{ "bomFormat" : "CycloneDX", "specVersion" : "1.6", "serialNumber" : "urn:uuid:9f0cb604-ff09-3ad9-ba2d-546abced5834", "version" : 1, "metadata" : { "lifecycles" : [ { "phase" : "build" } ], "tools" : { "components" : [ { "type" : "library", "author" : "OWASP Foundation", "group" : "org.cyclonedx", "name" : "cyclonedx-maven-plugin", "version" : "2.9.1", "description" : "CycloneDX Maven plugin", "hashes" : [ { "alg" : "MD5", "content" : "9c7a565cf28cce58557d0c621c5ea4b1" }, { "alg" : "SHA-1", "content" : "be882d5a22050bfa9d19090b1420c188617d0e1c" }, { "alg" : "SHA-256", "content" : "698e0f37184a5b28c245c4065fd036dfce253b52f82fbb7113d81d36326cc249" }, { "alg" : "SHA-512", "content" : "c0f0b11026858166f872a2eb54719492e5cecaa0bc9cd6b30b3ecb4a174eed220f4a1b5829d18d6734128e778d3cb3db7ffed177c92866133129cb29081814a0" }, { "alg" : "SHA-384", "content" : "d80964707dfe5caca8c70521d5066f57589304c0a657e6fbc7c0614ea0fc7b3b3dbe7778361eee0f54ba111e9cb0ffcb" }, { "alg" : "SHA3-384", "content" : "80bc3a275d9514bc457461ff52a72add8c7ecbbc01d8912efce57139016c544ee776981851be0a58fa977ab4221f703f" }, { "alg" : "SHA3-256", "content" : "142317d6f245390f4fd2d0c100b16281b8dfc5c0c2cff86943bdcc97039cb699" }, { "alg" : "SHA3-512", "content" : "af0fb9137c90b65d1a07f72e4d51ae509956cdb8800f35c961b037cdda1fe4a14ce3b496cef71ba85f1621affcfe29cd42704ae4191ff0b090a9602087c8997b" } ] } ] }, "component" : { "type" : "library", "bom-ref" : "pkg:maven/net.sourceforge.pmd/pmd-python@7.25.0?type=jar", "publisher" : "PMD", "group" : "net.sourceforge.pmd", "name" : "pmd-python", "version" : "7.25.0", "description" : "PMD is an extensible multilanguage static code analyzer. It finds common programming flaws like unused variables, empty catch blocks, unnecessary object creation, and so forth. It's mainly concerned with Java and Apex, but supports 16 other languages. It comes with 400+ built-in rules. It can be extended with custom rules. It uses JavaCC and Antlr to parse source files into abstract syntax trees (AST) and runs rules against them to find violations. Rules can be written in Java or using a XPath query. Currently, PMD supports Java, JavaScript, Salesforce.com Apex and Visualforce, Kotlin, Swift, Modelica, PL/SQL, Apache Velocity, JSP, WSDL, Maven POM, HTML, XML and XSL. Scala is supported, but there are currently no Scala rules available. Additionally, it includes CPD, the copy-paste-detector. CPD finds duplicated code in Coco, C/C++, C#, CSS, Dart, Fortran, Gherkin, Go, Groovy, HTML, Java, JavaScript, JSP, Julia, Kotlin, Lua, Matlab, Modelica, Objective-C, Perl, PHP, PL/SQL, Python, Ruby, Rust, Salesforce.com Apex and Visualforce, Scala, Swift, T-SQL, Typescript, Apache Velocity, WSDL, XML and XSL.", "licenses" : [ { "license" : { "name" : "BSD-style", "url" : "http://pmd.sourceforge.net/license.html" } } ], "purl" : "pkg:maven/net.sourceforge.pmd/pmd-python@7.25.0?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://pmd.github.io/pmd-python/" }, { "type" : "build-system", "url" : "https://github.com/pmd/pmd/actions" }, { "type" : "issue-tracker", "url" : "https://github.com/pmd/pmd/issues" }, { "type" : "mailing-list", "url" : "https://sourceforge.net/p/pmd/mailman/pmd-devel" }, { "type" : "vcs", "url" : "https://github.com/pmd/pmd/pmd-python" } ] }, "properties" : [ { "name" : "maven.goal", "value" : "makeBom" }, { "name" : "maven.scopes", "value" : "compile,provided,runtime,system" }, { "name" : "cdx:reproducible", "value" : "enabled" } ] }, "components" : [ { "type" : "library", "bom-ref" : "pkg:maven/net.sourceforge.pmd/pmd-core@7.25.0?type=jar", "publisher" : "PMD", "group" : "net.sourceforge.pmd", "name" : "pmd-core", "version" : "7.25.0", "description" : "PMD is an extensible multilanguage static code analyzer. It finds common programming flaws like unused