<?xml version="1.0" encoding="UTF-8"?>
<bom serialNumber="urn:uuid:9db68ceb-26eb-32fa-89ad-6b26c3cb110f" version="1" xmlns="http://cyclonedx.org/schema/bom/1.6">
  <metadata>
    <timestamp>2025-11-11T04:11:35Z</timestamp>
    <lifecycles>
      <lifecycle>
        <phase>build</phase>
      </lifecycle>
    </lifecycles>
    <tools>
      <components>
        <component type="library">
          <author>OWASP Foundation</author>
          <group>org.cyclonedx</group>
          <name>cyclonedx-maven-plugin</name>
          <version>2.9.1</version>
          <description>CycloneDX Maven plugin</description>
          <hashes>
            <hash alg="MD5">9c7a565cf28cce58557d0c621c5ea4b1</hash>
            <hash alg="SHA-1">be882d5a22050bfa9d19090b1420c188617d0e1c</hash>
            <hash alg="SHA-256">698e0f37184a5b28c245c4065fd036dfce253b52f82fbb7113d81d36326cc249</hash>
            <hash alg="SHA-512">c0f0b11026858166f872a2eb54719492e5cecaa0bc9cd6b30b3ecb4a174eed220f4a1b5829d18d6734128e778d3cb3db7ffed177c92866133129cb29081814a0</hash>
            <hash alg="SHA-384">d80964707dfe5caca8c70521d5066f57589304c0a657e6fbc7c0614ea0fc7b3b3dbe7778361eee0f54ba111e9cb0ffcb</hash>
            <hash alg="SHA3-384">80bc3a275d9514bc457461ff52a72add8c7ecbbc01d8912efce57139016c544ee776981851be0a58fa977ab4221f703f</hash>
            <hash alg="SHA3-256">142317d6f245390f4fd2d0c100b16281b8dfc5c0c2cff86943bdcc97039cb699</hash>
            <hash alg="SHA3-512">af0fb9137c90b65d1a07f72e4d51ae509956cdb8800f35c961b037cdda1fe4a14ce3b496cef71ba85f1621affcfe29cd42704ae4191ff0b090a9602087c8997b</hash>
          </hashes>
        </component>
      </components>
    </tools>
    <component type="library" bom-ref="pkg:maven/org.apache.ant/ant-parent@1.10.16-SNAPSHOT?type=pom">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.ant</group>
      <name>ant-parent</name>
      <version>1.10.16-SNAPSHOT</version>
      <description>master POM</description>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.ant/ant-parent@1.10.16-SNAPSHOT?type=pom</purl>
      <externalReferences>
        <reference type="website">
          <url>https://ant.apache.org/</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/job/Ant-Build-from-POMs/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://nowhere.net/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/bugzilla/</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/ant-dev</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf/ant.git</url>
        </reference>
      </externalReferences>
    </component>
    <properties>
      <property name="maven.goal">makeAggregateBom</property>
      <property name="maven.scopes">compile,provided,runtime,system</property>
    </properties>
  </metadata>
  <components>
    <component type="library" bom-ref="pkg:maven/junit/junit@4.13.2?type=jar">
      <publisher>JUnit</publisher>
      <group>junit</group>
      <name>junit</name>
      <version>4.13.2</version>
      <description>JUnit is a unit testing framework for Java, created by Erich Gamma and Kent Beck.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">d98a9a02a99a9acd22d7653cbcc1f31f</hash>
        <hash alg="SHA-1">8ac9e16d933b6fb43bc7f576336b8f4d7eb5ba12</hash>
        <hash alg="SHA-256">8e495b634469d64fb8acfa3495a065cbacc8a0fff55ce1e31007be4c16dc57d3</hash>
        <hash alg="SHA-512">a31b9950f929a7e5a600d89787ef40e42a8a8e2392e210d0c0f45b3572937670a18a524f1815508cd1152cd1eaa7275cb7430ba45c053be365c83c231bccd3f0</hash>
        <hash alg="SHA-384">9f85c56a77c699eb87630b9e8224068a34c296bcd9aadb52248dd4665036f5bf1048fe75e5cb590b59e7855ca716acae</hash>
        <hash alg="SHA3-384">590cfd9396424583879ca8ad732870406bab18325ac72fb2bbe188b9611278d6341700badf7cfc32525b8ff42900c905</hash>
        <hash alg="SHA3-256">a06b3fd2fd1d9f4306b58125484e3605a395afe5ffe2c801e43ae462f366a430</hash>
        <hash alg="SHA3-512">a6d25ce3c14f9065f06dfd0e68e1dad5c03bd5de0a302c44ca4733d2cb87ec1bc6f0abd36d65aeee8caf328b6881432c4b682fa4b4b1fa931c3c950de5129fb2</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-1.0</id>
          <url>http://www.eclipse.org/legal/epl-v10.html</url>
        </license>
      </licenses>
      <purl>pkg:maven/junit/junit@4.13.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://junit.org</url>
        </reference>
        <reference type="build-system">
          <url>https://github.com/junit-team/junit4/actions</url>
        </reference>
        <reference type="distribution">
          <url>https://github.com/junit-team/junit4/wiki/Download-and-Install</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/junit-team/junit4/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/junit-team/junit4</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.hamcrest/hamcrest-core@1.3?type=jar">
      <group>org.hamcrest</group>
      <name>hamcrest-core</name>
      <version>1.3</version>
      <description>This is the core API of hamcrest matcher framework to be used by third-party framework providers. This includes the a foundation set of matcher implementations for common operations.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">6393363b47ddcbba82321110c3e07519</hash>
        <hash alg="SHA-1">42a25dc3219429f0e5d060061f71acb49bf010a0</hash>
        <hash alg="SHA-256">66fdef91e9739348df7a096aa384a5685f4e875584cce89386a7a47251c4d8e9</hash>
        <hash alg="SHA-512">e237ae735aac4fa5a7253ec693191f42ef7ddce384c11d29fbf605981c0be077d086757409acad53cb5b9e53d86a07cc428d459ff0f5b00d32a8cbbca390be49</hash>
        <hash alg="SHA-384">4b5297d2a12cc32b824153afc83f1ba9f1869ca288330f0a2f759659d09e4c420eb6ba4a1efbfa0657b625edd41293d5</hash>
        <hash alg="SHA3-384">b14d34985c0a78cf0ba19b5a18bffd403e08adcb2afde228ddef6e16121c7046dbebf58c04d3419311c4496c48aa93be</hash>
        <hash alg="SHA3-256">f679af77deedf69b3c3066f7916583848c6fd32a950f9c0b0e2ef1da121717ba</hash>
        <hash alg="SHA3-512">bca821931e438a1977b7b4356b5f8cebf485634f82159d505c48267c34e6a0f4fde9c2917331365f66dc0e52e2ca3a2db5256863584110c27ecebefc28741f63</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.hamcrest/hamcrest-core@1.3?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/hamcrest/JavaHamcrest/hamcrest-core</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/hamcrest/JavaHamcrest/hamcrest-core</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.ant/ant-launcher@1.10.16-SNAPSHOT?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.ant</group>
      <name>ant-launcher</name>
      <version>1.10.16-SNAPSHOT</version>
      <description>master POM</description>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.ant/ant-launcher@1.10.16-SNAPSHOT?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://ant.apache.org/</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/job/Ant-Build-from-POMs/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://nowhere.net/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/bugzilla/</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/ant-dev</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf/ant.git/ant-launcher</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.ant/ant@1.10.16-SNAPSHOT?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.ant</group>
      <name>ant</name>
      <version>1.10.16-SNAPSHOT</version>
      <description>master POM</description>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.ant/ant@1.10.16-SNAPSHOT?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://ant.apache.org/</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/job/Ant-Build-from-POMs/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://nowhere.net/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/bugzilla/</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/ant-dev</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf/ant.git/ant</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.sun.mail/javax.mail@1.6.2?type=jar">
      <publisher>Oracle</publisher>
      <group>com.sun.mail</group>
      <name>javax.mail</name>
      <version>1.6.2</version>
      <description>JavaMail API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">0b81d022797740d72d21620781841374</hash>
        <hash alg="SHA-1">935151eb71beff17a2ffac15dd80184a99a0514f</hash>
        <hash alg="SHA-256">45b515e7104944c09e45b9c7bb1ce5dff640486374852dd2b2e80cc3752dfa11</hash>
        <hash alg="SHA-512">d76243093d93c556ae399ce9b65ea35bc5a7e12703110108cf8eaa314d8f9b094034dd530438189775f61f0994727cac6f68efb8eab2f13349922b08eb00d4ec</hash>
        <hash alg="SHA-384">44300db745c6a065b5ca907e04d06bc42e42d4bf59470b24d2c40f889cf8fc79f0793997321874b2c25bc269900f9c51</hash>
        <hash alg="SHA3-384">4884616293856fe9d2ed2c6bb838f32d645ccab65a05b949351e6d93d6ed9ea408c8666ef17e19bd033c25545bafb490</hash>
        <hash alg="SHA3-256">905d9b5869f8ee5ad4b1027293beb5af5051aa2b929f52500611beedd2d5c992</hash>
        <hash alg="SHA3-512">bec15cc6423179fb27e01c149e9c761a5cc98844e47f2182101d69f84736a85390da487eef7cc2dca94992c14d6ba7fe3d5833d2ad554731bec439ef11d547d8</hash>
      </hashes>
      <licenses>
        <expression>(CDDL-1.0 OR GPL-2.0-with-classpath-exception)</expression>
      </licenses>
      <purl>pkg:maven/com.sun.mail/javax.mail@1.6.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://javaee.github.io/javamail/javax.mail</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://maven.java.net/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/javaee/javamail/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/javaee/javamail/javax.mail</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/javax.activation/activation@1.1?type=jar">
      <group>javax.activation</group>
      <name>activation</name>
      <version>1.1</version>
      <description>JavaBeans Activation Framework (JAF) is a standard extension to the Java platform that lets you take advantage of standard services to: determine the type of an arbitrary piece of data; encapsulate access to it; discover the operations available on it; and instantiate the appropriate bean to perform the operation(s).</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">8ae38e87cd4f86059c0294a8fe3e0b18</hash>
        <hash alg="SHA-1">e6cb541461c2834bdea3eb920f1884d1eb508b50</hash>
        <hash alg="SHA-256">2881c79c9d6ef01c58e62beea13e9d1ac8b8baa16f2fc198ad6e6776defdcdd3</hash>
        <hash alg="SHA-512">c0ff5bf3ace7acc1b31fcc109cee48d9eb8f025ae15a31dc91eca760933bdb97c93f05d61e95af1e317859d72e5f179f897f5bf3df0e3810f4212d43bacee4bd</hash>
        <hash alg="SHA-384">c4ee54d80a2e67e819700051d6cfa01a17631c89f942b8690afb601e491f02d7497fe57bd5c70edfb9b444ae8222b846</hash>
        <hash alg="SHA3-384">de0777d2d1d7aad105defb12aed17ef38abfe89db2449c5243fa3c69304ea24dd8df0881330351d0733313e8f7252814</hash>
        <hash alg="SHA3-256">5fb94d2742cc3d44abad42c5d61b9c7464a2ef33bc58b4b5b121d49799123460</hash>
        <hash alg="SHA3-512">c5e37fe3d9c420a9035f1160eb1d396e94f01851c01c6e2f19f19a221bfc484e63f9660c7377f58aa65246b95a9eb799ac4e6798c0b20f658edf00a4435e1efa</hash>
      </hashes>
      <licenses>
        <license>
          <id>CDDL-1.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/javax.activation/activation@1.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://java.sun.com/products/javabeans/jaf/index.jsp</url>
        </reference>
        <reference type="distribution">
          <url>https://maven-repository.dev.java.net/nonav/repository/javax.activation/jars/activation-1.1.jar</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.ant/ant-antlr@1.10.16-SNAPSHOT?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.ant</group>
      <name>ant-antlr</name>
      <version>1.10.16-SNAPSHOT</version>
      <description>antlr specific task.
