{ "bomFormat" : "CycloneDX", "specVersion" : "1.6", "serialNumber" : "urn:uuid:77e13797-8851-32e4-9789-5e1de4338818", "version" : 1, "metadata" : { "timestamp" : "2026-10-14T06:16:16Z", "lifecycles" : [ { "phase" : "build" } ], "tools" : { "components" : [ { "type" : "library", "author" : "OWASP Foundation", "group" : "org.cyclonedx", "name" : "cyclonedx-maven-plugin", "version" : "2.9.2", "description" : "CycloneDX Maven plugin", "hashes" : [ { "alg" : "MD5", "content" : "843a7130400f75d33f563dc7e9f52dea" }, { "alg" : "SHA-1", "content" : "2cac5a176b9f48801dfc4910d4f6a34bfbb13445" }, { "alg" : "SHA-256", "content" : "d9e5a12bac3c1a91d85f3a1ad84307099f457ff24aa65b438ba7de9ca784a54e" }, { "alg" : "SHA-512", "content" : "636f788518752c5a23d14bad41d68b0d549e4b3a3d720d66f2f6e2b8b956207942ee12abba968a1e9aac6cf1d78d9e738a4a75eeb8bc6fca2377030fbb482407" }, { "alg" : "SHA-384", "content" : "72aad41633b92fadd4dbd1c6f5c1b956836b22d3b96afbdd7ca8b8eb0456eec00c2ed658e3c2d4e93d95048bcc23dac8" } ] } ] }, "component" : { "type" : "library", "bom-ref" : "pkg:maven/org.zkoss.zk/zksbom-pe@9.6.7-SNAPSHOT?type=pom", "group" : "org.zkoss.zk", "name" : "zksbom-pe", "version" : "9.6.7-SNAPSHOT", "description" : "SBOM (CycloneDX) for CRA compliance — for PE flagship (zkex file).", "licenses" : [ { "license" : { "name" : "GNU LESSER GENERAL PUBLIC LICENSE, Version 3", "url" : "https://www.gnu.org/licenses/lgpl.html" } } ], "purl" : "pkg:maven/org.zkoss.zk/zksbom-pe@9.6.7-SNAPSHOT?type=pom", "externalReferences" : [ { "type" : "website", "url" : "https://www.zkoss.org/zksbom-pe/" }, { "type" : "vcs", "url" : "https://mavensync.zkoss.org/maven2/zkcml-parent/zksbom-pe" } ] }, "properties" : [ { "name" : "maven.goal", "value" : "makeAggregateBom" }, { "name" : "maven.scopes", "value" : "compile,provided,runtime,system" } ] }, "components" : [ { "type" : "library", "bom-ref" : "pkg:maven/org.zkoss.zk/zkex@9.6.7-SNAPSHOT?type=jar", "group" : "org.zkoss.zk", "name" : "zkex", "version" : "9.6.7-SNAPSHOT", "description" : "ZK Professional Utilities", "licenses" : [ { "license" : { "name" : "GNU LESSER GENERAL PUBLIC LICENSE, Version 3", "url" : "https://www.gnu.org/licenses/lgpl.html" } } ], "purl" : "pkg:maven/org.zkoss.zk/zkex@9.6.7-SNAPSHOT?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://www.zkoss.org/zkex" }, { "type" : "vcs", "url" : "https://mavensync.zkoss.org/maven2/zkex" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/org.zkoss.zk/zul@9.6.7-SNAPSHOT?type=jar", "group" : "org.zkoss.zk", "name" : "zul", "version" : "9.6.7-SNAPSHOT", "description" : "ZK XUL components (XML user interface markup language)", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "4f12870ef981f72515971d694b6ea565" }, { "alg" : "SHA-1", "content" : "546f70664273074740e0c84e08237577637839aa" }, { "alg" : "SHA-256", "content" : "1833df0825d7403c3b8bfd38789bb5754488dc29618acd9e3ac9d33a5f998f16" }, { "alg" : "SHA-512", "content" : "19e29f9dd1b5fe95f9374ece97868495f3732c4d17cac7d3a5f53c66e76f0d1812bbff5676290b22251a263f01f304e981b37c892314acb0ad9365c957be456f" }, { "alg" : "SHA-384", "content" : "bfb9a320d7d7d551668938d9240e88b7dd3d0eabdb2e854f84c6835966fa8f5a6e949318dbb968f3bb49caa41b0d9bbf" } ], "licenses" : [ { "license" : { "name" : "GNU LESSER GENERAL PUBLIC LICENSE, Version 3", "url" : "https://www.gnu.org/licenses/lgpl.html" } } ], "purl" : "pkg:maven/org.zkoss.zk/zul@9.6.7-SNAPSHOT?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://www.zkoss.org/zul" }, { "type" : "vcs", "url" : "https://mavensync.zkoss.org/zul" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/org.zkoss.zk/zk@9.6.7-SNAPSHOT?type=jar", "group" : "org.zkoss.zk", "name" : "zk", "version" : "9.6.7-SNAPSHOT", "description" : "ZK Kernel", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "80ba85caada1f466b007d184fb193887" }, { "alg" : "SHA-1", "content" : "7e666d321b3a937859d9899cc8c31cb039e2bb05" }, { "alg" : "SHA-256", "content" : "607bd541a581e6c599ecb066ec0f3835a25a909fd9135be003730fa0f548ff59" }, { "alg" : "SHA-512", "content" : "e6cefe229bd5072627c04b5d862962cf8f65879634cd8a787fdf9a9bd1131bb4646d0ceda428e32fd934ab2598dbeb23ad4a3234692f692becaf6451f74e0a16" }, { "alg" : "SHA-384", "content" : "66b5447445c33430c81694ae8f7fac7981def3b932e95738dae5c94e591e5d4a0312eb4fdcb116ac8c1f6871cc518d46" } ], "licenses" : [ { "license" : { "name" : "GNU LESSER GENERAL PUBLIC LICENSE, Version 3", "url" : "https://www.gnu.org/licenses/lgpl.html" } } ], "purl" : "pkg:maven/org.zkoss.zk/zk@9.6.7-SNAPSHOT?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://www.zkoss.org/zk" }, { "type" : "vcs", "url" : "https://mavensync.zkoss.org/zk" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/org.zkoss.common/zweb@9.6.7-SNAPSHOT?type=jar", "group" : "org.zkoss.common", "name" : "zweb", "version" : "9.6.7-SNAPSHOT", "description" : "The ZKoss Web library", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "df31f5fa2b9f9185e728b0c8b304304f" }, { "alg" : "SHA-1", "content" : "7c7471833cc6807184f5c5c9cfb90ffb2fc21aee" }, { "alg" : "SHA-256", "content" : "9a46464ef3df83517bfe4d59d610eb7850b9205e9a4d790077fe833a714ead7f" }, { "alg" : "SHA-512", "content" : "df1a117b83879e34afdfd8fbe6483e515d70f45ed15a3298238b34b28fe92b0ef80fd64342a303ea4a7f12442ae3645f421f9e9e4553cc5ef8aad91eab0a0cb1" }, { "alg" : "SHA-384", "content" : "0ec3950d209afdb47e2b20591a0be9a20e437fec2f423a15d6354e3650dc3da620756c7f6a31b3549237c19c87b6fd89" } ], "licenses" : [ { "license" : { "name" : "GNU LESSER GENERAL PUBLIC LICENSE, Version 3", "url" : "https://www.gnu.org/licenses/lgpl.html" } } ], "purl" : "pkg:maven/org.zkoss.common/zweb@9.6.7-SNAPSHOT?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://www.zkoss.org/web" }, { "type" : "vcs", "url" : "https://mavensync.zkoss.org/zweb" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/org.zkoss.common/zcommon@9.6.7-SNAPSHOT?type=jar", "group" : "org.zkoss.common", "name" : "zcommon", "version" : "9.6.7-SNAPSHOT", "description" : "The ZKoss common library", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "16d3e505d060e08f00eefd76ce097f09" }, { "alg" : "SHA-1", "content" : "943038c0bd93732aafb8ea473cb203297d5377eb" }, { "alg" : "SHA-256", "content" : "0e3f65326d82331b7b7b44bb3e3bbb8e11dbbdfc55467683cf4f238c605e0506" }, { "alg" : "SHA-512", "content" : "ad43cca335bffed24ecd497d617663a968d543acd4d5343a5429bdb0038479b10c57eaa928dee62fd2ab5553c1517e008f2fb570be261f573a348036e96e5626" }, { "alg" : "SHA-384", "content" : "15ca5cf25d6da251f8f26ecf95dea5b6390cffedd0200337a239b26977e5dae80983b699e04d52a91d45bffa2b07eb36" } ], "licenses" : [ { "license" : { "name" : "GNU LESSER GENERAL PUBLIC LICENSE, Version 3", "url" : "https://www.gnu.org/licenses/lgpl.html" } } ], "purl" : "pkg:maven/org.zkoss.common/zcommon@9.6.7-SNAPSHOT?