variables, empty catch blocks, unnecessary object creation, and so forth. It's mainly concerned with Java and Apex, but supports 16 other languages. It comes with 400+ built-in rules. It can be extended with custom rules. It uses JavaCC and Antlr to parse source files into abstract syntax trees (AST) and runs rules against them to find violations. Rules can be written in Java or using a XPath query. Currently, PMD supports Java, JavaScript, Salesforce.com Apex and Visualforce, Kotlin, Swift, Modelica, PL/SQL, Apache Velocity, JSP, WSDL, Maven POM, HTML, XML and XSL. Scala is supported, but there are currently no Scala rules available. Additionally, it includes CPD, the copy-paste-detector. CPD finds duplicated code in Coco, C/C++, C#, CSS, Dart, Fortran, Gherkin, Go, Groovy, HTML, Java, JavaScript, JSP, Julia, Kotlin, Lua, Matlab, Modelica, Objective-C, Perl, PHP, PL/SQL, Python, Ruby, Rust, Salesforce.com Apex and Visualforce, Scala, Swift, T-SQL, Typescript, Apache Velocity, WSDL, XML and XSL.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "40b4d5a7a30aa8a8ceb8043474b5e7f8" }, { "alg" : "SHA-1", "content" : "4204ca397dc7d55ce5820a6d943da20573f85fa8" }, { "alg" : "SHA-256", "content" : "eb11a97f4bf92a22e7e59151f4d0fb5231424eea22fec7cf525c3ad502854277" }, { "alg" : "SHA-512", "content" : "7252316a23af1285fee585178c09bea8741d3bdf43740364149f0ae6a7b90789ec9901f92929ffa8254f93360f88b6d5c3d38bd5347aafd20aeb8323496c5274" }, { "alg" : "SHA-384", "content" : "39ab3d1d19d4c1194e149858a6daa8068f80d67d9d130fe8d99f3162670ea0c9ef6c2b760426e6afbf9039e13354c373" }, { "alg" : "SHA3-384", "content" : "aa0530a6646a24e6376bf7e923afe57407170cc2fd093ac291d0940359f1e6ec72557470cec60b64c5d98419de448085" }, { "alg" : "SHA3-256", "content" : "2c2014a1d79c27bb42d0aa664a97f65df52ac6ffa43dfef77d74b41c18daf829" }, { "alg" : "SHA3-512", "content" : "2b96246a68747260bbb9cbeff735ec3e17058ebaca7daeeb00662b34f33cdd6e2c9ce766a8e76fe54584128fd5e42d9df429f71d06a824b6e4b9e719df3c6710" } ], "licenses" : [ { "license" : { "name" : "BSD-style", "url" : "http://pmd.sourceforge.net/license.html" } } ], "purl" : "pkg:maven/net.sourceforge.pmd/pmd-core@7.25.0?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://pmd.github.io/pmd-core/" }, { "type" : "build-system", "url" : "https://github.com/pmd/pmd/actions" }, { "type" : "issue-tracker", "url" : "https://github.com/pmd/pmd/issues" }, { "type" : "mailing-list", "url" : "https://sourceforge.net/p/pmd/mailman/pmd-devel" }, { "type" : "vcs", "url" : "https://github.com/pmd/pmd/pmd-core" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar", "publisher" : "QOS.ch", "group" : "org.slf4j", "name" : "slf4j-api", "version" : "1.7.36", "description" : "The slf4j API", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "872da51f5de7f3923da4de871d57fd85" }, { "alg" : "SHA-1", "content" : "6c62681a2f655b49963a5983b8b0950a6120ae14" }, { "alg" : "SHA-256", "content" : "d3ef575e3e4979678dc01bf1dcce51021493b4d11fb7f1be8ad982877c16a1c0" }, { "alg" : "SHA-512", "content" : "f9b033fc019a44f98b16048da7e2b59edd4a6a527ba60e358f65ab88e0afae03a9340f1b3e8a543d49fa542290f499c5594259affa1ff3e6e7bf3b428d4c610b" }, { "alg" : "SHA-384", "content" : "2b14ad035877087157e379d3277dcdcd79e58d6bdb147c47d29e377d75ce53ad42cafbf22f5fb7827c7e946ff4876b9a" }, { "alg" : "SHA3-384", "content" : "3bc3110dafb8d5be16a39f3b2671a466463cd99eb39610c0e4719a7bf2d928f2ea213c734887c6926a07c4cca7769e4b" }, { "alg" : "SHA3-256", "content" : "ba2608179fcf46e2291a90b9cbb4aa30d718e481f59c350cc21c73b88d826881" }, { "alg" : "SHA3-512", "content" : "14c4edcd19702ef607d78826839d8a6d3a39157df54b89a801d3d3cbbe1307131a77671b041c761122730fb1387888c5ec2e46bdd80e1cb07f8f144676441824" } ], "licenses" : [ { "license" : { "id" : "MIT", "url" : "https://opensource.org/license/mit/" } } ], "purl" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar", "externalReferences" : [ { "type" : "website", "url" : "http://www.slf4j.org" }, { "type" : "distribution-intake", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "vcs", "url" : "https://github.com/qos-ch/slf4j/slf4j-api" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/org.slf4j/jul-to-slf4j@1.7.36?type=jar", "publisher" : "QOS.ch", "group" : "org.slf4j", "name" : "jul-to-slf4j", "version" : "1.7.36", "description" : "JUL to SLF4J bridge", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "2a3fe73e6cafe8f102facaf2dd65353f" }, { "alg" : "SHA-1", "content" : "ed46d81cef9c412a88caef405b58f93a678ff2ca" }, { "alg" : "SHA-256", "content" : "9e641fb142c5f0b0623d6222c09ea87523a41bf6bed48ac79940724010b989de" }, { "alg" : "SHA-512", "content" : "0bb1e7343d07d41bcfb0c1ffeb2db28cbb35e7a80a409b80042f463b082a292976f09d719e319471e31c7bab716121728a16509fd385fc6e3b400b1b214cffea" }, { "alg" : "SHA-384", "content" : "50e2f326fc00537a5fb3726c7c55556851b3be8b4346f522f27ddecf2fdb44adabae3197b30ccfd854c37d6734adbd8f" }, { "alg" : "SHA3-384", "content" : "4ad0c3870852ac44530a9dcb992d947cd8708ee6f422559da41aaaa8b22d1610fb116b32d2c54df83b110b85487083bf" }, { "alg" : "SHA3-256", "content" : "8e3f5aaaa27f618b52e610376d2a16c6f9dc8dce5e6c2bbe42131a590626aae6" }, { "alg" : "SHA3-512", "content" : "e3da265406b5e69f02235ed7272a48f71cb8b6f0a696820e28e90fb5eafeeb311abf2a4e779b402f384c6a80470fd41116ee52a526f57040fae3b24cb3b19c01" } ], "licenses" : [ { "license" : { "id" : "MIT", "url" : "https://opensource.org/license/mit/" } } ], "purl" : "pkg:maven/org.slf4j/jul-to-slf4j@1.7.36?type=jar", "externalReferences" : [ { "type" : "website", "url" : "http://www.slf4j.org" }, { "type" : "distribution-intake", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "vcs", "url" : "https://github.com/qos-ch/slf4j/jul-to-slf4j" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/org.antlr/antlr4-runtime@4.13.2?type=jar", "publisher" : "ANTLR", "group" : "org.antlr", "name" : "antlr4-runtime", "version" : "4.13.2", "description" : "The ANTLR 4 Runtime", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "eecf1908f0cfff10f8bb82878b5ca401" }, { "alg" : "SHA-1", "content" : "fc3db6d844df652a3d5db31c87fa12757f13691d" }, { "alg" : "SHA-256", "content" : "dd3e8a13a2d669bf84fb8d834de35ce4875f27157698d206241ec8488aadcaf7" }, { "alg" : "SHA-512", "content" : "1c3e47b6b5dc40ca13927a7ae2ed187f470b8f406cea325e73c7a18af8e07b9ada0484312dd611f225f030b5585924932c702fd9326c143a626e271682b2b95e" }, { "alg" : "SHA-384", "content" : "f49c2395e16fe71fa35622bcca225c0910609ef09626207ce4522c73c760fd232489489ea88d54c88fc21b05a03031e0" }, { "alg" : "SHA3-384", "content" : "322345326586e3f8954e80efa80b510228a7eb06f6d7283177f04809c15aad1722c700897c8c8f405955946b63808bc0" }, { "alg" : "SHA3-256", "content" : "2d39db66ce6dc530c7796f75d646f4d8316586e2acd0756524c25b238eb71618" }, { "alg" : "SHA3-512", "content" : "a4cdaec49dff4a6963a0db56712a837db7300de7145335b915ffc2234b0d53d6f9fd4b1d6e82c4350e22fee9390ca643cfbf7f51ff47a11bc44561b6686be32b" } ], "licenses" : [ { "license" : { "id" : "BSD-3-Clause", "url" : "https://opensource.org/licenses/BSD-3-Clause" } } ], "purl" : "pkg:maven/org.antlr/antlr4-runtime@4.13.2?