{
    "bomFormat": "CycloneDX",
    "specVersion": "1.6",
    "serialNumber": "urn:uuid:b1f0f95f-cb4b-4321-a0b9-f2b810933c01",
    "version": 1,
    "metadata": {
        "timestamp": "2026-11-11T15:56:49Z",
        "tools": [
            {
                "vendor": "CycloneDX",
                "name": "cyclonedx-gradle-plugin",
                "version": "1.10.0"
            }
        ],
        "component": {
            "type": "library",
            "bom-ref": "pkg:maven/org.zkoss.zk/zkcml@11.0.0-jakarta.FL.20261111-Eval?type=pom",
            "group": "org.zkoss.zk",
            "name": "zkcml",
            "version": "11.0.0-jakarta.FL.20261111-Eval",
            "purl": "pkg:maven/org.zkoss.zk/zkcml@11.0.0-jakarta.FL.20261111-Eval?type=pom",
            "supplier": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "manufacturer": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "licenses": [
                {
                    "expression": "LicenseRef-Potix-ZK-Trial-License-Agreement",
                    "acknowledgement": "concluded"
                }
            ]
        },
        "lifecycles": [
            {
                "phase": "build"
            }
        ],
        "manufacturer": {
            "name": "Potix Corporation",
            "url": [
                "https://www.zkoss.org"
            ]
        },
        "supplier": {
            "name": "Potix Corporation",
            "url": [
                "https://www.zkoss.org"
            ]
        }
    },
    "components": [
        {
            "type": "library",
            "bom-ref": "pkg:maven/commons-beanutils/commons-beanutils@1.9.4?type=jar",
            "group": "commons-beanutils",
            "name": "commons-beanutils",
            "version": "1.9.4",
            "description": "Apache Commons BeanUtils provides an easy-to-use but flexible wrapper around reflection and introspection.",
            "hashes": [
                {
                    "alg": "MD5",
                    "content": "07dc532ee316fe1f2f0323e9bd2f8df4"
                },
                {
                    "alg": "SHA-1",
                    "content": "d52b9abcd97f38c81342bb7e7ae1eee9b73cba51"
                },
                {
                    "alg": "SHA-256",
                    "content": "7d938c81789028045c08c065e94be75fc280527620d5bd62b519d5838532368a"
                },
                {
                    "alg": "SHA-512",
                    "content": "7762b348caecead49038a38a89754ff7d9be6199324315495ba47cf24f52c06faadf9306d925c8fe47c587589a939c82e491e1c730267fdf354243a68c0f96ff"
                },
                {
                    "alg": "SHA-384",
                    "content": "dcd3845917b8fb189cf4034b0d7c6d266ec7110f85ffbd2711cdea9eb94b4fa3e1cee9120b484c6a120b82769230ed3a"
                },
                {
                    "alg": "SHA3-384",
                    "content": "dfdb8845989be083de807184910124ad7e7e372959b34686cd5f5020f193a2997831ead497b0a5a0233f031aecdf55f6"
                },
                {
                    "alg": "SHA3-256",
                    "content": "127a81068335d6ca47f5f5e12d849dc1bc5300b2ad8d3f9b64ca30ff2a76d479"
                },
                {
                    "alg": "SHA3-512",
                    "content": "f67405d0a7667adf7cd35cd7416c54e1759380cdb9c8f179a10175058e40292808e17e69d48df4d4d6b5e268c314127cf3ab87af6920a271bb2e6e0df963940d"
                }
            ],
            "licenses": [
                {
                    "expression": "Apache-2.0",
                    "acknowledgement": "concluded"
                }
            ],
            "purl": "pkg:maven/commons-beanutils/commons-beanutils@1.9.4?type=jar",
            "modified": false,
            "externalReferences": [
                {
                    "type": "issue-tracker",
                    "url": "https://issues.apache.org/jira/browse/BEANUTILS"
                },
                {
                    "type": "vcs",
                    "url": "http://svn.apache.org/viewvc/commons/proper/beanutils/tags/BEANUTILS_1_9_3_RC3"
                },
                {
                    "type": "distribution",
                    "url": "pkg:maven/commons-beanutils/commons-beanutils@1.9.4?type=jar",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "7762b348caecead49038a38a89754ff7d9be6199324315495ba47cf24f52c06faadf9306d925c8fe47c587589a939c82e491e1c730267fdf354243a68c0f96ff"
                        }
                    ]
                }
            ],
            "supplier": {
                "name": "The Apache Software Foundation",
                "url": [
                    "https://www.apache.org"
                ]
            },
            "manufacturer": {
                "name": "The Apache Software Foundation",
                "url": [
                    "https://www.apache.org"
                ]
            },
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "commons-beanutils-1.9.4.jar"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "structured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.14.1?type=jar",
            "group": "com.fasterxml.jackson.core",
            "name": "jackson-annotations",
            "version": "2.14.1",
            "description": "Core annotations used for value types, used by Jackson data binding package.",
            "hashes": [
                {
                    "alg": "MD5",
                    "content": "da4742ba6aeb24bf1bd29382fd95647b"
                },
                {
                    "alg": "SHA-1",
                    "content": "2a6ad504d591a7903ffdec76b5b7252819a2d162"
                },
                {
                    "alg": "SHA-256",
                    "content": "d255b4b863ff8ec714a8f96fa55c34621d43dbb82b82d3f57476496a4c09e1e7"
                },
                {
                    "alg": "SHA-512",
                    "content": "80c98ab07cf49a2114882f955e5eefe9cef888a495b7db34f0a3c171525dff645f091fbc4dcea8d124ff85ae6eb530f481d25249420c9413772a712c78feb93d"
                },
                {
                    "alg": "SHA-384",
                    "content": "1a68c63fd1c9d5114e39aa07f36a688a4d5c2c07a66bbf2370ca67483f8569c8bd2ad446b36f24724bb73905e59eda53"
                },
                {
                    "alg": "SHA3-384",
                    "content": "1f5eb50fb9c3681daf3103d041f2cc6dfa938d8038f1945871260fcb2a8e417c8366f346f916898a0099c36cdfb964d1"
                },
                {
                    "alg": "SHA3-256",
                    "content": "4f2842ab076e5107fad346f0a79c3f87a75f5667b400e7087c6fee7951a37cdb"
                },
                {
                    "alg": "SHA3-512",
                    "content": "60038ae7eeb69fca94e497dda74649e53e9b406d13fa03ef6833bff46f59605b53d17a4004c45b7edaf04ab329b08a6c70e50e177362eb147c2ad70f98b2eee2"
                }
            ],
            "licenses": [
                {
                    "expression": "Apache-2.0",
                    "acknowledgement": "concluded"
                }
            ],
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.14.1?type=jar",
            "modified": false,
            "externalReferences": [
                {
                    "type": "vcs",
                    "url": "https://github.com/FasterXML/jackson-annotations"
                },
                {
                    "type": "distribution",
                    "url": "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.14.1?type=jar",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "80c98ab07cf49a2114882f955e5eefe9cef888a495b7db34f0a3c171525dff645f091fbc4dcea8d124ff85ae6eb530f481d25249420c9413772a712c78feb93d"
                        }
                    ]
                }
            ],
            "supplier": {
                "name": "FasterXML, LLC",
                "url": [
                    "https://github.com/FasterXML"
                ]
            },
            "manufacturer": {
                "name": "FasterXML, LLC",
                "url": [
                    "https://github.com/FasterXML"
                ]
            },
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "jackson-annotations-2.14.1.jar"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "structured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/org.zkoss.zk/zkmax@11.0.0-jakarta.FL.20261111-Eval?type=jar",
            "group": "org.zkoss.zk",
            "name": "zkmax",
            "version": "11.0.0-jakarta.FL.20261111-Eval",
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "e2fbe89f69cc80bb1254ec81e4b04ee6a1d44405b248bd25eee5b6ec3a0fd438"
                },
                {
                    "alg": "SHA-512",
                    "content": "d4341ee3e6980f9bc80e232a47ab2df735733070462ae7c79606ac74c3c08473c5ffb7ae0baa6d596217c2ba147989668ad69b236e555d0b8e84204163b4f3a2"
                }
            ],
            "purl": "pkg:maven/org.zkoss.zk/zkmax@11.0.0-jakarta.FL.20261111-Eval?type=jar",
            "modified": false,
            "supplier": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "manufacturer": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "licenses": [
                {
                    "expression": "LicenseRef-Potix-ZK-Trial-License-Agreement",
                    "acknowledgement": "concluded"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "pkg:maven/org.zkoss.zk/zkmax@11.0.0-jakarta.FL.20261111-Eval?type=jar",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "d4341ee3e6980f9bc80e232a47ab2df735733070462ae7c79606ac74c3c08473c5ffb7ae0baa6d596217c2ba147989668ad69b236e555d0b8e84204163b4f3a2"
                        }
                    ]
                }
            ],
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "zkmax-11.0.0-jakarta.FL.20261111-Eval.jar"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "structured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/org.apache.tomcat/tomcat-jasper-el@9.0.120?type=jar",
            "group": "org.apache.tomcat",
            "name": "tomcat-jasper-el",
            "version": "9.0.120",
            "description": "Jasper Expression Language Impl",
            "hashes": [
                {
                    "alg": "MD5",
                    "content": "4dc5f2d87d8583e891af9a7177a9257b"
                },
                {
                    "alg": "SHA-1",
                    "content": "ec9f35960508efd6cf53e2e1515ff5330e032600"
                },
                {
                    "alg": "SHA-256",
                    "content": "1107bcbcc4465de23dfda0c96724af3b8d791296e585edf61fd486c528e9c00f"
                },
                {
                    "alg": "SHA-512",
                    "content": "0733e3950f6fba1b9f3680115a7b8f7739d01b7892e3e96158f9bb95d0fd8c047a918d31f8006ace19a1df1d93c1666f0382adacfa2c5a2ee0648ea63fdd1acd"
                },
                {
                    "alg": "SHA-384",
                    "content": "657ca68d43a9597fe23f499cf69fb8405e4a09aedae51bc1fd14f5da210c69c9a68ae137dba7188ba9c7b840bd3c8649"
                },
                {
                    "alg": "SHA3-384",
                    "content": "e01118a7cd06ea5b015e1b498801d0fed1e8b0cd475f346da51b9e846837de4f79d81a81dd1a8467322f365e6f70eb75"
                },
                {
                    "alg": "SHA3-256",
                    "content": "a269c49b8b0d362337720239b6c89c78721086c526b7acd77bd33a8f8076b258"
                },
                {
                    "alg": "SHA3-512",
                    "content": "5d14286061c0d6ce7e131430e9ca33d3698bf58a81edfa3da190594ad969f3ba26191e125402acea437eefd345c130d21327cb7108bd6c688957a6c2eda8c93c"
                }
            ],
            "licenses": [
                {
                    "expression": "Apache-2.0",
                    "acknowledgement": "concluded"
                }
            ],
            "purl": "pkg:maven/org.apache.tomcat/tomcat-jasper-el@9.0.120?type=jar",
            "modified": false,
            "supplier": {
                "name": "The Apache Software Foundation",
                "url": [
                    "https://www.apache.org"
                ]
            },
            "manufacturer": {
                "name": "The Apache Software Foundation",
                "url": [
                    "https://www.apache.org"
                ]
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "pkg:maven/org.apache.tomcat/tomcat-jasper-el@9.0.120?type=jar",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "0733e3950f6fba1b9f3680115a7b8f7739d01b7892e3e96158f9bb95d0fd8c047a918d31f8006ace19a1df1d93c1666f0382adacfa2c5a2ee0648ea63fdd1acd"
                        }
                    ]
                }
            ],
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "tomcat-jasper-el-9.0.120.jar"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "structured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/com.jhlabs/filters@2.0.235-1?type=jar",
            "group": "com.jhlabs",
            "name": "filters",
            "version": "2.0.235-1",
            "description": "Java Image Processing Pages",
            "hashes": [
                {
                    "alg": "MD5",
                    "content": "ca3edff32f4433906c484fdfab2c4043"
                },
                {
                    "alg": "SHA-1",
                    "content": "fff65ebe39d1097cee431087858b3caf957ecfb7"
                },
                {
                    "alg": "SHA-256",
                    "content": "a37202f03eae99ab1faf2a89eeaee3665c8489f45b1aeb0d5926d78a54c613bf"
                },
                {
                    "alg": "SHA-512",
                    "content": "b58fb0a93408f09fd32afa421a875019d1ff1dd6fc18915d5bd9b8e6c65a7353c366c7777d85ca3ec0f2007e5f7d87821b4bf1884ae1c11772704ecd646074f1"
                },
                {
                    "alg": "SHA-384",
                    "content": "8ec503cdbb8178fd514dbfcb4331ad80c160784e384ac0e34d8598d78a50774e6c850cefa439a2635cd90fec3d09688d"
                },
                {
                    "alg": "SHA3-384",
                    "content": "49b98b9d7837d2be0ef6a9693004256b80bf25b9243a95f7bce7174b4413829f8aa8d888f5cedcbf342480c92538f4f0"
                },
                {
                    "alg": "SHA3-256",
                    "content": "4283ea6a74ae06312078ca5d39b7d5971ee33a80b28848b19767785742f51014"
                },
                {
                    "alg": "SHA3-512",
                    "content": "ee6808ef4ff33cf1aca2efc475037e3644e022cfc8038a667280adf91ef0b5cd69b69da4176de3a097bfb9e17caf216e21223f8e2a9b432c0df2daaa84a76d95"
                }
            ],
            "licenses": [
                {
                    "expression": "Apache-2.0",
                    "acknowledgement": "concluded"
                }
            ],
            "purl": "pkg:maven/com.jhlabs/filters@2.0.235-1?type=jar",
            "modified": false,
            "externalReferences": [
                {
                    "type": "vcs",
                    "url": "https://github.com/axet/jhlabs"
                },
                {
                    "type": "distribution",
                    "url": "pkg:maven/com.jhlabs/filters@2.0.235-1?type=jar",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "b58fb0a93408f09fd32afa421a875019d1ff1dd6fc18915d5bd9b8e6c65a7353c366c7777d85ca3ec0f2007e5f7d87821b4bf1884ae1c11772704ecd646074f1"
                        }
                    ]
                }
            ],
            "supplier": {
                "name": "Jerry Huxtable (JH Labs)",
                "url": [
                    "http://www.jhlabs.com"
                ]
            },
            "manufacturer": {
                "name": "Jerry Huxtable (JH Labs)",
                "url": [
                    "http://www.jhlabs.com"
                ]
            },
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "filters-2.0.235-1.jar"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "structured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/com.google.errorprone/error_prone_annotations@2.50.0?type=jar",
            "group": "com.google.errorprone",
            "name": "error_prone_annotations",
            "version": "2.50.0",
            "hashes": [
                {
                    "alg": "MD5",
                    "content": "1ded1848cfd4f5167e00824faf9c4d3b"
                },
                {
                    "alg": "SHA-1",
                    "content": "74ba43e49ab1184d41634af2ef0047e82c4064b0"
                },
                {
                    "alg": "SHA-256",
                    "content": "4667724877f1d37a689202da191e23efa7657c62eef93ccdac406eccfe5cdd0a"
                },
                {
                    "alg": "SHA-512",
                    "content": "f867b1a1fbc057fcfc37c2fa86082f5965ad6a1c45373eac6cfa6ec058cedbf7b348ab4f3d4fea2d4d105ecc401c14f24d9b16f344507e126a221d50532cb8b2"
                },
                {
                    "alg": "SHA-384",
                    "content": "2986b161379c30e9805f3bcff197d7861b8c0690a021e2d7464707e57028b1953d24eefd1a36722f3c04665190b3cb48"
                },
                {
                    "alg": "SHA3-384",
                    "content": "597fe452ff7e21149da3c537b61d8e1b17df792f67bcd80fbccd6647acca571a94fa8bbcf4840826a37814bb2ef0249a"
                },
                {
                    "alg": "SHA3-256",
                    "content": "5447d9786f79d7dc20e8f75ac93f3a05181f3707faf6e91696dd326cdd5f5754"
                },
                {
                    "alg": "SHA3-512",
                    "content": "b51065218c88f5ce0b94e6607dee42d6c01aeb69a87b6e1c656dd406f2196cc999150ce87f56fbeeecbed7e1e354ed285589fa560012e9fb5858a97dc17d2129"
                }
            ],
            "licenses": [
                {
                    "expression": "Apache-2.0",
                    "acknowledgement": "concluded"
                }
            ],
            "purl": "pkg:maven/com.google.errorprone/error_prone_annotations@2.50.0?type=jar",
            "modified": false,
            "supplier": {
                "name": "Google LLC",
                "url": [
                    "https://opensource.google"
                ]
            },
            "manufacturer": {
                "name": "Google LLC",
                "url": [
                    "https://opensource.google"
                ]
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "pkg:maven/com.google.errorprone/error_prone_annotations@2.50.0?type=jar",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "f867b1a1fbc057fcfc37c2fa86082f5965ad6a1c45373eac6cfa6ec058cedbf7b348ab4f3d4fea2d4d105ecc401c14f24d9b16f344507e126a221d50532cb8b2"
                        }
                    ]
                }
            ],
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "error_prone_annotations-2.50.0.jar"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "structured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.22?type=jar",
            "group": "com.fasterxml.jackson.core",
            "name": "jackson-annotations",
            "version": "2.22",
            "description": "Core annotations used for value types, used by Jackson data binding package.",
            "hashes": [
                {
                    "alg": "MD5",
                    "content": "04c11c456fd1e21b9a21c25c665109cc"
                },
                {
                    "alg": "SHA-1",
                    "content": "15c67f9498d6934cff9510fc70c5a12e52290457"
                },
                {
                    "alg": "SHA-256",
                    "content": "21ddb598807d3a51a876704eb979d9296e1c6a6f47ab1826ff88c6d6a127a2d0"
                },
                {
                    "alg": "SHA-512",
                    "content": "63b597ec02b4e31c57266d9b96f05f301f217bc12ffb7ba046a5658d2829728930a559947b98eb6c3cc448413a96b4939427aa669ae1e2dc3597ab5d5d287f9f"
                },
                {
                    "alg": "SHA-384",
                    "content": "35b6fe651afeed54d1e6f7a39ac6cf6fdbafacdf2e3bdff7b29b965ccb79a0c53342a56bf0ecea4d6c4c4651b1d6aa19"
                },
                {
                    "alg": "SHA3-384",
                    "content": "72267dc54c4175c42ca0dd430a87b12cc68619a8777be2048e1d2f0747db884a568b5c346c77c9c8c0714ab96018f5f7"
                },
                {
                    "alg": "SHA3-256",
                    "content": "6bfc7b4ba70779fe5f0b1e2af585abab982f7929a68beb2c0e62ea2e2a321de0"
                },
                {
                    "alg": "SHA3-512",
                    "content": "3f1bdfa32f7df76ac14cd2a3e689b65066fa0a6a760a9b8b1121773bb1b043a44587d4148c67f361dc6c630e6b31f29b2691a57d47caabea5ca23ae44af34a5e"
                }
            ],
            "licenses": [
                {
                    "expression": "Apache-2.0",
                    "acknowledgement": "concluded"
                }
            ],
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.22?type=jar",
            "modified": false,
            "externalReferences": [
                {
                    "type": "vcs",
                    "url": "https://github.com/FasterXML/jackson-annotations"
                },
                {
                    "type": "distribution",
                    "url": "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.22?type=jar",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "63b597ec02b4e31c57266d9b96f05f301f217bc12ffb7ba046a5658d2829728930a559947b98eb6c3cc448413a96b4939427aa669ae1e2dc3597ab5d5d287f9f"
                        }
                    ]
                }
            ],
            "supplier": {
                "name": "FasterXML, LLC",
                "url": [
                    "https://github.com/FasterXML"
                ]
            },
            "manufacturer": {
                "name": "FasterXML, LLC",
                "url": [
                    "https://github.com/FasterXML"
                ]
            },
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "jackson-annotations-2.22.jar"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "structured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.22.1?type=jar",
            "group": "com.fasterxml.jackson.core",
            "name": "jackson-databind",
            "version": "2.22.1",
            "description": "General data-binding functionality for Jackson: works on core streaming API",
            "hashes": [
                {
                    "alg": "MD5",
                    "content": "df2dcf8d581836d48aae7387311cba93"
                },
                {
                    "alg": "SHA-1",
                    "content": "9e2fb91831cce9cb9262909cd76647508949f232"
                },
                {
                    "alg": "SHA-256",
                    "content": "7dcd7e53bec1f56c7ad278bd1ca0840bebcc595d61ce44d6a8439abb75b965b2"
                },
                {
                    "alg": "SHA-512",
                    "content": "d8a905e80e6d7dd2026b16b075dde2d409425b61417120980ea07b261c6bf98d5c065053f1c063b60da30b4324157778ec4eb859945fb8543176e55a2d3b8db8"
                },
                {
                    "alg": "SHA-384",
                    "content": "b45efa1187b756bdfa7e0c6bc2eda85fcf13d879b4bf370f06ef95325c13b629f763a8027dbc34dab7c6a549bb33e945"
                },
                {
                    "alg": "SHA3-384",
                    "content": "7eeb7d7ea5434fdede4b0d256955d0ebf93a11ad89efcc2a3551d649bf197f6aa6c3dd60247805a13270fd8ed0a98ae8"
                },
                {
                    "alg": "SHA3-256",
                    "content": "ab1df340c8e99a3ea6f485b9e3bf0e1cb7b57810b09e9161c8eee38eb8db3e47"
                },
                {
                    "alg": "SHA3-512",
                    "content": "dc3f3df098898dc6bf71fcef0ca232a592f59fb465161b95b03a28eebc9539bede1db83bacaf14dc57328feffc7a4637b911a09356fa4330d93f52131ac7254e"
                }
            ],
            "licenses": [
                {
                    "expression": "Apache-2.0",
                    "acknowledgement": "concluded"
                }
            ],
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.22.1?type=jar",
            "modified": false,
            "externalReferences": [
                {
                    "type": "vcs",
                    "url": "https://github.com/FasterXML/jackson-databind"
                },
                {
                    "type": "distribution",
                    "url": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.22.1?type=jar",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "d8a905e80e6d7dd2026b16b075dde2d409425b61417120980ea07b261c6bf98d5c065053f1c063b60da30b4324157778ec4eb859945fb8543176e55a2d3b8db8"
                        }
                    ]
                }
            ],
            "supplier": {
                "name": "FasterXML, LLC",
                "url": [
                    "https://github.com/FasterXML"
                ]
            },
            "manufacturer": {
                "name": "FasterXML, LLC",
                "url": [
                    "https://github.com/FasterXML"
                ]
            },
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "jackson-databind-2.22.1.jar"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "structured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/org.zkoss.zk/zk@11.0.0-jakarta.FL.20261111-Eval?type=jar",
            "group": "org.zkoss.zk",
            "name": "zk",
            "version": "11.0.0-jakarta.FL.20261111-Eval",
            "hashes": [
                {
                    "alg": "MD5",
                    "content": "bf5cb30e9a1513e5d874040a49c8c4c7"
                },
                {
                    "alg": "SHA-1",
                    "content": "611da8ad8b684d9a3d01374e01b5a12c20c691a4"
                },
                {
                    "alg": "SHA-256",
                    "content": "06329ac053680893846d8f64edf92312ec582aa528647a3be4f9ff5917981b3b"
                },
                {
                    "alg": "SHA-512",
                    "content": "0e0cc54fd518f0a16a1cc1445be7a9b9be27ec58bef146c076f67bee4c9b222b3637265f33814aa039f915b8abe3982a05deb2de4d0fa5a652d3b017f4a50df1"
                },
                {
                    "alg": "SHA-384",
                    "content": "2db60472e8a3a6836a8dd6e074922f7ee82611d69ad3afcda9cdae5ecce97e1d0fe3c20ddd9e5e3cfa08a8096477a469"
                },
                {
                    "alg": "SHA3-384",
                    "content": "ecf37070aab78146909555176261a0bcd71d9ecb6e0997b5ead89d68c73a4b85bd10d11f3e47c303859e20f705750bdb"
                },
                {
                    "alg": "SHA3-256",
                    "content": "aefda2199cb205ddb7901b5b1660b4a3f8932bfae65cc6cf223ff3104ea1edbd"
                },
                {
                    "alg": "SHA3-512",
                    "content": "a3235f58527073d61ede3083db8bbb1436619fdd445d013979057b0f5c5d38221f6f622276e02d959cd1ace4a856c66229bc337ed72187ebc397021f451faf27"
                }
            ],
            "purl": "pkg:maven/org.zkoss.zk/zk@11.0.0-jakarta.FL.20261111-Eval?type=jar",
            "modified": false,
            "supplier": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "manufacturer": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "licenses": [
                {
                    "expression": "LGPL-2.1-only",
                    "acknowledgement": "concluded"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "pkg:maven/org.zkoss.zk/zk@11.0.0-jakarta.FL.20261111-Eval?type=jar",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "0e0cc54fd518f0a16a1cc1445be7a9b9be27ec58bef146c076f67bee4c9b222b3637265f33814aa039f915b8abe3982a05deb2de4d0fa5a652d3b017f4a50df1"
                        }
                    ]
                }
            ],
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "zk-11.0.0-jakarta.FL.20261111-Eval.jar"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "structured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
            "group": "com.google.code.findbugs",
            "name": "jsr305",
            "version": "3.0.2",
            "description": "JSR305 Annotations for Findbugs",
            "hashes": [
                {
                    "alg": "MD5",
                    "content": "dd83accb899363c32b07d7a1b2e4ce40"
                },
                {
                    "alg": "SHA-1",
                    "content": "25ea2e8b0c338a877313bd4672d3fe056ea78f0d"
                },
                {
                    "alg": "SHA-256",
                    "content": "766ad2a0783f2687962c8ad74ceecc38a28b9f72a2d085ee438b7813e928d0c7"
                },
                {
                    "alg": "SHA-512",
                    "content": "bb09db62919a50fa5b55906013be6ca4fc7acb2e87455fac5eaf9ede2e41ce8bbafc0e5a385a561264ea4cd71bbbd3ef5a45e02d63277a201d06a0ae1636f804"
                },
                {
                    "alg": "SHA-384",
                    "content": "ca0b169d3eb2d0922dc031133a021f861a043bb3e405a88728215fd6ff00fa52fdc7347842dcc2031472e3726164bdc4"
                },
                {
                    "alg": "SHA3-384",
                    "content": "9903fd7505218999f8262efedb3d935d64bcef84aae781064ab5e1b24755466b269517cada562fa140cd1d417ede57a1"
                },
                {
                    "alg": "SHA3-256",
                    "content": "223fda9a89a461afaae73b177a2dc20ed4a90f2f8757f5c65f3241b0510f00ff"
                },
                {
                    "alg": "SHA3-512",
                    "content": "3996b5af57a5d5c6a0cd62b11773360fb051dd86a2ba968476806a2a5d32049b82d69a24a3c694e8fe4d735be6a28e41000cc500cc2a9fb577e058045855d2d6"
                }
            ],
            "licenses": [
                {
                    "expression": "Apache-2.0",
                    "acknowledgement": "concluded"
                }
            ],
            "purl": "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
            "modified": false,
            "externalReferences": [
                {
                    "type": "vcs",
                    "url": "https://code.google.com/p/jsr-305/"
                },
                {
                    "type": "distribution",
                    "url": "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "bb09db62919a50fa5b55906013be6ca4fc7acb2e87455fac5eaf9ede2e41ce8bbafc0e5a385a561264ea4cd71bbbd3ef5a45e02d63277a201d06a0ae1636f804"
                        }
                    ]
                }
            ],
            "supplier": {
                "name": "Google LLC",
                "url": [
                    "https://opensource.google"
                ]
            },
            "manufacturer": {
                "name": "Google LLC",
                "url": [
                    "https://opensource.google"
                ]
            },
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "jsr305-3.0.2.jar"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "structured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar",
            "group": "org.slf4j",
            "name": "slf4j-api",
            "version": "2.0.7",
            "description": "The slf4j API",
            "hashes": [
                {
                    "alg": "MD5",
                    "content": "403dffa46cdd2e3c82da19df4f394a4c"
                },
                {
                    "alg": "SHA-1",
                    "content": "41eb7184ea9d556f23e18b5cb99cad1f8581fc00"
                },
                {
                    "alg": "SHA-256",
                    "content": "5d6298b93a1905c32cda6478808ac14c2d4a47e91535e53c41f7feeb85d946f4"
                },
                {
                    "alg": "SHA-512",
                    "content": "216d2cac27d501972c888f94dfa747d700b80d60813884b6ab4b12c6a3b17ed0c21a1d27e1aa4332c97c828f20039e3913d2763d7e1a3cef36ae4389a276e7a8"
                },
                {
                    "alg": "SHA-384",
                    "content": "c25b39f418aa726ba8405dfd9b356131f89984e2ef5a55a724a2abf3b7c78443f671105835161d2414d602cf03da9f2d"
                },
                {
                    "alg": "SHA3-384",
                    "content": "f33abfaac21badae6f85d3ebbc6c1204fd7fda3bb15173e763fa8cee95bce6a8270eec2c8f49343c66c8d2767bc317e1"
                },
                {
                    "alg": "SHA3-256",
                    "content": "6e00d4b264a2afc4ca4e98f716ecece66c32c626ca3f8c5d56b22092b6fe417b"
                },
                {
                    "alg": "SHA3-512",
                    "content": "ad7b9142d370fc532a07cdd43881a129b012ff50e2bede3ac27d9bd31ec707bf2f45e82002fa59e962955cc38ab73cdd77713fca50cedc926c046f5617c1285b"
                }
            ],
            "licenses": [
                {
                    "expression": "MIT",
                    "acknowledgement": "concluded"
                }
            ],
            "purl": "pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar",
            "modified": false,
            "supplier": {
                "name": "QOS.ch",
                "url": [
                    "https://www.slf4j.org"
                ]
            },
            "manufacturer": {
                "name": "QOS.ch",
                "url": [
                    "https://www.slf4j.org"
                ]
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "216d2cac27d501972c888f94dfa747d700b80d60813884b6ab4b12c6a3b17ed0c21a1d27e1aa4332c97c828f20039e3913d2763d7e1a3cef36ae4389a276e7a8"
                        }
                    ]
                }
            ],
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "slf4j-api-2.0.7.jar"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "structured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@9.0.120?type=jar",
            "group": "org.apache.tomcat",
            "name": "tomcat-el-api",
            "version": "9.0.120",
            "description": "Expression language package",
            "hashes": [
                {
                    "alg": "MD5",
                    "content": "9fcddde527197a10321c1a619526f5c2"
                },
                {
                    "alg": "SHA-1",
                    "content": "7566ea65835a7852bd9ea96e41601ffdec7f1799"
                },
                {
                    "alg": "SHA-256",
                    "content": "86a2e574ccfd8cf2ebad27787fadec63c8e6779b81519a5485a56a86b294e1c9"
                },
                {
                    "alg": "SHA-512",
                    "content": "09205e4b7689154a61d1b2464659b47e9ca3d04775876264416845c52518c9b7565eb01c950f514b8287a649b1019b23fcc4040d0ad09d73e071d6a6550b8b7a"
                },
                {
                    "alg": "SHA-384",
                    "content": "38d7f6e05b913c47698e5740ec08ee784d57be2ec366eeaa8077a2f1d75348434d44ec70f3be0942093dcb0f061808af"
                },
                {
                    "alg": "SHA3-384",
                    "content": "f6f8367b6652fe41c53d8eaec807fac767f54298139555b53f1bd44f85a816886bc5d8224bb057b183f9a17fc17b6101"
                },
                {
                    "alg": "SHA3-256",
                    "content": "aa43eb0b380465797b98853e161a412a364edc1cabc1f2080b03c112f6670b6a"
                },
                {
                    "alg": "SHA3-512",
                    "content": "59c78cc6cc783897ad4e5d10789a56733b23fe584c38418909bad20ff2a2c68c73f1b4d68bf2a895a0871aa51f88f825653494078e6c6888ab0c693b85d0b857"
                }
            ],
            "licenses": [
                {
                    "expression": "Apache-2.0",
                    "acknowledgement": "concluded"
                }
            ],
            "purl": "pkg:maven/org.apache.tomcat/tomcat-el-api@9.0.120?type=jar",
            "modified": false,
            "supplier": {
                "name": "The Apache Software Foundation",
                "url": [
                    "https://www.apache.org"
                ]
            },
            "manufacturer": {
                "name": "The Apache Software Foundation",
                "url": [
                    "https://www.apache.org"
                ]
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "pkg:maven/org.apache.tomcat/tomcat-el-api@9.0.120?type=jar",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "09205e4b7689154a61d1b2464659b47e9ca3d04775876264416845c52518c9b7565eb01c950f514b8287a649b1019b23fcc4040d0ad09d73e071d6a6550b8b7a"
                        }
                    ]
                }
            ],
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "tomcat-el-api-9.0.120.jar"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "structured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/org.zkoss.zk/zhtml@11.0.0-jakarta.FL.20261111-Eval?type=jar",
            "group": "org.zkoss.zk",
            "name": "zhtml",
            "version": "11.0.0-jakarta.FL.20261111-Eval",
            "hashes": [
                {
                    "alg": "MD5",
                    "content": "b24525fe2b21f3f54ae10ed124609ea7"
                },
                {
                    "alg": "SHA-1",
                    "content": "10e354f5eb2b22e1af2bb32df732c9e7493f6719"
                },
                {
                    "alg": "SHA-256",
                    "content": "94769a86647509994281e300e7535537dfd18664aa12ee7e056a470d175e1830"
                },
                {
                    "alg": "SHA-512",
                    "content": "84b9379e0f970247178ae83bc2cebee57116c20b220f2e998dee63a8854beab66f22ec2f9bea99ef821971f571fd7b728f741904bb5842eda583712420c7d863"
                },
                {
                    "alg": "SHA-384",
                    "content": "a484a6f2c20b12ce74f1aa88d04ba8d6629fa257e2bc14a9f1e0a1833ba6f3e80115854ddd085f37cae4042deea37607"
                },
                {
                    "alg": "SHA3-384",
                    "content": "dcba66c445ccbfc10f597ca1ba3a256df28118b7e061278f1701514a7f69464db91e3dec04dd6168813ba61887291ffe"
                },
                {
                    "alg": "SHA3-256",
                    "content": "1e384a587fd05556a2a95688c664e79eed974b7fed9195fe0f48b45690f02bc0"
                },
                {
                    "alg": "SHA3-512",
                    "content": "b1121fe9a265422cd8bc157655603977d4dce9a0582191c3c3cc1ed05cfbdbdacfa5f908397130f386f585ec328bf31bd17ce7e26b6abb69b32853d761e25bb8"
                }
            ],
            "purl": "pkg:maven/org.zkoss.zk/zhtml@11.0.0-jakarta.FL.20261111-Eval?type=jar",
            "modified": false,
            "supplier": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "manufacturer": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "licenses": [
                {
                    "expression": "LGPL-2.1-only",
                    "acknowledgement": "concluded"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "pkg:maven/org.zkoss.zk/zhtml@11.0.0-jakarta.FL.20261111-Eval?type=jar",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "84b9379e0f970247178ae83bc2cebee57116c20b220f2e998dee63a8854beab66f22ec2f9bea99ef821971f571fd7b728f741904bb5842eda583712420c7d863"
                        }
                    ]
                }
            ],
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "zhtml-11.0.0-jakarta.FL.20261111-Eval.jar"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "structured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/org.zkoss.zk/za11y@11.0.0-jakarta.FL.20261111-Eval?type=jar",
            "group": "org.zkoss.zk",
            "name": "za11y",
            "version": "11.0.0-jakarta.FL.20261111-Eval",
            "purl": "pkg:maven/org.zkoss.zk/za11y@11.0.0-jakarta.FL.20261111-Eval?type=jar",
            "supplier": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "manufacturer": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "licenses": [
                {
                    "expression": "LicenseRef-Potix-ZK-Trial-License-Agreement",
                    "acknowledgement": "concluded"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "4ffc80460411c2c4cf1356c7af4d69d89ffd8a3be264e7d0bb75736c9ed893d7"
                },
                {
                    "alg": "SHA-512",
                    "content": "1be72720198cf9141b122926a476ac5f2b48d1081183d7af833c52f1fcce5ffc599ec4222fb14777e8817a14d12a3a6c5a40fce80e8320a73329e31b65f87e2b"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "pkg:maven/org.zkoss.zk/za11y@11.0.0-jakarta.FL.20261111-Eval?type=jar",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "1be72720198cf9141b122926a476ac5f2b48d1081183d7af833c52f1fcce5ffc599ec4222fb14777e8817a14d12a3a6c5a40fce80e8320a73329e31b65f87e2b"
                        }
                    ]
                }
            ],
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "za11y-11.0.0-jakarta.FL.20261111-Eval.jar"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "structured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/org.apache-extras.beanshell/bsh@2.0b6?type=jar",
            "group": "org.apache-extras.beanshell",
            "name": "bsh",
            "version": "2.0b6",
            "description": "BeanShell is a small, free, embeddable Java source interpreter with object scripting language features, written in Java. BeanShell dynamically executes standard Java syntax and extends it with common scripting conveniences such as loose types, commands, and method closures like those in Perl and JavaScript.",
            "hashes": [
                {
                    "alg": "MD5",
                    "content": "0f27117d5b4cfeea1d0634125313fac0"
                },
                {
                    "alg": "SHA-1",
                    "content": "fb418f9b33a0b951e9a2978b4b6ee93b2707e72f"
                },
                {
                    "alg": "SHA-256",
                    "content": "a17955976070c0573235ee662f2794a78082758b61accffce8d3f8aedcd91047"
                },
                {
                    "alg": "SHA-512",
                    "content": "a39321a99a8a619a48b65752f6ee6b8f11d3b28ebb051082ec70a70a0d5041e83d144378df191929e3d6562bd5ee4c4f1ccadb0ba42055529d18800a41d8ae18"
                },
                {
                    "alg": "SHA-384",
                    "content": "b45a64491085f76d670f89225d7a54e80e255c96f5f8f4d2ce5f1a56276fef5df2dede1d71dc954e0283e6edef1d8fdb"
                },
                {
                    "alg": "SHA3-384",
                    "content": "800f40bfa0edba4a73b97ea376bf5e4d6b1fdfa3779e9ad292fdc1a06a350dc6c185238efc7f6ce77e3e4f47a5f19150"
                },
                {
                    "alg": "SHA3-256",
                    "content": "2f977780aacfc13d62a0d18f33fd088bc7af72920daaeb0c34f67448712fa5ab"
                },
                {
                    "alg": "SHA3-512",
                    "content": "7136ae9e0df1554547a0234c684c187b8e72ec4470b15d678ab8dedd955b11f819dc8812d055c9c016c6dd5b3b65a39f8f801d0907716cab4dacd565b9f40f49"
                }
            ],
            "licenses": [
                {
                    "expression": "Apache-2.0",
                    "acknowledgement": "concluded"
                }
            ],
            "purl": "pkg:maven/org.apache-extras.beanshell/bsh@2.0b6?type=jar",
            "modified": false,
            "externalReferences": [
                {
                    "type": "issue-tracker",
                    "url": "https://github.com/beanshell/beanshell/issues"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/beanshell/beanshell/"
                },
                {
                    "type": "distribution",
                    "url": "pkg:maven/org.apache-extras.beanshell/bsh@2.0b6?type=jar",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "a39321a99a8a619a48b65752f6ee6b8f11d3b28ebb051082ec70a70a0d5041e83d144378df191929e3d6562bd5ee4c4f1ccadb0ba42055529d18800a41d8ae18"
