{ "bomFormat" : "CycloneDX", "specVersion" : "1.6", "serialNumber" : "urn:uuid:79e04ab6-c599-3a80-a748-96af4081f8eb", "version" : 1, "metadata" : { "timestamp" : "2026-10-01T08:40:24Z", "lifecycles" : [ { "phase" : "build" } ], "tools" : { "components" : [ { "type" : "library", "author" : "OWASP Foundation", "group" : "org.cyclonedx", "name" : "cyclonedx-maven-plugin", "version" : "2.9.2", "description" : "CycloneDX Maven plugin", "hashes" : [ { "alg" : "MD5", "content" : "843a7130400f75d33f563dc7e9f52dea" }, { "alg" : "SHA-1", "content" : "2cac5a176b9f48801dfc4910d4f6a34bfbb13445" }, { "alg" : "SHA-256", "content" : "d9e5a12bac3c1a91d85f3a1ad84307099f457ff24aa65b438ba7de9ca784a54e" }, { "alg" : "SHA-512", "content" : "636f788518752c5a23d14bad41d68b0d549e4b3a3d720d66f2f6e2b8b956207942ee12abba968a1e9aac6cf1d78d9e738a4a75eeb8bc6fca2377030fbb482407" }, { "alg" : "SHA-384", "content" : "72aad41633b92fadd4dbd1c6f5c1b956836b22d3b96afbdd7ca8b8eb0456eec00c2ed658e3c2d4e93d95048bcc23dac8" }, { "alg" : "SHA3-384", "content" : "9837cee0f9b7d575f8d88df3ad6f58a075032ad2635e0987abbc102240327f1cec87dc062b3034009f028ab5baf988f9" }, { "alg" : "SHA3-256", "content" : "4c654267cde6eb6d295dbc06b33e33528412bee57549dae89c85b8df8202dbcb" }, { "alg" : "SHA3-512", "content" : "f7da73632ef2fd1c2d85f0cf5eebc2b6a3ff1ae2ed0945442e679da71490562a2ff6b67422dbd5285f4042eda6637e6f3544f62825a625b38efacfdebc8df137" } ] } ] }, "component" : { "type" : "library", "bom-ref" : "pkg:maven/org.zkoss.pivot/pivottable@4.0.0-FL-2026100116-Eval?type=jar", "group" : "org.zkoss.pivot", "name" : "pivottable", "version" : "4.0.0-FL-2026100116-Eval", "description" : "ZK Pivot Table components", "purl" : "pkg:maven/org.zkoss.pivot/pivottable@4.0.0-FL-2026100116-Eval?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://www.zkoss.org/pivot" } ] }, "properties" : [ { "name" : "maven.goal", "value" : "makeBom" }, { "name" : "maven.scopes", "value" : "compile,provided,runtime,system" } ] }, "components" : [ { "type" : "library", "bom-ref" : "pkg:maven/org.zkoss.common/zcommon@10.3.1?type=jar", "group" : "org.zkoss.common", "name" : "zcommon", "version" : "10.3.1", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "fe4683f80021d8586ef729db3db20234" }, { "alg" : "SHA-1", "content" : "e308a0e7b2dfd12d88ddbc156327a1e4d2921baa" }, { "alg" : "SHA-256", "content" : "c84d47b393471ed3c9fdaa9bbe7c413e8fc870e12bd8a010274a2fb76c0fdcc9" }, { "alg" : "SHA-512", "content" : "d05b6ab1338b427b5237b9b0419af16f47e8ccbda46eb8dd1a2d4f908101ea9890f9ff49c03fb7a5d73613f2495936e7d07d8e3835b7b036c85c7903a2233b12" }, { "alg" : "SHA-384", "content" : "71bc29d35469837e2605e40b99c3ca0b4fdbe7fa39faa66f8d735269e65801fc85364da28dc023c678c2d7dc7c669268" }, { "alg" : "SHA3-384", "content" : "a2d7bdca632b31d53840e1ff3d3a181f7ba8af12d0d9ff2caa04a21a5d55cb05319076f529bf182795b5a6e79898fbdf" }, { "alg" : "SHA3-256", "content" : "f7225779619aac304f8208728847ce063d5092dfc1e3b5648bfdc1042f2045c0" }, { "alg" : "SHA3-512", "content" : "5f6410a24fdc3d310c40bb89f284dbcb8f8e92d224d8e814fcd3cdc5250395a62851f423ac2fa4e49aea8b19f90ac592da69e89cc598f92239f5f33fe762aedf" } ], "purl" : "pkg:maven/org.zkoss.common/zcommon@10.3.1?type=jar" }, { "type" : "library", "bom-ref" : "pkg:maven/org.zkoss.common/zel@10.3.1?type=jar", "group" : "org.zkoss.common", "name" : "zel", "version" : "10.3.1", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "cf5f9712dec7254d6f708df2644dcb0d" }, { "alg" : "SHA-1", "content" : "83e6746348a28732dd4c7199455012cfd6abaed3" }, { "alg" : "SHA-256", "content" : "643be6c3d6214173844fa36f4dda3594cad05e0ccf70dceb4acbc308caed9e2f" }, { "alg" : "SHA-512", "content" : "4979698776810f7cc0c98bfd47d46491b7a7eb4f3d1407dfa451cd07b402118b802a6e5e6059ac0280721cdc8418e1a7e57b201caba8e2f9043dcf997f4b5912" }, { "alg" : "SHA-384", "content" : "496db80cb02ebf57363162810cd451d50eb799c5b3248596c25bfbdc87c1d9bc6280fbe873f6a05994f3e2d2668f55d8" }, { "alg" : "SHA3-384", "content" : "3dbb92a6b0a933ca4f8f2237d2a4d776efe5bc74563fbbe8786f408a38a09164ada007fdfcd6fc8c91609865086da491" }, { "alg" : "SHA3-256", "content" : "864d955dd8b969b99d15ecbde828dd8bb28c00572add1be3158f6ba6c148dcf2" }, { "alg" : "SHA3-512", "content" : "ddddd4a4529589baffa415e26c81e4517a4c9f18e05a3ef8183ca9924a36cc1f323691de9d41554ed348560aa4aaa1441f17ba02696657e9634eebe5a559d2b2" } ], "purl" : "pkg:maven/org.zkoss.common/zel@10.3.1?type=jar" }, { "type" : "library", "bom-ref" : "pkg:maven/org.javassist/javassist@3.29.2-GA?type=jar", "publisher" : "Shigeru Chiba, www.javassist.org", "group" : "org.javassist", "name" : "javassist", "version" : "3.29.2-GA", "description" : "Javassist (JAVA programming ASSISTant) makes Java bytecode manipulation simple. It is a class library for editing bytecodes in Java.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "9783c90ffa4d36eddda9526fde06f3ea" }, { "alg" : "SHA-1", "content" : "6c32028609e5dd4a1b78e10fbcd122b09b3928b1" }, { "alg" : "SHA-256", "content" : "a90ddb25135df9e57ea9bd4e224e219554929758f9bae9965f29f81d60a3293f" }, { "alg" : "SHA-512", "content" : "5f9e939a0c094e2c4d4b8509c126fcb9033ea47c2577e172b2326c8aceb86b5bc3168d056b3d986c7bb3d3f46ed6fed3155c77734afcbb8cb75162df0375a657" }, { "alg" : "SHA-384", "content" : "8b1f8b7235a7aeab500bcff13b5f88fe95df983502975021ac7d5edd0c73d708f65da48796f5680f2ef710fed9d0e0aa" }, { "alg" : "SHA3-384", "content" : "d7944350dfa3808264a93445efedbab2645807d533b8cd9e95540e94ae38c6b7aafa6e29d1cbba669b67dda69881814e" }, { "alg" : "SHA3-256", "content" : "a87df212cdfc24f3075ac8d4dec52cc9bd16446ec489706f60939aaf196fef50" }, { "alg" : "SHA3-512", "content" : "9fffcb716b656fff4ad299ca4ef1b11166016a4bbe6c97317c894ca3163136ec1dbae62cc46a9f8a945cc6592ab930dccf8e0261f0a89025b0a8380fdc96e8b2" } ], "licenses" : [ { "license" : { "id" : "MPL-1.1" } }, { "license" : { "id" : "LGPL-2.1-only" } }, { "license" : { "id" : "Apache-2.0", "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], "purl" : "pkg:maven/org.javassist/javassist@3.29.2-GA?type=jar", "externalReferences" : [ { "type" : "website", "url" : "http://www.javassist.org/" }, { "type" : "distribution-intake", "url" : "https://repository.jboss.org/nexus/service/local/staging/deploy/maven2/" }, { "type" : "issue-tracker", "url" : "https://jira.jboss.org/jira/browse/JASSIST/" }, { "type" : "vcs", "url" : "scm:git:git@github.com:jboss-javassist/javassist.git" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar", "publisher" : "QOS.ch", "group" : "org.slf4j", "name" : "slf4j-api", "version" : "2.0.7", "description" : "The slf4j API", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "403dffa46cdd2e3c82da19df4f394a4c" }, { "alg" : "SHA-1", "content" : "41eb7184ea9d556f23e18b5cb99cad1f8581fc00" }, { "alg" : "SHA-256", "content" : "5d6298b93a1905c32cda6478808ac14c2d4a47e91535e53c41f7feeb85d946f4" }, { "alg" : "SHA-512", "content" : "216d2cac27d501972c888f94dfa747d700b80d60813884b6ab4b12c6a3b17ed0c21a1d27e1aa4332c97c828f20039e3913d2763d7e1a3cef36ae4389a276e7a8" }, { "alg" : "SHA-384", "content" : "c25b39f418aa726ba8405dfd9b356131f89984e2ef5a55a724a2abf3b7c78443f671105835161d2414d602cf03da9f2d" }, { "alg" : "SHA3-384", "content" : "f33abfaac21badae6f85d3ebbc6c1204fd7fda3bb15173e763fa8cee95bce6a8270eec2c8f49343c66c8d2767bc317e1" }, { "alg" : "SHA3-256", "content" : "6e00d4b264a2afc4ca4e98f716ecece66c32c626ca3f8c5d56b22092b6fe417b" }, { "alg" : "SHA3-512", "content" : "ad7b9142d370fc532a07cdd43881a129b012ff50e2bede3ac27d9bd31ec707bf2f45e82002fa59e962955cc38ab73cdd77713fca50cedc926c046f5617c1285b" } ], "licenses" : [ { "license" : { "id" : "MIT", "url" : "https://opensource.org/license/mit/" } } ], "purl" : "pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar", "externalReferences" : [ { "type" : "website", "url" : "http://www.slf4j.org" }, { "type" : "distribution-intake", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "vcs", "url" : "https://github.com/qos-ch/slf4j/slf4j-api" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/org.apache-extras.beanshell/bsh@2.0b6?type=jar", "group" : "org.apache-extras.beanshell", "name" : "bsh", "version" : "2.0b6", "description" : "BeanShell is a small, free, embeddable Java source interpreter with object scripting language features, written in Java. BeanShell dynamically executes standard Java syntax and extends it with common scripting conveniences such as loose types, commands, and method closures like those in Perl and JavaScript.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "0f27117d5b4cfeea1d0634125313fac0" }, { "alg" : "SHA-1", "content" : "fb418f9b33a0b951e9a2978b4b6ee93b2707e72f" }, { "alg" : "SHA-256", "content" : "a17955976070c0573235ee662f2794a78082758b61accffce8d3f8aedcd91047" }, { "alg" : "SHA-512", "content" : "a39321a99a8a619a48b65752f6ee6b8f11d3b28ebb051082ec70a70a0d5041e83d144378df191929e3d6562bd5ee4c4f1ccadb0ba42055529d18800a41d8ae18" }, { "alg" : "SHA-384", "content" : "b45a64491085f76d670f89225d7a54e80e255c96f5f8f4d2ce5f1a56276fef5df2dede1d71dc954e0283e6edef1d8fdb" }, { "alg" : "SHA3-384", "content" : "800f40bfa0edba4a73b97ea376bf5e4d6b1fdfa3779e9ad292fdc1a06a350dc6c185238efc7f6ce77e3e4f47a5f19150" }, { "alg" : "SHA3-256", "content" : "2f977780aacfc13d62a0d18f33fd088bc7af72920daaeb0c34f67448712fa5ab" }, { "alg" : "SHA3-512", "content" : "7136ae9e0df1554547a0234c684c187b8e72ec4470b15d678ab8dedd955b11f819dc8812d055c9c016c6dd5b3b65a39f8f801d0907716cab4dacd565b9f40f49" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/org.apache-extras.beanshell/bsh@2.0b6?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://github.com/beanshell/beanshell/" }, { "type" : "distribution-intake", "url" : "https://api.bintray.com/maven/beanshell/Beanshell/bsh" }, { "type" : "issue-tracker", "url" : "https://github.com/beanshell/beanshell/issues" }, { "type" : "vcs", "url" : "https://github.com/beanshell/beanshell/" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.4.3?type=jar", "publisher" : "The Apache Software Foundation", "group" : "org.apache.httpcomponents.core5", "name" : "httpcore5", "version" : "5.4.3", "description" : "Apache HttpComponents HTTP/1.1 core components", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "40cba87d4704bc9e1691f340fb8042cf" }, { "alg" : "SHA-1", "content" : "32a0699fbcb103f5621c00983ee8f5aac080e4a6" }, { "alg" : "SHA-256", "content" : "18bfbbabb478dfb67f31aeaf428c387f3c3df654582e1309f708ee1f3086830a" }, { "alg" : "SHA-512", "content" : "2ae04ae83015c46314a502a0973bec86312680cb548f0ae68002af4f5fd958deb60c702ad9dcae72c23561e2e0954518bb0355a1496096f7e9b9a2efbb7c9bae" }, { "alg" : "SHA-384", "content" : "09312cfbd7b33c3c8712405aff437ef7b93260a07a625b7cc491d3e2fa0d65852d72f4f6701ef707c4cae52caadcddd0" }, { "alg" : "SHA3-384", "content" : "419f9608bec952746b274a3510bc0f0dbdb6cc4b1269c9bd89c218894a42fda0dfd7b46912b57cc722b3d76b7f11c07b" }, { "alg" : "SHA3-256", "content" : "8cb162e60b804205084fcc8e562f6eb47f5c13eefa42208cf6accab1d28e0ba2" }, { "alg" : "SHA3-512", "content" : "eccc71fecc0525c6fca46ca9e19eaecf26d646f3e71528796e8dcc0f16cb0882d485ceffa1c48e14e60eb8b429ae0fd5935274bb8907c2869ab54cb76e931abd" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.4.3?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://hc.apache.org/httpcomponents-core-5.4.x/5.4.3/httpcore5/" }, { "type" : "distribution-intake", "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" }, { "type" : "issue-tracker", "url" : "https://issues.apache.org/jira/browse/HTTPCORE" }, { "type" : "mailing-list", "url" : "https://lists.apache.org/list.html?httpclient-users@hc.apache.org" }, { "type" : "vcs", "url" : "https://github.com/apache/httpcomponents-core/tree/5.4.3/httpcore5" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/org.owasp.encoder/encoder@1.3.1?type=jar", "publisher" : "OWASP (Open Web-Application Security Project)", "group" : "org.owasp.encoder", "name" : "encoder", "version" : "1.3.1", "description" : "The OWASP Encoders package is a collection of high-performance low-overhead contextual encoders, that when utilized correctly, is an effective tool in preventing Web Application security vulnerabilities such as Cross-Site Scripting.