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://www.antlr.org/antlr4-runtime/" }, { "type" : "distribution-intake", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "issue-tracker", "url" : "https://github.com/antlr/antlr4/issues" }, { "type" : "mailing-list", "url" : "https://groups.google.com/forum/?fromgroups#!forum/antlr-discussion" }, { "type" : "vcs", "url" : "https://github.com/antlr/antlr4/tree/master/antlr4-runtime" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/net.sf.saxon/Saxon-HE@12.9?type=jar", "publisher" : "Saxonica", "group" : "net.sf.saxon", "name" : "Saxon-HE", "version" : "12.9", "description" : "The XSLT and XQuery Processor", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "0da2a0f62cf07d1ae5f76d65569cd3f2" }, { "alg" : "SHA-1", "content" : "1397a02bd22c63db3e902b28b23c59009fa3b5c4" }, { "alg" : "SHA-256", "content" : "8f3a9216a537367132293eacbba9df062eace8f8b16a184af59e2e4839d4cd41" }, { "alg" : "SHA-512", "content" : "91712b90b683ff0a7e027f9a9bf48902c427057c9cc1868accca77e39100b0dcb90a2415c5783df188a12f7aa425f93e7832e3cb97b404dc34c24c5fad93e469" }, { "alg" : "SHA-384", "content" : "1f7e19e138ba41b69b802572da415e740dac73b191b38bacfa12a77d52d3cc2314c9ba269b50dce6de9ff6f0493a3612" }, { "alg" : "SHA3-384", "content" : "2ab479d9f0acbd57995af68b794c492621f50851f77d0d23319aea782a8bc94a396dbfb674724e16cdd554cf01b2fa73" }, { "alg" : "SHA3-256", "content" : "54afc8248603183f15d4be5a34383793c10c9ec3c0f13c9e19696222430ddc29" }, { "alg" : "SHA3-512", "content" : "092271bf758a1d137102b1ddec19d4b13d528ba2bc9ee1c35859f16c3fe50a573e3bae623e770c940aa43a1631a15303cfbe33e600ac0ff07a1611d3b4f9be9c" } ], "licenses" : [ { "license" : { "id" : "MPL-2.0", "url" : "https://www.mozilla.org/MPL/2.0/" } } ], "purl" : "pkg:maven/net.sf.saxon/Saxon-HE@12.9?type=jar", "externalReferences" : [ { "type" : "website", "url" : "http://www.saxonica.com/" }, { "type" : "issue-tracker", "url" : "https://saxonica.plan.io/projects/saxon" }, { "type" : "mailing-list", "url" : "http://sourceforge.net/mailarchive/forum.php?forum_name=saxon-help" }, { "type" : "vcs", "url" : "https://saxonica.plan.io/projects/saxonmirrorhe/repository" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/org.xmlresolver/xmlresolver@5.3.3?type=jar", "group" : "org.xmlresolver", "name" : "xmlresolver", "version" : "5.3.3", "description" : "An XML entity/uri resolver", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "e883f28e14ce902f66941bd8bc25233a" }, { "alg" : "SHA-1", "content" : "1b838b0d69eef8d46c813d88a604e3cb4c6035fe" }, { "alg" : "SHA-256", "content" : "1fe4d5b92f708dcdb82dbce12919e0171e6b5ca62c6dca6220483625098feb5f" }, { "alg" : "SHA-512", "content" : "e426f802202b69004b94d7ff67c907b1e10e3005854ed4b9fcf4898a8f727c782e06da58ebc746345e9ed30881a6006c8d588e604f3fd28a107b49f55a632f0a" }, { "alg" : "SHA-384", "content" : "78c42fec61b2008f922152fdee78811bec25da32a27adce0eb228297b62b586bb8d7bd344fac914962c2d0393f66de32" }, { "alg" : "SHA3-384", "content" : "bea5e339f64751df3e0606c53a850ff1f1e40cdc3c37ad2c3465d6f218e8a8fcde880652008ccfc2cc0a133ce91cd19c" }, { "alg" : "SHA3-256", "content" : "c8c61aad263d72404d0ff57bc173d9195cb30cd320c6cf73a917ca44ee12ca21" }, { "alg" : "SHA3-512", "content" : "7b0fab3b03366830d7bd8c1b2c6465971d80bb8cac00fb51f52f95f51040f5178a42abf469a3e31a74d8ae21c9578f16e0c90548b4eccc6da132c653c44cd038" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/org.xmlresolver/xmlresolver@5.3.3?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://github.com/xmlresolver/xmlresolver" }, { "type" : "vcs", "url" : "scm:git@github.com:xmlresolver/xmlresolver.git" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/org.xmlresolver/xmlresolver@5.3.3?classifier=data&type=jar", "group" : "org.xmlresolver", "name" : "xmlresolver", "version" : "5.3.3", "description" : "An XML entity/uri