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://www.zkoss.org/common" }, { "type" : "vcs", "url" : "https://mavensync.zkoss.org/zcommon" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/org.zkoss.common/zel@9.6.7-SNAPSHOT?type=jar", "group" : "org.zkoss.common", "name" : "zel", "version" : "9.6.7-SNAPSHOT", "description" : "The ZK EL library", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "87c8a54e430c828396ef314f3674e9ac" }, { "alg" : "SHA-1", "content" : "04c63d8e72654ee997863345b3418120b6b6406e" }, { "alg" : "SHA-256", "content" : "d15df12df90ed0ef3b1b6e1c08ae9e3060e949d9b31e4f19dbb753e9289233d1" }, { "alg" : "SHA-512", "content" : "652d75a73537137ac94e12b5580d9e0f1e42dfa83f1173a22271cdbf2fa2e05fa2d0af3b592fdf6ed74f9f577e950890f4a09e5b626d37233ccc7a285797548a" }, { "alg" : "SHA-384", "content" : "544674123c1cc19efec542b92167f7758cf666b23a298c237ed3cb9f705e1ca3ac0e4205af672aae91a8eda3aa9a39e7" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/org.zkoss.common/zel@9.6.7-SNAPSHOT?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://www.zkoss.org/common" }, { "type" : "vcs", "url" : "https://mavensync.zkoss.org/zel" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/org.apache-extras.beanshell/bsh@2.0b6?type=jar", "group" : "org.apache-extras.beanshell", "name" : "bsh", "version" : "2.0b6", "description" : "BeanShell is a small, free, embeddable Java source interpreter with object scripting language features, written in Java. BeanShell dynamically executes standard Java syntax and extends it with common scripting conveniences such as loose types, commands, and method closures like those in Perl and JavaScript.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "0f27117d5b4cfeea1d0634125313fac0" }, { "alg" : "SHA-1", "content" : "fb418f9b33a0b951e9a2978b4b6ee93b2707e72f" }, { "alg" : "SHA-256", "content" : "a17955976070c0573235ee662f2794a78082758b61accffce8d3f8aedcd91047" }, { "alg" : "SHA-512", "content" : "a39321a99a8a619a48b65752f6ee6b8f11d3b28ebb051082ec70a70a0d5041e83d144378df191929e3d6562bd5ee4c4f1ccadb0ba42055529d18800a41d8ae18" }, { "alg" : "SHA-384", "content" : "b45a64491085f76d670f89225d7a54e80e255c96f5f8f4d2ce5f1a56276fef5df2dede1d71dc954e0283e6edef1d8fdb" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/org.apache-extras.beanshell/bsh@2.0b6?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://github.com/beanshell/beanshell/" }, { "type" : "distribution-intake", "url" : "https://api.bintray.com/maven/beanshell/Beanshell/bsh" }, { "type" : "issue-tracker", "url" : "https://github.com/beanshell/beanshell/issues" }, { "type" : "vcs", "url" : "https://github.com/beanshell/beanshell/" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar", "publisher" : "QOS.ch", "group" : "org.slf4j", "name" : "slf4j-api", "version" : "2.0.7", "description" : "The slf4j API", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "403dffa46cdd2e3c82da19df4f394a4c" }, { "alg" : "SHA-1", "content" : "41eb7184ea9d556f23e18b5cb99cad1f8581fc00" }, { "alg" : "SHA-256", "content" : "5d6298b93a1905c32cda6478808ac14c2d4a47e91535e53c41f7feeb85d946f4" }, { "alg" : "SHA-512", "content" : "216d2cac27d501972c888f94dfa747d700b80d60813884b6ab4b12c6a3b17ed0c21a1d27e1aa4332c97c828f20039e3913d2763d7e1a3cef36ae4389a276e7a8" }, { "alg" : "SHA-384", "content" : "c25b39f418aa726ba8405dfd9b356131f89984e2ef5a55a724a2abf3b7c78443f671105835161d2414d602cf03da9f2d" } ], "licenses" : [ { "license" : { "id" : "MIT", "url" : "https://opensource.org/license/mit/" } } ], "purl" : "pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar", "externalReferences" : [ { "type" : "website", "url" : "http://www.slf4j.org" }, { "type" : "distribution-intake", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "vcs", "url" : "https://github.com/qos-ch/slf4j/slf4j-api" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/com.google.javascript/closure-compiler-unshaded@v20220601?type=jar", "publisher" : "Google", "group" : "com.google.javascript", "name" : "closure-compiler-unshaded", "version" : "v20220601", "description" : "Closure Compiler is a JavaScript optimizing compiler. It parses your JavaScript, analyzes it, removes dead code and rewrites and minimizes what's left. It also checks syntax, variable references, and types, and warns about common JavaScript pitfalls. It is used in many of Google's JavaScript apps, including Gmail, Google Web Search, Google Maps, and Google Docs.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "88fd6fcab15b28604c8b5446ad21f6e0" }, { "alg" : "SHA-1", "content" : "725cc70cff4305cb2869d8f4287d498260378241" }, { "alg" : "SHA-256", "content" : "c13cee5f9ed2669a760f1162750c115b472e097b4f37ed974d3e44026e5f515c" }, { "alg" : "SHA-512", "content" : "24dbfa9eae878d351b8106a8ccdfcde215802a294c69ace513021cce39ec364098b7529ddcf958faf907ebaed74ed52dde536a20cd1fdd6bcca3005cb848ab81" }, { "alg" : "SHA-384", "content" : "fc377d206480638ee5110a0324cee66fbbd340a67f8aaa1a416dc3e8774ed4effb581069cff39923baa4bef2609924f1" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/com.google.javascript/closure-compiler-unshaded@v20220601?