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "c826f7776c4d03adcbf1a2bceef84627" }, { "alg" : "SHA-1", "content" : "1ebf20e19ddc3fa952f4e2af220a20b085ce87ba" }, { "alg" : "SHA-256", "content" : "c9c56c8970c7cb11b231913ba5190ce930f8fd4fac2bd918810642dc3848e757" }, { "alg" : "SHA-512", "content" : "98ef238bbdd93e0dc18928e5d876cb3f264f2d1808cd6dc5eda3fca2f3a20b2dd53d5872b413a261ca9e0ff2726cd5b067ea14921eddc3e5c8e9d73b570b3133" }, { "alg" : "SHA-384", "content" : "c482fe5793c29646104f72b52838f8fd674d1a0b5428f07e7f4204d05a8ea373946a014e172c0f56e44e36800ac633be" }, { "alg" : "SHA3-384", "content" : "64f0325baa1a8e16729f6b98722904a3ae9c066e6393cf38eeb01138e8594253aa819798c5dd2f484c7344cc57d16a11" }, { "alg" : "SHA3-256", "content" : "fb3692482e597d06305b67fc60ca0d1f5eafce6e74b4bdfebba0acd06108d897" }, { "alg" : "SHA3-512", "content" : "2a118e5d9129545fcf17675704ec3429f88beb015ca7d161d2488d81d3b29c5000ce41d4997204dd915ff5ea41dc5dfa013df636e1197d9c3b0cc6835089e9c7" } ], "licenses" : [ { "license" : { "id" : "BSD-3-Clause" } } ], "purl" : "pkg:maven/org.owasp.encoder/encoder@1.3.1?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://www.owasp.org/index.php/OWASP_Java_Encoder_Project/encoder" }, { "type" : "distribution-intake", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "issue-tracker", "url" : "https://github.com/owasp/owasp-java-encoder/issues" }, { "type" : "mailing-list", "url" : "https://github.com/OWASP/owasp-java-encoder/issues" }, { "type" : "vcs", "url" : "https://github.com/owasp/owasp-java-encoder/encoder" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/org.zkoss.zk/zul@10.3.1?type=jar", "group" : "org.zkoss.zk", "name" : "zul", "version" : "10.3.1", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "134ecccc7134a94ed6f131c78cb6c866" }, { "alg" : "SHA-1", "content" : "8c1e116f9f238aa0cb5a32c56c2cead395269208" }, { "alg" : "SHA-256", "content" : "065478b50ea34f3b56a2dbf2e4ff4f9518b86e583530b6027197915ca0d81ddf" }, { "alg" : "SHA-512", "content" : "ef9213dd45035a00eb7f169080c44b1694fee10b624b2e9672fdcc899cf7ec933901113d2284106fc09f8eac22506a898ddfe21be2c3a87308940f6c25327f1c" }, { "alg" : "SHA-384", "content" : "adf47ce781e7289121d9498faae1a19930d97d44def8436b0035b557c682aa9d35d9219b5ca9667ad20ff0cc9d27a3e7" }, { "alg" : "SHA3-384", "content" : "acc112ac2d50c73d70e8b71bb8c7b6a4756df14298048b5dd43a4f6cc2ea1a6158ee6ca3616fe81835f091007afd4cfb" }, { "alg" : "SHA3-256", "content" : "96bee5a9d511ff0269a44ff2765aae846f00b51e9940b08ecea47c6a0a65d28a" }, { "alg" : "SHA3-512", "content" : "d8eb0a9f0b8ba9416d505292459149c27da9aecb10b199e6bea1fed56f412a0e34edc9be1a70d3edf499e7e068ad07c86acfcf43bd854ed5c77492fe5146562f" } ], "purl" : "pkg:maven/org.zkoss.zk/zul@10.3.1?type=jar" }, { "type" : "library", "bom-ref" : "pkg:maven/org.zkoss.zk/zk@10.3.1?type=jar", "group" : "org.zkoss.zk", "name" : "zk", "version" : "10.3.1", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "aba91f759d2d4fce3d658a4441c91291" }, { "alg" : "SHA-1", "content" : "2a1e5cd43985e49c32dca7a0c8a27bf63ee5d266" }, { "alg" : "SHA-256", "content" : "b1536b419adb2422165be2c66a7c5fa6f2085dc055fa1861053e6da960a503ce" }, { "alg" : "SHA-512", "content" : "2b262e530e84884f4fd3f36a51860cf9be8e94107cca7f0a6621e2fab6ac37de5635fcecf627f53488b93332a35af50bd0771c1fa2eded7ea27e9478b2d1b110" }, { "alg" : "SHA-384", "content" : "21223e5a99fae9285afd70c1725bc3b2359c32fb3ef97148bf2bdb8e35538361ec6f1225186ae2b89d0bf6cb9729079a" }, { "alg" : "SHA3-384", "content" : "ba1ac94f66a69aac60c4c7a713a9809207aa4795a51765e902be4cd1d5b3b3f5744d713cc320b9ed76e21efd4b706335" }, { "alg" : "SHA3-256", "content" : "e281e8c5a4f003b66a7e72af34f9469c4b01cb05b6b742224ffe4b473d85a6f7" }, { "alg" : "SHA3-512", "content" : "3d732fb7defc91e2217798e95c97ad3472ae44bbed1bb8d48173f133c63e289c2fdbcb474b3cb404ba9e6d49d8a44469d4524576466d304f10362a84c89a6afc" } ], "purl" : "pkg:maven/org.zkoss.zk/zk@10.3.1?type=jar" }, { "type" : "library", "bom-ref" : "pkg:maven/org.zkoss.common/zweb@10.3.1?type=jar", "group" : "org.zkoss.common", "name" : "zweb", "version" : "10.3.1", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "cb880aea2b2ed3cce59073ff4aff8037" }, { "alg" : "SHA-1", "content" : "a07e1c9e961464fe73862d652b5c465410037034" }, { "alg" : "SHA-256", "content" : "6f280e220502547820935aab7edc647460c3c789318be1d1fa0c147b37ad6fb4" }, { "alg" : "SHA-512", "content" : "ba2bea97d82f66c94feb0ef8704a7da1398de02800427f8d75c615c518d5fe09a3a3f023d682b3fe60bc845758cf1250c18ff53931993a308b28a056ba9176d9" }, { "alg" : "SHA-384", "content" : "0507293ee6901f60a7f2f018b9510e597ea6af89da94eb858a440db30bbfd1e7cfe92bda239fd91135b02d78c614d022" }, { "alg" : "SHA3-384", "content" : "771880b846f9937d85787d8acb1de88e83fecae89be41a38ee07c55bc523637e94d01cd33c4b1b74e419349a9a9fb277" }, { "alg" : "SHA3-256", "content" : "32886f316eaf4247688d552c06bd5ce879c3454865ac803012e8c3f72ec1d4f2" }, { "alg" : "SHA3-512", "content" : "80a64f48d1822bff7ebd73e0ad6884c0060c3429f8f9098ed3ec1b0e0f6e5c7324948a1e7565cfedb0b8638d20a577c1e0dae41b391b213927cc938bb9822ab3" } ], "purl" : "pkg:maven/org.zkoss.common/zweb@10.3.1?type=jar" }, { "type" : "library", "bom-ref" : "pkg:maven/org.zkoss.zk/zkwebfragment@10.3.1?type=jar", "group" : "org.zkoss.zk", "name" : "zkwebfragment", "version" : "10.3.1", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "bf08455630e158a877473a7d7c6284ca" }, { "alg" : "SHA-1", "content" : "715051e74db403db91bccf828cd8fb3aaa98d32a" }, { "alg" : "SHA-256", "content" : "5c30db06d77f99057ea03e045a77e5304071fc263613d66c32f9840746c1195f" }, { "alg" : "SHA-512", "