resolver", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "59c51b08ba448bc9473d92e68bf84873" }, { "alg" : "SHA-1", "content" : "e0c9cb7fcad389a50c1fbe3237af8857eca9c2b3" }, { "alg" : "SHA-256", "content" : "b0c487ad2f3e558be8d829c916d2458d10aca6a5bafa7a4d0524b70845e48a5c" }, { "alg" : "SHA-512", "content" : "3968f78e0c36009f9bbb6e6ce3c0b95a91f6f723a71d93ef9855fe4de674a22c7fc0d426d0bf95d4cdfed4b2cd8213ab8a21d235f64cdd8add9729bac948af8c" }, { "alg" : "SHA-384", "content" : "f79c1d4557cf6045010c01a9467f966f70120e7979281bfc4211960f3680285d8936143254de92307d0c32fd2f55f2a3" }, { "alg" : "SHA3-384", "content" : "638fa3393665ade60320cb93378e6592da92f3fcb3d50d6d9331b7a01086e8f67c7f13ace73bb7a747f45f0574ab15dd" }, { "alg" : "SHA3-256", "content" : "eb68a8a8de6126987953b82f58b2bb58da107aed2cb22bfd169e0028b079174b" }, { "alg" : "SHA3-512", "content" : "87b5283102a265524dc2259b2518cfb08db450a7bb738fea34cc666cea9d2e557abc73e50a2e542bb1874df6afa3d767e75875fa0a404c8387da5432e6a2688d" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/org.xmlresolver/xmlresolver@5.3.3?classifier=data&type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://github.com/xmlresolver/xmlresolver" }, { "type" : "vcs", "url" : "scm:git@github.com:xmlresolver/xmlresolver.git" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/org.apache.commons/commons-lang3@3.20.0?type=jar", "publisher" : "The Apache Software Foundation", "group" : "org.apache.commons", "name" : "commons-lang3", "version" : "3.20.0", "description" : "Apache Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang. The code is tested using the latest revision of the JDK for supported LTS releases: 8, 11, 17, 21 and 25 currently. See https://github.com/apache/commons-lang/blob/master/.github/workflows/maven.yml Please ensure your build environment is up-to-date and kindly report any build issues.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "4b29562ded527aa074e1d44f8646dac5" }, { "alg" : "SHA-1", "content" : "65897b3e5731220962e659e001904af3c3cbeba9" }, { "alg" : "SHA-256", "content" : "69e5c9fa35da7a51a5fd2099dfe56a2d8d32cf233e2f6d770e796146440263f4" }, { "alg" : "SHA-512", "content" : "1c72db334ea44f932c35e602b78907865f5bab43e30c871c9be67c8184eaa778f32d7bc3ab525d5921cd28619d3f9babfd483f17de54f007ee07db2e074b0307" }, { "alg" : "SHA-384", "content" : "77dd27c4d5e9372c002bd6878d2cfaaec3cf46dd57d65de63d7f2e09351344531cfa81a537b56628ac6db18adee7e484" }, { "alg" : "SHA3-384", "content" : "3456de40eef224b3ad195d2f218dd28eacb0da07607aee7ead94bd8d54bd8311d51c28d4066db4bf8b69a2df48c415f5" }, { "alg" : "SHA3-256", "content" : "36e3f71352fa14bc580db45a05b09b063392c6d39acf9e24ffa6a67bbc07a336" }, { "alg" : "SHA3-512", "content" : "6ecbc05bb5cd3f7537078b0cf51b0a5f7189dfa60c22e5ec0d6b9e2fd3f7fa7566770b5da87e0c9929f48769933c3e3a473fd5cc7231672fca36ab1fee1f8670" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0", "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], "purl" : "pkg:maven/org.apache.commons/commons-lang3@3.20.0?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://commons.apache.org/proper/commons-lang/" }, { "type" : "build-system", "url" : "https://github.com/apache/commons-lang/actions" }, { "type" : "distribution-intake", "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" }, { "type" : "issue-tracker", "url" : "https://issues.apache.org/jira/browse/LANG" }, { "type" : "mailing-list", "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/" }, { "type" : "vcs", "url" : "https://gitbox.apache.org/repos/asf/commons-lang.git" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/org.ow2.asm/asm@9.10.1?type=jar", "publisher" : "OW2", "group" : "org.ow2.asm", "name" : "asm", "version" : "9.10.1", "description" : "ASM, a very small and fast Java bytecode manipulation