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://developers.google.com/closure/compiler/" }, { "type" : "distribution-intake", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "issue-tracker", "url" : "http://github.com/google/closure-compiler/issues" }, { "type" : "vcs", "url" : "https://github.com/google/closure-compiler/closure-compiler-main/closure-compiler-unshaded" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/org.zkoss.zk/zkwebfragment@9.6.7-SNAPSHOT?type=jar", "group" : "org.zkoss.zk", "name" : "zkwebfragment", "version" : "9.6.7-SNAPSHOT", "description" : "ZK Web Fragment", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "4a2d73a5e43bcdd37b612f64d991449c" }, { "alg" : "SHA-1", "content" : "88f499e811c3c562fa9437d66616bcc47f99ad35" }, { "alg" : "SHA-256", "content" : "0c22bd219121279cf58a2b013673ba53eec4227ab9af1402d7ec88265c9dda06" }, { "alg" : "SHA-512", "content" : "20a455c1e96d6205e3f8bdcf9aa2360059b8b67536617788d31fcae98d49a19c4d2340349b30ebc453a57aad7674fbbd2811e3ad8e41463dbdd5d545bc362fad" }, { "alg" : "SHA-384", "content" : "785e1f0b34c022e6872f4a2995b55d4bb5f4fe9b69857b0dba7bf70eb7155d60c537e9f053cbc93cea1d89081ae2420a" } ], "licenses" : [ { "license" : { "name" : "GNU LESSER GENERAL PUBLIC LICENSE, Version 3", "url" : "https://www.gnu.org/licenses/lgpl.html" } } ], "purl" : "pkg:maven/org.zkoss.zk/zkwebfragment@9.6.7-SNAPSHOT?type=jar", "externalReferences" : [ { "type" : "website", "url" : "http://www.zkoss.org/zkwebfragment" }, { "type" : "vcs", "url" : "https://mavensync.zkoss.org/zkwebfragment" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/commons-fileupload/commons-fileupload@1.6.0?type=jar", "publisher" : "The Apache Software Foundation", "group" : "commons-fileupload", "name" : "commons-fileupload", "version" : "1.6.0", "description" : "The Apache Commons FileUpload component provides a simple yet flexible means of adding support for multipart file upload functionality to servlets and web applications.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "c10bfd8952ec31282fffd3b2625d87ce" }, { "alg" : "SHA-1", "content" : "2392704cccb4632b3ccd9b8cfbe2943cca6fc455" }, { "alg" : "SHA-256", "content" : "9383272c93569afeabedb16923a94a6dc8a5bd7a2f9f83bf326af4ee68434629" }, { "alg" : "SHA-512", "content" : "f34e90d1985ac2da5295bc23b3c9b9674f157d2697b637dcbbb28e1de9168ab82f7e4b5ab169efc5559a427f28b2c940116a26b8f19c2b7d52346821e323a4d6" }, { "alg" : "SHA-384", "content" : "21b23210f9d0af359d4f1d5451b3552315518f5bb7c7a73ec2592ab9502e848fbb71d47090f207224ef592baaac12909" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0", "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], "purl" : "pkg:maven/commons-fileupload/commons-fileupload@1.6.0?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://commons.apache.org/proper/commons-fileupload/" }, { "type" : "build-system", "url" : "https://github.com/apache/commons-parent/actions" }, { "type" : "distribution-intake", "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" }, { "type" : "issue-tracker", "url" : "https://issues.apache.org/jira/browse/FILEUPLOAD" }, { "type" : "mailing-list", "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/" }, { "type" : "vcs", "url" : "https://gitbox.apache.org/repos/asf?p=commons-fileupload.git" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/commons-io/commons-io@2.17.0?type=jar", "publisher" : "The Apache Software Foundation", "group" : "commons-io", "name" : "commons-io", "version" : "2.17.0", "description" : "The Apache Commons IO library contains utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "f6232d0e290d58bb93f74f67165bf91f" }, { "alg" : "SHA-1", "content" : "ddcc8433eb019fb48fe25207c0278143f3e1d7e2" }, { "alg" : "SHA-256", "content" : "4aa4ca48f3dfd30b78220b7881d8cb93eac4093ec94361b6befa9487998a550b" }, { "alg" : "SHA-512", "content" : "98bc665c16268ff1074f415f493ba66d214ac23665b6e964086b60d523b35b1b03fd2e79211e84aa8ebf0921ea028f992827e4642fd086d7104a408b454d38ce" }, { "alg" : "SHA-384", "content" : "4dabc3cd47eec79ae537e48739f9abbc64e9b75f63809f35f062d54b8d737de0ba282d7d35a236940b9152e1c54f5918" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0", "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], "purl" : "pkg:maven/commons-io/commons-io@2.17.0?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://commons.apache.org/proper/commons-io/" }, { "type" : "build-system", "url" : "https://github.com/apache/commons-parent/actions" }, { "type" : "distribution-intake", "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" }, { "type" : "issue-tracker", "url" : "https://issues.apache.org/jira/browse/IO" }, { "type" : "mailing-list", "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/" }, { "type" : "vcs", "url" : "https://gitbox.apache.org/repos/asf?p=commons-io.git" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/org.zkoss.zk/zkbind@9.6.7-SNAPSHOT?type=jar", "group" : "org.zkoss.zk", "name" : "zkbind", "version" : "9.6.7-SNAPSHOT", "description" : "ZK Bind", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "035c3a073af9291fecd9c3af566655e6" }, { "alg" : "SHA-1", "content" : "35935360f58ccfd39165ef458287312392002701" }, { "alg" : "SHA-256", "content" : "42a7c155bb11a396fcdfd7ff05b672ec2f0ab23d2424e6a85b100b18a8878c8f" }, { "alg" : "SHA-512", "content" : "cbff94d38ba8293d88286d63b2f37efa4fb2c92f4498939f8b884f724f16724d02cb304e27336a6a484abaae7cf2b84774a0beadc111bfe61f138486d26f5a4b" }, { "alg" : "SHA-384", "content" : "367d3382d8cd3f168dd7486b6d4294b9d3c359d8686edd1c52b460c2e951dfd1faac45735b806979a4ca456a8ff6dada" } ], "licenses" : [ { "license" : { "name" : "GNU LESSER GENERAL PUBLIC LICENSE, Version 3", "url" : "https://www.gnu.org/licenses/lgpl.html" } } ], "purl" : "pkg:maven/org.zkoss.zk/zkbind@9.6.7-SNAPSHOT?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://www.zkoss.org/zkbind" }, { "type" : "vcs", "url" : "https://mavensync.zkoss.org/zkbind" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/org.javassist/javassist@3.28.0-GA?type=jar", "publisher" : "Shigeru Chiba, www.javassist.org", "group" : "org.javassist", "name" : "javassist", "version" : "3.28.0-GA", "description" : "Javassist (JAVA programming ASSISTant) makes Java bytecode manipulation simple. It is a class library for editing bytecodes in Java.