal Sniffer Parent project.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "41f47a4c81b5a9f76bc7f12af69e4fbe"
        },
        {
          "alg" : "SHA-1",
          "content" : "c29299253a087898aaff7f4eac57effa46b1910a"
        },
        {
          "alg" : "SHA-256",
          "content" : "cd96feeb47f34b2559704715db7b179a03a3721f9dc4092c345c718e29b42de4"
        },
        {
          "alg" : "SHA-512",
          "content" : "356031c835d382badbec0f9ee246e32510e62b932721b31165397f2cc04a72108365967e241809ec6d190de5628ce34a61803266fd3270126e388496c10c5ec6"
        },
        {
          "alg" : "SHA-384",
          "content" : "8bd261da052c944631ba7a91db5bf0180b6ebe5709c9d52ef397d9b87b50b29099bd3b725c406e0592ebf9f69d503f06"
        },
        {
          "alg" : "SHA3-384",
          "content" : "433187de30ebe17b7ed3a6976375986db24935c913b3b02ec335c2a9cfdcacc01b7d60b112f8f4c472f2cbe22f2807de"
        },
        {
          "alg" : "SHA3-256",
          "content" : "d99e34bd3f7e6ee110bfb483abbe16b7672b265a96556cb670c9b5c4970d4c5a"
        },
        {
          "alg" : "SHA3-512",
          "content" : "968f89be96e7685b3b14c6282bd0d921d75d15bc8f98a67ed1f4b0f9356de2cab39d760b4b2428e71d9417d1c55f3fe5178b3cbbe67b89cbef352e2bd6ce4777"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/license/mit/"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.mojo/animal-sniffer-annotations@1.9?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://mojo.codehaus.org/animal-sniffer/animal-sniffer-annotations"
        },
        {
          "type" : "build-system",
          "url" : "https://grid.sonatype.org/ci/job/mojo/"
        },
        {
          "type" : "distribution",
          "url" : "https://nexus.codehaus.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://jira.codehaus.org/browse/MANIMALSNIFFER"
        },
        {
          "type" : "mailing-list",
          "url" : "http://archive.codehaus.org/lists/org.codehaus.mojo.dev"
        },
        {
          "type" : "vcs",
          "url" : "http://fisheye.codehaus.org/browse/mojo/tags/animal-sniffer-parent-1.9/animal-sniffer-annotations"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.jline/jline@3.30.9?type=jar",
      "group" : "org.jline",
      "name" : "jline",
      "version" : "3.30.9",
      "description" : "JLine",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "3d8ff9980a5a4a3f0338a7e7759be7f9"
        },
        {
          "alg" : "SHA-1",
          "content" : "4e0400561256c158f2cb448b1a9d561fc1ccedb6"
        },
        {
          "alg" : "SHA-256",
          "content" : "b54aebaaf390dfd7fa82d45b7e168337bacb3d6d1174709517a2ecd789f39e38"
        },
        {
          "alg" : "SHA-512",
          "content" : "c5a01a9adc4a73a62e84aee076a1640ce9e800927642bd748847a734ec65d0b9fa4ad0f600a614a2bbbfd03775719371304350db5ff6af5309c7e19a9ca48c9f"
        },
        {
          "alg" : "SHA-384",
          "content" : "c919896e13b11f31b3f5b5dc0c9a8e117ac208b60744971cfdd5857e4b493a04705bafd748b3e52e1d3c3a87717f7e5c"
        },
        {
          "alg" : "SHA3-384",
          "content" : "5d723deb9b97b7c36a50e3e9120b5b49780bad040a32b094cec6a7d80c55bab5ae734cbf453fb949a2b83cb7c3857b4a"
        },
        {
          "alg" : "SHA3-256",
          "content" : "b61a5fc5ba64843cd72e24097fc383fb35e02a95d12885dd88770b334498d2ce"
        },
        {
          "alg" : "SHA3-512",
          "content" : "f5e8f6afe0002795ab41bd9599a39db7814e5009e8d28ff5a176293875e0bc0cd21ef1bf1c90132642905aeeea956e45d90b6e898d7042ff1b73360a12cc496a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-4-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.jline/jline@3.30.9?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/jline/jline3/jline"
        },
        {
          "type" : "distribution",
          "url" : "https://repo.maven.apache.org/maven2"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/jline/jline3"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.ops4j.pax.logging/pax-logging-api@2.3.3?type=jar",
      "publisher" : "OPS4J - Open Participation Software for Java",
      "group" : "org.ops4j.pax.logging",
      "name" : "pax-logging-api",
      "version" : "2.3.3",
      "description" : "Pax Logging API Library is a collection of logging APIs from different libraries/facades. It supports SLF4J, Commons Logging, JULI Logging, Log4J1 API, Log4J2 API, JBoss Logging and Avalon APIs. Additionally, Pax Logging specific library is available as backend implementation with its specific configuration mechanisms, but it's not required.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "be63c82f5e5141efa791c4bae7183eac"
        },
        {
          "alg" : "SHA-1",
          "content" : "032035ee5c87d73069d4cfe8d5562520711e4d9b"
        },
        {
          "alg" : "SHA-256",
          "content" : "1e73700a991376e855ca8324f16d2e9e86462ac712a07f5ec117fdf015ace550"
        },
        {
          "alg" : "SHA-512",
          "content" : "6e6d0faf0ef405204249b5ad423973de721356d7d205e9c1b21273b076014de3f468b153b250eb066e1718e6f6ebc7e56b558d6c1f8ef14512a281f77f57b376"
        },
        {
          "alg" : "SHA-384",
          "content" : "8d3a99b238dd3deaae41a1e96c12da23cd94944dfd66a9a604a0d46068ea96e2f3a1b61bbc89b9418cf1e6126d0c9a78"
        },
        {
          "alg" : "SHA3-384",
          "content" : "e3ece79d0c3d2e1b3143d132c6f13166ddc4c439dc37bcc2c488d451c915233bfc25b26687035c2b153d8c6e090037f9"
        },
        {
          "alg" : "SHA3-256",
          "content" : "14fefd63a1df862e22b67b64e01888770088c10ed5257711a7ab3980c005884f"
        },
        {
          "alg" : "SHA3-512",
          "content" : "d97ea18884c2257497d99781eb86651f3e29aba9188d11598951ca9a91b32baad6b0ea267dad0cde5b332804ef2a8e3f49c6632ce1ef4c3321ee08d7bc0d8126"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "ALv2",
            "url" : "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        }
      ],
      "purl" : "pkg:maven/org.ops4j.pax.logging/pax-logging-api@2.3.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://ops4j1.jira.com/wiki/spaces/paxlogging/overview/pax-logging-api"
        },
        {
          "type" : "build-system",
          "url" : "http://ci.ops4j.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/ops4j/org.ops4j.pax.logging/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://groups.google.com/forum/?fromgroups=#!forum/ops4j"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/ops4j/org.ops4j.pax.logging/tree/master/pax-logging-api"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.osgi/osgi.core@7.0.0?type=jar",
      "publisher" : "OSGi Alliance",
      "group" : "org.osgi",
      "name" : "osgi.core",
      "version" : "7.0.0",
      "description" : "OSGi Core Release 7, Interfaces and Classes for use in compiling bundles",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "2fc4ef3c19433d05df79a114f822f0ec"
        },
        {
          "alg" : "SHA-1",
          "content" : "7545eab9bd1f85e9f1162865a7281c8becb417f2"
        },
        {
          "alg" : "SHA-256",
          "content" : "a9218f9bee68a41c4ddbd92cdfb2ee8ae660fa25b372f78d01812b1770e4525b"
        },
        {
          "alg" : "SHA-512",
          "content" : "60c5e59fc1d33bcb63a0be1151af04321bf9c6c08faa910cf1a29f74b9b58d43edc2d528182edd0884d2bd44403840d8d50b6c012411892391fe28c0a2102ffb"
        },
        {
          "alg" : "SHA-384",
          "content" : "b84edd280d2457b0bdea88ca4778604af8584b0653e28aeadcd5cbe2c0fae7f304b2a076cc4419d0719c813e99cda8b3"
        },
        {
          "alg" : "SHA3-384",
          "content" : "a24ee2ea83cd9b9d9c579c8ec6f3b4f19aa3cd3f761b75d8d61a560180665d0f55a2b2e55007969342bafc4084625f33"
        },
        {
          "alg" : "SHA3-256",
          "content" : "fb6c4aea16e59cca69fecbd77fb5ddddb90043cdc4a1a9be8ab1d0ad07c8a06a"
        },
        {
          "alg" : "SHA3-512",
          "content" : "350ff1ef096fce5f4263b353e0a9d9a6fae594ccaedbfa478f0373aee7d09adbd5639528c5a9b4d67c91c9e98f44a39bea72f31b9e2b9282a8125d8155ccebf8"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.osgi/osgi.core@7.0.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.osgi.org/"
        },
        {
          "type" : "vcs",
          "url" : "https://osgi.org/gitweb/build.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.osgi/osgi.cmpn@7.0.0?type=jar",
      "publisher" : "OSGi Alliance",
      "group" : "org.osgi",
      "name" : "osgi.cmpn",
      "version" : "7.0.0",
      "description" : "OSGi Compendium Release 7, Interfaces and Classes for use in compiling bundles",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "bc6bd0fe88a2d543d6477e611865a01b"
        },
        {
          "alg" : "SHA-1",
          "content" : "4fa9f239a60aeca4a27648df329d112d562a350c"
        },
        {
          "alg" : "SHA-256",
          "content" : "8e6445afe1abb3dcd43c60c8cd6c0f15b052a8f4228812559ba521c5ce91db34"
        },
        {
          "alg" : "SHA-512",
          "content" : "7fb3ab1f27b097290d67369bde993c9fbbe2db81b541f90ac332d0181c2823b21b7f4444070b627216d601582997f16cb9886d8e177c3a24e7fa118a875316ae"
        },
        {
          "alg" : "SHA-384",
          "content" : "112820e2ce3c55bd5b89ae1ac41b2cc2cd9b5294bf6c075b62e8a35d5e7507d6556d8aafc93e59ac988359d8599ef3a6"
        },
        {
          "alg" : "SHA3-384",
          "content" : "5bb1147222f4439ce9c04d434472f5549b1adef9c73591048b8c28b63d01c50d295d05307882fac2b39af78e04c63bfd"
        },
        {
          "alg" : "SHA3-256",
          "content" : "350342d6dde89b60b0d73f6d7724a184914e99d285142d46952724b1de860e49"
        },
        {
          "alg" : "SHA3-512",
          "content" : "4a5444bc250a36e7b1504f4deeee920d46ba0e253fe2ce8c02b269faec7a2331b79b42bff2b765c2b001ded8979df4c704550c1ff1daf726902a0a6835e11596"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.osgi/osgi.cmpn@7.0.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.osgi.org/"
        },
        {
          "type" : "vcs",
          "url" : "https://osgi.org/gitweb/build.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@2.3.3?type=jar",
      "publisher" : "OPS4J - Open Participation Software for Java",
      "group" : "org.ops4j.pax.logging",
      "name" : "pax-logging-log4j2",
      "version" : "2.3.3",
      "description" : "Pax Logging backend implementation based on Apache Log4J2. It provides Log4J2 specific implementation of PaxLoggingService interface and Log4J2 specific configuration methods. Users may customize Log4J2 behaviour (appenders, layouts) by creating fragment attached to this bundle.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0db9c5eb6b4147330e0cc6ac09f8f999"
        },
        {
          "alg" : "SHA-1",
          "content" : "86bfb989d3508a64b97a6262865fba6bfc97bbc2"
        },
        {
          "alg" : "SHA-256",
          "content" : "87af9d1881e8e3113bdfd15986dd147d701e01dbd0be4433a5db09d1db66294f"
        },
        {
          "alg" : "SHA-512",
          "content" : "faac51deaeea8d7b295cf662b66a5031d999166a425d1f6d07fb07358fb1018ff6fd69bffc31db39018282fd9d4bdba46a7c9b026d7b9bec475b218bafec0b9d"
        },
        {
          "alg" : "SHA-384",
          "content" : "138c829ffd0cbf0abff09ad1f03fdb8956a299fa1566674700924b5bf9e38a5211b33fb99f5bbe7e4a1edd7a971c0825"
        },
        {
          "alg" : "SHA3-384",
          "content" : "2be21fee3e70f522e1bddf4499bf13a5965f6491dbb475c593b6aa4cf07a6ad6894c31ead83277411754bb16822020f7"
        },
        {
          "alg" : "SHA3-256",
          "content" : "87b002357bf95c77083e0732889ea8164292d30092a204fe25a24c0a1dc9441b"
        },
        {
          "alg" : "SHA3-512",
          "content" : "e4248a54ca9d3094e9b1ccc9f9bd580bf03852e792e952a56219cc95c35f74021d3f20bf6a0ac91142b0fd6ad26ed5e0c490e04c04870cb4e71a6c744e29749a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "ALv2",
            "url" : "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        }
      ],
      "purl" : "pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@2.3.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://ops4j1.jira.com/wiki/spaces/paxlogging/overview/pax-logging-log4j2"
        },
        {
          "type" : "build-system",
          "url" : "http://ci.ops4j.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/ops4j/org.ops4j.pax.logging/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://groups.google.com/forum/?fromgroups=#!forum/ops4j"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/ops4j/org.ops4j.pax.logging/tree/master/pax-logging-log4j2"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.osgi/osgi.annotation@7.0.0?type=jar",