framework", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "9cb72080438acf27f2607002e1444a7b" }, { "alg" : "SHA-1", "content" : "ada2141c0cc52ee8f5c48cd5fa4ce0e794f22236" }, { "alg" : "SHA-256", "content" : "ed825d10ab1399c8c0cb669e688cf0c8c82629b4c8399b58352b68e92ca10fcb" }, { "alg" : "SHA-512", "content" : "8db6efa37d4d569bf2b95d90931b8064f87ed928d20bbf8d8e7fa6182e9a11d32e6a2cc034a3d173a38ee70ce2ea9f20f52f9d8730d9401d2bc6060674c18928" }, { "alg" : "SHA-384", "content" : "451863dca686c04151bef6e632df2ee3c8c67ca97d191cdee3d7c4f9350f8a096011cadc1c79b4ba012b3f2179ef2bbe" }, { "alg" : "SHA3-384", "content" : "faa7b5fa7a5fefaae6d320ad43c09d588d6deecd41b2a3ebec36a4143a2b90373b2d01936c0733413a01f451c9740bc8" }, { "alg" : "SHA3-256", "content" : "e37aa694329cbbfcd0a81a735270166386aceff3797af2c391fd8484baa5a576" }, { "alg" : "SHA3-512", "content" : "1d660ebc24411c38b0928b543f402e7cb09747b7c522047f36b57865acfb83d25c9348c1d70af78e3d26e1ad220f10055d63eeb2965f7b6966cb2fbd29b47671" } ], "licenses" : [ { "license" : { "id" : "BSD-3-Clause", "url" : "https://opensource.org/licenses/BSD-3-Clause" } } ], "purl" : "pkg:maven/org.ow2.asm/asm@9.10.1?type=jar", "externalReferences" : [ { "type" : "website", "url" : "http://asm.ow2.io/" }, { "type" : "distribution-intake", "url" : "https://repository.ow2.org/nexus/service/local/staging/deploy/maven2" }, { "type" : "issue-tracker", "url" : "https://gitlab.ow2.org/asm/asm/issues" }, { "type" : "mailing-list", "url" : "https://mail.ow2.org/wws/arc/asm/" }, { "type" : "vcs", "url" : "https://gitlab.ow2.org/asm/asm/" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/com.google.code.gson/gson@2.14.0?type=jar", "group" : "com.google.code.gson", "name" : "gson", "version" : "2.14.0", "description" : "Gson JSON library", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "43b20830936ec97d8df6b174e3509d9e" }, { "alg" : "SHA-1", "content" : "efc0e34ede4e3204eaefb84a00e55e8c86634382" }, { "alg" : "SHA-256", "content" : "2cbd119bf1961c28788310963dc80ba65f58cdeec1dd139c8bdb1240faa2c36f" }, { "alg" : "SHA-512", "content" : "d040d19a47ca2df33365493f9813a1d0a40b91685f7d87ca445b98d37b4c1b801314aef87940dc8b43dd1b0b96f6d5e6e4296778bf1af8dbfb1091425b37da21" }, { "alg" : "SHA-384", "content" : "fb3f4db322b691e37e48df3eda60b8a216d1136619f9e354aa5e3ee7aa0b4afab985ae9510c16a6fe05ea674417b4cd6" }, { "alg" : "SHA3-384", "content" : "7943b642d76b35f1e322ec7753c4de85cecc233d4cbd79582e93cf3551896c436f3bcc1166f51789470dec715f515312" }, { "alg" : "SHA3-256", "content" : "46eafa830748a2fde4dc595d2aaf94417bc2956570f8406dc000b323738f8764" }, { "alg" : "SHA3-512", "content" : "ba3abdb15073b5159782f05dbc440b76139d1d129d80a5cf98b035c399a405dec39b9c7fa7e6d8e5a2676f10fda63ed8b817538a8504ef381992a91fa1832b68" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0", "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], "purl" : "pkg:maven/com.google.code.gson/gson@2.14.0?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://github.com/google/gson" }, { "type" : "issue-tracker", "url" : "https://github.com/google/gson/issues" }, { "type" : "vcs", "url" : "https://github.com/google/gson/" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.48.0?type=jar", "publisher" : "Google LLC", "group" : "com.google.errorprone", "name" : "error_prone_annotations", "version" : "2.48.0", "description" : "Error Prone is a static analysis tool for Java that catches common programming mistakes at compile-time.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "5eba47749e8c9d5335cbbc5963300607" }, { "alg" : "SHA-1", "content" : "bbe30942a31d1778c74cb272321267eca82dc708" }, { "alg" : "SHA-256", "content" : "b49c5c958316ed67a09c699dda9aa749caf434d51d863dea599ef36a49b9c855" }, { "alg" : "SHA-512", "content" : "1692b210d2b4c1d446da1d86ee787be1c3be56ee8c5f4274f20ef126b57c444a403464df7b9dfdf10bccbe7e0432247ecffe615fbc30d16be7a3282cb2556d34" }, { "alg" : "SHA-384", "content" : "efea2f0806b5bb5cb92ed9f8988e76fbd643868d4d722eca33973c84630ea0f388448c4045534f6216804ac4e71ff5da" }, { "alg" : "SHA3-384", "content" : "1f65eda335a3f951f586df57e9f40040c9bfc3a864a1121441de4fd990de7cc12aec90bedc5dffcf722fb3a69f7300d6" }, { "alg" : "SHA3-256", "content" : "b8d212a5aa490597dfc742a2d230fc089761ab28ef6498496ed3343103317fe1" }, { "alg" : "SHA3-512", "content" : "dd19d297d326c72c3a0285cba46b88946e2c1700cb1d992b3d5ce182bc9aa3722206c8c74ba14768140b6148c8656b5b500517eb201ba270d46a3fb2020d04dd" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.48.0?