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "1a2dd8c76321cef26cc2669fe70a2557" }, { "alg" : "SHA-1", "content" : "9a958811a88381bb159cc2f5ed79c34a45c4af7a" }, { "alg" : "SHA-256", "content" : "57d0a9e9286f82f4eaa851125186997f811befce0e2060ff0a15a77f5a9dd9a7" }, { "alg" : "SHA-512", "content" : "49d3109104f01efda1ae8a6145fdb91d1b1331587e2981f6cc1a1b991c50af97e8febfea5d9d224a106cab877c1e4850d183eb3c7316b82e62e51b6ca3fc29e8" }, { "alg" : "SHA-384", "content" : "b71fc9564c478edebbf19b4044bb9cfb80996f779685d79f6a779d98ce3823b5aa234b91b9da35317ebf4534e1e65a31" } ], "licenses" : [ { "license" : { "id" : "MPL-1.1" } }, { "license" : { "id" : "LGPL-2.1-only" } }, { "license" : { "id" : "Apache-2.0", "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], "purl" : "pkg:maven/org.javassist/javassist@3.28.0-GA?type=jar", "externalReferences" : [ { "type" : "website", "url" : "http://www.javassist.org/" }, { "type" : "distribution-intake", "url" : "https://repository.jboss.org/nexus/service/local/staging/deploy/maven2/" }, { "type" : "issue-tracker", "url" : "https://jira.jboss.org/jira/browse/JASSIST/" }, { "type" : "vcs", "url" : "scm:git:git@github.com:jboss-javassist/javassist.git" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/javax.servlet/javax.servlet-api@3.0.1?type=jar", "publisher" : "GlassFish Community", "group" : "javax.servlet", "name" : "javax.servlet-api", "version" : "3.0.1", "description" : "Java.net - The Source for Java Technology Collaboration", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "3ef236ac4c24850cd54abff60be25f35" }, { "alg" : "SHA-1", "content" : "6bf0ebb7efd993e222fc1112377b5e92a13b38dd" }, { "alg" : "SHA-256", "content" : "377d8bde87ac6bc7f83f27df8e02456d5870bb78c832dac656ceacc28b016e56" }, { "alg" : "SHA-512", "content" : "1e087f1e4632048f1c6ea12e3820a30c7a6e66b13277ec8e784d8c5aba99335cd90cdb08e23756e815324cc9c8dc22d0937c7ccf4b89ee00222cd5e4a1d2a0de" }, { "alg" : "SHA-384", "content" : "400399c84adfb450fe8f181c43ce7036d47a27c904707454abc97c8ddb89ec57033d740af53fb48e5c1a1a0da5649096" } ], "licenses" : [ { "expression" : "(CDDL-1.0 OR GPL-2.0-with-classpath-exception)" } ], "purl" : "pkg:maven/javax.servlet/javax.servlet-api@3.0.1?type=jar", "externalReferences" : [ { "type" : "website", "url" : "http://servlet-spec.java.net" }, { "type" : "distribution-intake", "url" : "https://maven.java.net/service/local/staging/deploy/maven2/" }, { "type" : "issue-tracker", "url" : "http://java.net/jira/browse/SERVLET_SPEC" }, { "type" : "mailing-list", "url" : "users@servlet-spec.java.net" }, { "type" : "vcs", "url" : "https://svn.java.net/svn/glassfish~svn/tags/javax.servlet-api-3.0.1" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/net.sf.jasperreports/jasperreports@6.20.5?type=jar", "publisher" : "Cloud Software Group, Inc.", "group" : "net.sf.jasperreports", "name" : "jasperreports", "version" : "6.20.5", "description" : "Free Java Reporting Library", "scope" : "optional", "hashes" : [ { "alg" : "MD5", "content" : "868896e5f176b93aa8c8b6b8e6ce50ab" }, { "alg" : "SHA-1", "content" : "c91cc68132f154dc3301dec4b71f0b90e3422d1d" }, { "alg" : "SHA-256", "content" : "b2c02b051438eefa9f272fedeb023334faee72382edee0b495137e3a32831ced" }, { "alg" : "SHA-512", "content" : "567e6a7f5f14b8197f99e547663c14e9213832b299cc8b572a67299a53d045a3d872fcd7134aedd01fb988062b1d9e72f21f41f7412b635512e434bc241ac876" }, { "alg" : "SHA-384", "content" : "d8d5fcae0e3755381aa40f0386b7fefc045eac9a4f5c01be7cd300822c2989c4743d88eed84375218477af0f16148b3e" } ], "licenses" : [ { "license" : { "name" : "GNU Lesser General Public License", "url" : "http://jasperreports.sourceforge.net/license.html" } } ], "purl" : "pkg:maven/net.sf.jasperreports/jasperreports@6.20.5?type=jar", "externalReferences" : [ { "type" : "website", "url" : "http://jasperreports.sourceforge.net" }, { "type" : "vcs", "url" : "https://github.com/TIBCOSoftware/jasperreports" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/commons-beanutils/commons-beanutils@1.9.4?type=jar", "publisher" : "The Apache Software Foundation", "group" : "commons-beanutils", "name" : "commons-beanutils", "version" : "1.9.4", "description" : "Apache Commons BeanUtils provides an easy-to-use but flexible wrapper around reflection and introspection.", "scope" : "optional", "hashes" : [ { "alg" : "MD5", "content" : "07dc532ee316fe1f2f0323e9bd2f8df4" }, { "alg" : "SHA-1", "content" : "d52b9abcd97f38c81342bb7e7ae1eee9b73cba51" }, { "alg" : "SHA-256", "content" : "7d938c81789028045c08c065e94be75fc280527620d5bd62b519d5838532368a" }, { "alg" : "SHA-512", "content" : "7762b348caecead49038a38a89754ff7d9be6199324315495ba47cf24f52c06faadf9306d925c8fe47c587589a939c82e491e1c730267fdf354243a68c0f96ff" }, { "alg" : "SHA-384", "content" : "dcd3845917b8fb189cf4034b0d7c6d266ec7110f85ffbd2711cdea9eb94b4fa3e1cee9120b484c6a120b82769230ed3a" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/commons-beanutils/commons-beanutils@1.9.4?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://commons.apache.org/proper/commons-beanutils/" }, { "type" : "build-system", "url" : "https://builds.apache.org/" }, { "type" : "distribution-intake", "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" }, { "type" : "issue-tracker", "url" : "https://issues.apache.org/jira/browse/BEANUTILS" }, { "type" : "mailing-list", "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/" }, { "type" : "vcs", "url" : "http://svn.apache.org/viewvc/commons/proper/beanutils/tags/BEANUTILS_1_9_3_RC3" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar", "publisher" : "The Apache Software Foundation", "group" : "commons-collections", "name" : "commons-collections", "version" : "3.2.2", "description" : "Types that extend and augment the Java Collections Framework.", "scope" : "optional", "hashes" : [ { "alg" : "MD5", "content" : "f54a8510f834a1a57166970bfc982e94" }, { "alg" : "SHA-1", "content" : "8ad72fe39fa8c91eaaf12aadb21e0c3661fe26d5" }, { "alg" : "SHA-256", "content" : "eeeae917917144a68a741d4c0dff66aa5c5c5fd85593ff217bced3fc8ca783b8" }, { "alg" : "SHA-512", "content" : "51c72f9aca7726f3c387095e66be85a6df97c74b00a25434b89188c1b8eab6e2b55accf7b9bd412430d22bd09324dec076e300b3d1fa39fccad471f0f2a3da16" }, { "alg" : "SHA-384", "content" : "dd4e99b3314bd3c1a1ee26296615d9e44dadf7a1f8a7bbba44fb95121803d331e36d4cca4260e7609af78a47ba3e4073" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar", "externalReferences" : [ { "type" : "website", "url" : "http://commons.apache.org/collections/" }, { "type" : "build-system", "url" : "https://continuum-ci.apache.org/" }, { "type" : "distribution-intake", "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" }, { "type" : "issue-tracker", "url" : "http://issues.apache.org/jira/browse/COLLECTIONS" }, { "type" : "mailing-list", "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/" }, { "type" : "vcs", "url" : "http://svn.apache.org/viewvc/commons/proper/collections/trunk" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/commons-digester/commons-digester@2.1?type=jar", "publisher" : "The Apache Software