    The implementation forks a java process, therefore the antlr jar file is only needed at runtime</description>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.ant/ant-antlr@1.10.16-SNAPSHOT?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://ant.apache.org/</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/job/Ant-Build-from-POMs/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://nowhere.net/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/bugzilla/</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/ant-dev</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf/ant.git/ant-antlr</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/antlr/antlr@2.7.7?type=jar">
      <group>antlr</group>
      <name>antlr</name>
      <version>2.7.7</version>
      <description>A framework for constructing recognizers, compilers,
    and translators from grammatical descriptions containing
    Java, C#, C++, or Python actions.</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">f8f1352c52a4c6a500b597596501fc64</hash>
        <hash alg="SHA-1">83cd2cd674a217ade95a4bb83a8a14f351f48bd0</hash>
        <hash alg="SHA-256">88fbda4b912596b9f56e8e12e580cc954bacfb51776ecfddd3e18fc1cf56dc4c</hash>
        <hash alg="SHA-512">311c3115f9f6651d1711c52d1739e25a70f25456cacb9a2cdde7627498c30b13d721133cc75b39462ad18812a82472ef1b3b9d64fab5abb0377c12bf82043a74</hash>
        <hash alg="SHA-384">2e811e531ce30a2a905d093a00de596cf04406413b60422db8252b46125cadf07b71459cf6ac6da575ec030a9bf05e57</hash>
        <hash alg="SHA3-384">bdf019332ae8714ef6a3904bb42bb08c1fe4feacf5e6137274884b0377d4e5b5f7aa9fe8e1ef5ca9b3e15f12320fdb67</hash>
        <hash alg="SHA3-256">babce5c8beb1d5907a7ed6354589e991da7d8d5cbd86c479abfa1e1dfc4d2eb8</hash>
        <hash alg="SHA3-512">3a8ce565280a157dd6e08fb68c317a4c28616099c56bc4992c38cf74a10a54a89e18e7c45190ce8511360798a87adc92f432382f9d9bdde0d56664b50044b517</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/antlr/antlr@2.7.7?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://www.antlr.org/</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.ant/ant-apache-bcel@1.10.16-SNAPSHOT?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.ant</group>
      <name>ant-apache-bcel</name>
      <version>1.10.16-SNAPSHOT</version>
      <description>master POM</description>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.ant/ant-apache-bcel@1.10.16-SNAPSHOT?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://ant.apache.org/</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/job/Ant-Build-from-POMs/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://nowhere.net/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/bugzilla/</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/ant-dev</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf/ant.git/ant-apache-bcel</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.bcel/bcel@6.9.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.bcel</group>
      <name>bcel</name>
      <version>6.9.0</version>
      <description>Apache Commons Bytecode Engineering Library</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">5f487f9076156f5795052599e76c6f58</hash>
        <hash alg="SHA-1">a3fa810b74ecff2c72aeb44d34ab8d5e7fab8d73</hash>
        <hash alg="SHA-256">a119a4420350dea669acfd84120ecc7e5742dcabcc82b0b9f9755dc692335aa2</hash>
        <hash alg="SHA-512">fa9be081c9ba7865e562e85fbfb8f64c705bfe635a1ae7d85d119746f59dfcdcf439f56d2996dab7d5a9f84ab2c1bbbd04e486c15d2bb6760840258d89c392c8</hash>
        <hash alg="SHA-384">722ac0d05937e9f48c1acfce8c9cc897cbedb4c991ba66b1d46bfedd489fa05cb97b4fc742efb05f37e8a16700a6c139</hash>
        <hash alg="SHA3-384">d055a20b52ef6b583d43cd327fabcf62ef3730907083b447a6d37759c60bc12b0808dcf6cdc63520311039af57d83e55</hash>
        <hash alg="SHA3-256">b8ee02b234a61125a217679bb4d232b6f4a235229fe1e789135aecc307c38d78</hash>
        <hash alg="SHA3-512">ac75623791a64b0bc4338c2387dd27f37a154e16e2a4ab04402f632e626060b1235da03debba49f4bc8cc17e3289058184b57499432a36e1c2c751e53d1902d1</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.bcel/bcel@6.9.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://commons.apache.org/proper/commons-bcel</url>
        </reference>
        <reference type="build-system">
          <url>https://github.com/apache/commons-bcel/actions</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/BCEL</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/commons-user/</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=commons-bcel.git</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-lang3</name>
      <version>3.14.0</version>
      <description>Apache Commons Lang, a package of Java utility classes for the
  classes that are in java.lang's hierarchy, or are considered to be so
  standard as to justify existence in java.lang.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">4e5c3f5e6b0b965ef241d7d72ac8971f</hash>
        <hash alg="SHA-1">1ed471194b02f2c6cb734a0cd6f6f107c673afae</hash>
        <hash alg="SHA-256">7b96bf3ee68949abb5bc465559ac270e0551596fa34523fddf890ec418dde13c</hash>
        <hash alg="SHA-512">0338b50767166e5746ada6d6aa2e071e7221d699323bfb629f7f204b294c1dc4cad140610a129ed751798443b43e74e0818989c7df7d33c5915aa29742be9ba8</hash>
        <hash alg="SHA-384">908d0a22dc17aaa04caa5104cff7cad5b88b77eecb78dd5b3b3fefa22ff71ac50a4fb9e31c897ac243f9d841e4b3453d</hash>
        <hash alg="SHA3-384">8a7f2e061b998780870eddd571620fbf3d3c70bcb54e24539d0db504f59d65bc6bda58136284498babe29fcc5eabb7a6</hash>
        <hash alg="SHA3-256">022bf1f8039fcea717e9e34dd96eb80cfff05b43c9cbb76e9739b2421e2d027c</hash>
        <hash alg="SHA3-512">0bcbc4edce974ea970c46e2da12ec98d9fd962c2cf64f757ac97136dec5623ca52af0c225895303c17ffabb57090e6772d7bd326d5e7438cef5454f8bbaeecfa</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://commons.apache.org/proper/commons-lang/</url>
        </reference>
        <reference type="build-system">
          <url>https://github.com/apache/commons-parent/actions</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/LANG</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/commons-user/</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=commons-lang.git</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.ant/ant-apache-bsf@1.10.16-SNAPSHOT?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.ant</group>
      <name>ant-apache-bsf</name>
      <version>1.10.16-SNAPSHOT</version>
      <description>master POM</description>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.ant/ant-apache-bsf@1.10.16-SNAPSHOT?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://ant.apache.org/</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/job/Ant-Build-from-POMs/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://nowhere.net/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/bugzilla/</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/ant-dev</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf/ant.git/ant-apache-bsf</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/bsf/bsf@2.4.0?type=jar">
      <publisher>Apache Software Foundation</publisher>
      <group>bsf</group>
      <name>bsf</name>
      <version>2.4.0</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">16e82d858c648962fb5c959f21959039</hash>
        <hash alg="SHA-1">658f324024bb473c4d15d18b855676fa817353e9</hash>
        <hash alg="SHA-256">f873773deb91c1a1c12150f6cdb13b8a2e1b496a75ac903c4bbfa103b363a7c7</hash>
        <hash alg="SHA-512">cf2ff6ea53cd13ea842cad398f1be24539bec68a5cbbd088492adab50bc782cde6d9f4c0b6a24deaeee537809c90631c43f9a680ff2826c28ccf1b39380954e3</hash>
        <hash alg="SHA-384">b939345106ae5c3f1404e652671b8e10913a2e5d9767580014f5a63770bcdb219260be3be4904c8723067cdb7cf8c681</hash>
        <hash alg="SHA3-384">fe3da0dbb9faf4d75bc393b097fa94f1b713064f34325a3126372abd76315261d3ca1b7d91ac034d8ae04697e30ff1a1</hash>
        <hash alg="SHA3-256">e4dd3a4b25ceadbf9ec9f089f8897cf7ed2af7e3826fb50f774387680c86aebb</hash>
        <hash alg="SHA3-512">db727a9319d9e7bda71baeba8a0a816fa0d4a7bd2e6cbdc4b48c68b507126701d155c982137d116eaddd01001ac82d7210fd7db5f641d9df28a366fdde17805e</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/bsf/bsf@2.4.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://jakarta.apache.org/bsf</url>
        </reference>
        <reference type="distribution-intake">
          <url>scp://people.apache.org/www/people.apache.org/repo/m2-ibiblio-rsync-repository</url>
        </reference>
        <reference type="mailing-list">
          <url>http://mail-archives.apache.org/mod_mbox/www-announce/</url>
        </reference>
        <reference type="vcs">
          <url>http://svn.apache.org/viewvc/jakarta/bsf/tags/bsf-2.4.0</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-logging/commons-logging@1.0.4?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-logging</group>
      <name>commons-logging</name>
      <version>1.0.4</version>
      <description>Commons Logging is a thin adapter allowing configurable bridging to other,
    well known logging systems.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">8a507817b28077e0478add944c64586a</hash>
        <hash alg="SHA-1">f029a2aefe2b3e1517573c580f948caac31b1056</hash>
        <hash alg="SHA-256">e94af49749384c11f5aa50e8d0f5fe679be771295b52030338d32843c980351e</hash>