                        }
                    ]
                }
            ],
            "supplier": {
                "name": "BeanShell",
                "url": [
                    "https://github.com/beanshell/beanshell"
                ]
            },
            "manufacturer": {
                "name": "BeanShell",
                "url": [
                    "https://github.com/beanshell/beanshell"
                ]
            },
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "bsh-2.0b6.jar"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "structured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/org.zkoss.zk/zkbind@11.0.0-jakarta.FL.20261111-Eval?type=jar",
            "group": "org.zkoss.zk",
            "name": "zkbind",
            "version": "11.0.0-jakarta.FL.20261111-Eval",
            "hashes": [
                {
                    "alg": "MD5",
                    "content": "fda06a3cd4cb40c445a2a651f2845baa"
                },
                {
                    "alg": "SHA-1",
                    "content": "13370cec108c817c36dbb4307c8e3a22e1a5cd43"
                },
                {
                    "alg": "SHA-256",
                    "content": "69a3f0293fe1ab3b08752bf70858d1e27b225bf6affdbf29f3792b0ee087a390"
                },
                {
                    "alg": "SHA-512",
                    "content": "79c0615fd65f855cc71395946eb5848d4b974f28623ec5bc596edefff1cc95e57028c5fc06105649ec5e574f823c8390e55136e90c3439933bad6f8e10f31d8a"
                },
                {
                    "alg": "SHA-384",
                    "content": "8af1c8af7f12308c38191de9a4812e01851cc21b7d0fea8a26ebfe6ba926a829a39ec48e9e704b0580dd98490e3a12c9"
                },
                {
                    "alg": "SHA3-384",
                    "content": "ad8e24d036216cd0c959fd59fee1c1e95584edb9d5935866a08c1c566b8fa41df8863ce4b3a50b9922a6b8bfba11b2ab"
                },
                {
                    "alg": "SHA3-256",
                    "content": "0e4e6363f6f1ee66fd5433215e5fa347589ae9f1058febd3ece92c9070b6baf6"
                },
                {
                    "alg": "SHA3-512",
                    "content": "300470ed291d17a6dcd900e7736648db693b6ade7994b099d08ec6d37ad6a48e4b2df60a358ea26e5421ae6eecd200c2a991183ce521a2b64d5a2799b2811cf6"
                }
            ],
            "purl": "pkg:maven/org.zkoss.zk/zkbind@11.0.0-jakarta.FL.20261111-Eval?type=jar",
            "modified": false,
            "supplier": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "manufacturer": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "licenses": [
                {
                    "expression": "LGPL-2.1-only",
                    "acknowledgement": "concluded"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "pkg:maven/org.zkoss.zk/zkbind@11.0.0-jakarta.FL.20261111-Eval?type=jar",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "79c0615fd65f855cc71395946eb5848d4b974f28623ec5bc596edefff1cc95e57028c5fc06105649ec5e574f823c8390e55136e90c3439933bad6f8e10f31d8a"
                        }
                    ]
                }
            ],
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "zkbind-11.0.0-jakarta.FL.20261111-Eval.jar"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "structured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/org.zkoss/zsoup@1.8.2.5?type=jar",
            "publisher": "Potix",
            "group": "org.zkoss",
            "name": "zsoup",
            "version": "1.8.2.5",
            "description": "zsoup HTML parser",
            "hashes": [
                {
                    "alg": "MD5",
                    "content": "4d2d03a78503aca4bd2ddd1289dc25f1"
                },
                {
                    "alg": "SHA-1",
                    "content": "7e0a355052c9403ef51d91d315aeaca76967afcf"
                },
                {
                    "alg": "SHA-256",
                    "content": "39dafc2baef6a7f8aaf0a7200c6df8d59d9cf3e91f35d396473aad585e70e1e6"
                },
                {
                    "alg": "SHA-512",
                    "content": "4856dd54958eab0302633ea17532ec08cd60c3e268616e2ef5ffe8efa77fb55898290d1a9b41ffa5d12933e9c67bf3837bb5b3b0416476a2cd7060ac8d1521cc"
                },
                {
                    "alg": "SHA-384",
                    "content": "47c29b0fbc355f469d37cff489b07ebc2a5e9676d90a65f40757d6f1f554c177abe100f06daa82a05017a466a0d50c56"
                },
                {
                    "alg": "SHA3-384",
                    "content": "d95491aa37d14dbaba2429b6136a22e82e5b07e06be24626b238c825713d6d20a17d3b93e85e7413a4d975b4d95794f0"
                },
                {
                    "alg": "SHA3-256",
                    "content": "f07af8ba3106f37612b14ccc39e4b01150d290318252a1b34544581f51c63f01"
                },
                {
                    "alg": "SHA3-512",
                    "content": "1becfb80bc3878ac341cf8d75bdee5c58c457605bbc9e4d7c3c7eda6b0debfcbdeb5eb8f5606b28d075a33dbb24d5f138b1cd6ba380a482c9f427addb7d5f0e4"
                }
            ],
            "licenses": [
                {
                    "expression": "MIT",
                    "acknowledgement": "concluded"
                }
            ],
            "purl": "pkg:maven/org.zkoss/zsoup@1.8.2.5?type=jar",
            "modified": false,
            "externalReferences": [
                {
                    "type": "website",
                    "url": "http://www.zkoss.org"
                },
                {
                    "type": "issue-tracker",
                    "url": "http://github.com/zkoss/zsoup/issues"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/zkoss/zsoup"
                },
                {
                    "type": "distribution",
                    "url": "pkg:maven/org.zkoss/zsoup@1.8.2.5?type=jar",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "4856dd54958eab0302633ea17532ec08cd60c3e268616e2ef5ffe8efa77fb55898290d1a9b41ffa5d12933e9c67bf3837bb5b3b0416476a2cd7060ac8d1521cc"
                        }
                    ]
                }
            ],
            "supplier": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "manufacturer": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "zsoup-1.8.2.5.jar"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "structured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/com.google.guava/failureaccess@1.0.3?type=jar",
            "group": "com.google.guava",
            "name": "failureaccess",
            "version": "1.0.3",
            "description": "Contains com.google.common.util.concurrent.internal.InternalFutureFailureAccess and InternalFutures. Most users will never need to use this artifact. Its classes are conceptually a part of Guava, but they're in this separate artifact so that Android libraries can use them without pulling in all of Guava (just as they can use ListenableFuture by depending on the listenablefuture artifact).",
            "hashes": [
                {
                    "alg": "MD5",
                    "content": "29a782e90f6b37218b18bb880d2a8f4a"
                },
                {
                    "alg": "SHA-1",
                    "content": "aeaffd00d57023a2c947393ed251f0354f0985fc"
                },
                {
                    "alg": "SHA-256",
                    "content": "cbfc3906b19b8f55dd7cfd6dfe0aa4532e834250d7f080bd8d211a3e246b59cb"
                },
                {
                    "alg": "SHA-512",
                    "content": "72be228e7805da5623e42bf024ded7d9147023c66b22f4dbd04ac6898201af46ee82e1f92ea51eb0595f1b49151c4b8ecb862653d4906c17609c42544ee97abf"
                },
                {
                    "alg": "SHA-384",
                    "content": "9dd1a2a08efda311604992d3e7cee64873bc8c64de3b423b1b3a3dcc1f7f0810bb03901fbfe39a5f835accb0646f4ad8"
                },
                {
                    "alg": "SHA3-384",
                    "content": "ffd67766c165ee77e96824e06de2c19864a6e61f785b2085eb825f308f173d71f2555559d90d910f33f3367378ace0e3"
                },
                {
                    "alg": "SHA3-256",
                    "content": "08a77b528a72ca412b36e4004692705ebfd75cfb4897c88632d367d08a34b09f"
                },
                {
                    "alg": "SHA3-512",
                    "content": "7cba6c266babbe8272f029eea6e2cbddadee96eb1a16916a6eb2441a55837867ce717385d4388735fd83f2f6555931077c0ebda011a1ee9a37ac38c8c0c43a65"
                }
            ],
            "licenses": [
                {
                    "expression": "Apache-2.0",
                    "acknowledgement": "concluded"
                }
            ],
            "purl": "pkg:maven/com.google.guava/failureaccess@1.0.3?type=jar",
            "modified": false,
            "supplier": {
                "name": "Google LLC",
                "url": [
                    "https://opensource.google"
                ]
            },
            "manufacturer": {
                "name": "Google LLC",
                "url": [
                    "https://opensource.google"
                ]
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "pkg:maven/com.google.guava/failureaccess@1.0.3?type=jar",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "72be228e7805da5623e42bf024ded7d9147023c66b22f4dbd04ac6898201af46ee82e1f92ea51eb0595f1b49151c4b8ecb862653d4906c17609c42544ee97abf"
                        }
                    ]
                }
            ],
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "failureaccess-1.0.3.jar"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "structured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/org.zkoss.common/zweb@11.0.0-jakarta.FL.20261111-Eval?type=jar",
            "group": "org.zkoss.common",
            "name": "zweb",
            "version": "11.0.0-jakarta.FL.20261111-Eval",
            "hashes": [
                {
                    "alg": "MD5",
                    "content": "d0fb07a7461ec6d46806827116d96f20"
                },
                {
                    "alg": "SHA-1",
                    "content": "e73fb182d2485f64cf2e16c61cfbd84439f938ee"
                },
                {
                    "alg": "SHA-256",
                    "content": "8a211e96bae7a978b342f9a410601aab0e605c107a731368e460c4533fe8956e"
                },
                {
                    "alg": "SHA-512",
                    "content": "4698d9bad2a8b0510270087091b6f818ab0d3790c60e93d37037161a3ce9c6f3e5e14b15b8b424033d6cdde0227b9363fd0ea5d9043a26f67e33df1baddd207b"
                },
                {
                    "alg": "SHA-384",
                    "content": "ab6c33f6e45d1f199e436c43c7f857e30a31341ff4a015ffe0f129c130d8c6ace5452117e8ef631ada8d567cf0ac54dd"
                },
                {
                    "alg": "SHA3-384",
                    "content": "61bed01999d954cc8bd5852e475ae37d774d8bfbd32f181cbf1935327f05da8a5073e73956b3d58d23692f11a3abb1e2"
                },
                {
                    "alg": "SHA3-256",
                    "content": "1ca897e5de4ed00e75f97d6c026182262c5be233c3c339e7c22359081952f086"
                },
                {
                    "alg": "SHA3-512",
                    "content": "b26f2a5914f1336902677a403199cf4fa42face42a1f8834571e1e8d1e0bb71db4c29bffe21f31aff20454f46eacab39c8e297df16b481dbf96c72430cc5c15d"
                }
            ],
            "purl": "pkg:maven/org.zkoss.common/zweb@11.0.0-jakarta.FL.20261111-Eval?type=jar",
            "modified": false,
            "supplier": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "manufacturer": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "licenses": [
                {
                    "expression": "LGPL-2.1-only",
                    "acknowledgement": "concluded"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "pkg:maven/org.zkoss.common/zweb@11.0.0-jakarta.FL.20261111-Eval?type=jar",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "4698d9bad2a8b0510270087091b6f818ab0d3790c60e93d37037161a3ce9c6f3e5e14b15b8b424033d6cdde0227b9363fd0ea5d9043a26f67e33df1baddd207b"
                        }
                    ]
                }
            ],
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "zweb-11.0.0-jakarta.FL.20261111-Eval.jar"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "structured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.4.3?type=jar",
            "group": "org.apache.httpcomponents.core5",
            "name": "httpcore5",
            "version": "5.4.3",
            "description": "Apache HttpComponents HTTP/1.1 core components",
            "hashes": [
                {
                    "alg": "MD5",
                    "content": "40cba87d4704bc9e1691f340fb8042cf"
                },
                {
                    "alg": "SHA-1",
                    "content": "32a0699fbcb103f5621c00983ee8f5aac080e4a6"
                },
                {
                    "alg": "SHA-256",
                    "content": "18bfbbabb478dfb67f31aeaf428c387f3c3df654582e1309f708ee1f3086830a"
                },
                {
                    "alg": "SHA-512",
                    "content": "2ae04ae83015c46314a502a0973bec86312680cb548f0ae68002af4f5fd958deb60c702ad9dcae72c23561e2e0954518bb0355a1496096f7e9b9a2efbb7c9bae"
                },
                {
                    "alg": "SHA-384",
                    "content": "09312cfbd7b33c3c8712405aff437ef7b93260a07a625b7cc491d3e2fa0d65852d72f4f6701ef707c4cae52caadcddd0"
                },
                {
                    "alg": "SHA3-384",
                    "content": "419f9608bec952746b274a3510bc0f0dbdb6cc4b1269c9bd89c218894a42fda0dfd7b46912b57cc722b3d76b7f11c07b"
                },
                {
                    "alg": "SHA3-256",
                    "content": "8cb162e60b804205084fcc8e562f6eb47f5c13eefa42208cf6accab1d28e0ba2"
                },
                {
                    "alg": "SHA3-512",
                    "content": "eccc71fecc0525c6fca46ca9e19eaecf26d646f3e71528796e8dcc0f16cb0882d485ceffa1c48e14e60eb8b429ae0fd5935274bb8907c2869ab54cb76e931abd"
                }
            ],
            "licenses": [
                {
                    "expression": "Apache-2.0",
                    "acknowledgement": "concluded"
                }
            ],
            "purl": "pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.4.3?type=jar",
            "modified": false,
            "supplier": {
                "name": "The Apache Software Foundation",
                "url": [
                    "https://www.apache.org"
                ]
            },
            "manufacturer": {
                "name": "The Apache Software Foundation",
                "url": [
                    "https://www.apache.org"
                ]
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.4.3?type=jar",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "2ae04ae83015c46314a502a0973bec86312680cb548f0ae68002af4f5fd958deb60c702ad9dcae72c23561e2e0954518bb0355a1496096f7e9b9a2efbb7c9bae"
                        }
                    ]
                }
            ],
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "httpcore5-5.4.3.jar"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "structured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/org.zkoss.zk/zuti@11.0.0-jakarta.FL.20261111-Eval?type=jar",
            "group": "org.zkoss.zk",
            "name": "zuti",
            "version": "11.0.0-jakarta.FL.20261111-Eval",
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "b084f96201f4297182e940157d53e42e3dc081c5b446ce9624183d522aa7f12c"
                },
                {
                    "alg": "SHA-512",
                    "content": "f25f28f5a3e8118aae745f4f4f7eca0785d327ff821f25cd4d22537b401ecfa538fdac15523379b5f083491894738ace21edcf30a6346fbb3ce0616768165475"
                }
            ],
            "purl": "pkg:maven/org.zkoss.zk/zuti@11.0.0-jakarta.FL.20261111-Eval?type=jar",
            "modified": false,
            "supplier": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "manufacturer": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "licenses": [
                {
                    "expression": "LicenseRef-Potix-ZK-Trial-License-Agreement",
                    "acknowledgement": "concluded"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "pkg:maven/org.zkoss.zk/zuti@11.0.0-jakarta.FL.20261111-Eval?type=jar",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "f25f28f5a3e8118aae745f4f4f7eca0785d327ff821f25cd4d22537b401ecfa538fdac15523379b5f083491894738ace21edcf30a6346fbb3ce0616768165475"
                        }
                    ]
                }
            ],
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "zuti-11.0.0-jakarta.FL.20261111-Eval.jar"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "structured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/org.zkoss.zk/stateless@11.0.0-jakarta.FL.20261111-Eval?type=jar",
            "group": "org.zkoss.zk",
            "name": "stateless",
            "version": "11.0.0-jakarta.FL.20261111-Eval",
            "purl": "pkg:maven/org.zkoss.zk/stateless@11.0.0-jakarta.FL.20261111-Eval?type=jar",
            "supplier": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "manufacturer": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "licenses": [
                {
                    "expression": "LicenseRef-Potix-ZK-Trial-License-Agreement",
                    "acknowledgement": "concluded"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "21937edb7697d1bc03a715ffd4f52d022c97419529254c3ae9ee758cb8d9e9c6"
                },
                {
                    "alg": "SHA-512",
                    "content": "9b91fcd4814a9f98004e7420a04fd42643f30e6356ef4fdb74bd65bd1605168c75dba779aa3e4fc94fec8e4774f35932b4f6fb3f4a3141e442987e5ccb3ab584"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "pkg:maven/org.zkoss.zk/stateless@11.0.0-jakarta.FL.20261111-Eval?type=jar",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "9b91fcd4814a9f98004e7420a04fd42643f30e6356ef4fdb74bd65bd1605168c75dba779aa3e4fc94fec8e4774f35932b4f6fb3f4a3141e442987e5ccb3ab584"
                        }
                    ]
                }
            ],
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "stateless-11.0.0-jakarta.FL.20261111-Eval.jar"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "structured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/org.zkoss.zk/client-bind@11.0.0-jakarta.FL.20261111-Eval?type=jar",
            "group": "org.zkoss.zk",
            "name": "client-bind",
            "version": "11.0.0-jakarta.FL.20261111-Eval",
            "purl": "pkg:maven/org.zkoss.zk/client-bind@11.0.0-jakarta.FL.20261111-Eval?type=jar",
            "supplier": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "manufacturer": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "licenses": [
                {
                    "expression": "LicenseRef-Potix-ZK-Trial-License-Agreement",
                    "acknowledgement": "concluded"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "a2fc44e03f926af2c6c884be6b9976a5ba058cad60fbb31e27ec757daecb2807"
                },
                {
                    "alg": "SHA-512",
                    "content": "2106ec686f9063e0f1600675b25321d396e8eedb8032b984dbd8aa7a4800e8442506d44a496d7a21d9b2509f4871f08c9cce5b7219524d0de69adb00b08fbf01"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "pkg:maven/org.zkoss.zk/client-bind@11.0.0-jakarta.FL.20261111-Eval?type=jar",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "2106ec686f9063e0f1600675b25321d396e8eedb8032b984dbd8aa7a4800e8442506d44a496d7a21d9b2509f4871f08c9cce5b7219524d0de69adb00b08fbf01"
                        }
                    ]
                }
            ],
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "client-bind-11.0.0-jakarta.FL.20261111-Eval.jar"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "structured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/org.zkoss.zk/zul@11.0.0-jakarta.FL.20261111-Eval?type=jar",
            "group": "org.zkoss.zk",
            "name": "zul",
            "version": "11.0.0-jakarta.FL.20261111-Eval",
            "hashes": [
                {
                    "alg": "MD5",
                    "content": "9207d12630f7177a53b482febecf0141"
                },
                {
                    "alg": "SHA-1",
                    "content": "bb4d788c758274fe2688fa923c483b5d51bd78c5"
                },
                {
                    "alg": "SHA-256",
                    "content": "93e4ad0377c1739f8d5a9ae0b4918b439a2e4a1825c65646f11239d4615ead3b"
                },
                {
                    "alg": "SHA-512",
                    "content": "ec5e219106c9d096e98956e122d8d7adfbfb6636e8f0d9eb4678c8790da1f34489682f1a5696148192e2ba68aba054e9c441c3de285d121e2fb7803ba541ded0"
                },
                {
                    "alg": "SHA-384",
                    "content": "a68f08883e8c8afee0fbcf04a30d70ea5f0d6ef578321b40d3972e6c7ee4d1b87c94ea77e43fae800ae92a26a3945efe"
                },
                {
                    "alg": "SHA3-384",
                    "content": "7d3782eda8a7817c72ff0e8f1dc6a4b500309ea2b187c23c68f87a808caeaa0dda5b0265ceae406d7bd628ed918b370c"
                },
                {
                    "alg": "SHA3-256",
                    "content": "81db9de44804f5ed01ec0d60a643a392c9ac6a4bc7ff4aa36500655767d990fb"
                },
                {
                    "alg": "SHA3-512",
                    "content": "f9b20ce7b2bf85c935bf6d3e2ab424308cc813c40f557676212f0ad5a41a086dc6fc53dba55fe774ca906e8fedfd2021ab7a9db1f41355a215329ba25cbe648a"
                }
            ],
            "purl": "pkg:maven/org.zkoss.zk/zul@11.0.0-jakarta.FL.20261111-Eval?type=jar",
            "modified": false,
            "supplier": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "manufacturer": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "licenses": [
                {
                    "expression": "LGPL-2.1-only",
                    "acknowledgement": "concluded"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "pkg:maven/org.zkoss.zk/zul@11.0.0-jakarta.FL.20261111-Eval?type=jar",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "ec5e219106c9d096e98956e122d8d7adfbfb6636e8f0d9eb4678c8790da1f34489682f1a5696148192e2ba68aba054e9c441c3de285d121e2fb7803ba541ded0"
                        }
                    ]
                }
            ],
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "zul-11.0.0-jakarta.FL.20261111-Eval.jar"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "structured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar",
            "group": "commons-collections",
            "name": "commons-collections",
            "version": "3.2.2",
            "description": "Types that extend and augment the Java Collections Framework.",
            "hashes": [
                {
                    "alg": "MD5",
                    "content": "f54a8510f834a1a57166970bfc982e94"
                },
                {
                    "alg": "SHA-1",
                    "content": "8ad72fe39fa8c91eaaf12aadb21e0c3661fe26d5"
                },
                {
                    "alg": "SHA-256",
                    "content": "eeeae917917144a68a741d4c0dff66aa5c5c5fd85593ff217bced3fc8ca783b8"
                },
                {
                    "alg": "SHA-512",
                    "content": "51c72f9aca7726f3c387095e66be85a6df97c74b00a25434b89188c1b8eab6e2b55accf7b9bd412430d22bd09324dec076e300b3d1fa39fccad471f0f2a3da16"
                },
                {
                    "alg": "SHA-384",
                    "content": "dd4e99b3314bd3c1a1ee26296615d9e44dadf7a1f8a7bbba44fb95121803d331e36d4cca4260e7609af78a47ba3e4073"
                },
                {
                    "alg": "SHA3-384",
                    "content": "8ce03528e4a6e95c44283b56eca87e6a6d3bf1363411a55b538f4f9110cf7470581ea5c73925e877ddab08dba0603f40"
                },
                {
                    "alg": "SHA3-256",
                    "content": "fd3d6134b5f07077b82ccf93d148dacf7c4ce5c971209510edd0e77e3e38c19e"
                },
                {
                    "alg": "SHA3-512",
                    "content": "c2a523916fb7c7d55a05d5e3d9e9b33000733f4b20a71be174e4e093e3f06ea78ad831edd1505527da7388105f8647efb7d5666ba852c90b4e2d5bb74256efbc"
                }
            ],
            "licenses": [
                {
                    "expression": "Apache-2.0",
                    "acknowledgement": "concluded"
                }
            ],
            "purl": "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar",
            "modified": false,
            "externalReferences": [
                {
                    "type": "issue-tracker",
                    "url": "http://issues.apache.org/jira/browse/COLLECTIONS"
                },
                {
                    "type": "vcs",
                    "url": "http://svn.apache.org/viewvc/commons/proper/collections/trunk"
                },
                {
                    "type": "distribution",
                    "url": "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "51c72f9aca7726f3c387095e66be85a6df97c74b00a25434b89188c1b8eab6e2b55accf7b9bd412430d22bd09324dec076e300b3d1fa39fccad471f0f2a3da16"
                        }
                    ]
                }
            ],
            "supplier": {
                "name": "The Apache Software Foundation",
                "url": [
                    "https://www.apache.org"
                ]
            },
            "manufacturer": {
                "name": "The Apache Software Foundation",
                "url": [
                    "https://www.apache.org"
                ]
            },
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "commons-collections-3.2.2.jar"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "structured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/commons-el/commons-el@1.0?type=jar",
            "publisher": "The Apache Software Foundation",
            "group": "commons-el",
            "name": "commons-el",
            "version": "1.0",
            "description": "JSP 2.0 Expression Language Interpreter Implementation",
            "hashes": [
                {
                    "alg": "MD5",
                    "content": "7c98594df7c126f33688fa6d93169639"
                },
                {
                    "alg": "SHA-1",
                    "content": "1df2c042b3f2de0124750241ac6c886dbfa2cc2c"
                },
                {
                    "alg": "SHA-256",
                    "content": "0d67550ec0022b653453c759f063a643c2fe64bc48faa8b25f95a220e2a282e2"
                },
                {
                    "alg": "SHA-512",
                    "content": "006bb34a74baf740a9ab2b1218dbdbacdebf7ef8f9d756b69b3936257bd2d2977b0d7f8920377f04805298965246cd813bea6344557f76d77e9c0dc0fff91a5e"
                },
                {
                    "alg": "SHA-384",
                    "content": "9f2dd90e725a465a266fab7d6f7b4a68df0b4ad846ae379766939d14be4f8016381b445975ca2c4717e0fd2b4ba67516"
                },
                {
                    "alg": "SHA3-384",
                    "content": "90af4463e8d5e9ffb652a4362eca2f3b2797d6dc35e3b019b64272d6f30b8e7722581599c375a4119e112d5462e94dc3"
                },
                {
                    "alg": "SHA3-256",
                    "content": "ade3648961dfeed206636b63a626a4d7470c58ae0555b3fa919d94782fb9d7e2"
                },
                {
                    "alg": "SHA3-512",
                    "content": "16b5d1cfac8960b1e62b45eef46d7ec8f898b6fc3e4bb83b346c9a3a8d9ef847398c3e423a370e783e6603775e672a6321bb9a6094061e2e32c4f8ad20bbf01f"
                }
            ],
            "licenses": [
                {
                    "expression": "Apache-2.0",
                    "acknowledgement": "concluded"
                }
            ],
            "purl": "pkg:maven/commons-el/commons-el@1.0?type=jar",
            "modified": false,
            "externalReferences": [
                {
                    "type": "website",
                    "url": "http://jakarta.apache.org"
                },
                {
                    "type": "issue-tracker",
                    "url": "http://issues.apache.org/bugzilla/"
                },
                {
                    "type": "mailing-list",
                    "url": "http://mail-archives.apache.org/eyebrowse/SummarizeList?listName=commons-dev@jakarta.apache.org"
                },
                {
                    "type": "vcs",
                    "url": "http://svn.apache.org/repos/asf/jakarta/commons/proper/el/trunk"
                },
                {
                    "type": "distribution",
                    "url": "pkg:maven/commons-el/commons-el@1.0?type=jar",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "006bb34a74baf740a9ab2b1218dbdbacdebf7ef8f9d756b69b3936257bd2d2977b0d7f8920377f04805298965246cd813bea6344557f76d77e9c0dc0fff91a5e"
                        }
                    ]
                }
            ],
            "supplier": {
                "name": "The Apache Software Foundation",
                "url": [
                    "https://www.apache.org"
                ]
            },
            "manufacturer": {
                "name": "The Apache Software Foundation",
                "url": [
                    "https://www.apache.org"
                ]
            },
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "commons-el-1.0.jar"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "structured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/org.zkoss.zk/zkwebfragment@11.0.0-jakarta.FL.20261111-Eval?type=jar",
            "group": "org.zkoss.zk",
            "name": "zkwebfragment",
            "version": "11.0.0-jakarta.FL.20261111-Eval",
            "hashes": [
                {
                    "alg": "MD5",
                    "content": "a14817afd9a0c74a4e532dd8366d1320"
                },
                {
                    "alg": "SHA-1",
                    "content": "f9e00d6a5990392155c3b13b634d9710b91b43f2"
                },
                {
                    "alg": "SHA-256",
                    "content": "126cdc4c5cc6f7d5c2479dd42fbc13ca62a06d3ae148dafedece86f23f637278"
                },
                {
                    "alg": "SHA-512",
                    "content": "4853cd77ea761d79143d1be6cdb71c1e596529b0e20d37f17a37ac89f8494f2f9e634858f949d115d604b265d3459fff6294e30342c810a926a657ddc3c28a99"
                },
                {
                    "alg": "SHA-384",
                    "content": "2e14e0081288a2e2b2ce7abd40ebf31ec0eca9acab44b9e54c4b3e1396d0ace8b665ff6b0714c13b47820c1ba8996db8"
                },
                {
                    "alg": "SHA3-384",
                    "content": "908749da31a3ae487c7fb7d44393b22ad736edb87f096f140cc87d95efd2732ee5bdc072623bf8f7ba97f1b7e5d63574"
                },
                {
                    "alg": "SHA3-256",
                    "content": "50485aab11cf096c7966934761e56da1fda5e53ee80755d7bbb4ed2a20073628"
                },
                {
                    "alg": "SHA3-512",
                    "content": "23063a693860a83703696721e22cc5bd79031be7e509e67efbb12495e0a971ca692a0318db98563c6a6a95cd3f62f8b2474d947ac38345a8cdb2f2c0f9bc3acd"
                }
            ],
            "purl": "pkg:maven/org.zkoss.zk/zkwebfragment@11.0.0-jakarta.FL.20261111-Eval?type=jar",
            "modified": false,
            "supplier": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "manufacturer": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "licenses": [
                {
                    "expression": "LGPL-2.1-only",
                    "acknowledgement": "concluded"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "pkg:maven/org.zkoss.zk/zkwebfragment@11.0.0-jakarta.FL.20261111-Eval?type=jar",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "4853cd77ea761d79143d1be6cdb71c1e596529b0e20d37f17a37ac89f8494f2f9e634858f949d115d604b265d3459fff6294e30342c810a926a657ddc3c28a99"
                        }
                    ]
                }
            ],
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "zkwebfragment-11.0.0-jakarta.FL.20261111-Eval.jar"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "structured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/org.zkoss.common/zcommon@11.0.0-jakarta.FL.20261111-Eval?type=jar",
            "group": "org.zkoss.common",
            "name": "zcommon",
            "version": "11.0.0-jakarta.FL.20261111-Eval",
            "hashes": [
                {
                    "alg": "MD5",
                    "content": "e60f1e863d811a2b599c22a5dfc5447b"
                },
                {
                    "alg": "SHA-1",
                    "content": "c0e7130cab96fe702192487fd6ea473f561745b0"
                },
                {
                    "alg": "SHA-256",
                    "content": "07865c1d285ce3236f503432db082a7099dfbc31f9c55ef3e0d28c94f196ca71"
                },
                {
                    "alg": "SHA-512",
                    "content": "ca525f60693365ef9e920db0b18234fad8e1659df671f3b29a39840c2e67cbc4191a30d9b39c7935bf2a4fccb98fca232cb0bbe9fb907e53a490afd1d89d7f76"
                },
                {
                    "alg": "SHA-384",
                    "content": "1f4cad6dd659fafbc21170222846a042d5904bdeec873d6c109685aea910e7d84214cd4fe88c87691f8c27fb3ffd24bd"
                },
                {
                    "alg": "SHA3-384",
                    "content": "f24d6c300d2ccbb1323631c6fe3f0636f4160a1682a7ac53f6bdc72747c42e78bc12fa9530154295eb7a053095b063f2"
                },
                {
                    "alg": "SHA3-256",
                    "content": "e93b99949691ed6953f99bb896e92a15360bbc180a0387a40b5e614e7e442185"
                },
                {
                    "alg": "SHA3-512",
                    "content": "878cd022a3559b64f998e10c8240516e8fa64eb60acdfad965353619e1475d0045526b4d02fa68a7c4e6a2cfb0c59293ebb30ecaf2474493db438b7b7a94aaf4"
                }
            ],
            "purl": "pkg:maven/org.zkoss.common/zcommon@11.0.0-jakarta.FL.20261111-Eval?type=jar",
            "modified": false,
            "supplier": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "manufacturer": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "licenses": [
                {
                    "expression": "LGPL-2.1-only",
                    "acknowledgement": "concluded"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "pkg:maven/org.zkoss.common/zcommon@11.0.0-jakarta.FL.20261111-Eval?type=jar",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "ca525f60693365ef9e920db0b18234fad8e1659df671f3b29a39840c2e67cbc4191a30d9b39c7935bf2a4fccb98fca232cb0bbe9fb907e53a490afd1d89d7f76"
                        }
                    ]
                }
            ],
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "zcommon-11.0.0-jakarta.FL.20261111-Eval.jar"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "structured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/org.zkoss.zk/zkex@11.0.0-jakarta.FL.20261111-Eval?type=jar",
            "group": "org.zkoss.zk",
            "name": "zkex",
            "version": "11.0.0-jakarta.FL.20261111-Eval",
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "e109fec29f3a90a1b593afdcbfbf28eba11ef108b03aa9f7df8a6b477517e169"
                },
                {
                    "alg": "SHA-512",
                    "content": "6caca6f59558ae94782807721caa844c4be3b17c32c47a2120ffc7c28fe1702e009a9466e04539423ea8df08a0ecaffa0cae85095fbe5e69c20601efa085b325"
                }
            ],
            "purl": "pkg:maven/org.zkoss.zk/zkex@11.0.0-jakarta.FL.20261111-Eval?type=jar",
            "modified": false,
            "supplier": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "manufacturer": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "licenses": [
                {
                    "expression": "LicenseRef-Potix-ZK-Trial-License-Agreement",
                    "acknowledgement": "concluded"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "pkg:maven/org.zkoss.zk/zkex@11.0.0-jakarta.FL.20261111-Eval?type=jar",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "6caca6f59558ae94782807721caa844c4be3b17c32c47a2120ffc7c28fe1702e009a9466e04539423ea8df08a0ecaffa0cae85095fbe5e69c20601efa085b325"
                        }
                    ]
                }
            ],
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "zkex-11.0.0-jakarta.FL.20261111-Eval.jar"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "structured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/org.zkoss.zk/zml@11.0.0-jakarta.FL.20261111-Eval?type=jar",
            "group": "org.zkoss.zk",
            "name": "zml",
            "version": "11.0.0-jakarta.FL.20261111-Eval",
            "purl": "pkg:maven/org.zkoss.zk/zml@11.0.0-jakarta.FL.20261111-Eval?type=jar",
            "supplier": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "manufacturer": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "licenses": [
                {
                    "expression": "LicenseRef-Potix-ZK-Trial-License-Agreement",
                    "acknowledgement": "concluded"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "c53d2041254d0946d6ae9399b603069cb0f5f6307bb2f8a6a31e2f1dd9064af7"
                },
                {
                    "alg": "SHA-512",
                    "content": "58c0b35eeab66876a0060abcddfbaf6fc97859352d435f4fea4a62d28ce863d0393e80cf6993d370ed8984e6953d4761fec3c93347f6b1eb6915b18bd22dac68"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "pkg:maven/org.zkoss.zk/zml@11.0.0-jakarta.FL.20261111-Eval?type=jar",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "58c0b35eeab66876a0060abcddfbaf6fc97859352d435f4fea4a62d28ce863d0393e80cf6993d370ed8984e6953d4761fec3c93347f6b1eb6915b18bd22dac68"
                        }
                    ]
                }
            ],
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "zml-11.0.0-jakarta.FL.20261111-Eval.jar"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "structured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/org.eclipse.jdt/ecj@3.21.0?type=jar",
            "publisher": "Eclipse Foundation",
            "group": "org.eclipse.jdt",
            "name": "ecj",
            "version": "3.21.0",
            "description": "Eclipse Compiler for Java(TM)",
            "hashes": [
                {
                    "alg": "MD5",
                    "content": "4d1404f81be38fdf9186c9556c4ad3e9"
                },
                {
                    "alg": "SHA-1",
                    "content": "d06974eec06892e5594bdb8fbbc95cd81f1c57b2"
                },
                {
                    "alg": "SHA-256",
                    "content": "9082211f48782750093f07822d1ae481e8ece250449578f372334da626ccdead"
                },
                {
                    "alg": "SHA-512",
                    "content": "41311832a593d13ea84eebea087baa3bab16df381c70bd4c0f425caeb69eac1b41be2af27e40735ae16c039df4861fa93c3cfc4c21f84bad1c5eb1cb0e7ad351"
                },
                {
                    "alg": "SHA-384",
                    "content": "5123d5e6e30cc26bf70723fdd92ea3eab41b0c694197bee305459b5bd431ee8bb66c4b7f39dc91b5fb4b533a103f70f6"
                },
                {
                    "alg": "SHA3-384",
                    "content": "c86e90c8dcfc88096c3e81dfaea506b8f2ad95b38f84e72ec4aa17ffa609f28bd6cca9a7f57daded00cbeffd66a41845"
                },
                {
                    "alg": "SHA3-256",
                    "content": "5434d2fe6622d1d128f22b4ca4aa9cb9c6b30ad4929b1515e1b0fac0ff09f017"
                },
                {
                    "alg": "SHA3-512",
                    "content": "0a4bee0629ba2f91fdd4e0f1090751e8f89f11e4ffbcec08884a0be66c0aca31ed11ecd061434704f794e6621e09614f19bb6f696fc1f59eb902cb4f466486a9"
                }
            ],
            "licenses": [
                {
                    "expression": "EPL-2.0",
                    "acknowledgement": "concluded"
                }
            ],
            "purl": "pkg:maven/org.eclipse.jdt/ecj@3.21.0?type=jar",
            "modified": false,
            "externalReferences": [
                {
                    "type": "website",
                    "url": "http://www.eclipse.org/"
                },
                {
                    "type": "issue-tracker",
                    "url": "https://bugs.eclipse.org/"
                },
                {
                    "type": "vcs",
                    "url": "https://git.eclipse.org/c/jdt/eclipse.jdt.core.git"
                },
                {
                    "type": "distribution",
                    "url": "pkg:maven/org.eclipse.jdt/ecj@3.21.0?type=jar",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "41311832a593d13ea84eebea087baa3bab16df381c70bd4c0f425caeb69eac1b41be2af27e40735ae16c039df4861fa93c3cfc4c21f84bad1c5eb1cb0e7ad351"
                        }
                    ]
                }
            ],
            "supplier": {
                "name": "Eclipse Foundation",
                "url": [
                    "https://www.eclipse.org"
                ]
            },
            "manufacturer": {
                "name": "Eclipse Foundation",
                "url": [
                    "https://www.eclipse.org"
                ]
            },
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "ecj-3.21.0.jar"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "structured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.1?type=jar",
            "group": "com.fasterxml.jackson.core",
            "name": "jackson-databind",
            "version": "2.14.1",
            "description": "General data-binding functionality for Jackson: works on core streaming API",
            "hashes": [
                {
                    "alg": "MD5",
                    "content": "3e3e7aab8799ccc169b10f244e6fb5b4"
                },
                {
                    "alg": "SHA-1",
                    "content": "268524b9056cae1211b9f1f52560ef19347f4d17"
                },
                {
                    "alg": "SHA-256",
                    "content": "423a0c806de4b3fa5eb4a28698305e3a3777c731e1bcfa1b2f3a3760c7b6e773"
                },
                {
                    "alg": "SHA-512",
                    "content": "e23798189c4178603d6df8d27f5a0595f278d8df7584425fe225cf48a1e89d46e50ac0841a8c1f371a4ac4c45680ef207f2e496258f9d3ecf53d5734f6892f54"
                },
                {
                    "alg": "SHA-384",
                    "content": "14ddb27647d784645b9d66a75cdad0e88256752994df50b366c35b70e38d32712abb74a7e58089cd7d5048dbcffd076a"
                },
                {
                    "alg": "SHA3-384",
                    "content": "4349a433aa87807ef2af5f214dcb154e3bbd5a884c226d5cdefba54feaf2170aee7e169a2e381fa377a6a33f53c0f44c"
                },
                {
                    "alg": "SHA3-256",
                    "content": "3f32d8ce6fb9ef44408817f1416c8dd445d25e871a63cc4b598a7ddb2d3138ff"
                },
                {
                    "alg": "SHA3-512",
                    "content": "c00ab62eebc416880851bd5276ef238b3afa8deb6ed0553fbfd6670a44071f362f794cba69c950f53e17a77dcc471a2a1519436910439e08a359e82e58054d43"
                }
            ],
            "licenses": [
                {
                    "expression": "Apache-2.0",
                    "acknowledgement": "concluded"
                }
            ],
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.1?type=jar",