Foundation", "group" : "commons-digester", "name" : "commons-digester", "version" : "2.1", "description" : "The Digester package lets you configure an XML to Java object mapping module which triggers certain actions called rules whenever a particular pattern of nested XML elements is recognized.", "scope" : "optional", "hashes" : [ { "alg" : "MD5", "content" : "528445033f22da28f5047b6abcd1c7c9" }, { "alg" : "SHA-1", "content" : "73a8001e7a54a255eef0f03521ec1805dc738ca0" }, { "alg" : "SHA-256", "content" : "e0b2b980a84fc6533c5ce291f1917b32c507f62bcad64198fff44368c2196a3d" }, { "alg" : "SHA-512", "content" : "a2c822690786b41e0a02506c7aaf7e8a4b8251ea71d6978ee03e82b11ca242e49386d6da84dbc7182d5a6fb167822aed200da2d97e2f264d63ccf8f1b9681ac8" }, { "alg" : "SHA-384", "content" : "2aaaa152e6e5fa4c632065e18bb17f8a223de0713be0610b62939b179fccdd37645f2e3073896f455ea95566274e14c1" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/commons-digester/commons-digester@2.1?type=jar", "externalReferences" : [ { "type" : "website", "url" : "http://commons.apache.org/digester/" }, { "type" : "build-system", "url" : "http://vmbuild.apache.org/continuum/" }, { "type" : "distribution-intake", "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" }, { "type" : "issue-tracker", "url" : "http://issues.apache.org/jira/browse/DIGESTER" }, { "type" : "mailing-list", "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/" }, { "type" : "vcs", "url" : "http://svn.apache.org/viewvc/commons/proper/digester/tags/DIGESTER_2_1_RC2" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/commons-logging/commons-logging@1.1.1?type=jar", "publisher" : "The Apache Software Foundation", "group" : "commons-logging", "name" : "commons-logging", "version" : "1.1.1", "description" : "Commons Logging is a thin adapter allowing configurable bridging to other, well known logging systems.", "scope" : "optional", "hashes" : [ { "alg" : "MD5", "content" : "ed448347fc0104034aa14c8189bf37de" }, { "alg" : "SHA-1", "content" : "5043bfebc3db072ed80fbd362e7caf00e885d8ae" }, { "alg" : "SHA-256", "content" : "ce6f913cad1f0db3aad70186d65c5bc7ffcc9a99e3fe8e0b137312819f7c362f" }, { "alg" : "SHA-512", "content" : "470323a2ee38be1b7ff8c84f1f5a5f8c4ec2ceb6b0649faa7b961f111865877dbe125409f72b1c52c7f18aa89e3469635c49ff4b83f86cc2f2eb2cc5562f9bff" }, { "alg" : "SHA-384", "content" : "264a511a601a07558911ccc5f49ef579aa1b1760bb4091bcbe1a0017c7be64d86f1d0b28ef560819614b252907cdd44a" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/commons-logging/commons-logging@1.1.1?type=jar", "externalReferences" : [ { "type" : "website", "url" : "http://commons.apache.org/logging" }, { "type" : "build-system", "url" : "http://vmbuild.apache.org/continuum/" }, { "type" : "issue-tracker", "url" : "http://issues.apache.org/jira/browse/LOGGING" }, { "type" : "mailing-list", "url" : "http://mail-archives.apache.org/mod_mbox/commons-commits/" }, { "type" : "vcs", "url" : "http://svn.apache.org/repos/asf/commons/proper/logging/tags/commons-logging-1.1.1" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/org.apache.commons/commons-collections4@4.2?type=jar", "publisher" : "The Apache Software Foundation", "group" : "org.apache.commons", "name" : "commons-collections4", "version" : "4.2", "description" : "The Apache Commons Collections package contains types that extend and augment the Java Collections Framework.", "scope" : "optional", "hashes" : [ { "alg" : "MD5", "content" : "b290524be8a0dbb6521df95f4ce80c8d" }, { "alg" : "SHA-1", "content" : "54ebea0a5b653d3c680131e73fe807bb8f78c4ed" }, { "alg" : "SHA-256", "content" : "6a594721d51444fd97b3eaefc998a77f606dedb03def494f74755aead3c9df3e" }, { "alg" : "SHA-512", "content" : "e1ba369ffe4e0d8fb1c432ffb2171aaf4435ae2a88f6c91ebf8e7aea28791dc3035685f34a93a5b1370745374ea4bf3b9ca7a99bf73a0017811d29c13afa9a1e" }, { "alg" : "SHA-384", "content" : "5f7cf10ef89925ae0c4ad076ff93079157ce11f69608d8c37e9d6a9cc3a0fa5e65f1b5cd1b2dc7c45cb3886511354710" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/org.apache.commons/commons-collections4@4.2?type=jar", "externalReferences" : [ { "type" : "website", "url" : "http://commons.apache.org/proper/commons-collections/" }, { "type" : "build-system", "url" : "https://builds.apache.org/" }, { "type" : "distribution-intake", "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" }, { "type" : "issue-tracker", "url" : "http://issues.apache.org/jira/browse/COLLECTIONS" }, { "type" : "mailing-list", "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/" }, { "type" : "vcs", "url" : "https://git-wip-us.apache.org/repos/asf?p=commons-collections.git" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/com.github.librepdf/openpdf@1.3.30.jaspersoft.2?type=jar", "group" : "com.github.librepdf", "name" : "openpdf", "version" : "1.3.30.jaspersoft.2", "description" : "Open and Free PDF library.", "scope" : "optional", "hashes" : [ { "alg" : "MD5", "content" : "71e298f9eeb2df0edab3dbe34064ba87" }, { "alg" : "SHA-1", "content" : "d78a17a6e9c09c18a0f7787f8d3f4bccabf3fc12" }, { "alg" : "SHA-256", "content" : "3d69dce074ee5b0b995d526c47f8c5281ceb83144ebaab5c52b66cf98655df06" }, { "alg" : "SHA-512", "content" : "02f0f908099e5f8162c63934ca9baa57305b14cbf3ef93e3de5ad6c9acb6fda98d796f216197cd238a3cb4e7cd765a40720fe9a8d90282dde4b3210d30e4c4d3" }, { "alg" : "SHA-384", "content" : "a486b40434eb69931041ac733051ba2fe7b095a8f671930d2ec77fc2fed4eef200cab2fdc605bcf3b6ae9f48d4958b8e" } ], "licenses" : [ { "license" : { "name" : "GNU Lesser General Public License (LGPL), Version 2.1", "url" : "https://www.gnu.org/licenses/old-licenses/lgpl-2.1.html" } }, { "license" : { "name" : "Mozilla Public License Version 2.0", "url" : "https://www.mozilla.org/en-US/MPL/2.0/" } } ], "purl" : "pkg:maven/com.github.librepdf/openpdf@1.3.30.jaspersoft.2?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://github.com/LibrePDF/OpenPDF/openpdf" }, { "type" : "vcs", "url" : "scm:git:https://github.com/LibrePDF/OpenPDF/openpdf" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/org.jfree/jcommon@1.0.23?type=jar", "publisher" : "JFree.org", "group" : "org.jfree", "name" : "jcommon", "version" : "1.0.23", "description" : "JCommon is a free general purpose Java class library that is used in several projects at www.jfree.org, including JFreeChart and JFreeReport.