      "publisher" : "OSGi Alliance",
      "group" : "org.osgi",
      "name" : "osgi.annotation",
      "version" : "7.0.0",
      "description" : "OSGi Annotation Release 7, Annotations for use in compiling bundles",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4cf01e7378d9a9c047864712c2dd078b"
        },
        {
          "alg" : "SHA-1",
          "content" : "c8c21fdf695aa93d8df0547c15fb6b52f3395787"
        },
        {
          "alg" : "SHA-256",
          "content" : "d5f4083cc4c781a3b12832a5fafd7c5536ba4bdd31f411a8cd5c93b73370d70c"
        },
        {
          "alg" : "SHA-512",
          "content" : "b976bceed56e88854550318f21e71c2812b220d1b86dd3f4d34b4319b983b9c659cba2d29f044efaa243af5775cc4f9d2283bf60836b7632ce8f6bc396325c2c"
        },
        {
          "alg" : "SHA-384",
          "content" : "95d2fad029f32cc170459168c3b3a468f88d8b020e383c8a404a7403f7e96e3559cf5988b617d11c5fc461b551a093bc"
        },
        {
          "alg" : "SHA3-384",
          "content" : "23d0b6bc738aa909588e086686472cf7d3139e0bee76bbd14c9ced321ff348429121382a5081c8bcf851762360630950"
        },
        {
          "alg" : "SHA3-256",
          "content" : "efbb824a8b3effbeedae342fff7a4155fb990df7c7ebfaababa35dae60b2988f"
        },
        {
          "alg" : "SHA3-512",
          "content" : "7a8ef2530931e89da65fcfe56e78bdef574f4642477249203d46522c8cb3d05067a2bb5e1279be41752644a431321e33f063e9c1d622518b9081dafbca2089df"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.osgi/osgi.annotation@7.0.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.osgi.org/"
        },
        {
          "type" : "vcs",
          "url" : "https://osgi.org/gitweb/build.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.ops4j.pax.logging/pax-logging-logback@2.3.3?type=jar",
      "publisher" : "OPS4J - Open Participation Software for Java",
      "group" : "org.ops4j.pax.logging",
      "name" : "pax-logging-logback",
      "version" : "2.3.3",
      "description" : "Pax Logging backend implementation based on Logback. It provides Logback specific implementation of PaxLoggingService interface and Logback specific configuration methods.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4d69d165fd7a39fdbbd291a6a4460ff3"
        },
        {
          "alg" : "SHA-1",
          "content" : "4a16a955f4be56b64d26f355502f1a7cb276659a"
        },
        {
          "alg" : "SHA-256",
          "content" : "f828a44296c6e9a9e7804b1efcfc870a70660de1e988de64203aab9d4fb56d95"
        },
        {
          "alg" : "SHA-512",
          "content" : "94307edea2ac63cb307909787bcf850024b60c200aa558921fc516293f31201989a5d73b8e7ef2536a11d0a6f3ce51f1eeacc3022599b5650f7b117690a4a02e"
        },
        {
          "alg" : "SHA-384",
          "content" : "48cb8f614e9ef16acbb049231e12b901dec8822f953d5d1525ad4308a5b1599938b0e925aafd4b246cc53be5b0474d09"
        },
        {
          "alg" : "SHA3-384",
          "content" : "ceefd3517b608b82961cdf9eed296b800c5ac26e4a20d66d3bf1d311f157539a2093060422aeb48e7ebeb59625bd618a"
        },
        {
          "alg" : "SHA3-256",
          "content" : "3b063bb7e891b976ab4e37a6b8def2c404a12febdae06b23adddd6a06000f52e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "d73036bb5e466cf495ce2c07dbe19f714d322b41f38a442f42b868b9f9ea989b32dc17bc95649e95b4f1096f786a779a863402e95980363b0f6d1d7bea67aa4c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "ALv2",
            "url" : "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        }
      ],
      "purl" : "pkg:maven/org.ops4j.pax.logging/pax-logging-logback@2.3.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://ops4j1.jira.com/wiki/spaces/paxlogging/overview/pax-logging-logback"
        },
        {
          "type" : "build-system",
          "url" : "http://ci.ops4j.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/ops4j/org.ops4j.pax.logging/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://groups.google.com/forum/?fromgroups=#!forum/ops4j"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/ops4j/org.ops4j.pax.logging/tree/master/pax-logging-logback"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/ch.qos.logback/logback-core@1.5.32?type=jar",
      "publisher" : "QOS.ch",
      "group" : "ch.qos.logback",
      "name" : "logback-core",
      "version" : "1.5.32",
      "description" : "logback-core module",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "053d4a28d6ba4c9b6247c6fd859ca64f"
        },
        {
          "alg" : "SHA-1",
          "content" : "fdfb3ff9a842303d4a95207294a6c6bc64e2605d"
        },
        {
          "alg" : "SHA-256",
          "content" : "6a904d5778d0e361a9692f9cbe68b1b0620ae0f3eda2ec2ed09102755bf036c4"
        },
        {
          "alg" : "SHA-512",
          "content" : "7e118f88ff9f6bdd2854a4218c4d8e2a1a031eb0cbff7eb2b181fc162d5004b6d89e7b4586616fffd922b4b7a432395892b9caa04916b114a87b518a1abd5157"
        },
        {
          "alg" : "SHA-384",
          "content" : "b6ae51522d03a94d9dd33fdae4dbd81d9567c2e9191d7dafe20bc711148aaf77c0eaaae64bf3c9cf9a33aebf0755644d"
        },
        {
          "alg" : "SHA3-384",
          "content" : "2c899f38f50f14529a3710c703a430bfaeefdded4acc6d48caa8ee680d2e6f7f1ffae3911f059007fbba4c7ce57748a4"
        },
        {
          "alg" : "SHA3-256",
          "content" : "8369c927a69ba6d40db79c3156b17f4a24c31f3ff24c2f67f325e903310fc935"
        },
        {
          "alg" : "SHA3-512",
          "content" : "9d952bde380b128f5446eb2d040b73f44f019f50f05d31e08e1aac645c6014067b0787aa3362188a7babf74a976d5e58cd6cfeb3dfc7bdc3259ac50d0e3fcd96"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "name" : "GNU Lesser General Public License",
            "url" : "https://www.gnu.org/licenses/old-licenses/lgpl-2.1.html"
          }
        }
      ],
      "purl" : "pkg:maven/ch.qos.logback/logback-core@1.5.32?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://logback.qos.ch/logback-core"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/qos-ch/logback/logback-core"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/ch.qos.logback/logback-classic@1.5.32?type=jar",
      "publisher" : "QOS.ch",
      "group" : "ch.qos.logback",
      "name" : "logback-classic",
      "version" : "1.5.32",
      "description" : "logback-classic module",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "cc1b628dcb1f44089d0decf8a4cf9009"
        },
        {
          "alg" : "SHA-1",
          "content" : "2b1042c50f508f2eb402bd4d22ccbdf94cc37d2e"
        },
        {
          "alg" : "SHA-256",
          "content" : "2d4cf592db78be2de4d6140434c2fec170dcb16a09e8c8b7b207dbf5e31b848a"
        },
        {
          "alg" : "SHA-512",
          "content" : "6f28dbc23ce773773fdd73801aaa9491c3300fa0888efdbc48909a60f191df4536328d2aeb6f0e91f05275bfd55b2b220ed2c30ce5ed4f31012f42eb11d79d7c"
        },
        {
          "alg" : "SHA-384",
          "content" : "aa437c8f4b8a66d0e072a1c41cd7f747631554b565246b7e250e392984195d2b284307070728b0aef32d9e85736a3508"
        },
        {
          "alg" : "SHA3-384",
          "content" : "72f659c00d07f50367b08b21cc16679ddd3c8945d3fdab1ccbeeda930cc71d873837e56dcdc4cbf0b3d546a75889c58e"
        },
        {
          "alg" : "SHA3-256",
          "content" : "84cbb3d39ed018e0aeded02e37f4e6d4646aa7555134c7f071e7f2f6457cb35e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "414f83d924ed37fbd89b1ac08f3357dbfa9ed7051871c427918f7c5c868826e60ff4a27a954554463137d15f8aef7a6d7e142b8b6aedfa4131ce2124dde1bdc7"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "name" : "GNU Lesser General Public License",
            "url" : "https://www.gnu.org/licenses/old-licenses/lgpl-2.1.html"
          }
        }
      ],
      "purl" : "pkg:maven/ch.qos.logback/logback-classic@1.5.32?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://logback.qos.ch/logback-classic"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/qos-ch/logback/logback-classic"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/ch.qos.logback.contrib/logback-jackson@0.1.5?type=jar",
      "group" : "ch.qos.logback.contrib",
      "name" : "logback-jackson",
      "version" : "0.1.5",
      "description" : "Logback Contrib provides community-driven and supported extensions to the Logback logging framework. All contributions are made by contributors with CLA on file.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "16960ad8a1dc45d22bf3d38897a247a8"
        },
        {
          "alg" : "SHA-1",
          "content" : "0e8b202a23691048a01e6322dd040f75e08e9ca2"
        },
        {
          "alg" : "SHA-256",
          "content" : "c6f8863934218faa1bfa0f325659aa899e6a28473de2ec09cf43192c78409ab4"
        },
        {
          "alg" : "SHA-512",
          "content" : "d9a3d4cb6cf4eda6fc18e2d374007d27c6ddba98e989a8d8a01b49859b280450113f685df6e16c5fbe0472bc9e26308bc7e8b7e0aedab9404cf0b492d7511685"
        },
        {
          "alg" : "SHA-384",
          "content" : "f4396c42975708fc2a015c4d1051e73a9dfc5c25a529abc68d804c6e8b2cc62c1b279f703cbda8df8f59f29de3da9b54"
        },
        {
          "alg" : "SHA3-384",
          "content" : "a614a1d0e975d712d2e2b4d8d49da80b98adce3067807df5bdab612b3206e4894333bb1c65ea55615b3b98c6426730ed"
        },
        {
          "alg" : "SHA3-256",
          "content" : "3eb67640e7b1e1d9555912be3e1ee4ed89deb38073a99521f1d1472540a7c2ba"
        },
        {
          "alg" : "SHA3-512",
          "content" : "6969982f81ad6f4fca2bb48b004896354351184b3f327f272a331d593c7e2ced58c1737373a3274caee02a2bf57a95afd8423b7e026c9f012b3a6845655ba731"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-1.0"
          }
        },
        {
          "license" : {
            "name" : "GNU Lesser General Public License",
            "url" : "http://www.gnu.org/licenses/old-licenses/lgpl-2.1.html"
          }
        }
      ],
      "purl" : "pkg:maven/ch.qos.logback.contrib/logback-jackson@0.1.5?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/qos-ch/logback-contrib/wiki/logback-jackson"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/qos-ch/logback-contrib/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/qos-ch/logback-contrib/logback-jackson"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/ch.qos.logback.contrib/logback-json-core@0.1.5?type=jar",
      "group" : "ch.qos.logback.contrib",
      "name" : "logback-json-core",
      "version" : "0.1.5",
      "description" : "Logback Contrib provides community-driven and supported extensions to the Logback logging framework. All contributions are made by contributors with CLA on file.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "70fc4a12ede1bc381dca0d20ee948b9f"
        },
        {
          "alg" : "SHA-1",
          "content" : "90bdb547819957fc940188f5830b7b59375f6fdd"
        },
        {
          "alg" : "SHA-256",
          "content" : "8409ebc3c875fcb3dfd933787b559c0da9c9ce8660b02665be05ad33ce0ae31d"
        },
        {
          "alg" : "SHA-512",
          "content" : "2a826036f21997e2979fda83ae3e33cf62f3b2b2df15a7b11d1fd8a52163b09f0f2f8d72f5fdcea0ec1289b3d27727ed5e6b0bcdf4c5d741f4bac07b7b6139e8"
        },
        {
          "alg" : "SHA-384",
          "content" : "05f1c56b93bcfa06f8c35e401619ac8dc6e004491ea68008ab397c7db27a4455eeba41c23a1b48e57829e7adfe2f1524"
        },
        {
          "alg" : "SHA3-384",
          "content" : "8abbdd6e490238bb832c4e1030ce7996ef7f00f638bf7016d8d8426cc727815f16f364600d1256aa4f0e94d899eb1e37"
        },
        {
          "alg" : "SHA3-256",
          "content" : "732217480b429df62dc9a7196f3f01d521adc328f9d81a3bb902b12462e072be"
        },
        {
          "alg" : "SHA3-512",
          "content" : "654547f0baf628c7b5a0f2c6df954cede9b4aa21eb9826c97577897dc41e8430d02f2ab0164f87feea4e696fecc1903d026a9133466d38da25ad89bc40aa0422"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-1.0"
          }
        },
        {
          "license" : {
            "name" : "GNU Lesser General Public License",
            "url" : "http://www.gnu.org/licenses/old-licenses/lgpl-2.1.html"
          }
        }
      ],
