{ "bomFormat" : "CycloneDX", "specVersion" : "1.6", "serialNumber" : "urn:uuid:1444888e-8926-316d-8c71-7175941c8769", "version" : 1, "metadata" : { "lifecycles" : [ { "phase" : "build" } ], "tools" : { "components" : [ { "type" : "library", "author" : "OWASP Foundation", "group" : "org.cyclonedx", "name" : "cyclonedx-maven-plugin", "version" : "2.9.2", "description" : "CycloneDX Maven plugin", "hashes" : [ { "alg" : "MD5", "content" : "843a7130400f75d33f563dc7e9f52dea" }, { "alg" : "SHA-1", "content" : "2cac5a176b9f48801dfc4910d4f6a34bfbb13445" }, { "alg" : "SHA-256", "content" : "d9e5a12bac3c1a91d85f3a1ad84307099f457ff24aa65b438ba7de9ca784a54e" }, { "alg" : "SHA-512", "content" : "636f788518752c5a23d14bad41d68b0d549e4b3a3d720d66f2f6e2b8b956207942ee12abba968a1e9aac6cf1d78d9e738a4a75eeb8bc6fca2377030fbb482407" }, { "alg" : "SHA-384", "content" : "72aad41633b92fadd4dbd1c6f5c1b956836b22d3b96afbdd7ca8b8eb0456eec00c2ed658e3c2d4e93d95048bcc23dac8" }, { "alg" : "SHA3-384", "content" : "9837cee0f9b7d575f8d88df3ad6f58a075032ad2635e0987abbc102240327f1cec87dc062b3034009f028ab5baf988f9" }, { "alg" : "SHA3-256", "content" : "4c654267cde6eb6d295dbc06b33e33528412bee57549dae89c85b8df8202dbcb" }, { "alg" : "SHA3-512", "content" : "f7da73632ef2fd1c2d85f0cf5eebc2b6a3ff1ae2ed0945442e679da71490562a2ff6b67422dbd5285f4042eda6637e6f3544f62825a625b38efacfdebc8df137" } ] } ] }, "component" : { "type" : "library", "bom-ref" : "pkg:maven/net.sourceforge.pmd/pmd-java@7.26.0?type=jar", "publisher" : "PMD", "group" : "net.sourceforge.pmd", "name" : "pmd-java", "version" : "7.26.0", "description" : "PMD is an extensible multilanguage static code analyzer. It finds common programming flaws like unused variables, empty catch blocks, unnecessary object creation, and so forth. It's mainly concerned with Java and Apex, but supports 16 other languages. It comes with 400+ built-in rules. It can be extended with custom rules. It uses JavaCC and Antlr to parse source files into abstract syntax trees (AST) and runs rules against them to find violations. Rules can be written in Java or using a XPath query. Currently, PMD supports Java, JavaScript, Salesforce.com Apex and Visualforce, Kotlin, Swift, Modelica, PL/SQL, Apache Velocity, JSP, WSDL, Maven POM, HTML, XML and XSL. Scala is supported, but there are currently no Scala rules available. Additionally, it includes CPD, the copy-paste-detector. CPD finds duplicated code in Coco, C/C++, C#, CSS, Dart, Fortran, Gherkin, Go, Groovy, HTML, Java, JavaScript, JSP, Julia, Kotlin, Lua, Matlab, Modelica, Objective-C, Perl, PHP, PL/SQL, Python, Ruby, Rust, Salesforce.com Apex and Visualforce, Scala, Swift, T-SQL, Typescript, Apache Velocity, WSDL, XML and XSL.", "licenses" : [ { "license" : { "name" : "BSD-style", "url" : "http://pmd.sourceforge.net/license.html" } } ], "purl" : "pkg:maven/net.sourceforge.pmd/pmd-java@7.26.0?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://pmd.github.io/pmd-java/" }, { "type" : "build-system", "url" : "https://github.com/pmd/pmd/actions" }, { "type" : "issue-tracker", "url" : "https://github.com/pmd/pmd/issues" }, { "type" : "mailing-list", "url" : "https://sourceforge.net/p/pmd/mailman/pmd-devel" }, { "type" : "vcs", "url" : "https://github.com/pmd/pmd/pmd-java" } ] }, "properties" : [ { "name" : "maven.goal", "value" : "makeBom" }, { "name" : "maven.scopes", "value" : "compile,provided,runtime,system" }, { "name" : "cdx:reproducible", "value" : "enabled" } ] }, "components" : [ { "type" : "library", "bom-ref" : "pkg:maven/net.sourceforge.pmd/pmd-core@7.26.0?type=jar", "publisher" : "PMD", "group" : "net.sourceforge.pmd", "name" : "pmd-core", "version" : "7.26.0", "description" : "PMD is an extensible multilanguage static code analyzer. It finds common programming flaws like unused variables, empty catch blocks, unnecessary