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "1b059adc60fef2da40b7130f9a67f977" }, { "alg" : "SHA-1", "content" : "a316f336ca996e0c6bec4e4fbd49be8f5e1c3968" }, { "alg" : "SHA-256", "content" : "1e670402809484c71ec74d55b40022a4c4939c7911bd39ee5a0cfb3aaf56397c" }, { "alg" : "SHA-512", "content" : "f4574e35698f66ac02c868e49ca4d238eb103390f1b842dee5afe0adfdaaca5d86f3e149449c3dbaf83b4965be4829679c201393df33764c489288637eff0a44" }, { "alg" : "SHA-384", "content" : "72bf196da43a02ccfc2ba006de10335bb0d32a4b64e67303a0b8e8e15464f2d7e3275ac4b9a52eb3c0bdcb112f8a1b00" } ], "licenses" : [ { "license" : { "name" : "GNU Lesser General Public Licence", "url" : "http://www.gnu.org/licenses/lgpl.txt" } } ], "purl" : "pkg:maven/org.jfree/jcommon@1.0.23?type=jar", "externalReferences" : [ { "type" : "website", "url" : "http://www.jfree.org/jcommon/" }, { "type" : "distribution-intake", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "issue-tracker", "url" : "http://sourceforge.net/tracker/?group_id=15494" }, { "type" : "mailing-list", "url" : "http://sourceforge.net/mailarchive/forum.php?forum=jfreechart-dev" }, { "type" : "vcs", "url" : "http://cvs.sourceforge.net/viewcvs.py/jfreechart/jcommon" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/org.eclipse.jdt/ecj@3.21.0?type=jar", "publisher" : "Eclipse Foundation", "group" : "org.eclipse.jdt", "name" : "ecj", "version" : "3.21.0", "description" : "Eclipse Compiler for Java(TM)", "scope" : "optional", "hashes" : [ { "alg" : "MD5", "content" : "4d1404f81be38fdf9186c9556c4ad3e9" }, { "alg" : "SHA-1", "content" : "d06974eec06892e5594bdb8fbbc95cd81f1c57b2" }, { "alg" : "SHA-256", "content" : "9082211f48782750093f07822d1ae481e8ece250449578f372334da626ccdead" }, { "alg" : "SHA-512", "content" : "41311832a593d13ea84eebea087baa3bab16df381c70bd4c0f425caeb69eac1b41be2af27e40735ae16c039df4861fa93c3cfc4c21f84bad1c5eb1cb0e7ad351" }, { "alg" : "SHA-384", "content" : "5123d5e6e30cc26bf70723fdd92ea3eab41b0c694197bee305459b5bd431ee8bb66c4b7f39dc91b5fb4b533a103f70f6" } ], "licenses" : [ { "license" : { "id" : "EPL-2.0" } } ], "purl" : "pkg:maven/org.eclipse.jdt/ecj@3.21.0?type=jar", "externalReferences" : [ { "type" : "website", "url" : "http://www.eclipse.org/jdt" }, { "type" : "issue-tracker", "url" : "https://bugs.eclipse.org/" }, { "type" : "vcs", "url" : "https://git.eclipse.org/c/jdt/eclipse.jdt.core.git" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.14.1?type=jar", "publisher" : "FasterXML", "group" : "com.fasterxml.jackson.core", "name" : "jackson-core", "version" : "2.14.1", "description" : "Core Jackson processing abstractions (aka Streaming API), implementation for JSON", "scope" : "optional", "hashes" : [ { "alg" : "MD5", "content" : "f9604a5f31129cdb7db4bdec90111850" }, { "alg" : "SHA-1", "content" : "7a07bc535ccf0b7f6929c4d0f2ab9b294ef7c4a3" }, { "alg" : "SHA-256", "content" : "0114187e296b34c931c1bf9e5a84152b62bfab7d182f5623f3982dc2da35e526" }, { "alg" : "SHA-512", "content" : "7a3cd2e4af749e800151efbcf0a18c6429bf5f8abb2dc2bd4f71ffeaba365574a0adb2ae204b6aba1f3a19f6fe6985d4ddf1169747235e85c5bedcdad2f4d58c" }, { "alg" : "SHA-384", "content" : "fcd9164ae7dd26b1562f89e9ff741a9c34611b022db52e387e7a9bc3d8f084b3f5390e9516b049a8542ccb1f1630a665" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.14.1?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://github.com/FasterXML/jackson-core" }, { "type" : "distribution-intake", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "issue-tracker", "url" : "https://github.com/FasterXML/jackson-core/issues" }, { "type" : "vcs", "url" : "https://github.com/FasterXML/jackson-core" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.1?type=jar", "publisher" : "FasterXML", "group" : "com.fasterxml.jackson.core", "name" : "jackson-databind", "version" : "2.14.1", "description" : "General data-binding functionality for Jackson: works on core streaming API", "scope" : "optional", "hashes" : [ { "alg" : "MD5", "content" : "3e3e7aab8799ccc169b10f244e6fb5b4" }, { "alg" : "SHA-1", "content" : "268524b9056cae1211b9f1f52560ef19347f4d17" }, { "alg" : "SHA-256", "content" : "423a0c806de4b3fa5eb4a28698305e3a3777c731e1bcfa1b2f3a3760c7b6e773" }, { "alg" : "SHA-512", "content" : "e23798189c4178603d6df8d27f5a0595f278d8df7584425fe225cf48a1e89d46e50ac0841a8c1f371a4ac4c45680ef207f2e496258f9d3ecf53d5734f6892f54" }, { "alg" : "SHA-384", "content" : "14ddb27647d784645b9d66a75cdad0e88256752994df50b366c35b70e38d32712abb74a7e58089cd7d5048dbcffd076a" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.1?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://github.com/FasterXML/jackson" }, { "type" : "distribution-intake", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "issue-tracker", "url" : "https://github.com/FasterXML/jackson-databind/issues" }, { "type" : "vcs", "url" : "https://github.com/FasterXML/jackson-databind" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.14.1?type=jar", "publisher" : "FasterXML", "group" : "com.fasterxml.jackson.core", "name" : "jackson-annotations", "version" : "2.14.1", "description" : "Core annotations used for value types, used by Jackson data binding package.", "scope" : "optional", "hashes" : [ { "alg" : "MD5", "content" : "da4742ba6aeb24bf1bd29382fd95647b" }, { "alg" : "SHA-1", "content" : "2a6ad504d591a7903ffdec76b5b7252819a2d162" }, { "alg" : "SHA-256", "content" : "d255b4b863ff8ec714a8f96fa55c34621d43dbb82b82d3f57476496a4c09e1e7" }, { "alg" : "SHA-512", "content" : "80c98ab07cf49a2114882f955e5eefe9cef888a495b7db34f0a3c171525dff645f091fbc4dcea8d124ff85ae6eb530f481d25249420c9413772a712c78feb93d" }, { "alg" : "SHA-384", "content" : "1a68c63fd1c9d5114e39aa07f36a688a4d5c2c07a66bbf2370ca67483f8569c8bd2ad446b36f24724bb73905e59eda53" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.14.1?