        <hash alg="SHA-512">c8d2d39a60adcc49091d393daf30473d1776e4b6b09bb86639171f660833a17afbdc9f3e85843093535da16fa664cd7cd4ca38f54e141018dd1b78de681ad668</hash>
        <hash alg="SHA-384">a08af7c449f30861b88cc8d6ebdc97a480e03a6f5cc56314759a3b6342a3885986ef5016c184c33f89e4a445997d5d14</hash>
        <hash alg="SHA3-384">c7a402c012e7cc62140fee3af3f33cfb71bfd99b9de11995c1d2de0a3be360e35f412bb706aef1bf1490185a7ff1216b</hash>
        <hash alg="SHA3-256">d5ef6dc6ba69bf752fb4cc1de051125b802cb9460885f8004e5daa70c82e22dd</hash>
        <hash alg="SHA3-512">e4b85827f87735bf2e94a54fd2db46a7805650aa49c1208a1d12a8b201f42b31acd022bf6386af68c43c6f678430b8232fab3987e31fc003511bf11c93e24a9f</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/commons-logging/commons-logging@1.0.4?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://jakarta.apache.org/commons/logging/</url>
        </reference>
        <reference type="distribution-intake">
          <url>file:///www/jakarta.apache.org/builds/jakarta-commons/logging/</url>
        </reference>
        <reference type="issue-tracker">
          <url>http://issues.apache.org/bugzilla/</url>
        </reference>
        <reference type="mailing-list">
          <url>http://nagoya.apache.org/eyebrowse/SummarizeList?listName=commons-dev@jakarta.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>http://cvs.apache.org/viewcvs/jakarta-commons/logging/</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.ant/ant-apache-log4j@1.10.16-SNAPSHOT?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.ant</group>
      <name>ant-apache-log4j</name>
      <version>1.10.16-SNAPSHOT</version>
      <description>master POM</description>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.ant/ant-apache-log4j@1.10.16-SNAPSHOT?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://ant.apache.org/</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/job/Ant-Build-from-POMs/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://nowhere.net/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/bugzilla/</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/ant-dev</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf/ant.git/ant-apache-log4j</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/log4j/log4j@1.2.17?type=jar">
      <publisher>Apache Software Foundation</publisher>
      <group>log4j</group>
      <name>log4j</name>
      <version>1.2.17</version>
      <description>Apache Log4j 1.2</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">04a41f0a068986f0f73485cf507c0f40</hash>
        <hash alg="SHA-1">5af35056b4d257e4b64b9e8069c0746e8b08629f</hash>
        <hash alg="SHA-256">1d31696445697720527091754369082a6651bd49781b6005deb94e56753406f9</hash>
        <hash alg="SHA-512">3f12937a69ba60d0f5e86265168d6a0d069ce20d95b99a3ace463987655e7c63053f4d7e36e32f2b53f86992b888ca477bf81253ad04c721896b397f94ee57fc</hash>
        <hash alg="SHA-384">80b79d5872dec949dff23d221636b5faf312f08fbea2b5e2a8db84a5f5955e13864aff4a288935cb53d4da3d61defbe1</hash>
        <hash alg="SHA3-384">0be025582340080ea191c4e2559395fe9957c8d0aeea040239dea8504ce035bd24150162898d18c863092697ef52501b</hash>
        <hash alg="SHA3-256">f7f31abcf8b57cf6fd18380b5d1a13f999e3d3d1d89bd25a4a3885fc832f4a29</hash>
        <hash alg="SHA3-512">0e4a21cb87a6b8626aa8f580b307039d2b060a6abc53d35feac9ecb8ffc2e80b627a12a869b5b5bf30a6e9348cd4c5c3edca937859141614f3c1b14bd8d4ef93</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/log4j/log4j@1.2.17?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://logging.apache.org/log4j/1.2/</url>
        </reference>
        <reference type="build-system">
          <url>http://vmgump.apache.org/gump/public/logging-log4j-12/logging-log4j-12/index.html</url>
        </reference>
        <reference type="distribution-intake">
          <url>scp://people.apache.org/www/people.apache.org/builds/logging/repo/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/bugzilla/describecomponents.cgi?product=Log4j</url>
        </reference>
        <reference type="mailing-list">
          <url>http://mail-archives.apache.org/mod_mbox/logging-log4j-user/</url>
        </reference>
        <reference type="vcs">
          <url>http://svn.apache.org/viewvc/logging/log4j/tags/v1_2_17_rc3</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.ant/ant-apache-oro@1.10.16-SNAPSHOT?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.ant</group>
      <name>ant-apache-oro</name>
      <version>1.10.16-SNAPSHOT</version>
      <description>master POM</description>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.ant/ant-apache-oro@1.10.16-SNAPSHOT?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://ant.apache.org/</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/job/Ant-Build-from-POMs/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://nowhere.net/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/bugzilla/</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/ant-dev</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf/ant.git/ant-apache-oro</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/oro/oro@2.0.8?type=jar">
      <group>oro</group>
      <name>oro</name>
      <version>2.0.8</version>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">42e940d5d2d822f4dc04c65053e630ab</hash>
        <hash alg="SHA-1">5592374f834645c4ae250f4c9fbb314c9369d698</hash>
        <hash alg="SHA-256">e00ccdad5df7eb43fdee44232ef64602bf63807c2d133a7be83ba09fd49af26e</hash>
        <hash alg="SHA-512">9a98e493c4d771322b1331ec05ab0e363a83d8ac2af8018d96a44df2bf5bfc97d33ebe6f6f93e46ab10bf1536f0c29e9d9569318ed49bc18b4e96b1a8b476d37</hash>
        <hash alg="SHA-384">f542e92b7a86bcb20cc21f0c4b29778428944391344ca11df432f9ce36a96ce8e8f65da67e450e52c0e8ba441d2a7332</hash>
        <hash alg="SHA3-384">e483eec12e463136ea4163a280dc17d62e48f5d49f0f0ad2ab672c4c5366b1f4e5fd460e880caaa4b39666106ac98ca1</hash>
        <hash alg="SHA3-256">e558c00adc56713dc57cebed64b966e3ca0d8f096056d8843fa8bb11c7c96017</hash>
        <hash alg="SHA3-512">f6e02d2cd83014e4a4d5ca0f24b189ec944c3b1e306c5eb04fac7e148b47ad2432256ef6b05292cf6d34a31c72420637702cc0fff4b38edcfae21bc0ffda98aa</hash>
      </hashes>
      <purl>pkg:maven/oro/oro@2.0.8?type=jar</purl>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.ant/ant-apache-regexp@1.10.16-SNAPSHOT?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.ant</group>
      <name>ant-apache-regexp</name>
      <version>1.10.16-SNAPSHOT</version>
      <description>master POM</description>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.ant/ant-apache-regexp@1.10.16-SNAPSHOT?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://ant.apache.org/</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/job/Ant-Build-from-POMs/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://nowhere.net/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/bugzilla/</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/ant-dev</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf/ant.git/ant-apache-regexp</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/jakarta-regexp/jakarta-regexp@1.4?type=jar">
      <group>jakarta-regexp</group>
      <name>jakarta-regexp</name>
      <version>1.4</version>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">5d8b8c601c21b37aa6142d38f45c0297</hash>
        <hash alg="SHA-1">0ea514a179ac1dd7e81c7e6594468b9b9910d298</hash>
        <hash alg="SHA-256">85ea3985d7fec552d6de6f02d8e18789c3fcd539081eb8c7c444eabf6cb3f7bc</hash>
        <hash alg="SHA-512">ff21513dae9717c3b3eb15feadd606ea74d94d253cc7f375ef06b6ac91c7fbb52aabcf470cb3f5a10ff9ac73afd6a002c046ec9763b97a7c22e5ddfa48e6dc89</hash>
        <hash alg="SHA-384">3d88d4a7311784a5067d30194b71358472da9eb8c7e56f80ca164fa70addc90dc95e038148ee7da238fca66512625115</hash>
        <hash alg="SHA3-384">9696982763375d54e82a00e44efdcde745ae1b6419e89ecbb54bb4b185d8f39991ad8e76f96311e8ead04cd085ea7a65</hash>
        <hash alg="SHA3-256">52d09667806d49ab635927809ad5191aaebe6dba44bafba1b0d9186b54a3e7ef</hash>
        <hash alg="SHA3-512">b05e6d5e78d82b7b40130c0464da093f5bb419e8ce14de86b85262e85ac1df9014046f5c091e36bcf49c79b70c92f2c1b77094f327be9d871c75852594e4155d</hash>
      </hashes>
      <purl>pkg:maven/jakarta-regexp/jakarta-regexp@1.4?type=jar</purl>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.ant/ant-apache-resolver@1.10.16-SNAPSHOT?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.ant</group>
      <name>ant-apache-resolver</name>
      <version>1.10.16-SNAPSHOT</version>
      <description>master POM</description>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.ant/ant-apache-resolver@1.10.16-SNAPSHOT?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://ant.apache.org/</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/job/Ant-Build-from-POMs/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://nowhere.net/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/bugzilla/</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/ant-dev</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf/ant.git/ant-apache-resolver</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/xml-resolver/xml-resolver@1.2?type=jar">
      <publisher>Apache Software Foundation</publisher>
      <group>xml-resolver</group>
      <name>xml-resolver</name>