            "modified": false,
            "externalReferences": [
                {
                    "type": "vcs",
                    "url": "https://github.com/FasterXML/jackson-databind"
                },
                {
                    "type": "distribution",
                    "url": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.1?type=jar",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "e23798189c4178603d6df8d27f5a0595f278d8df7584425fe225cf48a1e89d46e50ac0841a8c1f371a4ac4c45680ef207f2e496258f9d3ecf53d5734f6892f54"
                        }
                    ]
                }
            ],
            "supplier": {
                "name": "FasterXML, LLC",
                "url": [
                    "https://github.com/FasterXML"
                ]
            },
            "manufacturer": {
                "name": "FasterXML, LLC",
                "url": [
                    "https://github.com/FasterXML"
                ]
            },
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "jackson-databind-2.14.1.jar"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "structured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/org.apache.commons/commons-fileupload2-jakarta-servlet5@2.0.0-M4?type=jar",
            "group": "org.apache.commons",
            "name": "commons-fileupload2-jakarta-servlet5",
            "version": "2.0.0-M4",
            "hashes": [
                {
                    "alg": "MD5",
                    "content": "4d451726da5ef8459f98a300f65f376b"
                },
                {
                    "alg": "SHA-1",
                    "content": "7fec35e169221a59089c134ec9c43627dd349c9d"
                },
                {
                    "alg": "SHA-256",
                    "content": "63fdde9b65c009735a02cd5d271042cc9042d26ce43d8e8287c87947bf8a40b4"
                },
                {
                    "alg": "SHA-512",
                    "content": "6775fd7a3dc5f1ce54b4e3702d1af81f93c13d4352a546d206ecd66fc28f813952c6c5fc9cd7d94f4670952b6950d15fb36003b35103d2789a5ae534df971cb4"
                },
                {
                    "alg": "SHA-384",
                    "content": "34982f0adb79fa82a60e60a9c70b09dbabb2f4c44d70accbed2de8dd199ded0249156d0e6ed7bf26a144852146b7f179"
                },
                {
                    "alg": "SHA3-384",
                    "content": "f36139c2f3da99391053ecf21bd40eae21e0364a58470addf612d4791d60b3c8bafc6cecfc99ca5dded8a82a6a2aa94d"
                },
                {
                    "alg": "SHA3-256",
                    "content": "bfe5ab9027a104830990bd0561cc0cc9abf67e073e2d0170dbdd7539d6cd8036"
                },
                {
                    "alg": "SHA3-512",
                    "content": "e1c95c575a48667a3dbe7948465d9270f1202210ea66351cce155ec46f8197b92dccca8bae3902f5615755e44e45853285e0dd175b6915129313ed972871cfd6"
                }
            ],
            "purl": "pkg:maven/org.apache.commons/commons-fileupload2-jakarta-servlet5@2.0.0-M4?type=jar",
            "modified": false,
            "supplier": {
                "name": "The Apache Software Foundation",
                "url": [
                    "https://www.apache.org"
                ]
            },
            "manufacturer": {
                "name": "The Apache Software Foundation",
                "url": [
                    "https://www.apache.org"
                ]
            },
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "commons-fileupload2-jakarta-servlet5-2.0.0-M4.jar"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "structured"
                }
            ],
            "licenses": [
                {
                    "expression": "Apache-2.0",
                    "acknowledgement": "concluded"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "pkg:maven/org.apache.commons/commons-fileupload2-jakarta-servlet5@2.0.0-M4?type=jar",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "6775fd7a3dc5f1ce54b4e3702d1af81f93c13d4352a546d206ecd66fc28f813952c6c5fc9cd7d94f4670952b6950d15fb36003b35103d2789a5ae534df971cb4"
                        }
                    ]
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/org.jfree/jfreechart@1.0.19?type=jar",
            "publisher": "JFree.org",
            "group": "org.jfree",
            "name": "jfreechart",
            "version": "1.0.19",
            "description": "JFreeChart is a class library, written in Java, for generating charts. Utilising the Java2D APIs, it currently supports bar charts, pie charts, line charts, XY-plots and time series plots.",
            "hashes": [
                {
                    "alg": "MD5",
                    "content": "4ff3762bd04a7239cfb98de542134bec"
                },
                {
                    "alg": "SHA-1",
                    "content": "ba9ee7dbb2e4c57a6901c79f614ed2dea9cc0e20"
                },
                {
                    "alg": "SHA-256",
                    "content": "153d077d6399776a45de97c555ad026eb6201d4bd8af86cfce7b8b4ccfa66263"
                },
                {
                    "alg": "SHA-512",
                    "content": "4461b94a95fff1dccd45b504e2cebd37e294257ac743af4296a55b1513d9133aee0f69d05fc737406ee2246c7e1f20536cf235b02053d5ca7aed58586841c2bd"
                },
                {
                    "alg": "SHA-384",
                    "content": "dd30f229cbcf06cfd825f9acbdb2a8026a8c81c49f9919b5708561199a8464df87730a04bd083a3bf252184a71349549"
                },
                {
                    "alg": "SHA3-384",
                    "content": "0a60de6e3640d63ec6d5fd98a1ddc3e3829ef4b20bd9a236ff7055968ffd826b1c92fbcfefa16ed3a2ce82622e168a9a"
                },
                {
                    "alg": "SHA3-256",
                    "content": "ff29553d392a5f5e3d56fb495c3d4829adb08aeb4a11e5c11a9b3dc12aa47ffb"
                },
                {
                    "alg": "SHA3-512",
                    "content": "1f244620552183a5abae81b5a4f6a8a465f9165fa23d273aad01bfde1c1cd7c0fbb21a2f60e26d5ba057ed29115bc274af6bc5cedc90560c5b239ab017accaef"
                }
            ],
            "licenses": [
                {
                    "expression": "LGPL-2.1-or-later",
                    "acknowledgement": "concluded"
                }
            ],
            "purl": "pkg:maven/org.jfree/jfreechart@1.0.19?type=jar",
            "modified": false,
            "externalReferences": [
                {
                    "type": "website",
                    "url": "http://www.jfree.org/"
                },
                {
                    "type": "issue-tracker",
                    "url": "http://sourceforge.net/tracker/?group_id=15494"
                },
                {
                    "type": "mailing-list",
                    "url": "http://sourceforge.net/mailarchive/forum.php?forum=jfreechart-dev"
                },
                {
                    "type": "vcs",
                    "url": "http://jfreechart.svn.sourceforge.net/viewvc/jfreechart/"
                },
                {
                    "type": "distribution",
                    "url": "pkg:maven/org.jfree/jfreechart@1.0.19?type=jar",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "4461b94a95fff1dccd45b504e2cebd37e294257ac743af4296a55b1513d9133aee0f69d05fc737406ee2246c7e1f20536cf235b02053d5ca7aed58586841c2bd"
                        }
                    ]
                }
            ],
            "supplier": {
                "name": "Object Refinery Limited",
                "url": [
                    "https://www.jfree.org"
                ]
            },
            "manufacturer": {
                "name": "Object Refinery Limited",
                "url": [
                    "https://www.jfree.org"
                ]
            },
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "jfreechart-1.0.19.jar"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "structured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.14.1?type=jar",
            "group": "com.fasterxml.jackson.core",
            "name": "jackson-core",
            "version": "2.14.1",
            "description": "Core Jackson processing abstractions (aka Streaming API), implementation for JSON",
            "hashes": [
                {
                    "alg": "MD5",
                    "content": "f9604a5f31129cdb7db4bdec90111850"
                },
                {
                    "alg": "SHA-1",
                    "content": "7a07bc535ccf0b7f6929c4d0f2ab9b294ef7c4a3"
                },
                {
                    "alg": "SHA-256",
                    "content": "0114187e296b34c931c1bf9e5a84152b62bfab7d182f5623f3982dc2da35e526"
                },
                {
                    "alg": "SHA-512",
                    "content": "7a3cd2e4af749e800151efbcf0a18c6429bf5f8abb2dc2bd4f71ffeaba365574a0adb2ae204b6aba1f3a19f6fe6985d4ddf1169747235e85c5bedcdad2f4d58c"
                },
                {
                    "alg": "SHA-384",
                    "content": "fcd9164ae7dd26b1562f89e9ff741a9c34611b022db52e387e7a9bc3d8f084b3f5390e9516b049a8542ccb1f1630a665"
                },
                {
                    "alg": "SHA3-384",
                    "content": "761066454385f5892b0bf1fadfcebd9b8a13d61677df0294ca68dfa4317b3c61e21c429027c7ac6d8272ba80e12a166d"
                },
                {
                    "alg": "SHA3-256",
                    "content": "5302084471ac0959b67c640165eb595007371ebebd4646b81d9a76b26d9f6920"
                },
                {
                    "alg": "SHA3-512",
                    "content": "0733c8d5b752ceabd35bd396470289d3773b804bdcd8b292c3a834394d810e095542a077edb5c7014bb70a8f9ebd7df18553df2cb7947436fbdad8ed7ede0851"
                }
            ],
            "licenses": [
                {
                    "expression": "Apache-2.0",
                    "acknowledgement": "concluded"
                }
            ],
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.14.1?type=jar",
            "modified": false,
            "externalReferences": [
                {
                    "type": "vcs",
                    "url": "https://github.com/FasterXML/jackson-core"
                },
                {
                    "type": "distribution",
                    "url": "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.14.1?type=jar",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "7a3cd2e4af749e800151efbcf0a18c6429bf5f8abb2dc2bd4f71ffeaba365574a0adb2ae204b6aba1f3a19f6fe6985d4ddf1169747235e85c5bedcdad2f4d58c"
                        }
                    ]
                }
            ],
            "supplier": {
                "name": "FasterXML, LLC",
                "url": [
                    "https://github.com/FasterXML"
                ]
            },
            "manufacturer": {
                "name": "FasterXML, LLC",
                "url": [
                    "https://github.com/FasterXML"
                ]
            },
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "jackson-core-2.14.1.jar"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "structured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/ognl/ognl@3.1.28?type=jar",
            "publisher": "OpenSymphony",
            "group": "ognl",
            "name": "ognl",
            "version": "3.1.28",
            "description": "OGNL - Object Graph Navigation Library",
            "hashes": [
                {
                    "alg": "MD5",
                    "content": "ff23ca36eb2ba1cb076091d0440144d9"
                },
                {
                    "alg": "SHA-1",
                    "content": "4160525fe152e5dd5b53e12b2c59da84156517c1"
                },
                {
                    "alg": "SHA-256",
                    "content": "aa357126ac26a29cf1a64554719272a8f36253ec072a7fbafa030aa7324ef1d7"
                },
                {
                    "alg": "SHA-512",
                    "content": "9ca433e37f59b14cd0ba17242de25f97c10f02dd45de2368028586375f7f1bc372afd5dd2283330914a43433c00092738afde6d23503f4235601267a162cb1c7"
                },
                {
                    "alg": "SHA-384",
                    "content": "9fae5632abbb35b7946157903012462b2c1ad9c30a18d31b8cfb96950294ad7d7e5bfa43bf12010850997b49c52feeeb"
                },
                {
                    "alg": "SHA3-384",
                    "content": "693c0fc4e294e6e07629e0e38d6ce2f4d9d8b0e15df626aff5d382362a8dd06c5e8aef12f360b4e20ea905a82eb6e26a"
                },
                {
                    "alg": "SHA3-256",
                    "content": "7040abeab20481a5aa91df22bed3bf294d915c1d9ffeb295f1a18f175e05e580"
                },
                {
                    "alg": "SHA3-512",
                    "content": "7c3db6d9eea1dfc1d823925b2bdbbc78efc9ece053e6b5d2e8090526533a55a323232213aee358a1cb36b87f6d33797e675e119c4552573b8ac46a500e94ed2e"
                }
            ],
            "licenses": [
                {
                    "expression": "Apache-2.0",
                    "acknowledgement": "concluded"
                }
            ],
            "purl": "pkg:maven/ognl/ognl@3.1.28?type=jar",
            "modified": false,
            "externalReferences": [
                {
                    "type": "website",
                    "url": "http://www.opensymphony.com"
                },
                {
                    "type": "issue-tracker",
                    "url": "http://jira.opensymphony.com/browse/OGNL"
                },
                {
                    "type": "distribution",
                    "url": "pkg:maven/ognl/ognl@3.1.28?type=jar",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "9ca433e37f59b14cd0ba17242de25f97c10f02dd45de2368028586375f7f1bc372afd5dd2283330914a43433c00092738afde6d23503f4235601267a162cb1c7"
                        }
                    ]
                }
            ],
            "supplier": {
                "name": "OGNL",
                "url": [
                    "https://github.com/orphan-oss/ognl"
                ]
            },
            "manufacturer": {
                "name": "OGNL",
                "url": [
                    "https://github.com/orphan-oss/ognl"
                ]
            },
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "ognl-3.1.28.jar"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "structured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/commons-io/commons-io@2.19.0?type=jar",
            "group": "commons-io",
            "name": "commons-io",
            "version": "2.19.0",
            "description": "The Apache Commons IO library contains utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more.",
            "hashes": [
                {
                    "alg": "MD5",
                    "content": "3d1fd45f9d2a247c1d05ab1e98c07160"
                },
                {
                    "alg": "SHA-1",
                    "content": "1f8d4a99ba72b77aa69101175efc79b0c7dcdd7e"
                },
                {
                    "alg": "SHA-256",
                    "content": "824268919b4b62f9f40f08c54381de5993b078f58667e332d17348ae019d72b9"
                },
                {
                    "alg": "SHA-512",
                    "content": "98ad3cb92c31b51461c44d06c223a425c3ee8254ad3ddfdc3724e7d14444d2eeac3b054f70be5d4500268f712c1f08779fd5e4360437b4a883c406c0dc3a2c7c"
                },
                {
                    "alg": "SHA-384",
                    "content": "b3a8950070de2372be3c05444c203a13e0727bd5ef8c446b7c731dce37d3622509b93a7ffedac2a81b707b73c73bc8d1"
                },
                {
                    "alg": "SHA3-384",
                    "content": "9243e8e5354232583e1a269592a4f19e4ee4dc681cf942c10a146be1e4036bcd71bd3f59df78f1916e20c03d7d9bcfd0"
                },
                {
                    "alg": "SHA3-256",
                    "content": "b9994550c1fe3140f52b9e2e663f2a4ad1ccc6ca4f19fd3626bfc689ae2f4a6d"
                },
                {
                    "alg": "SHA3-512",
                    "content": "e0f4331c5e19afe2d23470066d6d870ac16fdb9b5892cc79d84cfc987d486e28912e9caa3f77fdf1a5de88ae3f8b2e439a5d5ecbf042dcf7c7bca8c89f3d5f92"
                }
            ],
            "licenses": [
                {
                    "expression": "Apache-2.0",
                    "acknowledgement": "concluded"
                }
            ],
            "purl": "pkg:maven/commons-io/commons-io@2.19.0?type=jar",
            "modified": false,
            "externalReferences": [
                {
                    "type": "issue-tracker",
                    "url": "https://issues.apache.org/jira/browse/IO"
                },
                {
                    "type": "vcs",
                    "url": "https://gitbox.apache.org/repos/asf?p=commons-io.git"
                },
                {
                    "type": "distribution",
                    "url": "pkg:maven/commons-io/commons-io@2.19.0?type=jar",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "98ad3cb92c31b51461c44d06c223a425c3ee8254ad3ddfdc3724e7d14444d2eeac3b054f70be5d4500268f712c1f08779fd5e4360437b4a883c406c0dc3a2c7c"
                        }
                    ]
                }
            ],
            "supplier": {
                "name": "The Apache Software Foundation",
                "url": [
                    "https://www.apache.org"
                ]
            },
            "manufacturer": {
                "name": "The Apache Software Foundation",
                "url": [
                    "https://www.apache.org"
                ]
            },
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "commons-io-2.19.0.jar"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "structured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/commons-digester/commons-digester@2.1?type=jar",
            "group": "commons-digester",
            "name": "commons-digester",
            "version": "2.1",
            "description": "The Digester package lets you configure an XML to Java object mapping module which triggers certain actions called rules whenever a particular pattern of nested XML elements is recognized.",
            "hashes": [
                {
                    "alg": "MD5",
                    "content": "528445033f22da28f5047b6abcd1c7c9"
                },
                {
                    "alg": "SHA-1",
                    "content": "73a8001e7a54a255eef0f03521ec1805dc738ca0"
                },
                {
                    "alg": "SHA-256",
                    "content": "e0b2b980a84fc6533c5ce291f1917b32c507f62bcad64198fff44368c2196a3d"
                },
                {
                    "alg": "SHA-512",
                    "content": "a2c822690786b41e0a02506c7aaf7e8a4b8251ea71d6978ee03e82b11ca242e49386d6da84dbc7182d5a6fb167822aed200da2d97e2f264d63ccf8f1b9681ac8"
                },
                {
                    "alg": "SHA-384",
                    "content": "2aaaa152e6e5fa4c632065e18bb17f8a223de0713be0610b62939b179fccdd37645f2e3073896f455ea95566274e14c1"
                },
                {
                    "alg": "SHA3-384",
                    "content": "68f842c1a87a2fae303d1662a2b9d9d63b358c11c7b26ec468ef64f5e677b44e3db3d30a7f4b74aa73bda0ecf9f4858a"
                },
                {
                    "alg": "SHA3-256",
                    "content": "dafa3bae04d0eb180e384caf6a86be5387537992b2b7c4998cc341d56f0ac4d7"
                },
                {
                    "alg": "SHA3-512",
                    "content": "7a3f2991476cd5f2f8e645fe9820a9820b720b19fc6451be09a3be35bab7d51fe28f094c0f9735aa5f6fb9dc432c8513b7d15ae44d66b0836e97abcf06d74ce4"
                }
            ],
            "licenses": [
                {
                    "expression": "Apache-2.0",
                    "acknowledgement": "concluded"
                }
            ],
            "purl": "pkg:maven/commons-digester/commons-digester@2.1?type=jar",
            "modified": false,
            "externalReferences": [
                {
                    "type": "issue-tracker",
                    "url": "http://issues.apache.org/jira/browse/DIGESTER"
                },
                {
                    "type": "vcs",
                    "url": "http://svn.apache.org/viewvc/commons/proper/digester/tags/DIGESTER_2_1_RC2"
                },
                {
                    "type": "distribution",
                    "url": "pkg:maven/commons-digester/commons-digester@2.1?type=jar",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "a2c822690786b41e0a02506c7aaf7e8a4b8251ea71d6978ee03e82b11ca242e49386d6da84dbc7182d5a6fb167822aed200da2d97e2f264d63ccf8f1b9681ac8"
                        }
                    ]
                }
            ],
            "supplier": {
                "name": "The Apache Software Foundation",
                "url": [
                    "https://www.apache.org"
                ]
            },
            "manufacturer": {
                "name": "The Apache Software Foundation",
                "url": [
                    "https://www.apache.org"
                ]
            },
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "commons-digester-2.1.jar"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "structured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.14.1?type=jar",
            "group": "com.fasterxml.jackson.dataformat",
            "name": "jackson-dataformat-xml",
            "version": "2.14.1",
            "description": "Data format extension for Jackson to offer alternative support for serializing POJOs as XML and deserializing XML as pojos.",
            "hashes": [
                {
                    "alg": "MD5",
                    "content": "c95952b32a6b42880ec626e5f2bc8563"
                },
                {
                    "alg": "SHA-1",
                    "content": "ccd98bd674080338a6ca4bcdd52be7fb465cec1d"
                },
                {
                    "alg": "SHA-256",
                    "content": "90fa6199c194cf3bad58073d3913b3e8a812d06a5db16faa554ba10f5d859436"
                },
                {
                    "alg": "SHA-512",
                    "content": "f5a8a6f445c157eb9b4615566a01cbf5f903301e4b496dcbc84138161dc606224d7324b30a0c851cbfa6f2b9ac7e53d07376735d3192a0f98b8c419c79a46006"
                },
                {
                    "alg": "SHA-384",
                    "content": "e0e29643d970e756b3aa734c161c5ef6db7aa0839a9510362a89a75cd5787b83a00df867eaeb93f80cdebccf84a46776"
                },
                {
                    "alg": "SHA3-384",
                    "content": "3c5c0abd5a5107dcb2948a7a5dafd781629351f7f4af14397a4ab7796ee5b0fe31cadcfd93351648860900887f183c2d"
                },
                {
                    "alg": "SHA3-256",
                    "content": "7ffb7673f5fc74bf2289ce78ed131d952bd2a21c01e22ae37299120094e6810d"
                },
                {
                    "alg": "SHA3-512",
                    "content": "321af4d6fe0a4e3ce404101ec509ec07ecbf1c7df039667dadb52b66f3a28c2b274cfe95ce31087c368f0fca47bdbfcda06c859a8aa60bf1edd514a872dca741"
                }
            ],
            "licenses": [
                {
                    "expression": "Apache-2.0",
                    "acknowledgement": "concluded"
                }
            ],
            "purl": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.14.1?type=jar",
            "modified": false,
            "externalReferences": [
                {
                    "type": "vcs",
                    "url": "http://github.com/FasterXML/jackson-dataformat-xml"
                },
                {
                    "type": "distribution",
                    "url": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.14.1?type=jar",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "f5a8a6f445c157eb9b4615566a01cbf5f903301e4b496dcbc84138161dc606224d7324b30a0c851cbfa6f2b9ac7e53d07376735d3192a0f98b8c419c79a46006"
                        }
                    ]
                }
            ],
            "supplier": {
                "name": "FasterXML, LLC",
                "url": [
                    "https://github.com/FasterXML"
                ]
            },
            "manufacturer": {
                "name": "FasterXML, LLC",
                "url": [
                    "https://github.com/FasterXML"
                ]
            },
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "jackson-dataformat-xml-2.14.1.jar"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "structured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/org.zkoss.zk/stateless-immutable@11.0.0-jakarta.FL.20261111-Eval?type=jar",
            "group": "org.zkoss.zk",
            "name": "stateless-immutable",
            "version": "11.0.0-jakarta.FL.20261111-Eval",
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "7f07ae314eaec44205689f5bf202fdec3757fe6291a3b195550e94e52092f3fd"
                },
                {
                    "alg": "SHA-512",
                    "content": "f30106167fda4a7aa5f438e5aaa50778f6ab02819ed12ac4ada52e35f92b88ca6acf7a5d9b41eab3c210ad3c98b88f806db1d2e29c921ee2e20b09fb92d3c5be"
                }
            ],
            "purl": "pkg:maven/org.zkoss.zk/stateless-immutable@11.0.0-jakarta.FL.20261111-Eval?type=jar",
            "modified": false,
            "supplier": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "manufacturer": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "licenses": [
                {
                    "expression": "LicenseRef-Potix-ZK-Trial-License-Agreement",
                    "acknowledgement": "concluded"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "pkg:maven/org.zkoss.zk/stateless-immutable@11.0.0-jakarta.FL.20261111-Eval?type=jar",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "f30106167fda4a7aa5f438e5aaa50778f6ab02819ed12ac4ada52e35f92b88ca6acf7a5d9b41eab3c210ad3c98b88f806db1d2e29c921ee2e20b09fb92d3c5be"
                        }
                    ]
                }
            ],
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "stateless-immutable-11.0.0-jakarta.FL.20261111-Eval.jar"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "structured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/net.sf.jasperreports/jasperreports@6.20.5?type=jar",
            "publisher": "Cloud Software Group, Inc.",
            "group": "net.sf.jasperreports",
            "name": "jasperreports",
            "version": "6.20.5",
            "description": "Free Java Reporting Library",
            "hashes": [
                {
                    "alg": "MD5",
                    "content": "868896e5f176b93aa8c8b6b8e6ce50ab"
                },
                {
                    "alg": "SHA-1",
                    "content": "c91cc68132f154dc3301dec4b71f0b90e3422d1d"
                },
                {
                    "alg": "SHA-256",
                    "content": "b2c02b051438eefa9f272fedeb023334faee72382edee0b495137e3a32831ced"
                },
                {
                    "alg": "SHA-512",
                    "content": "567e6a7f5f14b8197f99e547663c14e9213832b299cc8b572a67299a53d045a3d872fcd7134aedd01fb988062b1d9e72f21f41f7412b635512e434bc241ac876"
                },
                {
                    "alg": "SHA-384",
                    "content": "d8d5fcae0e3755381aa40f0386b7fefc045eac9a4f5c01be7cd300822c2989c4743d88eed84375218477af0f16148b3e"
                },
                {
                    "alg": "SHA3-384",
                    "content": "9df8575c58932adac654ce52c1f90735d425b07c6ec55958926b25cedb485bbc7ea014c0a6217c0d5795dadf37bca019"
                },
                {
                    "alg": "SHA3-256",
                    "content": "a8dfeb4b8993f6cde521a803a0b50be253b7f572d499befc8f719effff9c462d"
                },
                {
                    "alg": "SHA3-512",
                    "content": "60fcc0ef16dac529c717015c82feb360de58e30046f94cc6a49506b0fc4860e51c43c40217abbdad996c5a1fbd19a530dffdeb5361bf8740a31290004602f768"
                }
            ],
            "licenses": [
                {
                    "expression": "LGPL-3.0-or-later",
                    "acknowledgement": "concluded"
                }
            ],
            "purl": "pkg:maven/net.sf.jasperreports/jasperreports@6.20.5?type=jar",
            "modified": false,
            "externalReferences": [
                {
                    "type": "website",
                    "url": "https://www.jaspersoft.com/"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/TIBCOSoftware/jasperreports"
                },
                {
                    "type": "distribution",
                    "url": "pkg:maven/net.sf.jasperreports/jasperreports@6.20.5?type=jar",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "567e6a7f5f14b8197f99e547663c14e9213832b299cc8b572a67299a53d045a3d872fcd7134aedd01fb988062b1d9e72f21f41f7412b635512e434bc241ac876"
                        }
                    ]
                }
            ],
            "supplier": {
                "name": "Jaspersoft",
                "url": [
                    "https://github.com/Jaspersoft/jasperreports"
                ]
            },
            "manufacturer": {
                "name": "Jaspersoft",
                "url": [
                    "https://github.com/Jaspersoft/jasperreports"
                ]
            },
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "jasperreports-6.20.5.jar"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "structured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/org.jfree/jcommon@1.0.23?type=jar",
            "publisher": "JFree.org",
            "group": "org.jfree",
            "name": "jcommon",
            "version": "1.0.23",
            "description": "JCommon is a free general purpose Java class library that is used in several projects at www.jfree.org, including JFreeChart and JFreeReport.",
            "hashes": [
                {
                    "alg": "MD5",
                    "content": "1b059adc60fef2da40b7130f9a67f977"
                },
                {
                    "alg": "SHA-1",
                    "content": "a316f336ca996e0c6bec4e4fbd49be8f5e1c3968"
                },
                {
                    "alg": "SHA-256",
                    "content": "1e670402809484c71ec74d55b40022a4c4939c7911bd39ee5a0cfb3aaf56397c"
                },
                {
                    "alg": "SHA-512",
                    "content": "f4574e35698f66ac02c868e49ca4d238eb103390f1b842dee5afe0adfdaaca5d86f3e149449c3dbaf83b4965be4829679c201393df33764c489288637eff0a44"
                },
                {
                    "alg": "SHA-384",
                    "content": "72bf196da43a02ccfc2ba006de10335bb0d32a4b64e67303a0b8e8e15464f2d7e3275ac4b9a52eb3c0bdcb112f8a1b00"
                },
                {
                    "alg": "SHA3-384",
                    "content": "c0b2735bd3e247210e15e7b907f014d65208c2e4b4c9af2c7617befc01aa160906d4a2c3e3251162d004e7f2fff232e6"
                },
                {
                    "alg": "SHA3-256",
                    "content": "c08d3478dc33b5df4ca75e86c746b2c857a3c60eac854c66cb11d16725b13c1b"
                },
                {
                    "alg": "SHA3-512",
                    "content": "e5ee3b35a3155a01825a58e8c3107403e40c565cf21484a058e184eec72ea415dc750d594aea5bfdd61721ceba4e34fc52fc3e5c76159e3d34c69e7bbe039932"
                }
            ],
            "licenses": [
                {
                    "expression": "LGPL-2.1-or-later",
                    "acknowledgement": "concluded"
                }
            ],
            "purl": "pkg:maven/org.jfree/jcommon@1.0.23?type=jar",
            "modified": false,
            "externalReferences": [
                {
                    "type": "website",
                    "url": "http://www.jfree.org/"
                },
                {
                    "type": "issue-tracker",
                    "url": "http://sourceforge.net/tracker/?group_id=15494"
                },
                {
                    "type": "mailing-list",
                    "url": "http://sourceforge.net/mailarchive/forum.php?forum=jfreechart-dev"
                },
                {
                    "type": "vcs",
                    "url": "http://cvs.sourceforge.net/viewcvs.py/jfreechart/jcommon"
                },
                {
                    "type": "distribution",
                    "url": "pkg:maven/org.jfree/jcommon@1.0.23?type=jar",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "f4574e35698f66ac02c868e49ca4d238eb103390f1b842dee5afe0adfdaaca5d86f3e149449c3dbaf83b4965be4829679c201393df33764c489288637eff0a44"
                        }
                    ]
                }
            ],
            "supplier": {
                "name": "Object Refinery Limited",
                "url": [
                    "https://www.jfree.org"
                ]
            },
            "manufacturer": {
                "name": "Object Refinery Limited",
                "url": [
                    "https://www.jfree.org"
                ]
            },
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "jcommon-1.0.23.jar"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "structured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/org.apache.commons/commons-fileupload2-core@2.0.0-M4?type=jar",
            "group": "org.apache.commons",
            "name": "commons-fileupload2-core",
            "version": "2.0.0-M4",
            "description": "The Apache Commons FileUpload Core component provides the framework for a simple yet flexible means of adding support for multipart file upload functionality to servlets, portlets, and web applications.",
            "hashes": [
                {
                    "alg": "MD5",
                    "content": "e7fb1d376a2cab4732c3c12acf69413d"
                },
                {
                    "alg": "SHA-1",
                    "content": "3284839791dc0130ad07d594a05c7c8750aa4dd6"
                },
                {
                    "alg": "SHA-256",
                    "content": "d285cd8cdde3d9466208b37c7750454b0b280ea773b19b050ae1e2ddb09e6991"
                },
                {
                    "alg": "SHA-512",
                    "content": "c2dcb708c0c9f70e53b1704088512a1cd566921734079e008f665fe9bfbdd06b05e24fed352a06a1e2f27e576a72ba81006cc0d85d684b1a08d3f6f54213a777"
                },
                {
                    "alg": "SHA-384",
                    "content": "46538a44217a3cbf048ca330dc4a804c21a5f8a9770daa5de7ef8eba8a03155df5fc1c9e84ab4a6cc9604e5c90da2129"
                },
                {
                    "alg": "SHA3-384",
                    "content": "b11c98a9268f0cfff7456a4945a281e0588955c86205cdc42c2d410191fad4528b004aa2e2cc8ae16c19c58719ca20a9"
                },
                {
                    "alg": "SHA3-256",
                    "content": "a93c199eb039d6603181037c73d8c3c080e2c53ebc76e610f784a5d5f85f05fd"
                },
                {
                    "alg": "SHA3-512",
                    "content": "1d5a8d6a6b341e19f3352764f7100659788ca4a11807ea3d261de1cd7c6b3676b8c24b64baa18ebcb5135bf07e35607ae1903a44b11048a149f2966a24a67b29"
                }
            ],
            "licenses": [
                {
                    "expression": "Apache-2.0",
                    "acknowledgement": "concluded"
                }
            ],
            "purl": "pkg:maven/org.apache.commons/commons-fileupload2-core@2.0.0-M4?type=jar",
            "modified": false,
            "supplier": {
                "name": "The Apache Software Foundation",
                "url": [
                    "https://www.apache.org"
                ]
            },
            "manufacturer": {
                "name": "The Apache Software Foundation",
                "url": [
                    "https://www.apache.org"
                ]
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "pkg:maven/org.apache.commons/commons-fileupload2-core@2.0.0-M4?type=jar",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "c2dcb708c0c9f70e53b1704088512a1cd566921734079e008f665fe9bfbdd06b05e24fed352a06a1e2f27e576a72ba81006cc0d85d684b1a08d3f6f54213a777"
                        }
                    ]
                }
            ],
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "commons-fileupload2-core-2.0.0-M4.jar"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "structured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/com.google.j2objc/j2objc-annotations@3.1?type=jar",
            "group": "com.google.j2objc",
            "name": "j2objc-annotations",
            "version": "3.1",
            "description": "A set of annotations that provide additional information to the J2ObjC translator to modify the result of translation.",
            "hashes": [
                {
                    "alg": "MD5",
                    "content": "abe8bd3abff622b9a8b15c3a737aa741"
                },
                {
                    "alg": "SHA-1",
                    "content": "a892ca9507839bbdb900d64310ac98256cab992f"
                },
                {
                    "alg": "SHA-256",
                    "content": "84d3a150518485f8140ea99b8a985656749629f6433c92b80c75b36aba3b099b"
                },
                {
                    "alg": "SHA-512",
                    "content": "34ee5aad57b0b507e89c897306f73043f80fa0eb02b453e54d9052feb0808a0d2ed835d888946211921d2bf733780b19ff636479ce19b9f48814ba6008733ce1"
                },
                {
                    "alg": "SHA-384",
                    "content": "7b760a346a586d6a3fa4477807e2f02f091e61898fc9a6ff449e43c55b6465fbbc17720663183c84c41d4d8814085e51"
                },
                {
                    "alg": "SHA3-384",
                    "content": "a2166c1c08f947c0e60aa7c9167602942e7bac37ba45863d34c0132a1f352e7807a382588d350b93bdbbbbe315a3573f"
                },
                {
                    "alg": "SHA3-256",
                    "content": "3d4d3b8bfd2ad13351a53610aa4bf1c5a69d2bde4272c281003120ed9bcddb8c"
                },
                {
                    "alg": "SHA3-512",
                    "content": "0a574b379a3f8022f0b88252c87d0e6b6cfa434fdb981efd1b24387025a962d7ac4e90161e8bd048df142bf52f4fc41e4a0c1d45e4eeb872c5954aad552988e9"
                }
            ],
            "licenses": [
                {
                    "expression": "Apache-2.0",
                    "acknowledgement": "concluded"
                }
            ],
            "purl": "pkg:maven/com.google.j2objc/j2objc-annotations@3.1?type=jar",
            "modified": false,
            "externalReferences": [
                {
                    "type": "vcs",
                    "url": "http://github.com/google/j2objc"
                },
                {
                    "type": "distribution",
                    "url": "pkg:maven/com.google.j2objc/j2objc-annotations@3.1?type=jar",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "34ee5aad57b0b507e89c897306f73043f80fa0eb02b453e54d9052feb0808a0d2ed835d888946211921d2bf733780b19ff636479ce19b9f48814ba6008733ce1"
                        }
                    ]
                }
            ],
            "supplier": {
                "name": "Google LLC",
                "url": [
                    "https://opensource.google"
                ]
            },
            "manufacturer": {
                "name": "Google LLC",
                "url": [
                    "https://opensource.google"
                ]
            },
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "j2objc-annotations-3.1.jar"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "structured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/org.immutables/value@2.8.8?type=jar",
            "group": "org.immutables",
            "name": "value",
            "version": "2.8.8",
            "description": "Compile time annotations and compile time annotation processor to generate consistent value object using either abstract class, interface or annotation as a base.",
            "hashes": [
                {
                    "alg": "MD5",
                    "content": "f5fee05ee89fd90a0c6252fc1ea32ff1"
                },
                {
                    "alg": "SHA-1",
                    "content": "d99fa1e04af5a1fda42fa9412d68eb7fe17a1071"
                },
                {
                    "alg": "SHA-256",
                    "content": "93f0d0e2412de051c2d96cc8a8ecc1f3ba91d961ff330f3575e61b43afa68850"
                },
                {
                    "alg": "SHA-512",
                    "content": "be6bc50ed577bb42389d7c1cd50dfa8fa499c9ba6459d3f87c5404fc29bfa26e877db6b49faaf5ab4cbd652ba95d66e46de7e15ef396f82664a5fefded9db697"
                },
                {
                    "alg": "SHA-384",
                    "content": "4715e4b3a4e39a4d0c4cbf8540aab944db73aae11c2d401f001e3f9ef1f1615c2443c16fa92bebced5fac87906b5d928"
                },
                {
                    "alg": "SHA3-384",
                    "content": "a68c9f36848478ff24d62e6e44a46980cea563bf1aef085593c9508a2e7232de7a4865acbc993afb0a555c8ac9085dfe"
                },
                {
                    "alg": "SHA3-256",
                    "content": "09ab4b3d6c1d985d4dcf4c7bdff83a36e092a43b637353acc925306376c45ef1"
                },
                {
                    "alg": "SHA3-512",
                    "content": "81ab58a54e8f9ac5977c1617d3f399270e2a2077399633b9b08239be8d1c9bbf50ce0852e8a79bcc7b8c26d0db434ce830e8cf31d366af485e2f132e4475c4c1"
                }
            ],
            "licenses": [
                {
                    "expression": "Apache-2.0",
                    "acknowledgement": "concluded"
                }
            ],
            "purl": "pkg:maven/org.immutables/value@2.8.8?type=jar",
            "modified": false,
            "supplier": {
                "name": "Immutables",
                "url": [
                    "https://immutables.github.io"
                ]
            },
            "manufacturer": {
                "name": "Immutables",
                "url": [
                    "https://immutables.github.io"
                ]
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "pkg:maven/org.immutables/value@2.8.8?type=jar",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "be6bc50ed577bb42389d7c1cd50dfa8fa499c9ba6459d3f87c5404fc29bfa26e877db6b49faaf5ab4cbd652ba95d66e46de7e15ef396f82664a5fefded9db697"
                        }
                    ]
                }
            ],
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "value-2.8.8.jar"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "structured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/org.mvel/mvel14@1.2.21?type=jar",
            "publisher": "Codehaus",
            "group": "org.mvel",
            "name": "mvel14",
            "version": "1.2.21",
            "description": "",
            "hashes": [
                {
                    "alg": "MD5",
                    "content": "67b9f1dd16b353327a9ef4fe708a8b62"
                },
                {
                    "alg": "SHA-1",
                    "content": "c47f62efc5ad5e7f0bbb8334d2a1f83af85863ff"
                },
                {
                    "alg": "SHA-256",
                    "content": "2c1dc80c330f7d086de63fac3e138940ab982270e87cd8d85fed4356b56db5ce"
                },
                {
                    "alg": "SHA-512",
                    "content": "ebb7cf7af63a4b3cb105946e165357daea805c465c7295ea546da170866930a57230e77246f2785167b455be7595d1d5d66ffcc6a9d7bee41d49f8deae19d6c2"
                },
                {
                    "alg": "SHA-384",