object creation, and so forth. It's mainly concerned with Java and Apex, but supports 16 other languages. It comes with 400+ built-in rules. It can be extended with custom rules. It uses JavaCC and Antlr to parse source files into abstract syntax trees (AST) and runs rules against them to find violations. Rules can be written in Java or using a XPath query. Currently, PMD supports Java, JavaScript, Salesforce.com Apex and Visualforce, Kotlin, Swift, Modelica, PL/SQL, Apache Velocity, JSP, WSDL, Maven POM, HTML, XML and XSL. Scala is supported, but there are currently no Scala rules available. Additionally, it includes CPD, the copy-paste-detector. CPD finds duplicated code in Coco, C/C++, C#, CSS, Dart, Fortran, Gherkin, Go, Groovy, HTML, Java, JavaScript, JSP, Julia, Kotlin, Lua, Matlab, Modelica, Objective-C, Perl, PHP, PL/SQL, Python, Ruby, Rust, Salesforce.com Apex and Visualforce, Scala, Swift, T-SQL, Typescript, Apache Velocity, WSDL, XML and XSL.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "e48f18e1f2aac286818f2953279b0775" }, { "alg" : "SHA-1", "content" : "631aa2a18e44c776ce5c9cb8443b80fadd27d54c" }, { "alg" : "SHA-256", "content" : "92fe6f87ed747c558599a6601003e525d4eda4801eb7c132686d7d074d5c2b6e" }, { "alg" : "SHA-512", "content" : "848ef7b759aeb2d885fa98351b4ece408d512dd95eb5067a3cad50cd971960adb2ffa528f23464740e793044d994189ae0331017efb29bb806eab69d61259bba" }, { "alg" : "SHA-384", "content" : "76e51527aa5dcdcf75355fb9a07ccc89c3c3af79b90103dec0e1e62cb3484a11b6275658ffbd4a1dab4efad7c4a30ed8" }, { "alg" : "SHA3-384", "content" : "7e801185f519725c2962a81eec5b0a401cb632a32a6e520c0cc4b0b92665fe7cd663d66ae038067b01ec022fc46103f1" }, { "alg" : "SHA3-256", "content" : "7f1c5dc6c506d59be8bbaf9182d8b163199a5acec4910cd942807b4b1f6702a2" }, { "alg" : "SHA3-512", "content" : "f93ef99bfe490499a05adf535388181736bc3b4a36189c461aa3dc9b90f0cccbf31f79a3589bf20f5855d285b4018b25b7dabb7a4872cad27d9c3108d2efac96" } ], "licenses" : [ { "license" : { "name" : "BSD-style", "url" : "http://pmd.sourceforge.net/license.html" } } ], "purl" : "pkg:maven/net.sourceforge.pmd/pmd-core@7.26.0?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://pmd.github.io/pmd-core/" }, { "type" : "build-system", "url" : "https://github.com/pmd/pmd/actions" }, { "type" : "issue-tracker", "url" : "https://github.com/pmd/pmd/issues" }, { "type" : "mailing-list", "url" : "https://sourceforge.net/p/pmd/mailman/pmd-devel" }, { "type" : "vcs", "url" : "https://github.com/pmd/pmd/pmd-core" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar", "publisher" : "QOS.ch", "group" : "org.slf4j", "name" : "slf4j-api", "version" : "1.7.36", "description" : "The slf4j API", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "872da51f5de7f3923da4de871d57fd85" }, { "alg" : "SHA-1", "content" : "6c62681a2f655b49963a5983b8b0950a6120ae14" }, { "alg" : "SHA-256", "content" : "d3ef575e3e4979678dc01bf1dcce51021493b4d11fb7f1be8ad982877c16a1c0" }, { "alg" : "SHA-512", "content" : "f9b033fc019a44f98b16048da7e2b59edd4a6a527ba60e358f65ab88e0afae03a9340f1b3e8a543d49fa542290f499c5594259affa1ff3e6e7bf3b428d4c610b" }, { "alg" : "SHA-384", "content" : "2b14ad035877087157e379d3277dcdcd79e58d6bdb147c47d29e377d75ce53ad42cafbf22f5fb7827c7e946ff4876b9a" }, { "alg" : "SHA3-384", "content" : "3bc3110dafb8d5be16a39f3b2671a466463cd99eb39610c0e4719a7bf2d928f2ea213c734887c6926a07c4cca7769e4b" }, { "alg" : "SHA3-256", "content" : "ba2608179fcf46e2291a90b9cbb4aa30d718e481f59c350cc21c73b88d826881" }, { "alg" : "SHA3-512", "content" : "14c4edcd19702ef607d78826839d8a6d3a39157df54b89a801d3d3cbbe1307131a77671b041c761122730fb1387888c5ec2e46bdd80e1cb07f8f144676441824" } ], "licenses" : [ { "license" : { "id" : "MIT", "url" : "https://opensource.org/license/mit/" } } ], "purl" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar", "externalReferences" : [ { "type" : "website", "url" : "http://www.slf4j.org" }, { "type" : "distribution-intake", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "vcs", "url" : "https://github.com/qos-ch/slf4j/slf4j-api" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/org.slf4j/jul-to-slf4j@1.7.36?type=jar", "publisher" : "QOS.ch", "group" : "org.slf4j", "name" : "jul-to-slf4j", "version" : "1.7.36", "description" : "JUL to SLF4J bridge", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "2a3fe73e6cafe8f102facaf2dd65353f" }, { "alg" : "SHA-1", "content" : "ed46d81cef9c412a88caef405b58f93a678ff2ca" }, { "alg" : "SHA-256", "content" : "9e641fb142c5f0b0623d6222c09ea87523a41bf6bed48ac79940724010b989de" }, { "alg" : "SHA-512", "content" : "0bb1e7343d07d41bcfb0c1ffeb2db28cbb35e7a80a409b80042f463b082a292976f09d719e319471e31c7bab716121728a16509fd385fc6e3b400b1b214cffea" }, { "alg" : "SHA-384", "content" : "50e2f326fc00537a5fb3726c7c55556851b3be8b4346f522f27ddecf2fdb44adabae3197b30ccfd854c37d6734adbd8f" }, { "alg" : "SHA3-384", "content" : "4ad0c3870852ac44530a9dcb992d947cd8708ee6f422559da41aaaa8b22d1610fb116b32d2c54df83b110b85487083bf" }, { "alg" : "SHA3-256", "content" : "8e3f5aaaa27f618b52e610376d2a16c6f9dc8dce5e6c2bbe42131a590626aae6" }, { "alg" : "SHA3-512", "content" : "e3da265406b5e69f02235ed7272a48f71cb8b6f0a696820e28e90fb5eafeeb311abf2a4e779b402f384c6a80470fd41116ee52a526f57040fae3b24cb3b19c01" } ], "licenses" : [ { "license" : { "id" : "MIT", "url" : "https://opensource.org/license/mit/" } } ], "purl" : "pkg:maven/org.slf4j/jul-to-slf4j@1.7.36?type=jar", "externalReferences" : [ { "type" : "website", "url" : "http://www.slf4j.org" }, { "type" : "distribution-intake", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "vcs", "url" : "https://github.com/qos-ch/slf4j/jul-to-slf4j" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/org.antlr/antlr4-runtime@4.13.2?type=jar", "publisher" : "ANTLR", "group" : "org.antlr", "name" : "antlr4-runtime", "version" : "4.13.2", "description" : "The ANTLR 4 Runtime", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "eecf1908f0cfff10f8bb82878b5ca401" }, { "alg" : "SHA-1", "content" : "fc3db6d844df652a3d5db31c87fa12757f13691d" }, { "alg" : "SHA-256", "content" : "dd3e8a13a2d669bf84fb8d834de35ce4875f27157698d206241ec8488aadcaf7" }, { "alg" : "SHA-512", "content" : "1c3e47b6b5dc40ca13927a7ae2ed187f470b8f406cea325e73c7a18af8e07b9ada0484312dd611f225f030b5585924932c702fd9326c143a626e271682b2b95e" }, { "alg" : "SHA-384", "content" : "f49c2395e16fe71fa35622bcca225c0910609ef09626207ce4522c73c760fd232489489ea88d54c88fc21b05a03031e0" }, { "alg" : "SHA3-384", "content" : "322345326586e3f8954e80efa80b510228a7eb06f6d7283177f04809c15aad1722c700897c8c8f405955946b63808bc0" }, { "alg" : "SHA3-256", "content" : "2d39db66ce6dc530c7796f75d646f4d8316586e2acd0756524c25b238eb71618" }, { "alg" : "SHA3-512", "content" : "a4cdaec49dff4a6963a0db56712a837db7300de7145335b915ffc2234b0d53d6f9fd4b1d6e82c4350e22fee9390ca643cfbf7f51ff47a11bc44561b6686be32b" } ], "licenses" : [ { "license" : { "id" : "BSD-3-Clause", "url" : "https://opensource.org/licenses/BSD-3-Clause" } } ], "purl" : "pkg:maven/org.antlr/antlr4-runtime@4.13.2?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://www.antlr.org/antlr4-runtime/" }, { "type" : "distribution-intake", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "issue-tracker", "url" : "https://github.com/antlr/antlr4/issues" }, { "type" : "mailing-list", "url" : "https://groups.google.com/forum/?fromgroups#!forum/antlr-discussion" }, { "type" : "vcs", "url" : "https://github.com/antlr/antlr4/tree/master/antlr4-runtime" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/com.google.code.gson/gson@2.14.0?type=jar", "group" : "com.google.code.gson", "name" : "gson", "version" : "2.14.0", "description" : "Gson JSON library", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "43b20830936ec97d8df6b174e3509d9e" }, { "alg" : "SHA-1", "content" : "efc0e34ede4e3204eaefb84a00e55e8c86634382" }, { "alg" : "SHA-256", "content" : "2cbd119bf1961c28788310963dc80ba65f58cdeec1dd139c8bdb1240faa2c36f" }, { "alg" : "SHA-512", "content" : "d040d19a47ca2df33365493f9813a1d0a40b91685f7d87ca445b98d37b4c1b801314aef87940dc8b43dd1b0b96f6d5e6e4296778bf1af8dbfb1091425b37da21" }, { "alg" : "SHA-384", "content" : "fb3f4db322b691e37e48df3eda60b8a216d1136619f9e354aa5e3ee7aa0b4afab985ae9510c16a6fe05ea674417b4cd6" }, { "alg" : "SHA3-384", "content" : "7943b642d76b35f1e322ec7753c4de85cecc233d4cbd79582e93cf3551896c436f3bcc1166f51789470dec715f515312" }, { "alg" : "SHA3-256", "content" : "46eafa830748a2fde4dc595d2aaf94417bc2956570f8406dc000b323738f8764" }, { "alg" : "SHA3-512", "content" : "ba3abdb15073b5159782f05dbc440b76139d1d129d80a5cf98b035c399a405dec39b9c7fa7e6d8e5a2676f10fda63ed8b817538a8504ef381992a91fa1832b68" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0", "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], "purl" : "pkg:maven/com.google.code.gson/gson@2.14.0?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://github.com/google/gson" }, { "type" : "issue-tracker", "url" : "https://github.com/google/gson/issues" }, { "type" : "vcs", "url" : "https://github.com/google/gson/" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/com.github.oowekyala.ooxml/nice-xml-messages@3.1?type=jar", "group" : "com.github.oowekyala.ooxml", "name" : "nice-xml-messages", "version" : "3.1", "description" : "Associates XML DOM nodes to their position in source, to enrich error messages. This builds on top of the standard org.w3c.dom API. Should probably not be used in performance critical code, but can hopefully cleanup reporting logic in places where user-friendly messages are important.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "39c913451ff2d2ec740c58a77a26fa16" }, { "alg" : "SHA-1", "content" : "4c3863b0f015af5cfd9abe02fab364fb99867167" }, { "alg" : "SHA-256", "content" : "0b4ceb5b8362d43c9c6c49b1bd57f1c5da54d3c5c7c305fa39c0a04462bb4799" }, { "alg" : "SHA-512", "content" : "6b3e7c2f1d4b9a46c8dc113b60deee5e2a70b57f308886074816e0d7e3a5460cfb7c1c547171c0ad125deb551bafbb41b911c52db8bac448be3504b0d407a7fc" }, { "alg" : "SHA-384", "content" : "c79cd24010cfcfcc712509412dacbfb5bcc4a64e98bfd6a638698350c4f45c1a2c6724491368cc56a4d5947cbe0482e1" }, { "alg" : "SHA3-384", "content" : "218130aec89a116471d0dd34b9c733f144e36f1cbcd2b705fea4ed2f7fb90e8c6a5386aaff037bc772e180868b13c03f" }, { "alg" : "SHA3-256", "content" : "02b4007b4ada909e9bb676189310b233c8c2c254e2bdc901928030ef0f96f346" }, { "alg" : "SHA3-512", "content" : "f2e7883ab42ba31eb380ed9dc7199f3d7d4b0c0c8b06432ebe502c6e117017abdd579f86032a14bf842fb68889a13d1bd504a60a212f889e171e78003c0322a0" } ], "licenses" : [ { "license" : { "id" : "MIT", "url" : "https://opensource.org/license/mit/" } } ], "purl" : "pkg:maven/com.github.oowekyala.ooxml/nice-xml-messages@3.1?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://github.com/oowekyala/nice-xml-messages" }, { "type" : "distribution-intake", "url" : "https://s01.oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "vcs", "url" : "https://github.com/oowekyala/nice-xml-messages" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/org.ow2.asm/asm@9.10.1?type=jar", "publisher" : "OW2", "group" : "org.ow2.asm", "name" : "asm", "version" : "9.10.1", "description" : "ASM, a very small and fast Java bytecode manipulation