      <version>1.2</version>
      <description>xml-commons provides an Apache-hosted set of DOM, SAX, and 
    JAXP interfaces for use in other xml-based projects. Our hope is that we 
    can standardize on both a common version and packaging scheme for these 
    critical XML standards interfaces to make the lives of both our developers 
    and users easier.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">706c533146c1f4ee46b66659ea14583a</hash>
        <hash alg="SHA-1">3d0f97750b3a03e0971831566067754ba4bfd68c</hash>
        <hash alg="SHA-256">47dcde8986019314ef78ae7280a94973a21d2ed95075a40a000b42da956429e1</hash>
        <hash alg="SHA-512">eca19b8a6b04c279b7982b16f1763ca1d49b0081a8d4ca2b7419f057d22a0ec60795eb4d901c5eb25dd4a733248876aa2f522c17a6144a26c8ede9fb2f84531a</hash>
        <hash alg="SHA-384">3eceda91a1ce0a35c490eb4c0bd94b552f96b8e5064b257435d89d65fcc2b04c706d996415efe3cf8a7413db479c3710</hash>
        <hash alg="SHA3-384">717fa1ea46c7a6265351dd212a106870c427e71de0bde251a409ee6e7dfe02c61966ef306d20cea5d8712cf7bf58d07a</hash>
        <hash alg="SHA3-256">bb83f90bc8b898878455441b3712a2bf489b6584e6685e5cb82d78cab596ae46</hash>
        <hash alg="SHA3-512">762f05d93e4f9cc95a969f8fecad13f97064897c83f4e057e84fe054601275912b68be76bb50da7e8d90b30846712b77341eb26a6405c59c07b06e223e9b027c</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/xml-resolver/xml-resolver@1.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://xml.apache.org/commons/components/resolver/</url>
        </reference>
        <reference type="distribution-intake">
          <url>scp://people.apache.org/www/people.apache.org/repo/m2-ibiblio-rsync-repository</url>
        </reference>
        <reference type="issue-tracker">
          <url>http://issues.apache.org/bugzilla/</url>
        </reference>
        <reference type="mailing-list">
          <url>http://mail-archives.apache.org/mod_mbox/xml-commons-dev/</url>
        </reference>
        <reference type="vcs">
          <url>http://svn.apache.org/viewvc/xml/commons/tags/xml-commons-resolver-1_2/</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.ant/ant-apache-xalan2@1.10.16-SNAPSHOT?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.ant</group>
      <name>ant-apache-xalan2</name>
      <version>1.10.16-SNAPSHOT</version>
      <description>contains Xalan2-specific features</description>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.ant/ant-apache-xalan2@1.10.16-SNAPSHOT?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://ant.apache.org/</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/job/Ant-Build-from-POMs/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://nowhere.net/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/bugzilla/</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/ant-dev</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf/ant.git/ant-apache-xalan2</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/xalan/xalan@2.7.3?type=jar">
      <group>xalan</group>
      <name>xalan</name>
      <version>2.7.3</version>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">e384223db0825925765f2bf66839d26d</hash>
        <hash alg="SHA-1">5095bedf29e73756fb5729f2241fd5ffa33d87e0</hash>
        <hash alg="SHA-256">febd48bb133a96c447282213951a6b74ea7fb45c0d896121296c014316bda6b0</hash>
        <hash alg="SHA-512">b481515181ef28f8d03923c272dae4d42f2c2a5cd29768f113544897a9d067f788163cc704d0cae35baf6bed34aa604442e2b9e9c69729cf571fc82d489232d1</hash>
        <hash alg="SHA-384">458e904d08e7cd3b8b4c51309dfe214b60ea50bff62df416010c8a16eef011ff924474798bf0f0da277716ba652193f0</hash>
        <hash alg="SHA3-384">3b8990a0f68695ef528ab18769c63e61393c31c05a9e9879ac9441736231911f16326941d456244df615e0d147de92d6</hash>
        <hash alg="SHA3-256">80aee7ec123545d366b651634198d0c6fd1abd0e516a1be052c23f22d2f5da1d</hash>
        <hash alg="SHA3-512">3bc08323a0284c7377fae31155ece971fca37bd78aaf2ce206688a8240ae6b1997173bad878fed7b9eac87078da0c39db820773db9a42c904fdab699ac9bee00</hash>
      </hashes>
      <purl>pkg:maven/xalan/xalan@2.7.3?type=jar</purl>
    </component>
    <component type="library" bom-ref="pkg:maven/xalan/serializer@2.7.3?type=jar">
      <group>xalan</group>
      <name>serializer</name>
      <version>2.7.3</version>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">21697a2d50f03bfd93ccf7636f8118d3</hash>
        <hash alg="SHA-1">1aa6259987888f49fdbebb1aa1a88e0f54a44f6f</hash>
        <hash alg="SHA-256">5f6804bacdfdb3ccc52d2538536fab8986696d61559b081054a420c653806667</hash>
        <hash alg="SHA-512">5480f78b3c0f762dc02594457d45140386781f1b3d5338457404f858a80ae20988dbfc4369f1a837f6688424ad5f8f3c910ffab04fdbf70b98e3a58e1ffb732e</hash>
        <hash alg="SHA-384">f53594f2989f256ab4d8b81b3a08fcda68cdab732ebaa8ae23128dfbbba18057ff1587e5f96d9d7d7d12af3a2752f39d</hash>
        <hash alg="SHA3-384">e722ed42541d9105251ad064a98b6932c04b0aad0fcf5f827b5ad876970040ffd07c0e3d81a5f7d6e00a985c814dbe3f</hash>
        <hash alg="SHA3-256">cadcebcbfb14b634991ba3e8683170adff99e260dd8d034813b46d049aaff818</hash>
        <hash alg="SHA3-512">1060cc0b55831e33bd374dede0284643477a691d2fe28766ac8b0f897f173ff4ddd3e462fb59a5ec09251257787df4c4893a3682e73eeb6bddec74c604aaa258</hash>
      </hashes>
      <purl>pkg:maven/xalan/serializer@2.7.3?type=jar</purl>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.ant/ant-commons-logging@1.10.16-SNAPSHOT?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.ant</group>
      <name>ant-commons-logging</name>
      <version>1.10.16-SNAPSHOT</version>
      <description>Ant Listener based on commons-logging</description>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.ant/ant-commons-logging@1.10.16-SNAPSHOT?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://ant.apache.org/</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/job/Ant-Build-from-POMs/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://nowhere.net/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/bugzilla/</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/ant-dev</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf/ant.git/ant-commons-logging</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-logging/commons-logging-api@1.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-logging</group>
      <name>commons-logging-api</name>
      <version>1.1</version>
      <description>Commons Logging is a thin adapter allowing configurable bridging to other,
    well known logging systems.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">4374238076ab08e60e0d296234480837</hash>
        <hash alg="SHA-1">7d4cf5231d46c8524f9b9ed75bb2d1c69ab93322</hash>
        <hash alg="SHA-256">33a4dd47bb4764e4eb3692d86386d17a0d9827f4f4bb0f70121efab6bc03ba35</hash>
        <hash alg="SHA-512">b82197427492c33c602c3c3c363eefb71c509cf2102f4f21daa7f6d5c33f52da1cff66f5d7db98810c49fd96ab29523fe19a13b274a7c40dd9141587debe66c2</hash>
        <hash alg="SHA-384">24644219401e76f6fd46ef0a6ac7287e423342dd415ae0b3cb0ff688701aa2d3ba9e5913ca4b256851e17990ad4316d1</hash>
        <hash alg="SHA3-384">ddfa7f4727e7d2ed14b8271392b5f9ef6eee34de61a0506417e727ecd4169732727e5d13fabb791b9232ceb22be33635</hash>
        <hash alg="SHA3-256">5f778291bd1ad26d5daefb9418b2afefa9121b45d7bb794db7d9bef77a8fabe2</hash>
        <hash alg="SHA3-512">b9b2f6c73fc0f4dae83d6fb16ebe5aa424888fdc3806ec318f12bb5403914b5203f22f2809e165290f10f978c423a576372fc481176c239168a227c69162e424</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/commons-logging/commons-logging-api@1.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://jakarta.apache.org/commons/logging/</url>
        </reference>
        <reference type="distribution-intake">
          <url>file:///www/jakarta.apache.org/builds/jakarta-commons/logging/</url>
        </reference>
        <reference type="issue-tracker">
          <url>http://issues.apache.org/jira/browse/LOGGING</url>
        </reference>
        <reference type="mailing-list">
          <url>http://mail-archives.apache.org/mod_mbox/jakarta-commons-dev/</url>
        </reference>
        <reference type="vcs">
          <url>http://svn.apache.org/repos/asf/jakarta/commons/proper/logging/trunk/</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.ant/ant-commons-net@1.10.16-SNAPSHOT?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.ant</group>
      <name>ant-commons-net</name>
      <version>1.10.16-SNAPSHOT</version>
      <description>ftp, rexec and telnet tasks</description>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.ant/ant-commons-net@1.10.16-SNAPSHOT?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://ant.apache.org/</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/job/Ant-Build-from-POMs/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://nowhere.net/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/bugzilla/</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/ant-dev</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf/ant.git/ant-commons-net</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-net/commons-net@3.10.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-net</group>
      <name>commons-net</name>
      <version>3.10.0</version>
      <description>Apache Commons Net library contains a collection of network utilities and protocol implementations.