                    "content": "0868519634038b9b0f3e5845af411a76214d3258edfae6149432177ec8064a324592212a6e53f5302b509068ae44dbd6"
                },
                {
                    "alg": "SHA3-384",
                    "content": "3cb61e23d651759de77758710be3ffb5ec1ce9d8274280f073bc60f2413023a254050d78176ebcb1f6c21dd147681c05"
                },
                {
                    "alg": "SHA3-256",
                    "content": "d1898f39b3becd1e18ba87b6737d6b6f0fb481c3d8ef2c2f91832efb71f36e8b"
                },
                {
                    "alg": "SHA3-512",
                    "content": "f844c28c6c82222ad6fc0e936112ad3db09d8488f449bea82dd0c927cd2686de457d0cdeae113be33d38b76159523241bd36d189cbd12d945b4c2360a3384a42"
                }
            ],
            "licenses": [
                {
                    "expression": "Apache-2.0",
                    "acknowledgement": "concluded"
                }
            ],
            "purl": "pkg:maven/org.mvel/mvel14@1.2.21?type=jar",
            "modified": false,
            "externalReferences": [
                {
                    "type": "website",
                    "url": "http://codehaus.org"
                },
                {
                    "type": "issue-tracker",
                    "url": "http://jira.codehaus.org/browse/MVEL"
                },
                {
                    "type": "vcs",
                    "url": "http://svn.mvel.codehaus.org/"
                },
                {
                    "type": "distribution",
                    "url": "pkg:maven/org.mvel/mvel14@1.2.21?type=jar",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "ebb7cf7af63a4b3cb105946e165357daea805c465c7295ea546da170866930a57230e77246f2785167b455be7595d1d5d66ffcc6a9d7bee41d49f8deae19d6c2"
                        }
                    ]
                }
            ],
            "supplier": {
                "name": "MVEL",
                "url": [
                    "https://github.com/mvel/mvel"
                ]
            },
            "manufacturer": {
                "name": "MVEL",
                "url": [
                    "https://github.com/mvel/mvel"
                ]
            },
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "mvel14-1.2.21.jar"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "structured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.22.1?type=jar",
            "group": "com.fasterxml.jackson.core",
            "name": "jackson-core",
            "version": "2.22.1",
            "description": "Core Jackson processing abstractions (aka Streaming API), implementation for JSON",
            "hashes": [
                {
                    "alg": "MD5",
                    "content": "09e866bcd73613665ef49f5086704fb1"
                },
                {
                    "alg": "SHA-1",
                    "content": "da7ffb60088d7e8f37ecdd3b617520971cc7b9bf"
                },
                {
                    "alg": "SHA-256",
                    "content": "941ff029bcdb93e83d209ce516c1a7fb8bbac07d0a2fa122f5bf194b2cd7b4f4"
                },
                {
                    "alg": "SHA-512",
                    "content": "d4485af4465f561034df86686d672835b0272b6200efb0af55ea71e62d3faf09e9f90e42df4da64650795cf00519fc553f892bf6179330a3e74750110a785efb"
                },
                {
                    "alg": "SHA-384",
                    "content": "faaf92de6e93475fdbb7d56221fd35d8435ac4f87dddfd334ed05c4318b8b72220010effd08bf8dd156420771b294eb4"
                },
                {
                    "alg": "SHA3-384",
                    "content": "5c432f1a2f3369485c4ed7d3c3c4499342c23efd0d7a574b73421345df9762bd27643cc469b01632400691f3c09b5d8b"
                },
                {
                    "alg": "SHA3-256",
                    "content": "48fc6e17c36e14b8bae387b92248a43da12293b68a61dd2517c708dbb24ed010"
                },
                {
                    "alg": "SHA3-512",
                    "content": "f72ef2d2a1012be8b1c972323527a396bbaea0b543bd79fac6d380f8e4855c6d98190b067ccec92ece9ed8e1ece1e6046b1d93f9c85944fcb7133fe0b4dc60e4"
                }
            ],
            "licenses": [
                {
                    "expression": "Apache-2.0",
                    "acknowledgement": "concluded"
                }
            ],
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.22.1?type=jar",
            "modified": false,
            "externalReferences": [
                {
                    "type": "vcs",
                    "url": "https://github.com/FasterXML/jackson-core"
                },
                {
                    "type": "distribution",
                    "url": "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.22.1?type=jar",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "d4485af4465f561034df86686d672835b0272b6200efb0af55ea71e62d3faf09e9f90e42df4da64650795cf00519fc553f892bf6179330a3e74750110a785efb"
                        }
                    ]
                }
            ],
            "supplier": {
                "name": "FasterXML, LLC",
                "url": [
                    "https://github.com/FasterXML"
                ]
            },
            "manufacturer": {
                "name": "FasterXML, LLC",
                "url": [
                    "https://github.com/FasterXML"
                ]
            },
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "jackson-core-2.22.1.jar"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "structured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/org.apache.commons/commons-collections4@4.2?type=jar",
            "group": "org.apache.commons",
            "name": "commons-collections4",
            "version": "4.2",
            "description": "The Apache Commons Collections package contains types that extend and augment the Java Collections Framework.",
            "hashes": [
                {
                    "alg": "MD5",
                    "content": "b290524be8a0dbb6521df95f4ce80c8d"
                },
                {
                    "alg": "SHA-1",
                    "content": "54ebea0a5b653d3c680131e73fe807bb8f78c4ed"
                },
                {
                    "alg": "SHA-256",
                    "content": "6a594721d51444fd97b3eaefc998a77f606dedb03def494f74755aead3c9df3e"
                },
                {
                    "alg": "SHA-512",
                    "content": "e1ba369ffe4e0d8fb1c432ffb2171aaf4435ae2a88f6c91ebf8e7aea28791dc3035685f34a93a5b1370745374ea4bf3b9ca7a99bf73a0017811d29c13afa9a1e"
                },
                {
                    "alg": "SHA-384",
                    "content": "5f7cf10ef89925ae0c4ad076ff93079157ce11f69608d8c37e9d6a9cc3a0fa5e65f1b5cd1b2dc7c45cb3886511354710"
                },
                {
                    "alg": "SHA3-384",
                    "content": "218724de0d35fb21a3f88ae22dc711568d68baee0016dbba9ee36fd16e5e5954b555683f8b96476f10d859a87c4c404c"
                },
                {
                    "alg": "SHA3-256",
                    "content": "a4bac19481860f0aca6abdcc68c89f6198422855efa9c3c596f1c96ad6110f4d"
                },
                {
                    "alg": "SHA3-512",
                    "content": "b738176217e3233e94ad8e88d89f3c75c8c55b1990636fed72f7813f537989dbda38faa04c3f152275205f887c773f7ced867c6f5332d61e9442641e5fd8b3d5"
                }
            ],
            "licenses": [
                {
                    "expression": "Apache-2.0",
                    "acknowledgement": "concluded"
                }
            ],
            "purl": "pkg:maven/org.apache.commons/commons-collections4@4.2?type=jar",
            "modified": false,
            "externalReferences": [
                {
                    "type": "issue-tracker",
                    "url": "http://issues.apache.org/jira/browse/COLLECTIONS"
                },
                {
                    "type": "vcs",
                    "url": "https://git-wip-us.apache.org/repos/asf?p=commons-collections.git"
                },
                {
                    "type": "distribution",
                    "url": "pkg:maven/org.apache.commons/commons-collections4@4.2?type=jar",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "e1ba369ffe4e0d8fb1c432ffb2171aaf4435ae2a88f6c91ebf8e7aea28791dc3035685f34a93a5b1370745374ea4bf3b9ca7a99bf73a0017811d29c13afa9a1e"
                        }
                    ]
                }
            ],
            "supplier": {
                "name": "The Apache Software Foundation",
                "url": [
                    "https://www.apache.org"
                ]
            },
            "manufacturer": {
                "name": "The Apache Software Foundation",
                "url": [
                    "https://www.apache.org"
                ]
            },
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "commons-collections4-4.2.jar"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "structured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/org.owasp.encoder/encoder@1.3.1?type=jar",
            "group": "org.owasp.encoder",
            "name": "encoder",
            "version": "1.3.1",
            "description": "The OWASP Encoders package is a collection of high-performance low-overhead contextual encoders, that when utilized correctly, is an effective tool in preventing Web Application security vulnerabilities such as Cross-Site Scripting.",
            "hashes": [
                {
                    "alg": "MD5",
                    "content": "c826f7776c4d03adcbf1a2bceef84627"
                },
                {
                    "alg": "SHA-1",
                    "content": "1ebf20e19ddc3fa952f4e2af220a20b085ce87ba"
                },
                {
                    "alg": "SHA-256",
                    "content": "c9c56c8970c7cb11b231913ba5190ce930f8fd4fac2bd918810642dc3848e757"
                },
                {
                    "alg": "SHA-512",
                    "content": "98ef238bbdd93e0dc18928e5d876cb3f264f2d1808cd6dc5eda3fca2f3a20b2dd53d5872b413a261ca9e0ff2726cd5b067ea14921eddc3e5c8e9d73b570b3133"
                },
                {
                    "alg": "SHA-384",
                    "content": "c482fe5793c29646104f72b52838f8fd674d1a0b5428f07e7f4204d05a8ea373946a014e172c0f56e44e36800ac633be"
                },
                {
                    "alg": "SHA3-384",
                    "content": "64f0325baa1a8e16729f6b98722904a3ae9c066e6393cf38eeb01138e8594253aa819798c5dd2f484c7344cc57d16a11"
                },
                {
                    "alg": "SHA3-256",
                    "content": "fb3692482e597d06305b67fc60ca0d1f5eafce6e74b4bdfebba0acd06108d897"
                },
                {
                    "alg": "SHA3-512",
                    "content": "2a118e5d9129545fcf17675704ec3429f88beb015ca7d161d2488d81d3b29c5000ce41d4997204dd915ff5ea41dc5dfa013df636e1197d9c3b0cc6835089e9c7"
                }
            ],
            "licenses": [
                {
                    "expression": "BSD-3-Clause",
                    "acknowledgement": "concluded"
                }
            ],
            "purl": "pkg:maven/org.owasp.encoder/encoder@1.3.1?type=jar",
            "modified": false,
            "supplier": {
                "name": "OWASP Foundation",
                "url": [
                    "https://owasp.org/www-project-java-encoder/"
                ]
            },
            "manufacturer": {
                "name": "OWASP Foundation",
                "url": [
                    "https://owasp.org/www-project-java-encoder/"
                ]
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "pkg:maven/org.owasp.encoder/encoder@1.3.1?type=jar",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "98ef238bbdd93e0dc18928e5d876cb3f264f2d1808cd6dc5eda3fca2f3a20b2dd53d5872b413a261ca9e0ff2726cd5b067ea14921eddc3e5c8e9d73b570b3133"
                        }
                    ]
                }
            ],
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "encoder-1.3.1.jar"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "structured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1?type=jar",
            "publisher": "fasterxml.com",
            "group": "org.codehaus.woodstox",
            "name": "stax2-api",
            "version": "4.2.1",
            "description": "tax2 API is an extension to basic Stax 1.0 API that adds significant new functionality, such as full-featured bi-direction validation interface and high-performance Typed Access API.",
            "hashes": [
                {
                    "alg": "MD5",
                    "content": "af8377bc7882332e22456616a9f164f6"
                },
                {
                    "alg": "SHA-1",
                    "content": "a3f7325c52240418c2ba257b103c3c550e140c83"
                },
                {
                    "alg": "SHA-256",
                    "content": "678567e48b51a42c65c699f266539ad3d676d4b1a5b0ad7d89ece8b9d5772579"
                },
                {
                    "alg": "SHA-512",
                    "content": "00efc5d4d17540fb180c5b20d456630a8b3262dff46676689ae916ba16f0fbd9b1a71c7badfb254faad6597f94fed1edb96f77c15f40178eaf4d8cd35cea5e8d"
                },
                {
                    "alg": "SHA-384",
                    "content": "97a6a9f0cc666776e4a4f08729c303d2a602ce5c25ee633cd6c54c72f12d11e9d43634ca6ca4ef7da5973a52030384da"
                },
                {
                    "alg": "SHA3-384",
                    "content": "683a1f110ab84333e7517dabe175b91d7ea2fbead2f9d02acf798c588a7508bc67580642afa8d57441bc56ce610d5b0f"
                },
                {
                    "alg": "SHA3-256",
                    "content": "5e8e54209fb6b580e928e703ef11645aff1a21dfd47cca2dc0e53d0befaef09c"
                },
                {
                    "alg": "SHA3-512",
                    "content": "d79338a481605c94e144c967cb7adbc6cfd06ee6a1182b5ebc8cd8ad3deedd707931e404aa197bc94d3b5a5d82a2e6dd6a2f6cc9dafc42ce3ad5061076b05199"
                }
            ],
            "licenses": [
                {
                    "expression": "BSD-4-Clause",
                    "acknowledgement": "concluded"
                }
            ],
            "purl": "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1?type=jar",
            "modified": false,
            "externalReferences": [
                {
                    "type": "website",
                    "url": "http://fasterxml.com"
                },
                {
                    "type": "vcs",
                    "url": "http://github.com/FasterXML/stax2-api"
                },
                {
                    "type": "distribution",
                    "url": "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1?type=jar",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "00efc5d4d17540fb180c5b20d456630a8b3262dff46676689ae916ba16f0fbd9b1a71c7badfb254faad6597f94fed1edb96f77c15f40178eaf4d8cd35cea5e8d"
                        }
                    ]
                }
            ],
            "supplier": {
                "name": "FasterXML, LLC",
                "url": [
                    "https://github.com/FasterXML/stax2-api"
                ]
            },
            "manufacturer": {
                "name": "FasterXML, LLC",
                "url": [
                    "https://github.com/FasterXML/stax2-api"
                ]
            },
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "stax2-api-4.2.1.jar"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "structured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/com.github.librepdf/openpdf@1.3.30.jaspersoft.2?type=jar",
            "group": "com.github.librepdf",
            "name": "openpdf",
            "version": "1.3.30.jaspersoft.2",
            "hashes": [
                {
                    "alg": "MD5",
                    "content": "71e298f9eeb2df0edab3dbe34064ba87"
                },
                {
                    "alg": "SHA-1",
                    "content": "d78a17a6e9c09c18a0f7787f8d3f4bccabf3fc12"
                },
                {
                    "alg": "SHA-256",
                    "content": "3d69dce074ee5b0b995d526c47f8c5281ceb83144ebaab5c52b66cf98655df06"
                },
                {
                    "alg": "SHA-512",
                    "content": "02f0f908099e5f8162c63934ca9baa57305b14cbf3ef93e3de5ad6c9acb6fda98d796f216197cd238a3cb4e7cd765a40720fe9a8d90282dde4b3210d30e4c4d3"
                },
                {
                    "alg": "SHA-384",
                    "content": "a486b40434eb69931041ac733051ba2fe7b095a8f671930d2ec77fc2fed4eef200cab2fdc605bcf3b6ae9f48d4958b8e"
                },
                {
                    "alg": "SHA3-384",
                    "content": "eea346c17dda36f1adb5f8c1af9cdffa644f68346cd03306e2f2b8dc14cf102b1c51e97fff30508690bcf8290ab7a92c"
                },
                {
                    "alg": "SHA3-256",
                    "content": "62babf8d804d2567e9fce0c1ea403e0ba8c976e18ed72dd1191543bca8e2ca02"
                },
                {
                    "alg": "SHA3-512",
                    "content": "ad2bd48080273d92bddd30474dcc49f5d0a98ab0550aea26b267edeb0660014a3e6246e3dbc2756860ff3058191c3f35f51cba83a70b891fea15c04f43dbaf8b"
                }
            ],
            "purl": "pkg:maven/com.github.librepdf/openpdf@1.3.30.jaspersoft.2?type=jar",
            "modified": false,
            "supplier": {
                "name": "LibrePDF",
                "url": [
                    "https://github.com/LibrePDF/OpenPDF"
                ]
            },
            "manufacturer": {
                "name": "LibrePDF",
                "url": [
                    "https://github.com/LibrePDF/OpenPDF"
                ]
            },
            "licenses": [
                {
                    "expression": "LGPL-2.1-only OR MPL-2.0",
                    "acknowledgement": "concluded"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "pkg:maven/com.github.librepdf/openpdf@1.3.30.jaspersoft.2?type=jar",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "02f0f908099e5f8162c63934ca9baa57305b14cbf3ef93e3de5ad6c9acb6fda98d796f216197cd238a3cb4e7cd765a40720fe9a8d90282dde4b3210d30e4c4d3"
                        }
                    ]
                }
            ],
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "openpdf-1.3.30.jaspersoft.2.jar"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "structured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/org.javassist/javassist@3.29.2-GA?type=jar",
            "publisher": "Shigeru Chiba, www.javassist.org",
            "group": "org.javassist",
            "name": "javassist",
            "version": "3.29.2-GA",
            "description": "Javassist (JAVA programming ASSISTant) makes Java bytecode manipulation simple. It is a class library for editing bytecodes in Java.",
            "hashes": [
                {
                    "alg": "MD5",
                    "content": "9783c90ffa4d36eddda9526fde06f3ea"
                },
                {
                    "alg": "SHA-1",
                    "content": "6c32028609e5dd4a1b78e10fbcd122b09b3928b1"
                },
                {
                    "alg": "SHA-256",
                    "content": "a90ddb25135df9e57ea9bd4e224e219554929758f9bae9965f29f81d60a3293f"
                },
                {
                    "alg": "SHA-512",
                    "content": "5f9e939a0c094e2c4d4b8509c126fcb9033ea47c2577e172b2326c8aceb86b5bc3168d056b3d986c7bb3d3f46ed6fed3155c77734afcbb8cb75162df0375a657"
                },
                {
                    "alg": "SHA-384",
                    "content": "8b1f8b7235a7aeab500bcff13b5f88fe95df983502975021ac7d5edd0c73d708f65da48796f5680f2ef710fed9d0e0aa"
                },
                {
                    "alg": "SHA3-384",
                    "content": "d7944350dfa3808264a93445efedbab2645807d533b8cd9e95540e94ae38c6b7aafa6e29d1cbba669b67dda69881814e"
                },
                {
                    "alg": "SHA3-256",
                    "content": "a87df212cdfc24f3075ac8d4dec52cc9bd16446ec489706f60939aaf196fef50"
                },
                {
                    "alg": "SHA3-512",
                    "content": "9fffcb716b656fff4ad299ca4ef1b11166016a4bbe6c97317c894ca3163136ec1dbae62cc46a9f8a945cc6592ab930dccf8e0261f0a89025b0a8380fdc96e8b2"
                }
            ],
            "licenses": [
                {
                    "expression": "MPL-1.1 OR LGPL-2.1-only OR Apache-2.0",
                    "acknowledgement": "concluded"
                }
            ],
            "purl": "pkg:maven/org.javassist/javassist@3.29.2-GA?type=jar",
            "modified": false,
            "externalReferences": [
                {
                    "type": "issue-tracker",
                    "url": "https://jira.jboss.org/jira/browse/JASSIST/"
                },
                {
                    "type": "vcs",
                    "url": "scm:git:git@github.com:jboss-javassist/javassist.git"
                },
                {
                    "type": "distribution",
                    "url": "pkg:maven/org.javassist/javassist@3.29.2-GA?type=jar",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "5f9e939a0c094e2c4d4b8509c126fcb9033ea47c2577e172b2326c8aceb86b5bc3168d056b3d986c7bb3d3f46ed6fed3155c77734afcbb8cb75162df0375a657"
                        }
                    ]
                }
            ],
            "supplier": {
                "name": "Shigeru Chiba",
                "url": [
                    "https://www.javassist.org"
                ]
            },
            "manufacturer": {
                "name": "Shigeru Chiba",
                "url": [
                    "https://www.javassist.org"
                ]
            },
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "javassist-3.29.2-GA.jar"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "structured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/org.reflections/reflections@0.10.2?type=jar",
            "group": "org.reflections",
            "name": "reflections",
            "version": "0.10.2",
            "description": "Reflections - Java runtime metadata analysis",
            "hashes": [
                {
                    "alg": "MD5",
                    "content": "1d0070839d825f57fe6f4d8e2a82989b"
                },
                {
                    "alg": "SHA-1",
                    "content": "b638d7ca0e0fe0146b60a0e7ba232ad852a73b31"
                },
                {
                    "alg": "SHA-256",
                    "content": "938a2d08fe54050d7610b944d8ddc3a09355710d9e6be0aac838dbc04e9a2825"
                },
                {
                    "alg": "SHA-512",
                    "content": "d04700d4b6d3f28faa611e10ce863df1d6c82dfc6dd1b27cb910e44c19089ca08bef939e2bca7bc79274836f8e9d8801c4326232d24a38dba0a4893a20c7c42c"
                },
                {
                    "alg": "SHA-384",
                    "content": "2604ea7e2330b2c60dbc4177076b50b28a056083fe34cca9005b63f7efbba4d8513d1f21b56c296a73292b2003ce1722"
                },
                {
                    "alg": "SHA3-384",
                    "content": "7b5b12126cc3efb23335cdf73e01b19d714c17072038dc03534f1f596f2cdbe4b8d224e806326b1e7bd82a1eaf221a54"
                },
                {
                    "alg": "SHA3-256",
                    "content": "b1c978e8eb1bc3826d310deba7adfd02f0a90978dcd67867aa3f373a196e4caf"
                },
                {
                    "alg": "SHA3-512",
                    "content": "023c9a40f84b7f822f6d62f6a6ea3fc09ebcd489916085cb501818cd2c6af69e2561b2217c6d5d2cb8d99d87399343df2f863aa919e80d0a49502a5362f8744c"
                }
            ],
            "licenses": [
                {
                    "expression": "WTFPL OR Apache-2.0",
                    "acknowledgement": "concluded"
                }
            ],
            "purl": "pkg:maven/org.reflections/reflections@0.10.2?type=jar",
            "modified": false,
            "externalReferences": [
                {
                    "type": "issue-tracker",
                    "url": "https://github.com/ronmamo/reflections/issues"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/ronmamo/reflections/issues"
                },
                {
                    "type": "distribution",
                    "url": "pkg:maven/org.reflections/reflections@0.10.2?type=jar",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "d04700d4b6d3f28faa611e10ce863df1d6c82dfc6dd1b27cb910e44c19089ca08bef939e2bca7bc79274836f8e9d8801c4326232d24a38dba0a4893a20c7c42c"
                        }
                    ]
                }
            ],
            "supplier": {
                "name": "Reflections",
                "url": [
                    "https://github.com/ronmamo/reflections"
                ]
            },
            "manufacturer": {
                "name": "Reflections",
                "url": [
                    "https://github.com/ronmamo/reflections"
                ]
            },
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "reflections-0.10.2.jar"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "structured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/org.zkoss.common/zel@11.0.0-jakarta.FL.20261111-Eval?type=jar",
            "group": "org.zkoss.common",
            "name": "zel",
            "version": "11.0.0-jakarta.FL.20261111-Eval",
            "hashes": [
                {
                    "alg": "MD5",
                    "content": "88b3fe4ca7068c7ece27fe2c9bb89c54"
                },
                {
                    "alg": "SHA-1",
                    "content": "5a87ff491258b02255878291fa5cc27a92aef088"
                },
                {
                    "alg": "SHA-256",
                    "content": "827dcf074104b3925f40c0d9b7267ecac56dd6be6713cab9bd6990f93fbc2e4e"
                },
                {
                    "alg": "SHA-512",
                    "content": "dd870cd20dffff35d15181f6ec5d587aa52bae7fed9f424b4abf47a0e24324a00c342e7c574cca7200e3f54bd3f6690700b22bdcb0389fe14f32d63d5ebe26af"
                },
                {
                    "alg": "SHA-384",
                    "content": "496bc55f71c21bc2d81597250bc1b84fb4e70ddb4c33c398c861d94717e19cda5e795e360837811335c7474835c9717e"
                },
                {
                    "alg": "SHA3-384",
                    "content": "5eb5af633a8fa7381862e1bb41061ba7a9d471fb266631ff2c9470d8b5a0097b9ecb6c09a4775184b5f73059ccf8befa"
                },
                {
                    "alg": "SHA3-256",
                    "content": "cd68a0ee25a9b2946253042c901c47fe80b0220c51bf3d38909f4f8f03a9d551"
                },
                {
                    "alg": "SHA3-512",
                    "content": "882b32855100d34231854e280307f41ec3d452b4f6875461e2f3f4d0ab517b1fe9e2ec28d2a485d8903f1ea19e6edff613eaa7c7bfc18e4dccac806c94257241"
                }
            ],
            "purl": "pkg:maven/org.zkoss.common/zel@11.0.0-jakarta.FL.20261111-Eval?type=jar",
            "modified": false,
            "supplier": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "manufacturer": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "licenses": [
                {
                    "expression": "Apache-2.0",
                    "acknowledgement": "concluded"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "pkg:maven/org.zkoss.common/zel@11.0.0-jakarta.FL.20261111-Eval?type=jar",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "dd870cd20dffff35d15181f6ec5d587aa52bae7fed9f424b4abf47a0e24324a00c342e7c574cca7200e3f54bd3f6690700b22bdcb0389fe14f32d63d5ebe26af"
                        }
                    ]
                }
            ],
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "zel-11.0.0-jakarta.FL.20261111-Eval.jar"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "structured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/commons-logging/commons-logging@1.0.3?type=jar",
            "group": "commons-logging",
            "name": "commons-logging",
            "version": "1.0.3",
            "description": "Commons Logging",
            "hashes": [
                {
                    "alg": "MD5",
                    "content": "5bc8bdd15b18018e84fd862993aaca42"
                },
                {
                    "alg": "SHA-1",
                    "content": "760c711c71588bc273d3e56d196d720a7678cd93"
                },
                {
                    "alg": "SHA-256",
                    "content": "bcfa023daea8525d6db029ea82e8f58dbf1a06006db6526d9f984dbf215d8a75"
                },
                {
                    "alg": "SHA-512",
                    "content": "0ea5efb79865fd978c4075e381f35229ad938b2860eda8c506ee98c5615ecddffbea1173ea7a130dbfbadbbed8f9a425e5c19fa62b5a2b98144921a7992737b3"
                },
                {
                    "alg": "SHA-384",
                    "content": "bf1f5643aa7d1c1c3d60775aa77e88d5073f2e48e04aac27c2ccfe2312244ca17649a2f238145c119fb5523204516815"
                },
                {
                    "alg": "SHA3-384",
                    "content": "0595697cea906ee89e2607af278a8d93b75d38414fceb2739a40338c7b18e9e4684f736c55fc094778603cf4c52b8ade"
                },
                {
                    "alg": "SHA3-256",
                    "content": "f291115a0eaa02879dfb0cfb31a697b5dfd374cca62a578b609ddfc1b2fb9d63"
                },
                {
                    "alg": "SHA3-512",
                    "content": "1238b9bda3666c0ca07e9bfd988196e247913581bb243bf768495633d1bf9caa4cffe47d35f64ea48120e9ddabfcb4f066f4246c5ea4875e1906a0c83a63e7b2"
                }
            ],
            "purl": "pkg:maven/commons-logging/commons-logging@1.0.3?type=jar",
            "modified": false,
            "supplier": {
                "name": "The Apache Software Foundation",
                "url": [
                    "https://www.apache.org"
                ]
            },
            "manufacturer": {
                "name": "The Apache Software Foundation",
                "url": [
                    "https://www.apache.org"
                ]
            },
            "licenses": [
                {
                    "expression": "Apache-1.1",
                    "acknowledgement": "concluded"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "pkg:maven/commons-logging/commons-logging@1.0.3?type=jar",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "0ea5efb79865fd978c4075e381f35229ad938b2860eda8c506ee98c5615ecddffbea1173ea7a130dbfbadbbed8f9a425e5c19fa62b5a2b98144921a7992737b3"
                        }
                    ]
                }
            ],
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "commons-logging-1.0.3.jar"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "structured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar",
            "group": "com.google.guava",
            "name": "listenablefuture",
            "version": "9999.0-empty-to-avoid-conflict-with-guava",
            "description": "An empty artifact that Guava depends on to signal that it is providing ListenableFuture -- but is also available in a second \"version\" that contains com.google.common.util.concurrent.ListenableFuture class, without any other Guava classes. The idea is: - If users want only ListenableFuture, they depend on listenablefuture-1.0. - If users want all of Guava, they depend on guava, which, as of Guava 27.0, depends on listenablefuture-9999.0-empty-to-avoid-conflict-with-guava. The 9999.0-... version number is enough for some build systems (notably, Gradle) to select that empty artifact over the \"real\" listenablefuture-1.0 -- avoiding a conflict with the copy of ListenableFuture in guava itself. If users are using an older version of Guava or a build system other than Gradle, they may see class conflicts. If so, they can solve them by manually excluding the listenablefuture artifact or manually forcing their build systems to use 9999.0-....",
            "hashes": [
                {
                    "alg": "MD5",
                    "content": "d094c22570d65e132c19cea5d352e381"
                },
                {
                    "alg": "SHA-1",
                    "content": "b421526c5f297295adef1c886e5246c39d4ac629"
                },
                {
                    "alg": "SHA-256",
                    "content": "b372a037d4230aa57fbeffdef30fd6123f9c0c2db85d0aced00c91b974f33f99"
                },
                {
                    "alg": "SHA-512",
                    "content": "c5987a979174cbacae2e78b319f080420cc71bcdbcf7893745731eeb93c23ed13bff8d4599441f373f3a246023d33df03e882de3015ee932a74a774afdd0782f"
                },
                {
                    "alg": "SHA-384",
                    "content": "caff9b74079f95832ca7f6029346b34b606051cc8c5a4389fac263511d277ada0c55f28b0d43011055b268c6eb7184d5"
                },
                {
                    "alg": "SHA3-384",
                    "content": "e939f08df0545847ea0d3e4b04a114b08499ad069ba8ec9461d1779f87a56e0c37273630a0f4c14e78c348d3ac7eb97f"
                },
                {
                    "alg": "SHA3-256",
                    "content": "1f0a8b1177773b3a8ace839df5eed63cbf56b24a38714898a6e4ed065c42559f"
                },
                {
                    "alg": "SHA3-512",
                    "content": "6b495ecc2a18b17365cb08d124a0da47f04bcdde81927b5245edf3edd8e498c3c3fb92ce6a4127f660bac851bb1d3e4510e5c20d03be47ce99dc296d360db285"
                }
            ],
            "licenses": [
                {
                    "expression": "Apache-2.0",
                    "acknowledgement": "concluded"
                }
            ],
            "purl": "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar",
            "modified": false,
            "supplier": {
                "name": "Google LLC",
                "url": [
                    "https://opensource.google"
                ]
            },
            "manufacturer": {
                "name": "Google LLC",
                "url": [
                    "https://opensource.google"
                ]
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "c5987a979174cbacae2e78b319f080420cc71bcdbcf7893745731eeb93c23ed13bff8d4599441f373f3a246023d33df03e882de3015ee932a74a774afdd0782f"
                        }
                    ]
                }
            ],
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "listenablefuture-9999.0-empty-to-avoid-conflict-with-guava.jar"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "structured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/org.jspecify/jspecify@1.0.1?type=jar",
            "group": "org.jspecify",
            "name": "jspecify",
            "version": "1.0.1",
            "description": "An artifact of well-named and well-specified annotations to power static analysis checks",
            "hashes": [
                {
                    "alg": "MD5",
                    "content": "d4fe1ea4d953b66fcb1d6043c22bffcf"
                },
                {
                    "alg": "SHA-1",
                    "content": "3d60fd98eb8ade73004f4195c37b6317e02cf3d7"
                },
                {
                    "alg": "SHA-256",
                    "content": "070d75f261fe4c5b8202508366715f7f2d4660f88c8ef7e6d3575e48c9683b66"
                },
                {
                    "alg": "SHA-512",
                    "content": "8f5ca6f5c25ee353bfbe3e5e5cd9847b3b3ed1e954a14a52c9aa016c673e02bfbc2e0f9308ad576c2a58720f8bf2139ad9883c7a881050fe96a2f87e2e623711"
                },
                {
                    "alg": "SHA-384",
                    "content": "f7c6aea402675ed6d9286e6107d4bf6c2d1f757f9fce4c74807cbd43d426569324cf4c7faed28dc777e90ddb3a63db68"
                },
                {
                    "alg": "SHA3-384",
                    "content": "d462ead4749cc7b404b1699aedf472664e9bb38db769f2ec78a6457d2d080602f673af8b3114724dd92ee2262f464c41"
                },
                {
                    "alg": "SHA3-256",
                    "content": "f9392a7b674c37a7617d7e5ab4a6197c235c0a036244eaf550291d6756c0f1c9"
                },
                {
                    "alg": "SHA3-512",
                    "content": "3154b4940937103d74b77eede7abc7034168dc986284ef00ab4e4d5b537ed6370c6856787ae50711e62906b3011243c9a656b659ddd025c1e6b828c44b980855"
                }
            ],
            "licenses": [
                {
                    "expression": "Apache-2.0",
                    "acknowledgement": "concluded"
                }
            ],
            "purl": "pkg:maven/org.jspecify/jspecify@1.0.1?type=jar",
            "modified": false,
            "externalReferences": [
                {
                    "type": "vcs",
                    "url": "https://github.com/jspecify/jspecify/"
                },
                {
                    "type": "distribution",
                    "url": "pkg:maven/org.jspecify/jspecify@1.0.1?type=jar",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "8f5ca6f5c25ee353bfbe3e5e5cd9847b3b3ed1e954a14a52c9aa016c673e02bfbc2e0f9308ad576c2a58720f8bf2139ad9883c7a881050fe96a2f87e2e623711"
                        }
                    ]
                }
            ],
            "supplier": {
                "name": "JSpecify",
                "url": [
                    "https://jspecify.dev"
                ]
            },
            "manufacturer": {
                "name": "JSpecify",
                "url": [
                    "https://jspecify.dev"
                ]
            },
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "jspecify-1.0.1.jar"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "structured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/commons-logging/commons-logging@1.2?type=jar",
            "group": "commons-logging",
            "name": "commons-logging",
            "version": "1.2",
            "description": "Apache Commons Logging is a thin adapter allowing configurable bridging to other, well known logging systems.",
            "hashes": [
                {
                    "alg": "MD5",
                    "content": "040b4b4d8eac886f6b4a2a3bd2f31b00"
                },
                {
                    "alg": "SHA-1",
                    "content": "4bfc12adfe4842bf07b657f0369c4cb522955686"
                },
                {
                    "alg": "SHA-256",
                    "content": "daddea1ea0be0f56978ab3006b8ac92834afeefbd9b7e4e6316fca57df0fa636"
                },
                {
                    "alg": "SHA-512",
                    "content": "ed00dbfabd9ae00efa26dd400983601d076fe36408b7d6520084b447e5d1fa527ce65bd6afdcb58506c3a808323d28e88f26cb99c6f5db9ff64f6525ecdfa557"
                },
                {
                    "alg": "SHA-384",
                    "content": "ac20720d7156131478205f1b454395abf84cfc8da2f163301af32f63bd3c4764bd26cb54ed53800f33193ae591f3ce9c"
                },
                {
                    "alg": "SHA3-384",
                    "content": "628eb4407e95dca84da1a06b08a6d9b832a49de8472b1b217e8607f08efeeed18b996232d64dd07f03e78e0e3bb4b078"
                },
                {
                    "alg": "SHA3-256",
                    "content": "9aab62deccf156ee6e324c925dfc30ecb53e8465802863a551901a461424e807"
                },
                {
                    "alg": "SHA3-512",
                    "content": "3fd76857f6d20c03799537cc961c1c4ddf1c375c6c192fb982363e3b9397ba138b77f24ef38b4202f44e37586789c0320e4de18fdadd2772304fd14a9b26d552"
                }
            ],
            "licenses": [
                {
                    "expression": "Apache-2.0",
                    "acknowledgement": "concluded"
                }
            ],
            "purl": "pkg:maven/commons-logging/commons-logging@1.2?type=jar",
            "modified": false,
            "externalReferences": [
                {
                    "type": "issue-tracker",
                    "url": "http://issues.apache.org/jira/browse/LOGGING"
                },
                {
                    "type": "vcs",
                    "url": "http://svn.apache.org/repos/asf/commons/proper/logging/trunk"
                },
                {
                    "type": "distribution",
                    "url": "pkg:maven/commons-logging/commons-logging@1.2?type=jar",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "ed00dbfabd9ae00efa26dd400983601d076fe36408b7d6520084b447e5d1fa527ce65bd6afdcb58506c3a808323d28e88f26cb99c6f5db9ff64f6525ecdfa557"
                        }
                    ]
                }
            ],
            "supplier": {
                "name": "The Apache Software Foundation",
                "url": [
                    "https://www.apache.org"
                ]
            },
            "manufacturer": {
                "name": "The Apache Software Foundation",
                "url": [
                    "https://www.apache.org"
                ]
            },
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "commons-logging-1.2.jar"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "structured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/com.google.code.gson/gson@2.10.1?type=jar",
            "group": "com.google.code.gson",
            "name": "gson",
            "version": "2.10.1",
            "hashes": [
                {
                    "alg": "MD5",
                    "content": "df6097815738cb31fc56391553210843"
                },
                {
                    "alg": "SHA-1",
                    "content": "b3add478d4382b78ea20b1671390a858002feb6c"
                },
                {
                    "alg": "SHA-256",
                    "content": "4241c14a7727c34feea6507ec801318a3d4a90f070e4525681079fb94ee4c593"
                },
                {
                    "alg": "SHA-512",
                    "content": "7503e4b8d05c6cc0ecb3a94c5a2e070e049083a441003a79a0cdf474f4286699b4ba1d2a655ddabb8ba10c50e7c36a7045cccdaee465166d4630db647aba2727"
                },
                {
                    "alg": "SHA-384",
                    "content": "48a4786bd6e1867f058ee4fb676fc82d9d9f64a6d7420d4a47ae2398504c9de73222636614aeb4a9fbf10ee143d72226"
                },
                {
                    "alg": "SHA3-384",
                    "content": "3df9a0332c2766124fe7c915cfea665d2e318ccaa7212415fabd9e93e6eb77de538725fd2ef313cde46f6d814c9566ea"
                },
                {
                    "alg": "SHA3-256",
                    "content": "d3374006d76d4f9acdf3d3a1a4f47899570f52442b2188f80c09a74f22139ecb"
                },
                {
                    "alg": "SHA3-512",
                    "content": "2b10c2f4fe39d8712b430ff171823d7172c0a06685c1eb7de511e90159cec0e094fb2a9b50b747c5b039cb10f1fce9edf82ecbf9c47f76a6f31c4e3cb7586cce"
                }
            ],
            "licenses": [
                {
                    "expression": "Apache-2.0",
                    "acknowledgement": "concluded"
                }
            ],
            "purl": "pkg:maven/com.google.code.gson/gson@2.10.1?type=jar",
            "modified": false,
            "supplier": {
                "name": "Google LLC",
                "url": [
                    "https://opensource.google"
                ]
            },
            "manufacturer": {
                "name": "Google LLC",
                "url": [
                    "https://opensource.google"
                ]