      "purl" : "pkg:maven/ch.qos.logback.contrib/logback-json-core@0.1.5?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/qos-ch/logback-contrib/wiki/logback-json-parent/logback-json-core"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/qos-ch/logback-contrib/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/qos-ch/logback-contrib/logback-json-parent/logback-json-core"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/ch.qos.logback.contrib/logback-json-classic@0.1.5?type=jar",
      "group" : "ch.qos.logback.contrib",
      "name" : "logback-json-classic",
      "version" : "0.1.5",
      "description" : "Logback Contrib provides community-driven and supported extensions to the Logback logging framework. All contributions are made by contributors with CLA on file.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4b13ef0b7a6af69d131e933c3318d331"
        },
        {
          "alg" : "SHA-1",
          "content" : "f7fd4e747a9b0c50fc4f71b0055d5bea64dc05c3"
        },
        {
          "alg" : "SHA-256",
          "content" : "257194ac9c57f65e72e7b18e60d7b78d3ea1bc85e734332a4a8bbb46a5af305a"
        },
        {
          "alg" : "SHA-512",
          "content" : "d30bf70217d316914d83d46cc15783f656354084087d59cbc0620a746f10b4a42e56d33b3e50a8b3596a64ec8314730bf5ff9a3f7dc3417bdd0582665be009ec"
        },
        {
          "alg" : "SHA-384",
          "content" : "74b64d13fc567e2c5348f14c35e7d76d1daca11d7cb77fc69c4d9c79c33add0f7008e0481272c4a2c590878a8b2a7c27"
        },
        {
          "alg" : "SHA3-384",
          "content" : "6a8eed002381a1865d97b63bf961d79016e284e5617bc2bdd3fb3d166a62813b7e63c4faa56fe4c51ea321f6e58f6929"
        },
        {
          "alg" : "SHA3-256",
          "content" : "658a88d43abe587bd4de9b962c4267cbb424498d8809a211955784a39eb78f59"
        },
        {
          "alg" : "SHA3-512",
          "content" : "5d5e142b2f335c3d335cefe7c7663b1d1651f6ec5d314f7e109d3bc6574fca7188ea5e8e6dfb17768deb781d15f6947d96e2f3185a933230954734dca90bcfdb"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-1.0"
          }
        },
        {
          "license" : {
            "name" : "GNU Lesser General Public License",
            "url" : "http://www.gnu.org/licenses/old-licenses/lgpl-2.1.html"
          }
        }
      ],
      "purl" : "pkg:maven/ch.qos.logback.contrib/logback-json-classic@0.1.5?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/qos-ch/logback-contrib/wiki/logback-json-parent/logback-json-classic"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/qos-ch/logback-contrib/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/qos-ch/logback-contrib/logback-json-parent/logback-json-classic"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.ops4j.pax.url/pax-url-aether@2.7.1?type=jar",
      "publisher" : "OPS4J - Open Participation Software for Java",
      "group" : "org.ops4j.pax.url",
      "name" : "pax-url-aether",
      "version" : "2.7.1",
      "description" : "OPS4J Pax Url - mvn: protocol handler",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "7c4bcd9595c8d5b6cb7c069d45ae6d15"
        },
        {
          "alg" : "SHA-1",
          "content" : "05fc7bb6e8cac3551f177e52beab4868349ca69c"
        },
        {
          "alg" : "SHA-256",
          "content" : "70788da1c4b0665f01d4d3091160021657e06f604b3868a5fe8f196e1814aae6"
        },
        {
          "alg" : "SHA-512",
          "content" : "6550907ba6815ecd84240cd63e7dc788dce2e4a22ffe172bf56295628d0397960588514ca24901d3db3679707b0cc00770b3d02f0feaf4751f55b77cd7cf8f4b"
        },
        {
          "alg" : "SHA-384",
          "content" : "448cb0cbdb04f36287525638ca86e9602ef53a5a01172f93ebdd04f593261447488fc775c35918b59b875674e39b6192"
        },
        {
          "alg" : "SHA3-384",
          "content" : "df926ad41c026c403c1212448729cb58092638f5035788746b3f4285c0609b84c27cf14ed6d5a345b1f9013fc3087ca5"
        },
        {
          "alg" : "SHA3-256",
          "content" : "9b5961ff0cd9db2c8f3f337c4b7cec0ea72b8bfa926af1651542289a88e1db77"
        },
        {
          "alg" : "SHA3-512",
          "content" : "100bbaf33df4f778c4ebd0752cd698caf142f057462b8755aee171b532d291c151f91b4facdf000c071cd461e603b926c79350eab3ac6d185ff820722e408fa3"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "ALv2",
            "url" : "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        }
      ],
      "purl" : "pkg:maven/org.ops4j.pax.url/pax-url-aether@2.7.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://ops4j1.jira.com/wiki/spaces/paxurl/overview/pax-url-aether"
        },
        {
          "type" : "build-system",
          "url" : "http://ci.ops4j.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://ops4j1.jira.com/projects/PAXURL/summary/statistics"
        },
        {
          "type" : "mailing-list",
          "url" : "https://groups.google.com/forum/?fromgroups=#!forum/ops4j"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/ops4j/org.ops4j.pax.url/tree/master/pax-url-aether"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.felix/org.apache.felix.fileinstall@3.7.4?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.felix",
      "name" : "org.apache.felix.fileinstall",
      "version" : "3.7.4",
      "description" : "A utility to automatically install bundles from a directory.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b34fc8b979a5e5722d10a1b5f9e1501c"
        },
        {
          "alg" : "SHA-1",
          "content" : "599dcee01be2623897aae7ca5caf693e61929cc1"
        },
        {
          "alg" : "SHA-256",
          "content" : "32c8d6ab6deddde0b6bde08e91ee78117e66518ce6f76facbea530dff658a733"
        },
        {
          "alg" : "SHA-512",
          "content" : "62554056b1641c027562b8b9bed740a79783c5d7c666204f73fae07e4aef989386615b1b56133526229c43e30f2318e49619cc112e574bd875f991078470491a"
        },
        {
          "alg" : "SHA-384",
          "content" : "204a864951d49cccf74be27847adbed0c76de93cdec68f8386c91e2aac8689cd1de5b3757a21c7113a70d60511d59f80"
        },
        {
          "alg" : "SHA3-384",
          "content" : "5fa8a7f7c8c88fb0cb886a7740f090b03927fe02f6f479f8718dd9aa82b262b047a0df4b0e8ec1a715af5af6061dc173"
        },
        {
          "alg" : "SHA3-256",
          "content" : "0f5f19a8c78ee6aed53668664b8c043e13abab34a33b63f2e0a9bb50070c06ea"
        },
        {
          "alg" : "SHA3-512",
          "content" : "ca50a48978caa020e05023d815d81523a48ddf2db08e8a903d41803b28d6ea0456d2dd77300ee1de6bddb65e96757d6122f2085993aff09c486c3cc341c6c2df"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.felix/org.apache.felix.fileinstall@3.7.4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://felix.apache.org/site/apache-felix-file-install.html"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/FELIX"
        },
        {
          "type" : "mailing-list",
          "url" : "http://www.mail-archive.com/dev%40felix.apache.org/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=felix-dev.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.felix/org.apache.felix.configadmin@1.9.26?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.felix",
      "name" : "org.apache.felix.configadmin",
      "version" : "1.9.26",
      "description" : "Implementation of the OSGi Configuration Admin Service Specification 1.6",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "38d0271f74dbec562663096cd5395870"
        },
        {
          "alg" : "SHA-1",
          "content" : "78b3b959e9adc47438f3ae0df5a058068038981f"
        },
        {
          "alg" : "SHA-256",
          "content" : "53868a581938969506e208fe096b0d359240ae358f14f979b3f573aef30af094"
        },
        {
          "alg" : "SHA-512",
          "content" : "8b76ee24731a5cfffb947c751b94473e5ca6bba8e3c4c281b8631022810ef524f7270a046a3fbb982362f0274a2099130e7d34f799e6a60ad6215662cdf075ca"
        },
        {
          "alg" : "SHA-384",
          "content" : "518351845d29c3b842e5bcb9172970d8ffa0b1dcaafa103f4c0767be2fd0b57cca9cebb7ce2ba6484c0d26dd126b700d"
        },
        {
          "alg" : "SHA3-384",
          "content" : "f4c21e84ff770d18ab49f37ae832d55ea3e20a0b2a91e23983901b6fefbf4afa40cfc9534d9258d3f515b7784da6f973"
        },
        {
          "alg" : "SHA3-256",
          "content" : "ec8f3bbc8f7c5fd7459c52d798c81b56744518ab1e1bbc6827ed479c72c9ca55"
        },
        {
          "alg" : "SHA3-512",
          "content" : "3f7043fe0df521cf97f41e27cda9ce62e619efdf3f1449680492f5a31adccce9077d055690558b8149d76627cef7d7f62da29bdfc2e853426fe0856a6d2e3188"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.felix/org.apache.felix.configadmin@1.9.26?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://felix.apache.org/org.apache.felix.configadmin/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/FELIX"
        },
        {
          "type" : "mailing-list",
          "url" : "http://www.mail-archive.com/dev%40felix.apache.org/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=felix-dev.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.felix/org.apache.felix.configadmin.plugin.interpolation@1.2.8?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.felix",
      "name" : "org.apache.felix.configadmin.plugin.interpolation",
      "version" : "1.2.8",
      "description" : "This plugin makes it possible to substitute placeholder values in ConfigAdmin configuration with values from the file system, environment variables or system properties.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "be17b3472e3962c8d5b720c99fc79225"
        },
        {
          "alg" : "SHA-1",
          "content" : "4d48334690e6eca71aff73fa2463abb579af4b3c"
        },
        {
          "alg" : "SHA-256",
          "content" : "5357e3af05fd746fa6ed974b0960c3383a9280182a95ed8a00bda511480c3070"
        },
        {
          "alg" : "SHA-512",
          "content" : "d37bb6586550a63ca918722253360d0826767b550f6a4b14edeaba07a576a807ce52d783edb3bb3716d8c73cf40ac1a11133cd523a193a7fbbc4f125cd2eecfd"
        },
        {
          "alg" : "SHA-384",
          "content" : "730e934ec38bde2697a26534cdf8621969c3c25c0eb12b128fc6fce4068a9393ecd895324b1798df87669ee64a9aed35"
        },
        {
          "alg" : "SHA3-384",
          "content" : "96af561d4f50795d6bd233d6004cf68a1427165500ec9be97e8084d51bedb6926dc1dc711def8fb7436579d1c3f9db77"
        },
        {
          "alg" : "SHA3-256",
          "content" : "32565ffbc5eb61db32739fb68babe525392787a1de54e0593a331becd3966cd1"
        },
        {
          "alg" : "SHA3-512",
          "content" : "808cef69ab9dabf227b5d10765c3433bd48a872181e12daa26ce1ef0b9bdad01496c45fcd4ac0d79ce0e6440214ebfa0ad01850c70b720645e847260d3681f93"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.felix/org.apache.felix.configadmin.plugin.interpolation@1.2.8?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://felix.apache.org/org.apache.felix.configadmin.plugin.interpolation/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/FELIX"
        },
        {
          "type" : "mailing-list",
          "url" : "https://www.mail-archive.com/dev%40felix.apache.org/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=felix-dev.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.karaf.features/org.apache.karaf.features.extension@4.4.11?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.karaf.features",
      "name" : "org.apache.karaf.features.extension",
      "version" : "4.4.11",
      "description" : "This bundle is an extension bundle for the framework.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "75deaa94c8aef87c399fa14d32494623"
        },
        {
          "alg" : "SHA-1",
          "content" : "d00fd2d850b023d48f9c961fdcd4aacf3b803652"
        },
        {
          "alg" : "SHA-256",
          "content" : "4eb3bd8590405e160b2b505749ebf17aafa3198aaadc7beed12a3ecce562b2e8"
        },
        {
          "alg" : "SHA-512",
          "content" : "584a8b28a37f4b5d15b02b485082e63db966a11513b89d62324cca7e241da84f24cf6f9ec8018a9dece21f47108a6a2a0cf3411230fdf10c7bfd10ec7634d403"
        },
        {
          "alg" : "SHA-384",
          "content" : "cd83dd5312b57d3b4ad23160b0cb7c076aa126b6f1e73c070977efd51b088b16c61d98b5b82107c2c43ce01f7cf371f5"
        },
        {
          "alg" : "SHA3-384",
          "content" : "6f9732960d4566f990d3c77c04660e122049295b6e1e446df892cad385cc71f9028ae6bb18ef93751058a8ddb383e44d"
        },
        {
          "alg" : "SHA3-256",