framework", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "9cb72080438acf27f2607002e1444a7b" }, { "alg" : "SHA-1", "content" : "ada2141c0cc52ee8f5c48cd5fa4ce0e794f22236" }, { "alg" : "SHA-256", "content" : "ed825d10ab1399c8c0cb669e688cf0c8c82629b4c8399b58352b68e92ca10fcb" }, { "alg" : "SHA-512", "content" : "8db6efa37d4d569bf2b95d90931b8064f87ed928d20bbf8d8e7fa6182e9a11d32e6a2cc034a3d173a38ee70ce2ea9f20f52f9d8730d9401d2bc6060674c18928" }, { "alg" : "SHA-384", "content" : "451863dca686c04151bef6e632df2ee3c8c67ca97d191cdee3d7c4f9350f8a096011cadc1c79b4ba012b3f2179ef2bbe" }, { "alg" : "SHA3-384", "content" : "faa7b5fa7a5fefaae6d320ad43c09d588d6deecd41b2a3ebec36a4143a2b90373b2d01936c0733413a01f451c9740bc8" }, { "alg" : "SHA3-256", "content" : "e37aa694329cbbfcd0a81a735270166386aceff3797af2c391fd8484baa5a576" }, { "alg" : "SHA3-512", "content" : "1d660ebc24411c38b0928b543f402e7cb09747b7c522047f36b57865acfb83d25c9348c1d70af78e3d26e1ad220f10055d63eeb2965f7b6966cb2fbd29b47671" } ], "licenses" : [ { "license" : { "id" : "BSD-3-Clause", "url" : "https://opensource.org/licenses/BSD-3-Clause" } } ], "purl" : "pkg:maven/org.ow2.asm/asm@9.10.1?type=jar", "externalReferences" : [ { "type" : "website", "url" : "http://asm.ow2.io/" }, { "type" : "distribution-intake", "url" : "https://repository.ow2.org/nexus/service/local/staging/deploy/maven2" }, { "type" : "issue-tracker", "url" : "https://gitlab.ow2.org/asm/asm/issues" }, { "type" : "mailing-list", "url" : "https://mail.ow2.org/wws/arc/asm/" }, { "type" : "vcs", "url" : "https://gitlab.ow2.org/asm/asm/" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/org.apache.commons/commons-lang3@3.20.0?type=jar", "publisher" : "The Apache Software Foundation", "group" : "org.apache.commons", "name" : "commons-lang3", "version" : "3.20.0", "description" : "Apache Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang. The code is tested using the latest revision of the JDK for supported LTS releases: 8, 11, 17, 21 and 25 currently. See https://github.com/apache/commons-lang/blob/master/.github/workflows/maven.yml Please ensure your build environment is up-to-date and kindly report any build issues.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "4b29562ded527aa074e1d44f8646dac5" }, { "alg" : "SHA-1", "content" : "65897b3e5731220962e659e001904af3c3cbeba9" }, { "alg" : "SHA-256", "content" : "69e5c9fa35da7a51a5fd2099dfe56a2d8d32cf233e2f6d770e796146440263f4" }, { "alg" : "SHA-512", "content" : "1c72db334ea44f932c35e602b78907865f5bab43e30c871c9be67c8184eaa778f32d7bc3ab525d5921cd28619d3f9babfd483f17de54f007ee07db2e074b0307" }, { "alg" : "SHA-384", "content" : "77dd27c4d5e9372c002bd6878d2cfaaec3cf46dd57d65de63d7f2e09351344531cfa81a537b56628ac6db18adee7e484" }, { "alg" : "SHA3-384", "content" : "3456de40eef224b3ad195d2f218dd28eacb0da07607aee7ead94bd8d54bd8311d51c28d4066db4bf8b69a2df48c415f5" }, { "alg" : "SHA3-256", "content" : "36e3f71352fa14bc580db45a05b09b063392c6d39acf9e24ffa6a67bbc07a336" }, { "alg" : "SHA3-512", "content" : "6ecbc05bb5cd3f7537078b0cf51b0a5f7189dfa60c22e5ec0d6b9e2fd3f7fa7566770b5da87e0c9929f48769933c3e3a473fd5cc7231672fca36ab1fee1f8670" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0", "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], "purl" : "pkg:maven/org.apache.commons/commons-lang3@3.20.0?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://commons.apache.org/proper/commons-lang/" }, { "type" : "build-system", "url" : "https://github.com/apache/commons-lang/actions" }, { "type" : "distribution-intake", "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" }, { "type" : "issue-tracker", "url" : "https://issues.apache.org/jira/browse/LANG" }, { "type" : "mailing-list", "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/" }, { "type" : "vcs", "url" : "https://gitbox.apache.org/repos/asf/commons-lang.git" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/org.checkerframework/checker-qual@4.2.0?type=jar", "group" : "org.checkerframework", "name" : "checker-qual", "version" : "4.2.0", "description" : "checker-qual contains annotations (type qualifiers) that a programmerwrites to specify Java code for type-checking by the Checker Framework.