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "pkg:maven/com.google.code.gson/gson@2.10.1?type=jar",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "7503e4b8d05c6cc0ecb3a94c5a2e070e049083a441003a79a0cdf474f4286699b4ba1d2a655ddabb8ba10c50e7c36a7045cccdaee465166d4630db647aba2727"
                        }
                    ]
                }
            ],
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "gson-2.10.1.jar"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "structured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/com.google.guava/guava@33.7.2-jre?type=jar",
            "group": "com.google.guava",
            "name": "guava",
            "version": "33.7.2-jre",
            "description": "Guava is a suite of core and expanded libraries that include utility classes, Google's collections, I/O classes, and much more.",
            "hashes": [
                {
                    "alg": "MD5",
                    "content": "b07f61705f717d9ae7946c7fdb1efd7a"
                },
                {
                    "alg": "SHA-1",
                    "content": "e70def5b06cfb109ea050de99870e79c8ce80dbc"
                },
                {
                    "alg": "SHA-256",
                    "content": "b530942257fb935f8b2cfaa5f8eb5bd59c555fd8e8d01b8ce98912e077ea606c"
                },
                {
                    "alg": "SHA-512",
                    "content": "bd663dc02f2293a552d82829518435b8cfcd77b7c73eeb638aef93918ef7613ad2a869003b09d1afb4446fa74308041daa7a6aea85c1bedb17db1f5f0c2c5c0b"
                },
                {
                    "alg": "SHA-384",
                    "content": "7c1d8db6504620e2feb70d56e4bffb479e5ba292c1d911da060cb66f2ac3d4050c718a72e6cfd6c82a36fd840c499942"
                },
                {
                    "alg": "SHA3-384",
                    "content": "13dcb7e8318a75368b33e1abc3a5b9b674bed950d6cfe1e7ca8be8f42f642816e69ae5d39d5ddbe998fe2c9acbf6ee28"
                },
                {
                    "alg": "SHA3-256",
                    "content": "adee2b0b99a4777a1fb04eb1a26d6b44aa47457c850dbf43d743d17801615c18"
                },
                {
                    "alg": "SHA3-512",
                    "content": "5bff0e702aaa6bfbf3fdd8fb963b6242d5dbecd8b7601afc0bfe158314887352d48c79c4ef9e256a0510474ac39493c59ca277bd1989a04705a723c6045fe4b7"
                }
            ],
            "licenses": [
                {
                    "expression": "Apache-2.0",
                    "acknowledgement": "concluded"
                }
            ],
            "purl": "pkg:maven/com.google.guava/guava@33.7.2-jre?type=jar",
            "modified": false,
            "supplier": {
                "name": "Google LLC",
                "url": [
                    "https://opensource.google"
                ]
            },
            "manufacturer": {
                "name": "Google LLC",
                "url": [
                    "https://opensource.google"
                ]
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "pkg:maven/com.google.guava/guava@33.7.2-jre?type=jar",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "bd663dc02f2293a552d82829518435b8cfcd77b7c73eeb638aef93918ef7613ad2a869003b09d1afb4446fa74308041daa7a6aea85c1bedb17db1f5f0c2c5c0b"
                        }
                    ]
                }
            ],
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "guava-33.7.2-jre.jar"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "structured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/com.fasterxml.woodstox/woodstox-core@6.4.0?type=jar",
            "publisher": "FasterXML",
            "group": "com.fasterxml.woodstox",
            "name": "woodstox-core",
            "version": "6.4.0",
            "description": "Woodstox is a high-performance XML processor that implements Stax (JSR-173), SAX2 and Stax2 APIs",
            "hashes": [
                {
                    "alg": "MD5",
                    "content": "afcba1114fca8199ef26346dd6011e90"
                },
                {
                    "alg": "SHA-1",
                    "content": "c47579857bbf12c85499f431d4ecf27d77976b7c"
                },
                {
                    "alg": "SHA-256",
                    "content": "d6eb9f2f40049a7a808baf11ffba0737648e62ff52fde9271d808e5d57a27279"
                },
                {
                    "alg": "SHA-512",
                    "content": "7da4cd51f7082e59b3cb78988cda78bf162e2b02457caf17242cb9cea9b8002ada15d4dfe774ca0355acdea95c88b67c4d06a27a61653cb84c9a46d27b2726c6"
                },
                {
                    "alg": "SHA-384",
                    "content": "6e25d32eb4c127f7129ccd912ff882625d3fa43e8eba9bc55013a27a61806d1b865ec809bd21d58d3dbfa3d9e2a3d516"
                },
                {
                    "alg": "SHA3-384",
                    "content": "d384bf82404b7642340eb1a3f88e2d1e366bf3282534943f98c5f4946656f7e6ea86ba6c7bfeed7c4fda1678afdd282e"
                },
                {
                    "alg": "SHA3-256",
                    "content": "7d1e5fbd3f4197fcf6f4d097bc742a0b3f02fe9ae36ef4385362afab6cc85bee"
                },
                {
                    "alg": "SHA3-512",
                    "content": "6020db3580dac2d5c0b7656a062b982d234952fc3feac5dfbb12f91bc019b6af430123ad46e5b5de28d7cb9562aec582febdbbfae8ce35ebc2ce0b837a335af6"
                }
            ],
            "licenses": [
                {
                    "expression": "Apache-2.0",
                    "acknowledgement": "concluded"
                }
            ],
            "purl": "pkg:maven/com.fasterxml.woodstox/woodstox-core@6.4.0?type=jar",
            "modified": false,
            "externalReferences": [
                {
                    "type": "website",
                    "url": "http://fasterxml.com"
                },
                {
                    "type": "issue-tracker",
                    "url": "https://github.com/FasterXML/woodstox/issues"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/FasterXML/woodstox"
                },
                {
                    "type": "distribution",
                    "url": "pkg:maven/com.fasterxml.woodstox/woodstox-core@6.4.0?type=jar",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "7da4cd51f7082e59b3cb78988cda78bf162e2b02457caf17242cb9cea9b8002ada15d4dfe774ca0355acdea95c88b67c4d06a27a61653cb84c9a46d27b2726c6"
                        }
                    ]
                }
            ],
            "supplier": {
                "name": "FasterXML, LLC",
                "url": [
                    "https://github.com/FasterXML"
                ]
            },
            "manufacturer": {
                "name": "FasterXML, LLC",
                "url": [
                    "https://github.com/FasterXML"
                ]
            },
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "woodstox-core-6.4.0.jar"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "structured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:npm/spel2js@0.2.8",
            "supplier": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "manufacturer": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "name": "spel2js",
            "version": "0.2.8",
            "purl": "pkg:npm/spel2js@0.2.8",
            "licenses": [
                {
                    "expression": "Apache-2.0",
                    "acknowledgement": "concluded"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "name": "spel2js",
                        "version": "0.2.8",
                        "purl": "pkg:npm/spel2js@0.2.8"
                    }
                ],
                "patches": [
                    {
                        "type": "unofficial"
                    }
                ],
                "notes": "Copy bundled in ZK and patched for it, maintained by Potix; keeps the upstream version so advisories still match"
            },
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "spel2js.js"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "9cf7c592cfedaf15070d6585474fe864e64365523a289ce756026035ca6e3369"
                },
                {
                    "alg": "SHA-512",
                    "content": "1823daef9fc4d290e0302efebbe37bae58a19552b6e666be49aab066adca5e2334d19bc6781c6bb9c26ab0c6eaa11b9c4ee46ddc4ce41aee3024cbbe98257c77"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "pkg:maven/org.zkoss.zk/client-bind@11.0.0-jakarta.FL.20261111-Eval?type=jar#web/js/clientbind/ext/spel2js.js",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "1823daef9fc4d290e0302efebbe37bae58a19552b6e666be49aab066adca5e2334d19bc6781c6bb9c26ab0c6eaa11b9c4ee46ddc4ce41aee3024cbbe98257c77"
                        }
                    ]
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:npm/mobx@6.6.1",
            "supplier": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "manufacturer": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "name": "mobx",
            "version": "6.6.1",
            "purl": "pkg:npm/mobx@6.6.1",
            "licenses": [
                {
                    "expression": "MIT",
                    "acknowledgement": "concluded"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "name": "mobx",
                        "version": "6.6.1",
                        "purl": "pkg:npm/mobx@6.6.1"
                    }
                ],
                "patches": [
                    {
                        "type": "unofficial"
                    }
                ],
                "notes": "Copy bundled in ZK and patched for it, maintained by Potix; keeps the upstream version so advisories still match"
            },
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "mobx.js"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "51db4ee9eadd1adca0aa33c7766ac68e632f3e0c02027be59533f02e372732c4"
                },
                {
                    "alg": "SHA-512",
                    "content": "a128757567f0408f9e68bb01f6812fd8f6a169affda3b25b380b1795debeee6262ea75724ea3c129ceff4acd9d27afab03e552b30230f2ea35b986adf008ca96"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "pkg:maven/org.zkoss.zk/client-bind@11.0.0-jakarta.FL.20261111-Eval?type=jar#web/js/clientbind/ext/mobx.js",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "a128757567f0408f9e68bb01f6812fd8f6a169affda3b25b380b1795debeee6262ea75724ea3c129ceff4acd9d27afab03e552b30230f2ea35b986adf008ca96"
                        }
                    ]
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:npm/zone.js@0.15.0",
            "supplier": {
                "name": "Google LLC",
                "url": [
                    "https://github.com/angular/angular"
                ]
            },
            "manufacturer": {
                "name": "Google LLC",
                "url": [
                    "https://github.com/angular/angular"
                ]
            },
            "name": "zone.js",
            "version": "0.15.0",
            "purl": "pkg:npm/zone.js@0.15.0",
            "licenses": [
                {
                    "expression": "MIT",
                    "acknowledgement": "concluded"
                }
            ],
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "zone.js"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "ea378eae6dc49f1d7913148f33849a09e0f533c1d53e9e30f04341cc70637e26"
                },
                {
                    "alg": "SHA-512",
                    "content": "c50860936b3c175e66cfaceff211ad335adb1d13e20cae0a7652258c61190de5c684fdeef4ae0b39881365303165183f8ef5c88e263b34e19d389ac57ec29546"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "pkg:maven/org.zkoss.zk/client-bind@11.0.0-jakarta.FL.20261111-Eval?type=jar#web/js/clientbind/ext/zone.js",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "c50860936b3c175e66cfaceff211ad335adb1d13e20cae0a7652258c61190de5c684fdeef4ae0b39881365303165183f8ef5c88e263b34e19d389ac57ec29546"
                        }
                    ]
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:github/benjiman/lambda-type-references",
            "supplier": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "manufacturer": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "name": "lambda-type-references",
            "version": "2024-05-22T16:34:40+08:00",
            "purl": "pkg:github/benjiman/lambda-type-references",
            "licenses": [
                {
                    "expression": "Apache-2.0",
                    "acknowledgement": "concluded"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "name": "lambda-type-references",
                        "purl": "pkg:github/benjiman/lambda-type-references",
                        "supplier": {
                            "name": "Benji Weber",
                            "url": [
                                "https://github.com/benjiman/lambda-type-references"
                            ]
                        }
                    }
                ],
                "patches": [
                    {
                        "type": "unofficial"
                    }
                ],
                "notes": "Copy bundled in ZK and patched for it, maintained by Potix"
            },
            "properties": [
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/apache/xml-schema-dtd",
            "supplier": {
                "name": "The Apache Software Foundation",
                "url": [
                    "https://www.apache.org"
                ]
            },
            "manufacturer": {
                "name": "The Apache Software Foundation",
                "url": [
                    "https://www.apache.org"
                ]
            },
            "name": "xml-schema-dtd",
            "version": "1.0",
            "purl": "pkg:generic/apache/xml-schema-dtd",
            "licenses": [
                {
                    "expression": "Apache-2.0",
                    "acknowledgement": "concluded"
                }
            ],
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "XMLSchema.dtd"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "non-executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "5ab6a0e0a2fe3ba27643ab9c8953a90b53a079a5e3702d1e90e4563534654087"
                },
                {
                    "alg": "SHA-512",
                    "content": "5aa7421da50d307becec7ebd0d5abe9c94aca2863e8afbb8773e066708459d95873748236a3603b6041b501d175c23c5fb19f8509529cf6f5a7875de8a8c370a"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "pkg:maven/org.zkoss.common/zcommon@11.0.0-jakarta.FL.20261111-Eval?type=jar#metainfo/xml/XMLSchema.dtd",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "5aa7421da50d307becec7ebd0d5abe9c94aca2863e8afbb8773e066708459d95873748236a3603b6041b501d175c23c5fb19f8509529cf6f5a7875de8a8c370a"
                        }
                    ]
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/org.zkoss.common/zcommon@11.0.0.FL.20261111?type=jar#metainfo/xml/datatypes.dtd",
            "supplier": {
                "name": "The Apache Software Foundation",
                "url": [
                    "https://www.apache.org"
                ]
            },
            "manufacturer": {
                "name": "The Apache Software Foundation",
                "url": [
                    "https://www.apache.org"
                ]
            },
            "name": "xml-schema-dtd",
            "version": "1.0",
            "purl": "pkg:generic/apache/xml-schema-dtd",
            "licenses": [
                {
                    "expression": "Apache-2.0",
                    "acknowledgement": "concluded"
                }
            ],
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "datatypes.dtd"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "non-executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "ec710bcaf10c273aa9a25bf1a315581f5d8c4ab4ae20b5b9a754e8b0accc3d4d"
                },
                {
                    "alg": "SHA-512",
                    "content": "19035a455f1c2599bd81b6d38deae9a05ad02d9f014e399ee4c7481c0c9e1a0ad26b985ebba55e1d35814ba5754abdcea4385ce146061e536195b08a18abbd99"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "pkg:maven/org.zkoss.common/zcommon@11.0.0-jakarta.FL.20261111-Eval?type=jar#metainfo/xml/datatypes.dtd",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "19035a455f1c2599bd81b6d38deae9a05ad02d9f014e399ee4c7481c0c9e1a0ad26b985ebba55e1d35814ba5754abdcea4385ce146061e536195b08a18abbd99"
                        }
                    ]
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/org.zkoss.common/zcommon@11.0.0.FL.20261111?type=jar#metainfo/xml/xml.xsd",
            "supplier": {
                "name": "The Apache Software Foundation",
                "url": [
                    "https://www.apache.org"
                ]
            },
            "manufacturer": {
                "name": "The Apache Software Foundation",
                "url": [
                    "https://www.apache.org"
                ]
            },
            "name": "xml-schema-dtd",
            "version": "1.0",
            "purl": "pkg:generic/apache/xml-schema-dtd",
            "licenses": [
                {
                    "expression": "Apache-2.0",
                    "acknowledgement": "concluded"
                }
            ],
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "xml.xsd"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "non-executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "916bf9bfdd32b5782b9a7154324ecf14d56ffdd5a6d41b255731132d84e3da7c"
                },
                {
                    "alg": "SHA-512",
                    "content": "79a1d1d552246a6cafc4a842e8061bfb4da256243c92c814daf997da943f04c3e60e6742833f418fc42e5b0e7322e91a5d7bc0dab713da76b908304d11a01401"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "pkg:maven/org.zkoss.common/zcommon@11.0.0-jakarta.FL.20261111-Eval?type=jar#metainfo/xml/xml.xsd",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "79a1d1d552246a6cafc4a842e8061bfb4da256243c92c814daf997da943f04c3e60e6742833f418fc42e5b0e7322e91a5d7bc0dab713da76b908304d11a01401"
                        }
                    ]
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/w3c/xhtml1-dtd",
            "supplier": {
                "name": "World Wide Web Consortium",
                "url": [
                    "https://www.w3.org"
                ]
            },
            "manufacturer": {
                "name": "World Wide Web Consortium",
                "url": [
                    "https://www.w3.org"
                ]
            },
            "name": "xhtml1-dtd",
            "version": "1.0",
            "purl": "pkg:generic/w3c/xhtml1-dtd",
            "licenses": [
                {
                    "expression": "W3C",
                    "acknowledgement": "concluded"
                }
            ],
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "xhtml1-strict.dtd"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "non-executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "56cd2441229d82e30fb936b98adae91dd5a72e96fa78e822aa7d7bc4f21da13c"
                },
                {
                    "alg": "SHA-512",
                    "content": "5d14b52c298b22cf5f21ce369b0fbb01ea578823cbf915b30b4a0cf8ff053164dbc4cf9e765429ceccff6f8fb4be4aa8ccfe3fa927e9bce9de72553c8f8b6cab"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "pkg:maven/org.zkoss.common/zcommon@11.0.0-jakarta.FL.20261111-Eval?type=jar#metainfo/xml/xhtml1-strict.dtd",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "5d14b52c298b22cf5f21ce369b0fbb01ea578823cbf915b30b4a0cf8ff053164dbc4cf9e765429ceccff6f8fb4be4aa8ccfe3fa927e9bce9de72553c8f8b6cab"
                        }
                    ]
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/org.zkoss.common/zcommon@11.0.0.FL.20261111?type=jar#metainfo/xml/xhtml1-transitional.dtd",
            "supplier": {
                "name": "World Wide Web Consortium",
                "url": [
                    "https://www.w3.org"
                ]
            },
            "manufacturer": {
                "name": "World Wide Web Consortium",
                "url": [
                    "https://www.w3.org"
                ]
            },
            "name": "xhtml1-dtd",
            "version": "1.0",
            "purl": "pkg:generic/w3c/xhtml1-dtd",
            "licenses": [
                {
                    "expression": "W3C",
                    "acknowledgement": "concluded"
                }
            ],
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "xhtml1-transitional.dtd"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "non-executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "c5c60018edeb3e007d86958bf03cef67b634c55c7986b0b5fe5946e489cd4058"
                },
                {
                    "alg": "SHA-512",
                    "content": "891be3ef202b2a565bcdcc488594373172b63eae58b4931a1247f0e2f939191ffc3dc248598a799347b0f627aae72c2c4ff4f349c7e52b4196a2f3c1e2a01d1d"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "pkg:maven/org.zkoss.common/zcommon@11.0.0-jakarta.FL.20261111-Eval?type=jar#metainfo/xml/xhtml1-transitional.dtd",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "891be3ef202b2a565bcdcc488594373172b63eae58b4931a1247f0e2f939191ffc3dc248598a799347b0f627aae72c2c4ff4f349c7e52b4196a2f3c1e2a01d1d"
                        }
                    ]
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/org.zkoss.common/zcommon@11.0.0.FL.20261111?type=jar#metainfo/xml/xhtml1-frameset.dtd",
            "supplier": {
                "name": "World Wide Web Consortium",
                "url": [
                    "https://www.w3.org"
                ]
            },
            "manufacturer": {
                "name": "World Wide Web Consortium",
                "url": [
                    "https://www.w3.org"
                ]
            },
            "name": "xhtml1-dtd",
            "version": "1.0",
            "purl": "pkg:generic/w3c/xhtml1-dtd",
            "licenses": [
                {
                    "expression": "W3C",
                    "acknowledgement": "concluded"
                }
            ],
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "xhtml1-frameset.dtd"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "non-executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "bd2a72b0060a0e4600d2c3b3c2a7d39e63981d46f9ac777715051777017c9aec"
                },
                {
                    "alg": "SHA-512",
                    "content": "5acaf56e0e943a8bada94e713b7e994e400b4704f0ef3631cc46885ad056d4db0a53cd43b6d1fc64d2fd1f4b7cd7cc1325b99ae9f024dc2cf7f522e4f21b4cf7"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "pkg:maven/org.zkoss.common/zcommon@11.0.0-jakarta.FL.20261111-Eval?type=jar#metainfo/xml/xhtml1-frameset.dtd",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "5acaf56e0e943a8bada94e713b7e994e400b4704f0ef3631cc46885ad056d4db0a53cd43b6d1fc64d2fd1f4b7cd7cc1325b99ae9f024dc2cf7f522e4f21b4cf7"
                        }
                    ]
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/org.zkoss.common/zcommon@11.0.0.FL.20261111?type=jar#metainfo/xml/xhtml-lat1.ent",
            "supplier": {
                "name": "World Wide Web Consortium",
                "url": [
                    "https://www.w3.org"
                ]
            },
            "manufacturer": {
                "name": "World Wide Web Consortium",
                "url": [
                    "https://www.w3.org"
                ]
            },
            "name": "xhtml1-dtd",
            "version": "1.0",
            "purl": "pkg:generic/w3c/xhtml1-dtd",
            "licenses": [
                {
                    "expression": "W3C",
                    "acknowledgement": "concluded"
                }
            ],
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "xhtml-lat1.ent"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "non-executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "3da1daad08f93b8aff7a32d5447f94853d517561d9c7d0c7bc3ee5c002d12a38"
                },
                {
                    "alg": "SHA-512",
                    "content": "cf87ff36a3a55e9aa5e6aaf7bff31df58fb7f809520f47b1974ed5c63adbc344376561521e7fcb731a07a1bd75f241fabd46f9338c8c58f3df14babcef8b2b90"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "pkg:maven/org.zkoss.common/zcommon@11.0.0-jakarta.FL.20261111-Eval?type=jar#metainfo/xml/xhtml-lat1.ent",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "cf87ff36a3a55e9aa5e6aaf7bff31df58fb7f809520f47b1974ed5c63adbc344376561521e7fcb731a07a1bd75f241fabd46f9338c8c58f3df14babcef8b2b90"
                        }
                    ]
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/org.zkoss.common/zcommon@11.0.0.FL.20261111?type=jar#metainfo/xml/xhtml-special.ent",
            "supplier": {
                "name": "World Wide Web Consortium",
                "url": [
                    "https://www.w3.org"
                ]
            },
            "manufacturer": {
                "name": "World Wide Web Consortium",
                "url": [
                    "https://www.w3.org"
                ]
            },
            "name": "xhtml1-dtd",
            "version": "1.0",
            "purl": "pkg:generic/w3c/xhtml1-dtd",
            "licenses": [
                {
                    "expression": "W3C",
                    "acknowledgement": "concluded"
                }
            ],
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "xhtml-special.ent"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "non-executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "7f9518026c59ccee47a02ed74e43f8946d92207d438a7f540a0f3c28f05fa27e"
                },
                {
                    "alg": "SHA-512",
                    "content": "488a69173b167e6bba1c27c0c67551a4812620e882db5370b59efa18f5ac1ba4bdee0e5689cb7080943abe5e72ec8daed369dde510115d59360a977438cbeeec"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "pkg:maven/org.zkoss.common/zcommon@11.0.0-jakarta.FL.20261111-Eval?type=jar#metainfo/xml/xhtml-special.ent",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "488a69173b167e6bba1c27c0c67551a4812620e882db5370b59efa18f5ac1ba4bdee0e5689cb7080943abe5e72ec8daed369dde510115d59360a977438cbeeec"
                        }
                    ]
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/org.zkoss.common/zcommon@11.0.0.FL.20261111?type=jar#metainfo/xml/xhtml-symbol.ent",
            "supplier": {
                "name": "World Wide Web Consortium",
                "url": [
                    "https://www.w3.org"
                ]
            },
            "manufacturer": {
                "name": "World Wide Web Consortium",
                "url": [
                    "https://www.w3.org"
                ]
            },
            "name": "xhtml1-dtd",
            "version": "1.0",
            "purl": "pkg:generic/w3c/xhtml1-dtd",
            "licenses": [
                {
                    "expression": "W3C",
                    "acknowledgement": "concluded"
                }
            ],
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "xhtml-symbol.ent"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "non-executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "a6cd0f9c59e488b8c8e2de80c31c6811f316a3919cd9a0725b5390a8fc785d61"
                },
                {
                    "alg": "SHA-512",
                    "content": "f030479c09a6f664b96783a55e45032d4493be5094d9ec1b5d679d23edc2dca4f93b6846ac97e5e92fcb762559836295361918eb7c5eb7dd617519aebe96b1f2"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "pkg:maven/org.zkoss.common/zcommon@11.0.0-jakarta.FL.20261111-Eval?type=jar#metainfo/xml/xhtml-symbol.ent",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "f030479c09a6f664b96783a55e45032d4493be5094d9ec1b5d679d23edc2dca4f93b6846ac97e5e92fcb762559836295361918eb7c5eb7dd617519aebe96b1f2"
                        }
                    ]
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/org.unbescape/unbescape",
            "supplier": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "manufacturer": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "name": "unbescape",
            "version": "2021-10-12T11:41:34+08:00",
            "purl": "pkg:maven/org.unbescape/unbescape",
            "licenses": [
                {
                    "expression": "Apache-2.0",
                    "acknowledgement": "concluded"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "name": "unbescape",
                        "purl": "pkg:maven/org.unbescape/unbescape",
                        "supplier": {
                            "name": "The UNBESCAPE team",
                            "url": [
                                "https://www.unbescape.org"
                            ]
                        }
                    }
                ],
                "patches": [
                    {
                        "type": "unofficial"
                    }
                ],
                "notes": "Copy bundled in ZK and patched for it, maintained by Potix"
            },
            "properties": [
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/org.jdom/jdom2",
            "supplier": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "manufacturer": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "name": "jdom2",
            "version": "2021-10-12T11:41:34+08:00",
            "purl": "pkg:maven/org.jdom/jdom2",
            "licenses": [
                {
                    "expression": "LicenseRef-scancode-jdom",
                    "acknowledgement": "concluded"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "name": "jdom2",
                        "purl": "pkg:maven/org.jdom/jdom2",
                        "supplier": {
                            "name": "Jason Hunter & Brett McLaughlin",
                            "url": [
                                "http://www.jdom.org"
                            ]
                        }
                    }
                ],
                "patches": [
                    {
                        "type": "unofficial"
                    }
                ],
                "notes": "Copy bundled in ZK and patched for it, maintained by Potix"
            },
            "properties": [
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/com.googlecode.json-simple/json-simple",
            "supplier": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "manufacturer": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "name": "json-simple",
            "version": "2024-02-26T17:08:34+08:00",
            "purl": "pkg:maven/com.googlecode.json-simple/json-simple",
            "licenses": [
                {
                    "expression": "Apache-2.0",
                    "acknowledgement": "concluded"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "name": "json-simple",
                        "purl": "pkg:maven/com.googlecode.json-simple/json-simple",
                        "supplier": {
                            "name": "Yidong Fang",
                            "url": [
                                "https://code.google.com/archive/p/json-simple/"
                            ]
                        }
                    }
                ],
                "patches": [
                    {
                        "type": "unofficial"
                    }
                ],
                "notes": "Copy bundled in ZK and patched for it, maintained by Potix"
            },
            "properties": [
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:github/apache/tomcat",
            "supplier": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "manufacturer": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "name": "apache-tomcat",
            "version": "2023-04-14T11:51:32+08:00",
            "purl": "pkg:github/apache/tomcat",
            "licenses": [
                {
                    "expression": "Apache-2.0",
                    "acknowledgement": "concluded"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "name": "apache-tomcat",
                        "purl": "pkg:github/apache/tomcat",
                        "supplier": {
                            "name": "The Apache Software Foundation",
                            "url": [
                                "https://tomcat.apache.org"
                            ]
                        }
                    }
                ],
                "patches": [
                    {
                        "type": "unofficial"
                    }
                ],
                "notes": "Copy bundled in ZK and patched for it, maintained by Potix"
            },
            "properties": [
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/org.zkoss.common/zel@11.0.0.FL.20261111?type=jar#apache-tomcat",
            "supplier": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "manufacturer": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "name": "apache-tomcat",
            "version": "2026-09-24T09:42:34+08:00",
            "purl": "pkg:github/apache/tomcat",
            "licenses": [
                {
                    "expression": "Apache-2.0",
                    "acknowledgement": "concluded"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "name": "apache-tomcat",
                        "purl": "pkg:github/apache/tomcat",
                        "supplier": {
                            "name": "The Apache Software Foundation",
                            "url": [
                                "https://tomcat.apache.org"
                            ]
                        }
                    }
                ],
                "patches": [
                    {
                        "type": "unofficial"
                    }
                ],
                "notes": "Copy bundled in ZK and patched for it, maintained by Potix"
            },
            "properties": [
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:npm/jquery@3.5.1",
            "supplier": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "manufacturer": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "name": "jquery",
            "version": "3.5.1",
            "purl": "pkg:npm/jquery@3.5.1",
            "licenses": [
                {
                    "expression": "MIT",
                    "acknowledgement": "concluded"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "name": "jquery",
                        "version": "3.5.1",
                        "purl": "pkg:npm/jquery@3.5.1"
                    }
                ],
                "patches": [
                    {
                        "type": "unofficial"
                    }
                ],
                "notes": "Copy bundled in ZK and patched for it, maintained by Potix; keeps the upstream version so advisories still match"
            },
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "jquery.js"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "a057fdf4a0d2e506bac659da519d4980c5b542f97ebcfe65bae037d44e7b428e"
                },
                {
                    "alg": "SHA-512",
                    "content": "44396c32e32ef48cda47e0793d0c7a0781309aa3a1954039288b539d2eaa19683f5a9a14d64b800cc3916e18dbc392e80e3856e44e7e07efbafd456b88fb9bba"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "pkg:maven/org.zkoss.zk/zk@11.0.0-jakarta.FL.20261111-Eval?type=jar#web/js/zk/ext/jquery.js",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "44396c32e32ef48cda47e0793d0c7a0781309aa3a1954039288b539d2eaa19683f5a9a14d64b800cc3916e18dbc392e80e3856e44e7e07efbafd456b88fb9bba"
                        }
                    ]
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:github/douglascrockford/json-js",
            "supplier": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "manufacturer": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "name": "json2.js",
            "version": "2009-06-18",
            "purl": "pkg:github/douglascrockford/json-js",
            "licenses": [
                {
                    "expression": "LicenseRef-scancode-public-domain",
                    "acknowledgement": "concluded"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "name": "json2.js",
                        "version": "2009-06-18",
                        "purl": "pkg:github/douglascrockford/json-js"
                    }
                ],
                "patches": [
                    {
                        "type": "unofficial"
                    }
                ],
                "notes": "Copy bundled in ZK and patched for it, maintained by Potix; keeps the upstream version so advisories still match"
            },
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "jquery.json.js"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "bb2b7c56fe2703708feb1a4b6c5f1ad7a44767d4e698e216d2b01801420acae4"
                },
                {
                    "alg": "SHA-512",
                    "content": "4304097c1a1a2a4be50776fa53e21f739b499f361a82a8a037d0d7c349f92283e20f5429be3dde0e44926de000940e920647f96b0d82f09b4d887bebabcc663d"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "pkg:maven/org.zkoss.zk/zk@11.0.0-jakarta.FL.20261111-Eval?type=jar#web/js/zk/ext/jquery.json.js",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "4304097c1a1a2a4be50776fa53e21f739b499f361a82a8a037d0d7c349f92283e20f5429be3dde0e44926de000940e920647f96b0d82f09b4d887bebabcc663d"
                        }
                    ]
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:npm/jquery-mousewheel@3.1.13",
            "supplier": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "manufacturer": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "name": "jquery-mousewheel",
            "version": "3.1.13",
            "purl": "pkg:npm/jquery-mousewheel@3.1.13",
            "licenses": [
                {
                    "expression": "MIT",
                    "acknowledgement": "concluded"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "name": "jquery-mousewheel",
                        "version": "3.1.13",
                        "purl": "pkg:npm/jquery-mousewheel@3.1.13"
                    }
                ],
                "patches": [
                    {
                        "type": "unofficial"
                    }
                ],
                "notes": "Copy bundled in ZK and patched for it, maintained by Potix; keeps the upstream version so advisories still match"
            },
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "jquery.mousewheel.js"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "43f05c6ae019e848c6c898e625ded8540b7dc861f97f8278facdc231b880a4b5"
                },
                {
                    "alg": "SHA-512",
                    "content": "9f0d7bcfee468f3ea83bc9ea60b3c81a5707f4049ca4c25e9cd86c04ed1851124f2028739c86ccc641778d8f43930945a29a9f208f69b2694dc90c65bb13f0b7"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "pkg:maven/org.zkoss.zk/zk@11.0.0-jakarta.FL.20261111-Eval?type=jar#web/js/zk/ext/jquery.mousewheel.js",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "9f0d7bcfee468f3ea83bc9ea60b3c81a5707f4049ca4c25e9cd86c04ed1851124f2028739c86ccc641778d8f43930945a29a9f208f69b2694dc90c65bb13f0b7"
                        }
                    ]
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:npm/jquery.transit@0.9.12",
            "supplier": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "manufacturer": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "name": "jquery.transit",
            "version": "0.9.12",
            "purl": "pkg:npm/jquery.transit@0.9.12",
            "licenses": [
                {
                    "expression": "MIT",
                    "acknowledgement": "concluded"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "name": "jquery.transit",
                        "version": "0.9.12",
                        "purl": "pkg:npm/jquery.transit@0.9.12"
                    }
                ],
                "patches": [
                    {
                        "type": "unofficial"
                    }
                ],
                "notes": "Copy bundled in ZK and patched for it, maintained by Potix; keeps the upstream version so advisories still match"
            },
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "jquery.transit.js"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "c315f2bdf0a64d2ea7df7a26a021f2b9ed7cbccf4983d228d171488b72a43014"
                },
                {
                    "alg": "SHA-512",
                    "content": "1d6b6f662254f55db6c0f143e276bc0eec51d447c8c72f228289ccc2dddaa83a520e1be5010f88f11d7e5be70ebb03f37eb7a4472d96aa2f0c0a3fc1b2447488"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "pkg:maven/org.zkoss.zk/zk@11.0.0-jakarta.FL.20261111-Eval?type=jar#web/js/zk/ext/jquery.transit.js",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "1d6b6f662254f55db6c0f143e276bc0eec51d447c8c72f228289ccc2dddaa83a520e1be5010f88f11d7e5be70ebb03f37eb7a4472d96aa2f0c0a3fc1b2447488"
                        }
                    ]
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:npm/moment@2.31.0",
            "supplier": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "manufacturer": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "name": "moment",
            "version": "2.31.0",
            "purl": "pkg:npm/moment@2.31.0",
            "licenses": [
                {
                    "expression": "MIT",
                    "acknowledgement": "concluded"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "name": "moment",
                        "version": "2.31.0",
                        "purl": "pkg:npm/moment@2.31.0"
                    }
                ],
                "patches": [
                    {
                        "type": "unofficial"
                    }
                ],
                "notes": "Copy bundled in ZK and patched for it, maintained by Potix; keeps the upstream version so advisories still match"
            },
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "moment.js"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "89b420f3a341a0b000ba1871665f5186015be0d9de9dc0650eae94ed75a5fdc3"
                },
                {
                    "alg": "SHA-512",
                    "content": "62ad8627a8df0c510540ef2694b888ed91d38a2a4319632ca82c64a00c46df56bc53371680833acf8f8d08c4fbdd62401a5af5c65ccad36221cd957710c69f10"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "pkg:maven/org.zkoss.zk/zk@11.0.0-jakarta.FL.20261111-Eval?type=jar#web/js/zk/ext/moment.js",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "62ad8627a8df0c510540ef2694b888ed91d38a2a4319632ca82c64a00c46df56bc53371680833acf8f8d08c4fbdd62401a5af5c65ccad36221cd957710c69f10"
                        }
                    ]
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:npm/moment-timezone@0.5.48",
            "supplier": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "manufacturer": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "name": "moment-timezone",
            "version": "0.5.48",
            "purl": "pkg:npm/moment-timezone@0.5.48",
            "licenses": [
                {
                    "expression": "MIT",
                    "acknowledgement": "concluded"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "name": "moment-timezone",
                        "version": "0.5.48",
                        "purl": "pkg:npm/moment-timezone@0.5.48"
                    }
                ],
                "patches": [
                    {
                        "type": "unofficial"
                    }
                ],
                "notes": "Copy bundled in ZK and patched for it, maintained by Potix; keeps the upstream version so advisories still match"
            },