content" : "6b35660d6c3b5def7e00ed55312f183c7a25be6c5990676ba67ace3f4e3a407e959b2ac03dff0bea1488b50b897a210d9c8ff359a91625ad91b9cb31588fd448" }, { "alg" : "SHA-384", "content" : "f764d605665fc2b19fec2d1e6dbcb7f40c463e90bd16dba61bad5d104acfe3a2e4f7ec53d7950c0aa4bd02e1d95c8552" }, { "alg" : "SHA3-384", "content" : "4a17d709f387f3ff2cd3527481f48231a82ac817a93c8ad5c89bc3ce3acd9d06612caa42ec23922c7f55b9a216b17184" }, { "alg" : "SHA3-256", "content" : "2a818793ccb2ade0dde0cf7adb2ebe671a4e9c8e4db96f2e36a11f82637d9613" }, { "alg" : "SHA3-512", "content" : "a1dc3cf614856282a0f805167d394852e44515a41489952a2c224d6bb2dcef58143f9870cc24a2d17ed9a4c18874847113cdc6efbe2a4c12a48d92bb51ed8f4c" } ], "purl" : "pkg:maven/org.zkoss.zk/zkwebfragment@10.3.1?type=jar" }, { "type" : "library", "bom-ref" : "pkg:maven/org.apache.commons/commons-fileupload2-javax@2.0.0-M4?type=jar", "publisher" : "The Apache Software Foundation", "group" : "org.apache.commons", "name" : "commons-fileupload2-javax", "version" : "2.0.0-M4", "description" : "The Apache Commons FileUpload Javax component provides a simple yet flexible means of adding support for multipart file upload functionality to Javax servlets and web applications.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "59d0541318ce334e98f047ed472b4304" }, { "alg" : "SHA-1", "content" : "1655c138db35bd1f4a296a5c1c7d80e6d7ef7588" }, { "alg" : "SHA-256", "content" : "fbbf2300bb685c573ad2ca9ea71fe390a1269db384d1c1959b3698dbe096dbb3" }, { "alg" : "SHA-512", "content" : "12774dddd5061eaf4482d3ac3670c77916b17fccd5862f35fa1e760c8985f2040e712d3d268af29d153028e65b6c7785774e579a7b75f1b6a13e82e312df3590" }, { "alg" : "SHA-384", "content" : "b3435fb5791b83206e67db9d94fa34dca7c10e0b6b675ba2266c642fcd3db07f3b0fc837486a71524e36cddbeb45818f" }, { "alg" : "SHA3-384", "content" : "b90fbef7a5bffd1bcc340bbef602831fac398801138892166bfd02d89d9f65434890e7b4f5363516dcb2083cfbe48c02" }, { "alg" : "SHA3-256", "content" : "dfdb20326fd6ac2ab24a895a9009b73d8e63a74b28ee7baecaa442bf1e70cef8" }, { "alg" : "SHA3-512", "content" : "32f8a803345f94c6d40d8791d0c2ada75486d4a374998cbc977db31c48db9e604f08440a2ad965039d499b464cc36bf10659ae137cf25086c0b803a601845cb1" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0", "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], "purl" : "pkg:maven/org.apache.commons/commons-fileupload2-javax@2.0.0-M4?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://commons.apache.org/proper/commons-fileupload/commons-fileupload2-javax/" }, { "type" : "build-system", "url" : "https://github.com/apache/commons-parent/actions" }, { "type" : "distribution-intake", "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" }, { "type" : "issue-tracker", "url" : "https://issues.apache.org/jira/browse/FILEUPLOAD" }, { "type" : "mailing-list", "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/" }, { "type" : "vcs", "url" : "https://gitbox.apache.org/repos/asf?p=commons-fileupload.git/commons-fileupload2-javax" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/org.apache.commons/commons-fileupload2-core@2.0.0-M4?type=jar", "publisher" : "The Apache Software Foundation", "group" : "org.apache.commons", "name" : "commons-fileupload2-core", "version" : "2.0.0-M4", "description" : "The Apache Commons FileUpload Core component provides the framework for a simple yet flexible means of adding support for multipart file upload functionality to servlets, portlets, and web applications.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "e7fb1d376a2cab4732c3c12acf69413d" }, { "alg" : "SHA-1", "content" : "3284839791dc0130ad07d594a05c7c8750aa4dd6" }, { "alg" : "SHA-256", "content" : "d285cd8cdde3d9466208b37c7750454b0b280ea773b19b050ae1e2ddb09e6991" }, { "alg" : "SHA-512", "content" : "c2dcb708c0c9f70e53b1704088512a1cd566921734079e008f665fe9bfbdd06b05e24fed352a06a1e2f27e576a72ba81006cc0d85d684b1a08d3f6f54213a777" }, { "alg" : "SHA-384", "content" : "46538a44217a3cbf048ca330dc4a804c21a5f8a9770daa5de7ef8eba8a03155df5fc1c9e84ab4a6cc9604e5c90da2129" }, { "alg" : "SHA3-384", "content" : "b11c98a9268f0cfff7456a4945a281e0588955c86205cdc42c2d410191fad4528b004aa2e2cc8ae16c19c58719ca20a9" }, { "alg" : "SHA3-256", "content" : "a93c199eb039d6603181037c73d8c3c080e2c53ebc76e610f784a5d5f85f05fd" }, { "alg" : "SHA3-512", "content" : "1d5a8d6a6b341e19f3352764f7100659788ca4a11807ea3d261de1cd7c6b3676b8c24b64baa18ebcb5135bf07e35607ae1903a44b11048a149f2966a24a67b29" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0", "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], "purl" : "pkg:maven/org.apache.commons/commons-fileupload2-core@2.0.0-M4?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://commons.apache.org/proper/commons-fileupload/commons-fileupload2-core/" }, { "type" : "build-system", "url" : "https://github.com/apache/commons-parent/actions" }, { "type" : "distribution-intake", "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" }, { "type" : "issue-tracker", "url" : "https://issues.apache.org/jira/browse/FILEUPLOAD" }, { "type" : "mailing-list", "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/" }, { "type" : "vcs", "url" : "https://gitbox.apache.org/repos/asf?p=commons-fileupload.git/commons-fileupload2-core" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/commons-io/commons-io@2.17.0?type=jar", "publisher" : "The Apache Software Foundation", "group" : "commons-io", "name" : "commons-io", "version" : "2.17.0", "description" : "The Apache Commons IO library contains utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "f6232d0e290d58bb93f74f67165bf91f" }, { "alg" : "SHA-1", "content" : "ddcc8433eb019fb48fe25207c0278143f3e1d7e2" }, { "alg" : "SHA-256", "content" : "4aa4ca48f3dfd30b78220b7881d8cb93eac4093ec94361b6befa9487998a550b" }, { "alg" : "SHA-512", "content" : "98bc665c16268ff1074f415f493ba66d214ac23665b6e964086b60d523b35b1b03fd2e79211e84aa8ebf0921ea028f992827e4642fd086d7104a408b454d38ce" }, { "alg" : "SHA-384", "content" : "4dabc3cd47eec79ae537e48739f9abbc64e9b75f63809f35f062d54b8d737de0ba282d7d35a236940b9152e1c54f5918" }, { "alg" : "SHA3-384", "content" : "fb7a6dec31b6170f729143103c47fead49d50b0d9f58c42ec55a593b23d30c4c43114579790f1e43adfc598f684d4493" }, { "alg" : "SHA3-256", "content" : "bafc20a1433479b07bd526655f244eee5fe1c99cbf75a0ac27e82237f9c6589b" }, { "alg" : "SHA3-512", "content" : "47d71f864268c8ced739b8a78a906fdc9777ed0eae3b56218a8d4e19d1787564ab39edf6034b08700c12cfca47edf505551e6352163a9bb50a93279890e241e1" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0", "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], "purl" : "pkg:maven/commons-io/commons-io@2.17.0?