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "91875f065ec9f5bb8bb31a70f10416aa" }, { "alg" : "SHA-1", "content" : "b4bda44e50dc5b020e6bdf0054ecf1f2329eafd5" }, { "alg" : "SHA-256", "content" : "30bb4494b13f41cbd1502b094caafeb2b1d1f347311c72e7c74f83160acbdf0e" }, { "alg" : "SHA-512", "content" : "21bf716fcb1c82d5b53ce4b49de6568ebe827e2ed69a70997974a96a6cae0ed35775cea3ab145fd8befac31765ae4114de67d3d7e24b7f2422c81fc42b674334" }, { "alg" : "SHA-384", "content" : "8ef136292341f80953e7c841ad0e612717fb8ccca6e916be9ed0eedd32d8e6696fe5ec1c874a3cdf55073e201ef8067c" }, { "alg" : "SHA3-384", "content" : "056532baa5313ba6e161c7aa2e1f806f13e711a0cd726477453d6f186c7f45341888f0143df499b2860904466cafd3bc" }, { "alg" : "SHA3-256", "content" : "62b88f94e218b6387a2e0856e591bb09f89329b1f81d00d877bcd8a37a69b519" }, { "alg" : "SHA3-512", "content" : "c21e09684cac0e39637883de9dbba7e2afcf805dfe0389aae04e56dd3a80e494a027eaef00e9770505009efaf7db57698daf3b5b812e54dbbda1c1c980178df3" } ], "licenses" : [ { "license" : { "id" : "MIT" } } ], "purl" : "pkg:maven/org.checkerframework/checker-qual@4.2.0?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://checkerframework.org/" }, { "type" : "vcs", "url" : "https://github.com/typetools/checker-framework.git" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/net.sf.saxon/Saxon-HE@12.9?type=jar", "publisher" : "Saxonica", "group" : "net.sf.saxon", "name" : "Saxon-HE", "version" : "12.9", "description" : "The XSLT and XQuery Processor", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "0da2a0f62cf07d1ae5f76d65569cd3f2" }, { "alg" : "SHA-1", "content" : "1397a02bd22c63db3e902b28b23c59009fa3b5c4" }, { "alg" : "SHA-256", "content" : "8f3a9216a537367132293eacbba9df062eace8f8b16a184af59e2e4839d4cd41" }, { "alg" : "SHA-512", "content" : "91712b90b683ff0a7e027f9a9bf48902c427057c9cc1868accca77e39100b0dcb90a2415c5783df188a12f7aa425f93e7832e3cb97b404dc34c24c5fad93e469" }, { "alg" : "SHA-384", "content" : "1f7e19e138ba41b69b802572da415e740dac73b191b38bacfa12a77d52d3cc2314c9ba269b50dce6de9ff6f0493a3612" }, { "alg" : "SHA3-384", "content" : "2ab479d9f0acbd57995af68b794c492621f50851f77d0d23319aea782a8bc94a396dbfb674724e16cdd554cf01b2fa73" }, { "alg" : "SHA3-256", "content" : "54afc8248603183f15d4be5a34383793c10c9ec3c0f13c9e19696222430ddc29" }, { "alg" : "SHA3-512", "content" : "092271bf758a1d137102b1ddec19d4b13d528ba2bc9ee1c35859f16c3fe50a573e3bae623e770c940aa43a1631a15303cfbe33e600ac0ff07a1611d3b4f9be9c" } ], "licenses" : [ { "license" : { "id" : "MPL-2.0", "url" : "https://www.mozilla.org/MPL/2.0/" } } ], "purl" : "pkg:maven/net.sf.saxon/Saxon-HE@12.9?type=jar", "externalReferences" : [ { "type" : "website", "url" : "http://www.saxonica.com/" }, { "type" : "issue-tracker", "url" : "https://saxonica.plan.io/projects/saxon" }, { "type" : "mailing-list", "url" : "http://sourceforge.net/mailarchive/forum.php?forum_name=saxon-help" }, { "type" : "vcs", "url" : "https://saxonica.plan.io/projects/saxonmirrorhe/repository" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/org.xmlresolver/xmlresolver@5.3.3?type=jar", "group" : "org.xmlresolver", "name" : "xmlresolver", "version" : "5.3.3", "description" : "An XML entity/uri resolver", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "e883f28e14ce902f66941bd8bc25233a" }, { "alg" : "SHA-1", "content" : "1b838b0d69eef8d46c813d88a604e3cb4c6035fe" }, { "alg" : "SHA-256", "content" : "1fe4d5b92f708dcdb82dbce12919e0171e6b5ca62c6dca6220483625098feb5f" }, { "alg" : "SHA-512", "content" : "e426f802202b69004b94d7ff67c907b1e10e3005854ed4b9fcf4898a8f727c782e06da58ebc746345e9ed30881a6006c8d588e604f3fd28a107b49f55a632f0a" }, { "alg" : "SHA-384", "content" : "78c42fec61b2008f922152fdee78811bec25da32a27adce0eb228297b62b586bb8d7bd344fac914962c2d0393f66de32" }, { "alg" : "SHA3-384", "content" : "bea5e339f64751df3e0606c53a850ff1f1e40cdc3c37ad2c3465d6f218e8a8fcde880652008ccfc2cc0a133ce91cd19c" }, { "alg" : "SHA3-256", "content" : "c8c61aad263d72404d0ff57bc173d9195cb30cd320c6cf73a917ca44ee12ca21" }, { "alg" : "SHA3-512", "content" : "7b0fab3b03366830d7bd8c1b2c6465971d80bb8cac00fb51f52f95f51040f5178a42abf469a3e31a74d8ae21c9578f16e0c90548b4eccc6da132c653c44cd038" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/org.xmlresolver/xmlresolver@5.3.3?