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "moment-timezone-with-data.js"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "a4540b0b9dbaaa8ec4368648895375fe6638ce47feba9fa67496b1fcf661594d"
                },
                {
                    "alg": "SHA-512",
                    "content": "82a0a517f0f16b1260d4429e9c4ec3b7a2252e2fc25a436606e1ce90c9c87df849e31f330446fd881776bee08944e395ee700e47f57517646beaea432609c3d5"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "pkg:maven/org.zkoss.zk/zk@11.0.0-jakarta.FL.20261111-Eval?type=jar#web/js/zk/ext/moment-timezone-with-data.js",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "82a0a517f0f16b1260d4429e9c4ec3b7a2252e2fc25a436606e1ce90c9c87df849e31f330446fd881776bee08944e395ee700e47f57517646beaea432609c3d5"
                        }
                    ]
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:npm/dompurify@3.4.17",
            "supplier": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "manufacturer": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "name": "dompurify",
            "version": "3.4.17",
            "purl": "pkg:npm/dompurify@3.4.17",
            "licenses": [
                {
                    "expression": "MPL-2.0 OR Apache-2.0",
                    "acknowledgement": "concluded"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "name": "dompurify",
                        "version": "3.4.17",
                        "purl": "pkg:npm/dompurify@3.4.17"
                    }
                ],
                "patches": [
                    {
                        "type": "unofficial"
                    }
                ],
                "notes": "Copy bundled in ZK and patched for it, maintained by Potix; keeps the upstream version so advisories still match"
            },
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "purify.js"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "d3bdd8ed48377c3b0b845992e759577c9517bb35fba67ce8fda5c5f41df5d31d"
                },
                {
                    "alg": "SHA-512",
                    "content": "f65465e8451f7c8854b05a097ed3c40b7b469de9cda14262aaa487701e1df79db3e5d414c27753925e2eac134b7bc1d30d3aacbdb23b51ec36a408db5355ec23"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "pkg:maven/org.zkoss.zk/zk@11.0.0-jakarta.FL.20261111-Eval?type=jar#web/js/zk/ext/purify.js",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "f65465e8451f7c8854b05a097ed3c40b7b469de9cda14262aaa487701e1df79db3e5d414c27753925e2eac134b7bc1d30d3aacbdb23b51ec36a408db5355ec23"
                        }
                    ]
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:npm/whatwg-fetch@0.11.1",
            "supplier": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "manufacturer": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "name": "whatwg-fetch",
            "version": "0.11.1",
            "purl": "pkg:npm/whatwg-fetch@0.11.1",
            "licenses": [
                {
                    "expression": "MIT",
                    "acknowledgement": "concluded"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "name": "whatwg-fetch",
                        "version": "0.11.1",
                        "purl": "pkg:npm/whatwg-fetch@0.11.1"
                    }
                ],
                "patches": [
                    {
                        "type": "unofficial"
                    }
                ],
                "notes": "Copy bundled in ZK and patched for it, maintained by Potix; keeps the upstream version so advisories still match"
            },
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "fetch.js"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "feddf7cb3d63fca89fb9a9c80cc4d1c3f08d2ae61fbedbd5b3588959943be6a1"
                },
                {
                    "alg": "SHA-512",
                    "content": "695db10e4d236479b68d7b2464ed604e716d8fa0fbc0879434e44af0a84fad8a8431673f9072a42042d0d6495829c8873129a7187cddacf0e6087198607c72a7"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "pkg:maven/org.zkoss.zk/zk@11.0.0-jakarta.FL.20261111-Eval?type=jar#web/js/zk/ext/fetch.js",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "695db10e4d236479b68d7b2464ed604e716d8fa0fbc0879434e44af0a84fad8a8431673f9072a42042d0d6495829c8873129a7187cddacf0e6087198607c72a7"
                        }
                    ]
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:npm/focus-options-polyfill@1.6.0",
            "supplier": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "manufacturer": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "name": "focus-options-polyfill",
            "version": "1.6.0",
            "purl": "pkg:npm/focus-options-polyfill@1.6.0",
            "licenses": [
                {
                    "expression": "MIT",
                    "acknowledgement": "concluded"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "name": "focus-options-polyfill",
                        "version": "1.6.0",
                        "purl": "pkg:npm/focus-options-polyfill@1.6.0"
                    }
                ],
                "patches": [
                    {
                        "type": "unofficial"
                    }
                ],
                "notes": "Copy bundled in ZK and patched for it, maintained by Potix; keeps the upstream version so advisories still match"
            },
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "focus-options-polyfill.js"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "fbd15448a3e35061305ae9c5bba1d288e75343d8a094c85415d0fb59e088615e"
                },
                {
                    "alg": "SHA-512",
                    "content": "bb8990b4413a5e01ec23ae6e2af7bccd6b5beddd340ea9f46d1a8ee797e735dd92c671c0cd4d7691286dd6d2f3f1d883ad46056b896884a2600e2bedf895b650"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "pkg:maven/org.zkoss.zk/zk@11.0.0-jakarta.FL.20261111-Eval?type=jar#web/js/zk/ext/focus-options-polyfill.js",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "bb8990b4413a5e01ec23ae6e2af7bccd6b5beddd340ea9f46d1a8ee797e735dd92c671c0cd4d7691286dd6d2f3f1d883ad46056b896884a2600e2bedf895b650"
                        }
                    ]
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:github/wicg/input-device-capabilities",
            "supplier": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "manufacturer": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "name": "inputdevicecapabilities-polyfill",
            "version": "2024-02-21T10:23:32+08:00",
            "purl": "pkg:github/wicg/input-device-capabilities",
            "licenses": [
                {
                    "expression": "MIT",
                    "acknowledgement": "concluded"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "name": "inputdevicecapabilities-polyfill",
                        "purl": "pkg:github/wicg/input-device-capabilities"
                    }
                ],
                "patches": [
                    {
                        "type": "unofficial"
                    }
                ],
                "notes": "Copy bundled in ZK and patched for it, maintained by Potix"
            },
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "inputdevicecapabilities-polyfill.js"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "941c8f526312c8395c6f56e47460f35d629dbafc0ad13313594fa8798f2da3ff"
                },
                {
                    "alg": "SHA-512",
                    "content": "91a340c5eeaf8ccc0a75b4518edbc795e9086050ae2400e0cd837d98b5cede2333eb1b217153a266adf14816434954ad5fe600cafec458746a3a09bc65b59a44"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "pkg:maven/org.zkoss.zk/zk@11.0.0-jakarta.FL.20261111-Eval?type=jar#web/js/zk/ext/inputdevicecapabilities-polyfill.js",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "91a340c5eeaf8ccc0a75b4518edbc795e9086050ae2400e0cd837d98b5cede2333eb1b217153a266adf14816434954ad5fe600cafec458746a3a09bc65b59a44"
                        }
                    ]
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/commons-fileupload/commons-fileupload",
            "supplier": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "manufacturer": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "name": "commons-fileupload",
            "version": "2025-06-23T12:47:52+08:00",
            "purl": "pkg:maven/commons-fileupload/commons-fileupload",
            "licenses": [
                {
                    "expression": "Apache-2.0",
                    "acknowledgement": "concluded"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "name": "commons-fileupload",
                        "purl": "pkg:maven/commons-fileupload/commons-fileupload",
                        "supplier": {
                            "name": "The Apache Software Foundation",
                            "url": [
                                "https://commons.apache.org/proper/commons-fileupload/"
                            ]
                        }
                    }
                ],
                "patches": [
                    {
                        "type": "unofficial"
                    }
                ],
                "notes": "Copy bundled in ZK and patched for it, maintained by Potix"
            },
            "properties": [
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/commons-codec/commons-codec",
            "supplier": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "manufacturer": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "name": "commons-codec",
            "version": "2024-09-09T15:36:50+08:00",
            "purl": "pkg:maven/commons-codec/commons-codec",
            "licenses": [
                {
                    "expression": "Apache-2.0",
                    "acknowledgement": "concluded"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "name": "commons-codec",
                        "version": "1.8",
                        "purl": "pkg:maven/commons-codec/commons-codec@1.8",
                        "supplier": {
                            "name": "The Apache Software Foundation",
                            "url": [
                                "https://commons.apache.org/proper/commons-codec/"
                            ]
                        }
                    }
                ],
                "patches": [
                    {
                        "type": "unofficial"
                    }
                ],
                "notes": "Copy bundled in ZK and patched for it, maintained by Potix"
            },
            "properties": [
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:github/madrobby/scriptaculous",
            "supplier": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "manufacturer": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "name": "script.aculo.us",
            "version": "2025-05-13T16:24:00+08:00",
            "purl": "pkg:github/madrobby/scriptaculous",
            "licenses": [
                {
                    "expression": "MIT",
                    "acknowledgement": "concluded"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "name": "script.aculo.us",
                        "version": "1.7.0",
                        "purl": "pkg:github/madrobby/scriptaculous",
                        "supplier": {
                            "name": "Thomas Fuchs",
                            "url": [
                                "http://script.aculo.us"
                            ]
                        }
                    }
                ],
                "patches": [
                    {
                        "type": "unofficial"
                    }
                ],
                "notes": "Copy bundled in ZK and patched for it, maintained by Potix"
            },
            "properties": [
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/org.cojen/cojen",
            "supplier": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "manufacturer": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "name": "cojen",
            "version": "2024-01-18T17:22:20+08:00",
            "purl": "pkg:maven/org.cojen/cojen",
            "licenses": [
                {
                    "expression": "Apache-2.0",
                    "acknowledgement": "concluded"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "name": "cojen",
                        "purl": "pkg:maven/org.cojen/cojen",
                        "supplier": {
                            "name": "Brian S O'Neill",
                            "url": [
                                "https://github.com/cojen/Cojen"
                            ]
                        }
                    }
                ],
                "patches": [
                    {
                        "type": "unofficial"
                    }
                ],
                "notes": "Copy bundled in ZK and patched for it, maintained by Potix"
            },
            "properties": [
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/com.thoughtworks.paranamer/paranamer",
            "supplier": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "manufacturer": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "name": "paranamer",
            "version": "2026-09-24T09:42:34+08:00",
            "purl": "pkg:maven/com.thoughtworks.paranamer/paranamer",
            "licenses": [
                {
                    "expression": "BSD-3-Clause",
                    "acknowledgement": "concluded"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "name": "paranamer",
                        "purl": "pkg:maven/com.thoughtworks.paranamer/paranamer",
                        "supplier": {
                            "name": "Paul Hammant",
                            "url": [
                                "https://github.com/paul-hammant/paranamer"
                            ]
                        }
                    }
                ],
                "patches": [
                    {
                        "type": "unofficial"
                    }
                ],
                "notes": "Copy bundled in ZK and patched for it, maintained by Potix"
            },
            "properties": [
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/org.ow2.asm/asm",
            "supplier": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "manufacturer": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "name": "asm",
            "version": "2026-09-24T09:42:34+08:00",
            "purl": "pkg:maven/org.ow2.asm/asm",
            "licenses": [
                {
                    "expression": "BSD-3-Clause",
                    "acknowledgement": "concluded"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "name": "asm",
                        "purl": "pkg:maven/org.ow2.asm/asm",
                        "supplier": {
                            "name": "INRIA, France Telecom",
                            "url": [
                                "https://asm.ow2.io"
                            ]
                        }
                    }
                ],
                "patches": [
                    {
                        "type": "unofficial"
                    }
                ],
                "notes": "Copy bundled in ZK and patched for it, maintained by Potix"
            },
            "properties": [
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:npm/pdfjs-dist@4.10.38",
            "supplier": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "manufacturer": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "name": "pdfjs-dist",
            "version": "4.10.38",
            "purl": "pkg:npm/pdfjs-dist@4.10.38",
            "licenses": [
                {
                    "expression": "Apache-2.0",
                    "acknowledgement": "concluded"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "name": "pdfjs-dist",
                        "version": "4.10.38",
                        "purl": "pkg:npm/pdfjs-dist@4.10.38"
                    }
                ],
                "patches": [
                    {
                        "type": "unofficial"
                    }
                ],
                "notes": "Copy bundled in ZK and patched for it, maintained by Potix; keeps the upstream version so advisories still match"
            },
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "pdf.mjs"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "809a9ebda41264dab8447c9fae6fc375ba91bb848536e57d5979c83c9af36171"
                },
                {
                    "alg": "SHA-512",
                    "content": "712c8be7d35bfafe3c4a1165ee9dc29e87b3e84b59c12ef40672086fafdd9688bd4e540e286ded7f541e93a15153e3d994415e89aee9f57af5b785bfde368604"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "pkg:maven/org.zkoss.zk/zkex@11.0.0-jakarta.FL.20261111-Eval?type=jar#web/js/zkex/pdfviewer/ext/pdf.mjs",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "712c8be7d35bfafe3c4a1165ee9dc29e87b3e84b59c12ef40672086fafdd9688bd4e540e286ded7f541e93a15153e3d994415e89aee9f57af5b785bfde368604"
                        }
                    ]
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/org.zkoss.zk/zkex@11.0.0.FL.20261111?type=jar#web/js/zkex/pdfviewer/ext/pdf.worker.mjs",
            "supplier": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "manufacturer": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "name": "pdfjs-dist",
            "version": "4.10.38",
            "purl": "pkg:npm/pdfjs-dist@4.10.38",
            "licenses": [
                {
                    "expression": "Apache-2.0",
                    "acknowledgement": "concluded"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "name": "pdfjs-dist",
                        "version": "4.10.38",
                        "purl": "pkg:npm/pdfjs-dist@4.10.38"
                    }
                ],
                "patches": [
                    {
                        "type": "unofficial"
                    }
                ],
                "notes": "Copy bundled in ZK and patched for it, maintained by Potix; keeps the upstream version so advisories still match"
            },
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "pdf.worker.mjs"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "7c237f83fa56bce645d8af51d183c9c56ba7b2d2928ff42754dc7020bea36323"
                },
                {
                    "alg": "SHA-512",
                    "content": "d6a3c3f8741d859bda32406b216cf7cf7e56032135c4dd37095420734dc5e1cd1ec4de4459505af879a256368735ca86bd01f95cb5e5c93ce16e3a983d2a2da8"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "pkg:maven/org.zkoss.zk/zkex@11.0.0-jakarta.FL.20261111-Eval?type=jar#web/js/zkex/pdfviewer/ext/pdf.worker.mjs",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "d6a3c3f8741d859bda32406b216cf7cf7e56032135c4dd37095420734dc5e1cd1ec4de4459505af879a256368735ca86bd01f95cb5e5c93ce16e3a983d2a2da8"
                        }
                    ]
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/schlichtherle/truelicense",
            "supplier": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "manufacturer": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "name": "truelicense",
            "version": "2026-01-20T16:00:37+08:00",
            "purl": "pkg:generic/schlichtherle/truelicense",
            "licenses": [
                {
                    "expression": "Apache-2.0",
                    "acknowledgement": "concluded"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "name": "truelicense",
                        "purl": "pkg:generic/schlichtherle/truelicense",
                        "supplier": {
                            "name": "Schlichtherle IT Services",
                            "url": [
                                "http://truelicense.java.net"
                            ]
                        }
                    }
                ],
                "patches": [
                    {
                        "type": "unofficial"
                    }
                ],
                "notes": "Copy bundled in ZK and patched for it, maintained by Potix"
            },
            "properties": [
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/source-code.biz/base64coder",
            "supplier": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "manufacturer": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "name": "base64coder",
            "version": "2011-03-24T10:42:09Z",
            "purl": "pkg:generic/source-code.biz/base64coder",
            "licenses": [
                {
                    "expression": "Apache-2.0",
                    "acknowledgement": "concluded"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "name": "base64coder",
                        "purl": "pkg:generic/source-code.biz/base64coder",
                        "supplier": {
                            "name": "Christian d'Heureuse, Inventec Informatik AG",
                            "url": [
                                "http://www.source-code.biz/base64coder/java/"
                            ]
                        }
                    }
                ],
                "patches": [
                    {
                        "type": "unofficial"
                    }
                ],
                "notes": "Copy bundled in ZK and patched for it, maintained by Potix"
            },
            "properties": [
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:npm/lucide-static",
            "supplier": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "manufacturer": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "name": "lucide-static",
            "version": "2026-10-28T15:04:49+08:00",
            "purl": "pkg:npm/lucide-static",
            "licenses": [
                {
                    "expression": "ISC AND MIT",
                    "acknowledgement": "concluded"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "name": "lucide-static",
                        "purl": "pkg:npm/lucide-static",
                        "supplier": {
                            "name": "Lucide Icons and Contributors",
                            "url": [
                                "https://lucide.dev"
                            ]
                        }
                    }
                ],
                "patches": [
                    {
                        "type": "unofficial"
                    }
                ],
                "notes": "Copy bundled in ZK and patched for it, maintained by Potix"
            },
            "properties": [
                {
                    "name": "bsi:component:executable",
                    "value": "non-executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:npm/signature_pad@5.0.7",
            "supplier": {
                "name": "Szymon Nowak",
                "url": [
                    "https://github.com/szimek/signature_pad"
                ]
            },
            "manufacturer": {
                "name": "Szymon Nowak",
                "url": [
                    "https://github.com/szimek/signature_pad"
                ]
            },
            "name": "signature_pad",
            "version": "5.0.7",
            "purl": "pkg:npm/signature_pad@5.0.7",
            "licenses": [
                {
                    "expression": "MIT",
                    "acknowledgement": "concluded"
                }
            ],
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "signature_pad.js"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "1e403dfaee9c836207d64f86337e7dfb422df37051262908b3c7c0143208e115"
                },
                {
                    "alg": "SHA-512",
                    "content": "d3997da54ed2146319fa0cd5d4597ef938c1a95b8350d506e5dad04614f0cdb125f595d946fe9bba0a6bbb5706e2662c81f839fab40af32522fc49bf5d1c03ab"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "pkg:maven/org.zkoss.zk/zkmax@11.0.0-jakarta.FL.20261111-Eval?type=jar#web/js/zkmax/signature/ext/signature_pad.js",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "d3997da54ed2146319fa0cd5d4597ef938c1a95b8350d506e5dad04614f0cdb125f595d946fe9bba0a6bbb5706e2662c81f839fab40af32522fc49bf5d1c03ab"
                        }
                    ]
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:npm/%40zxing/library@0.21.3",
            "supplier": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "manufacturer": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "name": "@zxing/library",
            "version": "0.21.3",
            "purl": "pkg:npm/%40zxing/library@0.21.3",
            "licenses": [
                {
                    "expression": "Apache-2.0",
                    "acknowledgement": "concluded"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "name": "@zxing/library",
                        "version": "0.21.3",
                        "purl": "pkg:npm/%40zxing/library@0.21.3"
                    }
                ],
                "patches": [
                    {
                        "type": "unofficial"
                    }
                ],
                "notes": "Copy bundled in ZK and patched for it, maintained by Potix; keeps the upstream version so advisories still match"
            },
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "zxing.min.js"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "2321bf5a3b42457b3c5b9b5906eac8edc8d91fcdac54cd18f1e8f7fcb8a863a6"
                },
                {
                    "alg": "SHA-512",
                    "content": "2bb89ae1a1a94c4a21744f9a96148b2be5755aaa3bb492f7e3146565458e795527e8fc719431f91516181315156c017a2b084228bd41848b11b0d2774d5eff8f"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "pkg:maven/org.zkoss.zk/zkmax@11.0.0-jakarta.FL.20261111-Eval?type=jar#web/js/zkmax/barscanner/ext/zxing.min.js",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "2bb89ae1a1a94c4a21744f9a96148b2be5755aaa3bb492f7e3146565458e795527e8fc719431f91516181315156c017a2b084228bd41848b11b0d2774d5eff8f"
                        }
                    ]
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:npm/iscroll@4.2.2",
            "supplier": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "manufacturer": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "name": "iscroll",
            "version": "4.2.2",
            "purl": "pkg:npm/iscroll@4.2.2",
            "licenses": [
                {
                    "expression": "MIT",
                    "acknowledgement": "concluded"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "name": "iscroll",
                        "version": "4.2.2",
                        "purl": "pkg:npm/iscroll@4.2.2"
                    }
                ],
                "patches": [
                    {
                        "type": "unofficial"
                    }
                ],
                "notes": "Copy bundled in ZK and patched for it, maintained by Potix; keeps the upstream version so advisories still match"
            },
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "iscroll.js"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "aa48b761d0b60a63884e01aa397052dfc0deddea097c4833d7423ff4a428590b"
                },
                {
                    "alg": "SHA-512",
                    "content": "f51fa395ce7d25f838c87d630bfa800f5cc15d72d01784c99820a87c074b59eb964c22f44ca613352357e6e9e15fbe3e0c0e3aa901b5fc00361ec948cf9e3808"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "pkg:maven/org.zkoss.zk/zkmax@11.0.0-jakarta.FL.20261111-Eval?type=jar#web/js/zkmax/touch/ext/iscroll.js",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "f51fa395ce7d25f838c87d630bfa800f5cc15d72d01784c99820a87c074b59eb964c22f44ca613352357e6e9e15fbe3e0c0e3aa901b5fc00361ec948cf9e3808"
                        }
                    ]
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:npm/trumbowyg@2.31.0",
            "supplier": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "manufacturer": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "name": "trumbowyg",
            "version": "2.31.0",
            "purl": "pkg:npm/trumbowyg@2.31.0",
            "licenses": [
                {
                    "expression": "MIT",
                    "acknowledgement": "concluded"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "name": "trumbowyg",
                        "version": "2.31.0",
                        "purl": "pkg:npm/trumbowyg@2.31.0"
                    }
                ],
                "patches": [
                    {
                        "type": "unofficial"
                    }
                ],
                "notes": "Copy bundled in ZK and patched for it, maintained by Potix; keeps the upstream version so advisories still match"
            },
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "trumbowyg.js"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "7d5fa745b44c62502d10b8375d80dc748b32a73e8fb88c4cde6f7ec07c7e4f59"
                },
                {
                    "alg": "SHA-512",
                    "content": "45a772280311bf628a2c9c040a464c42d0bc173ecd644f803bab02e3cde637e9d5d9e83467bc03fc757c12dc4f36707ed0572f4dc6eac94a6b5c1b1bdbe34e81"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "pkg:maven/org.zkoss.zk/zkmax@11.0.0-jakarta.FL.20261111-Eval?type=jar#web/js/zkmax/tbeditor/ext/trumbowyg.js",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "45a772280311bf628a2c9c040a464c42d0bc173ecd644f803bab02e3cde637e9d5d9e83467bc03fc757c12dc4f36707ed0572f4dc6eac94a6b5c1b1bdbe34e81"
                        }
                    ]
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:npm/trumbowyg@2.7.2",
            "supplier": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "manufacturer": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "name": "trumbowyg",
            "version": "2.7.2",
            "purl": "pkg:npm/trumbowyg@2.7.2",
            "licenses": [
                {
                    "expression": "MIT",
                    "acknowledgement": "concluded"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "name": "trumbowyg",
                        "version": "2.7.2",
                        "purl": "pkg:npm/trumbowyg@2.7.2"
                    }
                ],
                "patches": [
                    {
                        "type": "unofficial"
                    }
                ],
                "notes": "Copy bundled in ZK and patched for it, maintained by Potix; keeps the upstream version so advisories still match"
            },
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "icons.svg"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "non-executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "6cb6791196965ffd0c22e35f0ff96cf4d906ab6bf0f289010ba684277b03ef5c"
                },
                {
                    "alg": "SHA-512",
                    "content": "2bcd85f1ad7f4465dc63af6093e0f8305d9eb63195e58a82826a5a8cafa95566cdf4c1e68295aab8ca03731386f3c2357ffe1abe21936f0f2762768d32de6026"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "pkg:maven/org.zkoss.zk/zkmax@11.0.0-jakarta.FL.20261111-Eval?type=jar#web/js/zkmax/tbeditor/ext/icons.svg",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "2bcd85f1ad7f4465dc63af6093e0f8305d9eb63195e58a82826a5a8cafa95566cdf4c1e68295aab8ca03731386f3c2357ffe1abe21936f0f2762768d32de6026"
                        }
                    ]
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:npm/jquery-jcrop@0.9.15",
            "supplier": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "manufacturer": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "name": "jquery-jcrop",
            "version": "0.9.15",
            "purl": "pkg:npm/jquery-jcrop@0.9.15",
            "licenses": [
                {
                    "expression": "MIT",
                    "acknowledgement": "concluded"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "name": "jquery-jcrop",
                        "version": "0.9.15",
                        "purl": "pkg:npm/jquery-jcrop@0.9.15"
                    }
                ],
                "patches": [
                    {
                        "type": "unofficial"
                    }
                ],
                "notes": "Copy bundled in ZK and patched for it, maintained by Potix; keeps the upstream version so advisories still match"
            },
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "jquery.Jcrop.js"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "f2dd073bc3aca6cdeba3aceb6192af14eeeb01761c7b1bc8989b676fcf59bebf"
                },
                {
                    "alg": "SHA-512",
                    "content": "fb232c10bde2b5da5d1cc27e965967027ba6fc5a27887971d7e863a8d4eadb1ab7c9e21d4e41268a20b4b8191e1c01fb0dab5b2f24e74cf1a4efe5abd3b9c623"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "pkg:maven/org.zkoss.zk/zkmax@11.0.0-jakarta.FL.20261111-Eval?type=jar#web/js/zkmax/cropper/ext/jquery.Jcrop.js",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "fb232c10bde2b5da5d1cc27e965967027ba6fc5a27887971d7e863a8d4eadb1ab7c9e21d4e41268a20b4b8191e1c01fb0dab5b2f24e74cf1a4efe5abd3b9c623"
                        }
                    ]
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:npm/golden-layout@1.5.8",
            "supplier": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "manufacturer": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "name": "golden-layout",
            "version": "1.5.8",
            "purl": "pkg:npm/golden-layout@1.5.8",
            "licenses": [
                {
                    "expression": "MIT",
                    "acknowledgement": "concluded"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "name": "golden-layout",
                        "version": "1.5.8",
                        "purl": "pkg:npm/golden-layout@1.5.8"
                    }
                ],
                "patches": [
                    {
                        "type": "unofficial"
                    }
                ],
                "notes": "Copy bundled in ZK and patched for it, maintained by Potix; keeps the upstream version so advisories still match"
            },
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "goldenlayout.js"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "b41d47ae08542f07ad3d450a03e07baada754261a5a2120552c0776eb938b16b"
                },
                {
                    "alg": "SHA-512",
                    "content": "8716a3fd3799e49d6ba30847795324402f23458db47036780814a8a1e2982cbecfed8c8259f153bc1d30752a38552464ff2c53992b4efb78072b5ef6aff33c52"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "pkg:maven/org.zkoss.zk/zkmax@11.0.0-jakarta.FL.20261111-Eval?type=jar#web/js/zkmax/goldenlayout/ext/goldenlayout.js",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "8716a3fd3799e49d6ba30847795324402f23458db47036780814a8a1e2982cbecfed8c8259f153bc1d30752a38552464ff2c53992b4efb78072b5ef6aff33c52"
                        }
                    ]
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:npm/qrcode-generator",
            "supplier": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "manufacturer": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "name": "qrcode-generator",
            "version": "2021-10-12T17:09:47+08:00",
            "purl": "pkg:npm/qrcode-generator",
            "licenses": [
                {
                    "expression": "MIT",
                    "acknowledgement": "concluded"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "name": "qrcode-generator",
                        "purl": "pkg:npm/qrcode-generator"
                    }
                ],
                "patches": [
                    {
                        "type": "unofficial"
                    }
                ],
                "notes": "Copy bundled in ZK and patched for it, maintained by Potix"
            },
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "qrcode.js"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "38c561f97390417c7d4b2df208bbeef32e00e65edb1cd9af2d1bea74764ee636"
                },
                {
                    "alg": "SHA-512",
                    "content": "3b2fc92fbf682e0815bb13949502ac76ce741b630bf9764c4d357869020d2663331cb2465995fa2d46a9c24be5de5dd12f870537d3edfd70e916f4e76406272f"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "pkg:maven/org.zkoss.zk/zkmax@11.0.0-jakarta.FL.20261111-Eval?type=jar#web/js/zkmax/barcode/ext/qrcode.js",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "3b2fc92fbf682e0815bb13949502ac76ce741b630bf9764c4d357869020d2663331cb2465995fa2d46a9c24be5de5dd12f870537d3edfd70e916f4e76406272f"
                        }
                    ]
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:npm/jsbarcode@3.8.0",
            "supplier": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "manufacturer": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "name": "jsbarcode",
            "version": "3.8.0",
            "purl": "pkg:npm/jsbarcode@3.8.0",
            "licenses": [
                {
                    "expression": "MIT",
                    "acknowledgement": "concluded"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "name": "jsbarcode",
                        "version": "3.8.0",
                        "purl": "pkg:npm/jsbarcode@3.8.0"
                    }
                ],
                "patches": [
                    {
                        "type": "unofficial"
                    }
                ],
                "notes": "Copy bundled in ZK and patched for it, maintained by Potix; keeps the upstream version so advisories still match"
            },
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "jsbarcode.js"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "a93e692945b037a1d3d26f28220abb730ddba22f59f4c01e9c90803ad344229b"
                },
                {
                    "alg": "SHA-512",
                    "content": "d5b611114e6133dceb10a8478d6273ea4b961d24b36b5c2b6ee3bd946bcc068d065e1b2869d4f18328a7bae2d22a1eeee2cc10d422b0ef6106295676833628d1"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "pkg:maven/org.zkoss.zk/zkmax@11.0.0-jakarta.FL.20261111-Eval?type=jar#web/js/zkmax/barcode/ext/jsbarcode.js",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "d5b611114e6133dceb10a8478d6273ea4b961d24b36b5c2b6ee3bd946bcc068d065e1b2869d4f18328a7bae2d22a1eeee2cc10d422b0ef6106295676833628d1"
                        }
                    ]
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/com.google.collections/google-collections",
            "supplier": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "manufacturer": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "name": "google-collections",
            "version": "2024-01-17T09:18:39+08:00",
            "purl": "pkg:maven/com.google.collections/google-collections",
            "licenses": [
                {
                    "expression": "Apache-2.0",
                    "acknowledgement": "concluded"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "name": "google-collections",
                        "purl": "pkg:maven/com.google.collections/google-collections",
                        "supplier": {
                            "name": "Google Inc.",
                            "url": [
                                "https://code.google.com/archive/p/google-collections/"
                            ]
                        }
                    }
                ],
                "patches": [
                    {
                        "type": "unofficial"
                    }
                ],
                "notes": "Copy bundled in ZK and patched for it, maintained by Potix"
            },
            "properties": [
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:github/paulirish/matchmedia.js",
            "supplier": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "manufacturer": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "name": "matchMedia.js",
            "version": "2024-10-17T16:01:11+08:00",
            "purl": "pkg:github/paulirish/matchmedia.js",
            "licenses": [
                {
                    "expression": "MIT",
                    "acknowledgement": "concluded"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "name": "matchMedia.js",
                        "version": "0.1.0",
                        "purl": "pkg:github/paulirish/matchmedia.js",
                        "supplier": {
                            "name": "Scott Jehl, Paul Irish, Nicholas Zakas",
                            "url": [
                                "https://github.com/paulirish/matchMedia.js"
                            ]
                        }
                    }
                ],
                "patches": [
                    {
                        "type": "unofficial"
                    }
                ],
                "notes": "Copy bundled in ZK and patched for it, maintained by Potix"
            },
            "properties": [
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:npm/backo2",
            "supplier": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "manufacturer": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "name": "backo2",
            "version": "2025-12-30T15:18:45+08:00",
            "purl": "pkg:npm/backo2",
            "licenses": [
                {
                    "expression": "MIT",
                    "acknowledgement": "concluded"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "name": "backo2",
                        "purl": "pkg:npm/backo2",
                        "supplier": {
                            "name": "Mark Mokryn, TJ Holowaychuk",
                            "url": [
                                "https://github.com/mokesmokes/backo"
                            ]
                        }
                    }
                ],
                "patches": [
                    {
                        "type": "unofficial"
                    }
                ],
                "notes": "Copy bundled in ZK and patched for it, maintained by Potix"
            },
            "properties": [
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:npm/socket.io-client",
            "supplier": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "manufacturer": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "name": "socket.io-client",
            "version": "2025-12-30T15:18:45+08:00",
            "purl": "pkg:npm/socket.io-client",
            "licenses": [
                {
                    "expression": "MIT",
                    "acknowledgement": "concluded"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "name": "socket.io-client",
                        "purl": "pkg:npm/socket.io-client",
                        "supplier": {
                            "name": "Guillermo Rauch",
                            "url": [
                                "https://github.com/socketio/socket.io-client"
                            ]
                        }
                    }
                ],
                "patches": [
                    {
                        "type": "unofficial"
                    }
                ],
                "notes": "Copy bundled in ZK and patched for it, maintained by Potix"
            },
            "properties": [
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:npm/engine.io-client",
            "supplier": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "manufacturer": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "name": "engine.io-client",
            "version": "2025-12-30T15:18:45+08:00",
            "purl": "pkg:npm/engine.io-client",
            "licenses": [
                {
                    "expression": "MIT",
                    "acknowledgement": "concluded"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "name": "engine.io-client",
                        "purl": "pkg:npm/engine.io-client",
                        "supplier": {