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://commons.apache.org/proper/commons-io/" }, { "type" : "build-system", "url" : "https://github.com/apache/commons-parent/actions" }, { "type" : "distribution-intake", "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" }, { "type" : "issue-tracker", "url" : "https://issues.apache.org/jira/browse/IO" }, { "type" : "mailing-list", "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/" }, { "type" : "vcs", "url" : "https://gitbox.apache.org/repos/asf?p=commons-io.git" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/com.google.guava/guava@33.4.8-jre?type=jar", "group" : "com.google.guava", "name" : "guava", "version" : "33.4.8-jre", "description" : "Guava is a suite of core and expanded libraries that include utility classes, Google's collections, I/O classes, and much more.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "72920caab34426c5815e3b00f80e3b01" }, { "alg" : "SHA-1", "content" : "e70a3268e6cd3e7d458aa15787ce6811c34e96ae" }, { "alg" : "SHA-256", "content" : "f3d7f57f67fd622f4d468dfdd692b3a5e3909246c28017ac3263405f0fe617ed" }, { "alg" : "SHA-512", "content" : "82c43d82fee2b3264e53cd2e9451865f9467ec0baa68d0ddfffa06a1e5465872913150ef96e99ea91daec4387248d832ec9398859f2fa5f08f65caf103306ba3" }, { "alg" : "SHA-384", "content" : "6645343c3c7a989539d8e77a53b0b848bc1cd739a405353aa6c00b3e4e6c58a93770c988e53d4c0326ed7ea608eb5820" }, { "alg" : "SHA3-384", "content" : "cc6d1a11626c5ba5fdec819fdc4c0e97afa3e946744dbf9dae10f9ad77f6570703356e301a686c7727b80095d3ec4bea" }, { "alg" : "SHA3-256", "content" : "b09ae5778552402e8e5780adbee939191ea149cbf0faf2f9c15a818167730df0" }, { "alg" : "SHA3-512", "content" : "de052d07cf9a308fe4c1a0743534cf8b651fbd6e5f570b0c1a3d9a3269669fbae164bbbfcd089a52729b3a1d8917fbb73c1dac65cb61f93fc200568f32d09a27" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/com.google.guava/guava@33.4.8-jre?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://github.com/google/guava" }, { "type" : "build-system", "url" : "https://github.com/google/guava/actions" }, { "type" : "distribution-intake", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "issue-tracker", "url" : "https://github.com/google/guava/issues" }, { "type" : "vcs", "url" : "https://github.com/google/guava/guava" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/com.google.guava/failureaccess@1.0.3?type=jar", "group" : "com.google.guava", "name" : "failureaccess", "version" : "1.0.3", "description" : "Contains com.google.common.util.concurrent.internal.InternalFutureFailureAccess and InternalFutures. Most users will never need to use this artifact. Its classes are conceptually a part of Guava, but they're in this separate artifact so that Android libraries can use them without pulling in all of Guava (just as they can use ListenableFuture by depending on the listenablefuture artifact).", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "29a782e90f6b37218b18bb880d2a8f4a" }, { "alg" : "SHA-1", "content" : "aeaffd00d57023a2c947393ed251f0354f0985fc" }, { "alg" : "SHA-256", "content" : "cbfc3906b19b8f55dd7cfd6dfe0aa4532e834250d7f080bd8d211a3e246b59cb" }, { "alg" : "SHA-512", "content" : "72be228e7805da5623e42bf024ded7d9147023c66b22f4dbd04ac6898201af46ee82e1f92ea51eb0595f1b49151c4b8ecb862653d4906c17609c42544ee97abf" }, { "alg" : "SHA-384", "content" : "9dd1a2a08efda311604992d3e7cee64873bc8c64de3b423b1b3a3dcc1f7f0810bb03901fbfe39a5f835accb0646f4ad8" }, { "alg" : "SHA3-384", "content" : "ffd67766c165ee77e96824e06de2c19864a6e61f785b2085eb825f308f173d71f2555559d90d910f33f3367378ace0e3" }, { "alg" : "SHA3-256", "content" : "08a77b528a72ca412b36e4004692705ebfd75cfb4897c88632d367d08a34b09f" }, { "alg" : "SHA3-512", "content" : "7cba6c266babbe8272f029eea6e2cbddadee96eb1a16916a6eb2441a55837867ce717385d4388735fd83f2f6555931077c0ebda011a1ee9a37ac38c8c0c43a65" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/com.google.guava/failureaccess@1.0.3?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://github.com/google/guava/failureaccess" }, { "type" : "build-system", "url" : "https://github.com/google/guava/actions" }, { "type" : "distribution-intake", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "issue-tracker", "url" : "https://github.com/google/guava/issues" }, { "type" : "vcs", "url" : "https://github.com/google/guava/failureaccess" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar", "group" : "com.google.guava", "name" : "listenablefuture", "version" : "9999.0-empty-to-avoid-conflict-with-guava", "description" : "An empty artifact that Guava depends on to signal that it is providing ListenableFuture -- but is also available in a second \"version\" that contains com.google.common.util.concurrent.ListenableFuture class, without any other Guava classes. The idea is: - If users want only ListenableFuture, they depend on listenablefuture-1.0. - If users want all of Guava, they depend on guava, which, as of Guava 27.0, depends on listenablefuture-9999.0-empty-to-avoid-conflict-with-guava. The 9999.0-... version number is enough for some build systems (notably, Gradle) to select that empty artifact over the \"real\" listenablefuture-1.0 -- avoiding a conflict with the copy of ListenableFuture in guava itself. If users are using an older version of Guava or a build system other than Gradle, they may see class conflicts. If so, they can solve them by manually excluding the listenablefuture artifact or manually forcing their build systems to use 9999.0-....", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "d094c22570d65e132c19cea5d352e381" }, { "alg" : "SHA-1", "content" : "b421526c5f297295adef1c886e5246c39d4ac629" }, { "alg" : "SHA-256", "content" : "b372a037d4230aa57fbeffdef30fd6123f9c0c2db85d0aced00c91b974f33f99" }, { "alg" : "SHA-512", "content" : "c5987a979174cbacae2e78b319f080420cc71bcdbcf7893745731eeb93c23ed13bff8d4599441f373f3a246023d33df03e882de3015ee932a74a774afdd0782f" }, { "alg" : "SHA-384", "content" : "caff9b74079f95832ca7f6029346b34b606051cc8c5a4389fac263511d277ada0c55f28b0d43011055b268c6eb7184d5" }, { "alg" : "SHA3-384", "content" : "e939f08df0545847ea0d3e4b04a114b08499ad069ba8ec9461d1779f87a56e0c37273630a0f4c14e78c348d3ac7eb97f" }, { "alg" : "SHA3-256", "content" : "1f0a8b1177773b3a8ace839df5eed63cbf56b24a38714898a6e4ed065c42559f" }, { "alg" : "SHA3-512", "content" : "6b495ecc2a18b17365cb08d124a0da47f04bcdde81927b5245edf3edd8e498c3c3fb92ce6a4127f660bac851bb1d3e4510e5c20d03be47ce99dc296d360db285" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://github.com/google/guava/listenablefuture" }, { "type" : "build-system", "url" : "https://travis-ci.org/google/guava" }, { "type" : "distribution-intake", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "issue-tracker", "url" : "https://github.com/google/guava/issues" }, { "type" : "vcs", "url" : "https://github.com/google/guava/listenablefuture" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar", "group" : "org.jspecify", "name" : "jspecify", "version" : "1.0.0", "description" : "An artifact of well-named and well-specified annotations to power static analysis checks", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "9133aba420d0ca3b001dbb6ae9992cf6" }, { "alg" : "SHA-1", "content" : "7425a601c1c7ec76645a78d22b8c6a627edee507" }, { "alg" : "SHA-256", "content" : "1fad6e6be7557781e4d33729d49ae1cdc8fdda6fe477bb0cc68ce351eafdfbab" }, { "alg" : "SHA-512", "content" : "efded31ef5b342f09422935076e599789076431e93a746685c0607e7de5592719ba6aacde0be670b3f064d1e85630d58d5bce6b34aed2a288fdb34f745efb7bc" }, { "alg" : "SHA-384", "content" : "814f860e5a44ead6c457676841eef471a8b87be31b84c60a8a4477a18a9cbcb6e3c2ae700969d5c5e52309d961e0537a" }, { "alg" : "SHA3-384", "content" : "c8844e5b71e5ecfbb7366097ce34af2f5863d86d5ccc3f9ec384d8ade4b60ccc8124c7fc88664f1afd2b0962fc8775bf" }, { "alg" : "SHA3-256", "content" : "4b4f08ad7606a3ac62997779484919a302267b26d26ee19125f8a7eea60e8a71" }, { "alg" : "SHA3-512", "content" : "65c6845ebae981cb81b61107707ced39f5b377dae970b47606ef482aaf10e3729def0da40d9377c43abbfb483a5ceae039b0d51c129c50a6d36ad351a5d6b01e" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar", "externalReferences" : [ { "type" : "website", "url" : "http://jspecify.org/" }, { "type" : "vcs", "url" : "https://github.com/jspecify/jspecify/" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.36.0?type=jar", "publisher" : "Google LLC", "group" : "com.google.errorprone", "name" : "error_prone_annotations", "version" : "2.36.0", "description" : "Error Prone is a static analysis tool for Java that catches common programming mistakes at compile-time.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "0e48e5ba2cd0a8d8d09bad849b99f6a6" }, { "alg" : "SHA-1", "content" : "227d4d4957ccc3dc5761bd897e3a0ee587e750a7" }, { "alg" : "SHA-256", "content" : "77440e270b0bc9a249903c5a076c36a722c4886ca4f42675f2903a1c53ed61a5" }, { "alg" : "SHA-512", "content" : "bd6f5650902526d3db06aa1cc7bd36723658166acfabb823aca27d0b2c3814e83ae24a8217ce915c3e194c2c696a102580b4c21ef5dba61f7610bcb8d580f566" }, { "alg" : "SHA-384", "content" : "a5cb9ba6b5bf550de90def11ec4bb014410a14949f8598856e1693e213ec0e7d2b3c6cb41b34ba8cfe209a29801de529" }, { "alg" : "SHA3-384", "content" : "00492c18861d7d4fa5517ccf2bcc5c170b575ff9fe88fdc834827d9fc8747846d6345f5270c64dc130228f53ac96f1b6" }, { "alg" : "SHA3-256", "content" : "ec8420b1f4e27c3eef932a764c4cedc8b3547e114285227ceb0612e93648ac29" }, { "alg" : "SHA3-512", "content" : "344bc9be8f3417d4bc3e9e073bff4657aace3cac73e5ace038a11f1435d04d3182f344b8237cd6b311ab0748042a4c4f84259713ec2dcbe472c75cde2e787320" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.36.0?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://errorprone.info/error_prone_annotations" }, { "type" : "vcs", "url" : "https://github.com/google/error-prone/error_prone_annotations" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/com.google.j2objc/j2objc-annotations@3.0.0?type=jar", "group" : "com.google.j2objc", "name" : "j2objc-annotations", "version" : "3.0.0", "description" : "A set of annotations that provide additional information to the J2ObjC translator to modify the result of translation.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "f59529b29202a5baf37f491ea5ec8627" }, { "alg" : "SHA-1", "content" : "7399e65dd7e9ff3404f4535b2f017093bdb134c7" }, { "alg" : "SHA-256", "content" : "88241573467ddca44ffd4d74aa04c2bbfd11bf7c17e0c342c94c9de7a70a7c64" }, { "alg" : "SHA-512", "content" : "1406b1aa53b19f8269129d96ce8b64bf36f215eacf7d8f1e0adadee31614e53bb3f7acf4ff97418c5bfc75677a6f3cd637c3d9889d1e85117b6fa12467c91e9f" }, { "alg" : "SHA-384", "content" : "24373643a4e2f8e1cf919d495e1e79b24dd9dbbbeecb06477be8764313f0b3b465fde74ea2cf5542fc8cba090132052f" }, { "alg" : "SHA3-384", "content" : "afa264c8d8d946e43438ae728f0ae7a2c12797b56f9ad885d5b3e9a7396eb8481ca6840c2a990a7c5da45968794b36d8" }, { "alg" : "SHA3-256", "content" : "4df89618b479d5fbede9363c6f914218a44007f48f29c6b6d58243558ced6152" }, { "alg" : "SHA3-512", "content" : "b25b2ad8dddeed8757ffe22a96cfa7511617d86baa0ed4a25b1850162b54e1132d40dbc2dfca0a6ff0a350b16628a0d2b523418eeb8f986e0f505833da4f7181" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/com.google.j2objc/j2objc-annotations@3.0.0?