Supported protocols include: Echo, Finger, FTP, NNTP, NTP, POP3(S), SMTP(S), Telnet, Whois.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">84511bcbcbd37725fd1a53360e0c3fd6</hash>
        <hash alg="SHA-1">86762ea0ac98fd41c91745a32d496a985e2bd5e7</hash>
        <hash alg="SHA-256">2230eec44ef4b8112ea09cbeb6de826977abe792e627cee2770e35ca8c39dce1</hash>
        <hash alg="SHA-512">ee92b1e6c48c19e87690db10d53b75ad68e682dfde764a619d8293c28852bde1d7684ac12c0e069523bd92f8a504e48d8c0f8a0627c07881bc517cfd548f8e4f</hash>
        <hash alg="SHA-384">c874a277a7adfc2308dce8468dab4b00b3939c3c2e04774706d7f5071368cd15ab6b37d13fe80d07fe5aebfa0ce951cb</hash>
        <hash alg="SHA3-384">8e117cfacd9f2ad511ad8f4f4685a0d523c2c06d86d86ff97c05658fe2d363cde68c59f628f19eed31fbf2051d9c0da1</hash>
        <hash alg="SHA3-256">e2c828ba7ffe881387e65c464a926d822b7682ae291e5254640d093d5cb2adba</hash>
        <hash alg="SHA3-512">8ed402ebaf7e493b54f55061f938ea5862cf7e029654837660e61a86441fa667f9f4f40dc2b26d7d3e5e8d23e0a564217f6b2daf9c51d7a9eff7e1297b9e6791</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/commons-net/commons-net@3.10.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://commons.apache.org/proper/commons-net/</url>
        </reference>
        <reference type="build-system">
          <url>https://github.com/apache/commons-parent/actions</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/NET</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/commons-user/</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf/commons-net</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.ant/ant-imageio@1.10.16-SNAPSHOT?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.ant</group>
      <name>ant-imageio</name>
      <version>1.10.16-SNAPSHOT</version>
      <description>imageio task and corresponding types.</description>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.ant/ant-imageio@1.10.16-SNAPSHOT?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://ant.apache.org/</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/job/Ant-Build-from-POMs/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://nowhere.net/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/bugzilla/</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/ant-dev</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf/ant.git/ant-imageio</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.ant/ant-jai@1.10.16-SNAPSHOT?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.ant</group>
      <name>ant-jai</name>
      <version>1.10.16-SNAPSHOT</version>
      <description>image task and corresponding types.</description>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.ant/ant-jai@1.10.16-SNAPSHOT?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://ant.apache.org/</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/job/Ant-Build-from-POMs/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://nowhere.net/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/bugzilla/</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/ant-dev</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf/ant.git/ant-jai</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/javax.media/jai-core@1.1.3?type=jar">
      <group>javax.media</group>
      <name>jai-core</name>
      <version>1.1.3</version>
      <description>The Java Advanced Imaging API extends the Java 2 platform by allowing
    sophisticated, high-performance image processing to be incorporated into Java applets
    and applications. It is a set of classes providing imaging functionality beyond that of
    Java 2D and the Java Foundation classes, though it is designed for compatibility with
    those APIs. This API implements a set of core image processing capabilities including
    image tiling, regions of interest, deferred execution and a set of core image processing
    operators, including many common point, area, and frequency domain operators.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">f398bc038307ee434bac1b93ba3ab02d</hash>
        <hash alg="SHA-1">b179d2efb1174658483e8b41bf4ac9d2eb5de438</hash>
        <hash alg="SHA-256">8b696cf067533545f44c2f68339e24ab1a2669153ed2081aa5be8749f4d592bf</hash>
        <hash alg="SHA-512">11c0f0a30027d52fc5ebaf01c76a614ff59e1016153074641d31ba47191ef1b26bccd6ddfbc1b16f9dcfca5fcf2d4eaa23bf1bf6ce47d3cb55065399bf2b3cd0</hash>
        <hash alg="SHA-384">c456a3d39d583aa231216d2f05f17b0deb907d75afd9aae2c833ee7943c2d7115096566def03809213c20b9786fecb02</hash>
        <hash alg="SHA3-384">ba9ad7e8f31dd2cb59a02e661a4971d3eb2ceadb24cf981cf9f502734ddc625e6ffc2c1a9aabd9610075582e2cdf95d0</hash>
        <hash alg="SHA3-256">3c877114c3aa657565e57f534f1779a094967dd1e47a537c61059cd831174b58</hash>
        <hash alg="SHA3-512">bbeee9e257efb4ec9684c702909aed6cffc40e2e0668c8765e4e29eb9396c1e3e49a1000f024dcfa3348bd0f72ff52d1598ab34a074f40c7ccc429329876495d</hash>
      </hashes>
      <licenses>
        <license>
          <name>Sun Microsystems, Inc. Binary Code License Agreement</name>
          <url>http://java.sun.com/products/java-media/jai/downloads/download-1_1_2_01.html</url>
        </license>
      </licenses>
      <purl>pkg:maven/javax.media/jai-core@1.1.3?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://java.sun.com/products/java-media/jai</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.sun.media/jai-codec@1.1.3?type=jar">
      <group>com.sun.media</group>
      <name>jai-codec</name>
      <version>1.1.3</version>
      <description>Java Advanced Imaging Codecs supporting support BMP, GIF (read only),
    FlashPix (read only), JPEG, PNG, PNM, TIFF, and WBMP.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">1b0f328c9eda0992167ce503b0a5afcc</hash>
        <hash alg="SHA-1">34a67ba62097778e4695c951156bf189c2c8e016</hash>
        <hash alg="SHA-256">6d7824d972c0b6e10daa95f430f917d2256954535e62def9d287e79bf7824200</hash>
        <hash alg="SHA-512">eba798b0cedab06e431d344969f97b5f65651b013f5dcf181b30c9d55f6273d46e3f30ec9af58dd79cfe2b41fff7c6d1998e5af1d01b75139e8e7a99331e6c27</hash>
        <hash alg="SHA-384">22d6547e65be875ef0d4a420efc95ebceab087b34500158195f189f53e1d12bae3c21542f55e8aac9a00bcb6be627960</hash>
        <hash alg="SHA3-384">b3f7006902d10111fbd52d1be935e473917dfc169eb5cb79f13e77c128a6bfffe7f7af5718032aa3742fbc07460f5730</hash>
        <hash alg="SHA3-256">582af961f370531be58473f225e75d52513a63ba66976a6bc67f1a055d571b8b</hash>
        <hash alg="SHA3-512">595887505e07f1e5713f8be0a41be2256986170a6f289e17b42e66bf2ec528475a0a0687023fac6fda8790b2f26a97dbd92710cbf6a90243a1f73cd3e49855f6</hash>
      </hashes>
      <licenses>
        <license>
          <name>Sun Microsystems, Inc. Binary Code License Agreement</name>
          <url>http://java.sun.com/products/java-media/jai/downloads/download-1_1_2_01.html</url>
        </license>
      </licenses>
      <purl>pkg:maven/com.sun.media/jai-codec@1.1.3?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://java.sun.com/products/java-media/jai</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.ant/ant-javamail@1.10.16-SNAPSHOT?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.ant</group>
      <name>ant-javamail</name>
      <version>1.10.16-SNAPSHOT</version>
      <description>implementation of the mail task based on javamail.
    Required to send emails to SMTP servers using user/password combinations
  or to send mail over SSL</description>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.ant/ant-javamail@1.10.16-SNAPSHOT?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://ant.apache.org/</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/job/Ant-Build-from-POMs/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://nowhere.net/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/bugzilla/</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/ant-dev</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf/ant.git/ant-javamail</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.ant/ant-jakartamail@1.10.16-SNAPSHOT?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.ant</group>
      <name>ant-jakartamail</name>
      <version>1.10.16-SNAPSHOT</version>
      <description>implementation of the mail task based on Jakarta EE mail.
    Required to send emails to SMTP servers using user/password combinations
  or to send mail over SSL</description>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.ant/ant-jakartamail@1.10.16-SNAPSHOT?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://ant.apache.org/</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/job/Ant-Build-from-POMs/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://nowhere.net/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/bugzilla/</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/ant-dev</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf/ant.git/ant-jakartamail</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.sun.mail/jakarta.mail@2.0.1?type=jar">
      <publisher>Oracle</publisher>
      <group>com.sun.mail</group>
      <name>jakarta.mail</name>
      <version>2.0.1</version>
      <description>Jakarta Mail API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">8885560796641719f1cc0c9ea17b8bee</hash>
        <hash alg="SHA-1">96d3645f02a92bcc5e7ae1ff037151e44179f230</hash>
        <hash alg="SHA-256">8988bdbde922ee173db7179e23393dd2258f3b64f708f41082e03f0e0494cc23</hash>
        <hash alg="SHA-512">364b705fe3e51b1a612f7812cd4e57cff3b6ed844ca3566c206195d6512664661b0fcc138ecd2284ee33855fa378a4296842668fc66e3447d5dc5a1fc3e9c43d</hash>
        <hash alg="SHA-384">be2357a3fc409ecdb7fa8baf62f1b28545a6bb6f9c53f567e4690014027a5a4376334da0c396a07c8931804b5f08448c</hash>
        <hash alg="SHA3-384">a87d40a24eb2231094af38014c31f58a45bde3ea19e00cd16484014d2c1a7d783a29868a62cfc85369a365a69beaa484</hash>
        <hash alg="SHA3-256">2d70c33869619c2146d9110b1ea818526c298100373ee7161490899f3531e857</hash>
        <hash alg="SHA3-512">52632fe175dfe6c7b22dd03dabbecd35a235931db9b045ab49691389c6e533e2e2f24c6b505c1cf1811c9b7e07a3c05ab98f88b685d55f43a6d63ebd487be6a8</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <id>GPL-2.0-with-classpath-exception</id>
        </license>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.sun.mail/jakarta.mail@2.0.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://eclipse-ee4j.github.io/mail/jakarta.mail</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse-ee4j/mail/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse-ee4j/mail/jakarta.mail</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.sun.activation/jakarta.activation@2.0.1?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>com.sun.activation</group>
      <name>jakarta.activation</name>
      <version>2.0.1</version>
      <description>Jakarta Activation</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">39228ac67f033514a0ccb3360ac461f3</hash>