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://github.com/xmlresolver/xmlresolver" }, { "type" : "vcs", "url" : "scm:git@github.com:xmlresolver/xmlresolver.git" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/org.xmlresolver/xmlresolver@5.3.3?classifier=data&type=jar", "group" : "org.xmlresolver", "name" : "xmlresolver", "version" : "5.3.3", "description" : "An XML entity/uri resolver", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "59c51b08ba448bc9473d92e68bf84873" }, { "alg" : "SHA-1", "content" : "e0c9cb7fcad389a50c1fbe3237af8857eca9c2b3" }, { "alg" : "SHA-256", "content" : "b0c487ad2f3e558be8d829c916d2458d10aca6a5bafa7a4d0524b70845e48a5c" }, { "alg" : "SHA-512", "content" : "3968f78e0c36009f9bbb6e6ce3c0b95a91f6f723a71d93ef9855fe4de674a22c7fc0d426d0bf95d4cdfed4b2cd8213ab8a21d235f64cdd8add9729bac948af8c" }, { "alg" : "SHA-384", "content" : "f79c1d4557cf6045010c01a9467f966f70120e7979281bfc4211960f3680285d8936143254de92307d0c32fd2f55f2a3" }, { "alg" : "SHA3-384", "content" : "638fa3393665ade60320cb93378e6592da92f3fcb3d50d6d9331b7a01086e8f67c7f13ace73bb7a747f45f0574ab15dd" }, { "alg" : "SHA3-256", "content" : "eb68a8a8de6126987953b82f58b2bb58da107aed2cb22bfd169e0028b079174b" }, { "alg" : "SHA3-512", "content" : "87b5283102a265524dc2259b2518cfb08db450a7bb738fea34cc666cea9d2e557abc73e50a2e542bb1874df6afa3d767e75875fa0a404c8387da5432e6a2688d" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/org.xmlresolver/xmlresolver@5.3.3?classifier=data&type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://github.com/xmlresolver/xmlresolver" }, { "type" : "vcs", "url" : "scm:git@github.com:xmlresolver/xmlresolver.git" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/org.pcollections/pcollections@4.0.2?type=jar", "group" : "org.pcollections", "name" : "pcollections", "version" : "4.0.2", "description" : "A Persistent Java Collections Library", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "3bc80c4568bb9766e119df617ef8b553" }, { "alg" : "SHA-1", "content" : "c8398b4443deae11e6eaffbc04a371b4eb8f6b8e" }, { "alg" : "SHA-256", "content" : "2bbeef5797a241300c4f7513cd546239629ed7deda4fc0c31df90bb95f5f13ef" }, { "alg" : "SHA-512", "content" : "b1c87f1569c61b079fb50bf4cb0e885aefde3138ab8f1777386aa47652bf9ed359e4437ecff3c6f09e7974c10af88b6c27baaa147b95e1fd69b3fdf3fdbd4da5" }, { "alg" : "SHA-384", "content" : "a9a0266da1d32de32547431c6f1a629d697f5330a1cb85485b698958d1b5861797cc8037b8dd9cfb6979b52e51b8aede" }, { "alg" : "SHA3-384", "content" : "7971fad6691a1b90eb2729119582ee638b58a70f11c3232bd277183ce675e4c70dae63a0ba56982c87efc0bc3c2ea338" }, { "alg" : "SHA3-256", "content" : "338d7fdf8c11b4fc538c05420fb2c6426dab2209e2b1e2a20f1549277f4a4a4f" }, { "alg" : "SHA3-512", "content" : "5722d084f2f3aaa11147ce496c548647555669895d8f456d501a07ba0027a86eea44335c906efcd7a035b7a9ecc1ffe55963023b3581f3005b8acf81f7c9c7fa" } ], "licenses" : [ { "license" : { "id" : "MIT" } } ], "purl" : "pkg:maven/org.pcollections/pcollections@4.0.2?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://github.com/hrldcpr/pcollections" }, { "type" : "vcs", "url" : "https://github.com/hrldcpr/pcollections" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.47.0?type=jar", "publisher" : "Google LLC", "group" : "com.google.errorprone", "name" : "error_prone_annotations", "version" : "2.47.0", "description" : "Error Prone is a static analysis tool for Java that catches common programming mistakes at compile-time.