                            "name": "Automattic",
                            "url": [
                                "https://github.com/socketio/engine.io-client"
                            ]
                        }
                    }
                ],
                "patches": [
                    {
                        "type": "unofficial"
                    }
                ],
                "notes": "Copy bundled in ZK and patched for it, maintained by Potix"
            },
            "properties": [
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/org.zkoss.zk/zkmax@11.0.0.FL.20261111?type=jar#lucide-static",
            "supplier": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "manufacturer": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "name": "lucide-static",
            "version": "2026-10-28T15:04:49+08:00",
            "purl": "pkg:npm/lucide-static",
            "licenses": [
                {
                    "expression": "ISC AND MIT",
                    "acknowledgement": "concluded"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "name": "lucide-static",
                        "purl": "pkg:npm/lucide-static",
                        "supplier": {
                            "name": "Lucide Icons and Contributors",
                            "url": [
                                "https://lucide.dev"
                            ]
                        }
                    }
                ],
                "patches": [
                    {
                        "type": "unofficial"
                    }
                ],
                "notes": "Copy bundled in ZK and patched for it, maintained by Potix"
            },
            "properties": [
                {
                    "name": "bsi:component:executable",
                    "value": "non-executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:npm/zone.js@0.11.8",
            "supplier": {
                "name": "Google LLC",
                "url": [
                    "https://github.com/angular/angular"
                ]
            },
            "manufacturer": {
                "name": "Google LLC",
                "url": [
                    "https://github.com/angular/angular"
                ]
            },
            "name": "zone.js",
            "version": "0.11.8",
            "purl": "pkg:npm/zone.js@0.11.8",
            "licenses": [
                {
                    "expression": "MIT",
                    "acknowledgement": "concluded"
                }
            ],
            "properties": [
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-512",
                    "content": "f366dcb4183684a704276d61ba65889174652c1066adcde737b0c58792c61a1732c9c3b64bb14df0d99dbe570a6861433552f8ffd9052e6c262274dabdd24444"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://registry.npmjs.org/zone.js/-/zone.js-0.11.8.tgz",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "f366dcb4183684a704276d61ba65889174652c1066adcde737b0c58792c61a1732c9c3b64bb14df0d99dbe570a6861433552f8ffd9052e6c262274dabdd24444"
                        }
                    ]
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:npm/tslib@2.6.2",
            "supplier": {
                "name": "Microsoft Corporation",
                "url": [
                    "https://github.com/microsoft/tslib"
                ]
            },
            "manufacturer": {
                "name": "Microsoft Corporation",
                "url": [
                    "https://github.com/microsoft/tslib"
                ]
            },
            "name": "tslib",
            "version": "2.6.2",
            "purl": "pkg:npm/tslib@2.6.2",
            "licenses": [
                {
                    "expression": "0BSD",
                    "acknowledgement": "concluded"
                }
            ],
            "properties": [
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-512",
                    "content": "0046311fdde31853e7fdada2540c16f3b56e508911d45554281efb370305ee70530e40ebad3fc7a6dfc8ac2274417856dbb8d304371fe5963bc3a462a93330d9"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://registry.npmjs.org/tslib/-/tslib-2.6.2.tgz",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "0046311fdde31853e7fdada2540c16f3b56e508911d45554281efb370305ee70530e40ebad3fc7a6dfc8ac2274417856dbb8d304371fe5963bc3a462a93330d9"
                        }
                    ]
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:npm/ts-custom-error@3.3.1",
            "supplier": {
                "name": "Adrien Gibrat",
                "url": [
                    "https://github.com/adriengibrat/ts-custom-error"
                ]
            },
            "manufacturer": {
                "name": "Adrien Gibrat",
                "url": [
                    "https://github.com/adriengibrat/ts-custom-error"
                ]
            },
            "name": "ts-custom-error",
            "version": "3.3.1",
            "purl": "pkg:npm/ts-custom-error@3.3.1",
            "licenses": [
                {
                    "expression": "MIT",
                    "acknowledgement": "concluded"
                }
            ],
            "properties": [
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-512",
                    "content": "e4e5f5b733a3c56120b2bfd8114592b8fad0d3475e28b87a0fb39359cbcd1e6d76ffb40fc9187c498a725af038219bfc1fff8641640487f930a3de50f4e556d4"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://registry.npmjs.org/ts-custom-error/-/ts-custom-error-3.3.1.tgz",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "e4e5f5b733a3c56120b2bfd8114592b8fad0d3475e28b87a0fb39359cbcd1e6d76ffb40fc9187c498a725af038219bfc1fff8641640487f930a3de50f4e556d4"
                        }
                    ]
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:npm/%40fontsource-variable/inter@5.2.8",
            "supplier": {
                "name": "The Inter Project Authors",
                "url": [
                    "https://github.com/rsms/inter"
                ]
            },
            "manufacturer": {
                "name": "The Inter Project Authors",
                "url": [
                    "https://github.com/rsms/inter"
                ]
            },
            "name": "@fontsource-variable/inter",
            "version": "5.2.8",
            "purl": "pkg:npm/%40fontsource-variable/inter@5.2.8",
            "licenses": [
                {
                    "expression": "OFL-1.1",
                    "acknowledgement": "concluded"
                }
            ],
            "properties": [
                {
                    "name": "bsi:component:executable",
                    "value": "non-executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-512",
                    "content": "90e7cfd83fb291b717fcfdc8167a243a15513684e8ce8e7f27184021560ba5e6bf50198243f6163c17d6203b812265d7ff5e4a1fe78a878c69114c92dac41019"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://registry.npmjs.org/@fontsource-variable/inter/-/inter-5.2.8.tgz",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "90e7cfd83fb291b717fcfdc8167a243a15513684e8ce8e7f27184021560ba5e6bf50198243f6163c17d6203b812265d7ff5e4a1fe78a878c69114c92dac41019"
                        }
                    ]
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:npm/lucide-static@1.11.0",
            "supplier": {
                "name": "Lucide Icons and Contributors",
                "url": [
                    "https://lucide.dev"
                ]
            },
            "manufacturer": {
                "name": "Lucide Icons and Contributors",
                "url": [
                    "https://lucide.dev"
                ]
            },
            "name": "lucide-static",
            "version": "1.11.0",
            "purl": "pkg:npm/lucide-static@1.11.0",
            "licenses": [
                {
                    "expression": "ISC AND MIT",
                    "acknowledgement": "concluded"
                }
            ],
            "properties": [
                {
                    "name": "bsi:component:executable",
                    "value": "non-executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-512",
                    "content": "fb54b74247da0c99e34c6ec689feb9eb608e2d4dfa6d18099246f7af48280df129ad1c1a461fe2bdb225977ec3529a663754c37865203e26ff0716915e7dd2e8"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://registry.npmjs.org/lucide-static/-/lucide-static-1.11.0.tgz",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "fb54b74247da0c99e34c6ec689feb9eb608e2d4dfa6d18099246f7af48280df129ad1c1a461fe2bdb225977ec3529a663754c37865203e26ff0716915e7dd2e8"
                        }
                    ]
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:npm/%40codemirror/state@6.7.1",
            "supplier": {
                "name": "Marijn Haverbeke",
                "url": [
                    "https://codemirror.net"
                ]
            },
            "manufacturer": {
                "name": "Marijn Haverbeke",
                "url": [
                    "https://codemirror.net"
                ]
            },
            "name": "@codemirror/state",
            "version": "6.7.1",
            "purl": "pkg:npm/%40codemirror/state@6.7.1",
            "licenses": [
                {
                    "expression": "MIT",
                    "acknowledgement": "concluded"
                }
            ],
            "properties": [
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-512",
                    "content": "f50ccd0e01381180e70077eb4e547697088f72288eca62edc0a2bef321d0cc273b1978403fdc5d11b109172d88581d63f5419497d06c80c993a3f226034d93ec"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://registry.npmjs.org/@codemirror/state/-/state-6.7.1.tgz",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "f50ccd0e01381180e70077eb4e547697088f72288eca62edc0a2bef321d0cc273b1978403fdc5d11b109172d88581d63f5419497d06c80c993a3f226034d93ec"
                        }
                    ]
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:npm/%40codemirror/view@6.43.6",
            "supplier": {
                "name": "Marijn Haverbeke",
                "url": [
                    "https://codemirror.net"
                ]
            },
            "manufacturer": {
                "name": "Marijn Haverbeke",
                "url": [
                    "https://codemirror.net"
                ]
            },
            "name": "@codemirror/view",
            "version": "6.43.6",
            "purl": "pkg:npm/%40codemirror/view@6.43.6",
            "licenses": [
                {
                    "expression": "MIT",
                    "acknowledgement": "concluded"
                }
            ],
            "properties": [
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-512",
                    "content": "115ba719260dd70cf5a7be56635b375e0eedde2f18a25d241991a2ccd757f4150580c1482d855ef3fbba115a68ec57f93f06d9b882dbe1002aec86682b320440"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://registry.npmjs.org/@codemirror/view/-/view-6.43.6.tgz",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "115ba719260dd70cf5a7be56635b375e0eedde2f18a25d241991a2ccd757f4150580c1482d855ef3fbba115a68ec57f93f06d9b882dbe1002aec86682b320440"
                        }
                    ]
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:npm/%40codemirror/commands@6.10.4",
            "supplier": {
                "name": "Marijn Haverbeke",
                "url": [
                    "https://codemirror.net"
                ]
            },
            "manufacturer": {
                "name": "Marijn Haverbeke",
                "url": [
                    "https://codemirror.net"
                ]
            },
            "name": "@codemirror/commands",
            "version": "6.10.4",
            "purl": "pkg:npm/%40codemirror/commands@6.10.4",
            "licenses": [
                {
                    "expression": "MIT",
                    "acknowledgement": "concluded"
                }
            ],
            "properties": [
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-512",
                    "content": "47293dcbd4f4145545d1c506840927bde03250e97f035a91793162faa3cab4e87667d178014073dd73ab603e19120662addba05731ef77fdbf59cc32e4e9624e"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://registry.npmjs.org/@codemirror/commands/-/commands-6.10.4.tgz",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "47293dcbd4f4145545d1c506840927bde03250e97f035a91793162faa3cab4e87667d178014073dd73ab603e19120662addba05731ef77fdbf59cc32e4e9624e"
                        }
                    ]
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:npm/%40codemirror/language@6.12.4",
            "supplier": {
                "name": "Marijn Haverbeke",
                "url": [
                    "https://codemirror.net"
                ]
            },
            "manufacturer": {
                "name": "Marijn Haverbeke",
                "url": [
                    "https://codemirror.net"
                ]
            },
            "name": "@codemirror/language",
            "version": "6.12.4",
            "purl": "pkg:npm/%40codemirror/language@6.12.4",
            "licenses": [
                {
                    "expression": "MIT",
                    "acknowledgement": "concluded"
                }
            ],
            "properties": [
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-512",
                    "content": "d6ae0f693fa8e8f6e0a6426de10f05bf95c9c53cb8154678316113b72883c372743f2afd136bea70a2fe93dc1cbe335322c6aec6f13b39f9968f71513c743be8"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://registry.npmjs.org/@codemirror/language/-/language-6.12.4.tgz",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "d6ae0f693fa8e8f6e0a6426de10f05bf95c9c53cb8154678316113b72883c372743f2afd136bea70a2fe93dc1cbe335322c6aec6f13b39f9968f71513c743be8"
                        }
                    ]
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:npm/%40lezer/highlight@1.2.3",
            "supplier": {
                "name": "Marijn Haverbeke",
                "url": [
                    "https://codemirror.net"
                ]
            },
            "manufacturer": {
                "name": "Marijn Haverbeke",
                "url": [
                    "https://codemirror.net"
                ]
            },
            "name": "@lezer/highlight",
            "version": "1.2.3",
            "purl": "pkg:npm/%40lezer/highlight@1.2.3",
            "licenses": [
                {
                    "expression": "MIT",
                    "acknowledgement": "concluded"
                }
            ],
            "properties": [
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-512",
                    "content": "a97747ed4a93bc67dd54120dae02a10ec553253c5a72d34dc4b93bf94330661535de530768e06525ef55aa9f74ef26b9e98dfe79ddad96acf2b3b8c3913996d2"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://registry.npmjs.org/@lezer/highlight/-/highlight-1.2.3.tgz",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "a97747ed4a93bc67dd54120dae02a10ec553253c5a72d34dc4b93bf94330661535de530768e06525ef55aa9f74ef26b9e98dfe79ddad96acf2b3b8c3913996d2"
                        }
                    ]
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:npm/%40codemirror/lang-xml@6.1.0",
            "supplier": {
                "name": "Marijn Haverbeke",
                "url": [
                    "https://codemirror.net"
                ]
            },
            "manufacturer": {
                "name": "Marijn Haverbeke",
                "url": [
                    "https://codemirror.net"
                ]
            },
            "name": "@codemirror/lang-xml",
            "version": "6.1.0",
            "purl": "pkg:npm/%40codemirror/lang-xml@6.1.0",
            "licenses": [
                {
                    "expression": "MIT",
                    "acknowledgement": "concluded"
                }
            ],
            "properties": [
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-512",
                    "content": "df3d1b96189c1cb7f08b65209196113e2a128154e8f4f57918fe5db9c147e85687cb420025183e8b18f98134758274ff8250080bcc6fe30d952f52e865fb3e26"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://registry.npmjs.org/@codemirror/lang-xml/-/lang-xml-6.1.0.tgz",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "df3d1b96189c1cb7f08b65209196113e2a128154e8f4f57918fe5db9c147e85687cb420025183e8b18f98134758274ff8250080bcc6fe30d952f52e865fb3e26"
                        }
                    ]
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:npm/%40codemirror/lang-java@6.0.2",
            "supplier": {
                "name": "Marijn Haverbeke",
                "url": [
                    "https://codemirror.net"
                ]
            },
            "manufacturer": {
                "name": "Marijn Haverbeke",
                "url": [
                    "https://codemirror.net"
                ]
            },
            "name": "@codemirror/lang-java",
            "version": "6.0.2",
            "purl": "pkg:npm/%40codemirror/lang-java@6.0.2",
            "licenses": [
                {
                    "expression": "MIT",
                    "acknowledgement": "concluded"
                }
            ],
            "properties": [
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-512",
                    "content": "9b936dd6643f7339c963bb4c7d04c97219ab8dd8d0ef5203b3ee797751806bc0c6681f095d6b150a4553dbce02dd14c049a638dd8927acad97de13cefc9dcc39"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://registry.npmjs.org/@codemirror/lang-java/-/lang-java-6.0.2.tgz",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "9b936dd6643f7339c963bb4c7d04c97219ab8dd8d0ef5203b3ee797751806bc0c6681f095d6b150a4553dbce02dd14c049a638dd8927acad97de13cefc9dcc39"
                        }
                    ]
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:npm/%40codemirror/lang-javascript@6.2.5",
            "supplier": {
                "name": "Marijn Haverbeke",
                "url": [
                    "https://codemirror.net"
                ]
            },
            "manufacturer": {
                "name": "Marijn Haverbeke",
                "url": [
                    "https://codemirror.net"
                ]
            },
            "name": "@codemirror/lang-javascript",
            "version": "6.2.5",
            "purl": "pkg:npm/%40codemirror/lang-javascript@6.2.5",
            "licenses": [
                {
                    "expression": "MIT",
                    "acknowledgement": "concluded"
                }
            ],
            "properties": [
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-512",
                    "content": "cc3e1ee664bee7486d4bb17e4d88c13ec8881466a77d5aa0e07c94cfa58d16292038f7f60602a5c7e4d079d235c3a9ff22a4415416c15a618574b07feeec4ee0"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://registry.npmjs.org/@codemirror/lang-javascript/-/lang-javascript-6.2.5.tgz",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "cc3e1ee664bee7486d4bb17e4d88c13ec8881466a77d5aa0e07c94cfa58d16292038f7f60602a5c7e4d079d235c3a9ff22a4415416c15a618574b07feeec4ee0"
                        }
                    ]
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:npm/%40codemirror/lang-css@6.3.1",
            "supplier": {
                "name": "Marijn Haverbeke",
                "url": [
                    "https://codemirror.net"
                ]
            },
            "manufacturer": {
                "name": "Marijn Haverbeke",
                "url": [
                    "https://codemirror.net"
                ]
            },
            "name": "@codemirror/lang-css",
            "version": "6.3.1",
            "purl": "pkg:npm/%40codemirror/lang-css@6.3.1",
            "licenses": [
                {
                    "expression": "MIT",
                    "acknowledgement": "concluded"
                }
            ],
            "properties": [
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-512",
                    "content": "92be5fc011a21ad9b3ea5d0b48921b9e8f50ae27cd314bac8af1db9c0d47e839aacb81d916d7b75002028b1d55b8aa3494c3ca42bdaba81fb40642a2fd2dc48e"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://registry.npmjs.org/@codemirror/lang-css/-/lang-css-6.3.1.tgz",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "92be5fc011a21ad9b3ea5d0b48921b9e8f50ae27cd314bac8af1db9c0d47e839aacb81d916d7b75002028b1d55b8aa3494c3ca42bdaba81fb40642a2fd2dc48e"
                        }
                    ]
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:npm/%40codemirror/lang-json@6.0.2",
            "supplier": {
                "name": "Marijn Haverbeke",
                "url": [
                    "https://codemirror.net"
                ]
            },
            "manufacturer": {
                "name": "Marijn Haverbeke",
                "url": [
                    "https://codemirror.net"
                ]
            },
            "name": "@codemirror/lang-json",
            "version": "6.0.2",
            "purl": "pkg:npm/%40codemirror/lang-json@6.0.2",
            "licenses": [
                {
                    "expression": "MIT",
                    "acknowledgement": "concluded"
                }
            ],
            "properties": [
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-512",
                    "content": "c763ad3be02fc041eb130474172c8fb5f0d48a5a06deb9d54d2655d56f14b5e68b2fcfcc6a341df03a6f51bd985730befd3d7c6920efd07f66bbec70d044ada1"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://registry.npmjs.org/@codemirror/lang-json/-/lang-json-6.0.2.tgz",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "c763ad3be02fc041eb130474172c8fb5f0d48a5a06deb9d54d2655d56f14b5e68b2fcfcc6a341df03a6f51bd985730befd3d7c6920efd07f66bbec70d044ada1"
                        }
                    ]
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:npm/%40codemirror/lang-html@6.4.11",
            "supplier": {
                "name": "Marijn Haverbeke",
                "url": [
                    "https://codemirror.net"
                ]
            },
            "manufacturer": {
                "name": "Marijn Haverbeke",
                "url": [
                    "https://codemirror.net"
                ]
            },
            "name": "@codemirror/lang-html",
            "version": "6.4.11",
            "purl": "pkg:npm/%40codemirror/lang-html@6.4.11",
            "licenses": [
                {
                    "expression": "MIT",
                    "acknowledgement": "concluded"
                }
            ],
            "properties": [
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-512",
                    "content": "f4db17a7b370a7cf75a5072123b80f753c01b92b93dcaeb93464c7587349e791e361c1cb965af4adb21935d3b36acf73b5cd445150651e8bbce451594b804d9f"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://registry.npmjs.org/@codemirror/lang-html/-/lang-html-6.4.11.tgz",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "f4db17a7b370a7cf75a5072123b80f753c01b92b93dcaeb93464c7587349e791e361c1cb965af4adb21935d3b36acf73b5cd445150651e8bbce451594b804d9f"
                        }
                    ]
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:npm/%40codemirror/lang-sql@6.10.0",
            "supplier": {
                "name": "Marijn Haverbeke",
                "url": [
                    "https://codemirror.net"
                ]
            },
            "manufacturer": {
                "name": "Marijn Haverbeke",
                "url": [
                    "https://codemirror.net"
                ]
            },
            "name": "@codemirror/lang-sql",
            "version": "6.10.0",
            "purl": "pkg:npm/%40codemirror/lang-sql@6.10.0",
            "licenses": [
                {
                    "expression": "MIT",
                    "acknowledgement": "concluded"
                }
            ],
            "properties": [
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-512",
                    "content": "e9ac8f90477fc91c345ca071e6e0224e84a01840a8fc66363682481d7208421d445702ee2a853c04ffea2b4a87e4d2d701bb4944bb93ef7871ecff57df888ee3"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://registry.npmjs.org/@codemirror/lang-sql/-/lang-sql-6.10.0.tgz",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "e9ac8f90477fc91c345ca071e6e0224e84a01840a8fc66363682481d7208421d445702ee2a853c04ffea2b4a87e4d2d701bb4944bb93ef7871ecff57df888ee3"
                        }
                    ]
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:npm/%40codemirror/lang-markdown@6.5.1",
            "supplier": {
                "name": "Marijn Haverbeke",
                "url": [
                    "https://codemirror.net"
                ]
            },
            "manufacturer": {
                "name": "Marijn Haverbeke",
                "url": [
                    "https://codemirror.net"
                ]
            },
            "name": "@codemirror/lang-markdown",
            "version": "6.5.1",
            "purl": "pkg:npm/%40codemirror/lang-markdown@6.5.1",
            "licenses": [
                {
                    "expression": "MIT",
                    "acknowledgement": "concluded"
                }
            ],
            "properties": [
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-512",
                    "content": "eab7b96af08d7f244c2288b75cd8db11f40cd6f4de543dc94b783f1727a0caca3f7a800d14cef50b2bdb6fae8b0f262d40b304711165ce2a32c02a83a3d4a52c"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://registry.npmjs.org/@codemirror/lang-markdown/-/lang-markdown-6.5.1.tgz",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "eab7b96af08d7f244c2288b75cd8db11f40cd6f4de543dc94b783f1727a0caca3f7a800d14cef50b2bdb6fae8b0f262d40b304711165ce2a32c02a83a3d4a52c"
                        }
                    ]
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:npm/%40codemirror/autocomplete@6.20.3",
            "supplier": {
                "name": "Marijn Haverbeke",
                "url": [
                    "https://codemirror.net"
                ]
            },
            "manufacturer": {
                "name": "Marijn Haverbeke",
                "url": [
                    "https://codemirror.net"
                ]
            },
            "name": "@codemirror/autocomplete",
            "version": "6.20.3",
            "purl": "pkg:npm/%40codemirror/autocomplete@6.20.3",
            "licenses": [
                {
                    "expression": "MIT",
                    "acknowledgement": "concluded"
                }
            ],
            "properties": [
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-512",
                    "content": "b65a2c52a6fedc16f10b165dbb8b4a7918213c50be40ceeae17e5884a57678298f1bed6bd85ddfe00692cf9b02ac5a94b57e09876d1515329e725d7a320895f6"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://registry.npmjs.org/@codemirror/autocomplete/-/autocomplete-6.20.3.tgz",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "b65a2c52a6fedc16f10b165dbb8b4a7918213c50be40ceeae17e5884a57678298f1bed6bd85ddfe00692cf9b02ac5a94b57e09876d1515329e725d7a320895f6"
                        }
                    ]
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:npm/%40lezer/common@1.5.2",
            "supplier": {
                "name": "Marijn Haverbeke",
                "url": [
                    "https://codemirror.net"
                ]
            },
            "manufacturer": {
                "name": "Marijn Haverbeke",
                "url": [
                    "https://codemirror.net"
                ]
            },
            "name": "@lezer/common",
            "version": "1.5.2",
            "purl": "pkg:npm/%40lezer/common@1.5.2",
            "licenses": [
                {
                    "expression": "MIT",
                    "acknowledgement": "concluded"
                }
            ],
            "properties": [
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-512",
                    "content": "b31404e3ad1f3d9c94dec75cf2569fc623f0247073651cbfb9d345ca7190932d5278f60176190197590e6a003db93de9c51f0ad3d6ceae64d4a80f706ff3e349"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://registry.npmjs.org/@lezer/common/-/common-1.5.2.tgz",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "b31404e3ad1f3d9c94dec75cf2569fc623f0247073651cbfb9d345ca7190932d5278f60176190197590e6a003db93de9c51f0ad3d6ceae64d4a80f706ff3e349"
                        }
                    ]
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:npm/%40lezer/css@1.3.4",
            "supplier": {
                "name": "Marijn Haverbeke",
                "url": [
                    "https://codemirror.net"
                ]
            },
            "manufacturer": {
                "name": "Marijn Haverbeke",
                "url": [
                    "https://codemirror.net"
                ]
            },
            "name": "@lezer/css",
            "version": "1.3.4",
            "purl": "pkg:npm/%40lezer/css@1.3.4",
            "licenses": [
                {
                    "expression": "MIT",
                    "acknowledgement": "concluded"
                }
            ],
            "properties": [
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-512",
                    "content": "37eb67f6d7a3da13efc8a807100a4c3907c77330c90b0c6b4454b748f9fd42360dfaec07bc40e70a0291adbde6c43631452f2c28c33c7e10b7fa5734e006f3e5"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://registry.npmjs.org/@lezer/css/-/css-1.3.4.tgz",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "37eb67f6d7a3da13efc8a807100a4c3907c77330c90b0c6b4454b748f9fd42360dfaec07bc40e70a0291adbde6c43631452f2c28c33c7e10b7fa5734e006f3e5"
                        }
                    ]
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:npm/%40lezer/html@1.3.13",
            "supplier": {
                "name": "Marijn Haverbeke",
                "url": [
                    "https://codemirror.net"
                ]
            },
            "manufacturer": {
                "name": "Marijn Haverbeke",
                "url": [
                    "https://codemirror.net"
                ]
            },
            "name": "@lezer/html",
            "version": "1.3.13",
            "purl": "pkg:npm/%40lezer/html@1.3.13",
            "licenses": [
                {
                    "expression": "MIT",
                    "acknowledgement": "concluded"
                }
            ],
            "properties": [
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-512",
                    "content": "a08ee7e8d26697bdbd9bba639bd96f2ef9976dda0ca22d9ffb5a7048326497d77af331abedaf41b73f0d7474c6419b56d83036e726debaffd2c836fd0f9b6c7a"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://registry.npmjs.org/@lezer/html/-/html-1.3.13.tgz",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "a08ee7e8d26697bdbd9bba639bd96f2ef9976dda0ca22d9ffb5a7048326497d77af331abedaf41b73f0d7474c6419b56d83036e726debaffd2c836fd0f9b6c7a"
                        }
                    ]
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:npm/%40lezer/java@1.1.3",
            "supplier": {
                "name": "Marijn Haverbeke",
                "url": [
                    "https://codemirror.net"
                ]
            },
            "manufacturer": {
                "name": "Marijn Haverbeke",
                "url": [
                    "https://codemirror.net"
                ]
            },
            "name": "@lezer/java",
            "version": "1.1.3",
            "purl": "pkg:npm/%40lezer/java@1.1.3",
            "licenses": [
                {
                    "expression": "MIT",
                    "acknowledgement": "concluded"
                }
            ],
            "properties": [
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-512",
                    "content": "c87aae51fba3c20e98bb815dd463470af89d22f2708bfd57bb60da2a5fe97d6200d9cd685e456f6b01f73725e109a171e0e765601557e70bf3d9fec0a1aff85f"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://registry.npmjs.org/@lezer/java/-/java-1.1.3.tgz",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "c87aae51fba3c20e98bb815dd463470af89d22f2708bfd57bb60da2a5fe97d6200d9cd685e456f6b01f73725e109a171e0e765601557e70bf3d9fec0a1aff85f"
                        }
                    ]
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:npm/%40lezer/javascript@1.5.4",
            "supplier": {
                "name": "Marijn Haverbeke",
                "url": [
                    "https://codemirror.net"
                ]
            },
            "manufacturer": {
                "name": "Marijn Haverbeke",
                "url": [
                    "https://codemirror.net"
                ]
            },
            "name": "@lezer/javascript",
            "version": "1.5.4",
            "purl": "pkg:npm/%40lezer/javascript@1.5.4",
            "licenses": [
                {
                    "expression": "MIT",
                    "acknowledgement": "concluded"
                }
            ],
            "properties": [
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-512",
                    "content": "bef631dcc856a9e66d18fc034ad3367708258dde6c9a89580f6951d94c857077f16c141e6eac7cca39859b1b49fc4ea737abb50fdb2b3a25569b745be2d99c50"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://registry.npmjs.org/@lezer/javascript/-/javascript-1.5.4.tgz",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "bef631dcc856a9e66d18fc034ad3367708258dde6c9a89580f6951d94c857077f16c141e6eac7cca39859b1b49fc4ea737abb50fdb2b3a25569b745be2d99c50"
                        }
                    ]
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:npm/%40lezer/json@1.0.3",
            "supplier": {
                "name": "Marijn Haverbeke",
                "url": [
                    "https://codemirror.net"
                ]
            },
            "manufacturer": {
                "name": "Marijn Haverbeke",
                "url": [
                    "https://codemirror.net"
                ]
            },
            "name": "@lezer/json",
            "version": "1.0.3",
            "purl": "pkg:npm/%40lezer/json@1.0.3",
            "licenses": [
                {
                    "expression": "MIT",
                    "acknowledgement": "concluded"
                }
            ],
            "properties": [
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-512",
                    "content": "04ff4acdd17d637e4f0e9bf4e2bd157924ca0dea31e6f56bdde7c4ede05bc77af8b37a0d2dfba77217a36618c0ae67a27811fe9d53a9808881269100bfc8a5a9"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://registry.npmjs.org/@lezer/json/-/json-1.0.3.tgz",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "04ff4acdd17d637e4f0e9bf4e2bd157924ca0dea31e6f56bdde7c4ede05bc77af8b37a0d2dfba77217a36618c0ae67a27811fe9d53a9808881269100bfc8a5a9"
                        }
                    ]
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:npm/%40lezer/markdown@1.7.2",
            "supplier": {
                "name": "Marijn Haverbeke",
                "url": [
                    "https://codemirror.net"
                ]
            },
            "manufacturer": {
                "name": "Marijn Haverbeke",
                "url": [
                    "https://codemirror.net"
                ]
            },
            "name": "@lezer/markdown",
            "version": "1.7.2",
            "purl": "pkg:npm/%40lezer/markdown@1.7.2",
            "licenses": [
                {
                    "expression": "MIT",
                    "acknowledgement": "concluded"
                }
            ],
            "properties": [
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-512",
                    "content": "893918be855c2addd691e2fba940f25c738d644c0b8a8e308fc293362d9d9e34045c164a315eb706942b3ea7ec33e3a4bee45b8924c073271802c4332e144da1"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://registry.npmjs.org/@lezer/markdown/-/markdown-1.7.2.tgz",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "893918be855c2addd691e2fba940f25c738d644c0b8a8e308fc293362d9d9e34045c164a315eb706942b3ea7ec33e3a4bee45b8924c073271802c4332e144da1"
                        }
                    ]
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:npm/%40lezer/lr@1.4.10",
            "supplier": {
                "name": "Marijn Haverbeke",
                "url": [
                    "https://codemirror.net"
                ]
            },
            "manufacturer": {
                "name": "Marijn Haverbeke",
                "url": [
                    "https://codemirror.net"
                ]
            },
            "name": "@lezer/lr",
            "version": "1.4.10",
            "purl": "pkg:npm/%40lezer/lr@1.4.10",
            "licenses": [
                {
                    "expression": "MIT",
                    "acknowledgement": "concluded"
                }
            ],
            "properties": [
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-512",
                    "content": "ae70a94c805a7cec78991a78df13b10c96c58a9266fdcd1c89afd5e5388696198c6bec2c49da06994377c3906aae4b3fd3d43f0f8b4d02659a4fca7a3518bbec"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://registry.npmjs.org/@lezer/lr/-/lr-1.4.10.tgz",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "ae70a94c805a7cec78991a78df13b10c96c58a9266fdcd1c89afd5e5388696198c6bec2c49da06994377c3906aae4b3fd3d43f0f8b4d02659a4fca7a3518bbec"
                        }
                    ]
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:npm/%40lezer/xml@1.0.6",
            "supplier": {
                "name": "Marijn Haverbeke",
                "url": [
                    "https://codemirror.net"
                ]
            },
            "manufacturer": {
                "name": "Marijn Haverbeke",
                "url": [
                    "https://codemirror.net"
                ]
            },
            "name": "@lezer/xml",
            "version": "1.0.6",
            "purl": "pkg:npm/%40lezer/xml@1.0.6",
            "licenses": [
                {
                    "expression": "MIT",
                    "acknowledgement": "concluded"
                }
            ],
            "properties": [
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-512",
                    "content": "09d0f08ab2f4384692b45b9effae9998549ea69b8be83c23964f2a935e779924308921ff0e5ae2e063729ab3569d498f976526ed07d5d453bd2855325f74f0c3"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://registry.npmjs.org/@lezer/xml/-/xml-1.0.6.tgz",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "09d0f08ab2f4384692b45b9effae9998549ea69b8be83c23964f2a935e779924308921ff0e5ae2e063729ab3569d498f976526ed07d5d453bd2855325f74f0c3"
                        }
                    ]
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:npm/style-mod@4.1.3",
            "supplier": {
                "name": "Marijn Haverbeke",
                "url": [
                    "https://codemirror.net"
                ]
            },
            "manufacturer": {
                "name": "Marijn Haverbeke",
                "url": [
                    "https://codemirror.net"
                ]
            },
            "name": "style-mod",
            "version": "4.1.3",
            "purl": "pkg:npm/style-mod@4.1.3",
            "licenses": [
                {
                    "expression": "MIT",
                    "acknowledgement": "concluded"
                }
            ],
            "properties": [
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-512",
                    "content": "8bf9fc56c67276bba08f722ece597cfb1ff4d061f6be762c9357a8983f10891ad201e5ba22d6c2403b5f5c27891ddd22c2235a82a8d092fa6f44410fb56dc8a1"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://registry.npmjs.org/style-mod/-/style-mod-4.1.3.tgz",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "8bf9fc56c67276bba08f722ece597cfb1ff4d061f6be762c9357a8983f10891ad201e5ba22d6c2403b5f5c27891ddd22c2235a82a8d092fa6f44410fb56dc8a1"
                        }
                    ]
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:npm/%40marijn/find-cluster-break@1.0.3",
            "supplier": {
                "name": "Marijn Haverbeke",
                "url": [
                    "https://codemirror.net"
                ]
            },
            "manufacturer": {
                "name": "Marijn Haverbeke",
                "url": [
                    "https://codemirror.net"
                ]
            },
            "name": "@marijn/find-cluster-break",
            "version": "1.0.3",
            "purl": "pkg:npm/%40marijn/find-cluster-break@1.0.3",
            "licenses": [
                {
                    "expression": "MIT",
                    "acknowledgement": "concluded"
                }
            ],
            "properties": [
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-512",
                    "content": "158f8c28b0684ec2cd245fde2d668eb1719dcfaba1dc8bb56b18cf7fa4d4abdd8862e99c4dc5d61e84bbe3b24044b91c76527f59a89ac5ce7041f14ef230ba34"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://registry.npmjs.org/@marijn/find-cluster-break/-/find-cluster-break-1.0.3.tgz",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "158f8c28b0684ec2cd245fde2d668eb1719dcfaba1dc8bb56b18cf7fa4d4abdd8862e99c4dc5d61e84bbe3b24044b91c76527f59a89ac5ce7041f14ef230ba34"
                        }
                    ]
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:npm/w3c-keyname@2.2.8",
            "supplier": {
                "name": "Marijn Haverbeke",
                "url": [
                    "https://codemirror.net"
                ]
            },
            "manufacturer": {
                "name": "Marijn Haverbeke",
                "url": [
                    "https://codemirror.net"
                ]
            },
            "name": "w3c-keyname",
            "version": "2.2.8",
            "purl": "pkg:npm/w3c-keyname@2.2.8",
            "licenses": [
                {
                    "expression": "MIT",
                    "acknowledgement": "concluded"
                }
            ],
            "properties": [
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-512",
                    "content": "769a2306136c08d37b4fcd939bb936e80e86f4c2f7364843b27c3d9ff7a8c52465541078084b4843f29308b2361707f76ad6925d1858164422dd29671703ef3d"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://registry.npmjs.org/w3c-keyname/-/w3c-keyname-2.2.8.tgz",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "769a2306136c08d37b4fcd939bb936e80e86f4c2f7364843b27c3d9ff7a8c52465541078084b4843f29308b2361707f76ad6925d1858164422dd29671703ef3d"
                        }
                    ]
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:npm/crelt@1.0.7",
            "supplier": {
                "name": "Marijn Haverbeke",
                "url": [
                    "https://codemirror.net"
                ]
            },
            "manufacturer": {
                "name": "Marijn Haverbeke",
                "url": [
                    "https://codemirror.net"
                ]
            },
            "name": "crelt",
            "version": "1.0.7",
            "purl": "pkg:npm/crelt@1.0.7",
            "licenses": [
                {
                    "expression": "MIT",
                    "acknowledgement": "concluded"
                }
            ],
            "properties": [
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-512",