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://errorprone.info/error_prone_annotations" }, { "type" : "vcs", "url" : "https://github.com/google/error-prone/error_prone_annotations" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/org.checkerframework/checker-qual@4.1.0?type=jar", "group" : "org.checkerframework", "name" : "checker-qual", "version" : "4.1.0", "description" : "checker-qual contains annotations (type qualifiers) that a programmerwrites to specify Java code for type-checking by the Checker Framework.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "915efc242a44466cf82281e2229aaeb9" }, { "alg" : "SHA-1", "content" : "127f572d0f7e9dfb205bc4667dc361056e536c88" }, { "alg" : "SHA-256", "content" : "a7e08a5400f6e1d97818ed01a8624473fee90b0ded941a44d190f1210c081790" }, { "alg" : "SHA-512", "content" : "b51d76ae0cbe4bc2fea72d8b4d9249dbf0df8f11cccb4170ddc4b61509e2354bf07cb338f6558691f0df475b33eda3e970e3e5672b55744aee56583f6c09e323" }, { "alg" : "SHA-384", "content" : "42d6c681a430d3a1b2e931adf11dc29da3a01ceb6ac00d9694c35fa8bb2c5fcb04acc028bee58ee60a4f4941b5831be1" }, { "alg" : "SHA3-384", "content" : "9098706ee8921a0cd242b2ea38aca74542b1b1f1e1b3de3ba3a5411da59b77c8435b1afa0d50421cf2ba8fddc1ae8167" }, { "alg" : "SHA3-256", "content" : "2a5b16082cc30d5e2e50560abdb6d4d2b2c88ea15ca67e9189c6ad9f207f6d42" }, { "alg" : "SHA3-512", "content" : "f9088dd68905a111741b1bd850e85a8a7202d5a183d95fab167925ba045f9d9c11e0d2a75b942d40129b7fb99ea416f705788c7cb3fe9216de5526e5bc60871a" } ], "licenses" : [ { "license" : { "id" : "MIT" } } ], "purl" : "pkg:maven/org.checkerframework/checker-qual@4.1.0?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://checkerframework.org/" }, { "type" : "vcs", "url" : "https://github.com/typetools/checker-framework.git" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/org.pcollections/pcollections@4.0.2?type=jar", "group" : "org.pcollections", "name" : "pcollections", "version" : "4.0.2", "description" : "A Persistent Java Collections Library", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "3bc80c4568bb9766e119df617ef8b553" }, { "alg" : "SHA-1", "content" : "c8398b4443deae11e6eaffbc04a371b4eb8f6b8e" }, { "alg" : "SHA-256", "content" : "2bbeef5797a241300c4f7513cd546239629ed7deda4fc0c31df90bb95f5f13ef" }, { "alg" : "SHA-512", "content" : "b1c87f1569c61b079fb50bf4cb0e885aefde3138ab8f1777386aa47652bf9ed359e4437ecff3c6f09e7974c10af88b6c27baaa147b95e1fd69b3fdf3fdbd4da5" }, { "alg" : "SHA-384", "content" : "a9a0266da1d32de32547431c6f1a629d697f5330a1cb85485b698958d1b5861797cc8037b8dd9cfb6979b52e51b8aede" }, { "alg" : "SHA3-384", "content" : "7971fad6691a1b90eb2729119582ee638b58a70f11c3232bd277183ce675e4c70dae63a0ba56982c87efc0bc3c2ea338" }, { "alg" : "SHA3-256", "content" : "338d7fdf8c11b4fc538c05420fb2c6426dab2209e2b1e2a20f1549277f4a4a4f" }, { "alg" : "SHA3-512", "content" : "5722d084f2f3aaa11147ce496c548647555669895d8f456d501a07ba0027a86eea44335c906efcd7a035b7a9ecc1ffe55963023b3581f3005b8acf81f7c9c7fa" } ], "licenses" : [ { "license" : { "id" : "MIT" } } ], "purl" : "pkg:maven/org.pcollections/pcollections@4.0.2?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://github.com/hrldcpr/pcollections" }, { "type" : "vcs", "url" : "https://github.com/hrldcpr/pcollections" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/com.github.oowekyala.ooxml/nice-xml-messages@3.1?type=jar", "group" : "com.github.oowekyala.ooxml", "name" : "nice-xml-messages", "version" : "3.1", "description" : "Associates XML DOM nodes to their position in source, to enrich error messages. This builds on top of the standard org.w3c.dom API. Should probably not be used in performance critical code, but can hopefully cleanup reporting logic in places where user-friendly messages are important.