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "e1998cc98f6edc175da7f53961d1579e" }, { "alg" : "SHA-1", "content" : "e64e70c8e2b5a30ce7f1b6c9e3eb7016881e0411" }, { "alg" : "SHA-256", "content" : "5364bc6f22e72e98195e406a58d3ba1c09ffa11dea0729592cb870dc2de4056d" }, { "alg" : "SHA-512", "content" : "7e635e8d153969f1bf4310d06ea16fedfd633c15bbdce5990e3fa44e2fa55566f2b7a8afc7f5aa6c01006352c4a2bacbe0985332356ad92492952f905cb26b78" }, { "alg" : "SHA-384", "content" : "40527af611a497541493e4a15624616551108db99460ce0d41f2d90555e92a4f9cc75864fc33ca36381686e4c4749d15" }, { "alg" : "SHA3-384", "content" : "b1c1ccd43d30c6eab664c5e3a4bc01b8a010eb51ce2edb41f1469302a0073f90f4c6d77f9899bce6f216b31515074c29" }, { "alg" : "SHA3-256", "content" : "15dc4f4b8b9c8a8316061abeca1012cf1adbf0f5dc4a3cb3d93895b66b8d8392" }, { "alg" : "SHA3-512", "content" : "5ca55c7087dcb445dd309d68dfbed0bbd0175af0ef618985f1f7fca4c1b7e14eb6ca583c7f3336bcb05b9dbfc8203e6302f2e5fe19a19bb1185ed9d6a92395e1" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.47.0?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://errorprone.info/error_prone_annotations" }, { "type" : "vcs", "url" : "https://github.com/google/error-prone/error_prone_annotations" } ] } ], "dependencies" : [ { "ref" : "pkg:maven/net.sourceforge.pmd/pmd-java@7.26.0?type=jar", "dependsOn" : [ "pkg:maven/net.sourceforge.pmd/pmd-core@7.26.0?type=jar", "pkg:maven/org.ow2.asm/asm@9.10.1?type=jar", "pkg:maven/org.apache.commons/commons-lang3@3.20.0?type=jar", "pkg:maven/org.checkerframework/checker-qual@4.2.0?type=jar", "pkg:maven/net.sf.saxon/Saxon-HE@12.9?type=jar", "pkg:maven/org.pcollections/pcollections@4.0.2?type=jar" ] }, { "ref" : "pkg:maven/net.sourceforge.pmd/pmd-core@7.26.0?type=jar", "dependsOn" : [ "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar", "pkg:maven/org.slf4j/jul-to-slf4j@1.7.36?type=jar", "pkg:maven/org.antlr/antlr4-runtime@4.13.2?type=jar", "pkg:maven/net.sf.saxon/Saxon-HE@12.9?type=jar", "pkg:maven/org.apache.commons/commons-lang3@3.20.0?type=jar", "pkg:maven/org.ow2.asm/asm@9.10.1?type=jar", "pkg:maven/com.google.code.gson/gson@2.14.0?type=jar", "pkg:maven/org.checkerframework/checker-qual@4.2.0?type=jar", "pkg:maven/org.pcollections/pcollections@4.0.2?type=jar", "pkg:maven/com.github.oowekyala.ooxml/nice-xml-messages@3.1?type=jar" ] }, { "ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/org.slf4j/jul-to-slf4j@1.7.36?type=jar", "dependsOn" : [ "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar" ] }, { "ref" : "pkg:maven/org.antlr/antlr4-runtime@4.13.2?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/net.sf.saxon/Saxon-HE@12.9?type=jar", "dependsOn" : [ "pkg:maven/org.xmlresolver/xmlresolver@5.3.3?type=jar", "pkg:maven/org.xmlresolver/xmlresolver@5.3.3?classifier=data&type=jar" ] }, { "ref" : "pkg:maven/org.xmlresolver/xmlresolver@5.3.3?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/org.xmlresolver/xmlresolver@5.3.3?classifier=data&type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/org.apache.commons/commons-lang3@3.20.0?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/org.ow2.asm/asm@9.10.1?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/com.google.code.gson/gson@2.14.0?type=jar", "dependsOn" : [ "pkg:maven/com.google.errorprone/error_prone_annotations@2.47.0?type=jar" ] }, { "ref" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.47.0?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/org.checkerframework/checker-qual@4.2.0?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/org.pcollections/pcollections@4.0.2?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/com.github.oowekyala.ooxml/nice-xml-messages@3.1?type=jar", "dependsOn" : [ ] } ] }