          "content" : "fb7678af0d2b84b80e298fb44cee1e1a3a72eabff28fb7eb42554628abe1614e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "8f47706d0f4eebfc45ae09ecb461cfb1e406fd59ffd149332e5f5c535edc262d40dc055f613bebd381cce3784d9bd5b0143dd38ba495efbeab975f2ed516a45a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.karaf.features/org.apache.karaf.features.extension@4.4.11?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.apache.org/karaf/features/org.apache.karaf.features.extension/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/apache/karaf/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://www.mail-archive.com/dev%40karaf.apache.org/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=karaf.git;a=summary/features/org.apache.karaf.features.extension"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.karaf.features/org.apache.karaf.features.core@4.4.11?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.karaf.features",
      "name" : "org.apache.karaf.features.core",
      "version" : "4.4.11",
      "description" : "This bundle is the core implementation of the Karaf features support.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "c381316c9f8a3e4cf0670baf7852fc4b"
        },
        {
          "alg" : "SHA-1",
          "content" : "b451c9eff6ef00b1419b734ea8f378791375352d"
        },
        {
          "alg" : "SHA-256",
          "content" : "8a1a4c04250c42b33a9492faaa5fa2e5e8485abd03e5624b78eb11d135e8a383"
        },
        {
          "alg" : "SHA-512",
          "content" : "68d1aac737717bd1a353af1b17b4bd311983e36415735d0466a8e58a16b3b97a77e83fda04252615fcb58e19da31a1531773140317527a1299e4b464375932b8"
        },
        {
          "alg" : "SHA-384",
          "content" : "fcc38df5c82a8cb8b94bc7fb0be26b4a610aa3f3056fec8b955265cc56ab944ed8d53c2f3d2b05b08ceb8d6dcaae1605"
        },
        {
          "alg" : "SHA3-384",
          "content" : "3150dedb843897b3f27a472d01231749f0193b57a2d52ca63817897fec22636cb6fe5ee0cb75e2ea6108385f1e715f7b"
        },
        {
          "alg" : "SHA3-256",
          "content" : "34ca59d3010c8bf725c559f9606f21dc48ba44b1e9419b94f7ef49196a19c0fc"
        },
        {
          "alg" : "SHA3-512",
          "content" : "1b9636712df1d64a3592c5ccf733788218d1bafe13bb848e6cfe88bf828c77e3b014b0429ad6edb4a7942dfa579843a01d2bfe0ccd699ccba0e247f84bab2893"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.karaf.features/org.apache.karaf.features.core@4.4.11?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.apache.org/karaf/features/org.apache.karaf.features.core/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/apache/karaf/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://www.mail-archive.com/dev%40karaf.apache.org/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=karaf.git;a=summary/features/org.apache.karaf.features.core"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.ops4j.base/ops4j-base-util-property@1.5.1?type=jar",
      "publisher" : "OPS4J - Open Participation Software for Java",
      "group" : "org.ops4j.base",
      "name" : "ops4j-base-util-property",
      "version" : "1.5.1",
      "description" : "OPS4J Base - Utilities/Extensions related to sytem/configuration properties.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f02955a01370d5d9c06d3e33aa8a91a5"
        },
        {
          "alg" : "SHA-1",
          "content" : "43689baff554fed107ca4e8aac6ceec2a55182ed"
        },
        {
          "alg" : "SHA-256",
          "content" : "d6333bc4b4b3ed9555451e6b6b9f605c0d4309c35f95dcf549ccb81c1b10e1a1"
        },
        {
          "alg" : "SHA-512",
          "content" : "57a884355bd71458c79ddca206705a7b4abf376ac21db93dfebd72cf9009b52ea87aca1c80468379bcf5241d82d4b91f468898c7533c99228e954732de560916"
        },
        {
          "alg" : "SHA-384",
          "content" : "b525cc5755334f5b60da005db85f5295fa751f4a789cba83cbd6eddb24e44c1c7fa8a6f96c598f87cce8eb79618b75fd"
        },
        {
          "alg" : "SHA3-384",
          "content" : "3101ab89612fd93a825c72a9b01af8a61cab0d7b74984cde4bcef724d64620e800c9d10ab6a2d5733974c91e6f81f232"
        },
        {
          "alg" : "SHA3-256",
          "content" : "bcae24d73cb2200f88f3620ff4d29e203ec28a118d6c0439ccf3e77b3911401f"
        },
        {
          "alg" : "SHA3-512",
          "content" : "d09c04e6cf12a678cefd3cf99e480029cb2e07ba0bbece87cabb381602c9b9e8cd54f724471985cf921d04647436e41552cd6fad4d31be6b1a1f6b09c7b5df9b"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "ALv2",
            "url" : "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        }
      ],
      "purl" : "pkg:maven/org.ops4j.base/ops4j-base-util-property@1.5.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://team.ops4j.org/wiki/display/base/ops4j-base-util-property/"
        },
        {
          "type" : "build-system",
          "url" : "http://ci.ops4j.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.ops4j.org/jira/browse/BASE"
        },
        {
          "type" : "mailing-list",
          "url" : "https://groups.google.com/forum/?fromgroups=#!forum/ops4j"
        },
        {
          "type" : "vcs",
          "url" : "http://github.com/ops4j/org.ops4j.base/tree/master/ops4j-base-util-property"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.ops4j.base/ops4j-base-util-collections@1.5.1?type=jar",
      "publisher" : "OPS4J - Open Participation Software for Java",
      "group" : "org.ops4j.base",
      "name" : "ops4j-base-util-collections",
      "version" : "1.5.1",
      "description" : "OPS4J Base - Utilities/Extensions related to java collections.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "448faf0468f80eb7154a0f9e123b58a6"
        },
        {
          "alg" : "SHA-1",
          "content" : "a8180a5a26876e751b7d7491a07a428696bf4305"
        },
        {
          "alg" : "SHA-256",
          "content" : "799381fa71ffe40da5fc9195e1c9ee22fa9d5b77801928c49070fb5a7c116860"
        },
        {
          "alg" : "SHA-512",
          "content" : "567b2cafecbb2e8b6336e89212ef3ef183fc3e4e4ce4bfcfba8cd95e90641e9ef78b28aff6957614da252b74cefdc3288ce62549b1bee33acd31c52d9b567805"
        },
        {
          "alg" : "SHA-384",
          "content" : "48ec836d3fd1549c54ce6776e05bedc00f6933b4397bd475233b5ec1618fa63ea6299a69b5b37b4a340057f7ace1d076"
        },
        {
          "alg" : "SHA3-384",
          "content" : "a8f5e777ed6a1f356178cd471268e8978a9a5fac6976693986a7650aeb3cd0e60e62e886d7a523068c35029d4a83b826"
        },
        {
          "alg" : "SHA3-256",
          "content" : "9bc663d2085696139cb7ebc6cc09f29d998fbd11e84b703377fcf7bc35465ce3"
        },
        {
          "alg" : "SHA3-512",
          "content" : "59eb6b50d206fd8f26ac247e9fb73235a494d52657b37b8fd2dee7cf9d62642d7151e73fe0a824bf3ba0487dbc2ec8e35eab80df812f33672e4698f02177dc56"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "ALv2",
            "url" : "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        }
      ],
      "purl" : "pkg:maven/org.ops4j.base/ops4j-base-util-collections@1.5.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://team.ops4j.org/wiki/display/base/ops4j-base-util-collections/"
        },
        {
          "type" : "build-system",
          "url" : "http://ci.ops4j.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.ops4j.org/jira/browse/BASE"
        },
        {
          "type" : "mailing-list",
          "url" : "https://groups.google.com/forum/?fromgroups=#!forum/ops4j"
        },
        {
          "type" : "vcs",
          "url" : "http://github.com/ops4j/org.ops4j.base/tree/master/ops4j-base-util-collections"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.ops4j.base/ops4j-base-lang@1.5.1?type=jar",
      "publisher" : "OPS4J - Open Participation Software for Java",
      "group" : "org.ops4j.base",
      "name" : "ops4j-base-lang",
      "version" : "1.5.1",
      "description" : "OPS4J Base - Utilities/Extensions related to java.lang.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "3db9cc6750a4187a60239faa6a82697f"
        },
        {
          "alg" : "SHA-1",
          "content" : "e9b72250e97d403fd08e5deb5936680afe7524a7"
        },
        {
          "alg" : "SHA-256",
          "content" : "095f44a513ebf63e8b3c587d2c8e73ec075fcb9e4b6cde736e641511ac63bd88"
        },
        {
          "alg" : "SHA-512",
          "content" : "5c12e3a0215fe4a19de4246e2656a827204eeaacb27e2edfea243abfddefcbfe97aeaab5d53089d7ecc7b260c65123c97003d070e4ac4aafe35ba16b36c226a0"
        },
        {
          "alg" : "SHA-384",
          "content" : "4d32cea9e3e52c69a0f5797081ce0efec0a95a80c59c466eeacce2a900b399b5e35c34edefb15d0a1cd04e677cc969c2"
        },
        {
          "alg" : "SHA3-384",
          "content" : "17eda9ed2773bf9517e5a5e7b3ef0290ff9becd32b47909c4016391d2a64a4ad96d4925d84c7283658c3c35808cc6e68"
        },
        {
          "alg" : "SHA3-256",
          "content" : "598972320d583fe1f08227a2d7cdf943e5a0e64939163dedd0d52f75f9acfc75"
        },
        {
          "alg" : "SHA3-512",
          "content" : "7e98c685accacd0465c7404b2cc8a1a83bec9e4825454931e4fd2ee2f6eb644050c5943d0dc45a5a44ee037a422aec87d3f857aaabffa4a45ac87572624ed73a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "ALv2",
            "url" : "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        }
      ],
      "purl" : "pkg:maven/org.ops4j.base/ops4j-base-lang@1.5.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://team.ops4j.org/wiki/display/base/ops4j-base-lang/"
        },
        {
          "type" : "build-system",
          "url" : "http://ci.ops4j.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.ops4j.org/jira/browse/BASE"
        },
        {
          "type" : "mailing-list",
          "url" : "https://groups.google.com/forum/?fromgroups=#!forum/ops4j"
        },
        {
          "type" : "vcs",
          "url" : "http://github.com/ops4j/org.ops4j.base/tree/master/ops4j-base-lang"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.ops4j.pax.swissbox/pax-swissbox-property@1.9.0?type=jar",
      "publisher" : "OPS4J - Open Participation Software for Java",
      "group" : "org.ops4j.pax.swissbox",
      "name" : "pax-swissbox-property",
      "version" : "1.9.0",
      "description" : "OPS4J Pax Swissbox - Utilities related to properties in OSGi.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "7ba8dd57e47554b01724f5aaa4b7e5f5"
        },
        {
          "alg" : "SHA-1",
          "content" : "93e533718cb427a9bb3849c70cf356c5fc89a910"
        },
        {
          "alg" : "SHA-256",
          "content" : "58ed3aa03e6c684b3d9f38312e805a55a2b411b2bb1bedc9006e895964528246"
        },
        {
          "alg" : "SHA-512",
          "content" : "e157b5b5dfd169e8811d1427be442fa24d3a93275a8186373b3636026729d7690ba9677657039c4ab289a96b9f4e595b7bed1206537a61b455401ba674cd3ea8"
        },
        {
          "alg" : "SHA-384",
          "content" : "9a11c28673c26343f6c922a7e21972ca3a54fbb3b979135989f6683b79c12846bc3b9cfe6de9ac54d66162ed1a8a05bd"
        },
        {
          "alg" : "SHA3-384",
          "content" : "2dc2b65c2c7e47c85a52eea78b5286aab12d5afa2e56d80c4444680c4f65885b2f027d2e02283f5894417fe2dcffafa4"
        },
        {
          "alg" : "SHA3-256",
          "content" : "d4db530c905ad90f9ac62522672832fa01c3cf3cadeb033032b9f487ec3c96c4"
        },
        {
          "alg" : "SHA3-512",
          "content" : "cd9d74ba4b89d521c6f5611a780cb78d8cd11f976afbfb94f7be0bef54cb6a6c79968133d452282998528dcfdadc2c6e4728ed1a3f8741a081d2b7f503df923c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "ALv2",
            "url" : "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        }
      ],
      "purl" : "pkg:maven/org.ops4j.pax.swissbox/pax-swissbox-property@1.9.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.ops4j.org/swissbox/pax-swissbox-property"
        },
        {
          "type" : "build-system",
          "url" : "http://ci.ops4j.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/ops4j/org.ops4j.pax.swissbox/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://groups.google.com/forum/?fromgroups=#!forum/ops4j"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/ops4j/org.ops4j.pax.swissbox/pax-swissbox-property"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.21.2?type=jar",
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.jackson.core",
      "name" : "jackson-databind",
      "version" : "2.21.2",
      "description" : "General data-binding functionality for Jackson: works on core streaming API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "add2fbe739574bfd1877c2cca25f46d1"
        },
        {
          "alg" : "SHA-1",