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "39c913451ff2d2ec740c58a77a26fa16" }, { "alg" : "SHA-1", "content" : "4c3863b0f015af5cfd9abe02fab364fb99867167" }, { "alg" : "SHA-256", "content" : "0b4ceb5b8362d43c9c6c49b1bd57f1c5da54d3c5c7c305fa39c0a04462bb4799" }, { "alg" : "SHA-512", "content" : "6b3e7c2f1d4b9a46c8dc113b60deee5e2a70b57f308886074816e0d7e3a5460cfb7c1c547171c0ad125deb551bafbb41b911c52db8bac448be3504b0d407a7fc" }, { "alg" : "SHA-384", "content" : "c79cd24010cfcfcc712509412dacbfb5bcc4a64e98bfd6a638698350c4f45c1a2c6724491368cc56a4d5947cbe0482e1" }, { "alg" : "SHA3-384", "content" : "218130aec89a116471d0dd34b9c733f144e36f1cbcd2b705fea4ed2f7fb90e8c6a5386aaff037bc772e180868b13c03f" }, { "alg" : "SHA3-256", "content" : "02b4007b4ada909e9bb676189310b233c8c2c254e2bdc901928030ef0f96f346" }, { "alg" : "SHA3-512", "content" : "f2e7883ab42ba31eb380ed9dc7199f3d7d4b0c0c8b06432ebe502c6e117017abdd579f86032a14bf842fb68889a13d1bd504a60a212f889e171e78003c0322a0" } ], "licenses" : [ { "license" : { "id" : "MIT", "url" : "https://opensource.org/license/mit/" } } ], "purl" : "pkg:maven/com.github.oowekyala.ooxml/nice-xml-messages@3.1?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://github.com/oowekyala/nice-xml-messages" }, { "type" : "distribution-intake", "url" : "https://s01.oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "vcs", "url" : "https://github.com/oowekyala/nice-xml-messages" } ] } ], "dependencies" : [ { "ref" : "pkg:maven/net.sourceforge.pmd/pmd-python@7.25.0?type=jar", "dependsOn" : [ "pkg:maven/net.sourceforge.pmd/pmd-core@7.25.0?type=jar" ] }, { "ref" : "pkg:maven/net.sourceforge.pmd/pmd-core@7.25.0?type=jar", "dependsOn" : [ "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar", "pkg:maven/org.slf4j/jul-to-slf4j@1.7.36?type=jar", "pkg:maven/org.antlr/antlr4-runtime@4.13.2?type=jar", "pkg:maven/net.sf.saxon/Saxon-HE@12.9?type=jar", "pkg:maven/org.apache.commons/commons-lang3@3.20.0?type=jar", "pkg:maven/org.ow2.asm/asm@9.10.1?type=jar", "pkg:maven/com.google.code.gson/gson@2.14.0?type=jar", "pkg:maven/org.checkerframework/checker-qual@4.1.0?type=jar", "pkg:maven/org.pcollections/pcollections@4.0.2?type=jar", "pkg:maven/com.github.oowekyala.ooxml/nice-xml-messages@3.1?type=jar" ] }, { "ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/org.slf4j/jul-to-slf4j@1.7.36?type=jar", "dependsOn" : [ "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar" ] }, { "ref" : "pkg:maven/org.antlr/antlr4-runtime@4.13.2?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/net.sf.saxon/Saxon-HE@12.9?type=jar", "dependsOn" : [ "pkg:maven/org.xmlresolver/xmlresolver@5.3.3?type=jar", "pkg:maven/org.xmlresolver/xmlresolver@5.3.3?classifier=data&type=jar" ] }, { "ref" : "pkg:maven/org.xmlresolver/xmlresolver@5.3.3?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/org.xmlresolver/xmlresolver@5.3.3?classifier=data&type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/org.apache.commons/commons-lang3@3.20.0?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/org.ow2.asm/asm@9.10.1?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/com.google.code.gson/gson@2.14.0?type=jar", "dependsOn" : [ "pkg:maven/com.google.errorprone/error_prone_annotations@2.48.0?type=jar" ] }, { "ref" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.48.0?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/org.checkerframework/checker-qual@4.1.0?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/org.pcollections/pcollections@4.0.2?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/com.github.oowekyala.ooxml/nice-xml-messages@3.1?type=jar", "dependsOn" : [ ] } ] }