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://github.com/FasterXML/jackson" }, { "type" : "distribution-intake", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "issue-tracker", "url" : "https://github.com/FasterXML/jackson-annotations/issues" }, { "type" : "vcs", "url" : "https://github.com/FasterXML/jackson-annotations" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.14.1?type=jar", "publisher" : "FasterXML", "group" : "com.fasterxml.jackson.dataformat", "name" : "jackson-dataformat-xml", "version" : "2.14.1", "description" : "Data format extension for Jackson to offer alternative support for serializing POJOs as XML and deserializing XML as pojos.", "scope" : "optional", "hashes" : [ { "alg" : "MD5", "content" : "c95952b32a6b42880ec626e5f2bc8563" }, { "alg" : "SHA-1", "content" : "ccd98bd674080338a6ca4bcdd52be7fb465cec1d" }, { "alg" : "SHA-256", "content" : "90fa6199c194cf3bad58073d3913b3e8a812d06a5db16faa554ba10f5d859436" }, { "alg" : "SHA-512", "content" : "f5a8a6f445c157eb9b4615566a01cbf5f903301e4b496dcbc84138161dc606224d7324b30a0c851cbfa6f2b9ac7e53d07376735d3192a0f98b8c419c79a46006" }, { "alg" : "SHA-384", "content" : "e0e29643d970e756b3aa734c161c5ef6db7aa0839a9510362a89a75cd5787b83a00df867eaeb93f80cdebccf84a46776" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.14.1?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://github.com/FasterXML/jackson-dataformat-xml" }, { "type" : "distribution-intake", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "issue-tracker", "url" : "https://github.com/FasterXML/jackson-dataformat-xml/issues" }, { "type" : "vcs", "url" : "http://github.com/FasterXML/jackson-dataformat-xml" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1?type=jar", "publisher" : "fasterxml.com", "group" : "org.codehaus.woodstox", "name" : "stax2-api", "version" : "4.2.1", "description" : "tax2 API is an extension to basic Stax 1.0 API that adds significant new functionality, such as full-featured bi-direction validation interface and high-performance Typed Access API.", "scope" : "optional", "hashes" : [ { "alg" : "MD5", "content" : "af8377bc7882332e22456616a9f164f6" }, { "alg" : "SHA-1", "content" : "a3f7325c52240418c2ba257b103c3c550e140c83" }, { "alg" : "SHA-256", "content" : "678567e48b51a42c65c699f266539ad3d676d4b1a5b0ad7d89ece8b9d5772579" }, { "alg" : "SHA-512", "content" : "00efc5d4d17540fb180c5b20d456630a8b3262dff46676689ae916ba16f0fbd9b1a71c7badfb254faad6597f94fed1edb96f77c15f40178eaf4d8cd35cea5e8d" }, { "alg" : "SHA-384", "content" : "97a6a9f0cc666776e4a4f08729c303d2a602ce5c25ee633cd6c54c72f12d11e9d43634ca6ca4ef7da5973a52030384da" } ], "licenses" : [ { "license" : { "id" : "BSD-4-Clause" } } ], "purl" : "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1?type=jar", "externalReferences" : [ { "type" : "website", "url" : "http://github.com/FasterXML/stax2-api" }, { "type" : "distribution-intake", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "issue-tracker", "url" : "https://github.com/FasterXML/stax2-api/issues" }, { "type" : "vcs", "url" : "http://github.com/FasterXML/stax2-api" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/com.fasterxml.woodstox/woodstox-core@6.4.0?type=jar", "publisher" : "FasterXML", "group" : "com.fasterxml.woodstox", "name" : "woodstox-core", "version" : "6.4.0", "description" : "Woodstox is a high-performance XML processor that implements Stax (JSR-173), SAX2 and Stax2 APIs", "scope" : "optional", "hashes" : [ { "alg" : "MD5", "content" : "afcba1114fca8199ef26346dd6011e90" }, { "alg" : "SHA-1", "content" : "c47579857bbf12c85499f431d4ecf27d77976b7c" }, { "alg" : "SHA-256", "content" : "d6eb9f2f40049a7a808baf11ffba0737648e62ff52fde9271d808e5d57a27279" }, { "alg" : "SHA-512", "content" : "7da4cd51f7082e59b3cb78988cda78bf162e2b02457caf17242cb9cea9b8002ada15d4dfe774ca0355acdea95c88b67c4d06a27a61653cb84c9a46d27b2726c6" }, { "alg" : "SHA-384", "content" : "6e25d32eb4c127f7129ccd912ff882625d3fa43e8eba9bc55013a27a61806d1b865ec809bd21d58d3dbfa3d9e2a3d516" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/com.fasterxml.woodstox/woodstox-core@6.4.0?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://github.com/FasterXML/woodstox" }, { "type" : "distribution-intake", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "issue-tracker", "url" : "https://github.com/FasterXML/woodstox/issues" }, { "type" : "vcs", "url" : "https://github.com/FasterXML/woodstox" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/org.jfree/jfreechart@1.0.19?type=jar", "publisher" : "JFree.org", "group" : "org.jfree", "name" : "jfreechart", "version" : "1.0.19", "description" : "JFreeChart is a class library, written in Java, for generating charts. Utilising the Java2D APIs, it currently supports bar charts, pie charts, line charts, XY-plots and time series plots.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "4ff3762bd04a7239cfb98de542134bec" }, { "alg" : "SHA-1", "content" : "ba9ee7dbb2e4c57a6901c79f614ed2dea9cc0e20" }, { "alg" : "SHA-256", "content" : "153d077d6399776a45de97c555ad026eb6201d4bd8af86cfce7b8b4ccfa66263" }, { "alg" : "SHA-512", "content" : "4461b94a95fff1dccd45b504e2cebd37e294257ac743af4296a55b1513d9133aee0f69d05fc737406ee2246c7e1f20536cf235b02053d5ca7aed58586841c2bd" }, { "alg" : "SHA-384", "content" : "dd30f229cbcf06cfd825f9acbdb2a8026a8c81c49f9919b5708561199a8464df87730a04bd083a3bf252184a71349549" } ], "licenses" : [ { "license" : { "name" : "GNU Lesser General Public Licence", "url" : "http://www.gnu.org/licenses/lgpl.txt" } } ], "purl" : "pkg:maven/org.jfree/jfreechart@1.0.19?type=jar", "externalReferences" : [ { "type" : "website", "url" : "http://www.jfree.org/jfreechart/" }, { "type" : "distribution-intake", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "issue-tracker", "url" : "http://sourceforge.net/tracker/?group_id=15494" }, { "type" : "mailing-list", "url" : "http://sourceforge.net/mailarchive/forum.php?forum=jfreechart-dev" }, { "type" : "vcs", "url" : "http://jfreechart.svn.sourceforge.net/viewvc/jfreechart/" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/com.jhlabs/filters@2.0.235-1?type=jar", "group" : "com.jhlabs", "name" : "filters", "version" : "2.0.235-1", "description" : "Java Image Processing Pages", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "ca3edff32f4433906c484fdfab2c4043" }, { "alg" : "SHA-1", "content" : "fff65ebe39d1097cee431087858b3caf957ecfb7" }, { "alg" : "SHA-256", "content" : "a37202f03eae99ab1faf2a89eeaee3665c8489f45b1aeb0d5926d78a54c613bf" }, { "alg" : "SHA-512", "content" : "b58fb0a93408f09fd32afa421a875019d1ff1dd6fc18915d5bd9b8e6c65a7353c366c7777d85ca3ec0f2007e5f7d87821b4bf1884ae1c11772704ecd646074f1" }, { "alg" : "SHA-384", "content" : "8ec503cdbb8178fd514dbfcb4331ad80c160784e384ac0e34d8598d78a50774e6c850cefa439a2635cd90fec3d09688d" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/com.jhlabs/filters@2.0.235-1?type=jar", "externalReferences" : [ { "type" : "website", "url" : "http://www.jhlabs.com/ip/filters/" }, { "type" : "distribution-intake", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "vcs", "url" : "https://github.com/axet/jhlabs" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/org.zkoss.zk/zml@9.6.7-SNAPSHOT?type=jar", "group" : "org.zkoss.zk", "name" : "zml", "version" : "9.6.7-SNAPSHOT", "description" : "ZK XML components", "licenses" : [ { "license" : { "name" : "GNU LESSER GENERAL PUBLIC LICENSE, Version 3", "url" : "https://www.gnu.org/licenses/lgpl.html" } } ], "purl" : "pkg:maven/org.zkoss.zk/zml@9.6.7-SNAPSHOT?