          "content" : "71ab8ff75b4fd74afdee0004173fdd15de1d6a28"
        },
        {
          "alg" : "SHA-256",
          "content" : "8c982f01f148d805f0aaac2339011244757e0df7c6ff8951f2fa3f433b8ed849"
        },
        {
          "alg" : "SHA-512",
          "content" : "1a47b012447bc8c3d0bc603b95fce1640d7fe7ead08bc33c106c0de811f061a1eda871863e4e1411e9c0c9c716d47c69960f7e492f54e8610f3e40c99f5c3962"
        },
        {
          "alg" : "SHA-384",
          "content" : "933e7dd454a933ff1fa451ff63d870708b9ca8cdf68b849594a08d9859468cc19b15836cef741f6c9ffb8cde31cc5c76"
        },
        {
          "alg" : "SHA3-384",
          "content" : "f2ef8662730bd798307c483f18f1bd54fc4fd5c9cacf4eba0715222cb4a3e46ea60dde95994764604f0621a05a1ce0c1"
        },
        {
          "alg" : "SHA3-256",
          "content" : "0bcf55950a1f2eb63569142af0d863b2496791cf9da864ff9b8b73796250c5f0"
        },
        {
          "alg" : "SHA3-512",
          "content" : "58132245b550d327faf1c8a2a0bccc85188a2abbab806ea646ce3b83340a750df534ed51db3de2a2fa167e4612371ea1ab84ab8d1badab5509f44d9c73958396"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.21.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/FasterXML/jackson"
        },
        {
          "type" : "distribution",
          "url" : "https://central.sonatype.com/api/v1/publisher"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/FasterXML/jackson-databind/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/FasterXML/jackson-databind"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.21?type=jar",
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.jackson.core",
      "name" : "jackson-annotations",
      "version" : "2.21",
      "description" : "Core annotations used for value types, used by Jackson data binding package.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e0d0c3e7300954f73e43c67d933aaea4"
        },
        {
          "alg" : "SHA-1",
          "content" : "b1bc1868bf02dc0bd6c7836257a036a331005309"
        },
        {
          "alg" : "SHA-256",
          "content" : "53ca085f4a150f703f49e1aabd935bd03b43e1ea3d55d135438292af22cef56b"
        },
        {
          "alg" : "SHA-512",
          "content" : "d832a99867acc2d5afb2596da760c50e6a6b54c1bbc8e6c4186f267a16e1d55c7a916ef8b034ad6b277c41e3342b91dcdc2e3dcea8bdccfe89e7c147894591be"
        },
        {
          "alg" : "SHA-384",
          "content" : "30b15d68f8da6f6c26aa9f6c95d09152b6c1a8092cd976cf600d63d1751509a73865f937e0ad97d8d55bf20f6a749b44"
        },
        {
          "alg" : "SHA3-384",
          "content" : "5205b51f6ed689cf31b58b98a61ca9e17a439c15d669dcb408ec4d430e77ac9ac57d39d5ca1f9973e8d184f6dd57ec4f"
        },
        {
          "alg" : "SHA3-256",
          "content" : "d6782d188a72b2bb96e4b595343e783012b3f98c30f7b9950244c21739334509"
        },
        {
          "alg" : "SHA3-512",
          "content" : "b648f1e9ffe818227d53fbde409e61858ac22d3f78705eaf08065587ed512c9b33b0f5e2222356bfb33fb2973bb5a3184e31d2a7099f8fc8d2fd23eb4612a4bf"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.21?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/FasterXML/jackson"
        },
        {
          "type" : "distribution",
          "url" : "https://central.sonatype.com/api/v1/publisher"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/FasterXML/jackson-annotations/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/FasterXML/jackson-annotations"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.21.2?type=jar",
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.jackson.core",
      "name" : "jackson-core",
      "version" : "2.21.2",
      "description" : "Core Jackson processing abstractions (aka Streaming API), implementation for JSON",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b62c1031b5f38fc58158fc0c559980cb"
        },
        {
          "alg" : "SHA-1",
          "content" : "7d11eac823392f28d8ee7bda77eaadfccbab83e5"
        },
        {
          "alg" : "SHA-256",
          "content" : "12e8655b100267b44d0f14d01b1f5082a5105e616174dc4307be1a761e92407b"
        },
        {
          "alg" : "SHA-512",
          "content" : "31a16a40b2e1a1a9467a66c93884c034527fb5af641a79bd6a563d4c3aaa0cfc8d8250f930d13c7fd70c18db579940ec54a49538c5a2e0fb9780c575808000ff"
        },
        {
          "alg" : "SHA-384",
          "content" : "cff72535be10b86fac89af4fd8eb0a7d89b0385712bff36cca6b94ad014acd9c2480bc3bc87b25b8621ccdf17cf8ae1f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "1a7cd7206198350f0810989bc1448bb262099b14f3fc746d70651a3cf20a35948cc545326c07852dec25871605c862a3"
        },
        {
          "alg" : "SHA3-256",
          "content" : "7550f1f3812a13530bcb61db040d8b57415447395a62503dad6664e7dc62acc7"
        },
        {
          "alg" : "SHA3-512",
          "content" : "94e8097f45134c4e30e84cba9a4bd10dcec3e69ac3a9e289278be8f4005befe6efe33dec7bf4c349c3cd65928c8a1aaa0ffdfa689e60ca240393634eb384ed6e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.21.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/FasterXML/jackson-core"
        },
        {
          "type" : "distribution",
          "url" : "https://central.sonatype.com/api/v1/publisher"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/FasterXML/jackson-core/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/FasterXML/jackson-core"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/javax.activation/activation@1.1.1?type=jar",
      "group" : "javax.activation",
      "name" : "activation",
      "version" : "1.1.1",
      "description" : "The JavaBeans(TM) Activation Framework is used by the JavaMail(TM) API to manage MIME data",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "46a37512971d8eca81c3fcf245bf07d2"
        },
        {
          "alg" : "SHA-1",
          "content" : "485de3a253e23f645037828c07f1d7f1af40763a"
        },
        {
          "alg" : "SHA-256",
          "content" : "ae475120e9fcd99b4b00b38329bd61cdc5eb754eee03fe66c01f50e137724f99"
        },
        {
          "alg" : "SHA-512",
          "content" : "49119b0cc3af02700685a55c6f15e6d40643f81640e642b9ea39a59e18d542f8837d30b43b5be006ce1a98c8ec9729bb2165c0442978168f64caa2fc6e3cb93d"
        },
        {
          "alg" : "SHA-384",
          "content" : "021f29ab14a1db9b27e31778fd5b6ead2ed46fef534cfab6b34b1b839547c78fc39cfb1568f0b2206bb46a98c4b9e1d4"
        },
        {
          "alg" : "SHA3-384",
          "content" : "9342dea5301c73ed32ec03efaea0f224336a7399674532130a025a85441b0c9e2ae4f6987039ccd337e719528279af23"
        },
        {
          "alg" : "SHA3-256",
          "content" : "c51116dd0dc0668087dcaed49fc497c23269c9718b3fc66bd191eeabf1ad3155"
        },
        {
          "alg" : "SHA3-512",
          "content" : "7682c02949ff5057100882b2e802fc7afd5df14b77ddadd1dafe3f3bcd55f2e382df377bd3dfc3fa43816496fb441ec02570245e8d762bc975ccc53bc0ae0306"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "CDDL-1.0"
          }
        }
      ],
      "purl" : "pkg:maven/javax.activation/activation@1.1.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://java.sun.com/javase/technologies/desktop/javabeans/jaf/index.jsp"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.karaf.features/framework@4.4.11?classifier=features&type=xml",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.karaf.features",
      "name" : "framework",
      "version" : "4.4.11",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "fa4ddaad0bf396d6869ce157769a9520"
        },
        {
          "alg" : "SHA-1",
          "content" : "eddff694b3b984424c694f27b1937386bc62d82c"
        },
        {
          "alg" : "SHA-256",
          "content" : "e02565a7ba81b9c6ad027df6a253ad7fd2df86c5093b2e0d920cc21a89d84d3d"
        },
        {
          "alg" : "SHA-512",
          "content" : "e1093584f17d61e2cda20f12f88c71af149e8933ad81f7fdf77ab1c93ec07df4748548afd4a4b6569c230b037ccafa7e24b9df0c08577bcc32c6a58993c462f8"
        },
        {
          "alg" : "SHA-384",
          "content" : "7aea09372e4eab83ebfc3f39656649615fb47a4ab0e0366f044c426c62195cceff1acede261f207f4fc9d4222bbca482"
        },
        {
          "alg" : "SHA3-384",
          "content" : "71530cc78157c93eb8925dc62af2886f974e10aa24286cab53421e6948f10e06d46e47321decbdf0a53a580f822c1b2b"
        },
        {
          "alg" : "SHA3-256",
          "content" : "7a6074861208c14e497d7e0a454cb33fd94a07147a96729d0c3527f26082cd3e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "fb3e420eb70169ef22d5bed23dc85322415460c22891d3ab9c9e278345b97775c1527b09b01258d0f6b625638d790279ee3701564eed917b84340eabfa8eaeae"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.karaf.features/framework@4.4.11?classifier=features&type=xml",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.apache.org/karaf/assemblies/features/framework/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/apache/karaf/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://www.mail-archive.com/dev%40karaf.apache.org/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=karaf.git;a=summary/assemblies/features/framework"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.karaf.features/standard@4.4.11?classifier=features&type=xml",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.karaf.features",
      "name" : "standard",
      "version" : "4.4.11",
      "description" : "Standard providing core Karaf features",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "561fb39d2f86396440f4513d16f50b85"
        },
        {
          "alg" : "SHA-1",
          "content" : "a7aff6802cec35bad22b132244d5ebcf30982971"
        },
        {
          "alg" : "SHA-256",
          "content" : "165d37f568d66865a8abc79c69ceed1d0a921ca445cd4e71d1b243ddeb77abe9"
        },
        {
          "alg" : "SHA-512",
          "content" : "143130c40a7f165fa360221766fc18e79dfcb1d313bf4d60987feef41b0c71f0c8fde1d4e97033cbb1c92bf589f12e2b39059fbdfe96a1d654771508b50cb175"
        },
        {
          "alg" : "SHA-384",
          "content" : "c3271fc03883acb2777353f5b8b1706fda7900585e3db3a0ffe432e68edbe99be9a3dada74752b946561ed5be7d7da38"
        },
        {
          "alg" : "SHA3-384",
          "content" : "f8de547549deb8e3c8ec026ffcd7d6d805dd6bec6abd470f98287630975bcf6ca252cb4076be8a5f15fe432af71ed90e"
        },
        {
          "alg" : "SHA3-256",
          "content" : "1ee44984ba4b31a648cd0aa8f9745a11936fddf2b65e7cc6563b64b41e717865"
        },
        {
          "alg" : "SHA3-512",
          "content" : "5de8fdbdd9c527ae20040b50b6b964e470b9874d1fcd6bc3f6559f689a8cf6d000eeecb32bc6036f2b5e535b4a98976b9a575e20f7aa7418e4bfcae004ce1025"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.karaf.features/standard@4.4.11?classifier=features&type=xml",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.apache.org/karaf/assemblies/features/standard/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/apache/karaf/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://www.mail-archive.com/dev%40karaf.apache.org/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=karaf.git;a=summary/assemblies/features/standard"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.karaf.features/enterprise@4.4.11?classifier=features&type=xml",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.karaf.features",
      "name" : "enterprise",
      "version" : "4.4.11",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "571a98b9494615b85913a4a3ea87801d"
        },
        {
          "alg" : "SHA-1",
          "content" : "355207a3921e4cf7be1a759aeed866ed00663d59"
        },
        {
          "alg" : "SHA-256",
          "content" : "eadcf0251d30caec6830518de1476974124f3670f22a9f967b098f03fee36397"
        },
        {
          "alg" : "SHA-512",
          "content" : "417ace3fdff77658b43e42b7b007623ba6ce84e60878b571d5c08fa6cb008b1bbcdc2e630656d4738576aef79955f1a4d6c59106097462582c4e3ed988c1fe54"
        },
        {
          "alg" : "SHA-384",
          "content" : "1573d137f9ced9d0a4e623d6eb45a7457b8f31167c296273f08d09d796ae25c7ea7253c1e1469b824839564fb7ddc5ae"
        },
        {
          "alg" : "SHA3-384",
          "content" : "f493cebdc39f47ffb25acd12bb0246a1d48fc9f5343072d1be4d1741e8dc203b184285152bc7bcaf8f052496515d55e5"
        },
        {
          "alg" : "SHA3-256",
          "content" : "a8174f6c5a73dc80e0a2ae88b843e3d40328ce38bfff62b835b70a361ec9541f"
        },
        {
          "alg" : "SHA3-512",