        <hash alg="SHA-1">828b80e886a52bb09fe41ff410b10b342f533ce1</hash>
        <hash alg="SHA-256">b9e24b7dd6e07495562ea96531be3130c96dba4d78e1dfd88adbbdebf4332871</hash>
        <hash alg="SHA-512">d1c214d2d6ecc61bba396d913c66c977418e74dfe96e5558951ccf99a60cfca6adfea3fc64b6e2d15f698e30dac870b8f6e8d7a22e0dff975f8dd83864714fc5</hash>
        <hash alg="SHA-384">7481f94524b06ba81d12f5d9427dcd389d2c9130176567ff3e11c82fcfe605bf654116463b23d259573f3222b3414bcd</hash>
        <hash alg="SHA3-384">0bcd7603bc9ff7cae8fb9d7c6547c012d88a5d6374a71670d58086dc597cd592f6686abccc63d095cb17cdafe4dba762</hash>
        <hash alg="SHA3-256">47760a6311d1023c1384ebaea0c2eb35c8ecbb06e424fdefe935693088e2f88e</hash>
        <hash alg="SHA3-512">f5d531480ed1cc9323281d1ca402d21ec71a7ad267372c95a8c8dcf0f1e6919d545085fe5c7b154c5594f26538873ee75459795e826c6acb3fa6c4629a7f983a</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.sun.activation/jakarta.activation@2.0.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/eclipse-ee4j/jaf/jakarta.activation</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse-ee4j/jaf/issues/</url>
        </reference>
        <reference type="mailing-list">
          <url>https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse-ee4j/jaf/jakarta.activation</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.ant/ant-jdepend@1.10.16-SNAPSHOT?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.ant</group>
      <name>ant-jdepend</name>
      <version>1.10.16-SNAPSHOT</version>
      <description>task jdepend invoking the jdepend parser. There is also a version 2.9.1 of the
    jdepend parser available on the maven repository</description>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.ant/ant-jdepend@1.10.16-SNAPSHOT?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://ant.apache.org/</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/job/Ant-Build-from-POMs/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://nowhere.net/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/bugzilla/</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/ant-dev</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf/ant.git/ant-jdepend</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/jdepend/jdepend@2.9.1?type=jar">
      <group>jdepend</group>
      <name>jdepend</name>
      <version>2.9.1</version>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">568d2b54187444b81eab642abf49c263</hash>
        <hash alg="SHA-1">3d3089f585c2740a707c2cb99f4bb149a90d63f0</hash>
        <hash alg="SHA-256">b8105789bd4497836bcec263d5a12d6326d4eb7b4fe38535d179e4a44de83370</hash>
        <hash alg="SHA-512">7f6ce6c9a3cc613e12a2cb7dc115097ff0df8b3b4bb9e7bcdcfa3cf339d08af757fc60abff4783f7a8a37e77826a8b0de0e114373437bbc5c0b8dcf6e1a53196</hash>
        <hash alg="SHA-384">9f1d3148fda709a7bb4170131e9b54a0b21636a0f892352e18cd6c471c593aba05b388a3d844f1e8c8b44c151763c602</hash>
        <hash alg="SHA3-384">cdc4a887a186090775ea719c02f1e5dc4307b8758d270be9563f6f9844fcddbfa32ee91a25b9600bba55f49515681ccc</hash>
        <hash alg="SHA3-256">242975ca2ff379d9924b5d9127c654d035a6c1513accfc733c3f177a2e29a03b</hash>
        <hash alg="SHA3-512">769e3a6240341a2fa68f0d68744696a40b4be2106f92e60d60c123ca173efa06a211d7a4ca788f80856ca4d756c525665eb0cda4cea3a5c82d074e0f64017fc0</hash>
      </hashes>
      <purl>pkg:maven/jdepend/jdepend@2.9.1?type=jar</purl>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.ant/ant-jmf@1.10.16-SNAPSHOT?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.ant</group>
      <name>ant-jmf</name>
      <version>1.10.16-SNAPSHOT</version>
      <description>contains the sound task and a soundplayer listener
    download the dependency from https://java.sun.com/products/java-media/jmf/</description>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.ant/ant-jmf@1.10.16-SNAPSHOT?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://ant.apache.org/</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/job/Ant-Build-from-POMs/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://nowhere.net/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/bugzilla/</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/ant-dev</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf/ant.git/ant-jmf</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.ant/ant-jsch@1.10.16-SNAPSHOT?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.ant</group>
      <name>ant-jsch</name>
      <version>1.10.16-SNAPSHOT</version>
      <description>contains the sshexec and scp tasks</description>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.ant/ant-jsch@1.10.16-SNAPSHOT?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://ant.apache.org/</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/job/Ant-Build-from-POMs/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://nowhere.net/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/bugzilla/</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/ant-dev</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf/ant.git/ant-jsch</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.jcraft/jsch@0.1.55?type=jar">
      <publisher>JCraft,Inc.</publisher>
      <group>com.jcraft</group>
      <name>jsch</name>
      <version>0.1.55</version>
      <description>JSch is a pure Java implementation of SSH2</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">c395ada0fc012d66f11bd30246f6c84d</hash>
        <hash alg="SHA-1">bbd40e5aa7aa3cfad5db34965456cee738a42a50</hash>
        <hash alg="SHA-256">d492b15a6d2ea3f1cc39c422c953c40c12289073dbe8360d98c0f6f9ec74fc44</hash>
        <hash alg="SHA-512">b6827d8de471682fd11744080663aea77612a03774e2ebcc3357c7c493d5df50d4ec9c8d52c4fcc928bdfdd75b62b40d3c60f184da8a7b8aba44c92afecee7a5</hash>
        <hash alg="SHA-384">6da3c9e2d72bd25991936dfe918ae7f235d03f386a8f797b65a154ae71b36292f873338ccbf5dd4fd3bc63619c806dbe</hash>
        <hash alg="SHA3-384">92676d161f4ebe078df11f9cda6dc0bed4c828830bb98340ac34fdb89dc76b019d4320f6fdd3db13cdd6e33582cb9272</hash>
        <hash alg="SHA3-256">99c7de83022da8f85fcef262e29051b8c33c81d492cf344a5d123b83b5a459f7</hash>
        <hash alg="SHA3-512">33344b4ee79f0e7c8901b828f2bea13d25727361deeaa37d85dbaf3c44a31e8d0b4f3966ce2e4c3705bebd046cb7adba0486d02babdbc68e9819d059b5981559</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.jcraft/jsch@0.1.55?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://www.jcraft.com/jsch/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="vcs">
          <url>http://git.jcraft.com/jsch.git</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.ant/ant-junit@1.10.16-SNAPSHOT?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.ant</group>
      <name>ant-junit</name>
      <version>1.10.16-SNAPSHOT</version>
      <description>contains the junit and junirreport tasks</description>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.ant/ant-junit@1.10.16-SNAPSHOT?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://ant.apache.org/</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/job/Ant-Build-from-POMs/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://nowhere.net/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/bugzilla/</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/ant-dev</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf/ant.git/ant-junit</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.ant/ant-junit4@1.10.16-SNAPSHOT?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.ant</group>
      <name>ant-junit4</name>
      <version>1.10.16-SNAPSHOT</version>
      <description>contains JUnit 4.x support</description>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.ant/ant-junit4@1.10.16-SNAPSHOT?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://ant.apache.org/</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/job/Ant-Build-from-POMs/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://nowhere.net/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/bugzilla/</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/ant-dev</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf/ant.git/ant-junit4</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.ant/ant-junitlauncher@1.10.16-SNAPSHOT?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.ant</group>
      <name>ant-junitlauncher</name>
      <version>1.10.16-SNAPSHOT</version>
      <description>contains JUnit 5.x support</description>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.ant/ant-junitlauncher@1.10.16-SNAPSHOT?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://ant.apache.org/</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/job/Ant-Build-from-POMs/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://nowhere.net/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/bugzilla/</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/ant-dev</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf/ant.git/ant-junitlauncher</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.junit.platform/junit-platform-launcher@1.10.2?type=jar">
      <group>org.junit.platform</group>
      <name>junit-platform-launcher</name>
      <version>1.10.2</version>
      <description>Module "junit-platform-launcher" of JUnit 5.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">8697c2679111235abe01e66adca88773</hash>
        <hash alg="SHA-1">8125dd29e847ca274dd1a7a9ca54859acc284cb3</hash>
        <hash alg="SHA-256">aed4f42fb90ada9b347c231f13656fc09121ba20dab6dc646a6bd9d4da31e4aa</hash>
        <hash alg="SHA-512">764f1e1a978d8970524a22bf37f807d0a2b94a388abd79d23287ec931266f752e6fedf6599348fd6baf5fcef2105dddb315f680352532e8f2209b56e5d74f7ba</hash>
        <hash alg="SHA-384">36603050aae7c44b6d6ed59e648abfd22087ad75a390a02f5f081577ec583b79d889262a470b27ddc5572efb76678aa1</hash>
        <hash alg="SHA3-384">848722a651fd4b4e7de79fba326c17aa7cf1ddc1108e525a7c84cf3887b7af3435178adb349f002cb73059d20ae445ff</hash>
        <hash alg="SHA3-256">70caf603553fbe07b9219fa2e925681e8f68aa285d45ebf4cd3cefb4b643dca3</hash>
        <hash alg="SHA3-512">9732cdaf561e4290da68689acc2c46981335b1e2513a512ef70de869535dede48bf4a166106735529f1cf4d21222699789217b4997fa2bfdf785944135b9a790</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.junit.platform/junit-platform-launcher@1.10.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://junit.org/junit5/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/junit-team/junit5</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.junit.platform/junit-platform-engine@1.10.2?type=jar">
      <group>org.junit.platform</group>
      <name>junit-platform-engine</name>
      <version>1.10.2</version>
      <description>Module "junit-platform-engine" of JUnit 5.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">0bab6a13692441a957234370baae15f0</hash>