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://www.zkoss.org/zml" }, { "type" : "vcs", "url" : "https://mavensync.zkoss.org/maven2/zml" } ] } ], "dependencies" : [ { "ref" : "pkg:maven/org.zkoss.zk/zkex@9.6.7-SNAPSHOT?type=jar", "dependsOn" : [ "pkg:maven/org.zkoss.zk/zul@9.6.7-SNAPSHOT?type=jar", "pkg:maven/org.zkoss.zk/zkbind@9.6.7-SNAPSHOT?type=jar", "pkg:maven/javax.servlet/javax.servlet-api@3.0.1?type=jar", "pkg:maven/net.sf.jasperreports/jasperreports@6.20.5?type=jar", "pkg:maven/org.jfree/jfreechart@1.0.19?type=jar", "pkg:maven/com.jhlabs/filters@2.0.235-1?type=jar" ] }, { "ref" : "pkg:maven/org.zkoss.zk/zul@9.6.7-SNAPSHOT?type=jar", "dependsOn" : [ "pkg:maven/org.zkoss.zk/zk@9.6.7-SNAPSHOT?type=jar" ] }, { "ref" : "pkg:maven/org.zkoss.zk/zk@9.6.7-SNAPSHOT?type=jar", "dependsOn" : [ "pkg:maven/org.zkoss.common/zweb@9.6.7-SNAPSHOT?type=jar", "pkg:maven/com.google.javascript/closure-compiler-unshaded@v20220601?type=jar", "pkg:maven/org.zkoss.zk/zkwebfragment@9.6.7-SNAPSHOT?type=jar", "pkg:maven/commons-fileupload/commons-fileupload@1.6.0?type=jar", "pkg:maven/commons-io/commons-io@2.17.0?type=jar" ] }, { "ref" : "pkg:maven/org.zkoss.common/zweb@9.6.7-SNAPSHOT?type=jar", "dependsOn" : [ "pkg:maven/org.zkoss.common/zcommon@9.6.7-SNAPSHOT?type=jar" ] }, { "ref" : "pkg:maven/org.zkoss.common/zcommon@9.6.7-SNAPSHOT?type=jar", "dependsOn" : [ "pkg:maven/org.zkoss.common/zel@9.6.7-SNAPSHOT?type=jar", "pkg:maven/org.apache-extras.beanshell/bsh@2.0b6?type=jar", "pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar" ] }, { "ref" : "pkg:maven/org.zkoss.common/zel@9.6.7-SNAPSHOT?type=jar", "dependsOn" : [ "pkg:maven/org.javassist/javassist@3.28.0-GA?type=jar" ] }, { "ref" : "pkg:maven/org.javassist/javassist@3.28.0-GA?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/org.apache-extras.beanshell/bsh@2.0b6?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/com.google.javascript/closure-compiler-unshaded@v20220601?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/org.zkoss.zk/zkwebfragment@9.6.7-SNAPSHOT?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/commons-fileupload/commons-fileupload@1.6.0?type=jar", "dependsOn" : [ "pkg:maven/commons-io/commons-io@2.17.0?type=jar" ] }, { "ref" : "pkg:maven/commons-io/commons-io@2.17.0?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/org.zkoss.zk/zkbind@9.6.7-SNAPSHOT?type=jar", "dependsOn" : [ "pkg:maven/org.zkoss.zk/zul@9.6.7-SNAPSHOT?type=jar", "pkg:maven/org.javassist/javassist@3.28.0-GA?type=jar" ] }, { "ref" : "pkg:maven/javax.servlet/javax.servlet-api@3.0.1?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/net.sf.jasperreports/jasperreports@6.20.5?type=jar", "dependsOn" : [ "pkg:maven/commons-beanutils/commons-beanutils@1.9.4?type=jar", "pkg:maven/commons-digester/commons-digester@2.1?type=jar", "pkg:maven/commons-logging/commons-logging@1.1.1?type=jar", "pkg:maven/org.apache.commons/commons-collections4@4.2?type=jar", "pkg:maven/com.github.librepdf/openpdf@1.3.30.jaspersoft.2?type=jar", "pkg:maven/org.jfree/jcommon@1.0.23?type=jar", "pkg:maven/org.jfree/jfreechart@1.0.19?type=jar", "pkg:maven/org.eclipse.jdt/ecj@3.21.0?type=jar", "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.14.1?type=jar", "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.1?type=jar", "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.14.1?type=jar", "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.14.1?type=jar" ] }, { "ref" : "pkg:maven/commons-beanutils/commons-beanutils@1.9.4?type=jar", "dependsOn" : [ "pkg:maven/commons-logging/commons-logging@1.1.1?type=jar", "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar" ] }, { "ref" : "pkg:maven/commons-logging/commons-logging@1.1.1?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/commons-digester/commons-digester@2.1?type=jar", "dependsOn" : [ "pkg:maven/commons-beanutils/commons-beanutils@1.9.4?type=jar", "pkg:maven/commons-logging/commons-logging@1.1.1?type=jar" ] }, { "ref" : "pkg:maven/org.apache.commons/commons-collections4@4.2?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/com.github.librepdf/openpdf@1.3.30.jaspersoft.2?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/org.jfree/jcommon@1.0.23?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/org.jfree/jfreechart@1.0.19?type=jar", "dependsOn" : [ "pkg:maven/org.jfree/jcommon@1.0.23?type=jar" ] }, { "ref" : "pkg:maven/org.eclipse.jdt/ecj@3.21.0?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.14.1?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.1?type=jar", "dependsOn" : [ "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.14.1?type=jar", "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.14.1?type=jar" ] }, { "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.14.1?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.14.1?type=jar", "dependsOn" : [ "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.14.1?type=jar", "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.14.1?type=jar", "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.1?type=jar", "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1?type=jar", "pkg:maven/com.fasterxml.woodstox/woodstox-core@6.4.0?type=jar" ] }, { "ref" : "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/com.fasterxml.woodstox/woodstox-core@6.4.0?type=jar", "dependsOn" : [ "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1?type=jar" ] }, { "ref" : "pkg:maven/com.jhlabs/filters@2.0.235-1?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/org.zkoss.zk/zml@9.6.7-SNAPSHOT?type=jar", "dependsOn" : [ "pkg:maven/org.zkoss.zk/zk@9.6.7-SNAPSHOT?type=jar" ] }, { "ref" : "pkg:maven/org.zkoss.zk/zksbom-pe@9.6.7-SNAPSHOT?type=pom", "dependsOn" : [ ] } ] }