          "content" : "677506fbf897de05f011497e4110ef201e5bf841076e1224d62e680c75b1ce996f18df1b88c9e4239ab7785eb989c493152f84cc47baae759e5112013fb40aa3"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.karaf.features/enterprise@4.4.11?classifier=features&type=xml",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.apache.org/karaf/assemblies/features/enterprise/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/apache/karaf/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://www.mail-archive.com/dev%40karaf.apache.org/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=karaf.git;a=summary/assemblies/features/enterprise"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.cxf.karaf/apache-cxf@3.6.10?classifier=features&type=xml",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.cxf.karaf",
      "name" : "apache-cxf",
      "version" : "3.6.10",
      "description" : "Apache CXF Karaf Features",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1b55cecd9409114c4ab9bd9edb9de737"
        },
        {
          "alg" : "SHA-1",
          "content" : "8bbd253c244fbe6782dcf66cb38e5149eb726048"
        },
        {
          "alg" : "SHA-256",
          "content" : "74d8f9f622a73da5fc97fc825f99d56d430bd069e6e483a7843aa2a1378fbd69"
        },
        {
          "alg" : "SHA-512",
          "content" : "2a11556f0ff8ee8f469b6b0793afd3df9e7edb35da66762a7a008e56b2450ba7ff16e73c89f7ad5242a3bcd9cebd175f0bb7ec3d5b19371d0e38bb893f47ce54"
        },
        {
          "alg" : "SHA-384",
          "content" : "942bde732f0c768fc104a7ecf7a77bed850fd511f8c940541caf5c64991fb89dd2c729562ee6d1572b5356a625b85063"
        },
        {
          "alg" : "SHA3-384",
          "content" : "42082aa71a4125a304ce684a1066f6957fd9487bc36a5c799efb4a14b0b338972772e0511241baa552837a3928f7843f"
        },
        {
          "alg" : "SHA3-256",
          "content" : "61a58caf1f568b1e2ec3ffa8e3cd662170e809f1ef59ded32bd7699f93cd54e5"
        },
        {
          "alg" : "SHA3-512",
          "content" : "9d7fe6dfcf949538247582bba5c99cf8b5cc60a7f88b29a36f915077940244bdd3142b8ddedbf8c0a7324dca15ee92bed350177692a268e7ba15d27aeee6488a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.cxf.karaf/apache-cxf@3.6.10?classifier=features&type=xml",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://cxf.apache.org/karaf-parent/apache-cxf"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/view/A-D/view/CXF/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CXF"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/cxf-users"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/karaf-parent/apache-cxf"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.cxf.karaf/cxf-karaf-commands@3.6.10?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.cxf.karaf",
      "name" : "cxf-karaf-commands",
      "version" : "3.6.10",
      "description" : "Apache CXF Karaf Commands",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a5a924be2a1ac6d3e706b108e8b425b3"
        },
        {
          "alg" : "SHA-1",
          "content" : "81766a7c9e9a7082e376db7ac75299fba9df8246"
        },
        {
          "alg" : "SHA-256",
          "content" : "c52c26abeb1e429b8e120262b4649de3f06a138c0e2ca43c091e79fc3229d7ea"
        },
        {
          "alg" : "SHA-512",
          "content" : "8e7a11e02c387cee5598630b3d3df0e1099d0e88faa5687541828e24c4bd7dbe87898b4531b7b7090c4abec2fb4baa86a6f54e983774df216a57fc006d3654d9"
        },
        {
          "alg" : "SHA-384",
          "content" : "19a5ce6ad9c9e93f4787c03521859ec999076f47ce37a27347b122891e8de4fb92ba021d3b548cffb1196bbdb4052cf3"
        },
        {
          "alg" : "SHA3-384",
          "content" : "30436bac336da3ac4e9113598a93a2b59f4c6aa0adfcb0ed4770e90eb2c4ed035da70ddf69dcb3e70a37bf47787e8992"
        },
        {
          "alg" : "SHA3-256",
          "content" : "50558fc79934855611c1286408504c318993ae23fc045abc626f433155d93b0a"
        },
        {
          "alg" : "SHA3-512",
          "content" : "e2cdc6ca858962b1957932a646325663a4c84d0d67c952e5e5f3baf97e79ecc4889be0f3f51ad493b4091b8c7b7af78aa1e0d843f03ef1d0111d1e15076dd5a9"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.cxf.karaf/cxf-karaf-commands@3.6.10?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://cxf.apache.org/karaf-parent/cxf-karaf-commands"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/view/A-D/view/CXF/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CXF"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/cxf-users"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/karaf-parent/cxf-karaf-commands"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.cxf/cxf-core@3.6.10?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.cxf",
      "name" : "cxf-core",
      "version" : "3.6.10",
      "description" : "Apache CXF Core",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "daa4c8c19da072513ad30c65eb58ebd5"
        },
        {
          "alg" : "SHA-1",
          "content" : "20be4997135d1440e75f2f0bbde4e12c2546a81e"
        },
        {
          "alg" : "SHA-256",
          "content" : "fcebc0c2ecc907be9c9f7ccd10bfdf9006a579bfaf43efae3b98e0334828a0c9"
        },
        {
          "alg" : "SHA-512",
          "content" : "605893c1703255711e015ed853e1ba1c3987108f46c582b7f5676200a87f41fad7c66709e9bc776cf521bc26aeaefe302128e0ee0640e120f92041854af24774"
        },
        {
          "alg" : "SHA-384",
          "content" : "1edf5b0f2b03535b77b3a025ad223199c870bc172400c4ebc2f73366513208e48c029504eb31d9da82de38258410d677"
        },
        {
          "alg" : "SHA3-384",
          "content" : "a6fbe003d0aba4e963b9360dc912e635249b3f1887a3ad2183caba3251db21bab2b88e1605a203b8115d591e4a709cad"
        },
        {
          "alg" : "SHA3-256",
          "content" : "15d6df922bbf1150ec2e5a59f579f919ac49df3500b37ba4252bffa6cab3b9ea"
        },
        {
          "alg" : "SHA3-512",
          "content" : "1798c374c3485d2238b3b9e148c207bce65fbabea2a6a7d5775b0f208f4ab5592a962956252a760a86de61658cbdd9f6f745ff5354b3099340a490d7da40f832"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.cxf/cxf-core@3.6.10?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://cxf.apache.org"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/view/A-D/view/CXF/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CXF"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/cxf-users"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-core"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/jakarta.annotation/jakarta.annotation-api@1.3.5?type=jar",
      "publisher" : "Eclipse Foundation",
      "group" : "jakarta.annotation",
      "name" : "jakarta.annotation-api",
      "version" : "1.3.5",
      "description" : "Jakarta Annotations API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "8b165cf58df5f8c2a222f637c0a07c97"
        },
        {
          "alg" : "SHA-1",
          "content" : "59eb84ee0d616332ff44aba065f3888cf002cd2d"
        },
        {
          "alg" : "SHA-256",
          "content" : "85fb03fc054cdf4efca8efd9b6712bbb418e1ab98241c4539c8585bbc23e1b8a"
        },
        {
          "alg" : "SHA-512",
          "content" : "d1acff146c0f9ea923a9325ad4c22ba2052ec474341ab8392abab7e8abd3ca010db2400ff9b5849fc4f1fa5c0a18830eb104da07a13bd26b4f0a43d167935878"
        },
        {
          "alg" : "SHA-384",
          "content" : "004a4bde333c0575f72df1cb9cf95ee0c6c7f738a6f0f723a5ec545aaa1664abeb82f01627708a1377e3136754fb7859"
        },
        {
          "alg" : "SHA3-384",
          "content" : "abcc5b1fbad59b3e9b6d2d6195ec11d6254f689116c534a964724b61f815cca60ba3a2c1489933403f3f78dc54fd20a6"
        },
        {
          "alg" : "SHA3-256",
          "content" : "3d3ef16365e7a0357d82f874fa26b2b0a146cf7bf98a351c65ef1586444fa009"
        },
        {
          "alg" : "SHA3-512",
          "content" : "88625a8811be514851209291344df32478b527bc7838ddee58752269bf2457ae8f4e6b6a0d0b5c18522e287ba6df1def0cb19dee2b85e01ee21f0b48ac2630d3"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl" : "pkg:maven/jakarta.annotation/jakarta.annotation-api@1.3.5?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://projects.eclipse.org/projects/ee4j.ca"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/common-annotations-api/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/ca-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/common-annotations-api"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.woodstox/woodstox-core@6.6.2?type=jar",
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.woodstox",
      "name" : "woodstox-core",
      "version" : "6.6.2",
      "description" : "Woodstox is a high-performance XML processor that implements Stax (JSR-173), SAX2 and Stax2 APIs",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f322ee7db6505b01c8bfe5f54c5670df"
        },
        {
          "alg" : "SHA-1",
          "content" : "0bfe905f19ce0e60bff5b7adcbded2681a092ac3"
        },
        {
          "alg" : "SHA-256",
          "content" : "8d097391bb3f3009fb37a565222b7ad3ffd49c49565a478ac0b2445448f55896"
        },
        {
          "alg" : "SHA-512",
          "content" : "00a18366306de76827a0d3ff83236054ed7ecbf4be2092fd8ac29fb63bcca9d86a6ffb5f41027029a869a4d47f978acf44118397e0fc21482cea3182eb1e4703"
        },
        {
          "alg" : "SHA-384",
          "content" : "80c2d8aefd00a9dcc4d9ca0ef4d259b3047f5c4bbca8be36a3689237b352ee1d8157a8cd2f5e60c5f3586b5219d9a6f9"
        },
        {
          "alg" : "SHA3-384",
          "content" : "9c88ff480e97e57e55f7f6542d9d75cd8f75cd8e840cde47ce7b3040fc9167786c54c163a23b6c5564f8f1e08d261a40"
        },
        {
          "alg" : "SHA3-256",
          "content" : "9cb25d5c1fa642757a01b7c6bcaaf7fd4722469c309f90d0d735d79b15360e9b"
        },
        {
          "alg" : "SHA3-512",
          "content" : "f9ff7ae6b1e9e3cf30fbf236222db5ac715b85334a321bfae352360f235d3b656d3bdacc855c41f8ae4380526bec1d10fcbe679447849bf7dc513815444035cf"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.woodstox/woodstox-core@6.6.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/FasterXML/woodstox"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/FasterXML/woodstox/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/FasterXML/woodstox"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.2?type=jar",
      "publisher" : "fasterxml.com",
      "group" : "org.codehaus.woodstox",
      "name" : "stax2-api",
      "version" : "4.2.2",
      "description" : "Stax2 API is an extension to basic Stax 1.0 API that adds significant new functionality, such as full-featured bi-direction validation interface and high-performance Typed Access API.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6949cace015c0f408f0b846e3735d301"
        },
        {
          "alg" : "SHA-1",
          "content" : "b0d746cadea928e5264f2ea294ea9a1bf815bbde"
        },
        {
          "alg" : "SHA-256",
          "content" : "a61c48d553efad78bc01fffc4ac528bebbae64cbaec170b2a5e39cf61eb51abe"
        },
        {
          "alg" : "SHA-512",
          "content" : "1c0587ecb4c5a659ce2ae1fe36ffc12636a8ecba549a29f2cf91cb4d1d36a335c05f35776f480488d40d894230389f76aeeb363887026c6ef5c565995c17b7c6"
        },
        {
          "alg" : "SHA-384",
          "content" : "3b617db8307a081df858a4110f5b8fec51c06355762506cbc4be5557fb06959f0499f7e672103d46f71c66bae472a7bd"
        },
        {
          "alg" : "SHA3-384",
          "content" : "22a3150713f7072962e26c286a1ef97d849b10d7f1251c56ae34252f247127b56dd189daa758c64776b4196ee0060517"
        },
        {
          "alg" : "SHA3-256",
          "content" : "174868c81672068b42ccde35310d4dad60f457b795101e99588c28b0eebdefc2"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c88de5a2137e3b63b632ef24799a677c998b76e736407f1e8c6af85d1b6a94c76bc20d26e6cac847d8383ab6760f1b5c2ae7574fba21e1e6a96de7cdd38f0e39"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-2-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://github.com/FasterXML/stax2-api"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/FasterXML/stax2-api/issues"
        },
        {
          "type" : "vcs",
          "url" : "http://github.com/FasterXML/stax2-api"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.ws.xmlschema/xmlschema-core@2.3.2?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.ws.xmlschema",
      "name" : "xmlschema-core",
      "version" : "2.3.2",