        <hash alg="SHA-1">d53bb4e0ce7f211a498705783440614bfaf0df2e</hash>
        <hash alg="SHA-256">905cba9b4998ccc29d1239085a7fb1fe0e28024d7526152356d810edec0a49a3</hash>
        <hash alg="SHA-512">5ca468aff73099673266e4e1431189023b0a660292f4f6c101dc4b03b8ab3643392731aa55455bf3a5079331a563dacda0c6b3cf3df64563ca6e0201af609e27</hash>
        <hash alg="SHA-384">7e883fc0a9cd5f3d6a792f26a43eddbe1e8e6583cedfba48690679ca43bf46482967c6e5a91c9b32f8904eaa54b7b759</hash>
        <hash alg="SHA3-384">25d922124644f344ec96487622c34c0e853c7a6a70858a3fae3572b0c03d7b7fec4f297f66d37311f87dcdf7c3c58f18</hash>
        <hash alg="SHA3-256">90615525738990e5226ec73729c052cb9ee2a8212b263c3214d71fcb28c41118</hash>
        <hash alg="SHA3-512">3cbd7d8afa9f1953fef49c010f04f47b286f0cc40ddc3766928801202cf08539919f4018ece569c251d198a1a6e3258bc48d4b2facd2bb7f2d5d675fc34c7dff</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.junit.platform/junit-platform-engine@1.10.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://junit.org/junit5/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/junit-team/junit5</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.opentest4j/opentest4j@1.3.0?type=jar">
      <group>org.opentest4j</group>
      <name>opentest4j</name>
      <version>1.3.0</version>
      <description>Open Test Alliance for the JVM</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">03c404f727531f3fd3b4c73997899327</hash>
        <hash alg="SHA-1">152ea56b3a72f655d4fd677fc0ef2596c3dd5e6e</hash>
        <hash alg="SHA-256">48e2df636cab6563ced64dcdff8abb2355627cb236ef0bf37598682ddf742f1b</hash>
        <hash alg="SHA-512">78fc698a7871bb50305e3657893c10500595f043348d875f57bc39ca4a6a51eda3967b7c8c8a7ec3e8f85f2171bca4aa98823e912e416e87e81c6ba5b70a37c3</hash>
        <hash alg="SHA-384">10398b6998c9202a0731e2e19ae1c3f9d8a83582c2663fe7bdda15794ee6fa816727dbd8f7c7164bd5395ee1cfe7c97e</hash>
        <hash alg="SHA3-384">3abe706fd78509c25a402c7bbf6f9ddf71ffb5b35054864ba0fdf7902207115f888a0ba728fd71d2e87a9360d2498121</hash>
        <hash alg="SHA3-256">d961907a1bfa1dcda329dca494ffbc251b31fabcaca5ab7095661a8ce3c1d654</hash>
        <hash alg="SHA3-512">0ad661617bcac51bcd26f7ad4611c69b1fd9811b50dbf734e041a3243ab1f845e7796620e8a7c40c4a2df3946864598b1251396c7d9bd813203d82710788cce0</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.opentest4j/opentest4j@1.3.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/ota4j-team/opentest4j</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/ota4j-team/opentest4j</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.junit.platform/junit-platform-commons@1.10.2?type=jar">
      <group>org.junit.platform</group>
      <name>junit-platform-commons</name>
      <version>1.10.2</version>
      <description>Module "junit-platform-commons" of JUnit 5.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">ae199049daca42c359e64974009025c5</hash>
        <hash alg="SHA-1">3197154a1f0c88da46c47a9ca27611ac7ec5d797</hash>
        <hash alg="SHA-256">b56a5ec000a479df4973b18bba24c98fe0db8faa14c8907d3ef451d8c71fd8ae</hash>
        <hash alg="SHA-512">aa739ee21b91fd4476aa5f9ad975f83cd440b6fbac71c8cc15816e3924710c0d70838465ee22a1b7390c2bae42ef1809868fa7ae0169b75f437cd95baac539d1</hash>
        <hash alg="SHA-384">0963ac9cf11f6312a807b4068dacd66cab7f6378445b4dc2cfd62b62dd7afe609fe389aff4fd2006cdcc564670e849af</hash>
        <hash alg="SHA3-384">64688f7803aff2ac8d536c5f9e11891f6b5bfae23580b2513ff4fde3c1f28509a27c483e91fd974e1fbca4a7cbaf3f87</hash>
        <hash alg="SHA3-256">83d491a6808587990e165c5065a7c938760065248083d9d05e81d9e4802d7764</hash>
        <hash alg="SHA3-512">1d54bed73766715b245012bce223e440703ff2fb8c7d5cfd208393060c2d63178e69e21aa739e5196599dcd1a79decf595cf142abc34ade6bd45a2b1d269f724</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.junit.platform/junit-platform-commons@1.10.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://junit.org/junit5/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/junit-team/junit5</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apiguardian/apiguardian-api@1.1.2?type=jar">
      <group>org.apiguardian</group>
      <name>apiguardian-api</name>
      <version>1.1.2</version>
      <description>@API Guardian</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">8c7de3f82037fa4a2e8be2a2f13092af</hash>
        <hash alg="SHA-1">a231e0d844d2721b0fa1b238006d15c6ded6842a</hash>
        <hash alg="SHA-256">b509448ac506d607319f182537f0b35d71007582ec741832a1f111e5b5b70b38</hash>
        <hash alg="SHA-512">d7ccd0e7019f1a997de39d66dc0ad4efe150428fdd7f4c743c93884f1602a3e90135ad34baea96d5b6d925ad6c0c8487c8e78304f0a089a12383d4a62e2c9a61</hash>
        <hash alg="SHA-384">5ae11cfedcee7da43a506a67946ddc8a7a2622284a924ba78f74541e9a22db6868a15f5d84edb91a541e38afded734ea</hash>
        <hash alg="SHA3-384">c146116b3dfd969200b2ce52d96b92dd02d6f5a45a86e7e85edf35600ddbc2f3c6e8a1ad7e2db4dcd2c398c09fad0927</hash>
        <hash alg="SHA3-256">b4b436d7f615fc0b820204e69f83c517d1c1ccc5f6b99e459209ede4482268de</hash>
        <hash alg="SHA3-512">7b95b7ac68a6891b8901b5507acd2c24a0c1e20effa63cd513764f513eab4eb55f8de5178edbe0a400c11f3a18d3f56243569d6d663100f06dd98288504c09c5</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apiguardian/apiguardian-api@1.1.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/apiguardian-team/apiguardian</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apiguardian-team/apiguardian</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.ant/ant-netrexx@1.10.16-SNAPSHOT?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.ant</group>
      <name>ant-netrexx</name>
      <version>1.10.16-SNAPSHOT</version>
      <description>NetRexxC task
    dependency can be downloaded from https://www.ibm.com/software/awdtools/netrexx/download.html</description>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.ant/ant-netrexx@1.10.16-SNAPSHOT?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://ant.apache.org/</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/job/Ant-Build-from-POMs/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://nowhere.net/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/bugzilla/</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/ant-dev</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf/ant.git/ant-netrexx</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.ant/ant-swing@1.10.16-SNAPSHOT?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.ant</group>
      <name>ant-swing</name>
      <version>1.10.16-SNAPSHOT</version>
      <description>a listener and a splash task based on Swing</description>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.ant/ant-swing@1.10.16-SNAPSHOT?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://ant.apache.org/</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/job/Ant-Build-from-POMs/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://nowhere.net/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/bugzilla/</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/ant-dev</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf/ant.git/ant-swing</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.ant/ant-testutil@1.10.16-SNAPSHOT?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.ant</group>
      <name>ant-testutil</name>
      <version>1.10.16-SNAPSHOT</version>
      <description>test utility classes</description>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.ant/ant-testutil@1.10.16-SNAPSHOT?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://ant.apache.org/</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/job/Ant-Build-from-POMs/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://nowhere.net/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/bugzilla/</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/ant-dev</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf/ant.git/ant-testutil</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.ant/ant-xz@1.10.16-SNAPSHOT?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.ant</group>
      <name>ant-xz</name>
      <version>1.10.16-SNAPSHOT</version>
      <description>contains the xz compression support</description>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.ant/ant-xz@1.10.16-SNAPSHOT?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://ant.apache.org/</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/job/Ant-Build-from-POMs/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://nowhere.net/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/bugzilla/</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/ant-dev</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf/ant.git/ant-xz</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.tukaani/xz@1.9?type=jar">
      <group>org.tukaani</group>
      <name>xz</name>
      <version>1.9</version>
      <description>XZ data compression</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">57c2fbfeb55e307ccae52e5322082e02</hash>
        <hash alg="SHA-1">1ea4bec1a921180164852c65006d928617bd2caf</hash>
        <hash alg="SHA-256">211b306cfc44f8f96df3a0a3ddaf75ba8c5289eed77d60d72f889bb855f535e5</hash>
        <hash alg="SHA-512">a4362db234d4e83683e90f5baf90c82107450cc4404acab96e3fab14b8a3d4588a19722171d32f27d18463682a6994cad9af0b1065c954e3a77ea7bdcf586bac</hash>
        <hash alg="SHA-384">aa30349b094723369908369a18e2cb5beb5b7ca0b24b4d56c2f5725fae152220f6526466672b22bfec939e2e0622a01d</hash>
        <hash alg="SHA3-384">b3e1fee7784188df5e1931c9e8137ac0e20e63f66f93e7f938a448fc0b3adb4be5205c7a5f1835007e233fee2696fc2c</hash>
        <hash alg="SHA3-256">92eff603ed0aab557e1a45e17a74e80d8ec656b5f137197b23c429c903fa448f</hash>
        <hash alg="SHA3-512">b290f92958f8cd91705331d8411140c23957ab8b568fbe19a70f4f1dc97eddc13d3a200df28a02ab5911ce18f546c33f720878be0f727edac839a6e63ee66ece</hash>
      </hashes>
      <licenses>
        <license>
          <name>Public Domain</name>
        </license>
      </licenses>
      <purl>pkg:maven/org.tukaani/xz@1.9?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://tukaani.org/xz/java.html</url>
        </reference>
        <reference type="vcs">
          <url>https://git.tukaani.org/?p=xz-java.git</url>
        </reference>
      </externalReferences>
    </component>
  </components>
  <dependencies>
    <dependency ref="pkg:maven/org.apache.ant/ant-parent@1.10.16-SNAPSHOT?type=pom">
      <dependency ref="pkg:maven/org.apache.ant/ant-launcher@1.10.16-SNAPSHOT?type=jar"/>
      <dependency ref="pkg:maven/org.apache.ant/ant@1.10.16-SNAPSHOT?type=jar"/>
      <dependency ref="pkg:maven/org.apache.ant/ant-antlr@1.10.16-SNAPSHOT?type=jar"/>
      <dependency ref="pkg:maven/org.apache.ant/ant-apache-bcel@1.10.16-SNAPSHOT?type=jar"/>
      <dependency ref="pkg:maven/org.apache.ant/ant-apache-bsf@1.10.16-SNAPSHOT?type=jar"/>