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://github.com/google/j2objc/" }, { "type" : "distribution-intake", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "vcs", "url" : "http://github.com/google/j2objc" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/io.keikai/keikai-model@7.0.0.FL.20260930-Eval?type=jar", "group" : "io.keikai", "name" : "keikai-model", "version" : "7.0.0.FL.20260930-Eval", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "21586d27224dc19df65d845f1c820aa9" }, { "alg" : "SHA-1", "content" : "f242c1e58444c81a6a131d81eeab005338d3ef54" }, { "alg" : "SHA-256", "content" : "1987c465a80afd01192e67898cbf6cc57a39f3d547eab3984459335951ecaf3b" }, { "alg" : "SHA-512", "content" : "4c3864c4dac324e72bf94536140953e8e818394776ac072903acd100d5f5ca19424759c74b98b2bbfcdca677ad787f72933241058a671247717a6d7745ad31de" }, { "alg" : "SHA-384", "content" : "ba9516a19aab316327e80aefccf077c64d7d68d7f1c0f1a5b2d767d17f2421a620e4e2699f2509896e1c93ce85e5e621" }, { "alg" : "SHA3-384", "content" : "70d955d7b2fa43a186dfee0eb9e30544beb5f331d097c55d7c3dcbf1e2a9daa9c63b91a60fcbc0f32c1c0380576f20ae" }, { "alg" : "SHA3-256", "content" : "a6b94c6f3b541645aeec9ca42eb78c2266b4811c919553b35fc352e7110b50a1" }, { "alg" : "SHA3-512", "content" : "f6fc3778ce28cda82b0195cc789ac92cbd30f7b3f71a5032203e8439cc1b2ba86c8281f12be17f2ebe77248d078566e118dd0924c2e4afd86c3c721e3d1d74cd" } ], "purl" : "pkg:maven/io.keikai/keikai-model@7.0.0.FL.20260930-Eval?type=jar" }, { "type" : "library", "bom-ref" : "pkg:maven/org.jsoup/jsoup@1.23.1?type=jar", "publisher" : "Jonathan Hedley", "group" : "org.jsoup", "name" : "jsoup", "version" : "1.23.1", "description" : "jsoup is a Java library that simplifies working with real-world HTML and XML. It offers an easy-to-use API for URL fetching, data parsing, extraction, and manipulation using DOM API methods, CSS, and xpath selectors. jsoup implements the WHATWG HTML5 specification, and parses HTML to the same DOM as modern browsers.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "dad42fe034bdd1636381520a957e628c" }, { "alg" : "SHA-1", "content" : "0c0350bb325da274f0508349109516a7855d01ab" }, { "alg" : "SHA-256", "content" : "8b15e2b28eeb1e0a88a9b7dab4dc0c23524491c56959785dea22f7846897b668" }, { "alg" : "SHA-512", "content" : "6f94d759231a6f6f6ca364d13934c81ed1b7e3853f2112a9fd0c3e7e5bb17c181233c131959ce93122c5657cee4f237596ec9c15837771c2baad18fd586a7e28" }, { "alg" : "SHA-384", "content" : "ac19dbd53083ce843f38b0f3dc1e0567864180fe6f1e88c62812e4ecde2c3f6710a94af62f2706a197851e1a9ebd9a3c" }, { "alg" : "SHA3-384", "content" : "688fd8ebe19e919c4c2c214b58bb3f8a5a3288914e322ffad1e66a03188c524d63702a4745f5ea6185d4dd32b0a565d8" }, { "alg" : "SHA3-256", "content" : "a2703c347a0e4736447b41c77ff00facf1d0042c050d64620c5ed7dd39c64c97" }, { "alg" : "SHA3-512", "content" : "61101e84444a6df5b47fe8a946c6845f370f41a3115e2acd44e078a507188205b5f2cbffc792bb0cd6fc2d248d45f9bf51b805af34665bbe2f56fb9c0b0f8d97" } ], "licenses" : [ { "license" : { "id" : "MIT" } } ], "purl" : "pkg:maven/org.jsoup/jsoup@1.23.1?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://jsoup.org/" }, { "type" : "issue-tracker", "url" : "https://github.com/jhy/jsoup/issues" }, { "type" : "vcs", "url" : "https://github.com/jhy/jsoup" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/com.github.davidmoten/rtree2@0.9.3?type=jar", "group" : "com.github.davidmoten", "name" : "rtree2", "version" : "0.9.3", "description" : "Java implementation of an immutable in-memory R-Tree for spatial indexing", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "35214445af03ecc8ff58a11df621ed40" }, { "alg" : "SHA-1", "content" : "692a145f3c7637d0ce3d1cfbf75efc71b16304a1" }, { "alg" : "SHA-256", "content" : "b4c7c317ca647d852217d707046272b394c55662f1c3ba2baa8cc214733f6be8" }, { "alg" : "SHA-512", "content" : "4b47f1bb991b406963833b2f65c30eb537fdb71fcbb030c439ac83cc52329656a2e4fd2b1c54269c7268b6c5a25f8cab51b88338058e28a7e5abb35d5f878c43" }, { "alg" : "SHA-384", "content" : "a8d3023825d6f7c81b2e3ba30c31c306e4507e994b538b55c7f196eccd4300e30673c79e677ed5ea3fa0011b36c06881" }, { "alg" : "SHA3-384", "content" : "a526965beafdc3bd805cb93bfd0b5d1c38ae59b00e7d5754667ddecdd6c9ca9c5dab801d82b9a2797647e9943e71ca57" }, { "alg" : "SHA3-256", "content" : "bc4a044601d34b5c2fe27e783a1bcd06c0308f67b06fae80da759ce3ae377e6f" }, { "alg" : "SHA3-512", "content" : "a20bbbf586b92f8e51ea4c24a3bfcc66d3a324a711d381ab4d3e9d4942b0d31e21c1b34f942fe1006aac58c9e621c141e4b45b5e54d053a11e795c0fc56a0399" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/com.github.davidmoten/rtree2@0.9.3?type=jar", "externalReferences" : [ { "type" : "website", "url" : "http://github.com/davidmoten/rtree2" }, { "type" : "build-system", "url" : "https://travis-ci.org/davidmoten/rtree2" }, { "type" : "issue-tracker", "url" : "https://github.com/davidmoten/rtree2/issues" }, { "type" : "vcs", "url" : "scm:git:https://github.com/davidmoten/rtree2.git" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/com.github.davidmoten/guava-mini@0.1.4?type=jar", "group" : "com.github.davidmoten", "name" : "guava-mini", "version" : "0.1.4", "description" : "Classes taken from Guava", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "8cf57ea5710c2b7d3373577f3220e2db" }, { "alg" : "SHA-1", "content" : "515fff536d5080995b0197fabc2a2002c63a709c" }, { "alg" : "SHA-256", "content" : "ce45ac6d940f70899fbea2b72bacd81652c7620addddd89488783ea2a238a00f" }, { "alg" : "SHA-512", "content" : "0e1a69c59db4d105cf1130af1229fab39fba340432dfb6630508cc7077dcd1c9dac44037210cfc4181f7c3c4fd224467ad31d3162d201d909d83fa41b6d8e07b" }, { "alg" : "SHA-384", "content" : "44e75868f563c6debac9b92622d70d77689d52f3d52b98176d03577080a6fd09f02219c8a1d56eac0373dfa729ca93d9" }, { "alg" : "SHA3-384", "content" : "4761eaf6e717f7d11dbd02148788cfda05308d9c31cc1f4f79ec6d2fa236dd5df60928f3cc5b4c580056837bfdcb85e0" }, { "alg" : "SHA3-256", "content" : "154ce39c5606fd57e5c017f9212893b90b6fdae4b0d631677beffd08f623128e" }, { "alg" : "SHA3-512", "content" : "ee9ca5ed196ef85f3cb9f19261dd8e446e73fe45a2bb74a7249da78a7885db0c568f802fb2091135c380adebdaa11b7c49ba23c8716f90855c47df7a89d2effe" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/com.github.davidmoten/guava-mini@0.1.4?type=jar", "externalReferences" : [ { "type" : "website", "url" : "http://github.com/davidmoten/guava-mini" }, { "type" : "build-system", "url" : "https://travis-ci.org/davidmoten/guava-mini" }, { "type" : "issue-tracker", "url" : "https://github.com/davidmoten/guava-mini/issues" }, { "type" : "vcs", "url" : "scm:git:https://github.com/davidmoten/guava-mini.git" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/io.keikai/keikai-native@7.0.0.FL.20260930-Eval?type=jar", "group" : "io.keikai", "name" : "keikai-native", "version" : "7.0.0.FL.20260930-Eval", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "75555436ecb00f328c9527578972d638" }, { "alg" : "SHA-1", "content" : "482c458a0a7fb19c069b9907a7fb6d6b4d82fcc8" }, { "alg" : "SHA-256", "content" : "248ea661e4081d8846e93f856d5330c943ec1d528a66c36b110c756d1538580b" }, { "alg" : "SHA-512", "content" : "6c6550242e0cad60bdde3643f8be0c03a810ea3be41f18cbcbe338443033720369c1986d7fbf965fb94cc6ccf4f430722fe05464d8b765d818857041fb333aa0" }, { "alg" : "SHA-384", "content" : "d2af268c75430a8c4533b17d770a737a7a9ba3db4250539693ae316ed58c10d9d6be7523a8328ed45cb9fdabf6015956" }, { "alg" : "SHA3-384", "content" : "57af5c005d695b75d2efd5c6041ce111ef41ba8c61320b32275514ff5139657cb158a373a430acb2a15fc8f661ef79bf" }, { "alg" : "SHA3-256", "content" : "f00218005bc8fd225d05739c02c77e1d70b1f906bc638841ff2880f4197c7a1a" }, { "alg" : "SHA3-512", "content" : "a6250c7cbbe89a1ad6b3385440a0b65502f731b74e4853583c98aaa970f2da9019d4247051b76746a27148720fbd5f5a9dec82d91b8a9bea224e4d9475b8356f" } ], "purl" : "pkg:maven/io.keikai/keikai-native@7.0.0.FL.20260930-Eval?type=jar" } ], "dependencies" : [ { "ref" : "pkg:maven/org.zkoss.pivot/pivottable@4.0.0-FL-2026100116-Eval?type=jar", "dependsOn" : [ "pkg:maven/org.zkoss.common/zcommon@10.3.1?type=jar", "pkg:maven/org.zkoss.zk/zul@10.3.1?type=jar", "pkg:maven/io.keikai/keikai-model@7.0.0.FL.20260930-Eval?type=jar", "pkg:maven/io.keikai/keikai-native@7.0.0.FL.20260930-Eval?type=jar" ] }, { "ref" : "pkg:maven/org.zkoss.common/zcommon@10.3.1?type=jar", "dependsOn" : [ "pkg:maven/org.zkoss.common/zel@10.3.1?type=jar", "pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar", "pkg:maven/org.apache-extras.beanshell/bsh@2.0b6?type=jar", "pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.4.3?type=jar", "pkg:maven/org.owasp.encoder/encoder@1.3.1?type=jar" ] }, { "ref" : "pkg:maven/org.zkoss.common/zel@10.3.1?type=jar", "dependsOn" : [ "pkg:maven/org.javassist/javassist@3.29.2-GA?type=jar" ] }, { "ref" : "pkg:maven/org.javassist/javassist@3.29.2-GA?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/org.apache-extras.beanshell/bsh@2.0b6?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.4.3?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/org.owasp.encoder/encoder@1.3.1?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/org.zkoss.zk/zul@10.3.1?type=jar", "dependsOn" : [ "pkg:maven/org.zkoss.zk/zk@10.3.1?type=jar" ] }, { "ref" : "pkg:maven/org.zkoss.zk/zk@10.3.1?type=jar", "dependsOn" : [ "pkg:maven/org.zkoss.common/zweb@10.3.1?type=jar", "pkg:maven/org.zkoss.zk/zkwebfragment@10.3.1?type=jar", "pkg:maven/org.apache.commons/commons-fileupload2-javax@2.0.0-M4?type=jar", "pkg:maven/commons-io/commons-io@2.17.0?type=jar", "pkg:maven/com.google.guava/guava@33.4.8-jre?type=jar" ] }, { "ref" : "pkg:maven/org.zkoss.common/zweb@10.3.1?type=jar", "dependsOn" : [ "pkg:maven/org.zkoss.common/zcommon@10.3.1?type=jar" ] }, { "ref" : "pkg:maven/org.zkoss.zk/zkwebfragment@10.3.1?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/org.apache.commons/commons-fileupload2-javax@2.0.0-M4?type=jar", "dependsOn" : [ "pkg:maven/org.apache.commons/commons-fileupload2-core@2.0.0-M4?type=jar", "pkg:maven/commons-io/commons-io@2.17.0?type=jar" ] }, { "ref" : "pkg:maven/org.apache.commons/commons-fileupload2-core@2.0.0-M4?type=jar", "dependsOn" : [ "pkg:maven/commons-io/commons-io@2.17.0?type=jar" ] }, { "ref" : "pkg:maven/commons-io/commons-io@2.17.0?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/com.google.guava/guava@33.4.8-jre?type=jar", "dependsOn" : [ "pkg:maven/com.google.guava/failureaccess@1.0.3?type=jar", "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar", "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar", "pkg:maven/com.google.errorprone/error_prone_annotations@2.36.0?type=jar", "pkg:maven/com.google.j2objc/j2objc-annotations@3.0.0?type=jar" ] }, { "ref" : "pkg:maven/com.google.guava/failureaccess@1.0.3?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.36.0?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/com.google.j2objc/j2objc-annotations@3.0.0?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/io.keikai/keikai-model@7.0.0.FL.20260930-Eval?type=jar", "dependsOn" : [ "pkg:maven/org.zkoss.zk/zk@10.3.1?type=jar", "pkg:maven/org.jsoup/jsoup@1.23.1?type=jar", "pkg:maven/com.github.davidmoten/rtree2@0.9.3?type=jar" ] }, { "ref" : "pkg:maven/org.jsoup/jsoup@1.23.1?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/com.github.davidmoten/rtree2@0.9.3?type=jar", "dependsOn" : [ "pkg:maven/com.github.davidmoten/guava-mini@0.1.4?type=jar" ] }, { "ref" : "pkg:maven/com.github.davidmoten/guava-mini@0.1.4?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/io.keikai/keikai-native@7.0.0.FL.20260930-Eval?type=jar", "dependsOn" : [ "pkg:maven/io.keikai/keikai-model@7.0.0.FL.20260930-Eval?type=jar" ] } ] }