      "description" : "Commons XMLSchema is a light weight schema object model that can be used to manipulate or generate XML schema.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "67a17743abad9de9b18ee4b491ac976e"
        },
        {
          "alg" : "SHA-1",
          "content" : "34aaf48b18ae47015001237e93b5f3f05f1ece55"
        },
        {
          "alg" : "SHA-256",
          "content" : "ef6ee27d7bd5fff4950c6737b68263ed63dd088f8ed5f04245be49a5f6a06590"
        },
        {
          "alg" : "SHA-512",
          "content" : "77b020063365eb4df1c9fd6628031d5de7261288921b016302736deffbe5f0427af8c22dfeb5e3efd3f792c1790bba1c38e61dc8be43ccaff3051f010cdb8327"
        },
        {
          "alg" : "SHA-384",
          "content" : "8cc8d00ef7cd5b76d191bfc408d0d03ce60c9346ff5a119cab605568e792cb9fc2fc8d24fec0fccd67f0b1c5377bcc07"
        },
        {
          "alg" : "SHA3-384",
          "content" : "21462cad6440441043ed928be70876ed7f42d6f8d1087acec746b31e7a8c6b9c5c5505b58e27107ce9228798feb33b21"
        },
        {
          "alg" : "SHA3-256",
          "content" : "2a25e8760f087f0e1bcd8dccaa9992174a6b98325ffed282dfa68395d2eac41d"
        },
        {
          "alg" : "SHA3-512",
          "content" : "55f0873589b3893f25f3cfdfdc61e2f83db1249ef615a62b4a1e69c2b86f18657a1f50929f39016d24293f1f1caba204d0864b1ee285e01fce4192becddf3fdb"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.ws.xmlschema/xmlschema-core@2.3.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://ws.apache.org/commons/xmlschema20/xmlschema-core/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/XMLSCHEMA"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/ws-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=ws-xmlschema.git;a=summary/xmlschema-core"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.karaf.shell/org.apache.karaf.shell.core@4.4.9?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.karaf.shell",
      "name" : "org.apache.karaf.shell.core",
      "version" : "4.4.9",
      "description" : "This bundle provides OSGi shell integration and console support.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "20fb1a6db2df09d05b2ccca4a269ca6f"
        },
        {
          "alg" : "SHA-1",
          "content" : "3080ffb9914f6552d455cdcfe514010655ca2e82"
        },
        {
          "alg" : "SHA-256",
          "content" : "1253d2b1561fe93bbdeb580c7771a23531ec0c340869d8cace472a392ae73511"
        },
        {
          "alg" : "SHA-512",
          "content" : "6f37b920823fdf3fc244ec8cb9d94d5cf03944e03d9973f732e6ac45814336f0bac224da4fb8d1d822e7b9cdfcacdef7394a1458c51e885dc09504c5be93a4f2"
        },
        {
          "alg" : "SHA-384",
          "content" : "55ee66989b55a6cba71ac69bf0919b929bc231fc38f50cf0ef680f7778587f17f214dbd2b6896ba88a91d7d7ad23fcaa"
        },
        {
          "alg" : "SHA3-384",
          "content" : "b96c1023711a28d3e9baf159508ae16be2fed0648ec40f8bf164995ae107826dccafde31c22a559ab6840f2bd4f8ebde"
        },
        {
          "alg" : "SHA3-256",
          "content" : "f1aa02312b129f86ed840d9d8b274e2898345efd110892340cd6053c74073972"
        },
        {
          "alg" : "SHA3-512",
          "content" : "a5d1bb3a2b9145657bbf0ae4611055eb7fc1bd7d1879d8c9ca0d456eb73fab6f707abeee108fdbc9b18b7aee1790ec3f6c3cbedbf74adb722a6d2904b7fb2752"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.karaf.shell/org.apache.karaf.shell.core@4.4.9?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.apache.org/karaf/shell/org.apache.karaf.shell.core/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/apache/karaf/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://www.mail-archive.com/dev%40karaf.apache.org/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=karaf.git;a=summary/shell/org.apache.karaf.shell.core"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.karaf.features/specs@4.4.11?classifier=features&type=xml",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.karaf.features",
      "name" : "specs",
      "version" : "4.4.11",
      "description" : "Specs Support",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e046486445c8f604cc3becdfaf328171"
        },
        {
          "alg" : "SHA-1",
          "content" : "409be0a4035e02a4da6fc304374afafcb9a9c0b4"
        },
        {
          "alg" : "SHA-256",
          "content" : "dfa6daefeb636f3101d720334f88d07ae34164630046c064c92eb86aa0cdd956"
        },
        {
          "alg" : "SHA-512",
          "content" : "e263462512874f457e0d2ede1e2373bcdf936855b2ffa148abba5ce4ec30060fa2581b9bbff9e8bd68c73a250ec9bdfd6a2ee422e1b90d7fae468d43529370db"
        },
        {
          "alg" : "SHA-384",
          "content" : "8a6226f023cbb426f91569f1dcddfb6323a1715fd776ef4e001794c688612235a0f9627dd7cc69d655feda31abce6792"
        },
        {
          "alg" : "SHA3-384",
          "content" : "a3d9e6e1da00c0a0be84cb19a863eb7a82feef11b524cbf579cd685309c253b6d93c92d6bcd8b8cc136aba6dc2b747e6"
        },
        {
          "alg" : "SHA3-256",
          "content" : "2a042c4c1050437b6f43109230fe82244aa3e19ddb72e8a255ffe8a496b091c5"
        },
        {
          "alg" : "SHA3-512",
          "content" : "f8870db1f3563b80aa70b85b3f44bc4e7b5a16fa5f6fdbf6344c6de2b51d55685ee402632f9578a8b3b01534ae0b3f6bb5226793676c8ff71872df306fc661f4"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.karaf.features/specs@4.4.11?classifier=features&type=xml",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.apache.org/karaf/assemblies/features/specs/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/apache/karaf/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://www.mail-archive.com/dev%40karaf.apache.org/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=karaf.git;a=summary/assemblies/features/specs"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.karaf.decanter/apache-karaf-decanter@2.12.0?classifier=features&type=xml",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.karaf.decanter",
      "name" : "apache-karaf-decanter",
      "version" : "2.12.0",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a3423739be7bb537703e4d745e91fbc7"
        },
        {
          "alg" : "SHA-1",
          "content" : "2dfd0e068f401e6e1f1198e67d8e1c6f7a253718"
        },
        {
          "alg" : "SHA-256",
          "content" : "10cfdce9b006254f74f567f946a26a3e41ba536eb87c3a49a8711f0b0a1b1f8f"
        },
        {
          "alg" : "SHA-512",
          "content" : "b85cd2ae1763d2736ddbc6db1c398dbe1418a452648892b2c503c949b0471b379bac085c81a4c2ec702d93b98774fb39728ab635bc23d3aae92827bcf21823f1"
        },
        {
          "alg" : "SHA-384",
          "content" : "7efdcc40ed2a4275b4ae31b996757d54047b210c92210d49dd058d1093e9f3ed61e98b136b4bc6cec1d04fe0ebfd6c46"
        },
        {
          "alg" : "SHA3-384",
          "content" : "8eb8f52f4027e8af64d0f145adadd5f8b188f1020c6c4a27c8ab4820e6e4c22c65c66221264c9f5d97fdcc6a407a8aac"
        },
        {
          "alg" : "SHA3-256",
          "content" : "a0acd9406eea0c299e8089c53deeb2af79c04fb5cc4dcf4567df418fe6723a94"
        },
        {
          "alg" : "SHA3-512",
          "content" : "2b7b159c75e3942ba5056ca78b90950ec3eb9b5ffbb826e7a4f5ad827c7c42458d9ebfd9c1995c0e418f64797cc8d383e078040c2d15aa22db30e9979e88bda1"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.karaf.decanter/apache-karaf-decanter@2.12.0?classifier=features&type=xml",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.apache.org/decanter/apache-karaf-decanter/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/apache/karaf-decanter/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://www.mail-archive.com/user%40karaf.apache.org/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/karaf-decanter/apache-karaf-decanter"
        }
      ]
    }
  ],
  "dependencies" : [
    {
      "ref" : "pkg:maven/de.virtimo.bpc/karaf@5.0.6?type=karaf-assembly",
      "dependsOn" : [
        "pkg:maven/org.apache.karaf.features/framework@4.4.11?type=kar",
        "pkg:maven/org.apache.karaf.features/framework@4.4.11?classifier=features&type=xml",
        "pkg:maven/org.apache.karaf.features/standard@4.4.11?classifier=features&type=xml",
        "pkg:maven/org.apache.karaf.features/enterprise@4.4.11?classifier=features&type=xml",
        "pkg:maven/org.apache.cxf.karaf/apache-cxf@3.6.10?classifier=features&type=xml",
        "pkg:maven/org.apache.karaf.features/specs@4.4.11?classifier=features&type=xml",
        "pkg:maven/org.apache.karaf.decanter/apache-karaf-decanter@2.12.0?classifier=features&type=xml"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.karaf.features/framework@4.4.11?type=kar",
      "dependsOn" : [
        "pkg:maven/org.apache.karaf.features/base@4.4.11?type=jar",
        "pkg:maven/org.apache.karaf/org.apache.karaf.main@4.4.11?type=jar",
        "pkg:maven/org.apache.karaf/org.apache.karaf.client@4.4.11?type=jar",
        "pkg:maven/org.apache.karaf.jaas/org.apache.karaf.jaas.boot@4.4.11?type=jar",
        "pkg:maven/org.apache.karaf.diagnostic/org.apache.karaf.diagnostic.boot@4.4.11?type=jar",
        "pkg:maven/org.apache.karaf.config/org.apache.karaf.config.core@4.4.11?type=jar",
        "pkg:maven/org.eclipse.platform/org.eclipse.osgi@3.18.0?type=jar",
        "pkg:maven/org.apache.felix/org.apache.felix.framework@7.0.5?type=jar",
        "pkg:maven/org.jline/jline@3.30.9?type=jar",
        "pkg:maven/org.ops4j.pax.logging/pax-logging-api@2.3.3?type=jar",
        "pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@2.3.3?type=jar",
        "pkg:maven/org.ops4j.pax.logging/pax-logging-logback@2.3.3?type=jar",
        "pkg:maven/org.ops4j.pax.url/pax-url-aether@2.7.1?type=jar",
        "pkg:maven/org.apache.felix/org.apache.felix.fileinstall@3.7.4?type=jar",
        "pkg:maven/org.apache.felix/org.apache.felix.configadmin@1.9.26?type=jar",
        "pkg:maven/org.apache.felix/org.apache.felix.configadmin.plugin.interpolation@1.2.8?type=jar",
        "pkg:maven/org.apache.karaf.features/org.apache.karaf.features.extension@4.4.11?type=jar",
        "pkg:maven/org.apache.karaf.features/org.apache.karaf.features.core@4.4.11?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.karaf.features/base@4.4.11?type=jar",
      "dependsOn" : [
        "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@2.3.3?type=jar",
        "pkg:maven/javax.annotation/javax.annotation-api@1.3.2?type=jar",
        "pkg:maven/org.apache.servicemix.specs/org.apache.servicemix.specs.activation-api-1.2.1@1.2.1_3?type=jar",
        "pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.9?type=jar",
        "pkg:maven/org.glassfish.jaxb/txw2@2.3.9?type=jar",
        "pkg:maven/com.sun.istack/istack-commons-runtime@3.0.12?type=jar",
        "pkg:maven/org.apache.karaf.specs/org.apache.karaf.specs.locator@4.4.11?type=jar",
        "pkg:maven/org.apache.karaf.specs/org.apache.karaf.specs.java.xml@4.4.11?type=jar",
        "pkg:maven/org.apache.karaf.specs/org.apache.karaf.specs.java.xml.ws@4.4.11?type=jar",
        "pkg:maven/org.apache.karaf.specs/org.apache.karaf.specs.activator@4.4.11?type=jar",
        "pkg:maven/org.apache.karaf/org.apache.karaf.main@4.4.11?type=jar",
        "pkg:maven/org.apache.karaf/org.apache.karaf.client@4.4.11?type=jar",
        "pkg:maven/org.apache.karaf.jaas/org.apache.karaf.jaas.boot@4.4.11?type=jar",
        "pkg:maven/org.apache.karaf.diagnostic/org.apache.karaf.diagnostic.boot@4.4.11?type=jar",
        "pkg:maven/org.apache.felix/org.apache.felix.framework@7.0.5?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@2.3.3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/javax.annotation/javax.annotation-api@1.3.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.servicemix.specs/org.apache.servicemix.specs.activation-api-1.2.1@1.2.1_3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.9?type=jar",
      "dependsOn" : [
        "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@2.3.3?type=jar",
        "pkg:maven/org.glassfish.jaxb/txw2@2.3.9?type=jar",
        "pkg:maven/com.sun.istack/istack-commons-runtime@3.0.12?type=jar",
        "pkg:maven/com.sun.activation/jakarta.activation@1.2.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.glassfish.jaxb/txw2@2.3.9?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.sun.istack/istack-commons-runtime@3.0.12?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.sun.activation/jakarta.activation@1.2.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.karaf.specs/org.apache.karaf.specs.locator@4.4.11?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.karaf.specs/org.apache.karaf.specs.java.xml@4.4.11?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.geronimo.specs/geronimo-stax-api_1.2_spec@1.2?type=jar",