                    "content": "68ae816d67e17f853fc0270b1ca3c997fc5ae95915b2d45a3f2c16b4c286c2e38b73fc194f2418ba8c60bd99cdb01befeca83761305061804282072f890733b8"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://registry.npmjs.org/crelt/-/crelt-1.0.7.tgz",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "68ae816d67e17f853fc0270b1ca3c997fc5ae95915b2d45a3f2c16b4c286c2e38b73fc194f2418ba8c60bd99cdb01befeca83761305061804282072f890733b8"
                        }
                    ]
                }
            ]
        }
    ],
    "dependencies": [
        {
            "ref": "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.14.1?type=jar",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.22?type=jar",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.14.1?type=jar",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.22.1?type=jar",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.1?type=jar",
            "dependsOn": [
                "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.14.1?type=jar",
                "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.14.1?type=jar"
            ]
        },
        {
            "ref": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.22.1?type=jar",
            "dependsOn": [
                "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.22.1?type=jar",
                "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.22?type=jar"
            ]
        },
        {
            "ref": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.14.1?type=jar",
            "dependsOn": [
                "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.14.1?type=jar",
                "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.1?type=jar",
                "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.14.1?type=jar",
                "pkg:maven/com.fasterxml.woodstox/woodstox-core@6.4.0?type=jar",
                "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1?type=jar"
            ]
        },
        {
            "ref": "pkg:maven/com.fasterxml.woodstox/woodstox-core@6.4.0?type=jar",
            "dependsOn": [
                "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1?type=jar"
            ]
        },
        {
            "ref": "pkg:maven/com.github.librepdf/openpdf@1.3.30.jaspersoft.2?type=jar",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:maven/com.google.code.gson/gson@2.10.1?type=jar",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:maven/com.google.errorprone/error_prone_annotations@2.50.0?type=jar",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:maven/com.google.guava/failureaccess@1.0.3?type=jar",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:maven/com.google.guava/guava@33.7.2-jre?type=jar",
            "dependsOn": [
                "pkg:maven/com.google.guava/failureaccess@1.0.3?type=jar",
                "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar",
                "pkg:maven/org.jspecify/jspecify@1.0.1?type=jar",
                "pkg:maven/com.google.errorprone/error_prone_annotations@2.50.0?type=jar",
                "pkg:maven/com.google.j2objc/j2objc-annotations@3.1?type=jar"
            ]
        },
        {
            "ref": "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:maven/com.google.j2objc/j2objc-annotations@3.1?type=jar",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:maven/com.jhlabs/filters@2.0.235-1?type=jar",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:maven/commons-beanutils/commons-beanutils@1.9.4?type=jar",
            "dependsOn": [
                "pkg:maven/commons-logging/commons-logging@1.2?type=jar",
                "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar"
            ]
        },
        {
            "ref": "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:maven/commons-digester/commons-digester@2.1?type=jar",
            "dependsOn": [
                "pkg:maven/commons-beanutils/commons-beanutils@1.9.4?type=jar",
                "pkg:maven/commons-logging/commons-logging@1.2?type=jar"
            ]
        },
        {
            "ref": "pkg:maven/commons-el/commons-el@1.0?type=jar",
            "dependsOn": [
                "pkg:maven/commons-logging/commons-logging@1.0.3?type=jar"
            ]
        },
        {
            "ref": "pkg:maven/commons-io/commons-io@2.19.0?type=jar",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:maven/commons-logging/commons-logging@1.0.3?type=jar",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:maven/commons-logging/commons-logging@1.2?type=jar",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:maven/net.sf.jasperreports/jasperreports@6.20.5?type=jar",
            "dependsOn": [
                "pkg:maven/org.jfree/jfreechart@1.0.19?type=jar",
                "pkg:maven/org.jfree/jcommon@1.0.23?type=jar",
                "pkg:maven/commons-digester/commons-digester@2.1?type=jar",
                "pkg:maven/commons-beanutils/commons-beanutils@1.9.4?type=jar",
                "pkg:maven/commons-logging/commons-logging@1.2?type=jar",
                "pkg:maven/org.apache.commons/commons-collections4@4.2?type=jar",
                "pkg:maven/com.github.librepdf/openpdf@1.3.30.jaspersoft.2?type=jar",
                "pkg:maven/org.eclipse.jdt/ecj@3.21.0?type=jar",
                "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.14.1?type=jar",
                "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.14.1?type=jar",
                "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.1?type=jar",
                "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.14.1?type=jar"
            ]
        },
        {
            "ref": "pkg:maven/ognl/ognl@3.1.28?type=jar",
            "dependsOn": [
                "pkg:maven/org.javassist/javassist@3.29.2-GA?type=jar"
            ]
        },
        {
            "ref": "pkg:maven/org.apache-extras.beanshell/bsh@2.0b6?type=jar",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:maven/org.apache.commons/commons-collections4@4.2?type=jar",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:maven/org.apache.commons/commons-fileupload2-core@2.0.0-M4?type=jar",
            "dependsOn": [
                "pkg:maven/commons-io/commons-io@2.19.0?type=jar"
            ]
        },
        {
            "ref": "pkg:maven/org.apache.commons/commons-fileupload2-jakarta-servlet5@2.0.0-M4?type=jar",
            "dependsOn": [
                "pkg:maven/org.apache.commons/commons-fileupload2-core@2.0.0-M4?type=jar",
                "pkg:maven/commons-io/commons-io@2.19.0?type=jar"
            ]
        },
        {
            "ref": "pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.4.3?type=jar",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@9.0.120?type=jar",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:maven/org.apache.tomcat/tomcat-jasper-el@9.0.120?type=jar",
            "dependsOn": [
                "pkg:maven/org.apache.tomcat/tomcat-el-api@9.0.120?type=jar"
            ]
        },
        {
            "ref": "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1?type=jar",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:maven/org.eclipse.jdt/ecj@3.21.0?type=jar",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:maven/org.immutables/value@2.8.8?type=jar",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:maven/org.javassist/javassist@3.29.2-GA?type=jar",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:maven/org.jfree/jcommon@1.0.23?type=jar",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:maven/org.jfree/jfreechart@1.0.19?type=jar",
            "dependsOn": [
                "pkg:maven/org.jfree/jcommon@1.0.23?type=jar"
            ]
        },
        {
            "ref": "pkg:maven/org.jspecify/jspecify@1.0.1?type=jar",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:maven/org.mvel/mvel14@1.2.21?type=jar",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:maven/org.owasp.encoder/encoder@1.3.1?type=jar",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:maven/org.reflections/reflections@0.10.2?type=jar",
            "dependsOn": [
                "pkg:maven/org.javassist/javassist@3.29.2-GA?type=jar",
                "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
                "pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar"
            ]
        },
        {
            "ref": "pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:maven/org.zkoss.common/zcommon@11.0.0-jakarta.FL.20261111-Eval?type=jar",
            "dependsOn": [
                "pkg:maven/org.zkoss.common/zel@11.0.0-jakarta.FL.20261111-Eval?type=jar",
                "pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar",
                "pkg:maven/org.apache-extras.beanshell/bsh@2.0b6?type=jar",
                "pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.4.3?type=jar",
                "pkg:maven/org.owasp.encoder/encoder@1.3.1?type=jar",
                "pkg:generic/apache/xml-schema-dtd",
                "pkg:maven/org.zkoss.common/zcommon@11.0.0.FL.20261111?type=jar#metainfo/xml/datatypes.dtd",
                "pkg:maven/org.zkoss.common/zcommon@11.0.0.FL.20261111?type=jar#metainfo/xml/xml.xsd",
                "pkg:generic/w3c/xhtml1-dtd",
                "pkg:maven/org.zkoss.common/zcommon@11.0.0.FL.20261111?type=jar#metainfo/xml/xhtml1-transitional.dtd",
                "pkg:maven/org.zkoss.common/zcommon@11.0.0.FL.20261111?type=jar#metainfo/xml/xhtml1-frameset.dtd",
                "pkg:maven/org.zkoss.common/zcommon@11.0.0.FL.20261111?type=jar#metainfo/xml/xhtml-lat1.ent",
                "pkg:maven/org.zkoss.common/zcommon@11.0.0.FL.20261111?type=jar#metainfo/xml/xhtml-special.ent",
                "pkg:maven/org.zkoss.common/zcommon@11.0.0.FL.20261111?type=jar#metainfo/xml/xhtml-symbol.ent",
                "pkg:maven/org.unbescape/unbescape",
                "pkg:maven/org.jdom/jdom2",
                "pkg:maven/com.googlecode.json-simple/json-simple",
                "pkg:github/apache/tomcat"
            ]
        },
        {
            "ref": "pkg:maven/org.zkoss.common/zel@11.0.0-jakarta.FL.20261111-Eval?type=jar",
            "dependsOn": [
                "pkg:maven/org.javassist/javassist@3.29.2-GA?type=jar",
                "pkg:maven/org.zkoss.common/zel@11.0.0.FL.20261111?type=jar#apache-tomcat"
            ]
        },
        {
            "ref": "pkg:maven/org.zkoss.common/zweb@11.0.0-jakarta.FL.20261111-Eval?type=jar",
            "dependsOn": [
                "pkg:maven/org.zkoss.common/zcommon@11.0.0-jakarta.FL.20261111-Eval?type=jar"
            ]
        },
        {
            "ref": "pkg:maven/org.zkoss.zk/client-bind@11.0.0-jakarta.FL.20261111-Eval?type=jar",
            "dependsOn": [
                "pkg:maven/org.zkoss.zk/zkbind@11.0.0-jakarta.FL.20261111-Eval?type=jar",
                "pkg:maven/org.zkoss.zk/zhtml@11.0.0-jakarta.FL.20261111-Eval?type=jar",
                "pkg:maven/org.zkoss.zk/zkex@11.0.0-jakarta.FL.20261111-Eval?type=jar",
                "pkg:maven/org.zkoss.zk/zkmax@11.0.0-jakarta.FL.20261111-Eval?type=jar",
                "pkg:maven/org.zkoss.zk/zuti@11.0.0-jakarta.FL.20261111-Eval?type=jar",
                "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.22.1?type=jar",
                "pkg:npm/spel2js@0.2.8",
                "pkg:npm/mobx@6.6.1",
                "pkg:npm/zone.js@0.15.0",
                "pkg:npm/zone.js@0.11.8"
            ]
        },
        {
            "ref": "pkg:maven/org.zkoss.zk/stateless-immutable@11.0.0-jakarta.FL.20261111-Eval?type=jar",
            "dependsOn": [
                "pkg:maven/org.immutables/value@2.8.8?type=jar"
            ]
        },
        {
            "ref": "pkg:maven/org.zkoss.zk/stateless@11.0.0-jakarta.FL.20261111-Eval?type=jar",
            "dependsOn": [
                "pkg:maven/org.zkoss.zk/stateless-immutable@11.0.0-jakarta.FL.20261111-Eval?type=jar",
                "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.22.1?type=jar",
                "pkg:maven/org.reflections/reflections@0.10.2?type=jar",
                "pkg:maven/org.zkoss.zk/zkbind@11.0.0-jakarta.FL.20261111-Eval?type=jar",
                "pkg:maven/org.zkoss.zk/zhtml@11.0.0-jakarta.FL.20261111-Eval?type=jar",
                "pkg:maven/org.zkoss.zk/zkex@11.0.0-jakarta.FL.20261111-Eval?type=jar",
                "pkg:maven/org.zkoss.zk/zkmax@11.0.0-jakarta.FL.20261111-Eval?type=jar",
                "pkg:maven/org.zkoss.zk/zuti@11.0.0-jakarta.FL.20261111-Eval?type=jar",
                "pkg:github/benjiman/lambda-type-references"
            ]
        },
        {
            "ref": "pkg:maven/org.zkoss.zk/za11y@11.0.0-jakarta.FL.20261111-Eval?type=jar",
            "dependsOn": [
                "pkg:maven/org.zkoss.zk/zk@11.0.0-jakarta.FL.20261111-Eval?type=jar",
                "pkg:maven/org.zkoss.zk/zul@11.0.0-jakarta.FL.20261111-Eval?type=jar"
            ]
        },
        {
            "ref": "pkg:maven/org.zkoss.zk/zhtml@11.0.0-jakarta.FL.20261111-Eval?type=jar",
            "dependsOn": [
                "pkg:maven/org.zkoss.zk/zul@11.0.0-jakarta.FL.20261111-Eval?type=jar",
                "pkg:maven/commons-io/commons-io@2.19.0?type=jar",
                "pkg:maven/org.zkoss/zsoup@1.8.2.5?type=jar"
            ]
        },
        {
            "ref": "pkg:maven/org.zkoss.zk/zk@11.0.0-jakarta.FL.20261111-Eval?type=jar",
            "dependsOn": [
                "pkg:maven/org.zkoss.common/zweb@11.0.0-jakarta.FL.20261111-Eval?type=jar",
                "pkg:maven/org.zkoss.zk/zkwebfragment@11.0.0-jakarta.FL.20261111-Eval?type=jar",
                "pkg:maven/org.apache.commons/commons-fileupload2-jakarta-servlet5@2.0.0-M4?type=jar",
                "pkg:maven/commons-io/commons-io@2.19.0?type=jar",
                "pkg:maven/com.google.guava/guava@33.7.2-jre?type=jar",
                "pkg:npm/jquery@3.5.1",
                "pkg:github/douglascrockford/json-js",
                "pkg:npm/jquery-mousewheel@3.1.13",
                "pkg:npm/jquery.transit@0.9.12",
                "pkg:npm/moment@2.31.0",
                "pkg:npm/moment-timezone@0.5.48",
                "pkg:npm/dompurify@3.4.17",
                "pkg:npm/whatwg-fetch@0.11.1",
                "pkg:npm/focus-options-polyfill@1.6.0",
                "pkg:github/wicg/input-device-capabilities",
                "pkg:maven/commons-fileupload/commons-fileupload",
                "pkg:maven/commons-codec/commons-codec",
                "pkg:github/madrobby/scriptaculous"
            ]
        },
        {
            "ref": "pkg:maven/org.zkoss.zk/zkbind@11.0.0-jakarta.FL.20261111-Eval?type=jar",
            "dependsOn": [
                "pkg:maven/org.zkoss.zk/zhtml@11.0.0-jakarta.FL.20261111-Eval?type=jar",
                "pkg:maven/org.zkoss.zk/zul@11.0.0-jakarta.FL.20261111-Eval?type=jar",
                "pkg:maven/org.javassist/javassist@3.29.2-GA?type=jar",
                "pkg:maven/org.cojen/cojen",
                "pkg:maven/com.thoughtworks.paranamer/paranamer",
                "pkg:maven/org.ow2.asm/asm"
            ]
        },
        {
            "ref": "pkg:maven/org.zkoss.zk/zkcml@11.0.0-jakarta.FL.20261111-Eval?type=pom",
            "dependsOn": [
                "pkg:maven/org.zkoss.zk/stateless-immutable@11.0.0-jakarta.FL.20261111-Eval?type=jar",
                "pkg:maven/org.zkoss.zk/za11y@11.0.0-jakarta.FL.20261111-Eval?type=jar",
                "pkg:maven/org.zkoss.zk/zkex@11.0.0-jakarta.FL.20261111-Eval?type=jar",
                "pkg:maven/org.zkoss.zk/zml@11.0.0-jakarta.FL.20261111-Eval?type=jar",
                "pkg:maven/org.zkoss.zk/zkmax@11.0.0-jakarta.FL.20261111-Eval?type=jar",
                "pkg:maven/org.zkoss.zk/zuti@11.0.0-jakarta.FL.20261111-Eval?type=jar",
                "pkg:maven/org.zkoss.zk/client-bind@11.0.0-jakarta.FL.20261111-Eval?type=jar",
                "pkg:maven/org.zkoss.zk/stateless@11.0.0-jakarta.FL.20261111-Eval?type=jar"
            ]
        },
        {
            "ref": "pkg:maven/org.zkoss.zk/zkex@11.0.0-jakarta.FL.20261111-Eval?type=jar",
            "dependsOn": [
                "pkg:maven/org.zkoss.zk/zul@11.0.0-jakarta.FL.20261111-Eval?type=jar",
                "pkg:maven/org.zkoss.zk/zkbind@11.0.0-jakarta.FL.20261111-Eval?type=jar",
                "pkg:maven/org.jfree/jfreechart@1.0.19?type=jar",
                "pkg:maven/com.jhlabs/filters@2.0.235-1?type=jar",
                "pkg:maven/net.sf.jasperreports/jasperreports@6.20.5?type=jar",
                "pkg:npm/pdfjs-dist@4.10.38",
                "pkg:maven/org.zkoss.zk/zkex@11.0.0.FL.20261111?type=jar#web/js/zkex/pdfviewer/ext/pdf.worker.mjs",
                "pkg:generic/schlichtherle/truelicense",
                "pkg:generic/source-code.biz/base64coder",
                "pkg:npm/lucide-static"
            ]
        },
        {
            "ref": "pkg:maven/org.zkoss.zk/zkmax@11.0.0-jakarta.FL.20261111-Eval?type=jar",
            "dependsOn": [
                "pkg:maven/org.zkoss.zk/zkex@11.0.0-jakarta.FL.20261111-Eval?type=jar",
                "pkg:maven/org.zkoss.zk/zul@11.0.0-jakarta.FL.20261111-Eval?type=jar",
                "pkg:maven/com.google.code.gson/gson@2.10.1?type=jar",
                "pkg:maven/commons-el/commons-el@1.0?type=jar",
                "pkg:maven/org.mvel/mvel14@1.2.21?type=jar",
                "pkg:maven/ognl/ognl@3.1.28?type=jar",
                "pkg:maven/org.apache.tomcat/tomcat-jasper-el@9.0.120?type=jar",
                "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.22.1?type=jar",
                "pkg:npm/signature_pad@5.0.7",
                "pkg:npm/%40zxing/library@0.21.3",
                "pkg:npm/iscroll@4.2.2",
                "pkg:npm/trumbowyg@2.31.0",
                "pkg:npm/trumbowyg@2.7.2",
                "pkg:npm/jquery-jcrop@0.9.15",
                "pkg:npm/golden-layout@1.5.8",
                "pkg:npm/qrcode-generator",
                "pkg:npm/jsbarcode@3.8.0",
                "pkg:maven/com.google.collections/google-collections",
                "pkg:github/paulirish/matchmedia.js",
                "pkg:npm/backo2",
                "pkg:npm/socket.io-client",
                "pkg:npm/engine.io-client",
                "pkg:maven/org.zkoss.zk/zkmax@11.0.0.FL.20261111?type=jar#lucide-static",
                "pkg:npm/ts-custom-error@3.3.1"
            ]
        },
        {
            "ref": "pkg:maven/org.zkoss.zk/zkwebfragment@11.0.0-jakarta.FL.20261111-Eval?type=jar",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:maven/org.zkoss.zk/zml@11.0.0-jakarta.FL.20261111-Eval?type=jar",
            "dependsOn": [
                "pkg:maven/org.zkoss.zk/zk@11.0.0-jakarta.FL.20261111-Eval?type=jar"
            ]
        },
        {
            "ref": "pkg:maven/org.zkoss.zk/zul@11.0.0-jakarta.FL.20261111-Eval?type=jar",
            "dependsOn": [
                "pkg:maven/org.zkoss.zk/zk@11.0.0-jakarta.FL.20261111-Eval?type=jar",
                "pkg:npm/%40fontsource-variable/inter@5.2.8",
                "pkg:npm/lucide-static@1.11.0",
                "pkg:npm/%40codemirror/state@6.7.1",
                "pkg:npm/%40codemirror/view@6.43.6",
                "pkg:npm/%40codemirror/commands@6.10.4",
                "pkg:npm/%40codemirror/language@6.12.4",
                "pkg:npm/%40lezer/highlight@1.2.3",
                "pkg:npm/%40codemirror/lang-xml@6.1.0",
                "pkg:npm/%40codemirror/lang-java@6.0.2",
                "pkg:npm/%40codemirror/lang-javascript@6.2.5",
                "pkg:npm/%40codemirror/lang-css@6.3.1",
                "pkg:npm/%40codemirror/lang-json@6.0.2",
                "pkg:npm/%40codemirror/lang-html@6.4.11",
                "pkg:npm/%40codemirror/lang-sql@6.10.0",
                "pkg:npm/%40codemirror/lang-markdown@6.5.1"
            ]
        },
        {
            "ref": "pkg:maven/org.zkoss.zk/zuti@11.0.0-jakarta.FL.20261111-Eval?type=jar",
            "dependsOn": [
                "pkg:maven/org.zkoss.zk/zkex@11.0.0-jakarta.FL.20261111-Eval?type=jar",
                "pkg:maven/org.zkoss.common/zweb@11.0.0-jakarta.FL.20261111-Eval?type=jar",
                "pkg:maven/org.zkoss.zk/zul@11.0.0-jakarta.FL.20261111-Eval?type=jar",
                "pkg:maven/org.zkoss.zk/zhtml@11.0.0-jakarta.FL.20261111-Eval?type=jar",
                "pkg:maven/org.zkoss.zk/zk@11.0.0-jakarta.FL.20261111-Eval?type=jar",
                "pkg:maven/org.zkoss.zk/zkbind@11.0.0-jakarta.FL.20261111-Eval?type=jar",
                "pkg:maven/org.zkoss.zk/zkmax@11.0.0-jakarta.FL.20261111-Eval?type=jar",
                "pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar"
            ]
        },
        {
            "ref": "pkg:maven/org.zkoss/zsoup@1.8.2.5?type=jar",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:npm/spel2js@0.2.8",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:npm/mobx@6.6.1",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:npm/zone.js@0.15.0",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:github/benjiman/lambda-type-references",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:generic/apache/xml-schema-dtd",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:maven/org.zkoss.common/zcommon@11.0.0.FL.20261111?type=jar#metainfo/xml/datatypes.dtd",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:maven/org.zkoss.common/zcommon@11.0.0.FL.20261111?type=jar#metainfo/xml/xml.xsd",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:generic/w3c/xhtml1-dtd",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:maven/org.zkoss.common/zcommon@11.0.0.FL.20261111?type=jar#metainfo/xml/xhtml1-transitional.dtd",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:maven/org.zkoss.common/zcommon@11.0.0.FL.20261111?type=jar#metainfo/xml/xhtml1-frameset.dtd",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:maven/org.zkoss.common/zcommon@11.0.0.FL.20261111?type=jar#metainfo/xml/xhtml-lat1.ent",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:maven/org.zkoss.common/zcommon@11.0.0.FL.20261111?type=jar#metainfo/xml/xhtml-special.ent",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:maven/org.zkoss.common/zcommon@11.0.0.FL.20261111?type=jar#metainfo/xml/xhtml-symbol.ent",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:maven/org.unbescape/unbescape",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:maven/org.jdom/jdom2",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:maven/com.googlecode.json-simple/json-simple",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:github/apache/tomcat",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:maven/org.zkoss.common/zel@11.0.0.FL.20261111?type=jar#apache-tomcat",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:npm/jquery@3.5.1",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:github/douglascrockford/json-js",
            "dependsOn": [
                "pkg:npm/jquery@3.5.1"
            ]
        },
        {
            "ref": "pkg:npm/jquery-mousewheel@3.1.13",
            "dependsOn": [
                "pkg:npm/jquery@3.5.1"
            ]
        },
        {
            "ref": "pkg:npm/jquery.transit@0.9.12",
            "dependsOn": [
                "pkg:npm/jquery@3.5.1"
            ]
        },
        {
            "ref": "pkg:npm/moment@2.31.0",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:npm/moment-timezone@0.5.48",
            "dependsOn": [
                "pkg:npm/moment@2.31.0"
            ]
        },
        {
            "ref": "pkg:npm/dompurify@3.4.17",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:npm/whatwg-fetch@0.11.1",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:npm/focus-options-polyfill@1.6.0",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:github/wicg/input-device-capabilities",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:maven/commons-fileupload/commons-fileupload",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:maven/commons-codec/commons-codec",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:github/madrobby/scriptaculous",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:maven/org.cojen/cojen",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:maven/com.thoughtworks.paranamer/paranamer",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:maven/org.ow2.asm/asm",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:npm/pdfjs-dist@4.10.38",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:maven/org.zkoss.zk/zkex@11.0.0.FL.20261111?type=jar#web/js/zkex/pdfviewer/ext/pdf.worker.mjs",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:generic/schlichtherle/truelicense",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:generic/source-code.biz/base64coder",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:npm/lucide-static",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:npm/signature_pad@5.0.7",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:npm/%40zxing/library@0.21.3",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:npm/iscroll@4.2.2",
            "dependsOn": [
                "pkg:npm/jquery@3.5.1"
            ]
        },
        {
            "ref": "pkg:npm/trumbowyg@2.31.0",
            "dependsOn": [
                "pkg:npm/jquery@3.5.1"
            ]
        },
        {
            "ref": "pkg:npm/trumbowyg@2.7.2",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:npm/jquery-jcrop@0.9.15",
            "dependsOn": [
                "pkg:npm/jquery@3.5.1"
            ]
        },
        {
            "ref": "pkg:npm/golden-layout@1.5.8",
            "dependsOn": [
                "pkg:npm/jquery@3.5.1"
            ]
        },
        {
            "ref": "pkg:npm/qrcode-generator",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:npm/jsbarcode@3.8.0",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:maven/com.google.collections/google-collections",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:github/paulirish/matchmedia.js",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:npm/backo2",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:npm/socket.io-client",
            "dependsOn": [
                "pkg:npm/backo2",
                "pkg:npm/engine.io-client"
            ]
        },
        {
            "ref": "pkg:npm/engine.io-client",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:maven/org.zkoss.zk/zkmax@11.0.0.FL.20261111?type=jar#lucide-static",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:npm/zone.js@0.11.8",
            "dependsOn": [
                "pkg:npm/tslib@2.6.2"
            ]
        },
        {
            "ref": "pkg:npm/tslib@2.6.2",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:npm/ts-custom-error@3.3.1",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:npm/%40fontsource-variable/inter@5.2.8",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:npm/lucide-static@1.11.0",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:npm/%40codemirror/state@6.7.1",
            "dependsOn": [
                "pkg:npm/%40marijn/find-cluster-break@1.0.3"
            ]
        },
        {
            "ref": "pkg:npm/%40codemirror/view@6.43.6",
            "dependsOn": [
                "pkg:npm/%40codemirror/state@6.7.1",
                "pkg:npm/crelt@1.0.7",
                "pkg:npm/style-mod@4.1.3",
                "pkg:npm/w3c-keyname@2.2.8"
            ]
        },
        {
            "ref": "pkg:npm/%40codemirror/commands@6.10.4",
            "dependsOn": [
                "pkg:npm/%40codemirror/language@6.12.4",
                "pkg:npm/%40codemirror/state@6.7.1",
                "pkg:npm/%40codemirror/view@6.43.6",
                "pkg:npm/%40lezer/common@1.5.2"
            ]
        },
        {
            "ref": "pkg:npm/%40codemirror/language@6.12.4",
            "dependsOn": [
                "pkg:npm/%40codemirror/state@6.7.1",
                "pkg:npm/%40codemirror/view@6.43.6",
                "pkg:npm/%40lezer/common@1.5.2",
                "pkg:npm/%40lezer/highlight@1.2.3",
                "pkg:npm/%40lezer/lr@1.4.10",
                "pkg:npm/style-mod@4.1.3"
            ]
        },
        {
            "ref": "pkg:npm/%40lezer/highlight@1.2.3",
            "dependsOn": [
                "pkg:npm/%40lezer/common@1.5.2"
            ]
        },
        {
            "ref": "pkg:npm/%40codemirror/lang-xml@6.1.0",
            "dependsOn": [
                "pkg:npm/%40codemirror/autocomplete@6.20.3",
                "pkg:npm/%40codemirror/language@6.12.4",
                "pkg:npm/%40codemirror/state@6.7.1",
                "pkg:npm/%40codemirror/view@6.43.6",
                "pkg:npm/%40lezer/common@1.5.2",
                "pkg:npm/%40lezer/xml@1.0.6"
            ]
        },
        {
            "ref": "pkg:npm/%40codemirror/lang-java@6.0.2",
            "dependsOn": [
                "pkg:npm/%40codemirror/language@6.12.4",
                "pkg:npm/%40lezer/java@1.1.3"
            ]
        },
        {
            "ref": "pkg:npm/%40codemirror/lang-javascript@6.2.5",
            "dependsOn": [
                "pkg:npm/%40codemirror/autocomplete@6.20.3",
                "pkg:npm/%40codemirror/language@6.12.4",
                "pkg:npm/%40codemirror/state@6.7.1",
                "pkg:npm/%40codemirror/view@6.43.6",
                "pkg:npm/%40lezer/common@1.5.2",
                "pkg:npm/%40lezer/javascript@1.5.4"
            ]
        },
        {
            "ref": "pkg:npm/%40codemirror/lang-css@6.3.1",
            "dependsOn": [
                "pkg:npm/%40codemirror/autocomplete@6.20.3",
                "pkg:npm/%40codemirror/language@6.12.4",
                "pkg:npm/%40codemirror/state@6.7.1",
                "pkg:npm/%40lezer/common@1.5.2",
                "pkg:npm/%40lezer/css@1.3.4"
            ]
        },
        {
            "ref": "pkg:npm/%40codemirror/lang-json@6.0.2",
            "dependsOn": [
                "pkg:npm/%40codemirror/language@6.12.4",
                "pkg:npm/%40lezer/json@1.0.3"
            ]
        },
        {
            "ref": "pkg:npm/%40codemirror/lang-html@6.4.11",
            "dependsOn": [
                "pkg:npm/%40codemirror/autocomplete@6.20.3",
                "pkg:npm/%40codemirror/lang-css@6.3.1",
                "pkg:npm/%40codemirror/lang-javascript@6.2.5",
                "pkg:npm/%40codemirror/language@6.12.4",
                "pkg:npm/%40codemirror/state@6.7.1",
                "pkg:npm/%40codemirror/view@6.43.6",
                "pkg:npm/%40lezer/common@1.5.2",
                "pkg:npm/%40lezer/css@1.3.4",
                "pkg:npm/%40lezer/html@1.3.13"
            ]
        },
        {
            "ref": "pkg:npm/%40codemirror/lang-sql@6.10.0",
            "dependsOn": [
                "pkg:npm/%40codemirror/autocomplete@6.20.3",
                "pkg:npm/%40codemirror/language@6.12.4",
                "pkg:npm/%40codemirror/state@6.7.1",
                "pkg:npm/%40lezer/common@1.5.2",
                "pkg:npm/%40lezer/highlight@1.2.3",
                "pkg:npm/%40lezer/lr@1.4.10"
            ]
        },
        {
            "ref": "pkg:npm/%40codemirror/lang-markdown@6.5.1",
            "dependsOn": [
                "pkg:npm/%40codemirror/autocomplete@6.20.3",
                "pkg:npm/%40codemirror/lang-html@6.4.11",
                "pkg:npm/%40codemirror/language@6.12.4",
                "pkg:npm/%40codemirror/state@6.7.1",
                "pkg:npm/%40codemirror/view@6.43.6",
                "pkg:npm/%40lezer/common@1.5.2",
                "pkg:npm/%40lezer/markdown@1.7.2"
            ]
        },
        {
            "ref": "pkg:npm/%40codemirror/autocomplete@6.20.3",
            "dependsOn": [
                "pkg:npm/%40codemirror/language@6.12.4",
                "pkg:npm/%40codemirror/state@6.7.1",
                "pkg:npm/%40codemirror/view@6.43.6",
                "pkg:npm/%40lezer/common@1.5.2"
            ]
        },
        {
            "ref": "pkg:npm/%40lezer/common@1.5.2",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:npm/%40lezer/css@1.3.4",
            "dependsOn": [
                "pkg:npm/%40lezer/common@1.5.2",
                "pkg:npm/%40lezer/highlight@1.2.3",
                "pkg:npm/%40lezer/lr@1.4.10"
            ]
        },
        {
            "ref": "pkg:npm/%40lezer/html@1.3.13",
            "dependsOn": [
                "pkg:npm/%40lezer/common@1.5.2",
                "pkg:npm/%40lezer/highlight@1.2.3",
                "pkg:npm/%40lezer/lr@1.4.10"
            ]
        },
        {
            "ref": "pkg:npm/%40lezer/java@1.1.3",
            "dependsOn": [
                "pkg:npm/%40lezer/common@1.5.2",
                "pkg:npm/%40lezer/highlight@1.2.3",
                "pkg:npm/%40lezer/lr@1.4.10"
            ]
        },
        {
            "ref": "pkg:npm/%40lezer/javascript@1.5.4",
            "dependsOn": [
                "pkg:npm/%40lezer/common@1.5.2",
                "pkg:npm/%40lezer/highlight@1.2.3",
                "pkg:npm/%40lezer/lr@1.4.10"
            ]
        },
        {
            "ref": "pkg:npm/%40lezer/json@1.0.3",
            "dependsOn": [
                "pkg:npm/%40lezer/common@1.5.2",
                "pkg:npm/%40lezer/highlight@1.2.3",
                "pkg:npm/%40lezer/lr@1.4.10"
            ]
        },
        {
            "ref": "pkg:npm/%40lezer/markdown@1.7.2",
            "dependsOn": [
                "pkg:npm/%40lezer/common@1.5.2",
                "pkg:npm/%40lezer/highlight@1.2.3"
            ]
        },
        {
            "ref": "pkg:npm/%40lezer/lr@1.4.10",
            "dependsOn": [
                "pkg:npm/%40lezer/common@1.5.2"
            ]
        },
        {
            "ref": "pkg:npm/%40lezer/xml@1.0.6",
            "dependsOn": [
                "pkg:npm/%40lezer/common@1.5.2",
                "pkg:npm/%40lezer/highlight@1.2.3",
                "pkg:npm/%40lezer/lr@1.4.10"
            ]
        },
        {
            "ref": "pkg:npm/style-mod@4.1.3",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:npm/%40marijn/find-cluster-break@1.0.3",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:npm/w3c-keyname@2.2.8",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:npm/crelt@1.0.7",
            "dependsOn": [
                
            ]
        }
    ],
    "compositions": [
        {
            "aggregate": "complete",
            "dependencies": [
                "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.14.1?type=jar",
                "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.22?type=jar",
                "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.14.1?type=jar",
                "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.22.1?type=jar",
                "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.1?type=jar",
                "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.22.1?type=jar",
                "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.14.1?type=jar",
                "pkg:maven/com.fasterxml.woodstox/woodstox-core@6.4.0?type=jar",
                "pkg:maven/com.github.librepdf/openpdf@1.3.30.jaspersoft.2?type=jar",
                "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
                "pkg:maven/com.google.code.gson/gson@2.10.1?type=jar",
                "pkg:maven/com.google.errorprone/error_prone_annotations@2.50.0?type=jar",
                "pkg:maven/com.google.guava/failureaccess@1.0.3?type=jar",
                "pkg:maven/com.google.guava/guava@33.7.2-jre?type=jar",
                "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar",
                "pkg:maven/com.google.j2objc/j2objc-annotations@3.1?type=jar",
                "pkg:maven/com.jhlabs/filters@2.0.235-1?type=jar",
                "pkg:maven/commons-beanutils/commons-beanutils@1.9.4?type=jar",
                "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar",
                "pkg:maven/commons-digester/commons-digester@2.1?type=jar",
                "pkg:maven/commons-el/commons-el@1.0?type=jar",
                "pkg:maven/commons-io/commons-io@2.19.0?type=jar",
                "pkg:maven/commons-logging/commons-logging@1.0.3?type=jar",
                "pkg:maven/commons-logging/commons-logging@1.2?type=jar",
                "pkg:maven/net.sf.jasperreports/jasperreports@6.20.5?type=jar",
                "pkg:maven/ognl/ognl@3.1.28?type=jar",
                "pkg:maven/org.apache-extras.beanshell/bsh@2.0b6?type=jar",
                "pkg:maven/org.apache.commons/commons-collections4@4.2?type=jar",
                "pkg:maven/org.apache.commons/commons-fileupload2-core@2.0.0-M4?type=jar",
                "pkg:maven/org.apache.commons/commons-fileupload2-jakarta-servlet5@2.0.0-M4?type=jar",
                "pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.4.3?type=jar",
                "pkg:maven/org.apache.tomcat/tomcat-el-api@9.0.120?type=jar",
                "pkg:maven/org.apache.tomcat/tomcat-jasper-el@9.0.120?type=jar",
                "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1?type=jar",
                "pkg:maven/org.eclipse.jdt/ecj@3.21.0?type=jar",
                "pkg:maven/org.immutables/value@2.8.8?type=jar",
                "pkg:maven/org.javassist/javassist@3.29.2-GA?type=jar",
                "pkg:maven/org.jfree/jcommon@1.0.23?type=jar",
                "pkg:maven/org.jfree/jfreechart@1.0.19?type=jar",
                "pkg:maven/org.jspecify/jspecify@1.0.1?type=jar",
                "pkg:maven/org.mvel/mvel14@1.2.21?type=jar",
                "pkg:maven/org.owasp.encoder/encoder@1.3.1?type=jar",
                "pkg:maven/org.reflections/reflections@0.10.2?type=jar",
                "pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar",
                "pkg:maven/org.zkoss.common/zcommon@11.0.0-jakarta.FL.20261111-Eval?type=jar",
                "pkg:maven/org.zkoss.common/zel@11.0.0-jakarta.FL.20261111-Eval?type=jar",
                "pkg:maven/org.zkoss.common/zweb@11.0.0-jakarta.FL.20261111-Eval?type=jar",
                "pkg:maven/org.zkoss.zk/client-bind@11.0.0-jakarta.FL.20261111-Eval?type=jar",
                "pkg:maven/org.zkoss.zk/stateless-immutable@11.0.0-jakarta.FL.20261111-Eval?type=jar",
                "pkg:maven/org.zkoss.zk/stateless@11.0.0-jakarta.FL.20261111-Eval?type=jar",
                "pkg:maven/org.zkoss.zk/za11y@11.0.0-jakarta.FL.20261111-Eval?type=jar",
                "pkg:maven/org.zkoss.zk/zhtml@11.0.0-jakarta.FL.20261111-Eval?type=jar",
                "pkg:maven/org.zkoss.zk/zk@11.0.0-jakarta.FL.20261111-Eval?type=jar",
                "pkg:maven/org.zkoss.zk/zkbind@11.0.0-jakarta.FL.20261111-Eval?type=jar",
                "pkg:maven/org.zkoss.zk/zkcml@11.0.0-jakarta.FL.20261111-Eval?type=pom",
                "pkg:maven/org.zkoss.zk/zkex@11.0.0-jakarta.FL.20261111-Eval?type=jar",
                "pkg:maven/org.zkoss.zk/zkmax@11.0.0-jakarta.FL.20261111-Eval?type=jar",
                "pkg:maven/org.zkoss.zk/zkwebfragment@11.0.0-jakarta.FL.20261111-Eval?type=jar",
                "pkg:maven/org.zkoss.zk/zml@11.0.0-jakarta.FL.20261111-Eval?type=jar",
                "pkg:maven/org.zkoss.zk/zul@11.0.0-jakarta.FL.20261111-Eval?type=jar",
                "pkg:maven/org.zkoss.zk/zuti@11.0.0-jakarta.FL.20261111-Eval?type=jar",
                "pkg:maven/org.zkoss/zsoup@1.8.2.5?type=jar",
                "pkg:npm/spel2js@0.2.8",
                "pkg:npm/mobx@6.6.1",
                "pkg:npm/zone.js@0.15.0",
                "pkg:github/benjiman/lambda-type-references",
                "pkg:generic/apache/xml-schema-dtd",
                "pkg:maven/org.zkoss.common/zcommon@11.0.0.FL.20261111?type=jar#metainfo/xml/datatypes.dtd",
                "pkg:maven/org.zkoss.common/zcommon@11.0.0.FL.20261111?type=jar#metainfo/xml/xml.xsd",
                "pkg:generic/w3c/xhtml1-dtd",
                "pkg:maven/org.zkoss.common/zcommon@11.0.0.FL.20261111?type=jar#metainfo/xml/xhtml1-transitional.dtd",
                "pkg:maven/org.zkoss.common/zcommon@11.0.0.FL.20261111?type=jar#metainfo/xml/xhtml1-frameset.dtd",
                "pkg:maven/org.zkoss.common/zcommon@11.0.0.FL.20261111?type=jar#metainfo/xml/xhtml-lat1.ent",
                "pkg:maven/org.zkoss.common/zcommon@11.0.0.FL.20261111?type=jar#metainfo/xml/xhtml-special.ent",
                "pkg:maven/org.zkoss.common/zcommon@11.0.0.FL.20261111?type=jar#metainfo/xml/xhtml-symbol.ent",
                "pkg:maven/org.unbescape/unbescape",
                "pkg:maven/org.jdom/jdom2",
                "pkg:maven/com.googlecode.json-simple/json-simple",
                "pkg:github/apache/tomcat",
                "pkg:maven/org.zkoss.common/zel@11.0.0.FL.20261111?type=jar#apache-tomcat",
                "pkg:npm/jquery@3.5.1",
                "pkg:github/douglascrockford/json-js",
                "pkg:npm/jquery-mousewheel@3.1.13",
                "pkg:npm/jquery.transit@0.9.12",
                "pkg:npm/moment@2.31.0",
                "pkg:npm/moment-timezone@0.5.48",
                "pkg:npm/dompurify@3.4.17",
                "pkg:npm/whatwg-fetch@0.11.1",
                "pkg:npm/focus-options-polyfill@1.6.0",
                "pkg:github/wicg/input-device-capabilities",
                "pkg:maven/commons-fileupload/commons-fileupload",
                "pkg:maven/commons-codec/commons-codec",
                "pkg:github/madrobby/scriptaculous",
                "pkg:maven/org.cojen/cojen",
                "pkg:maven/com.thoughtworks.paranamer/paranamer",
                "pkg:maven/org.ow2.asm/asm",
                "pkg:npm/pdfjs-dist@4.10.38",
                "pkg:maven/org.zkoss.zk/zkex@11.0.0.FL.20261111?type=jar#web/js/zkex/pdfviewer/ext/pdf.worker.mjs",
                "pkg:generic/schlichtherle/truelicense",
                "pkg:generic/source-code.biz/base64coder",
                "pkg:npm/lucide-static",
                "pkg:npm/signature_pad@5.0.7",
                "pkg:npm/%40zxing/library@0.21.3",
                "pkg:npm/iscroll@4.2.2",
                "pkg:npm/trumbowyg@2.31.0",
                "pkg:npm/trumbowyg@2.7.2",
                "pkg:npm/jquery-jcrop@0.9.15",
                "pkg:npm/golden-layout@1.5.8",
                "pkg:npm/qrcode-generator",
                "pkg:npm/jsbarcode@3.8.0",
                "pkg:maven/com.google.collections/google-collections",
                "pkg:github/paulirish/matchmedia.js",
                "pkg:npm/backo2",
                "pkg:npm/socket.io-client",
                "pkg:npm/engine.io-client",
                "pkg:maven/org.zkoss.zk/zkmax@11.0.0.FL.20261111?type=jar#lucide-static",
                "pkg:npm/zone.js@0.11.8",
                "pkg:npm/tslib@2.6.2",
                "pkg:npm/ts-custom-error@3.3.1",
                "pkg:npm/%40fontsource-variable/inter@5.2.8",
                "pkg:npm/lucide-static@1.11.0",
                "pkg:npm/%40codemirror/state@6.7.1",
                "pkg:npm/%40codemirror/view@6.43.6",
                "pkg:npm/%40codemirror/commands@6.10.4",
                "pkg:npm/%40codemirror/language@6.12.4",
                "pkg:npm/%40lezer/highlight@1.2.3",
                "pkg:npm/%40codemirror/lang-xml@6.1.0",
                "pkg:npm/%40codemirror/lang-java@6.0.2",
                "pkg:npm/%40codemirror/lang-javascript@6.2.5",
                "pkg:npm/%40codemirror/lang-css@6.3.1",
                "pkg:npm/%40codemirror/lang-json@6.0.2",
                "pkg:npm/%40codemirror/lang-html@6.4.11",
                "pkg:npm/%40codemirror/lang-sql@6.10.0",
                "pkg:npm/%40codemirror/lang-markdown@6.5.1",
                "pkg:npm/%40codemirror/autocomplete@6.20.3",
                "pkg:npm/%40lezer/common@1.5.2",
                "pkg:npm/%40lezer/css@1.3.4",
                "pkg:npm/%40lezer/html@1.3.13",
                "pkg:npm/%40lezer/java@1.1.3",
                "pkg:npm/%40lezer/javascript@1.5.4",
                "pkg:npm/%40lezer/json@1.0.3",
                "pkg:npm/%40lezer/markdown@1.7.2",
                "pkg:npm/%40lezer/lr@1.4.10",
                "pkg:npm/%40lezer/xml@1.0.6",
                "pkg:npm/style-mod@4.1.3",
                "pkg:npm/%40marijn/find-cluster-break@1.0.3",
                "pkg:npm/w3c-keyname@2.2.8",
                "pkg:npm/crelt@1.0.7"
            ]
        }
    ]
}