      <dependency ref="pkg:maven/org.apache.ant/ant-apache-log4j@1.10.16-SNAPSHOT?type=jar"/>
      <dependency ref="pkg:maven/org.apache.ant/ant-apache-oro@1.10.16-SNAPSHOT?type=jar"/>
      <dependency ref="pkg:maven/org.apache.ant/ant-apache-regexp@1.10.16-SNAPSHOT?type=jar"/>
      <dependency ref="pkg:maven/org.apache.ant/ant-apache-resolver@1.10.16-SNAPSHOT?type=jar"/>
      <dependency ref="pkg:maven/org.apache.ant/ant-apache-xalan2@1.10.16-SNAPSHOT?type=jar"/>
      <dependency ref="pkg:maven/org.apache.ant/ant-commons-logging@1.10.16-SNAPSHOT?type=jar"/>
      <dependency ref="pkg:maven/org.apache.ant/ant-commons-net@1.10.16-SNAPSHOT?type=jar"/>
      <dependency ref="pkg:maven/org.apache.ant/ant-imageio@1.10.16-SNAPSHOT?type=jar"/>
      <dependency ref="pkg:maven/org.apache.ant/ant-jai@1.10.16-SNAPSHOT?type=jar"/>
      <dependency ref="pkg:maven/org.apache.ant/ant-javamail@1.10.16-SNAPSHOT?type=jar"/>
      <dependency ref="pkg:maven/org.apache.ant/ant-jakartamail@1.10.16-SNAPSHOT?type=jar"/>
      <dependency ref="pkg:maven/org.apache.ant/ant-jdepend@1.10.16-SNAPSHOT?type=jar"/>
      <dependency ref="pkg:maven/org.apache.ant/ant-jmf@1.10.16-SNAPSHOT?type=jar"/>
      <dependency ref="pkg:maven/org.apache.ant/ant-jsch@1.10.16-SNAPSHOT?type=jar"/>
      <dependency ref="pkg:maven/org.apache.ant/ant-junit@1.10.16-SNAPSHOT?type=jar"/>
      <dependency ref="pkg:maven/org.apache.ant/ant-junit4@1.10.16-SNAPSHOT?type=jar"/>
      <dependency ref="pkg:maven/org.apache.ant/ant-junitlauncher@1.10.16-SNAPSHOT?type=jar"/>
      <dependency ref="pkg:maven/org.apache.ant/ant-netrexx@1.10.16-SNAPSHOT?type=jar"/>
      <dependency ref="pkg:maven/org.apache.ant/ant-swing@1.10.16-SNAPSHOT?type=jar"/>
      <dependency ref="pkg:maven/org.apache.ant/ant-testutil@1.10.16-SNAPSHOT?type=jar"/>
      <dependency ref="pkg:maven/org.apache.ant/ant-xz@1.10.16-SNAPSHOT?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.ant/ant-launcher@1.10.16-SNAPSHOT?type=jar"/>
    <dependency ref="pkg:maven/org.apache.ant/ant@1.10.16-SNAPSHOT?type=jar">
      <dependency ref="pkg:maven/org.apache.ant/ant-launcher@1.10.16-SNAPSHOT?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.ant/ant-antlr@1.10.16-SNAPSHOT?type=jar">
      <dependency ref="pkg:maven/org.apache.ant/ant@1.10.16-SNAPSHOT?type=jar"/>
      <dependency ref="pkg:maven/antlr/antlr@2.7.7?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/antlr/antlr@2.7.7?type=jar"/>
    <dependency ref="pkg:maven/org.apache.ant/ant-apache-bcel@1.10.16-SNAPSHOT?type=jar">
      <dependency ref="pkg:maven/org.apache.ant/ant@1.10.16-SNAPSHOT?type=jar"/>
      <dependency ref="pkg:maven/org.apache.bcel/bcel@6.9.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.bcel/bcel@6.9.0?type=jar">
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.ant/ant-apache-bsf@1.10.16-SNAPSHOT?type=jar">
      <dependency ref="pkg:maven/org.apache.ant/ant@1.10.16-SNAPSHOT?type=jar"/>
      <dependency ref="pkg:maven/bsf/bsf@2.4.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/bsf/bsf@2.4.0?type=jar">
      <dependency ref="pkg:maven/commons-logging/commons-logging@1.0.4?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/commons-logging/commons-logging@1.0.4?type=jar"/>
    <dependency ref="pkg:maven/org.apache.ant/ant-apache-log4j@1.10.16-SNAPSHOT?type=jar">
      <dependency ref="pkg:maven/org.apache.ant/ant@1.10.16-SNAPSHOT?type=jar"/>
      <dependency ref="pkg:maven/log4j/log4j@1.2.17?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/log4j/log4j@1.2.17?type=jar"/>
    <dependency ref="pkg:maven/org.apache.ant/ant-apache-oro@1.10.16-SNAPSHOT?type=jar">
      <dependency ref="pkg:maven/org.apache.ant/ant@1.10.16-SNAPSHOT?type=jar"/>
      <dependency ref="pkg:maven/oro/oro@2.0.8?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/oro/oro@2.0.8?type=jar"/>
    <dependency ref="pkg:maven/org.apache.ant/ant-apache-regexp@1.10.16-SNAPSHOT?type=jar">
      <dependency ref="pkg:maven/org.apache.ant/ant@1.10.16-SNAPSHOT?type=jar"/>
      <dependency ref="pkg:maven/jakarta-regexp/jakarta-regexp@1.4?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/jakarta-regexp/jakarta-regexp@1.4?type=jar"/>
    <dependency ref="pkg:maven/org.apache.ant/ant-apache-resolver@1.10.16-SNAPSHOT?type=jar">
      <dependency ref="pkg:maven/org.apache.ant/ant@1.10.16-SNAPSHOT?type=jar"/>
      <dependency ref="pkg:maven/xml-resolver/xml-resolver@1.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/xml-resolver/xml-resolver@1.2?type=jar"/>
    <dependency ref="pkg:maven/org.apache.ant/ant-apache-xalan2@1.10.16-SNAPSHOT?type=jar">
      <dependency ref="pkg:maven/org.apache.ant/ant@1.10.16-SNAPSHOT?type=jar"/>
      <dependency ref="pkg:maven/xalan/xalan@2.7.3?type=jar"/>
      <dependency ref="pkg:maven/xalan/serializer@2.7.3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/xalan/xalan@2.7.3?type=jar"/>
    <dependency ref="pkg:maven/xalan/serializer@2.7.3?type=jar"/>
    <dependency ref="pkg:maven/org.apache.ant/ant-commons-logging@1.10.16-SNAPSHOT?type=jar">
      <dependency ref="pkg:maven/org.apache.ant/ant@1.10.16-SNAPSHOT?type=jar"/>
      <dependency ref="pkg:maven/commons-logging/commons-logging-api@1.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/commons-logging/commons-logging-api@1.1?type=jar"/>
    <dependency ref="pkg:maven/org.apache.ant/ant-commons-net@1.10.16-SNAPSHOT?type=jar">
      <dependency ref="pkg:maven/org.apache.ant/ant@1.10.16-SNAPSHOT?type=jar"/>
      <dependency ref="pkg:maven/commons-net/commons-net@3.10.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/commons-net/commons-net@3.10.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.ant/ant-imageio@1.10.16-SNAPSHOT?type=jar">
      <dependency ref="pkg:maven/org.apache.ant/ant@1.10.16-SNAPSHOT?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.ant/ant-jai@1.10.16-SNAPSHOT?type=jar">
      <dependency ref="pkg:maven/org.apache.ant/ant@1.10.16-SNAPSHOT?type=jar"/>
      <dependency ref="pkg:maven/javax.media/jai-core@1.1.3?type=jar"/>
      <dependency ref="pkg:maven/com.sun.media/jai-codec@1.1.3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/javax.media/jai-core@1.1.3?type=jar"/>
    <dependency ref="pkg:maven/com.sun.media/jai-codec@1.1.3?type=jar">
      <dependency ref="pkg:maven/javax.media/jai-core@1.1.3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.ant/ant-javamail@1.10.16-SNAPSHOT?type=jar">
      <dependency ref="pkg:maven/org.apache.ant/ant@1.10.16-SNAPSHOT?type=jar"/>
      <dependency ref="pkg:maven/com.sun.mail/javax.mail@1.6.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.sun.mail/javax.mail@1.6.2?type=jar">
      <dependency ref="pkg:maven/javax.activation/activation@1.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/javax.activation/activation@1.1?type=jar"/>
    <dependency ref="pkg:maven/org.apache.ant/ant-jakartamail@1.10.16-SNAPSHOT?type=jar">
      <dependency ref="pkg:maven/org.apache.ant/ant@1.10.16-SNAPSHOT?type=jar"/>
      <dependency ref="pkg:maven/com.sun.mail/jakarta.mail@2.0.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.sun.mail/jakarta.mail@2.0.1?type=jar">
      <dependency ref="pkg:maven/com.sun.activation/jakarta.activation@2.0.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.sun.activation/jakarta.activation@2.0.1?type=jar"/>
    <dependency ref="pkg:maven/org.apache.ant/ant-jdepend@1.10.16-SNAPSHOT?type=jar">
      <dependency ref="pkg:maven/org.apache.ant/ant@1.10.16-SNAPSHOT?type=jar"/>
      <dependency ref="pkg:maven/jdepend/jdepend@2.9.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/jdepend/jdepend@2.9.1?type=jar"/>
    <dependency ref="pkg:maven/org.apache.ant/ant-jmf@1.10.16-SNAPSHOT?type=jar">
      <dependency ref="pkg:maven/org.apache.ant/ant@1.10.16-SNAPSHOT?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.ant/ant-jsch@1.10.16-SNAPSHOT?type=jar">
      <dependency ref="pkg:maven/org.apache.ant/ant@1.10.16-SNAPSHOT?type=jar"/>
      <dependency ref="pkg:maven/com.jcraft/jsch@0.1.55?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.jcraft/jsch@0.1.55?type=jar"/>
    <dependency ref="pkg:maven/org.apache.ant/ant-junit@1.10.16-SNAPSHOT?type=jar">
      <dependency ref="pkg:maven/org.apache.ant/ant@1.10.16-SNAPSHOT?type=jar"/>
      <dependency ref="pkg:maven/junit/junit@4.13.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/junit/junit@4.13.2?type=jar">
      <dependency ref="pkg:maven/org.hamcrest/hamcrest-core@1.3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.hamcrest/hamcrest-core@1.3?type=jar"/>
    <dependency ref="pkg:maven/org.apache.ant/ant-junit4@1.10.16-SNAPSHOT?type=jar">
      <dependency ref="pkg:maven/org.apache.ant/ant@1.10.16-SNAPSHOT?type=jar"/>
      <dependency ref="pkg:maven/junit/junit@4.13.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.ant/ant-junitlauncher@1.10.16-SNAPSHOT?type=jar">
      <dependency ref="pkg:maven/org.apache.ant/ant@1.10.16-SNAPSHOT?type=jar"/>
      <dependency ref="pkg:maven/org.junit.platform/junit-platform-launcher@1.10.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.junit.platform/junit-platform-launcher@1.10.2?type=jar">
      <dependency ref="pkg:maven/org.junit.platform/junit-platform-engine@1.10.2?type=jar"/>
      <dependency ref="pkg:maven/org.apiguardian/apiguardian-api@1.1.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.junit.platform/junit-platform-engine@1.10.2?type=jar">
      <dependency ref="pkg:maven/org.opentest4j/opentest4j@1.3.0?type=jar"/>
      <dependency ref="pkg:maven/org.junit.platform/junit-platform-commons@1.10.2?type=jar"/>
      <dependency ref="pkg:maven/org.apiguardian/apiguardian-api@1.1.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.opentest4j/opentest4j@1.3.0?type=jar"/>
    <dependency ref="pkg:maven/org.junit.platform/junit-platform-commons@1.10.2?type=jar">
      <dependency ref="pkg:maven/org.apiguardian/apiguardian-api@1.1.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apiguardian/apiguardian-api@1.1.2?type=jar"/>
    <dependency ref="pkg:maven/org.apache.ant/ant-netrexx@1.10.16-SNAPSHOT?type=jar">
      <dependency ref="pkg:maven/org.apache.ant/ant@1.10.16-SNAPSHOT?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.ant/ant-swing@1.10.16-SNAPSHOT?type=jar">
      <dependency ref="pkg:maven/org.apache.ant/ant@1.10.16-SNAPSHOT?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.ant/ant-testutil@1.10.16-SNAPSHOT?type=jar">
      <dependency ref="pkg:maven/org.apache.ant/ant@1.10.16-SNAPSHOT?type=jar"/>
      <dependency ref="pkg:maven/junit/junit@4.13.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.ant/ant-xz@1.10.16-SNAPSHOT?type=jar">
      <dependency ref="pkg:maven/org.apache.ant/ant@1.10.16-SNAPSHOT?type=jar"/>
      <dependency ref="pkg:maven/org.tukaani/xz@1.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.tukaani/xz@1.9?type=jar"/>
  </dependencies>
</bom>