        "pkg:maven/xml-apis/xml-apis@1.4.01?type=jar",
        "pkg:maven/org.apache.karaf.specs/org.apache.karaf.specs.locator@4.4.11?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.geronimo.specs/geronimo-stax-api_1.2_spec@1.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/xml-apis/xml-apis@1.4.01?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.karaf.specs/org.apache.karaf.specs.java.xml.ws@4.4.11?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.geronimo.specs/geronimo-saaj_1.3_spec@1.1?type=jar",
        "pkg:maven/org.apache.geronimo.specs/geronimo-jaxws_2.2_spec@1.2?type=jar",
        "pkg:maven/org.apache.karaf.specs/org.apache.karaf.specs.locator@4.4.11?type=jar",
        "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@2.3.3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.geronimo.specs/geronimo-saaj_1.3_spec@1.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.geronimo.specs/geronimo-jaxws_2.2_spec@1.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.karaf.specs/org.apache.karaf.specs.activator@4.4.11?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.karaf.specs/org.apache.karaf.specs.locator@4.4.11?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.karaf/org.apache.karaf.main@4.4.11?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.karaf/org.apache.karaf.util@4.4.11?type=jar",
        "pkg:maven/net.java.dev.jna/jna@5.18.1?type=jar",
        "pkg:maven/net.java.dev.jna/jna-platform@5.18.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.karaf/org.apache.karaf.util@4.4.11?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.felix/org.apache.felix.utils@1.11.8?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar",
        "pkg:maven/org.apache.karaf.jaas/org.apache.karaf.jaas.boot@4.4.11?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.felix/org.apache.felix.utils@1.11.8?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.karaf.jaas/org.apache.karaf.jaas.boot@4.4.11?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/net.java.dev.jna/jna@5.18.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/net.java.dev.jna/jna-platform@5.18.1?type=jar",
      "dependsOn" : [
        "pkg:maven/net.java.dev.jna/jna@5.18.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.karaf/org.apache.karaf.client@4.4.11?type=jar",
      "dependsOn" : [
        "pkg:maven/org.jline/jline@3.30.9?type=jar",
        "pkg:maven/org.apache.sshd/sshd-osgi@2.17.1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.jline/jline@3.30.9?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.sshd/sshd-osgi@2.17.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar",
        "pkg:maven/org.slf4j/jcl-over-slf4j@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.slf4j/jcl-over-slf4j@1.7.36?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.karaf.diagnostic/org.apache.karaf.diagnostic.boot@4.4.11?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.felix/org.apache.felix.framework@7.0.5?type=jar",
      "dependsOn" : [
        "pkg:maven/org.codehaus.mojo/animal-sniffer-annotations@1.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.mojo/animal-sniffer-annotations@1.9?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.karaf.config/org.apache.karaf.config.core@4.4.11?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar",
        "pkg:maven/org.apache.karaf/org.apache.karaf.util@4.4.11?type=jar",
        "pkg:maven/org.apache.felix/org.apache.felix.cm.json@1.0.8?type=jar",
        "pkg:maven/org.apache.sling/org.apache.sling.commons.johnzon@1.2.16?type=jar",
        "pkg:maven/org.apache.geronimo.specs/geronimo-json_1.1_spec@1.5?type=jar",
        "pkg:maven/org.apache.felix/org.apache.felix.fileinstall@3.7.4?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.felix/org.apache.felix.cm.json@1.0.8?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.sling/org.apache.sling.commons.johnzon@1.2.16?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.geronimo.specs/geronimo-json_1.1_spec@1.5?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.felix/org.apache.felix.fileinstall@3.7.4?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.platform/org.eclipse.osgi@3.18.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.ops4j.pax.logging/pax-logging-api@2.3.3?type=jar",
      "dependsOn" : [
        "pkg:maven/org.osgi/osgi.core@7.0.0?type=jar",
        "pkg:maven/org.osgi/osgi.cmpn@7.0.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.osgi/osgi.core@7.0.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.osgi/osgi.cmpn@7.0.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@2.3.3?type=jar",
      "dependsOn" : [
        "pkg:maven/org.ops4j.pax.logging/pax-logging-api@2.3.3?type=jar",
        "pkg:maven/org.osgi/osgi.core@7.0.0?type=jar",
        "pkg:maven/org.osgi/osgi.cmpn@7.0.0?type=jar",
        "pkg:maven/org.osgi/osgi.annotation@7.0.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.osgi/osgi.annotation@7.0.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.ops4j.pax.logging/pax-logging-logback@2.3.3?type=jar",
      "dependsOn" : [
        "pkg:maven/ch.qos.logback/logback-core@1.5.32?type=jar",
        "pkg:maven/ch.qos.logback/logback-classic@1.5.32?type=jar",
        "pkg:maven/ch.qos.logback.contrib/logback-jackson@0.1.5?type=jar",
        "pkg:maven/ch.qos.logback.contrib/logback-json-core@0.1.5?type=jar",
        "pkg:maven/ch.qos.logback.contrib/logback-json-classic@0.1.5?type=jar",
        "pkg:maven/org.ops4j.pax.logging/pax-logging-api@2.3.3?type=jar",
        "pkg:maven/org.osgi/osgi.core@7.0.0?type=jar",
        "pkg:maven/org.osgi/osgi.cmpn@7.0.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/ch.qos.logback/logback-core@1.5.32?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/ch.qos.logback/logback-classic@1.5.32?type=jar",
      "dependsOn" : [
        "pkg:maven/ch.qos.logback/logback-core@1.5.32?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/ch.qos.logback.contrib/logback-jackson@0.1.5?type=jar",
      "dependsOn" : [
        "pkg:maven/ch.qos.logback.contrib/logback-json-core@0.1.5?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/ch.qos.logback.contrib/logback-json-core@0.1.5?type=jar",
      "dependsOn" : [
        "pkg:maven/ch.qos.logback/logback-core@1.5.32?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/ch.qos.logback.contrib/logback-json-classic@0.1.5?type=jar",
      "dependsOn" : [
        "pkg:maven/ch.qos.logback/logback-classic@1.5.32?type=jar",
        "pkg:maven/ch.qos.logback.contrib/logback-json-core@0.1.5?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.ops4j.pax.url/pax-url-aether@2.7.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.felix/org.apache.felix.configadmin@1.9.26?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.felix/org.apache.felix.configadmin.plugin.interpolation@1.2.8?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.karaf.features/org.apache.karaf.features.extension@4.4.11?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.karaf.features/org.apache.karaf.features.core@4.4.11?type=jar",
      "dependsOn" : [
        "pkg:maven/org.ops4j.pax.url/pax-url-aether@2.7.1?type=jar",
        "pkg:maven/org.ops4j.base/ops4j-base-util-property@1.5.1?type=jar",
        "pkg:maven/org.ops4j.base/ops4j-base-util-collections@1.5.1?type=jar",
        "pkg:maven/org.ops4j.pax.swissbox/pax-swissbox-property@1.9.0?type=jar",
        "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@2.3.3?type=jar",
        "pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.9?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.21.2?type=jar",
        "pkg:maven/javax.activation/activation@1.1.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.ops4j.base/ops4j-base-util-property@1.5.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.ops4j.base/ops4j-base-util-collections@1.5.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.ops4j.base/ops4j-base-lang@1.5.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.ops4j.base/ops4j-base-lang@1.5.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.ops4j.pax.swissbox/pax-swissbox-property@1.9.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.ops4j.base/ops4j-base-lang@1.5.1?type=jar",
        "pkg:maven/org.ops4j.base/ops4j-base-util-property@1.5.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.21.2?type=jar",
      "dependsOn" : [
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.21?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.21.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.21?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.21.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/javax.activation/activation@1.1.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.karaf.features/framework@4.4.11?classifier=features&type=xml",
      "dependsOn" : [
        "pkg:maven/org.apache.karaf.features/base@4.4.11?type=jar",
        "pkg:maven/org.apache.karaf/org.apache.karaf.main@4.4.11?type=jar",
        "pkg:maven/org.apache.karaf/org.apache.karaf.client@4.4.11?type=jar",
        "pkg:maven/org.apache.karaf.jaas/org.apache.karaf.jaas.boot@4.4.11?type=jar",
        "pkg:maven/org.apache.karaf.diagnostic/org.apache.karaf.diagnostic.boot@4.4.11?type=jar",
        "pkg:maven/org.apache.karaf.config/org.apache.karaf.config.core@4.4.11?type=jar",
        "pkg:maven/org.eclipse.platform/org.eclipse.osgi@3.18.0?type=jar",
        "pkg:maven/org.apache.felix/org.apache.felix.framework@7.0.5?type=jar",
        "pkg:maven/org.jline/jline@3.30.9?type=jar",
        "pkg:maven/org.ops4j.pax.logging/pax-logging-api@2.3.3?type=jar",
        "pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@2.3.3?type=jar",
        "pkg:maven/org.ops4j.pax.logging/pax-logging-logback@2.3.3?type=jar",
        "pkg:maven/org.ops4j.pax.url/pax-url-aether@2.7.1?type=jar",
        "pkg:maven/org.apache.felix/org.apache.felix.fileinstall@3.7.4?type=jar",
        "pkg:maven/org.apache.felix/org.apache.felix.configadmin@1.9.26?type=jar",
        "pkg:maven/org.apache.felix/org.apache.felix.configadmin.plugin.interpolation@1.2.8?type=jar",
        "pkg:maven/org.apache.karaf.features/org.apache.karaf.features.extension@4.4.11?type=jar",
        "pkg:maven/org.apache.karaf.features/org.apache.karaf.features.core@4.4.11?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.karaf.features/standard@4.4.11?classifier=features&type=xml",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.karaf.features/enterprise@4.4.11?classifier=features&type=xml",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.cxf.karaf/apache-cxf@3.6.10?classifier=features&type=xml",
      "dependsOn" : [
        "pkg:maven/org.apache.cxf.karaf/cxf-karaf-commands@3.6.10?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.cxf.karaf/cxf-karaf-commands@3.6.10?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.cxf/cxf-core@3.6.10?type=jar",
        "pkg:maven/org.apache.karaf.shell/org.apache.karaf.shell.core@4.4.9?type=jar",
        "pkg:maven/org.apache.karaf/org.apache.karaf.util@4.4.11?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.cxf/cxf-core@3.6.10?type=jar",
      "dependsOn" : [
        "pkg:maven/jakarta.annotation/jakarta.annotation-api@1.3.5?type=jar",
        "pkg:maven/com.fasterxml.woodstox/woodstox-core@6.6.2?type=jar",
        "pkg:maven/org.apache.ws.xmlschema/xmlschema-core@2.3.2?type=jar",
        "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@2.3.3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/jakarta.annotation/jakarta.annotation-api@1.3.5?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.woodstox/woodstox-core@6.6.2?type=jar",
      "dependsOn" : [
        "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.ws.xmlschema/xmlschema-core@2.3.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.karaf.shell/org.apache.karaf.shell.core@4.4.9?type=jar",
      "dependsOn" : [
        "pkg:maven/org.jline/jline@3.30.9?type=jar",
        "pkg:maven/org.apache.karaf.jaas/org.apache.karaf.jaas.boot@4.4.11?type=jar",
        "pkg:maven/org.apache.sshd/sshd-osgi@2.17.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.karaf.features/specs@4.4.11?classifier=features&type=xml",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.karaf.decanter/apache-karaf-decanter@2.12.0?classifier=features&type=xml",
      "dependsOn" : [ ]
    }
  ]
}